SEO results hacked?
-
Hi there,
Since last Saturday I noticed a big traffic drop on at least the following two pages:
http://www.smartphonehoesjes.nl/apple/ and http://www.smartphonehoesjes.nl/apple/iphone-6/.I did some research and I noticed something realy strange. Unknown sites seems to hijacked my organic results by using the exact same page title and META description but leading traffic to another their domain. Look at those pictures: http://imgur.com/v6kglLU and http://imgur.com/Whx4l8K.
Edit: a competitor seems to have a same problem: http://imgur.com/Zzhter4. I just fetched both URL's in GWT as Google. In Bing there is a little sign of this problem too, so this is not a Google only thing.
Can anybody please help me here? This has cost me some real money since Saturday.
Tnx in advance.
Marcel
-
Hi Dirk,
After contacting Google by phone and mail, filing a few more spam reports and refreshing textual content, we got our results back and traffic/revenue has grown since. We are very happy, and no other pages got attacked (yet).
Thanks for your help.
Marcel
-
Marcel,
When you contact the site owners - a good guideline on 'how to clean' can be found here: https://codex.wordpress.org/FAQ_My_site_was_hacked (specifically for Wordpress) - more in general: http://www.google.com/webmasters/hacked/ - it could be that the hackers gained access by a security issue with the slider (http://wptavern.com/critical-security-vulnerability-found-in-wordpress-slider-revolution-plugin-immediate-update-advised) so they should certainly check that Wordpress & it's plugins are up-to-date.
Good luck!
Dirk
-
Hi Dirk,
Let's hope the hacker only copied a few pages and not the entire site. What could a site like soft-solutions possibly do to clean their site? I think it's worth a chance to ask planchemag and wearemash to do the same. My new URL shows up if you search for 'iphone 6 / 6s hoesje', that's something positive. I filed a request for deletion of the old and hacked URL of the iPhone 6 page, hopefully Google throws it out and picks up the new and clean one like it does with the other search query.
I can do nothing but wait now I guess. I will keep you updated here.
Marcel
-
Hi Marcel,
I have the impression that soft-solutions.nl already discovered that they have been hacked & have cleaned their site in the mean time.
It's possible that the hacker only copied 1/2 pages - it's however more likely that they copied the full site but that the other pages haven't been indexed yet. Idem for copyscape - if the hack only occurred recently, these tools (and Google) haven't been able to pickup all pages yet.
When I search for 'iphone 6 hoesje' I get the planchemag.com site. As all these pages are duplicates, it's Google who's deciding which page it's going to show. Google decided that in some cases the hacked version is the preferred one, for other queries people will still get to your site. It probably depends on the anchors the hackers used to the hacked site. The volume of iphone 6 is probably higher than iphone 5 queries, so they will probably have used anchors containing 'iphone 6' to point to the site.
Dirk
-
Hi Dirk,
That second result is our homepage, I see that this one got indexed at the exact same time our own homepage got indexed. However, Google shows our (the good one!) homepage in the search results.
That's quite ironical indeed, the webdesign company.
The other result redirects to planchemag.com, which only gives one result on a site:www.planchemag.com/. What about this one?
Is it possible this hack only limits to those two pages?I used the tool copyscape.com and it seem to be only the following pages that are affected:
What about this one: search for site:soft-solutions.nl and you'll find our iPhone 5/5s pagina. Search for 'iPhone 5 hoesje' and Google shows our correct page as a result. How is this possible?
Marcel
-
Hi Marcel,
If I do a site:www.wearemash.com there seem to be only 2 pages from your site indexed at the moment - possible that the other ones haven't been picked-up by Google yet. Quite ironical that the domain wearemash.com belongs to a web design company.
rgds,
Dirk
-
Hi Dirk,
I just set the redirect, just to be sure. This is a realy bad thing, people can abuse Google to negatively impact a whole company and lots of individuals. That should not be possible, hope Google will fix this soon!
