willump Posted January 2 Share Posted January 2 Hello, I’ve noticed that in Search Console, there are a lot of 404 error pages with fake URLs, all of which originate from real articles, but with "?e=.........." added, which has nothing to do with my website. How can I solve this problem? The only trace of these URLs is found in the database under ps_connections. Thank you very much! Link to comment Share on other sites More sharing options...
ComGrafPL Posted January 2 Share Posted January 2 It is query string. In normal product url its not showing. But your urls are for products attributes, combination link. Link to comment Share on other sites More sharing options...
willump Posted January 2 Author Share Posted January 2 On 1/2/2025 at 4:22 PM, ComGrafPL said: It is query string. In normal product url its not showing. But your urls are for products attributes, combination link. Expand Forgive me, but all the products have no combinations because they are simple products. I'll take a screenshot of the product from the first link for you. In any case, the query refers to something that has nothing to do with my shop (we sell industrial monitors and tablets). Link to comment Share on other sites More sharing options...
ComGrafPL Posted January 2 Share Posted January 2 Looks like a malware script. Check htaccess or scan files. After ?e= showing redirection to random products, probably you dont have such in your store. Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 2 Share Posted January 2 Look at your apache log file to see referer Link to comment Share on other sites More sharing options...
willump Posted January 3 Author Share Posted January 3 On 1/2/2025 at 4:39 PM, ComGrafPL said: Looks like a malware script. Check htaccess or scan files. After ?e= showing redirection to random products, probably you dont have such in your store. Expand hi, this is the htaccess file, but i can not find anything strange in it. i have searched "?e=" keyword with filezilla on all the directories and i have found nothing .htaccessFetching info... Link to comment Share on other sites More sharing options...
willump Posted January 3 Author Share Posted January 3 On 1/2/2025 at 4:52 PM, Prestashop Addict said: Look at your apache log file to see referer Expand this is the register of december. there are some strange ip.... indutouch.com-Dec-2024.txtFetching info... Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 3 Share Posted January 3 No requests with e= in december. Look in other days... Link to comment Share on other sites More sharing options...
willump Posted January 3 Author Share Posted January 3 On 1/3/2025 at 9:20 AM, Prestashop Addict said: No requests with e= in december. Look in other days... Expand in this one there are some "?e=" indutouch.com-ssl_log.txtFetching info... Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 3 Share Posted January 3 All requests in this log came from Google crawler 😉 It means Google found those links on web site! Look at your search console account external links, or search in Google (but no guaranties to find them easily) Link to comment Share on other sites More sharing options...
willump Posted January 3 Author Share Posted January 3 (edited) On 1/3/2025 at 9:53 AM, Prestashop Addict said: All requests in this log came from Google crawler 😉 It means Google found those links on web site! Look at your search console account external links, or search in Google (but no guaranties to find them easily) Expand Looking at the external links, I don’t see anything unusual, but checking internal links, I find the links with ?e=. Edited January 3 by willump (see edit history) Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 3 Share Posted January 3 In search console click on and then at top right Export external links Link to comment Share on other sites More sharing options...
willump Posted January 8 Author Share Posted January 8 On 1/3/2025 at 5:19 PM, Prestashop Addict said: In search console click on and then at top right Export external links Expand i have checked the external links and they are ok. i have attached the xls file indutouch.com-Latest links-2025-01-08.xlsxFetching info... Link to comment Share on other sites More sharing options...
Nickz Posted January 8 Share Posted January 8 On 1/3/2025 at 9:53 AM, Prestashop Addict said: All requests in this log came from Google crawler 😉 It means Google found those links on web site! Expand Do you have a source for that statement? I think that Google could also get those links from postings in websites you don't necessarily own. Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 8 Share Posted January 8 On 1/8/2025 at 2:33 PM, Nickz said: Do you have a source for that statement? I think that Google could also get those links from postings in websites you don't necessarily own. Expand IP in apache log Link to comment Share on other sites More sharing options...
