Greenguy's Board

Greenguy's Board (http://www.greenguysboard.com/board/index.php)
-   Search Engines (http://www.greenguysboard.com/board/forumdisplay.php?f=13)
-   -   SE Spammer Revealed (http://www.greenguysboard.com/board/showthread.php?t=21465)

Halfdeck 2005-07-03 08:57 AM

Quote:

Originally Posted by Altheon
I'm going over it now and it looks like this guys is doing some sort of cloaking. I'm using CodeLifter to grab his page. Sadly it can't pick up the stuff that his server does.

just hit google for site:www.songlyrics4me.com for more details


pornrex,

This is the code I lifted from a page of SE spammer. Hopefully we can put our heads together and figure out how he/she did it.

-A


I'm not sure if anyone mentioned this before, but there are a bunch of links to porn related urls on the bottom of the source code hidden crudely by the
tag.

Halfdeck 2005-07-03 10:37 AM

His Silvercash acc # is 1007351, and nasty dollars acc id is easymojo, in case anyone is interested.

Bill 2005-07-03 02:39 PM

That's the spirit! I'm glad to see there is an interest in this...

I wonder what would happen if the sponsors in question started receiving concentrated complaints about spammer ID's, complaints combined with postings on message boards listing known spammer IDs and the sponsors who are protecting them?

Like Gideon says, and as people like Linkster and DD say, they key to getting the spamreport to work involves putting as much extra information about the whole network as possible into the spam report form.

Don't report individual pages, report whole networks at once.

It may take some help from people with whois.sc accounts to get the best effect from this.

---

I think maybe the next step would be to identify a few new spam networks, post their domain names and some sample pages here, then see if we can get a half dozen to a dozen people here to counter attack them all at once.

The counter attack would involve:

1. A group effort with the spamreport page.

and, for additional effect...

2. A group effort writing spam complaints to the sponsors about the sponsor ID's involved, inviting the sponsors to come here and explain why they support search engine spam.

(this second part may or may not work, but if it works even a little bit, imagine how satisfying that would be. )

doublep 2005-07-03 02:54 PM

Go on then, count me in - I'll help out anyway I can.

doublep 2005-07-03 03:00 PM

.. and Gideon - I checked your blog, it's right up my street ;)

I loved this:

TVNL Editor's Comments: This morning Miles O'Brien, the pretend journalist on CNN, asked a shark expert what he thought “the shark was thinking” while it was biting the girl who was killed in Florida. Am I wrong or can we simply declare that the talking heads on CNN are idiots? What kind of question is that? He also asked the expert what makes this attack different than other attacks. I’ll answer that…the overblown and idiotic media coverage.

Cheers - I'm going to send you an icq request :)

Rorschach 2005-07-03 06:36 PM

So can someone tell me why you don't think that sponsors should not accept perfectly legal traffic? For example, with the filehandler.biz guy's stuff - no laws are being broken, no mainstream surfers are being forced to look at porn, there's no blog/ wiki/ ref spamming, about the only thing he's guilty of is adding some hidden links to the bottom of the pages on his own site and using a content delivery method that the SEs themselves use. The guy isn't filling up the internet with hardcore free porn for minors to look at (except for the single hosted galleries to which he sends some of his traffic). In my view this is certainly no worse than expired domain traffic (with which a far greater proportion of mainstream surfers get sucked into looking at porn) and no one ever bitches about that.

Oh sorry, I forgot, he's "cheating honest webmasters." |yawn|

SPAM = Site Positioned Above Mine |cry|

Bill 2005-07-03 07:33 PM

An old argument.

And the truth is many sponsors don't care a bit.

Many sponsors will just ignore such complaints.

But, it would be interesting to see what happens.

If just a few big sponsors decide that their long term interests are better served by avoiding se spam traffic, at least we would know those companies were a good choice for long term support.

I mention the sponsor thing only because any counterattack to spam would work best if you attacked on several fronts at once - and sponsors are one of the weak points that could be attacked.

