WordPress site suspended by your host: cleaned, documented and back online
Your host found malware and suspended the site or the whole account. To get it back, the host usually wants the infection gone, the cause dealt with, and some proof. That is exactly what we deliver.
Cleanup for suspended sites starts from $199. Reinstatement is the host's decision; we give you what they normally ask for.
Why your host suspended the site
Hosts scan their servers for malware and watch for abuse: spam sent from your account, phishing pages, attacks on other servers or heavy resource use. When they find it, they suspend the site to protect their other customers, their IP addresses and their reputation.
A suspension is not a judgement on you. It does mean the host's scanner found something real, and that the visible files it flagged are usually only part of the compromise. Deleting the flagged files and asking for reinstatement often ends with a second suspension a few days later.
Different hosts, similar situations
We work on WordPress sites at any host: large shared hosts, managed WordPress platforms, Swiss and European providers, and VPS or dedicated servers. What changes from host to host is how much access you still have.
File access still works
The site is offline but the file manager or SFTP still works. We can start straight away.
Restricted or quarantine mode
Some hosts move flagged files to quarantine or allow access only from the control panel. We work within that and keep track of what was moved.
Account fully locked
The host has to give temporary access or a copy of files and database. We tell you exactly what to ask for.
Host offers its own cleanup
Host scanners remove known malicious files, but rarely backdoors, database injections or the original way in. That's why sites get suspended again.
Word Security is independent and not affiliated with any hosting provider.
What to send us
- The suspension email or support ticket, including any list of flagged files
- Which sites are in the hosting account (all of them, not only the flagged one)
- Temporary access to the hosting panel or SFTP, set up the way we explain in our reply (never through the website form)
- Who else has access: developers, agencies, former staff
From suspension to reinstatement
Preserve
We take a full copy of files and database before changing anything. It's your safety net and your evidence.
Clean the whole account
Every WordPress install in the account is checked, because infections spread between sites in the same account. Core, plugins, themes, uploads, the database, users and scheduled tasks.
Close the way in
We find and fix the vulnerable plugin, weak password or leaked credential, and rotate passwords and WordPress keys.
Write it up
You get a plain-language report: what was found, what was removed, what was changed. That is what hosts look for.
Reinstatement
You send the report to the host, or we draft the reply for you. Most hosts re-scan before they restore the site.
Afterwards
We check Google for security warnings and help with a review request if needed. See flagged and blacklisted sites.
Host suspension FAQ
Should I move to a different host instead?
Moving an infected site moves the infection with it, and the new host may suspend it too. Clean it first; then move if you still want to.
How long until the host restores the site?
That depends on the host and we can't promise a time. A complete cleanup and a clear report avoid the back-and-forth that slows reinstatement down.
The host says I need to fix it myself. Can you deal with them?
We can draft your replies and answer their technical questions through you. The hosting account stays yours, so the host will normally talk to you.
What if they suspend it again?
A second suspension usually means something was missed: a backdoor or a second infected site in the account. See backdoor removal and why malware keeps coming back.
Tell us about your site
Send a short message: your website, what you're seeing, and who hosts it. We'll get back to you with next steps.