Tuesday, August 08, 2006

So, I'm sure most of you remember the big fuss a few weeks ago about those two or three sites that had billions, yes thats BILLIONS of pages indexed by Google, nothing but pure spam. Well, it was posted on the Digital Point Webmaster Forum and gained attention fast, quickly making the frontpage of Digg and other such sites.

To Google's credit, they got rid of those three sites pretty fast. Good job on that. But there is a bigger problem, the exploit/hole is still there. There are still billions of spam pages indexed as I found tonight when I made a search. Somewhere, someone, knows the hole and they're exploiting it and making a TON of cash at the cost of our searching experience. They also seem to target search typo's, maybe to avoid detection and fly under the radar?

Here's a few examples of what I mean:

http://www.google.com/search?hl=en&lr=&q=cabineys
(search typo of cabinets)

http://www.google.com/search?hl=en&lr=&q=free+ringtpnes (free ringtones)

http://www.google.com/search?hl=en&lr=&q=used+cas
(used cars typo)


And the list goes on, pretty much any major keyword you search for that contains a typo, is nothing but these spam pages, millions upon millions of them.


Whats worse? I did whois on some of the domains, most of them were registered just two weeks ago, already they have this many pages indexed.
But it gets better...


I gathered this list, just a tiny fraction of blog spam I was able to find by searching for: "typo keyword here, blog".

http://www.google.com/search?hl=en&lr=&sa=G&q=site:jyngi.be

http://www.google.com/search?hl=en&lr=&sa=G&q=site:dunalus.be

http://www.google.com/search?hl=en&lr=&sa=G&q=site:gzadh.info

http://www.google.com/search?hl=en&lr=&sa=G&q=site:ldless.be


Hell, I even found a partypoker.com casino ripoff here:

http://www.google.com/search?hl=en&lr=&sa=G&q=site:-partypoker.org

I looked at the whois and did reverse IP look up on some of these domains, I found out this seems to be his money maker> http://www.find.fm/?aid=4077
Obviously his affiliate ID is 4077. So we will call him "Spammer4077". =P

Here's the full list of SPAM I dugg up in just over 30min time:

http://www.google.com/search?hl=en&lr=&sa=G&q=site:ottawa1.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:sderki.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:bijhij.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:23iojd.info
http://www.google.com/search?hl=en&lr=&q=site:libjir.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:2beog5d.info
http://www.google.com/search?hl=en&lr=&q=site%3A-data.info&btnG=Search
http://www.google.com/search?hl=en&lr=&sa=G&q=site:xvptlj.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:fg0swp0.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:0mw8w.kom.pl
http://www.google.com/search?hl=en&lr=&sa=G&q=site:ogart.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:o-f.com
http://www.google.com/search?hl=en&lr=&sa=G&q=site:uc0pn6.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:nsoelam.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:thalc34.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:mo1kj2c.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:eqo.de
http://www.google.com/search?hl=en&lr=&sa=G&q=site:saw5lcls.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:altsenior.info
http://www.google.com/search?hl=en&lr=&q=site:euro5.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:9zws9p9c.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:c5mi7rx0.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:f0maqnq.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:6karzz.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:2d8urk6f.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:rlg7aanq.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:qwubk9c.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:o972nwfz.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:yadod7r0.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:yow20zho.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:t1vtpp11.info
http://www.google.com/search?hl=en&lr=&sa=G&q=site:z01l2xm9.info



Blog Spam
http://www.google.com/search?hl=en&lr=&sa=G&q=site:jyngi.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:visabli.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:lokaose.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:illibne.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:lupan.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:kfular.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:getid.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:balka.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:coonitr.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:fuzzine.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:dunalus.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:ldless.be
http://www.google.com/search?hl=en&lr=&sa=G&q=site:gzadh.info




Party Poker Casino Ripoff:

http://www.google.com/search?hl=en&lr=&sa=G&q=site:-partypoker.org




Typo Searches:

http://www.google.com/search?hl=en&lr=&q=cabineys (cabinets)
http://www.google.com/search?hl=en&lr=&q=used+cas (used cars)
http://www.google.com/search?hl=en&lr=&q=home+sals (home sales)
http://www.google.com/search?hl=en&lr=&q=Insurance+Caims (Insurance Claims)
http://www.google.com/search?hl=en&lr=&q=free+ringtpnes (free ringtones)
http://www.google.com/search?q=hpme+loans&hl=en&lr=&start=10&sa=N (home loans)

No comments: