Saved in:
Bibliographic Details
Main Authors: Zagi, Luqman Muhammad, Digdo, Girindro Pringgo, Shalannanda, Wervyan
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2508.19368
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915465820897280
author Zagi, Luqman Muhammad
Digdo, Girindro Pringgo
Shalannanda, Wervyan
author_facet Zagi, Luqman Muhammad
Digdo, Girindro Pringgo
Shalannanda, Wervyan
contents This study investigates the defacement of Indonesian websites by actors promoting illegal online gambling. Using a lightweight methodology that combines keyword-driven dorking with systematic crawling, we identified 453 defaced webpages within one month. Although dorking alone yielded a false positive rate of approximately 20.3\%, the integration of crawling and keyword-counting enabled reliable differentiation between true and false positives. Our measurements revealed diverse defacement behaviors, including repeat defacements (150 cases), fixed instances (129), keyword modifications (55), and redirections or hidden URL injections. In total, 8,837 unique third-party URLs spanning 5,930 domains were captured, with a small subset recurring across multiple sites. Website responses were inconsistent, with an average reaction time of 75.3 hours. These findings demonstrate that simple, reproducible techniques can provide meaningful insights into the scale, persistence, and dynamics of defacement, highlighting the importance of continuous measurement for strengthening defenses against online gambling activities.
format Preprint
id arxiv_https___arxiv_org_abs_2508_19368
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Just Dork and Crawl: Measuring Illegal Online Gambling Defacement in Indonesian Websites
Zagi, Luqman Muhammad
Digdo, Girindro Pringgo
Shalannanda, Wervyan
Cryptography and Security
This study investigates the defacement of Indonesian websites by actors promoting illegal online gambling. Using a lightweight methodology that combines keyword-driven dorking with systematic crawling, we identified 453 defaced webpages within one month. Although dorking alone yielded a false positive rate of approximately 20.3\%, the integration of crawling and keyword-counting enabled reliable differentiation between true and false positives. Our measurements revealed diverse defacement behaviors, including repeat defacements (150 cases), fixed instances (129), keyword modifications (55), and redirections or hidden URL injections. In total, 8,837 unique third-party URLs spanning 5,930 domains were captured, with a small subset recurring across multiple sites. Website responses were inconsistent, with an average reaction time of 75.3 hours. These findings demonstrate that simple, reproducible techniques can provide meaningful insights into the scale, persistence, and dynamics of defacement, highlighting the importance of continuous measurement for strengthening defenses against online gambling activities.
title Just Dork and Crawl: Measuring Illegal Online Gambling Defacement in Indonesian Websites
topic Cryptography and Security
url https://arxiv.org/abs/2508.19368