SE Spammer Revealed

[Bill]

Okay then, well, in the spirit of scientific inquiry and shits and giggles, let's try some experiments.

I'm going to look for some likely targets, but I'm asking everyone reading this to look at their own listings and pick out a few possible spammers.

I don't want this to be about me and my listings, so I'd rather start with a couple who aren't s.ites p.ositioned a.bove m.e.

The first step is to identify some spam networks. We need to make sure we are attacking the right type of spam. We are looking for:

1. Script generated pages.
(If it looks like it's handbuilt, as far as I'm concerned, the page probably isn't spam.)

2. Domains with huge numbers of pages. (The only way to make such things is with scripts.)

3. Junk content.

4. Stolen copy and content.

First thing to do is, pick out some samples, and study them.

I'm going to wait a day or two before listing samples of my own, and I'm really hoping to see some likley candidates from some of you folks.

[gideon]

I have already got so many guys removed it took me a few minutes to find one lol.. but here is one
google this "site:wftp.org"

[doublep]

Ok - here is something interesting for you I think. I Googled 'free porn movies' http://www.google.com/search?sourcei...ee+porn+movies

Top ten is TGP's, one link site in there. I surfed most of them and came away unscathed. But check the sponsored links - I'm seeing 2 domains only on there.

I clicked on this one http://www.porn--for--free.com/ it then hi-jacked my browser! - Try it using Internet Explorer.


One of life's little ironies!

I'll look for more tomorrow.

Cheers!

[doublep]

Originally Posted by gideon

I have already got so many guys removed it took me a few minutes to find one lol.. but here is one
google this "site:wftp.org"

...yep, thats fucking ugly! |shocking|

[Halfdeck]

Originally Posted by gideon

I have already got so many guys removed it took me a few minutes to find one lol.. but here is one
google this "site:wftp.org"

It's funny how the guy doesn't even bother using the noarchive tag. Also interesting that alot of the spam pages that stick out at me are using java redirects instead of IP cloaking. Finally, it's pretty surprising to find some of those pages show a PR of 4.

[Halfdeck]

Here is one guy using the same script/database to generate the same exact pages over multiple domains (and I'm not talking just 2-3). He does use a noarchive tag, so who knows, the pages may well be cloaked.

premiumxxxlinks.com
netcybersex.com
finderoticlinks.com
foxypetites.com
jackoffsites.com
viewpornos.com
foxytranssexuals.com
smutplaza.com
nakedblondies.com
nakedpeeing.com
11inchdicks.com
xlbreasts.com
nudesites.net
xxxsexorgy.com
sexyviews.com
ipornlinks.com
xxxnakedsites.com
over30porn.com
xxxindexer.com
xxxexhibitionists.com
nakedbisexuals.com
upskirtlove.com
xxxsitereviews.com
seesexvideos.com
xxxpornlinks.net
sexsitedomains.com
myadultlinks.net

There are tons more, but my fingers are getting tired, so I'll stop here.

Notice he uses comments <-- keywords: --> and <-- description: --> in the HTML a number of times on the top/bottom of the page. He also uses <img src width=1 height=1 ALT="description:......."> to put more invisible text on the page.

He uses multiple CCBill accounts, including 603702, 620418, 603704, and many more (I guess he decided to use a different account for each site, for whatever reason).

DHDRevEx affiliate code: 107924
Porn Star Bucks: 17114
Verotel ID: 9804000000567825
Dollar 4 Babes: 103118
Gorgia Cash: 100189
ARS: 94164
Silvercash: 257472
Light Speed Girls: 39767
Maximum Cash: nkamat
Gorilla Cash: gt2103
Giga Cash: 156751
Epic Cash: fslfsl
Adult Lounge: 101419
Traffic Cash Gold: top10links
Sunny Dollars: 1364
Pimp Roll: pimp4753
Adult Players Club: hcfsl
Platinum Bucks: 1259
Top Bucks: 5776

..The list goes on.

BTW, you can't find the affiliate codes from looking at the source code. I was able to see the actual affiliate links using http://web-sniffer.net/

Good news is only about 150 pages from each domain is indexed in Google, so far. The bad news is if a domain ranks for a key phrase, and positions above your page, then your page will be pushed a *few* pages down from all the above domains showing up above your link. Read the descriptions for all the listings and of course they're identical, except for the leading text which contains the domain name (I guess used to avoid being listed as similar pages).

EDIT: Added a few more info as I came across more stuff. Double check the affiliate IDs; since I extracted them from ref codes, I can't vouch for their complete accuracy.

[Bill]

gideon, that's a beautiful sample. That's a classic.

halfdeck, from your original description I was momentarily doubtful, but all it takes is dropping two or three of those names into the googlebar to see that it's just a distributed version of the first one. A lot of structural similarities, actually.

