Search shows stranger's pages on your site: this is no longer "just SEO"

The classic picture: the homepage is in place, the phone works, managers take orders. In search results, next to your domain, are pages you did not write. They are hidden from the ordinary menu and shown to the crawler and to people coming from search. Medicine ads, someone else's stores, links to files. This is not a search-engine penalty "for bad texts". It is someone else's code or someone else's account on the site.

Asking the search engine to recrawl is too early. First the way in is closed: admin and host passwords, extra users, old plugins and files that were not in your build. Otherwise the pages come back the next day, and the search engine remembers the domain as a source of junk for a long time. A copy is kept before cleanup, so you can see what was added instead of wiping the only trace.

While you decide whom to call

• Do not edit files at random and do not install three "cleaners" from search one after another.
• Write down examples of the foreign addresses. They help you check that the cleanup actually finished.
• See whether the domain mail left together with the site. It often does.
• Warn whoever runs the ads: the ads may no longer lead to you.

Lexora treats this as an incident, not as an SEO request. Access, a backup and a window when changes are allowed are needed. After cleanup an audit makes sense so the way in does not remain in an old plugin, and monitoring so the next foreign page does not wait a month. A pentest belongs when the site is yours again and you need to know whether the hole is in the account area or it was only a weak password. The basic audit is free for new clients, but search results that were already rewritten are a reason not to wait in line "until next week".