hakovansajt.com
Urgent? Call 065 402 5000. We answer during business hours.
Only publicly available content is checked. Files, database and admin accounts are not in this check.
If you suspect a hacked site, enter the address. We review public HTML and JS, DNS and TLS, then look for known malware patterns, hidden iframes and odd redirects. This is a surface signal. For files and the database you need an on-site tool.
A hacked site is a site where unauthorized code, a file or an account was added, often to send spam, steal data or redirect visitors elsewhere.
signal first, then cleanup, then calm monitoring
A quick scan is only the start. If something looks suspicious, we go deeper: an on-site tool sees files, database and accounts, cleanup removes what should not be there, and regular monitoring catches the next attempt. Each step has a clear job and a clear limit on what it can see.
The server fetches what is publicly available and looks for patterns that often follow a hacked site. The result is a risk signal, not a stamp that everything is clean. The check usually takes under a minute.
surfaceA local scanner looks at files, database and admin accounts. That is where things hide that a remote check cannot see.
deepWe remove backdoor files, injected code and suspicious accounts. We close known holes before the site goes back to calm production.
cleanupUptime pings and regular scans report the next intrusion attempt, often before the client or Google notice.
stableIf the scan shows risk, something suspicious is visible from the internet. If it shows nothing, that still does not prove you do not have a hacked site. In both cases we know the next step.
Most often a search warning arrives first, then spam in other results, or a clear finding in the tool report. Below are three images clients recognize most when they suspect a hacked site.
One line of work, no complexity: first a quick public-content check, then cleanup when risk is clear, then maintenance and monitoring so the breach does not return quietly. You can enter at any step, depending on what you already see on the site.
Free remote check of public content. We look for malware patterns, hidden scripts and suspicious redirects, with no account and no install.
Deep cleanup of files and database via an on-site tool, with a clear report in the monitoring panel.
Core and plugin updates, backups and file integrity checks by agreement, so risk does not return quietly.
We watch whether the site is up and whether state changed. When something jumps, an alert arrives.
Prices are indicative “from” and depend on site state, finding volume and urgency. The quick scan stays free. Below are two one-time intervention packages and one monthly plan so risk does not return quietly after cleanup, or on a site you want to keep stable. We confirm the exact amount after a short review, before we start.
from 100 €
For a confirmed breach or clear risk when the site can wait in the regular queue. We go in locally via the on-site tool, clean findings and return a short report of what was removed.
from 150 €
When the site must be back online fast: priority during the working day, the same cleanup as Standard Incident, plus basic hole closing so the breach does not repeat immediately.
from 30 €/mo
A plan for the period after cleanup or for a site you want to keep stable. Updates, backup and monitoring run in the background, and you get an alert when state jumps.
Short notes from practice: which intrusion signs show up most, what to do after the first signal, and when a local review makes sense. More detail and longer texts are on the blog.
Signs a site is hacked are rarely obvious. Here are 18 signals in the browser, Google search, WordPress admin and hostin...
BlogA real case: a hacked WooCommerce store with backdoor files, a fake admin and a cron job that restored everything. What...
BlogInfection returns after cleanup and you do not know why? It almost always means one thing. Here is where the cause hides...
BlogHost suspended your account for abuse or spam? Do this in the first 60 minutes to find the cause and get the site back o...
BlogHow much does cleaning a hacked site cost? We explain what the price depends on, why offers differ, and what to watch be...
BlogYour site is hacked and you do not know where to start? Here is a calm step order, what to do in the first hour, and whe...
Short and honest, without polish: what the quick scan sees, what it does not, when you need a local review, and what an urgent case looks like. If your question is not here, write via contact.
No. It only looks at publicly available content. If a backdoor is hidden in a file or the database, it stays invisible until we run a local scan. A clean result is not a guarantee.
DNS and TLS chain, public HTML and JS, HTTP headers, cloaking across multiple identities, up to 8 internal pages and 8 same-host scripts, Google Safe Browsing, plus typical malware patterns, hidden iframes and suspicious redirects. SSRF protection runs before every request. The check usually finishes in under a minute.
Our on-site tool gives a deep look at files, database and accounts. We clean when a hacked site is confirmed or the risk is clear enough that waiting does not make sense. If you are unsure, write to us and we will say what to do first.
Urgent cleanups go before regular requests. The goal is a first reply during the working day. Send the URL and a short description of what is happening.
No. The quick scan works without an account. The on-site tool and continuous monitoring run through our panel after we register the site.
Odd redirects, unknown admin accounts, slow performance, a Google warning, spam in search results, or files you did not put there. If you see any of that, run a check right away.
Send the site URL and a reply email. Urgent cleanups go before regular requests, and the first reply goes out during the working day. If you are in a hurry, call and leave a short description.
