The Puppet Inventory: Ten ‘Premium’ Link Packages, Six Domains, One Landlord

We buy links for a living, so we are not shocked when inventories overlap. We are shocked by how much they overlap. In September and October 2026, we spent $3,940 on ten mid-priced “premium” hacklink packages from ten different US-facing vendors. Each pitch promised curated, exclusive, manually vetted placements. Each package cost between $180 and $650 and included three to eight links. By the time we finished fingerprinting the delivered domains, eight of the ten packages had sent us links from the same six websites. Not similar sites. The same six.

This is not a story about one crooked vendor. It is a story about a wholesale layer that most buyers never see. The vendors were separate storefronts with separate checkout pages and separate email signatures. The inventory underneath them was not separate at all.

How we shopped without tipping our hand

We posed as a small US agency buying for a handful of client sites. We used separate email addresses, paid with cards, and never mentioned HackLink Shop. We chose vendors from marketplace listings, cold outreach, and one recommendation from a forum thread. We saved every sales email, invoice, and delivery spreadsheet.

The packages were not bottom-bin junk. These were the ones marketed as “premium,” “editorially placed,” and “no PBNs.” That language matters because it is usually true in the narrowest possible sense. A site can avoid the classic PBN label and still be part of a shared network with one owner, one template, and one analytics account.

The fingerprints that mattered

We did not rely on a single signal. We built a simple overlap score using public and semi-public clues: WHOIS privacy patterns, nameservers, DNS records, hosting IP ranges, Google Analytics and Tag Manager IDs, ad network IDs, author bios, contact pages, social profiles, registration dates, and repeated sentences across “about” pages.

A few findings stood out:

• Six domains appeared across eight packages. One domain showed up in four different vendors’ deliveries.
• Four nameserver pairs covered 31 of the 47 delivered domains. That alone is not proof of common ownership, but it is a reason to look closer.
• Eleven domains shared a single Google Analytics property. Several also shared the same AdSense publisher ID.
• Three domains used the same author bio with the city swapped out. One “local business journal” had the same editor as an “outdoor living magazine.”
• A cluster of domains was registered within the same 11-day window in 2024, then populated with backdated-looking archive pages.

None of this proves a crime. Shared hosting and privacy services are normal. But when the same nameservers, analytics IDs, author bios, and content templates keep appearing across vendors that claim to sell independent inventories, the burden of proof shifts. The buyer is no longer buying diversification. The buyer is buying the same bet in different wrapping paper.

What “premium” meant in practice

One delivered domain was pitched as a “regional home improvement publication.” It had a clean design, a few hundred indexed pages, and a contact form that went to a Gmail address. Another vendor sold us a link on the same domain but described it as a “lifestyle magazine.” A third vendor’s delivery sheet listed a subdomain of the same site and called it a “separate property.”

That is the puppet inventory in action. The storefronts change. The domains wear different hats. The landlord is the same.

We also saw reseller behavior. Two vendors sent delivery spreadsheets with the same internal formatting, including the same column headers and the same typo in “domain athority.” One vendor admitted, after a follow-up question, that they “source from a partner network.” That is not automatically bad. But if a vendor is reselling, the buyer deserves to know whether the “partner network” is one owner with fifty tabs open.

Why overlap is a risk, not just a buzzkill

The practical problem is correlation. If ten links share an owner, a nameserver, an analytics ID, and a content template, they are not ten independent votes. They are one vote repeated. If that network gets hit by a spam update, a manual action, or a deindexing event, your “diversified” package can lose most of its value in a single afternoon.

There is also a footprint problem. Coordinated link networks tend to link out in patterns. If your site appears alongside the same outbound neighborhoods across multiple domains, you are not hiding in a crowd. You are standing in a lineup.

We are not saying every shared-infrastructure link is toxic. Plenty of legitimate publishers use the same hosting company or the same analytics platform. The issue is the combination: same owner signals, same templates, same link patterns, sold as separate premium inventory. That is when “diversification” becomes a marketing word instead of a risk-management strategy.

A pre-checkout checklist for recycled link networks

Before you buy another hacklink package, ask for a sample domain list. Not a screenshot of metrics. A list of actual domains, even three of them. Then run these checks:

1. Nameserver overlap. Plug the sample domains into a DNS lookup tool. If they share obscure nameservers, ask why.
2. Analytics and ad IDs. View source on the sample pages. Shared GA4, GTM, or AdSense IDs across “unrelated” sites are a red flag worth investigating.
3. Author bio searches. Put a sentence from the author bio in quotes and search it. Swapped city names are easy to spot.
4. Registration clusters. Check WHOIS creation dates. A batch of domains registered in the same week and dressed up as established publications deserves scrutiny.
5. Template reuse. Compare the “Write for us,” “About,” and “Editorial policy” pages. Identical wording across multiple domains is a tell.
6. Outbound link patterns. Look at whether the sites link to the same unrelated commercial sites in footers or sidebars.
7. Ask who owns the inventory. “We work with partners” is an answer. “We own and operate every domain” is a different answer. Get it in writing.
8. Test small. Buy one placement before scaling. Map the domain against your existing links. If it overlaps with what you already bought, you just found the network.

The uncomfortable takeaway

HackLink Shop sells link packages, so we have an obvious incentive to look away from this stuff. We are not going to pretend the entire mid-tier market is a puppet show. Some vendors are transparent, some inventories are clean, and some shared infrastructure is harmless.

But buyers who think they are spreading risk across ten vendors should check the actual domains. In our test, ten storefronts collapsed into a handful of owners and templates. That does not make every link worthless. It makes the word “premium” worth less than the receipt. If a vendor cannot tell you which domains you are buying before you pay, you are not buying a curated package. You are buying a mystery bag with a nice font.