How Open Site Explorer’s ‘Just Discovered Tab’ Uncovered 884 Hacked Websites

Note: I’m not sure if this is a new exploit or not, WordPress security was made aware of my findings before this post.

Late yesterday afternoon I got a tweet from David Higgens that Penguin 2.0 had rolled out.

I had a been in a dinner meeting pitching one of my side projects, but I got home as quickly as I could to see what the new SERPs looked like. One of my favorite SERPs to watch in the last year or so has been the keyword ‘Payday Loans.’ As my research progressed into the night on this keyword set, I noticed one website that shouldn’t have been ranking at all, but was ranking in nearly every geographic locale I tested for ‘payday loans.’  I tweeted about it in frustration.

My friend and colleague, Steve Hammer, was quick to point out that one of the websites linking to them was a band that was hacked.

A quick Google site search and view of the source code proved this to be true. The code for the hack uses the style tag to hide the link within the website’s design scheme so it’s not visually detectable. This made explaining the hacking situation a little more difficult when I contacted the band.

google site search reveals payday loan terms

The band’s website has payday loan terms appearing in a Google search.

hacked code inserted into fishbone.net

the code from fishbone.net

Steve used Majestic SEO to find the hacked website. I went there first to start looking at the data. Majestic showed over 10,000 linking root domains, and all seemingly in the last two weeks. That’s a lot for a payday loan website. I wanted to dig deeper, but I couldn’t create a report, as I’m not on a higher subscription plan or the domain owner. Still the data from Majestic had me curious as to what I would find.

majestic seo chart for the domain

This chart shows the massive link volume in just the past few weeks, and it really ramping up just days ago.

Based on Rand Fishkin’s tweet, I decided to use Open Site Explorer’s new ‘Just Discovered’ tab to investigate further.

At first glance, Open Site Explorer (OSE) showed no metrics, no Domain Authority, etc.. so I wasn’t too positive about the data I would get on the Just Discovered links tab. I was surprised to find over 5,000 links. This is nowhere near the 634,000 links that Majestic stated they have, but it should be a good enough sample size to find out how this website is ranking.

Open Site Explorer shows no metrics, but has links

Don’t be surprised if OSE shows no metrics, but has tons of links to show.

I spot checked a few pages listed such as a car dealer in Kansas, a marketing firm in Houston, and a culinary website in Atlanta, and they all had the same code inserted in them with the link to the domain in question. They also all were disguised to hide on the page. Most of the websites in the list have the exact match ‘payday loans’ anchor text.

It was obvious that a pretty big hacking had occurred, but I wasn’t sure just how big. After exporting the data, I asked my co-worker Andrey Zavyalov, our resident Excel Ninja, to filter out the duplicate domains in the spreadsheet to see just how many websites had been compromised to link to this website. Out of the more than 5,000 links he found, 884 unique domains had been compromised. What is more shocking is that all of them appear to be on WordPress. That’s 884 unique domains out of more than 5,000 links.

Majestic SEO counted 10,000 linking root domains, which could mean if this website’s Modus Operandi is to hack for links (and that’s very likely), then there is a high probability that there are 10,000 websites out there hacked and providing link juice to this website (and probably a different one in the near future). I am not certain if this hack occurred on the newest version of WordPress, however, some of the websites checked had the Meta Generator tag that showed the latest WordPress version of 3.5.1, which is a good indicator to me that this is a new exploit. Hopefully, WordPress gets it plugged up soon.

Side Note: We’ve checked our clients WordPress websites and have not found evidence of hacking, so you’re all good.

Sadly, this is a story that will play out time and time again:  Opportunistic individuals in a vertical abusing and hacking other websites for immediate rankings with a throw away website. Matt Cutts announced in a video a few days ago that some verticals like payday loans would end up getting some special treatment from Google, which hopefully will lead to future solutions for these kinds of issues.

Here is an alphabetized list of the 884 domains that we found to be compromised. I’ll probably take this list down in time, but I wanted to provide it in case your website was hacked or you know someone who was affected. Please help me get the word out to them to remove the injected code on their site. Note: we do not endorse or condone any of the content on the following websites. Visit them at your own risk.

