Issue Identified:
Multiple users reported JavaScript code (specifically Boomerang performance monitoring script) displaying as visible text at the top of their websites. The problem appeared suddenly and affected only the users’ own computers, not other visitors to their sites.
Key Characteristics:
Only visible on affected users’ local browsers (Chrome, Safari)
Not a website code issue—other computers displayed sites normally
Affected multiple Shopify websites when viewed from infected machines
Root Cause:
Spyware/adware application called “SurftoEarn” (also referenced as “surf2earn”) installed on users’ PCs without their knowledge.
Solution:
Navigate to Windows Add/Remove Programs
Search for and uninstall “SurftoEarn” application
Clear browser cache and cookies (Chrome specifically mentioned)
Resolution:
Multiple users confirmed this solution immediately fixed the issue. The malware was difficult to detect—standard spyware scans failed to identify it, requiring manual removal through Windows program management.
Status: Resolved for all participants who removed the application.
Summarized with AI on November 4.
AI used: claude-sonnet-4-5-20250929.
I’m having the same issue. Mine just started today. I’ve checked other computers and the site looks fine, but it’s happening in all my browsers. I really hope someone can answer this for us all.
Hi! So I cleared my Chrome cache earlier that day, but that was not the solution because the code went away on Safari as well and I didn’t clear Safari’s.
Ran 4 different spyware apps on my system. None found anything. Finally discovered there was an app called SurftoEarn installed on my pc the day the problem started. Not sure where it came from. Definitely didn’t knowingly download it. Once removed, the issue went away. Check to see if you have that app or something else installed the day the problem started for you.
THIS^^!!! Thank you SO much. Did the same thing–ran several spyware scans, flushed my DNS, cleared cache. Nothing was working. Originally saw your comment and searched “SurftoEarn” on my PC and nothing came up. It wasn’t until I went into Add or remove programs and boom, there it was. SurftoEarn. Uninstalled it and it fixed all my issues.
"); } else { win._boomrl = function() { bootstrap(); }; if (win.addEventListener) { win.addEventListener(“load”, win._boomrl, false); } else if (win.attachEvent) { win.attachEvent(“onload”, win._boomrl); } } doc.close(); } var link = document.createElement(“link”); if (link.relList && typeof link.relList.supports === “function” && link.relList.supports(“preload”) && (“as” in link)) { window.BOOMR.snippetMethod = “p”; link.href = window.BOOMR.url; link.rel = “preload”; link.as = “script”; link.addEventListener(“load”, promote); link.addEventListener(“error”, function() { iframeLoader(true); }); setTimeout(function() { if (!promoted) { iframeLoader(true); } }, LOADER_TIMEOUT); BOOMR_lstart = new Date().getTime(); parentNode.appendChild(link); } else { iframeLoader(false); } function boomerangSaveLoadTime(e) { window.BOOMR_onload = (e && e.timeStamp) || new Date().getTime(); } if (window.addEventListener) { window.addEventListener(“load”, boomerangSaveLoadTime, false); } else if (window.attachEvent) { window.attachEvent(“onload”, boomerangSaveLoadTime); } if (document.addEventListener) { document.addEventListener(“onBoomerangLoaded”, function(e) { e.detail.BOOMR.init({ ResourceTiming: { enabled: true, trackedResourceTypes: [“script”, “img”, “css”] }, }); e.detail.BOOMR.t_end = new Date().getTime(); }); } else if (document.attachEvent) { document.attachEvent(“onpropertychange”, function(e) { if (!e) e=event; if (e.propertyName === “onBoomerangLoaded”) { e.detail.BOOMR.init({ ResourceTiming: { enabled: true, trackedResourceTypes: [“script”, “img”, “css”] }, }); e.detail.BOOMR.t_end = new Date().getTime(); } }); } })();
mines doing same thing I went and put this into my browser to see if it would come up what it was i was assuming an app i had installed thru Shopify but since reading this feed I will go and clean and do the spyware as well as delete the app that (Tracesounds) said ill let you know cross your fingers!!!
You are my HERO right now!!! I was at my wits end trying to find this code in all the files . Absolutely had the surftoearn on my PC, WHO KNEW!! THANKS
