Any devs on here? I'm having issues with bizarre links on Google Search Console

Topic summary

A Shopify store owner discovered suspicious URLs appearing in Google Search Console’s “not indexed” section containing spam-related terms about cryptocurrency pumps, Discord hacking, and Snapchat hackers. The URLs include encoded characters and appear malicious, though the owner confirms they didn’t create these pages and their store hasn’t been compromised.

Key findings:

  • Another user searched for one of the spam terms and found similar URLs affecting multiple other Shopify stores
  • This appears to be a bot-generated issue rather than a site-specific compromise
  • The spam URLs are showing up in “collections/all” pages

Recommended solution:
Ensure these URLs remain unindexed by Google (may require an XML sitemap plugin to manage this). The consensus is this is a widespread bot issue affecting multiple Shopify stores, not a security breach requiring immediate concern.

Summarized with AI on November 14. AI used: claude-sonnet-4-5-20250929.

I have been going over my google search console and have come across some very odd URLs in the “not indexed” area.

I won’t post the entire link, but they have very concerning stuff in them.

Dcoin%2Dprice%2C%E3%80%90Telegram%3AMunghac%E3%80%91%E3%80%90Best%2Dcrypto%2Dpump%2Dtool%E3%80%91top%2Dcrypto%2Ccrypto%2Dpump%2Dsite%2Cpump%2Dup%2Dcrypto%2Cripple%2Dcrypto%2Ccrypto%2Dcom%2Ddefi%2Dwallet%2Cquadriga%2Dcrypto%2Cmultivac%2Dcrypto%2Cdiscord%2Dcrypto%2Cshinja%2Dcrypto%2Ccrypto%2Dpump%2Dnow%2C…6a0a

and

snapchat-hackers-discord,%E2%AD%95My%20Telegram%E3%80%90%40Kunghac%E3%80%91%E2%AD%95-hacked-discord-account-nitro,discord-servers-for-hacking,ethical-hacking-discord-server,discord-member-hack,hack-a-discord-server,discord-server-hack,ethical-hacking-discord,discord-hacker,discord-hackers-2022,hacks-on-discord,%20%20%200bb4

I know these are not pages I have added to my Shopify store, it has not been compromised. Can anyone shed any light on these and should I be concerned?

Hey @Charlotte_Fry !

I’m Rodrigo, happy to help here.

I imagine you’re not running ads on your e-commerce store, so let’s rule out that possibility.

I’ll ask you a few questions to understand the situation better:

  1. Did you build your store on an expired domain? (that is, did you buy an existing domain or did it ever host a website before you registered it?)
  2. Do you have any SEO plugins? (anything from creating a sitemap to changing image alt and names can be considered an SEO plugin)

Looking forward to your reply

Hello,

Thank you for taking the time to reply :slightly_smiling_face:

To answer, I’m not running ads, I built the store from scratch with a brand new domain but I do have a bulk edit Alt tag plug in.

Thank you in advance

1 Like

Weird, I did a google search for “snapchat-hackers-discord” and I’m seeing other Shopify stores where this is a tag on there “/collections/all” pages.

I wouldn’t say its anything to worry about, its clearly a bot of some sort. It is odd for sure

1 Like

I have to agree with @JoshHighland here. There are several Shopify stores with such URLs being indexed by Google.

I suggest you ensure they stay without indexing (you may need a plugin that changes your sitemap.xml file for this), and you should be alright.