I have had these concerns with public tools like VirusTotal JoesSandbox, Hybrid analysis and the like and whenever I utilize them I always make a point of not s

I have had these concerns with public tools like VirusTotal JoesSandbox, Hybrid analysis and the like and whenever I utilize them I always make a point of not submitting something that is sensitive to the org I work for. Most of it revolves around domains/URLs I want checked as apart of my phishing "toolkit". But wow! I did not realize just how much data they had access to and the types of URLs people would want scanned. That being said, good on urlscan for making changes, reaching out to customers and setting up a best practice guide in response to these concerns.