lmnvzhg Posted January 9 Share Posted January 9 I think it is possible to standardize the address and do some redirection Link to comment Share on other sites More sharing options...
willump Posted January 9 Author Share Posted January 9 On 1/2/2025 at 4:39 PM, ComGrafPL said: Looks like a malware script. Check htaccess or scan files. After ?e= showing redirection to random products, probably you dont have such in your store. Expand Hello, after months of research, I think this is indeed the problem. But my question is: apart from searching for the keyword ?e= in the FTP, what other methods can I use to locate this malicious script? Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 9 Share Posted January 9 If you use GA, you can look at referer domain Link to comment Share on other sites More sharing options...
willump Posted January 9 Author Share Posted January 9 (edited) On 1/9/2025 at 8:24 AM, Prestashop Addict said: If you use GA, you can look at referer domain Expand i have found this strange domain: jawnax.org also i have found: https://imhateam.org/ Edited January 9 by willump (see edit history) Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 9 Share Posted January 9 I suggest you to look at all suspected bad site, and google disavow them asap if they not good site in your activity domain Link to comment Share on other sites More sharing options...
willump Posted January 9 Author Share Posted January 9 On 1/9/2025 at 2:11 PM, Prestashop Addict said: I suggest you to look at all suspected bad site, and google disavow them asap if they not good site in your activity domain Expand thanks for the suggest. I will do this ASAP, but i need to clean the website from the injection as i have said before. Anyone know how to do this? Link to comment Share on other sites More sharing options...
Prestashop Addict Posted January 9 Share Posted January 9 Check if you have a know security hole in your PS https://security.friendsofpresta.org/ Link to comment Share on other sites More sharing options...
willump Posted January 10 Author Share Posted January 10 On 1/9/2025 at 2:26 PM, Prestashop Addict said: Check if you have a know security hole in your PS https://security.friendsofpresta.org/ Expand i have found nothing interesting Link to comment Share on other sites More sharing options...
Daresh Posted January 11 Share Posted January 11 I’ve encountered this issue with a few customers (weird URLs appearing in the Search Console), but I was never able to pinpoint the exact cause. It might not even be a genuine external link pointing to your site; it could simply be the result of bots crawling your shop. That link doesn’t seem to be a valid URL pointing to a PrestaShop page with a parameter. You have `/?e=`, whereas a normal link shouldn’t include the `/` in that way. Consider setting pages like this to include "noindex, nofollow" tag to prevent them from being indexed. You can do this using the BotMaster module, which allows you to set tags for specific URL parameters. For example: - https://greenmou.se/demo178/home-accessories/7-mug-the-adventure-begins.html – a normal product page - https://greenmou.se/demo178/home-accessories/7-mug-the-adventure-begins.html/?e=xxx – a product page with the invalid parameter added, which has the "noindex, nofollow" tag applied. Link to comment Share on other sites More sharing options...
willump Posted January 24 Author Share Posted January 24 On 1/11/2025 at 12:53 PM, Daresh said: I’ve encountered this issue with a few customers (weird URLs appearing in the Search Console), but I was never able to pinpoint the exact cause. It might not even be a genuine external link pointing to your site; it could simply be the result of bots crawling your shop. That link doesn’t seem to be a valid URL pointing to a PrestaShop page with a parameter. You have `/?e=`, whereas a normal link shouldn’t include the `/` in that way. Consider setting pages like this to include "noindex, nofollow" tag to prevent them from being indexed. You can do this using the BotMaster module, which allows you to set tags for specific URL parameters. For example: - https://greenmou.se/demo178/home-accessories/7-mug-the-adventure-begins.html – a normal product page - https://greenmou.se/demo178/home-accessories/7-mug-the-adventure-begins.html/?e=xxx – a product page with the invalid parameter added, which has the "noindex, nofollow" tag applied. Expand I’m writing this final post for those who, like me, are trying to solve this issue: after months of research, I couldn’t figure out the problem, but Daresh’s module is actually solving it, as you can see from the image. I imagine it will take some time to clear all this junk from Google’s index. 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now