Frequently Asked Questions

How can I use this service to scan a website ?

Simply write the website address in the input box and click the button "Scan Now".

What is the scanning time needed to generate a report ?

Generally a report is generated in 20 seconds but it can take up to 30 seconds.

How do you generate the result for MyWOT Web of Trust ?

We show a website as detected if the reputation rating is less or equal to 50 (reputation suspicious), this can include all websites that have adult content and that have at least one reputation rating classified as suspicious.

Do you take care of comments of users in MyWOT Web of Trust ?

At the moment no since this could generate more false positives we prefer to list only websites classified by their engines scan reports.

How do you show a website as detected with Project Honey Pot engine ?

We check the IP Address of the domain in Project Honey Pot with the following rules:

  • a) It was last seen less than 30 days ago
  • b) It is not a search engine
  • c) It has a threat type different than "suspicious"
  • d) It has a threat score higher than 6

How do you generate the result for the other scan engines ?

We show a website as detected only if the site has been classified as dangerous.

How do you rate a website as suspicious ?

If the website is detected by at least 2 engines it is listed as suspicious else if it is detected by more than 2 engines it is listed as dangerous.

How do you rate a website as clean ?

If the website has been classified as safe or if it has not yet been tested by the engines it is listed as clean.

Can I scan also IP Addresses ?

No, this service only scan for domains and subdomains. Use IPVoid.com to scan IP Addresses with multiple services.

How often can I rescan the same website ?

We cache reports of a scan for 1 day, after, if you will rescan the website, its report will be updated. This is done to avoid the scan of the same website for too many times in the same day and to not stress the engines in use.

What is the Domain Hash in the report ?

It is the md5 hash of the domain name, example: the hash of "domain.com" is 5ce448a6d172a47da4d62813c7029160.

My website is listed as detected in the scan report, what can I do ?

You should check the website of the scan engine(s) where your website is listed as infected and see what there is wrote in their report. We can not unlist your website from the scan engine(s) present in our service, you will have to contact them by yourself and you can ask for a removal.

My website is infected with evil code, what can I do ?

In this case we can suggest you to follow these instructions:

  • 1) Contact the server Admin and explain your situation
  • 2) Analyze all the files to find malicious code
  • 3) Clean the infected files removing the malicious code
  • 4) Upload the clean files in the website
  • 5) Change username and password to the FTP Account
  • 6) Change username and password to the Email Account
  • 7) Change username and password to the SSH Account
  • 8) Change username and password to the Blog/Forum/CMS Account
  • 9) Check your PHP files for possible vulnerabilities
  • 10) Check your MySQL backups for possible injected code
  • 11) Update all the installed software (blog, forum, etc)
  • 12) Remember to never make backups from the remote server to your PC
  • 13) Use always local backups for restore files in the remote server
  • 14) Analyze your server's logs to find info regarding the hack

How can I clean infected files from my website ?

If you want to clean the infected files, you need to find the malicious code (generally inserted at the end of the files or mixed with the code in the middle of the text) and then you can remove the infected code. If all the files of your website are infected, you can write a script in bash or php that can recursively scan all files of your website and find + delete the malicious code.

How can I know if my website is infected ?

There are various symptoms that help you to understand if your website has been hijacked and if it contains malicious code or hidden redirections:

  • 1) Your website takes longer to load web pages
  • 2) Unknown popups or alerts messages are show up when you browse your website
  • 3) When you visit your website you are redirected to other (unknown) websites
  • 4) Antivirus alerts you when you browse your website
  • 5) Your website is listed in scan reports present in our service
  • 6) Users notify you they are redirected to other sites from your website
  • 7) Users notify you they receive massive popups or security alerts in your website
  • 8) You notice a drastic decrease of users that come from search engines
  • 9) You notice unknown code (mostly javascript/iframes) in your website

How can I report a dangerous website to Google ?

Fill this form to report a website that you suspect contains malicious software.

How can I check if a site is a scam ?

When you are going to buy something through the web from an unknown site you never know if the site is safe to buy from or if it is a scam. In periods when shopping is the king, such as in Christmas Days, there are always thousands of fake shopping websites that try to sell things at very low costs and in real are a scam. Domain name scams are also very popular and you can check the domain of the "company" that try to get your attention with "special offers" about your domain. You can search useful queries on Google that will help you to better identify a website as a potential scam, for example: "domain.com scam", or "domain.com fraud", or "domain.com hoax".

Analysis

Services

Tools

Software