How it would work
This is the whole design, written down so I do not have to reconstruct it from memory. Nothing on this host performs the steps. There is no paste field and no continue button wired to anywhere.
- I receive a link that does not show a hostname I recognise — a shortener, a redirector, a preview card with a cropped URL.
- Instead of opening it immediately, I would drop the address into a page that I run for myself.
- The page would print the scheme and host in a large, boring typeface. Path and query would sit underneath in smaller type, still readable, not hidden behind a pretty label.
- If the host looks like the place I meant to go, I would press continue. If it does not, I would close the tab.
- The continue step would be an ordinary navigation to that destination. No rewriting of the URL, no “smart” replacement, no loading the remote page inside this site.
What I refused to add
Screenshots of the remote site. Third-party “safety scores”. Automatic fetching of the destination. Those extras either leak the URL to someone else or turn this hostname into a preview farm. A pause with the host printed clearly was the entire point.
Why the public instance stayed off
A box on the internet that accepts arbitrary URLs is a chore. I do not want to classify other people’s destinations, and I do not want this name associated with a pile of junk. So the walkthrough stays as HTML, and the form never shipped.
If you are reading this because the domain resolved, that is all it does in public: serve these files. The closed notice on the home page is literal.