Malware. Injected code. Blocklists. One scan.

Check Google Web Risk reputation and suspicious on-page patterns before they turn into reputation damage.

Is this your website?
  • See whether Google already lists your URL as dangerous
  • Catch hidden iframes, obfuscated scripts and crypto miners in the page
  • Find out before a browser warning tells your visitors first

Scan a page

Enter a URL to check Google’s threat lists and the page itself for signs of compromise.

Google Web Risk lookup

Queries Google’s Web Risk service for the URL across its malware, social engineering and unwanted software lists.

On-page indicators

Scans the delivered HTML for hidden iframes, silent meta-refresh redirects, obfuscated script calls, crypto-mining code and oversized encoded blobs.

Next steps per finding

A confirmed threat comes with what to do about it, including requesting a review once the page is clean.

Point-in-time record

Each scan is stored against the page, so you can show when a page was clean and when it changed.

Is this a full server penetration test?
No. It checks one URL’s reputation and the HTML that URL delivers. It does not scan your server, your files or your database.
What does a clean result prove?
That Google does not currently list the URL and that the delivered HTML shows none of the known compromise patterns. Malware that only fires for certain visitors or on other pages can still be missed.
What is checked in the page itself?
Hidden iframes, meta-refresh redirects, obfuscated script execution, known crypto-mining code and unusually large encoded blobs — the patterns injected code tends to leave behind.
My site was flagged. What now?
Remove the injected content first, then request a review through Google Search Console. Re-run the scan afterwards to record that the page is clean.

Every check runs on our servers: you provide a public URL, there is nothing to install, and pages are rendered with JavaScript first so single-page apps are read the same way a browser reads them. Each result gets a permanent link you can share. On a website you have claimed, findings become tracked issues, and result pages offer AI summaries and developer guidance on plans that include them.