Are you still loading polyfill.io? Check in a minute
In 2024 the CDN changed hands and the script turned bad. Many sites still embed it. Plain story and a homepage check.
Polyfill.io used to be a normal helper for old browsers. Then the domain changed owners. Sansec reported that scripts from that address started misbehaving — including sending visitors elsewhere.
Google later flagged ads for sites that still pulled the script. So the pain is business too: ads can stop, visitors can leave.
Many people heard the news but left the include in a theme, an old plugin, or copy-paste from an old guide.
The same reports often named bootcdn, bootcss and staticfile. If you clean polyfill, check those too.
Orb44 opens the public homepage, lists script URLs, and looks for polyfill.io. No admin login. Hit or clean for that catalog.
If red: remove the script, clear caches/minifiers, re-check. Modern browsers usually do not need this polyfill anymore.
Check: orb44.com/polyfill. Related: bootcdn. Source: Sansec.
In plain terms: answer one clear question about your storefront first, then decide if you need a longer review. A one-minute check beats a week of guessing.
Keep the bar honest. A green result on a narrow check is not a forever-safe certificate. It only says what we saw on the public page we fetched right now.
If the result is red, fix the concrete thing first — the script, the open side door, the listing — then re-check. Screenshots into the admin chat work better than vague worry.
Share the checker link with whoever actually owns the site. Owners search symptoms. Admins need a binary answer they can act on today.
In plain terms: answer one clear question about your storefront first, then decide if you need a longer review. A one-minute check beats a week of guessing.
Keep the bar honest. A green result on a narrow check is not a forever-safe certificate. It only says what we saw on the public page we fetched right now.
If the result is red, fix the concrete thing first — the script, the open side door, the listing — then re-check. Screenshots into the admin chat work better than vague worry.
Share the checker link with whoever actually owns the site. Owners search symptoms. Admins need a binary answer they can act on today.
In plain terms: answer one clear question about your storefront first, then decide if you need a longer review. A one-minute check beats a week of guessing.
Keep the bar honest. A green result on a narrow check is not a forever-safe certificate. It only says what we saw on the public page we fetched right now.