Is www.confirmation.com a scam?

Our automated security review found no threat indicators on www.confirmation.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is www.confirmation.com safe to use?

www.confirmation.com passed our automated security checks with a trust score of 89/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does www.confirmation.com have a valid SSL certificate?

Yes. www.confirmation.com presents a valid TLSv1.3 certificate issued by COMODO CA Limited · COMODO RSA Extended Validation Secure Server CA, expiring in 124 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the www.confirmation.com domain?

www.confirmation.com is 28.1 years old, registered on 4/28/1998 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Is www.confirmation.com on any phishing or malware blacklists?

No. www.confirmation.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is www.confirmation.com hosted?

www.confirmation.com resolves to an IP operated by Thomson Reuters U.S. LLC in US (usage type: Commercial). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the www.confirmation.com report updated?

This is a permanent record of the scan run on June 14, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around www.confirmation.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is www.confirmation.com legit or a scam?

Our verdict:Safe· 89/100

SafeSuspiciousDangerous

Legitimate Thomson Reuters audit-confirmation portal, 27 years old, trusted by major accounting firms and banks globally.

Why we trust it

Domain registered 27 years ago (April 1998) and continuously operated by Thomson Reuters since 2019.Valid SSL certificate issued by COMODO, a trusted certificate authority.Hosting IP has zero abuse reports and a clean reputation score.

www.confirmation.comScanned 3h ago

Post Facebook

Trust score

SAFE

Heuristics 91·MT 88

Positive signals (4)

Not on major blacklists Domain is 28 years old Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

—

Data unavailable

Domain Age

28 years old

Registered Apr 28, 1998

MT Intelligence

Safe

Low likelihood · 95% confidence

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

LIVE RENDER

www.confirmation.com

1Modal dialog presents a 'User Verification' flow with named Client and Responder entities, consistent with a B2B supplier/buyer verification portal

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Low visual risk

Visual red flags detected in the screenshot

The screenshot shows a supplier/buyer user-verification modal consistent with a Thomson Reuters B2B confirmation portal, with no prominent scam indicators visible; the design and contact details align with a legitimate enterprise workflow.

Visual risk20/100

What our vision model saw

5 signals

Modal dialog presents a 'User Verification' flow with named Client and Responder entities, consistent with a B2B supplier/buyer verification portal

Support contact references thomsonreuters.com email and US phone numbers, consistent with Thomson Reuters' Confirmation or supplier onboarding platform

No urgency tactics, countdown timers, or fake trust badges visible

No requests for sensitive personal credentials such as wallet seeds, SSNs, or payment card data

Minor typographic anomaly: 'Contact us at::' contains a double colon, suggesting minor copy-editing oversight but not a scam indicator

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust88/100

MT AgentLive web researchVisual inspection

Confidence

Confirmation.com is a well-established B2B service owned by Thomson Reuters since 2019, originally founded in 2001 by a CPA to digitise audit confirmations. The domain registration dates to April 1998 and is registered via MarkMonitor to Thomson Reuters Enterprise Centre GmbH in Zug, Switzerland — a standard corporate setup. Our scan found no malware, no browser blocklist hits, and a clean hosting IP with zero abuse reports. The page itself displays a standard user-verification modal consistent with enterprise audit workflows, with contact details pointing to Thomson Reuters support channels. Independent sources confirm the platform processes millions of confirmations annually across 170 countries and is endorsed by major banks including Bank of America and Regions. One sarcastic Glassdoor post questioned its audit practices, but this reflects user frustration with workflow strictness, not fraud. No phishing, credential-harvesting, or scam-family patterns were detected.

Full dossier

Analysis complete

Page Content

The page displays a 'User Verification' modal for a B2B audit-confirmation workflow. It names a client (Barentz Malaysia Sdn Bhd) and responder (Empire Manufacturing Sdn Bhd), requests language selection and acceptance of a user agreement, and provides support contact details. No login credentials, payment information, or sensitive personal data are requested on this particular page.

Infrastructure

Domain registered 27 years ago (April 1998) via MarkMonitor to Thomson Reuters Enterprise Centre GmbH, Zug, Switzerland. SSL certificate is valid (COMODO RSA Extended Validation, 124 days to expiry). Hosting IP 155.46.210.7 has zero abuse reports and a clean reputation score. No redirects or homoglyph tricks detected.

Domain History

Confirmation.com was founded by Brian Fox (CPA) around 2001 as Capital Confirmation, Inc., with patents held for its audit-confirmation technology. Thomson Reuters acquired the platform in 2019. The domain has been continuously operated for over two decades and is actively maintained by a Fortune 500 financial-information company.

Web Reputation

Independent sources report the platform is used by 16,000+ accounting firms, 125,000+ auditors, and processes millions of confirmations annually across 170 countries. Positive mentions appear on G2 (user reviews praising ease of use), Reddit accounting communities (praising the business model), and professional CPA networks. One Glassdoor post sarcastically questioned audit practices, but no widespread fraud, phishing, or scam complaints are associated with the domain itself.

Risk Factors

One Glassdoor post sarcastically questioned the platform's audit strictness, though this reflects workflow frustration rather than fraud.
Minor typographic anomaly ('Contact us at::' with double colon) suggests minor copy-editing oversight but is not a scam indicator.

