Glossary

Plain-English definitions of 15 terms covering URL shortening, QR codes, phishing detection, and SEO

Short URLQR codeUTM parametersPhishingOGP (OpenGraph)RedirectError correction level (ECL)Custom slugMCP serverGoogle Safe BrowsingURLHausSensitive domainQuiet zone302 vs 301 redirectIVT (Invalid Traffic)

Short URL (shortened URL, short link)

A URL converted from a long original (e.g. https://example.com/very/long/path?with=many¶ms) to something like qr.paps.jp/abc123. Clicking the short URL redirects to the original. Used to fit within character limits or printed media.

QR code (two-dimensional barcode)

A 2D matrix barcode invented by Denso Wave in 1994. Encodes URLs, text, contacts, Wi-Fi credentials, and more. "QR" stands for "Quick Response". Read with any modern smartphone camera.

UTM parameters (UTM tags, utm_source)

Query-string parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) appended to a URL. Google Analytics uses them to attribute traffic to specific marketing surfaces (print flyer vs email newsletter, etc).

Phishing (credential theft, URL fraud)

Fraud where a fake site mimics a real one to steal login credentials or payment details. Short URLs are often abused for phishing because they hide the destination domain. qr.paps.jp runs Google Safe Browsing + URLHaus + ESET on every URL to detect these.

OGP (OpenGraph) (og:image, meta tags)

The meta-tag protocol that controls how a URL is previewed when shared on social media (image, title, description). Originated at Facebook; now supported by Twitter/X, LINE, Slack, and most major platforms. Preview tool: OG Checker.

Redirect (302 / 301 Location header)

A server response (HTTP status 301/302/307/308) that tells the browser to go to a different URL. Short URLs serve 302 redirects. 301 is permanent (browser caches), 302 is temporary (checked every time).

Error correction level (ECL) (L / M / Q / H)

QR codes include redundancy that lets them stay readable despite damage. Four levels: L (7%), M (15%), Q (25%), H (30%). Logo embedding and outdoor placement call for H. qr.paps.jp picks H automatically when a logo is embedded.

Custom slug (vanity URL, custom path)

Instead of a random short code like qr.paps.jp/xyz, pick a readable one like qr.paps.jp/paps-event. qr.paps.jp accepts 3-20 alphanumeric characters. First-come first-served, free.

MCP server (Model Context Protocol)

A JSON-RPC 2.0 standard for exposing tool calls to AI agents. qr.paps.jp runs an MCP server at https://qr.paps.jp/mcp with four tools: shorten_url, generate_qr, check_short_url, get_short_url_report. Callable directly from Claude and other MCP clients.

Google Safe Browsing (Safe Browsing API, GSB)

Google's canonical blocklist API for malware, phishing, and unwanted software URLs. The system behind the "Deceptive site ahead" warnings in Chrome / Firefox / Safari. qr.paps.jp queries it at creation and on scheduled rescan.

URLHaus (abuse.ch URLHaus feed)

A malware-URL feed maintained by abuse.ch, contributed to by security researchers worldwide. Open-access, no API key. qr.paps.jp polls it every 10 minutes as a second-layer check that catches what Safe Browsing has not yet learned.

Sensitive domain (adult content, interstitial)

Adult, gambling, or extreme-content domains. qr.paps.jp detects these at creation and inserts an interstitial confirmation page before redirecting. NPO policy forbids using the service to promote adult commercial content.

Quiet zone (QR margin, white border)

The white border around a QR code required for reliable scanning — at least 4 modules wide. Scanners get confused if surrounding text or art is too close to the QR edge. Keep 2 mm or more of white space when printing.

302 vs 301 redirect (temp vs permanent)

301 (Moved Permanently) is cached by the browser so later clicks go straight to the new URL. 302 (Found) is temporary, so every click comes back through the original. Short URLs use 302 so the destination can be updated and clicks can be counted.

IVT (Invalid Traffic) (bot traffic, click fraud)

The advertising industry term for traffic from bots, click farms, and automated scripts. Split into General IVT (naive bots) and Sophisticated IVT (actively concealed). qr.paps.jp applies IVT classification to click logs and surfaces the result in /qradmin/stats.

← Back to home