Spammers Abusing Google’s "Im Feeling Lucky"

Spammers of late have been attempting to hide their sites behind other innocent sites. The best little trick they have come up with of late is to use the Google feature “I’m Feeling Lucky”. This feature essentially takes you strait to the top site in your Google search request. The aim of this is to get around Spam blacklists and filters. Unfortunately this method relies on their page being the top result.

Example of spam:

Order All of your favorite RxMeDs Online!
With fast discreet trackable USPS shipping!
No Prescription Needed!
Order__NoW ~ Click__Here

Essentially what this does is an “I’m Feeling Lucky” search in Google for myvisameds global cart when the sucker (user) clicks on the Click Here they are ment to be taken to the site myvisameds.com. The site is supposedly trying to sell drugs like Viagra, Vicodin, Cialis, Valium, Soma, Xanax, Ultram, Ambien, Prozac, Meridia, Levitra, Zoloft, Nexium, and Propecia. The usual stuff you should have a prescription for and should go to your local chemist to buy. Not thats theres anything wrong with shopping online but seriously do you really know what your getting online.

This is very easy to change for the rest of use with legitimate pages as essentially all we need to is include their search phrase on our own page and boom if Google rates our site higher the spammers site, then the spam links go to our page instead.

Update
Since adding this article check out how many stupid people have been trapped by this spam because I’ve included the search phrase on my site. This gives you some idea of how thick people can be.

Update 2
ResearchBuzz post back on 21st January 2004 on how to hack a Google “I’m feeling Lucky” link.

Update 3 – Other Blogs Talking About This
SANS ISC – Spammers feeling lucky with Google
Justin-cook – Google Helping Spammers Get to Your Inbox
HypeFree – Google spam – aka I’m back
Rick’s Spam Digest – The Google Redirect Hall of Shame

Phrases I’ve seen so fare:

myvisameds global cart

ze2u welcome meanwhile

myvisameds

“million megabet from casino online” Magic Jackpot!

storepeest tabs unbelievable

globalnetrx global strives

globalnetred global strives

storepeest meanwhile I

name2search meanwhile I

blarack tabs unbelievable

won1 million megabet from casino online

yerbadietpills

thelowratemortage Sale By Owner Employment Opportunities resourceful

earthmortgage123 As direct lender Earth Mortgage eliminated high-commissioned Employment Opportunities

domain2find tabs unbelievable

medsjuly global

economic-quality welcome to us

domain2find first time

doctorsordersrx

economic-quality welcome to us ultram

inurl:boyhad.com VDNS6????

domain2find welcome to us

??boyhad??

????boyhad

inurl:rihancas.com+VPXL+Made+Easy

discount office furniture site:http://grinfild.kokoom.com/

thereseason.com V6J 5C6

VPXL+Made+Easy+rivilas.com

inurl:thereseason.com canadian

inurl:thereseason.com V6J 5C6

thereseason.com Canadian

fine italian food

http://www.planetnana.co.il/topmed/viagra.html

inurl:rkcerock.com+VPXL+Made+Easy

thereseason Vancouver BC V6J 5C6

thereseason Canada V6J 5C6

VPXL+Made+Easy+rkcerock.com

VPXL+Made+Easy+rneskimo.com

economic-quality welcome to us rights

greatcanadianpharm item

inurl:greatcanadianpharm

inurl:planetwould.com ??

Welcome To US Pharmacy economic tabs

site:softnewmore.com

ann elisabeth

inurl:rneskimo.com+VPXL+Made+Easy

inurl:rnbdx.com+vpxl+made+easy

qualitygenericmeds

yerbadietpills order system

Hutchison Whampoa Limited

inurl:afterwere.com canadian

inurl:afterwere.com V6J 5C6

inurl:afterwere.com+V6J+5C6+Vancouver+(210)+787-1711

inurl:thereseason.com canadian V6J 5C6 (210)787

ulster northampton cottonmouth thrum

gill huddle

ideatestcenter

anchorage

bluepageblog

maxine crystal mathewson module

inurl:thereseason.com V6J 5C6 (210) 787-1711 Vancouver

plutarch mukden hallmark

inurl:rivilas.com+VPXL+Made+Easy

greenbelt pow airmass brainy

rleadtek.com+vpxl+made+easy

inurl:thereseason.com V6J 5C6 1 (210) 787-1711 Vancouver

inurl:rleadtek.com+vpxl+made+easy

inurl:decimalrain.com V6J 5C6 888-9089

inurl:thereseason.com canadian V6J 5C6 (210) 787

inurl:decimalrain.com V6J 5C6 888-9089 Vancouver

inurl:thereseason.com V6J 5C6 787-1711 Vancouver

VPXL+Made+Easy+rivling.com

inurl:rhtawy.com+VPXL+Made+Easy

inurl:pickson.com V6J 5C6 888-9089

inurl:rivling.com+VPXL+Made+Easy

circumcise

domain2find the next portion

official lawyer we need a warning .cz

cooltourismdestinations

inurl:bluepageblog

inurl:expectsharp.com V6J 5C6 888-9089

inurl:enoughcorn.com V6J 5C6

inurl:decimalrain.com 200-1765 West 8th Ave

inurl:morningcan.com 200-1765 West 8th Ave

economic-quality Welcome To US very impressive index.php

inurl:economic-quality meanwhile

pokercastaways

inurl:EconoMiC-QuaLity Unbelievable

inurl:Economic-QuaLity Tabs

inurl:Economic-QuaLity impressive they help

inurl:economicalest-choice

inurl:gzolbu

dreamsizeslarge satisfied

inurl:dreamsizeslarge full

inurl:toolargebutrue satisfied

inurl:campotie permanent

inurl:expressmediroad

%TextoSorte%

hkzgndvj

fbqtrwrv

sinksmidnun sports rolex

casa, piscina e jardim