BlackHat Domain Names

Keyword Squatting

admin — Mon, 30 Jun 2008 14:30:54 +0000

Keyword Squatting is a techniques used to help BlackHatters funnel traffic. It focuses on targeting weak keywords as well as new domain names. An example of Keyword Squatting is a recent post by Str_0ke, our very own SZ trouble maker about Random Gossip, where he attempts a sneaky keyword stomping tactic on another one of our very own admins, Eva. It’s messy I know!

So how do you use keyword squatting, or better yet Domain Squatting and take advantage of new domains the blackhat way? Apart from checking the whois and cross referencing all reg’d names by that individual there is no way we can tell which domains will be a hit, and which wont but you can almost be 100% sure that the domain owner will try to get traffic to their site, so why not rank for their domain name?

It’s easy to find new domain names, one way is to check new domain lists like those found at Deleted Domains. You simply find the new domains, check to see if they’re already in the dev phase of if they’re just owned by some resellers, if they’re going to be developed target them and some may already have blogs up on them, target their niche and main keywords! This is how you funnel traffic, why let the young guns learn how to sling a shot your way one day when you can break their thumbs at the wee age of just a few months old so they never cock that trigger back to fir your way. Domain Squatting is an easy way to get traffic, just be careful not to land yourself in the spammer category, Google will be all over you!

Phishing with Domains

admin — Sat, 28 Jun 2008 05:31:11 +0000

So to compliment our Phishing Techniques blog post, here’s a little more information on how domain names are used to aid these criminals in stealing your user information. It’s all about mind games for the most part, their goal is to make you believe you’re on a legitimate authority site securely entering your login info. One thing all users look for is the domain name, does it look familiar if so, and the site seems identical to the original one then they pretty much hand over their details to the phisher.

But how do users mistake a phishers domain name for a real one? Take a look at the two URL’s below, the first takes you to the Yahoo mail login page, where as the second, at a quick glance seems to do the same thing right?

https://login.yahoo.com/config/mail?.intl=us

https://login.yahoo.com/config/mailkl.nl/-us

WRONG! The second to a directory for the site mailkl.nl (.ml being the domain extension for the Netherlands) Now this of course was not a live example as Yahoo may take offense and sue us, but it shows you how far phishers will go to confuse you, what with domain extensions you have probably never heard of, this trick can be carried out over and over again. But this is only one basic example of how they trick you. There was a funny article posted not too long ago about an all new phishing technique, it read as follows;

Until now customers have been able to check a link in an email by moving the mouse over it, thus revealing a fraudulent URL addresses. But this new method shows the legitimate web address of the bank in question. - posted late 2007

Urrr, this has been used by SEOs for several years now, how to hide the status bar message when hovering over names to show a fake url was discusses in our forum a while back too, it’s nothing new at all, i knew of it back in 2001, it’s not at all a new technique which also shows how far behind people are as apposed to these phishers. They just have not been enlightened enough and companies online wont make a big hype about it so as not to scare their clients, it’s a mess and no one is doing anything to clean it up.

(IDN spoofing) - to use Unicode URLs that render in browsers in a way that looks like the original web site address but actually link to a fake web site with a different address.

You would think that it’s safe to assume the url in your address bar is the real url to the real site you’re looking at. Think again. Domains can be faked, even whois info can be spoofed using xss exploits, similar to the one posted by Klaus

Next time you think you’re safely entering your paypal login details on the oh so secure paypal login page, think twice about how you found yourself on that paypal page, if you did not type in the url by hand into the address bar, I would say you’re taking a risk. Did you know attackers can override your bookmarks with one of their own, titles exactly the same as the one in there? I did not think so.

