LinkMax
TRUST & SAFETY COMPLIANCE
Effective Date: November 4, 2026

Acceptable Use Policy (AUP)

Mandatory safety rules, prohibited link destinations, and automated Google Web Risk security screening standards for all LinkMax users.

Real-Time ScannerGoogle Web Risk API
SSRF & Loop GuardStrict L1 Local Filter
Violation ActionInstant Edge Suspension
Abuse Reportingdouglasdouglasskikcn@outlook.com
01

1. Purpose & Shared Domain Reputation

LinkMax provides high-speed redirection infrastructure trusted by e-commerce brands, creators, and software teams worldwide. Maintaining pristine domain reputation across social networks (X, TikTok, Instagram, YouTube, Meta), email providers, and browsers is critical to all Merchants. This Acceptable Use Policy ("AUP") defines strictly prohibited uses of the LinkMax platform.

02

2. Zero-Tolerance Prohibited Destinations & Content

You may NOT create, update, or distribute any LinkMax short link or QR code that redirects to, promotes, or facilitates any of the following:

  • Phishing & Social Engineering (`SOCIAL_ENGINEERING`): Fake login pages, brand impersonation, financial scams, crypto drainer sites, or deceptive forms designed to harvest passwords, credit cards, or seed phrases.
  • Malware & Unwanted Software (`MALWARE` / `UNWANTED_SOFTWARE`): Viruses, trojans, spyware, ransomware, exploit kits, browser hijackers, or drive-by downloads.
  • Direct Executable Binary Links: Links pointing directly to executable or script files, including `.exe`, `.scr`, `.bat`, `.cmd`, `.msi`, `.apk`, `.com`, `.pif`, `.vbs`, or `.jar` extensions.
  • Spam & Unsolicited Bulk Messaging: Using LinkMax short links in unsolicited bulk email (UBE), SMS phishing ("Smishing"), automated comment spam, or deceptive affiliate cloaking.
  • Illegal & Harmful Material: Child Sexual Abuse Material (CSAM), human trafficking, terrorist content, illegal gambling, unlicensed pharmaceuticals, narcotics, weapons, or content infringing third-party intellectual property rights.
03

3. Prohibited Technical Abuse & SSRF Protections

Merchants must not attempt to probe, bypass, or abuse LinkMax edge nodes or backend cloud infrastructure. Our Layer-1 Local Security Policy automatically blocks:

  • Non-Standard Schemes: Only `http:` and `https:` target URLs are permitted (`javascript:`, `data:`, `file:`, and `vbscript:` are strictly rejected).
  • Embedded URL Credentials: Target URLs containing embedded usernames or passwords (e.g., `https://user:pass@example.com`) used to deceive users.
  • Server-Side Request Forgery (SSRF) & Private Networks: Redirects targeting `localhost`, `.local`, `.internal`, loopback (`127.0.0.0/8`, `::1`), private RFC1918 ranges (`10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`), or cloud metadata endpoints (`169.254.169.254`).
  • Infinite Redirect Loops: Short links pointing back to LinkMax edge domains, console domains, or your own bound custom domains.
04

4. Automated Google Web Risk Security Screening

Every time a Merchant submits a new short link (`POST /api/links`) or modifies an existing destination URL (`PATCH /api/links/[id]`), LinkMax executes a synchronous two-layer security scan before saving to database clusters or propagating to edge routing tables:

First, our zero-latency local policy engine validates protocol, hostname, and SSRF rules. Second, our server queries the official Google Web Risk API (`uris.search`) across `SOCIAL_ENGINEERING`, `MALWARE`, and `UNWANTED_SOFTWARE` threat lists. Any flagged URL is immediately rejected with `HTTP 422 (URL_SECURITY_BLOCKED)`.

Post-Creation Cloaking & Evasion

Altering the content of a destination webpage after passing initial security screening to serve phishing or malicious content ("cloaking") is a severe violation and results in immediate permanent account ban.

05

5. Enforcement Actions & Reporting Abuse

If LinkMax detects or receives a verified report that a short link violates this AUP, we will immediately purge the link from Cloudflare KV edge caches (halting redirection globally within seconds) and may suspend or terminate the associated Merchant account without prior notice and without any refund of subscription or prepaid balances.

To report a suspicious, phishing, or abusive LinkMax short link, please email douglasdouglasskikcn@outlook.com with the full short link URL. Our Trust & Safety team investigates all abuse reports within 24 hours.

Compliance & Merchant Support

Need help with billing, GDPR/CCPA requests, or reporting link abuse? Reach our compliance team directly.

douglasdouglasskikcn@outlook.com