I agree it is a weak tactic.

But some se spammers steal copy, so if we find stolen copy on a spam page, well, suddenly we have a stronger hand against the sponsor who is profiting from stolen copyrighted material.

RawAlex 2005-07-03 10:42 PM

Quote:

Originally Posted by gideon
Guys don't listen to spammers who try and convince you that its not worth reporting spam. It works almost everytime. The key is to fill out the spam report and on the "Additional details:" area put the root domain in there. This works for me every single time. And its not AFTER a cycle. I have seen them gone as fast as 6 days. I target 13 keyword phrases for a site of mine and I am back in the top 10 on almost all of them using the spam report.

I been at it 8 months and counting and the spammers are not back every cycle. Rorschach is full of shit.

Fighting spam is not futile, its an awesome way to get back traffic we normal webmasters work for.



This would be to suggest I am a spammer?

Nice.

Alex

gideon 2005-07-04 11:50 AM

Alex - that was directed at Rorshach. Go easy man .. this should be about working together against search engine spam and results hijacking. Don't say that I called you anything because I didn't but I did leave the door open for guilt by association so if the shoe fits..

I personally don't think you are a spammer but far be it from me to make that assesment. Feel free to let me know otherwise.

Peace,
- Gideon

Halfdeck 2005-07-05 06:58 AM

Count me in Bill. It takes no time to send off a quick email or fill out a spam report. Considering the death of even a few spam networks may mean more money in our pockets, why not?

Bill 2005-07-06 04:18 PM

Okay then, well, in the spirit of scientific inquiry and shits and giggles, let's try some experiments.

I'm going to look for some likely targets, but I'm asking everyone reading this to look at their own listings and pick out a few possible spammers.

I don't want this to be about me and my listings, so I'd rather start with a couple who aren't s.ites p.ositioned a.bove m.e.

The first step is to identify some spam networks. We need to make sure we are attacking the right type of spam. We are looking for:

1. Script generated pages.
(If it looks like it's handbuilt, as far as I'm concerned, the page probably isn't spam.)

2. Domains with huge numbers of pages. (The only way to make such things is with scripts.)

3. Junk content.

4. Stolen copy and content.

First thing to do is, pick out some samples, and study them.

I'm going to wait a day or two before listing samples of my own, and I'm really hoping to see some likley candidates from some of you folks.

gideon 2005-07-06 05:32 PM

I have already got so many guys removed it took me a few minutes to find one lol.. but here is one
google this "site:wftp.org"

doublep 2005-07-06 06:01 PM

Ok - here is something interesting for you I think. I Googled 'free porn movies' http://www.google.com/search?sourcei...ee+porn+movies

Top ten is TGP's, one link site in there. I surfed most of them and came away unscathed. But check the sponsored links - I'm seeing 2 domains only on there.

I clicked on this one http://www.porn--for--free.com/ it then hi-jacked my browser! - Try it using Internet Explorer.


One of life's little ironies!

I'll look for more tomorrow.

Cheers!

doublep 2005-07-06 06:19 PM

Quote:

Originally Posted by gideon
I have already got so many guys removed it took me a few minutes to find one lol.. but here is one
google this "site:wftp.org"

...yep, thats fucking ugly! |shocking|

Halfdeck 2005-07-06 08:49 PM

Quote:

Originally Posted by gideon
I have already got so many guys removed it took me a few minutes to find one lol.. but here is one
google this "site:wftp.org"

It's funny how the guy doesn't even bother using the noarchive tag. Also interesting that alot of the spam pages that stick out at me are using java redirects instead of IP cloaking. Finally, it's pretty surprising to find some of those pages show a PR of 4.

