Referral Spam

September 5, 2004

Lately I’ve been check­ing my server logs on a fre­quent basis. In the past month or so I’ve been receiv­ing a plethora of refer­ral spam, iron­i­cally most of the spam is from sites sell­ing “refer­ral spam” soft­ware. One such place, which I won’t repeat the URL to pre­vent any addi­tional rank­ing, explains on their site that they “[are] a pro­ducer and seller of scripts and appli­ca­tions writ­ten exclu­sively for web­mas­ters and their needs.”

It’s almost laugh­able to even con­sider these so-called scripts and appli­ca­tions “tools” to help a web­mas­ter “and their needs”. What needs exactly? To place higher in search results by com­ment or refer­rel spam, no thank you. I’d much rather see legit­i­mate sites come up using legal, tried and true meth­ods rather than shady “SEO” tactics.

The site in ques­tion sells a “Windows-based mass refer­rer spam­mer” for $75.00 and claims how easy it is to spam sev­eral thou­sand sites in one ses­sion, includ­ing the ulti­mate pay­load; blog sites. The descrip­tion reads ” [the soft­ware] oper­ates on textfiles with URL-lists” and get this, sup­pos­edly a text file is included which includes a list of over 3,047 active blog web­sites “which you can use to start get­ting free traf­fic and PR.” It’s also fast, at least accord­ing to the cre­ator, who states that the pro­gram sends a cus­tomized HTTP header instead of actu­ally down­load­ing the entire website.

It’s this kind of thing that boils my blood to the extent where I’m deeply sorry for the stu­pid­ity of some human beings. 

20 comments

Yeah I agree. I’ve been track­ing this kind of stuff for a while (think I men­tioned it a few weeks ago on my site) I can’t see why peo­ple think this will work because site own­ers who check refer­ral logs are pretty clued up (for the most part) and are not going to be very happy about the sit­u­a­tion. Google doesn’t track my ref­e­r­eal logs to it can’t be for ranking.

I think I’ve only blocked two domains and an IP range so far…but it seems to be on the increase. Still it takes me two secs to block them for­ever from my site.

I have to admit though, it doesn’t help my seething annoy­ance either.

by Gary on September 6, 2004 at 12:35 am. Reply #

Gary: Yeah, I’m up to speed on their shady tac­tics. The one prob­lem being, and some­thing I should add, is that my sta­tis­tics are not acces­si­ble by Google. Rather, my server stats are pass­word pro­tected. How­ever, I do know that some stat logs are pub­li­cally acces­si­ble such as Dean’s Refer which 80% of the time are pub­li­cally displayed.

I hear your frus­tra­tions and I’d love to release the URL for this par­tic­u­lar “refer­rel spam” cre­ator, but it will only add more fuel to the fire so to speak.

by kartooner on September 6, 2004 at 12:39 am. Reply #

BTW, it’s spelled “refer­ral”, not “refer­rel”. To be hon­est, “refer­rel”, sounds like a weird fer­ret to me.

by Jarek Piórkowski on September 6, 2004 at 8:41 am. Reply #

As soon as I read your head­line I KNEW who you were talk­ing about. The scum­bags have been spam­ming my blog for ages and has resulted in my first ever black­list­ing :-(

I blogged my expe­ri­ance here: If you want to adver­tise, lets talk…

by Richard@Home on September 6, 2004 at 10:32 am. Reply #

This is pre­cisely why I chose to mon­i­tor com­ments before pub­lish­ing on my site, after being badly burned by the Via­gra, Cialis and gay porn evils. This sucks, since it is an extra chore and kills the instant pub­lish­ing grat­i­fi­ca­tion fac­tor — but even if I were using a black­list fil­ter, it’s not like I’m will­ing to take any chances with it.

That’s not the worst part how­ever — That is the fact that many clients –of which I could name some we’ve had but I rather don’t– would how­ever be will­ing to pay the 75 bucks for that “mass refer­rer spam­mer” with­out think­ing twice, des­per­ate as they are of hit­ting #1 in Google rank­ings, as if that were the solu­tion for their posi­tion­ing problems.

by beto on September 6, 2004 at 12:44 pm. Reply #

Richard: This par­tic­u­lar URL will be black­listed, I’m sure of it. Oddly enough, I haven’t seen the URL in the past cou­ple of days.

Beto: Yes, and I too know of a few com­pa­nies that wouldn’t so much as blink their eyes before pur­chas­ing the mass refer­ral spam pro­gram. Try as I may to steer them towards legit­i­mate rank­ing, they tend to want it right now and not later.

by kartooner on September 6, 2004 at 7:31 pm. Reply #

What winds me up about these referal spam pro­grams is, they just don’t work! I’ve spo­ken to a num­ber of blog/website own­ers and they ALL keep a close eye on the com­ments and refer­als they recieve and take swift action to remove the offend­ing spam before it has a chance to do the spam­mer any good..

I’ve never used referal spam, I’ve never needed to. I find good con­tent and seman­tic markup will usu­ally give you the edge in the search results every time.

by Richard@Home on September 7, 2004 at 1:25 am. Reply #

BTW, this is the first time I’ve seen my Grav­i­tar in the ‘wild’ — great stuff!

I’ll def­i­nitely be adding that fea­ture to my new blog design. :-)

by Richard@Home on September 7, 2004 at 1:27 am. Reply #

Richard: Your last para­graph hit it on the head; good use of seman­tics will always push your site ahead of the rest and all with­out a mass spam­mer pro­gram. I’ve seen sites that I’ve devel­oped get rank­ings within two or three days of going live. Amaz­ing what clean code can do.

