pixelgravitas
Report a Hack

Home/Case Studies/Wone8 Estates

Case study · Hacked-site cleanup

Hundreds of spam pages under a property developer's domain, removed at the source.

Short answer: Wone8 Estates, a residential property developer in Sarjapur, Bengaluru, found hundreds of fake product pages, many in Japanese, indexed by Google under its own domain. We cleaned both the database and the files, closed the ways back in, and asked Google to re-crawl. Visits from the developer's property-portal ads and roadside hoardings, which had dropped during the hack, came back.

InjectedHundredsfake product pages, many in Japanese
CleanedDB + filesboth, because cleaning one alone lets it come back
GoogleRe-crawlrequested through Search Console after the cleanup
Enquiry trafficRecoveredvisits from portals and hoardings came back

At a glance

A trusted domain,
borrowed by spammers.

Wone8 EstatesCase file
ClientWone8 Estates, residential property developerNamed
LocationSarjapur, BengaluruIndia
PlatformWordPressCMS
ProblemHundreds of fake product pages indexed by Google under the domainHacked
WorkDatabase and file cleanup, access locked down, Google re-crawlCleaned
NowRankings recovering; portal and hoarding visits backRecovering

What the client saw

“There are links in Google
we don't recognise.”

The client called us: when they searched for their own website, Google showed pages they had never created. Hundreds of them advertised fake products, many in Japanese, all sitting under the Wone8 Estates domain. Google had already crawled and indexed them, and Search Console showed the developer's site appearing for Japanese brand-name product searches that had nothing to do with property.

Why it hurt

The website is where
offline buyers check you out.

Wone8 Estates doesn't rely on search alone. Buyers find it through property listing portals and roadside hoardings, then go to the website to check the project before they enquire. That visit is the moment of trust.

When someone searches the brand after seeing a hoarding and finds spam next to the real project, the enquiry often doesn't happen. During the hack, visits from those channels dropped.

What was happening

The “Japanese
keyword hack”.

This is a common kind of attack, often called SEO spam, or the Japanese keyword hack when the pages are in Japanese. Attackers get into a site Google already trusts and use it to publish their own pages, which then borrow the site's reputation in search.

The real pages still look normal when you visit them, so owners often don't notice until someone searches the brand and sees pages they never wrote.

How it was cleaned

Removed, locked down,
then reported to Google.

1

Removed it at the source

The database, where the junk pages were stored, and the files, where the code that created them was hiding, were both cleaned. Plugins the site didn't need were removed, cutting the ways back in.

2

Locked the doors

Every password was reset, and a security layer was added with its protections switched on across the site.

3

Told Google

A re-crawl was requested through Search Console, so the junk pages drop out of results and the developer's real pages take their place.

The result

The developer's own pages,
back where buyers look.

Junk gone from the siteA search of the domain in Google now returns the developer's own pages: the homepage, the current project and resident news. Checked September 2026.
Rankings recoveringWith the spam removed and the site re-crawled, search rankings are recovering.
Enquiry traffic backVisits from property-portal ads and hoardings, which dropped during the hack, have come back.

The lesson

If you advertise offline,
your website is part of the sale.

A hack that only shows up in Google can still cost you the buyers your billboards and listings paid to bring in. Signs to watch for:

Pages you never wroteResults in Google under your domain that you don't recognise.
A jump in indexed pagesA sudden rise in the page count in Google Search Console's indexing report.
Strange languages or productsUnfamiliar products or languages in your search results or search queries.Malware removal →

More case studies

See all →

Start here

Seeing pages you never wrote under your domain?

Send the URL. We'll check what's been injected and tell you what the cleanup involves, in writing, before any work starts.

  • 1We check the site and what Google has indexed under it.
  • 2You get written findings and a fixed quote for the cleanup.
  • 3You decide. Nothing starts until you say yes.

Report a hacked site

Three fields on purpose. We reply within one business day, and we don't add you to a mailing list.

Report a hacked site