threatover Patrik Grobshäuser

Hacked? Ten questions.

Answer honestly. Three or more yes → you are likely compromised.

  1. 1.Has Google or another search engine started showing a "deceptive site ahead" or "this site may be hacked" warning?

  2. 2.Do visitors on mobile (or coming from a Google search) get redirected to a page you do not own?

  3. 3.Have you noticed a WordPress admin user you did not create?

  4. 4.Are there files in wp-content/uploads/ or your document root that you do not recognize?

  5. 5.Did your hosting provider, registrar, or email provider warn you about malware or abuse?

  6. 6.Has your server CPU sustained at 100% without an obvious reason?

  7. 7.Were core WordPress files (wp-config.php, .htaccess, index.php) modified recently?

  8. 8.Are emails or HTTP requests leaving your server that you did not initiate?

  9. 9.When you view the page source of your homepage, do you see links to unrelated sites (pharma, gambling, replica goods)?

  10. 10.Are there installed plugins or themes that you do not remember installing?

Start an engagement.

Send the scope, stack, and timeline. You get a written proposal with a fixed quote.

Contact →