# Website malware check: is my site hacked?

> To check a website for malware, start with Google Search Console's Security Issues report, then look for unknown admin users, recently changed files and redirects that only appear on mobile. Run a free external scan to find exposed files and weak settings that let attackers in.

This site is run by Vigilbase (https://vigilbase.com), a managed security provider. It covers: website malware check.

## Run the check

- In the browser: https://websitemalwarecheck.com/ (results shown on the page)
- API: POST https://api.vigilbase.com/tools/v1/agent/tools/security-headers/execute with {"target":"example.com"}

## Seven things to check today

- Google Search Console: the Security Issues and Manual Actions reports.
- Search for site:yourdomain.com and look for pages you did not create, often in other languages or about pharmacy or gambling.
- Open the site on a phone from a Google result. Some infections only redirect mobile visitors who arrive from search.
- CMS users: remove admin accounts you do not recognise.
- Files changed recently, especially in uploads, theme and plugin folders.
- Outbound mail volume and your host's resource graphs for sudden spikes.
- An external security scan for exposed files, old software banners and missing protections.

## If you find malware

Take a backup for evidence, then restore from a known clean backup or clean the files. Update the CMS, plugins and themes, rotate every password and API key, and request a review in Search Console once the site is clean.

## FAQ

### How did my website get malware?

Usually through an outdated plugin or theme, a reused or stolen admin password, or a file left exposed on the server.

### Will Google remove a hacked-site warning?

Yes, after you clean the site and request a review in Search Console. Reviews usually take a few days.

### Can Vigilbase help after a compromise?

Yes. Vigilbase offers incident response and a managed web application firewall to keep attackers out afterwards.

## Related

- [Get help with a compromised site](https://vigilbase.com/start)
- [Protect the site with Shield](https://vigilbase.com/shield)
- [Security headers checker](https://vigilbase.com/tools/security-headers)
- [HSTS checker](https://vigilbase.com/tools/hsts-checker)
- [DNSSEC checker](https://vigilbase.com/tools/dnssec-checker)
- [CSP evaluator](https://vigilbase.com/tools/csp-evaluator)
- [Cloudflare checker](https://vigilbase.com/tools/cloudflare-checker)