URL spammer

Question

Recently, I am starting to get spam URLs in my software through a URL. It used to be easy to block by domain, but I can’t precisely block a domain to shorten URLs, as I also see acceptable use.

Any best practice regarding managing these spam URLs (and the spammers who use it)?

Answer 1

You can also do something like http://www.untiny.me/ when sending a message. Basically, send an HTTP request and write down the response "HTTP 301". You can then check the URL you are redirected to and deny / allow based on your policy.

For example:

C:\>wget -O NUL http://tiny.pl/htk --2011-01-24 21:47:33-- http://tiny.pl/htk Resolving tiny.pl... 79.96.141.187 Connecting to tiny.pl|79.96.141.187|:80... connected. HTTP request sent, awaiting response... 301 <==== Location: http://www.google.com [following] <==== --2011-01-24 21:47:34-- http://www.google.com/ 

Matching lines marked with <====

Answer 2

Some form of CAPCHA might be a good idea. If you need to register before you can post, paste them into your registration form. Otherwise, perhaps stick to it where the user is sent with a request before accepting the message.

Answer 3

You can allow abbreviations that only point to your own sites, such as Twitter or Github. Another way to invite your users to use http://9to.one , I have developed a logic that blocks spammers in order to reduce their communication. You can try shortening one of these links for verification.