Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
  #1  
Old 10-02-2017, 04:29 PM
synth19 synth19 is offline
 
Join Date: Dec 2007
Posts: 20
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Google thinks my site is deceptive

Looking for some help on this issue. My host did a scan and did not find anything. I'm wondering how do I detect what's wrong and how to remove it? Thanks!

--------------------------------------------

Google has detected harmful content on some of your site?s pages. We recommend that you remove it as soon as possible. Until then, browsers such as Google Chrome will display a warning when users visit or download certain files from your site. Learn more


Search Console
http://www.chicagoz.com/
Help
Settings
Dashboard
Messages (21)
Search Appearance
Search Traffic
Google Index
Crawl
Security Issues
Web Tools
Security Issues

Harmful content
Google has detected harmful content on some of your site?s pages. We recommend that you remove it as soon as possible. Until then, browsers such as Google Chrome will display a warning when users visit or download certain files from your site. Learn more
Download all samples
Deceptive Inclusions
These pages embed content such as images or ads that attempts to trick users into doing something dangerous such as installing unwanted software or revealing personal information.
Show details
Sample URLs Last detected
http://www.chicagoz.com/ -
http://www.chicagoz.com/forums/forumdisplay.php?f=21 -
http://www.chicagoz.com/forums/forumdisplay.php?f=43 -
http://www.chicagoz.com/forums/forumdisplay.php?f=47 -
http://www.chicagoz.com/forums/forumdisplay.php?f=26 -
http://www.chicagoz.com/forums/forumdisplay.php?f=17 -
http://www.chicagoz.com/forums/forumdisplay.php?f=19 -
http://chicagoz.com/ -
http://www.chicagoz.com/forums/ -
I have fixed these issues
REQUEST A REVIEW
? 2017 Google Inc. - Webmaster Central - Terms of Service - Privacy Policy - Search Console Help

Deceptive Inclusions
Pages such as the sample URLs contained ads or other embedded content that is deceptive. This content may try to trick site visitors into doing something they would only do for a trusted entity, such as downloading a file or revealing personal information. Learn more.
Recommended actions
1. Ensure that any ads, images, or other embedded third-party resources on your site?s pages are not deceptive.
2. Learn more about deceptive content in our help center.
3. If you are unsure of how to proceed, ask questions in the Webmaster Help Forum.
Sample URLs
http://www.chicagoz.com/
http://www.chicagoz.com/forums/forumdisplay.php?f=21
http://www.chicagoz.com/forums/forumdisplay.php?f=43
http://www.chicagoz.com/forums/forumdisplay.php?f=47
http://www.chicagoz.com/forums/forumdisplay.php?f=26
http://www.chicagoz.com/forums/forumdisplay.php?f=17
http://www.chicagoz.com/forums/forumdisplay.php?f=19
http://chicagoz.com/
http://www.chicagoz.com/forums/
Close
Reply With Quote
  #2  
Old 10-02-2017, 04:52 PM
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Posts: 3,134
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Possibly one of your third party adverts involve a known phishing site? Here's what I get in details with Chrome.



Firefox is blocking it too, by the way.

It's nothing to do with vBulletin itself.
Reply With Quote
Благодарность от:
MarkFL
  #3  
Old 10-02-2017, 06:21 PM
synth19 synth19 is offline
 
Join Date: Dec 2007
Posts: 20
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Thanks! That is strange. Only ads I'm running is from adsense.
Reply With Quote
  #4  
Old 10-02-2017, 06:27 PM
Kane@airrifle's Avatar
Kane@airrifle Kane@airrifle is offline
 
Join Date: Jun 2011
Location: ZA
Posts: 181
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Nope. You have the infamous Filestore infection. Gonna take some effort to clean.

--------------- Added [DATE]1506976525[/DATE] at [TIME]1506976525[/TIME] ---------------

Resources:
https://www.vbulletin.com/forum/foru...lestore72-info

https://clients.urljet.com/knowledge...version-2.html

Sucuri scan result: https://sitecheck.sucuri.net/results...goz.com/forums
Reply With Quote
4 благодарности(ей) от:
Alan_SP, Brandon Sheley, MarkFL, Max Taxable
  #5  
Old 10-04-2017, 08:43 AM
Brandon Sheley's Avatar
Brandon Sheley Brandon Sheley is offline
 
Join Date: Mar 2005
Location: Google Kansas
Posts: 4,678
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I 100% agree with Kane, you have the redirect exploit hitting your forums and all your google searches.

Here is a good thread
https://theadminzone.com/threads/vbu...exploit.85532/

Check your plugins and db outlined here.
https://club.myce.com/t/vbulletin-my...ve-them/304794


PM me if you need a hand or ask in this thread
Reply With Quote
2 благодарности(ей) от:
Alan_SP, Kane@airrifle
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 04:24 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.06328 seconds
  • Memory Usage 2,210KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (5)post_thanks_box
  • (7)post_thanks_box_bit
  • (5)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (3)post_thanks_postbit
  • (5)post_thanks_postbit_info
  • (5)postbit
  • (5)postbit_onlinestatus
  • (5)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete