Site Speed

nuova-idea · ‎09-02-2021

Hi ALL,

first of al, you should know that Shopify stopped to use Lighthouse to calculate the speed score, this is why the sudden drop of speed score in Shopify in comparison with Lighthouse or GTmetrix. Shopify does not consider the Lighthouse speed anymore. This since around the beginning of August 2021.

Now the why: some developers do ZERO/NO work on performing your store, they ONLY add a hacking code that detect speed checkers. When it detect speed checkers, it serve an empty page, with no content. That's why your Lighthouse or GTmetrix speed score it is so high.

Now that Shopify stop linking its speed report with such speed checkers, the scam it become clear to all. Be aware, an high amount of developers were selling fake speed optimizations, using instead this quick hack to collect money from store owners.

The code contain such lines:

document.write / document.open and are inserted in the theme.liquid (use ctrl+g to locate them). If you find such lines, you been scammed.

I suggest everyone who got this scam to reply to my post here and add the name or data of the developer to help others to do not fall in the same scam.

My scammer was hired on Fiverr:

It is taking 2 weeks of work and lot of money to fix this issue. Cause it also damage how the store works.

Please everyone, spread the voice as much as possible because Shopify still did not made any official statement on this, and many store owners have no idea at all about this.

Let's make sure those scammers get banned and get no more money from store owners.

Zineddine · ‎09-21-2021

Can you please share with us the code that the scammer has used?

The Best Speed Optimization Service On Fiverr https://linktr.ee/growshopify

nagumi · ‎09-21-2021

THANK YOU! I GOT SCAMMED AND FOUND OUT THANKS TO YOU!!!!

I've reported it to shopify and they're investigating. But I found my scammer through shopify expert marketplace, not fiverr. I confronted the scammer and they gave me my money back.

The code:

document.open();
     if(window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('\x43\x68\x72\x6F\x6D\x65\x2D\x4C\x69\x67\x68\x74\x68\x6F\x75\x73\x65') == -1 && window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('X11') == -1 && window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('GTmetrix') == -1) {document.write({{pDescription | json}});}  else{
     document.write("<html><p>.</p></html>");}document.close();</script>

nuova-idea · ‎09-22-2021

Please, mention the Shopify Expert that you used to help others avoiding such seller. Thanks

NLanglois · ‎12-10-2021

Should you remove exactly this part ? what is the code that you have to remove so that it is the same as before ?

Hamzaa · ‎12-11-2021

Hi @NLanglois,

This script (bot) is now commonly used in Shopify Stores to improve the admin score of Shopify and as well the score on Google Pagespeed Insights. I will suggest you and everyone to ask the developer first that how he will improve the speed of your website and then start the work with the developer in order to avoid any kind of scam. Thank you.

SEO Expert

NLanglois · ‎12-13-2021

Thank you @Hamzaa for your answer.

It is hard to ask the developer more details since I linked those threads suggesting he tried to scam me.

I'm not able to communicate with him as he is now banned from fiverr or he blocked me...

I feel bad because I feel the website did improve even if it seems it mainly improved thanks to the script...

I'm not sure if it was a real scam or some work + help from that script.

Hamzaa · ‎12-14-2021

I have visited the profile of this seller and I can see that he has over 500+ Positive Reviews which make sense that the people are getting good results. Usually the owner of the website wants to see the results on Shopify Dashboard and on Google Pagespeed Insights. Now the developers have invented their own scripts which can improve the speed score on Google Pagespeed Insights and as well on Shopify Dashboard. These scripts do not affect the store functionality, sales or performance. In short term, these scripts improve the speed score in easy and quick way.

SEO Expert

Nilo_ · ‎12-14-2021

You've got to be kidding. Your store speed isn't just a vanity metric. It's directly correlated to conversion performance. Scamming non-technical store owners is completely unethical and borderline criminal. You said it yourself "These scripts do not affect the store functionality, sales or performance" WHICH IS WHAT YOU'RE BEING PAID FOR.

The script loads a blank page when it detects Lighthouse. The moved blocking script tags to deferred loading without any regard to what script is being edited. It's nothing more than a scam and that's it.

NLanglois · ‎12-15-2021

Thanks for reassuring me @Nilo_

Btw the script was indeed affecting my performances as it was preventing my favicon from being load and therefore returning a 404 on GTmetrix.

My favicon is not favicon.ico but since the line of code with my favicon was under the script for some reason it was not loaded and by default favicon.ico was called and returned a 404.

I found a solution to suppress that 4s lag by putting the favicon line above the script which worked.

I still have the script as if I suppress it my store doesn't load any image but with that example we can see that the script can have an impact on the store...

PS : Actual results

nuova-idea · ‎12-15-2021

DO NOT MISSLEAD PEOPLE!

Adding this code destroy the shop functionality in many ways, ruin the SEO completely and also cause several tech issue internally.

This SCAM does not make the website/store faster in any way! This SCAM serve an EMPTY page to robots which means, once again, the robots DO NOT see your real store!

root2 · ‎01-15-2022

Hello, I have been following this thread and I think I am also being scammed, Can you pls tell me where can I find this code in my store?

