How to avoid Indexed, not submitted in sitemap

If google is showing a bunch of links that work (and redirect) means your site’s files are infected with some form of code modification. Often those links will only work when clicked on from Google and not when directly viewed or clicked on from elsewhere such as this site. The malicious code detects the referrer. It can be pretty extensive causing many files to have extra code injected into them (often base64 encoded code blocks) that you would need to clean out. For wordpress, theme and plugin files you can download and replace the files. Other htaccess, text, and php files should be examined for unexpected codes. There are some plugins that can be used to scan your files that could be helpful in determining the cause such as Wordfence or Sucuri. Also, the fact that the files are infected in the first place points to some know exploit such as from a theme or plugin not being up-to-date so be sure to apply any available updates otherwise it can just get infected again.

Hi @abidzai I’m sorry to hear about this. It sounds as if your site got hacked, as @endymion00 said (thanks for helping out!). Reaching out to a third-party for help, like Sucuri, is what we’d recommend. This post might also be helpful.

Good luck!