Why does Google say the site has a virus?

Question

Malware

This is what they wrote in the letter: Hello! Thank you for contacting Google Ads Support! Your site was blocked for violating the "Malware" rule, which means that our check showed that your website most likely contains malware or code designed to install malware. For the safety of users, we prohibit advertising resources that may contain content that is potentially dangerous for your customers. I just contacted our landing page quality specialists and they confirmed that the site still has malware. For you, I provide a list of links containing malware. Pass it on to your webmasters or remove dangerous content yourself:

https://villashomes.net/en/sell/villalayans5
https://villashomes.net/en/sell/villakatas1
https://villashomes.net/en/sell/villakamalas9
https://villashomes.net/en/sell/villas/?sort=p.price&order=ASC

At the same time, no scanners see viruses. Where to dig?

Answer 1

Dig towards js scripts.
Most likely, by clicking on these links, malware is activated.
Also check a DB: fields in which values ​​of these links are stored.
(the links themselves will look normal in this case, js is triggered by an event and does not affect the appearance of the links)