Google shows "This site may be hacked" when it finds spam content, hidden links or pages added by someone else, and a red "Deceptive site ahead" page when it finds malware or phishing. Both mean your site has been changed without your knowledge. The warning stays until the site is cleaned and Google reviews it.
Find out what Google found
Open Google Search Console for your site and look under Security and manual actions. It lists the problem type and example addresses. If you don't have Search Console, set it up and verify the domain; you'll need it for the review anyway.
Common things it finds
- Thousands of spam pages (often Japanese or pharmaceutical keywords) in Google results
- Visitors from Google redirected to other sites, while direct visitors see your normal site
- Hidden links injected into your pages
- Phishing pages uploaded into a folder on your hosting
Get the warning removed
- Clean the files and database, and close the way in.
- Return a "gone" response for the spam addresses so Google drops them.
- Request a review in Search Console, describing what you fixed.
Reviews usually take a few days. Our hacked website repair covers the clean-up and the review.
