Blackhat Link Building Method

I have come across these sites on the top of google a few times and can't figure out how they are doing this. Here is a google search:

http://www.google.com/#hl=en&safe=off&num=100&q=allintitle%3AFree+download+SPRINT+ringtones&fp=mQSZKpTvUz4

The top two results are obvious spam results that redirect to a default page. Viewing the google cache source code though, you can see that the page is cloaked and big G is giving these pages good PR.

If I saw one or two like this I would assume it was a rogue webmaster but Harvard.edu and Princeton.edu? Any idea's?

Link not working?

projext said:

Link not working?

Click to expand...

Copy link location and remove anonymizeit:

yea Ive noticed such results while checking the viagra serps, where the BH's somehow seem to inject their own webpage onto these sites. Always wondered how they did that. Maybe javascript or smthg.

On most of the sites, the page being cloaked is wordpress. However, the non-cloaked page runs a variety of platforms. I can't find the common similarity between all of the sites.