Moz Q&A is closed.
After more than 13 years, and tens of thousands of questions, Moz Q&A closed on 12th December 2024. Whilst we’re not completely removing the content - many posts will still be possible to view - we have locked both new posts and new replies. More details here.
Website is flagged as Compromised Site by Google
-
Hi everyone,
We have been running Google Ads for a while now and last week all of our Google Ads were paused with reason Compromised Site. We reached out to Google and they identify this page as one of the affected page: https://manpower.com.vn/vi/dich-vu-san-dau-nguoi-and-tu-van-nhan-su-cap-cao?
The malicious links they found are:
• googie-anaiytics[.]com
• vty68[.]netWe have asked our Website vendor to scan and they found nothing. We would be greatly appreciated if you could help.
I tried Google Search Console and even the tool Google Safe Browsing that Google itself suggested but both the tools showed that our website does not have any malicious links at all. And yet Google Ads support team keeps telling us our page contains these links.
I am wondering if anyone in the community has experienced this before and how did you address this issue.
Or could you guys please help to share any tools that you know can do a deep scan on this page and if possible our entire website to help us identify where the links are located?
Please let me know if you need any additional information from us and I would be happy to provide it.
-
Hey there! Welcome to the community! For improving your PA and DA, I'd suggest focusing on building high-quality backlinks from reputable sites, diversifying anchor text, and ensuring your content is valuable and engaging for readers. Also, don't forget about internal linking and keeping your website's technical aspects in check, like site speed and mobile optimization. As a side note, if you ever need to dive into something a bit different, you can check out some info on flower names and their meanings here: https://flowersname.co
It’s all about providing value to your audience!
This keeps the tone friendly and offers your link as a casual, value-added suggestion.
- topic:timeago_earlier,about a month
-
Your website is being flagged as compromised, even though multiple scans have shown no issues. You may want to consider using advanced security tools like Sucuri or Wordfence, which offer more thorough scans for hidden malware or vulnerabilities. Also, make sure that all external scripts and plugins are secure and up-to-date. It could be helpful to consult a cybersecurity expert to conduct a comprehensive audit and address any potential security gaps.
-
We would most definitely recommend contacting a freelancer or an SEO agency for help. We say this because if the website has incurred a Google manual action penalty, then this can severely damage your business's organic SEO for a long time unless fixed, Therefore, you need to contact an expert SEO consultant for advice straightaway.
- topic:timeago_earlier,about a month
-
@Alex-Montarev We actually have a Drupal site and we're having the same issue...
-
Hello
Thanks for the heads-up. We'll look into it immediately and take the necessary steps to resolve the issue.
-
ManpowerVietnam Subscriber last edited by ManpowerVietnam Jun 24, 2024, 7:36 AM Jun 24, 2024, 7:18 AM
Update: I have also raised this on Google community: https://support.google.com/google-ads/thread/280600750?hl=vi&sjid=17667827560611966802-AP
and one of the member, who claims to be an IT engineer and security researcher, replied that the issue is caused by the library polyfill. The person said that a popular library got compromised and resulted in many site affected by this attack.
We are checking on this and if it is possible, you all can also take a look at this on your sides as well.
Hope this helps.
-
@Pedropeit thank you for the information and the offer to help. I really appreciate it!
Our website provider have tried to scan our website using these tools: Sucuri SiteCheck, VirusTotal, Quttera but we haven't found any unsual things.
We are trying to do a deeper scan at the moment but we are leaning on the possibility that this is a false alarm from Google. If so, do you know how we can reach out to more relevant personnel from Google to ask about this issue other than the general support team?
Thank you!
-
@Alex-Montarev we do not use Shopify, unfortunately. We are still in process of solving this.
We reached out to Google Ads support but only get some generic answers. Have you able to solve it already?
-
Hello there.
I see that in your website, you are using https://polyfill.io/v3/polyfill.min.js?features=IntersectionObserver%2CIntersectionObserverEntry . You will need to remove it as it is a compromised CDN, and it can make your website run arbitrary code. -
@ManpowerVietnam said in Website is flagged as Compromised Site by Google:
Hi everyone,
We have been running Google Ads for a while now and last week all of our Google Ads were paused with reason Compromised Site. We reached out to Google and they identify this page as one of the affected page: https://manpower.com.vn/vi/dich-vu-san-dau-nguoi-and-tu-van-nhan-su-cap-cao?
