5ubliminal@twitter

Cloaking or ... Self-Inflicted Deadly Injury : 5ubliminal's TellinYa

<a href="http://www.tellinya.com/art2/347/">Cloaking or ... Self-Inflicted Deadly Injury : 5ubliminal's TellinYa</a>
5ubliminal's YAMS
Everybody talks cloaking!

I see on too many sites tutorials on how to cloack your way to rankings. They all try to push their ideas and products but most of them avoid small bits of the truth that could change one's perception on such practices.

Last time I actually used cloaking in SEO was somewhere back in 2005-2006. Every sience I used Search Crawler IP detection just to lock away spoofs and googlebot wannabes.

I will try to explain here what cloaking is, how it works and why it WILL kill you. Banned cloaked sites are not a matter of IF but of WHEN. And with all the risk, people use cloaking so much instead of fine-tuning other 'tools'.

5ubliminal… I thought you was a blackhat…
How come you don't cloak? You let me down dude! I'll unsubscribe your RSS feed.

… some might say. And my answer comes below.

What is search engine cloaking?

Cloaking = Disguising. In terms of SEO it's also know as IP Delivery and it means sending different versions of the same page to different people based on custom rules. So let's say that if you detect a user coming from another country you could reroute him to a translated version of your content. There are some legit uses related to cloaking but to have a legit use a very small part of your page must change and the change must be relevant to some factors a visitor can assess. If he sees his flag in the corner of the page he'll know you cloaked the image to his benefit:) and you're cool.

But if you show the search engines cloaked, optimized (keyword stuffed) versions of your pages and the visitors a nice landing page to sell them something… you're dead meat.

Methods of cloaking:

I will take each method of cloaking and describe it here. I will show you the strong points and the weaknesses and estimate your cloaked site's lifespan. And trust me: life span for cloaked pages is short. I'll also provide some external resources to read on cloaking so you get an overall idea of how others see site cloaking vs. my view.

So brace yourself. There'll be a bit of content here.
User-Agent based search engine cloaking!

I wasn't going to cover this but here it goes. This means checking for certain patterns in User-Agents and cloak based on what your scripts find there. I call this the butt-naked, bent-over in jail method. Imagine the outcome. Any kid with FireFox can change the user agent and see your cloaking. Take that for security.

My ratings:
Weak. Pathetic. Joke! Not worth rating!
IP Lists based search engine cloaking!

I will get through this one very fast. There are some sources out there I will not even mention here as they are not worth it. Some folks out there provide some lists claiming to be crawlers and you're just supposed to take their word for it and do a leap of faith. As others have noticed:) using IP lists is just neither smart nor effective. It's easy to use no matter what your skills are, it's publicly available and it's completely unreliable and I'll explain why later on.

My ratings:
Made for amateurs. Suicidal. Leap of Faith!
Using cloaking commercial scripts / solutions.

There are some dudes out there offering Industrial Strength Cloaking for several thousand bucks. And if you're stupid enough you buy it. They provide IP lists, cloaking scripts and: 1. you pay thousands of bucks for something you can do for free and 2. you get banned after paying thousands.

My ratings:
Better than the previous two. So not worth the costs.
Using Crawler Detection.

We finally got to the premium section. I covered this ip verification method and it's somehow safer then the rest but still not safe enough. The problem is only crawlers pass this verification method and any manual review will reveal your cloaking. That's not smart and I'll cover this later on.

My ratings:
Safer yet not safe.
Using Whois detection.

We finally got to the best solution. This is not bulletproof either but will ensure a longer life than the one before… about 10 seconds more and I'll cover this also later on.

My ratings:
Best. But you'll get banned anyway if manually reviewed.
Don't insult the search engine engineers:

Biggest mistake one can do is to provide different content to manual reviewers from what you feed the search engines. If I were to work for Google and I would suspect a page cloaks I would visit it. If what I see is different compared to what the search engine has internally cached as contents of page I would not only ban that site but I would also feel offended. It's enough for an employee to change User-Agent to googlebot and proxy through an IP that verifies as a crawler and you're cloaking is unveiled.

Showing cloaked content to IPs withing the Google IP range is not only silly but offensive. Those people who work there are smart and if you feed their crawler cloaked pages show them the same thing. This will give you the 10 seconds I spoke about earlier. That is the time you need to enable an anonymous proxy and revisit you. And, at least they'll appreciate the fact that you did your homework and your cloaking is good. They might even let you live:)

WHOIS based cloaking seems safe!

It's safer but not safe. Google offers some services. A wireless transcoder, a translation service and all these services will get your page before they feed it to the end user using Google IP addresses. So you site can be exposed by using Google translate. The way to protect from this is to find their user agents and lock them out. Both these services have specific ID strings in the useragent. Do your homework here!

Remeber: Whois method, blocking Google services that feed your page to visitors, can be bulletproof to anything else except a manual review using a proxy server.

Where do all these methods fail?

