Analysts - What solution are you using to investigate suspicious email links?

I'm interested in seeing how you investigate and analyze malicious links in emails that are reported to you. In the past we have used local VMs that are basically throwaways with Chrome. Copy paste the link in the sandbox and run it to see if it was blocked, or where you land. The goal here is to be able to blow these up without running the risk of infecting my host, even though most are just bogus login pages.

I …

analysts blocked chrome copy cybersecurity email emails link links local malicious paste risk run sandbox solution vms