Auto spy-ads load on our website page load - wordpress

Today, our google ads rejected due to macilious software issue. we have investgated this problem in details.
we have checked the follow at our end:
we have check thorughly all website code
we have already scan our website using "malware scanner"
we have checked the website maleware scanner for virus total.
we have checked our database
the time-stamp of all pages are not change in recent time
BUT!
occasionally a pop-up appears at the bottom of the webpage. the screenshot is attached to this message.
https://exactautoglass.ca/[![enter image description here](https://i.stack.imgur.com/86TgZ.png)](https://i.stack.imgur.com/86TgZ.png)
i have tried eveything to run my google ads but it always rejected due to the "Malicious Software". I am looking for the solution!!
Any help would be appreciated. thanks

Well, if the popup is appearing on your webpage, then you didn't find the malicious code someone has placed (if it was even there, as I looked at your page and didn't find anything).
Remember that malicious code can also be placed in the header of your html file (If attacker got access to your server).
It can also be the result of an XSS vulnerability, which is a more likely behavior.
I couldn't replicate the bug on your website, so I can't give further info. I can only relay on your images.

Related

My website is showing an error related to googlecm.hit.gemius.pl in console

I have a WordPress website, and I use Adsense. However, for a couple of days, I have noticed these errors in the console, and I don't know what they mean.
All of them are related to this URL: https://googlecm.hit.gemius.pl
The errors are saying:
Failed to load resource: net::ERR_ADDRESS_INVALID
GET googlecm.hit.gemius.pl/googleredir?rid=... net::ERR_ADDRESS_INVALID
I don't know what it is, please clarify this to me.
I was able to figure this out. It was not the plugin, but rather an Ad Network on Google Adsense. All I had to do was go into the Google Adsense >> Blocking Controls >> Content >> Ad Networks. Then type in Gemius and disable all ads from their network. The problem goes away and you get to work with Adsense again.
I don't have the best answer, but ... I noticed my site is doing this too. It's a pretty simple site, with just a few tools some people use. If I disable Google's ads, the error goes away. If I re-enable them, they come back. I double checked ad content, and they're all legitimate.
The requests aren't being generated by my pages. They are only generated by Google's ads.
My site is hand coded, not WP or another CMS, so it can't be a hack or anything. I literally read every line of code related to that page while trying to diagnose it. It wasn't hard, because there aren't many lines of code. :)
So, to make the error go away, you'll need to turn off Google's ads for a while. It really isn't necessary though.
The good news is, that error means nothing was sent to the gemius page. It is simply unreachable right now, for whatever reason. I guess Google will fix it eventually. I don't care enough to open a trouble ticket with them. I'm just considering it a curiosity and annoyance on my otherwise error free pages.
screenshot with googlecm.hit.gemius errors
I believe this is related to the plugin Google Ad Inserter. Took me a while to figure out and I'm still trying to clean it up. After removing the plugin a lot of the redirect errors went away and Google was able to index my URL. After going into Chrome developer though I noticed that there was still some redirect errors happening on some resources left behind by Ad Inserter. Once I figure out how to get rid of them I'll post an update. Had a huge impact on my blog though. Almost lost 30% of my page views for the past couple days...

Sharing on LinkedIn doesn't work / Problem with LinkedIn Page Inspector

We run a website from where users can share pages on LinkedIn using the basic sharing URL https://www.linkedin.com/cws/share?url=https://THE_URL.
This worked without any problems for years, yet recently we are facing problems that we cannot explain. Some of our URLs can be shared, while others, pointing to very similar pages, fail.
All of our sharable pages are served from the same infrastructure, same servers, same setup, same TLS certificate, rendered from the same application, etc.
As an example, I attached screenshots for two pages, which are basically identical, except from a few very small details.
While https://open.sap.com/courses/fg1 can be shared,
Screenshot: A "Create a Post" widget on LinkedIn with correct page preview
the almost identical page https://open.sap.com/courses/fg1-1 can not be shared, the sharing widget shows an error:
Screenshot: A "Create a Post" widget on LinkedIn with error message in preview area
Additionally: since a while, both pages - fg1 as well as fg1-1 - cannot be opened in the LinkedIn Post Inspector - this worked earlier, there was no notable change on our side.
The error message in the post inspector says (for the page where actual sharing in the widget works):
Ingestion Feedback
Error We encountered a server error while trying to inspect the URL.
URL redirect trail
1 0 undefined https://open.sap.com/courses/fg1
Summarizing: I am quite confident that this is not an issue caused by our infrastructure or the application - otherwise I would expect that all pages resulted in the same error when sharing.
Does anyone else face this issue or did so in the past and found a solution?
Note: it feels a bit odd to post this question here instead of filing a support ticket, but I was told that this would be the way to reach out.

