pwnphpbb,

Cool thread dude. Nice investigative work.

My only contribution would be regarding referer log spamming. I have done my share,
however, nowadays, it is not the server log that most webmasters are looking at, it's
Google analytics. In a test I did last year of 12,000 domains, over 70% are using Google
analytics, about 8% were using statcounter.com, and I also parsed for 4 or 5 other stats
programs, but they amounted to only about 5% combined. The remaining are using
awstats, etc, or are not looking at stats.

Point is, if you can send fake traffic that will show in Google analytics, you can get others
to link to your site eagerly, and possibly pay more for advertising on your site. The
problem I had was that G stats only update every 24 hours so it was not easy to test. By
that time, I had forgot what I was testing.

good luck,
Bompa