SEO results hacked?
-
Hi there,
Since last Saturday I noticed a big traffic drop on at least the following two pages:
http://www.smartphonehoesjes.nl/apple/ and http://www.smartphonehoesjes.nl/apple/iphone-6/.I did some research and I noticed something realy strange. Unknown sites seems to hijacked my organic results by using the exact same page title and META description but leading traffic to another their domain. Look at those pictures: http://imgur.com/v6kglLU and http://imgur.com/Whx4l8K.
Edit: a competitor seems to have a same problem: http://imgur.com/Zzhter4. I just fetched both URL's in GWT as Google. In Bing there is a little sign of this problem too, so this is not a Google only thing.
Can anybody please help me here? This has cost me some real money since Saturday.
Tnx in advance.
Marcel
-
Hi Dirk,
After contacting Google by phone and mail, filing a few more spam reports and refreshing textual content, we got our results back and traffic/revenue has grown since. We are very happy, and no other pages got attacked (yet).
Thanks for your help.
Marcel
-
Marcel,
When you contact the site owners - a good guideline on 'how to clean' can be found here: https://codex.wordpress.org/FAQ_My_site_was_hacked (specifically for Wordpress) - more in general: http://www.google.com/webmasters/hacked/ - it could be that the hackers gained access by a security issue with the slider (http://wptavern.com/critical-security-vulnerability-found-in-wordpress-slider-revolution-plugin-immediate-update-advised) so they should certainly check that Wordpress & it's plugins are up-to-date.
Good luck!
Dirk
-
Hi Dirk,
Let's hope the hacker only copied a few pages and not the entire site. What could a site like soft-solutions possibly do to clean their site? I think it's worth a chance to ask planchemag and wearemash to do the same. My new URL shows up if you search for 'iphone 6 / 6s hoesje', that's something positive. I filed a request for deletion of the old and hacked URL of the iPhone 6 page, hopefully Google throws it out and picks up the new and clean one like it does with the other search query.
I can do nothing but wait now I guess. I will keep you updated here.
Marcel
-
Hi Marcel,
I have the impression that soft-solutions.nl already discovered that they have been hacked & have cleaned their site in the mean time.
It's possible that the hacker only copied 1/2 pages - it's however more likely that they copied the full site but that the other pages haven't been indexed yet. Idem for copyscape - if the hack only occurred recently, these tools (and Google) haven't been able to pickup all pages yet.
When I search for 'iphone 6 hoesje' I get the planchemag.com site. As all these pages are duplicates, it's Google who's deciding which page it's going to show. Google decided that in some cases the hacked version is the preferred one, for other queries people will still get to your site. It probably depends on the anchors the hackers used to the hacked site. The volume of iphone 6 is probably higher than iphone 5 queries, so they will probably have used anchors containing 'iphone 6' to point to the site.
Dirk
-
Hi Dirk,
That second result is our homepage, I see that this one got indexed at the exact same time our own homepage got indexed. However, Google shows our (the good one!) homepage in the search results.
That's quite ironical indeed, the webdesign company.
The other result redirects to planchemag.com, which only gives one result on a site:www.planchemag.com/. What about this one?
Is it possible this hack only limits to those two pages?I used the tool copyscape.com and it seem to be only the following pages that are affected:
What about this one: search for site:soft-solutions.nl and you'll find our iPhone 5/5s pagina. Search for 'iPhone 5 hoesje' and Google shows our correct page as a result. How is this possible?
Marcel
-
Hi Marcel,
If I do a site:www.wearemash.com there seem to be only 2 pages from your site indexed at the moment - possible that the other ones haven't been picked-up by Google yet. Quite ironical that the domain wearemash.com belongs to a web design company.
rgds,
Dirk
-
Hi Dirk,
I just set the redirect, just to be sure. This is a realy bad thing, people can abuse Google to negatively impact a whole company and lots of individuals. That should not be possible, hope Google will fix this soon!
