|
|
|
|
|
|
|
![]() |
#1 |
Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos!
|
SE Spammer Revealed
For you guys at the SE chat here is the page of the spammer that Linkster mentioned.
Code:
<head> <title>:: Welcome ::</title> </head> <script> var freeOut=0,popStop=0; var n=self.location.href; if ((i=n.indexOf("?"))>1) n=n.substring(0,i); var i=n.indexOf('.cgi'); var freeOut=0; var j=0; var s=new Array('','http://s3.filehandler.biz/fpa/bisexual/1.html','http://www.downloadpass.com/ft=pimp6434-1/view_n.htmlQQniche_id=255','http://s3.filehandler.biz/fpa/bisexual/dating.html','http://www.megasitepass.com/ft=pimp6434/index.html?cf=1','http://www.allsitesaccess.com/2/main.htm?id=easymojo&p=clean'); function unload(){ if (freeOut==1) return; ref=self.location.href; if ((j=ref.indexOf("://"))>1) ref=ref.substring(j); if ((j=ref.indexOf("/"))>1) ref=ref.substring(0,j); if (popStop){ popW=parent.document.body.offsetWidth; popH=parent.document.body.offsetHeight; window.showModalDialog('http://s3.filehandler.biz/fpa/asian/popup.html','','help:no;status:no; dialogHeight:'+(popH+30)+'px; dialogWidth:'+(popW+8)+'px'); } else window.open('http://s3.filehandler.biz/fpa/asian/popup.html'); } </script> <noscript><frameset rows='100%,*' scrolling=no border=0 frameborder=no framespacing=0> <frame src='http://s3.filehandler.biz/fpa/bisexual/1.html' scrolling=auto border=0 frameborder=0> </frameset></noscript> <script> if (document.all) { popStop=1; nort1=0; eval("nort=typeof(Sym"+"Real"+"winOpen)"); if (typeof nort=='object') { nort1=1; popStop=1; } else if ( popTest=window.open('','Tpop','top=1300')) { if (typeof popTest=='object') setTimeout('next()',1); } } function next(){ try{ with(popTest.document){ open(); write("b"); close(); } if (popTest.document.body.innerHTML=='b') { popStop=0; popTest.close(); } } catch(er){ } } </script> <script> document.write("<FRAMESET ROWS='100%,*' SCROLLING=no BORDER=0 frameborder=no "+ "framespacing=0 onunload='unload()'>"); document.write("<FRAME src='show.html' SCROLLING=auto BORDER=0 frameborder=0 name=SHOW1011>"); document.write("<FRAME src='show_empty.html' SCROLLING=no name=VSmall BORDER=0 frameborder=0></frameset>"); </script> |
![]() |
![]() |
![]() |
#2 |
feeling a bit better
|
Hi Altheon.
Forgive my newbieness but what does this mean?
__________________
colo-cation - the only host you'll need |
![]() |
![]() |
![]() |
#3 |
Selling porn allows me to stay in a constant state of Bliss - ain't that a trip!
Join Date: Apr 2003
Posts: 3,914
|
It's an ugly bugger. ;-}
Did the page have that "WELCOME" title, or did it somehow generate another title? How does it work? It looks like it's just calling a bunch of frames. Presumably then there's another script generating the thousands of frames needed. |
![]() |
![]() |
![]() |
#4 |
Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos!
|
I'm going over it now and it looks like this guys is doing some sort of cloaking. I'm using CodeLifter to grab his page. Sadly it can't pick up the stuff that his server does.
just hit google for site:www.songlyrics4me.com for more details pornrex, This is the code I lifted from a page of SE spammer. Hopefully we can put our heads together and figure out how he/she did it. -A |
![]() |
![]() |
![]() |
#5 |
I can now put whatever I want in this space :P
|
I'm not sure this is for SE spamming. From a first quick look it seems to me like this java script would generate a page with multi-frames (afaik multi-frames don't work best with SE's), then populate them with different content loading from different places (again, dynamic content, bad for the SE's). It also generates popups (bad for Se's as well?) and, again, puts dynamic pages in them, pages taken from here:
var s=new Array('','http://s3.filehandler.biz/fpa/bisexual/1.html','http://www.downloadpass.com/ft=pimp6434-1/view_n.htmlQQniche_id=255', 'http://s3.filehandler.biz/fpa/bisexual/dating.html', 'http://www.megasitepass.com/ft=pimp6434/index.html?cf=1','http://www.allsitesaccess.com/2/main.htm?id=easymojo&p=clean'); So, basically, different html pages from different sites ar being loaded as frames on his own pages. Also looks like the script is loading on the surfer's machine, and not on the server, which again can't be too good for SE bots... At this point this don't seem like much of a SE spamming script that will actually work. Although it's early a.m. here and my half-shut eyes might have missed something, it's likely they didn't. This script just doesn't look like a wise SE spamming one. Has its purposes, yes, but hardly that purpose. Ergo I doubt this is the script you guys were looking for - tho it's likely to be the same guy - the scripting is rather elegant then noobish ("not too too, not very very") so the guy who coded it might as well have coded some SE spamming stuff. Anyways, I'm positive Linkster was probably talking about something else. Waiting for his input on this one. Altheon, if you get me this allegedly SE spammer's sites/domains, I'll have a sniff around... see what's up with the whole SE spamming thingie.
