It is no surprise that mainstream SEOs are starting to notice the spam, because Google can't even detect the most simplistic of spam methods that were first used back in 2002.
Spam is reaching new levels of ridiculous, even after the "spam updates". They appear to have done nothing at all. In fact, the massive spam attack I have chronicled here for the past few months continues to grow daily. It now stands at billions of pages.
Do query: "see full list on msn"
244,000 pages of pure spam, all leading to malware.
Now, do a site: on the top entry (a KRD domain) that returns there.
That single hacked domain has 14 MILLION (!) cloaked spam to malware pages alone *indexed and searchable!*.
My list of hacked domains like this one stands over 5000. Some of the people I have been corresponding with on this issue have logged over 50,000 hacked cloaked domains.
The worst part is, this is NOT a difficult-to-detect campaign. A good chunk of these hacked domains have *IDENTICAL HTML USING THE SAME PHP FILE*.
Google is simply choosing to ignore this. It's head scratching to say the least, since it's now coming back to bite them as core updates start to surface the indexed flotsam they have allowed to collect.
** EVERY DAY GOOGLE REFUSES TO DEAL WITH THIS ISSUE EMBOLDENS AN INCREASING NUMBER OF COPY-CATS WHO START TO TAKE ADVANTAGE OF THE HOLES IN THEIR ALGORITHMS. **
This is what the spammers are doing to get billions of pages indexed and searchable in Google:
1. Use this code on hacked domain pages:
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Loading...</title> <script>window.location.href = "/click.php";</script> </head> <body> <h1>Loading...</h1> </body></html>
This exact code. On literally billions of pages. And Google hasn't picked up on it yet after months and months. /headslap
2. Have click.php cloak. Send non-google user agents to malware. Make sure you make lots of money off that malware. If GoogleBot is detected, send scraped content from MULTIPLE websites in the niche you are attacking. Mush their content together, a bit from each, in a smorgasbord of soupy spun spam. Google loves this! They just slurp it up, instantly indexing thousands of pages an hour. The more you can send Google the more they will index.
Not only does this give you keyword-rich content to get Google to bite on, but it also duplicate-content penalizes or dilutes or outranks the websites from which you have scraped. Add lots of backlinks to the websites you have scraped from. This makes your spam look more legit, and damages the sites you are linking to by making their backlink profiles noisy and filled with low quality links.
3. Create hundreds of thousands of these pages on each hacked domain. Use keywords as subdomains to cram more spam in there. freesex.hackeddomain.com !
4. Link all of these hacked domains to one another so they all get a lot of domain authority. After all, if Google thinks these pages and domains are legit, then their links to one another are legit! Each hacked domain in your network gets thousands of "legitimate" backlinks! Wow! So much quality! If you have thousands of hacked domains you start to outrank real websites as your efforts both weaken the real websites and strengthen your own.
5.. Sit back and watch your malware money come in as Google completely ignores you and lets you grow your spam at an exponential rate.
This has worked going on 6 months now without any repercussions. Give it another year and real websites will be so drowned out in the spam noise they won't have a chance.
[edited by: westcoast at 4:07 pm (utc) on Jul 2, 2021]
Google Core Update July 1, 2021
