Comments on: Pills referrer

by: Blog Marketing, Blog Promotion for Newbies » Blog Archive » Learning To Love 403’s!

Sat, 09 Dec 2006 00:37:56 +0000

[…] Tuesday, for some reason, I thought taking a look at SpamHuntress was a good idea and I found this. Almost simultaneously, a couple of things were happening! My bandwidth usage was growing like never before, new referrers were showing up in my stats to a larger and larger degree and Ann (SpamHuntress) had posted about the very same stuff! […]

by: Spam Huntress » Blog Archive » Tarred with the same brush

Mon, 27 Feb 2006 22:03:04 +0000

[…] pt, I was 301 redirected to 1-800-pills.com, which is owned by the spammer I identified as using the name Denis Basargin, a long time ago. And in case you’re wondering, here are […]

by: Spam Huntress » Blog Archive » Deny 203.162.27.200 - reffer spammer

Mon, 19 Dec 2005 15:05:07 +0000

[…] m which pings 69.50.176.254 More info on the spammer, including whois, can be found here: Pills referrer. I’ll gather more info on the spammer, and might update here or make a w […]

by: Blog Marketing, Blog Promotion for Newbies » Blog Archive » Learning To Love 403’s!

Fri, 02 Dec 2005 17:36:28 +0000

[…] te. Tuesday, for some reason, I thought taking a look at SpamHuntress was a good idea and I found this. Almost simultaneously, a couple of things were happening! My ban […]

by: seo black & white

Thu, 01 Dec 2005 20:36:29 +0000

Yes. All of them are redirect hosts from the same engine (you can see full list in drop down “Select A Domain” field at lookscool.com)… There were others from that list in the pharmacy top google’s SERP during last month. It seems those redirect hosts became popular among webspamers recently - many of them just trying to copy what others of them do.

by: Mark Wade

Wed, 30 Nov 2005 18:02:33 +0000

Thanks Ann,

Marco will be working something up for me, thankfully.

Appreciate your reply,

Mark

by: Administrator

Wed, 30 Nov 2005 15:07:13 +0000

First of all, the domains aren’t his. It’s a redirect service. So what THEY need to do, is to deny this guy service.

And what to do about it… Ban the IP numbers. He’s using proxies, and more and more different ones. Kinda a loosing battle. Oh, here’s another, if you’re brave enough. You could block his user agent. He’s using what appears to be a real user agent - probably took it from his browser and used it for his script. You could ban all Russian variants of Firefox… You’d be blocking most other Russians of course, if you can spare them?

by: Mark Wade

Wed, 30 Nov 2005 04:22:58 +0000

Ann,

This clown has invaded my turf also in the last few days. Here’s a couple of his other “domains” in addition to lookscool.com;

lookscute.com
digitalbomb.com
windowsexplorer.com
cutezone.com

all pointing back to 1-800-pills

Funny I was looking into it today and you have this at the same time. I found the same whois info for all, emailed ESThost and received no reply.

The redirects are registered at Tucows and hosted at Hitstation, if you hadn’t seen that.

What do you do about this? It’s the first time I’ve had this at this level.

Regards,

Mark