Halfdeck 2005-07-06 10:16 PM

Here is one guy using the same script/database to generate the same exact pages over multiple domains (and I'm not talking just 2-3). He does use a noarchive tag, so who knows, the pages may well be cloaked.

premiumxxxlinks.com
netcybersex.com
finderoticlinks.com
foxypetites.com
jackoffsites.com
viewpornos.com
foxytranssexuals.com
smutplaza.com
nakedblondies.com
nakedpeeing.com
11inchdicks.com
xlbreasts.com
nudesites.net
xxxsexorgy.com
sexyviews.com
ipornlinks.com
xxxnakedsites.com
over30porn.com
xxxindexer.com
xxxexhibitionists.com
nakedbisexuals.com
upskirtlove.com
xxxsitereviews.com
seesexvideos.com
xxxpornlinks.net
sexsitedomains.com
myadultlinks.net

There are tons more, but my fingers are getting tired, so I'll stop here.

Notice he uses comments <-- keywords: --> and <-- description: --> in the HTML a number of times on the top/bottom of the page. He also uses description:....... to put more invisible text on the page.

He uses multiple CCBill accounts, including 603702, 620418, 603704, and many more (I guess he decided to use a different account for each site, for whatever reason).

DHDRevEx affiliate code: 107924
Porn Star Bucks: 17114
Verotel ID: 9804000000567825
Dollar 4 Babes: 103118
Gorgia Cash: 100189
ARS: 94164
Silvercash: 257472
Light Speed Girls: 39767
Maximum Cash: nkamat
Gorilla Cash: gt2103
Giga Cash: 156751
Epic Cash: fslfsl
Adult Lounge: 101419
Traffic Cash Gold: top10links
Sunny Dollars: 1364
Pimp Roll: pimp4753
Adult Players Club: hcfsl
Platinum Bucks: 1259
Top Bucks: 5776

..The list goes on.

BTW, you can't find the affiliate codes from looking at the source code. I was able to see the actual affiliate links using http://web-sniffer.net/

Good news is only about 150 pages from each domain is indexed in Google, so far. The bad news is if a domain ranks for a key phrase, and positions above your page, then your page will be pushed a *few* pages down from all the above domains showing up above your link. Read the descriptions for all the listings and of course they're identical, except for the leading text which contains the domain name (I guess used to avoid being listed as similar pages).

EDIT: Added a few more info as I came across more stuff. Double check the affiliate IDs; since I extracted them from ref codes, I can't vouch for their complete accuracy.

Bill 2005-07-07 03:55 AM

gideon, that's a beautiful sample. That's a classic.

halfdeck, from your original description I was momentarily doubtful, but all it takes is dropping two or three of those names into the googlebar to see that it's just a distributed version of the first one. A lot of structural similarities, actually.

Two good finds.

Halfdeck 2005-07-07 09:32 AM

Quote:

Originally Posted by Bill
all it takes is dropping two or three of those names into the googlebar to see that it's just a distributed version of the first one. A lot of structural similarities, actually.

Yep.

Just do a search on google for "kristina lee" porn to see the pages in action.

http://www.google.com/search?hl=en&l...rn&btnG=Search

With 10 results/page, you're looking at result pages 1-41 taken over by this guy's duplicate pages...(so redefine site positioned above mine to SITES positioned above mine) and he's not even using subdomains. Freeone comes up on page 31, and they usually place relatively high for model names. Rabbitsreview on page 38-39, and my pages on 37.

Even if Google had a "block this site" feature, the surfer will have to do a lot of clicking to make those links dissappear.

Linkster 2005-07-07 10:40 AM

Im hoping thats a fake addy in the whois - since that addy is also located on this page http://www.webfoot.com/shareweb.html

kinda strange though - its the same whois on at least 400 domains I found

Linkster 2005-07-07 10:41 AM

Also noted that in Googles listings they already see these as dupes - theyre labelled as supp results so should be out next update

Bill 2005-07-08 07:29 PM

BTW, if anyone wants to submit a sample anonymously, just PM me with your find and I'll present it.

