Is the SEO still real with Google? I bet big G is taking bribes to keep co-operate websites on top than quality websites.
Nice SEO parasites
- Thread starter (O_o)
- Start date
Live example of hacked hosting:
hxxp://ottmurphywines.com/sortition353/buy-rapid-weight-loss-now-supplements-ephedra-311.htm
using hacked hosting & sending traffic to bp weightloss lander for Garcinia Cambogia Extract.
main redirect is hosted on a dedi box in Amsterdam.
Flog =
Lander =
hxxp://ottmurphywines.com/sortition353/buy-rapid-weight-loss-now-supplements-ephedra-311.htm
using hacked hosting & sending traffic to bp weightloss lander for Garcinia Cambogia Extract.
main redirect is hosted on a dedi box in Amsterdam.
Flog =
Lander =
(
) - always impressed with your investigative work.
I wouldn't h@ck a site and use it for links but it is certainly nice to know about these type of holes in case I ever end up needing to sell proxies, I know I have this direction.
You should have a webinar on this type of stuff.
I know it isn't directly related, but I would pay to know some of the things you know...only in btc of course...from MtGox.
) - always impressed with your investigative work.I wouldn't h@ck a site and use it for links but it is certainly nice to know about these type of holes in case I ever end up needing to sell proxies, I know I have this direction.
You should have a webinar on this type of stuff.
I know it isn't directly related, but I would pay to know some of the things you know...only in btc of course...from MtGox.
Hacked SEO Landing Page:
http://bethelnewlife.org/document/buyxanax
Landing page SS
Landing page source code
Links to : http://www.ultrageneric.eu/product_info.php?products_id=82&a_aid=b6035aad
Code:
Registrant
Name Faid Albar
Organisation Faid Albar
Language English
Address
Am Konvent 6
41460 Neuss
Neuss
Germany
+49 2131277126
faidalbar@akkadian.com
Phone
Fax
Email
Onsite
Name Webfusion Limited
Organisation
Language English
Address
5 Roundwood Avenue
UB11 1FF Stockley Park
Uxbridge
UK
Email
Registrar
Organisation Mesh Digital Limited
Website domains.meshdigital.com
Name servers
ns.123-reg.co.uk
ns2.123-reg.co.uk-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
-~-~-~-~-~-~-~-~-~-~-~-~-
-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
domain stats:
Creation Date: 1998-08-12
PR 5/10
(niceeeeeeeee)
Backlinks
They slammed its backlink profile on February 20th 2014.
Referring Pages 165,344
Total Backlinks 186,019
Crawled Pages 382
.
Referring IPs
3,587
Referring Subnets
2,606
Referring Domains
3,931
Governmental
16
Educational
56
.com
1,473
.net
243
.org
281
Anchors
Lets see what sorta naughty anchors they are using.
Type of sites backlinks are being put on
Looks like a foreign network. Very SAPEish or Asian. Also looks pretty RankHack, SpamWow, etc. type campaigns.
misc examples of root domains:
onze-reunie.nl
special-supplier.com
alimnida.com
flexisport.be
timothyerickson.com
antaresoffshore.com
higagu.net
drupalized.org
chilbonh.com
coconell.net
goas.org.br
platteriverdecoyco.com
joekerr.com
calvarychapelcypress.net
4ds.info
pgri1-dpk.net
its-my-live.de
ganesha.kz
calvarychapelcypress.org
rim.or.jp
tracelement.com
patrykstankiewicz.com
spielberg-double.com
achemodan.ru
costclub.co.kr
zaunland-adam.de
chudopryazha.ru
hamteo.com
3dwensen.nl
Type of backlinks being built
Straight up comment and forum spam. Still works in 2014 as of 3/2014.
Random sample of sites:
Elsa's gastenboek | Kaarten van Elsa, .... voor iedereen !
All Newark star ledger obits |
geo costiera
Untitled Document
Brossard - Forum
Отзывы
CGIƒTƒ|�[ƒgŒfŽ¦”Â
Кондиционеры DAIKIN RYN35GX/-40
Special-supplier
Ahrefs, if you're referring to the latest one.
Edit: fuck, didn't see the latest reply to the thread.
Edit: fuck, didn't see the latest reply to the thread.
It's Ahrefs bro.
:ticking:
EDIT: Damn, didn't see later replies either. The thread somehow opened on that post. Well, I'll just leave it here anyway.
Todays friend is www.sunsetmarquis.com. A Hollywood, CA hotel who doesn't care about security, the internet, IT departments, or its customers. Thanks god they do not process customer credit cards on their server or they would be giving our friends hundreds of free CCs! At $300-600 per night rate rooms, you'd think they would be able to hire a decent IT guy who would have noticed this by now..
