key systems
anti-bypass
“bypass” sites and tools try to skip your ad pages and jump straight to the end. here's honestly what we check on every ad link step, and how red square blocks the tools themselves.
what we check
always, on every ad link step
- minimum time. the player has to come back at least the step's min time after opening the link (never less than 8 seconds). coming back sooner fails.
- same browser. the return link only counts in the browser that opened the step. a return link shared on a bypass site does nothing for anyone else.
- one step at a time. steps have to be done in order. you can't finish step 2 before step 1.
with anti-bypass on, per network
| network | extra check |
|---|---|
| linkvertise (manual, with a token) | linkvertise adds a code to the return link. we ask linkvertise if it's real. no code, or a fake one, fails. |
| linkvertise (auto, account token) | linkvertise adds the same code to auto links, and we check it the same way. no code, or a fake one, fails. |
| work.ink (verify returns on) | we check work.ink's one-time token with work.ink, and it's used up after that, so it can't be reused. |
| any linkvertise or lootlabs step, red square on | red square blocks known bypass tools before it sends the player back. the return link has a secret part made for that player and that open, so typing or sharing it does nothing. if red square can't make a link, the step gets its normal checks. red square |
| lootlabs without red square, other | no extra check. they don't offer one we can use. |
you turn these on per network: the linkvertise token and work.ink's check. if the network can't be reached to do the check, we don't let the player through. they're asked to try the link again.
red square: block bypass tools
red square (it also goes by b.y.p.a.s.s) is a free anti-bypass service at kys.linkvertise.lol, run by its own team, not by pasteblox. turn it on and your linkvertise and lootlabs steps go through it. it blocks known bypass sites (bypass.vip, bypass.city, the ones built on trw-api), userscripts, automated browsers and faked task completions before it sends the player back to you.
turn it on
- sign in with discord at kys.linkvertise.lol/dash/login. your red square api key is on the dashboard there.
- on your key system's settings tab, under getting a key → checkpoints, find the gold box with the red square logo and switch on red square. it only shows once the key system has an ad link step.
- paste your red square api key when it asks. you do this once, for your whole account. we check it with red square when you connect it, and players never see it.
- set up what your network needs (just below), then hit save settings.
saving with red square on needs red square connected. it also needs your lootlabs api key if any step uses lootlabs, and a linkvertise user id for linkvertise steps.
linkvertise steps: nothing to do
red square uses your linkvertise user id. if linkvertise is connected, or the link you pasted has the id in it (like linkvertise.com/123456/my-script), you're done.
lootlabs steps: two extra things
- 1
save your lootlabs api key
it's in your lootlabs advanced dashboard → api access. red square needs it to make lootlabs links for you. you save it once, for your whole account.
- 2
add red square's postback url in lootlabs
in the lootlabs advanced dashboard → postback, paste this url, with
YOUR_API_KEY_HEREreplaced by your lootlabs api key:lootlabs postback urlurlhttps://kys.linkvertise.lol/api/backend-ll/postback?click_id={CLICK_ID}&ip={IP}&unique_id={UNIQUE_ID}&apikey=YOUR_API_KEY_HEREthat's how red square hears that a player finished. changes can take 5–15 minutes to apply at lootlabs.
lootlabs tasks per key (1 to 5, default 1) is how many lootlabs tasks red square's lootlabs links ask for. more tasks pay more, but players take longer to get a key.
work.ink and other links aren't covered by red square. they keep their own checks: work.ink's token check, or time and browser.
what players see
when a player opens a covered step, we ask red square for a fresh link just for them. the key page tells them “a quick red square check comes first”. red square runs its checks, then the ad, then sends them back to your key page. each link lasts 30 minutes.
what it adds on the return
everything from before still applies: the minimum time, the same browser, steps in order. on top of that, the link red square sends players back to has a secret part, made for that one player and that one open of the step. red square only reveals it once its checks pass.
so typing or sharing the step's return link doesn't work anymore. the old trick, “open the step, wait the minimum time, then open the return link by hand”, is closed. opening the step again makes a new link and voids the old one.
if red square is down
if red square can't make a link (it's down, your key was removed or paused, or a network key is wrong), the player gets your normal link for that step, checked the way it is without red square. keys keep coming and you keep earning. protection drops back to the network's own checks until red square is back. that's why each step still needs its normal link set up, return link and all.
red square pauses api keys that make no new links for 15 days. staff on red square's discord turn them back on.
turn it off
switch off red square and save. it applies to new opens: a player who's mid-step on a red square link can still finish it.
what it can't do
no key system can stop every bypass. a determined person can still sit through the minimum time, and some bypass tools are good. the checks above make skipping your ads slow and annoying, which is enough for most players to just do the link.
red square blocks the bypass tools it knows about. a new one can get through until red square catches it. red square decides who gets blocked, not us, so now and then that can be a real player. it doesn't cover work.ink or other links, and while it's down your steps are back to the network's own checks.
troubleshooting
players say red square blocked them
red square decides who gets through, not us. most of the time it's a real bypass tool or userscript, and the block is doing its job. a player can open the step again for a fresh link. if lots of real players are getting blocked, switch red square off for now and tell red square on their discord.
lootlabs steps with red square never finish
almost always the postback. check it's set in the lootlabs advanced dashboard → postback, with YOUR_API_KEY_HERE replaced by your lootlabs api key, and that the key is right. a new or changed postback can take 5–15 minutes to apply at lootlabs. the postback url