wowgold-sale.com linked sites

I'm making a new post for this since I figured out what to do with this information instead of just dumping it into my blog.

I doubt this is a complete list. In fact, it's still in the works. It's probably close, though. All of these sites link up to wowgold-sale.com and all are used in comment spam and on splogs. I've got 104 addresses now. Holy crap.

The information is available in two formats from Google docs:

• Document
• Spreadsheet

Enjoy. Or try to.

More wowgold-sale.com sites

The list is now 104. Ug. OK, that's over 100. Time to poke at that other group...

New splog user names

Most of these were registered within the past week and I located them with one of my magic splog phrases in my last post about splog user names. Note that user names posted previously are also in use.

• goldwows
• wowgold001
  
• wowgold938
  
• wowgold0930
• wowgold930
  

And sometimes, there are bad affiliates

Back when I started looking at splogs, I ran into some with banners linking to team-vip.com. I stupidly assumed that they were responsible for the splogs, but looking closer, I determined it's actually an effort by an individual who likes splogging and link stuffing who also happens to be in the team-vip.com affiliate program.

Just making this post because I had an entry about team-vip.com splogs back when I first made this but then I couldn't find evidence of them spamming elsewhere, so I saved it as a draft until I could figure out what that was about. Well, that mystery is solved.

I also feel like mentioning that when this blog is quiet, I've usually found some other spamdexers to play with. I don't think the wowgold sub-set of spammers is more important than any others; I've just found that looking for them helps lead me to other spam. That and I just happen to find them annoying if only for the annoying keyword style comments that contain such randomness as "wowgold." That's usually in there along with "wow gold" but it's still there.

And I'm yammering...

More splog user names

Yep, time for the sploggers to start over. I'm going to randomly keep adding to this list but since these are new names, I'm making it a new one. Note that once again, I'm hardly saying that all users who use these names are spammers. I've just run into several that are. There are other user names in use by this particular type of spammer as well, but I only list those that I have found on multiple networks.

• buygold
• buygolds
• buywowgold3
• cheapgold
  
• goldwow
  
• goodwow
• lovewows
• wow01gold
  
• wow-game
  
• wowgamegold
  
• wowgold001
• wowgold002
  
• wowgoldes
• wowhello

"lovewows?" "buygolds?" Holy cow, these spammers are so creative! Here's a magic splog phrase! And another!

This is where things get really fun

For the record, igewowgold.com is not to be mistaken with ige.com, which does not spam and has been around a while. I once thought they spammed, but then I figured out that the name was just being invoked to bring a sound of legitimacy to something else.

I completely forgot about them until I remembered igewowgold.com's really bizarre "Affiliate Program" and it hit me that igewowgold.com probably ripped it off of ige.com. That seems to be the case; the only difference is a quick find and replace change. In addition, they also throw in things like "IGE® Ltd." when there clearly is no link between them. This is pretty easy to determine since the banner ad on igewowgold.com doesn't even make sense and is in fact ripped off another site, and it's a site that spams.

I'm reporting igewowgold.com for AdSense abuse as well as to ige.com because of the stolen content. I'm not sure what they can do about it, but I think they can do better than I can. :P

I'm not personally taking a stance on buying game objects with real money. Just spam. Spam always sucks.

Using Technorati to find splogs

Technorati searches nothing but blogs and thus it's a good way to find splogs. It's especially easy if several splogs include the same illogical text. In this case, you have to search for blog articles as opposed to titles, as in this example which turns up all kinds of spam. Note the repeated user names and the sign up dates. Or better yet...

Use the example to build weird graphs and see how they all registered within a very short time frame.

Some of these spammers

I try to be open to the possibility that some sites I report might actually have rogue "associates" and look into the possibility of contacting them in that event, but it gets pretty unbelievable sometimes.

igewowgold.com is one of the sites that I suspect is somewhere at the top of a spamdex plot and they do in fact have an associate program listed. The page ends with this note:

IGEWOWGOLD highly discourages spamming and may choose to terminate an affiliate account if a complaint is lodged.

Uh-huh...go on right ahead and keep saying that. Never mind the pages and pages of badly formatted comment spam I turned up for that address and the splogs.

The wowgoldworld.com network

Dang it. I was just going to report splogs of known networks and then I turned up something different. Unlike the wowgoldsale.com network, I'm not entirely sure what the main site in this spamdexing scheme is. I just picked out one for the title. :P They've had splogs in the past, but most of them are pretty old. They just comment spam a lot, hitting unrelated blogs, wikis, and forums.

I submitted about 25 URIs from this network to URIBL after checking them out.

Current top splog user names

I know I mentioned these in another post, but the patterns are so noticeable now that I'm giving this its own entry. Once again, I'm not saying every user with these names is a spammer, but I've found all of these user names on splogs lately and it's a good way to start checking. I'm also including the FFXI stuff since there seems to be a connection. I'm breaking this into two lists based on names I've found a lot versus names I've found several times but not as often.

Most Common:

• buywowgold
  
• cheapwowgold
  
• ffxigil
  
• ffigilgold
  
• googlewow
  
• lovewow
  
• nicewow
  
• sellwowgold
  
• wowgame
  
• wowgamegold
  
• wowgoldse
  
• wownice

Others:

• buywarcraftgold
  
• cheapffxigilgold
  
• cheapwarcraftgold
• gwowgold
  
• sellwarcraftgold
  
• warcraftgold
  
• wowgoldwow
  
• wowwownice

The standard "wowgold" is also sometimes used but is surprisingly less common. I've found duplicate versions of the same information under that account name on a few servers, but in those cases, there hasn't been an update since 2005 and there are no distinctive links to other places, so I'm leaving it alone. Obviously, there are other user names in use, but I haven't seen them very often yet.

