>

Free website check · Result by email

Has your website been hacked without you knowing?

Hackers hide links to other websites inside business sites, often where only Google looks. Nothing looks wrong to you or your customers, but Google reads every one. This free check reads your public pages the way a visitor and Google see them, then tells you plainly what it found.

  • Result on screen, usually in under a minute, and by email.
  • No account and no card. We never log in to your site.
  • Found something? You see one real example free, with a screenshot.
  • Nothing found? We say so, and there's nothing to buy.

Check a website

Free. The result shows on screen and comes by email.

We'll email your result to this address. No marketing unless you ask.

Terms for the check · How we use your email

Got a code from our email?

Enter the 8-character code from the email to open your result. Pasting the whole link from the email works too.

What the check finds

Three real finds. Names removed.

This is what the check recorded on three business websites. Where the links point is left out here on purpose.

Med spa · Texas

42 links hiding in its articles

Seven of the spa's articles carried links to 40 unrelated websites. Thirty of the links were pushed off the edge of the screen, so no visitor ever saw them. Google reads them all the same.

Pages
7 of the 12 we read
Links
42, with 30 hidden off-screen
Point to
40 unrelated sites, online wagering sites among them
Plumbing company · Texas

Three links on the home page, off the edge of the screen

The first page every customer sees carried three links to unrelated websites, placed so far off-screen that no browser would ever show them.

Pages
The home page
Links
3, all hidden off-screen
Point to
3 unrelated sites, two of them online wagering sites
Dental practice · Texas

A page that changed only for Google

To visitors, one page of the practice's website looked normal. When the check asked for the same page the way Google does, it came back with a different title advertising an online drug shop, and a link to one. Nobody at the practice would ever have seen it.

Pages
1 of the 13 we read
Links
1, shown only to Google, with the page title changed too
Point to
1 unrelated site, an online drug shop

How the check works

It reads your site twice: once as a visitor, once as Google.

  1. We read your public pagesYour home page and a sample of your other public pages, one at a time, the way a visitor's browser loads them.
  2. Then we read them as GoogleAs a visitor arriving from a Google search, and as Google's own crawler. Some hacks only show themselves to Google, so this is where they turn up.
  3. We look for links that hideLinks pushed off-screen, shrunk to nothing or shown only to Google, pointing to unrelated sites such as online drug shops, wagering sites or adult sites.
  4. We only say "found" with proof"Hidden links found" needs a screenshot, the hidden code itself and where the link goes. Without all three, we don't say it.
  5. Unclear? A person looksIf something looks off but isn't clear-cut, a person at Station checks it and emails you the answer, usually within one business day.
  6. You get the resultOn screen, usually in under a minute, and by email. Your result has its own link and an 8-character code, so you can come back to it.

What it can't see. The check reads public pages only. It never logs in, never tries passwords and never changes anything. It can't see files that nothing links to, or anything inside your hosting account, so "Nothing found" means nothing was visible from outside on the day we checked. It is not a security certificate. How the check works, in full

What it costs

The check is free. If it finds something, there are two ways we can help.

Neither is needed to see your result, and nothing is sold on a "Nothing found".

Full report

$79 one time

Everything whoever looks after your site needs to fix it themselves.

  • Every hidden link, page by page: how it hides and where it points
  • How they most likely got in
  • A hand-off sheet for your web developer
  • What "fixed" looks like, and a free check again to prove it
  • A web page you can print or save

Credited in full toward a cleanup within 90 days. Refundable within 7 days if it shows nothing beyond the free example, or if we can't deliver it.

Cleanup

StandardWordPress, up to 25 pages, nothing shown only to Google
$349
DeepPages shown only to Google, back doors, or up to 150 pages
$749
Large siteMore than 150 pages, online stores, multisite
Quoted

Your report names the one that fits your site, and you only ever see your own price. The $79 report comes off it. For now we clean WordPress sites; for anything else, we'll quote.

  • A full backup first, put back if you ask
  • A person approves everything we'd delete
  • Hardened, then checked again as a visitor and as Google
  • Watched daily for 30 days, and cleaned again free if the same links come back

How the cleanup works

A backup first, a person in the loop, and 30 days of watching.

Before any work, you accept a short cleanup authorization. You confirm you own or control the site, you bring in your web developer (whoever built it or looks after it), and you keep your own backup as well as ours.

  1. Back it upA full copy of your files and database before anything changes. Ask, and we put it back.
  2. Check every fileCore, plugin and theme files are compared with the official copies. Anything different is listed.
  3. Replace what was changedAltered files are swapped for clean copies of the same version.
  4. Clean the databaseInjected links and hidden blocks are found, and so are the ways back in, such as unknown admin users and back doors.
  5. A person approves the listNothing is deleted until someone at Station has reviewed exactly what would go.
  6. Harden it and prove itThe site is hardened, then the same check runs again, as a visitor and as Google, and must come back with nothing found.

Then we watch it. The site is checked daily for 30 days, and if the same kind of hidden links come back in that time, we clean them again at no charge. That doesn't cover a new problem, such as one caused by a reused password. Because Station didn't build your site or look after it, our responsibility for the site is to restore the backup we took, and it never goes beyond what you paid. We can't promise how search engines will treat your site afterwards. Read the cleanup authorization

Questions

Asked straight, answered straight.

Is this the same as being hacked?

Yes. Someone changed your site without your permission. Usually nothing is stolen: your site is used to point search engines at someone else's websites, and Google reads those links even though you and your customers never see them.

Do you need my login to check my site?

No. The check reads only the public pages that a browser or Google can already read. It never logs in, never tries passwords and never changes anything.

Why do you ask for my email?

So the result reaches the right person. We email it to the address you type in, and we don't send you marketing unless you ask for it. Our privacy policy has the details.

What happens if nothing is found?

The result says so, plainly, and there's nothing to buy. If you'd like, Station also runs a free front-office audit and a free website demo.

Could you say my site was hacked when it wasn't?

We work hard not to. "Hidden links found" is only shown with proof you can check yourself: a screenshot, the hidden code and where it points. Anything unclear goes to a person first.

My site isn't on WordPress. Can you clean it?

For now, cleanups are for WordPress sites. For anything else, such as Wix, Squarespace, Shopify or a custom build, the check and the full report work the same way, and we'll tell you whether a cleanup is possible and quote it.

What do you need from me for a cleanup?

You accept the cleanup authorization, then install a small connector plugin on your WordPress site and paste its key into our form. The key is stored encrypted, used only by the cleanup, and deleted 7 days after the job closes.

I got an email from Station about my website. Is it real?

Our emails come from Station Team <hello@send.station.solutions>. The only links in them are your result at audit.station.solutions/sweep and our unsubscribe page on station.solutions. You never need to click: type station.solutions/sweep into your browser and enter the code from the email. We never ask for a password by email, nothing needs to be bought, and you don't need to reply.

How do I stop your emails?

Use the unsubscribe link at the bottom of any email from us, or reply "unsubscribe". Either one stops all email from Station to that address.

Who runs this?

Station Automations Group LLC, 1856 Branard St, Houston, TX 77098. Write to main@station.solutions. Texas law applies, and the terms have the details.

Check a websiteI have a code

The free website check is run by Station Automations Group LLC · 1856 Branard St, Houston, TX 77098 · main@station.solutions · Terms · Cleanup authorization · Privacy