I have a hobby wordpress website with around 4 pages and 4 posts in total. Google notified me that my website has “malware”. The link that I was notified was this:

I checked my Google analytics performance and I am seeing the below links that are top-hit pages:

I logged into admin-console of wordpress, I cannot see these pages/posts. I logged into CPanel filemanager of my hosting and checked through all PHP and could not find any code that I could point out was malicious. I installed WordFence, GOMTLS.net antimalware scanner, both of them came back with nothing.

I am totally lost as to what to do next. Any pointers or advice will be very helpful.