Site Compromise Checker Guide
This checker reads public signals: Safe Browsing, the final redirect host, the title, hidden or tiny iframes, meta refresh, and a fixed list of miner script hosts. If the Safe Browsing key is missing, the result is a failure, not a clean bill of health.
Overview
Use the free check when you want a public look at one URL. The $9 monitor repeats that check daily. The $79 snapshot adds one Standard website scan. None of these remove malware or put a firewall in front of the site.
How to read the result
- Safe Browsing: A missing key or a request error is a failed check.
- Redirect: A different final host is called out. It can be a legitimate CDN or a problem. You decide.
- Cleanup: This page does not delete files or install a firewall.
Signals
| Signal | What it means | What it does not mean |
|---|---|---|
| Safe Browsing | Google reported a match, or the check could not run | Not a file scan |
| Hidden iframe | A tiny or hidden frame is in the HTML | Not proof of a miner by itself |
| Miner host | A script host is on the fixed list | Not a full malware inventory |
Missing key
Operator failure
Safe Browsing could not be checked because GOOGLE_SAFE_BROWSING_API_KEY is missing. Do not treat that row as clean.Recommended Remediation Flow
- Run the free check Open the compromise checker and enter the public URL.
- Read failures as failures A missing Safe Browsing key stays a failure even if the HTML looks normal.
- Choose a paid follow-up only if you want it Daily monitoring is $9 per site. A one-time Standard scan snapshot is $79. Neither cleans the site.
Troubleshooting Common Issues
The page says Safe Browsing could not be checked
The server has no API key.
- That is an operator failure.
- Other signals can still appear.
- Do not describe the site as clean.
Validation Checklist
Post-fix validation
- A missing key is shown as a failure.
- The copy does not promise cleanup or a firewall.
FAQ
Does this remove malware?
No.
- It reports external signals.
- It does not edit the site.
- It does not install a firewall.