You assume the whole site will go down in Google and not only those two pages? This will be terrible.
Marcel
-
Hi Marcel,
Don't think that it will change a lot. If the hack is done in the same way as the other cases (which seems to be the case), they copied your entire site into the site which has been hacked. They present this version to Google (cloaking - as you can see in the cached version) - but "normal" visitors are redirected to a different e-commerce site. To make sure the hacked site is positioned well, they point hundreds of links from other hacked sites to the cloned version of your site. So whatever you change on your site, will not impact the cloned version, which will keep it's position, until Google takes action.
It's a quite a simple trick, and to be very honest, I am surprised that Google is not capable to detect it.
rgds,
Dirk
-
Hi Dirk,
This should be a Google task to prevent her customers/users from those kind of hackers right?
Do you think that redirecting my iPhone 6 page to a new URL would help? I can imagine the hackers hijacked an URL, when I pick a new one and 301 redirect the old one to the new, will my own result show up again?
I already spoke with Google this morning and they are going to look after it.
Marcel
-
Hi Marcel,
It seems to be a plague recently- there where similar cases on Moz the last two weeks: http://moz.com/community/q/chinese-site-ranking-for-our-brand-name-possible-hack (similar situation as you) - a site being hacked http://moz.com/community/q/getting-different-search-queries-in-google-webmaster. It seems the hackers are exploiting a vulnerability in the slider used on these Wordpress site.
Apart from filing spam reports there is not much more you can do. You could inform the site owners that their site has been hacked & ask them to clean it, but I fear that these hackers are capable to switch sites quite fast.
Good luck,
Dirk
-
Hi Matt-POP,
Thanks for this opening, didn't look at it this way. All our domains got replaced by wearemesh in the cached page. The VWO code looks like ours, so do you really think they were testing? All of the source code is ours, also the canonical, only the domain got replaced by theirs..
We are using VWO but we are doing it by ourself. I'm not sure VWO is the problem.
This problem occured last Saturday. What we did on Friday is make our website mobile friendly for the scheduled 21st of April mobile Google update. Is this coincidence? The two companies who helped us with this change, made some changes to the canonical tags among other things.
A strange thing here is that a competitor has a same problem, wouldn't that seem like a conscious action (hack)?
@Patrick: We don't know them, for sure. If you go to the unkknown website, you see that they don't use our meta data, so that's the strange part.
Update: the domain www.wearemesh.com now redirects to www.ovsee.com, the same website you got redirected to when you click on the hacked result of the competitor I wrote about. The visual URL there is Finan.nl. This Ovsee.com looks like the perpetrator. But I still can't get a grip on it.. the other hacked result leads to www.planchemag.com which redirects to http://planchemag.fr.
What can I do to get my results back? I already filed a spam report in GWT.
Thanks again,
Marcel -
Their Google cache results were somehow corrupted temporarily:
http://webcache.googleusercontent.com/search?q=cache:http%3A%2F%2Fwww.wearemash.com%2F
There's a VWO code in there:
So it looks like they were split testing. The canonical is set to their domain which is why they took over results temporarily on these search terms.
It looks like the split test somehow grabbed your page info & theirs and split tested it giving theirs a canonical on your content. That would do it.
Are you using VWO? Are you using these guys to do your conversion optimisation? You may have the same conversion company who made a mistake or you may have the same VWO designer. I'm not sure how it got there but looking at the code, VWO does look to probably factor into the problem.
-
Hi Marcel
Quick question - I know you said "unknown", but are you sure that this site has nothing to do with your site? Like, did they develop or design your site at all?
Here is a help section from Google on these sorts of issues - it covers everything from cloaking to content scraping, and doorway pages to other spam types.
I would try contacting the webmaster of this site and asking them to remove your titles/meta descriptions. If they do not respond, or are not willing to cooperate, reference the resource above as Google has steps to take to ensure action is taken against sites that do this sort of thing.
