Answer these six questions before you phone anyone.
Each question has a yes or no answer, and a no is a risk. Answer from what you can prove today, not from what a supplier once told you. If you cannot find out, count it as a no.
- Is your domain registered in an account you can sign in to, under an email address your company controls?
- Can you sign in to the hosting or deployment account today, without asking anyone?
- Do you hold a copy of the source code, and do you know where the repository lives?
- Can you sign in as an administrator of the content system, and name everyone else who has admin access?
- Do you have a contract or written confirmation that you own the code, design and content?
- Could you restore the site from a backup that you can find yourself and that someone has actually tested?
When the developer has gone quiet.
Silence is rarely the whole problem. The real damage is dependence: the domain sits in a freelancer's registrar account, the hosting bill goes to a card you do not hold, and nobody can say whether the last invoice bought code you legally own.
Start with a short, factual handover request that names the domain, the accounts you need and a date. Keep the tone neutral. Do not threaten, and do not delete or rebuild anything yet. A calm paper trail helps you if the supplier answers late, and it matters more if they do not answer at all.
When the site looks hacked.
Signs include pages you did not write, redirects to unrelated sites, a browser warning, or a host that suspends the account. Change the passwords on the registrar, the email behind it and the hosting account, in that order, from a clean device. Switch on two step sign in where it is offered.
Keep a copy of what is there before anything is wiped, because the old files show how the intruder got in. We can tell you whether a site is cleanable or should be rebuilt on a clean stack. We do not promise to remove every trace of malware, and a site that is hacked a second time usually points to an unmaintained component, not bad luck.
When the agency is always two weeks from done.
The tell is a retainer invoice that arrives on schedule while every demo breaks somewhere new. Nobody can say whether the build is a fifth or four fifths finished. A verdict made on the actual codebase turns that opinion into a number: what remains, what is worth keeping and what it costs to finish.
What the 48 hour diagnostic delivers.
The price is EUR 2,700 (THB 97,000) and it is fixed whatever we find. The clock starts once we have the access needed to inspect the current setup. In the first four working hours we take the domain, the last known login and the name of the developer or agency. Hours four to 24 go on access recovery: registrar lookup, DNS trace, hosting trace and a handover request sent on your behalf. Hours 24 to 48 go on opening every codebase we can reach.
You receive a verified access and credential checklist, a risk map with a keep, patch or rebuild verdict on each component, and a fixed scope quote for the next step. If you sign the follow on work within 30 days, the diagnostic fee is credited in full. The code is yours from day one.
One real case, with its limits.
A Bangkok property agency had engaged an earlier vendor in March 2026. About three months in, defects were still unresolved, and a rebuild was called on 19 June. A preview was ready that night, and the new stack was live on the agency's own domain on 23 June, four days later. A full custom build followed between 25 June and 18 August.
Read this as one first party example, not a benchmark. It was a rebuild after a failed vendor build, not the 48 hour diagnostic, and timing depends on access, the state of the old code and how quickly decisions are made. We have not measured a typical rescue time, so we do not quote one.
How Thai owners describe the same problem.
Owners often search in Thai for เว็บไซต์ถูกแฮก (website hacked), ผู้พัฒนาเว็บหายตัว or ติดต่อโปรแกรมเมอร์ไม่ได้ (developer cannot be reached) and เข้าหลังบ้านเว็บไซต์ไม่ได้ (cannot sign in to the site admin). The six questions are the same in either language. We have not measured search volume for these phrases, so we make no claim about how many owners are affected.
Two or more no answers?
Send the domain, the last developer or agency and what has gone wrong. The 48 hour rescue diagnostic costs EUR 2,700 (THB 97,000), fixed.
Start a rescue diagnosticSources and downloads.
Sources are linked directly. Market prices and engine answers can change, so use the checked date when citing this page.