Japanese spam detection — laptop scan metaphor

Japanese spam in your Google results? Your website has been hacked.

We find the infection, remove it completely, and harden your site so it does not happen again.

Free Security Check DIY guide

What the Japanese keyword hack is

Attackers inject cloaked pages selling fake goods (¥ prices, Japanese product text) that are visible mainly to Google — not to normal visitors. A classic pattern is thousands of spam URLs under site:yourdomain.com while the homepage still looks fine.

Symptoms

  • site:yourdomain.com shows Japanese or unrelated product pages
  • Sudden spike in indexed URLs
  • Google Search Console security or spam alerts
  • Unexpected ranking losses

First aid: Remove the Japanese Keyword Hack yourself

Technically skilled administrators can clean the infection themselves. Work systematically — and take a full backup first.

  1. Check plugins and themes: Disable or remove outdated, unknown, or unused plugins and themes. Compare against a clean install.
  2. Clean WordPress core files: Replace core files with originals for the same version and inspect wp-config.php and upload directories for injected code.
  3. Clean .htaccess: Remove suspicious redirects and rewrite rules; restore a known-good .htaccess.
  4. Remove spam URLs and the generator: Identify and delete the spam generator (not just individual pages). Check the database and filesystem for cloaking logic.
  5. Resubmit the sitemap in Google Search Console: Submit the cleaned sitemap, report security issues, and monitor indexing of spam URLs.

Our process

  1. Forensic scan (read-only where possible)
  2. Full cleanup including backdoors
  3. Spam-URL cleanup and sitemap repair
  4. Hardening
  5. Monitoring
  6. Handover to an SEO partner for ranking recovery (when needed)

Anonymized case

German medical practice website, 3,000+ injected Japanese product pages, cleaned in 48 hours (domain blurred).

No time for DIY? We handle professional cleanup.

Cleanup pricing (net, excl. 19% VAT)

PackagePriceIncludes
Forensic Diagnosis€99Deep scan, evidence report, containment plan — fully credited toward any cleanup
Standard Cleanupfrom €499WordPress, single domain: malware + backdoor removal, spam-URL cleanup, entry-vector analysis, sitemap repair, basic hardening, verification report
Advanced Cleanupfrom €899Joomla/Drupal, database spam, redirects, blacklist removal, missing backups/logs
Large-Scale Remediationfrom €1,490100k+ generated URLs, Shopware/Magento/TYPO3, multisite — fixed quote after audit; includes 3 months Managed monitoring
Custom / Enterpriseon requestCustom/legacy PHP, multiple domains — individual quote after audit

The number of indexed spam URLs is not a per-page multiplier: we remove the generator, not every page. Express emergency service available.

Monitoring (net/month)

PlanPriceIncludes
Lite€39Daily automated scans: malware, blacklist, uptime, spam patterns + alerts
Managed€89Lite + security updates, monthly manual review, monthly report
Pro€149Managed + WAF & log review, priority response, 1 re-infection cleanup/year included
Enterprisefrom €249Multi-site, server/log monitoring, SLA — on request