{ "run_id": "edit-e1-policy-viewer-2026-10-24", "environment": { "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36", "platform": "MacIntel", "device_pixel_ratio": 2, "date_utc": "2026-10-25T01:40:55.921Z", "user_agent_data": { "architecture": "arm", "brands": [ { "brand": "Google Chrome", "version": "155" }, { "brand": "Chromium", "version": "155" }, { "brand": "Not(A:Brand", "version": "24" } ], "fullVersionList": [ { "brand": "Google Chrome", "version": "155.0.8059.80" }, { "brand": "Chromium", "version": "155.0.8059.80" }, { "brand": "Not(A:Brand", "version": "24.0.0.0" } ], "mobile": false, "platform": "macOS", "platformVersion": "27.0.1" } }, "device": "MacBook Air M4, 32 GB RAM", "local_date": "2026-10-24", "cases": [ { "case_id": "VirusTotal", "record": { "recorded_utc": "2026-10-25T01:55:51.098Z", "component_path": "/demos/comparisons/url-inspection-data-policies/", "title": "URL inspection submission policies", "text": "URL inspection submission policies\n\nDated 24 October 2026. This table describes checked sources; it does not scan a URL or tell you whether a site is safe. Unknown fields are preserved.\n\nFind a provider or phrase\nOnly rows with unknown fields\nReset\n\n1 of 22 rows\n\nURL inspection submission policies — source-linked snapshot\nService and mode\tWho sees submissions\tRetention\tThird-party sharing\tAccount\tPrivate option\nVirusTotal\nStandard service contrasted with paid Private Scanning\tStandard reports reach the public community and examining partners; Private reports are organization-visible.\tPrivate default is usually 24 hours and configurable; standard retention not established.\tPrivate submissions are not shared unless also uploaded to the standard service; standard results reach examining partners.\tPrivate requires specific privileges; standard account requirement not established.\tPaid Private Scanning is a separate offering.\n\nAll rows are present in the HTML. Filtering uses this table only. Provider links open official guidance; no report is submitted here.\n\nJSON · Method · Source ledger", "viewport": { "width": 1248, "height": 700, "document_width": 1248 }, "regions": [ { "label": "Scrollable provider table", "client_width": 1208, "scroll_width": 1208, "scroll_left": 0 } ], "active_element": { "tag": "BODY", "id": "" }, "link_count": 25, "input_values": [ { "id": "search", "value": "VirusTotal" }, { "id": "filter", "value": "on" } ] } }, { "case_id": "Criminal IP", "record": { "recorded_utc": "2026-10-25T01:55:53.043Z", "component_path": "/demos/comparisons/url-inspection-data-policies/", "title": "URL inspection submission policies", "text": "URL inspection submission policies\n\nDated 24 October 2026. This table describes checked sources; it does not scan a URL or tell you whether a site is safe. Unknown fields are preserved.\n\nFind a provider or phrase\nOnly rows with unknown fields\nReset\n\n1 of 22 rows\n\nURL inspection submission policies — source-linked snapshot\nService and mode\tWho sees submissions\tRetention\tThird-party sharing\tAccount\tPrivate option\nCriminal IP\nDomain search and member service\tRecently scanned reports are publicly viewable; user search histories are private.\tUnknown\tUnknown\tFree Membership follows account creation; anonymous lookup entitlement remains unstated.\tPaid private domain scans are documented.\n\nAll rows are present in the HTML. Filtering uses this table only. Provider links open official guidance; no report is submitted here.\n\nJSON · Method · Source ledger", "viewport": { "width": 1248, "height": 700, "document_width": 1248 }, "regions": [ { "label": "Scrollable provider table", "client_width": 1208, "scroll_width": 1208, "scroll_left": 0 } ], "active_element": { "tag": "BODY", "id": "" }, "link_count": 25, "input_values": [ { "id": "search", "value": "Criminal IP" }, { "id": "filter", "value": "on" } ] } }, { "case_id": "no-match-e1-zz", "record": { "recorded_utc": "2026-10-25T01:55:56.464Z", "component_path": "/demos/comparisons/url-inspection-data-policies/", "title": "URL inspection submission policies", "text": "URL inspection submission policies\n\nDated 24 October 2026. This table describes checked sources; it does not scan a URL or tell you whether a site is safe. Unknown fields are preserved.