Website Free Malware and SEO Spam scanner.

Quick Start

Get your API key

Visit the pricing page to get a key. Keys look like this:

NOC-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Make your first request

Pass your key and the domain you want to scan as headers:

curl -H "API_KEY: NOC-YOURKEY" \
     -H "WEBSITE: example.com" \
     https://php-login.com/api/

Read the JSON response

You get back a full JSON result — malware detection, DNS blacklists, security headers, detected software and more.

Endpoint

Method: GET

https://php-login.com/api/

Required Headers

API_KEYYour API key

WEBSITEDomain to scan

cURL only. Browser requests return 403.

Request Examples

Basic scan

curl -H "API_KEY: NOC-YOURKEY" \
     -H "WEBSITE: google.com" \
     https://php-login.com/api/

Domain with https:// prefix — stripped automatically

curl -H "API_KEY: NOC-YOURKEY" \
     -H "WEBSITE: https://example.com/some/path" \
     https://php-login.com/api/

Save output to a file

curl -H "API_KEY: NOC-YOURKEY" \
     -H "WEBSITE: google.com" \
     https://php-login.com/api/ -o result.json

Headers are not case sensitive. API_KEY, api_key, and Api_Key all work the same way.

Response Format

All responses are JSON. Successful scans return status: success with full scan data.

{
    "status": "success",
    "requests_remaining": 99,
    "daily_limit": 100,
    "category": "Technology",
    "ip": { "142.250.80.46": "google.com" },
    "dns": { "blocked": 0, "failed": 0, "nxdomain": 0 },
    "http": {
        "hardening": { ... },
        "app_detection": { ... }
    }
}

Response Fields

Field	Description
`status`	success or error
`requests_remaining`	API calls left today
`dns.blocked`	Number of DNS resolvers blocking this domain
`dns.failed`	Number of DNS resolvers failing to resolve it
`http.malware`	Only present when malware is detected — contains signatures and payload
`http.hardening`	Missing or misconfigured security headers
`http.app_detection`	CMS, frameworks, and software detected on the site

Error Responses

Missing headers

{ "status": "error",
  "reason": "Missing API_KEY or WEBSITE header." }

Invalid key

{ "status": "error",
  "reason": "Invalid or inactive API key." }

Rate limit hit

{
    "status": "error",
    "reason": "Daily request limit reached.",
    "requests_remaining": 0,
    "resets_at": "2026-03-21 00:00:00 UTC"
}

Invalid domain

{ "status": "error",
  "reason": "Invalid domain name." }

View Pricing