Is my website hacked?

A hacked site usually looks normal: it is not broken, it is quietly used. The check looks for traces Google sees and the owner does not.

Signs of a hacked website

Key signs: casino, betting or pill links appeared in the code; Google or an antivirus warns about the site; an .env file or a database dump is public; pages load scripts from unknown hosts. If you find even one, change admin and hosting passwords and update the CMS.

Frequently asked questions

The site works fine. Could it be hacked?

Yes. Hacks for SEO spam or mailing do not change the design: the links are hidden from the owner and shown only to crawlers.

What do I do if the site is hacked?

Back up the site, change every password and key, update the CMS and plugins, remove foreign files and links, then ask Google to review the site in Search Console.

Does this replace a site antivirus?

No. We see what is visible from outside. Infected files on the server are found only by a server scan from your host or a specialist.

More quick checks

What to check next

  • Full website check

    Law, SEO, speed and AI search, fines and ready fixes.

    Check a site
  • Scam and trust check

    A trust score from 0 to 100: protection, domain, documents and contacts.

    Check trust
  • Watching and Pro

    Telegram alerts when the score drops or a certificate is about to expire.

    Learn about Pro