0

I am running a Magento 2 site, and try analysis the search or traffic of it with Google Search Console.

Recently, I found some strange url via Left-top menu "Performance" then middle sub-menu "Pages"(the second): for example(abcd.com refers to my site):

http://abcd.com/http://prizedale.ru/5ixndt43jhlacroconcomd4
http://abcd.com/http://xn--om4a.top/it723fq.htm
http://abcd.com/http://xn--om4a.top/8yu7m6c.htm

They have quite some click count.

Are they a kind of attack? I have no idea why these urls exists and how&where they actually are. I appreciate all suggestions and tips. Thank you

Improve this question

1 Answer 1

Reset to default
0

Please check via can running the grep -r ‘{thirdparty}’ to find in files, if this url is not statically stored in your file.

Also check "search_query" table in magento DB if some anonymous link found.

Check if there is any unwanted script (spam script) loading on your site. Go for site Malware Scan oncep

Improve this answer
8
  • Thank you for your tips. I've double checked the sitemap and it seems normal. In the examples that I provided, abcd.com is my site. and the appended url is very suspicious, and the full url redirect finally to the appended part (eg.xn--om4a.top/8yu7m6c.htm, which looks like spam site pages) I am wondering how this kind of urls can appear in Google Search Console, and are there any problems need alerted
    – royce
    Commented Nov 7, 2023 at 7:53
  • updated the answer please review once. Also add you site for Adobe security scan to find out the site health. experienceleague.adobe.com/docs/commerce-admin/systems/security/…
    – Grazitti Dev
    Commented Nov 7, 2023 at 10:54
  • Thank you so much! I DID found suspcious string via grep, in var/report, and is wondering how those codes are injected into my site: var/report/700135992872:{"0":"SQLSTATE[HY000] [2002] Connection refused","1":"<pre>#1 Zend_Db_Adapter_Pdo_Mysql->_connect() called at [vendor\/magento\/framework\/DB\/Adapter\/Pdo\/Mysql.php:398]\n#2 Magento\\Framework\\DB\\Adapter\\Pdo\\Mysql->_connect() called at [vendor\/magento\/zendframework1\/library\/Zend\/Db\/Adapter\/Abstract.php:460]\n#3 Zend_Db_Adapter_Abstract->query('SELECT `store_we...', array())
    – royce
    Commented Nov 8, 2023 at 9:20
  • called at [vendor\/magento\/zendframework1\/library\/Zend\/Db\/Adapter\/Pdo\/Abstract.php:238]\n#4 Zend_Db_Adapter_Pdo_Abstract->query('SELECT store_we...', array()) called at [vendor\/magento\/framework\/DB\/Adapter\/Pdo\/Mysql.php:533]\n#5 Magento\\Framework\\DB\\Adapter\\Pdo\\Mysql->_query('SELECT store_we...', array())
    – royce
    Commented Nov 8, 2023 at 9:22
  • 。。。。[index.php:39]\n<\/pre>","url":"\/http:\/\/prizedale.ru\/1xpYdad26jhlacroconcomtp3","script_name":"\/index.php"}
    – royce
    Commented Nov 8, 2023 at 9:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.