interesting redirection tactic

CSEO8

Newbie
Joined
Mar 4, 2021
Messages
25
Reaction score
16
Hi guys,

I found a really interesting redirection tactic that kind of steals your domain.

If you search for the word '바카라사이트' with South Korean IP(google.co.kr), you will see the top 2 sites:

#1) http://www.altersexualite.com
#2) http://www.cevennes-ecotourisme.com

1732728813559.png

But, if you click on these two sites, they both redirect to "https://marxismovivo.org/"

Does anybody know how this works? And if anybody can replicate this, can you please contact me on my Telegram: Lkais33

https://www.google.com/search?q=%EB%B0%94%EC%B9%B4%EB%9D%BC%EC%82%AC%EC%9D%B4%ED%8A%B8&sca_esv=49b6811cde61045f&ei=gFZHZ8OcGonY0-kP2MiHyAw&ved=0ahUKEwjD3KS9hP2JAxUJ7DQHHVjkAckQ4dUDCA8&uact=5&oq=%EB%B0%94%EC%B9%B4%EB%9D%BC%EC%82%AC%EC%9D%B4%ED%8A%B8&gs_lp=Egxnd3Mtd2l6LXNlcnAiEuuwlOy5tOudvOyCrOydtO2KuDIEEAAYAzIEEAAYAzIFEAAYgAQyBBAAGAMyBBAAGAMyBBAAGAMyBBAAGAMyBBAAGAMyBRAAGIAEMgUQABiABEiSDFDlA1jfC3AEeAGQAQSYAasBoAGrDKoBBDAuMTG4AQPIAQD4AQGYAgegAt4DwgIKEAAYsAMY1gQYR8ICCBAuGIAEGLEDwgILEAAYgAQYsQMYgwHCAgUQLhiABMICFxAuGIAEGLEDGJcFGNwEGN4EGOAE2AEBwgILEC4YgAQYsQMYgwHCAggQABiABBixA8ICChAAGIAEGEMYigWYAwCIBgGQBgq6BgYIARABGBSSBwM0LjOgB_dM&sclient=gws-wiz-serp
 
HI @CSEO8 this works through cloacking and malicious redirection scripts where the original websites are hijacked or compromised to redirect traffic.
 
A friendly bump, looking to know about this too.
 
This is actually a sophisticated form of geo-specific cloaking combined with domain hijacking.
Here's how it typically works:
  1. The attackers compromise vulnerable sites (often outdated WordPress/Joomla installations)
  2. They inject code that checks visitor location/IP/user-agent
  3. Korean IPs see specific casino-related content that ranks for '바카라사이트' (baccarat site)
  4. All clicks get redirected to their money site (marxismovivo.org in this case)
The reason they're using legitimate, aged domains like altersexualite.com is because these domains have existing authority that helps them rank quickly.

Word of caution: While this might seem clever, it's extremely black hat and risky. Google has specific algorithms to detect geo-cloaking, and when caught, both the compromised domains and destination sites get permanently banned.

I've seen similar tactics used in the pharma niche - they usually don't last more than a few weeks before getting caught.
 
This is pure hacking very illegal. I wouldn't recommend it.
 
Back
Top