Ranking Recovery · Part 2
A drop has more than one cause
After a hack, owners describe the damage in one sentence: “my Google ranking dropped.” It is true, and it hides the detail that matters. A ranking drop after a compromise is usually three or four separate losses stacked on top of each other. Some reverse on their own once the site is clean. Some need work. One or two may not come back at all.
Before you try to recover anything, find out which losses you actually have. Otherwise you will spend months repairing the one that would have healed by itself and ignoring the one that needed you.
What Google saw while you were not looking
For the length of the compromise, your domain was telling Google a story you did not write. In an SEO spam hack, the story is usually that your site is a store — often in another language — with thousands of product pages, prices, and glowing reviews.
From the case file. The domain in this series spent months presenting itself as a Japanese retail shop. Every injected page carried markup claiming star ratings between 4.3 and 4.9 and review counts from 816 to over 9,000. Google believed enough of it to index 900 of those pages and to remember 7,552 more.
A search engine builds its idea of what a site is about from what the site shows it. When twenty real pages are joined by eight thousand fake ones, the fake ones are not a small stain. For a while, they are most of the site.
The four losses
Loss one: topical confusion. Google’s understanding of what your site is about was diluted. A local service business that suddenly appears to sell handbags is harder to rank for local services. This fades as the spam addresses leave the index, and not before.
Loss two: crawl attention. Google gives each site a limited amount of crawling. During and after the hack, much of yours went to spam addresses. Your real pages were visited less, so changes to them were noticed late.
Loss three: your own pages falling out of the index. If the attackers cloaked the site, redirected it, or broke it, Google may have dropped pages that were once indexed. These have to be picked up again.
Loss four: trust. This is the vague one, and the slowest. A domain with a clean history gets the benefit of the doubt. A domain that recently served thousands of deceptive pages gets less of it for a while.
Website ranking drop or traffic drop: they are different
Two measurements get mixed together here, and they point to different problems.
A ranking drop means your page appears lower for a search than it used to. A traffic drop means fewer people arrive. You can have either without the other.
- Rankings hold but traffic falls: a warning label or a hijacked title is scaring people off the result, or the result now shows spam text.
- Traffic holds but rankings look worse: you may be measuring phrases that never brought visitors anyway.
- Both fall together: pages have left the index or been pushed down.
Search Console’s Performance report separates the two. Impressions tell you whether you are still being shown. Clicks tell you whether people still choose you. Average position tells you where. Read all three over the period that spans the hack.
Why is my website traffic dropping after the cleanup?
This surprises people. The site is cleaned, and traffic goes down again.
Often the explanation is simple. Some of the traffic you had during the compromise was not yours. Spam pages attract visitors — people searching for the products they pretended to sell. When those pages go, their visitors go with them. That traffic was never worth anything to your business, and losing it is the cleanup working.
Look at which pages lost visitors. If the losses are on addresses you never created, nothing is wrong. If they are on your own service pages, that is a real loss and the rest of this series applies.
Google ranking dropped dramatically: reading the shape
The shape of the drop tells you its cause.
A cliff on one day. Something specific happened: a manual action, a security warning, the site going down, or a robots.txt rule blocking everything. Check Search Console’s Security Issues and Manual Actions reports first. These are the fastest to fix, because there is a defined review at the end.
A slide over weeks. This is the dilution and lost crawl attention described above. No single switch reverses it. It lifts as the spam leaves the index.
A drop that began before you knew about the hack. Common, and useful. The date the decline started is often closer to the true date of the intrusion than the date you discovered it.
What comes back on its own
If your real pages are intact and reachable, a good deal returns without heroic effort.
- Pages that fell out of the index are usually picked up again within weeks once Google can fetch them and they are listed in a sitemap.
- Rankings for your own business name normally recover first, because nobody else is competing for it.
- Crawl attention shifts back to real pages as the spam addresses start answering “gone.”
The requirement is that nothing is in the way: no blocking rule, no broken removal rule, no leftover redirect.
What does not come back on its own
Be honest with yourself about three things.
A site that was weak before the hack will be weak after it. If your pages ranked for little beforehand, cleaning up returns you to that position, not a better one. The hack did not cause it, and recovery will not cure it.
Rankings you held because of age and quiet consistency take time to rebuild. Not forever. But longer than the cleanup.
The spam addresses Google never fetched can linger in its records for many months. They do little harm sitting there, but they are a reminder that the index and the server are separate things.
From the case file. Eight months after discovery, Search Console still listed several hundred of the spam addresses for this domain. The server had been clean for most of that time.
Take a baseline today
Whatever state you are in, record it now. Screenshot the Pages report with its indexed and not-indexed totals. Export the Performance report for the last sixteen months, which is as far back as it goes. Note the rank of your business name and two or three real service searches, checked from a phone that is not signed in to your account.
Recovery is slow enough that you will not feel it happening. A dated baseline is the only way to know, three months from now, whether things are moving.
Sorting which losses are temporary and which need work depends on knowing exactly what happened and for how long. A recovery investigation establishes the timeline that the ranking damage has to be measured against.
Find out what actually happenedWebsite recovery and investigation
Back: Why Is My Website Not Showing Up on Google After a Hack?
Next: Google Search Console Removals Tool: What It Does After a Hack, and What It Does Not
Hub: Ranking Recovery Blog Series
ProVAE builds and recovers websites in Douglas, Georgia, serving South Georgia.