Check a website for malicious code

Review the symptoms

Unexpected pages, redirects, changed files or browser warnings need investigation. Review Search Console Security issues and contact your hosting administrator.

Keep evidence

Preserve logs and a separate copy of affected files before cleaning. An online scanner cannot inspect every server file or guarantee security.

Fix the cause

Check files, the database, extensions and service accounts. Restore a known good state, update vulnerable components and replace compromised credentials. Deleting one file may not be enough. Changing DNS or buying another domain does not clean an infected website.