Service Baiting: The Toxic Backlinks You Did Not Buy

Toxic backlinks are links pointing at your site that you never asked for and cannot control. Most sites pick up a few. Some sites pick up hundreds in a fortnight, all at once, from domains they have never heard of.

Service baiting is one of the reasons why. A link vendor writes a glowing review of itself and puts a real business’s name in it. It then publishes that review across hundreds of throwaway websites. The review text becomes the link. The business named in it never agreed to anything and never gets told.

The reason is simple. A five-star review naming a site that already ranks looks like proof the service works. You become the evidence in someone else’s sales pitch.

This article covers what that looks like and why almost none of it hurts you. It also gives you four checks that tell you when a disavow is warranted. We use our own profile as the example, because a vendor did this to us in April 2026.

What a PBN is, and why it matters here

A private blog network is a group of websites built for one purpose: selling links. The owner buys up domains, fills them with generated articles, and rents out the links pointing off them. Nobody reads these sites. Their only job is to look like websites to a search engine.

Google has treated PBN links as link spam for more than a decade. Sites that buy them risk a manual action, and the networks themselves get de-indexed in batches. That is the real cost, and it lands on the buyer rather than the vendor.

It also explains the shape of the spam in this article. A vendor with 5,000 disposable domains can publish anything it likes, anywhere it likes. Including a review with your name in it.

A review we never wrote

In April 2026 a vendor called SEOExpress.org published this across 225 websites, with our domain in it:

“Before discovering SEOExpress.org, hautelab.agency barely registered on search engines with minimal traffic. Now? My organic visits have surged by over 300%, thanks to their smart keyword research and on-page optimization strategies that didn’t cost a fortune.”

We have never been their customer. We did not write it, commission it or approve it. We found it the way you would find yours, by opening our own backlink report. Every link in that campaign has now been disavowed, and the file went to Google on 8 August 2026.

What SEOExpress.org is

We checked their site directly on 8 August 2026 rather than going on reputation.

They sell PBN links from what they call a 5,000-site network, plus guest posts across 350 sites. A hundred PBN links costs $300. Five hundred costs $2,000. Their headline reads “PBN Links That Index. Rank. Dominate.”

There is no company registration on the site, no address and no named people. Contact is Telegram and WhatsApp.

What it looks like on our own profile

Two waves hit us four months apart, from two different vendors.

Anchor text	Referring domains	Dofollow links	First seen
“Before discovering SEOExpress.org, hautelab.agency barely registered…”	225	0	18 Apr 2026
“There was a time when nobody could find wearehautelab.com online…”	33	0	18 Apr 2026
“Everything contactora.co.uk needs: premium guest posts, contextual backlinks…”	41	0	18 Jun 2026
“Rank hautelab.agency higher with guest posts and backlinks…”	37	0	19 Jun 2026
“TELEGRAM @SEO_ANOMALY – SEO BACKLINKS, PBN, TRAFFIC BOOST”	18	0	23 Jun 2026
hautelab.agency (our actual brand name)	17	1	24 Jan 2026

Ahrefs, 8 August 2026. Contactora is ours as well, an earlier brand we folded into HauteLab. The second vendor swept it up with everything else.

The largest anchor pointing at our site is a review of a company we have never paid. Our own brand name sits on 17 domains. The fake review outweighs it by more than 13 to one.

Our referring domains went from 32 in March to 511 in August. We published nothing and pitched nobody in that window.

The pages themselves are copy-paste jobs. Five of them sit on five unrelated domains with the same title and the same URL slug. Only the business being praised changes.

The detail that changes everything

Look at the dofollow column again. Every row is zero.

225 referring domains. 227 individual links. Not one of them passes any authority at all.

That is deliberate. A vendor gives its own advertising away for nothing, so it tags it nofollow. The dofollow links are the product, and those go to people who have paid.

Which means a profile that looks catastrophic in a screenshot can be completely inert. If you want the fundamentals first, we answer why are backlinks important for SEO in a separate piece.

