How confirmURL.com works
A plain-language walkthrough of what happens when you confirm a link.
1. You paste a URL
Start with a full https:// link from email, chat, SMS, or a shortened URL you do not trust yet.
2. Safety gates
We block private and internal network targets (for example localhost or cloud metadata addresses) to reduce server-side request risks. Only public http/https destinations are allowed.
3. Isolated browser session
For live checks, we open a headless Chromium-based browser that is not your personal profile. It does not use your passwords or cookies. Sessions are short-lived.
4. You review the result
You can view a screenshot or interact briefly to see redirects, branding, and forms. Never enter real credentials into a page inside the sandbox.
5. You decide
If the final site looks wrong, close it and open the official app or type the brand’s address yourself. If it looks legitimate, still prefer official bookmarks for logins.