Bot intelligence record

ProjectShield Url Check

Usually allow

Use the ProjectShield-UrlCheck identifier to separate Google security scanning or verification traffic from normal visitor requests in server logs.

Security Security Verified Bot Confidence: Medium Verified: Yes robots.txt: No

User-Agent Pattern

Google
ProjectShield-UrlCheck

Robots.txt Snippet

Copy-ready
User-agent: ProjectShield-UrlCheck Disallow: /

Handling Guidance

No

This bot is usually safe to allow when the request source is verified and the traffic matches your site policy.

Security scanning, malware checks, abuse prevention, compliance review, or vulnerability monitoring.

Record Details

Structured data
Operator
Google
Family
Google
Type
Security
Purpose
Security
Identity type
Verified Bot
Confidence
Medium
Last verified
2026-04-01
Last checked
2026-04-30
Source type
Verified Directory
Spoofing risk
User-agent strings can be spoofed. For allow-listing or low-friction rules, pair the published identifier with operator documentation or cryptographic verification when available.

Notes

ProjectShield Url Check is listed in the Botcrawl directory as a security scanner from Google. The primary identifier for log review is ProjectShield-UrlCheck.

Identification

  • User-agent pattern: ProjectShield-UrlCheck
  • Family: Google
  • Type: Security
  • Kind: Monitor

Common use

Security scanning, malware checks, abuse prevention, compliance review, or vulnerability monitoring.

Verification and handling

Confirm the user-agent against server logs and use published operator documentation, IP ranges, reverse DNS, or other trust signals when available.

Directory guidance marks the risk level as Safe and the blocking decision as No. Do not rely on the user-agent string alone because user-agent strings can be copied or spoofed.

Robots.txt handling: No.

Evidence and Source

  • Validate the identifying user-agent or signature against the operator documentation before creating hard allow rules.
  • Security scanning, malware checks, abuse prevention, compliance review, or vulnerability monitoring.
  • User-agent strings can be spoofed. For allow-listing or low-friction rules, pair the published identifier with operator documentation or cryptographic verification when available.

WordPress Bot Protection

Bot Blocker for WordPress

Monitor bot traffic, review live activity, and control AI crawlers, scrapers, scanners, spam bots, and fake trusted bots from one clean WordPress dashboard.