SEO spam on a hacked website is unwanted content added to redirect search traffic toward other purposes.
Definition source: Google Search Central: Hacked content. Read on 24 October 2026. The practical questions on this page help you define the issue with your administrator.
What does SEO spam on your own domain mean?
Here the term concerns content placed on your site without permission. Google describes hacked content including added pages, text and redirects. An attacker may use your domainA domain name is the address people type to reach your website, such as yourcompany.com. It points visitors to wherever your site is hosted. for topics unrelated to your business.
This differs from a poorly written title or an ordinary mistake in search settings.
An unfamiliar search result is an indicator of compromiseAn indicator of compromise is a technical observation that may point to an attack or unauthorized access to a system., not an explanation of the cause. The search result and your current page may differ. Record both the displayed result and its URL without following unfamiliar destinations just to see what happens.
Keep the observation distinct from a conclusion about your website.
What might you notice?
Which PHP version does your site report?
We read only what your site already sends in public: the headers and the top of the homepage. No scan, no login.
Examples include pages about products you do not sell or titles your team never wrote. First check that the result actually concerns your domain. An old campaign page, an external mention or another domain needs a different assessment from newly added content inside your own installation.
Record the date and exact page. Have your administrator compare the finding with the CMSA content management system (CMS) is software that lets you edit the pages, texts and images of your website by logging in, without writing any code. and publication history. Ask whether the search management account contains security notices too.
An account showing no warnings is not itself an investigation of all content on the site.
What should happen to unwanted content?
Have the administrator investigate its origin instead of only changing the visible text. A backdoorA backdoor is a hidden or undocumented way into a system outside its normal administration route. or other unwanted access may be a separate investigation question. Without an explanation for the changes, it remains unclear how the content could appear on your domain in the first place.
Preserve relevant notices and discuss which backupA backup is a separate copy of your website's files and database, so you can bring the site back after a mistake, a hack or a failed update. is available. Have its contents checked before restoring it. An older copy could contain unwanted content or lack recent legitimate orders.
Choosing it therefore requires investigation and a decision about business information, not simply a date that looks reassuring.
When should you ask for help?
Contact an administrator or security specialist if you cannot explain the pages, changes return or you have lost administrative access. Then discuss which search follow-up fits the established situation. Google provides its own instructions; a review request does not replace addressing the underlying cause.
This definition cannot establish when search results or rankings will change. Do not treat a ranking guarantee as part of technical recovery. Ask the report to distinguish checked website content from listings still visible in a search engine.
Those are separate observations, made by different systems and potentially at different times.
Product and company names on this page belong to their respective owners. We use them to describe the subject. We are not affiliated with those parties.
Prepare your request for help
Write a short note for your administrator naming the page, the time of the observation and what your team changed beforehand. Include the original warning if one is available. Keep facts separate from suspicions.
Describing what you saw on a particular page is more useful than stating a conclusion that has not been investigated.
For routine maintenance of a PHPPHP is a programming language that builds your web pages on the computer that hosts your site, just before they reach the visitor. WordPress runs on it. site, review the existing PHP services. First discuss which question fits the service. This glossary page explains a term; it does not examine your installation or promise recovery.
For a possible incident, establish the expertise needed and which components someone can actually assess before agreeing the work.
Agree who receives the findings and who follows up an open question. Request a report identifying the areas checked, the date and the limitations. That helps you decide on a next step without treating general reassurance as evidence.
Your own first step is to record the observation and pass it to the administrator responsible for the site.
Frequently asked questions
Does a strange Google title prove my site is currently hacked?
No. Check the URL, time and content on your site. A search result can differ from the current page.
Establish what explains the difference before drawing a conclusion.
What should I tell my administrator?
Provide the page, time and original warning. Describe what you observed and what remains a suspicion. Do not submit passwords, keys or customer personal information through an ordinary contact form.
Can the PHP Exposure Check establish this?
No. It reports public information such as the PHP versionA PHP version is a numbered edition of PHP, like 8.3. Each edition is looked after for a limited time, then gets security fixes only, then nothing. exposed by your server. It does not investigate malware, access permissions or interception of form input.
Have your specific warning assessed separately.