My website is marked by google as "may be hacked". Through the admin panel of google search console, I see several links that are list as "URL injections".
My site is built with opencart. As you can see from the image there are two new entries of today(7/4/2016). I open these two links and there are no actual contents on them, just opencart's 404 page. I go through the HTML but no abnormal script or content is found. I use google's "fetch as google" feature, it seems what google fetches is not different from what I see from browser's view source panel.
So my questions(mostly out of curious, not merely aiming to solve the problem) are:
How does google determine these pages are compromised if there are no malicious code can be found from both my browser or google's "fetch as google"?
How does the hackers take advantage of these "injected URLs" if there are no actual malicious content or script on them? Or is the malicious content/script only visible to some certain people(not including me obviously)?