1stchoiceplumbingsd.com1treehill.info365cambridge.com
365-kw.com3fortheroad.com3guys1movie.com
5stylehigh.comaboundingwisdom.comabove180.comabrindoobico.com
accustomedchaos.comaddymeira.netafinewshq.com
africanbites.comafwny.comagentmedia.co.uk
agilemaniac.comagilephp.netagrandmotherspeaksout.com
aidforsinglemothers.orga-inhibitor.comairgraphics.com
akntiendz.comaktinhibitor.comaladata.co.uk
aleasylum.comalejandrotarre.comalexandrafigueredo.com
alk-inhibitors.comallechdopor.comallthingsgraceful.com
alohapolitics.comamandameganmiller.netamazingfitnesstips.com
ambitiouskitchen.comamenstreet.comampedsounds.com
ampirebeats.comandroidapplication.mobiandroidgamesdownload.org
aneveu.comangryanimebitches.comannabarnettonline.com
annadobrenskiblog.comannieandthebeekeepers.comapologetics.servantsofgrace.org
appletiniphotography.comapuestas-casino-poker.comarninglawns.com
art.links2click.comarticle6blog.comasiagreenbuildings.com
athenapelton.comatlantaptpi.comatlasstrategies.com
austinteenbookfestival.comauthenticmanwithin.comazbex.com
azweatherchick.combabysocial.com.aubadgenie.com
bakerbynature.comballjunkie.combaltimoreguide.com
bareknucklebaby.combarkerandmills.combarkmeowvets.com
barrettpowell.combasecampcoaching.combcitma.ca
beautifullysmagazine.combeautifulmadhouse.combeckyshomestead.com
bedtimebunnies.combellinghamcommunications.combenjaminnevarez.com
bennydemus.tvbensontheatre.orgbespokesolutionsllc.com
beyondallreach.combicyclette.to/bigballershotta.com
bigheartedfamilies.orgbigredsportsmachine.combikramsc.com
bizcfo.combizculturehackers.comblackmagicsurfboards.com
blackwomennaturalhairstyles.comblissbombed.comblog.amsterdamhospitality.com
blog.appareladdiction.comblog.avs.comblog.betterworldbooks.com
blog.brycemclaughlin.comblog.cobelle.netblog.drivendfw.com
blog.eztaxreturn.comblog.fusiontribal.comblog.ijpdesign.com
blog.ilsccp.orgblog.kmnelsondesign.comblog.moreloans4u.com
blog.murats-toplist.comblog.naturalgumption.comblog.photographercafe.com
blog.planetbeauty.comblog.postalpix.comblog.semilshah.com
blog.sexandmetal.comblog.shopceek.comblog.starcircleacademy.com
blog.teethremoval.comblog.thesomersteam.comblog.turkgays.com
blog.webicurean.comblogaldo.combluecorncafedurham.com
bluepicstudios.combobbycherry.combohnjello.com
bonuscodecasino.netbonvoyaging.combookreviews.servantsofgrace.org
boujibuzz.combprintgallery.combreakthrufitness.com
brewcoffeeshop.combrightonandhovenews.orgbrokenfilter.net
broncoburgersblog.combrooksharper.combrowardstars.com
bryanhighnorseman.combryce-mccormick.netbtrandolph.com
burgerbeast.combusinessturkeytoday.combuzzelicious.com
c2bmediausa.comcalpolycru.comcareersherpa.net
carifinonline.comcarlalundblade.comcarsalesprofessional.com
carsmartnow.comcatapultgroups.comcathedraloflife.org
cathnewsusa.comcccm.orgchaimommas.com
chamberofhoarders.comchapelofsanlorenzoruiznyc.orgchattanoogafilmsociety.org
chcduluth.comcheap-sound.comcherylbyrnecommunications.com
chestercollege.educhicksinaprons.comchihuahuanoticias.com
childbirth.amuchbetterway.comchimchum.comchinatownremixed.ca
chissenefrega.comciaoflorentina.comcitygirlbigworld.com
civicleague.caclaudemariottini.comclaudiaguebel.com
cleaningcommercialjanitorial.comc-metinhibitors.comcoldcasechristianity.com
