0

Bing Webmaster Tools started flagging some of my pages as infected with malware. Despite my best efforts, I have been unable to figure out what the problem might be. The "help" message about the malware is:

Malware Network Reference

Reference to known malware distribution network detected. This could be via inclusion of an iframe or frame tag, an embedded object, or a script tag.

So far I have:

  • Verified that the source code for the website is unchanged (I verified that it matches what is checked into git, and that there is nothing weird in the commit history)
  • I fetched the page as Bingbot and compared it to a version that I downloaded using another user agent to make sure that there isn't something serving Bing an altered page
  • I grepped the page source for case insensitive script, frame, object, and embed to make sure that I recognize all the code.
  • I grepped the page source for case insensitive https?:// to make sure I recognize all the links

What else should I be looking for?

The only scripts that are in the page are either inline scripts that I wrote myself, or tags that include AdSense ads via DFP. Could the ads be inserting content that Bingbot is complaining about?

Is there any way to get further information from Bing? I was unable to find anything further that might be helpful in their webmaster tools. I couldn't find that they said anything about which specific malware, or what code snippets from my site might be problematic.

  • Bing can't see adsense or DFP ads, because it is blocked on robots.txt. – Goyllo Nov 7 '16 at 12:02
  • I would have thought that was the case, but I can't think what else Bing might be picking up on as problematic. – Stephen Ostermiller Nov 7 '16 at 15:33
  • I was looking at your main page, and you have some string values in code quoted and some not. For example <p class=nostyle> and <a href="http://blog.ostermiller.org/"> and you use Ostermiller alot in your meta keywords tag which might make bing mad as it can qualify as keyword spam. I'd make all your string values quoted and see what happens. – Mike Nov 8 '16 at 5:42
  • Bing is actually complaining about just a few pages on my currency site. For example this page: coinmill.com/ZAR_calculator.html Google hasn't reported any malware problems there, nor have a few other malware checkers that I have tried. – Stephen Ostermiller Nov 8 '16 at 9:54
1

Bing has now deleted its malware warnings from Bing Webmaster Tools. I think at this point it must have been a false positive.

I never did find any way to dig into what the issue was. Bing does not appear to publish any in depth analysis of what malware it actually found or what triggered their report.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.