STORE SPEED SCAM - SHOPIFY SPEED DO NOT MATCH LIGHTHOUSE SPEED - ATTENTION !!!

nuova-idea
Explorer
46 0 20

Hi ALL,

first of al, you should know that Shopify stopped to use Lighthouse to calculate the speed score, this is why the sudden drop of speed score in Shopify in comparison with Lighthouse or GTmetrix. Shopify does not consider the Lighthouse speed anymore. This since around the beginning of August 2021.

Now the why: some developers do ZERO/NO work on performing your store, they ONLY add a hacking code that detect speed checkers. When it detect speed checkers, it serve an empty page, with no content. That's why your Lighthouse or GTmetrix speed score it is so high.

Now that Shopify stop linking its speed report with such speed checkers, the scam it become clear to all. Be aware, an high amount of developers were selling fake speed optimizations, using instead this quick hack to collect money from store owners.

The code contain such lines:

document.write / document.open and are inserted in the theme.liquid (use ctrl+g to locate them). If you find such lines, you been scammed. 

I suggest everyone who got this scam to reply to my post here and add the name or data of the developer to help others to do not fall in the same scam.

My scammer was hired on Fiverr: 

nuovaidea_0-1630641170725.jpeg

 

It is taking 2 weeks of work and lot of money to fix this issue. Cause it also damage how the store works. 

 

Please everyone, spread the voice as much as possible because Shopify still did not made any official statement on this, and many store owners have no idea at all about this.

Let's make sure those scammers get banned and get no more money from store owners.

 

Replies 50 (50)

Zineddine
Shopify Partner
6 0 0

Can you please share with us the code that the scammer has used?

The Best Speed Optimization Service On Fiverr https://linktr.ee/growshopify
nagumi
Explorer
64 2 29

THANK YOU! I GOT SCAMMED AND FOUND OUT THANKS TO YOU!!!!

 

I've reported it to shopify and they're investigating. But I found my scammer through shopify expert marketplace, not fiverr. I confronted the scammer and they gave me my money back.

The code:

 

document.open();
     if(window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('\x43\x68\x72\x6F\x6D\x65\x2D\x4C\x69\x67\x68\x74\x68\x6F\x75\x73\x65') == -1 && window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('X11') == -1 && window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('GTmetrix') == -1) {document.write({{pDescription | json}});}  else{
     document.write("<html><p>.</p></html>");}document.close();</script>

  

nuova-idea
Explorer
46 0 20

Please, mention the Shopify Expert that you used to help others avoiding such seller. Thanks

NLanglois
Shopify Partner
10 1 5

Should you remove exactly this part ? what is the code that you have to remove so that it is the same as before ? 

Hamzaa
Shopify Partner
20 3 4

Hi @NLanglois,

This script (bot) is now commonly used in Shopify Stores to improve the admin score of Shopify and as well the score on Google Pagespeed Insights. I will suggest you and everyone to ask the developer first that how he will improve the speed of your website and then start the work with the developer in order to avoid any kind of scam. Thank you.

SEO Expert
NLanglois
Shopify Partner
10 1 5

Thank you @Hamzaa for your answer.

 

It is hard to ask the developer more details since I linked those threads suggesting he tried to scam me. 

I'm not able to communicate with him as he is now banned from fiverr or he blocked me...

I feel bad because I feel the website did improve even if it seems it mainly improved thanks to the script...

I'm not sure if it was a real scam or some work + help from that script.

Hamzaa
Shopify Partner
20 3 4

I have visited the profile of this seller and I can see that he has over 500+ Positive Reviews which make sense that the people are getting good results. Usually the owner of the website wants to see the results on Shopify Dashboard and on Google Pagespeed Insights. Now the developers have invented their own scripts which can improve the speed score on Google Pagespeed Insights and as well on Shopify Dashboard. These scripts do not affect the store functionality, sales or performance. In short term, these scripts improve the speed score in easy and quick way. 

SEO Expert
Nilo_
Shopify Partner
2 0 4

You've got to be kidding. Your store speed isn't just a vanity metric. It's directly correlated to conversion performance. Scamming non-technical store owners is completely unethical and borderline criminal. You said it yourself "These scripts do not affect the store functionality, sales or performance" WHICH IS WHAT YOU'RE BEING PAID FOR.

 

The script loads a blank page when it detects Lighthouse. The moved blocking script tags to deferred loading without any regard to what script is being edited. It's nothing more than a scam and that's it.

NLanglois
Shopify Partner
10 1 5

Thanks for reassuring me @Nilo_ 

 

Btw the script was indeed affecting my performances as it was preventing my favicon from being load and therefore returning a 404 on GTmetrix.

 

Capture d’écran 2021-12-14 à 02.37.56.png

 

My favicon is not favicon.ico but since the line of code with my favicon was under the script for some reason it was not loaded and by default favicon.ico was called and returned a 404.

 

I found a solution to suppress that 4s lag by putting the favicon line above the script which worked.

