The Sink
Enduring Network Protection — proactive, always-on SEO threat detection.
The Attack Graph is shared by every site we protect: a threat verified against any one of them is sunk for all within the hour. From day one, you’re protected against attacks you’ve never seen. A category of its own: SEO threat detection, not cybersecurity.
→
The Drain
Proprietary capture-and-carry — our original IP.
More than a conduit. The Triage makes the call at The Sink exit — clear spam sinks on the spot, marginal links go to a human with a recommendation — and The Drain carries the condemned away from your server entirely. Blocking stops the knock at the door; The Drain removes the caller.
→
The Tarpit
Nothing EVER leaves.
An endless, self-renewing run of worthless pages, engineered to spend the campaign’s most expensive resource: its crawler time. Verification loops starve, budgets drown, and every hit is preserved as evidence — what enters The Tarpit finances its own case file against the campaign that sent it.
All of it happens away from your site.The Sink, The Drain and The Tarpit run on our edge — never your server, never your hosting, never your domain’s reputation. The Waste is removed before it arrives.
Spam backlinks & bots designed to hurt your site never reach you.
SEO Sink is proactive SEO threat detection: always-on defence that intercepts attacks at the edge and sinks them before Google ever registers them. Built by operators fighting a live campaign across their own 2,444-domain estate — 57,302 hostile domains sunk, 352,571 attacks stopped in the first week, every number published. Your traffic arrives clean, your analytics stay human, and every sunk hit comes back labelled with the campaign that fired it.
Get early access
See what we found in our own estate ↓
We swept our own estate first.
56 of 2,444 domains were hijacked.
Nobody knew.
Dangling DNS records pointed at infrastructure we no longer controlled. Third parties had claimed it and were serving scam redirects from our domains — for months, invisibly. We found it because we looked. Most portfolio owners never do.
That sweep is why SEO Sink exists. The same machinery now watches for yours.
The name, plainly: a sinkhole is where rankings disappear to. SEO Sink is the thing that combats negative SEO — the spam campaigns, malicious bots, ghost redirects and hijacked DNS that put them there — and kills it before it hits your site.
Pre-fire
New attack infrastructure is fingerprinted from registration signals and staged for review — before Google ever crawls a link. Nothing to disavow when nothing registers.
Live-fire
Hostile crawlers and verification loops get sunk at The Sink and carried away by The Drain — quicksand for bad bots. The Tarpit swallows their crawler budget whole: they can't confirm links, can't refresh them, and drown trying — while we file the hosting-abuse report that kills the virtual-machine (VM) range behind them. Your edge telemetry labels the campaign while it happens.
Post-registration
Whatever got indexed first gets unwound with managed, per-property disavow discipline — versioned, reversible, evidence-backed.
Your server stops serving the flood
Every bot that becomes The Waste is a request your hosting never pays for — bandwidth, CPU and PHP workers on budget plans go to visitors and Googlebot, not to a farm's verification loop. Your crawl budget goes to pages that matter.
Any host, any platform, one CNAME
No plugin, no agent, no server credentials. WordPress, custom stacks, static sites, whatever your clients run — DNS is the only integration surface, so agencies can protect a whole mixed client base the same way.
Analytics you can trust again
Forged-referer floods poison the data you make decisions on. They get sunk at the edge — your reports show humans, and your marketing calls are made on clean numbers.
How it protects a live siteHow it protects parked & idle domainsReal attack data from our own estate
Not another security plugin. Not another backlink report.
Blocking tools answer "a bad visitor arrived." Audit tools hand you a spreadsheet and wish you luck. SEO Sink acts on the attack's lifecycle — and measures itself in public: under one hour from the first hostile signal anywhere in the network to protection everywhere.
- User-defined sink rules: domains, referers, ASNs, UAs, URL patterns, hotlinkers
- Campaign attribution: which farm, first seen when, who else it's hitting
- Enduring Network Protection: one tenant's attack is sunk for every tenant within the hour
- Idle Domain Protection: hijack detection, dangling DNS, registrar rot — for the domains you're not watching
- Abuse reports filed for you: every botnet we fingerprint gets reported to its hosting provider's abuse desk — VM ranges cost money to rebuild, so every kill slows the campaign. Published monthly in The Abuse Desk Log →
Check a live site — free
Your money site is the target. Forged-referer floods, hostile crawlers, toxic link waves, cloaked injections — the attack surface that actually costs you rankings. Ten seconds, no signup, see the surface signals now; the full picture (campaign attribution, pre-fire staging, sink rules) is the product.
Check a live site
Check a parked domain — free
Idle domains get hijacked silently: dangling DNS, claimed IPs, scam redirects served on your name. It's how we found 56 exploited domains in our own estate — nobody notices until they look. Ten seconds, no signup.
Check a parked domain
Blocking tools answer "a bad visitor arrived."
We answer: the attack never matures.
WPMU Defender, Wordfence, your web application firewall (WAF) — they protect the site after the attack is live and indexed. We act on the attack's lifecycle: staged before it fires, starved while it fires, unwound after it lands. The public metric is the one a competitor can never fake: under one hour from first hostile signal anywhere in the network → protection everywhere.
✗ Site scanners
Fetch your homepage, guess, and hedge. One pass, browser-level, no history, no memory of the attack.
✓ SEO Sink
A living attack graph built from real campaigns. A domain can scan perfectly clean while we watch its identity being forged in 1,016 attacks a month against sites like yours.
"Sunk before it reached Google."The sentence no other vendor can say — staged from registration-signal fingerprints while the farm was still building the links.