Same ole pharma gang that has been mentioned here before. They upload a script that generates 100s of landing pages on hacked hosts and spam the fuck out of them with old school xrumer style links. power in numbers I guess. They have it setup so you can only see the pharma landing pages if your referrer is Google, Bing, Yahoo. Helps them avoid detection and stay hosted longer.
Lets check out the domain they are using.
Luxury West Hollywood Hotel | Sunset Marquis
Nice, it has decent age and been around a while. Perfect!
PageRank = 4/10
Domain age = 17 tears
+ Has some decent .gov backlinks
Known URLs
landing page source code
Hacked Pharma Hosting - Pastebin.com
screen shot of serps
screen shot of site: query
Pharma landing page
Uses BP domain from Chinese registrar NOW.CN.
109.235.49.195 - IP in Netherlands, - Comments and Complaints
Being hosted on hacked NL server = Axiom Frontiers
canadian-pharmacy-vcl.net. 179 IN A 109.235.49.195
Domain Name: CANADIAN-PHARMACY-VCL.NET
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: 域å��注册,虚拟主机,ä¼�业邮箱,云主机,æœ�务器租用,çŸGAYä¿¡å¹³å�°-时代互è�”(www.now.cn)
Name Server: NS.LOCAL-PROVIDER.COM
Name Server: NS.LOCAL-PROVIDER2.COM
Status: clientTransferProhibited
Updated Date: 03-dec-2013
Creation Date: 03-dec-2013
Expiration Date: 03-dec-2015
Domain name: canadian-pharmacy-vcl.net
Registrar Domain ID:
Registrar WHOIS Server: whois.todaynic.com
Registrar URL: 域å��注册,虚拟主机,ä¼�业邮箱,云主机,æœ�务器租用,çŸGAYä¿¡å¹³å�°-时代互è�”(www.now.cn)
Update Date: 2013-12-03
Creation Date: 2013-12-03 23:51:56
Registrar Registration Expiration Date: 2015-12-03
Registrar: 2013-12-03 23:51:56
Registrar IANA ID: 697
Registrar Abuse Contact Email: cs@now.cn
Registrar Abuse Contact Phone: +86. 07563810552
Reseller:
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Nicole N. Langford
Registrant Organization: Nicole N. Langford
Registrant Address: 1778 Philli Lane
Registrant City: Buffalo Valley
Registrant Province/state: EK
Registrant Country: US
Registrant Postal Code: 74571
Registrant Phone: +1.9185220952
Registrant Phone EXT:
Registrant Fax: +1.9185220952
Registrant Fax EXT:
Registrant Email: mitubik@gmail.com
Registrant Email EXT:
Registry Admin ID: 43500126
NS.LOCAL-PROVIDER.COM = 5.149.250.131
5.149.250.131 - IP in United Kingdom, - Comments and Complaints
UK IP
ns.local-provider2.com 38.69.128.206
38.69.128.206 - IP in United States, - Comments and Complaints
US IP
What kind of backlinks are they building?
Hrm, doesn't look like they are slamming it too hard. It appears they hacked it in December of 2013 and started slamming it with links then. They have slowly been dropping off from deletion/404 which would explain why the site is on page 2-3 of Google for its main pharma keywords.
Type of backlinks being built
Same ole pharma gang that has been mentioned here before. They upload a script that generates 100s of landing pages on hacked hosts and spam the fuck out of them with old school xrumer style links. power in numbers I guess. They have it setup so you can only see the pharma landing pages if your referrer is Google, Bing, Yahoo. Helps them avoid detection and stay hosted longer.
Lets check out the domain they are using.
Luxury West Hollywood Hotel | Sunset Marquis
Code:
Domain Name: SUNSETMARQUIS.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com/en_US/
Name Server: NS81.WORLDNIC.COM
Name Server: NS82.WORLDNIC.COM
Status: clientTransferProhibited
Updated Date: 30-jan-2009
Creation Date: 03-dec-1997
Expiration Date: 02-dec-2014Nice, it has decent age and been around a while. Perfect!
