On the surface, FullDent's site looked normal. Underneath, it had been quietly compromised: a hacker exploited a vulnerability to inject the site with a massive number of spam pages targeting completely unrelated search terms, gambling and casino keywords aimed at Chinese search traffic, none of it connected to FullDent's actual business.
Over 740,000 non-indexed spam pages existed on the site, and they were still being actively crawled by Google. Every crawl budget spent on that junk was time not spent discovering FullDent's real content, and the association with spam put the site at genuine risk of a manual penalty from Google, the kind of thing that can suppress or entirely remove a site from search results through no fault of the business itself.
The first priority was triage, not growth: confirming the scope of the compromise and checking Search Console for existing security flags. We worked through a structured cleanup, removing and noindexing the spam pages, working with the client's development team to patch the vulnerability, and submitting removal requests through Search Console to accelerate getting those pages out of the index.
With the site clean, we moved into a full technical SEO rebuild: proper architecture and internal linking, correct schema markup, mobile and speed optimization, and specialty-focused content built to reclaim the search real estate that had effectively been ceded to spam.
We worked through the cleanup in batches, monitored closely for any sign of re-infection since a patched vulnerability left unwatched can be exploited again, and tracked how quickly FullDent's legitimate pages climbed back into search results as the spam presence shrank.
Most practices lose new patients to Google before they even realize there's a problem. Run through this quick checklist:
