Recovering from Black Hat/Negative SEO with a twist
-
Hey everyone,
This is a first for me, I'm wondering if anyone has experienced a similar situation and if so, what the best course of action was for you.
Scenario
- In the process of designing a new site for a client, we discovered that his previous site, although having decent page rank and traffic had been hacked. The site was built on Wordpress so it's likely there was a vulnerability somewhere that allowed someone to create loads of dynamic pages; www.domain.com/?id=102, ?id=103, ?id=104 and so on. These dynamic pages ended up being malware with a trojan horse our servers recognized and subsequently blocked access to.
We have since helped them remedy the vulnerability and remove the malware that was creating these crappy dynamic pages.
- Another automated program appears to have been recently blasting spam links (mostly comment spam and directory links) to these dynamically created pages at an incredibly rapid rate, and is still actively doing so. Right now we're looking at a small business website with a touch over 500k low-quality spammy links pointing to malware pages from the previously compromised site.
Important: As of right now, there's been no manual penalty on the site, nor has a "This Site May Have Been Compromised" marker in the organic search results for the site. We were able to discover this before things got too bad for them.
Next Steps?
The concern is that when the Penguin refresh occurs, Google is going to notice all these garbage links pointing to those malware pages and then potentially slap a penalty on the site. The main questions I have are:
- Should we report this proactively to the web spam team using the guidelines here? (https://www.google.com/webmasters/tools/spamreport?hl=en&pli=1)
- Should we request a malware review as recommended within the same guidelines, keeping in mind the site hasn't been given a 'hacked' snippet in the search results? (https://support.google.com/webmasters/topic/4598410?hl=en&ref_topic=4596795)
- Is submitting a massive disavow links file right now, including the 490k-something domains, the only way we can escape the wrath of Google when these links are discovered? Is it too hopeful to imagine their algorithm will detect the negative-SEO nature of these links and not give them any credit?
Would love some input or examples from anyone who can help, thanks in advance!
-
I never mentioned anything about Pigeon?
-
Um....IQ? Did you miss the Pigeon update of a couple of months ago?
Tons of talk on same, my own fav from Mike here -
http://blumenthals.com/blog/2014/10/05/post-pigeon-geo-assessment-how-did-traffic-change-by-city/
-
Should we report this proactively to the web spam team using the guidelines here? No
**Should we request a malware review as recommended within the same guidelines, keeping in mind the site hasn't been given a 'hacked' snippet in the search results? **
No
**Is submitting a massive disavow links file right now, including the 490k-something domains, the only way we can escape the wrath of Google when these links are discovered? Is it too hopeful to imagine their algorithm will detect the negative-SEO nature of these links and not give them any credit? **
Yes
This sounds to me like you need to be thinking 'damage limitation', and by submitting a disavow now, you will be doing just this. Don't worry about the fact there are so many domains there, that is what the tool is all about. However, Penguin hasn't had a refresh in some time (12 months), so one might consider this and think that while you have time on your side to fix it, a refresh could be round the corner - so hop on it
-Andy
-
Sounds like fun!
I did write a lovely answer which unfortunately got lost so I'll summaries a bit below-
1. I wouldn't recommend telling Google as you might not have a penalty now but you might be temping Googles wrath
2. As you've not been marked as malware and you've removed it you should be fine but you can always try if you want to sleep better
3.Disavow proactively is a great idea Google like this approach too, It also means rather than hoping Google might ignore the links its will defiantly ignore them with the disavow list.. Further to this I've got two more options for you. you can block wildcard/dynamic pages in your Robots which will help stop Google even getting to them to find out you've got some bad links assuming you don't need the pages for your site. If you check your referring domains weekly and update the disavow list as well if you're still "under attack".
Just a quick heads up after disavowing the link you may drop down in rankings as you're removing the links however there is also a chance you can go up if you're under a algo penalty.
