Emergency WordPress Site Recovery and Security Overhaul
Budget: $250 – $750 USD
Hello,
I have hosting on Hostinger with multiple WordPress websites, and all of them have been hacked at the same time. Instead of loading normally, every site is showing a fake page with this message:
"Pop-Up is Blocked, Activate pop-up to verify Captcha – Click to Continue"
I tested on different devices and networks (including mobile 4G), and the same issue appears everywhere. This confirms the problem is on the server/hosting side, not on my personal device.
What happened so far:
All websites on the same server are affected → meaning the hack is server-wide.
Hostinger has backups, but there is no guarantee they are clean.
The .htaccess file only has the default WordPress rules, but Wordfence asks me to add/download the wordfence-waf.php file to activate the firewall.
It looks like a malware injection / backdoor has been placed in the website files.
What I need from you:
Perform a full malware scan on all websites (files + databases).
Clean/remove any malware, injected scripts, or backdoors.
Restore a clean backup if possible.
Re-secure all websites (update WordPress core, plugins, themes).
Set up proper protection (Wordfence or iThemes Security).
Change all passwords (hosting, FTP, database, WordPress admin).
If necessary: migrate the websites to a new/clean server for better security.
Expected outcome:
All websites working normally again.
Full confirmation that the infection is removed and the problem will not come back.
I have hosting on Hostinger with multiple WordPress websites, and all of them have been hacked at the same time. Instead of loading normally, every site is showing a fake page with this message:
"Pop-Up is Blocked, Activate pop-up to verify Captcha – Click to Continue"
I tested on different devices and networks (including mobile 4G), and the same issue appears everywhere. This confirms the problem is on the server/hosting side, not on my personal device.
What happened so far:
All websites on the same server are affected → meaning the hack is server-wide.
Hostinger has backups, but there is no guarantee they are clean.
The .htaccess file only has the default WordPress rules, but Wordfence asks me to add/download the wordfence-waf.php file to activate the firewall.
It looks like a malware injection / backdoor has been placed in the website files.
What I need from you:
Perform a full malware scan on all websites (files + databases).
Clean/remove any malware, injected scripts, or backdoors.
Restore a clean backup if possible.
Re-secure all websites (update WordPress core, plugins, themes).
Set up proper protection (Wordfence or iThemes Security).
Change all passwords (hosting, FTP, database, WordPress admin).
If necessary: migrate the websites to a new/clean server for better security.
Expected outcome:
All websites working normally again.
Full confirmation that the infection is removed and the problem will not come back.