You assume the whole site will go down in Google and not only those two pages? This will be terrible.
Marcel
-
Hi Marcel,
Don't think that it will change a lot. If the hack is done in the same way as the other cases (which seems to be the case), they copied your entire site into the site which has been hacked. They present this version to Google (cloaking - as you can see in the cached version) - but "normal" visitors are redirected to a different e-commerce site. To make sure the hacked site is positioned well, they point hundreds of links from other hacked sites to the cloned version of your site. So whatever you change on your site, will not impact the cloned version, which will keep it's position, until Google takes action.
It's a quite a simple trick, and to be very honest, I am surprised that Google is not capable to detect it.
rgds,
Dirk
-
Hi Dirk,
This should be a Google task to prevent her customers/users from those kind of hackers right?
Do you think that redirecting my iPhone 6 page to a new URL would help? I can imagine the hackers hijacked an URL, when I pick a new one and 301 redirect the old one to the new, will my own result show up again?
I already spoke with Google this morning and they are going to look after it.
Marcel
-
Hi Marcel,
It seems to be a plague recently- there where similar cases on Moz the last two weeks: http://moz.com/community/q/chinese-site-ranking-for-our-brand-name-possible-hack (similar situation as you) - a site being hacked http://moz.com/community/q/getting-different-search-queries-in-google-webmaster. It seems the hackers are exploiting a vulnerability in the slider used on these Wordpress site.
Apart from filing spam reports there is not much more you can do. You could inform the site owners that their site has been hacked & ask them to clean it, but I fear that these hackers are capable to switch sites quite fast.
Good luck,
Dirk
-
Hi Matt-POP,
Thanks for this opening, didn't look at it this way. All our domains got replaced by wearemesh in the cached page. The VWO code looks like ours, so do you really think they were testing? All of the source code is ours, also the canonical, only the domain got replaced by theirs..
We are using VWO but we are doing it by ourself. I'm not sure VWO is the problem.
This problem occured last Saturday. What we did on Friday is make our website mobile friendly for the scheduled 21st of April mobile Google update. Is this coincidence? The two companies who helped us with this change, made some changes to the canonical tags among other things.
A strange thing here is that a competitor has a same problem, wouldn't that seem like a conscious action (hack)?
@Patrick: We don't know them, for sure. If you go to the unkknown website, you see that they don't use our meta data, so that's the strange part.
Update: the domain www.wearemesh.com now redirects to www.ovsee.com, the same website you got redirected to when you click on the hacked result of the competitor I wrote about. The visual URL there is Finan.nl. This Ovsee.com looks like the perpetrator. But I still can't get a grip on it.. the other hacked result leads to www.planchemag.com which redirects to http://planchemag.fr.
What can I do to get my results back? I already filed a spam report in GWT.
Thanks again,
Marcel -
Their Google cache results were somehow corrupted temporarily:
http://webcache.googleusercontent.com/search?q=cache:http%3A%2F%2Fwww.wearemash.com%2F
There's a VWO code in there:
So it looks like they were split testing. The canonical is set to their domain which is why they took over results temporarily on these search terms.
It looks like the split test somehow grabbed your page info & theirs and split tested it giving theirs a canonical on your content. That would do it.
Are you using VWO? Are you using these guys to do your conversion optimisation? You may have the same conversion company who made a mistake or you may have the same VWO designer. I'm not sure how it got there but looking at the code, VWO does look to probably factor into the problem.
-
Hi Marcel
Quick question - I know you said "unknown", but are you sure that this site has nothing to do with your site? Like, did they develop or design your site at all?
Here is a help section from Google on these sorts of issues - it covers everything from cloaking to content scraping, and doorway pages to other spam types.
I would try contacting the webmaster of this site and asking them to remove your titles/meta descriptions. If they do not respond, or are not willing to cooperate, reference the resource above as Google has steps to take to ensure action is taken against sites that do this sort of thing.
