Forum Moderators: Robert Charlton & goodroi

Message Too Old, No Replies

Hijacking?

can someone explain

         

textex

8:02 pm on Oct 5, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Our site has been hurting bad for about two months.
When we do inurl search, we get many of the following listings:

Title:
/www.mysite.com/ URL moved, Please ...

Description:
/www.mysite.com/ URL moved, Please visit othersite.com.

url:
othersite.com/www.bad-credit-unsecured-personal-loans.com/

1k - Supplemental Result - Cached - Similar pages

Is this the sign of a hijacked site?

Kimkia

5:43 am on Oct 7, 2005 (gmt 0)

10+ Year Member



I have just found this phenomenon myself. I did an allinurl search on my site, with a keyword, so search was
allinurl:mysite.com + keyword

I found pages upon pages returned with results like those you described.

/www.mysite/category/individual-project.shtml URL moved .../www.mysite.com/category/individual-project.shtml URL moved, Please visit spamdomain.com.
spamdomain.com/www.mysite.com/ halloween/horse-pumpkin.shtml - 1k - Supplemental Result - Cached - Similar pages

They have done this for literally dozens, if not hundreds, of my pages.

On these allinurl +keyword searches, my own site gets the top two spots, the rest are these thieves.

When you click on the link, you get a 404 saying the page moved, and please visit spamdomain.com -- I have the source code, which I'm not sure if I'm allowed to post.

If you click on the link in the 404, you go to spamdomain.com, which is a listing of millions of linked keywords. You click on one of them, and first thing you see is Google Adsense ads at the top. Then a bunch of product listings below.

I'm so disheartened that after 4 years of producing a successful niche site that I was passionate about, I'm considering chucking it all. I get constant emails from ppl saying how successful such and such a project was for their classroom, their kids, or themselves. My readers get valid, useful and original information -- but my Google traffic has plummeted. Meanwhile, the competitors now dominating my SERPS offer little more than Amazon book reviews and links to pages on other sites like mine (yeah, I get some traffic from them, but gee whiz, am I supposed to be grateful for their left-overs, when they are dining from my table?)

Amazon must be having a heyday with this gift from Google. Their book titles appear on page one, but my stuff is buried, even though it is available free online and covers the same territory as the book.

To answer your question: is this a hijacking? It is not what I thought of until now as site hijacking, where a 302 is employed to "hijack" your site, nor is it the same as a frame. But sure...I think it falls in the same foul cesspool, and you and I are sinking in it.

textex

11:14 am on Oct 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



bump

Miop

12:17 pm on Oct 7, 2005 (gmt 0)

10+ Year Member



I dont get any of my pages - I get pages with clickit.go2net pages.
What does that mean?

stuartc1

12:29 pm on Oct 7, 2005 (gmt 0)

10+ Year Member



So you are saying some evil webmasters are including you full URL and Page name after their own domain - and that google is belivieving that their page is yours? and the outcome is a ban on the original?

I've noticed sites with my full domain after theirs, in the past, but it's not affected my rankings. This has been happening for at least a couple of years.

So why does your site get penalised and not others? I guess it must be the 404 page moved message!

Have you sent an email to Adsense and a spam report to google?

giggle

7:17 am on Oct 10, 2005 (gmt 0)

10+ Year Member



Miop, I get those clickit.go2net.com as well...very strange.

Also, when I do the following query:

allinurl:ourwebsite.co.uk + KeyWord1 KeyWord2 KeyWord3

We get a supplemental result with the title:

X-Google-Crawl-Date: Thu, 02 Dec 2004 13:39:15 GMT

That links to:

www.e***ory.co.uk/...//www.ourwebsite. co.uk&pos=16&keyword=KeyWord1 KeyWord2 KeyWord3

It points to a missing page but when I go to the home page of the site it's just a complete spammy page with spammy word links that just lead to other spammy pages that contain only PPC adverts.

This is really freaking me out...are we being hijacked? Is it a possible contributing cause of our drop in traffic?

If anyone can shed any light on the above to either put my mind at rest (i.e. no hijack) or suggest how to contact Google to sort out the above then I'd really appreciate it.

Mick

[edited by: giggle at 7:24 am (utc) on Oct. 10, 2005]

kwngian

7:23 am on Oct 10, 2005 (gmt 0)

10+ Year Member



giggle, are you an adword advertiser?

giggle

7:25 am on Oct 10, 2005 (gmt 0)

10+ Year Member



Hi kwngian, we used to be, but don't anymore.

We certainly were in Dec 2004 as in the title of the linking site.

Mick

kwngian

7:30 am on Oct 10, 2005 (gmt 0)

10+ Year Member



Your URL hijacking seems to be spyware related.

Seen some info about them on Ben Edelman's site but do not know what is the implication.

[benedelman.org...]

Probably googlebot spidered some of the pages containing your ads and thus causing the 302 redirect issue. I know adsense ads run off a javascript (so not spidered) but there are some that just don't.

Perhaps, some of the more experience forummers here will know.

[edited by: kwngian at 7:34 am (utc) on Oct. 10, 2005]

chatnoire

7:34 am on Oct 10, 2005 (gmt 0)

10+ Year Member



same here i did a check at whois an i find a chinese
<snip>Someone at the Adsense should take serious action.If google wants to fight spam should check the webmasters that are dealing with them and what kind of pages they runing.

[edited by: Brett_Tabke at 10:12 am (utc) on Oct. 10, 2005]
[edit reason] no personal details plese [/edit]

giggle

7:52 am on Oct 10, 2005 (gmt 0)

10+ Year Member



Hello again kwngian.

