Every short URL on qr.paps.jp goes through three independent phishing and malware checks before it can be clicked by anyone else.
4897
malicious short URLs blocked to date
At the moment a short URL is created, we query Google's canonical database of known-malicious URLs: malware, social-engineering, unwanted-software categories, all checked synchronously before the short code is handed back.
Source: Google Safe Browsing APIThe malware-distribution feed maintained by abuse.ch and used by security researchers worldwide. Polled every 10 minutes as a second check that catches what Safe Browsing has not learned about yet.
Source: urlhaus.abuse.chAfter creation, we actually open the destination in a real browser instrumented with ESET Smart Security and Chrome Safe Browsing. Catches "clean at creation, hostile later" bait that defeats static checks.
Source: in-house Selenium Grid + ESET Endpoint Antivirus| Feature | qr.paps.jp | Typical free shortener |
|---|---|---|
| Malicious URL check at creation | ✓ 3 engines | △ 1 or none |
| Periodic rescan after creation | ✓ every 24h | ✗ one-shot |
| Sensitive-content interstitial | ✓ auto | ✗ |
| Abuse report form | ✓ /abuse | △ email only |
| Named operator / legal entity | ✓ NPO | △ anonymous or LLC |
| Access-log retention | ✓ 6 months, then purged | ✗ unlimited |
qr.paps.jp is a public tool run by the Japanese NPO PAPS (Organization for Pornography And Sexual-exploitation Survivors). The frontline of our survivor-support work is full of malicious short URLs used by perpetrators, which is why we built a shortener optimised for detection rather than click volume. We have operated continuously since 2015 and commit to keeping the service free forever.