This is a PROVEN WORKING SOLUTION with complete filter expressions.
2017-10-26: new spam vector detected from paloaltonetworks.com: through the Network Domain field. Filters updated. — Mike Sullivan
How to Prevent and Remove Spam:
- BEFORE YOU START: Make an Unfiltered View!
- Implement a Valid Hostname Filter to eliminate ghost visits (like cheap-trusted-backlinks.com)
- Implement Spam Crawler Filters to eliminate the targeted spam visits (like ḷ.com and foxweber.com and good-backlinks.com)
- Create a Custom Segment with these filters to use for reporting
All the information you need (and more!) is provided below in this step-by-step guide. Filter expressions are updated within a day or two as needed.
Current Spam Filter Expressions
Read the rest of the article below to learn more about how spam has changed over time and how to implement these filters properly. See the bottom of the article for a running list of spam referrals these filters block (updated almost daily).
Valid Hostname Filter: customize to suit your web server domain (see discussion below)
Optional Spam Filter: Custom > Exclude > Campaign Source [2017-09-13]
Valid sources used for spam — include these ONLY if you have no valid referrals from these sites!
Active Spam represents spam sources that may appear in an annual report.
Active Spam Filter 1: Custom > Exclude > Campaign Source [2017-11-13]
Active Spam Filter 2: Custom > Exclude > Campaign Source [2017-10-24]
Active Spam Filter 3: Custom > Exclude > ISP Domain [2017-10-26]
Active Language Filter: Custom > Exclude > Language Settings [2016-12-13]
Old Spam has not appeared in most Google Analytics reports for over a year.
Old Spam Filter A: Custom > Exclude > Campaign Source [2017-09-13]
Old Spam Filter B: Custom > Exclude > Campaign Source [2017-09-13]
Old Spam Filter C: Custom > Exclude > Campaign Source [2017-09-13]
Old Spam Filter D: Custom > Exclude > Campaign Source [2017-09-13]
Old Spam Filter E: Custom > Exclude > Campaign Source [2017-09-13]
Editorial note: please do not take the presence of a domain in this article to mean the related businesses are all ‘spammers’. In several cases, unsuspecting businesses have had their domains referenced by spammers or have unintentionally left referrals and since corrected their practices.
The Google Analytics Referral Spam Solution
There are a lot of partial solutions and misinformation out there about clearing out so-called referral spam (and organic search and event spam too), so here’s the Definitive Guide to removing all of that junk! This article has been constantly updated since January 2015 and has shown over 330,000 people how to get rid of spam in Google Analytics reporting.
2017-01-01: the spammers continue to adapt to various spam fighting techniques, which has recently resulted in at least one free service (referrerspamblocker.com) to give up due to the effort required to maintain a working solution. I would like to say thank you to Stijlbreuk for their efforts over the past couple of years. We all believe it is time for Google to make our services unnecessary. For my part, I will continue to maintain this article for as long as it is needed — Mike Sullivan
Urban Myths and Bad Advice:
- DO NOT use the Referral Exclusion List – Why?
- Google Analytics bounce rate DOES NOT affect search rankings
- Using .htaccess rules or WordPress plugins will NOT eliminate any of the ghost referrals
This is a long article — I have included a lot of background and detail to explain why this solution is so effective, and to dispel a number of urban myths around referral spam. Heed the advice to set up an unfiltered view before you begin — there is no recovery from a bad filter (filtered traffic is gone forever); do not risk your analytics to a typo.
Background: The Many Faces of Referral Spam
The problem of fake references in Google Analytics has changed significantly over the past 2 years. In 2014, we had some bots from semalt and buttons-for-website that visited your website and left fake referrals in your analytics. In December 2014, the attacks began taking advantage of a weakness in Google’s new Measurement Protocol that allowed direct attacks on the Google Analytics tracking servers without having to actually visit your website. This is a lot easier than crawling the web looking for new websites. There were a lot of different types of attacks, from many referral sources, leading to a lot of confusion in the industry.
