The recent wave of Google “I’m Feeling Lucky” search-spam that Chris Barton blogged about a while ago has added a new flavor to the never ending recipe book of spam.

Typosquatting is the practice of buying up domains that rely on users misspelling well known websites. Large organizations (like Google) will often register these domains to protect their users from accidentally going to possibly undesirable sites. One such domain is gooogle.com (3 o’s).

Yesterday I saw a high volume spam run that used this domain along with the “I’m Feeling Lucky” option that brings you to the first search result.

Interestingly some quick thinking anti-spam people have thwarted the spammers and now the search result redirects to an anti-spam website rather than the pill-pushing website you were supposed to see.

Google has many domains that spammers continue to try to abuse, but our detection methods don’t rely on the domain name… so back to the drawing board for the spammers!!