E-commerce and websites
Hacked website recovery
If your site is sending spam, redirecting visitors to strange pages or showing the browser's red warning, deleting the infected files isn't enough. You have to find the door they came in through.
The situation
Your host has suspended the site, Chrome flags it as dangerous and worried customers are writing to you. You have already had it cleaned once, and after a few weeks the spam pages came back.
How we do it
We isolate the site and read the server logs to reconstruct the attack. We clean files and database by hand, also hunting for hidden access points, secretly added administrators and scheduled tasks that reinfect everything. Then we close the hole and ask Google to remove the warning.
What you get
When your site has been hacked or flagged by Google
-
01
Stop the damage first
Requests to recover a site are handled before routine work.
-
02
Find the way in
Without finding the entry point, the site will very likely be attacked again.
-
03
Warnings to remove
We guide you through review requests to Google and to other lists of dangerous sites.
Whoever attacks a WordPress site usually leaves more than one way back in: a file with a harmless-looking name, an extra administrator, a scheduled task that rewrites the code every night. An automatic clean-up plugin finds the symptoms but rarely every door.
That is why our work starts with reconstruction: where they got in, when, what they touched. Only then do we clean up, update whatever was vulnerable and change the login credentials.
At the end we explain what we found, what we fixed and what to change so it doesn't happen again. If you wish, the site can then move onto one of our maintenance plans.
Who it's for
Businesses and professionals whose website or shop has been attacked, suspended or flagged, including those already cleaned once without success.
What we work with
Measured now
Don't take our word for it. Measure.
We didn't write the numbers in the box: your browser is calculating them right now, with the same measurements it uses for any website. We built this page. Send us your website's address and we'll tell you what we see.
This page, measured right now on your device
- Data transferred
- …
- Ready in
- …
And your website?
We'll reply with what we see.
E-commerce and websites
More in this area.
WordPress websites for businesses and professionals that answer the questions of people sizing you up, and that you update yourself.
02 WooCommerce e-commerceWooCommerce shops built from a few well-chosen components, on hosting that copes with traffic spikes.
03 Shopify e-commerceShopify shops on a theme written for your brand: an identity all your own, fewer subscription apps, sections you manage from the editor.
Frequently asked questions
Before you ask.
How can I tell if my site has been hacked?
The most common signs are the browser's red warning, spam pages appearing on Google under your domain, redirects to unknown sites and suspension by your host. Sometimes the only clue is an email from your host or from Google Search Console: in that case it is worth having the site checked before things get worse.
Why does the site get reinfected after a clean-up?
Usually because the visible code was removed but not the way in: a hidden file, an extra administrator or a vulnerable plugin left in place. That is why we reconstruct the attack from the server logs before cleaning up.
When will Google remove the warning?
It depends on Google's review times, which we don't control. What we can do is submit the request once the site is genuinely clean and follow it through until there is a response.
Tell us what's holding you back.
A shop that sells less than it could, management software that doesn't talk to the website, hours lost retyping data. Tell us how things stand today: we'll reply with our first questions to understand the project.
Or email us at [email protected]
Tools, not shop windows
On a computer?
Scan the code with your phone and message us on WhatsApp.