Pioneer Web Design on "How to search site for list of malicious URLs from Google"

The most likely place is in the comments, assuming you did not add them into the pages or posts nor did some bad plugin or theme.

Do you have many comments with links in them?

If not, then your site may have been compromised.

See:

https://codex.wordpress.org/FAQ_My_site_was_hacked