When the Groovers Stop Groovin'

Post Reply
siblingshot
Posts: 875
Joined: Fri Jan 21, 2011 7:22 pm

When the Groovers Stop Groovin'

Post by siblingshot » Mon Aug 08, 2011 7:47 pm

grooversparadise.com

This site began its life as a music weblog, migrating to a custom domain in 2009. At some point this appears to have changed. The content - superficially at least - still relates to music, but careful reading of the copy now posted alerts the reader to various nonsensical utterances at odds with the general claim:

I routine most of my calls in the course of my sonís naptime. This is a excellent tactic to obtaining in undisturbed conversation. Other calls must be addressed because they come. It isnít fair to my son if I make him keep while in the house all day just so I can get the occasional mobile phone phone. The long assortment cordless phone allows me to possess conversations just about anyplace on our residence.

URLVoid reports as CLEAN - UNRATED in WOT; HpHosts; Web Security Guard - as does a virus scan:

http://vscan.urlvoid.com/analysis/dd1fce6f3df79f8234b5f796b525842d/Z3Jvb3ZlcnNwYXJhZGlzZS1jb20=/

Whois discloses an address in Singapore:

Registrant Contact:
Bluelambda Private Limited
Francis Teo ()

However, Robtex reports three Domains using this as name server under another name (3):

http://www.robtex.com/dns/grooversparadise.com.html#shared

missouriansagainstillegalimmigration.org, itself, does not appear on any blacklists, but guess what ?

Navigate to that domain and one finds the very same rudimentary site design, and broadly similar content; this time seemingly targetting 'Travel Tips'. Note the similar banal and poorly crafted grammar:

We’d sit on the kitchen area table and full our homework even though mom ready dinner. When dad and the farm helpers would arrive into your property for coffee breaks or meals they’d gather in the kitchen. When my husband and I decided to update the modest kitchen within our property I told the contractor that I wanted a bigger area that would accommodate a kitchen table, moreover towards the breakfast counter that we had.

I confess. Any domain registered as missouriansagainstillegalimmigration.org which seemingly provides information on duty free quotas in Romania and the Ukraine automatically raises my suspicion.

User avatar
Myxt
Posts: 4156
Joined: Sat Mar 05, 2011 6:18 am

RE: When the Groovers Stop Groovin'

Post by Myxt » Mon Aug 08, 2011 8:56 pm

It's definitly a "splog", made of low-paid crowd-sourced, and likely machine translated, sentences cobbled together by auto-blogging software - from "marketing automation" services.

siblingshot
Posts: 875
Joined: Fri Jan 21, 2011 7:22 pm

RE: When the Groovers Stop Groovin'

Post by siblingshot » Mon Aug 08, 2011 9:37 pm

'Splog'.

Thanks for providing the proper reference, Myxt. Scraping content for 'marketing automotion services' is probably as dangerous as it gets. What I hadn't mentioned was that I had linked to the offending site some time prior to the original domain proprietor selling out. A fairly safe assumption, but I'm mildly irate that said owner chose not to advise me of his/her intention.

My bad. And testament to sloppy housekeeping on my part.

The link, of course, has been deleted.

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

grooversparadise.com

Post by c۞g » Tue Aug 09, 2011 3:05 am

grooversparadise.com

Where's the music?

All I see is spam pointing to "review" domain, coincidentally all having the same template.

Example:
hxxp://www.grooversparadise.com/uncategorized/why-you-need-a-cordless-mobile-phone-for-ones-property-now
has links to:
hxxp://www.bestcordlessphoneratings.com/review/vtech-cs6219-2-dect-6-0-expandable-2-handset-cordless-phone-system-with-caller-id-and-handset-speakerphone-cs6219-2

hxxp://www.grooversparadise.com/music/get-a-hobby-kit-and-learn-something-new
has links to:
hxxp://conicalburrcoffeegrinder.com/

Compare: bestcordlessphoneratings.com
with: conicalburrcoffeegrinder.com

Albeit if you dig through these "articles" you'll discover many more "review" sites, all of which utilize affiliate links to various products...Would make an interesting dig for domains if anyone has the time.

