For roughly a decade, the most profitable arbitrage in SEO was leasing a subdomain from a high-authority publication and filling it with affiliate content. That arbitrage closed in May 2024 and the door has been welded shut since.
The mechanism that produced the arbitrage was simple. Major news and magazine sites had spent decades building Domain Authority through legitimate journalism. Google’s ranking systems used domain-wide signals to evaluate the authority of individual pages on those domains. A third party who rented space on the domain inherited the authority signals automatically. A “Best Credit Cards” listicle published on a major business publication’s subdomain could rank for commercial queries that the third party’s own domain could never reach.
The economics were straightforward. The third party paid the publisher monthly for access to the subdomain. The publisher pocketed revenue from a domain section that required no editorial work. The third party earned affiliate commissions from the traffic the high-ranking content captured. Users searching Google for product recommendations got steered toward content that wasn’t really journalism, sitting under publication banners that suggested editorial endorsement.
Forbes Advisor became one of the most visible examples. The Forbes subdomain hosting credit card recommendations, mattress reviews, and similar commercial content ranked for substantial commercial queries despite the content’s tenuous connection to Forbes’ editorial identity. Forbes earned substantial affiliate revenue; the actual content was largely produced by third-party partners with minimal editorial integration.
Google introduced Site Reputation Abuse as a spam category in March 2024, with manual enforcement beginning in May 2024 and algorithmic enforcement expanding through 2025-2026. Forbes Advisor’s coupon directory was completely removed in May 2024, likely in response to enforcement. Forbes Advisor’s broader marketplace operations faced substantial ranking drops in September 2024. Similar patterns played out across dozens of major publishers who had leased authority to third parties.
The enforcement is ongoing and the rules have tightened repeatedly since the initial rollout. What follows is the breakdown of what the policy covers and how the enforcement has evolved. It also covers what brands relying on similar tactics need to know about the current environment.
The policy as Google defined it:
Google’s documentation of Site Reputation Abuse describes the practice. The definition: “publishing third-party pages on a site in an attempt to abuse search rankings by taking advantage of the host site’s ranking signals.”
The components of the violation:
The content is third-party. It’s produced by an entity other than the primary publisher of the host site. The third party may be a content agency, an affiliate marketer, a white-label service provider, or any other external party.
The content is published on a host site whose primary purpose is something other than the type of content being added. A news publication’s primary purpose is journalism; affiliate content about credit cards isn’t journalism.
The primary purpose of publishing the content is to take advantage of the host site’s ranking signals. The third party benefits from inheriting the host’s authority to rank for queries the third party’s own domain couldn’t reach.
The November 2024 update clarified an additional point that closed a major loophole. The text: “no level of publisher involvement in creating third-party content that exploits their site’s rankings on Google mitigates its policy violations.” Before this update, publishers could argue that editorial oversight made the content legitimate. After the update, even substantial editorial involvement doesn’t change the violation if the primary purpose is to exploit ranking signals.
The January 2025 update made the policy language clearer but didn’t substantively change the rules. The policy has been stable since November 2024 with consistent enforcement.
The enforcement timeline:
The trajectory from policy introduction to current enforcement maturity:
March 2024: Site Reputation Abuse policy introduced as part of the March 2024 core algorithm update. Initially manual-action only.
May 2024: Manual enforcement begins. Major publishers receive manual actions through Search Console. Some publishers (Forbes Advisor’s coupon directory) remove entire sections in response.
September 2024: Forbes Advisor’s broader marketplace operations face ranking drops. The enforcement signal becomes visible in SERP changes at scale.
November 2024: Policy updated to specify that first-party oversight doesn’t legitimize third-party content with ranking-exploitation purpose. The update closes the editorial-oversight loophole.
December 2024: FAQs added to address questions from site owners. The clarifications resolve ambiguity about which arrangements are covered.
January 2025: Policy language updated for clarity based on FAQ feedback. Editorial changes; no substantive policy shift.
August 2025: Spam Update introduces algorithmic enforcement at scale. The manual-action phase transitions to algorithmic detection. Sites that hadn’t yet been manually penalized but were operating violation patterns get caught algorithmically.
November 2025: European Commission opens investigation into whether Google’s enforcement breaches Digital Markets Act provisions on self-preferencing. Google defends the policy publicly through Pandu Nayak’s blog post calling the investigation “misguided.”
March 2026: Additional enforcement waves target adjacent patterns. The detection capability extends to evaluate subfolders and subdomains independently from parent domain authority.
The cumulative effect: enforcement has progressed from selective manual actions affecting major publishers to broad algorithmic detection that identifies parasite arrangements across the web. The pattern of arbitrage that was profitable for a decade now produces consistent, automated enforcement.
The detection mechanism:
The algorithmic enforcement that scaled in 2025-2026 uses several specific detection signals.
Section-level independence scoring. Google’s systems can identify when a section of a domain is independent or starkly different from the main content. When detected, the section gets treated as a separate entity and the parent domain’s authority signals don’t apply to it. The detection is described in Google’s own documentation: “sub-sections of websites that differ significantly may be treated as standalone sites.”
