Remove AMP Hijack Redirects

My AMP pages have been hijacked—every visit gets pushed to a gambling site. Google Search Console is now flooding me with errors and I have already spotted a handful of unknown, clearly malicious files, yet I can’t be sure I caught everything.

Here is what I need:
• A full security sweep of the site and server to locate and eliminate every malicious file or line of code, including the unknown scripts I’ve uncovered.
• Repair of any AMP-specific damage so the pages validate cleanly again and load at normal speed.
• Confirmation that no hidden redirects, cloaked links, or injected JavaScript remain.
• A short report of exactly what you removed or changed, plus recommendations that keep this from happening again.

WordPress, PHP, and AMP experience are essential; familiarity with popular security plugins, manual log checking, and Search Console re-submission will help you move faster. Once you’re done, I want to click “validate” in Search Console and see green across the board—no gambling redirects, no warnings, just a healthy AMP site.