WordPress Site Migration to New Server + DNS Cutover + Malware Cleanup (Hospital Website)

Project overview I run Param Super Speciality Hospital and need our existing WordPress website (currently exported as a full site backup — WordPress core, theme, plugins, uploads, and a MySQL .sql dump, ~339MB total) migrated to a new server. Important — please read before applying: A preliminary scan of the current backup shows signs the existing site may have been compromised (unfamiliar PHP files at the root with random names, spam-themed image files, and suspicious nested folders that don't belong in a stock WordPress install). This job is not a simple lift-and-shift — it needs to include malware detection and cleanup as part of the migration, not just a copy of files to a new host. Scope of work 1. Review the provided backup (WordPress core + wp-content + database SQL dump) and identify/remove malware, backdoors, unused/spam files, and any unauthorized admin users or injected content in the database. 2. Set up a fresh server environment (recommend and justify: VPS/Ubuntu LTS vs Docker-based stack vs managed WordPress hosting — please advise on tradeoffs for a small hospital site with moderate traffic). 3. Install and configure PHP, MySQL/MariaDB, and a web server (Nginx or Apache), matching current WordPress 6.8.x requirements. 4. Restore the cleaned WordPress files and import the cleaned database. 5. Update wp-config.php, site URLs, and any hardcoded paths/domains as needed. 6. Set up SSL (Let's Encrypt or equivalent). 7. Point DNS (domain: paramsuperspecialityhospital.com) to the new server once ready, with minimal downtime. 8. Basic hardening after migration: remove default/unused plugins, enforce strong admin credentials, set correct file permissions, and recommend a security plugin (e.g., Wordfence) for ongoing monitoring. 9. Verify site functionality (Contact Form 7 submissions, Rank Math SEO settings, Smart Slider, Pods content) post-migration. 10. Provide a short handover document: server access details, what was removed/cleaned, and recommendations to prevent re-infection. What I'll provide 1. Full site backup (WordPress files + database dump) via secure transfer 2. Domain registrar/DNS access (or I'll make the DNS changes myself if you provide exact records) 3. Access to new server once provisioned (or freelancer can recommend a host/provider) Ideal skills 1. WordPress migration & server administration (Linux/Ubuntu, Nginx/Apache, MySQL) 2. Experience cleaning hacked/malware-infected WordPress sites (not just installing malware scanners) 3. Comfortable with DNS management and SSL setup 4. Docker experience a plus, if that's the recommended hosting approach Deliverables 1. Fully working, cleaned website live on the new server 2. DNS pointed and SSL active 3. Written summary of security issues found and fixed 4. Basic recommendations for future maintenance/monitoring Please include in your proposal: your approach to identifying malware in a WordPress backup, whether you'd recommend Docker vs traditional VPS setup for this use case, and your estimated timeline.