[BrandonM]

Easy solution: before serving that warning page for shortened URLs, dynamically determine the endpoint. If it does point to a bad site, then serve the warning page. Otherwise, do the right thing.

[thenduks]

That isn't so easy when there could be 15 redirects between bit.ly and the malware site.