Candas · ‎12-12-2022

Hello, where do you find this code? We got an acceleration service from someone on Fiver. However, we could not find these codes. He increased our mobile speed from 19 to 89.

oreoorbitz · ‎12-12-2022

Share your site URL.

19 to 89 seems unrealistic unless you guys worked togather intensley to improve your site, or you had a single app that was causing a slow speed.

Available for freelance. I specialize in speed improvement and theme development.
https://www.upwork.com/fl/orionholmes

If your looking for a pagespeed solution for your Website, take a look at: https://renderbetter.com/

Candas · ‎12-12-2022

My web site URL is nowshopfun.com

vibrantbodymind · ‎01-01-2023

Here are my five cents from another victim of the "speed" scam. Avoid this "expert" like the plague! Note 5-star reviews (most likely from other "experts")

Nilo_ · ‎11-04-2021

This is exactly what "Anees Ayub" from @Aisat_Solutions did via a Fiverr job. His email is aneesayub213@gmail.com

@Shopify please ban him and remove all partner accounts. DM me for details.

NLanglois · ‎12-09-2021

I just got exactly the same with him :

MichaelYounal · ‎01-01-2022

This man is really a big scammer. When he caught then he immediately removed malicious code and by which my speed drop from 81 to 35. He start lying in chat to manipulate even Fiverr customer support. I caught his code with the help of my developer. On queries even his behavior was unappropriated. I'm going to list his chat screenshot here.

This was his behavior, my question was then why you sit here.

He also replied to my review to manipulate upcoming buyers. My responsibility is to just warn you, otherwise you have a lot of options.

Thanks

alince · ‎08-03-2022

I got scammed by the exact same person!

Diane_Mchugh · ‎01-15-2022

I found the same problem in my code. Can you tell me what else needs to be repaired as you said it damages your store.

I have to get someone to fix it.

Thanks!!

root2 · ‎01-16-2022

Can you share your store link?

Diane_Mchugh · ‎01-16-2022

https://ladybugfeetdesigns.com

root2 · ‎01-16-2022

@diane You are being scammed my friend

Diane_Mchugh · ‎01-16-2022

I'm aware.

magefix · ‎01-18-2022

Hi @All, here are more scripts that may be designed to trick Pagespeed. Removing the code is not sufficient - a Shopify developer should carefully remove the {%capture pDescription%} and {% capture vendors %} and their corresponding closing tags - {%endcapture%}.

<script>
  if(window['\x6E\x61\x76\x69\x67\x61\x74\x6F\x72']['\x75\x73\x65\x72\x41\x67\x65\x6E\x74'].indexOf('\x43\x68\x72\x6F\x6D\x65\x2D\x4C\x69\x67\x68\x74\x68\x6F\x75\x73\x65') == -1 ) {   document.write({{pDescription | json}}); } else { } document.close();  
</script>
decoded >>
<script>
  if(window['navigator']['userAgent'].indexOf('Chrome-Lighthouse') == -1 ) {   document.write({{pDescription | json}}); } else { } document.close();  
</script>

<script>document.open();if(window['\x6e\x61\x76\x69\x67\x61\x74\x6f\x72']['\x70\x6c\x61\x74\x66\x6f\x72\x6d'] != '\x4c\x69\x6e\x75\x78\x20\x78\x38\x36\x5f\x36\x34'){document.write({{vendors | json}});}document.close();</script> 
decoded >>
<script>document.open();if(window['navigator']['platform'] != 'Linux x86_64'){document.write({{vendors | json}});}document.close();</script>

Malware Specialist @ Magefix

Diane_Mchugh · ‎01-18-2022

@magefix Do you do this kind of work? If so how much do you charge to remove the code and script?

magefix · ‎01-18-2022

Hi @Diane_Mchugh

Check the attached screenshots - I've highlighted the code that needs to be removed.

Malware Specialist @ Magefix

Diane_Mchugh · ‎01-18-2022

@magefixthanks. But i don't have the confidence to make a change to my own code. And that's not the clearest screenshot...

magefix · ‎01-18-2022

I'm able to help, send me a private message, and we'll arrange the delegation process. Or google for "magefix" and email me directly. Please note that the fix will be free of charge.

Malware Specialist @ Magefix

uamosk · ‎08-14-2022

I've deleted it from my website.

Thank you!

uamosk · ‎05-16-2023

now, it's OK:

Diane_Mchugh · ‎01-18-2022

@root2 explain please

root2 · ‎01-16-2022

@Diane_Mchugh

magefix · ‎06-07-2022

Hello, you may download all the theme files on your local computer. And then, perform a string search to notice which ones were altered. If you need help, let me know.

Malware Specialist @ Magefix

forgiftu · ‎08-30-2022

Thanks for your information!

I got scammed too by this Fiverr "expert", and I find the exact same coding document.write / document.open / {%capture pDescription%} / {%endcapture%} in his deliverables.

EdHENN · ‎09-19-2022

Hello,

Does someone know an honest shopify expert to work efficiently on site speed ?

