validseo
Senior Member
- Jul 17, 2013
- 928
- 551
With Black Friday rapidly approaching it is time to be on the look out for these things if you are an online retailer who does most of your sales in Q4. Don't worry... this isn't a guide on how to do these attacks. It is merely a list of the things to look for so you can mitigate them if they appear. Most people think negative SEO is just spammy backlinks. From my own personal experiences with some of the things on this list... spammy backlinks are usually from the people who don't know what they are doing. There are far more devastating negative SEO attacks in the world.
101 Facets of Negative SEO
1. Stealing a website’s customers.
Reviews or profiles linking to competitors.
2. Mark non-issues as resolved.
If Google Search Console errors look minor and are no longer reproducible then mark them as fixed so you only see new errors next time
3. Form Spam
Check for Flooding a web database with bogus data
4. Domain name bot activity
Check if domains are being redirected to pile up bot activity onto a target site all at once.
5. Check for Negative and false Press
A competitor engaged in negative seo may reveal their intent by creating negative or false press releases.
6. Unwanted bots and directories
Check for Unwanted bot and directory submission
7. Check for false authorship
Is someone writing with your authorship credentials?
8. Traffic Origins
In search analytics in GSC check countries and make sure your not suddenly popular in Russia
9. Check for Domain squatting and hijacking
A competitor engaged in negative seo may reveal their intent by stealing your domain.
10. Misuse of Disavow
Check public misuse of the Disavow feature to declare a competitor as spam to google. Check if site appears in public disavow files or in lists of sites that people recommend disavowing.
11. Bad writing
Check for people inserting grammar, spelling, and content encoding errors
12. Click Fraud To Invoke A Ban
Competitor clicks your ads in a fraudulent way in an attempt to get you banned from the advertising platform.
13. Check for toxic domain redirection
Check GSC for confusing 404 URLs that might tie back to toxic domains being pointed to your website.
14. Right Keywords, Wrong Page
Check for people link building incorrect pages into the keyword context for bad experience
15. Desktop versus mobile not found errors
Check Google Search Console Not Found Errors for Desktop and Mobile
16. Content Keywords
Check your content keywords in GSC and make sure nothing looks spammy or out of place there
17. Shady sources of backlinks
Check for Inclusion in blog networks, link wheels, other linking schemes
18. Check Server Logs: Bad Bots
Identify and block bad bots. Bad bots can stack up on your domains and multiply server load.
19. Check Server Logs: SQL injection
SQL should never appear in web server access logs. inding SQL in the logs is evidence of an attack.
20. Check for fake ratings and reviews (worst product ever)
A competitor engaged in negative SEO may show their intent by generating fake ratings and reviews.
21. Check Server Logs: Outrageous requests per second
Spambots and other negative SEO attacks often have the symptom of IPs with high request counts.
22. Wordpress Security Plugins
Double check your Wordpress Security plugin for any loose ends if applicable.
23. 404 Errors
Check server logs for a large volume of 404 errors from 1 referring domain
24. New Keyword Context
Check for people link building a page into a new keyword context
25. Check search results for unusual sub-domains
Wildcard subdomains are another attack vector for duplicate content attacks.
26. Squandering a website’s ad spend.
A competitor engaged in negative SEO may show their intent by clicking on your PPC ads and wasting your ad spend.
27. Check for customer service spikes
Spikes in customer service activity can signal larger issues.
28. Ruining a website’s content or data.
A competitor engaged in negative SEO may show their intent by filling out your online forms with bogus data.
29. Getting the website banned from search results.
Look for unauthorized agents acting in your name as well as harmful activity from within your organization.
30. Bad Post Bumping
Check if users keep replying to bad or outdated posts so it keeps fresher or better content off the main indexes
31. Check for crippling the site’s speed
Is the website experiencing activity that slows down the server?
32. Admin Accounts
Periodically change your admin passwords and account names
33. Check for Keyword bombing posts and comments
Check if people are exploiting comments and posts to impact the keyword relevance of your pages.
34. Changing the topics a webpage ranks for.
If your page is about apple pies but people keep posting about chili for know reason they may be attacking your keyword density.
35. Causing confusion
A competitor engaged in negative SEO may show their intent by causing confusion about products and services or to blur the lines differentiating them.
36. Check for fraud order events and credit card testing
You should still report on this activity regularly because it usually appears with other negative SEO activities.
37. Slander and false claims
A competitor engaged in negative SEO may show their intent by slandering or making false claims about a website, business, or person.