Campaign attribution, not a blocklist
A hostile host isn't a row in a list. It's a member of a campaign — first seen, registrar batch, co-hit across properties, one click to sink or disavow the whole wave:
Campaign igaming-churn-2025-10 · first seen 2025-10-12
4,212 domains · same registrar batch · same referer-path family
Hitting 340 properties this week · 340 new links on this property
[ Sink campaign ] [ Disavow campaign ]
Enduring Network Protection
One threat found on one site is sunk for every site within the hour — before it ever reaches yours. Every new attack anywhere becomes your protection here: The Attack Graph grows from real fire daily, across every tenant, while a solo operator starts at zero hosts forever. Protection that compounds, not a subscription that sits still.
We know who NOT to sink
SEO tools flag links toxic and ignore vertical-specific value: a marginally toxic link in one niche can be a positive link in another. Negative-SEO false positives destroy money sites — The Triage is calibrated on real campaigns, and a human reviews anything we can't clearly call spam.
We show our error bars
Every verdict comes with its evidence and reverses in one click — approve or sink stays with you, always. And the overturn rate is published next to the headline metric: serious operators trust a vendor more for showing its misses than hiding them.
"Cloudflare can stop the request. SEO Sink targets the ranking damage."Half the attack never crosses your edge at all — it sits in Google's index. We cover both halves.
Get early access
First cohort opens with design partners on the Fleet tier. Leave your email — and optionally the site you most want watched — and you're on the list. If our free checker flags anything on your domains in the meantime, you'll hear about that first.
One email when your cohort opens — no drip campaign, no resale. Like every interaction on this service, the request is logged (email, site, IP) for security and outreach.
Frequently asked
Is negative SEO actually real?Yes — and we can show you the receipts: 57,302 verified hostile domains against one portfolio, ~48,000 forged-referer hits a month, a botnet doing thousands of challenges a day from cloud VMs. Google neutralizes most of it; at competitive scale the leakage is measurable.
Doesn't Google just ignore spam backlinks?Mostly — until the wave is big, targeted, and lands before classification. Disavow remains the only Google-endorsed lever you control for what gets through. We manage it properly (The Triage): per-property, versioned, surgical.
How is this different from a security plugin or a site scanner?They answer "a bad visitor arrived." We act on the attack's lifecycle: staged before it fires, starved while it fires, unwound after it lands. And a scanner will tell you a domain is clean while we watch its identity forged in a thousand attacks a month.
What does the free check do?Ten seconds, one domain: content, redirect chains, dangling DNS, blocklists, registry state. It's how we found 56 hijacked domains in our own estate. Run it.
Does it work on my platform / my host?Yes — the full product — The Sink, The Drain, The Tarpit, attack attribution, Enduring Network Protection and idle-domain watch — is delivered at the DNS layer, not on your server. One CNAME and your site's traffic is screened at our edge before anything hostile reaches your host; parked domains just delegate. No plugin, no agent, no server credentials, nothing to patch or update — WordPress, custom builds, static sites, Shopify-adjacent stacks, any host. Agencies protect a whole mixed client base through one onboarding flow per domain.
What is "the edge"?Our network of checkpoints around the world that your traffic passes through before it ever reaches your server. Think of it as a front counter: every visitor — person or bot — knocks there first, the hostile ones are turned away, the real ones waved through. You point your traffic at it with one DNS record; nothing installs on your server, nothing about your hosting changes, and pointing away again is just as easy.
Will it slow my site down?The opposite. Requests are answered at the edge in milliseconds, and every hostile bot we sink is bandwidth and CPU your hosting never spends — on budget plans that's a real cost saving. Your origin only serves visitors and good bots.
What happens to my analytics?They get cleaned. Forged-referer floods — bots impersonating Google, trusted brands, even your own domains — are sunk before they register. Your reports show humans; your decisions stop being made on polluted data.
How do I know it's working?We measure ourselves in public: hostile hits sunk, campaigns attributed, time-to-protection across the network — and we publish our own estate's attack data, honestly labelled, on the real attacks page.
Do you do anything about the botnets themselves?Yes. Sinking starves them; we also name them. Every verification loop we fingerprint gets reported to its hosting provider's abuse desk on your behalf. Providers kill VM ranges every day — and a farm rebuilding its botnet is a farm not attacking you.
Do you do SEO — links, audits, technical fixes?No, and we never will. We don't sell links, we don't run SEO audits, we don't do technical site analysis, and we don't touch your rankings directly. Plenty of vendors sell growth; we sell the defence of what you already earned. The moment we sold both the attack side and the defence side, you'd be right to wonder which one you were paying for.
Will this hurt my traffic or rankings?Ask it the other way: has removing spam and bots ever hurt a real site? The only traffic we sink is traffic you never wanted — forged referers, hostile crawlers, churn-farm verification loops. Your visitors, your Googlebot, your rankings pass untouched; the marginal calls go to a human reviewer, not a regex. And in full honesty: we don't control Google, and Google has never made its exact algorithm public — anyone who guarantees you an outcome is guessing on your behalf. What we can show you is ours: our own estate's data, honestly labelled, on the real attacks page. One qualifier, though: if you believe spam backlinks and malicious bot activity on your site are a positive, SEO Sink is not for you.
Why now — why not wait a year and see?Because everything about this compounds in your favour the earlier you start — and against you the longer you wait. Every week protected is a week of link waves starved before they register (waves that do register take months to unwind), a week of bot budget burned in The Tarpit instead of on your server, and a week of The Attack Graph learning what "normal" looks like for your sites. A hijack caught in a week is a redirect and a cleanup; caught in a year it's a reputation rebuild. A year from now you'll either have a year of your own protection data — or a year of someone else's attack on you, unlogged.