Useragent delivery is a joke. IP lists are outdated and unsafe. Crawler detection only detects dedicated crawlers but so many other Google IPs don't pass the crawler DNS check. Let's say IP: x.x.x.x is a crawler and you get a visit from x.x.x.x+1 which does not resolve to a crawler. You send them the uncloaked content: you die. As a small hint think like this: once you validate an IP as google crawler you are safe to assume the entire C-Class (x.x.x.*) belongs to Google. This is one more layer of protection for you.

I'll try to explain here the problems and these are the steps a cloaked site follows to die.

  1. You rank! (… major error)
  2. Competitors who can't compete see you are fishy! (cache disabled)
  3. They report you! (t0ssers)
  4. Manual review comes. Trust me! (Reports are always verified.)
  5. Cloaking is detected! … you're out.

I'm pretty sure cloaking detection and elmination (banning) is never a completely automated process. Maybe some flags are raised automatically but in the end it's a human that casts the death penalty. So a cloaked site is a paradox. If it doesn't rank you don't make money and it doesn't get banned. If you rank you make a bit of money, it's reported and it gets banned. This is where cloaking lost me. It's not worth it especially now when you don't rank as fast as you did in the old days when I used such tactics.

What is whois cloaking?

It's one of those methods that exists, is used but kept in low profile. It's not difficult but also a game of finesse. It's a combination of user-agent/ip-delivery that is bulletproof to anything except a Google employee. I won't share the scripts and details for this, not for free and not publicly but remeber… you will be banned.

Last but not least…

I wanted to open your eyes and get you aware of the truth behind the sparkling of all the cloaking products out there. You should now understand that you are not safe no matter how much you pay. An angry competitor can finish you off.

Some may wonder is there's any safe cloaking method? There are some methods for specific purposes but they all imply risks. There are methods of masking cloaked content and make it look better at first sight but … none will survive a manual review.

I'll stop here. I'm tired, selfish and secretive and wanted to have a post about cloaking here myself :)

16 Comments Posted By Readers :

Add your comment
#1 linuxhat from United States
Posted on Monday, 21 April, 2008
what about split testing.. and please excuse the buzzword... multivariate testing .. which google encourages... some implementations could be considered as cloaking. in my experience, large scale site wide split testing done has not caused a drop in rank or had any other noticeable adverse effects.
#2 JohnWinner from Canada
Posted on Monday, 21 April, 2008
An interesting point of view but being banned sometimes may be part of the game. Do you think that people who cloak think that they will rank forever?!
BTW I have some cloaked sites indexed since more than 2 years. The pathetic IP delivery...
#3 5ubliminal web
Posted on Monday, 21 April, 2008
@JW: There's cloaking done with decency and cloaking where a version of the page is a just text and the other is a pretty site.
Yes… if you can stay below the radar, you can survive but most beginners don't. They just over-do it and it gets banned so fast.

@linuxhat: Same reply for you. As long as you do it smart… you live longer. But most don't do it smart and when you rank where you shouldn't you will get reported.

Cloaking is like playing with fire. You can't just do it and expect to work the first time but there are other better paying jobs out there;) Cloaking used for keyword stuffing is out. But it all depends where you're swimming. (big/little fish)

PS: I always aim for the highly competitive areas. Little experience in the rest here:) That's why I had a lot of problems with cloaking. Max. life time: 1month. So I had to figure out alternative ways.
I'm warning people on cloaking as ranking where the money are is not too easy today and it's would really 'sock' to get banned when you get there.
#4 Ryan Blakemore from Great Britain web
Posted on Tuesday, 22 April, 2008
I'm not sure if I agree with your classification of IP verification. I wouldn't classify it as an alternative to cloaking. I would classify it as a vital part of a cloaking system.

When I cloak, I assume that I will get banned. I factor in banning as part of my overall business plan with the way I currently cloak. As long as my build rate is quicker than my burn rate, then I'm happy :)

I also don't agree with the notion that a manual review is impossible to survive, but I will accept that it is very difficult to survive one. One of my main aims is to avoid a manual review in the first place.

I do agree though, that there are much more advanced ways to cloak than just IP delivery alone - such as the ways you have outlined.
#5 5ubliminal web
Posted on Tuesday, 22 April, 2008
@RB: IP verification is a method of cloaking. I might have not expressed myself clear enough.

You can survive manual reviews if the reviewer is a nice guy. But most people build the version of the page they show search engines in such a horrible way that they can't survive the manual review.
This whole thing is not a rant in fear of getting banned (Oh God! I've been there so many times) but more like an incentive to think more and find alternative solutions. Banning is part of the game but I'd rather avoid that part.

I'm lazy and I hate the notion of build rate. I need free time too :) that's why banned sites sock.

PS: My whole way if thinking is work least - get most.
#6 Ryan Blakemore from Great Britain web
Posted on Tuesday, 22 April, 2008
I think we both have the same view on IP verification, but just have differing ways of defining cloaking. I think I may have been nitpicking there to be honest.

