Site Hacked - Malicious URLS indexed

[Saladyn]

Hi guys,

I manage a domain that time ago was hacked. At that time it was cleaned but we found in Semrush and GSC we were still positioning for strange malicious keyworks. We were able to use Google footprints to clearly see that some malicious URLS were in Google index.

We did the following actions:

1. Block with patterns in robots.txt
2. Request deindexation of the directories in GSC
3. Redirect the URLS to home
4. After 5 days, allowing that malicious URLS in robots.txt to let Google spiders in and find the redirections previously applied.

That was all the process. Do you guys believe is fine doing these? How long could posibly take for Google to remove all these content?

Thanks in advance guys!

 

[Mr Positive]

Install Malcare and check the site. No one can how long itll take

 

[RichKIDLK]

What is the malicious URL?

 

[Saladyn]

Install Malcare and check the site. No one can how long itll take

Thanks man, Ill check that out.

What is the malicious URL?

I am not sure I can post that shit here. But are related with soccer matches and videos, sth totally different to the topic of the site.

 

[akki002]

It’s called Japanese keywords spam hack
Install wordfence plugin and scan
And diswaov links on webmaster

 

[RichKIDLK]

Thanks man, Ill check that out.

I am not sure I can post that shit here. But are related with soccer matches and videos, sth totally different to the topic of the site.

Post a screen shot include that links

 

[Saladyn]

Post a screen shot include that links

There it is. Obviously there are much more. These are two examples:

 

[alonelywriter]

You were not supposed to redirect them to home page.

 

[Saladyn]

It’s called Japanese keywords spam hack
Install wordfence plugin and scan
And diswaov links on webmaster

Is that shitty thing easy to get rid of? The web is clean, wordfendce installed and everything runs smooth. The only thing that bothers me is these indexed malicious URLS.

 

[Saladyn]

You were not supposed to redirect them to home page.

Where I was supposed to redirect them instead of home? May other pages with noindex or less relevant (cookies policy, etc.)?

 

[alonelywriter]

Where I was supposed to redirect them instead of home? May other pages with noindex or lees relevant (cookies policy, etc.)?

404 page (noindexed)

 

[RichKIDLK]

There it is. Obviously there are much more. These are two examples:

View attachment 148692

is your website in html or wp?

 

[Saladyn]

404 page (noindexed)

I read that too from Google official support time ago. Other SEOs recommended redirect URLS, I believe to avoid having to many 404 errors.

May I am in time to delete the redirections and choose the 404 option again wheter is not too late.

is your website in html or wp?

WP.

 

[RichKIDLK]

WP.

If you cleaned and 100% sure your site safe from those links disavow them from GSC and keep that for 2 to 3 months. and look for it. I'm sure you will see lot of links gone from index.

 

[RayBay]

Check those urs from different ips. According to example url russians hacked it. Japanese also do this often.

 

[Saladyn]

If you cleaned and 100% sure your site safe from those links disavow them from GSC and keep that for 2 to 3 months. and look for it. I'm sure you will see lot of links gone from index.

Thanks man, Ill disavow the links and try to monitor the situation. I think we are in the right path to get rid of this content.

Check those urs from different ips. According to example url russians hacked it. Japanese also do this often.

Got it.

 

[RayBay]

Check those urs from different ips. According to example url russians hacked it. Japanese also do this often.

 

[akki002]

Is that shitty thing easy to get rid of? The web is clean, wordfendce installed and everything runs smooth. The only thing that bothers me is these indexed malicious URLS.

In Google Webmaster there is option of Removals . Each URL you have to request individualy and these shitty URLS will get deindexed in 6-7 hours

 

[Saladyn]

In Google Webmaster there is option of Removals . Each URL you have to request individualy and these shitty URLS will get deindexed in 6-7 hours

That's sth I did at first. But slightly different because there is an option to remove the URLS starting with a determinated prefix. So with that option I didn't have to do it individually so I did lose little time on that.

The only thing that makes me feel not fully satisfied with that desindexation process is that Google indicates that the removal tool offers only temporary desindexations which is quite a bullshit wheter after 6 months they are gonna be there again. Hopefully it won't happen. We will see...

 

[MisterXYZ]

You are doing fine except for redirecting.

These spammy urls. Just remove them (404).

No need to redirect to homepage.