PageRank = 4/10
Domain age = 17 tears
+ Has some decent .gov backlinks
Known URLs
Code:
http://sunsetmarquis.com/cheap-canadian-viagra/
http://sunsetmarquis.com/purchase-cialis/
http://www.sunsetmarquis.com/women-viagra/
http://www.sunsetmarquis.com/cheapest-cialis/
http://www.sunsetmarquis.com/best-viagra/
http://www.sunsetmarquis.com/levitra-vs-viagra/
http://www.sunsetmarquis.com/overnight-canadian-viagra/
http://sunsetmarquis.com/soft-gel-viagra/
http://www.sunsetmarquis.com/bruising-on-cialis/
http://www.sunsetmarquis.com/low-price-cialis/
http://www.sunsetmarquis.com/canadian-generic-cialis/
http://www.sunsetmarquis.com/cost-of-cialis/
+ 100s morelanding page source code
Hacked Pharma Hosting - Pastebin.com
screen shot of serps
screen shot of site: query
Pharma landing page
Uses BP domain from Chinese registrar NOW.CN.
109.235.49.195 - IP in Netherlands, - Comments and Complaints
Being hosted on hacked NL server = Axiom Frontiers
canadian-pharmacy-vcl.net. 179 IN A 109.235.49.195
Domain Name: CANADIAN-PHARMACY-VCL.NET
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: 域å��注册,虚拟主机,ä¼�业邮箱,云主机,æœ�务器租用,çŸGAYä¿¡å¹³å�°-时代互è�”(www.now.cn)
Name Server: NS.LOCAL-PROVIDER.COM
Name Server: NS.LOCAL-PROVIDER2.COM
Status: clientTransferProhibited
Updated Date: 03-dec-2013
Creation Date: 03-dec-2013
Expiration Date: 03-dec-2015
Domain name: canadian-pharmacy-vcl.net
Registrar Domain ID:
Registrar WHOIS Server: whois.todaynic.com
Registrar URL: 域å��注册,虚拟主机,ä¼�业邮箱,云主机,æœ�务器租用,çŸGAYä¿¡å¹³å�°-时代互è�”(www.now.cn)
Update Date: 2013-12-03
Creation Date: 2013-12-03 23:51:56
Registrar Registration Expiration Date: 2015-12-03
Registrar: 2013-12-03 23:51:56
Registrar IANA ID: 697
Registrar Abuse Contact Email: cs@now.cn
Registrar Abuse Contact Phone: +86. 07563810552
Reseller:
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Nicole N. Langford
Registrant Organization: Nicole N. Langford
Registrant Address: 1778 Philli Lane
Registrant City: Buffalo Valley
Registrant Province/state: EK
Registrant Country: US
Registrant Postal Code: 74571
Registrant Phone: +1.9185220952
Registrant Phone EXT:
Registrant Fax: +1.9185220952
Registrant Fax EXT:
Registrant Email: mitubik@gmail.com
Registrant Email EXT:
Registry Admin ID: 43500126
NS.LOCAL-PROVIDER.COM = 5.149.250.131
5.149.250.131 - IP in United Kingdom, - Comments and Complaints
UK IP
ns.local-provider2.com 38.69.128.206
38.69.128.206 - IP in United States, - Comments and Complaints
US IP
What kind of backlinks are they building?
Hrm, doesn't look like they are slamming it too hard. It appears they hacked it in December of 2013 and started slamming it with links then. They have slowly been dropping off from deletion/404 which would explain why the site is on page 2-3 of Google for its main pharma keywords.
Type of backlinks being built
Code:
Type of backlinks
http://forum.d3ti.mipa.uns.ac.id/viewtopic.php?f=6&t=42544
http://www.vivalamusica.com.pl/forum/viewtopic.php?f=10&t=105180&p=126604
http://svenskescortregister.net/index.php?/topic/13606-online-canadian-pharmacy/
http://www.vivalamusica.com.pl/forum/viewtopic.php?f=10&t=127975&p=191956
http://www.gvozdika.su/forum/viewtopic.php?f=5&t=200939&p=371079
http://de33.dsforen.de/1345/viewtopic.php?f=16&t=9&p=3968
http://hpcgi2.nifty.com/qta/eng/mboarde.cgi?top_line=71378&page_max=10%20Result:%20chosen%20nickname%20
http://hpcgi2.nifty.com/qta/eng/mboarde.cgi?top_line=193095&page_max=10%0D
Saw this article in the news today, A Penny for Your Page View: The Social Network That Pays You, and it got me thinking...
YUP!
http://www.bubblews.com/account/286953-paydayloans
Do follow.
Enjoy!
YUP!
http://www.bubblews.com/account/286953-paydayloans
Do follow.
Enjoy!
#1) url is there on profile. not in posts. You would use posts to insert related textual content about your site.
#2) Because I used that URL as a joke bruv
#2) Because I used that URL as a joke bruv