0day Blackhat Trick - Bitsquatting

[ForTheLegacys]

Forget it.

I own 2 domain names with 5 letters.
Something like Vtech .com and Vteck .com. one redirecting to the other.

binary bitsquatting a 5 letter domain would be WAY TOO EXPENSIVE............................... unless:

I get any bitsquatting that is most plausible, and redirect it irrelevantly to my domain?

 

[itz_styx]

Forget it.

I own 2 domain names with 5 letters.
Something like Vtech .com and Vteck .com. one redirecting to the other.

binary bitsquatting a 5 letter domain would be WAY TOO EXPENSIVE............................... unless:

I get any bitsquatting that is most plausible, and redirect it irrelevantly to my domain?

its not expensive at all, just the domain costs for a few domains say 5. i even did it with 1 only and it got traffic. the key is to pick some very popular domain that has millions or even billions of hits. like in the example fbcdn.

of course with your random unknown domain vtech .com it wont work... its about popular domains.

 

[blackh4t]

Forget it.

I own 2 domain names with 5 letters.
Something like Vtech .com and Vteck .com. one redirecting to the other.

binary bitsquatting a 5 letter domain would be WAY TOO EXPENSIVE............................... unless:

I get any bitsquatting that is most plausible, and redirect it irrelevantly to my domain?

I think u not understand bitsquatting. Have u even try? Why say "forget it" when clearly not understand? I not understand what should be expensive or u can not afford a few domain lol? Currently doing it and work so please not be arrogant and make claim without even try or understand!

 

[Lie]

wow

 

[ForTheLegacys]

I think u not understand bitsquatting. Have u even try? Why say "forget it" when clearly not understand? I not understand what should be expensive or u can not afford a few domain lol? Currently doing it and work so please not be arrogant and make claim without even try or understand!

Yes. You are right, I did not understand. I thought I had to bit squat my OWN domain. and since I operate a 30 year old software business with a 5 letter domain. Actually I have SOMETHING like vtech but I also bought SOMETHING like vtecK just to protect the SOUND of my brand incase people type it how they THINK it's spelled. It was a cheap addition, for 1000$ but I only get 12 visits a year from that 1000$.

I thought I had to bit squat MY DOMAIN VARIATIONS. Which, for 5 letter domains could get VERY EXPENSIVE.

Now, feel free to take back your aggressive judgement and troublemaking attitude.

Were are here to learn, so if you have more wisdom than someone else, why would it give you pleasure dominating this way?

It's just like you're a 8 year old kid laughing at a slower, weaker 5 year old, instead, take their hand and help them out.

Your attitude leads a bitter, lonely, toxic, self sabotaging, pessimistic life.

 

[ForTheLegacys]

its not expensive at all, just the domain costs for a few domains say 5. i even did it with 1 only and it got traffic. the key is to pick some very popular domain that has millions or even billions of hits. like in the example fbcdn.

of course with your random unknown domain vtech .com it wont work... its about popular domains.

OH...... Now I got 55 000 ideas! Thanks

 

[itz_styx]

OH...... Now I got 55 000 ideas! Thanks

Cool, always good if i can give people ideas to try something new thinking outside of the box is key in IM.

 

[Deleted member 1816462]

great info thanks for sharing,
the website you decide to bitsquat would need to be a very high traffic site!

 

[blackh4t]

Yes. You are right, I did not understand. I thought I had to bit squat my OWN domain. and since I operate a 30 year old software business with a 5 letter domain. Actually I have SOMETHING like vtech but I also bought SOMETHING like vtecK just to protect the SOUND of my brand incase people type it how they THINK it's spelled. It was a cheap addition, for 1000$ but I only get 12 visits a year from that 1000$.

I thought I had to bit squat MY DOMAIN VARIATIONS. Which, for 5 letter domains could get VERY EXPENSIVE.

Now, feel free to take back your aggressive judgement and troublemaking attitude.

Were are here to learn, so if you have more wisdom than someone else, why would it give you pleasure dominating this way?

It's just like you're a 8 year old kid laughing at a slower, weaker 5 year old, instead, take their hand and help them out.

