I have a couple of Google Alerts with specific, though not very common, "Firstname.Lastname" keyword triggers. Seems some enterprizing link farmer has now discovered a way to milk that vector, either by pure synthetising of such combinations, or by extraction of names and other terms through siphoning off email at some net.gateway.

The three (out of 8 returned at the same time) purposedly-not-linked pages below seem identical – a long list of first and last names, and other randomly assembled terms for trigger fodder followed by a long list of links to, I presume, various spammy prescription drug mailorder companies, etc. Mere checking what it could be netted 3 AdWords-or-equivalent clicks for the link farmer A fourth, among the 8 alerts, returns now a 404 error message in Turkish, meaning its admin. got there already. All three are PHP-served, so the pages may have been placed there surreptitiously via some (lesser) known exploit of the php kludge. I did not check the rest – I can recognize spam when it hits me in the face.

I hope Google plugs this hole soon (how?), or else the Alerts will become unusable. Unfortunately, this vector seems to be a new one, as this query doesn't return anything as yet.
http://google.com/search?q=google.alert+spam.vector

WARNING – LINK FARM PAGES
www.fiberfib.com/tv/img/2/blog.php?p=10511
www.verivel.fi/kihnio/plussa/2/blog.php?p=10511
www.tvpnet.com.br/downloads/2/blog.php?p=10511

Ah well, old tactic it seems – 650 hits on google.alert + link.farm comvination. My bad.

http://google.com/search?q=google.alert+link.farm