1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WTF! Awstats one of my top 10 keyphrases is "anal"

Discussion in 'Black Hat SEO' started by supervortex, Feb 2, 2011.

  1. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    I just noticed the rankings on one of my white hat sites all of a sudden is showing "anal" as a top 10 keyword in Awstats. The last several days a number of my pages have fallen down or out of Google, I'm assuming because of this. The below text is showing in Google for a number of my pages.

    Jan 2, 2011... Livejasmin Transgendered Livejasmin Big size Livejasmin Asian Livejasmin Hot Flirt Livejasmin Anal Sex Livejasmin Couple Livejasmin Girl ...

    Where did this shit come from? When I look closely at one of these pages, I cant find this text, even when I view the source when loading it in Firefox. The site is built in Wordpress with seemingly clean plugins and a Studiopress theme from the BHW downloads area. Any thoughts on what has happened here? I've gotta clean this up, and fast.
     
  2. turbo1

    turbo1 Newbie

    Joined:
    Jul 3, 2008
    Messages:
    31
    Likes Received:
    4
    Have a look if you´ve been hacked, check your listed sites in google
    and have a look in the code of your site... also happens to me 3 month ago!
     
  3. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    A number of my pages in Google show this text as described above. Without a doubt, the site has been hacked, but why am I not seeing this shit in the view source when I load one of these pages in Firefox and examine it closely? I'm perplexed what is exactly going on?
     
  4. Maruk

    Maruk Power Member

    Joined:
    Jun 15, 2009
    Messages:
    562
    Likes Received:
    898
    Home Page:
    I am sorry but I can't help but to chuckle a little bit hehe.
    If I were you I would inspect any and all theme files for hidden or encrypted code since the theme came from here.
     
    • Thanks Thanks x 5
  5. Hijinx

    Hijinx Junior Member

    Joined:
    Apr 13, 2009
    Messages:
    142
    Likes Received:
    87
    Location:
    New Jersey
    Export your DB.. open it up in your text editor, do a search for those keywords see if it shows up anywhere... Also as Maruk suggested... look through your theme files, download your theme, open the files on your computer using an editor and look for any encrypted code or iframes...
     
    • Thanks Thanks x 1
  6. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    Thanks, I will export the DB and examine that now. I had done a quick web search to see what hacks have been associated with the site where all of these links are putting to. Ppl are saying it is a conditional hack where only Googlebot sees the rogue links pointing toward the sex site. I will check the DB and post back here shortly. Thx.
     
  7. kaizer

    kaizer Junior Member

    Joined:
    Dec 8, 2006
    Messages:
    114
    Likes Received:
    12
    Try this
    Code:
     http://www.unmaskparasites.com/ 
     
    • Thanks Thanks x 2
  8. daserpent

    daserpent Power Member

    Joined:
    May 10, 2010
    Messages:
    762
    Likes Received:
    470
    Trying doing this instead :

    Use a Search engine Robot simulator tool and see what the search engines are able to see. Eg : Use http://www.webconfs.com/search-engine-spider-simulator.php

    There you can see whatever the spiders see and search for the terms in there. Once you know where these terms are.. try to get rid of them.

    By the way, I think your only play here is to redirect the website to some other authority site and rebuild the whole site again. Use only genuine themes and plugins when you rebuild the site.
     
    • Thanks Thanks x 1
  9. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    hmm, I'm able to see what Googlebot sees when visiting my page now, but I'm still struggling to figure out where it is hidden the code. I guess I shouldnt be so surprised that it is so insidious :(
     
  10. bobbylove321

    bobbylove321 BANNED BANNED

    Joined:
    Nov 8, 2008
    Messages:
    1,987
    Likes Received:
    2,198
    Do you use any sort of advertisements on your website?

    Clicksor.com tends to put material like that on your website for example without your knowledge.

    And do remember that if google registers your site as an adult site, you'll lose all family oriented keywords. This happened with my music website when it got registered as a sexy site.
     
    • Thanks Thanks x 2
  11. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    I had not monetized the site yet, but it is really an honest, academic type site. Google seeing it as a sex site really destroys it. Even if I rebuild the site, will the damage from Google's standpoint still stand?
     
  12. Anubis1980

    Anubis1980 Regular Member

    Joined:
    Mar 20, 2010
    Messages:
    276
    Likes Received:
    81
    Occupation:
    webmaster and father
    Hi,

    what does :
    Reveal hidden spam links on blabla.com with site-wide Google searches ?
     
  13. semilar

    semilar Regular Member

    Joined:
    Sep 28, 2010
    Messages:
    264
    Likes Received:
    61
    did you check the source code of the google cached version? sounds to me like shitty content is only being displayed to the se bots.
     
    • Thanks Thanks x 1
  14. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    Yes, I believe that is correct. It seems conditional. I only see the bullshit content when i search in the Google index, or when I display the site using Googlebot as the agent. I've spent about an hour searching the code, but cant find the lines that are causing the problem. This is frustrating.
     
  15. creep

    creep Registered Member

    Joined:
    Apr 8, 2009
    Messages:
    87
    Likes Received:
    40
    I might be that the pages are shown only to se bots but guys you are missing the point here. Why not use this in his favor.
    He ranks for those keyords so what he needs to do is:
    - find the pages that are infected,
    - change the code so that they are also shown for surfers(if this is the case)
    - change the affiliate link with his own aff link and see if he makes bank
     
  16. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    I realize that simply changing out the theme may not fix anything, but I did switch to the generic wordpress theme. Now when I display any of the affected pages in a browser with Googlebot as the user agent, I dont see the shitty links any more. I'm still not real comforted, since I was not able to definitively locate the bad code. And, I will feel better after the Googlebot comes again, so that I will hopefully not see the sex stuff displayed in the Google index for those pages.

    Regardless, I will shortly rebuild the site and start fresh. But, I'm still left with more questions. Will Google "forget" about the sex references? How did this happen in the first place? Was the theme likely corrupt when I installed it, or was my password compromised?
     
  17. semilar

    semilar Regular Member

    Joined:
    Sep 28, 2010
    Messages:
    264
    Likes Received:
    61
    so it was the theme? well the answer should be in it's code then I guess. if you can't find the exact keywords in it - and if they are not in the db too - then it must be some request to some 3rd party source that gets displayed on your website.

    was it a theme shared here? better warn that thread!
     
    • Thanks Thanks x 1
  18. Autumn

    Autumn Elite Member

    Joined:
    Nov 18, 2010
    Messages:
    2,197
    Likes Received:
    3,041
    Occupation:
    I figure out ways to make money online and then au
    Location:
    Spamville
    Since it sounds like they're only showing content to bots, try searching your wordpress, theme and plugin files for 'google' and 'googlebot'. If they're using user agent cloaking then those strings will show up.

    eg. if you have shell access on your server:
    cd /path/to/wordpress/installation
    grep -r -i google *

    In any case you need to get on to your host and get them to help you clean it up.
     
    • Thanks Thanks x 1
  19. Autumn

    Autumn Elite Member

    Joined:
    Nov 18, 2010
    Messages:
    2,197
    Likes Received:
    3,041
    Occupation:
    I figure out ways to make money online and then au
    Location:
    Spamville
    Also I would look for encoded parts of the theme, eg. in the footer, and then decode them with base64_decode() or similar. The offending code is probably obfuscated.
     
    • Thanks Thanks x 1
  20. supervortex

    supervortex Junior Member

    Joined:
    Aug 8, 2009
    Messages:
    133
    Likes Received:
    10
    I cant pinpoint which thread I picked it up out of, but I realize there is some inherent risk in everything we do. I will have to be more careful.