Web Security – Server Gigabit Guide https://www.servergigabit.com/guide VPS Hosting | Dedicated Server Sat, 11 Mar 2023 15:18:46 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.1 https://www.servergigabit.com/guide/wp-content/uploads/2020/07/cropped-GIGABIT_logo-1-32x32.png Web Security – Server Gigabit Guide https://www.servergigabit.com/guide 32 32 How to handle Google Attack Site Report? https://www.servergigabit.com/guide/kb/how-to-handle-google-attack-site-report Sat, 06 Jun 2020 09:01:33 +0000 https://www.wesbytes.com/guide/?post_type=kb&p=1364 When you see the warning “Google Attack Site” warning Please let us know if you did modify any file as well. Please note that this error message only appear from Mozilla Firefox and Google Chrome. This will not happen to other web browser as there is some relationship between Mozilla and Google. Once your account is being cleaned from virus script…

The post How to handle Google Attack Site Report? appeared first on Server Gigabit Guide.

]]>
When you see the warning “Google Attack Site” warning Please let us know if you did modify any file as well.

Google Attack Site warning
Google Attack Site warning

Please note that this error message only appear from Mozilla Firefox and Google Chrome. This will not happen to other web browser as there is some relationship between Mozilla and Google.

Once your account is being cleaned from virus script after our checking, please request delist from Google WebMaster using your Google account. You may refer to the step as below.

1. Sign into the Google WebMaster Tool page with URL of http://www.google.com/webmasters.
2. On the dashboard, select your domain name if you contain more than 1 domain name.
3. On the overview page, click on the Request a review and follow the instruction by the Google WebMaster Page.

The post How to handle Google Attack Site Report? appeared first on Server Gigabit Guide.

]]>
How to deal with “This site may be hacked” message https://www.servergigabit.com/guide/kb/how-to-deal-with-this-site-may-be-hacked-message Sat, 06 Jun 2020 09:00:26 +0000 https://www.wesbytes.com/guide/?post_type=kb&p=1363 You’ll see the message “This site may be hacked” when we believe a hacker might have changed some of the existing pages on the site or added new spam pages. As such, if you visit the site, you could be redirected to spam or malware. What to do when you see this message We recommend that you don’t visit the…

The post How to deal with “This site may be hacked” message appeared first on Server Gigabit Guide.

]]>
You’ll see the message “This site may be hacked” when we believe a hacker might have changed some of the existing pages on the site or added new spam pages.

As such, if you visit the site, you could be redirected to spam or malware.

example domain
Example Domain

What to do when you see this message

We recommend that you don’t visit the website until this message disappears from the search result.

Remove this message from your site

The “This site may be hacked” notification won’t be removed until the webmaster of the site takes action.

Try these steps to fix your website:

  1. Register and verify your site in Google’s Search Console.
  2. Sign in to Search Console and check the “Security Issues” section to see details of sample URLs that might be hacked. Fix the security issue that allowed your website to be infected. Otherwise, your site is likely to be reinfected.
  3. Read our resources for hacked sites for detailed information on how to fix your website.
  4. Request a review in the Security Issues section in Search Console when your entire website is clean and secure. After we check that your site is fixed, we’ll remove the “This site may be hacked” message.

The post How to deal with “This site may be hacked” message appeared first on Server Gigabit Guide.

]]>
Why Google Blacklist? How to resolve? https://www.servergigabit.com/guide/kb/why-google-blacklist-how-to-resolve Sat, 06 Jun 2020 08:51:55 +0000 https://www.wesbytes.com/guide/?post_type=kb&p=1362 Sites are blacklist when authorities such as Google, Bing, Norton Safe Web, McAfee SiteAdvisor etc. Find irregularities on a website that they deduce to be malware. Malware can come in many forms: trojan horses, phishing schemes, pharma hacks, email or information scraping. Most often, the website owner is not even aware that they have been hacked. However, it’s in the…

The post Why Google Blacklist? How to resolve? appeared first on Server Gigabit Guide.

]]>
Sites are blacklist when authorities such as Google, Bing, Norton Safe Web, McAfee SiteAdvisor etc. Find irregularities on a website that they deduce to be malware. Malware can come in many forms: trojan horses, phishing schemes, pharma hacks, email or information scraping.

Most often, the website owner is not even aware that they have been hacked. However, it’s in the search engine’s best interest not to show infected results, as they don’t want to lose users due to these results putting their computer in harm’s way.

Understanding Google’s Security Warnings
“This site may be hacked” warning”

This message is used to tell the user that Google believes a bad actor has made changes to the site by adding new pages in the form of spam. Visiting the site might redirect you to a page showing various forms of spam links or spam pages.

Google’s official explanation is:

“You’ll see the message “This site may be hacked” when we believe a hacker might have changed some of the existing pages on the site or added new spam pages. If you visit the site, you could be redirect to spam or malware.”

This warning does not generate a red screen and shows exclusively in the Google Search Engine Results Pages (SERP). For more information on what to do if you see this warning visit the Google help pages.

Why:

There are several reasons the domain and site are list as “This site may be hacked”. May refer below for some of the details:

1. Website compromised

2. Code injection under web file

3. outdated web application version(Joomla, WordPress, OpenCart and etc)

Note:  Outdated themes, plugins, module and etc may cause code injection. Besides that, installing plugins, themes, a module from un-trusted/un-verify party may also cause code injection

=====

How:

1. Alias with a web developer to check on web file under hosting. Remove suspicious/unused web file, remove unverified plugins, module and themes.

