A public launch with six days to recover
Art Healing Hearts had a WordPress site compromised shortly before a scheduled appearance on The Morning Blend in Las Vegas. The appearance would send people to the organization’s website, and that site needed to accept donations before the segment aired.
The job was not a broad redesign exercise. In six days, I needed to replace the site, move the public URL away from the old server, forward existing paths, make the donation flow work, and clear the Google spam warning visible on the homepage.
The launch constraint shaped the product
The replacement focused on the information a visitor arriving from television needed: what Art Healing Hearts does and how to donate. I designed and built a focused, single-page experience with the organization’s real imagery and a direct donation path.
I built the replacement in Next.js and hosted it on Vercel. Stripe handled donations. There was no CMS or public administrative layer, which removed the CMS and plugin dependency layer from the old WordPress setup. That reduced the externally exposed application surface; it was not a claim that the new site was immune to compromise.
Migration, remediation, and testing
I personally handled the replacement build, URL migration, forwarding, launch testing, and Google remediation. The homepage warning was removed before launch. Some legacy malicious URLs remained indexed, but they did not affect the replacement site or its public donation path.
The Stripe donation flow passed test payments before the television appearance. That made the launch condition concrete: people arriving from the segment could complete a donation rather than encounter an unavailable or untrusted site.
Outcome
Stripe data showed a substantial donation spike around the television appearance. Afterward, donations settled to roughly one or two small gifts per month, with no continued promotional campaign behind the site.
This is a smaller project, but it is a good example of design engineering under a fixed deadline: focus the visitor journey, build the experience, move the production domain safely, validate the payment path, and resolve the issue that could keep people from reaching it.
