Website is flagged as Compromised Site by Google
-
Hi everyone,
We have been running Google Ads for a while now and last week all of our Google Ads were paused with reason Compromised Site. We reached out to Google and they identify this page as one of the affected page: https://manpower.com.vn/vi/dich-vu-san-dau-nguoi-and-tu-van-nhan-su-cap-cao?
The malicious links they found are:
• googie-anaiytics[.]com
• vty68[.]netWe have asked our Website vendor to scan and they found nothing. We would be greatly appreciated if you could help.
I tried Google Search Console and even the tool Google Safe Browsing that Google itself suggested but both the tools showed that our website does not have any malicious links at all. And yet Google Ads support team keeps telling us our page contains these links.
I am wondering if anyone in the community has experienced this before and how did you address this issue.
Or could you guys please help to share any tools that you know can do a deep scan on this page and if possible our entire website to help us identify where the links are located?
Please let me know if you need any additional information from us and I would be happy to provide it.
-
@Alex-Montarev We actually have a Drupal site and we're having the same issue...
-
Hello
Thanks for the heads-up. We'll look into it immediately and take the necessary steps to resolve the issue.
-
Update: I have also raised this on Google community: https://support.google.com/google-ads/thread/280600750?hl=vi&sjid=17667827560611966802-AP
and one of the member, who claims to be an IT engineer and security researcher, replied that the issue is caused by the library polyfill. The person said that a popular library got compromised and resulted in many site affected by this attack.
We are checking on this and if it is possible, you all can also take a look at this on your sides as well.
Hope this helps.
-
@Pedropeit thank you for the information and the offer to help. I really appreciate it!
Our website provider have tried to scan our website using these tools: Sucuri SiteCheck, VirusTotal, Quttera but we haven't found any unsual things.
We are trying to do a deeper scan at the moment but we are leaning on the possibility that this is a false alarm from Google. If so, do you know how we can reach out to more relevant personnel from Google to ask about this issue other than the general support team?
Thank you!
-
@Alex-Montarev we do not use Shopify, unfortunately. We are still in process of solving this.
We reached out to Google Ads support but only get some generic answers. Have you able to solve it already?
-
Hello there.
I see that in your website, you are using https://polyfill.io/v3/polyfill.min.js?features=IntersectionObserver%2CIntersectionObserverEntry . You will need to remove it as it is a compromised CDN, and it can make your website run arbitrary code. -
@ManpowerVietnam said in Website is flagged as Compromised Site by Google:
Hi everyone,
We have been running Google Ads for a while now and last week all of our Google Ads were paused with reason Compromised Site. We reached out to Google and they identify this page as one of the affected page: https://manpower.com.vn/vi/dich-vu-san-dau-nguoi-and-tu-van-nhan-su-cap-cao?
The malicious links they found are:
• googie-anaiytics[.]com
• vty68[.]net
We have asked our Website vendor to scan and they found nothing. We would be greatly appreciated if you could help.
I tried Google Search Console and even the tool Google Safe Browsing that Google itself suggested but both the tools showed that our website does not have any malicious links at all. And yet Google Ads support team keeps telling us our page contains these links.
I am wondering if anyone in the community has experienced this before and how did you address this issue.
Or could you guys please help to share any tools that you know can do a deep scan on this page and if possible our entire website to help us identify where the links are located?
Please let me know if you need any additional information from us and I would be happy to provide it.I understand the frustration you're experiencing with the Google Ads suspension due to a "Compromised Site" issue. Here are some steps and tools you can use to deeply scan your website and address this problem:
Manual Inspection:
Check Source Code: Manually inspect the source code of the affected page for any references to the malicious links (googie-anaiytics[.]com, vty68[.]net). These might be hidden in scripts or embedded in iframes.
Browser Developer Tools: Use browser developer tools (F12) to inspect the network activity on the affected page. Look for any unexpected network requests to the malicious domains.
Online Security Scanners:Sucuri SiteCheck: This free tool scans your website for malware, blacklisting status, injected spam, and defacements. You can access it here.
VirusTotal: Submit the URL of the affected page to VirusTotal to get a report from multiple antivirus engines. You can use it here.
Quttera: This tool provides a detailed report on any suspicious content or malware on your website. Try it here.
Web Security Plugins:Wordfence (for WordPress): If your website is running on WordPress, install Wordfence Security. It provides comprehensive scanning and firewall protection.
MalCare (for WordPress): Another WordPress security plugin that offers malware scanning and removal.
Server-Side Scanning:ClamAV: If you have access to your server, you can run ClamAV, an open-source antivirus engine, to scan your web directories for malware.
Maldet (Linux Malware Detect): This tool can be used on Linux servers to find and quarantine malware.
Professional Help:If the issue persists, consider hiring a professional web security service or a cybersecurity expert to perform an in-depth analysis and cleanup.
