Interesting title ... right? OK. There is no joke. Gtop.ro and Gtopstats.com is one and the same service of ranking and statistics for web site-hate. A while ago I was doing un review in which we praise got / gstats for their performance and we hope to be one of the few Romanian services not to disappoint in time.
Well, they did not resist too much "glory" and failed in sin. What they do is worse than VIRUS care a haunted the blogosphere in the spring-summer. More accurate, All sites that are entered in the Got.ro and/or GTopstats ranking of these two sites, for the largest search engines. This is equivalent to a link referrer offered by each registered site. This would be the first fraud and not very serious (Google Page Rank is made and a better indexation of the two sites in search engines), but the next one is even more.
In the monitoring script (the one that each site owner must be added after registering in the got), the administrator of this statistics service placed in the file gTOP.js Less Orthodox codes.
Here's what the monitoring script looks like:
<!–/ GTop.ro – The most complex Statistics Monitor (Begin) V0.1/–>
<script type=”text/javascript” language=”javascript”>
was site_id = 6987;
</script><script type=”text/javascript” language=”javascript” src=”http://fx.gtop.ro/js/gTOP.js“>
</script>
<noscript><a href=”http://www.gtop.ro/”>GTop.ro – Where do you position yourself? </a></noscript><!–/ GTop.ro – The most complex statistics monitor (END) V0.1/ ->
In the Gop.JS file there is a script de pop-up (besides the reference) which is executed visibly only when the metered site is opened on a page "frame"(Ex. Google Images). That is, all visitors to a site registered in got.ro or gtopsats.ro are greeted by a pop-up window that opens the site bioget.com (site belonging to the administrator from got.ro / gtopsats.com). Many will say that you use gop and that your sites are going very well and that there are no problems like this. OK. If the site has cookie on your PC and is not tested in a frame, this is impossible to notice.
Click pe imagine.
cod:
if (cleartogo == 1) { transdata.src=src;document.getElementsByTagName(‘head’)[0].appendChild(transdata);}else {ppop = getCookie(‘psp’+site_id);if (parseInt(ppop) != 1) {Set_Cookie(‘psp’+site_id, ‘1’, ‘1’, ‘/’, ”, ”);newwindow=window.open(“http://www.bioget.com”,’bioGET’);
If you have pictures from the site indexed in Google Images, you can test this very simple. Look for an image from your site on Google Images and open the page.
For example:
– Search on Google Images : "Ymvista.com" (at the time he had the Gop code in the source)
– When the page in ymvista.com was opened through the frame from Google Images, here's what pop-up Beautiful appeared to me:
Notice how in a tab from IE7 has appeared BioGet.com (I ie set to open “New Windows & Pop-up ”in Tab New). This would not be visible to someone who would normally access the site (do not enter through Page Frame) and would have cookie for bioget.com.
You can test here for piticu.ro – piticu.ro Google Images and for arhiblog.ro – arhiblog.ro. Both are top blogs in got.ro calming.
This code is not one day two in Java source a got.ro. The problem was reported by two people, almost a month ago, only those people did not realize what was actually happening and were not taken into account. See these topics on softpedia.com: Gop does the donkeys do? and on error.ro: Gop.ro case study – I also discovered a trick in their code. The latter received a very close answer to the truth:
Kaysuperstar-. (10/21/2008 1:15:56 AM): We apologize for the Popup of Gtopsats. I only noticed it yesterday, we hope it is not older than a few days. It seems that GTOPSTTS considered that it is a good way to win a few more visitors if this popup (which obviously opened the dance page) together with their script, for statistics. Or maybe it was always, I didn't know, otherwise we wouldn't have used their services anymore. We do not want to make navigating this difficult or annoying site for our members or visitors. As I said, I noticed this yesterday. Obviously the only thing that could be done was the removal of the Gtopstats script from the pages of the portal.
The consequences of this fraud?
Google Search does not like the pop-ups on the web sites. The results are traffic decreases and Google Pagerank's degradation For the sites registered in got.ro or gtopsats.com. Default this leads to Decreased income resulting from advertising (on sites that sell online advertising).
The explosion of *traffic a bioget.com After the administrator came to the conclusion that it would be necessary to "promote" his site in this way:
*Traffic monitored by Alexa. bioget.com vs. stealthsettings.com.
I admit that I have minimal knowledge of JavaScript (Js). If someone is capable of analyzing the gop.js code and coming up with details, he can download it to here And to leave a comment. Thank you!
Top 5 affected blogs:
– http://www.arhiblog.ro (From the country where the apocalypse does not come. Even like!)
How can you get rid of this problem? Very simple: Remove the Gop code from the sources of the sites.
