Japanese Keyword Hack Removal: Clean Your Site and Your Google Results
Google shows Japanese words under your site name. Your site looks normal when you open it. That is the Japanese keyword hack. I remove it from your WordPress site, close the way in, and clean up your Google results too. Most services stop at the files. I do not.
850+ projects · Upwork Top Rated · 4.8★ from 94 reviews · Online 10 pm to 2 pm US Eastern
Japanese Hack Cleanup
$199· done in 48 hours
Full malware and backdoor removal
Fake sitemaps and hacker Search Console users removed
SCREENSHOT · Google results with Japanese titles, domain blurred
Already tried a plugin? I fix the part plugins cannot: your Google results.
What is the Japanese keyword hack?
The Japanese keyword hack is a spam attack. A hacker adds thousands of fake pages to your site, full of Japanese words and links to shops that sell fake brand goods. Google finds those pages and shows them in search results under your name.
The clever part is that you cannot see them. When you visit your site, it looks normal. The spam only shows up when Google visits. This trick is called cloaking. It is why many owners find out weeks later, from a customer or from Google Search Console.
Hackers usually get in through an old plugin, an old theme or a weak password. Small business sites are hit the most, because nobody watches them every day.
What it does to your business
Customers who search for you see spam instead of your services. Some think your business is a scam. Google may add a “This site may be hacked” note under your link. Your real pages lose rankings, because Google is busy with thousands of fake ones. Your email can land in spam folders too. The longer it stays, the harder the cleanup.
You see
Google sees
How to check if your site has the Japanese keyword hack
You can check in five minutes. Try these four things.
SCREENSHOT · site: search
1. Search your site on Google
Type site:yourdomain.com into Google. Scroll through the results. If you see Japanese titles or pages you never made, you are hacked.
SCREENSHOT · Security Issues
2. Open Search Console
Look under Security Issues for a warning. Then open the Performance report and check your queries. Japanese words or brand names you do not sell are a clear sign.
SCREENSHOT · URL Inspection
3. See your site the way Google does
In Search Console, use URL Inspection on one of the spam links and click Test Live URL. If Google sees spam but your browser shows a normal page, that is cloaking.
SCREENSHOT · Users and Sitemaps
4. Check owners and sitemaps
In Search Console settings, look at Users and permissions. Hackers often add themselves as owners. Then check Sitemaps. A sitemap you did not submit is how they push spam pages into Google.
Found something odd? Send me your domain. I will check it for free and tell you what I see.
How to remove the Japanese keyword hack, step by step
Here is the full process I follow. Steps 3 and 4 are where most people get stuck.
1
Back up everything
I take a full copy of your files and database before I change anything. I keep it off your server.
2
Lock Google Search Console
I remove any owners you did not add and delete the fake sitemaps. This stops the hacker from pushing new spam into Google while I work.
3
Where most people get stuck
Find the cloaking code
The code that shows spam to Google and a normal page to you is usually hidden in theme files, WordPress core files, your .htaccess file or a PHP file inside the uploads folder. I compare every file with a clean copy to find it.
4
Where most people get stuck
Find and close the backdoor
The spam is the result. The backdoor is how the hacker gets back in. If I miss it, the spam returns within days. So I search until it is gone.
5
Delete the spam pages
Some spam lives as files. Some lives in the database. I remove both, and I make every spam address return a “gone” message.
6
Replace WordPress, plugins and theme
I swap them all for fresh, clean copies. Anything you no longer use gets deleted.
7
Reset every password and key
WordPress, hosting, FTP, database and the secret keys in your config file. Anyone with a stolen login is logged out.
8
Ask Google to check again
I send a review request in Search Console with a clear note of what I fixed. Then I start cleaning your Google results. That part is next.
Cleaning your Google results after the hack
This is the part most cleanup services skip. Your files are clean, but Google still shows hundreds or thousands of spam pages under your name. They do not disappear on their own for a long time. Your customers keep seeing them, and your real pages rank lower.
Here is what I do to speed it up.
410
Mark spam as gone
Every spam address returns a 410 “gone” message. Google treats 404 and 410 almost the same, but 410 clearly says the page is gone for good.
Submit a clean sitemap
I submit a fresh, clean sitemap, so Google recrawls your real pages first.
Hide the worst pages fast
For the spam pages that show up the most, I use the Removals tool. It hides them from search results for about six months while Google drops them for good.
Check every week
I check your results every week and remove new spam pages as they appear.
Day 1
Files cleaned
Week 1
Review sent to Google
Weeks 2 to 6
Spam drops out
Day 1
Files cleaned
Week 1
Review sent to Google
Weeks 2 to 6
Spam drops out
How long does it take? Most spam results drop out within 2 to 6 weeks. Sites with many thousands of spam pages can take longer. Your real rankings usually come back as the spam goes away.
Most cleanup services stop at the files. My $199 package includes the Google cleanup.
Want both done for you? Files and Google results, $199 flat, 60 day guarantee.
If you cleaned your site and the spam came back, one of these things was missed.
The backdoor was never found
The hacker is still an owner in Search Console
A PHP file is still hiding in the uploads folder
The same old plugin or password is still in use
Another site on the same hosting account is infected
I check all five. And if the same site gets infected again within 60 days, I clean it again for free.
How to stop it from happening again
These six habits block almost every Japanese keyword hack I see.
Update WordPress, plugins and your theme every week
Delete plugins and themes you do not use
Use strong passwords and two factor login for every admin
Check the owners in Search Console every few months
Keep a daily backup stored off your server
Do not keep old test sites on the same hosting account
Do not want to do this yourself? My care plans do all of it for you, from $79 a month. Or pick Watch for $19 a month, and I will tell you the moment something looks wrong.
I am Khokon. I have worked on WordPress for 15 years, with 850+ projects delivered, and 4.8 stars from 94 reviews on Upwork.
I do every cleanup myself, and you can reach me on WhatsApp the whole time. My own site was hacked once. I cleaned it and cleaned up my Google results the same way I will clean yours.
I work 08:00 to 24:00 Bangladesh time. That is 10 pm to 2 pm US Eastern.
How long until the Japanese results disappear from Google?
Most spam results drop out within 2 to 6 weeks after the cleanup. Sites with many thousands of spam pages can take a few months. The Removals tool hides the worst ones much sooner.
Will my Google rankings come back?
In most cases, yes. Once the spam is gone and Google recrawls your real pages, rankings usually return. How fast depends on how long the hack was live and how many spam pages Google saw.
Can a plugin remove the Japanese keyword hack?
A plugin can often remove the infected files. It cannot remove hacker owners from Search Console, and it cannot clean your Google results. That is why the spam keeps showing up after a plugin says your site is clean.
Do you need access to my Google Search Console?
Yes. Add me as an owner, and I remove myself when the job is done. Without it, I cannot remove fake sitemaps, hacker owners or the spam in your Google results.
Is $199 the total price?
Yes. One site, one flat price. It includes the cleanup, the Google cleanup and the 60 day guarantee. There are no add ons.
My host suspended my site. Can you still fix it?
Yes. I work with your host to get temporary access, clean the site, then send them a report so they can turn it back on. This happens often with this hack.
Get the Japanese spam out of Google
Send me your domain. I will check it for free and tell you how bad it is. If you want me to fix it, you pay $199 and I start the same day.