Once you've performed a thorough scan and cleanup, you should:Submit a Review Request: Inform Google Ads support that you've taken steps to clean your site and request a review.
Monitor Regularly: Set up regular scans and monitoring to prevent future compromises.
If anyone in the community has faced a similar issue or has additional tools and tips to share, your input would be greatly appreciated.Please let me know if you need any further assistance or specific information. I'm here to help.
Best regards,
-
We're having the same issue with our Shopify store, starting a few days ago. Google says the same thing, this "googie anaiytics" link that does not exist on our site.
Are you using Shopify? I'm wondering if it's a common Shopify app that's hacked or something that's causing this issue.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Question regarding Google Adwords?
Just had a question regarding Google Adwords. I have an e-commerce store (kiwimodfurniture.com) in the furniture niche and I originally was planning to create a different ad group for each product. Since I have 1300 products I would have 1300 ad groups. However a lot of the products don't have enough search volume and Google won't display my ads. Then I decided to get a bit more broad. I plan on having an ad group for each sub category on my website. For example, modern lounge chairs, modern arm chairs, modern sofas, etc. Question: Is this too broad? Will the ROI be terrible because of this? Thanks!
Paid Search Marketing | | The_Kiwi_Man0 -
Why you should never use Google Adwords To Conduct Key Word Research
Buongiorno from 22 degrees C too damn humid Wetherby UK, The other day a client wanted to know how much a ppc campaign would cost with a specific bank of keywords. So off i went and loaded in the key words and set the ads thinking it was not live.... A week later i get a tap on the shoulder asking why weve been invoiced for £xxxx oh dio mio!! The damn campaign went to live. So ive got two questions: 1. Do Google adwords automatically go to Live once youve loaded up phrases and ads, i really thought it would have made it more obvious, A " Would you like your campaign to go live" prompt would have been appreciated. 2. As a safety measure is configuring a Google Alert in Analytics to ping when paid traffic is picked up not a bad idea just so ive got a warning sytem set up so to speak. Grazie tanto,
Paid Search Marketing | | Nightwing
David1 -
Trademarked words in in Google Adwords ads - Why do competitors get to use them?
Hi, The keyword I want to use in my ad is trademarked, so they disqualified my ad. The trademark was specifically cited as the reasoning. I tried this across maybe 5 different ads. All disqualified The thing I don't understand is that there are like 10 other advertisers who are actively using this "trademarked" word in their ads. It's not like 1 scooted past Google, there's a ton of advertisers doing it. So how do I get past them or were they grandfathered in or something? FYI... I tried dynamic insert to see if that could my "trademarked" word in the back door, but no luck. Any other ideas? Thanks!
Paid Search Marketing | | marketingcupcake0 -
Google Analytics CPC and PPC not Matching
Hi Why do our CPC in Google Analytic not match our PPC in Adword, surely they should be identical? We have Auto-tagging switched on and data in our history is wrong so it is not a timing issue. Thanks
Paid Search Marketing | | Studio330 -
Yellow Stars on Google Ads.
Hi, I see some Ads on google.de with a yellow stars. I was researching how they are doing this, and just read some topics online about that. And now, i now finally that this Stars are coming from Google Product Reviews on Google Shopping. I don't sell product, i do Financial Consulting, but those ADS on germany doing the same, our product is consulting. I created an Google Merchant Account, and product feed, but i don't know which is the easiest and fastest way to active this option to review the peoples my consulting-product like this one: http://www.google.de/products/seller?zmi=finanzcheck.de&hl=de&sa=X&ei=Qg4pT5OkMY-FhQfBxdCjBQ&ved=0CCMQwQY http://www.google.de/products/seller?zmi=creditplus.de&hl=de&sa=X&ei=Qg4pT5OkMY-FhQfBxdCjBQ&ved=0CCoQwQY http://www.google.de/products/seller?zmi=norisbank.de&hl=de&sa=X&ei=Qg4pT5OkMY-FhQfBxdCjBQ&ved=0CDEQwQY Can you tell me the steps, from A-Z how to configure all this? Thanks
Paid Search Marketing | | leadsprofi0 -
Ideas on how to track google display network traffic
Does anyone know of a good way to be able to track traffic from Google's display network to a site since this traffic doesn't show up under paid search traffic in Omniture? Thanks! -Margarita
Paid Search Marketing | | MargaritaS0 -
Whats the most seo optimized websites?
Want to hear your opinions, let me know what do you like.
Paid Search Marketing | | DiamondJewelryEmpire0 -
New v Returning in Google Analytics with Adwords
I am trying to figure out an issue with Google Analytics. What i am stumped on is I see traffic from AdWords coming in (accounts linked) and I see new v returning user. Does the return visit still show even if a user came back in via direct or organic? Or is it that these return visits are clicking on the ad again to come back as visits and clicks match in the reports?
Paid Search Marketing | | RadicalMedia0