For roughly a decade, one of the most reliable arbitrages in SEO was leasing a subdomain or subfolder from a high-authority publication and filling it with commercial affiliate content. Beginning May 5, 2024, Google started closing that arbitrage with manual actions, and the enforcement has only tightened since. The tactic even has a nickname among practitioners: parasite SEO.
The mechanism was simple. Major news and magazine sites spent decades earning site-wide authority through legitimate journalism, and Google’s ranking systems used domain-level signals when evaluating individual pages on those domains. A third party who rented space on the domain inherited those signals, so a “best credit cards” listicle published on a major publication’s subdomain could rank for lucrative commercial queries that the third party’s own domain could never reach on its own.
The economics followed from there. The third party paid the publisher for access to the section, the publisher collected revenue from real estate that required little editorial work, and the third party earned affiliate commissions from the traffic the high-ranking content captured. Users searching for product recommendations were steered toward content that read like an editorial endorsement but was largely produced by outside partners.
Forbes Advisor became one of the most visible examples. Sections of the Forbes domain hosting credit card recommendations, insurance roundups, and coupon directories ranked for substantial commercial queries despite a tenuous connection to Forbes’ core editorial identity. Reporting from SEO analysts documented entire folders losing visibility once enforcement began, with the coupons directory among the first sections removed. CNN Underscored and WSJ Buy Side were among other publishers whose shopping or recommendations sections lost visibility over the same period. What follows is a breakdown of what the policy covers, how enforcement has evolved, and what brands relying on similar tactics need to know now.
How Google defines the violation #
Google’s spam policies describe site reputation abuse as “a tactic where third-party content is published on a host site mainly because of that host’s already-established ranking signals, which it has earned primarily from its first-party content.” Third-party content, in Google’s framing, is content created by an entity separate from the established host site: a content agency, an affiliate marketer, a white-label service, or any other external party.
Three conditions define the violation. First, the content is third-party in origin. Second, it sits on a host whose primary purpose is something other than the content being added; a news publication’s purpose is journalism, and affiliate content about credit cards is not journalism. Third, the reason for publishing is to take advantage of the host’s ranking signals so the third party can rank for queries its own domain could not reach.
Google is explicit that third-party content alone is not the problem. As the policy puts it, “having third-party content alone isn’t a violation.” The violation turns on intent: the content is there mainly to exploit the host’s earned rankings.
The enforcement timeline #
Google announced the site reputation abuse policy in March 2024, alongside its broader March 2024 core and spam updates, and initially handled it through manual actions rather than algorithmic detection. Manual enforcement began May 5, 2024, with major publishers receiving manual actions through Search Console; some, including Forbes Advisor’s coupon directory, removed entire sections in response.
The most consequential change came on November 19, 2024. Google updated the policy to specify that first-party involvement or editorial oversight does not, on its own, make an exploitative arrangement acceptable. In Google’s words, its evaluation of many cases showed that “no amount of first-party involvement alters the fundamental third-party nature of the content” when the purpose is to exploit the host’s ranking signals. Before this update, publishers could argue that editorial review legitimized the arrangement; after it, oversight alone no longer resolved the violation. On December 6, 2024, Google added FAQs addressing common questions from site owners about redirects, content removal, affiliate content, and what counts as third-party content.
The August 2025 spam update marked the shift from case-by-case manual actions to algorithmic enforcement at scale. Sites operating violation patterns that had not yet drawn a manual action became exposed to automated detection. The cumulative effect: enforcement moved from selective manual actions against a handful of large publishers to broad, systematic detection across the web.
Why sections stopped inheriting site-wide authority #
A related shift makes the crackdown durable. Google has stated that it can identify when a section of a site is “independent or starkly different from the main content of the site” and treat that section as if it were a standalone site, so a sub-section does not get a ranking boost purely from the reputation of the main domain. Google is careful to note that measuring a section independently is not the same as penalizing it; a sub-section evaluated on its own signals may simply stop benefiting from site-wide reputation without having violated any policy. For a rented affiliate section, though, the effect is much the same as enforcement: the borrowed authority that made the arbitrage work is no longer transferred.