coloradospringstennis.comcomersano.com.vecommunity321.com
comoanilloaldedo.com.vecongo-liberty.comconocity.eu/
convergingworship.orgcorkbuzz.comcosonng.com
cotullavillage.comcountryraptunes.comcrazylegsskateclub.com
crbcnc.orgcritiquebooks.comcrossfitsociety.com
crudepixel.comcsrperspective.comcueafs.com
dailynutmeg.comdallastexasrealestateblog.comdata-studies.com
davarts.orgdaytimedating.comdbakevlar.com
dcmetromedia.comdeals.bestkidfriendlytravel.comdebtdiagnosis.com
demgen.comdemocraciaenjuego.orgdesmaenok.silverhalogenide.com
developingrevenues.co.ukdiabetesnews.comdianaelizabethblog.com
diariomomento.comdiethood.comdigitalentertainment7.co.uk
digitaltransformationconversations.comdinopuzzlegame.comdirtyfloordiaries.com
disabilitiesgrants.orgdiscoverconnectbelong.comdiyinspired.com
djlaz.comdjschemes.comdjzeem.com
docwoodproductions.comdollfacepersiankittens.comdominican-view.com
drizzleonline.comdrumandbasics.comdrunklastnight.com
dsbabble.comedgarcountywatchdogs.comedsheeran.us/
elbabuino.comelconcreto.comelgobiernodeocoa.com
elicastro.comellysaysopa.comelpensamientosostenible.com
emanlandau.come-mekdep.comemeraldlawnsaustin.com
emilybennington.comemilymiseroy.comemtheories.com
enlightenprinciple.comequationchurch.comeverydayhdr.com
everythingkentuckyonline.comewondertv.comexperiencegccathens.com
exploriem.orgexpoitalyonline.itexposedprandevents.com
f1gplive.comfaithwarren.comfatman2ironman.com
feel-great.netfishbone.netfitnessbyeva.com
fiveohseven.comflemingworks.comflockedmedia.com
fondoadaptacion.gov.cofoodweek.infoforexdiva.com
fotosonedirection.comfoundationscollegeprep.orgfranchise.never-paint-again.com
franciscorangelescobar.infofranciscorangelescobar.orgfreebiesdesign.com
freelancecafe.orgfresnoweddingphotographyblog.comfxme.eu/
gamblerfalls.comgaming.links2click.comgardeninginthemitten.com
gaydailyhot.comgeekvenezolano.comgeneroussavings.com
georgeandco.comgeorginesaves.comgerenciavenezolana.com
ginadanna.comgirlfriendbooks.comgirls20summit.com
glasshospital.comglobaldairymarkets.comglutenfreebitches.ca
glutenfreehotproducts.comgofashiondeals.comgomezcatering.com
goodbyedebt.comgoodfellaztv.comgoowire.com
gotravelation.comgourmetestorie.comgrahamemorrismp.co.uk
grandpighoroscope.comgranportalaviacion.comgrantsecrets.com
grassrootsnorthshore.orggratisjuegosdiarios.comgraycatenterprises.com
groundupradio.comguerrillasmith.comguildcomplex.org
guysreviews.nethansenschoice-greenhealth.comhappyhooligans.ca
harvardnsj.orgharvestkansascity.orghauteofftherack.com
hazmatfreight.comhcicourse.comhealingprojects.org
healthdataanalysisupdate.orghealthupd8.blogspot.comhealthyharbinger.com
healthylittlebit.comhealthytastycheap.comheartbeetcafe.com
heathergaudiofineart.comhemetproductions.comherbanmarketplace.com
hexbeat.comhfrf.org.ukhiendfitness.com
higherstandards.orghomeinthetrenches.comhomemadedad.ca
hoorayhurrah.comhotdealsyo.comhowtodropweighteasy.com
hrohumanresources.comhughneff.comhuntervids.com
hustlevision.comhwcol.comiceagenow.info
idfscidnewbornscreening.orgigglesblitz.comiiij.org
ilikemike.meimnaturallysimple.comincunabula.org
ingienous.cominsidecuisine.cominstantgrativacation.com
intelligentsia.com.mxinterop.ixiacom.comiparented.com
