A ripway spammer
Thought I’d analyze one of the ripway spammers caught in today’s batch of comment spam.
The webpage contains links to topadult10.com, affiliate ID: 49280. There’s also a javascript redirect (of course).
What’s important to remember, is that many of these affiliate schemes have legion domains that their affiliates can use. In the beginning I thought it was about different niches. But I’ve seen the same scheme used in non-niche affiliate programs, so I’m starting to think the point is to have lots of different domains so the affiliates don’t have to lay all their eggs in one basket. In other words, if the free webhosting companies get wise to one and block it, the affiliates can use another and still get by the filters.
Which would mean the affiliate programs know what kind of challenges their affiliates are facing. In other words, they know they’re spamming?
This particular spammer does use encoded javascript, but no cutouts, so presumably it’s a medium experienced spammer.
No way to track him at the moment, unless he is using his own IP number for some of his activities.