That's an interesting read.

I'm a little bit confused, does it suggest that the company using our PPC ads would actually make money out of us by hosting (stealing) our web ads?

Weird.

Mick

DamonHD

7:56 am on Oct 10, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hi,

*Don't* post personal details in public forums. Suppose you are worng or someone else's details were used (as in ID theft) for these WHOIS entries and this guy gets slung in jail? This is what libel/slander laws are about.

And I don't think the fact that he is Chinese is any more relevant than you being black or me being a lesbian.

Rgds

Damon

kwngian

8:18 am on Oct 10, 2005 (gmt 0)

10+ Year Member



Mick,

It was an issue months ago when a site knowingly or unknowingly do a 302 redirect to you, the page where they redirect from will take over the destination page as the original in G.

The issue was supposed to be resolved but who knows..

Lorel

6:59 pm on Oct 10, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month




It was an issue months ago when a site knowingly or unknowingly do a 302 redirect to you, the page where they redirect from will take over the destination page as the original in G.

The issue was supposed to be resolved but who knows..

Google "solved" the problem by not allowing these urls to show up in the site command. I suspect that only means we can no longer "see" them in the site command. However, they are still there because 302 redirects still appear in the allinurl, et al commands.

I even searched the allinurl command for a client site and found several 302 redirects for my own site in there--had nothing to do with my client site. and they were all screen captures of my site driven by IP delivery with no known remedy of stopping this barring writing to the owner/host. Now this is a new twist.

here is that discussion:
[webmasterworld.com...]

theBear

8:02 pm on Oct 10, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Lorel, I think that there will be problems untill the misattributed pages leave Google's index.

itloc

8:19 pm on Oct 10, 2005 (gmt 0)

10+ Year Member



Hi there

Noticed exactly the same phenomenon for my site. One guy runs literally hundreds of domains filled with:

/originaldomain.com/url/url.htm
This Domain has moved please check... etc etc

The link points to a crap page filled with links. Noticeable: Google indexed lots of his pages. Lots lots lots.

I don't think this is a hijacker but it could be something that is related to the results a browser shows whenever a domain can't be reached. Auto - Search or something....

BTW: My site dropped too.

Regards

itloc

itloc

8:47 pm on Oct 10, 2005 (gmt 0)

10+ Year Member



DamonHD:

I just checked around 10 different domains which all scraped my site exactly the way mentioned above. All Chinese owners.

Don't want to hijack this thread - therefore just one additional remark from my side:

90% of the problems I do have on my large site are being caused by people from: Vietnam, China, India and Nigeria.

I personally don't have a problem with these people because of their nationality, color or whatever. I do have a problem with these people because they try to hack our page, steal our content, waste bandwith while doing it etc. etc.

Regards

itloc

Kimkia

2:04 am on Oct 11, 2005 (gmt 0)

10+ Year Member



I emailed Google AdSense and gave them the rundown on what is happening to my site.

I got the reply this afternoon. The email is being forwarded to AdSense specialists who will determine if the sites involved are violating AdSense TOS. If so, "appropriate action" will be taken.

My email was also forwarded to Google search User Support, but whether I will hear from them or not, I don't know.

I would encourage anyone who runs AdSense and is having this problem to report the violating sites to AdSense and to Google support. I hope AdSense will terminate the accounts and thus kill the money stream that is making this venture worthwhile.

nsqlg

8:57 am on Oct 11, 2005 (gmt 0)

10+ Year Member



90% of the problems I do have on my large site are being caused by people from: Vietnam, China, India and Nigeria.

Can be not exactly caused by these people!

Maybe just fake address like this because physical difficulty to locate. Also sounds "country without laws".

DamonHD

10:04 am on Oct 11, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hi,

Please note that the vast majority of SPAM (I have to filter out up to 40,000, yes forty thousand, per DAY), originates in the US.

That does NOT mean that all Americans are scum. Indeed, my best consulting client is a US multinational.

Try not to extrapolate from the individual to the country, and remember that people may simply HOST in a country or under an assumed/stolen ID to cover their tracks and bury the smell.

But yes, my Internet payment company does have to block traffic from certain African countries because the vast majority of attempted transations from there are dubious/fraudulent.

Rgds

Damon

Kimkia

3:29 am on Oct 18, 2005 (gmt 0)

10+ Year Member



Just wanted to report that I received replies both from AdSense and Google Support. It took about three days, but most of those erroneous "sorry, this url has moved" links are now gone from my allinurl + keyword searchs.

larryhatch

3:41 am on Oct 18, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Kimkia: Did Adsense and Google
1) indicate that the offending site was removed from their index, or
2) did they just pull that from their allinurl: search.

If 1), then you won't find them under your relevant keywords as you said, that's very good.
If 2), its just sweeping an awful mess under the rug, and making matters even worse. -Larry

Kimkia

4:44 am on Oct 19, 2005 (gmt 0)

10+ Year Member



Hi, Larry,

It looks as if the sites are removed from Google's index. I can't find any mention of them in site:spamsite.com searches and I tried for 3 of the worst domains.

Not sure if it's coincidence but my traffic picked up significantly in the past two days - ever since these sites were removed, as a matter of fact. But that could also be the ongoing update. :)

JohnCanyon

6:38 am on Oct 19, 2005 (gmt 0)

10+ Year Member



I just did a search on our domain and noticed that this is also happening to us.

Is there a way to contact google regarding this issue, and if so who?

Its obvious that the individual who is hijacking us is a competitor however when I try to bring up their URL it comes up as 404.

Thanks,

John