01 / What changed
Tell us what changed
Share the public website address, your host and the symptoms. A screenshot of a warning can help; private customer records and passwords do not belong in the inquiry.
Hacked website recovery
Your site was hacked. Let’s take it back.
Unexpected redirects, unfamiliar admin users, a defaced page or a warning from your host? Tell us what happened. We’ll review the evidence and agree a recovery scope before making changes.
Recovery / Three priorities
- 01Contain
Work with your host to limit the damage.
- 02Investigate
Review access, changes and available evidence.
- 03Recover
Restore, close the entry point and verify.
Your situation first. A written scope next.
# #
# #
#
# # #
##
#
##
#
#
# #
##
# + + #
##+ # # #
+ +++ ++###
+## # #
# ### +#
#+## #
# +# #
++# #
# # ##
# ++#
+ +#+ ##
+# # + ##
## #
+ #+ ## #+
#### +
: : : :: :
. : : : :::
: : ::: : :
.. ::: :.: . ::: :::: :
. . :: ... : :::
.:::: ::.
: . .. :.: :
. : .. .:
. : :: : . ... . . ::
: : . . . ... ::
: : ... . :
: : : . . .. ...... .
. : : ::.
. . : . .. .
. : .. ... ..
####
#####
### #
#####
###
####
#####
####
###
####
####
#####
####
### #
#####
## #
#
#
#
#
#
# #
##
#
#
#
#
#
#
### +###
## #+#
# ##+#
# ##
#+## ##
+ #+ # +##
### +
### ##
### #+#
+## #
# ###+#
# + #++#
+### ##+#
+# +# #
+ ## ####
:
. . :: :::
. :
. . : : :: ::
::: :: .. : :
. : : : : : : :
.. : : : ::: . :
: : : . .
. : ... . .
... : ::: . :. .
:: .
: . .
.. ::: . .
: : ::: . ...
. : : . . . .. . .
#####
####
## #
####
#####
####
####
# ###
####
###
###
###
#####
####
####
Start here
Keep the evidence.Limit the damage.
Contact your hosting provider and ask about containment and available logs. Save the warning or suspicious URL and note when you first noticed it.
Swipe to explore1 / 1
02 / Before a reset
Avoid a blind reset
A reinstall or backup restore can remove evidence and may leave the original entry point open. Coordinate changes with your host and the person handling recovery.
##
#
# # ##
### #
# #
# ##
# ##
#
#
#
# ###
# # # +
# ## #
## +# ###
#+ # ###
## ##+#
# ##
+ ## # #
# # +
+ + #+#+
++ + ++#
# ## +#+#
#
+#+# + #
### ## +
... . : :: ::::::: :
.. : :: ::::::: :
.. . ::: : ..:: :
. . . :::: : : ::: :
. : .: : ::
.:: : :: : . :::
.. . :: .. . :
. : : : : . . ..
..:::: : . . . : :
: :: : : . . . .: .
: . :
. .. .:
::: . .
.:: :. . .
. . : : .. .
####
###
####
####
#####
####
####
####
####
####
###
####
# ####
####
####
#
## #
#
## #
#
# #
#
# #
# #
##
##
#
# #
# +# #+#
# + ## #
# #+#
#++ # # #
#+# +
## #+++
##### +##
+ # # ###
+ ### ##+
##+# # ###
# # +
# +# +
### #
#+#+ #++
++ + #
: : :: :
::::
. :: : :::: .
. :::: : :: .. :
: : ::: .: :
: : ::
::: .. : ::
. : : : . :: ..:
: : .. : .
: . .
. ... :: : . ...
. . : : . . . ..
: : .. .
: .
. ::. . . . .
####
#####
#####
####
###
####
#####
####
####
####
####
####
###
####
####
The work
Find the cause.Check the recovery.
The exact work depends on the site, hosting access and evidence available. We confirm what can be investigated, repaired and verified in the written scope.
Swipe to explore1 / 1
01 / Review
Review access and changes
Examine available logs, accounts, files and configuration to understand the compromise and the systems involved.
02 / Repair
Contain and repair
Coordinate containment, remove identified malicious changes and address the entry point. A clean backup can be part of the plan when it is suitable.
03 / Test
Restore and test
Check the recovered pages, forms, redirects and other agreed features. Record what was checked and any unresolved risks.
04 / Follow-through
Plan the follow-through
Agree the account, update, backup and monitoring work needed after recovery. Larger repairs or a rebuild are quoted separately.
#
##
# #
# #
#
#
# #
# #
# #
##
#
#
# +## +### ##
## ##+
++ ###
+##+ # #+
### + #
+## ####
+ ## +
+# # #
+ # +## #
+## #+##
# # #
#### +#
#+ # #++
##
# # #+#
. : : : ::: :
. . : :::::
: : :
:: : : . :
: ::....:::
:.. :
. : : ::: ..:
. . : ::. ::: :
.. ::: : : : . ::
.. : : :. ...
: :: . . ..
: : . .
: . . ..
: : . . ...
: :: . .. .
####
####
####
#### #
#####
####
#####
#####
#####
###
####
####
####
####
###
#
# #
##
## ##
#
# ##
#
# ##
## #
# #
#
## #
#
#++#+ # # #
# # # #
## #
##
# + ## #
#+ # ## #
# #
# ##
## + +
# # ###+#
+### ####
### +#+##
++## +#+#
# +##
# # #
: : : :: ::::
: :::
. ... : .
. . :: : : :
: : . . :
. : : : :
. .. : . : .
. : . ::.
. . :: : . .. : :
. . : . . . .::.::.:
: . .
:: : .
:::.. . .
. . . : :::::.. .. . .
.:: : . ..
####
# ####
####
###
###
###
###
###
#### #
#####
####
####
####
####
####
Recovery / Questions
Before you reach out.
01
Can you help with a hacked WordPress site?
We can scope a review of a WordPress site and its hosting, accounts, plugins and themes. We first confirm access and what has happened. Recovery and hardening are based on those findings.
02
Does a security update remove an existing compromise?
An update can close a vulnerability. It does not establish that malicious files, accounts or other changes are gone. Recovery also needs investigation and verification.
03
How quickly can the site be recovered?
Timing depends on access, the extent of the compromise and whether a suitable backup exists. We confirm availability and the recovery plan after the initial review. The inquiry form is not a 24/7 incident hotline.
04
Will I have to replace my website?
Not automatically. We consider repair, restoration and rebuilding against the condition of your site and what the business needs. You approve the scope before work begins.
Website recovery inquiry
Tell us what happened.Start with the facts.
Share the website address, host and the symptoms you noticed. We’ll confirm availability and what we can review.
We read the symptoms, check what access and evidence are available, and confirm what we can review. Recovery work starts after you approve a written scope.
- Website address, host and symptoms
- A written recovery scope before changes
- No passwords or customer records in the form
If the site is actively causing harm, contact your hosting provider while you arrange recovery help.