38. Fake bots
Check for Fake bots that claim to be competitor and behave badly (again to get publicly blacklisted)
39. Check for Cross site scripting
Is you website vulnerable to cross sight scripting attacks? If so then attackers may be able to change the terms your site will rank for by exploiting the vulnerability with Google.
40. Fake spam email.
Check for faking Email spam to get competitor publicly blacklisted
41. Check Security Issues in GSC
Does Google Search Console report any security issues that need to be addressed?
42. Check website for unatural ratings and reviews
Unnatural spikes in rating or review volume can denote a negative SEO attack.
43. Check search results for domains matching your content
Both copyscape and Google search results are a great place to check if your content is appearing where it shouldn't.
44. Index status
Check Google Search Console Index Status page and make sure your total number of pages looks correct
45. Causing financial harm to a website.
A competitor engaged in negative SEO may show their intent by finding ways to financially harming the business.
46. Check for denial of service
Is the web server experiencing a campaign of denial of service attacks?
47. Linking Domains
Check Google Search Console for who Links to your site the most under search traffic
48. Check for misuse of Google’s spam report form
No Instructions.
49. Trying to hurt the reputation of the website.
Reputation attacks can occur on and off site. They are typically easy to find but hard to detect. Regular searches are required.
50. Patch your server regularly
Updating regularly reduces your number of vulnerabilities.
51. Fake Link Removal Requests
Check if people pretend to be a competitor and ask for link removals
52. CTR and position events
In search analytics in GSC check CTR and Position and make sure the chart looks ok… no drastic events
53. Update your web platform and plugins regularly
Updating regularly reduces your number of vulnerabilities.
54. Actively run anti-virus on server
Periodically run anti-virus on all of your computer systems.
55. Check website for comment or post spam
Are comments or posts being abused to spam competitive offers or to lower quality of the site?
56. Check Google Search Console Messages for penalties
Google Search Console may notify you of problems with your website via the messages they provide when you enter the platform.
57. Check Server Logs: 500-503 Errors
Status 500 errors appear in numerous negative SEO attacks. They usually appear for bugs and configuration issues most of the time.
58. Check search results for bizarre URLs
URLs that make no sense to you were often created by someone else.
59. Desktop versus mobile server errors
Check Google Search Console Server Errors Tab for Desktop and Mobile
60. Duplicate titles and descriptions
In Search Appearance in GSC investigate your duplicate title and meta description pages. Check the URLs to make sure they aren't bogus
61. Check Server Logs: Vulnerability Testing
People with malicious intent will try know vulnerabilities against your server. These attempts often appear in your web server's access logs.
62. Content overflow
Check for Content overflow where users keep posting to a one page thread until the page is too big
63. Topic flooding
Check for Topic Flooding where users flood the forum with so many crappy posts the forum becomes unusable
64. Hurting the reputation of a product.
A competitor engaged in negative SEO may show their intent by impuning the reputation of your products and services on and off site.
65. Trying to hurt the reputation of the author.
This is in the form of attacking the reputation of an important contributor to a website.
66. Check for fraudulent DMCA takedown
Is your website's reputation being attacked with fraudulent DMCA takedown requests to third parties?
67. Disrupting the operation of the website.
A competitor engaged in negative SEO may show their intent by causing activity that makes it hard for the website or business to function.
68. Alternative URLs
Check for people submitting alternative URLs or hosts to exploit missing canonical tags
69. Adult Links
Check for people linking your websites from adult sites or other toxic locations
70. Check for spammy links
A competitor engaged in negative SEO may show their intent by creating link spam for your website.
71. Routinely back up server
Expect the database and server files to be encrytped and held for ransom. Wont it feel good to have offline backups?
72. Topic Spam
Check website categories for over-abundance of old or bad topics
73. Steal a website’s viewers or contributors.
If applicable make honey pot power users so when 3rd parties try contact them you will know about it.
74. Periodically run vulnerability testing on your site to close security vulnerabilities
Updating regularly reduces your number of vulnerabilities. Testing points out the updates you forgot to make.
75. Check website for profile spam
Are profiles being abused to spam links to websites?
76. Check for false canonicalization
Are people canonicalizing bad content to your pages?
77. Stealing a website’s content.
Stealing another website's content could get your website penalized by Google.
78. Harassment
A competitor engaged in negative SEO may show their intent by trying to bully, harass, or otherwise intimidate a person, website, or business.
79. Adult content
Check for users posting adult or damaging content.
80. Check Google Search Console Messages for outages
Status 500 errors show an outage where your server was not responding to web browsers. This happens in a number of negative SEO attacks, but it can happen for other reasons too.
