Security & SEO

    Malware & Threat Detection

    Scan your sites for malware, phishing indicators, and blocklist status.

    Updated 2026-03-16
    2 min read
    malware
    virus
    threat

    Malware & Threat Detection#

    LemWatch checks your site against multiple threat intelligence databases to detect malware, phishing attempts, and blocklist presence.

    What Gets Scanned#

  1. Malware signatures — Known malicious code patterns in page source
  2. Phishing indicators — Fake login forms, credential harvesting scripts
  3. Blocklist status — Whether your domain appears on Google Safe Browsing, PhishTank, or other blocklists
  4. Suspicious scripts — Cryptocurrency miners, data exfiltration, or obfuscated code
  5. Iframe injections — Hidden iframes loading malicious content
  6. Severity Levels#

    LevelDescriptionAction
    🔴 CriticalActive malware detected or domain blocklistedImmediate remediation required
    🟠 WarningSuspicious scripts or potential phishing elementsInvestigate and verify
    🟢 CleanNo threats detectedNo action needed

    When Scans Run#

    Malware scans run as part of your regular site checks. The frequency depends on your plan:

  7. Free — Every 24 hours
  8. Pro — Every 6 hours
  9. Agency — Every hour
  10. Enterprise — Every 15 minutes
  11. What to Do If Malware Is Found#

  12. Don't panic — but act quickly
  13. Check the details — LemWatch shows exactly what was flagged and where
  14. Clean the infection — Remove malicious code, update plugins/themes, change passwords
  15. Re-scan — Run a manual check from LemWatch to verify the fix
  16. Request review — If blocklisted, submit a review request to Google
  17. Investigate root cause — Check for compromised credentials, vulnerable plugins, or outdated software
  18. Was this article helpful?