2. Update all web application version, themes, plugins, module and etc to latest version from time to time.

3. Install security plugins/module and perform scan on user web application

Upon the above steps had perform, do login into Google Webmaster end to request for site review. Google will take 24-72 hours to review.

The post Why Google Blacklist? How to resolve? appeared first on Server Gigabit Guide.

]]>
Compromised Websites Recovery https://www.servergigabit.com/guide/kb/compromised-websites-recovery Sat, 06 Jun 2020 08:41:39 +0000 https://www.wesbytes.com/guide/?post_type=kb&p=1361 The steps to recover your websites. 1. Take your site down or put it into maintenance mode immediately. 2. Update the administrator users’ passwords to have at least 8 alphanumeric characters with a mix of capital letters, numbers and symbols. 3. Carefully inspect if any new administrator users have been added to the web application without your knowledge. 4. Upgrade…

The post Compromised Websites Recovery appeared first on Server Gigabit Guide.

]]>
The steps to recover your websites.

1. Take your site down or put it into maintenance mode immediately.

2. Update the administrator users’ passwords to have at least 8 alphanumeric characters with a mix of capital letters, numbers and symbols.

3. Carefully inspect if any new administrator users have been added to the web application without your knowledge.

4. Upgrade all the installed web applications, such as WordPress, Joomla, Drupal, etc, inclusive of its third party themes, plugins, components, etc to the latest version.

5. Repeat the steps above to all the add-on domains and subdomains in the same account.

6. Update control panel account and FTP account passwords to form strong passwords, with each consisting of at least 8 alphanumeric characters coupled with special symbols.

7. Remove files and folders that are no longer in use.

8. Scan your computer using an up-to-date scanning program to identify any malicious code which might have been added by hackers. Be sure to scan all your content, not just text-based files as malicious content can often be embedded in images.

9. Restore clean files, and review the step from No.2 again.

10. Put the website back online.

The post Compromised Websites Recovery appeared first on Server Gigabit Guide.

]]>
Verification of Site with Google Search Console https://www.servergigabit.com/guide/kb/verification-of-site-with-google-search-console Sat, 06 Jun 2020 07:51:22 +0000 https://www.wesbytes.com/guide/?post_type=kb&p=1348 Verification of Site with Google Search Console & Indexing Options Looking for ways to manage your site’s presence in Google search results? Try Google Search Console! Google Search Console (also known as Google Webmaster Tools) can index your site, showing the recent changes you have made in the search results sooner. You can also check Analytics via Google Search Console…

The post Verification of Site with Google Search Console appeared first on Server Gigabit Guide.

]]>
Verification of Site with Google Search Console & Indexing Options
Looking for ways to manage your site’s presence in Google search results?
Try Google Search Console!
Google Search Console (also known as Google Webmaster Tools) can index your site, showing the recent changes you have made in the search results sooner. You can also check Analytics via Google Search Console to pinpoint the keyword visitors used to reach your site.
Important Tips:
  • Remove site-wide password or page password on homepage (if enabled).
  • In the event domain is not under Exabytes, kindly ensure domain mapping has been done via adding CNAME and A records. You may proceed to verify with Google Search Console after 72 hours (recommended).
  • Ensure site has been published (not trial sites) before proceeding with verification.
  • To sign up for Google search console
Verification of domain by Google Search Console
Google Search console verifies site’s primary domain.
Criteria for verification of domain:
  • Domain must be active and properly connected.
  • Changes to primary domain (whether it is built-in or custom domain) will require re-connection of site to Google Search Console.

Secure SSL setting enables Google Search Console to verify both http:// and https:// versions and add the primary version to Google Search Console. With that, this information is used to assign search traffic to your primary domain.

GSC-domain-url prefix
Domain and URL prefix

Please kindly tap COPY and add TXT to your DNS manager and allow 2-4 hours for propagation before tapping on VERIFY button. There will be a prompt message showing successful verification of TXT.

Keywords Analytics
Top keywords can be viewed in Google Search Keywords Panel after connecting to Google Search Console.  It may take up to 72 hours for keyword analytics to appear.
Requesting for Indexing of Site and Contents
Google’s bots review your site and update Google search results with new content.
For every index request, Google will first process the request, then crawl and index the page.
Note:
URL inspection tool – verify whether page can be indexed and when Google last crawled the page.
Switch to New Search Console by clicking ‘Use New Search Console’ at top of dashboard.
Verify your site before requesting for index.
Index Site by Submitting Site Map
Step 1: Go to Google Search Console Dashboard. Select the site you would like to index from property menu in the top left corner.

Step 2: Click Sitemaps.

GSC-sitemaps
Sitemaps
Step 3: Go to Add a new sitemap, type sitemap.xml
Step 4: Click Submit to request Google to index your site.
Index Specific pages by using URL Inspection Tool
This option is favorable if:
a. you only have a few pages on site
b. you have added new pages to site that Google has yet to index.
  1. Go to Google Search Console Dashboard. Select the site you would like to index from property menu in the top left corner.

    GSC-domain property
    Domain property
  2.  Click URL inspection.

    GSC-url inspection
    URL inspection
  3. Enter the page full URL that has yet to be index and press Enter/Return.
  4.  Click Request Indexing.
  5.  Repeat for any additional page URLs.

 

 

 

 

The post Verification of Site with Google Search Console appeared first on Server Gigabit Guide.

]]>