Facebook like box transforms into ads banner

Can you please specify the url of page so that we can attempt to solve the problem

This is my blog – https://bike-bg.com/
And it is the second box on the side bar. The box generate diferent urls for the ads.

@amit: Thanks for the assist ??

@rkovachev:

I didn’t see what you mentioned, but I DID notice lots of errors in the javascript console that could be caused by lots of different things, including the fact that your site iappears to be loading jQuery, Prototype AND Scriptalicious; doing so usually isn’t necessary. In particular, though, I noticed that there was a 504 gateway error when trying to load this file:

https://dl.dropboxusercontent.com/u/[redacted number]/advertising/market_640x60.gif

This may have been an attempt to load an ad banner as you mentioned, but it failed. I do not know why you this is happening, but I suspect that your site has been compromised, because loading an image from a URL like that does not seem like normal ad-network behaviour.

I then ran your site through Sucuri’s scanner here:

https://sitecheck2.sucuri.net/results/bike-bg.com/

and it says that your site has been blacklisted by McAfee:

https://www.siteadvisor.com/sites/bike-bg.com

There is little detail available though. Still, based on what I saw, I think it’s a distinct possibility that your site was compromised.

So with that in mind, have a look here for what to do next:

https://codex.www.ads-software.com/FAQ_My_site_was_hacked

I use dropbox as CDN for my banners.

Well then, McAfee still thinks your site has issues, and I didn’t see the problem that you described, but I *did* see lots of javascript errors. I would still take a look at the help document:

https://codex.www.ads-software.com/FAQ_My_site_was_hacked

just in case. If you can reproduce the issue, could you take a screencast of it? You can use https://screenr.com for example.

Thanks!

It happens only when I am logged in with the admin user.

Hi,

As I asked, could you take a screencast of it, since I can’t reproduce? I still suspect a site compromise, as I don’t see how Jetpack could be responsible, but a screencast would help.

Here’s the video https://www.youtube.com/watch?v=mXJBiWlM3c4&feature=youtu.be

I googled that sentence and found nothing. Does this happen with every browser when you log in to your site, or if you try logging in with a different computer? Have you tried to inspect that ad using a Web Developer tool to see what the origin of it is? Look at this for help on using Chrome’s dev tools:

https://developers.google.com/chrome-developer-tools/

I found the problem. There was something wrong with my browser (Chrome) or my google user. After reinstalling it on all my computers now it works correctly.