 

I still have the script as if I suppress it my store doesn't load any image but with that example we can see that the script can have an impact on the store...

 

PS : Actual results 

 

Capture d’écran 2021-12-15 à 22.22.55.png

nuova-idea
Explorer
46 0 20

DO NOT MISSLEAD PEOPLE!

 

Adding this code destroy the shop functionality in many ways, ruin the SEO completely and also cause several tech issue internally.

 

This SCAM does not make the website/store faster in any way! This SCAM serve an EMPTY page to robots which means, once again, the robots DO NOT see your real store!

 

 

 

 

root2
Tourist
4 0 1

Hello, I have been following this thread and I think I am also being scammed, Can you pls tell me where can I find this code in my store?

CanCet
Excursionist
16 0 1

Hello, where do you find this code? We got an acceleration service from someone on Fiver. However, we could not find these codes. He increased our mobile speed from 19 to 89.

oreoorbitz
Shopify Partner
242 29 129

Share your site URL.

19 to 89 seems unrealistic unless you guys worked togather intensley to improve your site, or you had a single app that was causing a slow speed.

Available for freelance. I specialize in speed improvement and theme development.
https://www.upwork.com/fl/orionholmes



You can also contact me directly if you prefer.
CanCet
Excursionist
16 0 1

My web site URL is nowshopfun.com

vibrantbodymind
Tourist
6 0 2

Here are my five cents from another victim of the "speed" scam. Avoid this "expert" like the plague! Note 5-star reviews (most likely from other "experts")
Screenshot 2023-01-01 at 22.41.58.png

monaeshsk
Visitor
2 0 0

Oh my god, that is literally the guy that I used . It even effected our Facebook Ads Tracking. Does anyone know if I just create a new theme code template and delete the one he did, would that fix the issue?

robA3
Shopify Partner
3 0 0

We also had this guy run this 'optimization' for us two days ago. 

 

 

 

 

 

Screenshot 2024-03-22 at 1.18.02 pm.png

Charles_Marks
Shopify Partner
9 0 1

You need to get the code he added removed.  If you have a theme backup from before he did the work, just restore that and then delete the theme he worked on (oh and delete his access to your site).   Then use GTMetrix to check one of your product pages and make sure the render of your site you see in the top right corner of the GTMetrix results looks like your site and has all the page content in it. (you can check before too and see if it is missing all the product info).  On my site with this code all the product info was missing, just got the header and the footer of the page.

Nilo_
Shopify Partner
2 0 4

This is exactly what "Anees Ayub" from @Aisat_Solutions did via a Fiverr job. His email is aneesayub213@gmail.com

@Shopify please ban him and remove all partner accounts. DM me for details.

NLanglois
Shopify Partner
10 1 5

I just got exactly the same with him : 

 

Capture d’écran 2021-12-09 à 20.25.27.png

 

 

MichaelYounal
Visitor
1 0 1

This man is really a big scammer. When he caught then he immediately removed malicious code and by which my speed drop from 81 to 35. He start lying in chat to manipulate even Fiverr customer support. I caught his code with the help of my developer. On queries even his behavior was unappropriated.  I'm going to list his chat screenshot here.

kizi.png

This was his behavior, my question was then why you sit here. 

 Negative review.png

He also replied to my review to manipulate upcoming buyers. My responsibility is to just warn you, otherwise you have a lot of options. 

 

Thanks

alince
Visitor
1 0 0

I got scammed by the exact same person!

Diane_Mchugh
Excursionist
11 0 0

I found the same problem in my code. Can you tell me what else needs to be repaired as you said it damages your store. 

I have to get someone to fix it.

 

Thanks!!

 

root2
Tourist
4 0 1

Can you share your store link?

Diane_Mchugh
Excursionist
11 0 0
root2
Tourist
4 0 1

@diane You are being scammed my friend

Diane_Mchugh
Excursionist
11 0 0

I'm aware.

magefix
Tourist
6 0 4

Hi @All, here are more scripts that may be designed to trick Pagespeed. Removing the code is not sufficient - a Shopify developer should carefully remove the {%capture pDescription%} and {% capture vendors %} and their corresponding closing tags - {%endcapture%}.

 

<script>
  if(window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('\x43\x68\x72\x6F\x6D\x65\x2D\x4C\x69\x67\x68\x74\x68\x6F\x75\x73\x65') == -1 ) {   document.write({{pDescription | json}}); } else { } document.close();  
</script>
decoded >>
<script>
  if(window['navigator']['userAgent'].indexOf('Chrome-Lighthouse') == -1 ) {   document.write({{pDescription | json}}); } else { } document.close();  
</script>

<script>document.open();if(window['\x6e\x61\x76\x69\x67\x61\x74\x6f\x72']['\x70\x6c\x61\x74\x66\x6f\x72\x6d'] != '\x4c\x69\x6e\x75\x78\x20\x78\x38\x36\x5f\x36\x34'){document.write({{vendors | json}});}document.close();</script> 
decoded >>
<script>document.open();if(window['navigator']['platform'] != 'Linux x86_64'){document.write({{vendors | json}});}document.close();</script>

 

 

Malware Specialist @ Magefix
Diane_Mchugh
Excursionist
11 0 0

@magefix Do you do this kind of work? If so how much do you charge to remove the code and script?

magefix
Tourist
6 0 4

Hi @Diane_Mchugh 

Check the attached screenshots - I've highlighted the code that needs to be removed.  

