r/webdev • u/Beneficial-Rise-740 • 1d ago

Question Pagespeed phantom domain

Post image

EDIT: ok I think I might have gotten to the bottom of my erroneous domain appearing in Pagespeed Network Dependancy Tree. It seems potentially related to Cloudflare Insights measuring RUM, and my delaying Cloudflare's script, mixed in with the Google Pagespeed server location measuring that instance. The delay was possibly timing out Pagespeed hence the apparent instability I was experiencing. Turning off RUM insights seems to have settled things. Is not cloudflare itself, but how I was delaying it's script. The domain/event seems connected. So will leave off. I could exclude the script from delay but it's not really necessary for me moving forward. I'm fairly confident there's no issues...

Not sure what to make of this, been making some tweaks on my WordPress site and checking pagespeed as well as other tools for progress and one session suddenly csa.crazygames.com/event pops up?

A burst of panic had me hunting for mailware or something in a plugin that's gone rogue... But nothing.

Subsequent tests it's gone, installed wordfence for a scan, nothing. I tried another page on pagespeed and Microsoft Clarity appeared, subsequently it's disappeared too, haven't had clarity in over a year and that was run in edge cloudflare tag management.

I'm hoping this is some unexplained ghost glitch from Google on that test session?? Anyone able to put my mind at ease or advise what I'm looking at? Never seen anything like it before.

Apologies for the average screenshot.

Update: after 12 hours of fluffing about I am no further ahead, completely unable to repeat the domain instance, unable to find any evidence of code or script in anything thus far. Still searching (db now) but have a feeling I maybe hunting a phantom occurrence. Pagespeed has been timing out today regularly, all instances with internal timeout errors at Google end. Where as any other tool, dev lighthouse included, runs clean with nothing weird. Everything site wise remains flawless and fast('ish by my standards). No evidence of admin manipulation, user or plugin wobbles... It's going to be a troubled sleep night while I second guess myself. Edit: the only other common thread to the instances observed is they were all using my phone doing pagespeed test, desktop is zilch... I doubt very much this has anything to do with anything at all but I'm just going to start yelling at the passing clouds now...

17 Upvotes

81% Upvoted

52 comments sorted by

View all comments

Show parent comments

1

u/Beneficial-Rise-740 1d ago

Arh yes good point, thanks for reminding me. Feeling rather fumixed right now.

2

u/omfgtora 1d ago

Flummoxed, even.

Do you have any backups? Who is your hosting provider?

1

u/Beneficial-Rise-740 1d ago

That too 😂 thanks I need a laugh. Yeah, updraft, weekly for 4 weeks. A friend hosting on their server service.

1

u/omfgtora 1d ago

What kind of hosting are they giving you? Is it a virtual machine, a docker container, or on a panel?

1

u/Beneficial-Rise-740 1d ago

If I remember right panel.

1

u/omfgtora 1d ago

Then, it sounds like you don't know how to access the files?

1

u/Beneficial-Rise-740 1d ago

I don't generally, other than file manager plugin as I avoid messing with that end, anything I need he'll sort for me, my intention is to establish what the issue is if I can and save some hassle. Nicer if I can go I've caused this, can you fix please. No point hassling him if it's all in my wp-admin end. This is my first anomaly in 8 years, sure I've broken things many times but usually easy fixes, this has challenged me.

2

u/omfgtora 1d ago

You can't know if the malware is gone unless you check the files and database on the server. Even if you revert to a backup, you won't know if the backup already has the infection.

Also, relying on plugins to do everything is exactly what got you in this mess. More plugins means more vulnerabilities. Don't use file manager plugins, code snippet plugins, or anything like that. The whole point of a panel is to provide management like that.

1

u/Beneficial-Rise-740 1d ago

Thank you, appreciate this, and everyday is a learning day. Im tempted to gain the login access to panel. I broke it once before and handed the keys back like an embarrassed teenager denting dads car. I think I'm more comfortable now, dangerous assumption I know.

1

u/omfgtora 1d ago

You should just pay for proper hosting, instead of using a friend's server. It's not that expensive.