Prorootect

Level 53
Verified
.
Free Online On-demand URL Security Scanners, link tests / checkers effective only (so efficient also) ..


New and effective:
* Quttera: http://www.quttera.com/

Quote:
'Web Investigation System WIS (Alpha) is a free web-site and URL scanner service that uses "Quttera" exploit detection engine to investigate a URL and to ensure it does not contain malware or any suspicious data behind the valid HTML, Java Script, PDFs, images and other web site components.
Due to a temporary limitations, currently we support submission of domain names only.
Engine version used 2.5.4.1606'

'Quttera is a non-signature behaviour based investigation engine. Current engine version is capable to recognize and detect:
•software vulnerability exploits and shellcodes for x86 architecture
•malicious JavaScript code
•malicious executable code hidden in media files(movies, images and e.t.c...)
•malicious executable code hidden in PDF files.'

Quttera developer posted on Sysinternals malware forum - Post 4 (from November 3, 2011) here: http://forum.sysinternals.com/topic22045.html
Quote:
'Guys,
We just brought up our new URL investigation system at
http://www.quttera.com
Your feedback is appreciated.
Thanks a lot.'

It's very good. I like this Quttera, because it finds!

* Zulu URL Risk Analyzer: http://zulu.zscaler.com/ - Submit a URL for Inspection - and you have quickly the detailed results! A NEW indispensable tool, by ZScaler very professional team.

QUOTE:
'Zulu .. provide a simple and straightforward interface accessible to anyone regardless of security knowledge.'
'Zulu .. requires no additional input beyond the UI to be analyzed, while allowing a few necessary advanced options, (User-Agent and Referer) when encountering malware triggered only when certain input variables are met. Results also display an overall ranking of Benign, Suspicious or Malicious, but also include details of elements that went into the overall score.'
Zulu 'can deliver a risk score even when the page content is no longer available.'

- A beautiful indispensable tool, tested by me of course. So Welcome Zulu.

* WAVE: Web Accessibility Evaluation Tool: http://wave.webaim.org/

Quote:
'Rather than providing a complex technical report, WAVE shows the original web page with embedded icons and indicators that reveal the accessibility of that page.'

It's very good.

* URLVoid by NoVirusThanks.org: http://www.urlvoid.com/

- Scan Websites for Exploits, Malware, and other Malicious Threats - Check Reputation of Domains and Subdomains - it's indispensable.
NoVirusThanks on Tweeter: http://twitter.com/novirusthanks

* F-Secure Browsing Protection: http://browsingprotection.f-secure.com/swp/?x=pA5UCNjtCqgJSX12LHExug - effective, it find.

* Norton Safe Web: http://safeweb.norton.com/?ulang=eng

* Trend Micro Site Safety scanner: http://global.sitesafety.trendmicro.com/ - Also very effective this one (but FP sometimes..)

* SURBL Lookup: http://george.surbl.org/lookup.html - lists of malware websites!

* NictaTech Software - Website is safe? : http://www.nictasoft.com/ace/url-search/

* AVG Threat Labs - Web Site Reports : http://www.avgthreatlabs.com/sitereports/

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''""""""""""""""""""""""""
Added (April 23, 2012): AVG Threat Labs - Web Site Reports

Added (February 8, 2012): NictaTech Software - Suspicious files (click on Submit URL) (see above)

Added (January 29, 2012): Zulu URL Risk Analyzer, and Norton Safe Web (see above)

Added (December 30, 2011: SURBL Lookup (see above)

Added (December 22, 2011): F-Secure Browsing Protection scan (see above)

Added (December 17, 2011):

* URLVir.com Scanner (domain scan) by NoVirusThanks: http://urlvir.com/ - 'Automatically monitors changes of malicious urls'.

* VirusTotal / click on 'Submit a URL' button: http://www.virustotal.com/ - hmm.. AVs scan results ..

* And this gem: View HTTP Request and Response Header: web-sniffer.net: http://web-sniffer.net/ - and not forgot the IE8 Developer Tools (click Tools in IE, please) and IE right-click: View Source!

* ScamAdviser.com : http://www.scamadviser.com/ - check if a website is fake or a scam .. if dodgey .. check the risk in %

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''


- Also it's good idea to test your suspicious links - in a website URL link screenshot online service like these I have carefully chosen:

* Shotbot: http://www.shotbot.fr/index.en.php

* IE NetRenderer: http://netrenderer.com/ (if no snapshot - so your link is very suspicious ..)

* thumbalizr: http://www.thumbalizr.com/index.php

* URL2PNG: http://url2png.com/

* loads.in: http://loads.in/ (if no snapshots - so your link is very suspicious ..)

* ShrinkTheWeb: http://www.shrinktheweb.com/

* BrowserShots: http://browsershots.org/
..

PS. For now, I've found nothing new that could fall within the category 'effective', sorry.



''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
.
 
Last edited:
  • Like
Reactions: Wendra

McLovin

Level 73
Verified
Trusted
Malware Hunter
RE: Free Online On-demand URL Security Scanners

I heard of the Trend Micro one before when I've been doing beta testing for them. Nice list.:)
 
  • Like
Reactions: Wendra

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

.
Added in the first post above:

* VirusTotal / click on 'Submit a URL' button: http://www.virustotal.com/ - hmm.. AVs scan results ..

* And this gem: View HTTP Request and Response Header: web-sniffer.net: http://web-sniffer.net/ - and not forgot the IE8 Developer Tools (click Tools in IE, please) and IE right-click: View Source!

Also it's good idea to test your suspicious links - in a screenshot online service like these I have carefully chosen:

* Shotbot: http://www.shotbot.fr/index.en.php

* IE NetRenderer: http://netrenderer.com/ (if no snapshot - so your link is very suspicious ..)

* thumbalizr: http://www.thumbalizr.com/index.php

* URL2PNG: http://url2png.com/

* loads.in: http://loads.in/ (if no snapshots - so your link is very suspicious ..)

* ShrinkTheWeb: http://www.shrinktheweb.com/

* BrowserShots: http://browsershots.org/


EDIT: Added:
URLVir.com Scanner (domain scan) by NoVirusThanks: http://urlvir.com/search/ - very good!
 
Last edited:
  • Like
Reactions: Wendra

jamescv7

Level 61
Verified
Trusted
RE: Free Online On-demand URL Security Scanners

Good list, also Comodo Site Inspector will be likely include on the beta Comodo DNS.
 

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

.
Hmm .. Comodo Site Inspector start scanning a Webpage .. then I click on the 'Start the scan' nice button .. Scanning .. Task Status: started .. I attend, attend ..
Results: 'NO malicious activity or malware detected.' Green. 'This Page has been scanned 2 times in total.' And each time the result is: 'Safe'.

But my link is NOT safe, sorry. My IE8's SmartScreen confirm, that it's not safe, my link .. And me also, I did this link not safe. Because after user's click, it download :dodgy: The VIRUS.

.. another link in Comodo Site Inspector (malware link): and it says: 'This is an inconclusive result. Page not found.' Maybe, maybe ..

.. another: 'can't resolve domain'.
.. another: 'This is a suspicious page'. Aaaa ..
.. another: 'incorrect URL format' (but yes, I have http://www. ..).

Viva Zapata! (?..)

So Comodo Site Inspector, it needs improvements in order to put under the list of 'only effective', sorry. And I have nothing against Comodo Team - on the contrary!
.
 
  • Like
Reactions: Wendra

McLovin

Level 73
Verified
Trusted
Malware Hunter
RE: Free Online On-demand URL Security Scanners

Trend Micro has a good Web filter, and there URL scanner is great too.
 
D

Deleted member 178

RE: Free Online On-demand URL Security Scanners

For me if I website don't attack my system directly, it is safe ( for me ). Even if its content is not safe.
 

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

@umbrapolaris,
'For me if I website don't attack my system directly, it is safe ( for me ). Even if its content is not safe.'

- Of course, (personally I think also the same), but when I post in a public forum, I think about these others who could click where they do not need ..
 
  • Like
Reactions: Wendra

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

Free Online On-demand URL Security Scanners, link tests / checkers - topic here ..

F-Secure Browsing Protection scanner - link added in the first post.
 
  • Like
Reactions: Wendra

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

SURBL Lookup - blacklists of malware websites - added in the first topic's post.

It is not bad ..
 
  • Like
Reactions: Wendra

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

.
* NEW indispensable URL analyzer, now by ZScaler team: Zulu URL Risk Analyzer: http://zulu.zscaler.com/ - Submit a URL for Inspection - and you have the detailed results! A indispensable tool. Added in the first topic's Post.

Read about Zulu: on Zscaler blog here: http://research.zscaler.com/2012/01/introducing-project-zulu.html

QUOTE:
'Zulu .. provide a simple and straightforward interface accessible to anyone regardless of security knowledge.'
'Zulu .. requires no additional input beyond the UI to be analyzed, while allowing a few necessary advanced options, (User-Agent and Referer) when encountering malware triggered only when certain input variables are met. Results also display an overall ranking of Benign, Suspicious or Malicious, but also include details of elements that went into the overall score.'
'With Zulu, we sought to combine our own proprietary scanning techniques, with the great open source intel. that is available, to provide a broad view of the overall risk posed by virtually any web resource. We also look not just at a specific aspect of the resource, but instead, separately focus on determining risk for the content, URL and host separately, which is then combined into an overall risk score. For each component, we employ the following approaches:
Content – Page content is scoured for the inclusion of potentially malicious code leveraging proprietary Zscaler algorithms, conducting heuristic tests and querying public sources.
URL – The requested URL is tested against known suspicious/malicious patterns, public black/white lists, as well as historic risk assessments for subdomains, domain TLDs, file types, etc.
Host – Historic reputations of the host IP address, Anonymous System Number (ASN) and geographic location are analyzed, along with suspicious behaviors displayed by the host in question.
'A unique benefit of this approach is that we can deliver a risk score even when the page content is no longer available.'

- A beautiful indispensable tool. So Welcome Zulu.
I've tested it - it find 100% malware URL's, and presented with detailed description for each one.

EDIT: Sorry Jack - I see you talked about ZULU some days ago, in Malware Talk here: Zscaler launches free-to-use URL scanning service: http://malwaretips.com/Thread-Zscaler-launches-free-to-use-URL-scanning-service



* Norton Safe Web: http://safeweb.norton.com/?ulang=eng - is very good, so added in the first topic's Post.


* He spoke well of me (about this topic - Free Online On-demand URL Security Scanners): Claus Valca on his well known blog: grand stream dreams: Interesting Malware in Email Attempt - URL Scanner Links: http://grandstreamdreams.blogspot.com/2012/01/interesting-malware-in-email-attempt.html - thank you so much Claus Valca, it's sweet of you!
- I take this as an encouragement to continue my investigations ..
.
 
Last edited:

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

Thank you Valentin N - and sorry, because I have not paid attention to your topic, I do not notice this.
I think your links are a bit mixed: file scanner, link scanner, and software like Gmer, sysinternals tools .. It's true that all these are Analyzing tools.

In this topic I describe URL online scanners only, efficient and effective.
 

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

New version of URLVoid v2.0 BETA2 - thank you James! Link in the first topic's post, please.
 
  • Like
Reactions: Wendra

Prorootect

Level 53
Verified
RE: Free Online On-demand URL Security Scanners

.
Yeah .. thank you James.

For my infected links, Online Link Scan responds:
'This site is safe .. secure .. No Threat Found.' - so this scanner is bad:(.

Others are blacklist scanners, OK. ..