I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the URL in question like which engines tag a URL as bad, but the question of 'why' seems a bit unclear from these results. Is the URL involved in spreading a known malware ? If yes, what malware is it? And how does it affect the end client who visits such a URL? These are some of the questions I'm trying to get answers to. Are there resources / methods to get to know such additional information? Any help is appreciated, thanks.

  • Hmm, setup a Vmware, install NoScript extenstion, and visit those websites and see exactly where it came from. (It just blocks every "script" to load until you allow it. if it's not a 0-day exploit you must be allowing something to run... like Java or something alose this/those lines... – SomeNickName Jan 10 '14 at 17:33

I have previously found wepawet and urlquery useful in the past. Both service analyze the website in question and give you some good detail about its features and behavior.


You can also use Anubis It provides a neat report showing all the activities of the Internet Explorer process when visiting this URL.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.