 |
|
|
|
|
|
|
|
|
2005-06-30, 12:19 AM
|
#1 |
|
Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos!
Join Date: Jan 2004
Posts: 74
 |
SE Spammer Revealed
For you guys at the SE chat here is the page of the spammer that Linkster mentioned.
Code:
<head>
<title>:: Welcome ::</title>
</head>
<script>
var freeOut=0,popStop=0;
var n=self.location.href;
if ((i=n.indexOf("?"))>1) n=n.substring(0,i);
var i=n.indexOf('.cgi');
var freeOut=0; var j=0;
var s=new Array('','http://s3.filehandler.biz/fpa/bisexual/1.html','http://www.downloadpass.com/ft=pimp6434-1/view_n.htmlQQniche_id=255','http://s3.filehandler.biz/fpa/bisexual/dating.html','http://www.megasitepass.com/ft=pimp6434/index.html?cf=1','http://www.allsitesaccess.com/2/main.htm?id=easymojo&p=clean');
function unload(){
if (freeOut==1) return;
ref=self.location.href;
if ((j=ref.indexOf("://"))>1) ref=ref.substring(j);
if ((j=ref.indexOf("/"))>1) ref=ref.substring(0,j);
if (popStop){
popW=parent.document.body.offsetWidth; popH=parent.document.body.offsetHeight;
window.showModalDialog('http://s3.filehandler.biz/fpa/asian/popup.html','','help:no;status:no; dialogHeight:'+(popH+30)+'px; dialogWidth:'+(popW+8)+'px');
} else
window.open('http://s3.filehandler.biz/fpa/asian/popup.html');
}
</script>
<noscript><frameset rows='100%,*' scrolling=no border=0 frameborder=no framespacing=0>
<frame src='http://s3.filehandler.biz/fpa/bisexual/1.html' scrolling=auto border=0 frameborder=0>
</frameset></noscript>
<script>
if (document.all) {
popStop=1; nort1=0;
eval("nort=typeof(Sym"+"Real"+"winOpen)");
if (typeof nort=='object') { nort1=1; popStop=1; }
else if ( popTest=window.open('','Tpop','top=1300')) {
if (typeof popTest=='object') setTimeout('next()',1);
}
}
function next(){
try{
with(popTest.document){ open(); write("b"); close(); }
if (popTest.document.body.innerHTML=='b') { popStop=0; popTest.close(); }
} catch(er){ }
}
</script>
<script>
document.write("<FRAMESET ROWS='100%,*' SCROLLING=no BORDER=0 frameborder=no "+
"framespacing=0 onunload='unload()'>");
document.write("<FRAME src='show.html' SCROLLING=auto BORDER=0 frameborder=0 name=SHOW1011>");
document.write("<FRAME src='show_empty.html' SCROLLING=no name=VSmall BORDER=0 frameborder=0></frameset>");
</script>
|
|
|
|
2005-06-30, 12:35 AM
|
#2 |
|
feeling a bit better
|
Hi Altheon.
Forgive my newbieness but what does this mean?
__________________
colo-cation - the only host you'll need |
|
|
|
|
2005-06-30, 12:40 AM
|
#3 |
|
Selling porn allows me to stay in a constant state of Bliss - ain't that a trip!
Join Date: Apr 2003
Posts: 3,914
|
It's an ugly bugger. ;-}
Did the page have that "WELCOME" title, or did it somehow generate another title? How does it work? It looks like it's just calling a bunch of frames. Presumably then there's another script generating the thousands of frames needed. |
|
|
|
|
2005-06-30, 12:50 AM
|
#4 |
|
Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos!
Join Date: Jan 2004
Posts: 74
|
I'm going over it now and it looks like this guys is doing some sort of cloaking. I'm using CodeLifter to grab his page. Sadly it can't pick up the stuff that his server does.
just hit google for site:www.songlyrics4me.com for more details pornrex, This is the code I lifted from a page of SE spammer. Hopefully we can put our heads together and figure out how he/she did it. -A |
|
|
|
|
2005-06-30, 03:40 AM
|
#5 |
|
I can now put whatever I want in this space :P
Join Date: Jun 2005
Location: Boobville... I like it way better here
Posts: 557
|
I'm not sure this is for SE spamming. From a first quick look it seems to me like this java script would generate a page with multi-frames (afaik multi-frames don't work best with SE's), then populate them with different content loading from different places (again, dynamic content, bad for the SE's). It also generates popups (bad for Se's as well?) and, again, puts dynamic pages in them, pages taken from here:
var s=new Array('','http://s3.filehandler.biz/fpa/bisexual/1.html','http://www.downloadpass.com/ft=pimp6434-1/view_n.htmlQQniche_id=255', 'http://s3.filehandler.biz/fpa/bisexual/dating.html', 'http://www.megasitepass.com/ft=pimp6434/index.html?cf=1','http://www.allsitesaccess.com/2/main.htm?id=easymojo&p=clean'); So, basically, different html pages from different sites ar being loaded as frames on his own pages. Also looks like the script is loading on the surfer's machine, and not on the server, which again can't be too good for SE bots... At this point this don't seem like much of a SE spamming script that will actually work. Although it's early a.m. here and my half-shut eyes might have missed something, it's likely they didn't. This script just doesn't look like a wise SE spamming one. Has its purposes, yes, but hardly that purpose. Ergo I doubt this is the script you guys were looking for - tho it's likely to be the same guy - the scripting is rather elegant then noobish ("not too too, not very very") so the guy who coded it might as well have coded some SE spamming stuff. Anyways, I'm positive Linkster was probably talking about something else. Waiting for his input on this one. Altheon, if you get me this allegedly SE spammer's sites/domains, I'll have a sniff around... see what's up with the whole SE spamming thingie.
__________________
With sufficient thrust, pigs fly just fine! |
|
|
|
|
2005-06-30, 08:01 AM
|
#6 |
|
NO! Im not a female - but being a dragon, I do eat them.
Join Date: Mar 2003
Location: Sex Delta
Posts: 5,084
|
oh this is definitely the guy - he's dumped over 670000 pages into Google and is ranking in the top 10 for almost every term phrase he went after - he's populating the pages with search phrases he scraped from either Google or Yahoo - interesting approach - he built the first part of the site using non-adult stuff - song lyrics - then ran the script on adult terms with every page acting as a backlink
Of course I see Pimproll is getting some benefit from this guy - guess we'll have to do some more digging |
|
|
|
|
2005-06-30, 08:08 AM
|
#7 |
|
NO! Im not a female - but being a dragon, I do eat them.
Join Date: Mar 2003
Location: Sex Delta
Posts: 5,084
|
I was trying to find a cached page for one of these to see what Google was seeing - fortunately it looks like theyve already started pulling his pages as theyve pulled all the caches and a lot of pages are going to url only - on his old pages he had some downloaders that would install a cab file and extract itself to load referral codes and nasties into cookies - pretty elaborate scheme
|
|
|
|
|
2005-06-30, 08:08 AM
|
#8 |
|
Shut up brain, or I'll stab you with a Q-tip!
Join Date: Nov 2003
Posts: 115
|
Maximum respect to the filehandler.biz guy... you rock! I am not sure if it is the same person as the old hornyalien spam (the original .biz spammer), but if it is, I have been watching your stuff for a long time and you have truly been an inspiration!
|
|
|
|
|
2005-06-30, 08:10 AM
|
#9 |
|
I can now put whatever I want in this space :P
Join Date: Jun 2005
Location: Boobville... I like it way better here
Posts: 557
|
Well that domain isn't working anymore. Got a new one?
BTW, I don't think the sponsor has anything to mind about, does he?
__________________
With sufficient thrust, pigs fly just fine! |
|
|
|
|
2005-06-30, 09:07 AM
|
#10 |
|
NO! Im not a female - but being a dragon, I do eat them.
Join Date: Mar 2003
Location: Sex Delta
Posts: 5,084
|
try this one - its one of his others
 tonsoflyrics com - BTW - all of his pages do have a downloader built in so be careful |
|
|
|
|
2005-06-30, 09:47 AM
|
#11 |
|
I can now put whatever I want in this space :P
Join Date: Jun 2005
Location: Boobville... I like it way better here
Posts: 557
|
hmmm... he was blocking ip's that's why I got an error. Hey, linkster, are you ever on ICQ?