Ranksonic joined in on the fun in March 2015, and the spammers enjoyed playing with new domains and techniques. We have had fake organic search terms (www.get-free-social-traffic.com) and fake events (event-tracking) injected into our analytics, too. Enterprising individuals popped up on Fiverr offering hundreds or even thousands of visits from real webmasters obtained using these techniques.
At the beginning of 2016, there were still lots of players pushing through Google’s defenses, even if only for a few days (see image). As of June, 2016, the trend continues with most ghost spam changing in a few days, but the crawlers seem to run for months.
In late 2016, the spam has evolved again, this time focused on inserting a fake Language, and using a rotating series of fake and real sources. This latest blitz also uses valid hostnames on some of the traffic, indicating the spammer is working to get around the common protections people have deployed.
Why hasn’t Google stopped it all yet? Well, they have said they are working on it, but it is a tough fight. Trust me — it would be a LOT worse than it is if they were doing nothing. They just don’t talk about what they are doing, and that is a widely adopted security best practice: never talk about what protections you have in place. It makes it harder for the bad guys to work around your protection systems.
As of summer 2017, Google routinely stops new spam attacks within a day.
BEFORE YOU BEGIN: Create an Unfiltered View
Before you start hacking away at your Google Analytics settings, the best practice for implementing new filters starts like this – create an UNFILTERED VIEW, and a TEST VIEW.
1. Make sure you always have an Unfiltered view in your property — that has absolutely no filters. This will ensure you always have the raw, unmodified data should things go wrong. There is no ‘undo’ for a bad filter.
2. Don’t create new filters directly in your main view. Create a new Test view that mirrors your main view in every other respect, and then add the filter(s) there first. Watch it for a few days and compare with the Unfiltered view to make sure it is doing what it should.
3. If you’re happy with the new filter based on this test, then go ahead and add the ‘existing filter’ to your main view.
1. New Website? Use a ‘-2’ Property
In early 2015, I coined the term “ghost referral” to identify the worst offenders like darodar because they actually NEVER VISIT YOUR SITE. Using some software magic, they post fake hits to Google’s tracking service using a random series of tracking IDs. When they pick a series of numbers that includes your tracking ID, Google records a referral visit from their source in your reports, even though they know nothing about your website and never visited it. A number of people have seen ‘traffic’ to Google Analytics accounts that have never been used…
When you create a Google Analytics Account, you also get a Property and a View. The Property gives you the tracking id (e.g. UA-1234567-1) that you use in the code snippet on your website. You can create 50 Properties in your Account, and they are given -1, -2, -3, … -50 extensions. Most ghost referral spam hits the default ‘-1’ Property, although some are now hitting -2, and -3 properties as well.
You can significantly reduce the spam simply by creating and using a second, third or fourth (or tenth) Property. You don’t have to actually use them all. Caution: changing your tracking code on your website will leave the historical data in the old property, so this is really only useful for new websites, or if you are willing to abandon your old data.
2. Implement a Valid Hostname Filter for Ghost Visits
THIS IS THE SINGLE MOST EFFECTIVE SOLUTION TO ELIMINATE FAKE SPAM TRAFFIC!
Source versus Hostname
Real visits to your website from a referral link have TWO server names available: the Source that the link is from, and the Hostname that the landing page is pointing to (your server). In most cases, the Hostname should always be your server, regardless of where the traffic came from.
For example, here is a sample of the Source and Referral Path (page with the link on it) pointing to this article. Notice the Hostname is always my server.
Ghost visits send traffic to a random series of tracking ID numbers — they don’t know your server name! They use blank (“(not set)“) or fake hostname values (like ‘google.com’). That means you can eliminate ALL of them simply by filtering to INCLUDE only the valid hostname — your server.
A. Identify Your Valid Hostnames
STEP CAREFULLY. Valid hostnames are websites that you have configured to use your Google Analytics tracking ID (e.g. UA-12345678-1). They may include ecommerce shopping carts or telephone call tracking services linked from your website.
Start with a multi-year report showing just hostnames (Audience > Technology > Network > hostname), then identify the valid ones — the servers where you REMEMBER configuring with your tracking ID (hint: google.com is NOT one of them).
