“A link submitted to urlscan.io as unlisted, was accessed 12 times within 1 hour of submission”
Security tools scan your email, find a Dropbox link or a password reset URL, and submit it to urlscan.io or Hybrid Analysis as public data. Hybrid Analysis is owned by CrowdStrike and still publishes the screenshots and report when you tick “Do not share.” Urlscan logged 328,147 unlisted scans in one day, all visible to paying Pro customers. The secret link is only secret until your own security vendor sells it.