Source code
Source Code & Malware Scanning
Malicious code rarely announces itself. It is usually a single line appended to the bottom of a page: it redirects your visitors elsewhere, siphons form data, or only shows itself to users from certain countries. Specula pulls your published source code at regular intervals and compares it against known malicious signatures and suspicious behavioural patterns.
Unwraps hidden redirects
Decodes base64-obfuscated, time-delayed, and conditionally triggered redirect links so they cannot hide behind encoding.
Diffs every scan against the last
You get the delta. If a script appears that you did not add, the alert fires the moment it lands.
Alerts with the evidence attached
The alert names the file, the line number, and the suspicious code itself. No hunting for where to look.
11 <script src="/assets/app.js"></script>12 <script>window.__cfg = { locale: "tr" };</script>13 <script src="//cdn.trackr-xyz.io/a.min.js"></script>14 </body>
Other features
Run this check on your own domain.
Add a domain and Specula finishes the first scan within minutes. No credit card needed.