\n\nFind a provider or phrase\nOnly rows with unknown fields\nReset\n\n0 of 22 rows\n\nURL inspection submission policies — source-linked snapshot\nService and mode\tWho sees submissions\tRetention\tThird-party sharing\tAccount\tPrivate option\n\nNo rows match. Clear a filter or use Reset.\n\nAll rows are present in the HTML. Filtering uses this table only. Provider links open official guidance; no report is submitted here.\n\nJSON · Method · Source ledger", "viewport": { "width": 1248, "height": 700, "document_width": 1248 }, "regions": [ { "label": "Scrollable provider table", "client_width": 1208, "scroll_width": 1208, "scroll_left": 0 } ], "active_element": { "tag": "BODY", "id": "" }, "link_count": 25, "input_values": [ { "id": "search", "value": "no-match-e1-zz" }, { "id": "filter", "value": "on" } ] } }, { "case_id": "reset", "record": { "recorded_utc": "2026-10-25T01:55:58.222Z", "component_path": "/demos/comparisons/url-inspection-data-policies/", "title": "URL inspection submission policies", "text": "URL inspection submission policies\n\nDated 24 October 2026. This table describes checked sources; it does not scan a URL or tell you whether a site is safe. Unknown fields are preserved.\n\nFind a provider or phrase\nOnly rows with unknown fields\nReset\n\n22 of 22 rows\n\nURL inspection submission policies — source-linked snapshot\nService and mode\tWho sees submissions\tRetention\tThird-party sharing\tAccount\tPrivate option\nurlscan.io\nPublic, Unlisted and Private URL scans\tPublic: searchable. Unlisted: vetted Pro researchers. Private: submitter and people given the scan ID.\tPublic retention not guaranteed; paid custom periods available. Private expiry is not quantified here.\tTerms exclude Private URLs from third-party sharing; submitters can still disclose a scan ID.\tAccount and API-key model documented; universal account requirement not established.\tPrivate mode exists; sharing its scan ID grants access.\nVirusTotal\nStandard service contrasted with paid Private Scanning\tStandard reports reach the public community and examining partners; Private reports are organization-visible.\tPrivate default is usually 24 hours and configurable; standard retention not established.\tPrivate submissions are not shared unless also uploaded to the standard service; standard results reach examining partners.\tPrivate requires specific privileges; standard account requirement not established.\tPaid Private Scanning is a separate offering.\nCloudflare URL Scanner\nRadar URL Scanner API; Public and Unlisted\tPublic by default; Unlisted is accessible to anyone knowing the scan ID.\tSuccessful scans: 12 months. Failed scans: deleted after 30 days.\tUnknown\tAPI token required for API submission.\tUnlisted option documented; it is not authenticated private access.\nGoogle Web Risk\nLookup API, contrasted with Update API\tLookup sends the queried URL to the server.\tUnknown\tUnknown\tUnknown\tUnknown\nSucuri SiteCheck\nFree SiteCheck; separate from paid website monitoring\tUnknown\tUnknown\tUnknown\tFree remote scanner available to anyone; no explicit account rule stated.\tUnknown\nANY.RUN\nPublic and Private sandbox submissions\tPublic submissions reach all users and third-party services. Private visibility follows the selected audience.\tUnknown\tPublic submissions are available to third-party services; a comprehensive Private sharing promise was not established.\tUnknown\tPrivate choices include Only me, Team and Who has a link.\nHybrid Analysis\nPublic service terms and data-protection pages\tSubmitted URLs and reports are public by default; the security community can access them.\tUnknown\tSubmitted content is available to commercial companies and cybersecurity partners.\tRegistered users can generate a free Public API key; universal web-submission requirement is unstated.\tPublic service terms require public sharing; a private option is not established.\nJoe Sandbox\nCloud Basic only\tBasic samples and their analysis results are accessible to anyone.\tUnknown\tBasic terms allow sharing, sale/licensing and access by other organizations.\tUnknown\tBasic samples are public; no private Basic submission is described.\nURLQuery\nPublic, restricted and private analysis visibility\tPublic reports reach all users; restricted/private visibility depends on available account settings.