Two good finds.

[Halfdeck]

Originally Posted by Bill

all it takes is dropping two or three of those names into the googlebar to see that it's just a distributed version of the first one. A lot of structural similarities, actually.

Yep.

Just do a search on google for "kristina lee" porn to see the pages in action.

http://www.google.com/search?hl=en&l...rn&btnG=Search

With 10 results/page, you're looking at result pages 1-41 taken over by this guy's duplicate pages...(so redefine site positioned above mine to SITES positioned above mine) and he's not even using subdomains. Freeone comes up on page 31, and they usually place relatively high for model names. Rabbitsreview on page 38-39, and my pages on 37.

Even if Google had a "block this site" feature, the surfer will have to do a lot of clicking to make those links dissappear.

[Linkster]

Im hoping thats a fake addy in the whois - since that addy is also located on this page http://www.webfoot.com/shareweb.html

kinda strange though - its the same whois on at least 400 domains I found

[Linkster]

Also noted that in Googles listings they already see these as dupes - theyre labelled as supp results so should be out next update

[Bill]

BTW, if anyone wants to submit a sample anonymously, just PM me with your find and I'll present it.

I've been busy practicing with wordpress the last few days, so I'm a little behind hunting my own samples, but this is still a very front-burner experiment in my thoughts.

Both of those samples are in the supplemental results Linkster? That's a shame - we'll need to keep looking for newer samples.

We'll have to figure out how to keep this information in some sort of spam record, so we can track these things over time.

[Halfdeck]

Originally Posted by Linkster

Also noted that in Googles listings they already see these as dupes - theyre labelled as supp results so should be out next update

Great, more room for my sites to breathe, hopefully soon

[neveremail]

This looks like a very promising move by the honest webmaster community

It would be useful to me (and so probably many others) if the whole concept of finding spam websites could be explained in the form of a tutorial and what actions should be taken. This tutorial could then be posted on other boards to to try and encourage involvement by many other webmasters.

I think this has idea has good potential to have a good effect on our SE rankings and therefore our wallets - while not solving the problem could put a nice dent in it. And one thing I can be sure of with spammers is thier after the easy buck - thier not prepared to do the hardwork - and this sort of thing makes them work harder.

[Bill]

A tutorial huh? What kinds of things should be in that tutorial, I wonder.

Definitely instructions on how to effectively use the spamreport page. I have a good general idea of the optimum ways to do this, but I'm not at all an expert on it. We'd want to ask for some input from the experts.

----

I think the new patent's implications have already been understood by the spammers, and that we should expect to see distrbuted spam that is built more slowly- basically, instead of 1 site with a sudden 10,000 pages 10 sites with a sudden few hundred to a thousand pages.

This is one of the things I wa seeing as I was casually spam hunting. I think there was less spam than usual in the top tens, but it was fully occupying the results from #11 on down.

Here's some samples of what i think is distrubuted spam.

keyword + page scriptspamming I think by all the same guy.

http://hyperfree.com/hardcore/clips/...es-photos.html
site:hyperfree.com
Results 1 - 20 of about 38,500 from hyperfree.com
hyperfree looks to be a freehost so page count may not apply.

http://mpegs.b33r.net/sex-videos/fre...deo-clips.html
site:mpegs.b33r.net
Results 1 - 20 of about 883 from mpegs.b33r.net

http://prostrace.wftp.org/en/videos.html
site:prostrace.wftp.org
Results 1 - 20 of about 70 from prostrace.wftp.org

this might be the same guy, but also might not:

http://sraka.nerdcamp.net/2005/jul/9...cum-shots.html
site:sraka.nerdcamp.net
Results 1 - 20 of about 921 from sraka.nerdcamp.net


Another variety of spam with cloaking and redirecting:

http://www.cheneycowles.org/videos/f...l-cumshots.htm
site:www.cheneycowles.org
Results 1 - 20 of about 749 from www.cheneycowles.org
redirects to what looks like an igotguns page

[neveremail]

I think the tutorial should just cover how to identify spammers in SE results - e.g what to look for - and then once you have found it a detailed step by step tutorial on how to report it to google, yahoo etc.

Keeping it as simple and as short as you can so ppl will read it and will act on its advice.

Post it in a number of forums and I'm sure you would get a good number of ppl spending a few hours a month to fight the spammers. Something we would likely all benifit from.

[tickler]

One of the easiest to spot is duplicate page names and descriptions taking up multiple top spots. I even saw one that was tossing out different responses for every hit on the same page?????

I think using the SE spam reports, and also hammering the sponsors is a worthwhile effort.

[DSS]

By taking keywords for any certain keyword phrase from inventory.overture.com and adding them all to a webpage helps that webpage show up for many different search terms.

Its easier to write a webpage for search engiens to understand, than to write a webpage for humans AND search engines.