XSS attacks

What is the name of the domain?

bomsucesso.mg.gov.br

What is the issue you’re encountering

I am suffering thousands of daily attacks where the hacker is indexing several game pages on my website on Google and I can’t find out where he is attacking. Google already has more than 2 million pages indexed from my website directing to the betting site. With cloudflare I see these strange url requests coming in (as shown in the image), but I don’t know how to find out how they are doing this so I can try to correct my code. Could anyone help me?

What steps have you taken to resolve the issue?

I have already updated some vulnerable javascript libraries. I’ve already looked for strange files on my website and server and nothing was found.

What are the steps to reproduce the issue?

In google, type site:bomsucesso.mg.gov.br

Screenshot of the error

Hello !

bomsucesso.mg.gov.br

Based on my checking, I am unable to see the domain in this account.

To enhance the security for your website, kindly review this documents :

Thank you !

This topic was automatically closed after 15 days. New replies are no longer allowed.