Welcome to the Q&A Forum

Hi Beachflower, Did you ever get a resolution to this? I'm curious to see what the outcome and solution was. If this is a malicious attack then you'll need to consult someone who specializes in net sec, but I've dealt with a few different kinds of attacks before so I can make a couple of recommendations. 1. Change all of your logins. Make them unique and difficult for a bot to guess. Then set it to lock out users after five incorrect guesses. This prevents brute force hacks. 2. Add a honeypot to your login forms. A honeypot is a hidden field that bots will try to fill out on a form. Users can't see it, so they don't fill it out. If it gets filled out, the program knows it's a bot, and invalidates the attempt to login. 3. Use screaming frog to find all the js that was maliciously inserted on each URL and create a "cleanup" list. A developer should be able to write a simple "find and replace" program that just deletes it. 4. Consider migrating to https if you haven't already. This can prevent Man-in-the-Middle attacks (MIM) on your site, and also confers several SEO benefits such as improved user experience, a slight boost in ranking, and faster site speed (HTTP/2 integration). These are just a few first steps to take and a Net Sec professional will have much more to add. Hope that helps!

Thanks!

So glad to have helped!

This quote is from Moz's domain setup guide: "Since search engines keep different metrics for domains than they do subdomains, it is recommended that webmasters place link-worthy content like blogs in subfolders rather than subdomains. (i.e. www.example.com/blog/ rather than blog.example.com) The notable exceptions to this are language-specific websites. (i.e., en.example.com for the English version of the website)." I think that quote is pretty compelling towards the idea of subdirectories. But I think the value of subfolders versus directories certainly makes sense especially from a linking, age, and juice perspective. Ultimately, it comes down to you and what you want for the website.

HI there, Remember that rankings movements, sometimes don't have much to do with algorithm updates. There are thousands of reason and variables to analyze. About updates you can have very updated info here: mozcast.com Algoroo.com Best luck!

Thank you and don't forget to "Login to your Google Webmaster Tools account and navigate to “Fetch as Google” option available under “Crawl” section." When you submit select the second box to allow it to crawl all URLs attached Use the URL below to get you into Webmaster tools and click on the call to action Fetch as Google https://support.google.com/webmasters/answer/6066468?hl=en http://www.webnots.com/what-is-fetch-as-google/ https://searchenginewatch.com/sew/how-to/2326164/index-your-content-faster-with-the-fetch-as-google-tool More good reasons to avoid Go Daddy https://moz.com/community/q/server-connection-error-when-using-google-speed-test-insight-and-gtmetrix https://solvid.co.uk/7-reasons-to-avoid-godaddy/  ( worked in this case as well) Here is a larger copy of the photo below. http://i.imgur.com/kWmuivK.png Hope everything works out for the best definitely, utilize free WAF it is very helpful in keeping your site from being successfully hacked again. All the best, Tom kWmuivK.png