\tNecessary for analysis and operational stability; no fixed duration stated.\tPublic/restricted may reach trusted security partners; Private analysis is excluded from those partners.\tUnknown\tRestricted or private settings are described; availability is account-dependent.\nPhishTank\nCommunity reporting and validation\tCommunity submission, validation, tracking and sharing.\tUnknown\tPhishing data is shared; recipients and full payload distribution are not specified by this FAQ fragment.\tRegistration is required for reporting; current registration availability was not tested.\tUnknown\nCriminal IP\nDomain search and member service\tRecently scanned reports are publicly viewable; user search histories are private.\tUnknown\tUnknown\tFree Membership follows account creation; anonymous lookup entitlement remains unstated.\tPaid private domain scans are documented.\nImmuniWeb Web Security\nCommunity Web Security test\tUnknown\tUnknown\tUnknown\tUnknown\tA Hide from Latest Tests control is documented; confidentiality is not established.\nNorton Safe Web\nWebsite community and site-owner features\tThe website provides community ratings and comments; raw lookup visibility is not specified.\tUnknown\tUnknown\tNorton Account required for community participation and site-owner features.\tUnknown\nEmailVeritas URL Checker\nURL Checker policy\tOperator stores the submitted URL; public report visibility is not stated.\tURLs remain with associated content and results; no numeric retention period is stated.\tNo sale/rental/disclosure promise has stated legal, rights-enforcement and system-integrity exceptions.\tUnknown\tUnknown\nLionic URL Check\nURL Check; general applications/services privacy notice\tGeneral policy says URLs reach a cloud web-categories engine; URL Check-specific audiences are not defined.\tUnknown\tUnknown\tUnknown\tUnknown\nCheckPhish\nPublic URL checker; API statement separately scoped\tUnknown\tUnknown\tAPI page says scanned URLs and data are not shared or sold; public checker scope is unstated.\tUnknown\tUnknown\nMDN HTTP Observatory\nCurrent HTTP Observatory, formerly Mozilla Observatory\tEach domain’s scan history is public.\tUnknown\tFAQ says user data is not stored with each scan; it does not define all third-party report sharing.\tUnknown\tCurrent FAQ describes public scan history; it does not establish a confidential private-result option.\nNetcraft Site Report\nQueried URL/hostname/domain and threat-indicator handling\tNetcraft may visit the queried address immediately or later; public visibility is not specified.\tUnknown\tThreat-indicator data may be shared to combat cybercrime; this is not a statement that every query is shared.\tUnknown\tUnknown\nGoogle Safe Browsing\nAPI v4 Lookup; API terms dated November 2025\tLookup sends queried URLs to Google servers.\tUnknown\tAPI terms permit sharing submitted URLs, content and metadata with third parties.\tGoogle Account, Developer Console project and API key required.\tUnknown\nDr.Web Link Scanner\nOnline link scanner; general company privacy policy\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\nFortiGuard Web Filtering\nPublic web-rating lookup; general Fortinet policy\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\nTrend Micro Site Safety Center\nPublic Site Safety Center; global privacy notice\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\n\nAll rows are present in the HTML. Filtering uses this table only. Provider links open official guidance; no report is submitted here.\n\nJSON · Method · Source ledger", "viewport": { "width": 1248, "height": 700, "document_width": 1248 }, "regions": [ { "label": "Scrollable provider table", "client_width": 1208, "scroll_width": 1208, "scroll_left": 0 } ], "active_element": { "tag": "BODY", "id": "" }, "link_count": 25, "input_values": [ { "id": "search", "value": "" }, { "id": "filter", "value": "on" } ] } }, { "case_id": "unknown-filter", "record": { "recorded_utc": "2026-10-25T01:55:59.916Z", "component_path": "/demos/comparisons/url-inspection-data-policies/", "title": "URL inspection submission policies", "text": "URL inspection submission policies\n\nDated 24 October 2026. This table describes checked sources; it does not scan a URL or tell you whether a site is safe. Unknown fields are preserved.