Why this is not a negative SEO attack

A negative SEO attack is built to damage a specific target. Service baiting is built to sell a product, and the site named in it is incidental.

Four things told us which one we had. They will tell you the same.

• The anchors are marketing copy, not keywords. Nobody attacking your rankings points 225 domains at you using their own sales pitch. An attacker uses your money terms.
• The same template names unrelated businesses. That identical review turned up on other domains within days, with the name swapped. Ours was one entry on a production line.
• It hit our whole group at once. Both our brands and two unrelated domains were named in the same fortnight. An attacker aiming at our rankings has no reason to do that.
• The links are scattergun. One link per throwaway domain, across hundreds of properties with no traffic and no readers.

Real attacks do happen in this sector, and they look nothing like this. We have covered recovering from a negative SEO attack separately, along with the growing problem of false DMCA notices.

The four checks that separate noise from a problem

Run these in order. They take about ten minutes.

1. Read the anchor text before you count anything. Vendor sales copy or a Telegram handle means advertising. Your own commercial keywords mean pay attention.
2. Check dofollow, not volume. Three hundred nofollow links from dead domains are noise. Thirty dofollow links with exact-match money anchors are a different conversation.
3. Watch rankings, not Domain Rating. DR moves with the whole index, and with other people’s spam. Your positions on the terms that pay you are the signal that counts.
4. Look at the shape. One link per domain across hundreds of properties is a spray. Many links onto one commercial page is targeting.

If the first two come back clean, nothing is on fire. Most of what frightens people in a backlink report is exactly this.

When to disavow, and when to leave it alone

Our threshold is deliberately conservative, and we still disavowed.

Every one of the 545 live referring domains across our two brands was classified by hand. 486 went into the file. 47 were allowlisted as clients, partners, publications and our own group. Twelve were left out and flagged for review, because we were not certain enough to remove them.

Three rules we work to:

• Disavow at domain level, not URL level. These are whole-domain operations. They will publish another page tomorrow.
• Never disavow on low traffic alone. Small legitimate sites, HARO wins and genuine placements all look thin in a spreadsheet. Losing one of those costs more than leaving ten spam domains in place.
• Keep a written do-not-disavow list. Ours runs to 47 entries, so nobody re-adds them in six months.

Pattern matters as much as domain. The vendor anchor templates are in our criteria now, because domains change every week and the copy does not. The full test we apply to any link is in our link quality checklist.

One more thing. Re-check quarterly. Our two waves arrived four months apart, from unrelated vendors. The newest spam domain landed the night before we submitted the file.

For the record: HauteLab and SEOExpress.org

HauteLab has never been a customer of SEOExpress.org. We have never bought links from them, and we do not buy links from PBN vendors. We never commissioned the pages that name us, and we never approved the review published in our name.

We published this because anyone running our domain through Ahrefs sees a wall of spam naming an SEO vendor. We’d rather you read our account of it than draw your own conclusion.

That cuts both ways. A testimonial anchor naming a domain is not evidence that the domain bought anything. We nearly made that mistake about a competitor, until the identical template appeared on our own profile. Nothing had been bought there either.

So judge an agency on its clients’ rankings and on what it tells you. Do not judge it on a link report it does not control. The warning signs that actually matter are in how to spot a bad SEO agency.

If you are weighing up a link vendor right now

Plenty of people reach this page while researching a vendor, not because a vendor named them. So here is the straight answer.

Links still matter, and you do need them. What you do not need is 500 of them from a network that sells the same 5,000 domains to everybody. Your competitors are on those domains too. That is the version that puts a manual action on the table, and the trajectory above is what it looks like when it goes wrong.

The alternative is slower, and it is not cheaper. It means placements on sites with actual readers, in this sector. The link is there because the page earns it. Fewer links, on better sites, that nobody has to disavow in a year.

That is the work we do. In-house, in the adult sector, for over ten years.

Start with your own profile before you spend anything. Send it over, and we’ll tell you which of it is advertising and which of it needs a disavow. If the honest answer is that you should do nothing, we’ll tell you that too.