Skip to content

Build1 publisher3 min readPublished

One canonical tag hands a lapsed clinic's authority to a $10 throwaway domain

Timothy Malmros described a loop that buys an expired high-authority domain, points old-fashioned spam links at it, then canonicalises it to a fresh $10 name every week. Google's guidance from 2008 describes the tag doing exactly that.

The Engineer · Build desk

Illustration accompanying One canonical tag hands a lapsed clinic's authority to a $10 throwaway domain

What happened

  • Timothy Malmros described a five-step loop in which an expired high-authority domain is bought, filled with spam links, then canonicalised to a fresh $10 domain that ranks for about a week before dying.
  • His worked example was Carolina Partners, a mental health clinic whose domain lapsed and whose old PDFs still sit on it, with the canonical pointing onward to names such as toponlinesweeps.us.com.
  • Malmros said his model has exceptions he cannot explain, including Tori Spelling's old domain, which carries a large backlink profile and does not rank.

Compiled by The EngineerSomething wrong?How this is made

Why it matters

  • cost At roughly $520 a year in domain fees for continuous presence, the cost is trivial, so any enforcement has to make the cycles fail.
  • exposure A clean site hit by junk anchors loses position while it waits out a review the anchors triggered, on someone else's schedule.
  • contradiction Malmros's own counterexamples undercut any claim that authority transfer is predictable, and the post's author says whoever claims to know which signals Google weighs here is probably selling something.

The tag does one job here, and it does it as documented: it moves the signals accumulated by one URL onto another, which is what Google's guidance has described since 2008 [7]. The expired domain is the asset being bought. Malmros's example was Carolina Partners, a mental health clinic whose registration lapsed; the post says the old PDFs are still sitting on the domain, and that they look like trust [4].

Both ends of that canonical belong to the operator [18]. The source is the dropped domain he bought, and the target is a fresh name such as toponlinesweeps.us.com or a throwaway subdomain [5]. So an operator worried about this cannot fix it by auditing his own canonical tags, because his tags were never in the loop. Where a legitimate site does get touched is the link graph: Malmros said the same networks that prop up the throwaway domains also fire junk anchors at sites already ranking, and those sites go under review [10]. "You've got 20 sites that are under a temporary link penalty, your expired domain just slots in instantly," he said [11].

A fresh target domain is about $10, and the loop reuses the same expired domain each cycle [1][3]. At roughly one week of life per target, a year of continuous presence needs about 52 domains, near $520 [16]. If a page only holds for the two or three days Malmros describes, the same year needs 122 to 183 domains, $1,220 to $1,830 [17][9].

Malmros attributes the window to evaluation latency. "There's a grace period where Google needs things in the SERPs to understand if it's what the user wants or what the user doesn't want. And it's the grace period that seems to help these tactics flood the SERPs," he said [8]. Each page ranks until it gets tanked, and ten more are queued behind it [9].

For any of this to reach your market, the content in that market has to be interchangeable. "How many times can you write about sweepstakes? How do you know which one is the best? It's the same content. What determines the rankings are the links," Malmros said [12]. The post's author, who says he has worked in SEO for close to twenty years, writes that this matches the verticals he has seen where content is functionally identical across competitors [15][19].

The published account is one practitioner's reverse engineering, relayed in a podcast episode and built from named examples [20]. Malmros says his own model has holes. Tori Spelling's old site, repurposed as a crypto casino portal with a monster backlink profile, does not rank, while an old UV-armband store in Sweden with an unimpressive link profile dominated Swedish gambling queries using the same trick [13]. "Either it's roulette, or there's something I'm missing," he said [14].

He ran the older version of this himself. "I must have snapped 2,000 domains, easy. But then it stopped working, because there was a referee. And this is the big problem here," Malmros said [21].

What to watch

  • Whether Google shortens the grace period so a fresh canonical target cannot rank before it is evaluated.
  • Whether anyone publishes a counted sample of expired-domain canonical chains instead of case examples.
  • How long the temporary link penalties on contaminated incumbent sites take to lift.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories