Website taken down by hackers, cannot get into wp-admin

  • Unknown's avatar
    bbglogin · Member ·

    Hello! Long story short, my website was hacked and taken down on the 15th.
    The activity log in CloudFlare showed a hacker went in and affected all of my sites files and I can no longer access wp admin or wp login.

    CloudFlare told me they are not my host, so they couldn’t help me recover the website, but they got an HTTP 500 Error.

    GoDaddy told me they are not the host either, so they couldn’t do anything.

    So I have to ask, is WordPress my host then? If so, what can I do to get back into my account and recover my website?

    I know the host isn’t CloudFlare, because though a WHOIS lookup says that they are, they told me that they purposely make it look that way to deter malicious attackers and that they are absolutely not the host of my website.

    It’s been 5 days now of dealing with going back and forth, waiting for answers and getting no help. I really need this website working as it’s my primary source of income.

    Thank you.

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar
    ryrhino00 · Member ·

    Hi,

    According to this https://gwhois.org/basketsbygin.com+dns wordpress.com is not hosting your site

    What is DomainControl.com?
    So DomainControl.com is a domain name owned by GoDaddy and is used as a name server. It is considered a very popular name server and considered a default for customers of GoDaddy. If you don’t know what it looks like, here’s an example (e.g. ns35.domaincontrol.com)

    Before we continue with what DomainControl.com is, here’s a brief of what GoDaddy actually is? It is a website that serves customers with domain names, web hosting, websites, and professional emails. It would be better to check out GoDaddy.com itself.

    the above is from this https://hostingdonuts.com/what-is-domaincontrol-com/

    Here is the hosting information for domaincontrol.com

    https://gwhois.org/domaincontrol.com+dns

    I will tag this with modlook so that staff can look at it and may be able to provide more help than me as a volunteer

  • aleone89 · Staff ·

    Hello there,

    Happy to help you with this.

    GoDaddy told me they are not the host either, so they couldn’t do anything.

    I suspect you’ve been misinformed here.

    GoDaddy looks to be host from what I can see based on the current name servers: 

    
ns17.domaincontrol.com
ns18.domaincontrol.com

    If the name servers were set to Cloudflare, it may be an honest mistake on their part with this information, as they themselves might not have been able to tell where the site is hosted.

    I’ve Googled the DNS settings and I can see they were at one point set to: 

    pls3.stableserver.net
pls4.stableserver.net

    I don’t know who that hosting provider is… And it would suggest the GoDaddy is not the host.

    Do they look familiar to you?

    What is your site about exactly? It may be worth starting over and seeing this as an opportunity to remove as many variable with your site as possible with the site.

  • Unknown's avatar
    bbglogin · Member ·

    Thank you so much for the response.

    Unfortunately, they don’t look familiar to me at all.
    I typed “pls3.stableserver.net” into the address bar and it brought me to a website called Plesk. I’ve never heard of them before.

    I had switched the DNS over to Cloudflare a couple of years ago for the security they provided (which clearly didn’t do much good anyway), so I switched it over yesterday morning to GoDaddy, where we purchased our domain name from.

    I could start the whole thing over, but I’d really like to avoid it as much as humanly possible. I took the site over for my friends mother, she’s got a Basketry business; and business is booming. She’s been making, painting, selling and teaching basketry for over 40 years and it’s her primary source of income.

    I jumped onboard almost 4 years ago and have put so much time and work into it.
    It would be a shame to lose it all and have to start over, but maybe you’re right, perhaps there’s a good opportunity there to reset and start over.

  • staff-doublebassd · Staff ·

    Hi there,

    Hosting Checker is saying that the site is hosted with Google Cloud:

    https://cloud.google.com/solutions/web-hosting

    Does that sound familiar?

  • The topic ‘Website taken down by hackers, cannot get into wp-admin’ is closed to new replies.