wmedtour.com — Malware Remediation, Full Rebuild & SEO Recovery

Problem

wmedtour.com, a medical tourism platform, had been compromised by malware that was silently injecting spam content and redirect scripts into indexed pages. Google had already started flagging and de-ranking affected URLs, organic traffic was collapsing, and the existing codebase gave no confidence that the infection was fully contained — patching around it risked leaving a backdoor in place.

Action

• Audited the infected codebase and hosting environment to identify the injection vectors, then made the call to rebuild rather than patch, given the scope of the compromise.
• Rebuilt the platform on a clean stack: a Node.js/Express backend, a Next.js 14 frontend, MySQL for relational data, and Meilisearch for fast, typo-tolerant search across listings.
• Hardened the new deployment (dependency hygiene, input handling, server configuration) so the same infection vector couldn't reopen.
• Rebuilt the site's indexable structure and content pipeline, then layered in an AI-assisted SEO automation agent to keep metadata, internal linking, and content freshness consistent as new pages were added.
• Coordinated the cutover and resubmission to Google Search Console to accelerate re-crawl and re-indexing of clean pages.

Result

Within a 28-day window after relaunch, Google Search Console reported 4.04K clicks (+998%) and 724K impressions (+985%) — the platform not only recovered its pre-incident visibility but substantially exceeded it, on infrastructure that no longer carried the security risk of the original build.