Google Ads Disapproved - Weebly CDN JS Source Malicious Code Download

[WeeblyWebsite]

Our Google Ads have been stopped due to malicious content on our Weebly site - further investigation and a call to Google Ads reports that the Weebly CDN links have been compromised?! 

//cdn2.editmysite.com/js/

I've simply been given the above link by the Google Ads team, there are about five links on my site (one is duplicated?)

//cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1550015245&
//cdn2.editmysite.com/js/site/main.js?buildTime=1550015245
//cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1550015245&
//cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1550015245
//cdn2.editmysite.com/js/wsnbn/snowday262.js

Google are reporting that they are receiving a number of calls from Weebly customers.

** EDIT **

Perhaps a fault with Google Ads, or Weebly, not sure, but contacted Google Ads again and asked for a manual scan: https://support.google.com/google-ads/gethelp

[bohemefit]

Hello, is this affecting our ability to post??

I cant load in on the publish page its just blank saying loading nonstop...

Frustrated...

[Adam7]

That wouldn't be related to that, @bohemefit. Are you having trouble loading the site that you published, or is the popup you see when publishing your site hanging?

[bohemefit]

Hanging Adam.

But it sems okay now...

Thankyou

Nance

[InTuneMusicAu]

I have just receieved this

Is this legit or is it scam? 

Google AdWords <adwords-noreply@google.com>

Hello,

Your ad isn't running at the moment because it's disapproved for violating  
Google's advertising policies. If you address the policy violations below,  
we'll take a look and see if it can start running again.

=====================
   Policy violations
=====================
Unacceptable Content: We've determined that your ad may be compromised, as  
it appears to be hosting or distributing malicious software. We strongly  
encourage you to investigate this issue immediately in order to protect  
your audience. Although some ads intentionally distribute malicious  
software, there are many cases where the webmaster or advertiser is unaware  
of the dangerous link because: 1) the ad was compromised 2) the ad doesn't  
monitor for malicious user-contributed content 3) the ad displays content  
from an ad network that has an advertiser distributing malicious software.

[ACn1]

@InTuneMusicAu,@Adam 

Looks authentic to me. Google validation of AdWords has been in effect for years - and I received a similar note some 10 years ago. (But for different reasons.)

Bit concerning that their check renders this code "invalid".

As you will appreciate the problem is that you have to correct the issue otherwise they still won't accept the ad.

Only way is to have Weebly talk with Google management and see if they can persuade them to adjust for Weebly sites/landing pages.

Of course this is tricky because they would have to compromise the rules they set in both their AI/validation code, and with their people. And that could be a big issue for them, as they are not known for being a company of compromise, especially if you are not a high (meaning millions of USD) spender.

Need to know how this plays out. Hopefully you can get a positive result.

[Nadine1]

Have exactly the same issue with our site.

Does this mean that Weebly and Google Ads aren't compatible anymore?

[WeeblyWebsite]

To resolve this issue for your individual Weebly site please contact Google Ads and ask for a "manual scan": https://support.google.com/google-ads/gethelp 

To check your site for malware (incase you actually have been hacked) - check this link https://transparencyreport.google.com/safe-browsing/search?hl=en_GB

[BillyBonka]

Same problem here..

[Adam7]

Google confirmed that they flagged our CDN in error, @WeeblyWebsite, although it seems like there are some lingering issues with that with Adwords. Asking for a manual review is definitely the right step to take, though, and hopefully they should get your campaigns approved again shortly.

[Nadine1]

Hi Adam,

This is costing us a huge loss and effort.

Can Weebly please try and get the CDN "unflagged" asap.

A manual review from Google Ads will take days??

[Adam7]

Google confirmed earlier in the week that our CDN should no longer be flagged, although it seems like that change on their end hasn't ported over to whatever systems they use for Adwords. We are trying to communicate with them so they can take further steps, although we haven't made much headway with that.

[LittleRocket]

hello adam do you have updates on this?

[LittleRocket]

thanks adam. its all resolved now on our end

[VeryAngry]

Do you have any written proof of Google admitting the Weebly code is fine and should not be flagged? Please post it if you do. If Google, in fact, acknowleged that error, wouldn't they also outline (in writing) what Weebly customers must to to get a quick fix? Wouldn't a memo have been circulated within Adwords support? Shouldn't Google (and Weebly) be setting up a direct channel to address this massive issue? Nothing submitted gets corrected. All conversations with Google continue to identify Weebly code as maliscious. It is seeming painfully clear that Weebly is no longer compatible with Google Adwords.