For foreign trade independent sites, server issues are rarely the biggest headache; getting stuck in Google rankings and facing attacks are. Slow access, drop in indexing, malware injection, and DDoS — we have handled these for twenty years. Our clients mainly come from foreign trade companies and independent site operators.
Our service covers all stages from virtual hosting to VPS to dedicated servers: environment optimization, performance tuning, security hardening, backup and recovery, as well as cleanup and restoration after malware infection.
Common Pitfalls for Foreign Trade Sites
Google Indexing Drops
Suddenly seeing a large number of “Discovered – currently not indexed” in Search Console, or a cliff-like drop in indexed pages. The causes are usually substandard speed metrics, being flagged as low quality, or server response times being too slow for crawlers to timeout.
Failing Core Web Vitals
LCP (Largest Contentful Paint) exceeding 2.5 seconds leads to high bounce rates. WordPress itself isn’t slow; the slowness usually comes from themes, plugins, database queries, and lack of caching.
Attacked During Access
Foreign trade sites are prime targets for DDoS and malicious scanning. If shared hosting is identified as an attack source, all other sites on that IP will be affected.
Unstable Hosting, Frequent Changes
Heavily oversold shared hosting works fine normally but crashes during sales promotions. Wanting to migrate to VPS but not knowing where to start, while fearing impact on indexing during migration.
Repeatedly Infected After Cleanup
Surface-level cleaning done, but backdoors remain, core files have been replaced, or account passwords are still compromised at the source. Without solving the root cause, it can never be fully cleaned.
Polluted IP, Emails Not Delivered
The hosting IP has entered blacklists due to mass mailing or reports, causing customer form emails to fail. You might lose foreign trade inquiries without even realizing it.
Service Scope
| Direction | Specific Actions |
|---|---|
| Runtime Environment | WordPress environment setup on virtual hosts / VPS / dedicated servers; configuration of BT Panel, LiteSpeed, Nginx; PHP version selection and compatibility handling; MySQL / MariaDB version and parameter tuning. |
| Speed Optimization | Page caching (Redis / Memcached + object cache); OPcache configuration; image compression and lazy loading; CSS/JS merging and async loading; database query and index optimization; CDN integration (e.g., Cloudflare). |
| Plugin & Theme Optimization | Identify and streamline redundant plugins; troubleshoot slow plugins and themes; correct configuration of forms, statistics, and caching plugins, including cache exclusion rules. |
| Security Hardening | Deployment and rule tuning of Wordfence / WAF; blocking brute-force login attempts; file integrity monitoring; administrator account and password policies; hiding backend paths and version numbers. |
| Updates & Maintenance | Secure updates for WordPress core, plugins, and themes; verification in a test environment before going live; rollback in case of update failure. |
| Malware Cleanup | Removal of backdoor programs; removal of malicious JS injections and black links; verification and restoration of core files; database injection cleanup; patching vulnerability entry points; assistance with appeals after Google marking. |
| Backup & Recovery | Automatic backup of files and databases; off-site or object storage backups; actual recovery drills; one-click rollback solutions. |
| Email Delivery | SMTP configuration (for forms like Contact Form 7 / WPForms); avoiding use of host’s built-in mail which often goes to spam; configuring DKIM / SPF. |
| Migration & Moving | Virtual Host → VPS, VPS → VPS, cross-provider migration; database and static file migration; 301 mapping and re-verification in Search Console. |
How to Choose Hosting
This is the most frequently asked question by clients. Here is the direct conclusion:
| Scenario | Recommendation | Reason |
|---|---|---|
| Daily visits under 100, stable traffic, no promotional periods | High-quality Virtual Hosting | Convenient and cost-effective. Provided the host doesn’t share IPs causing trouble and customer support can handle issues. |
| Daily visits 300–5000, with promotions or new product launches | VPS (Starting from 2 Cores 4GB) | Shared hosting resource limits are too low; they crash first during sales events. |
| Daily visits over 5000, or having member systems, shopping carts, inventory | VPS (Starting from 4 Cores 8GB) or Dedicated Server | PHP process count, database connections, and concurrency capabilities need to be controllable. |
| Requiring stable email sending (inquiries are the main lead source) | VPS + Third-party Email Service | Host’s built-in mail() function likely ends up in spam boxes, losing business. |
| Previously attacked, or involving customer data | Dedicated Server / High-defense VPS | Issues with shared IP牵连 and inability to set independent protection strategies are unsolvable on shared hosting. |
What Speed Optimization Involves
- Identify Real Bottlenecks
Use PageSpeed Insights / GTmetrix to get multi-region test data, while also checking server-side TTFB. Whether the slowness is in the network, PHP, or database requires completely different handling — skipping this step means guessing later.
- Server Side
Enable OPcache and tune to reasonable size; configure Redis or Memcached for object caching; adjust PHP-FPM process count and max execution time according to specs; calculate MySQL buffer pool, temp table size, and max connections based on memory.
