I'm trying to integrate some analytics into my site and whilst debugging why mine wasn't working, I found this line being put in the head of my document:

<script async="" src=";amp;l=c69d3b65dc6d40db98d2e3ee3cc1fd37"></script>

Now... It's weird because I've disabled any plugins I had doing google analytics. Additionally, when I look up that account ID, I find references to some company called KyinWebSEO that I've never heard of or done any kind of business with (that exact tag is on the source of their site).

Two main questions here:

• Did I get some kind of virus in one of the plugins I've downloaded? I have plugins related to analytics deactivated so unless one of the other plugins I have is doing that, not sure where it is coming form
• Any advice on finding what is injecting it other than disabling all plugins?

Google the following to see sitewiki links: google tag manager "UA-75655200-4"

I'm trying to integrate some analytics into my site and whilst debugging why mine wasn't working, I found this line being put in the head of my document:

<script async="" src="https://www.googletagmanager/gtag/js?id=UA-75655200-4&amp;l=c69d3b65dc6d40db98d2e3ee3cc1fd37"></script>

Now... It's weird because I've disabled any plugins I had doing google analytics. Additionally, when I look up that account ID, I find references to some company called KyinWebSEO that I've never heard of or done any kind of business with (that exact tag is on the source of their site).

Two main questions here:

• Did I get some kind of virus in one of the plugins I've downloaded? I have plugins related to analytics deactivated so unless one of the other plugins I have is doing that, not sure where it is coming form
• Any advice on finding what is injecting it other than disabling all plugins?

Google the following to see sitewiki links: google tag manager "UA-75655200-4"

• plugins
• html
• google-analytics
• virus

Share Improve this question asked Jul 8, 2019 at 0:24 GabrielGabriel 14155 bronze badges 1

• 1 Thinking it is a malicious agent/plugin. When I google wordpress plugin with that tag, I get top results with cutestat and whois/whois/cutestat shows what seems to be a possibly fake organization. Sketchy. – Gabriel Commented Jul 8, 2019 at 0:40

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 1

When I disable Content Visibility for Divi Builder then the tag goes away. Seems suspicious... maybe they got hacked or maybe they are bad cookies. Will try to move this to the proper reporting channels. AoD Technologies LLC is the developer.

Edit: wanted to temper this with a third possibility of tracking the usage of their plugin

Edit 2: the developer replied https://wordpress/support/topic/injects-suspicious-google-tag-manager-id/ I found a bug but the tracking code is theirs for tracking usage of the plugin. False alarm