Website Down or Hacked? Emergency Steps

Your Website Is Down or Hacked — Here's What to Do

Few things are more stressful for a business owner than discovering your website is offline or has been compromised. Whether customers are seeing error pages, your site is redirecting to spam, or Google has flagged your domain as dangerous — the clock is ticking. Every minute costs you visitors, revenue, and credibility.

This guide is your emergency playbook. We'll walk you through how to determine what happened, the immediate steps to take, and when it's time to call in a professional emergency web developer like Hatty AI's Emergency Web Services.

Step 1: Determine if Your Site Is Down vs. Hacked

Before you can fix anything, you need to understand what you're dealing with. A site that's "down" and a site that's been "hacked" require very different responses.

Signs Your Website Is Down (Server/Hosting Issue)

• HTTP 500 or 503 errors — Internal server error or service unavailable
• "This site can't be reached" — DNS resolution failure
• White/blank page — PHP fatal error or memory exhaustion
• Database connection errors — "Error establishing a database connection"
• SSL certificate warnings — Expired or misconfigured certificate

Signs Your Website Has Been Hacked

• Strange redirects — Your site sends visitors to spam or phishing pages
• Google "This site may be hacked" warning — Search results show a security warning
• Unfamiliar content or links — Pages you didn't create, hidden links in your footer
• Hosting account suspended — Your host detected malicious activity
• Admin lockout — You can no longer log into your CMS
• Spam emails from your domain — Your server is being used to send spam

Step 2: Immediate Actions (Do These Now)

If Your Site Is Down

1. Check your hosting provider's status page — Many hosts have status dashboards. Check if there's a known outage.
2. Try accessing via a different network — Use your phone's cellular data. If it loads on cellular but not Wi-Fi, it may be a local DNS issue.
3. Check your domain registration — Log into your domain registrar and verify the domain hasn't expired and DNS records are correct.
4. Review recent changes — Did you install a plugin, update WordPress, or change hosting settings recently? Recent changes are the most common cause.
5. Contact your hosting provider — If the server is the issue, your host needs to know. Open a support ticket immediately.

If Your Site Is Hacked

1. Don't panic — and don't delete everything. You may destroy evidence needed for recovery.
2. Change all passwords immediately — CMS admin, hosting/cPanel, FTP, database, and email. Use strong, unique passwords.
3. Take your site offline temporarily — Put up a maintenance page to stop the spread of malware to visitors.
4. Document everything — Screenshot error messages, note the time you discovered the issue, and save any suspicious files.
5. Check Google Search Console — Look for security issues under "Security & Manual Actions."
6. Scan with a malware scanner — Tools like Sucuri SiteCheck or Wordfence (for WordPress) can identify infected files.

Step 3: Assess the Damage

Once you've taken immediate action, it's time to understand the full scope of the problem.

• Google Safe Browsing check: Visit https://transparencyreport.google.com/safe-browsing/search and enter your domain.
• Review server access logs: Look for unusual login attempts, file modifications, or requests from unknown IPs.
• Check file modification dates: In cPanel File Manager or via SSH, sort files by date modified. Recently changed core files are a red flag.
• Database inspection: Look for unfamiliar admin accounts, suspicious content in posts/pages, or injected JavaScript.
• Email deliverability: Check if your domain has been blacklisted using MXToolbox.

Step 4: DIY Recovery vs. Calling a Professional

Some issues you can resolve yourself. Others require an experienced emergency web developer. Here's how to decide:

If you're unsure, it's always safer to call a professional. Incomplete cleanup often leads to reinfection within days.

How Hatty AI Handles Emergency Web Recovery

At Hatty AI, we've built a dedicated emergency web services practice for exactly these situations. Here's our process:

1. Triage Call (within 1 hour): You call us at (210) 227-3444 or submit an emergency request. We assess severity and begin immediately.
2. Diagnosis: Our engineers connect to your server and identify the root cause — whether it's a server failure, DNS issue, malware, or code-level problem.
3. Fix & Restore: We resolve the issue, restore from clean backups if needed, and verify functionality across all pages.
4. Harden & Monitor: We patch vulnerabilities, update all software, configure security plugins, and set up ongoing uptime monitoring.

Prevention Checklist: Protect Your Site From Future Emergencies

Once your site is back online, implement these measures to reduce the risk of future incidents:

• ✅ Keep everything updated — CMS core, plugins, themes, and server software.
• ✅ Automated daily backups — Store backups offsite (not just on the same server). Test restores quarterly.
• ✅ Web Application Firewall (WAF) — Services like Cloudflare or Sucuri block known attack patterns.
• ✅ Strong passwords + 2FA — Enforce on all admin accounts. Use a password manager.
• ✅ SSL certificate auto-renewal — Use Let's Encrypt with auto-renew enabled.
• ✅ Uptime monitoring — Tools like UptimeRobot or Pingdom alert you immediately when your site goes down.
• ✅ Limit login attempts — Brute-force protection on your CMS login page.
• ✅ Regular security audits — Schedule quarterly reviews of user accounts, file permissions, and server configurations.
• ✅ Managed hosting or managed IT — A managed IT provider handles all of this proactively.

For a deeper dive into cybersecurity basics, read our guide: How to Protect Your Small Business from Cyberattacks in 2026.

When You Need a New Website — Fast

Sometimes recovery isn't the right move. If your site was built on outdated technology, has been repeatedly compromised, or simply doesn't represent your business anymore, it may be time for a fresh start.

Hatty AI's emergency website launch service can get a professional, mobile-responsive business website live in as little as 48–72 hours. We handle design, development, hosting, SSL, and SEO setup — so you can focus on running your business.

Already have a site that just needs a refresh? Check out our website development services.

Related: Essential Cybersecurity Practices · Web Hosting Services · What Is Managed IT?