We're just investigating a similar issue on our site. We have an internal URL only available to admins (and would return a 403 otherwise, not linked to from any

We're just investigating a similar issue on our site. We have an internal URL only available to admins (and would return a 403 otherwise, not linked to from any public page), that suddenly got crawled by Yandex. We checked the IPs of the indexing itself and they are legit. We have only a handful of admins with access to this resource. It's possible one of them had a malicious extension I suppose, but even if they did, how did this leak to Yandex? My colleague also found this discussion[0] recently, which reports a similar problem. [0]https://www.webmasterworld.com/webmaster/4829663.htm https://www.webmasterworld.com/webmaster/4829663.htm