Welcome to the Q&A Forum

Thanks very much for your explanation.

I have gone ahead and temporarily blocked the pages in GSC.

I am working on the robot.txt and see there are no instructions for the crawlers to skip over these urls in question.

I understand that I should use the "*" operator to alert all crawlers to disallow the pages in this format:

user-agent: *

Disallow: /?spam string

Finally, I will send the suggested edit to Google and see where that gets me. Honestly, at this point, they cannot possibly be penalized the site any worse so anything working towards cleaning up the index for the site will be a step in the right direction.

The site in question was hacked years ago. All the security scans come up clean but the seo crawlers like semrush and ahrefs still show it as an indexed page. I can even click through on it and it takes me to the homepage with no 301. Where is the page and how to deindex it?

domain/com/?spam

There are multiple instances of this.

http://www.clipular.com/c/5579083284217856.png?k=Q173VG9pkRrxBl0b5prNqIozPZI