No, Gordon [Gekko]: Greed is not good. Google really should learn this...and be responsible as to just who and what come up as valid search results, especially when they get first place result because of advertising dollars.
"Darknetmarkets.org, for all intents and purposes, is a "real" website. Its logo looks to be made of chopped-up cocaine, and the site is filled with legitimate-seeming resources for anybody looking to buy drugs on the darknet. News articles populate its homepage, and the site features how-tos on topics like using "mixing" services to hide your Bitcoin transactions from the authorities. A sidebar contains links to the "top" sites to buy drugs on the darknet. But there's a catch: The advice is real, but the links send unsuspecting users to fake versions of real "mixing" services designed to steal money from victims. The supposed darknet markets linked on the sidebar also appear to be faithful recreations of the real deal. One link sends the user to a working login page for AlphaBay, which was at one time the largest darknet market around. AlphaBay was taken offline in July during an internationally-coordinated law enforcement operation." - Motherboard (linked above)
A site that reviews and compares information security products, CompariTech, spotted this elaborate scam first.
"This is pulling people in who are looking for a particular phrase on google, lulling them into a false sense of security with good information, and then hitting them with a dodgy link to steal their money," said Lee Munson, a CompariTech security researcher, over the phone. "Whoever has done this has done their homework. This is probably the best phishing scam I've ever seen." - Motherboard
Google has not responded to this for the record. They simply say, all phishing sites should be reported to Google.
I think that's rather inadequate.
I think that the links in the first, say 250 search results can be examined and compared by algorithm and when not found to be original, genuine links to the sites named the result be put aside for separate examination, and not be put in the list of search results until verified to be genuine.
Google has responsibility here, whether the phishing is top notch or not. After all, if the computing power of Google isn't being used to present safe and good results, then just what is it being used for, email on Mars?