Forum Moderators: Robert Charlton & goodroi

Targeted by Chinese .xyz Redirect Spa

How to Stop Negative SEO?

         

dolcevita

10:10 pm on Jun 8, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Every day, dozens of pages are automatically generated with Chinese subtitles like 风间公亲-教场0-无际可寻, mostly using .xyz domain extensions, which automatically redirect to a SEO Black Hat advertisement that links to my website.

Since this started, I’ve been slowly losing rankings, and I simply don’t know how to fight it. Ahrefs detects and marks them as spam, Google doesn’t show them in Search Console, but I believe that regardless, it sees my website as an indirect offender and is gradually lowering my SERP.

The domains typically have randomly generated names, for example (hdozuxyp),
a random path (like /ifablkkcznoag),
and they redirect users to another site.

Does anyone have any idea what can be done about this? How can I protect my website and SEO from being harmed by this kind of negative SEO attack?

haramamba

5:37 am on Jun 10, 2025 (gmt 0)

Top Contributors Of The Month



The 99% of this sh**t is automated. Pay attention to your server's traffic, implement captcha, security cookies, look for stupid user agents, incorrect referrers, write some scripts to block them. Block cheap server farms on the firewall level.

not2easy

3:37 pm on Jun 10, 2025 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Google will generally detect this kind of activity and they will disappear. I've seen this on one of my sites years ago and it was gone (404) within a few days. Time better spent on examining logs for server response.

Kendo

6:16 am on Jun 11, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Check write and file permissions because I have seen stuff like this that was injected without posting via forms. One of my sites was injected many years ago and I still see 404s in my logs for requests for those pages (even though they were removed years ago).

tangor

8:56 am on Jun 11, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Chit happens. Most of this chit is temporary and chasing it is a waste of time. As noted above the search engines know what this chit is. Take a deep breath and let it go. Gibberish, after all, can't really be indexed since it is ... gibberish!

lucy24

4:27 pm on Jun 11, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Every day, dozens of pages are automatically generated
Clarify, please. Do you mean pages on your site, or pages just out there somewhere on the wild wild web?

dolcevita

5:54 am on Jun 12, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



To clarify: the spam pages are not hosted on my site. They are external pages, typically on auto-generated .xyz (and similar) domains, which include Chinese subtitles or gibberish content, likely to manipulate SEO signals or damage my reputation.

These domains are not only randomly generated (e.g., hdozuxyp.xyz/ifablkkcznoag), but are also hidden behind Cloudflare, making it difficult or impossible to identify their real hosting providers.

I’ve already reported several of them to Cloudflare’s abuse team, but so far there has been no meaningful response.

In the meantime, I’m actively using Cloudflare’s WAF to challenge as much of this activity as possible, particularly by filtering known malicious ASNs, user agents associated with automation or scraping and spammy referrers. However, since the spam sources constantly rotate and evolve, it’s an ongoing battle.

What worries me is that Ahrefs detects hundreds of these links. I strongly suspect this is a negative SEO attack.

dolcevita

10:19 am on Jun 12, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Anchor text used in the spam backlinks is always the same according to Ahrefs:

> Black Hat SEO, Google SEO fast ranking ↑↑↑ Telegram: @seo7878

Example anchor:
[5uhob↑↑↑Black Hat SEO backlinks, focusing on Black Hat SEO, Google SEO fast ranking ↑↑↑ Telegram: @seo7878](h**ps://www.my-website.org/dir?query=whaever)

Then again:
5m0aY↑↑↑Black Hat SEO backlinks, focusing on Black Hat SEO, Google



Whether by coincidence (and I personally don’t believe in coincidences), within 10 days of this spam campaign starting, my site dropped 3–4 positions on several top keywords. This clearly suggests that negative SEO is still very much alive.

It also shows that despite Google's advanced AI and machine learning capabilities, the algorithm still has a tendency to penalize the victim instead of the aggressor, assigning suspicion or blame to innocent websites rather than to the real source of manipulation.

Anyone else seeing this “Telegram SEO” spam?

dolcevita

2:31 pm on Jun 12, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



In the meantime, I have identified that the domains are registered with Spaceship, which is a part of Namecheap, and since they are behind Cloudflare, they are most likely using Namecheap’s infrastructure for their malicious SEO schemes.

I have already sent complaints to Spaceship, Namecheap, ICANN, and Cloudflare again.

This abuse must stop, and honestly i hope whoever is behind it faces the full consequences of their criminal actions.

If there is any mastermind or orchestrator behind this scheme, I hope they are held equally accountable.

ReMHost

11:18 am on Jan 24, 2026 (gmt 0)



Hello,

Yes same problem. Every day +100 new domains like .xyz .info .asia link to our sites. anchor text: telegram channels with Black hat SEO spam.

Rankings are terrible.

no solution :(

christianz

8:07 pm on Jan 26, 2026 (gmt 0)

WebmasterWorld Senior Member 5+ Year Member Top Contributors Of The Month



I have those links too but I don't pay any attention to this stuff. Google is demoting my site and your site not because of SEO scam ads via backlinks (remember analytics referrer spam?), but because their algo is fundamentally 100% trash and can't distinguish real and high quality sites from spam, slop and low quality sludge.

tangor

10:04 pm on Jan 26, 2026 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Every day +100 new domains like .xyz .info .asia link to our sites


My solution was to white list domains in my .htaccess:

.com
.net
.org

All others denied.

Might not fit for all, but it is one way to 403 the unwanted in a MORE GENERAL method.

RedBar

5:12 pm on Jan 28, 2026 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Tangor loves no one :-(

My business enquiries would come to a halt if I were to apply this ... Does anyone remember artistic / spam telexes ... Some were awesome :-)

tangor

2:20 pm on Jan 29, 2026 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Chuckles! ^^^ Tangor loves everyone who does not cost time or money!*

*punched a hole for .uk and a few others years ago!