Discovering an unfamiliar page or a browser warning can create pressure to act immediately. The first goal is to understand what is happening and reduce exposure without destroying information that could help explain the problem.
Record the symptom without exploring the attack
Note the affected address, when it was reported, and the exact warning or unexpected behaviour. Save a screenshot provided by a trusted reporter if available. Avoid clicking through suspicious pages or entering credentials into an altered login screen. Contact your host and the person responsible for the website using known contact details, not numbers displayed on the compromised page.
Agree on containment and preserve evidence
Ask the host or recovery specialist how to restrict the affected site safely while preserving logs and a copy for investigation. Do not start deleting unfamiliar files without understanding their role. Confirm who can authorise changes and which business functions depend on the site. If enquiries normally arrive through it, provide an alternative contact route through channels you already control.
Treat recovery as more than a visual repair
A page looking normal does not prove the underlying issue is resolved. Cleanup needs an assessment of how access was gained and checks on affected components and accounts. Google’s Security Issues report can identify flagged problems; review requests follow remediation. Agree on testing and monitoring before calling the work complete. Share access only through an arranged method, never in the initial enquiry email.
MAKE IT ACTIONABLE
Your next steps
- Record the website address and reported symptoms.
- Contact the host through a known channel.
- Preserve useful records before changes.
- Arrange assessment, containment, and tested recovery.
Official reference
Google: Security Issues report
Technical guidance checked September 29, 2026. Product features and requirements can change. The business checklists above are practical suggestions from Cyber Bounds.
PUT THE NEXT STEP INTO PRACTICE
Help with hacked website recovery.
Help with unwanted redirects, malware warnings, suspicious changes, and website cleanup. Tell us about your situation and we’ll discuss a suitable scope and quote.
Explore Hacked Website RecoveryEmail us about this guide