Site been hit by the Spam Hackers! Grrr...

[Elliottc26]

Evening...

Just logged in to Search Console to discover I now have 2,052 new links from 203 new domains...all based abroad in various countries. Turns out the sites have, "This site may have been hacked" messages in the SERPs...super.

Visiting these sites can place malware on your computer so I won't be doing that...

Looks like my work's going to be involving disavowing them tomorrow - quick job...

Has anyone else had this issue recently?

B$%£^rds!!!

 

[UKSBD]

Somebody scraping UKBF and putting the content on hacked sites?

 

[Elliottc26]

Somebody scraping UKBF and putting the content on hacked sites?

No, my site. Just links to me.

 

[webhostuk]

using any CMS application like wordpress with some theme? I can be due to compromised database or infected themes most of the times.

 

[SEO Lady]

I'm a long time member on People Per Hour and because of this I get to know other providers and SEO people, I just wanted to recommend this guy:

[Edit wrong link new one coming shortly]
Disclaimer: I've never met him but I know his work is solid.
[Edit 2: I think this is the link]

 

[Scott@KarmaContent]

No, my site. Just links to me.

It's not just you. I'd hazard a guess that it's happening to anyone with a link in their signature on this site.

Somebody scraping UKBF and putting the content on hacked sites?

Yes they are. There was a thread about it a while ago I seem to remember too.

 

[UKSBD]

I think you will find the OP is saying there are links to his site from hacked sites, not that his site is hacked.

edit: this reply was to 1weekseo

 

[UKSBD]

It's not just you. I'd hazard a guess that it's happening to anyone with a link in their signature on this site.

Yes they are. There was a thread about it a while ago I seem to remember too.

There are loads of them out there.

 

[Scott@KarmaContent]

I never said his site was hacked. The UKBF site is being scraped and placed on loads of sites which is where his new links are coming from.

 

[UKSBD]

I never said his site was hacked. The UKBF site is being scraped and placed on loads of sites which is where his new links are coming from.

no, my reply was to 1weekseo (we both posted at same time and it looked like my reply was to you)

 

[Scott@KarmaContent]

Ah yes, get you now.

 

[Elliottc26]

I never said his site was hacked. The UKBF site is being scraped and placed on loads of sites which is where his new links are coming from.

Ahh, so UKBF is the source of the content being scraped. Hopefully they are dealing with their stolen content issue if this is the case.

 

[UKSBD]

Ahh, so UKBF is the source of the content being scraped. Hopefully they are dealing with their stolen content issue if this is the case.

Yes
If you have hundreds of links from your sig in posts on UKBF, you will now have 100's of links from numerous hacked sites.

 

[UKSBD]

Ahh, so UKBF is the source of the content being scraped. Hopefully they are dealing with their stolen content issue if this is the case.

do a search for;

"Experienced & Qualified Digital Marketer - prev. Ministry Copywriting, Dream Doors Ltd, and B&Q" (In quotes)

and you will see how bad it is.

*BE CAREFUL CLICKING ON THE RESULTS THOUGH*

 

[Kat Haylock]

Ahh, so UKBF is the source of the content being scraped. Hopefully they are dealing with their stolen content issue if this is the case.

We're aware of the issue and will be dealing with it over the next few weeks - I'll keep you updated when I can.

 

[Richard Edwards]

Below is a disavow file of everyone I can see from 17th Sept - 14th Oct. Will update every few days as best as I can.

