A couple of weeks ago my WordPress site suffered a conditional redirection hack:
While I can browse my website without any problem, my Home appears in the Google Search results with spam data, the title and description of my Home shows spam products and this kind of things that have nothing to do with my real content.
After reading about this kind of hack I've made this:
- Pass a security scanner to my website.
- Check manually every website file (its name) and my database content.
- Talk with my hosting admin to check this thing.
- Use the Google Search console Url inspector.
- Write to Google Search Support.
The results of this investigation was that my website had a very suspicious folder with a .htaccess and a jquery file not related with my site inside this folder.
So I deleted the folder, temporary removed the CNAME * for my DNS (suggested by my hosting admins), repeated the investigation process and requested Google to re-index my site.
Now it seems that everything is clean, none suspicious .htaccess (my .htaccess is a very standard WordPress file), security scanners seem to see everything ok... but it has been 3 days since the indexing request and Google Search results (and Url inspector) are still wrong (they are still showing the spam products). So, should I wait more days for this re-index? Is there anything else that I could try or check to fix this?
EDIT: Finally, after 4 days, Google reindexed my site, but unfortunately the problem still persists, my Home page is indexed as a search engine of spam products.
I've checked again the web and I can't see any other .htaccess, in my database I can't see anything related with this...what could I check?