Website Malware and SEO spam Scanner

Free website malware and SEO spam scanner.

95%
Health

x.com

172.66.0.227, 162.159.140.229  ·  Scanned 2026-07-26 10:58:30
0 critical 2 warning 7 good 2 of 3 free scans left
StatusOnline
HTTP status code200
Response time183 ms (Fast)
ProtocolHTTP/2
HTTPS availableYes
Forces HTTPS (redirects http→https)Yes visiting http:// forwards to https://
DNS & reachability
Resolves to1 IPv4 · 0 IPv6 (single A record — no DNS failover)
IPv6 (AAAA record)No
www vs non-wwwBoth work, same canonical
Routing
RedirectsNone (direct)
Content checks
Fake URL handlingSoft 404 fake URLs return 200 instead of 404
Parked / for-sale pageNot parked
Connection timing breakdown
DNS lookup1 ms
TCP connect2 ms
TLS handshake8 ms
Server processing171 ms
Content transfer1 ms
SSL / TLS Certificate
Certificate presentYes
Trusted & validYes
IssuerLet's Encrypt
Issued tox.com
Also covers (SAN)*.live.x.com, *.watch.x.com, *.x.com, cdn.syndication.x.com, click.send.x.com, x.com
Expires2026-08-26 (30 days)
TLS versionTLSv1.3
CipherTLS_AES_256_GCM_SHA384 Strong
Security Headers (8 ok · 2 weak · 0 missing)
HeaderStateDetail
strict-transport-securityGoodmax-age=631138519; includeSubdomains
content-security-policyWarningCSP contains 'unsafe-inline' which weakens XSS protection
x-frame-optionsGoodSAMEORIGIN
x-content-type-optionsGoodnosniff
referrer-policyGoodstrict-origin-when-cross-origin
permissions-policyMissingPermissions-Policy not set — no restrictions on browser feature access
x-xss-protectionGood0
cross-origin-opener-policyGoodsame-origin-allow-popups
cross-origin-resource-policyGoodsame-origin
cross-origin-embedder-policyOptionalNot set — optional; needed only for full cross-origin isolation
set-cookieGoodAll cookies set HttpOnly, Secure and SameSite
serverInfoConsider hiding or genericizing this header

No malware signatures matched. The scanned HTML, scripts and links are clean.

No SEO spam, cloaking, hidden links or pharma injection detected.

DNS Blacklists (0 of 5 blocking)
Domain Age & Registration
Domain age33.3 years (12168 days)
Registered1993-04-02
Expires2034-10-20 (3008 days)
RegistrarGoDaddy.com, LLC
WHOIS privacyYes
GDPR riskLow
Analytics presentNo
Advertising trackersNo
Session-recording / fingerprintingNo
Privacy policy linkYes
Cookie consent bannerNo
Page HTML size34.2 KB
Server response time183 ms
Compression (gzip/br)Yes
Minified HTMLYes
Browser caching headersNo (max-age 0s)
Total scripts5
External scripts1
Render-blocking scripts1
Stylesheets1
Images0
  • 1 render-blocking script(s) in <head> — consider async/defer
  • No browser caching headers detected — repeat visitors re-download all assets

No fingerprintable technologies were detected.

External scripts referenced1
Stylesheets referenced61
IP address(es)172.66.0.227, 162.159.140.229
CountryUnknown
Site categorySocial Network
Neighbour domains on the same host
WebsiteIP address
dc.cftls.t.co.dc.cftls.t.co.cdn.cloudflare.net.
na.cftls.t.co.na.cftls.t.co.cdn.cloudflare.net.
global.cftls.t.co.global.cftls.t.co.cdn.cloudflare.net.
global.cftls.t.co.cdn.cloudflare.net.162.159.140.229
na.cftls.t.co.cdn.cloudflare.net.162.159.140.229
dc.cftls.t.co.cdn.cloudflare.net.162.159.140.229
cf.twitter.com.162.159.140.229
cf.x.com.162.159.140.229

How this tool works?

This tool will scan your website URLs and look for the presence of malware injected on it. It will also look for SPAM seo and other signs of a compromise. We will check multiple blacklists to verify if any of them has the site listed as malicious.

What do we look for?

Spam SEO
Spam Links
Adult content
Gambling and Pharma injection
Iframe injections
Javascript injections
Malicious ads
Fake-AV redirections