Banned Domains

admin — Thu, 26 Jun 2008 15:07:43 +0000

Domain names are as much a tool to ranking a site as they are a tool of mass destruction. Imagine this, you work on getting great links for your site, say 500 really good links, google is pleased you are on the right track, then one day, google picks up on a link that sends red flags flying. A backlink off a Banned domain name, but it’s only one, so google lets you off. 2 days later another link then 5, then 25, then 200 backlinks all from different banned sites, then without even knowing it, your new online business has more incoming links from Banned sites than it does from authority/unbanned ones.This to google translates into one thing, your site is not worth shit, so you get banned. Why else would all these banned sites link to you, in googles eyes you must be crap like them too.

So how do evil competitors find these banned google sites if they’re not indexed? How do they slap links on there and get you into trouble? Several ways, one we’ll disclose here, as for the others, you can sift though our BlackHat SEO forums to find more ways.

So, we know banned names can’t be found by searching for them, the next best way is to find banned Spam email ID’s. For example the following (banned email lists are in the tens of thousands and you can find them online by running a search);

@cashette.com
@gawab.com
@mail.ru
@freestuffo2.com
@freestuffo1.com
@freestuffo3.com
@freestuffo4.com
@cash.com
@tradedoubling.co.uk

Out of these, you can see right away, Cash.com is banned. Shoot the owner an email found in the whois for example, asking for a link exchange, and ask them to link to your competitors address. Place a link to them on your site (of less importance to you), it wont hurt you, but the link on the banned site will effect your competitors ranks in the serps, especially if you do a couple hundred of these. There you go, using domain names to mess with your competitors rankings or maybe get them banned.

See, this is how scum bags use domains against their competitors, some even buy up a couple dozen names, spam with them get them banned keep them updated and 301 redirect the sites to their competitors sites in an attempt to get them banned or at least to de-rank them and rise in the SERPs somewhat naturally. It’s a dirty world out there, a dirty world!

NOTE: Always check names before you by them (not register, buy as running sites) to make sure google as not banned the site in question. Even though it’s not hard to unban a banned name, it’s a hassle, we’ll disclose how to go about unbanning any domain name within a week in a future post!

Domain list for Bloggers

admin — Wed, 25 Jun 2008 14:50:51 +0000

I don’t get it, I’m this close to losing my mind. Why are people so dense in the head? Don’t they realize that many of the great domains are still absolutely free to register?

In the past 2 weeks I have had 3 bloggers come to me asking for domain names. Now as much as I love to sell names, I could not help but wonder why these idiots could not find a name they were after. In both cases, I found names that were yet to be registered, much better than the ones they bought. It’s bloody nanas if you know what I mean.

So, some blogging names, I’ll slap these up from time to time as an example, that whatever your niche, you can find kick *** names to register, instead of coughing up a couple hundred bucks for one…(domainers don’t hate me, but naive people get under my skin)

(if you nab one of these, have the decency to let me know with a thank you or i’ll come down on you like a 500 pound angry Asian woman. )

SEOWritings.com
CritiqueBlog.com
PressBlogger.com
SUVBlogger.com
StockPriceBlog.com
TheaterInformer.com
FreewareBlogger.com
CashInBlog.com
BlogAVid.com
WpDigest.com & WordPressDigest.com
StylistToday.com
CoiffureBlog.com
HairStyleDigest.com
eBookInformer.com

I can go on and on and on and on…these are not even the good ones, come on, with a little effort you can find that perfect keyword rich memorable domain name for your blog without paying some greedy ass domain reseller, like the many found over at DnForum and NamePros.

Snapping those Domain Names

admin — Wed, 25 Jun 2008 14:43:27 +0000

You want to land that perfect name? This is one way to go about doing just that.

Trying to “snap” the name you want the second it’s available to grab. SnapNames & Pool provide this type of service, where you ask them to try and nab you whatever name you want without paying them a dime.

It’s a well known fact that working with a snapping name company will in most cases increase your chances of landing that name you’re after. Assuming that there are more people who want to grab the same name as you, you won’t stand a chance against the snapper’s bots if you try to register the domain by yourself.

The fun part is, if you and a ton of people are using the snapping service, then when it’s picked up, an auction is setup and you all go head to head in an attempt to win the domain over. Now if you’re the only one trying for the name, it gets transfered to you, that easy.