URL scanning services are now a common component of modern security workflows. They help detect phishing websites or malware early on and warn users before they visit a URL. However, the practice of some of these services—publishing scanned URLs—can inadvertently expose sensitive user data. CISPA researcher Ali Mustafa, together with colleagues from the Max Planck…
