You went to load your website and found it gone — replaced by a suspension notice from your web host saying malware was detected. If you’re searching because your host suspended your website for malware, here’s the reassuring part first: your site almost certainly still exists, your data is very likely intact, and this is fixable. What’s happened is that your host took the site offline to protect its servers and its other customers. This guide explains why that happens, what it does and doesn’t mean, how to get the malware cleaned, and how to get back online — ideally somewhere this doesn’t keep happening.
Why your host suspended the site
When a host’s scanners flag malware on your account, a lot of budget and shared hosts respond the fastest, cheapest way they can: they suspend the whole site. From their side it makes sense — a compromised site on shared infrastructure can attack the neighbors, burn resources, or get the server’s IP address blocklisted, which hurts every other customer on it. Suspending you stops the bleeding for them immediately.
The trouble is what it leaves you with. A suspension protects the host; it does nothing to actually clean your site. You’re handed a dead site, a notice, and — very often — a link to the host’s paid malware-removal add-on or a “contact support” queue that moves slowly. The plug got pulled. The problem is still there, waiting for you to solve it before they’ll turn you back on.
What it means (and what it doesn’t)
Let’s clear up the fear first. A suspension for malware almost always means:
- Your site was compromised — an attacker got in, usually through an out-of-date plugin or theme or a guessed password, and planted malicious code. If you want the fuller picture of how this happens, we cover it in why WordPress sites get hacked.
- Your files and database are still there, sitting on the server behind the suspension. Suspended is not deleted. A good backup makes this even safer.
- You need to clean the malware and prove it’s gone before the host will lift the suspension — and then close the hole so it doesn’t recur.
What it does not mean is that your business is over or your site is lost. It means the site needs a proper cleanup and a host that does more than pull the plug.
How to get cleaned up and back online
1. Get a copy of the site before you touch anything
Even suspended, you can usually still reach your files and database through the host’s control panel or a support request. Pull a full backup first. It’s insurance if a cleanup step goes wrong, and it’s evidence of how the attacker got in. Label it clearly as infected so nobody restores it later by accident.
2. Find and remove the malware
Scan to locate the malicious code, then remove it and repair what was tampered with — hacked WordPress files, injected scripts, rogue admin users, and anything planted in the database or the .htaccess (a server settings file) and wp-config.php files (WordPress’s main settings file). Attackers rarely leave one file, and they love to hide a backdoor so they can walk right back in after you clean up and get re-suspended. Finding every piece is the hard part. We lay out the full sequence in how to fix a hacked WordPress site, and weigh cleaning it yourself against bringing in help in WordPress malware removal: DIY vs professional.
3. Close the hole, then ask for reinstatement
Before you ask the host to lift the suspension, close the way they got in: update WordPress itself, every plugin, and every theme; delete anything unused; reset all passwords and turn on strong login protection. Then submit the cleaned site for reinstatement per your host’s process. Most hosts re-scan and, if it’s clean, restore the account. As with everything here, the host controls that timing — no one can promise an exact un-suspension time.
The real question: is this the right host?
Here’s the honest bit, and it’s the reason a lot of people find this page. If your host’s answer to a hacked site is to switch it off and hand you a cleanup bill, that tells you something about the relationship. A suspension is a defensive reflex, not support. Plenty of owners get cleaned up, come back, and then get suspended again a few weeks later because nothing on the host’s side actually changed to prevent it.
A good host does the opposite: it works to keep the site from getting compromised, catches malware early when it does, and helps you get back online rather than leaving you stranded. That’s the whole difference between a host that pulls the plug and one that fixes the problem.
How SolutionHippo handles this
We’ll be straight about where we fit. When a site lives with us, this scenario gets far less likely, because prevention is built in — malware scanning is part of the care that’s included with every plan, not an upsell or a separate retainer, so an infection tends to get caught and removed early rather than growing into a suspension. That’s prevention, not a guarantee: it’s backed up well: a strong firewall stops bad traffic early, breached-password login defense keeps stolen logins out, and off-site backups 3 times a day mean even a bad day is just a restore. After any change, we verify the site still looks and works right.
And our instinct when something’s wrong is to fix it and keep you online, not to switch you off and send a ticket. We’ve cleaned infected sites, closed the hole the attacker used, and gotten owners back up and running. We won’t promise an exact timeline, because a cleanup takes as long as it takes to do right, but we won’t leave you sitting in the dark either.
Suspended right now and need to get back online? Move your site to us: we clean it as part of the move and keep it clean. Start my move — your move starts as soon as you sign up. We’ll clean the malware, close the door behind it, and get you running again, then keep the protection in place so it doesn’t happen twice. Flat pricing at $29.99 a month for a managed site, or starting at $39.99 for a store, with everything built in — no metering, no surprises.