I am requesting an estimate for a whole-account WordPress security assessment and the clean rebuilding of one compromised website.
My WebHostingHub/cPanel account contains five domains:
- arealwholelot.com — document root: /public_html
- kaneconsultingandcoaching.com — document root: /public_html/kaneconsultingandcoaching.com
- doctoralsuccess.com — document root: /doctoralsuccess.com
- finisheddissertation.com — document root: /finisheddissertation.com
- jakproductions.biz — document root: /jakproductions.biz
WebHostingHub confirmed that arealwholelot.com was compromised. A support representative found substantial malicious base64 code in its wp-config.php file. The host reinstalled the WordPress core files, but the problem persisted. The host did not perform a complete malware scan, identify all affected files, or determine how long the infection had been present.
Although the sites use separate WordPress installations, Kane Consulting and Coaching is nested beneath /public_html, and all five sites share the same hosting account. I therefore need the entire account examined—not only the known infected wp-config.php file.
I have a full cPanel account backup created on August 16, 2026. It is a 3.65 GB preservation snapshot stored locally and in Dropbox. Because it was created after the compromise was discovered, I am treating it as potentially infected and will not restore or share it except through an agreed secure process.
Please provide an itemized estimate addressing:
- A security assessment and malware scan of the entire hosting account, including all five sites, databases, wp-config.php and .htaccess files, administrator accounts, themes, plugins, uploads, cron jobs, and other persistence mechanisms.
- Safe containment of arealwholelot.com without disabling or damaging kaneconsultingandcoaching.com or the other sites.
- Identification and remediation of any compromise found in the other WordPress installations or elsewhere in the hosting account.
- A fresh rebuild of arealwholelot.com using a clean WordPress installation, freshly obtained themes and plugins, and only scanned and validated content recovered from the old site.
- Security hardening, including credential rotation guidance, new WordPress salts, multifactor authentication where available, removal of unused accounts and software, firewall or monitoring recommendations, and properly configured off-site backups.
- Post-remediation testing and written confirmation that the rebuilt site and the other installations have passed malware scans.
Please also include:
- Your proposed approach: cleaning the existing ARWL installation, rebuilding it, or both—and why.
- The estimated schedule.
- Itemized one-time charges.
- Any required subscriptions or continuing fees.
- What access or credentials you would require and how they would be transmitted securely.
- What reports or documentation I would receive.
- Whether you provide a remediation warranty or follow-up period if malware reappears.
- Your experience handling compromised WordPress accounts with multiple sites under one cPanel account.