I’d just redirect the second level to the first (could happen by accident when using a JS bookmark or similar), i.e. redirect https://www.smort.io/https:/smort.io/https:/whatever to https://www.smort.io/https:/whatever, but continue to allow https://www.smort.io/https:/smort.io (because why not, there can be valid use cases).