The malicious links they found are:
• googie-anaiytics[.]com
• vty68[.]net
We have asked our Website vendor to scan and they found nothing. We would be greatly appreciated if you could help.
I tried Google Search Console and even the tool Google Safe Browsing that Google itself suggested but both the tools showed that our website does not have any malicious links at all. And yet Google Ads support team keeps telling us our page contains these links.
I am wondering if anyone in the community has experienced this before and how did you address this issue.
Or could you guys please help to share any tools that you know can do a deep scan on this page and if possible our entire website to help us identify where the links are located?
Please let me know if you need any additional information from us and I would be happy to provide it.I understand the frustration you're experiencing with the Google Ads suspension due to a "Compromised Site" issue. Here are some steps and tools you can use to deeply scan your website and address this problem:
Manual Inspection:
Check Source Code: Manually inspect the source code of the affected page for any references to the malicious links (googie-anaiytics[.]com, vty68[.]net). These might be hidden in scripts or embedded in iframes.
Browser Developer Tools: Use browser developer tools (F12) to inspect the network activity on the affected page. Look for any unexpected network requests to the malicious domains.
Online Security Scanners:Sucuri SiteCheck: This free tool scans your website for malware, blacklisting status, injected spam, and defacements. You can access it here.
VirusTotal: Submit the URL of the affected page to VirusTotal to get a report from multiple antivirus engines. You can use it here.
Quttera: This tool provides a detailed report on any suspicious content or malware on your website. Try it here.
Web Security Plugins:Wordfence (for WordPress): If your website is running on WordPress, install Wordfence Security. It provides comprehensive scanning and firewall protection.
MalCare (for WordPress): Another WordPress security plugin that offers malware scanning and removal.
Server-Side Scanning:ClamAV: If you have access to your server, you can run ClamAV, an open-source antivirus engine, to scan your web directories for malware.
Maldet (Linux Malware Detect): This tool can be used on Linux servers to find and quarantine malware.
Professional Help:If the issue persists, consider hiring a professional web security service or a cybersecurity expert to perform an in-depth analysis and cleanup.
Once you've performed a thorough scan and cleanup, you should:Submit a Review Request: Inform Google Ads support that you've taken steps to clean your site and request a review.
Monitor Regularly: Set up regular scans and monitoring to prevent future compromises.
If anyone in the community has faced a similar issue or has additional tools and tips to share, your input would be greatly appreciated.Please let me know if you need any further assistance or specific information. I'm here to help.
Best regards,
-
We're having the same issue with our Shopify store, starting a few days ago. Google says the same thing, this "googie anaiytics" link that does not exist on our site.
Are you using Shopify? I'm wondering if it's a common Shopify app that's hacked or something that's causing this issue.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Unsolved Google Ads Subdomain in sitelinks & Composition Change for Strategy Status
I have a basic query but could not find a definite answer on the internet. I am currently running a campaign for the main website of a big education brand and they also have a secondary learning website on subdomain, and I want to add sitelinks of subdomain to the campaign, but I am not sure whether it is allowed or not. The brand I am running ads for is https://www.rauias.com/ and the secondary website is https://compass.rauias.com/ branded slightly different in a subdomain, so should I add the sitelinks of Compass to the main campaign? Also one more silly question My Max Conversion search campaign gave me this status today. "Learning (composition change): Campaigns have been added to or removed from the bid strategy. Google Ads is now adjusting to optimize bids. 5 days left for learning" What does this mean exactly? And Why does it reenter the learning phase whenever I make a small change?
Paid Search Marketing | Dec 7, 2023, 4:04 AM | rauoff0 -
Unsolved How should I update the grouping of keywords in a google ads account
hi, I have a google adwords account running for a while in a fairly competitive market in a major city so there is only one geo location with many suburbs or council areas as popular searched. I have keywords that are 2-4 words long and very similar. I have had one keyword in its own campaign, several in one campaign and a location campaign. The location campaign has several adgroups for specific suburbs. My question is that the most popular search terms are similar but in different campaigns and I am wondering if this is not the best way. for example I have these keywords in separate campaigns as exact match and phrase match
Paid Search Marketing | Nov 23, 2023, 12:19 PM | salliWW
rubbish removal
rubbish removal near me
rubbish removal Washington But the way google uses exact match seems to be changing and I am concerned these would be best in one adgroup. Also these keywords trigger similar phrases, for example, waste removal. Is it best to put them in one campaign with one ad group or one campaign with separate adgroups, or leave as is. As competition has increased I need to bid for top of page now and need to keep budget rises as little as possible..0 -
Clients Keep Googling Themselves
Hi, I have a common problem with my clients where they google their own business name or keywords they want to rank for and freak out when they don't show up on the first page of results. The same is true for my paid search clients. Is there a good way I can explain to them how Googleing themselves is not the best way to know if they are performing well? If there is an article out there that explains it that I can share that would be even better.
