That happened to me as well. Can anyone explain to me how that works? Is there entire site hacked, but only triggered when coming from Google? Or does it work some other way?