Building sites and cleaning hacked ones
I build new WordPress sites in Elementor, and I repair and secure the ones that have been hacked.
Malware removal
I scan every file and database table, then remove the malicious code, backdoors, spam and hidden admin users. Your content stays.
Hacked site recovery
For sites that redirect to spam, show a defaced page or were suspended by the host. I get them back online and ask Google to drop its “This site may be hacked” warning.
Security hardening
I patch the hole the attacker used, update everything, fix file permissions, add a firewall and login protection, and set up off-site backups.
Elementor website design
Built in Elementor from your Figma or XD file, or designed from scratch. It works on phones, and you can edit it yourself.
WordPress & WooCommerce
WooCommerce stores, theme and plugin changes, moves between hosts, bug fixes, and connecting your site to your CRM, email or booking tool.
Speed & maintenance
I fix slow pages and poor Core Web Vitals. On a care plan I also handle updates, backups and monitoring every month.
How I clean a hacked site
Every day a hacked site stays up, Google sends it fewer visitors and customers see warnings. I take a backup first, clean by hand, and keep going until I know how the attacker got in.
Get help with a hacked siteCommon warning signs
- Visitors are redirected to spam sites
- “This site may be hacked” in Google
- Unknown admin users or files
- Hosting account suspended
- Spam pages in search results
- Sudden drop in traffic or speed
- 01
Scan & diagnose
I back up the whole site, then scan the files and database for infected code, backdoors and the way the attacker got in.
- 02
Clean & restore
I remove the malicious code, spam pages and rogue admin users by hand. Your pages, orders and design stay as they were.
- 03
Harden & patch
I update or replace the vulnerable plugins and themes, change every password and security key, and add a firewall and login protection.
- 04
Delist & report
I ask Google and the security blacklists to remove their warnings, then send you a report listing what I found and what I changed.
Result: site clean, locked down and documented
Will I lose content or data during malware removal?
No. I back up your files and database before I touch anything, and I clean the infected code instead of wiping the site. Your pages, products, orders and settings stay as they are.
How do I know my site won’t get hacked again?
I find how the attacker got in. It’s usually an outdated plugin, a nulled theme or a weak password. I fix that, add a firewall and login protection, and send you a report on what to keep an eye on. Nobody can promise a site will never be hacked, but this makes yours a much harder target.
Can you remove the Google “This site may be hacked” warning?
Yes. Once the site is clean, I request a review in Google Search Console and ask the other security blacklists to remove it. The warning comes off when Google confirms the site is clean.
What access do you need to get started?
For malware removal I need WordPress admin and hosting (cPanel or SFTP) access. For a new build, WordPress admin is usually enough. You can create temporary accounts for me and remove them once the work is done.
Can you build my site in Elementor from a design?
Yes. Send me a Figma or Adobe XD file, or a few sites you like, and I’ll build it in Elementor. It will match the design on every screen size, and you’ll be able to edit it yourself.
What happens after my project is finished?
New websites include 14 days of support after launch for anything that comes up. After that, you can move to a monthly care plan or look after the site yourself.
/contact
Have a similar project?
Send me your site’s address and a few lines about what you need: a new Elementor site, a malware cleanup or a fix to an existing build. The first audit is free.