iphone4s-online.comirishwildcat.comironorchiddesigns.com
iviaggiatorinmovimento.itjabongcouponcodes.comjacksboatrental.com
jacksonvillevaletservice.comjacopofalleni.comjeagraphicdesign.com
jeanpierrelemaitre.comjenniferlshelton.comjenniferturliuk.com
jessicagimeno.comjesusfreak1623.comjiujitsufightingvideos.com
jobsinchina.co.in/jodijacksonshollywood.tvjoelvanvliet.com
joenetherworld.comjohnrughcopywriting.comjonathan-hardesty.com
joshuagates.comjuansemolina.comjulesmann.co.uk
justagirl05.comjustgamesretro.comjustshootingmemories.com
jvmlending.comkaleynelson.comkansascitydealer.org
karendphoto.comkateordiecomics.comkatesbeautyblog.com
katietalkstravel.comkellyncoetzee.comkiana.com
kidindependent.comkidsgoneraw.comkimnehrt.com
kimwilson.comkindnessbug.comknoptop.com
korywoodard.comkristinerudolph.comkumbiaphp.info
kvtproductions.comladyplusbaby.comlahoguera.info
lalibreriadelamoda.comlampli.comlaughingmyvagoff.com
launchyourcreativelife.comlauraleewalker.comlaurengrodstein.com
leahsfabulousfinds.comlearn2earnfresno.orglearn-emailmarketing.com
learninginthegripofgrace.comleavenworthst.comlegacy-control.com
legion-style.comleonamizrahi.comlesalonbridal.com
lesliespurlockblog.comletsgomobile.biz/letsrestycle.com
lifefoodandbeer.comlifewithluggage.comlikenagoya.com
limitlesslaura.comlinuxdrops.comlisagcooks.com
liveencounters.netliving.amuchbetterway.comlivingcivil.com
livingincolorprint.comlivingoffloveandcoffee.comlivingstrongwellness.com
living-with-two-languages.infolocalmumsanddads.comloganswarning.com
louisvillewindowtreatments.comloungeurbain.comlouslakeviews.com
lovinglightastrology.comluckyemily.comludwigbc.com
luisemiliovelutini.netlulyb.commaagmagazine.com
macini-izle.commacsportsandsuds.commadebuyus.com
madisonmain.commadonnaofthemills.commagandafilipino.com
magetmd.commagnetizinglove.commakeupandmeg.com
makeupgameonpoint.commakingthedayscount.orgmamaenred.com
manupchicago.commarcoguerrastudio.commariostrim.com
marketsqueeze.commatchurself.commaxdarwinmagic.com
melissatoandfro.commelissavincent.commembership180.com
memyhairandthecity.commercadofitness.tvmetaljawcomics.com
mexicosinfrontera.commichaelgraycpa.commichaelwroberts.com
midlifecelebration.commikebrownmma.commikeclancytraining.com
mikeeagle.netmilestomes.commilkdocumentary.com
mimiandchichi.commindyindy.comminijuegosblog.com
mirappraisal.commisterpickypants.commmaworldnews.com
mobile2013.orgmodaenvenezuela.commoderneye.com
momaconsulting.commommymemusicclasses.commoneysavinghoney.com
monicarysavy.commonimeals.commorsipr.com
motherhoodlooms.commoto1gp.commovementsandnonsense.com
mslanavi.commug-mouth.commummysecrets.com
muserising.commusicandcelebrities.commusicplay.me
musictourreviews.commuziekis.nl/mydirectdeals.com
mylifespeaks.commymusicexec.commysocalledmoney.com
mystoryisart.comnaiaraperezdevillarreal.comnatechutefoundation.org
naves4x4.comneilshh.comneosmarketing.com
nerdygirlmakeup.comneurosculptinginstitute.comnevisblog.com
new-pakistan.comnews.apsmsystems.comnewworlddistro.com
nflnationals.orgnicknotnikki.comnicoleramsbey.com
njnutritionist.comnkccnews.comnollywoodwatch.com
noprop37.comnormal-life.orgnorthernwrites.co.uk
notforthecoolkids.comnotguiltyadams.comnovaplasticsurgery.com
obsceneworks.comolaysalcan.comoldiess.com
