Website recovery

We look at what the hosting kept: many providers hold system backups for several days that the owner does not know about. After that come search engine caches and web archives. Recovery is usually partial, typically the structure and the text but not everything.

Once the threat is removed and a re verification request is sent, the flag is usually lifted within a few days. It drags on if malicious code is found again during the check, which is why the cleaning has to be thorough rather than superficial.

The signs: some visitors get redirected to other sites, new pages appear that you did not create, traffic to non existent addresses spikes, the hosting provider writes about spam being sent, the browser shows a warning. Sometimes the only sign is a drop in positions.