Parasite SEO

Parasite SEO is the practice of publishing content on someone else’s high-authority domain to borrow its ranking signals, rather than building that authority on your own site. The host domain is the “host”; the content that feeds on its reputation is the “parasite”. The tactic works because search engines assign trust at the site level as well as the page level, so a mediocre page on a domain Google already trusts can outrank a better page on an unknown one.

The classic form is a “best [product]” affiliate roundup or a coupon section published under a major news brand, often through a commercial arrangement where a third party rents the subdomain or subfolder and keeps the revenue. For years this was one of the most reliable ways to rank commercial content quickly. Google has now made it one of the more reliable ways to lose visibility.

What is Google’s site reputation abuse policy?

Site reputation abuse is Google’s name for the spam policy that targets parasite SEO. Google defines it as “the practice of publishing third-party pages on a site in an attempt to abuse search rankings by taking advantage of the host site’s ranking signals”.¹

The policy has tightened in stages:

• March 2024. Announced alongside the expired-domain-abuse and scaled-content-abuse policies as part of Google’s spam update.²
• May 2024. Manual actions began landing on major publishers hosting third-party commercial sections.
• 19 November 2024. Google expanded the policy to apply regardless of first-party involvement or oversight. This closed the loophole publishers had used, arguing that because their own staff edited or commissioned the content, it was not “third-party”. Google’s position is that white-label arrangements, licensing deals, and partial ownership do not change the third-party nature of content whose primary purpose is exploiting the host’s ranking signals.¹
• August 2025. Enforcement moved from manual-action-only to algorithmic, folded into the spam update, so sections can now be caught without a human reviewer issuing a penalty.

The named casualties were significant. Forbes Advisor, CNN Underscored, WSJ Buy Side, USA Today’s Reviewed, and US News 360 Reviews all had commercial sections deindexed or heavily suppressed, in several cases entire folders removed from search.³

How does Google detect it?

Google’s systems can identify when a section of a site is independent of, or starkly different from, its main content. When that detection triggers, Google can treat the section as a separate entity and decline to pass the parent domain’s authority to it. In effect, the parasite is severed from its host: the subfolder ranks on its own thin merits, which is usually not enough.

This is why the tactic no longer offers a shortcut. The whole value of parasite SEO was inheriting authority the content did not earn. Once Google stops passing that authority, the arrangement collapses.

Parasite SEO and manufactured authority

Parasite SEO sits alongside a family of tactics that try to acquire authority a site has not earned. The distinction worth keeping clear:

• Parasite SEO exploits authority you do not own, by publishing on someone else’s trusted domain.
• Manufactured-authority link schemes try to fabricate authority on platforms you do control. The entity stacking and cloud stacking tactics are the clearest examples: interlinking Google properties or cloud-hosted documents to simulate endorsement.

Both fail for the same underlying reason. Google’s systems increasingly assess whether authority is genuinely earned through independent editorial endorsement, and discount signals that are rented, borrowed, or self-generated.

The involuntary version: when someone parasites your site

There is a second, entirely different situation that uses the same mechanic against you rather than for you. Here you are the host, and the parasite is hostile.

Subdomain takeover. If a subdomain points (via a dangling DNS record) to an external service you no longer use, such as a deprecated cloud host, an attacker can claim that service and serve their own content from your subdomain. They inherit your domain’s authority to host spam or cloaked pages. This is a security vulnerability, not an SEO tactic: the fix is DNS hygiene (remove dangling records for decommissioned services), not anything in Google Search Console.

Hacked content. Attackers who compromise a site can inject spam or cloaked pages that ride its reputation. Google has a dedicated hacked-content spam policy, and the injected pages can rank surprisingly fast on the strength of the host’s authority before the owner notices. This is the involuntary counterpart to parasite SEO: someone exploiting your domain’s reputation without consent.

Both differ from the negative SEO category in intent and method, but they overlap with it in practice, since injecting content onto a victim’s site is also a recognised negative-SEO vector.

What to do about it

If you host third-party content, the question is no longer whether you have editorial oversight; Google has said that does not matter. The question is whether a section exists primarily to rank on your domain’s authority rather than to serve your own audience. If it does, it is exposed. Options are to bring the content genuinely into your site’s remit (same audience, same editorial standard, same purpose), move it to its own domain where it ranks on its own merits, or discontinue the arrangement. A section that only makes sense as a rented ranking shortcut is a liability.

If you are defending your own domain, treat subdomain takeover and hacked content as security work: audit DNS for dangling records, remove subdomains pointing at decommissioned services, keep software patched, and monitor Search Console for unfamiliar pages appearing in your index. A manual action for hacked content, or an unexplained set of indexed URLs you did not create, is the signal to investigate.

The regulatory backdrop

The policy has not been uncontested. In November 2025 the European Commission opened a formal Digital Markets Act investigation into Google, on the basis that the policy demotes publishers who include content from commercial partners. Google submitted a remedies offer on 6 May 2026, which the Commission said was not strong enough.⁴ The tension is real: the same policy that stops ranking manipulation also cuts a revenue line publishers had come to depend on. For now the practical guidance stands, but this is an area where the specifics may shift.

Footnotes

1. Updating our site reputation abuse policy — Google Search Central ↩ ↩²

2. What web creators should know about our March 2024 core update and new spam policies — Google Search Central ↩

3. Google’s site reputation abuse crackdown hits major publishers — Search Engine Journal ↩

4. EU investigating Google over site reputation abuse policy — Search Engine Land ↩