Topical divergence analysis. Third-party content whose topic doesn’t align with the host site’s established expertise gets flagged. A medical journal publishing cryptocurrency guides triggers this signal because the topical disconnect is extreme.
Publishing pattern analysis. Abrupt changes in topics, author bylines, writing styles, or publishing frequency that suggest externally supplied content rather than internal editorial production. The pattern analysis identifies operations where a third party started supplying content at a specific time and the supply pattern shows signatures of external origination.
Author authority signals. Articles authored by people without verifiable connection to the host publication, or articles with generic or anonymous bylines, contribute to detection. Legitimate journalism has identifiable authors with verifiable relationships to the publication; parasite content does not.
Link graph anomalies. The backlink patterns to parasite content sections often differ from organic editorial coverage patterns. Concentrated link-building campaigns aimed at specific subsections show patterns that distinguish them from natural editorial linking.
Content quality signatures. Affiliate-driven content optimized for keyword rankings has different writing patterns than editorial journalism. The differences are detectable algorithmically even when the surface presentation tries to mimic editorial standards.
User behavior signals. Sections that generate substantial click-through from search but produce poor on-page engagement (high bounce rates, low time on page, frequent return-to-search behavior) contribute to detection.
The combined signal evaluation makes the detection resistant to most evasion attempts. Publishers who tried to make parasite sections look more editorial could not address all the signals simultaneously.
Why moving content doesn’t help:
A common response from publishers facing enforcement was to move parasite content to different subdirectories, different subdomains, or different sections of the site. The hope was that the new location wouldn’t carry the violation forward.
Google’s documentation addresses this directly. The relevant text: “Moving content to a subdirectory or subdomain within the same site’s domain name: This doesn’t resolve the underlying issue and may be viewed as an attempt to circumvent our spam policy, which may lead to broader actions against a site in Google Search.”
The implication: moving the content within the same domain doesn’t help and can make the situation worse by adding circumvention to the original violation.
What does work, according to Google:
Moving content to another established site that has its own reputation. This resolves the issue for the host site (because the content is no longer abusing its reputation). The receiving site may face its own violation if the third-party arrangement continues, but the original host site is cleared.
A move to a new domain works differently. This is far less likely to be an issue if the new domain has no established reputation that’s being abused. The arrangement is no longer parasite SEO because there’s no reputation to exploit; the new domain has to earn its rankings through normal means.
Complete removal is the cleanest resolution. The host site stops hosting the violating content, the third party finds another arrangement or shifts strategy, and the manual action gets reconsidered.
The pattern: Google’s framework is structured around the relationship between the content and the reputation it’s exploiting. Solutions that maintain the exploitation but try to obscure it fail. Solutions that genuinely end the exploitation succeed.
The expanded scope:
The policy started with the obvious cases (publishers leasing subdomains to third parties for affiliate content). Through 2025-2026, the application has expanded to several adjacent patterns that operate on similar mechanics.
Self-serving “best of” lists. SaaS companies and similar businesses that publish “Best [Category] Tools” lists ranking their own product as #1 without external evidence. The pattern was identified as a manipulation tactic because the company is exploiting its own domain authority to rank biased commercial content as if it were objective comparison.
Affiliate sites without first-hand experience. Sites that summarize Amazon reviews or aggregate manufacturer specifications without demonstrating actual product testing. The “Evidence of Experience” requirement that emerged through 2025 means affiliate content needs original photos, unique data, transparent methodology, and demonstrable first-hand engagement to survive the relevant ranking signals.
Sponsored content sections at scale. Even when sponsored content is disclosed and editorially overseen, the cumulative pattern of substantial sponsored content sections within a publication’s site can trigger site reputation abuse evaluation. The trigger applies when the sponsored sections’ primary purpose is to capture rankings.
Guest post networks operating at scale. Publications that accept volume of guest posts from third parties for the apparent purpose of providing backlinks to those third parties. The pattern fits site reputation abuse mechanics: third-party content exploiting the host site’s authority for ranking benefit.
Coupon and deals subdomains. The specific pattern Forbes Advisor pioneered: a subdomain hosting product coupons, deals roundups, and affiliate-linked deal pages. These have been systematically devalued or removed across major publishers since enforcement began.
White-label content services. Arrangements where a third-party agency produces all the content for a section of a publication, with minimal involvement from the publication’s editorial staff. The November 2024 update explicitly addressed this pattern: editorial oversight doesn’t legitimize the arrangement.
The expansion suggests the policy’s scope is the underlying mechanism (exploitation of host authority for ranking benefit) rather than the specific surface patterns. New tactics that produce the same mechanism get caught even when they don’t look identical to the original parasite SEO patterns.
The EU regulatory dimension:
The November 2025 European Commission investigation introduced a regulatory layer to the enforcement debate.
The EC’s concern: Google’s policy may breach Digital Markets Act provisions on self-preferencing. The argument is that Google demoting publishers’ commercial content while continuing to feature its own commercial offerings (Google Shopping, Google Flights, AI Overviews) could constitute the kind of self-preferencing the DMA prohibits.
