Google Index Issue - Indexing pages that don't exhist

[Jvickery]

Hi All,

I have noticed a weird issue when performing a search on Google to show me all the pages it is indexing of our site.

site:www.one2create.co.uk

It brings up most of our website pages but then is also brings up a few HTTPS urls (our site has not been converted to HTTPS yet) but also the URL path, Title, and Meta Description are from one of our clients websites (an Automotive Job site). When clicked they take you to a generic 404 server error page, not our branded 404 page.

The site that it has taken the url, title and meta description from is on a different server completely so I don't see how it has even managed to get that information and linked it to our site?

Has anyone seen anything like this before? And what is the best way to fix it? We have asked Google to re-index the site but still no luck.

[TheSymmetran]

Those seem to be Google+ and Instagram CDN sources that are https originally from what I can see doing a quick crawl of your site.

yS7Q1UX.png

[Jvickery]

Thanks for the response. Those are not the URLs that I am referring to though. Those URLs in your crawl are from a Instagram Plugin which is pulling in Images from an outsourced URL. Those URLS are working fine, not returning a 404 error and not listed on our One2Create.co.uk domain name.

I have attached a screenshot of what I am seeing in Google which shouldn't be...

The listed Page in Google doesn't exist. We are using a Wordpress CMS system. The page is not in the backend, in the sitemap.xml file etc.

27Bn9

[Chris_Hickman]

Hello, I'm sorry to be the bearer of bad news, but it looks like your website has been hacked or compromised. I've done some Google searches and one of the first items found was one of your portfolio items which has a redirect to a deceptive site. The portfolio item in question is titled "Callidus Consulting."

The hacker has likely redirected or altered some of your content without your knowledge and it has caused your listing titles and descriptions to be thrown off.

I recommend you do a full security audit and clean up. To start, install the Sucuri plugin to scan, lock down and harden your site against future hacking attempts.

Also, you should consider redirecting https to http because these URLs are indexed. Setup temporary redirects to your homepage for the broken URLs that are indexed so that you don't lose any traffic. Best of luck.

[Jvickery]

This would make the most sense. We we're hacked a few weeks ago. We had cleaned up the website completely the day we found the issue (uploaded a completely clean version of the whole site to the server). We then installed Wordfence (similar to Sucuri) to protect us from similar things in the future.

I am unsure if we have fixed the issue and it will just take time to correct itself or if the issue is still there?

I will do the redirects though as hadn't done that yet

Thanks for the info!

[Jvickery]

Although being hacked seems like the only reason I can think of at the moment, I am still scratching my head! Its only showing the HTTPS urls in the Google search results. Not in Bing or Yahoo etc.

I can't see any of the HTTPS urls when I perform a crawl of the site in programs such as Screaming Frog.  I could understand if we were hacked that it would show spammy results with dodgy links but the results aren't spammy, the Titles and Descriptions are from one of our customers websites? Their site has not been hacked though.