PARASITE ADS-PORTAL FARMS ( по нашему - фиды )
The web pages at http://phentermine.IEEEpcs.org/,
http://www.HistMed.org/Gambling-Online.phtml, and
http://ChildrensMuseumOfOakridge.org/PornStar-Finder.dhtml
are three examples of commonly seen made-for-ads pages
that attach themselves to legitimate domains to increase their
search ranking and to resist blacklisting. By searching for other
farms with similar signatures, we discovered 91 .org domains that
have been infected with such “parasites”: 10 had been removed, 3
appeared as “Under Construction”, and the rest were actively
serving ads. By visiting 10 pages on each of the active farms, we
extracted 15,580 ads and found that 6,200 of them were funneling
click-through traffic to 64.111.210.10, 64.111.210.206, and
64.111.214.154 (#1 in Figure 7), all of which belong to the 64.111
IP block. The remaining 9,380 ads belong to 66.230.138.243 and
66.230.138.211, #2 and #4 in Figure 7, respectively. We observed
that a few of the .org domains used click-through cloaking [22];
for example, http://www.urbanacademy.org/pc-fix-it.phtml
returned “HTTP 404 Not Found” when visited directly, but
displayed a page of ads when visited through a search-result clickthrough.