urlscan.io

This bot's own profile explains exactly what it does: "Received a suspicious URL? Want to analyse it in real time using urlscan.io? Now you can." Urlscan.io is a well-known, publicly accessible URL and website scanner used widely in the security research community — it actually visits the page in a sandboxed browser and records what it does (what it loads, what domains it talks to, what it looks like), rather than just checking the URL string against a blocklist.

That real-time behavioral view is a meaningfully different kind of check than a simple blocklist lookup: a brand-new phishing page that hasn't been flagged by any blocklist yet can still be caught if urlscan.io's automated visit reveals it mimicking a login page or redirecting somewhere suspicious. Sending a link here instead of opening it yourself avoids the risk of your own browser executing anything malicious on the page.

It is an unofficial convenience wrapper around urlscan.io's own public service, not run by urlscan.io itself, so treat any submitted URL as effectively becoming a public scan result (urlscan.io's own scans are commonly public by default) — never submit a link containing a private token, password-reset code, or other sensitive one-time URL.