Question investigating Negative SEO

[CliffAuerswald]

This post is deleted!

[Highland]

I wouldn't disavow links like that right off the bat. Remember, it takes a constant negative flow to affect your site. Disavow is for when you have a manual penalty. In the meantime, Penguin will likely devalue these links anyways.

If you still want to disavow, you can use
domain:theirdomain.com
That will disavow any links from that site.

[irvingw]

Using the disavow on the main domain disavows all internal pages on that domain so do that.

Contact the owner(s) and ask them if they know they've been hacked. They are all most likely the same owner under one hosting account and were all compromised, the ones i looked at were all the same template.

If you can't get a hold of the owner you can track down his hosting company and tell them the issue and they should assist.

These are no one or two page sites so u need to take care of it

28,000 pages indexed

https://www.google.com/#output=search&sclient=psy-ab&q=site:http%3A%2F%2Fkeepyourlovedone.com&oq=site:http%3A%2F%2Fkeepyourlovedone.com&gs_l=hp.3..0i10j0l3.354.1441.0.1577.6.6.0.0.0.0.331.1454.2-4j1.5.0...0.0...1c.1.9.psy-ab.mWG1-PEePrs&pbx=1&bav=on.2,or.r_cp.r_qf.&bvm=bv.45373924,d.bmk&fp=65491dd349fcebae&biw=1920&bih=910

[irvingw]

I agree. All of these sites can be scrubbed because it's the same owner it looks like. Write him a email telling him his sites have been hacked and it should get his/her attention and you can get them all taken down at once. If your site has not been penalized from it there is no need to bring attention to yourself.

I'm not sure how to track down the hacker which was one of your questions. You need to keep an eye out though now that you know you are under attack.

[CliffAuerswald]

Really appreciate both your feedback! I was thinking it was a competitor but maybe it's just spam or hacking. Reaching out to Mr. Romance now

[irvingw]

Well hackers hack so that they can spam links as a paid service for competitors wanting to do negative SEO. So if a site has been hacked and your links have been added it's most likely malicious.

Do you see this across other domains or just Mr romances' sites so far?

[CliffAuerswald]

Fairly large BL profile since '07 so there's always some I don't recognize but the "recent links" in GWT will help me monitor this now. Thanks so much, if they keep coming from new domains I'll definitely have to get more serious finding the cause.