Is my website hacked?
A free external check for the signs of a hacked website: blocklists, injected spam, hidden links, strange redirects and suspicious scripts.
What this check does
- We look up your site on malware and phishing blocklists.
- We load your pages the way visitors, Google and mobile users see them, and compare what each of them gets.
- We look for hidden links, spam keywords, suspicious scripts and, on WordPress, a few exposed files.
- We check that your HTTPS certificate is valid.
Frequently asked questions
- Can this tool see everything on my server?
- No. It is an external check: it only sees what any visitor or search engine can see. Malware that only runs on the server, or hides from visitors, may not show up.
- What should I do if the result says my site looks compromised?
- Do not panic and do not delete files blindly. Take a backup, change your passwords, update everything, and have the site cleaned by a specialist. You can request a cleanup quote from the result page.
- Do you store my website or its content?
- No. We keep only the summary of the result for 30 days, so you can share the link. We do not keep page contents.