0

I woke up this morning to find my website flagged by google, the standard "deceptive site ahead" appears when visiting it. The website is in active development and is usually hidden under the "under construction" screen, but I guess google had enough time to crawl it when I turned it off.

In my webmaster tools google reported deceptive pages with the following sample URL:

http://example.com/wp-login.php?redirect_to=http://example.com/wp-admin/plugins.php&reauth=1

This is the only sample page that was reported. Is this not the standard redirection for admin log in? Why would something like this get flagged?

Improve this question
2
  • example.com/wp-login.php?redirect_to=http://example.com/… I don't think the "/plugins.php&reauth=1" part is standard. Should be "wp-admin/&reauth=1"
    – Jeff Mattson
    Dec 4, 2016 at 23:06
  • @JeffMattson you're right the standard redirection does not have /plugins.php in it, any idea where it may be coming from? I guess I'll start deactivating any plugin that may be redirecting users and go from there
    – Roma Dan
    Dec 5, 2016 at 1:05

1 Answer 1

Reset to default
0

Did you end up figuring out the cause of this? I'm getting the same problem. WordFence isn't detecting any changed files. I've been trying to correct it for a couple days now.

There wp-login.php is very simple. No scripts loading there that shouldn't be there. I wonder if Google's systems view the wp_attempt_focus() function on that page as malicious?

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.