Overview
VirusTotalScan is an automated web identity associated with VirusTotal.
It is used for visiting URLs submitted for VirusTotal analysis.
The documented User-Agent pattern is VirusTotalScan. User-Agent strings can be copied, so corroborate requests with operator documentation, network ownership, reverse DNS, or other request evidence.
Identity
- User-Agent
VirusTotalScan- HTTP Agent Examples
Mozilla/5.0 (compatible; VirusTotalScan/1.0; +https://www.virustotal.com)- Identity Type
- User Agent
- Evidence Method
- Match the documented User-Agent pattern VirusTotalScan, then corroborate it with operator documentation, network ownership, reverse DNS, or other request evidence. User-Agent strings alone do not prove identity.
Classification
- Type
- Security
- Kind
- Scanner
- Family
- VirusTotal
- Purpose
- url-scanning
Behavior and handling
- Common Use
- visiting URLs submitted for VirusTotal analysis
- Detection Notes
- Detect candidate VirusTotalScan traffic using the documented User-Agent pattern VirusTotalScan. Confirm the identity with supporting evidence before enforcement.
- Respects robots.txt
- Unknown
- Spoofing Risk
- VirusTotalScan can be impersonated because its User-Agent pattern can be copied. Treat the identity as confirmed only when supporting evidence matches.
- Risk
- Neutral
- Recommended Handling
- Depends
Rules and controls
- Robots.txt Snippet
# robots.txt behavior is unconfirmed. Do not rely on this rule without verification.