5xxx SEO attack spoofing domain name

matrix.education → SSL_ERROR_NO_CYPHER_OVERLAP
matrix.edu.au → disable XML-RPC for WordPress, disable comments, disable pingback

  1. Remove Newsletter form / add captcha to it
  2. Contact Us page, remove that form / add captcha to it
  3. my.matrix.edu.au/users/sign_in → add captcha to it + create a firewall rule “JS Challenge”
  4. Create a Firewall Rule to challenge all the requests
  5. Block some of the know AS numbers → SEMRUSH, CRITEO, SEZNAM, MICROSOFT/BING, YANDEX, HETZNER, CONTABO, SCALAXY, GLOBALHOST, HIVELOCITY, OVH, AMAZON-AES, AMAZON-02, LIQUIDWEB, Flyservers S.A., Linode LLC, M247, LEASEWEB, SELECTEL, DIGITALOCEAN, Online SAS, DDOS GUARD LTD

You are using Yoast SEO v17.8 → not the latest, old one. Is it paid or nulled one?

1 Like