Website hacked?

Signs something got into the site

This usually shows up as one of a few things:

• Visitors get redirected somewhere you didn't send them
• Spam pages or links show up in search results for your site
• Your host has suspended the site for “malicious activity”
• Google or your browser shows a security warning before the site loads

Almost always one of five things

• Outdated WordPress, a plugin, or a theme with a known vulnerability
• A weak or reused admin password
• A vulnerable or abandoned plugin left installed but unused
• Compromised hosting credentials, not the site itself
• Old malware left behind from a previous, unresolved infection

Yes, and this moves to the front of the queue

Hacked sites go straight into Website Rescue: we identify and remove the malicious code, close the entry point, and confirm with your host and with Google that the site is clean. If backups or a fuller cleanup are needed, we'll explain the cost before doing that work.