Hope this helps! Let me know if you have any questions or need more help, good luck!
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
What would be the best course of action to nullify negative effects of our website's content being duplicated (Negative SEO)
Hello, everyone About 3 months ago I joined a company that deals in manufacturing of transportation and packaging items. Once I started digging into the website, I noticed that a lot of their content was "plagiarized". I use quotes as it really was not, but they seemed to have been hit with a negative SEO campaign last year where their content was taken and being posted across at least 15 different websites. Literally every page on their website had the same problem - and some content was even company specific (going as far as using the company's very unique name). In all my years of working in SEO and marketing I have never seen something at the scale of this. Sure, there are always spammy links here and there, but this seems very deliberate. In fact, some of the duplicate content was posted on legitimate websites that may have been hacked/compromised (some examples include charity websites. I am wondering if there is anything that I can do besides contacting the webmasters of these websites and nicely asking for a removal of the content? Or does this duplicate content not hold as much weight anymore as it used to. Especially since our content was posted years before the duplicate content started popping up. Thanks,
White Hat / Black Hat SEO | | Hasanovic0 -
Negative seo by Shady SEO Firm?
Recently a former client of man called me up and said that his rankings for his Auto Repair Shop in Tacoma WA had dropped and he had his worst November in sales since they hired this new SEO firm to rebuild their website and provide SEO. Of course the first thing I did was check his back links and sure enough there are 22 links from Yellowbook.com all pointed to different cities I checked the SEO firms website and they and they had 4 links from YellowBook. The problem was the links from YellowBook were all optimized from different cities. I am pretty sure Google penalized my client for the unnatural back-links to YellowCrook.com. Does the community agree that these links caused the penalty? I included the links in pictures on my LinkedIn Profile. https://www.linkedin.com/pulse/case-study-how-google-erased-60-percent-revenue-from-small-meshach?published=t Here are the links. <colgroup><col width="202"> <col width="545"></colgroup>
White Hat / Black Hat SEO | | DavidMeshah
| http://www.yellowpages.com/seattle-wa/automotive |
| http://www.yellowpages.com/seattle-wa/auto-transmission | Auto Transmission in Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/kent-wa/auto-repair-service | Auto Repair Service in Kent, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/seattle-wa/truck-service-repair | Truck Service Repair in Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/lower-queen-anne-seattle-wa/truck-service-repair | Truck Service Repair in Lower Queen Anne Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/bonney-lake-wa/mechanic | Mechanic in Bonney Lake, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/seattle-wa/auto-mechanics | Auto Mechanics in Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/shoreline-wa/auto-transmission | Auto Transmission in Shoreline, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/kent-wa/auto-repair | Auto Repair in Kent, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/lynnwood-wa/auto-transmission | Auto Transmission in Lynnwood, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/monroe-wa/auto-repair-service | Auto Repair Service in Monroe, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/auburn-wa/auto-repair-service | Auto Repair Service in Auburn, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/redmond-wa/auto-repair-service | Auto Repair Service in Redmond, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/matthews-beach-seattle-wa/auto-repair-service | Auto Repair Service in Matthews Beach Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/kent-wa/auto-transmission | Auto Transmission in Kent, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/monroe-wa/truck-service-repair | Truck Service Repair in Monroe, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/wilburton-bellevue-wa/auto-repair-service | Auto Repair Service in Wilburton Bellevue, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/laurelhurst-seattle-wa/auto-repair-service | Auto Repair Service in Laurelhurst Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/seattle-wa-98166/auto-oil-lube |
| http://www.yellowpages.com/gig-harbor-wa/auto-oil-lube | Auto Oil Lube in Gig Harbor, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/northeast-seattle-seattle-wa/auto-repair-service | Auto Repair Service in Northeast Seattle Seattle, Washington with Reviews & Ratings - YP.com |
