Shortened URLs could potentially lead to sites hosting malware, phishing exploits or other spam-related content, security experts warn.