domain: bebisan.ru
domain: arakel.msk.ru
domain: apart-julia.at
domain: amigo-travel.pl
domain: allianz.szczecin.pl
domain: yungman.ru
domain: xn--80alhhrfk.xn--p1ai
domain: xn--23-6kcajlh1but3g.xn--p1ai
domain: xn-----7kcgb9a9adccbpplecjq4a4kwa1c.xn--p1ai
domain: wp.rosanna-golflinks-ps.vic.edu.au
domain: valdezband.co.uk
domain: tz.bol.hr
domain: totpol.ru
domain: tecnofoodpack.it
domain: stygmatyzacja.eu
domain: sportpit-m.ru
domain: shiba-hochlar.de
domain: seniorenbusreisen.info
domain: seesink.de
domain: secretariadojmv.org
domain: sbsrd.ru
domain: sarasabe.es
domain: rkc.vl.ru
domain: risingstars-fa.co.uk
domain: rcdlk.ru
domain: radioindependientecomitan.net
domain: prolocorovetta.it
domain: phetrungrueang99.com
domain: person-zentriert.de
domain: oranienbaum.de
domain: oohfertas.com
domain: odi33.org
domain: norbertuscollege.nl
domain: nicehomelive.com
domain: nhav.nl
domain: nfpi-edu.ru
domain: mxworksbike.com
domain: multiculturefm.org
domain: mtdnk.ru
domain: miramis.info
domain: metro-city.ro
domain: medpp.ru
domain: lothar-bendel.de
domain: lambadaestudio.com
domain: vot.pl
domain: krystrom.pl
domain: krumme-gmbh.de
domain: justaboutcyprus.com
domain: jrtech.us
domain: izosystem.biz
domain: interemotion.nl
domain: hampshirehunt.co.uk
domain: fordavtozap.ru
domain: expressassist.ru
domain: esgu.ru
domain: delvillaggio.pl
domain: debuurtjesverhuur.nl
domain: cyrautomotores.com
domain: cms.double.net.tw
domain: cisteduse.cz
domain: cattolicahotel.it
domain: belitung-happytour.com
domain: xn--80aaudccfeopfxmfj3mzc.xn--p1ai
domain: xn--64-6kci4a9aorm.xn--p1ai
domain: virtualizebusiness.com
domain: undervisning-edu.dk
domain: myjino.ru
domain: theartofpossibility.co.uk
domain: samstroi17.ru
domain: roosterspartybus.com
domain: periodicorevolucion.org.mx
domain: ostrovfish.ru
domain: o-maijer.nl
domain: mglight.ru
domain: laloncheracr.com
domain: joerissen-edv.de
domain: ihti24.ru
domain: i-watch.nu
domain: destinybayarea.org
domain: cadencecycling.nl
domain: archpoznan.pl
domain: windsorlegion.ca
domain: tea-artel.ru
domain: rogueriversalmon.org
domain: proctum.ru
domain: koning.rs
domain: elektricvdome.ru
domain: powerconector.com
domain: ohota-shop.ru
domain: twenteatletiek.nl
domain: interrepa.fr
domain: canadianadventure.org
domain: aepedome.net
domain: unoverica.com
domain: masterprofill.ru
domain: hvc-angola.pt
domain: propertyking.my
domain: hotelnereides.gr
domain: c-c-consultancy.com
domain: reserva-ideal.com
domain: pscheidl.cz
domain: paymentmeeting.pl
domain: novocheremhovo.ru
domain: marathoncup.ru
domain: locations-vacances-dordogne.com
domain: intex72.com
domain: globalreh.com
domain: eiya.ru
domain: rassemblementpourjouy.com
domain: xn--80afzejmv.xn--p1ai
domain: xn--24-7-43d0bm6aibjb7c6d.xn--p1ai
domain: xn----ttbqdfg5a2c.xn--p1ai
domain: thermomix.com.ve
domain: smi-world.com
domain: pravovedpro.ru
domain: plasticosyenvases.net
domain: lawtimesnews.com
domain: jeandevilliers.com
domain: hoopersharbor.com
domain: cerrajerosbarcelonaurgente24h.com
domain: cap74.ru
domain: alrf-cfo.ru
domain: rincondeleon.com
domain: oxotnadzor.ru
domain: fashionsrelations.com
domain: exotica-import.fr
domain: burshel.ru
domain: asko-pskov.ru
domain: allesrein.ch
domain: zanier.it
domain: solaravto.ru
domain: rusdetali.ru
domain: notre-dame-toulouse.com
domain: kollegatv.ru
domain: ds64klg.ru
domain: anacip.md
domain: xn--80apahfh5aif.xn--p1ai
domain: volga-76.ru
domain: sportformer.ru
domain: slavyansk-na-kubani-beton.ru
domain: securitybn.ru
domain: my-domain.me
domain: mosraenerji.com
domain: lyceerotroudreux.com
domain: klickh.com
domain: ir2day.zz.vc
domain: interrobot.ru
domain: gorbachevad.ru
domain: fusionretrobooks.co.uk
domain: ener-s.ru
domain: clubskodacolombia.com
domain: camisantjaume.cat
domain: actparents.org.au
domain: xbox360gaming.co.uk
domain: uccaep.or.cr
domain: james-clerk-maxwell.com
domain: legaloffice.spb.ru
domain: grusha-cafe.ru
domain: firstclasscom.ro
domain: carrozzeriaknez.it
domain: bersteauxx.nl
domain: feadburner.com
domain: worcesterparkblog.org.uk
domain: tsk31.myjino.ru
domain: sysene.com
domain: syart.ru
domain: studiyalyubimchik.ru
domain: schuermann-entsorgung.de
domain: rve-medienlogistik.de
domain: odinsmile.ru
domain: islamicstudiesth.com
domain: ikon5architects.com
domain: flexsoftpetrol.ru
domain: beekloop.nl
domain: xn--90acnzf1a7c.xn--p1ai
domain: weergaloosmetwoorden.nl
domain: tpk-tm.ru
domain: superbhomes.com.au
domain: pulse-online.ru
domain: pasos.com.ar
domain: opduin.nl
domain: kamillot1.myjino.ru
domain: infoandfile.com
domain: dealtimeball.co.uk
domain: cannington-ag.com
domain: bruselit.ru
domain: asian-deepthroat.com
domain: techcalib.com
domain: severslom.ru
domain: sethway.org
domain: plenarea.com
domain: pc-do.ru
domain: fpcmcallen.org
domain: domekit.ru
domain: spkvarc.ru
domain: parhamb.com
domain: mantiseye.com
domain: redwood96.ru
domain: selskie-zori.ru
domain: gabrielloni.it
domain: imexaf.com
domain: lexner.at
domain: eltallerdelorfebrewd.com

