#1
  1. No Profile Picture
    Contributing User
    SEO Chat Discoverer (100 - 499 posts)

    Join Date
    Dec 2014
    Location
    Barcelona
    Posts
    164
    Rep Power
    240

    Google console: Warning Hacked with Spam


    Hi everyone

    I have received the following message in Google console

    "Security Issues
    Hacked with spam"

    "A hacker may have modified your site to contain spammy content. To protect visitors to your site, Google’s search results may label your site’s pages as hacked. We may also show an older, clean version of your site"

    The url is https://www.only-apartments.com/apar...-valmorel.html and the code is as follow

    <div class="wrapper container"> <div class="row"> <div class="col-xs-12 col-sm-7"> <h5 class="ellipsis "> <a itemprop="url" id="organic_ad_7" class="nu_adlink nu_adlink_281005" href="https://www.only-apartments.com/saint-francois-longchamp/st-f-longchamp-2p4-le-hameau-281005" target="_blank" onclick="MIGOA.ui.visitAd(&#39;281005&#39;);" data-link-params="true" data-link-type="dates" data-link-storage="true" data-href="https://www.only-apartments.com/saint-francois-longchamp/st-f-longchamp-2p4-le-hameau-281005?asoKey=rO0ABXQAGHM9bGVzLWF2YW5jaGVycy12YWxt b3JlbA%253D%253D"><strong>St F.Longchamp 2p4 Le </strong>Hameau</a></h5> </div> </div>

    There is not footprint of anyone breaching our web security. This is an ordinary code in our website. Thousand of pages shares this code and it has been there for long time

    Anyone find any trouble with the above code? Thanks
  2. #2
  3. No Profile Picture
    Newbie
    SEO Chat Explorer (0 - 99 posts)

    Join Date
    Jun 2018
    Posts
    4
    Rep Power
    0
    If you think that you don't have any script installed in your website then do 1 thing. Go to Google Webmaster and use Fetch and Index option.
    If after some days Google shows same issue then you need to check your website. maybe any plugin or script making an issue.
  4. #3
  5. Administrator
    SEO Chat Discoverer (100 - 499 posts)

    Join Date
    Jun 2014
    Posts
    304
    Rep Power
    654
    Run your site through Google to test it. https://transparencyreport.google.co...rl=example.com
    Just put your own site on there.

    Remember, if your site has been hacked it'll probably be hidden from you.

    One other thing is that there's a free checker at securi. The paid version gives much greater scope.
    https://sitecheck.sucuri.net/
  6. #4
  7. No Profile Picture
    Contributing User
    SEO Chat Discoverer (100 - 499 posts)

    Join Date
    Dec 2014
    Location
    Barcelona
    Posts
    164
    Rep Power
    240
    Originally Posted by engine
    Run your site through Google to test it. https://transparencyreport.google.co...rl=example.com
    Just put your own site on there.
    In there doesn't show anything BUT in google console it shows the URLs and little by little the number is increasing. There is a pattern in the supposed malicious code which is that they indexed a link that use the "asoKey" parameter which we used to keep filters like heating or swimming pool when the user keep browsing our website.

    The code that shows as malicious is as follow

    </div><div class="col-xs-12 col-sm-8 col-info wrapper v-box v-box-sm extra-padding marginless">
    <div class="wrapper container">
    <div class="row"> <div class="col-xs-12 col-sm-7"> <h5 class="ellipsis ">
    <a itemprop="url" id="organic_ad_10" class="nu_adlink nu_adlink_1043016" href="https://www.only-apartments.com/granelli/villa-allegra-1043016" target="_blank" onclick="MIGOA.ui.visitAd('1043016');" data-link-params="true" data-link-type="dates" data-link-storage="true" data-href="https://www.only-apartments.com/granelli/villa-allegra-1043016?asoKey=rO0ABXQADXM9Zm9uZG8tbW9ydGU%253D">Villa Allegra</a></h5>

    And the code in our page is as follow:

    <div class="col-xs-12 col-sm-8 col-info wrapper v-box v-box-sm extra-padding marginless">
    <div class="wrapper container">
    <div class="row"><div class="col-xs-12 col-sm-7"><h5 class="ellipsis ">
    <a itemprop="url" id="organic_ad_11" class="nu_adlink nu_adlink_1043016" href="https://www.only-apartments.com/granelli/villa-allegra-1043016" target="_blank" onclick="MIGOA.ui.visitAd('1043016');" data-link-params="true" data-link-type="dates" data-link-storage="true">Villa Allegra</a></h5>

    As I said the only different is the "data-href" attribute and surprisely used a page with the asoKey parameter(despite to have the proper canonical) and the code is part of our website for a long time
    Last edited by universo; Feb 14th, 2019 at 07:40 AM.
  8. #5
  9. Administrator
    SEO Chat Discoverer (100 - 499 posts)

    Join Date
    Jun 2014
    Posts
    304
    Rep Power
    654
    Did you try securi?
  10. #6
  11. No Profile Picture
    Contributing User
    SEO Chat Discoverer (100 - 499 posts)

    Join Date
    Dec 2014
    Location
    Barcelona
    Posts
    164
    Rep Power
    240
    Originally Posted by engine
    Did you try securi?
    Yes, It went ok. nothing found
  12. #7
  13. SEO Since 97
    SEO Chat Mastermind (5000+ posts)

    Join Date
    Mar 2011
    Location
    Arizona
    Posts
    8,764
    Rep Power
    5665
    Try using ( site:your domain) in google search and look for anything that doesn't look right.

Similar Threads

  1. Hacked page, spam links discovered, but what about SERP?
    By rastaviper in forum Search Engine Optimization
    Replies: 9
    Last Post: Oct 9th, 2018, 02:21 AM
  2. Search console hacked
    By Chedders in forum Search Engine Optimization
    Replies: 3
    Last Post: Jul 20th, 2016, 07:04 AM
  3. Google Warning "This site may be hacked"
    By thepratik in forum New User SEO Questions and Answers
    Replies: 6
    Last Post: Jul 16th, 2015, 06:46 AM
  4. Webmaster Tools Potentially Hacked Compromised Warning
    By Glenn Kilpatric in forum Google Optimization
    Replies: 5
    Last Post: Apr 20th, 2012, 01:45 AM
  5. Warning to the 1675 Schools That Have Been Hacked
    By Plaboon in forum Google Optimization
    Replies: 4
    Last Post: Mar 7th, 2008, 10:17 PM

IMN logo majestic logo threadwatch logo seochat tools logo