\n\nFind a provider or phrase\nOnly rows with unknown fields\nReset\n\n20 of 22 rows\n\nURL inspection submission policies — source-linked snapshot\nService and mode\tWho sees submissions\tRetention\tThird-party sharing\tAccount\tPrivate option\nCloudflare URL Scanner\nRadar URL Scanner API; Public and Unlisted\tPublic by default; Unlisted is accessible to anyone knowing the scan ID.\tSuccessful scans: 12 months. Failed scans: deleted after 30 days.\tUnknown\tAPI token required for API submission.\tUnlisted option documented; it is not authenticated private access.\nGoogle Web Risk\nLookup API, contrasted with Update API\tLookup sends the queried URL to the server.\tUnknown\tUnknown\tUnknown\tUnknown\nSucuri SiteCheck\nFree SiteCheck; separate from paid website monitoring\tUnknown\tUnknown\tUnknown\tFree remote scanner available to anyone; no explicit account rule stated.\tUnknown\nANY.RUN\nPublic and Private sandbox submissions\tPublic submissions reach all users and third-party services. Private visibility follows the selected audience.\tUnknown\tPublic submissions are available to third-party services; a comprehensive Private sharing promise was not established.\tUnknown\tPrivate choices include Only me, Team and Who has a link.\nHybrid Analysis\nPublic service terms and data-protection pages\tSubmitted URLs and reports are public by default; the security community can access them.\tUnknown\tSubmitted content is available to commercial companies and cybersecurity partners.\tRegistered users can generate a free Public API key; universal web-submission requirement is unstated.\tPublic service terms require public sharing; a private option is not established.\nJoe Sandbox\nCloud Basic only\tBasic samples and their analysis results are accessible to anyone.\tUnknown\tBasic terms allow sharing, sale/licensing and access by other organizations.\tUnknown\tBasic samples are public; no private Basic submission is described.\nURLQuery\nPublic, restricted and private analysis visibility\tPublic reports reach all users; restricted/private visibility depends on available account settings.\tNecessary for analysis and operational stability; no fixed duration stated.\tPublic/restricted may reach trusted security partners; Private analysis is excluded from those partners.\tUnknown\tRestricted or private settings are described; availability is account-dependent.\nPhishTank\nCommunity reporting and validation\tCommunity submission, validation, tracking and sharing.\tUnknown\tPhishing data is shared; recipients and full payload distribution are not specified by this FAQ fragment.\tRegistration is required for reporting; current registration availability was not tested.\tUnknown\nCriminal IP\nDomain search and member service\tRecently scanned reports are publicly viewable; user search histories are private.\tUnknown\tUnknown\tFree Membership follows account creation; anonymous lookup entitlement remains unstated.\tPaid private domain scans are documented.\nImmuniWeb Web Security\nCommunity Web Security test\tUnknown\tUnknown\tUnknown\tUnknown\tA Hide from Latest Tests control is documented; confidentiality is not established.\nNorton Safe Web\nWebsite community and site-owner features\tThe website provides community ratings and comments; raw lookup visibility is not specified.\tUnknown\tUnknown\tNorton Account required for community participation and site-owner features.\tUnknown\nEmailVeritas URL Checker\nURL Checker policy\tOperator stores the submitted URL; public report visibility is not stated.\tURLs remain with associated content and results; no numeric retention period is stated.\tNo sale/rental/disclosure promise has stated legal, rights-enforcement and system-integrity exceptions.\tUnknown\tUnknown\nLionic URL Check\nURL Check; general applications/services privacy notice\tGeneral policy says URLs reach a cloud web-categories engine; URL Check-specific audiences are not defined.\tUnknown\tUnknown\tUnknown\tUnknown\nCheckPhish\nPublic URL checker; API statement separately scoped\tUnknown\tUnknown\tAPI page says scanned URLs and data are not shared or sold; public checker scope is unstated.\tUnknown\tUnknown\nMDN HTTP Observatory\nCurrent HTTP Observatory, formerly Mozilla Observatory\tEach domain’s scan history is public.\tUnknown\tFAQ says user data is not stored with each scan; it does not define all third-party report sharing.