 

[UKSBD]

do a search for a unique sig in quotation marks, set to 100 results, set timescale to 1 month and you will find a few more.

 

[Alan]

Very Interesting

1090 results for my sig.

Good job my link points to a google resource not my own "money site".

 

[Kat Haylock]

Thanks for posting @Richard Edwards.

We have a couple of guys looking at this, but if anyone's encountered this before/can recommend a particular course of action, let us know. Our priority is getting this fixed as soon as possible, so we're open to any advice you have.

 

[Alan]

See my market place post http://www.ukbusinessforums.co.uk/threads/stop-bad-links-from-your-ukbf-forum.365844/

 

[Richard Edwards]

Shows 2,090 results for me, but as you go through the pages it quickly went down to just 94 results. Seems the 2,090 results is a cached total and Google is removing a lot of them from its index, leaving just 94 currently.

 

[Alan]

Are you sure - after 94 you probably have a message saying ' there are 1996 similar sites that have not been displayed, click here to display them' that at least is what I get ( except 46 are display out of my 1090 ish)

 

[Richard Edwards]

Nope, as soon as I go to page 2 the total results drops to 94. On page 10 it shows 4 results, and nothing about extra results hidden. It does tell me it is showing 60 and I can click a link to show all 94 though.

 

[Alan]

If you don't mind could you try going to search settings ( cog on right) turn on 'never show instant results' and set results per page to 100.

That way you won't page through.

