Sandboxed?
-
We used to rank well on Google. From what I understand the site was nailed with malware and the site was heavily penalized. Now I am trying to get things straightened up. I am going through and fixing onsite issues, but I get the sense that the issues are deeper with Google.Can someone help me? I have tried getting a manual review through Google Web Master Tools, but it isn't an option for the site.
-
Hi,
If you got malware Google will at some point, beside providing the message in serp (eg: this site might be hacked and so), start deindex your pages. This type of "action" from google's side is either manual (so someone actually pushed a button) or algorithmic. If you don't see anything in Web master Tools - then it's algorithmic and the only way to get back is to clean all the pages and wait for google to re-crawl.
If you see the message in Web master tools - after you clean all the pages then you can submit a reconsideration request - it helps

There is one issue though - some times Google already de-index some pages affected so you can't find those using serps. Best way is to look "in the files directly" or use Bing to look for spamy words injected in your pages.
A good start would be to run some site:yourdomain queries. Here are a few samples bellow.
site:yourdomain.com (pharmacy|cialis|viagra|xanax|levitra|tramadol|prescription|casino|gambling|software|loan|credit|) but of course you need to go broader then that ...
Hope it helps.
-
- Unfortunately, when people get hacked it does not number on your ranking. Obviously Google does not want to serve malware to more people by giving your site a good ranking.
- To get your site back to normal and go to GMT see if your backlisted in Google if so to index it proving it is not active anymore through going to need to do a few things.
-
This tool will show you if the site is still are infected use http://sitecheck.sucuri.net/ to check your entire site for malware it is free to check.
-
If you are infected purchase the https://sucuri.net/signup service at $89 a year with unlimited cleanups and monitoring they will make sure you are not on blacklists with Google or other companies as well as make sure your first site is spec and span.
-
Backups you need to have a backup of your website I back my site up every day. I use Sucuri backup it works on any type of site that has SFTP or FTP if you are looking for something similar CodeGuard is a spectacular tool it works for one site or 100 client sites. If you use WordPress VaultPress is a fantastic tool. My personal preference Sucuri backups because they do not put an On the ability for you to use backup space it is unlimited.
-
Protect against what could happen again in all honesty your site is just getting worse by not being fixed if it is not completely fixed it. And attackers tend to come back it is a sad thing. My recommendation use http://cloudproxy.sucuri.net or http://www.incapsula.com/pricing-and-plans.html or if you have no choice https://www.cloudflare.com/waf
-
Sucuri does far more for far less,
-
http://www.incapsula.com/blog/googlebot-study-mr-hack.html it will stop everything shown right here and that is for the nine dollar version the tool has four levels
-
However–you are really going to deal with student of stuff you will be fine with their base plan in less you use SSL then you will have to purchase their $19 plan still well worth it.
-
Other tools as far as cleanup there is nothing better that I know of Aside from going to somebody like Daniel Miessler he makes tests like this for many very well known companies that you would definitely know of is the genius when it comes to security and Web performance. http://danielmiessler.com/study/infosec_interview_questions/ Obviously the cost would be a lot higher, but I do not know how severe your problem is.
-
However, I want to be completely upfront with you can build a server on digital ocean starting at $5 a month for full VPS have IP tables built-in firewall and while you do have to self manage if you placed a service like https://cloudproxy.sucuri.net/ on top of any stack you choose you can get away with a 100% SSD VPS with nothing short of excellent security. If you get attacked in the future it will not cost you anything and you will be more secure for it.
-
If you are running WordPress I would take a look at companies like Pagely, Get Flywheel, WP Engine, Web Synthesis, Pressable & Press Labs they are all going to keep your site extremely secure. Every one of the companies I have listed will literally unpack your site if it is packed on their servers for whatever reason.
-
Last but not least invest in a service like 1Password or LastPass it will generate much harder to break passwords are never “unbreakable” but when you match it with whitelisting going back to a company like Sucuri that allows you to Whitelist your IP and VIPs of people you want to be able to go to whatever the whole hog and or administrator pages on your site than if that person does not have a Whitelisted IP they simply do not have the ability to login or cause what apparently happened to you again.
-
Now if you find yourself in a position where you are still getting hacked and need protection I strongly recommend I have no idea what your hosting company is however obviously it failed, but that does not mean it is bad necessarily it could have been a number of things. However, if I were you I would either use an enterprise hosting company my favorite is FireHost http://www.firehost.com/ ( be forewarned they start at about 400 a month) Verizon's http://www.terremark.comis extremely far from inexpensive. PeakHosting.com is excellent starts at $900 a month.
-
Pagely uses File Hosts WAF they offer 30% off but I have yet to see it myself Since they restructured.
-
WP Engine is a full 4 months of free hosting
-
Get Flywheel offers a Completely managed lockdown VPS with SSD’s, firewall intrusion protection everything you need to stay safe and have a very fast site. If your sites compromised it is fixed for free.
-
Hope this helps,
-
Thomas
PS large phoro month http://imgur.com/8BmCFMj.png
-
This post is deleted! -
Thomas, could you review your response and edit with a keyboard? Some of the formatting is off, making it a bit confusing to understand. Thanks!