Website Malware Scan: Check If Your Site Is Hacked

Website Malware Scan Tools

1. Run Google’s Safe Browsing Transparency Report
   

   As Google indexes the web, it also spots malware and reports the site as unsafe. They provide a tool that allows you to check if your domain has been listed as dangerous. Go to Google’s Transparency Report and enter your site to see if your listed. You will also see the last time Google checked.

2. Check VirusTotal
   

   I love this surprisingly little known site! VirusTotal taps into 70 antivirus scanners and domain blacklisting services. This free service is so good, it was bought by Google in 2012. Go to VirusTotal and enter your URL. But don’t stop there! Most likely your site may not have been scanned today, so you should click the “Reanalyze URL” button (upper right). You’ll get results within a few moments.

3. Check Norton Safe Web (and claim your site!)
   

   Norton Safe Web is a reputation service through Symantec, the world’s largest civilian threat intelligence network. If you’re listed here, they will provide you a list of files on your site which tried to infect Norton visitors. It even will tell you what malware and when. IMPORTANT TIP! Even if you are not listed here you should take a moment and claim your site as a site owner. It is free and will help legitimize your site with all visitors who use Norton products on their computers.

4. Search SCUMWARE.org
   

   Although primarily for security and malware researchers, you can use SCUMWARE.org’s search to check your domain or IP. Note, you will have to enter a code to get virtual credits to allow you to complete a search. If you’re listed with them, you will get location and malware information. One word of caution. They also provide a way to download the malware package. You do not want to do that. Leave that for the researchers. Just use their tool to check if you are listed.

5. Check MalwareURL
   

   We mentioned VirusTotal earlier but MalwareURL also checks a few other sources including Wepawet, Anubis and Threat Expert. Their down and dirty check is quick and easy. Go to their Verify Website Security Status page and enter your domain or IP.

6. Realtime Blackhole List (RBL) Check at Anti-Abuse.org
   

   Your site, or a site on your shared server, could be spewing spam which will get your IP listed on an RBL. Check if you’re on the RBL at Anti-Abuse.org. Although it won’t tell you what or where the malware is, it is an indication of malware or a compromise of some sort.

7. Use A Free Website Malware Scanner
   

   There are several free website malware scanners available online. What they scan for and their accuracy varies. Some may force you to provide contact information to get your results. Our scanner is completely free, no signup required. So give ours a try.