 

[Richard Edwards]

Did that to copy the links to disavow, shows just 94 with no message of any extras. Can you even see page 30 of your results for search? It found a few more WMT didn't show me, but also did not 150 of the ones I already had in my list. Removed from Google maybe, or hidden due to spam/malware I guess

 

[Alan]

In my case it does drop to 272 by page 3 ( of 100 per page) despite estimate of 1090. So my 'bad'

 

[Alan]

p.s. what do you use to extract urls from the Serps - I have http://www.chrisains.com/seo-tools/extract-urls-from-web-serps/ which does the job for me

 

[Elliottc26]

In my case it does drop to 272 by page 3 ( of 100 per page) despite estimate of 1090. So my 'bad'

Mine drops too...from 7000+ to 64 on last page. Although I know so far that more than 64 new links have shown up.

 

[Elliottc26]

p.s. what do you use to extract urls from the Serps - I have http://www.chrisains.com/seo-tools/extract-urls-from-web-serps/ which does the job for me

I use Search Console. You can temporarily hide URLs and also remove them from the cache.

 

[Elliottc26]

Thanks for posting @Richard Edwards.

We have a couple of guys looking at this, but if anyone's encountered this before/can recommend a particular course of action, let us know. Our priority is getting this fixed as soon as possible, so we're open to any advice you have.

Find out the hosts and owners for all the sites and send them the details and submit take down requests for hacked sites with stolen content?

 

[selenagomez1]

Well your situation is quite the same as one of my friends' cases. To that case, my friends' competitors played unfairly by making more bad backlinks to his main site with the links from xxx and gambling sites. DDOS sometimes happened during the competition.

 

[Richard Edwards]

Just so you know, I submitted the disavow and google has cleared up some of those sites now (obviously starting to understand it is a load of spam now) and my ranking has gone from 94 to 41 over the weekend. Hopefully back to the 20's in a few days as I am sure more sites cropped up over the weekend.

 

[Ian J]

Mine has sunk from page 2 to page 5 this morning. I can't do anything about it at the moment but will try a bunch of disavows when I get back to England next week

 

[Elliottc26]

Mine has sunk from page 2 to page 5 this morning. I can't do anything about it at the moment but will try a bunch of disavows when I get back to England next week

I've seen a 20-25 place improvement to average position since adding a Disavow file. However, spam domains have increased now to 285 from 210 including a porn site - added to disavow also.

 

[Clinton]

I've seen a 20-25 place improvement to average position since adding a Disavow file.

Probably coincidence.

Correlation is not causation.

 

[Elliottc26]

Probably coincidence.

Correlation is not causation.

It was 2 days later and thats all thats changed.

 

[Clinton]

And that disproves the possibility of a coincidence?

At the very least remove those domains from the disavow and see if the site slips back. That's the kind of research (at the expense of a lower rank for a couple of days) that good SEOs do.

Don't believe everything you read on the internet, especially not everything from the Gorg.

 

[Elliottc26]

And that disproves the possibility of a coincidence?

At the very least remove those domains from the disavow and see if the site slips back. That's the kind of research (at the expense of a lower rank for a couple of days) that good SEOs do.

Don't believe everything you read on the internet, especially not everything from the Gorg.

I know you're trying to defend your position that disavow is useless but it has its place against spam links. You also have to.get those links removed from the net where possible and not just rely on a disavow. But they help prevent damage to ranking.

 

[Clinton]

I know you're only repeating what Matt Cutts has said, but I would advise you to not take that FUD as gospel truth.

I know you're trying to defend your position...

It's not "my position". That's widely accepted by some of the most respected SEOs and SEO researchers on the planet (if you've been keeping up with all the latest in the industry).

My position is that we shouldn't be doing Google's dirty work for them. That's quite different from the facts about what works and what doesn't work.

 

[Elliottc26]

I know you're only repeating what Matt Cutts has said, but I would advise you to not take that FUD as gospel truth.


It's not "my position". That's widely accepted by some of the most respected SEOs and SEO researchers on the planet (if you've been keeping up with all the latest in the industry).

My position is that we shouldn't be doing Google's dirty work for them. That's quite different from the facts about what works and what doesn't work.

I haven't read Matt Cutts on this issue. I know from reading, doing then seeing, trying and testing.

I'm happy to manage my site and others rather than leave it to Google. However, spam and low quality links need removing also to gain a strong position.