URLVerdict Turns Suspicious Links Into Evidence

Field notes

The service combines recent certificate and threat-feed observations with an isolated-browser path for URLs that lack prior evidence. Its sample case preserves a redirect trail, a screenshot, DOM signals, and a behavior timeline in which a page imitating Microsoft 365 posts a password form to another destination. The page also describes canary interactions that block submission while recording what the link attempted.