Received an alert from Google stating they have identified someone has been added as an owner of a s...

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Received an alert from Google stating they have identified someone has been added as an owner of a subdomain in Google Search Console.

Post Flair (click to view more posts with a particular flair)

Question

Post Body

Two accounts were added to a subdomain of my Shopify store and verified themselves using an HTML file and an HTML tag. Afterwards, the subdomains were forwarded using 301 forwarding directly from the DNS. How were they able to configure forwarding without access to the DNS?

I was able to remove the subdomain owners from Google Search Console and forwarding from GoDaddy, but I am unable to remove the verification granting them persistence as I do not have access to the server and am unsure of where the tag was placed.

How would I remove the HTML file and tags from my Shopify store? What is the end goal here? How would I prevent someone from doing this in the future?

Author

Account Strength

70%

Account Age

2 years

Verified Email

Yes

Verified Flair

Total Karma

4,527

Link Karma

1,725

Comment Karma

2,747

Profile updated: 6 days ago

Posts updated: 1 month ago

AppearanceAgile2575

Subreddit

r/sysadmin

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 6 months ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/sysadmin/co...