This is the most common scenario that the owner of a wordpress website don't know that their website is infected. In most cases they know it from hosting alert notification or from Google when they try to run a campaign and Google just say like this, "Disapproved:...

This is our own list of domainss and IP addresses found in various shell & malicious script used in wordpress website hack. Hacker usually inject small script like a simple html uploader first then they upload shell on the target server. Known shells...

This is our own list of malicious redirect found in various wordpress website. Every website load a lot's of internal and external .js files and sometimes it's hard to be confirmed that if the network request or js request is really safe or malicious. So...