Scanning websites for injected malware code