omaralkalouti.comomarsimpson.comomgobsessed.com
omizio.comonevoicenetwork.caonthepathapp.com
options.garven.comorbitagay.comottawarickshaws.ca
overlandsphere.comozandroid.infopaddyhome.com
pagescorner.compaintmeplaid.compakistanmediawatch.com
papercraftplanet.netparadajz.netparalosangeles.com
parentingforpurpose.compark-life.orgpartywithmoms.com
passiveincometalk.compastorchadgraves.compathfindersolutions.org
patriotmash.compattyebenson.orgpaulmaseberg.com
paulwhartonstyle.compavingbricksvictoria.compeacechild.org
peacefultransition.capennellolane.comperfectdietprograms.com
perfildigital.com.coperuviantimes.competwatchman.com
pheromones.comphillipgonzales.comphillycourtreporters.com
photographyawesomesauce.comphysiciansnews.complantbasedonabudget.com
platinumcheese.complatinumroofingandremodeling.compoint-reyes-local.com
pornonomia.comporto-catering.ropostandgrant.com
poultrytimes.netpracticalsmm.comprecisionfilm.com
premierwinetraining.compreownedautoblog.comprepography.com
prettygirlblog.netprintablecoupons4moms.comproallstars.com
proarmspodcast.comproductivitycubed.comproductivitygiant.com
progressivenectar.compromoblogger.nlprontopressrelease.com
property-advisors.netprosper-in-northumberland.caprosperityseriesmemphis.info
proudtobeafilthyliberalscum.comprsaalaska.orgpullingcorksandforks.com
q8autonews.comqualityservicemarketing.comqualtechsoftware.com
quietevents.comquitobebes.comracheldack.com
radiancepoweryoga.comradioalternativo.comragnerdrok.com
ralphwalkerdesigns.comrapidproductdevelopment.bizrapperr.com
rarecrossfit.comraresoul.comrawrgg.com
readingdiva.comrealfoodmoms.comrealtvcritics.com
recapturefitness.comrecipejourney.comredbutterflymovie.com
reelbastards.comreflectzyn.comreggielal.com
region.fifthking.comrelumination.comremembertheice.com
removehairinstant.comremyscalza.comreparandoelcarro.com
reportecorporativo.comrevampitinc.comrhucs.com
rickdebruhl.comrightonlefton.comritawatson.com
robertforto.comrobinwoodwest.comrobpattinsonweb.com
rockfordsquire.comromgchamber.comrootsinalpharetta.com
rootsprovidence.comrositacortez.comroxwalkoff.com
royalbelly.comrpsmiles.comrubinascakeshoppe.com
rustygrape.comrwthomeremodeling.comsafetyscents.ca
salesganasal.comsalt396.comsaltjunk.com
sammyko.comsamplawskiphotography.comsang-froidridingclub.com
sanmembers.netsarahvonbargen.comsarasdfitness.com
sarinanow.comsaucedomercer.comsavagehabbit.com
savorx.comscandalousbeautyonline.comsceneintown.com
sciencewriters.cascottdesigns.casdfoodtravel.com
sealink.orgseaotters.comseattlenetimpact.org
seeyousoon.casennaya.comseojoblogs.com
serieproject.orgservantsofgrace.orgsewardcitynews.com
sfsthetik.comshalavee.comshelleyburgon.com
shindi.netshoptrulyyours.comsicanadam.com
simenonamartinez.comsimplyglamo.comsittersattheshore.com
skatenugg.comslimsavers.comslowshooter.com
smartwomentravelers.comsmokinvapor.comsocceroverthere.com
sociallypresent.comsomewhereinthemiddleblog.comsonicetweet.com
soundasthma.comsoundmindindustries.comsoundry.com
southernrockracing.comsovietkitchen.comspekular.com
spencerwatch.comsportingentrepreneur.comsportsbetsblog.com
sports-betting-winners.comsportsbrasandsippycups.comsportsfeedia.com
sports-kings.comsportspowerweekends.comsquadmeet.com
