Systems, computer program products, and methods are described herein for improving cybersecurity by using webpage rendering telemetry to detect webpage anomalies. The present invention is configured to identify at least one electronic communication, wherein the at least one electronic communication comprises at least one electronic link; route the at least one electronic communication to a cybersecurity analyzer sandbox; construct, by a cybersecurity analyzer sandbox, a webpage rendering based on the at least one electronic link; collect, by the cybersecurity analyzer sandbox, at least one webpage telemetry data; collect, by the cybersecurity analyzer sandbox, at least one webpage rendering type data; identify at least one baseline webpage rendering; apply at least one of the at least one webpage telemetry data or the at least one webpage rendering type data and the at least one baseline webpage rendering to a webpage anomaly detection model; and generate a cybersecurity score.