How do I update my website cached version on Google cachedview?

I am developing a website and I faced an issue today on my site, I will try to briefly explain the scenario hoping anyone could give a proper explanation for it.
My website is a WordPress website and I have the coming soon page activated so users will be redirected to it.
Two days ago I turned that plugin off by mistake and users were able to see my page. Today I turned it back on, and that's where the issue arises.
In full web (desktop) the coming soon page is visible and working fine, but when I hit the responsive view on my chrome browser the page is still available and the welcome page is not. In the sources tab, I can see the hosted directory being loaded so I went to the hosted directory (public_html) and I hid the folder that contains all the assets (renamed it to .foldername).
I hit refresh still loads the old page when I hit ctrl+shift+r I get the new version. On Firefox the scenario isn't reproducible it just happens on responsive view on Google Chrome browser.
Can anybody explain to me what's happening I assume it has something to do with Google caching my webpage and never updating it. But if like to hear a more professional explanation Thanks.
Have you tried clearing your Cache in Google Chrome? Also, Have you enqueued any Scripts or Styles in your functions.php file? If so, increase their version number. This will force the browser to download the Scripts and/or Styles again rather than loading any Cached copies.
Hope this helps to resolve your problem(s).

Google analytic shows me wired links for one of my visitors

I have a website wich is registered with google analytic so I can see the statistics of it The problem is that sometime it shows me this link :
website.com/www.bndv521.cf/
or:
website.com/admin
I do not know if this is a hacker trying to hack me or something but I think nobody will try to access my admin for good
Can you help me to know what is this link refers to ?
Consider checking for a malicious code included on your pages. And yes it's likely that some one is trying to access those pages but it may not execute because it's invalid path. You should consider blocking such ip addresses after checking in logs.
Although trying to reach an admin page seems a suspicious action, in our website we come accross this issue every one in ten thousand requests.
We think that a browser extension or a virus like program tries to change URL or trying to add this keyword to URL. Not for a hacking purpose, but to redirect to their advertisement website.
Very similar issue here: Weird characters in URL

Site only refreshes when adding www. to URL

First time posting so please bear with me.
I'm the unofficial web guy at the company I work for and I helped create our basic static HTML site.
Any work that I do to the site offline and then FTP shows up instantly on my machine. I rarely, if ever, need to clear the cache for changes to show up. However, within the company I work for, nearly half of the users never see the updates. Some do, some don't.
On the machines that don't I've cleared the cache in browser and through the internet control panel settings. Nothing. Still shows the stale content. The only thing that works - and I've seen this both in Chrome and IE is that when I add www in front of the URL is then shows the refreshed site. No big deal, right? Well for users who type in mysite.com without the in front will not see the updates. People who have favorited it like that, will not see the updates.
Now, on to what I've tried to fix it. After much research many people have steered me away from meta tag refresh so I haven't tried that, however, with the help of the IT guy we have, from what we can tell, set the HTTP header of the site to always refresh. This did not do anything for us.
I've tried changing image names in the HTML page when updating a photo and that didn't work either.
I haven't been able to find a .htaccess file so can I create one? If we (IT guy and I) changed the HTTP Header setting to always refresh but there is not .htaccess file will there be no change?
Any help or suggestions would be greatly appreciated.
I have searched on here for the answer and the two most suggested changes are HTTP Header and Meta refresh. HTTP header didn't help and it seems the Meta tag route is bad form.
This is a DNS issue. You need to ask the provider of your web services to add an A or a CNAME record for the domain's root.
If you don't understand the above, just call the provider of your web presence (the company that hosts your web server) and tell them you want yourdomain.com and www.yourdomain.com to go to the same place.

Resources