Google’s public defense, through Pandu Nayak’s blog post, framed the policy as essential anti-spam work. The argument: parasite SEO degrades search quality for users; the policy levels the playing field for smaller creators competing on merit; the investigation risks rewarding bad actors.
The investigation outcome is still pending as of May 2026. Several scenarios are possible:
Google maintains the policy and the investigation finds no DMA violation. The current enforcement framework continues.
The EC requires modifications to the policy in EU markets. Google might implement region-specific enforcement that’s more lenient in EU than in other markets.
The EC finds the policy to violate DMA and requires substantial changes. The enforcement framework would need to be rewritten for EU compliance, potentially affecting global enforcement as well.
For publishers and SEO practitioners, the uncertainty doesn’t change near-term planning. Enforcement is active globally; the regulatory outcome is months to years away from affecting daily operations. Strategies based on parasite SEO arbitrage remain risky regardless of how the regulatory situation eventually resolves.
The implications for legitimate sponsored content:
The policy’s broad framing has caused concern among publishers about legitimate sponsored content arrangements. The lines between site reputation abuse and acceptable sponsored content aren’t always clear, but Google’s guidance has consistently distinguished between aligned editorial partnerships and authority-rental arrangements:
| What Google has indicated would NOT violate the policy | What does violate the policy |
|---|---|
| <strong>Sponsored content aligned with the host's editorial purpose.</strong> A travel publication's sponsored content about travel products from advertisers in the travel category, with appropriate disclosure. | <strong>Sponsored content sections with topical disconnection.</strong> A medical journal's "Best VPNs" section. The mismatch between host expertise and content category signals authority rental. |
| <strong>Native advertising integrated into editorial style with clear disclosure.</strong> Integration into editorial standards plus disclosure addresses the deception concerns. | <strong>Affiliate content produced primarily for ranking benefit</strong>, with the publication's domain authority being the primary value the third party is paying for. |
| <strong>Industry partnerships producing genuinely valuable content.</strong> A medical journal partnering with a medical equipment manufacturer to produce educational content where the content has genuine educational value for medical professionals. | <strong>White-label content arrangements</strong> where the publication has minimal involvement and the third party uses the publication's authority as a vehicle for ranking content the third party couldn't rank on its own domain. |
| <strong>Affiliate content where the publication has genuine expertise</strong> and the affiliate arrangements extend the publication's existing editorial coverage. A consumer electronics review site earning commissions on reviews it would have written regardless. | <strong>Subdomain or subdirectory arrangements</strong> where a third party gets effectively exclusive control over a section that operates as an independent commercial site under the publication's banner. |
The distinction Google emphasizes: legitimate sponsored content adds value for the publication’s audience and aligns with the publication’s editorial identity. Site reputation abuse arrangements add value primarily for the third party and the publication’s authority signal.
The audit question publishers should ask: does the sponsored or third-party content make sense for our audience and align with our editorial identity? If the content is about topics outside our area of expertise and would be hosted only because we’re getting paid to host it, the arrangement is in the risk zone.
The structural implications:
Site Reputation Abuse enforcement has changed the economics of several previously profitable SEO patterns.
The authority arbitrage business model is closed. Companies that built businesses around leasing subdomain space from authoritative publishers and filling it with commercial content can’t sustain those businesses through current enforcement.
The publishers that had been earning substantial revenue from parasite arrangements face revenue gaps. Forbes Advisor and similar operations need to either rebuild their commercial sections to meet the editorial integration standards or accept reduced revenue from those sections.
The affiliate marketing industry has shifted toward earned authority. Affiliates can’t rent authority from third-party domains; they need to build authority on their own domains. The investment requirements and timelines have changed substantially.
The link building industry has shifted away from parasite SEO placements as a service offering. Guest post networks operating at scale face elevated risk. The services that built their value around placing content on high-authority domains for client benefit need to either change practices or accept the elevated risk profile.
The broader pattern: Google’s enforcement has progressively closed channels where authority could be transferred between unrelated parties for commercial benefit. The closure pushes resources toward channels where brands have to build their own authority directly. The shift is structural; it’s not a temporary enforcement wave that will pass.
For brands building SEO strategy in 2026 and beyond, the implication is that authority is increasingly something that has to be earned on the brand’s own domain through legitimate signals: original content that demonstrates expertise, editorial coverage in independent publications, customer engagement and reviews, technical foundations that support discoverability. The shortcuts that used to substitute for direct authority building are progressively unavailable.
The brands that have adjusted their strategy to focus on building rather than leasing authority are positioned for the current environment. The brands that haven’t adjusted continue running tactics that produce diminishing returns and increasing enforcement risk. The transition is uncomfortable for businesses that built around the previous arbitrage but unavoidable for any sustainable SEO position going forward.
Site reputation abuse enforcement represents one of the largest structural changes to the SEO landscape in recent years. The change is not reversible through tactical adjustment or evasion. The pattern of arbitrage that the policy targets has been closed at the algorithmic infrastructure level. The era when domain authority could be rented for ranking benefit is over; the era when authority has to be earned directly is the current reality of SEO in 2026.