It's funny, but it seems I'm expecting way too much creativity from this stuff. I figured any minute, they'd run out of wowgold names and resort to stupid names like, say, "wowpreciousmetal" or at the very least, stuff like "w0wg0ld" but no, the trend is tacking on extra "wow"s.

Sept. 12 2006: Added some more user names and did some sorting.

Catch some splogs yourself!

OK, I guess I'll throw in one more update.

Searching for articles that are often reproduced in splogs will turn up a lot more splogs. Not every web site with these articles is a splog, of course, since some of them are actually the source of the article. However, if the text is on a blog host, there's a good chance it's a splog. Checking dates is usually a good thing to do. One of the articles being posted to splogs is a review from 2004. Nothing fishy about that!

I'm going to post links to search results but I'm not going to mention the phrases here.

A lot of wowgold blogs can be turned up with the phrase found on the Google site on this linkand FFXI spam blogs are turned up with this one.

My investigating the extent of networks like this is meant to be more of an example or exercise than anything. My hope is that people will be able to identify patterns such as these with different types of comment spam. Even when they do the copied and pasted political mumbo-jumbo, those articles can usually be turned up on splogs as well.

Don't hesitate to report splogs you find to their respective bloghosts. You might also want to use the bookmarklet provided by SplogSpot so things can be entered into their database.

Edit: Changed the wowgold spam phrase to something shorter and sillier that seems to show up on wowgold-sale.com blogs in particular.

URIBL listings

I've entered a great deal of my findings regarding wowgold-sale.com into the uribl.com blacklist. There were 50 something URIs that I collected. I thank them for putting up with my long, long lists. You can find a lot of other wowgold sites to watch out for in there, too.

This will probably be the last of my consistent updates for the week or so. That was pretty overwhelming.

Reporting Splogs

Wow. wowgold-sale.com has been hitting the free blog systems like nuts and leaving trails. Anyway, in most cases, their usernames of the moment seem to be googlewow, lovewow, nicewow, wowgame, and wownice since their "wowgold" blogs are already shut down. There are also variations such as nicewow001.

Now, I'm by no means saying every user on every blog system going by those names is a spammer. There are just a lot of users like that. I don't do any reporting without checking the content. That's why I'm not sure just how long I plan on doing this.

My real hope is that now that I've got some fairly useful information together, other people can find and report these particular splogs. It would also be good if hosts could recognize these trends as well.

First "splogs" now..."spikis?"

I've been tracking one group that seems to like to set up blogs on various free blogging sites and they're easy to track down and report because they include links to their various sites with every post. Aw, isn't that nice of them?

Now I'm noticing wikis with particularly fishy links in them. No, I'm not talking about spam in wikis but rather wikis intended to be nothing but spam set up on services such as pbwiki.com, wikispaces.com, jot.com and stikipad.com I'm not going to post the links to the wikis themselves because hopefully they'll be gone soon.

It's just that I'm trying to figure out what the heck a spam wiki is called. A spam blog is a "splog." Is a spam wiki a "spiki?" A "spwiki?" Ug. Anyway, most of these services have systems in place so that the content of individual wikis can be controlled only by people the wiki owner has authorized. Otherwise, well, I'm afraid I might do something crazy and just edit the entry so it points out that the owners are no good spammers. However, that's just the sort of action I don't want to take, so I guess I'll jut be glad I can't and report the information to the wiki hosts.

OK, yes, last post for the night, I promise. Just wanted to get those findings out.

Sorry about turning comments off, but I'm too busy tracking down comments on other sites to pay attention to comments here. I've completely lost my mind, I'm afraid.

The wowgold-sale.com network

While analyzing some of the wowgold spam that other sites have received, I noticed a pattern: there are a lot of sites that link to wowgold-sale.com. Other sites often linked to within those sites are power-levels.com and ffxi-sale.com. I could post an entire list of these sites, but since they don't always stay active for very long, it probably won't serve much of a purpose. I've already reported lists to Google, but posting them here would be kind of...well...spammy, I think. Plus, when they post these massive URL links, the above mentioned links are typically in there, sometimes with subdomains tacked on, so they're easy to spot.

If you search for wowgold on Google, wowgold-sale.com is currently the top result. It seems their dirty tricks are working.

Edit: Fixed the Google link. Plus, I feel like noting that wowgold-sale.com has dropped down to the #5 result. sale-wowgold.com is #4, a spam wiki is #3, and a splog is #2.

Welcome!

I'm not an expert on comment spam. I just really hate it. There's one type that really annoys the heck out of me, though, that's advertising for "wowgold." It's so dang annoying because nobody is safe from it. Not celebrities. Not even guestbooks on 9/11 memorial sites. (Second link goes to a screen cap of the site I took that's hosted on a free image host because I'm running this blog independent of any of my other sites. The spammed site seems to have a lot of spam, so maybe it'll be buried by other stuff at some point. )

The thing that's so strange about this type of spam is that, to the best of my knowledge, it doesn't appear in e-mails. I've done some investigating on it mainly thanks to Google and am taking such measures as reporting sites with AdSense ads to them as well as informing third party companies who offer services that the spammers utilize.

I don't think I'll make a real impact on this type of spam. I'm nor launching any sort of attacks. My main intent is to report some of my findings and I'm using a blog as it's a fairly simple organization system.

I don't know how long I'll keep this project going. I'm not on some sort of super crusade against this stuff. I'm mainly just curious about where it comes from and maybe some of you are, too.

Additionally, I'm not asking for examples of this spam from users. I'm not going to branch out to other types, either, since this is just some loony project I'm doing. I do report other types of spam I find in addition to this type, I'm just not going to talk much about it.

So...enjoy. I guess.