\tUnknown\tCurrent FAQ describes public scan history; it does not establish a confidential private-result option.\nNetcraft Site Report\nQueried URL/hostname/domain and threat-indicator handling\tNetcraft may visit the queried address immediately or later; public visibility is not specified.\tUnknown\tThreat-indicator data may be shared to combat cybercrime; this is not a statement that every query is shared.\tUnknown\tUnknown\nGoogle Safe Browsing\nAPI v4 Lookup; API terms dated November 2025\tLookup sends queried URLs to Google servers.\tUnknown\tAPI terms permit sharing submitted URLs, content and metadata with third parties.\tGoogle Account, Developer Console project and API key required.\tUnknown\nDr.Web Link Scanner\nOnline link scanner; general company privacy policy\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\nFortiGuard Web Filtering\nPublic web-rating lookup; general Fortinet policy\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\nTrend Micro Site Safety Center\nPublic Site Safety Center; global privacy notice\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\n\nAll rows are present in the HTML. Filtering uses this table only. Provider links open official guidance; no report is submitted here.\n\nJSON · Method · Source ledger", "viewport": { "width": 1248, "height": 700, "document_width": 1248 }, "regions": [ { "label": "Scrollable provider table", "client_width": 1208, "scroll_width": 1208, "scroll_left": 0 } ], "active_element": { "tag": "BODY", "id": "" }, "link_count": 25, "input_values": [ { "id": "search", "value": "" }, { "id": "filter", "value": "on" } ] } }, { "case_id": "390px-frame", "record": { "recorded_utc": "2026-10-25T01:56:01.442Z", "component_path": "/demos/comparisons/url-inspection-data-policies/", "title": "URL inspection submission policies", "text": "URL inspection submission policies\n\nDated 24 October 2026. This table describes checked sources; it does not scan a URL or tell you whether a site is safe. Unknown fields are preserved.\n\nFind a provider or phrase\nOnly rows with unknown fields\nReset\n\n20 of 22 rows\n\nURL inspection submission policies — source-linked snapshot\nService and mode\tWho sees submissions\tRetention\tThird-party sharing\tAccount\tPrivate option\nCloudflare URL Scanner\nRadar URL Scanner API; Public and Unlisted\tPublic by default; Unlisted is accessible to anyone knowing the scan ID.\tSuccessful scans: 12 months. Failed scans: deleted after 30 days.\tUnknown\tAPI token required for API submission.\tUnlisted option documented; it is not authenticated private access.\nGoogle Web Risk\nLookup API, contrasted with Update API\tLookup sends the queried URL to the server.\tUnknown\tUnknown\tUnknown\tUnknown\nSucuri SiteCheck\nFree SiteCheck; separate from paid website monitoring\tUnknown\tUnknown\tUnknown\tFree remote scanner available to anyone; no explicit account rule stated.\tUnknown\nANY.RUN\nPublic and Private sandbox submissions\tPublic submissions reach all users and third-party services. Private visibility follows the selected audience.\tUnknown\tPublic submissions are available to third-party services; a comprehensive Private sharing promise was not established.\tUnknown\tPrivate choices include Only me, Team and Who has a link.\nHybrid Analysis\nPublic service terms and data-protection pages\tSubmitted URLs and reports are public by default; the security community can access them.\tUnknown\tSubmitted content is available to commercial companies and cybersecurity partners.\tRegistered users can generate a free Public API key; universal web-submission requirement is unstated.\tPublic service terms require public sharing; a private option is not established.\nJoe Sandbox\nCloud Basic only\tBasic samples and their analysis results are accessible to anyone.\tUnknown\tBasic terms allow sharing, sale/licensing and access by other organizations.\tUnknown\tBasic samples are public; no private Basic submission is described.\nURLQuery\nPublic, restricted and private analysis visibility\tPublic reports reach all users; restricted/private visibility depends on available account settings.\tNecessary for analysis and operational stability; no fixed duration stated.\tPublic/restricted may reach trusted security partners; Private analysis is excluded from those partners.