
Japanese spam in your Google results? Your website has been hacked.
We find the infection, remove it completely, and harden your site so it does not happen again.
What the Japanese keyword hack is
Attackers inject cloaked pages selling fake goods (¥ prices, Japanese product text) that are visible mainly to Google — not to normal visitors. A classic pattern is thousands of spam URLs under site:yourdomain.com while the homepage still looks fine.
Symptoms
site:yourdomain.comshows Japanese or unrelated product pages- Sudden spike in indexed URLs
- Google Search Console security or spam alerts
- Unexpected ranking losses
First aid: Remove the Japanese Keyword Hack yourself
Technically skilled administrators can clean the infection themselves. Work systematically — and take a full backup first.
- Check plugins and themes: Disable or remove outdated, unknown, or unused plugins and themes. Compare against a clean install.
- Clean WordPress core files: Replace core files with originals for the same version and inspect
wp-config.phpand upload directories for injected code. - Clean .htaccess: Remove suspicious redirects and rewrite rules; restore a known-good
.htaccess. - Remove spam URLs and the generator: Identify and delete the spam generator (not just individual pages). Check the database and filesystem for cloaking logic.
- Resubmit the sitemap in Google Search Console: Submit the cleaned sitemap, report security issues, and monitor indexing of spam URLs.
Our process
- Forensic scan (read-only where possible)
- Full cleanup including backdoors
- Spam-URL cleanup and sitemap repair
- Hardening
- Monitoring
- Handover to an SEO partner for ranking recovery (when needed)
Anonymized case
German medical practice website, 3,000+ injected Japanese product pages, cleaned in 48 hours (domain blurred).
No time for DIY? We handle professional cleanup.
Cleanup pricing (net, excl. 19% VAT)
| Package | Price | Includes |
|---|---|---|
| Forensic Diagnosis | €99 | Deep scan, evidence report, containment plan — fully credited toward any cleanup |
| Standard Cleanup | from €499 | WordPress, single domain: malware + backdoor removal, spam-URL cleanup, entry-vector analysis, sitemap repair, basic hardening, verification report |
| Advanced Cleanup | from €899 | Joomla/Drupal, database spam, redirects, blacklist removal, missing backups/logs |
| Large-Scale Remediation | from €1,490 | 100k+ generated URLs, Shopware/Magento/TYPO3, multisite — fixed quote after audit; includes 3 months Managed monitoring |
| Custom / Enterprise | on request | Custom/legacy PHP, multiple domains — individual quote after audit |
The number of indexed spam URLs is not a per-page multiplier: we remove the generator, not every page. Express emergency service available.
Monitoring (net/month)
| Plan | Price | Includes |
|---|---|---|
| Lite | €39 | Daily automated scans: malware, blacklist, uptime, spam patterns + alerts |
| Managed ★ | €89 | Lite + security updates, monthly manual review, monthly report |
| Pro | €149 | Managed + WAF & log review, priority response, 1 re-infection cleanup/year included |
| Enterprise | from €249 | Multi-site, server/log monitoring, SLA — on request |