bestcordlessphoneratings.com resides on IP: 207.7.89.221 [ns2.superiorwebhost.com] along with:
mytuition.info which claims to be a blog: Aikido - The Modern Martial Arts
First homepage "martial arts" article is titled: Why You may need A Cordless Phone For the Residence Now
which coincidentally, links to: bestcordlessphoneratings.com
:D

the following are listed: http://www.bfk.de/bfk_dnslogger.html?query=ns1.blambda.com#result

spam blog: myita1.info

spam blog: see-the-opportunity.com
links to "review" site: vacuumstoragebags.net

spam blog: dirrty-laundry.com
links to "GH-2 Horny Goat Weed Extract" retail site: gh-2.com

spam blog: tonyahurleyproductions.com
links to "review" site: vacuumstoragebags.net

spam blog: weekoftruth.org
links to "review" site: chocolatecoveredcoffeebeans.net

User avatar
Myxt
Posts: 4156
Joined: Sat Mar 05, 2011 6:18 am

RE: When the Groovers Stop Groovin'

Post by Myxt » Tue Aug 09, 2011 5:41 am

@siblingshot
Sweep your site periodically with the [url=http://validator.w3.org/checklink t=_blank]W3C Link Checker[/url].

@g7w
Not ignoring your suggestion - just calculating whether I'll live that long. I wonder if netizens actually see any of these sites - to be warned away from them - or if they are too far buried in the search engines' scrap heap.

The site seems to be WordPress, running a default WP page Header tool named "xmlrpc.php" which facilitates direct posting, pingbacks, and trackbacks from external sources - ref:
http://digwp.com/2009/06/xmlrpc-php-security/

Also the pages' code contains a Script element with an improper source:

Code: Select all

<script type="text/javascript" src="hxxp://www.grooversparadise.com/wp-content/plugins/wp-spamfree/js/wpsf-js.<strong><red>php</red></strong>">
preceded by the comment "Protected by WP-SpamFree v2.1.1.2 :: JS BEGIN" (and followed by "... JS END"). I don't know how to download .PHPs without them first executing on the server side. Hmmm ... looks like this is another WP standard feature.

This site has backlinks from just 2 domains:
http://www.mywot.com/en/scorecard/therisingstorm.net -- a real and current blog
http://www.mywot.com/en/scorecard/tagoo.ru -- owned by "Stella Financial Inc." and looks phunny.

All for now - I'm too tired to remember to drink more coffee.

siblingshot
Posts: 875
Joined: Fri Jan 21, 2011 7:22 pm

RE: When the Groovers Stop Groovin'

Post by siblingshot » Tue Aug 09, 2011 7:50 am

@ G7W:

Where's the music?

Yes. At best, as I mentioned, all reference to music is wholly nominal: 'Kid's [sic] Musical Instruments'; 'Musical Themed Paintings'; a red herring category under the site map. Three articles in, all reference to music ceases.

RE 'Musical Themed Paintings': Wanna purchase a dehumidifier, anyone ?

Like you, I hovered my mouse over some of these hyperlinks before purging all reference to the domain from my own site. I did not go beyond that, but it is clear this is just the tip of something much bigger.

@ Myxt:

Thanks for the advice regards W3C Link Checker. I do have a need for software which eliminates constant manual checking; cross-referencing.

Your providing detail on improper Script elements also makes for interesting reading.

This site has backlinks from just 2 domains:
http://www.mywot.com/en/scorecard/therisingstorm.n... -- a real and current blog
http://www.mywot.com/en/scorecard/tagoo.ru -- owned by "Stella Financial Inc." and looks phunny.

I suspect there might be many more backlinks than just these two. 'Stella Financial Inc.', I have no previous knowledge of. Definitely sounds suspect in light that this domain was originally a genuine music blog.

'The Rising Storm', on the other hand, is certainly legitimate. A superior and well designed non commercial site. I am good terms with its proprietor, and will email him in due course to alert him to the issue. I am certain that he will be appalled; sheepish - at least, as I was - to have overlooked the doomed trajectory this domain has undertaken.

Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 3 guests