Many hacked websites look normal to their owners. Hackers often hide spam or redirects that only search engines or mobile visitors see.
Warning signs
- Google shows a “This site may be hacked” label or security warnings.
- Search Console reports security issues or spam pages.
- Strange pages in Google results for your site (search
site:yourdomain.com). - Visitors redirected to other websites, especially on mobile.
- New admin users you did not create.
- Unexplained slowness or high server usage.
- Hosting provider suspends the account.
- Emails from your domain marked as spam suddenly.
What to do
- Change all passwords and enable two-factor authentication.
- Take the site offline or into maintenance if needed.
- Restore a clean backup or have it professionally cleaned.
- Update everything and remove unknown users and files.
- Check robots.txt and redirects for tampering; compare with our robots.txt generator and redirect generator.
- Request a review in Search Console.
Read website security basics.
Want the full picture? This article is part of Business websites: the complete guide, our in-depth guide with everything in one place.