UPDATE: if you have alternate domains that redirect to your main website domain, do NOT include those redirected domains. If you can type in one hostname/URL and it changes to display a page on a different domain, then it is NOT a valid hostname.
Many people have a problem with this step; here’s what I picked and why:
- www.analyticsedge.com – my main website
- help.analyticsedge.com – my help site configured with the same tracking ID
- www.youtube.com – I have a YouTube channel with videos that I track using Google Analytics. I had to configure my tracking code in YouTube (what a pain that was! and it only tracks channel visits, not videos). NOT RECOMMENDED for general use.
- sites.fastspring.com – I use FastSpring as my eCommerce provider to process payments. I configured it with my tracking code.
There are a number of translation and proxy services that may also record visits to your tracking ID because they display your original content through their servers. If the traffic is low, IGNORE THEM. Spammers have started using translate.googleusercontent.com as a hostname to bypass people’s filters, so don’t add that one. Most recent example is organic search spam with keywords “beat with a shovel the weak google spots addons.mozilla.org/en-us/firefox/addon/…”
FYI – googleweblight is a new service from Google that servers your pages to mobile networks in some parts of the world. It usually appears with your hostname in front, and it’s ok.
I do not have any tracking codes installed on google.com, mozilla.org, huffingtonpost.com or any of the other sites that appear in the report. I never configured my tracking code ON those sites — they are ghost visits!
IMPORTANT: If you see GOAL CONVERSIONS or REVENUE from (not set) hostnames, you need to dig into why. Maybe they are Event-based call logging and are not associated with pageview (which has a hostname value). You may need to adjust your filters and/or tracking code snippets.
Create a filter expression that captures all of the domains that you consider to be valid. TEST, TEST, TEST! Then move to production when you are sure you have it all. You may find it easier to play with an Advanced Segment, so you can see the effect of your filter without risking any data loss. See #3 below.
Many people have a problem composing the filter expression because it is Regex (regular expressions), so lets keep it really simple in this case.
For your filter expression, simply enter your valid hostname. If you have more than one, separate them by a vertical bar ( | ). If you have a third-party payment service like checkout.shopify.com, you may need to enter it as well.
Note: if you can’t see the “Include” radio button in the Filter page, look BELOW the Exclude section (which is expanded when it is selected). When you select Include, the Exclude section will collapse and the Include section will expand as in the image.
It is not necessary to enter all of the subdomains (like www and help) – Regex will perform a partial match by default, so I keep the expression shorter by simplifying to just the root domains.
Note: in proper Regex, you should ‘escape’ the dots (\.), but since a dot matches any character and the likelihood and impact of a false match is negligible, I sometimes leave them out to keep it simple.
IMPORTANT: do NOT end the expression with a vertical bar ( | ); use them only between domains.
3. Implement Spam Crawler Filters
Some spammers actually crawl the web and visit your site, and others have figured out what your hostname is, so the Valid Hostname filter won’t keep everything out. For these, you will need to specifically exclude their visits by naming them in a filter.
Note: if you are technically capable, you could block these sources using classic spam blocking techniques like using .htaccess rules. To learn a little more about these alternatives, you can read the article by Carlos Escalera.
Do NOT visit the referring site, since this is an invitation to get a virus or Trojan infection on your computer, or otherwise satisfy the desire of the spammer. I recommend you do a quick Google search first, to see if you can trust it. Spammers are quickly identified, and you’ll usually see indications in the first page of search results.
Creating a New Filter
Most spam can be eliminated by filtering on Campaign Source. Most people try filtering on Referral, and that filter doesn’t always work because some spammers have used utm codes to stuff values into the Source and Medium, imitating a referral. Note that some of the spam now requires you to filter on the Language Settings field (Spam Crawler 5 below).
Read Google’s instructions on making filters.
The latest filter expression I recommend at at the top of this article. Note that I take some shortcuts in my expressions to save space (there is a limit to the number of characters). I have not yet found any false matches for valid referrals in any of the web properties I have worked with, but you should be cautious of being too aggressive — I have seen some people recommend filtering on simple words like buy|cheap|motor|money|seo which will simply match far too many valid domains to be recommended.
