---
task: Старый IQON: hardening mobile SEO contacts verify
slug: 20260520-legacy-iqon-selected-steps
effort: extended
phase: package
progress: 16/16
mode: interactive
started: 2026-05-20T00:00:00+03:00
updated: 2026-05-20T00:00:00+03:00
---

# Старый IQON: hardening mobile SEO contacts verify

Purpose: зафиксировать и выполнить выбранные шаги 2, 3, 4, 6, 8 для старого дизайна iqon.com без замены дизайна.

## Context

Пользователь выбрал пункты 2, 3, 4, 6, 8: hardening старого WordPress, mobile fix, SEO cleanup, contacts, verification. Старый дизайн должен остаться на apex `iqon.com`; новый дизайн должен остаться на `www.iqon.com`.

## Criteria

- [x] ISC-1: Apex WordPress host split remains preserved.
- [x] ISC-2: WWW static redesign route remains preserved.
- [x] ISC-3: XML-RPC endpoint is blocked externally.
- [x] ISC-4: REST public users endpoint is blocked externally.
- [x] ISC-5: Readme and license disclosure endpoints are blocked.
- [x] ISC-6: Security headers are emitted on apex pages.
- [x] ISC-7: Viewport meta exists on legacy pages.
- [x] ISC-8: Skip link exists for keyboard navigation.
- [x] ISC-9: Legacy layout adapts below tablet widths.
- [x] ISC-10: Forms and embeds fit mobile viewport.
- [x] ISC-11: Home title and description are cleaned.
- [x] ISC-12: Yoast site name is normalized to IQON.
- [x] ISC-13: HTTP asset URLs are upgraded in output.
- [x] ISC-14: Footer contact data uses current channels.
- [x] ISC-15: Contact page removes obsolete office blocks.
- [x] ISC-16: Live verification records apex and www status.

## Decisions

- Preserve old visual identity and only patch behavior/content.
- Avoid deleting remote WordPress files.
- Upload only touched files after local edits.

## Verification

- Run phase verification script against `https://iqon.com`.
- Check contact page text and obsolete channels.
- Check `https://www.iqon.com/` still serves new design.