9

Yes, different email obfuscation methods do work with varying degrees of success. But each has to be weighed with whether they affect the ability for your customers to communicate easily with you. I wouldn't want to be losing any business just because a user finds it annoying or time consuming to contact me. It would be a particularly persistent customer who ...


4

To be honest with you I would like to think that Mail Chimp will have spf records and domain keys etc all sorted out and generally keeping the reputation of their infrastructure clean. Hence I would imagine this will be issues with your content and interactions from your recipients. A couple of things I have noticed straight off. It looks quite image ...


4

I have a lot of experience stopping spam. In fact, I used to speak with GFI and shared some of my filter techniques with them. You can stop spam with near 100% effectiveness with a few simple steps. This does not negate the need for an anti-spam filter or mean that you will never get spam, however, just a couple of things will almost stop spam cold. It is ...


4

SPAM reasons, Yes. Google no. There are non-Google spiders that look specifically for email addresses, presumably for SPAM purposes. So over the years people have tried to find ways to make email addresses less "visible" to spam crawlers. A very common way is to display name (at) domain (dot) com with a script behind it to allow the link to work as an e-...


4

The ideal way to do this is to send a hard fail on email that isn't coming from your server IP address or your specified MX record by doing this: v=spf1 +a +mx -all This however will not stop the email from being sent. Spam filters do various checks on an email that has been sent out, one of them will be a check on the SPF record of the domain it is ...


4

The answer is to not use a captcha, or use something in addition to it. Look to alternate methods such as hidden form fields that should never be filled in. Bots will most likely still fill them in, your validation will know immediately that it is a spammer. Another method would be the time based trigger. If a bot hits page then fills out a form, it will be ...


3

Yes. You have a problem. Explorebuncombe.com: Is an events site and does not appear to have a copy of your site but may have in the past- who knows. It is not related to the next two sites. Exploredare.com: Is a copy of your site without a frame or 301 redirect. The IP address is 50.56.48.239 which is on a Rackspace IP address block. Exploregastonia.com: ...


3

Yes you can. In fact, I recommend it and others too. I would not work so hard on my regular expression to include version numbers- just ^PHP.*$ You will find that some agent names are consistently up to no good even though some will argue that they can be used for good and should not be blocked. That is a negative argument. I study these things and I ...


3

Can you not just require that any post with a hyper-link must be approved before going live? This is what I do on my site. You can catch most of the spam and let the occasional legitimate post through with a genuine link.


3

No, that is not true. Email address obfuscation is the result of webmasters attempting to make their email addresses unrecognizable to spambot crawlers. Spammers employ bots that crawl the Internet looking for email addresses to harvest so they can send spam to them. By changing the @ symbol into (at) the webmaster is hoping that the spambots will not ...


3

By far my favorite technique is called a 'honeypot'. Here is how it works... Say your form asks for a name. Put the following two fields on the page: <span class='hp'> <label for='Message'>Message:</label > <textarea id='Message' name='message' /> </span> <span> <label for='TmpField'>Message:</label > ...


3

This isn't a direct answer to your question but to your problem: Try a hostname filter on your Analytics account instead. Filter only for your domain. The only situation in which you'll get views without your domain being the hostname is if you're serving content on other domains - such as via an iFrame. When it comes to crawlers, there's many techniques. ...


3

I think you can try this Blogger form to report inappropriate blogger content On that form, select the Unlisted phone number option and fill up all details. I think Google don't consider toll free number as copyright content(DMCA), and hence you need to contact the host provider or owner. If nothing works then send legal notice to blogger and they will ...


3

If you were to limit just the Contact Us page to users from the US, this should not have a major impact on your SEO. You run into the issue of Google possibly not indexing the Contact Us page if it is not crawlable outside of the US.


2

From my personal experience, I have found that CAPTCHA is virtually ineffective when it comes to preventing spam attacks. What I use and I found to be the most useful is adding a field to the form and covering it with CSS so that it is not exposed to human visitors. Spam bots feed value to these fields and can be blocked easily. It is simpler than any of the ...


