: Strange URL parameter in Google search result, looks like an advertisement I'm a total noob when it comes to being a web dev so please forgive me if the following sounds idiotic. I noticed

@Shakeerah822

You are a victim of a hack (XSS, code injection) due to a bug, security flaw in your CMS (WordPress, Drupal, etc.)

One example of this type of attack is the "pharma hack" on WordPress, where ads about viagra were injected into WordPress pages to get them crawled on Google with incorrect keywords.

You would need to:


Fix security bugs in your webpages if they accept request parameters without sanitization, or their direct injection into page components like
meta description or any other paragraphs. The current malicious link seems to have an intent of injecting ad keywords in your page.
Return a 410 for any already crawled page (410 = permanently discontinued), so that Googlebot can remove these results from SERPs
Put a URL removal submission request in webmaster tools, that may take some while to reflect though.

Vote Up Vote Down

@Ann8826881

how do I stop Google from showing it in the search results?


Make sure this URL (and others like it) don't return a 200 OK status.

For example, to block all URLs that contain any of the words "money", "ebay" or "marketing" in the query string part of the URL, include something like the following near the top of your root .htaccess (Apache) file:

Options +FollowSymLinks
RewriteEngine On

RewriteCond %{QUERY_STRING} (money|ebay|marketing) [NC]
RewriteRule ^ - [F]


To block any URLs that contain a query string:

RewriteCond %{QUERY_STRING} !^$
RewriteRule ^ - [F]


These directives return a 403 Forbidden for such requests (as instructed by the F flag on the RewriteRule).

Vote Up Vote Down

@Barnes591

Your site has likely been hacked and a malicious script inserted to add spam-advertising. The script may show one result to the Google bot and other results to humans. You should contact your hosting provider right away to get them to look at the site and see if they can assist in cleaning it. If not, there are security services that can do the same thing for a fee (Sucuri, Stop the Hacker, etc).

If you are running WordPress or Joomla or another common content management system, you will definitely need to get a pro involved to not only clean the infection but also harden the site against future attacks.

Vote Up Vote Down