Ancient Web: Unmask Parasites Searched for the Invisible Links in Hacked Pages

Part of the Ancient Web Collection.

There was a particularly unpleasant phase of the Web when your homepage could look perfectly normal to you while quietly advertising somebody else's pills, loans, or worse to search engines.

Visit Unmask Parasites.

Unmask Parasites was built for that problem. Its homepage identifies July 2008 as the start of its checking history, and the surviving interface still wears a small beta label. Rather than promising all-purpose protection, the checker concentrated on unwanted material embedded in websites that belonged to unsuspecting owners.

Its name was a metaphor with a technical point: a compromised page could become a host for someone else's invisible business.

Malware from the page owner's blind spot

The site's original explanation describes injected hyperlinks disguised from human visitors, search-engine spam, and scripts that sent visitors arriving from search results to unrelated destinations. A site owner visiting a familiar address might never see what a first-time visitor—or a search crawler—received.

Its examples are rooted in the publishing infrastructure of the period: blogs, forums, wikis, content-management systems, and shopping software. Ordinary people acquired convenient ways to publish, but attackers acquired repeatable vulnerabilities to exploit. The service tried to make those compromises visible without asking every webmaster to become a security analyst.

The homepage's running counters claim more than four million pages checked and hundreds of thousands flagged as suspicious since July 2008. Those are the tool's own reported figures, not independently audited infection statistics. Nor is a page flagged suspicious necessarily proof of compromise.

The surviving page still provides a URL-entry interface, although it calls for JavaScript. Its existence is not proof that every old scanning function works today, and the address now sits beneath Sucuri branding. What remains worth examining is the narrow, understandable mission of the original service.

This was website security viewed from the perspective of somebody who maintained a few pages and wanted to know if those pages had been quietly enlisted in a spam campaign.

The early Web ideal was that anyone could own a small piece of the Internet. Unmask Parasites documented one of the less charming consequences: anyone else's code could try to move in.

Read the surviving FAQ and its examples of hidden attacks.

Part of the Ancient Web Collection.