Platform Security

1. Transport & Infrastructure Security

All web traffic, API requests, and short link redirects are forced over strict HTTPS using modern TLS encryption. Our infrastructure sits directly behind Cloudflare's security umbrella, providing active DDoS mitigation, automated bot filtering, and Web Application Firewall (WAF) protection at the edge level.

2. Google Safe Browsing & Threat Mitigation

To prevent our short links from being misused for phishing, malware, or spam, every destination URL is checked against Google Safe Browsing prior to creation. Furthermore, links are continually audited — if a destination turns malicious after creation, access is automatically blocked in real-time before reaching end users.

3. Official Brand Domains

Always verify the domain origin when creating links or visiting short aliases. Our platform operates exclusively on two official domains:

  • urlsh.in — Main portal, API endpoints, and primary short link domain.
  • ugo.li — Short link domain for our customers in MEGA and ULTRA plans.

4. Security Disclosure

We welcome responsible disclosure of potential vulnerabilities. If you identify a security issue within our infrastructure or routing network, please contact us with details so we can address it promptly.

🛡️ Built-in Safety!Unsafe LinkHarmful links blocked instantlyInstant filtering or retroactive blocking of harmful links powered by Google Safe Browsing

Security Takeaways

TL;DR

Strict HTTPS & Cloudflare

End-to-end encrypted traffic backed by active DDoS protection and WAF filtering.

Real-Time Malware Blocking

Powered by Google Safe Browsing to intercept phishing and harmful links when created or retroactively.

Verified Domains

Our official operating domains are exclusively urlsh.in and ugo.li.