Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the URL in question like which engines tag a URL as bad, but the question of 'why' seems a bit unclear from these results. Is the URL involved in spreading a known malware ? If yes, what malware is it? And how does it affect the end client who visits such a URL? These are some of the questions I'm trying to get answers to. Are there resources / methods to get to know such additional information? Any help is appreciated, thanks.

share|improve this question
    
Hmm, setup a Vmware, install NoScript extenstion, and visit those websites and see exactly where it came from. (It just blocks every "script" to load until you allow it. if it's not a 0-day exploit you must be allowing something to run... like Java or something alose this/those lines... –  SomeNickName Jan 10 at 17:33
add comment

2 Answers 2

I have previously found wepawet and urlquery useful in the past. Both service analyze the website in question and give you some good detail about its features and behavior.

share|improve this answer
add comment

You can also use Anubis It provides a neat report showing all the activities of the Internet Explorer process when visiting this URL.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.