Paid Search Marketing | Oct 14, 2017, 12:04 PM | GuardianOwlDigital0 -
Talking about competitors on your own website to improve quality score
Hi Mozzers, I'm seeing more and more companies improving their quality score by including information about their competitors on their website, when driving traffic from competitor brand terms. For example, for 'Yahoo Mail' related terms, Zoho drive traffic via an ad to this page: https://www.zoho.com/mail/yahoo-mail-alternative.html I'm planning a new campaign targeting competitor keywords and wondered what people think about this approach, and the legalities around talking about and comparing yourself to competitors on your own website?
Paid Search Marketing | Feb 15, 2017, 12:14 PM | Zoope0 -
Is there a way to track visitors that watched my video on YouTube and became a direct visitor to my website after the fact?
I am trying to understand the impact my commercials are having on website beyond just the clicks I get from YouTube as a referring site. Google is telling me there is not a way to track users that have viewed a video. I am trying to think outside of the box to figure out a way to use the remarketing cookie to my advantage. Google says there is not a way to track a user that watched a video and then eventually came to my site. But at the same time the "Earned Views" metric is similar to what I am trying to accomplish. As per Google, "An earned view occurs when someone who views your video ad and then watches another video or videos in a linked YouTube channel within 7 days of the ad view." So I want to be able to apply this same method to people that view my video ad and then surface on my website eventually. Please let me know your thoughts on this and if there is a way to accomplish this goal. Thank you
Paid Search Marketing | Feb 25, 2016, 5:56 PM | JoeyPasq0 -
Google URL Builder / Campaign Tracking on two Different Domain using the Same Analytics Code
Hey Everyone, I think I know the answer to this but I'd like to get some confirmation. I currently have a landing page at "www.xyz.com", it's a separate domain in which only the landing page exists and not a vanity URL which redirects. However, the navigation and all the links on "www.xyz.com" actually link out to "www.abc.com". The domain / landing page "xyz" has the same analytics tracking code as domain "www.abc.com". My question is this, if I use Google URL builder to create custom URL's to track for each ad that I'm running in Adwords, will this data show up in the analytics of "abc" even though it's a separate domain because it has the same analytics code? In other words, does campaign data show only if the domain and the google analytics code line up, or does the domain not matter and as long as you have the same analytics code (despite two separate domains) that campaign data (built through Google URL builder) will show? My hunch and best guess it that as long as the analytics code is the same (regardless of a separate domain) that the data in campaign will show with the custom URL's I build. I'm aware that I can test this and I will but I'd like to get an idea from the community first to make things easier. Anybody have experience with this? Answers greatly appreciated! Thanks!
Paid Search Marketing | Sep 3, 2014, 12:42 PM | EvansHunt0 -
Best practice to separate paid from organic conversions in Google Analytics
I have a PPC campaign for a client with standalone landing pages with a form, not reachable from the website (although in the same domain). I've added the AdWords conversion code to the "thank you" page and I also added a Goal in
Paid Search Marketing | May 23, 2014, 7:32 PM | DoMiSoL
Google Analytics whose counter is increased every time the thank you page is reached. This way I can track conversions with both AdWords and Analytics. Is that correct? Should I import back in AdWords the goals from Analytics, as suggested in the AdWords account? I have another landing page with a form in the website, where I send users coming from
organic search, so I set up a second goal in Analytics for the thank you page of this form. Is this the reason why I am supposed to import in AdWords the analytics' goals, so that I could see both kind of conversions in both accounts? But the most important question is: If I send both PPC/organic visitors to the same landing page is there still a way to separate PPC from Organic conversions? Thank you very much for your advice. DoMiSoL Rossini0 -
Google Analytics and WorldPay - Tracking Sales/Conversions
Hi there, I recently remember reading somewhere that tracking code could be used to monitor sales/conversions of eCommerce payments that went through WorldPay. I've been looking around the web for news stories, forums, discussions, but all seem to be from 2007 - 2011; was just wondering if anyone knew any up-to-date info they could point me towards? Thanks
Paid Search Marketing | Dec 23, 2013, 9:10 PM | bricktech0