the scan

Was your site already tampered with?

Free, no sign-up. We pull your site's pre-Black-October snapshot from the Internet Archive, diff it against your live page, check whether crawlers see different content than humans, and give you a verdict in plain words. ~30 seconds.

We fetch your public homepage the way a visitor, a crawler, and the archive saw it. Nothing is stored except an anonymous scan count.

🔎 Fetching your live page, the crawler's view, and the archive baseline…

    This scan is one moment in time. Set the free tripwire → and Hawkline watches these pages continuously: if they change and it wasn't you, you know in minutes, in plain words.

    Honest limitations: this compares publicly served content against an archive snapshot. It can surface defacement, injected links/scripts and crawler cloaking. It cannot see server files, logs, webshells that change nothing visible, pages behind logins, or sites the Internet Archive never captured. A "clean" result means "no visible tampering signals on this page", not "not compromised". Patch first: the PHP2Shell checklist.