As for your gra­vatar, I think it’s great. It reminds me of the tree char­ac­ters in Norse myths somewhat.

by kartooner on September 7, 2004 at 8:35 am. Reply #

php­MyAd­min is a great tool. It’s actu­ally even eas­ier than delet­ing com­ment spam in MT. But it will become very cum­ber­some if this pussy excuse for soft­ware sells well. If? Of course it will sell. Even well-meaning peo­ple will buy it because they don’t really under­stand what it does but want bet­ter rank­ings. It’s eas­ier than cod­ing clean XHTML.

The offend­ing domain is no longer in my refer­rer log.

I got to get me one of them there gravitars.

by Eric on September 7, 2004 at 9:18 am. Reply #

Block­ing IPs or domains is a like fight­ing man­u­ally against robots.

The only way to stop from being refer­ral spammed is to check your ref­er­ers before pub­lish­ing them. It might be per­haps done auto­mat­i­cally using the link check mech­a­nisms of ping­back or track­back. By the way, the tech­nic can also be used to tell the spam­mer what you think about him :-)
< ?php
$limit=100000;
$user_agent=“We love refer­ral spam”;
$referrer=“http://dont.exist.here”;
$tracefile=”/dev/null”;
$trace­han­dle = fopen($tracefile, “ab”)

while ($c < $limit) {
$c++;
echo “$c “;
$ch = curl_init(‘http://www.adminshop.com/reffy.php’);
curl_setopt($ch, CURLOPT_USERAGENT,$user_agent);
curl_setopt($ch, CURLOPT_REFERER,$referrer);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$dummy=curl_exec($ch);
curl_close($ch);
}
fclose($tracehandle);
?>

We have put an arti­cle on traf­fic­sta­tis­tic, what you can do to pre­vent from being refer­ral spammed.

by Marcel from Traffic Statistic on September 7, 2004 at 5:26 pm. Reply #

I was get­ting refer­ral spam for an URL that doesn’t exist, mod_rewrite was redi­rect­ing the spam­mers to archives/general/refer/index.php which isn’t a page at all. Yet they were show­ing up in my refer­ral list, 150 times or more a day. I put it off, think­ing it’d go away, but it got worse, so I tried to fig­ure out ways to stop them and/or piss them off. What I came up with is to pass­word pro­tect archives/general/refer — which effec­tively cut my refer­ral spam down to 0 a day. I’m won­der­ing how much it affects the spam­mer using an auto­mated pro­gram. Does the pro­gram auto­mat­i­cally click can­cel, or does it stop its oper­at­ing, wait­ing for a human user to do it? That would be nice, I bet that would piss off the spam­mers. :)

by Matt Burris on September 8, 2004 at 12:32 am. Reply #

Reffy, Ref­erer Spam Tool

by Elliott C. Back, Cornell Student on September 8, 2004 at 2:30 pm. Reply #

Post 13 should be deleted? I think we should be fight­ing this, not coöper­at­ing with them!

by Bill Thayer on September 10, 2004 at 6:41 pm. Reply #

To Bill:
Do you think, that being silent about secu­rity prob­lems will solve them?

Bet­ter widely pub­lish the prob­lem, so that web­mas­ters and web sta­tis­tics devel­op­ers will be aware of the prob­lem and pro­tect their sites or change the han­dling of ref­er­ers in their sta­tis­tics soft­ware. Since the Jin­nee is out of the bot­tle now that will be the only way to get it back into the bottle.

Dis­play­ing unchecked Ref­erer header URIs as links to the admin or even to the pub­lic is a secu­rity flaw, and that shall be fixed.Reef at least will have the effect, that the authors of the first one won’t earn money with their rubbish.

by Marcel on September 12, 2004 at 7:20 am. Reply #

Ref­erer Spam: A Blog­gers night­mare
Ed Costello has a great arti­cle on Block­ing Ref­erer Spam which has become a prob­lem for the weblog com­mu­nity. Referal Spam definitly falls in the Bad SEO catagory and I’m work­ing on com­pil­ing a list of known ref­erer spam­mers that blog­gers can pull in …

by Ranking Blog on October 30, 2004 at 1:03 pm. Reply #

Umm, I have been suf­fer­ing from refer­ral spam since the late 90’s (1997 at least, before the blog craze). It is not a new phe­nonema, it has been haunt­ing web­mas­ters for many years!

by Dave on February 17, 2005 at 1:26 am. Reply #

Dave: Oh yeah, I know just what you mean. I wasn’t announc­ing that refer­ral spam was any­thing new but that I had been receiv­ing it in bulk more often than what I was already receiv­ing pre­vi­ously. With blog­ging sites, like this one, it’s just become eas­ier to do and more profitable.

by kartooner on February 18, 2005 at 3:17 pm. Reply #

I just want to thank all of you who put up infor­ma­tion on block­ing refer­ral spam.

I don’t have a blog, I have a med­ical forum. For some rea­son since July I have been being bom­barded by this stuff. I have been going through stats and cpanel block­ing IP adresses.

I fig­ured there has to be a bet­ter way, so I have been search­ing tons on this crap. Now I just need to learn how to do this via the htac­cess and mod rewrite.

thanks for the time that every­one who is try­ing to beat this beast is putting into their web sites and blogs.

by deb on October 21, 2005 at 7:47 pm. Reply #

Good to hear that Deb.

I hope you can rid your­self of this spam issue once and for all, or at the very least erad­i­cate 99% of it.

by kartooner on October 21, 2005 at 11:28 pm. Reply #

Leave your comment

Required.

Required. Not published.

If you have one.