Hope this helps! Let me know if you have any questions or need more help, good luck!
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
What is the proper URL length? in seo
i learned that having 50 to 60 words in a url is ok and having less words is preferable by google. but i would like to know that as i am gonna include keywords in the urls and i am afraid it will increase the length. is it gonna slighlty gonna hurt me? my competitors have 8 characters domain url and keywords length of 13 and my site has 15 character domain url and keywords length of 13 which one will be prefered by google.
White Hat / Black Hat SEO | | calvinkj0 -
Negative SEO Click Bot Lowering My CTR?
I am questioning whether one of our competitors is using a click bot to do negative SEO on our CTR for our industry's main term. Is there any way to detect this activity? Background: We've previously been hit by DoS attacks from this competitor, so I'm sure their ethics/morals wouldn't prevent them from doing negative SEO. We sell an insurance product that is only offered through broker networks (insurance agents) not directly by the insurance carriers themselves. However, our suspect competitor (another agency) and insurance carriers are the only ones who rank on the 1st page for our biggest term. I don't think the carrier sites would do very well since they don't even sell the product directly (they have pages w/ info only) Our site and one other agency site pops onto the bottom of page one periodically, only to be bumped back to page 2. I fear they are using a click bot that continuously bounces us out of page 1...then we do well relatively to the other pages on page 2 and naturally earn our way back to page 1, only to be pushed back to page 2 by the negative click seo...is my theory. Is there anything I can do to research whether my theory is right or if I'm just being paranoid?
White Hat / Black Hat SEO | | TheDude0 -
Would having a + plus sign between keywords in meta title have an effect on SEO?
I have seen one of my clients' competitors do this in their meta title and it got me a little intrigued... I understand that google uses the + sign as an operator in adwords, and to a certain extent, as a search tool, but would it help or make any difference to the SEO in the meta title/data (eg. 'SEO+Marketing+Services')? Thanks
White Hat / Black Hat SEO | | LexisClick10 -
Search query for SEO Brisbane
Would love to get some opinions on the latest Penguin 2.0 update and how on earth the #1 rank is #1 ranked, very, very peculiar... http://www.google.com/search?gs_rn=14&gs_ri=psy-ab&pq=sila&cp=8&gs_id=10&xhr=t&q=seo+brisbane&pf=p&client=safari&rls=en&sclient=psy-ab&oq=seo+bris&gs_l=&pbx=1&bav=on.2,or.r_qf.&bvm=bv.47008514,d.aGc&biw=1300&bih=569 Any and all theories welcomed and appreciated. Thanks, Mike
White Hat / Black Hat SEO | | MichaelYork0 -
Seo back linking proposal review
Hi guys, below is a proposal i received from someone on freelancer.com for some seo building. Is this really all it takes? Obviously done overtime but basically is this it aside from the usual basics onsite keywords, urls, artciles, content etc. This is a the proposal for $250 (some are cheaper but almost the same details as below). This is one of the top seo people on freelancers.com and they all have good reviews. Is this basically it? Shell out $100 bucks or more a month to someone who will just post stuff all over the internet. It just seems all very simple, what is $100 bucks a month to stay at #1. Is there any real questions i should ask to make sure i am not just throwing my money away? I would like to recommend the following services for attaining better search results for the website. 1)Press Release Submissions
White Hat / Black Hat SEO | | topclass
2)Social bookmarking submissions
3)Drip Feed Article Links - 100 Article submissions everyday for 25 days
4)Article directory submissions
5)Link directory submissions
6)Blog Post Submissions(All Blogs have PR1 to PR6)
7)Wiki Page Submissions(.EDU and .GOV Sites Included) PR of the directories, social bookmarking websites, Blogs, wiki pages and Article directories are from PR0 to PR8.
