WordPress Website Design & Security Expert | WPBravo

Japanese Keyword Hack Removal: Clean Your Site and Your Google Results

Google shows Japanese words under your site name. Your site looks normal when you open it. That is the Japanese keyword hack. I remove it from your WordPress site, close the way in, and clean up your Google results too. Most services stop at the files. I do not.

Japanese Hack Cleanup

$199· done in 48 hours
SCREENSHOT · Google results with Japanese titles, domain blurred

Already tried a plugin? I fix the part plugins cannot: your Google results.

What is the Japanese keyword hack?

The Japanese keyword hack is a spam attack. A hacker adds thousands of fake pages to your site, full of Japanese words and links to shops that sell fake brand goods. Google finds those pages and shows them in search results under your name.

The clever part is that you cannot see them. When you visit your site, it looks normal. The spam only shows up when Google visits. This trick is called cloaking. It is why many owners find out weeks later, from a customer or from Google Search Console.

Hackers usually get in through an old plugin, an old theme or a weak password. Small business sites are hit the most, because nobody watches them every day.

What it does to your business

Customers who search for you see spam instead of your services. Some think your business is a scam. Google may add a “This site may be hacked” note under your link. Your real pages lose rankings, because Google is busy with thousands of fake ones. Your email can land in spam folders too. The longer it stays, the harder the cleanup.

You see
Google sees

How to check if your site has the Japanese keyword hack

You can check in five minutes. Try these four things.

SCREENSHOT · site: search

1. Search your site on Google

Type site:yourdomain.com into Google. Scroll through the results. If you see Japanese titles or pages you never made, you are hacked.

SCREENSHOT · Security Issues

2. Open Search Console

Look under Security Issues for a warning. Then open the Performance report and check your queries. Japanese words or brand names you do not sell are a clear sign.

SCREENSHOT · URL Inspection

3. See your site the way Google does

In Search Console, use URL Inspection on one of the spam links and click Test Live URL. If Google sees spam but your browser shows a normal page, that is cloaking.

SCREENSHOT · Users and Sitemaps

4. Check owners and sitemaps

In Search Console settings, look at Users and permissions. Hackers often add themselves as owners. Then check Sitemaps. A sitemap you did not submit is how they push spam pages into Google.

Found something odd? Send me your domain. I will check it for free and tell you what I see.

How to remove the Japanese keyword hack, step by step

Here is the full process I follow. Steps 3 and 4 are where most people get stuck.

1

Back up everything

I take a full copy of your files and database before I change anything. I keep it off your server.

2

Lock Google Search Console

I remove any owners you did not add and delete the fake sitemaps. This stops the hacker from pushing new spam into Google while I work.

3
Where most people get stuck

Find the cloaking code

The code that shows spam to Google and a normal page to you is usually hidden in theme files, WordPress core files, your .htaccess file or a PHP file inside the uploads folder. I compare every file with a clean copy to find it.

4
Where most people get stuck

Find and close the backdoor

The spam is the result. The backdoor is how the hacker gets back in. If I miss it, the spam returns within days. So I search until it is gone.

5

Delete the spam pages

Some spam lives as files. Some lives in the database. I remove both, and I make every spam address return a “gone” message.

6

Replace WordPress, plugins and theme

I swap them all for fresh, clean copies. Anything you no longer use gets deleted.

7

Reset every password and key

WordPress, hosting, FTP, database and the secret keys in your config file. Anyone with a stolen login is logged out.

8

Ask Google to check again

I send a review request in Search Console with a clear note of what I fixed. Then I start cleaning your Google results. That part is next.

Cleaning your Google results after the hack

This is the part most cleanup services skip. Your files are clean, but Google still shows hundreds or thousands of spam pages under your name. They do not disappear on their own for a long time. Your customers keep seeing them, and your real pages rank lower.

Here is what I do to speed it up.

410

Mark spam as gone

Every spam address returns a 410 “gone” message. Google treats 404 and 410 almost the same, but 410 clearly says the page is gone for good.

Submit a clean sitemap

I submit a fresh, clean sitemap, so Google recrawls your real pages first.

Hide the worst pages fast

For the spam pages that show up the most, I use the Removals tool. It hides them from search results for about six months while Google drops them for good.

Check every week

I check your results every week and remove new spam pages as they appear.

Day 1
Files cleaned
Week 1
Review sent to Google
Weeks 2 to 6
Spam drops out
Day 1
Files cleaned
Week 1
Review sent to Google
Weeks 2 to 6
Spam drops out

How long does it take? Most spam results drop out within 2 to 6 weeks. Sites with many thousands of spam pages can take longer. Your real rankings usually come back as the spam goes away.

Most cleanup services stop at the files. My $199 package includes the Google cleanup.

Want both done for you? Files and Google results, $199 flat, 60 day guarantee.

Why the Japanese keyword hack keeps coming back

If you cleaned your site and the spam came back, one of these things was missed.

I check all five. And if the same site gets infected again within 60 days, I clean it again for free.

How to stop it from happening again

These six habits block almost every Japanese keyword hack I see.

Update WordPress, plugins and your theme every week

Delete plugins and themes you do not use

Use strong passwords and two factor login for every admin

Check the owners in Search Console every few months

Keep a daily backup stored off your server

Do not keep old test sites on the same hosting account

Do not want to do this yourself? My care plans do all of it for you, from $79 a month. Or pick Watch for $19 a month, and I will tell you the moment something looks wrong.

Khokon, WordPress consultant, working on a client site

Who will fix it

I am Khokon. I have worked on WordPress for 15 years, with 850+ projects delivered, and 4.8 stars from 94 reviews on Upwork.

I do every cleanup myself, and you can reach me on WhatsApp the whole time. My own site was hacked once. I cleaned it and cleaned up my Google results the same way I will clean yours.

I work 08:00 to 24:00 Bangladesh time. That is 10 pm to 2 pm US Eastern.

15
Years
850+
Projects Delivered
4.8★
Stars
94
Reviews
More about me

Japanese keyword hack removal price

$199 flat for one site.

That includes the files, the backdoor, Search Console and your Google results. No plan to buy. No extra fee later.

File cleanup services
WPBravo
Typical price
$40 to $200
$199
Malware and backdoor removal
✓
✓
Search Console owners and sitemaps
Sometimes
✓
Spam pages removed from Google
✗
✓
Guarantee
Varies
60 days

Other kinds of hacks, like redirects or Google warnings, are covered by my standard malware removal →

Questions about the Japanese keyword hack

How long until the Japanese results disappear from Google?

Most spam results drop out within 2 to 6 weeks after the cleanup. Sites with many thousands of spam pages can take a few months. The Removals tool hides the worst ones much sooner.

In most cases, yes. Once the spam is gone and Google recrawls your real pages, rankings usually return. How fast depends on how long the hack was live and how many spam pages Google saw.

A plugin can often remove the infected files. It cannot remove hacker owners from Search Console, and it cannot clean your Google results. That is why the spam keeps showing up after a plugin says your site is clean.

Yes. Add me as an owner, and I remove myself when the job is done. Without it, I cannot remove fake sitemaps, hacker owners or the spam in your Google results.

Yes. One site, one flat price. It includes the cleanup, the Google cleanup and the 60 day guarantee. There are no add ons.

Yes. I work with your host to get temporary access, clean the site, then send them a report so they can turn it back on. This happens often with this hack.

Get the Japanese spam out of Google

Send me your domain. I will check it for free and tell you how bad it is. If you want me to fix it, you pay $199 and I start the same day.

Or message me on WhatsApp