Client: Onemai Clinic, an aesthetic surgery clinic
Role: UX/UI Design, WordPress Development, SEO Recovery. Owned end to end solo, from audit through delivery
Timeline: June to July 2026
The Challenge
The client reached out with no idea that their website had been quietly infected with malware for almost two years. Gambling and adult content links had been embedded right alongside the clinic’s real content, and several content pages had gone completely blank during that same period. None of it had ever been caught.
Before touching the site at all, the first step was to capture full “before” evidence from every angle, because once malware cleanup began, a lot of that evidence would disappear for good and could never be recovered.
What We Found
- Spam query traffic (gambling related) made up around 21% of all traffic over the previous 16 months, concentrated on the Contact page, which happens to be the site’s most valuable page for the business.
- Several content pages had gone blank, likely tied to the same attack.
- Google Analytics had never been installed on the site.
What We Did
- Cleaned the malware and hardened security. Rebuilt WordPress from a clean core, with no reused themes or plugins that might still carry contamination.
- Rebuilt the website from the ground up with a more modern design and an SEO friendly structure baked in from the code level.
- Recovered and rewrote content across 18 pages total, 11 blog articles and 7 service pages. Most of the service pages had to be rewritten completely, since the original content was too outdated to reuse.
- Set up foundational SEO for the new site from day one.
Results (Before vs. After)
| Metric | Before | After |
|---|---|---|
| Spam query traffic | 692 cumulative clicks | 0 clicks since the new site went live |
| Domain security status | At risk (hidden spam) | Clean and steady |
| SEO score (Lighthouse) | 85 | 92 |
| Accessibility score | 64 | 87 |
| Best Practices score | 73 | 96 |
| Content recovered or rewritten | No prior baseline | 18 pages |
Spam traffic was eliminated completely, the project wrapped up with no remaining security issues, and the site now has a much stronger SEO foundation to build on.
What’s Next
Based on this work, the client brought us on for the next phase: a web audit to get the site ready for AI Search visibility (AEO/GEO), along with on-page and off-page SEO improvements to push search rankings even further.
This project reflects how I like to work on every engagement: audit thoroughly before acting, capture evidence that actually proves impact, and be upfront with clients about both what worked and what still needs doing.