As you discover new spammers you will have to add to the filters. Remember: these filters will exclude everything that matches, so be careful with your expressions, and TEST, TEST, TEST first.
4. Create a Custom Segment
To eliminate spam immediately from all of your reports, even historical reporting, you need to use a Custom Segment. If you have prepared the filter expressions above, you’ve already done all the hard work. If you skipped to this section, go back and start at Step 1.
Start with a copy of my segment from the Google Analytics Solution Gallery [2016-12-22], and modify it to suit, or follow these instructions:
In Google Analytics, open your Reporting view, and click +Add Segment.
Then click New Segment and enter a name like “All Users (No Spam)“. If you have multiple websites in your account, you should include the website in the name, like “All Users (AnalyticsEdge)“.
Select the Advanced > Conditions tab on the left. Create a new entry for the valid hostnames:
- Sessions > Include
- Hostname > matches regex > your valid hostnames expression (#1 above)
Then click + Add Filter and add the expressions for the Spam Crawlers:
- [+Add Filter]
- Sessions > Exclude
- Source > matches regex > spam crawler expression #1 OR
- Sessions > Exclude
- Source > matches regex > spam crawler expression #2 OR
- repeat for the rest of the filter expressions
Save and Apply the Segment
The easiest way to test is to use your new segment in combination with the default All Users segment, comparing the Sessions counts. You can find your new segment listed in the Custom grouping. You can select BOTH your new segment AND the All Users segment to compare.
Sharing your Segment Definition With Coworkers
Google Analytics segments are normally account-specific, but a new feature allows you to share it with other people that have access to the same Google Analytics view. When editing the segment, click the link in the upper right corner and allow Collaborators to apply/edit the segment,
5. Turn On Google’s Bots & Spiders Option
Google Analytics has a simple checkbox you can use to exclude easy-to-identify bots and spiders, but you have to enable it for every View you use. In your Google Analytics Admin section, navigate to each View you use, select View Settings, and check the box to Exclude all hits from known bots and spiders.
This feature has recently started affecting referral spam as well (e.g. horoskop-baran.pl / referral), so TURN IT ON!
That’s It – You Are Spam-Free For Now!
What made me an expert about spam?
My name is Mike Sullivan; I am a Google Analytics Certified professional, and a Top Contributor in the Google Analytics community forum. I have been working extensively with the Google Analytics API since 2010, providing customized reporting solutions. I founded Analytics Edge in 2013, making a suite of free and inexpensive Excel report automation add-ins and connectors.
Spam was hounding my customers, so I dug into the problem with all the tools at my disposal and thought I’d share what I learned. I wrote this Definitive Guide, coining the term “ghost referrals”, to help resolve the confusion surrounding the various spam types and the different techniques required to deal with them.
I hope this article has helped you.
Historical list of spam sources detected
- 2017-11-13 helvetiiconsulting.com / referral crawler spam
- 2017-10-24 phoenicx.co.uk / referral crawler spam
- 2017-10-14 uptime-gamma.net uptime-beta.net / referral crawler spam
- 2017-10-05 good-backlinks.com / referral crawler spam
- 2017-09-28 cheap-trusted-backlinks.com / referral ghost spam
- 2017-09-15 seojokes.net / referral ghost spam
- 2017-09-13 reorganized filters to reflect active and old spam sources
- 2017-08-17 blackhatworld.com / referral crawler spam
- 2017-08-15 malmesburyprinting / referral crawler spam
- 2017-08-03 bestonwardticket.com / referral crawler spam
