Issue with a hаcked website. Bulk URL removal from Index?

[AlwayzBluFFinG]

Hey, SEO ninjas

So, one website we take care of (since recently) was hаcked and lots of (7k+) new pages seem to be generated in the /blog directory. They are not live at the moment (Oops, This Page Could Not Be Found!), but indexed in Google (https://nimb.ws/Dsqfou). So, as we talk about 7000+ pages, what should be the best approach to remove them?

The website is more of a presentation type of a website and I don't think SEO-wise it will be important in the near future. Still, it will be good to remove those results from the index.

I've found there is an extension that lets you upload a .CSV file with URLs and do that in BULK. However, I have never tried it ( WebMaster Tools - Bulk URL removal ) and it turns out they made it paid some time ago.

The issue is now fixed afaik but I know it might take a while for Google to remove these pages from the index organically. The hаcked pages do not appear in the sitemap.

I guess one option is to remove the whole /blog directory through the Removals feature in SC? I found a resource where I believe they mention it could be used to remove not only single URLs, but a whole folder? Even if this is correct, we do have a couple of real posts in the /blog directory that might be to stay (~10ish). Still, if there is no other option, I guess that would be the optimal solution to go for.

[RuskinF]

Your strategy is exactly right. So focus on it.
Remove them from Google using the webmaster tools.
And no they are not paid yet. Those tools are still free.
Bulk removal is the only option.
I hope this helps!

[AlwayzBluFFinG]

Thanks a lot @RuskinF! Always good to get a confirmation on your thesis. Actually, I already did this and in a day the results disappeared from the SERP. The only issue is that when you type site:[website URL] it still shows the large number. In our case: About 7,370 results. But then you go after page 6, the hаcked pages are gone and the pages update from 27 to 6.
So, it helped to remove them from the index. Maybe just a little more time is needed for G to fully update the info. The same issue with the 2nd website, it says over 3000 results, but when you click below page numbers then they are updated and no pages show.

[ChrisJames661]

It's unfortunate that your website was hаcked and new pages were generated in the /blog directory. To remove these pages from Google's index, there are a few options you can consider.

1. Request removal through Google Search Console: You can use the Removals feature in Google Search Console to request the removal of individual URLs. However, since you have thousands of pages to remove, this may not be the most efficient approach.

2. Use robots.txt: You can add a "disallow" directive in your website's robots.txt file to prevent search engines from crawling and indexing the /blog directory. This will help ensure that the hаcked pages are not indexed in the future. However, keep in mind that it may take some time for search engines to recrawl and update their index.

3. Implement a 410 HTTP status code: Another option is to return a 410 HTTP status code for the hаcked pages. This indicates to search engines that the pages no longer exist and should be removed from their index. You can do this by modifying your server configuration or using a plugin if you're using a content management system (CMS).

4. Monitor and report: Continuously monitor your website for any suspicious activity and promptly report any hаcks to Google through the Google Search Console. This will help them take appropriate action to protect your website's search presence.

Remember to also strengthen your website's security to prevent future attacks. Regularly update your software, use strong passwords, and follow other security best practices.

If you decide to remove the entire /blog directory through the Removals feature in Google Search Console, keep in mind that it will remove all pages within that directory from Google's index, including the legitimate ones. If you have a few important posts in the /blog directory that you want to keep, this may not be the optimal solution.

With regards to the WebMaster Tools - Bulk URL removal extension, if it is now a paid tool and you're not willing to invest in it, you may want to explore other options.

In addition to the previous suggestions, another approach you can consider is reaching out to Google directly through the Google Search Console Help community forum or through their support channels. Explain the situation, provide evidence of the hаck, and request expedited removal of the hаcked pages from their index. They may be able to provide further guidance or assistance.

While waiting for Google to remove these pages organically, you should continue to monitor your website for any signs of future hаcks. Regularly check your website's security settings, update your software and plugins, and consider implementing additional security measures to prevent similar incidents.

Remember, it's also essential to take steps to clean up your website after a hаck, remove any malicious files or code, and strengthen your website's security to prevent reoccurrences.

If you're not familiar with website security practices or feel overwhelmed by the situation, it might be beneficial to consult with a professional web developer or a cybersecurity expert who can help you navigate through the process and ensure the security and integrity of your website.

[wilkinsonnel]

I would address this question to SEO professional

[rorka]

If your website has been hаcked and you're facing the issue of bulk URL removal from indexing, it's crucial to act swiftly to address the problem. Consult with mdr providers https://underdefense.com/blog/top-6-managed-detection-and-response-mdr-providers/ or experienced cybersecurity professionals who can assist in investigating the breach, resolving vulnerabilities, and restoring your website's security. They can offer expertise in dealing with such situations and help mitigate the impact of the hаck.

[rahul verma]

Google may temporarily or permanently remove sites from its index and search results if it believes it is obligated to do so by law, if the sites do not meet Google's quality guidelines, or for other reasons, such as if the sites detract from users' ability to locate relevant information.