- WordPress Side
Install and correctly configure caching plugins (excluding logged-in states, admin area, uncacheable pages); streamline plugin count — many foreign trade sites install over 30 plugins, half of which are stats and forms, querying external APIs on every request.
- Frontend Resources
Convert images to WebP / AVIF and compress according to display size; lazy load images outside the viewport; merge, defer, and remove unused CSS/JS code; self-host fonts and subset them (to avoid Google Fonts failing to load in some network environments).
- Database
Clean up autosave and revision junk; create indexes for high-frequency query fields; remove options and transients left by long-unused plugins; archive split large tables as needed.
- CDN
Integrate Cloudflare or similar CDN; configure cache rules, long-term caching for static resources, page-level caching, and bypass rules; ensure dynamic content (forms, login states) that shouldn’t be cached by CDN is correctly excluded.
- Retest & Archive
Test once before and after optimization, provide comparative data, and leave reproducible configuration documentation — so if the host changes or environment is reinstalled, it can be restored according to the docs.
Security and Malware Handling
| Scenario | Action Taken |
|---|---|
| Website found injected with malicious content | Isolate first (add maintenance page or redirect DNS to temporary page) → Full backup of the scene → Remove backdoors and malicious code → Verify core file hashes → Clean database injections → Patch entry vulnerabilities → Change all passwords and keys → Restore online. |
| Marked as unsafe by Google | First clean malicious content, then appeal via Search Console security issues; simultaneously handle hidden keywords in Search Console to restore indexing. |
| Frequent brute-force login attempts | Rate limit failed attempts and temporary bans; disable xmlrpc.php; enforce strong passwords and two-factor authentication; customize backend path. |
| Preparing for long-term protection | Web Application Firewall rule configuration (blocking malicious requests, rate limiting, banning known attack signatures); file integrity monitoring; read-only database backup version control. |
| Repeated infections after cleanup | Must investigate the leak source: vulnerable plugins, weak password leaks, shared FTP/panel passwords, compromised hosting environments. Cleaning without finding the root cause is futile. |
Backup and Recovery
For foreign trade sites, the value of backup equals the value of orders. Inquiries, quotes, and customer data are all in the database; loss is irreversible. Our requirements for backup are threefold:
Automatic and Off-site
Scheduled backup of files and databases, stored in a location different from the host (object storage or another server), to prevent backups from being altered when the host is compromised.
Multiple Versions Retained
Keep at least 7–14 days. After an infection, what you need is to “go back to before the infection”; having only the latest version is meaningless.
Actual Drills Conducted
Perform a real recovery quarterly: download backup, run it in another environment, verify data integrity. Only verified backups count as backups.
Service Process
- Current Status Diagnosis (Free)
Speed testing, security scanning, hosting environment assessment, backup status check, resulting in a report + priority list for actions.
- Plan & Quotation
Distinguish between “must handle immediately” and “can optimize” categories; prioritize the former, include the latter in long-term maintenance.
- Optimization Implementation
Backup before every change, retest after completion, roll back if results are unsatisfactory.
- Protection Hardening
Firewall, accounts, file monitoring, automatic update policies.
- Handover & Training
Documentation explaining each configuration item’s purpose and how to operate it in the future; subsequent transition to Annual/Monthly Maintenance.
FAQ
Do you only do WordPress, or PHP as well?
Our main business is WordPress (accounting for the majority), but we also accept Magento, PrestaShop, OpenCart, and other PHP e-commerce systems, as well as server and integration issues around Shopify. For pure custom development needs, please see AI Program Development Maintenance or Website Maintenance.
Will speed optimization affect website functionality?
Standard operations won’t. Incorrect cache configuration can indeed cause some pages to show old content (e.g., form submissions not redirecting), so we verify every step in a test environment or during low-traffic periods and retain rollback points. We do not accept “try it and see” approaches.
Can you help with migration?
Yes, and this is our recommended order: set up and test in the new environment first, confirm everything is correct, then switch DNS. During the switch, we configure complete 301 mappings and resubmit the sitemap in Search Console. Indexing generally won’t suffer significant loss during migration, provided mappings and content paths remain unchanged.
The website has already been devalued, can it be saved?
In most cases, yes, but it takes time and depends on the severity of the devaluation. We first confirm the cause (what kind of security issue, whether there are low-quality content signals, how poor the speed metrics are), then provide actionable recovery steps and track results. If it’s just speed and security issues, changes are usually visible within weeks to months.
How do you charge?
Diagnosis is free. Speed optimization, security hardening, and migration are priced per project, with quotes specifying exactly what will be done, acceptance criteria, and warranty period. Long-term maintenance is best signed as Annual/Monthly Maintenance, handing over repetitive updates and monitoring to professionals.