Your attitude leads a bitter, lonely, toxic, self sabotaging, pessimistic life.

I not be aggressive just say that what u say not true. U start saying "forget it" without not understanding this method. So now u do and good for u, all i say not judge if u not try and not understand.

 

[leechesBleechin]

great info thanks for sharing,
the website you decide to bitsquat would need to be a very high traffic site!

If you did it to google you could expect over 200,000,000 bit flip hits a day give or take a few million Edit: To clarify thats if all flips flipped to your domain, which is impossible

 

[blackh4t]

If you did it to google you could expect over 200,000,000 bit flip hits a day give or take a few million Edit: To clarify thats if all flips flipped to your domain, which is impossible

Can register many flip domain but for google similar likely taken already )

 

[social_newbie]

Hi OP, really appreciated for sharing the trick

I just tried but seems no luck , at least no traffic at first 3 hours

So I tried xvideos.com

Original bit codes: 01111000 01110110 01101001 01100100 01100101 01101111 01110011
New bit codes: 01111000 01110100 01101001 01100100 01100101 01101111 01110011
Changed bit in character index 1: position 6

Original word: xvideos
Modified word: xtideos

With the new xtideos.com, I got now traffic at all

I did something wrong?

Or should I wait for days?

 

[maxeem]

That's a great share BUT I think you can get better results from misspelling a domain rather than changing the string value.

For example: xvideos -> xtideos (string changed) -> xbideos (misspelling).

I think choosing letters close one to another could bring more results that changing the entire string, which could result in a letter on the opposite part of the keyboard.

 

[social_newbie]

That's a great share BUT I think you can get better results from misspelling a domain rather than changing the string value.

For example: xvideos -> xtideos (string changed) -> xbideos (misspelling).

I think choosing letters close one to another could bring more results that changing the entire string, which could result in a letter on the opposite part of the keyboard.

Thanks, my understanding is these are 2 different topics, what you refer to is that the mistake made by human being, the OP was acturally mean that computers can make mistake too

 

[maxeem]

Thanks, my understanding is these are 2 different topics, what you refer to is that the mistake made by human being, the OP was acturally mean that computers can make mistake too

What I was trying to say is that mistakes made by human are more frequent than those made by computers, and thus can bring more traffic.

 

[itz_styx]

Hi OP, really appreciated for sharing the trick

I just tried but seems no luck , at least no traffic at first 3 hours

So I tried xvideos.com

Original bit codes: 01111000 01110110 01101001 01100100 01100101 01101111 01110011
New bit codes: 01111000 01110100 01101001 01100100 01100101 01101111 01110011
Changed bit in character index 1: position 6

Original word: xvideos
Modified word: xtideos

With the new xtideos.com, I got now traffic at all

I did something wrong?

Or should I wait for days?

it depends on the domain, the shorter the better and using more than just 1 domain with a flipped char. it can take a while to see traffic, since its random how bit flips happen, so 3 hours isnt much

 

[TAXI]

Can someone make a prompt for ChatGPT? in which I can change the domain and generate a list

 

[social_newbie]

it depends on the domain, the shorter the better and using more than just 1 domain with a flipped char. it can take a while to see traffic, since its random how bit flips happen, so 3 hours isnt much

Thanks again

Can someone make a prompt for ChatGPT? in which I can change the domain and generate a list

attached s the python script I used

 

[darksoultrip]

I bought a bitflip domain based on this thread.

I used a GPT-4O module I have for blackhat cyber sec related things to verify it's an authentic 1 bit flip.

https://chatgpt.com/g/g-dOVbwHZoF-ceh-certified-ethical-hacker

(Requires a paid subscription to OpenAI ChatGPT, not my module just sharing)

Set it up to redirect to my niche blog last night.

I'll report back if I see traffic coming from this in my adsense or analytics.

The domain I'm bit flipping has 3.5M visitors per month, it's the top in my niche.

@itz_styx only shares things that are highly valuable, so I'm giving this a try!

I did look at higher traffic sites but it was difficult to find an authentic 1 bit flip.

 

[social_newbie]

No luck for me yet