Is your website showing Google something you can't see?
Some hacks show spam only to search engines, or send only Google visitors elsewhere, so the site looks fine to its owner. We load your page three ways and compare them.
What you get
- Visitor vs Googlebot comparison
- Hidden redirects from Google spotted
- Spam words, hidden links and robots.txt checked
Site not hacked but not ranking? Try the website SEO checker.
We load the page you enter three times, once identifying as Googlebot, and read robots.txt. We don't log in, try passwords or scan for weaknesses, so only check sites you own or manage. Nothing is stored except a usage counter that limits how often the tool runs.
The owner is usually the last to see it.
We've found this kind of code on small business sites: it checks for Googlebot, Bing and Yahoo, serves them a page from the attacker's server, and rewrites robots.txt. Everyone else gets the normal site.
- How can a hacked website look normal to its owner?
- Some hacks check who is asking. Search engines get a spam page, and people who click through from Google may be sent elsewhere, while anyone typing the address sees the normal site. This is called cloaking. Owners often only find out when their Google results look wrong.
- What does this checker look at?
- It loads your page as a visitor, as Googlebot and as a visitor arriving from Google, then compares where each ends up and what text each gets. It also looks for common spam words, hidden links, disguised code and sitemaps in robots.txt that point to another site.
- If the result is clear, is my site safe?
- Not necessarily. It tests one page from the outside. It can't see files on your server, and it can't catch a hack that checks Google's real IP addresses. For that, use Search Console and look through your hosting files.
- Why did it say it couldn't compare with Google?
- Firewalls such as Cloudflare often block anyone pretending to be Googlebot. That isn't a bad sign. To see Google's real view, use URL Inspection in Search Console.
- What should I do if I find something?
- Back up the site first, then check Security Issues in Search Console and look for unknown files in your hosting file manager. Deleting the files isn't the end of it: change every password those files could have read, including hosting, database and admin logins.
Found something, or not sure what you're looking at?
Send us the address and what the check showed. We'll tell you what it means and what the clean-up involves.