How to Check Reported URL for Malware
Publicado · actualizado
If a user complains about HSS blocking a particular domain due to Malware and he wants that domain unblocked, we have to check the URL ourselves to see whether its safe.
Here is the process for doing that:
Scan URL on Virus Total
Select URL
Enter reported domain
Press Scan
Wait for results
Scan URL on Quterra
Go to http://quttera.com
Enter reported domain
Press Scan for Malware
Wait for results
Scan URL on SiteCheck
Enter reported domain
Press Scan Website
Wait for results
If any sources above return any negative results that is the reason the website is flagged by us as a threat and we block it as such.
You need to copy the URLs for sources that returned negative results and let the user know why the URL is blocked by including those links with your response.
If all sources above return clean results we have to file a request with Sophos to re-evaluate that domain and un-flag it.
To file a report with Sophos go here: https://secure2.sophos.com/en-us/threat-center/reassessment-request.aspx
Enter reported web URL
Select Sophos Web Alliance
Enter your name
Enter your email
Enter comment such as "Please reassess this url: Reported\_URL"
Click Submit
After that you need to inform the user that you have analyzed the URL and did not find anything wrong with it and that you filed a request to have that URL taken off the blocked list.