Edward

sebastiansanche · ‎10-19-2022

Just for everyone to know - This is exactly what "shoptimized theme" uses and when you notice that it's not working with google ads (as you'll be suspended) and email them, they'll ask you for access to your store and remove those lines

Diane_Mchugh · ‎10-19-2022

How do you know if you've been suspended?

dougmchart · ‎10-28-2022

Scammed as well. Our current developer found the code, and we are fixing it. Again Fiverr. Their "speed optimization" coincides to the day with a severe drop in traffic that we have been unable to explain... until now. Stay away from Fiverr account "shopify_codes", email is shopifyspeedexperts@gmail.com.

splitamboo · ‎05-16-2023

So I just used this Five*r guy to do my site. But I don't seethe document.write or document.open code in my theme.liquid. Is he doing something else?

ccherukuri · ‎01-03-2023

I got scammed by this exact same code.

Is there a way to genuinely bump up the Store Speed?

vibrantbodymind · ‎01-04-2023

Here's what I did (and I am not a programmer):

- First, I googled every error that Google PageInsights was giving me.
- To remove redundant/unnecessary Javascript, I installed Shopify app, it's
paid, but cheaper than scammers
- Viewpoint error is easily fixable, all you have to do is insert a metatag
into section (also google it)
- Converted hero and collection images as .webp (next-gen) format and
replaced them on my site
- Did a few other minor tweaks that were easily searchable and doable even
by a non-techy person like me 🙂

So far, Lighthouse and GTMetrix steadily give me 98-100% on performance,
and I am happy, even with 93% SEO. All without sleazy "experts" that
install cr*p on your site.

Hope this helps!

vibrantbodymind · ‎01-20-2023

Here's what I've done (and I am a not a technical person):
1. Ran a scan on Lightspeed (Google PageSpeed Insights) and noted all suggestions.
2. Googled each suggestion and checked what I can do. Some bits are easy to add even for non-programmer.
3. Replaced JPEGs with WEBP formatted images.
4. Got rid of lazy load.
5. Got rid of redundant Javascript (installed a paid plugin for that in Shopify, then discontinued after one month - still cheaper than hiring a scammy programmer)
6. In product descriptions, removed redundant bits of codes that creep in when you copy from Google Docs or elsewhere.
My speed at Shopify is 54-73%, 90-96% at Google Lightspeed. Not bothered by GTMetrix or whatever but I am sure it's consistent. Good luck!

NLanglois · ‎01-21-2023

Thanks for the feedback ! Which app did you use for removing de redundant javascript ?

broochiton · ‎02-05-2023

Thank you Nuova Idea

I just had one optimizing my website

what are the steps to take in order to see if the hack codes are used or not ?

Thnk you

_User5 · ‎03-27-2023

I also have just identified the same issue - unfortunately it has been this way for a few months... I thought I had missed this as I could not see the code on my website but it was hidden down...

Signs it might be an issue:

Pagespeed insights wont display the full page in the preview (things are missing). Failing the actual user data tests but not the ‘indication’ ones. I think the biggest red flag are maybe ones which say they can get your speed up ‘quickly’ - i followed the advice of people on this page and others before ordering asking about what sorts of steps would be done and they said they removed animations etc. from the page - yet they were very quick with their work and got this result..

The person I used was saida_seoexpert and I have even left them a good review (trying to see if i can change it to warn others though).

Search using Shopify theme File Search (https://chrome.google.com/webstore/detail/shopify-theme-file-search/mhchmhfecfdpaifljcfebnlaiaphfkmb...). This lets you search the whole theme as opposed to going one by one - only issue is it is in chrome so if you dont use that you will have to log into shopify on that.

I am unsure if I have managed to remove all the malicious code to be honest… but this is what I have done:

Search:

document.write

Remove the capture vendors and endcapture in the following:

quotes.liquid

{% capture vendors %}

{% endcapture %}<script>document.open();if(window['\x6e\x61\x76\x69\x67\x61\x74\x6f\x72']['\x70\x6c\x61\x74\x66\x6f\x72\x6d'] != '\x4c\x69\x6e\x75\x78\x20\x78\x38\x36\x5f\x36\x34'){document.write({{vendors | json}});}document.close();</script>

featured-product.liquid

{% capture vendors %}

{% endcapture %}<script>document.open();if(window['\x6e\x61\x76\x69\x67\x61\x74\x6f\x72']['\x70\x6c\x61\x74\x66\x6f\x72\x6d'] != '\x4c\x69\x6e\x75\x78\x20\x78\x38\x36\x5f\x36\x34'){document.write({{vendors | json}});}document.close();</script>

custom-html.liquid

{% capture vendors %}

{% endcapture %}<script>document.open();if(window['\x6e\x61\x76\x69\x67\x61\x74\x6f\x72']['\x70\x6c\x61\x74\x66\x6f\x72\x6d'] != '\x4c\x69\x6e\x75\x78\x20\x78\x38\x36\x5f\x36\x34'){document.write({{vendors | json}});}document.close();</script>

It is also on these two but am unsure if it is an issue there or not yet

tolstoy-carousel.liquid

tolstoy-stories.liquid