Website Shows "Index of /" Instead of Your Site
Instead of your homepage, visitors see a plain list of files and folders titled "Index of /" — often just a lonely cgi-bin folder. The server is working, but it cannot find the file that is supposed to be your homepage.
Common signs of this issue
- Your domain shows a bare white page titled "Index of /" with a list of files or folders instead of your homepage.
- The list contains only a cgi-bin folder, or nothing at all, which usually means the site folder is empty.
- The list shows your site's files — or a folder with your site's name — but not the site itself.
- It started right after moving to new hosting, pointing the domain somewhere new, or uploading a new version of the site.
- Instead of a file list, you see a generic host page such as "Coming soon", "Future home of", or "Welcome to your new account".
- The homepage works at a longer address, such as your domain followed by a folder name, but not at the plain domain.
Safe checks you can do yourself
None of these require sharing passwords with anyone.
- Read the list itself. Only cgi-bin, or empty: the folder your domain points to has no website in it. Your site's files visible: the homepage file is missing or misnamed. A single folder (for example "mysite" or "public_html"): your files were uploaded one level too deep.
- Log into your hosting file manager (in cPanel, the File Manager) and open the web root — usually public_html for the main domain. Your homepage file should sit directly inside it, not inside another folder within it.
- Look for a homepage file named exactly index.html, index.htm, or index.php (WordPress uses index.php). Most hosting runs on Linux, which treats file names as case-sensitive, so Index.html or index.HTML may not be recognised. A file called home.html will not be picked up automatically.
- If you have an addon domain or subdomain, check which folder it points to — in cPanel this is shown on the Domains screen. It is common for an extra domain to point at an empty folder of its own rather than the one where the files were uploaded.
- If you just moved hosts, check where the domain actually points with a free DNS lookup tool. If the domain already points to the new server but the files have not been uploaded or restored there yet, visitors see an empty folder or the host's default page.
- Seeing a "Coming soon" or parking page instead of a file list? That is usually the registrar's or new host's placeholder. It means the domain points at the placeholder, or a default page file is sitting in your web root and taking priority. Check for a leftover default index file from the host.
- Once the site is back, think about directory listings in general. Showing folder contents to anyone who asks can expose backups, old files, or uploads you did not intend to publish. Many hosts let you turn off indexes for the whole account; your developer or host can switch it off.
What this usually means
When someone visits your domain, the web server looks in one specific folder for a file with an agreed name — normally index.html or index.php. If that file is there, it shows your homepage. If it is not, and the server is set to allow it, it falls back to listing whatever is in the folder. "Index of /" is that fallback. The server is up and the domain is pointing somewhere real — it just is not finding your homepage where it expects.
The usual causes are mundane: files uploaded into a subfolder instead of directly into public_html, a homepage file that was renamed or deleted, a domain pointed at the new host before the website was copied over, or an addon domain aimed at an empty folder. A lone cgi-bin folder is the giveaway for an empty account — cPanel creates that folder by default, so seeing only it means nothing else was ever uploaded there.
It is rarely a hack, but it is worth one quick look. If you recognise every file in the list and your homepage file is simply missing, it is almost certainly an upload or configuration mistake. If the folder contains files you have never seen, or your index file was replaced with something strange, treat it as a possible compromise and read the hacked-site guidance before changing anything.
What not to do
- Don't delete the cgi-bin folder or other files you do not recognise in a panic — cgi-bin is a normal system folder and removing things will not bring the homepage back.
- Don't re-upload the whole site over the top of the live folder without a copy of what is there now. You may overwrite the one file that was actually correct.
- Don't cancel your old hosting until the new host is showing the real site at the plain domain and email is confirmed working.
- Don't keep changing DNS settings while you wait for them to spread — each change restarts the waiting period and makes it harder to tell what is fixed.
- Don't leave directory listings switched on once the site is back. A browsable list of your files is an invitation to anyone curious.
When to get help
If the file list shows your site but nothing you rename or move brings it back, or you are mid-migration and are not sure whether the problem is the files, the folder, or where the domain points, it is worth having someone look for twenty minutes rather than experimenting on the live account. That is especially true for WordPress sites, where the files and the database both have to be in the right place and connected — getting the files visible is only half the job. Help is also sensible if the listing contains files you do not recognise, since that shifts the question from a setup mistake to a possible security problem.
Not sure what to do next?
Answer a few short questions and we'll point you to the safest next step — DIY, a freelancer, or a direct review. No passwords required.
Is this a business website? If this issue may be costing you leads, sales, or trust, you may want a direct review instead of trial and error.
Frequently asked questions
What does "Index of /" mean on my website?
It means the web server looked in your site's folder for a homepage file, such as index.html or index.php, did not find one, and showed a list of the folder's contents instead. The server works; the homepage file is missing, misnamed, or in the wrong folder.
Why does my website only show a cgi-bin folder?
cgi-bin is a folder that cPanel hosting creates automatically. If it is the only thing listed, the folder your domain points to is empty — the site was never uploaded there, was uploaded to a different folder, or the domain points to a new host before the files were moved.
I uploaded my files. Why is it still showing Index of?
Most often the files went into a subfolder, so the homepage sits one level too deep, or the homepage file is not named index.html or index.php in lowercase. Open your web root in the file manager and check that the homepage file sits directly inside it.
Is a directory listing a security risk?
It can be. Anyone can browse the listed files, including backups, old versions, or documents you did not mean to publish. Once your homepage is back, ask your host or developer to switch off directory listings for the account.
Why do I see a "Coming soon" page instead of my site?
That is a placeholder from your registrar or new host. Either the domain is pointed at the placeholder rather than your hosting, or the host's default page file is sitting in your web root. Point the domain correctly and remove the default file once your own site is in place.
Could this mean my site was hacked?
Usually not — it is normally an upload or setup mistake. But if the list contains files you have never seen, or your homepage file was replaced with something odd, treat it as a possible compromise and investigate before restoring anything.