The text in the splogs appears to be scraped from blogs all over the Blogosphere. The template is generally Minima or Rounders, little to no customisation.
Here's an entry taken from the Recently Updated Blogs list, during the morning of 10/15/2007.
http://049768cqslkhc.blogspot.com/
Note the blog name, in the URL.
049768cqslkhc
049768 <== Splog Number: Always 6 digits (right now).
cqslkhc <== Suffix: 6 - 12 alphabetic characters, possibly dictionary filtered.
This is what you'll see, if your computer is properly protected, with a layered security strategy.
Note the name of the blog ("049768" here), from the URL, is displayed as the title.
This is approximately what you'd see, if your computer isn't fully protected. If you didn't use Microsoft Paint, there would even be pictures in place of the white space.
I don't see this crap on my primary computer, because I use a Hosts file based site blocker. So simple - and requires very little effort to install.
And thanks to Firefox, and its pop up blocking, I don't see this either.
All of the ads in the latter two pictures change constantly. What you see there is purely a vague approximation, provided to give you a hint of what the splog master is doing. Sometimes, what he's doing may make your computer the newest member of the botnet being offered, if you're not protected.
The above article, originally published in Real Blogger Status: The AFF Splog Farm #3, was originally published mid morning 10/15, and contained the above pictures (some slightly more munged). When this post was made, maybe 2 hours later, the text content of the splog had changed. This illustrates the volatility of content of this splog farm, and shows why any RUB list will typically contain dozens of links to splogs in this farm.
>> Top
No comments:
Post a Comment