Hacked website rescue
Hacked WordPress? We clean it for free.
Rescue
tutienda.es- wp-content/uploads/cache.php backdoor infected quarantined
- wp-includes/class-wp.php modified core infected replaced
- wp_options · siteurl injected redirect infected cleaned
- user wp_admin2 third-party administrator infected deleted
- cron wp_update_check attacker's task infected deleted
0 €
with any plan, monthly or yearly
No downtime
your website stays where it is until it's clean here
Any website
WordPress, Joomla, PrestaShop or custom PHP
Imunify360
watching your account from day one
Signs
How to tell if your website has been hacked.
-
It redirects to other websites
Especially on mobile or when arriving from Google: the attacker hides the redirect from anyone who visits directly.
-
Google says it's dangerous
A red screen before entering or a warning in the results. Visits drop overnight.
-
It sends spam
Your provider limits or suspends your email, or you get bounces from messages you didn't send.
-
There are admins you don't recognise
New users with full permissions, or yours no longer works.
-
Pages that aren't yours on Google
Results in other languages, for pharmacy or gambling, with your domain in front.
-
It's slow or has been suspended
CPU spikes without visitors, odd PHP files in uploads or a warning from your current host.
Ring any bells? How to request a rescue →
How we do it
Clean, locked and monitored.
No downtime
Your website stays online while we clean it
Migration · tutienda.es
no downtime- done Copy files + DB + email
- done Test temporary domain
- in progress DNS when everything responds
- 04 Online 0 min of downtime
a sysadmin replied · 41 min
The door
We close the way they got in
credentials rotated
we send you the new ones over the secure channel
After cleaning up
closed door- WordPress core at the latest version updated
- Plugins 12 up to date · 2 abandoned left out withdrawn
- Administrators new passwords changed
- Database username and password rotated
- Sessions new salt keys all closed
We help you remove the warning
Dangerous website
Attackers on tutienda.es may try to trick you.
Search Console · Security issues
- Hacked contentfixed
- Checkrequested
After
And from that day on, monitored
80 backups
daily, weekly and monthly, off your website's server
Every request is checked before it reaches the application. Anything that isn't legitimate is cut off at the layer that detects it; real users never notice.
Not just WordPress
We rescue any website.
The method is the same for any application: backup first, clean-up offline and the door shut before going live.
- WordPress
- Joomla
- PrestaShop
- Drupal
- Magento
- Moodle
- PHP propio
How to request it
You order, you tell us and we get to work.
-
01
Order any plan
The one that fits your website, monthly or yearly. In the order, tick “I have a website to bring over” and that it's been hacked.
-
02
Request it from your client area
In “Bring a website over” you tell us what you're seeing and leave us your current provider's credentials over a secure channel, never in an email.
-
03
We hand it back clean
An engineer brings it over, cleans it and tests it. We let you know when to change the DNS and tell you what we found and how they got in.
No small print
What's included and what isn't.
Included
- Moving the website, its databases and its email.
- Cleaning files, the database, users and scheduled tasks.
- Updating or removing whatever is vulnerable and changing the credentials.
- Help requesting Google's review.
- Any application: WordPress, Joomla, PrestaShop, Drupal, Moodle or custom PHP.
Not included
- Recovering what the attack deleted without a backup to restore it from: if that happens, we tell you before going on.
- Redoing the website's design or content.
- Cleaning the website at your current provider: the clean-up comes with the move.
Questions
A hacked website, no beating about the bush.
Is it really free?
Yes. Bringing your website over and cleaning it is included with any hosting plan, even the smallest one paid monthly. You only pay for the plan, at the same price as any other customer.
How long does it take?
We start as soon as you leave us the credentials. The time depends on the size of the website and how deep the infection goes, and we tell you in the ticket before starting. Meanwhile your website stays where it is.
Will my website be down?
Not because of the move. We clean it and test it here, with a temporary domain, while it keeps running at your current provider. Only at the end, with everything checked, do you change the DNS. If your provider has already suspended it, we put it online as soon as it's clean.
What if it isn't WordPress?
We rescue it too. Joomla, PrestaShop, Drupal, Magento, Moodle or a custom PHP application: the method is the same, copy first, clean-up offline and the door closed before publishing.
Do I have to give you my passwords?
Your current provider's credentials, yes, so we can copy the website. You leave them over a one-time secure channel that encrypts them and deletes them once the move is done. Never write them in an email or in the ticket.
Can it happen again?
We close the way in that we find, but no clean-up makes a website invulnerable: an abandoned plugin or a reused password can open another. Here Imunify360 monitors your account, which is also isolated from the others, and you have 80 backups to go back to if needed.
Do you remove the Google warning?
We help you ask for it to be removed. The review is requested from Search Console by the website owner, and the decision is Google's. Once the website is clean, we tell you exactly what to explain in the request.