__________________
With sufficient thrust, pigs fly just fine! |
|
|
|
|
2005-06-30, 11:41 AM
|
#12 |
|
They have the Internet on computers, now?
Join Date: Feb 2004
Location: Louisiana
Posts: 145
|
The crappy thing is that alot of sponsors allow this shit and thats why its such a problem. I have reported alot of these bastards to Pimproll and others and they really are asswhipes about it.
On the other hand Google and other search engines actually do something about it. I have screwed a bunch of the bastards even the pathetic loser who posts in every thread on Greenguy and Jim about SE spamming.. whats his name? oh yeah "poser wannabe" I mean Rorschach ... this guy is a bane on all webmasters who play by the rules. Pathetic parasites... he is as usual a foreigner.. Rorschach - I forgot about you for awhile but don't worry you just reminded me to go do some Google policing Thanks BUDDY!  |
|
|
|
|
2005-06-30, 12:19 PM
|
#13 |
|
I'm the only guy in the world who has to wake up to have a nightmare
Join Date: Feb 2004
Location: London, United Kingdom
Posts: 1,895
|
Was meaning to ask myself about the tonsoflyrics.com guy, seen a lot of his pages in the last 2 days. Here's hoping he gets hit by a big truck.
|
|
|
|
|
2005-06-30, 04:00 PM
|
#14 | |
|
Shut up brain, or I'll stab you with a Q-tip!
Join Date: Nov 2003
Posts: 115
|
Quote:
 |
|
|
|
|
|
2005-06-30, 04:50 PM
|
#15 |
|
Selling porn allows me to stay in a constant state of Bliss - ain't that a trip!
Join Date: Apr 2003
Posts: 3,914
|
JohnnyR, google has improved it's spidering of frames, so the old limitations with frames don't apply so much anymore.
Similarly for dynamic content. Some dynamic content still baffles the spider, but a lot of it is a lot more spiderable than it was some months ago. Since I am a recent convert to the efficacy of the google spam report page, PROVIDED that the right techniques are used for reporting spam, I think it might be worthwhile for us to study pages like these and learn how to attack them as a group. There's a whole business model that can be built around reporting and helping to remove spam like this. But, it will take a bit of strategy, getting the right information, and using the right methods. |
|
|
|
|
2005-06-30, 11:23 PM
|
#16 |
|
Took the hint.
Join Date: Mar 2003
Posts: 5,597
 |
Actually generating pages like that isn't all that hard. Combinations of PHP, htaccess, and a small database, and you can generate pages like a wild man. Googlebot is a little bit stupid when it comes to these things, and can often be tricked into pikcing up tens of thousands of pages very quickly.
The code you are seeing is secondary code, IMHO - it is what he is doing to some of the traffic when he gets the hit from google. You would have to immitate googlebot (spoof headers, whatever) to really see what the bots see. He is doing too good of a job. Greedy moron! |
|
|
|
|
2005-07-01, 03:41 AM
|
#17 | |
|
If something goes wrong at the plant, blame the guy who can't speak English
Join Date: Apr 2003
Location: Europe
Posts: 306
|
Quote:
Secondly - do you really think any sponsor who has webmasters - whatever race - sending thousands of dollars in sales per day to their program by means that you don't agree with actually give a fuck what you think! If you do - you have truly just dropped out the mother ship - Tsk! |
|
|
|
|
|
2005-07-01, 11:26 AM
|
#18 |
|
They have the Internet on computers, now?
Join Date: Feb 2004
Location: Louisiana
Posts: 145
|
You are either a pathetic spammer yourself or you are just plain ignorant. Foreigner (if you have been around the game as long as I have) almost always refers to the guys from those countries which are usually banned by sponsors anyway because of the CHEATING and other illegal activities. Now futhermore I stated a FACT you little piss ant. Why can I not tell the truth? If it makes you mad then tell all your little buddies to quit fucking up the fucking internet for everyone else! I have been around since the beginning and the "foreigners" have ALWAYS fucked it up. From hiring a bunch of fuckers to sit at terminals in a warehouse clicking links to make per click programs go away and then later on in the late '90s they started using stolen credit cards which fucked up the scrubbing for honest webmasters and made ratios go to shit and lets not forget about all the fucking tricks and viruses that they fuck our surfers with so that the surfers aren't as comfortable surfer porn sites anymore. AND the god damn email spamming thats has fucked up what could have been a great additional way to make money. AND of course the SEARCH ENGINE SPAM you want to pretend is OK for your little buddies to do. Fuck you and your little roaches. I am tired of everyone being scared to admit the truth. I just did.