Positive Signals

Domain registered 27 years ago (April 1998) and continuously operated by Thomson Reuters since 2019.
Valid SSL certificate issued by COMODO, a trusted certificate authority.
Hosting IP has zero abuse reports and a clean reputation score.
Used by 16,000+ accounting firms, 125,000+ auditors, and endorsed by major banks including Bank of America and Regions.
Positive reviews on G2 and professional Reddit communities confirm legitimate business use.

AI Recommendation

This is a legitimate business service. If you are an auditor, accountant, or financial professional, you can safely use this platform for audit confirmations. If you received an unsolicited email claiming to be from Confirmation.com, verify the sender's email domain and contact Thomson Reuters directly before responding.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for www.confirmation.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

28 yrs

Registered Apr 1998

Business registration

Active · Switzerland

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

1 scam report · 2 positive

Key findings

7 headline facts from open-web research

Domain registered April 28, 1998 (over 27 years old); expires 2027; registered via MarkMonitor to Thomson Reuters Enterprise Centre GmbH in Zug, Switzerland.
Legitimate provider of secure electronic audit confirmations; founded by Brian Fox (CPA) in 2001 after Vanderbilt MBA; acquired by Thomson Reuters in 2019.
Used by 16,000+ accounting firms, 125,000+ auditors, processes millions of confirmations annually across 170 countries; endorsed by major banks (e.g., Bank of America, Regions).
Mission focuses on reducing financial statement fraud by replacing paper-based confirmations with patented, authenticated online system.
Positive mentions in professional contexts (auditing Reddit threads, G2 reviews, bank CPA lists, CFTC presentations); one sarcastic Glassdoor post questioning its practices.
No widespread scam reports, phishing associations, or fraud complaints tied to the domain itself; unrelated phishing results reference generic "confirmation" emails.
Official site (www.confirmation.com) is a login portal for auditors/banks; promoted directly by Thomson Reuters and financial institutions.

Scam reports (1)

Direct quotes from public scam databases, forums, and news.

Glassdoor Communityopen
"Is confirmation.com the biggest scam in the world? Now making the senders input outstanding balances and resend if it's off by a dollar to ..."

Positive reviews (2)

Quotes indicating the site is legitimate.

G2open
"Confirmation.com is easy to use, but better than that, it's easy for the receiver to use resulting in more positive replies."
Reddit r/Accountingopen
"Whoever invented Confirmation.com is a Rich genius. It is such a simple idea that probably costs very little that must have the most insane ..."

Business registration

Status: active · Switzerland

Registered to Thomson Reuters Enterprise Centre GmbH, Zug, Switzerland (WHOIS registrant). Acquired by Thomson Reuters in 2019. Original US-based Capital Confirmation, Inc. (founded ~2001, patents held).

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research confirmed that Confirmation.com is a legitimate Thomson Reuters audit-confirmation platform. The domain was originally founded by Brian Fox (CPA) around 2001 as Capital Confirmation, Inc., and was acquired by Thomson Reuters in 2019. Business registration shows the platform is registered to Thomson Reuters Enterprise Centre GmbH in Zug, Switzerland. The platform is used by 16,000+ accounting firms, 125,000+ auditors, and processes millions of confirmations annually across 170 countries. Positive mentions appear on G2 (user reviews praising ease of use) and Reddit accounting communities (praising the business model). One sarcastic Glassdoor post questioned the platform's audit practices, but this reflects workflow frustration rather than fraud allegations. No widespread scam reports, phishing associations, or fraud complaints are tied to the domain itself.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

Has contact info, but not on the site's domain

Emails on site's domainNone

Phone numbers1-866-325-7201

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No email uses the site's own domain — legitimate shops usually do.
No postal address visible on the page.

Phone number listed (1-866-325-7201).

Domain & Encryption

Domain History

Age28 years old

RegistrarMarkMonitor Inc.

RegisteredApr 28, 1998

ExpiresApr 27, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerCOMODO CA Limited · COMODO RSA Extended Validation Secure Server CA

ExpiresOct 17, 2026 (124d)

Self-signedNo

Hosting & Technology

HostingThomson Reuters U.S. LLC

Server locationUS

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1302http://www.confirmation.com/respond/EResponse.aspx?Token=wIkBPr7ljJpU3%2520sUtdosaA%3D%3D&Req=KVtvTKEv6%2Fo%3D&AuditorID=%2F45DSyh51Os%3D
2200https://www.confirmation.com/respond/EResponse.aspx?Token=wIkBPr7ljJpU3%2520sUtdosaA%3D%3D&Req=KVtvTKEv6%2Fo%3D&AuditorID=%2F45DSyh51Os%3D

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPThomson Reuters U.S. LLC

Usage typeCommercial

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on www.confirmation.com and not a lookalike like w-ww.confirmation.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on www.confirmation.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
www.confirmation.com passed our automated security checks with a trust score of 89/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. www.confirmation.com presents a valid TLSv1.3 certificate issued by COMODO CA Limited · COMODO RSA Extended Validation Secure Server CA, expiring in 124 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
www.confirmation.com is 28.1 years old, registered on 4/28/1998 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. www.confirmation.com is not currently listed on the major browser blocklist feeds that modern browsers use.
www.confirmation.com resolves to an IP operated by Thomson Reuters U.S. LLC in US (usage type: Commercial). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 14, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around www.confirmation.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·www.confirmation.com

SAFE

Confirmation.com is a legitimate Thomson Reuters audit-confirmation platform used by 16,000+ accounting firms and 125,000+ auditors worldwide. The domain is 27 years old, properly registered to Thomson Reuters in Switzerland, and shows no signs of fraud or phishing.

AV engines

—

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.