Highlights

• Shorten any URL instantly - no signup required
• Custom branded slugs for authenticated users
• 4-layer URL safety pipeline (heuristics, malware blocklist, domain age, rate limiting)
• Real-time click analytics with device, referrer, and trend breakdowns
• OAuth sign-in via GitHub and Google
• Privacy-preserving tracking (IP hashing, no cookies on redirects)

---

Tech Stack

URL Safety Pipeline

Every URL passes through 4 layers before a short code is issued:

1. Heuristic Analysis - blocks IP-based URLs, punycode abuse, credential embedding, shortener chaining, and suspicious TLDs
2. URLhaus Blocklist — checks against a malware database refreshed every hour, with smart filtering to avoid false positives on shared hosts
3. Domain Age Check — queries RDAP to flag domains registered less than 30 days ago
4. Rate Limiting - Redis sliding-window limiter (10 links/hour for guests, 100 redirects/minute)

👤 User Tiers