Short links can hide bad destinations, so every link on INBIO goes through safety machinery:
- At creation — destinations are validated instantly: only
http(s), no private/internal addresses, no credentials in URLs, no re-shortening of other shorteners’ links, and a global blocklist. - After creation — a deeper background scan resolves the destination’s redirect chain, re-checks every hop, and risk-scores the result. Links that fail are blocked automatically and the owner is notified.
- Preview any link first — add
/preview/before the code:in.bio/preview/a8K2pshows where a link leads, its status, and a warning if the destination looks suspicious — without visiting it. - Report abuse — anyone can flag a link at in.bio/report-abuse. Every report is reviewed by a human; confirmed-malicious links are disabled and their domains blocklisted.