A link, and nobody wants to be first.
It arrives as a forwarded mail, a message in a chat, a ticket with a URL pasted into it, a domain a colleague is not sure about. Opening it properly takes a machine you are willing to burn, an egress you do not mind burning with it, and a way to see what the page is doing while it does it. Most teams improvise that from a spare VM and a folder of screenshots. We got tired of improvising.
