javascript - one malicious link that is still reflecting on the website - Stack Overflow

admin管理员组

文章数量:1307691

My website is a static html site, no cms. no wordpress. /

I was running google ads for quite sometime, but now they have disapproved my ads. they say :

There is one malicious link that is reflecting on the website : .php

I have checked my site offline files 3-4 times, took a new server account & re-uploaded the files (checked files online). i could not find the malicious link.

The webhost scanned the files for me and no malware detected.

I did an online scan too at: .reternetics

and it gave no malware found, but gave me the below TLS remendations.

HTTPS mixed content found. Your HTTPS website is referring to an HTTP resource:

The 3 paths in HTTPS mixed content found are not there on my server either and neither the malicious link

Now, i uploaded the same files in another url to check: /

here, there is no malware & no TLS remendations for the malicious link:

So, the site is working fine in the alternate url, but still detects the mal link in my main site /

My website is a static html site, no cms. no wordpress. https://www.reternetics./

I was running google ads for quite sometime, but now they have disapproved my ads. they say :

There is one malicious link that is reflecting on the website : http://cdn.jsinit.directfwd./sk-jspark_init.php

I have checked my site offline files 3-4 times, took a new server account & re-uploaded the files (checked files online). i could not find the malicious link.

The webhost scanned the files for me and no malware detected.

I did an online scan too at: https://sitecheck.sucuri/results/https/www.reternetics.

and it gave no malware found, but gave me the below TLS remendations.

HTTPS mixed content found. Your HTTPS website is referring to an HTTP resource:

The 3 paths in HTTPS mixed content found are not there on my server either and neither the malicious link

Now, i uploaded the same files in another url to check: https://www.reternetics/gads/

here, there is no malware & no TLS remendations for the malicious link:

So, the site is working fine in the alternate url, but still detects the mal link in my main site https://www.reternetics./

• javascript
• html
• css

Share Improve this question Follow edited Mar 5, 2021 at 20:12 James Z 12.3k1010 gold badges2727 silver badges4747 bronze badges asked Mar 5, 2021 at 16:39 reterreter 3111 gold badge11 silver badge33 bronze badges 4

• Could you please tell us how you resolve this issue? – Kirankumar Dafda Commented Apr 27, 2021 at 8:44
• Hi, I changed my webhosting server, uploaded the same files & then requested Google for a review. My Ad was approved. Then i kept chasing my earlier webhost as my other sites were affected too. They kept giving me all kinds of reasons. But finally they got back to me with a solution and they fixed all my sites. They said they had to do some changes to the domain at the server level, so i do not know what they did, but they fixed the issue for me. hope this helps, my webhost which found the solution is resellerclub. – reter Commented Apr 28, 2021 at 9:10
• thanks for the response I was getting same sk-jspark_init.php file response in my website, which is php website without any third party api calling, So I needed to give file permission like 644 to each and every file, js, css and php pages to run on my webhost. – Kirankumar Dafda Commented Apr 29, 2021 at 5:56
• Shady hosts are the culprits like ResellerClub (newfold inc, same people behind bigrock, ipages, sitebuilder, web., etc) make sure to setup a ErrorDocument 403 "Forbidden and 404 in htaccess – nodws Commented Jan 30, 2023 at 21:04

Add a ment  | 

5 Answers 5

Sorted by: Reset to default 2

"Yes that is the server end changes, the server is no longer showing 404 error instead they are showing this page"

• reply from the server team

Add a 404 redirection and it will be resolved

ErrorDocument 404 http://example./404/

It was malicious. It was QUAKbot dropper PHP.

You need to remove all the links to addresses that don't have https on them like the following:

<!-- Social/Contact Links -->
<div class="small text-links">
<a href="http://www.facebook./reternetics" target="_blank">Facebook</a>

...

  <link rel="stylesheet" href="css/theme.css">
    <meta property="og:url" content="http://www.reternetics./" />
    <meta property="og:site_name" content="Reternetics">

Have a look through your web code and see if this does not resolve your issue.

It is strange but I found the iThemes' security plugin was the culprit!! in a WordPress website. Switching to WordFence ...

In my case, I initially missed transferring the .htaccess file while migrating my WordPress project. After realizing this, I uploaded the .htaccess file, and after a short while, everything started working properly.

本文标签： javascriptone malicious link that is still reflecting on the websiteStack Overflow