From the course: How to Conduct a Phishing Email Investigation

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

URL and IP analysis

URL and IP analysis

- [Instructor] Uniform resource locators, URL Investigations, typically involve examining a URL to determine its legitimacy and if there are any potential risks associated with visiting that website. Before using these resources you should analyze the URL yourself. Start by manually inspecting the URL. Check for any misspellings, the HTTPS prefix, extra characters, or any other anomalies that may indicate a fake or malicious URL. Then use an online tool, VirusTotal, AbuseIPDB, and URLscan are three resources you should have in your arsenal. These are where the cybersecurity community have recorded their verdicts. So, let's start with VirusTotal. Scanning the IP address on VirusTotal not only returns the results of the scan and the malware's classification but additional information in the details tab has other data like its behaviors, community reports, and other related items. Tip one, always refresh the scan…

Contents