Bluepillusa / Pharmacy spam on blog – can’t find it to remove it

We’ve got several hits on google for a blog at https://sogweb.sog.unc.edu/indigent/ that redirect to spam sites. All of the links end in: ?pp=####, where #### is any number; all redirect to this pharmacy site. I’m looking at the admin console and not really seeing anything, and our server team hasn’t had the full opportunity to investigate fully. Any advice as to where I can look to remove this? (In other words, where is the ?pp directing people?)

Thanks!

-Brad