__________________
With sufficient thrust, pigs fly just fine! |
![]() |
![]() |
![]() |
#6 |
NO! Im not a female - but being a dragon, I do eat them.
|
oh this is definitely the guy - he's dumped over 670000 pages into Google and is ranking in the top 10 for almost every term phrase he went after - he's populating the pages with search phrases he scraped from either Google or Yahoo - interesting approach - he built the first part of the site using non-adult stuff - song lyrics - then ran the script on adult terms with every page acting as a backlink
Of course I see Pimproll is getting some benefit from this guy - guess we'll have to do some more digging |
![]() |
![]() |
![]() |
#7 |
NO! Im not a female - but being a dragon, I do eat them.
|
I was trying to find a cached page for one of these to see what Google was seeing - fortunately it looks like theyve already started pulling his pages as theyve pulled all the caches and a lot of pages are going to url only - on his old pages he had some downloaders that would install a cab file and extract itself to load referral codes and nasties into cookies - pretty elaborate scheme
|
![]() |
![]() |
![]() |
#8 |
Shut up brain, or I'll stab you with a Q-tip!
Join Date: Nov 2003
Posts: 115
|
Maximum respect to the filehandler.biz guy... you rock! I am not sure if it is the same person as the old hornyalien spam (the original .biz spammer), but if it is, I have been watching your stuff for a long time and you have truly been an inspiration!
|
![]() |
![]() |
![]() |
#9 | |
You can now put whatever you want in this space :)
|
Quote:
I'm not sure if anyone mentioned this before, but there are a bunch of links to porn related urls on the bottom of the source code hidden crudely by the <div style='display: none;'> tag.
__________________
Success is going from failure to failure without a loss of enthusiasm. |
|
![]() |
![]() |
![]() |
#10 |
You can now put whatever you want in this space :)
|
His Silvercash acc # is 1007351, and nasty dollars acc id is easymojo, in case anyone is interested.
__________________
Success is going from failure to failure without a loss of enthusiasm. |
![]() |
![]() |
![]() |
#11 |
Selling porn allows me to stay in a constant state of Bliss - ain't that a trip!
Join Date: Apr 2003
Posts: 3,914
|
That's the spirit! I'm glad to see there is an interest in this...
I wonder what would happen if the sponsors in question started receiving concentrated complaints about spammer ID's, complaints combined with postings on message boards listing known spammer IDs and the sponsors who are protecting them? Like Gideon says, and as people like Linkster and DD say, they key to getting the spamreport to work involves putting as much extra information about the whole network as possible into the spam report form. Don't report individual pages, report whole networks at once. It may take some help from people with whois.sc accounts to get the best effect from this. --- I think maybe the next step would be to identify a few new spam networks, post their domain names and some sample pages here, then see if we can get a half dozen to a dozen people here to counter attack them all at once. The counter attack would involve: 1. A group effort with the spamreport page. and, for additional effect... 2. A group effort writing spam complaints to the sponsors about the sponsor ID's involved, inviting the sponsors to come here and explain why they support search engine spam. (this second part may or may not work, but if it works even a little bit, imagine how satisfying that would be. ) |
![]() |
![]() |
![]() |
#12 |
I can now put whatever I want in this space :P
|
Well that domain isn't working anymore. Got a new one?
BTW, I don't think the sponsor has anything to mind about, does he?
__________________
With sufficient thrust, pigs fly just fine! |
![]() |
![]() |
![]() |
#13 |
NO! Im not a female - but being a dragon, I do eat them.
|
try this one - its one of his others
![]() tonsoflyrics com - BTW - all of his pages do have a downloader built in so be careful |
![]() |
![]() |
![]() |
#14 |
I can now put whatever I want in this space :P
|
hmmm... he was blocking ip's that's why I got an error. Hey, linkster, are you ever on ICQ?
__________________
With sufficient thrust, pigs fly just fine! |
![]() |
![]() |
![]() |
#15 |
They have the Internet on computers, now?
|
The crappy thing is that alot of sponsors allow this shit and thats why its such a problem. I have reported alot of these bastards to Pimproll and others and they really are asswhipes about it.