 

capture_vendors.jpg

capture_pDescription.jpg

Malware Specialist @ Magefix
Diane_Mchugh
Excursionist
11 0 0

@magefixthanks. But i don't have the confidence to make a change to my own code. And that's not the clearest screenshot...

magefix
Tourist
6 0 4

I'm able to help, send me a private message, and we'll arrange the delegation process. Or google for "magefix" and email me directly. Please note that the fix will be free of charge.

Malware Specialist @ Magefix
uamosk
Tourist
3 0 0

I've deleted it from my website.

Thank you!

 

uamosk
Tourist
3 0 0

now, it's OK:speed.jpg

robA3
Shopify Partner
3 0 0

We also had one of these guys from Fivr do this 'optimisation'... which def changed the speed readings in shopify, so Im sure we also got scammed. BUT Ive checked for all that code, docuement.open, docuement.write, %capture vendors% etc but they dont appear as far as I can see anywhere in the code? Any idea how to use an external speed checker that would bypass any bad code? Or anything I can do to see what they have done?

Diane_Mchugh
Excursionist
11 0 0

@root2 explain please

root2
Tourist
4 0 1

magefix
Tourist
6 0 4

Hello, you may download all the theme files on your local computer. And then, perform a string search to notice which ones were altered. If you need help, let me know.

Malware Specialist @ Magefix

forgiftu
Visitor
1 0 0

forgiftu_0-1661835765610.png

 

Thanks for your information!

I got scammed too by this Fiverr "expert", and I find the exact same coding document.write / document.open / {%capture pDescription%} / {%endcapture%} in his deliverables. 

EdHENN
Shopify Partner
9 0 0

Hello,


Does someone know an honest shopify expert to work efficiently on site speed ?

Edward

sebastiansanche
Tourist
3 0 1

Just for everyone to know - This is exactly what "shoptimized theme" uses and when you notice that it's not working with google ads (as you'll be suspended) and email them, they'll ask you for access to your store and remove those lines 

Diane_Mchugh
Excursionist
11 0 0
How do you know if you've been suspended?

dougmchart
Tourist
4 0 1

Scammed as well.  Our current developer found the code, and we are fixing it.  Again Fiverr.  Their "speed optimization" coincides to the day with a severe drop in traffic that we have been unable to explain... until now.  Stay away from Fiverr account "shopify_codes", email is shopifyspeedexperts@gmail.com.

splitamboo
Visitor
1 0 0

So I just used this Five*r guy to do my site. But I don't seethe document.write or document.open code in my theme.liquid. Is he doing something else?

ccherukuri
Shopify Partner
16 0 10

I got scammed by this exact same code.

Is there a way to genuinely bump up the Store Speed?

vibrantbodymind
Tourist
6 0 2
Here's what I did (and I am not a programmer):

- First, I googled every error that Google PageInsights was giving me.
- To remove redundant/unnecessary Javascript, I installed Shopify app, it's
paid, but cheaper than scammers
- Viewpoint error is easily fixable, all you have to do is insert a metatag
into section (also google it)
- Converted hero and collection images as .webp (next-gen) format and
replaced them on my site
- Did a few other minor tweaks that were easily searchable and doable even
by a non-techy person like me 🙂

So far, Lighthouse and GTMetrix steadily give me 98-100% on performance,
and I am happy, even with 93% SEO. All without sleazy "experts" that
install cr*p on your site.

Hope this helps!
vibrantbodymind
Tourist
6 0 2

Here's what I've done (and I am a not a technical person):
1. Ran a scan on Lightspeed (Google PageSpeed Insights) and noted all suggestions.
2. Googled each suggestion and checked what I can do. Some bits are easy to add even for non-programmer.
3. Replaced JPEGs with WEBP formatted images.
4. Got rid of lazy load.
5. Got rid of redundant Javascript (installed a paid plugin for that in Shopify, then discontinued after one month - still cheaper than hiring a scammy programmer)
6. In product descriptions, removed redundant bits of codes that creep in when you copy from Google Docs or elsewhere.
My speed at Shopify is 54-73%, 90-96% at Google Lightspeed. Not bothered by GTMetrix or whatever but I am sure it's consistent. Good luck!

NLanglois
Shopify Partner
10 1 5

Thanks for the feedback ! Which app did you use for removing de redundant javascript ?

broochiton
Excursionist
14 1 2

Thank you Nuova Idea

I just had one optimizing my website 

what are the steps to take in order to see if the hack codes are used or not ?

Thnk you