Download Sentinel

Warns for potentially harmful downloads.

This extension warns for potential harmfull downloads (archive file format or executable mime or file format) and check the reputation of the download URL at Virus Total when the user has entered his/her FREE Virus Total API key. The extensions shows a risk assessments and the user can either choose to cancel & go back or ignore & proceed option. When the download is unknown at VT, it offers an option to submit the download URL (not the download). When download URL is unknown at Virus Total, it checks whether the download domain is blacklisted at Quad9 and determines the age at RDAP. It also checks (using an internal list) whether the domain is a free hosting or code sharing domain often used to spread malware and checks whether the Top Level Domain is on much abused TLD list. It also checks whether the download-URL is sketchy (e.g. includes punycode, mentions well known brands or uses numbers for characters e.g 1 for l and 0 for 0) uses a different mime type than file format and exceeds VirusTotal size maximum (many Antivirus don´t check files which are to large). Open Source: https://github.com/Kees1958/DownloadSentinel