🚨 EMERGENCY

Your site was hacked.
Do not clean anything yet.

The first mistake after a hack is wiping the evidence. Open your case below — in the first hour we seal a hashed copy of everything and rescue your hosting logs before they rotate away (most hosts keep only 7–14 days).

The Google red warning screen your visitors see when your site is flagged

If your visitors see this red screen, Google has flagged your site. Every hour it stays up, customers are turned away.

✅ Do this now

  • Open your case with the form below (2 minutes)
  • Write down when you first noticed something wrong
  • Keep any emails from your host or Google — forward nothing, delete nothing
  • If you can, note who else has admin access

⛔ Do NOT do this

  • Don't "clean" the site or reinstall WordPress — that's the evidence, gone
  • Don't let a random freelancer poke around first
  • Don't change passwords yet — rotation happens in order, during cleanup
  • Don't pay any ransom or "unlock fee" a stranger demands

Your Procedure — What You Need To Do

Eight short steps, in order. We handle the investigation, evidence, and cleanup — these are the steps that only you, the owner, can take.

  1. Open your case using the form below → you'll receive a case number + a 6-digit code. Write down both.
  2. Pay for the diagnosis — upfront, fully credited toward cleanup if you proceed.
  3. Submit your credentials in one way only: at vidalforensics.com/access, using your case number + code. Never via email, chat, or phone.
  4. Golden hour: keep hands off the site, don't "fix" anything, and keep your phone handy.
  5. Review your findings — what happened, how they got in, whether data was stolen — and approve before any cleanup begins.
  6. Set completely new passwords (hosting, WordPress, email, FTP) following our guide. The old ones are compromised.
  7. Flagged by Google? YOU request the review from YOUR Search Console — we prepare everything and guide you click by click.
  8. Case closure: you receive a signed report; evidence is vaulted for 90 days and then securely purged on record.

📄 Download this procedure (PDF)

Open your case

Signing this form is your authorization — and the first entry in your chain-of-custody record. You'll get a case number and a case code. Nothing runs without them.

Step 1 of 3 — Your details

Diagnosis is paid up front and credited toward cleanup if you proceed. We investigate websites with the owner's signed authorization; we do not investigate people, and we are not a law firm. Submitting opens your case file — it does not by itself start any cleanup.