Know when your site lands on a blocklist or picks up a strange script.
A daily or weekly scan that checks your domain and server against public reputation lists and inventories the scripts on your key pages, so you hear about a listing, an injected script or a hidden iframe before your visitors and customers do.
En resumen
Malware & blacklist scans each website on a schedule. It checks the domain and the addresses it resolves to against public reputation and safe-browsing lists, then fetches your home page and the pages it links to and records every script they load. Your opening scan sets a baseline. After that you are alerted when a script arrives from a domain the site has never used, when code looks obfuscated or carries crypto-miner signatures, when a hidden iframe appears, or when a third-party script's contents change. Approve the scripts you trust, ignore the noise, and get alerts in the notification bell, webhooks and Workflows.
Por qué Malware & blacklist
Cómo funciona
De la configuración a los resultados, paso a paso
- 01
Pick a schedule
Malware & blacklist is on for every website. Choose a daily or weekly scan, or switch the schedule off and scan when you need to.
- 02
Check the lists
Your domain and its server addresses are looked up on public reputation and safe-browsing lists, and each list's answer is recorded.
- 03
Inventory the scripts
We fetch your home page and the pages it links to, record every script with a fingerprint of its contents, and look for obfuscated code, crypto-miners and hidden iframes.
- 04
Review and approve
Your opening scan is your baseline. New script domains wait for you to approve or ignore them, and listings close once a list gives a clean answer.
Características
Dentro de Malware & blacklist
Blocklist checks
Your domain and server addresses checked against public reputation and safe-browsing lists, with the date each listing started and cleared.
Script inventory
Every script on your key pages recorded with where it loads from and a fingerprint of its contents. Your opening scan becomes your baseline.
New script domains
A script from a domain your site has never loaded before raises an alert until you approve or ignore it.
Obfuscation and miners
Code built from long encoded strings and eval chains, crypto-miner signatures and hidden iframes are flagged with the page they sit on.
Changed scripts
When a third-party script keeps its address but its contents change, you hear about it, since that is how many supply-chain injections start.
Alerts and Workflows
Listings, delistings and suspicious scripts reach the notification bell, signed webhooks and Workflows, on a daily or weekly schedule or whenever you run a scan.
Recorridos guiados
Un recorrido guiado te muestra Malware & blacklist
En el panel, haz clic en el icono de varita en el encabezado y elige el recorrido Malware & blacklist, o selecciona “Recorrer esta página”. Resalta cada parte de la página y explica qué hace, paso a paso.
Cómo funcionan los recorridos guiadosCasos de uso
Quién usa Malware & blacklist
Límites por plan
Malware & blacklist en cada plan
Los límites se aplican por web. Todos los planes incluyen Malware & blacklist.
| Límite | Starter | Growth | Scale | Pro | Enterprise |
|---|---|---|---|---|---|
| Pages scanned for scripts per scan | 5 | 15 | 40 | 150 | 500 |
| Manual scans per day | 1 | 3 | 6 | 12 | 24 |
| Scan history kept (days) | 30 | 90 | 180 | 365 | 730 |
| Daily scans | No | Sí | Sí | Sí | Sí |
Preguntas
Malware & blacklist Preguntas frecuentes
Which lists are checked?
Public reputation lists that allow automated lookups, queried over DNS, plus safe-browsing and malware URL checks where available. Results show each list's status and when it was last checked.
Does the scan change anything on my site?
No. Pages and scripts are fetched with an honest user agent, your robots.txt is respected for pages, and nothing is clicked or filled in.
Why is a script I added flagged as new?
Any script from a domain your site has not loaded before is flagged so a real injection can't slip through. Approve it once and scripts from that domain stop raising alerts.
Does a finding mean my site is infected?
Not always. Minified code can look obfuscated and some services change their scripts often. Each finding shows where it was seen so you can decide, and ignored scripts stop raising alerts.
What happens when a listing clears?
The listing closes on the next scan that gets a clean answer from that list, and a delisting alert goes to the notification bell, webhooks and Workflows.
Can I scan straight away?
Yes. Press Scan now on the Malware & blacklist page. Each plan includes a number of manual scans per day, with a short pause between them.
Find out before your visitors are warned away.
Open Malware & blacklist for a website and see what the opening scan finds.