Guide
Japanese titles for your domain in Google, and no sign of them on your own site. Here is what the warning means and how we can help.
By Hamza Rivera, updated
Short answer: The Japanese keyword hack can put spam pages under your domain without showing them to you. Passieon checks the site and Search Console, cleans the intrusion, and handles the search damage. Google decides what remains in its index.
Japanese titles and descriptions, or product names for goods your business does not sell, are a common sign. Google describes the hack as creating new pages with Japanese text in randomly generated directory names, monetized with affiliate links.
Open the Security Issues report. Google lists hacked content there and often shows sample addresses. If the report is empty, the hack may still be present, so do not treat an empty report as clean.
Many of these hacks show the spam to Googlebot and a normal page to visitors, which is cloaking. The URL Inspection tool in Search Console shows how Google fetched a page. Compare it with what you see in a browser.
Google says hackers are sometimes added as site owners in Search Console. Look at the list of owners and users for anyone you do not recognize.
We compare search results, Search Console reports and the live site to identify spam pages and hidden redirects.
We inspect files, database entries and access for injected content, then remove the cause and keep a backup of the affected site.
We check spam URLs and Search Console ownership, then use the relevant Google tools after the site is clean. Google controls its index and review outcomes.
We review access, updates and backups, then give the owner a clear record of the changes and remaining risks.
The technical details were checked against Google and WordPress documentation on November 8, 2026. Google and WordPress change their tools, so we check the current guidance for each site.
An attacker uses a weakness in the site to create many pages with Japanese text in randomly named directories. The pages carry affiliate links, usually to stores selling fake brand goods, and are shown in Google Search under your domain. Google describes it that way in its own guidance on common hacks.
The hack often uses cloaking, so visitors see a normal site and search engines see the spam. Use the URL Inspection tool in Search Console and a site: search to see what Google has.
Usually not. The pages are often created on the fly by rewritten server rules and hidden files, so there may be nothing in your WordPress page list to delete. The files and rules that create them have to go.
Google decides when to recrawl and remove addresses. We check the affected URLs and report what Google shows.
Yes. Passieon is an independent agency, not connected to Google or WordPress. Send your address through the form for a free written check.
No. Google decides what stays in its index. We clean the site, make sure the spam addresses return the right status and file the requests Google provides.
Message us
Ask anything about your site or where your inquiries are going. It goes straight to a person, not a bot. Leave an email and you get a reply.