\tUnknown\tRestricted or private settings are described; availability is account-dependent.\nPhishTank\nCommunity reporting and validation\tCommunity submission, validation, tracking and sharing.\tUnknown\tPhishing data is shared; recipients and full payload distribution are not specified by this FAQ fragment.\tRegistration is required for reporting; current registration availability was not tested.\tUnknown\nCriminal IP\nDomain search and member service\tRecently scanned reports are publicly viewable; user search histories are private.\tUnknown\tUnknown\tFree Membership follows account creation; anonymous lookup entitlement remains unstated.\tPaid private domain scans are documented.\nImmuniWeb Web Security\nCommunity Web Security test\tUnknown\tUnknown\tUnknown\tUnknown\tA Hide from Latest Tests control is documented; confidentiality is not established.\nNorton Safe Web\nWebsite community and site-owner features\tThe website provides community ratings and comments; raw lookup visibility is not specified.\tUnknown\tUnknown\tNorton Account required for community participation and site-owner features.\tUnknown\nEmailVeritas URL Checker\nURL Checker policy\tOperator stores the submitted URL; public report visibility is not stated.\tURLs remain with associated content and results; no numeric retention period is stated.\tNo sale/rental/disclosure promise has stated legal, rights-enforcement and system-integrity exceptions.\tUnknown\tUnknown\nLionic URL Check\nURL Check; general applications/services privacy notice\tGeneral policy says URLs reach a cloud web-categories engine; URL Check-specific audiences are not defined.\tUnknown\tUnknown\tUnknown\tUnknown\nCheckPhish\nPublic URL checker; API statement separately scoped\tUnknown\tUnknown\tAPI page says scanned URLs and data are not shared or sold; public checker scope is unstated.\tUnknown\tUnknown\nMDN HTTP Observatory\nCurrent HTTP Observatory, formerly Mozilla Observatory\tEach domain’s scan history is public.\tUnknown\tFAQ says user data is not stored with each scan; it does not define all third-party report sharing.\tUnknown\tCurrent FAQ describes public scan history; it does not establish a confidential private-result option.\nNetcraft Site Report\nQueried URL/hostname/domain and threat-indicator handling\tNetcraft may visit the queried address immediately or later; public visibility is not specified.\tUnknown\tThreat-indicator data may be shared to combat cybercrime; this is not a statement that every query is shared.\tUnknown\tUnknown\nGoogle Safe Browsing\nAPI v4 Lookup; API terms dated November 2025\tLookup sends queried URLs to Google servers.\tUnknown\tAPI terms permit sharing submitted URLs, content and metadata with third parties.\tGoogle Account, Developer Console project and API key required.\tUnknown\nDr.Web Link Scanner\nOnline link scanner; general company privacy policy\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\nFortiGuard Web Filtering\nPublic web-rating lookup; general Fortinet policy\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\nTrend Micro Site Safety Center\nPublic Site Safety Center; global privacy notice\tUnknown\tUnknown\tUnknown\tUnknown\tUnknown\n\nAll rows are present in the HTML. Filtering uses this table only. Provider links open official guidance; no report is submitted here.\n\nJSON · Method · Source ledger", "viewport": { "width": 390, "height": 700, "document_width": 390 }, "regions": [ { "label": "Scrollable provider table", "client_width": 350, "scroll_width": 1088, "scroll_left": 0 } ], "active_element": { "tag": "BODY", "id": "" }, "link_count": 25, "input_values": [ { "id": "search", "value": "" }, { "id": "filter", "value": "on" } ] } } ], "network": { "schema": "resource-timing-action-log-v1", "component_path": "/demos/comparisons/url-inspection-data-policies/", "start": { "utc": "2026-10-25T01:55:50.513Z", "time_ms": 23339.600000023842 }, "end": { "utc": "2026-10-25T01:56:02.582Z", "time_ms": 35408.40000003576 }, "baseline_resource_count": 0, "requests_during_window": 0, "requests": [], "csp_violations": [], "scope": "Resource Timing for the component document only; initial navigation excluded; not a packet capture, DNS log or browser-wide traffic capture." }, "earlier_run": "policy-viewer.json", "license": "CC-BY-4.0" }