Is Someone Sabotaging Your Google Rankings? A Naples SEO Agency's Story

By Jamie Kloncz, Founder & CEO, SEO Elite Agency — Naples, FL

If your business shows up in Google searches but nobody seems to be clicking — this article is for you.

Over the past 12 months, our Naples-based SEO agency has been the target of a sophisticated cyberattack designed to suppress our Google search rankings. We're sharing our story publicly because we believe this same attack may be happening to other local businesses in Southwest Florida right now — and most of them have no idea.

What Happened to Us

Google Search Console is a tool that shows business owners how their website performs in Google search results. It tracks impressions (how many times your site appeared in search results) and clicks (how many people actually clicked through to your site).

About 12 months ago we noticed something alarming in our data. Our impressions were extremely high — thousands of times our site was appearing in search results — but our click-through rate had dropped to nearly zero. On some days we recorded over 3,900 impressions with only 2 clicks. That's a 0.05% click-through rate. The industry average for a well-optimized site in our position should be 10-15%.

At first we thought it was a content issue. We updated our pages, improved our meta descriptions, and monitored closely. Nothing changed.

Then we dug deeper into our server logs and found the truth.

The Attack — What It Is and How It Works

Automated bots — software programs designed to mimic human behavior — were visiting our website thousands of times per day, pretending to come from Google search results, and then immediately leaving without engaging with any content.

Google's ranking algorithm pays close attention to click-through rate. When Google sees that your site appears in search results but nobody clicks, it interprets that as a signal that your content isn't relevant or trustworthy. Over time this suppresses your rankings — pushing you further down the search results where real customers can't find you.

This type of attack is called CTR manipulation — artificially inflating impressions while suppressing genuine clicks to damage a competitor's search rankings.

The bots we identified were:

• Coming from datacenter servers in Finland, Netherlands, Denmark, and Asia
• Spoofing Google as the referrer to fake organic search clicks
• Using a special parameter in the URL to bypass website caching
• Hitting our pages and leaving in under a second with zero engagement
• Operating in coordinated pairs — two different bots hitting the same page within seconds of each other

When we analyzed our Google Analytics data we found 51 users from Denmark alone generating 153 events with zero engaged sessions and zero engagement time. Real visitors from Denmark don't behave that way.

Who Does This and Why

This type of attack is available for purchase on grey market SEO forums for a few hundred dollars per month. A competitor — potentially right here in Southwest Florida — can hire a service to run this attack against any local business with a website.

The goal is simple: suppress a competitor's Google rankings during the time it takes to build their own. It's the digital equivalent of slashing someone's tires before a race.

We believe based on the evidence that this attack was specifically targeting our branded search queries — people searching for our agency by name — during peak business hours in the Naples market.

What We Did About It

Once we identified the attack we took immediate action.

We built a multi-layer defense system on our website that detects bot behavior and blocks it automatically. The system logs every attack attempt with timestamps, IP addresses, and behavioral signatures. We now receive real-time email alerts every time a bot is blocked.

We deployed enterprise-grade security through Cloudflare — the same infrastructure used by major corporations — to block attack traffic before it even reaches our website. We identified and blocked entire server networks being used in the attack.

We filed formal abuse reports with the hosting providers whose infrastructure was being used to attack us, including Hetzner in Finland.

We notified Google Search Central and tagged Google's official Search Liaison on social media with our documented evidence.

We have preserved all evidence including server logs, Google Search Console data, Google Analytics exports, and bot detection logs with precise timestamps.

What This Means for Naples Businesses

You don't have to be an SEO agency to be targeted by this type of attack. Any local business that competes for Google search rankings is potentially vulnerable — restaurants, law firms, medical practices, home service companies, real estate agencies, and more.

The attack is particularly damaging because it's invisible. There's no obvious sign anything is wrong. Your website looks fine. Your Google rankings appear in search results. But behind the scenes your click-through rate is being suppressed and your rankings are slowly declining.

Signs your business may be under a similar attack:

• High impression counts in Google Search Console with unusually low click-through rates
• Google Analytics showing sessions from unexpected countries with zero engagement time
• Rankings declining despite consistent content and SEO efforts
• Impression spikes during specific hours of the day

How to Protect Your Business

If you suspect your business may be experiencing something similar here are the immediate steps to take:

Check your Google Search Console data. Look at your click-through rate over the past 12 months. If impressions are high but CTR is below 1% for queries where you rank on page one, investigate further.

Check your Google Analytics. Look for sessions from countries you don't serve with zero engagement time and zero engaged sessions. This is a red flag.

Contact a qualified SEO professional. This type of attack requires technical expertise to identify and defend against. Not all SEO agencies are equipped to handle it.

Document everything. If you find suspicious patterns screenshot your data immediately. Timestamps and data exports are critical evidence.

We're Here to Help

SEO Elite Agency is Naples' trusted local SEO partner. We've spent the past 12 months not only experiencing this attack firsthand but building the expertise to detect, document, and defend against it.

If you're a Naples or Southwest Florida business owner concerned about your Google search performance we offer a free SEO audit that includes a review of your Search Console data for signs of manipulation.

We believe the local business community deserves to know this threat exists. Protecting Naples businesses from unfair competitive practices is part of our mission.

Contact us: SEO Elite Agency hello@seoeliteagency.com seoeliteagency.com Naples, Florida

Jamie Kloncz is the Founder and CEO of SEO Elite Agency, Naples Florida's most trusted local SEO company. SEO Elite Agency helps Southwest Florida businesses rank higher in Google search and grow their revenue through ethical, results-driven SEO strategies.