Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the URL in question like which engines tag a URL as bad, but the question of 'why' seems a bit unclear from these results. Is the URL involved in spreading a known malware ? If yes, what malware is it? And how does it affect the end client who visits such a URL? These are some of the questions I'm trying to get answers to. Are there resources / methods to get to know such additional information? Any help is appreciated, thanks.

share|improve this question
Hmm, setup a Vmware, install NoScript extenstion, and visit those websites and see exactly where it came from. (It just blocks every "script" to load until you allow it. if it's not a 0-day exploit you must be allowing something to run... like Java or something alose this/those lines... – SomeNickName Jan 10 '14 at 17:33

I have previously found wepawet and urlquery useful in the past. Both service analyze the website in question and give you some good detail about its features and behavior.

share|improve this answer

You can also use Anubis It provides a neat report showing all the activities of the Internet Explorer process when visiting this URL.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.