We had our carpets cleaned yesterday. If anything is to blame, it’s probably that.
Our house is now a mildly humid wasteland of locations I’m currently not allowed to walk, so instead of sitting up in my nicely appointed office, I’ve been banished to the basement (the only place in the house - besides the four-year-old’s room - that didn’t get cleaned and isn’t all… well… moist.)
So I’m sitting in the basement watching a dumbass mouse, that somehow ended up in our window-well, beat his tiny little brains out jumping against the window rather than climbing up the stick I leaned down in there earlier today as an escape path for him.
It’s all left me in what can best be described as a mood.
CLIMB THE FRICKIN' STICK YOU IDIOT!
Anyhoo… Either because of the swampy carpets or Jumpy the Wonder Mouse™, I’m in a mood, and what better way to expend some pent-up moodiness than to screw with Internet Denizens of Questionable Morals (IDQMs for short).
NOTE: To the right, you’ll find a lovely collage of action shots of “Jumpy”. You’re welcome.
Having had more than a bit of fun earlier in the summer with one of my favorite IDQMs, SpeedyPaper, I decided to see if I could make their life a little more interesting.
[A recap: Earlier this summer, I found that someone had hacked several websites - The U.S. Capitol’s Virtual Tour, The Navy League (a charitable organization that supports the US Navy and Coast Guard), and the Holiest of Holies: the website of Skyline Chili. In each instance, the hackers had left behind “SEO” links that round-robin redirected anyone following them to several purveyors of “term paper assistance.” I notified the affected site owners and also called out SpeedyPaper (a “beneficiary” of these links), via their Twitter account, to ‘splain just exactly how links leading to their website had “appeared” on these hacked sites. You can read the details of those sagas here and here.]
Today, I decided to do a Google search for “site:.org speedy paper term”. This locks my search to the “.org” top level domain (TLD) and finds pages that contain the words “speedy,” “paper,” and “term.”
Hey… lookie there!
Aaaaand… another site joins the “research paper SEO” hit parade. This time, it’s the site for the Town of University Park, Maryland.
Clicking on that link created the following cascade of internet linkage:
Now, the last time I called out SpeedyPaper about the “happenstance” of hacked links leading to their site, they boldly proclaimed their theory that these links were created by their EEEeevil Competitors (Note: Likely the self-same EEEeevil Competitors that they appeared to attempt to frame by clumsily redirecting their redirect to… if that makes any sense.)
So, let’s look at this whole redirect thing a little closer:
My initial request went to the upmd.org (University Park, MD) domain:
The upmd.org site responded to that request with a redirect:
Redirect from UPMD
HTTP/1.1 307 Temporary Redirect
Redirect to: https://speedypaper.com/?rt=3S5do2ix&utm_search_engine=google&utm_host=upmd.org&utm_referrer=http%3A%2F%2Fupmd.org%2Findex.php%2Flead-research-paper%2F&utm_keyword=lead+research+paper
There’s some awfully specific stuff in those parameters:
Well, to answer that question, we need to time-travel back to the late 90’s. UTM originally stood for “Urchin Traffic Monitor,” which was part of a software suite called “Urchin WebAnalytics Software” that was released way back in 1998. Google purchased Urchin and its technology in 2005 and continued to sell the software for almost seven years until the decision was made to discontinue it in 2012. Although the original UTM software has gone the way of the dodo bird, Google still continues to use the “utm” convention for its own analytics software.
But this ain’t Google’s doin'… Somebody seems to be - GASP! - plagiarizing Google’s work. If only we could figure out who in this sordid mess knows anything about plagiarizing…
The “outlier” here is that “rt” parameter… Perhaps (and I’m speculating here…) whoever “did the deed” and placed these hacked links ‘round the 'Net is convinced - through no fault of the fine, upstanding folks at SpeedyPaper - that they’ll be somehow “paid” based off of some sort of “referal token.” Nah… that couldn’t possibly be the case.
So……. at this point, something on the SpeedyPaper site receives that inbound URL, doesn’t seem to be the least bit befuddled by the string of goofy parameters (hmmmm…), and immediately redirects back to SpeedyPaper’s main page. How convenient!
It seems especially convenient when SpeedyPaper has, in the past, made it perfectly clear that this is the work of EEEeevil Competitors. Obviously, EEEeevil Competitors often hack websites and install links to your site, complete with analytics parameters, because that’s how EEEeevil Competitors work.
It’s so convenient it’s essentially a frickin' miracle.
Screw this crap… I’m gonna go watch my mouse jump. (Yes, that sounds like a euphemism. No, it isn’t.)