On the other hand Google and other search engines actually do something about it. I have screwed a bunch of the bastards even the pathetic loser who posts in every thread on Greenguy and Jim about SE spamming.. whats his name? oh yeah "poser wannabe" I mean Rorschach ... this guy is a bane on all webmasters who play by the rules. Pathetic parasites... he is as usual a foreigner.. Rorschach - I forgot about you for awhile but don't worry you just reminded me to go do some Google policing ![]() ![]() |
![]() |
![]() |
![]() |
#16 | |
If something goes wrong at the plant, blame the guy who can't speak English
Join Date: Apr 2003
Location: Europe
Posts: 306
|
Quote:
Secondly - do you really think any sponsor who has webmasters - whatever race - sending thousands of dollars in sales per day to their program by means that you don't agree with actually give a fuck what you think! If you do - you have truly just dropped out the mother ship - Tsk! |
|
![]() |
![]() |
![]() |
#17 |
They have the Internet on computers, now?
|
You are either a pathetic spammer yourself or you are just plain ignorant. Foreigner (if you have been around the game as long as I have) almost always refers to the guys from those countries which are usually banned by sponsors anyway because of the CHEATING and other illegal activities. Now futhermore I stated a FACT you little piss ant. Why can I not tell the truth? If it makes you mad then tell all your little buddies to quit fucking up the fucking internet for everyone else! I have been around since the beginning and the "foreigners" have ALWAYS fucked it up. From hiring a bunch of fuckers to sit at terminals in a warehouse clicking links to make per click programs go away and then later on in the late '90s they started using stolen credit cards which fucked up the scrubbing for honest webmasters and made ratios go to shit and lets not forget about all the fucking tricks and viruses that they fuck our surfers with so that the surfers aren't as comfortable surfer porn sites anymore. AND the god damn email spamming thats has fucked up what could have been a great additional way to make money. AND of course the SEARCH ENGINE SPAM you want to pretend is OK for your little buddies to do. Fuck you and your little roaches. I am tired of everyone being scared to admit the truth. I just did.
NOW if this does not apply to you then keep your mouth shut if it does then you should rot in hell with the rest of the foreign spammers Not one time have I ever made a racist comment. I told the truth. Racism can be defined at dictionary.com since the meaning of the word seems to have eluded you. |
![]() |
![]() |
![]() |
#18 | |
Verbal prefers 56K
|
Quote:
Hehehh.. that cracked me up, thanks. ![]()
__________________
Verbal |
|
![]() |
![]() |
![]() |
#19 |
If something goes wrong at the plant, blame the guy who can't speak English
Join Date: Apr 2003
Location: Europe
Posts: 306
|
Gideon - you missed my point - cheaters come from every corner of this planet - yes, even the good old U S of A - as an American, your attention should be focused on your own elected cheaters, who are slowly but surely cheating you out of your right to conduct business. There are lots of nice folk on this board , who are foreigners - - and are most defiantly not cheaters. Food for thought!
It is Friday night - I have an appointment with a Mr Daniels - one of my favorite Americans! ;-) Johnny R - Greetings! :-) Peace - PP |
![]() |
![]() |
![]() |
#20 |
I'm the only guy in the world who has to wake up to have a nightmare
Join Date: Feb 2004
Location: London, United Kingdom
Posts: 1,895
|
Was meaning to ask myself about the tonsoflyrics.com guy, seen a lot of his pages in the last 2 days. Here's hoping he gets hit by a big truck.
|
![]() |
![]() |
![]() |
#21 | |
Shut up brain, or I'll stab you with a Q-tip!
Join Date: Nov 2003
Posts: 115
|
Quote:
![]() |
|
![]() |
![]() |
![]() |
#22 |
Selling porn allows me to stay in a constant state of Bliss - ain't that a trip!
Join Date: Apr 2003
Posts: 3,914
|
JohnnyR, google has improved it's spidering of frames, so the old limitations with frames don't apply so much anymore.
Similarly for dynamic content. Some dynamic content still baffles the spider, but a lot of it is a lot more spiderable than it was some months ago. Since I am a recent convert to the efficacy of the google spam report page, PROVIDED that the right techniques are used for reporting spam, I think it might be worthwhile for us to study pages like these and learn how to attack them as a group. There's a whole business model that can be built around reporting and helping to remove spam like this. But, it will take a bit of strategy, getting the right information, and using the right methods. |
![]() |
![]() |
![]() |
#23 |
Took the hint.
|
Actually generating pages like that isn't all that hard. Combinations of PHP, htaccess, and a small database, and you can generate pages like a wild man. Googlebot is a little bit stupid when it comes to these things, and can often be tricked into pikcing up tens of thousands of pages very quickly.
The code you are seeing is secondary code, IMHO - it is what he is doing to some of the traffic when he gets the hit from google. You would have to immitate googlebot (spoof headers, whatever) to really see what the bots see. He is doing too good of a job. Greedy moron! |
![]() |
![]() |
![]() |
#24 |
I can now put whatever I want in this space :P
|
gideon, I hardly doubt doublep is a spammer as you're suggesting. I mean, check his sig. I'm sure you know his LL, he probably sent you lots of good traffic along the way, as he did for me. Further more, I belive there's no nead for this war between us... We all agree, these guys have to be stopped. So why not put our energy at doing something to stop them, instead of fighting amongst each other. Some harsh words might have been said, but that's not such a big deal. Let's leave these kind of comments aside, and focus on the job at hand.
Bill, I belive you have something in mind... wanna share?
__________________
With sufficient thrust, pigs fly just fine! |
![]() |
![]() |
![]() |
#25 |
They have the Internet on computers, now?
|
My apologies..
|
![]() |
![]() |
![]() |
|
|