We got a lead from ChatGPT recently from a very large tech company. No clue what / if we did anything in particular though to get it though lol.

Google is our friend -

https://community.cloudflare.com/t/when-i-create-an-api-i-always-get-this-error-please-verify-your-email-code-1211-why-what-should-i-do/477350

Verify email address .

This has bugged me forever

Amen.

Weird. Can you try editing that page in WP? Open any page / post in editor and replace the ID with 138 in URL. That will tell you what it was.

Also try clearing caches - host and any WP .

Then resave permalinks.

Ha well hey whatever works for you! No judgement here.

Good luck and let me know if you have any questions .

Oh and when you deploy it handles the invalidation automatically which is nice . And while I did say it’s free I should clarify that’s for 500 builds per month which is a ton.

Have you thought about moving this to CloudFlare Pages? Free and you can keep everything in one place.

It’s a bit opinionated of a service so I believe it will remove .html extension so /about.html will become /about . You’d want to redirect that and update your code base accordingly.

In addition you’d want to integrate it with a git host ideally. You don’t have to - you can just upload the files in a zip.

This

Yoast has an XML Sitemap that is generated automatically. It excludes posts only if they are marked as noindex. I suspect maybe there is a conflict here. I wonder if there is a physical sitemap.xml file in the site root. The Yoast Sitemap index file is located at /sitemap_index.xml. You'll know it's Yoast b/c they put their branding / copy in the it.

Yoast then redirects /sitemap.xml => /sitemap_index.xml

However if there is a conflict - such as a physical sitemap.xml file in the root - it would likely prevent that redirection.

If it were me then I would:

1. Just use the default Yoast sitemap
2. Check the site root on the server for a physical XML sitemap and remove if it exists
3. Disable any other sitemap plugins
4. Resave permalinks to make sure all your changes are respected

Huh, most SEO plugins handle this well automatically in my experience and allow for inclusion / exclusion based on index status of the post or page.

Is there an SEO plugin in use ?

I wonder if the current plugin isn’t working right bc there is another issue like cron or memory exhaustion preventing it from being fully generated. Just speculating there though.

Cool I gave this a look. Your homepage doesn't have an <h1>. The main heading is an <h2>. However, the interior pages do have proper H1 tags. I think maybe your homepage is handled by a different template than the interior pages?

Can you share URL? Did you view page source to verify rankmath isn’t reporting a false positive ?

Central time - one hour earlier than east coast .

Do you do GTM? Dm me if so we are looking for some extra support. North America time zone nice but not required

Thanks! Yeah I agree with your assessment completely. I personally like GA4 but I'm on a technical team so I am comfortable extracting the data as needed. But I 100% get why it's so disliked.

This ^

Um, are you concerned your site might have malware if Google is flagging the backup?

I think it's gone from that page; I double checked. No network requests to the malicious server anymore. Also seems to be gone on your other pages although I did not rescan the whole site.. I suspect it was just cached for those users.

While it’s true you can’t backfill stats as others have said, some tools like SEMRush will give you traffic estimates historically. It’s not a replacement for an analytics tool though. And it might not work for very small sites. We use it for competitor analysis.

I hate to be the bearer of bad news, but recent Google algorithm updates will make it difficult for a small blog to bounce back from significant traffic losses (assuming those losses are related to your organic search performance). In addition, new AI-powered search results mean fewer visitors will even go to your site.

So, I would be very careful of hiring anyone who makes promises. There are a lot of charlatans in the SEO world.

All that said I’d be happy to give your site a quick look. Maybe there are some obvious things wrong that can be addressed easily. Drop your link in this thread or DM.

glad that was helpful. I scanned your site with a scraper and I found the code still exists on some Woocommerce pages so I think that is your problem. Here is a screenshot of the pages I found the code:

https://imgur.com/a/jpXmYU3 

This would explain why some users are still having the issue.

your site isn't accessible for users with VPNs. pass.

Could be bots yes - are they all hitting one URL / from the same geo ?

Hi there - you definitely have malware on your site; loaded on some pages like your product pages, but not all pages.

The script is obfuscating itself. Here is a screenshot:

https://imgur.com/a/bIpQPPn 

From the looks of it, this was added by a WordPress admin user account that was compromised to the Woocommerce product descriptions.

I bet if you go to your Woocommerce product, "East German Border" and click the description tab / descriptions you'll see that unwanted JavaScript from my screenshot above. May need to toggle to text/HTML mode.

Now, you'll need to see how widespread this is. You'll want to reset all WordPress user PWs who have permissions to publish content, among other things.