Glossary Entry
What is Malware?
Malware without the jargon — the definition, the analogy, and why any site owner should care.
The short answer
Website malware is the hostile code an intruder leaves behind once inside: spam injections, redirects, phishing pages and back doors, every one of them working for them rather than for you.
The rest of the page opens it up — the mechanics, why a site owner should care, and one concrete example of it at work.
By the Hosting & Domains team · Reviewed 18 August 2026
0
Jargon left undefined
100+
Entries, all cross-linked
Real
Working examples
Free
To read, always
It arrives through outdated components and stolen logins, then begins converting your reputation into money. Spam pages appear in your search listings, visitors are thrown at scam sites, phishing forms go up under your domain, and a quiet back door guarantees the intruder can return after you think you have cleaned up.
Detection has to be layered, because malware hides from whatever it took over. A server-level scanner of the Imunify kind finds the infected files WordPress's own plugins have been talked into ignoring.
The everyday parallel
Somebody running a counterfeit operation out of your warehouse overnight. Your premises, their trade, and your name above the door taking every consequence when the inspector arrives.
Carry that picture with you and most documentation on the topic loses its mystery on a first read.
Where it touches your own site
It is reputation the damage compounds in, not disk space. Blocklists, browser warnings and lost customer confidence all arrive faster than any cleanup can undo them, which is why updates, decent credentials and protection at server level cost a fraction of the incident they prevent.
Nobody expects you to work at this layer daily. The aim is recognising it when it explains something — and that moment is exactly when this page pays for itself.
Malware out in the open
A site's search listings suddenly start offering pharmaceuticals. The injected pages were only ever served to crawlers, they show up in Search Console, and the fix is a restore, a patch and a reconsideration request.
Entirely unremarkable once you have seen it — which is the point: most hosting ideas are plain machinery behind an intimidating label.
Where it sits inside your own account
Here it largely looks after itself, since the defaults are sensible and the panel puts the controls within reach the moment you want them. Read on: WAF, Phishing, Backup and Brute-Force Attack.
The rate you register at is the rate you renew at, so year two costs precisely what year one did — nothing lying in wait on the invoice.
Why a hundred definitions were worth the writing
An unexplained piece of jargon is, to us, a service defect. This is the support team's collected translations, published where a search engine can hand them over on our behalf.
A free SSL certificate comes with every plan and reissues itself before the old one lapses — the padlock is never yours to diarise.
- 100+ entries, plain English all the way
- Ordinary analogies, working examples
- Neighbouring ideas linked together
- Written by our own support engineers
Why Hosting & Domains
Standard on every plan
Jargon-free by design
Definitions written for people who run sites, not for other sysadmins — translation rather than restatement.
Cross-wired entries
Related terms point at each other, so one lookup compounds into working knowledge.
Tied to real hosting
Examples name platforms you would genuinely use, never an abstract diagram on a whiteboard.
This term, properly landed
Malware defined, pictured by analogy and located in your own panel — recognise-level after a single read.
The next step, drawn out
Carry on into WAF and Phishing — ideas rarely travel alone, so the neighbours are linked in.
Analogies that hold
Every concept comes with a mental model that returns exactly when you need it.
Quick Start
Order placed to site online
- 1
Find it in your own account
Open the control panel and find where this idea sits — a definition turns into understanding the moment it attaches to your own site.
- 2
Check the defaults as they stand
Look at how your account has it configured. Nine times in ten the default is right, and a check turns the guess into certainty.
- 3
Chase the neighbouring terms
Hosting terms travel in groups — WAF, Phishing and Backup finish this one's picture, each a two-minute read away.
Built In
Fitted to every plan
- Your existing site brought across by our engineers, at no charge
- 99.9% uptime as the target, watched around the clock
- WordPress and 400+ further applications installed in one click
- Money back within 30 days on hosting plans, 7 on reseller
- No set-up charge at any point, and no joining fee
- Spam and virus screening on every mailbox by default
- The name's first year included when you order annually
- SSH, Git and Composer on the developer plans
- A renewal figure identical to the one you registered at
- LiteSpeed caching in the server itself rather than bolted on by plugin
Frequently Asked
The questions that come up most
How would I know if my site were infected?
The usual signs are strange titles in search results, browser warnings, customers reporting redirects, admin users you never created, and traffic that makes no sense. Prove it with a server-level scan alongside an external URL checker, then run a full cleanup, because removing one suspicious file hardly ever ends the matter.
Does website malware harm visitors as well as me?
Both, and the visitor half is worse. Your visitors meet redirects, scams and drive-by attempts at exactly the moment they are trusting your name. Handing your credibility to a stranger is the real product website malware manufactures.
Does hosting include mail?
Yes — every hosting plan includes mailboxes at your own name, with webmail, IMAP, POP and SMTP plus spam filtering on from the start. There is standalone email hosting too, for a name whose website lives somewhere else.
What is the uptime commitment, and what happens in a month that misses it?
99.9% — and if a month falls below that through a fault on our side, our terms entitle you to a pro-rated credit; ask and we apply it. Calling it a target rather than a contractual SLA is a deliberate choice. Hardware and network faults surface through platform monitoring, usually before the first customer notices.
Keep reading
Brute-Force Attack
A brute-force attack tries credentials over and over — thousands of guessed passwords, or leaked pairs repl…
Backup
A backup is a copy of your files and database that can genuinely be restored, and it is what separates a ca…
How to Scan a Site for Malware
Step by step, with every snag flagged before you get to it.
Mail Filtering
Spam and virus filtering standing in front of any mailbox, wherever it is hosted.
VPS Hosting
KVM virtual servers — root access, DDoS filtering, one flat monthly figure.
Changing hosts? Run through our checklist first.
A plain order of work for a move nobody visiting will notice: which files go over first, how to carry the mail across without losing a message, when exactly to repoint DNS, and the two mistakes behind nearly every outage we are asked to rescue.
Your site has earned better hosting.
NVMe hosting with SSL and the migration included, people answering at any hour, and a price that stays where it was.
View Mail Filtering plans