Your site is hacked. Do these 5 things in the first hour to limit damage and make professional cleanup faster and cheaper.
1. Do not delete anything yet
Screenshot the spam pages, redirects and unknown admins. Note times.
2. Take the site offline or enable maintenance mode
If visitors are being redirected, put up maintenance mode via your host to protect your reputation and stop spam sending.
3. Change passwords from a clean device
Hosting panel, WordPress admin, FTP and database – in that order.
4. Contact your host and ask for the malware report
Ask for flagged file paths and recent access logs.
5. Call for cleanup – do not reinstall plugins randomly
See 5 signs checklist and cleanup costs. Urgent? Use our hacked site recovery (24-48h) or contact us.