Skip to content
WP Hack FixEst. 2005

My hosting company suspended my site for malware

A suspension feels like the worst outcome, but it's actually useful: your host has told you exactly what they found, and they'll put the site back once it's clean. The fastest route back online is a proper cleanup plus a clear reply to their abuse team, not an argument about whether the scan was right.

Start my cleanup Ask us first

We reply within 1 business day (Mon–Fri, 9–5 ET)

What you're seeing

  • Your site shows a suspension notice, or simply stops loading
  • An email from your host mentioning malware, abuse, phishing content, or spam being sent
  • Files renamed, quarantined, or removed by the host's scanner
  • Access to the control panel restricted, or outgoing email disabled

Why it happens

Their scanner found malicious files

Most hosts scan customer accounts. A hit usually means real malware, though scanners do sometimes flag harmless files.

Your account is sending spam

Compromised sites are often used to send bulk email, which gets the whole account suspended quickly.

Phishing pages on your account

Fake login pages for banks or other brands hosted in a hidden folder. Hosts treat these as urgent.

Resource abuse

Malware running attacks or crypto mining uses enough server power that the host notices.

Another site on the same account

If you host several sites together, an infection in one can get the whole account suspended.

What to do right now

Do this

  • Ask your host for the list of infected files and the scan log, then keep it. It's a head start for the cleanup
  • Ask exactly what they need before they'll restore access
  • Ask whether other sites on the account are affected
  • Change your hosting, WordPress, and email passwords

Don't do this

  • Don't delete the whole site and start over before anyone has looked at what happened. You'll lose the evidence and may lose content
  • Don't restore an old backup and ask them to unsuspend. If the backup is infected, you're suspended again within hours
  • Don't argue that it's a false positive until someone has actually checked

How we fix it

  1. 1Work from your host's scan results, then check everything they may have missed
  2. 2Clean every infected file and database entry, and find the backdoor
  3. 3Deal with the side effects: spam queues, phishing folders, rogue scheduled tasks
  4. 4Write the summary your host's abuse team needs to lift the suspension
  5. 5Harden the site, and every other site on the account if they're at risk

Cleanups start at $349, with a money-back guarantee: if we can't clean your site, you don't pay.See pricing

Questions

How fast can I be back online?

Once the site is clean, most hosts restore access quickly, often the same day, though some abuse teams take longer. We reply to you within 1 business day and cleanups are usually finished within 1–2 business days of getting access.

My host offers to clean it for a fee. Should I let them?

Some hosts do a decent job; others just delete flagged files, which can break the site and miss the backdoor. Ask whether they'll tell you how the site was compromised. If they won't, that's a sign of a shallow cleanup.

Can you work on a suspended site?

Usually yes. Hosts normally leave file access available, or will restore it for cleanup. Ask them for access and we'll take it from there.

Other symptoms

Hacked right now? Let's get it fixed.

Start your cleanup and we'll take it from there. If we can't clean it, you don't pay.

Start my cleanup Ask us first

We reply within 1 business day (Mon–Fri, 9–5 ET)