Knowledgebase

A new referrer spammer called BlackHatWorth.com has been affecting a growing number of web sites. If you are seeing BlackHatWorth.com as your top referrer on your website’s analytics such as Google Analytics, you are currently a victim of this referrer spam.
 
What Is BlackHatWorth.Com ?

BlackHatWorth.com is a relatively new domain which is now being used for referrer spam. As a matter of fact, this referral spam website is being hidden behind the name of shopping search engine and beautiful scenery images. Some of you might even think that this is a legitimate search engine as they even have search links to major search engines like Google and Yandex (Russian search engine) as well as online shopping websites like Amazon.com, AliExpress.com, and Ebay.com.

The Ip of BlackHatWorth.com which is 78.110.60.230 is the same one associated with other referral spam websites like :

    Iskalko.ru
    Lomb.co
    Lombia.co
    Econom.co
    Darodar.com
    ILoveVitaly.Com
    Priceg.com

Why Block BlackHatWorth.Com ?

Precautions should be taken to prevent this referrer spam as they will increase your bounce rate. A domain’s bounce rate plays a very important role in search engine ranking. When the bounce rate of your domain is high compared to the number of traffics received, your domain’s ranking will gradually drop, no matter how perfect your SEO is(search engine optimization).

This spam  will also eat up your server resources, especially, bandwidth and in turn could affect your site's speed.

The crawlers can also be used to exploit web site vulnerabilities (like vulnerable wordpress plugins or joomla extensions). For example "SoakSoak.ru" was exploiting vulnerabilities in WordPress plugins in order to inject malicious codes.

 
How To Ban And Block BlackHatWorth.Com Spam Referrals ?

No matter your site type you can easily block this type of attack by adding a few lines of code to your web.config (windows/IIS hosting)

To block these spam crawlers modify your web.config as shown below and always remember that the “rule name” must be unique to each domain blocked or else there will be an internal server error. For an example, we have used “RequestBlockingRuleOne”, “RequestBlockingRuleTwo”, and so forth. You can add all the other referrer domains by following and editing the codes shown below :

<configuration>
<system.webServer>
<rewrite>
<rules>
 
<rule name="RequestBlockingRuleOne" patternSyntax="Wildcard" stopProcessing="true">
<match url="*" />
<conditions>
<add input="{HTTP_REFERER}" pattern="*blackhatworth.com*" negate="false" />
</conditions>
<action type="Redirect" url="http://www.econom.co"/>
</rule>

 
<rule name="RequestBlockingRuleTwo" patternSyntax="Wildcard" stopProcessing="true">
<match url="*" />
<conditions>
<add input="{HTTP_REFERER}" pattern="*http://blackhatworth.com/*" negate="false" />
</conditions>
<action type="Redirect" url="http://www.econom.co"/>
</rule>
 
<rule name="RequestBlockingRuleThree" patternSyntax="Wildcard" stopProcessing="true">
<match url="*" />
<conditions>
<add input="{HTTP_REFERER}" pattern="http://blackhatworth.com/marketing/*" negate="false" />
</conditions>
<action type="Redirect" url="http://www.econom.co"/>
</rule>
 
</rules>
</rewrite>
</system.webServer>
</configuration>