- 2017-07-30 davidsbag.com / referral crawler spam
- 2017-07-26 ḷ.com /referral crawler spam
- 2017-07-17 sell-fb-group-here.com / referral ghost spam
- 2017-07-06 earn-from-articles.com / referral ghost spam
- 2017-07-03 autoseo-traffic.com / referral crawler spam
- 2017-07-03 blogarama.com / referral crawler spam
- 2017-07-03 money-for-placing-articles / referral crawler spam
- 2017-06-27 pcimforum.com / referral crawler spam
- 2017-06-27 yellowstonesafaritours / referral crawler spam
- 2017-06-23 anniemation.com / referral crawler spam
- 2017-06-23 timdreby.com / referral crawler spam
- 2017-06-17 losangeles-ads.com, oldfaithfultaxi.com, christopherlane / referral crawler spam
- 2017-06-16 tourcroatia.co.uk / referrer crawler spam
- 2017-06-13 spinnerco.ca / referrer crawler spam
- 2017-06-13 justkillingti.me / referrer crawler spam
- 2017-06-13 suralink.com / referrer crawler spam
- 2017-06-13 worldtraveler.world / referrer crawler spam
- 2017-06-13 yellowstonevisitortours / referrer crawler spam
- 2017-06-13 hollywoodweeklymagazine / referrer crawler spam
- 2017-06-09 free-fbook-traffic.com / referral crawler spam
- 2017-06-09 goodwriterssales.com / referral crawler spam
- 2017-06-02 stalawfirm.com / referral crawler spam
- 2017-05-29 site:cookie-policy.org keyword spam
- 2017-05-29 site:compliance-checker.info keyword spam
- 2017-05-18 <words> cdn site:nodepm.com / keyword spam
- 2017-05-15 foxweber.com / referral spam crawler
- 2017-04-27 piulatte.cz /referral ghost spam
- 2017-04-11 election.interferencer.ru / referral ghost/crawler spam using www.donaldjtrump.com hostname and Election.Interferencer.Ru language settings
- 2017-04-09 free-fb-traffic.com / referral ghost spam
- 2017-04-05 track-rankings.online / referral ghost spam
- 2017-04-02 ecommerce-seo.org / referral ghost spam
- 2017-03-30 slifty.github.io / referral spam crawler
- 2017-03-26 enbersoft.com / referral spam crawler
- 2017-03-20 e-commerce-seo1.com / referral ghost spam
- 2017-03-20 amazon-seo-service.com / referral spam crawler
- 2017-03-20 share-buttons-for-free.com / referral spam crawler
- 2017-03-15 ^vc.ru / referral ghost/crawler spam temporarily added
- 2017-03-09 e-commerce-seo.com / referral ghost spam
- 2017-03-01 petitions.whitehouse.gov / referral ghost/crawler spam temporarily added
- 2017-02-24 motherboard.vice.com / referral ghost/crawler spam temporarily added
- 2017-02-22 google-liar.ru / referral crawler/ghost spam
- 2017-02-20 abcacaiberrypills.com / referral ghost spam
- 2017-02-20 elidadaidaihua.com / referral ghost spam
- 2017-02-20 lidasale.com / referral ghost spam
- 2017-02-20 12345678.com / referral ghost spam
- 2017-02-20 buy2daydietpills.com / referral ghost spam
- 2017-02-20 mztpills.com / referral ghost spam
- 2017-02-20 slimming800.com / referral ghost spam
- 2017-01-25 beepollen-zixitang.com / referral ghost spam
- 2017-01-25 zixiutangstore.com / referral ghost spam
- 2017-01-05 #-#.insider.pro / referral ghost spam
- 2017-01-01 “youtu.be/7td18i0wyey – youtu.be/biblcys8a5i – youtu.be/mmcg3yyacz8 – all world watching these videos” keyword and landing page spam
- 2016-12-20 top10-way.com / referral SPAM CRAWLER
- 2016-12-20 “Congratulations to Trump and all americans” language spam using washingtonpost.com referral
- 2016-12-09 website-analytics.online / referral ghost spam
- 2016-12-09 “Google officially recommends o-o-8-o-o.com search shell!” / language spam may have valid hostname, valid or fake referral sources
- 2016-12-05 “o-o-8-o-o.com search shell is much better than google!” / language spam may have valid hostname, valid or fake referral sources
- 2016-11-30 datract.com / referral SPAM CRAWLER
- 2016-11-30 lifehacĸer.com / referral SPAM CRAWLER
- 2016-11-29 eyeserp.com / referral ghost spam
- 2016-11-06 “Secret.ɢoogle.com You are invited! Enter only with this ticket URL. