Review scripts considered malicious

In the list of scripts displayed in the Active Scripts dashboard, detected scripts considered malicious appear at the top of the list, so that you can quickly identify those scripts, review them, and take action.

To review the scripts considered malicious:

1. Log in to the Cloudflare dashboard Open external link , and select your account and domain.

2. Go to Security > Page Shield.

3. Under Active Scripts, click Details for each script considered malicious. The script details will contain:

   • Malicious Code: Whether Cloudflare’s internal systems consider the script malicious or not, and what is the score of the current script version (1-99).
   • Malicious URL: Whether the script URL is known to be malicious according to threat intelligence feeds.
   • Malicious Domain: Whether the script’s domain is known to be malicious according to threat intelligence feeds.
   • Malicious Category: The categorization of the script considered malicious according to threat intelligence feeds.

   For more information, refer to Detecting malicious scripts.

4. Based on the displayed information, and with the help of the last seen/first seen fields in the script details, review and update the pages where the malicious script was detected.

You can configure alerts for detected malicious scripts. Refer to Alerts for more information on the available alert types.