Visitors land on a different site.
Is your website hacked? Find out in 30 seconds.
Free scan for WordPress and PHP sites. No signup, no install. If it is infected, we fix it for a flat price and tell you how they got in.
Read-only scan · No install · Results in about 30 seconds
What the scan checks
Blacklist — waiting for a URL
Cloaking — compares a normal visit, a mobile visit from Google, and the scanner
Redirects, hidden links, obfuscated scripts, frames, forms, headers
Signs a site has been hacked
Search shows a hacked-site message.
Strange Japanese results for your domain.
A user you did not create can log in.
The host took the site offline.
Spam you did not write is on the site.
PHP files appeared in the uploads folder.
Phones are sent away. Your desktop looks fine.
How it works
1. Scan
We fetch public pages only. We do not log in and we do not change anything.
2. Fix
Emergency Cleanup is $499. You authorize access. We write down what changed.
3. Protect
After a site is clean, Protection watches it from the outside for $19 a month.
What is different
- A root-cause report in plain English.
- A flat price, written down before work starts.
- WordPress and custom PHP.
- 30-day reinfection guarantee: we clean the same infection again, or we refund if we cannot clean it.
Pricing
Emergency Cleanup
$499One time. Cleanup, hardening, a plain-English report, and a 30-day reinfection guarantee.
Bigger jobs get a written estimate first. Nothing extra is charged without your approval.
Protection
$19/moPer site, or $190 a year. Daily external scan and alerts. Already-infected sites buy cleanup first.
Sample report
See the shape of a report on a fictional site. Read the sample.
Who runs this
Daniel Lasek is a developer who does hacked-server forensics. There is no invented client list on this site.
Questions
What does the free scan do?
It requests the public homepage and a few same-site links, then looks for redirects, cloaking, spam, hidden frames, odd scripts, and missing headers.
What can it not see?
It cannot see your database, private files, or server cron. A clean result does not prove the server is clean.
Do you need my password to scan?
No. Passwords are only for a paid cleanup, and only after you confirm you own the site.
How much is cleanup?
$499 once. Protection is a separate $19 per month and is not a substitute for cleaning an infected site.
What is the guarantee?
If the same infection returns within 30 days, we clean it again. If we cannot clean it, you get a refund of that job.
Do you work on custom PHP?
Yes. The external scan is the same. Cleanup of a custom app is still scoped to what you authorize.
How long does a scan take?
Most finish in under a minute. The target is under 45 seconds. A slow site can take longer, and each request gives up after 10 seconds.
What happens to credentials?
They are sealed and deleted when the job closes. If the seal key is missing, they are not written to disk.
Read-only scan · No install · Results in about 30 seconds