Knowledge Base

What does Site Protection monitor?

Your site is automatically set up to be monitored daily. Site Protection will run Malware, Whois Information, SSL, DNS, and Blacklisting scans and report any infections when they occur.

Explained here are the different types of monitoring:

Malware Monitoring

This identifies obfuscated javascript injections, cross site scripting, website defacements, hidden & malicious iframes, PHP mailers, phishing attempts, malicious redirects, backdoors, anomalies, drive-by-downloads, social engineering attacks, SEO blackhat spam, pharma hacks, conditional redirects and mobile redirects. To perform this malware monitoring, we use two types of scans: Remote Scans and Server Level Scans.

Server Level scans are included in our monitoring and clean up plans. The main difference between them is that the remote scanner checks what visitors see when they access your site and the server scanner checks what visitors can't see, scanning every single file on the site.

Whois monitoring

Whois is an internet directory that provides information on who owns a domain. It contains information about the Registrant (the person who owns the domain), the Registrar (the entity that registered the domain), dates, nameservers and other important information. With this monitoring option, you will be notified if that information regarding your domain changes.

SSL Certificate

If you are using Secure Sockets Layer (SSL), a secure protocol to transmit over HTTP, you are most likely using an SSL certificate. The SSL certificate is returned to a visitor of your site upon HTTPS request. This certificate often contains your site information and, in some instances, company information. With this monitoring option, you will be notified if this certificate changes unexpectedly.


DNS is a protocol used by all computers to intelligently communicate with each other. It turns a domain name (somesite.com, for example) into an internet protocol (IP) address like 123.45.567.891. The name provided by DNS is what we use as humans to read the site name, the IP is what the computers use to communicate.

This monitoring option will monitor the IP address and associated DNS information of your domain for any changes. It's rare for it to change, but if it does we will notify you.


There are a number of blacklisting authorities that monitor for malware, SPAM, and phishing attempts. Our blacklisting option uses their APIs and insures you'll know when your site is blacklisted by any of the following: Sucuri, Google, Norton, AVG, Phish Tank and McAfee SiteAdvisor.

Did you find this article helpful?

* Your feedback is too short