New subdomain spam sites, sites disappeared

Discussion in 'Google' started by MikeSwede, Apr 7, 2007.

  1. #1
    Have another thread about my site disappearing overnight today and now I have some more information to why it might be this way.
    I see tons of different new sites with a javascript redirect in their pages where they check to see if it is Google or not. It seems that they have targeted a blog site somehow so when you click on the link in Google you redirects to a blog site.
    This search shows just a few of the sites with the info domain and a date of 04/05/07 or 04/06/2007 so they are newly indexed by Google.
    This is their Registrar info and the domain was created 2 days ago!!
    Domain ID:D17129242-LRMS
    Domain Name:YOLEKRAC.INFO
    Created On:05-Apr-2007 05:54:55 UTC
    Last Updated On:05-Apr-2007 05:54:59 UTC
    Expiration Date:05-Apr-2008 05:54:55 UTC
    Sponsoring Registrar:Direct Information Pvt. Ltd. d/b/a PublicDomainRegistry.com (R159-LRMS)
    Status:CLIENT TRANSFER PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:DI_5960474
    Registrant Name:wnvbial fgjxyjo townibyq
    Registrant Organization:pwmzu jnrwrmbr
    Registrant Street1:rijniwr nrmhbu
    Registrant Street2:
    Registrant Street3:
    Registrant City:ndwczua pvmhmwrv
    Registrant State/Province:0
    Registrant Postal Code:54786
    Registrant Country:CN
    Registrant Phone:+314.7605892

    Additional info:
    If you, for example, type in this address in your browser: kaipeiwr.oeddvekr.info/music_posters.html then you get a service unavailable page. If you click on a search result in google you are redirected to a blog. They use a javascript and it looks like this:
    if(top.document.referrer.indexOf("google") != -1 && top.document.referrer.indexOf("search") != -1 && top.document.referrer.indexOf("=") != -1 && top.document.referrer.indexOf("?") != -1)
    {
    var pizden=document.referrer;
    var reg=/.+google.+search.+q=([\w\d\+%]+)[\&]*.*/;
    var arr=reg.exec(pizden);
    var upis1='http://aboutev';
    var upis2='erythingblogz';
    var upis3='.com/?q=';
    var piska00="win";
    var piska01="dow.";
    var piska02="loca";
    var piska03="tion='";
    var piska1="'";
    eval(piska00+piska01+piska02+piska03+upis1+upis2+upis3+arr[1]+piska1);
    }

    More additions:

    If you search for this you will find about 336,000 pages with different info domains. Some of them seems ok but most of them are spam sites with a index date as of a couple of days ago and with a registration date as of a couple of days ago.
     
    MikeSwede, Apr 7, 2007 IP
  2. trichnosis

    trichnosis Prominent Member

    Messages:
    13,785
    Likes Received:
    333
    Best Answers:
    0
    Trophy Points:
    300
    #2
    i hate this . this search is full of spam:mad:
     
    trichnosis, Apr 7, 2007 IP
  3. login

    login Notable Member

    Messages:
    8,849
    Likes Received:
    349
    Best Answers:
    0
    Trophy Points:
    280
    #3
    What do you want to tell us ?
     
    login, Apr 7, 2007 IP
  4. MikeSwede

    MikeSwede Peon

    Messages:
    601
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Morrn, morrn.....

    Once again Google has been infiltrated by spam sites and somehow the sites was registered a couple of days ago, and they are already in the index......

    How'd you like that?
     
    MikeSwede, Apr 7, 2007 IP
  5. login

    login Notable Member

    Messages:
    8,849
    Likes Received:
    349
    Best Answers:
    0
    Trophy Points:
    280
    #5
    I see. But this happens every day, getting them indexed is the easiest part.

    But its interesting, do you have any solution or way to prevent it other than reporting to Google ?
     
    login, Apr 7, 2007 IP
  6. Forsh

    Forsh Well-Known Member

    Messages:
    510
    Likes Received:
    14
    Best Answers:
    0
    Trophy Points:
    158
    #6
    Sucks that people do this and destroy the integrity of the results so much.
     
    Forsh, Apr 7, 2007 IP