Darker than BlackHat : What is this method?

The members who are saying that the webiste is hacked they are right . I can use this method myself still need to figure / find the scritp that mass inject the code into the websites
 
they're using sophisticated cloakers and domains from other countries that google doesn't have access too. you can find russian domains and french and other stuff like that if you have connections with hackers haha

The website is hacked mate

The members who are saying that the webiste is hacked they are right . I can use this method myself still need to figure / find the scritp that mass inject the code into the websites


We are all open to any opinion and idea about this method

But do you guys have any proof? Or at least some clue about the hacking activity?

I dont mean to discuss about hack method because it is not allowed in here, but to make sure we are not tryng something stupid and cost your saving for voodoo shit

The proof from mine:

Most of their domains are couples days/months old. And they were registered at the same date or have 1-2 days difference. This is not something that hacker would do. They buy domains?
 
Last edited:
Most of their domains are couples days/months old. And they were registered at the same date or have 1-2 days difference. This is not something that hacker would do. They buy domains?
maybe they hacked godaddy to get unlimited domains
[troll mode off]
 
We are all open to any opinion and idea about this method

But do you guys have any proof? Or at least some clue about the hacking activity?

I dont mean to discuss about hack method because it is not allowed in here, but to make sure we are not tryng something stupid and cost your saving for voodoo shit

The proof from mine:

Most of their domains are couples days/months old. And they were registered at the same date or have 1-2 days difference. This is not something that hacker would do. They buy domains?
These sites are not hacked. Those are properly registered just before pumping the content. There were no previous established sites on these domains. A hacked site is very different from these sites.

For example a hckd site is the Multistate Tax Commission website (MTC.GOV) DO NOT VISIT and they are currently trying to fix it. You will find the example hckd pages still in Google cache.
 
We are all open to any opinion and idea about this method

But do you guys have any proof? Or at least some clue about the hacking activity?

I dont mean to discuss about hack method because it is not allowed in here, but to make sure we are not tryng something stupid and cost your saving for voodoo shit

The proof from mine:

Most of their domains are couples days/months old. And they were registered at the same date or have 1-2 days difference. This is not something that hacker would do. They buy domains?
Didn't know that these are newly registered domains.
But I saw the same content on many hacked websites with millions of results indexed on google with cloaking and redirecting to affiliate/AliExpress/ogads/cpabuild etc.
I had no idea about this until one friend asked for help on his WordPress website...when I found one directory with all the files, including Cloaker, sitemaps, etc.
I also suspect that they are using these websites to index legit links on google including a sitemap from site X to a robots.txt file in the hacked website.
 
Didn't know that these are newly registered domains.
But I saw the same content on many hacked websites with millions of results indexed on google with cloaking and redirecting to affiliate/AliExpress/ogads/cpabuild etc.
I had no idea about this until one friend asked for help on his WordPress website...when I found one directory with all the files, including Cloaker, sitemaps, etc.
I also suspect that they are using these websites to index legit links on google including a sitemap from site X to a robots.txt file in the hacked website.

Yes, i have seen that kind of website. But it is easy to find the proof. Domain registered date, homepage, etc.
 
I'm a programmer. But what about the upfront costs like domains and hosting?

Hosting doesn't cost much, about 10 servers with "big disk" are enough (although, I'll go with 30-50, just in case someone start flooding), $10-$20k for 1000s domains.

And like other said, you can do better than them hiding all your backlinks, just include a firewall.conf in all your nginx, blocking bad user agents and referrers
 
What do you mean copy serp into webpage? Scrape all the result with its content? Thats smart
Yeah, basicly. scrape all h* and p tags of the top 10 SERPs - if one blocks, ignore em, you got enough.
You can just shuffle em randomly or even create dirty spintaxes from it using a thesaurus. With spintaxes, you can basicly create endless unique content - even though, it's not human readable.
 
Hosting doesn't cost much, about 10 servers with "big disk" are enough (although, I'll go with 30-50, just in case someone start flooding), $10-$20k for 1000s domains.
The disks aren't even the problem - you can build a centerlized dynamic setup. One server hosts 30k of my domains without problems - the only problem is that the search engines tend to ddos it, when they crawl hard =D
the whole setup needs about 200GB on disk. I recommence saving the data (scraped texts, sitemaps and the big stuff) compressed, wich saves space and db bandwith. zstd works great for me.
But as said, the traffic is a problem - you will need to block unwanted bots like crazy, you will need a good amount of ram and some cores, to handle all the stuff and a 10 Gbit/s port helps as well.
 
The disks aren't even the problem - you can build a centerlized dynamic setup. One server hosts 30k of my domains without problems - the only problem is that the search engines tend to ddos it, when they crawl hard =D
the whole setup needs about 200GB on disk. I recommence saving the data (scraped texts, sitemaps and the big stuff) compressed, wich saves space and db bandwith. zstd works great for me.
But as said, the traffic is a problem - you will need to block unwanted bots like crazy, you will need a good amount of ram and some cores, to handle all the stuff and a 10 Gbit/s port helps as well.
30k domains? Thats insane. Are you the suspect of this method?

Kidding

Yes, server infrastructure is the next challenge to host this kind of domains.

1669188920740.png

From the ip class is quite clear they host most of them inside one server
 
Back
Top