Problem · Links and reputation
Our site was hacked with spam pages. Clean, secure, then reindex.
Strange pages in Japanese or pharmacy spam appear in Google under your domain, or visitors get redirected. Hacks like these hurt rankings and trust until they are cleaned up properly.
Is this you?Signs we usually see
- site:yourdomain.com shows pages you didn’t create
- Search results show foreign-language spam titles
- A security warning in Search Console or the browser
- Visitors from Google get redirected elsewhere
01 / Quick checks
Three checks you can run today
Each takes minutes. Together they tell you whether this page is about your problem.
- Search site:Look for pages with spam words or foreign characters.
- Open Security issuesSearch Console lists detected hacks and examples.
- Check new users and filesUnknown admin users, plugins or recently changed files.
Security containment and search recovery log
Preserve evidence, isolate the compromised system and identify injected URL patterns before ordinary SEO work.
| Situation to check | Proposed scope | Boundary |
|---|---|---|
| Search site: | Look for pages with spam words or foreign characters. A still-active compromise must be contained before redirects or reindexing requests can produce durable results. | Deleting visible spam pages alone does not remove persistence, stolen access or a vulnerable plugin. |
| Open Security issues | Search Console lists detected hacks and examples. | Keep an unchanged comparison sample so this check can distinguish the proposed cause from unrelated variation. |
| Outdated CMS or plugins | Known vulnerabilities left unpatched. | Treat this as a hypothesis until the affected URL or account evidence supports it. |
| Ready to commission a fix | Record root-cause remediation, credential rotation and clean response checks; platform review outcomes are external decisions. | [CONFIRM: access, scope, owner, fee and review date before work begins.] |
Security containment and search recovery log
Illustrative blank specification. This is a diagnostic structure, not a client result.
- Affected population
- Preserve evidence, isolate the compromised system and identify injected URL patterns before ordinary SEO work.
- Decisive observation
- A still-active compromise must be contained before redirects or reindexing requests can produce durable results.
- Alternative explanation
- Deleting visible spam pages alone does not remove persistence, stolen access or a vulnerable plugin.
- Acceptance evidence
- Record root-cause remediation, credential rotation and clean response checks; platform review outcomes are external decisions.
- Supporting check
- Unknown admin users, plugins or recently changed files.
- Approval
- [CONFIRM: accountable owner and authorised next step.]
What the first handover should make clear
- Preserve evidence, isolate the compromised system and identify injected URL patterns before ordinary SEO work.
- A still-active compromise must be contained before redirects or reindexing requests can produce durable results.
- Record root-cause remediation, credential rotation and clean response checks; platform review outcomes are external decisions.
- The original observations, unresolved questions and any client access needed for the next scope.
02 / Likely causes
What usually causes it
In the order we usually check them. Most cases have more than one.
- Outdated CMS or pluginsKnown vulnerabilities left unpatched.
- Weak passwords or shared accessCompromised admin or hosting accounts.
- Japanese keyword hackAuto-generated spam pages, often cloaked.
- Cloaked redirectsSpam shown only to search visitors.
- Injected linksHidden links added to real pages.
03 / What we do
How we fix it
Four steps, in order. You see the evidence and the plan before anything changes on your site.
- Step 01ContainAccess secured and the scope of the hack mapped.
- Step 02CleanMalware and spam pages removed by our own team, files restored and vulnerabilities patched.
- Step 03ReindexSpam URLs return 404 or 410; review requested if flagged.
- Step 04RecoverRankings and brand results tracked until clean.
04 / Services
Services that fix it
Starting prices in USD. TopClick is not VAT-registered. Scope and price in writing before work starts.
TopClick is not VAT-registered
Malware cleanup & security ↗Hacked sites cleaned by our own team, hardened and taken off blocklists.From $[X] /siteRequest
Technical SEO ↗The causes behind crawl, rendering and indexation problems, found and fixed.From $[X] /projectRequest
WordPress maintenance ↗Updates, backups, security and small fixes by the team that knows your site.From $[X] /monthRequest
Link audit & penalty recovery ↗Toxic links, manual actions and negative-SEO attacks found and cleaned up.From $[X] /projectRequest
05 / Questions
Questions about this problem
01Should we restore a backup?
Only a backup from before the hack, and the hole that let attackers in must be fixed, or it happens again.
02How long do spam pages stay in Google?
Once they return 404 or 410, they usually drop out over days to weeks. Removal requests can hide them sooner.
03Where do we start?
With the free snapshot: we check your site for this problem, confirm the likely cause and send a written first scope with a price.
Start here
Check your site for this
- 1Send your site — we confirm the cause and where we would start
- 2We check search and AI visibility
- 3PDF by email: five website problems and AI visibility, within two business days of receiving your website URL
Prefer to talk?Book a 20-min callhello@topclick.expert
Request receivedWe'll reply within one business day. Want to talk sooner? Book a call in the next tab.See what happens next →
20-min intro callVIDEO CALL · FREEA strategist looks at your site with you and suggests where to start. No pitch.
Times in your time zone · your local time
Enter a valid email address
We couldn’t send this. Please try again or email hello@topclick.expert.
RequestedWe’ll confirm the time by email within [X] business hours.How to prepare for the call →