Preliminary research
LeakyLinks: Measuring the Security and Privacy Risks of URL Scanning Services
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
URL scanning services publicly index what they are asked to scan, so access tokens and personal data embedded in a submitted URL become searchable by anyone. LeakyLinks pairs URL filtering with LLM-driven semantic classification over the public feeds of six scanning services; visiting 332k URLs identified over 4k that leak sensitive personal information.
Record
- Researcher
- Ali Mustafa, Jannis Rautenstrauch, Florian Hantke, Shubham Agarwal, Stefano Calzavara and Ben Stock
- Published by
- swag.cispa.saarland
- Format
- Whitepaper
- Topic
- Other
In the archive
Related sources
- LeakyLinks: Measuring the Security and Privacy Risks of URL Scanning Services (Artifacts) Repository
Tags
This page is the archive's own catalogue record. The research is the work of Ali Mustafa, Jannis Rautenstrauch, Florian Hantke, Shubham Agarwal, Stefano Calzavara and Ben Stock, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .