SiteInspector free web version

[Guest]

[SiberLynx]

During this scan SI didn't get web-content, because of redirect loop. So, it can't say what this URL is a "High Risk".

But this URL are in the black list, so it's probably was unsafe in the recent past and can be unsafe again in a future. In such cases SI sets a "Medium Risk" status.

Currently, SI sets  a "High Risk" only in the cases of malicious activity found or direct links to malware files.

Hi vadim ,

After all that was posted here, your input was just confusing ... "more than ever" as they use to say here
I am sure that some advanced users will get  some sense out of it

,... but it would be highly appreciated if you would clarify what that suppose to mean to the "ordinary user"

I hope that Comodo will not deploy this kinda blurry answers ... getting to be a pattern here lately... unfortunately

Cheers!     

[vadim]

Hi vadim ,

After all that was posted here, your input was just confusing ... "more than ever" as they use to say here
I am sure that some advanced users will get  some sense out of it

,... but it would be highly appreciated if you would clarify what that suppose to mean to the "ordinary user"

I hope that Comodo will not deploy this kinda blurry answers ... getting to be a pattern here lately... unfortunately

Cheers!     

Hi SiberLynx

I've posted a comment to a question about one of report.  I am sorry if it's not an understandable.
So, I try to explain this question in other words.

SI uses a different mechanisms and sources for detection of malicious web-pages. In some cases SI can identify malicious activity exactly ("High Risk" reports), but in the other cases not exactly ("Medium Risk" reports).

For example, some web-page returns dangerous code, but not for each user requests, only for some of them (e.g. selected by geo-zone). When SI scans such page it can get redirect to other page ("Inconclusive" report) or get safe web-content ("Safe" report). But SI also uses different black lists and if this web-page was found in there SI generate "Medium Risk" report.

SI in the current version, detection mechanisms can detect the several URL statuses, based on the different results:


- Inaccessible - URL is inaccessible.
- Inconclusive:

• Redirected - URL is redirected to another domain.
• Unavailable - requested page is not available.

- Safe - no malicious code, files or activity detected.
- Medium risk:

• Suspicious - the page performs actions that are unusual.
• Hosts Malware - the page hosts malware files.
• Blacklisted - the page has been blacklisted.
• Suspicious IP match - the page are hosted on the unsafe IP.

- High risk:

• Malicious - the page contains an active exploit which tries to infect the users computer or dangerous scripts that may attack a browser.
• Malware file - direct link to malware file.

[wasgij6]

thanks for the explanation. keep up the great work. SI is amazing

[Arkangyal]

kkk... out with it, where is your LIKE button?! ^^

[SiberLynx]

kkk... out with it, where is your LIKE button?! ^^

kkk... who's "LIKE button?!"

What we are suppose to LIKE ^^ , Arkangyal     Cheers!

[trscsaeg]

add site inspectore to virus total by following the link

http://www.virustotal.com/faq.html

you will see this at the bottom of the page

"I would like to include my antivirus engine/URL analysis engine in VirusTotal, what should I do?
The process could not be easier, just contact us at info[at]virustotal.com. We will tell you what we need.

In exchange for providing an antivirus engine you will receive all files submitted to VirusTotal that are not detected by your product and are detected by at least one other antivirus, along with their corresponding VirusTotal reports.

In exchange for allowing us to use a URL analysis engine you will receive the whole feed of URLs submitted to VirusTotal, along with their corresponding VirusTotal reports."

[GOA]

Can SI detect only malware but no spam or phishing-links ?

[morphiusz]

It can, it uses few black lists.

[Tags:]