81. Getting a page demoted in the rankings.
This is usually findable in the form of "Haters with alternatives" Always be ready to counter these campaigns.
82. Check search results for negative mentions of domain or products
People who would be motivated to use negative SEO against you typically speak ill of your website publicly.
83. Don't let your domain registration lapse
Don't let someone steal your whole site by forgetting to renew.
84. Check for CTR and other false signal bots
Be sure to block bots that serve no useful function.
85. Editing a competitor's Google My Business listing
Your competitors can edit your Google My Business listing and if you aren't paying close attention and receiving notifications then they might just get away with it.
86. Make sure your link count hasn't abnormally grown since last check
Update you link count spreadsheet
87. Check for GoogleBot interruption
Are you being hit by slow loris attacks?
88. Check for Hacking the site
You web server logs often contain the clues of hacking attempts on your web server. Hackers are often willing to engage in negative SEO as well.
89. Check for rating and review spam (this is ok but my product over here is better)
A competitor engaged in negative SEO may show their intent by spamming competing offers in reviews.
90. Archive suspicious errors
If Google Search Console errors look suspicious then Download and archive them
91. Check search results for odd URL parameters and URL anchors
URL parameters are a common attack vector for duplicate content attacks.
92. Manual Actions
Check your Manual Actions in Google Search Console
93. Catalog of attacks
Catalog the frequency, duration, dates, origins, and impacts of website activity.
94. Flooding junk traffic
Check for Flooding junk traffic to a site so Google gets the wrong idea about the site’s audience location or demographics
95. Use a version control system and check the update status of deployed code for changes regularly
If you have a PHP or wordpress site then put it in GitHub (or similar) and check out on your deployment server. Then you can "git status" to see the file changes on the server. This lets you rollback changes if your PHP is hacked and see what exactly the changes were.
96. Disgruntled Employees
Check your website for links and content that shouldn't be there. Also check you source code repositories and database content fields for bad words, competitors, and management names.
97. Check for Fake complaints
Search for fake complaints about the website on other sites.
98. Check Google Search Console Messages for crawl errors
A number of negative SEO attacks have the symptom of generating lots of entries in your crawl error logs. These logs can be generated for other reasons too.
99. Don't share accounts or email credentials
Give each person their own account. Sharing accounts puts credentials in places they should be.
100. Use strong passwords for website accounts
Don't use a weak password for your wordpress admin. Don't name your wordpress admin account admin. Call it something else. Don't post with your admin account. post with an unprivledged posting account.
101. Check for Website or Social Identity Theft
Make sure others aren't speaking with your unclaimed brands on social and web 2.0 sites.
101 Facets of Negative SEO
1. Stealing a website’s customers.
Reviews or profiles linking to competitors.
2. Mark non-issues as resolved.
If Google Search Console errors look minor and are no longer reproducible then mark them as fixed so you only see new errors next time
3. Form Spam
Check for Flooding a web database with bogus data
4. Domain name bot activity
Check if domains are being redirected to pile up bot activity onto a target site all at once.
5. Check for Negative and false Press
A competitor engaged in negative seo may reveal their intent by creating negative or false press releases.
6. Unwanted bots and directories
Check for Unwanted bot and directory submission
7. Check for false authorship
Is someone writing with your authorship credentials?
8. Traffic Origins
In search analytics in GSC check countries and make sure your not suddenly popular in Russia
9. Check for Domain squatting and hijacking
A competitor engaged in negative seo may reveal their intent by stealing your domain.
10. Misuse of Disavow
Check public misuse of the Disavow feature to declare a competitor as spam to google. Check if site appears in public disavow files or in lists of sites that people recommend disavowing.
11. Bad writing
Check for people inserting grammar, spelling, and content encoding errors
12. Click Fraud To Invoke A Ban
Competitor clicks your ads in a fraudulent way in an attempt to get you banned from the advertising platform.
13. Check for toxic domain redirection
Check GSC for confusing 404 URLs that might tie back to toxic domains being pointed to your website.
14. Right Keywords, Wrong Page
Check for people link building incorrect pages into the keyword context for bad experience
15. Desktop versus mobile not found errors
Check Google Search Console Not Found Errors for Desktop and Mobile
16. Content Keywords
Check your content keywords in GSC and make sure nothing looks spammy or out of place there
17. Shady sources of backlinks
Check for Inclusion in blog networks, link wheels, other linking schemes
18. Check Server Logs: Bad Bots
Identify and block bad bots. Bad bots can stack up on your domains and multiply server load.
19. Check Server Logs: SQL injection
SQL should never appear in web server access logs. inding SQL in the logs is evidence of an attack.