I've been busy practicing with wordpress the last few days, so I'm a little behind hunting my own samples, but this is still a very front-burner experiment in my thoughts.

Both of those samples are in the supplemental results Linkster? That's a shame - we'll need to keep looking for newer samples.

We'll have to figure out how to keep this information in some sort of spam record, so we can track these things over time.

Halfdeck 2005-07-09 08:51 AM

Quote:

Originally Posted by Linkster
Also noted that in Googles listings they already see these as dupes - theyre labelled as supp results so should be out next update

Great, more room for my sites to breathe, hopefully soon :)

neveremail 2005-07-14 07:37 PM

This looks like a very promising move by the honest webmaster community :)

It would be useful to me (and so probably many others) if the whole concept of finding spam websites could be explained in the form of a tutorial and what actions should be taken. This tutorial could then be posted on other boards to to try and encourage involvement by many other webmasters.

I think this has idea has good potential to have a good effect on our SE rankings and therefore our wallets - while not solving the problem could put a nice dent in it. And one thing I can be sure of with spammers is thier after the easy buck - thier not prepared to do the hardwork - and this sort of thing makes them work harder.

Bill 2005-07-15 04:34 AM

A tutorial huh? What kinds of things should be in that tutorial, I wonder.

Definitely instructions on how to effectively use the spamreport page. I have a good general idea of the optimum ways to do this, but I'm not at all an expert on it. We'd want to ask for some input from the experts.

----

I think the new patent's implications have already been understood by the spammers, and that we should expect to see distrbuted spam that is built more slowly- basically, instead of 1 site with a sudden 10,000 pages 10 sites with a sudden few hundred to a thousand pages.

This is one of the things I wa seeing as I was casually spam hunting. I think there was less spam than usual in the top tens, but it was fully occupying the results from #11 on down.

Here's some samples of what i think is distrubuted spam.

keyword + page scriptspamming I think by all the same guy.

http://hyperfree.com/hardcore/clips/...es-photos.html
site:hyperfree.com
Results 1 - 20 of about 38,500 from hyperfree.com
hyperfree looks to be a freehost so page count may not apply.

http://mpegs.b33r.net/sex-videos/fre...deo-clips.html
site:mpegs.b33r.net
Results 1 - 20 of about 883 from mpegs.b33r.net

http://prostrace.wftp.org/en/videos.html
site:prostrace.wftp.org
Results 1 - 20 of about 70 from prostrace.wftp.org

this might be the same guy, but also might not:

http://sraka.nerdcamp.net/2005/jul/9...cum-shots.html
site:sraka.nerdcamp.net
Results 1 - 20 of about 921 from sraka.nerdcamp.net


Another variety of spam with cloaking and redirecting:

http://www.cheneycowles.org/videos/f...l-cumshots.htm
site:www.cheneycowles.org
Results 1 - 20 of about 749 from www.cheneycowles.org
redirects to what looks like an igotguns page

neveremail 2005-07-15 04:57 AM

I think the tutorial should just cover how to identify spammers in SE results - e.g what to look for - and then once you have found it a detailed step by step tutorial on how to report it to google, yahoo etc.

Keeping it as simple and as short as you can so ppl will read it and will act on its advice.

Post it in a number of forums and I'm sure you would get a good number of ppl spending a few hours a month to fight the spammers. Something we would likely all benifit from.

tickler 2005-07-15 11:52 PM

One of the easiest to spot is duplicate page names and descriptions taking up multiple top spots. I even saw one that was tossing out different responses for every hit on the same page?????

I think using the SE spam reports, and also hammering the sponsors is a worthwhile effort.

DSS 2005-07-17 07:18 PM

By taking keywords for any certain keyword phrase from inventory.overture.com and adding them all to a webpage helps that webpage show up for many different search terms.

Its easier to write a webpage for search engiens to understand, than to write a webpage for humans AND search engines.


All times are GMT -4. The time now is 08:25 AM.

Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
© Greenguy Marketing Inc