| http://www.yellowpages.com/auburn-wa/auto-transmission |
| http://www.yellowpages.com/burien-wa/automotive | Automotive in Burien, Washington with Reviews & Ratings - YP.com |0 -
Are CDN's good or bad for SEO? - Edmonton Web
Hello Moz folks, We just launched a new website: www.edmontonweb.ca It is now ranking on page 2 in our city. The website is built on Wordpress and we have made every effort to make it load faster. We have enabled the right caching and we have reduced the file size. Still, some of our local competitors have lower load times and more importantly lower ttfb's. Is a CDN the right answer? I've read articles demonstrating that Clowd Flare decreased a websites rankings. Is there a better CDN to use, or a propper way to implement Clowd Flare? Thank you very much for your help! Anton,
White Hat / Black Hat SEO | | Web3Marketing87
LAUNCH Edmonton0 -
Advice on using the disavow tool to remove hacked website links
Hey Everyone, Back in December, our website suffered an attack which created links to other hacked webistes which anchor text such as "This is an excellent time to discuss symptoms, fa" "Open to members of the nursing/paramedical profes" "The organs in the female reproductive system incl" The links were only visible when looking at the Cache of the page. We got these links removed and removed all traces of the attack such as pages which were created in their own directory on our server 3 months later I'm finding websites linking to us with similar anchor text to the ones above, however they're linking to the pages that were created on our server when we were attacked and they've been removed. So one of my questions is does this effect our site? We've seen some of our best performing keywords drop over the last few months and I have a feeling it's due to these spammy links. Here's a website that links to us <colgroup><col width="751"></colgroup>
White Hat / Black Hat SEO | | blagger
| http://www.fashion-game.com/extreme/blog/page-9 | If you do view source or look at the cached version then you'll find a link right at the bottom left corner. We have 268 of these links from 200 domains. Contacting these sites to have these links removed would be a very long process as most of them probably have no idea that those links even exist and I don't have the time to explain to each one how to remove the hacked files etc. I've been looking at using the Google Disavow tool to solve this problem but I'm not sure if it's a good idea or not. We haven't had any warnings from Google about our site being spam or having too many spam links, so do we need to use the tool? Any advice would be very much appreciated. Let me know if you require more details about our problem. <colgroup><col width="355"></colgroup>
| | | |0 -
Banner Ads help seo?
I see in OSE banner ads counting ads as incoming links - My question is has anyone done a study showing a non tagged banner ad link and its effects on seo? Does google counting it as organic since it has no tagging or since its in a ad spot its ignored?
White Hat / Black Hat SEO | | DavidKonigsberg0 -
Contacted by an SEO company..
We have been contacted by a free SEO company, who seem to use your domain and create articles for you on your site, linking to other relevant sites, while other relevant sites link to yours. All they ask is a small link on your homepage. An excerpt of the instructions are: Download the attached files in a folder to be uploaded to your server (public_html) folder Set 777 permission to the folder. This allows our script to work on your site Add the "site wide" link on your homepage, as well as on the inner pages, the same way we do in the article section. Implement the "site wide" link following the instructions on the README.txt file Copy the script on the file or you can provide us with a temporary FTP access to your server and we will do it for you. Please note that if you can upload our folder to your site within 48 hours, you will be eligible to receive 20 bonus links for your SEO campaign. Should we tread carefully?
White Hat / Black Hat SEO | | filarinskis0 -
Is this SEO correct?
Please view website http://www.staddonsbeds.co.uk. In the footer is the keywords the client is aiming for. These pages have been created separately to the sitemap. Is this tactic and pages white hat seo or is this considered black hat seo such as gateway pages? Could you please confirm Thanks Paul
White Hat / Black Hat SEO | | paulbaguley0 -
Influence of users' comments on a page (on-page SEO)
Do you think when Google crawls your page, it "monitors" comments updates to use this as a ranking factor? If Google is looking for social signs, looking for comments updates might be a social sign as well (ok a lot easier to manipulate, but still social). thx
White Hat / Black Hat SEO | | gt30