Skip to main content

The AFF Splog Farm #3

The Blogosphere currently has a real problem - active hacking, and obnoxious unwanted commercial "adult" content, is in 1 out of every 3 blogs being published. Do some "Next Blog" surfing, and see what I mean.

I wrote, originally, about this problem a little over a month ago. I published an update last Friday, indicating that the problem isn't going away, and Blogger hasn't done anything to solve it.

Yesterday, the problem changed direction.

This is what we had a month ago (and last week). That's a dead web site.

http://aff-friend-finderwvghpcb.blogspot.com/

Note the blog name, in the URL.
aff-friend-finderwvghpcb
aff-friend-finder <== Name
wvghpcb <== Suffix


Possibly to make their blog setup faster or more scalable, the sploggers stopped using dictionary words in the blog names.

Here's a (slightly altered) entry taken from the Recently Updated Blogs list, during the morning of 10/15/2007. That's not the actual URL, as I do not link to sites serving malware or spam. If you really want to see some, just go surfing for 5 or 10 minutes. This example should tell you what to look for.

http://049768cqslzid.blogspot.com/

Note the blog name, in the URL, now.
049768cqslzid
049768 <== Splog Number: Always 6 digits (right now).
cqslzid <== Suffix: 6 - 12 alphabetic characters, possibly dictionary filtered.


But name change or no, it's the same crap.


This is what you'll see, if your computer is properly protected, with a layered security strategy.


They can't even spell "Blogger".



If your computer isn't properly protected, you'll probably see different content.


This is approximately what you'd see, if your computer isn't fully protected. If you didn't use Microsoft Paint, there would even be pictures in place of the white space.

I don't see this crap on my primary computer, because I use a Hosts file based site blocker. So simple - and requires very little effort to install.





And thanks to Firefox, and its pop up blocking, I don't see this either.



All of the ads in the latter two pictures change constantly. What you see there is purely a vague approximation, provided to give you a hint of what the splog master is doing. Sometimes, what he's doing may make your computer the newest member of the botnet being offered, if you're not protected.

>> Top

Comments

Dan Kelley said…
I'm guessing that most of the traffic these splogs see comes from the "next blog" button on the nav bar.

Perhaps this is something Google should remove all together. With all the slogs with possible malware, its just plain dangerous for consumers.

Popular posts from this blog

What's The URL Of My Blog?

We see the plea for help, periodicallyI need the URL of my blog, so I can give it to my friends. Help!Who's buried in Grant's Tomb, after all?No Chuck, be polite.OK, OK. The title of this blog is "The Real Blogger Status", and the title of this post is "What's The URL Of My Blog?".

Leave Comments Here

Like any blogger, I appreciate polite comments, when they are relevant to the blog, and posted to the relevant article in the right blog. If you want to ask me a question thats relevant to blogging, but you can't find the right post to start with (I haven't written about everything blogger related, yet, nor the way things are going I don't expect to either), ask your questions here, or leave an entry in my guestbook.

As noted above, please note my commenting policy. If you post a comment to this post, I will probably treat it as a "Contact Me" post. If you have an issue that's relevant to any technical issue in the blog, please leave a comment on the specific post, not here. This post is for general comments, and for non posted contact to me.

If the form below does not work for you, check your third party cookies setting!

For actual technical issues, note that peer support in Blogger Help Forum: Something Is Broken, or Nitecruzr Dot Net - Blogging is, almos…

What Is "ghs.google.com" vs. "ghs.googlehosted.com"?

With Google Domains registered custom domains becoming more normal, we are seeing one odd attention to detail, expressed as confusion in Blogger Help Forum: Learn More About Blogger.My website uses "ghs.google.com" - am I supposed to use "ghs.googlehosted.com", instead?It's good to be attentive to detail, particularly with custom domain publishing. This is one detail that may not require immediate attention, however.