Most of them are in the range of PR1 to PR4. If you are interested in the above services then these are the details about those services. 1)Press release Submissions - We will write 3 press release and submit them to 25 press release websites.
Submitting press release gets the news to Google news, Yahoo news etc..
Please note we even submit to Paid press release websites like PRBuzz, SBWire, pressdoc etc.. 2)Social Bookmarking submissions - I will also submit your website to 150 social bookmarking websites.
Here are the example of social bookmarking websites.
www.digg.com
www.furl.net
After we finish submitting to social bookmarking websites we will then create rss feeds with approved link URL's and ping them so that links get indexed. 3)Drip Feed Article submissions - We will be writing one article.
Everyday we will submitting the article to 100 different websites.
We will be submitting for 25 days.
100 submissions x 25 days = 2500 submissions.
In each article submissions we can use 2 links to the website. 4)Article directory submissions - We will write 5 articles.
Each article will be around 500 words.
Then we will submit them to 300 different article directories. That means 5 articles x 300 article directories = 1500 article submissions.
In each article we can use 2 links to the website.
1500 x 2 Links.
I have experience in submitting articles to article directories.
Till now i have submitted more than 1000 articles to article directories.
I will also create separate accounts with article directories wherever possible. 5)Link directory submissions - I have a list of 1300 directories.
I will submit your website to these directories.
I have experience in submitting to link directories.
Till now i have submitted more than 2500 websites.
All the submission work is done manually.
All these directories provide one way links. 6)Blog Post Submissions(700 PR1 to PR6 Blogs) - We will write 1 article.
we spin and post to 700 PR1 to PR5 blogs.
We can spin the article, title of article and links
You will be given a confirmation when complete, and a code to search backlinks in the search engines.
They are hosted on 650 different C Class IPs! 7)Wiki Page Submissions - Get 200+ wiki site contextual backlinks (3 per posted article) from a range of PR 0 to 8 wiki sites including over 30 US .EDU and US .GOV sites.
I will also ping Them.0 -
SEO best practice: Use tags for SEO purpose? To add or not to add to Sitemap?
Hi Moz community, New to the Moz community and hopefully first post/comment of many to come. I am somewhat new to the industry and have a question that I would like to ask and get your opinions on. It is most likely something that is a very simple answer, but here goes: I have a website that is for a local moving company (so small amounts of traffic and very few pages) that was built on Wordpress... I was told when I first started that I should create tags for some of the cities serviced in the area. I did so and tagged the first blog post to each tag. Turned out to be about 12-15 tags, which in turn created 12-15 additional pages. These tags are listed in the footer area of each page. There are less than 20 pages in the website excluding the tags. Now, I know that each of these pages are showing as duplicate content. To me, this just does not seem like best practices to me. For someone quite new to the industry, what would you suggest I do in order to best deal with this situation. Should I even keep the tags? Should I keep and not index? Should I add/remove from site map? Thanks in advance for any help and I look forward to being a long time member of SEOMoz.
White Hat / Black Hat SEO | | BWrightTLM0 -
What do you think of Theme pyramids for SEO?
Hi, Just been reading up on theme pyramids, I have seen these before but found a good article on the subject going into quite some detail. http://www.canonicalseo.com/theme-pyramids/ Using the word 'Pyramid' does scream black hat to me but looking at the structure, this must be the best way for internal linking. Even the keyword structure looks good, Example: homepage - shoes category - red shoes sub category - size 7 red shoes Building anchor text links for shoes, red shoes or size 7 red shoes will benefit all 3 terms. Negative/Positive comments please.
White Hat / Black Hat SEO | | activitysuper0 -
Is this SEO correct?
Please view website http://www.staddonsbeds.co.uk. In the footer is the keywords the client is aiming for. These pages have been created separately to the sitemap. Is this tactic and pages white hat seo or is this considered black hat seo such as gateway pages? Could you please confirm Thanks Paul
White Hat / Black Hat SEO | | paulbaguley0