Your server is sending spam
If promotional emails are being sent via your website, you will usually notice because your own business emails are no longer being delivered. The domain ends up on blocklists, and legitimate recipients reject it.
I stop the sending, remove the cause and request removal from the lists.
WordPress expert from Schleswig
★★★★★ 5,0 on Google
- Response within 4 hours
- Site clean again within 6 hours – otherwise you only pay half
- €280 fixed price plus VAT
- Money-back guarantee
Report an emergency
I will get back to you within 4 hours.
How to recognise the abuse
The sending runs in the background. You notice it elsewhere.
Bounces for someone else’s emails
Your inbox receives delivery failure notifications for messages you never wrote. This is the clearest indication.
Your emails are being rejected
Offers and invoices are no longer delivered or end up in the spam folder because your domain is on a blocklist.
Warning from the host
The provider reports an unusually high volume of email and threatens to suspend the service, often with little notice.
Unusually high server load
The sending places a noticeable load on the server. The website becomes slower even though visitor numbers have not changed.
How to stop the sending
Identify the sending method
The server’s mail logs show which script is triggering the sending. Without this step, only the symptom is treated.
Remove the cause
The responsible script and all associated backdoors are removed, after which all access credentials are renewed.
Have it removed from the blacklists
Delisting is requested from the relevant providers. Depending on the list, this takes between one day and two weeks.
Transparent costs
Malware scan
plus VAT · one-time
- Complete inspection of files, database and server configuration
- Analysis of access logs
- Written report with all findings
- Strong IT compliance image
If you commission the cleanup afterwards, the 50 € will be fully credited.
Most frequently chosen
Cleanup
plus VAT · fixed price, scan included
- Everything from the scan
- Complete removal of malicious code
- Restoration of normal operation
- Closing the entry point, changing all access credentials
- Security measures
- Report for the insurance company (+200€)
✓ Money-back guaranteeIf I can't clean the site, you pay nothing.
Ongoing support
per month, plus VAT.
- Updates for core, plugins and themes – checked, not installed blindly
- regular malware check
- Ongoing comparison with newly reported vulnerabilities
- Malware removal included free of charge during the support period
The complete fine print:
- All prices are plus 19 % VAT.
- Orders processed on Saturdays, Sundays or public holidays cost an additional one-time 100 € weekend surcharge.
- Response and recovery times apply Monday to Friday from 8 a.m. to 8 p.m. Outside these hours, I will respond as quickly as I can, but without a guarantee.
- The time starts when I have received all the necessary access credentials – not from your first message.
- I discuss special cases such as multiple sites in one installation, WooCommerce with ongoing orders or multisite with you beforehand and tell you the price before I start.
Frequently asked questions
How long will my domain remain on the blacklist?
That depends on the operator. Some lists automatically remove an entry after a few days without any irregularities, while others only do so upon request. Anything between one day and two weeks is usual. The prerequisite is always that the sending has actually been stopped.
Can I send via another route in the meantime?
Yes, that is even advisable. Sending via an external service with its own sender domain bridges the gap. It can be set up in one morning.
Where did the access come from?
In most cases, via an outdated plugin with upload functionality or via compromised FTP credentials. The logs generally make it possible to determine this conclusively.
Every day of spam sending further worsens your deliverability
A call costs you nothing and takes five minutes. If it turns out to be a different problem, I will tell you that too.
Available Monday to Friday from 8 a.m. to 8 p.m. · Related topics: The host has blocked your website · WordPress hacked – what to do now · Remove malware from WordPress · Secure WordPress
Prefer a quick chat
The longer an infection remains undetected, the greater the damage usually becomes. Attackers create additional access points, manipulated pages may be marked as unsafe by Google, and domains can end up on spam blacklists. Even after the technical cleanup, it can take time for such warnings to disappear. That's why it's worth checking early whether an infection is actually present. In a short phone call, it is usually possible to assess what has happened and which next steps make sense.
- Malware scan with written findings50 €
- Fixed-price cleanup, scan included280 €
- Ongoing support, monthlyfrom 65 €
All prices plus VAT · Response within 4 hours, Monday to Friday from 8 a.m. to 8 p.m.