In the previous part, we have seen KIMIDORI [ 黄緑] detect if a URL is malicious. In this part, we will see the details that KIMIDORI [ 黄緑] fetches out of the URL provided.
As an example, provided a safe URL, https://www.azuresys.com/, and let's see what it brings out:
As we can see, the link is safe and the link is active, which means we can just click on the link to open it on IE. Now it's time to look into the URL report (still under development):
Let's see if we get the same details for any bad (phishing / malicious) URL:
Took an URL example from a phishing link and tested it. The tool detected it as not a good link (Screen Shot Below) & link does not activate unlike a safe URL:
Now let's see the report part for more details including domain registration details:
It looks like it's a newly created short-living domain, possibly for a phishing attack. We will explore more features in the upcoming series (To be continued...).
Comments