20. Check for fake ratings and reviews (worst product ever)
A competitor engaged in negative SEO may show their intent by generating fake ratings and reviews.
21. Check Server Logs: Outrageous requests per second
Spambots and other negative SEO attacks often have the symptom of IPs with high request counts.
22. Wordpress Security Plugins
Double check your Wordpress Security plugin for any loose ends if applicable.
23. 404 Errors
Check server logs for a large volume of 404 errors from 1 referring domain
24. New Keyword Context
Check for people link building a page into a new keyword context
25. Check search results for unusual sub-domains
Wildcard subdomains are another attack vector for duplicate content attacks.
26. Squandering a website’s ad spend.
A competitor engaged in negative SEO may show their intent by clicking on your PPC ads and wasting your ad spend.
27. Check for customer service spikes
Spikes in customer service activity can signal larger issues.
28. Ruining a website’s content or data.
A competitor engaged in negative SEO may show their intent by filling out your online forms with bogus data.
29. Getting the website banned from search results.
Look for unauthorized agents acting in your name as well as harmful activity from within your organization.
30. Bad Post Bumping
Check if users keep replying to bad or outdated posts so it keeps fresher or better content off the main indexes
31. Check for crippling the site’s speed
Is the website experiencing activity that slows down the server?
32. Admin Accounts
Periodically change your admin passwords and account names
33. Check for Keyword bombing posts and comments
Check if people are exploiting comments and posts to impact the keyword relevance of your pages.
34. Changing the topics a webpage ranks for.
If your page is about apple pies but people keep posting about chili for know reason they may be attacking your keyword density.
35. Causing confusion
A competitor engaged in negative SEO may show their intent by causing confusion about products and services or to blur the lines differentiating them.
36. Check for fraud order events and credit card testing
You should still report on this activity regularly because it usually appears with other negative SEO activities.
37. Slander and false claims
A competitor engaged in negative SEO may show their intent by slandering or making false claims about a website, business, or person.
38. Fake bots
Check for Fake bots that claim to be competitor and behave badly (again to get publicly blacklisted)
39. Check for Cross site scripting
Is you website vulnerable to cross sight scripting attacks? If so then attackers may be able to change the terms your site will rank for by exploiting the vulnerability with Google.
40. Fake spam email.
Check for faking Email spam to get competitor publicly blacklisted
41. Check Security Issues in GSC
Does Google Search Console report any security issues that need to be addressed?
42. Check website for unatural ratings and reviews
Unnatural spikes in rating or review volume can denote a negative SEO attack.
43. Check search results for domains matching your content
Both copyscape and Google search results are a great place to check if your content is appearing where it shouldn't.
44. Index status
Check Google Search Console Index Status page and make sure your total number of pages looks correct
45. Causing financial harm to a website.
A competitor engaged in negative SEO may show their intent by finding ways to financially harming the business.
46. Check for denial of service
Is the web server experiencing a campaign of denial of service attacks?
47. Linking Domains
Check Google Search Console for who Links to your site the most under search traffic
48. Check for misuse of Google’s spam report form
No Instructions.
49. Trying to hurt the reputation of the website.
Reputation attacks can occur on and off site. They are typically easy to find but hard to detect. Regular searches are required.
50. Patch your server regularly
Updating regularly reduces your number of vulnerabilities.
51. Fake Link Removal Requests
Check if people pretend to be a competitor and ask for link removals
52. CTR and position events
In search analytics in GSC check CTR and Position and make sure the chart looks ok… no drastic events
53. Update your web platform and plugins regularly
Updating regularly reduces your number of vulnerabilities.
54. Actively run anti-virus on server
Periodically run anti-virus on all of your computer systems.
55. Check website for comment or post spam
Are comments or posts being abused to spam competitive offers or to lower quality of the site?
56. Check Google Search Console Messages for penalties
Google Search Console may notify you of problems with your website via the messages they provide when you enter the platform.
57. Check Server Logs: 500-503 Errors
Status 500 errors appear in numerous negative SEO attacks. They usually appear for bugs and configuration issues most of the time.
58. Check search results for bizarre URLs
URLs that make no sense to you were often created by someone else.
59. Desktop versus mobile server errors
Check Google Search Console Server Errors Tab for Desktop and Mobile
60. Duplicate titles and descriptions
In Search Appearance in GSC investigate your duplicate title and meta description pages. Check the URLs to make sure they aren't bogus
61. Check Server Logs: Vulnerability Testing
People with malicious intent will try know vulnerabilities against your server. These attempts often appear in your web server's access logs.
