FAQ

Does Urlscore.ai indicate if a website is malicious?

Yes. Urlscore.ai assesses various criteria to evaluate the likelihood of a website being malicious. For instance, the age of the domain and any attempts to impersonate well-known brands are significant indicators. Our system is designed to identify potential threats by analyzing these and other factors.

How reliable are the website classifications and risk scores?

While our technology is advanced, it is not infallible. Please understand that we conduct multiple checks and calculate risk scores based on a weighted average of individual check results. However, the nature of websites varies greatly; for example, a login page might be legitimate on one site and part of a phishing scheme on another. It’s not always possible to distinguish these differences programmatically with absolute certainty.

If I upgrade my license, will I receive a refund for my previous payment?

Yes. If you upgrade your license, we will deduct the amount you’ve already paid for the used portion of your subscription. The refund amount is calculated as follows: Total Amount Paid minus (Daily Rate times Days Used).

How do scan tokens work?

Scan tokens are credits used within our app to perform a variety of checks on websites. Each check consumes a certain number of tokens, reflecting the resources and external services required for that check. You can customize your security checks by managing these tokens, with the option to prioritize certain analyses over others. Your subscription level dictates your token allocation per billing cycle. If needed, you can upgrade your subscription or purchase additional tokens to meet your scanning needs.

Tips for Efficient Token Use:

  • Prioritize your checks based on your specific security concerns.
  • Monitor your token consumption to manage your scan profiles effectively.

Can you create custom scan profiles?

Yes. Urlscore.ai allows the creation of multiple custom scan profiles tailored to various needs, such as detecting spoofing attempts, phishing websites, or examining server technologies. You have the flexibility to enable or disable specific checks, customizing your risk assessment process to match your requirements.

How does Urlscore.ai work?

Urlscore.ai employs over 30 different checks, including AI analysis of screenshots, examination of website source code, and URL analysis. All checks can be individually enabled or disabled to tailor the scanning process to your needs.

What do red flags mean in my scan profile?

Enabling the “Red Flags” feature for a check emphasizes its importance in the overall risk score calculation. If activated, the overall risk score will prioritize the highest risk score among the checks marked as red flags, highlighting critical issues more prominently.

Can I influence how the risk score is calculated?

Yes. You have control over the risk score calculation by assigning custom weights to each risk check, enabling or disabling checks, activating red flags, and choosing to include checks with a score of 0 in the average risk score calculation. This flexibility allows you to tailor the assessment process to your security priorities.

Can our organization use the API service and its data commercially?

Absolutely. The API is designed for various applications, including security products and Security Operations Centers (SOCs), enabling commercial use to suit your operational needs.

Does Urlscore offer different browser countries for testing?

Yes. You can select from different proxy locations for URL testing to circumvent geographical IP blocks that some sites implement, providing a more versatile assessment capability.

Do we actively scan the website for vulnerabilities?

No. Urlscore.ai is not a vulnerability scanner. Our method involves accessing web pages through a browser, analyzing source code, and consulting external blacklists, among other passive techniques, without performing active scans like a web vulnerability scanner.

What are the options Scan Tech, IP Info, DNS Enum, Website Links?

  • Scan Tech: Enumerates the technology stack of the webserver, including OS and plugins, based on page source and banners.
  • IP Info: Provides comprehensive data on the IP, including geolocation.
  • DNS Enum: Reveals if there are shared domains on the same server.
  • Website Links: Extracts all external links from a webpage, offering insights into the site’s external connections.

Does Urlscore have an API?

Yes, our RESTful API provides a flexible and powerful way to integrate Urlscore.ai’s capabilities into your applications and workflows. It supports a variety of operations, including URL checks, scan history access, and scan profile management, complete with documentation on methods, parameters, and example usage in popular programming languages.

How can you test scan a webpage?

  • Via Web Interface: Perform single scans easily through our graphical web interface, ideal for quick checks.
  • Via REST API: For automated processes and advanced use cases, our REST API allows seamless integration into your systems, enabling efficient and scalable scanning capabilities.

What accounts exist on Urlscore?

Urlscore.ai offers different account types to cater to various user needs:

  • Free Account: Suitable for personal or small-scale use, offering a basic number of scans.
  • Commercial Account: Ideal for businesses and frequent users, providing a larger quota of scans. Visit our Pricing page for detailed information on scan limits and pricing.

Do we perform intrusive scans?

No. Our approach focuses on non-intrusive testing methods, analyzing website headers, bodies, and data from reputable external sources without performing aggressive actions like port scanning or directory brute-forcing. This ensures a comprehensive assessment without compromising the target website’s integrity.

What’s the typical scan duration?

Scan duration depends on the selected tests:

  • Quick Tests: Custom scan profiles enable rapid assessments.
  • In-depth Tests: More complex analyses, such as AI-powered screenshot evaluations, may take longer. A scan could last up to 120 seconds with all options enabled, whereas fast scans may only take 5-10 seconds.

Website Scanner vs Urlscore.ai: Understanding the Difference

Website Scanner:

  • A website scanner is a tool designed to analyze websites for various security vulnerabilities and potential risks.
  • It typically conducts comprehensive scans of websites to identify issues such as malware, phishing attempts, outdated software, insecure connections, and other security weaknesses.
  • Website scanners often provide detailed reports on the vulnerabilities found, allowing website owners to take necessary measures to address these issues and fortify their online security.
  • These scanners are instrumental in helping website owners protect their sites and the visitors from potential cyber threats.

Urlscore.ai:

  • Urlscore.ai, on the other hand, focuses specifically on classifying URLs and evaluating the potential risks associated with visiting a particular website.
  • It utilizes a scoring system to assess the risk level of a given URL, thereby aiding in the determination of whether a website is safe for browsing.
  • Urlscore.ai’s API integration and webform allow for seamless access to its risk assessment capabilities, enabling users to incorporate its functionality into their own platforms and systems.
  • By assigning a risk score to URLs, Urlscore.ai empowers users to make informed decisions about the websites they visit, contributing to a safer online environment.

Key Distinctions:

  • While website scanners offer broader security assessments of entire websites, Urlscore.ai specializes in evaluating the risks associated with individual URLs.
  • Website scanners provide in-depth vulnerability reports, whereas Urlscore.ai focuses on assigning risk scores to URLs to facilitate quick risk assessment.

In essence, while both website scanners and services like Urlscore.ai share the common goal of enhancing online safety, they differ in their scopes and methodologies, with each serving as a valuable asset in the collective effort to ensure secure and protected web experiences.