Wordpress website got hacked and now i got this in SERP

dortes

Newbie
Joined
Jul 13, 2021
Messages
21
Reaction score
12
Untitled-1.jpg


I resotred my website and deleted all malicious code, but i still see this trash in when i do site:mywebsite.com. I don't know how hackers do this, how it possible to put these pages instantly to google results. I can't index my content to google through Instant index API or Google Index API, but they did it for like 1-2 hours while my website was hacked. These pages don't even exist on my website.

So who knows what should i do with it, and how can it affect my website?
 
Make sure to restore a backup and scan your code with WordFence.
 
Click on the links and see if they are still alive just to make sure (I know you said they don't exist anymore, but they could be plain HTML outside of your WordPress). If they does not exist, it will go away next time Google will index your website. If they are still alive, you need to take care of them asap.
 
Also, your website might have been hacked maybe days or weeks before you found out and Google had already indexed those pages long ago.

Sometimes your website could even be hacked by 2 different hackers.... there's really not a lot of ways to detect the minute it was hacked unless you have a monitoring software. Of which monitoring plugins like Wordfence only protects against what it knows..

Anyway, like flprocess said, Google will delete the links eventually.
 
Thanks for advices. These hackers using cloaking, they showing different page for googlebot, so it difficult to found out if it was hacked because as a website owner you'll not find anything suspicious, you will see just your page, but in google you will see these Japanese hieroglyphics.

I checked these links with curl and googlebot and now they showing my website. But i'm still getting new pages like these appear in Google, think these were added when website was hacked. Hope with time they all will disappear. Someone know how can i make it faster?
 
Now i got this in google console - 18.000 shitty pages that looks like mydomain.com/?qstoqkz9087aqenl1013 and almost zero impressions. Can someone please give some advices. Should i change the domain name and start my website with new domain, or it is possible to recover my website?
 

Attachments

  • 1.jpg
    1.jpg
    28.7 KB · Views: 97
  • 2.jpg
    2.jpg
    16.5 KB · Views: 87
Just clean your site and wait for Google to index it again
 
If your website is clean now after you scaned with wordfence, remove the website from search console and then add it again. Submit the sitemap again. In the pages section of search console if you still see those malicious links, export those and submit those in the removal section of the search console.
 
repot it to google. you can remove the link manually from search console.
 
I had a client with a similar problem and the only thing I could do was to install a fresh WP and create everything from scratch. In terms of SERP, it will take time for those links to disappear.
 
I had a client with a similar problem and the only thing I could do was to install a fresh WP and create everything from scratch. In terms of SERP, it will take time for those links to disappear.
I did it. I installed new wordpress, new same theme and plugins. Only database the same, but i checked it for malicious code.

Wordfence free version and other WordPress plugins did not find all malicious files, i found it by myself just by searching. So i don't trust any security plugins anymore
 
If your website is clean now after you scaned with wordfence, remove the website from search console and then add it again. Submit the sitemap again. In the pages section of search console if you still see those malicious links, export those and submit those in the removal section of the search console.
Is it possible to bulk remove all malicious links? Because it would take decades for removing links one by one
 
If you removed the code, request a new index, this can take up to 48hrs.
 
Back
Top