62. Content overflow
Check for Content overflow where users keep posting to a one page thread until the page is too big
63. Topic flooding
Check for Topic Flooding where users flood the forum with so many crappy posts the forum becomes unusable
64. Hurting the reputation of a product.
A competitor engaged in negative SEO may show their intent by impuning the reputation of your products and services on and off site.
65. Trying to hurt the reputation of the author.
This is in the form of attacking the reputation of an important contributor to a website.
66. Check for fraudulent DMCA takedown
Is your website's reputation being attacked with fraudulent DMCA takedown requests to third parties?
67. Disrupting the operation of the website.
A competitor engaged in negative SEO may show their intent by causing activity that makes it hard for the website or business to function.
68. Alternative URLs
Check for people submitting alternative URLs or hosts to exploit missing canonical tags
69. Adult Links
Check for people linking your websites from adult sites or other toxic locations
70. Check for spammy links
A competitor engaged in negative SEO may show their intent by creating link spam for your website.
71. Routinely back up server
Expect the database and server files to be encrytped and held for ransom. Wont it feel good to have offline backups?
72. Topic Spam
Check website categories for over-abundance of old or bad topics
73. Steal a website’s viewers or contributors.
If applicable make honey pot power users so when 3rd parties try contact them you will know about it.
74. Periodically run vulnerability testing on your site to close security vulnerabilities
Updating regularly reduces your number of vulnerabilities. Testing points out the updates you forgot to make.
75. Check website for profile spam
Are profiles being abused to spam links to websites?
76. Check for false canonicalization
Are people canonicalizing bad content to your pages?
77. Stealing a website’s content.
Stealing another website's content could get your website penalized by Google.
78. Harassment
A competitor engaged in negative SEO may show their intent by trying to bully, harass, or otherwise intimidate a person, website, or business.
79. Adult content
Check for users posting adult or damaging content.
80. Check Google Search Console Messages for outages
Status 500 errors show an outage where your server was not responding to web browsers. This happens in a number of negative SEO attacks, but it can happen for other reasons too.
81. Getting a page demoted in the rankings.
This is usually findable in the form of "Haters with alternatives" Always be ready to counter these campaigns.
82. Check search results for negative mentions of domain or products
People who would be motivated to use negative SEO against you typically speak ill of your website publicly.
83. Don't let your domain registration lapse
Don't let someone steal your whole site by forgetting to renew.
84. Check for CTR and other false signal bots
Be sure to block bots that serve no useful function.
85. Editing a competitor's Google My Business listing
Your competitors can edit your Google My Business listing and if you aren't paying close attention and receiving notifications then they might just get away with it.
86. Make sure your link count hasn't abnormally grown since last check
Update you link count spreadsheet
87. Check for GoogleBot interruption
Are you being hit by slow loris attacks?
88. Check for Hacking the site
You web server logs often contain the clues of hacking attempts on your web server. Hackers are often willing to engage in negative SEO as well.
89. Check for rating and review spam (this is ok but my product over here is better)
A competitor engaged in negative SEO may show their intent by spamming competing offers in reviews.
90. Archive suspicious errors
If Google Search Console errors look suspicious then Download and archive them
91. Check search results for odd URL parameters and URL anchors
URL parameters are a common attack vector for duplicate content attacks.
92. Manual Actions
Check your Manual Actions in Google Search Console
93. Catalog of attacks
Catalog the frequency, duration, dates, origins, and impacts of website activity.
94. Flooding junk traffic
Check for Flooding junk traffic to a site so Google gets the wrong idea about the site’s audience location or demographics
95. Use a version control system and check the update status of deployed code for changes regularly
If you have a PHP or wordpress site then put it in GitHub (or similar) and check out on your deployment server. Then you can "git status" to see the file changes on the server. This lets you rollback changes if your PHP is hacked and see what exactly the changes were.
96. Disgruntled Employees
Check your website for links and content that shouldn't be there. Also check you source code repositories and database content fields for bad words, competitors, and management names.
97. Check for Fake complaints
Search for fake complaints about the website on other sites.
98. Check Google Search Console Messages for crawl errors
A number of negative SEO attacks have the symptom of generating lots of entries in your crawl error logs. These logs can be generated for other reasons too.
99. Don't share accounts or email credentials
Give each person their own account. Sharing accounts puts credentials in places they should be.
100. Use strong passwords for website accounts
Don't use a weak password for your wordpress admin. Don't name your wordpress admin account admin. Call it something else. Don't post with your admin account. post with an unprivledged posting account.
101. Check for Website or Social Identity Theft
Make sure others aren't speaking with your unclaimed brands on social and web 2.0 sites.
