Overview
Guests who see a scam or security warning when opening your WanderOS booking link are seeing one of two warnings. A This Connection Is Not Private page means the guest's browser could not verify your site's security certificate, so contact Wander Support with a screenshot. A malicious or suspicious label from a messaging app, antivirus tool, or QR code generator means the link uses your shared WanderOS address, so connect your own domain and update your links. This applies to all WanderOS hosts.
Two types of warnings
The two types of warnings look different and have different fixes:
Certificate warning. A full browser page titled This Connection Is Not Private (Safari) or Your connection is not private (Chrome). The browser shows it before your site loads.
Link warning. A label such as malicious content, suspicious link, or unsafe site that appears when a guest receives, shares, or scans your link. It comes from a messaging app, email filter, antivirus tool, work network, or QR code generator.
"This Connection Is Not Private" warning
The "This Connection Is Not Private" warning appears when a guest's browser cannot verify your site's security certificate (the SSL certificate that makes your site load over HTTPS). The image below shows the Safari version.
The word "impersonating" appears on every certificate warning page. It does not mean your site was hacked or reported as a scam. Common causes include:
Your domain was connected recently. WanderOS issues your free certificate after your domain status changes to Active. Until then, browsers can show this warning.
The guest's device has the wrong date or time. Browsers reject valid certificates when the device clock is incorrect.
The guest is on a public or work Wi-Fi network. Some hotel, airport, and office networks interfere with secure connections.
Fix the certificate warning
To fix the certificate warning, follow these steps in order:
Log in to app.wander.com and go to Channels → Website → Domain. Confirm your domain status is Active. If it shows Pending, see Custom Domain Stuck on Pending.
If your domain became Active within the last 2 hours, wait 2 hours for the certificate to finish setting up, then test again in a private or incognito window.
Ask the guest to check that their device date and time are set automatically, and to try a different network such as mobile data.
If the warning still appears, contact Wander Support right away with the details listed in Information to send Wander Support below.
Important: Do not tell guests to click Show Details and continue to the site. Guests should only enter payment details on a page that loads without a warning.
For more on certificates, see HTTPS and SSL Certificates.
"Malicious" or "suspicious" link warning
A "malicious" or "suspicious" link warning appears when your booking link uses your shared WanderOS address instead of your own domain. Your default address ends in .wander.site and forwards guests to an address ending in .wanderos.com. Some messaging apps, antivirus tools, work networks, and QR code generators treat links that forward to a different, shared domain with extra caution. Only some guests see this warning, depending on their device and security software.
Check which link your guests use
To check which link your guests use, open your main website, guest emails, social profiles, and printed QR codes, then click or scan your Book Now link. If the address bar shows an address ending in .wander.site or .wanderos.com, guests are using the shared address.
Connect your own domain
Connecting your own domain keeps guests on an address that belongs to your brand. Choose the option that fits your setup:
Keep your existing website. Connect a subdomain such as
book.yourbrand.com. See Use WanderOS as a Booking Engine on a Subdomain.Make WanderOS your main website. Connect your root domain, such as
yourbrand.com. This replaces any existing website at that address. See Connect a Custom Domain.
Update every booking link
After your domain status shows Active, update every booking link to your own domain:
Book Now buttons and menu links on your main website
QR codes on flyers, signs, and guidebooks (create new codes with the new link)
Email signatures and saved guest message templates
Automated messages sent from your Property Management System (PMS)
Social media profile links and your Google Business Profile
Important: Old links and QR codes that use the .wander.site address still open your site, but they can still trigger warnings. Replace them rather than leaving them in place.
Test the new link in a private or incognito window and on a phone. The address bar should show your own domain with a padlock icon.
Information to send Wander Support
Sending Wander Support the following information helps the team find the cause of a warning quickly:
A screenshot of the warning
The exact link the guest opened
The browser, app, or tool that showed the warning (for example, Safari, Chrome, or a QR code generator)
Whether the guest was on a phone or computer
The date and time the guest saw the warning
Need help?
We’re here for you. If you have any questions, reach out to our Support team at [email protected] or chat with us through the 'Help Center'.