A while ago, bloggers were pleasantly surprised to find newly spamvertized sites were already closed for TOS termination when they checked them.
Trouble was, a week or so later the site would silently start serving a spammy site.
The termination notice was fake, and a ploy to try and make bloggers careless about removing the comments and referrers.
This tactic was first implemented by one very prolific spamming outfit employing both comment and referrer spamming. This spammer is responsible for most of the texas holdem spam.


But today another spammer has apparently learned this tactic, and now we have a new version of the closing notice (Website terminated in black with white background). This one is frankly a lot less easy to spot as a fake.
From what I’ve learned from the owner of the IP space, this termination notice is likely also fake.
This spammer is usually recognized by only referrer spamming and his use of "grub crawler". Not to be confused with the authentic grub-client.
So any time you see a site in comments or referrers that bears a notice saying the site is terminated or closed, be suspicious, and remove the link.
Ann Elisabeth
http://www.annelisabeth.com/blog/
No tags