"You can survive manual reviews if the reviewer is a nice guy" - or if the 'leaked' Google reviewer guidelines document isn't a fake document leaked purposely. If that document is a true indication of the level of manual reviewers, then I won't be losing sleep over manual reviews.

I totally agree that people need to explore more advanced solutions, rather than emulating what their favourite blogger says they do. Not getting banned, ahh that beautiful dream. I would love to think I could build a 'bulletproof' cloak, but I know it is near impossible. I find sometimes I get so caught up in the whole avoiding to get banned thing, that I actually lose sight of my main goal - making money. I suppose it depends what you are in the cloaking game for; maximum profit or the challenge.

"I hate the notion of build rate" - Same here. Thankfully PHP loves to build all hours :)
#7 5ubliminal web
Posted on Tuesday, 22 April, 2008
I love challenges:) I am a coder.
I have my doubts about the rater document and that's why I didn't talk about it here. It just does not make sense. It might be more FUD, it might be true, it might not be Google's… I don't know. But if it's theirs, it's not something to be proud of.

PS: Most of my sites are built by compiled software that I write. Much more violent and fast than cronojob-ed PHP but needs a bit more attention from me and an un-turn-off-able :) computer.
#8 Papa Rage from United States
Posted on Tuesday, 22 April, 2008
I've never used cloaking, but now I want to give it a try, I love challenges, I'm a coder.

But I have to disagree with one thing you said "Those people who work there are smart"
Big G loves to hire the best and the brightest, but they hire a lot of others too. And I guarantee the smart ones are *not* handling web-spam reports. I don't know if the rater doc is real, but there are people doing manual reviews who need to be trained, and they aren't geniuses.
#9 5ubliminal web
Posted on Tuesday, 22 April, 2008
@PR: You are a coder:) so it's WHOIS cloaking for you all the way. Don't try anything else. And beware of services like translate and wireless proxy.

My compliments went to search engineers. Those who handle reports are more/less trained.
But what 99% of people use as cloaked content today would not pass a review from a blind man. If you see a page with hundreds of lines of unformatted text and nothing more… even the most dumba$$ reviewer will figure it out. And this is how most cloaked content looks like as people don't really care about its presentation and that's where they're wrong.
#10 SlightlyShadySEO from United States web
Posted on Tuesday, 22 April, 2008
Ok, so your point is that people get banned eventually?
May I be the first to say so what!
It's not too hard to make em swing a profit before they get banned, and so long as you can keep doing that and scale...you're fine.

And not so much ranking, but sweeping up the longtails normally means your site will survive for a decent amount of time.
#11 5ubliminal web
Posted on Tuesday, 22 April, 2008
Actually my 1st point is: people should not get banned eventually if they play smart. I'd rather have few steady sites than a lot of fresh ones added all the time just to stay above the ban-rate.
And my 2nd point is: Think on how to avoid getting banned. It's always better.

PS: Shady… I still got the image of your cloaked site haunting my nights. That's what people should not do.
#12 Ryan Blakemore from Great Britain web
Posted on Tuesday, 22 April, 2008
"I'd rather" - That is an important point. There is no right or wrong business plan when both turn a profit, especially in cloaking. It comes down to how the individual wants to play the game and what risks they feel comfortable taking.
#13 SlightlyShadySEO from United States web
Posted on Wednesday, 23 April, 2008
@5ubliminal: My sites are not meant to stand up to manual review. I'll admit it. But they're profitable, and doing more than well enough while I make a more concrete system. I couldn't afford to sit on my arse for a ridiculous amount of time to make the sites look pretty.
Look for it in the next version ;)
#14 5ubliminal web
Posted on Wednesday, 23 April, 2008
This is my point Shady. Wouldn't it be nicer to make those profitable sites look good too? … hence live longer … hence be more profitable.
I think it's time to think about it and everyone should.
#15 SlightlyShadySEO from United States web
Posted on Saturday, 26 April, 2008
I agree to an extent, but once again, it's within time constraints. I'll pretty it up eventually, but my sites have one major thing that you forgot about that help resisting a ban. They are almost footprintless. Unless you count ass ugly as a footprint, in which case I'm taking down craigslist with me.
To continue 5-10 years from now, I will admit that prettying it up will be necessary though.
#16 5ubliminal web
Posted on Sunday, 27 April, 2008
Footprintless is a goot point but if you do MFA, there's no such thing as footprintless.
5ubliminal's TellinYa.com SEM & SEO Blog © 2007 - All rights reserved unless mentioned otherwise .
Rendered On : [Sunday, 14 March, 2010 - 05:25:43 GMT]   No Ajax / Flash Used Here
" Cloaking or ... Self-Inflicted Deadly Injury : 5ubliminal's TellinYa "
Close
Tellinya.com is relocating to blog.5ubliminal.com. This blog is no longer maintained and comments are no longer accepted / answered.