Why moving the content rarely helps #
A common response from publishers facing enforcement was to relocate the content to a different subfolder, a different subdomain, or another section of the same site, hoping the new location would not carry the problem forward. Google’s guidance addresses this through its policy-circumvention rules, which treat “using existing or creating new subdomains, subdirectories, or sites with the intention of continuing to violate our policies” as circumvention. Moving the content within the same site tends not to resolve the underlying issue and may be read as an attempt to evade the policy, which can invite broader action.
What genuinely ends the exploitation is what works. Complete removal is the cleanest resolution: the host stops hosting the violating content and the manual action can be reconsidered. Moving the arrangement to a domain with no established reputation to abuse also changes the picture, because there is no borrowed authority left to exploit and the new domain has to earn its rankings normally. Solutions that maintain the exploitation but try to obscure it fail; solutions that genuinely end it succeed.
The scope has widened beyond subdomains #
The policy started with the obvious cases, publishers leasing sections to third parties for affiliate content, but the underlying mechanism of exploiting a host’s authority for ranking benefit is broader than any single surface pattern. Several adjacent arrangements now draw scrutiny under the same logic.
Self-serving “best of” lists tend to attract attention when a company ranks its own product at the top of a supposedly objective comparison, using its own domain authority to float biased commercial content. Affiliate content that summarizes reviews or aggregates specifications without any first-hand testing sits in the same risk zone, since it leans on the host’s authority rather than demonstrated experience. Sponsored-content sections at scale, guest-post networks that exist mainly to pass authority to third parties, coupon and deals subdomains, and white-label arrangements where an outside agency produces an entire section with minimal editorial involvement all fit the mechanics the November 2024 update was written to cover.
The practical audit question for any publisher: does this third-party or sponsored content make sense for our audience and align with our editorial identity, or would it exist only because someone is paying us to host it? Content in the second category is in the risk zone regardless of how it is dressed up.
Legitimate sponsored content still has a lane #
The broad framing worried publishers with genuine sponsored partnerships, and the line is not always crisp. Google’s guidance has consistently distinguished aligned editorial partnerships from authority-rental arrangements. Sponsored content that fits the host’s editorial purpose, such as a travel publication running disclosed sponsored pieces about travel products, is treated differently from a section whose topic is disconnected from the host’s expertise, like a medical journal hosting a “best VPNs” roundup. Native advertising integrated into editorial standards with clear disclosure addresses the deception concern; affiliate content produced primarily to capture rankings, where the domain’s authority is the main thing the third party is paying for, does not. The distinction Google emphasizes is who the arrangement serves: legitimate sponsored content adds value for the publication’s own audience, while site reputation abuse adds value primarily for the third party, with the host’s authority signal as the vehicle.
A regulatory dimension in Europe #
On November 13, 2025, the European Commission opened a formal investigation into whether Google’s enforcement breaches the Digital Markets Act. The Commission’s concern is that demoting publishers’ commercial content, while Google continues to feature its own commercial surfaces, could amount to the kind of self-preferencing the DMA restricts. Google’s chief scientist for search, Pandu Nayak, publicly defended the policy as essential anti-spam work and characterized the probe as misguided, noting that a German court had earlier upheld similar measures as reasonable and consistently applied. Penalties under the DMA can reach up to 10% of a company’s global annual turnover, though any outcome is likely months to years away.
For publishers and practitioners, the regulatory uncertainty does not change near-term planning. Enforcement is active globally, and strategies built on parasite SEO arbitrage remain risky regardless of how the European case resolves.
What this means for SEO strategy #
Site reputation abuse enforcement has changed the economics of several previously profitable patterns. The authority-arbitrage business model no longer survives current enforcement, and publishers that earned real revenue from rented sections now choose between rebuilding them to genuine editorial standards or accepting reduced income. Affiliate operators can no longer rent authority from third-party domains and have to build it on their own, which changes both the investment required and the timeline. Link-building services that relied on placements on high-authority domains face an elevated risk profile.
The broader trajectory is that Google has progressively closed the channels where authority could be transferred between unrelated parties for commercial benefit. That pushes resources toward the one channel that still works: authority earned directly on a brand’s own domain, through original content that demonstrates expertise, independent editorial coverage, genuine customer engagement, and technical foundations that support discoverability. The shift looks structural rather than like a temporary enforcement wave, and for any brand building an SEO position in 2026, the practical reality is that authority now has to be earned rather than rented.