Darker than BlackHat : What is this method?

I've seen this exact thing on a hacked website so it's possible. Completely identical in everything the OP described.

Well, if those domains were hacked, the ip class and registered date of the domains would be somewhat different or random

The fact is they almost identical or have a pattern
 
You are looking at cloudflare server :D

yes, but the nameservers of the cloudflare are same for each .fr , .it, .us domain.

I tried create 2 different cloudflare account, they gave me 2 different cloudflare nameservers for each created account

This is also a footprint for one owner, they are hosted under one cloudflare account

1669190296167.png
1669190366772.png
1669190431678.png

Same registered date, same domain registrar, and same cloudflare nameserver. I dont think you would find this pattern if they were hacked
 
Last edited:
It really doesnt matter if you can bank for couple weeks

exactly. they are obviously spamming hard. After receiving the payment, It doesn't matter whether they are banned or not. they do it many times. How long they can last is unknown.
 
Hosting doesn't cost much, about 10 servers with "big disk" are enough (although, I'll go with 30-50, just in case someone start flooding), $10-$20k for 1000s domains.

And like other said, you can do better than them hiding all your backlinks, just include a firewall.conf in all your nginx, blocking bad user agents and referrers
Well, you definitely sound too clever for such newbie account. It's exactly that. You will need 10$/domain + the hosting cost .. so, you need to risk 10-20K to pull something like this off. This is the only sole challenge in this method. The Money!

The disks aren't even the problem - you can build a centerlized dynamic setup. One server hosts 30k of my domains without problems - the only problem is that the search engines tend to ddos it, when they crawl hard =D
the whole setup needs about 200GB on disk. I recommence saving the data (scraped texts, sitemaps and the big stuff) compressed, wich saves space and db bandwith. zstd works great for me.
But as said, the traffic is a problem - you will need to block unwanted bots like crazy, you will need a good amount of ram and some cores, to handle all the stuff and a 10 Gbit/s port helps as well.
Only allow google bots and block everything else. This is the easiest part.

AND FOR GOD SAKE! Stop with hacked, it's like when anyone tries to push this thread up, someone else comes and pi** in it! I do hack for a living, yes, spammy seo can be in hacked websites but 10000 miles away from what is happening here.
 
Well, you definitly sound clever for a noob. It's exactly that. You will need 10$/domain + the hosting cost .. so, you need to risk 10-20K to pull something like this off. This is the only sole challenge in this method. The Money!

Only allow google bots and block everything else. This is the easiest part.
Bing and it's "relative" Search Engines like DuckDuckGo are even more important ;)
And of course, I'm cloaking like hell, but you can't avoid bots with manipulated user agent and Proxies. I'm collecting IPs and blocking those that are pretty sure bots automated.

But as said - when google and bing alone start crawling some thousend domains á 500k pages, this can quickly get dirty and hurt the DB or the API - the webserver isn't the problem most of the times. But it's doable with good hardware and one server.
 
Bing and it's "relative" Search Engines like DuckDuckGo are even more important ;)
And of course, I'm cloaking like hell, but you can't avoid bots with manipulated user agent and Proxies. I'm collecting IPs and blocking those that are pretty sure bots automated.

But as said - when google and bing alone start crawling some thousend domains á 500k pages, this can quickly get dirty and hurt the DB or the API - the webserver isn't the problem most of the times. But it's doable with good hardware and one server.
TBH, for such method, I would exclude anything except googlebot and their search engine visitors. And I believe this is what they are doing here. Controlling who gets in is always easier and more efficient than blocking who shouldn't if you get what I mean.
 
TBH, for such method, I would exclude anything except googlebot and their search engine visitors. And I believe this is what they are doing here. Controlling who gets in is always easier and more efficient than blocking who shouldn't if you get what I mean.

I wonder why he didnt block 3rd party bot such semrush or ahref? Is he showing off? :D
 
I wonder why he didnt block 3rd party bot such semrush or ahref? Is he showing off? :D
Not at all, everyone who have ever tried to block bots knows that ahrefs and semrush visits you as googlebot. And this is why everyone here could see their content although they are cloaking it. And this is why I said at first, they could have done better job at cloaking.
 
I would exclude anything except googlebot and their search engine visitors.
And bing. don't underestimate Bing. It can be a killer for spam, I have about 75% clicks from bing index.
The thing is - yeah, I do controll the refferer as well. But in my case (not these pages ;) ), it's more usefull, to accept people without refferer as well, cause some browsers won't send em and the EU privacy stuff can be a pain in the ass. I do show em something else, than reffered, but I still monetize em.
It's a gamble of cents per Visitor in the end and the needed performance is less expansive, than visitors per domain.
 
And bing. don't underestimate Bing. It can be a killer for spam, I have about 75% clicks from bing index.
The thing is - yeah, I do controll the refferer as well. But in my case (not these pages ;) ), it's more usefull, to accept people without refferer as well, cause some browsers won't send em and the EU privacy stuff can be a pain in the ass. I do show em something else, than reffered, but I still monetize em.
It's a gamble of cents per Visitor in the end and the needed performance is less expansive, than visitors per domain.
You got that right, for me I am sustainability freak. I like to build projects that will stand forever. so, I am very cautious, and I would lose any amount of money in order to not get caught like what happened for the guy in this thread ^_^
 
What about the monetisation @Bugfisch ? CPA offers aren't profitable at all when it comes to cloacking (low conv rate, banned after traffic check, etc..) they must have a better revenue source than that. I spotted even more domains .de and .us with the same setup but I don't get the money part.
What about your projects?
 
What about the monetisation @Bugfisch ? CPA offers aren't profitable at all when it comes to cloacking (low conv rate, banned after traffic check, etc..) they must have a better revenue source than that. I spotted even more domains .de and .us with the same setup but I don't get the money part.
What about your projects?
I mostly use very classic Amazon - because I need a broad range of keywords in the millions to not canabalize. And there are not much programms that can offer these. You can still kind of fullfill the search intent with the keyword and the fitting amazon products and have an okayish convertion rate.
 
This is perfect example of Blackhat SEO is still well alive. I have seen these in shady niches like gambling & adult.
They do it with or without hacking, plus 5 figures of pages, interlink each other. They do it fast, and they last for many months, with millions of traffic a month. All the content are just crap, using software generated html files + interlinking + cloaking. They're insanely profitable.
 
Last edited:
Some people might say that it is a method of achieving a darker color on fabric or leather, while others might say that it is a way of creating a more intense flavor in food or drink.
 
This is perfect example of Blackhat SEO is still well alive. I have seen these in shady niches like gambling & adult.
They do it with or without hacking, plus 5 figures of pages, interlink each other. They do it fast, and they last for many months, with millions of traffic a month. All the content are just crap, using software generated html files + interlinking + cloaking. They're insanely profitable.
Yup, this is a very good conclusion of the whole thread in 100 words or less (Y)
 
I mostly use very classic Amazon - because I need a broad range of keywords in the millions to not canabalize. And there are not much programms that can offer these. You can still kind of fullfill the search intent with the keyword and the fitting amazon products and have an okayish convertion rate.
Thank you for replying, but didn't you have any issue with the commission approval? you can spot cloacked traffic pretty easily, It seems also strange that with the short cookie life and their strict policy you can get good €€s, but if you say you manage to bank it I believe you. :)
 
Back
Top