squeezemoreprofit.comstage72.comstaggsfitness.com
stankotibor.comstarsandpopcorn.comstartingup.com.br
stephenwalther.comstevensdisposal.comsteverose.me
stoptennesseeforeclosure.comstopvih.orgstpetesunsetrotary.org
stubbydog.orgstudentfood.castudioseventeen.org
stylesubstancesoul.comsuburbanturmoil.comsugarnova.com
summitsips.comsunscaperesortsblog.comsuperacionpersonal.mx
suzannahlipscomb.comsuzannchristine.comswagsection.com
t0inpaydayloans.comtalkofthetownatlanta.comtampabayhomes4sale.net
taniarubim.comteacherdad.comteachergeekischic.com
tech.links2click.comtech4pub.comtechcovet.com
technesstivity.comtechtools4mom.comterricole.com
teteracaliente.comtexasmodeling.netthaidentalimplants.com
thatsbadass.comtheasbestoscenter.comtheavant-gardist.com
thebigoutside.comthebluestockings.comthebodiesofknowledge.com
thebridescoop.comtheburtonwire.comthebusinessoffun.com
thechicagolifeblog.comtheconnectedcause.comthecopywritingwebsite.com
thecraftycollaborative.comthedailybleat.comthedigitalvisual.com
thedoctorscloset.comthefakebaseball.comthefashionstatements.com
thegamersblog.comthegetgreenkey.comthehealthcoach1.com
thehybridathlete.comtheibookemporium.comtheiflife.com
thekennywormald.comtheleanmarketer.comthelintscreen.com
thelovage.comthemavenofsocialmedia.comthemcbproject.com
themediamama.comthemlmwhisperer.comthemodernnetwork.com
themorningafter.usthepeoplestribune.comtherenovatechurch.com
therynoshorn.comtheshakespearestandard.comthesimpleyear.com
thesocialrobot.comthesonicspread.comthespankingspot.com
thestylemaven.comthetrumpetblog.comtheveganbee.com
thewomenstyle.comtitokang.comtitsandsass.com
tjlaonline.comtoddminerlaw.comtodoloquehay.com
tomalaruta.comtommydarker.comtop10watchbrands.com
topchicagorealestatenews.comtopcountry.catoplineleadership.com
torontonicity.comtptvexclusives.comtraceyevelynbeautifulyou.com
tradingcomputersnow.comtransformativehealth.infotreasuresfp.com
treelovers.premieretreeservices.comtrickstergallery.comtrihamletnews.com
trivworks.comtruenorthreports.comturning40.net
tururutururu.comtvwriters.orgtwelvebytwonyc.com
twopeasinapoddesigns.comtylersculpture.comukbusinessforum.com
unionhugs.comunionjackplumbing.comunionsquareurgent.com
unnatural20comic.comupc.fm/urbanalleyblog.com
urbangro.comurbanhitpromotions.comurbanouteaters.com
usacashpayday99.comusastockreport.comushistoryscene.com
uswateralliance.orguvcblog.comvashikaranblackmagic.org
vectors-free.comvegan.xanaland.comvehq.net
vicentewolfblog.comvickilempweavil.comvickystein.com
victorychristiancoaching.comvientosdeboda.comviewpointwindows.com
vivaiquique.comvivascriva.comvivekkunwar.com
volleyball.addymeira.netwadhwa.comwardone.org
wayne-bowser.comwebikeeugene.orgwee1signaling.com
weeklykvariety.comwestcoasthiphop.comwhere2transportation.org
wheretheclassroomends.comwherethegirlsgo.comwildbillspawnshops.com
will-greene.comwindfires.comwinnipegtdve.ca
wisciblog.comwizznotes.comwondherful.net
wordofmomradio.comworldghana.comworldgranderclub.com
wresttdngdom.comwresttdngwithdepression.comwtenews1.com
wubboomummy.comxsquisittdne.comyepgraphix.com
yffpforeignpotdcy.orgyourcreativenative.comyourresetbutton.net
yousingiwrite.comyrcritic.comzacgorman.com
zbored.comzebragallerieblog.comzippybites.com
zoomfotobooths.com