You can find some good tips here too - http://www.searchenginejournal.com/combat-recover-negative-seo-attack-survival-guide/114507/
Hope some of that helps and I wish I could of posted my reply but I don't have the time to rewrite it I'm afraid. Good luck to you!
-
I have a lot going on right now, but if you PM the domain, I can take a look in a week or so.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Does same description in the directories of all affect SEO or not? - But unique on the website
Hi, I would like to do some directories. When I checked with a person for his recent work, he has given the same description in 50 directories he has done for a client. Does this affect SEO or not?
White Hat / Black Hat SEO | | AnuManish0 -
Reputable SEO companies
I am looking for a reputable SEO company to assist in link building. I have done many searches and find that there are many sites that have a "top 10." However I am finding they are listed there due to paying large amounts of money. Any recommendations on companies that can show real results and are not charging extreme amounts of money while using minimum wage interns to do all the work with crappy results. I had a few people suggest "internet marketing ninjas" if anyone has used, chime in. Thanks
White Hat / Black Hat SEO | | nchachula0 -
Is this negative SEO? Should I disavow these links?
We have been doing our own internal link building for the last year and getting nice backlinks. As of the last few days, ahrefs is showing a lot of new links that seem very spammy. We have not hired anyone to do link building for us, and these are all being created on these sites under the same user name. There is a good amount of them popping up, and I fear we will be subjected to a google pentalty for unnatural links if its not addressed. My first question is, am I correct thinking this is negative seo, and not some random sites that picked up our content and is going across their affiliate websites? If so, then should I preemptively disavow all these links? Are there any good ways to stop this? How can I track who is placing these garbage links? Here are some examples of these bad links. I know I can find the webmaster via a whois but I think that really wont get me anywhere, but I could be wrong. Here are some examples of the links that started popping up yesterday and today. http://pligg-cms.info/story.php?title=student-loan-debt-relief
White Hat / Black Hat SEO | | DemiGR
http://www.sharklinks.info/story.php?title=-student-loan-consolidation-options
http://factson37.com/story.php?title=student-loan-debt-forgiveness-website
http://social-marker.info/story.php?title=-student-loan-debt-forgiveness
http://makingbookmarks.info/story.php?title=-student-loan-consolidation-options
http://bookmarkingforseo.com/story.php?title=top-student-loan-consolidation-options
http://jadelinks.info/story.php?title=-student-loan-consolidation-options There are quite a bit more and they don't seem to be stopping. All of them look pretty much identical to this. Thoughts?1 -
Domain name for seo
Lets say that my competitor has the domain name and website called remotecontrolcar.com , .net and .org . And he has great links and good white hat google juice. What if I get MyRemoteControlCar.com , .net, and .org domain name.. Would my domain name help me in rank against him as long as I have similar google juice? Thanks.
White Hat / Black Hat SEO | | zsyed0 -
LOCAL SEO / Ranking for the difficult 'service areas' outside of the primary location?
It's generally not too hard to rank in Google Places and organically for your primary location. However if you are a service area business looking to rank for neighboring cities or service areas, Google makes this much tougher. Andrew Shotland mentions the obvious and not so obvious options: Service Area pages ranking organically, getting a real/virtual address, boost geo signals, and using zip codes instead of service area circle. But I am wondering if anyone had success with other methods? Maybe you have used geo-tagging in a creative way? This is a hurdle that many local business are struggling with and any experience or thoughts will be much appreciated
White Hat / Black Hat SEO | | vmialik1 -
UK SEO Agency Recommendations
Hi, I am currently looking for a new SEO agency to manage strategies on 3 websites, budget of about £15k pm in total. Any recommendations would be really appreciated as trying to navigate through all the usual sales waffle and hollow promises of most SEO agencies is becoming rather difficult. Thanks
White Hat / Black Hat SEO | | cewe0 -
Turn grey myself or rat on black hat competitors?
When being trashed by a less than white competitor what do you find most effective: lie down with your feet in the air considering a career in gardening? turn grey yourself? rat on them to Google? Phil
White Hat / Black Hat SEO | | Phil_1