Clients site got hacked

start with this article

FAQ My site was hacked

Thanks that article is helpful but what I’m really hoping I can do is get in contact with www.remarpro.com’s customer service since they host this site. We need their help because we can’t access the admin portal, since the login page redirects to a spam site. Everything I’ve found so far, including that article, says “to clean your site, first go to your admin portal …” well we can’t do that so unless we can get ahold of customer service we are really stuck.

Hello,

First of all, you need to understand that www.remarpro.com is not a company. We do not host your website because no such service is offered.

This forum and everything related to www.remarpro.com refers to the software, so no one is responsible if the website has been hacked/crashed.
I leave a small video for you to understand the difference between www.remarpro.com and WordPress.COM.

It is possible that your website is hosted on WordPress.COM, in which case you should contact their support from here.
If you use an external provider (such as GoDaddy, Hostinger, etc), they may be able to give you some advice on what to do.
Remember that we don’t have access to your hosting, so we don’t know the severity of the issue and we can’t do anything about it, just give you some advice as @fierevere has done.

Hope it helps.
Have a good day ??

• This reply was modified 2 years, 9 months ago by stfrosty.

Wordpress.com said they weren’t the host either and that’s it’s was probably you guys. Lol, whatever. Is there any we can figure out who our hosting provider is?

Your site is hosted by namecheap.com

[sdstern@sds-desk ~]$ nslookup groovyproductionsllc.com
Server:		127.0.0.53
Address:	127.0.0.53#53

Non-authoritative answer:
Name:	groovyproductionsllc.com
Address: 198.54.116.162

[sdstern@sds-desk ~]$ whois  198.54.116.162
[Querying whois.arin.net]
[Redirected to whois.namecheaphosting.com:4321]
[Querying whois.namecheaphosting.com]
[whois.namecheaphosting.com]
%rwhois V-1.0,V-1.5:00090h:00 billing.web-hosting.com (Ubersmith RWhois Server V-4.5.5)
autharea=198.54.116.128/26
xautharea=198.54.116.128/26
network:Class-Name:network
network:Auth-Area:198.54.116.128/26
network:ID:NET-31909.198.54.116.162
network:Network-Name:host47.registrar-servers.com (shared #5)
network:IP-Network:198.54.116.162
network:IP-Network-Block:198.54.116.162
network:Org-Name:Web-hosting.com
network:Street-Address:3402 East University Drive
network:City:Phoenix
network:State:AZ
network:Postal-Code:85034
network:Country-Code:US
network:Tech-Contact:MAINT-31909.198.54.116.162
network:Created:20160612164704000
network:Updated:20160625172532000
network:Updated-By:[email protected]
contact:POC-Name:Network team
contact:POC-Email:[email protected]
contact:POC-Phone:
contact:Tech-Name:Network team
contact:Tech-Email:[email protected]
contact:Tech-Phone:
contact:Abuse-Name:Abuse team
contact:Abuse-Email:[email protected]
%ok
[sdstern@sds-desk ~]$