The Beard and The Baker

Locked out of her own website — and at risk of losing 10 years of posts, images, and memories

The Beard and The Baker (thebeardandthebaker.com) started in October 2015 in Columbus, Ohio — one person building a food and family blog post by post, recipe by recipe, for more than ten years. By the time the site came to MCG, that archive was at risk. The owner was locked out of her own website admin: accounts she had never created had taken control, and Google was being shown spam content from her domain — content regular visitors couldn't see, so the problem stayed hidden while her search presence was polluted. Her only remaining access was through her hosting account, and when she asked her host for help getting back in, her host wouldn't help. This kind of attack is built to be invisible to the owner: according to Sucuri, SEO spam accounted for 38.4% of website infections in its 2024 scan data (Sucuri SiteCheck Report, 2024), borrowing a trusted domain's reputation while the site itself looks normal. She was locked out, at risk of losing 10 years of posts, images, and memories. The site didn't need a fresh start. It needed those ten years back — intact.

Recovered, rebuilt from scratch, and protected

• Recovered the full site and audited it line by line — what was real content, what was spam, and what had to go — rather than trusting a backup and hoping for the best

• Kept everything that mattered: 380 published posts (October 2015 to May 2026), 200+ recipes, 10,500+ media items — over 10 GB of photos and files — and 411 real reader comments

• Removed the rest: 888 spam and unapproved comments, the malicious code, and the junk built up over years of revisions and leftover data

• Rebuilt the site on a custom theme from scratch — no template, no page builder, nothing inherited from the compromised site — with a photo-first homepage, clear recipe categories, a redesigned mobile experience, and recipe cards restyled to match

• Kept the site lean by design: essentials only — recipe cards, plus a small set of tools for email delivery, security and speed — and the custom theme itself, so there are fewer moving parts to patch and worry about

• Protected the search rankings the site had already earned: a redirect map for 122 old URLs so existing Google links and bookmarks keep working, and an SEO foundation rebuilt inside the theme — canonical tags, meta descriptions, Open Graph and Twitter cards with proper share images, and structured data (JSON-LD) for the site, author, breadcrumbs and every post

• Hardened the rebuilt site: comment spam stopped at the door with Cloudflare Turnstile built directly into the theme, monitoring, and MCG managed hosting behind Cloudflare, with SSL, caching and off-site backups

• Kept looking after it: the site is now on ongoing MCG hosting and maintenance, so the same team that rebuilt it is the team still watching it