Check a Sketchy URL: Is it Malicious?

TL;DR

You’ve visited a website you suspect might be dangerous. This guide shows you how to check if it’s an attack site using free online tools and your browser’s built-in security features.

1. Understand the Risks

Sketchy URLs can lead to several problems:

• Malware Downloads: The website might try to install viruses or other harmful software on your computer.
• Phishing: It could be a fake login page designed to steal your username and password.
• Scams: You might be tricked into giving away personal information or money.

2. Use VirusTotal

VirusTotal is a free service that analyzes URLs and files for malware using many different antivirus engines.

1. Go to https://www.virustotal.com/gui/home/url
2. Enter the URL you want to check in the search bar and press ‘Search’.
3. Review the results. If multiple antivirus engines flag the site as malicious, it’s very likely dangerous.

Example: Entering http://example.com (a harmless example) will show a report with scan details.

3. Check with URLScan.io

URLScan.io provides detailed information about websites, including screenshots and network traffic analysis.

1. Go to https://urlscan.io/
2. Enter the URL in the search bar and press ‘Search’.
3. Examine the results for suspicious redirects, JavaScript code, or other unusual activity.

Example: Look at the ‘Screenshots’ tab to see what the website looks like, and the ‘Network’ tab for connections it makes.

4. Use Your Browser’s Security Features

Most modern web browsers have built-in security features that can warn you about dangerous websites.

• Google Chrome: Chrome will display a warning page if it detects a malicious site. You can also manually check the safety of a website by clicking the padlock icon in the address bar and selecting ‘Show certificate’.
• Mozilla Firefox: Firefox uses its own reputation system to block known malicious websites. It will show a warning page if a site is flagged as dangerous.
• Microsoft Edge: Similar to Chrome, Edge provides warnings for unsafe sites and allows you to view website certificates.

5. Check the URL Carefully

Look for these red flags:

• Typosquatting: The URL is a slight misspelling of a legitimate website (e.g., gooogle.com instead of google.com).
• Unusual Domain Extensions: Be cautious of URLs with uncommon domain extensions (e.g., .xyz, .top) unless you know the site is trustworthy.
• Long and Complex URLs: Suspicious URLs often contain long strings of random characters.

6. Use a Website Reputation Checker

Several websites offer reputation checks based on user reports and blacklists.

• ScamAdviser: https://scamadviser.com/
• IsItSafeToClick: https://isitsafe2click.com/

These tools provide a score and analysis of the website’s trustworthiness.

7. What to Do If You Think You’ve Been Compromised

1. Run a Full System Scan: Use your antivirus software to scan your computer for malware.
2. Change Your Passwords: Change the passwords for any accounts you accessed while on the suspicious website, especially important ones like email and banking.
3. Monitor Your Accounts: Keep an eye on your bank statements and credit reports for any unauthorized activity.