NOW if this does not apply to you then keep your mouth shut if it does then you should rot in hell with the rest of the foreign spammers Not one time have I ever made a racist comment. I told the truth. Racism can be defined at dictionary.com since the meaning of the word seems to have eluded you. |
|
|
|
|
2005-07-01, 12:21 PM
|
#19 |
|
I can now put whatever I want in this space :P
Join Date: Jun 2005
Location: Boobville... I like it way better here
Posts: 557
|
gideon, I hardly doubt doublep is a spammer as you're suggesting. I mean, check his sig. I'm sure you know his LL, he probably sent you lots of good traffic along the way, as he did for me. Further more, I belive there's no nead for this war between us... We all agree, these guys have to be stopped. So why not put our energy at doing something to stop them, instead of fighting amongst each other. Some harsh words might have been said, but that's not such a big deal. Let's leave these kind of comments aside, and focus on the job at hand.
Bill, I belive you have something in mind... wanna share?
__________________
With sufficient thrust, pigs fly just fine! |
|
|
|
|
2005-07-01, 01:03 PM
|
#20 |
|
They have the Internet on computers, now?
Join Date: Feb 2004
Location: Louisiana
Posts: 145
|
My apologies..
|
|
|
|
|
2005-07-01, 01:31 PM
|
#21 | |
|
Verbal prefers 56K
Join Date: Sep 2003
Location: Chicago, IL
Posts: 563
|
Quote:
Hehehh.. that cracked me up, thanks.
__________________
Verbal |
|
|
|
|
|
2005-07-01, 02:12 PM
|
#22 |
|
If something goes wrong at the plant, blame the guy who can't speak English
Join Date: Apr 2003
Location: Europe
Posts: 306
|
Gideon - you missed my point - cheaters come from every corner of this planet - yes, even the good old U S of A - as an American, your attention should be focused on your own elected cheaters, who are slowly but surely cheating you out of your right to conduct business. There are lots of nice folk on this board , who are foreigners - - and are most defiantly not cheaters. Food for thought!
It is Friday night - I have an appointment with a Mr Daniels - one of my favorite Americans! ;-) Johnny R - Greetings! :-) Peace - PP |
|
|
|
|
2005-07-01, 02:35 PM
|
#23 |
|
I can now put whatever I want in this space :P
Join Date: Jun 2005
Location: Boobville... I like it way better here
Posts: 557
|
Greetings doublep. Glad you guys sort this out.
I have a question about it: why does this guy have the lyrics paravan? I don't get it. Is he tricking the SEs in some way with it? They crawl the first few pages, give his domain the "ok" and only then they get into the porn stuff which they think it's ok too? I mean, it's a porn site, even if it doesn't have the right domain name. So, why the front? Why not have porn on the main page to act like a hub or something?
__________________
With sufficient thrust, pigs fly just fine! |
|
|
|
|
2005-07-01, 03:07 PM
|
#24 |
|
Took the hint.
Join Date: Mar 2003
Posts: 5,597
|
Doublep, I am not in the slight bit racists or otherwise having prejudice to people (my girlfriend is from a completely different culture, as are many of the friends).
However, if I want to locate an SE spammer or a link list cheater, I can assure you 110% that I have way more chance to find one if I head just slightly east of your location. Some of the best programmers in the world, combined with a "fuck the system" attitude and a willingness to do almost anything for money makes certain eastern block countries heaven for spammers, scammers, and jammers. It's not racist, it's what almost 10 years in this business has taught me. Alex |
|
|
|
|
2005-07-01, 03:08 PM
|
#25 | |
|
They have the Internet on computers, now?
Join Date: Feb 2004
Location: Louisiana
Posts: 145
|
Quote:
|
|
|
|
|
 |
|
|
Linear Mode
