A strange URL has been injected on my website and Google search console has picked it up and alerted me to it.

This is the website https://genesisbeer.co.za/ – a brewery website

This is the strange URL – http://genesisbeer.co.za/~northshe/ – completely unrelated to the content of the website and I did not create this URL

Does anyone maybe know how I can remove this? Unfortunately I stupidly havent been backing up the website so cannot fall back on a clean backup. Security plugins are not picking up the issue

Thank you

Tried various security plugins and nothing picked it up. The URL still seems to work