A Trellix team develops safety ratings by testing criteria for each site and evaluating the results to detect common threats.
Automated tests compile safety ratings for a website by:
Downloading files to check for viruses and potentially unwanted programs bundled with the download.
Entering contact information into sign-up forms and checking for resulting spam or a high volume of non-spam email sent by the site or its affiliates.
Checking for excessive pop-up windows.
Checking for attempts by the site to exploit browser vulnerabilities.
Checking for deceptive or fraudulent practices employed by a site.
The team compiles test results into a safety report that can also include:
Feedback submitted by site owners, which might include descriptions of safety precautions used by the site or responses to user feedback about the site.
Feedback submitted by site users, which might include reports of phishing scams or bad shopping experiences.
More analysis by Trellix experts.
The Trellix GTI server stores site ratings and reports.