2

I suggest installing Extension:BlockAndNuke to stop spam. It lets you instantly block users as well as nuke their contribs. A whitelist of legitimate users can be provided to be exempt from being shown on the list of nukable users. You'd whitelist your allowed users then use ctrl-a to select all and click the relevant button to block and nuke the user.


2

PHP user agents are known as libraries. It should be no problem if you block them since legitimate crawlers use other string types, however, can't you check and block only the IP's? In this site, for example, you have ways to block only Chinese traffic.


2

There is basically only two options to do anything about it: Look up the management contact for the ip sending spam, (the whois utility can do it for you,) and send them an email and hopefully the spammer will be suspended. Block the IPs/IP ranges that is sending the spam from your contact form.


2

Hmm do you see the paradox here? You are asking to shut down a site that scraped you under DMCA, yet you said they are allowed. I dont think you are going to get too far in the battle to shut them down. Here is the contents of your license that is [still] on the page footer as of Mar 13 2015: The person who associated a work with this deed has dedicated ...


2

Use multiple techniques and you can catch all spammers: honeypot as mentioned speed (bots fill forms very quickly) duplication (multiple text-fields like address plus comments) links in the wrong places too many links perhaps block all short links you can also look at doing other content checks like SpamAssasin does If you want a test, add something ...


2

No. It is not Google. Google would not POST /xmlrpc.php. This may be a vulnerability probe or an attack against an existing vulnerability that may or may not exist on your site. 185.62.188.98 is hosted-by.blazingfast.io. When you see something like hosted-by as a sub-domain, it is a webhost, obviously, but also an anonymous address block where the server ...


2

This kind of spam prevention is usually provided by the reCAPTCHA service from Google. IMHO this is an advanced spam protection service based on the principles of CAPTCHA. While I do not think reCAPTCHA is a technical name and there could also be other advanced implementations of CAPTCHA-like spam protection.


2

There is not a common or default email address that you should create for your website. Speaking of experience, I suggest to make any e-mail account you want and publish it to your e-mail account, preferably as an image in order not to being fetched by spam bots. No service provider or company or institution will try to legitimate communicate you to an ...


2

I've started using the following code: RewriteCond %{HTTP_REFERER} ^http://.*[bad_referrer]\.com/ [NC] RewriteRule ^(.*)$ – [F,L] This looks for the referrer, in your case semalt.com, and creates a bad request. If you want to add more conditions use [NC,OR] until you get to the last item. If mod_rewrite isn't available, this technique will not work. You ...


2

Spam filters cannot definitively tell that the second email is not from the legitimate user unless an SPF record exists to inform them of the only authorised servers for sending messages. The legitimate user could get their domain blacklisted as a result of the actions of malicious individuals and sometimes this is the end-goal for them. This will depend on ...


2

You don't need to send a high volume of emails to be marked as spam, actually, one of the most important things are the ratio between people that clicked on "marked as spam", successful deliveries and bounces (especially hard bounces). Have you validated the emails from your list before sending? Depending on how you acquired the e-mails on your list, you ...


2

Yes, that's an acceptable practice. You could also append the users name and e-mail to the subject line or content if you want that information to be more visible to the recipient.


2

If configured properly, your proxy will add the IP address of the user to the X-Forwarded-For header of the backend request. If $wgSquidServers (or $wgSquidServersNoPurge) is properly set, MediaWiki will automatically use that header for all internal purposes except logging (where it would be a performance hit). For spam-fighting in general, see the list of ...


2

No. It's an old question with different opinions, but usually there is no reason to invest energy dealing with such issues. It's especially true for already known websites with some reputation. Read more about the basics of duplicate content issues. And more relevant to you, if you do want to do something about it: How to Deal with Content Scrapers A ...


2

Instead of using an IP address blacklist (which is like playing a losing game of whack-a-mole), I might recommend one of two strategies for curtailing bot spam: Strategy 1: Honeypot field I use this for one of my own web forms personally, and it works very well. The idea is to create an anti-spam field in your form, where if that field is filled in (it ...


Only top voted, non community-wiki answers of a minimum length are eligible