I seem to have found loads of hacked websites on a shared hosting server, or at least something really strange must have happened. The server company refuses to admit there is anything wrong, so I would like someone's expert opinion about it.
My site is hosted on a shared hosting server (WebHostingUK). By pure chance I found in google's results a page which seems was hosted on my site but which I never had uploaded to the server.
By searching Google ianl_new, for one of the keys, I actually got to discover that several over websites (hosted on the same server 188.8.131.52) seem to have the same page ranked in google.
Just google for ianl_new and you will see what I mean.
In all cases the content seems to have been deleted.
The hosting company is denying any involvement and giving evasive answers to my questions about who has uploaded the content, who has deleted it, etc. Also they are not answering on the question wherever they have been hacked. They are simply saying that the content does not exist (using the present tense).
So my question is: how can that content have been picked up by google if it does not exist?
WebHostingUK came back to me with the following reply:
When there is no ssl certificate on the server hostname and when it is not assigned as primary certificate on the server any site which does not have SSL will show contents of other site which is kept as primary when access using https://
This is a default behaviour on a cpanel server. This is well documented on cpanel forums and discussions
So, sounds like they are half admitting that there was an issue of their server not being configured correctly.
However still they have not apologised for the issue. Should a hosting company not inform their clients of issues such as this one?