Your site is under attack right now.
You just can't see it.
Spam links by the thousand, fake visits poisoning your analytics, botnets checking whether their work is sticking. We run this defence across our own estate — here's what it sees every single day:
No signup · no plugin · the same check that found 56 hijacked domains in our own estate
Your rankings can be attacked without anyone ever hacking your site. Attackers point thousands of spam links at you, flood your analytics with fake visits, and send armies of bots to verify their work is sticking. Google sees the mess and can mistake it for something you did. Cleaning it up afterwards — audits, disavow files, reconsideration requests — is slow, expensive, and incomplete.
SEO Sink works earlier. Your site sits behind our edge (a simple DNS change — one CNAME, no plugin, no software on your server, works on any host and any platform: WordPress, custom builds, Shopify-adjacent stacks, anything). From there, the attack gets dealt with while it's still attacking:
The attack path vs the protected path — everything hostile is answered at the edge, not by your server.
Spam backlinks get starved, not just disavowed
Link farms must constantly re-crawl their own links to confirm they still exist — that's how they decide which domains to keep and which to replace. When their bots follow links toward your site, The Tarpit takes them: an endless run of worthless pages that eats their crawler budget and tells them nothing. A farm that can't verify its links abandons them. The result, visible in our own data: the wave of referring domains peaks, then breaks.
Fake traffic never touches your analytics
Forged-referer floods — bots pretending to arrive from Google, from trusted brands, even from your own domains — poison the data you make decisions on. We measured ~48,000 of these hits a month against one portfolio. Our edge recognizes the signatures (impersonated referers, datacenter botnets, uniform browser fingerprints) and sinks them before a single byte of your analytics is polluted. Your reports show humans.
Hostile crawlers never reach your server
Every bot sunk at the edge is a request your hosting never serves. And sinking isn't the end of it — every fingerprinted verification loop is reported to the hosting provider's abuse desk on our tenants' behalf. Botnets cost money to rebuild; every VM range killed slows the campaign. On budget or shared hosting that's real money: less bandwidth, less CPU, fewer PHP workers burned on traffic that was never going to convert. Your origin spends its resources on visitors and Googlebot — and your crawl budget goes to pages that matter, not to absorbing a flood.
Requests your hosting never has to serve — measured on our own estate.
Check your site free — 10 seconds
The network gets smarter with every attack
We run this machinery across our own 2,444-domain estate and every customer who joins. New attack infrastructure spotted against one tenant is fingerprinted and sunk for all of them — usually before Google has even crawled the links. You benefit from attacks aimed at other people, without ever knowing they happened.
What we deliberately don't do
- We don't touch your server. No plugin, no agent, no credentials. The only integration is DNS.
- We don't sell you a report and walk away. Audits describe damage; we prevent it maturing.
- We don't promise week-one ranking miracles. We publish our own attack data and early ranking signals — honestly labelled — on the real attacks page.
Want the ten-second version on your own site? Run the free live-site check — surface issues, blocklist state, backlink-wave detection, no signup.
The moving parts, in plain terms
Eight names, one job each. Everything on this site is commentary on these — The Sink, The Drain and The Tarpit run in sequence on every request, and no one of them is offered (or works) in isolation.
What is SEO?
Search engine optimization: the work of making a site rank where buyers actually search. Negative SEO is the attack form of it — instead of building your rankings, someone spends a few dollars poisoning them: spam backlinks, forged referers, hostile crawlers, hijacked idle domains, so Google learns to distrust the site. SEO Sink’s whole job is turning that attack into The Waste.
The Sink
The filter every request to your site passes through first, at our edge — never your server. Known-hostile domains, referers and bot signatures stop here; real visitors and Googlebot pass through untouched. The Sink runs on Enduring Network Protection (below), so your filter starts pre-loaded with everything the network has already learned.
Enduring Network Protection
The Attack Graph is shared by every site we protect. A threat verified against any one of them is sunk for all within the hour — you launch already protected from attacks you’ve never seen, and every new attack anywhere makes your protection smarter. Proactive, global, always-on SEO threat detection: a category of its own, not cybersecurity.
The Triage
The decision layer at The Sink’s exit. Every referring domain the indexes can see gets scored: clear spam sinks automatically, and the marginal cases go to human review with our recommendation attached. Approve or sink stays with you — nothing sinks silently, and your knowledge of your niche outranks any metric.
The Drain
Our proprietary capture-and-carry — the original IP no plugin can bolt on. Once The Triage has made the call, The Drain carries the condemned away from your server entirely: blocking stops a knock at the door, The Drain removes the caller. It is why nothing hostile ever touches your hosting, your logs, or your analytics.
The Tarpit
Where The Drain delivers hostile crawlers. Nothing EVER leaves: an endless, self-renewing run of worthless pages engineered to spend the campaign’s most expensive resource — its crawler time. Verification loops starve, budgets drown, and every hit is preserved as evidence against the campaign that sent it.
The Waste
Every class of hostile traffic SEO Sink removes: spam-link waves, forged-referer floods, hostile crawlers, hijack scripts. The attack, renamed for what it becomes once The Sink, The Drain and The Tarpit are done with it.
The edge
In plain English: the front counter your traffic knocks on before it reaches your door. Normally every visitor to your site — person or bot — connects straight to your server. Behind SEO Sink, they connect to our worldwide network first: hostile traffic is turned away at the counter, real visitors are waved through. One DNS record points the knocks at our counter; nothing installs on your server, your host stays exactly where it is, and pointing away again is just as easy. The Sink, The Drain and The Tarpit all run at the counter — never on your infrastructure.
The Attack Graph
Not a list — a universal, evolving matrix of signals: hostile domains, referers, bot fingerprints, IP ranges, URLs and campaign patterns, learned from real fire across the whole network and shared by every site we protect. It is what The Sink enforces from. The Attack Graph is global; your sink list is your account’s view of what’s sunk for you — every call in it reversible by you.
Get early access
Leave your email — and optionally the site you most want watched — and you're on the list. If our free checker flags anything on your domains in the meantime, you'll hear about that first.
One email when your cohort opens — no drip campaign, no resale. Requests are logged (email, site, IP) for security and outreach.
Keep reading: how SEO Sink protects your domains · pricing · the monthly negative-SEO reports