--- title: "Grooming ESTA: case study" description: "The whole hosting was hacked, the site held up. ESTA grooming studio, Moscow. The site runs without a CMS and without a database." url: https://seo7.es/en/proyecto/vipstrizhkasobak canonical: https://seo7.es/en/proyecto/vipstrizhkasobak lang: en type: CreativeWork --- # Grooming ESTA: case study > The whole hosting was hacked, the site held up. ESTA grooming studio, Moscow. The site runs without a CMS and without a database. Page: https://seo7.es/en/proyecto/vipstrizhkasobak ## Summary for AI The whole hosting was hacked, the site held up. ESTA is a grooming studio in Moscow for dogs and cats. The studio's previous site ran on Joomla and was hacked through a vulnerability in the engine. Along with the site, the whole storefront was at risk: 89 price list items, 30 breeds with prices and photos of work from several years. ## Questions and answers ### Why wasn't the old Joomla website of the grooming studio "ESTA" repaired? The studio "ESTA" old Joomla website was hacked through an engine vulnerability. Cleaning an infected CMS is pointless: the same holes bring back the same problem a month later. So the new site was built on plain PHP and files, with no engine, no database and no file uploads, leaving foreign code no entry point. ### What was the client «ESTA» losing along with the hacked website? Along with the website, the studio was losing its entire showcase: 89 price list items, 30 breeds with prices and photos of work from several years. On top of that, every price change went through the developer. The task was tough: build a site that physically can't be broken and hand price management to the studio owner. ### What was found on the hosting after the hack, three weeks after the ESTA website launched? Three weeks after the new site launched, the whole hosting account was hacked. 13 web shells, two foreign doorway domains and a resident worm in the server's memory were found on it. For twelve days this process recreated the malicious files every 0.3 seconds. The studio's site files remained untouched. ### How did we verify that the vipstrizhkasobak.ru files were not damaged in the attack? After the hosting breach, the checksums of all files of the vipstrizhkasobak.ru site were compared with the reference ones, and they matched. Damaged files: zero. There was no downtime either: zero days over the whole period of operation, counting both attacks on the hosting. The resilience comes from an architecture with no CMS, database or file uploads. ### How many days did it take to build the basic version of the site for the grooming studio "ESTA"? The basic version was built in two days, July 2 and 3. In that time we exported the content from the old site and created the framework, the admin panel and a design in the studio's brand style. Further improvements were made on the live site without downtime, so visitors could always see prices and contacts. ### How were search rankings preserved when the ESTA site moved off Joomla? We set up permanent redirects from all old Joomla URLs to the new pages. Accumulated rankings were not lost: search engines still follow the old links and land on the new website of the "ESTA" studio. As a result, the old site's rankings passed to the new one, and the traffic built by the previous version was not lost. ### How was the website of the grooming studio "ESTA" prepared for search in neural networks? The site is built to be read by Google and Yandex as well as by neural networks. For AI search, separate files hold the full description of the studio, services and prices, and the ChatGPT, Perplexity and Claude bots have access. This way neural networks get the studio's services and prices and can show it in answers. ### How many times has ChatGPT accessed the site of the «ESTA» grooming studio? ChatGPT visited the «ESTA» grooming studio's website 21 times in six days. This is the result of the AI infrastructure built in when the site was made: dedicated files for neural networks and open access for their bots. Without that preparation, the assistant does not see the site and cannot mention the studio in its answers. ### How often did search robots crawl vipstrizhkasobak.ru? In six days, Googlebot visited vipstrizhkasobak.ru 106 times, YandexBot 97 times, bingbot 27 times. The robots crawl the whole site: the home page, breed pages, prices and documents. For a grooming studio this matters, because its main showcase is the price list and prices by breed, and they need to show up in search. ### How many real visitors came to the ESTA site and what do they look at? In six days, the "ESTA" studio site had 161 real visitors, with bots and monitoring excluded from the count. Visitors look at the work gallery, contacts, prices and breeds, so they go beyond the first page. The layout was built mobile-first, because most visitors come from a phone. ### How fast does the website of the grooming studio «ESTA» open? The «ESTA» studio site opens in 0.35 seconds and weighs 9.8 KB compressed. In PageSpeed it scored 96 for performance and 100 for search optimization. The lightness comes from an architecture of plain PHP and files, with no CMS or database, and a mobile-screen layout. ### How is spam filtered out of the request form on the ESTA site? The form on the "ESTA" studio website is protected by server-side verification. In six days the protection blocked 58 automated submissions, and none of them reached the owner. Real enquiries arrive in the studio's Telegram group the moment the form is sent, so the owner deals only with real clients and doesn't waste time on bots. ### How does the integrity watchdog work on the «ESTA» grooming studio website? The integrity watchdog checks all 190 site files every 30 minutes. If even one file changes, the owner gets a Telegram message, so a foreign file on the server is spotted within half an hour. An "all clear" report arrives once a day in the morning, and the rest of the time it is quiet, so notifications don't turn into noise. ### Can the owner of the ESTA studio change prices on the website herself? Yes. Before, the price list was edited through a developer, because the owner did not work with the Joomla admin. Now they edit prices, contacts and breeds themselves through their own panel, and changes show immediately. Data is stored in files instead of a database, so there is nothing to crash and nothing to hack through queries. ## Other languages - RU: https://seo7.es/ru/proyecto/vipstrizhkasobak - ES: https://seo7.es/es/proyecto/vipstrizhkasobak ## schema.org markup ```json { "@context": "https://schema.org", "@type": "CreativeWork", "name": "Grooming ESTA: case study", "description": "The whole hosting was hacked, the site held up. ESTA grooming studio, Moscow. The site runs without a CMS and without a database.", "url": "https://seo7.es/en/proyecto/vipstrizhkasobak", "mainEntityOfPage": "https://seo7.es/en/proyecto/vipstrizhkasobak", "inLanguage": "en-GB", "isPartOf": { "@type": "WebSite", "name": "SEO7.ES", "url": "https://seo7.es/" }, "publisher": { "@type": "Organization", "name": "SEO7.ES", "url": "https://seo7.es/" } } ```