How to Block Fake Websites?

There are a lot of fake sites in the casino section, and they're surpassing our main site.

For example, they hack x1.com, exploit a shell and canonical bug, redirecting it to en.x2.com. When a hacklink is applied to this, it ranks #1 within two hours.

How can this be prevented?
All official notifications regarding phishing, etc., have been sent, but we receive responses in an average of 4-48 hours, which is far too late.

What's the fastest way to find a solution?

kivrak said:

There are a lot of fake sites in the casino section, and they're surpassing our main site.

For example, they hack x1.com, exploit a shell and canonical bug, redirecting it to en.x2.com. When a hacklink is applied to this, it ranks #1 within two hours.

How can this be prevented?
All official notifications regarding phishing, etc., have been sent, but we receive responses in an average of 4-48 hours, which is far too late.

What's the fastest way to find a solution?

Click to expand...

That’s a tough one, especially in casino niches where this stuff happens a lot.

You can’t fully stop others from exploiting hacked sites, but you can reduce the impact:

• Report + takedown fast → hosting provider, domain registrar, and Google Safe Browsing (sometimes faster than waiting on site owners)
• Spam report to Google → use the spam report form, sometimes helps de-rank quicker
• Monitor constantly → set up alerts (Ahrefs, GSC, etc.) to catch these early
• Strengthen your own authority → strong brand + links makes it harder for short-term spam to outrank you
• DMCA (if applicable) → if they copy content or impersonate

Reality is those “hack + redirect” rankings are often temporary. They spike fast but also drop once detected.

For speed, your best bet is multi-channel reporting (host + Google + registrar at the same time) instead of relying on one.

teamai said:

That’s a tough one, especially in casino niches where this stuff happens a lot.

You can’t fully stop others from exploiting hacked sites, but you can reduce the impact:

• Report + takedown fast → hosting provider, domain registrar, and Google Safe Browsing (sometimes faster than waiting on site owners)
• Spam report to Google → use the spam report form, sometimes helps de-rank quicker
• Monitor constantly → set up alerts (Ahrefs, GSC, etc.) to catch these early
• Strengthen your own authority → strong brand + links makes it harder for short-term spam to outrank you
• DMCA (if applicable) → if they copy content or impersonate

Reality is those “hack + redirect” rankings are often temporary. They spike fast but also drop once detected.

For speed, your best bet is multi-channel reporting (host + Google + registrar at the same time) instead of relying on one.

Click to expand...

All of this is being done, but the effects last for more than a day. When we have them take it down, they replace it with another site within two hours and continue to scam our customers without interruption. Google hasn't fixed this problem for months, and I don't think they intend to.

kivrak said:

There are a lot of fake sites in the casino section, and they're surpassing our main site.

For example, they hack x1.com, exploit a shell and canonical bug, redirecting it to en.x2.com. When a hacklink is applied to this, it ranks #1 within two hours.

How can this be prevented?
All official notifications regarding phishing, etc., have been sent, but we receive responses in an average of 4-48 hours, which is far too late.

What's the fastest way to find a solution?

Click to expand...

The 4–48 hour response window is the core problem — by the time the takedown happens, the damage is done.

Fastest mitigation:

Disavow immediately. Don't wait for Google to act. Submit the hacked domain to GSC disavow tool the moment you spot it. It won't undo the ranking overnight but it cuts the link signal.

CloudFlare or similar — block at DNS level. If you own any of the exploited domains, lock them through your registrar. If not, flag the hosting provider directly — faster than Google most of the time.

Set up alerts. Use Google Alerts or a tool like Brand24 for your brand + casino keywords. Catch these the moment they appear instead of after they've ranked.

Long term — the canonical + shell exploit combo means someone is actively targeting your sector. Worth auditing your own site for shell vulnerabilities if you haven't already.

Blocking fake or malicious websites is mostly about layering protection—no single tool catches everything. Use your browser’s built-in protection, Use a secure DNS, Install a security extension, Install antivirus, Manually block sites, Use Chrome with Enhanced Protection, Add uBlock Origin, Switch to Cloudflare DNS (1.1.1.1).

kivrak said:

There are a lot of fake sites in the casino section, and they're surpassing our main site.

For example, they hack x1.com, exploit a shell and canonical bug, redirecting it to en.x2.com. When a hacklink is applied to this, it ranks #1 within two hours.

How can this be prevented?
All official notifications regarding phishing, etc., have been sent, but we receive responses in an average of 4-48 hours, which is far too late.

What's the fastest way to find a solution?

Click to expand...

This is really annoying @kivrak ,
If we use some sort of real time website monitoring tools to detect unauthorized redirects and exploits immediately can be a solution. Set up a website firewall like Cloudflare to block malicious traffic and protect our site from shell access. Another thing that you neeed to consider is to improve your site’s SEO to outrank fake sites faster.

SEO is no longer working and is damaging rankings. Even second-page rankings are disappearing, and all sites except shell sites are being removed. This is happening constantly, and our own sites keep appearing and disappearing. The frequency is increasing. I think the only solution is a Google update, but it's unclear how many years that will take.

This kind of issue usually needs a mix of technical fixes and reporting. Making sure your own site is secure (no vulnerabilities, proper canonical setup, and correct redirects) is the first step.


You can also use tools like Google Search Console to report spam or misleading URLs, and keep submitting removal or spam reports when needed.


On top of that, monitoring backlinks and disavowing anything suspicious can help reduce the impact. It’s not always instant, but consistent reporting and strong site security usually helps over time.

You can't block fake websites from the whole world, but you can block them on your mobile or computer.
Turn on Safe Search and security in your browser.
Add suspicious websites to the block list.
And report dangerous sites to Google.
This keeps you safe.