1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Why wouldn't this nasty little trick work? Read more...

Discussion in 'Black Hat SEO' started by uncguy4321, Aug 21, 2011.

  1. uncguy4321

    uncguy4321 Regular Member

    Joined:
    Jul 10, 2011
    Messages:
    340
    Likes Received:
    120
    Occupation:
    Part time contractor and consultant...but full tim
    Location:
    Parts unknown (eastern US)
    I'm fairly technically adept, but I'm certainly no expert on the inner workings of major hosting companies and DNS servers. With that being said...

    :et's say a guy, let's call him DirtyLittleFucker (DLF) established an account at a major web host, then added a complete shit TON of domains to his cpanel. Note, not REGISTERING them, but adding them to his cpanel as if he registered them with a registrar.

    When someone ELSE registers that domain, they then tell their registrar to point the DNS to that large web host's DNS servers. But DLF already has that domain pointed to his web server in the hosting company's DNS.

    So for at least a while, the page points to his page, which is an auto-blog type for that niche and of course contains ads.


    Does this happen?
     
    • Thanks Thanks x 1
  2. schwagoo

    schwagoo Jr. Executive VIP Jr. VIP Premium Member

    Joined:
    Nov 8, 2010
    Messages:
    807
    Likes Received:
    737
    Location:
    Midwest, USA
    Why would someone ELSE point their domain to your hosting platform?
     
  3. YOU_HAVE_BEEN_HACKED

    YOU_HAVE_BEEN_HACKED Newbie

    Joined:
    Aug 21, 2011
    Messages:
    13
    Likes Received:
    0
    sounds like it should work, i dunno.
     
  4. davids355

    davids355 Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 25, 2011
    Messages:
    8,785
    Likes Received:
    6,321
    Home Page:
    I guess it could work -your assuming a domain you pick, happens to get registered with the same host.

    Once someone did register the domain, the registrar would then create dns entries using the hosts site wide dns server(s).

    At some point, the hosts dns servers would then create records mapping the domain to the particular ip of the genuine clients server, but you think there will be a period when it would automatically point to your box.

    I guess maybe it would work - I suppose it depends firstly whether when a client creates/registers a genuine domain, does the internal map get set up before the registrar adds dns entries?
    Also, would the host curb your activities when they noticed you adding loads of unregistered domains??
     
  5. davids355

    davids355 Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 25, 2011
    Messages:
    8,785
    Likes Received:
    6,321
    Home Page:
    I'm thinking about this a bit more and I don't know if it would work.

    When you add your domain in cpanel, it would have to propagate to their dns servers right, and it would have to stay there long term in the hope from your part that the domain registers, well if the domain is not purchased by you, I'm thinking host would remove the record or check it or something - otherwise allowing your dns servers to pick up any old records is a bit of a security whole..?? Maybe not though, Im just thinking about it;)
     
  6. YOU_HAVE_BEEN_HACKED

    YOU_HAVE_BEEN_HACKED Newbie

    Joined:
    Aug 21, 2011
    Messages:
    13
    Likes Received:
    0
    i am not really sure..sorry
     
  7. mrdexter

    mrdexter Junior Member

    Joined:
    May 20, 2011
    Messages:
    184
    Likes Received:
    63
    It would work with the company I use, as you can create a domain reference before buying the domain. When the domain is then purchased it automagically point to my hosting space.

    I know this works as I have done it for legitimate clients who did not want to register their domain through me (I never got round to setting up the api to do it) but did want to use my server.
     
  8. adbot

    adbot Power Member

    Joined:
    Feb 12, 2011
    Messages:
    512
    Likes Received:
    541
    Occupation:
    IM
    Location:
    New York
    thats absolutely fucking absurd.
     
  9. sukataetumba

    sukataetumba Senior Member

    Joined:
    May 25, 2010
    Messages:
    1,109
    Likes Received:
    213
    post count means nothing. i can smell something about to happen LoL
     
  10. davids355

    davids355 Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 25, 2011
    Messages:
    8,785
    Likes Received:
    6,321
    Home Page:
    You can do it with most companies, the point is, I imagine that if you do it, and the domain is not pointed to those dns servers within say 7 days, the entry probably gets removed from the hosts dns servers.
     
  11. InternetExploits

    InternetExploits Newbie

    Joined:
    Aug 19, 2011
    Messages:
    12
    Likes Received:
    7
    It sort-of-kinda-would-not-really-work...

    It would be a whole lot of luck on your part.

    1 you would have to get a Domain somebody is going to purchase.
    2 you would have to by luck, pick the same hosting provider your victim decided to use
    3 you would then by pure luck, have to hope the hosting package the victim purchased, has the same IP as your hosting account. Having worked for a web host in the past, this is pretty rare, Our rule of thumb was 50-100 domains per IP for shared hosting depending on load.
    4 if three did not occur, then the victim would just point his DNS A record to his own IP, and your setting on the webhost would at worst, just cause some minor confusion in the hostheader platform, if they used a centralized model.

    Remember the victim has control over the DNS records and could point his A record to any webhost/IP he wants, it would be dumb luck if he pointed it to you.
     
  12. jerzydawg

    jerzydawg Supreme Member

    Joined:
    Dec 24, 2010
    Messages:
    1,260
    Likes Received:
    422
    Not worth it bro. Find another method.
     
  13. uncguy4321

    uncguy4321 Regular Member

    Joined:
    Jul 10, 2011
    Messages:
    340
    Likes Received:
    120
    Occupation:
    Part time contractor and consultant...but full tim
    Location:
    Parts unknown (eastern US)
    All great feedback, except for the "fucking absurd" guy...BHW is the best place to get feedback on this kind of thing. I wasn't going to actually do it, but sometimes in the past it felt like it was happening to me,...probably not, but the thought crossed my mind, so I figured I'd ask.
     
  14. dcuthbert

    dcuthbert Regular Member

    Joined:
    Jun 15, 2011
    Messages:
    411
    Likes Received:
    249
    I like your thinking, that's the kind of out of the box thinking which helps to uncover the next big method.

    Props to you for trying to come up with something like this, rather than just blindly creating autoblogs because that's what a WSO told you to do.

    However, on this occasion I can't see it working. You'd have to add loads of domains and then get very, very lucky. Even if you did get lucky, since it'd be a new domain anyway, you'd be unlikely to get any real traffic/income in the few days before the person opens a support ticket and the hosting company find what's happening.
     
  15. needcraigslisthelp

    needcraigslisthelp Registered Member

    Joined:
    Dec 2, 2009
    Messages:
    57
    Likes Received:
    5
    doesn't sound like anyone has tried it, do it and let us know
     
  16. mrdexter

    mrdexter Junior Member

    Joined:
    May 20, 2011
    Messages:
    184
    Likes Received:
    63
    I don't understand. If I create a domain reference in my reseller account I have to enter a tld. So client says to me, I want to register www.newdomain.com, I create a domain reference called newdomain.com

    When they register the registrar automatically uses their own nameservers which of course also work on my reseller account. The only way the client could host is elsewhere now is to use a different nameserver.

    Of course I also agree with what others have said about the practicalties of creating loads of domain references and hoping that someone registers that domain with that registrar, and even if you do all that happens is you have a brand new site for a short time.
     
  17. ijof9

    ijof9 Power Member

    Joined:
    Mar 27, 2010
    Messages:
    536
    Likes Received:
    594
    Occupation:
    CTO
    Location:
    Western Europe
    Low success ratio due to mathematical probability. Do the math and you'll see.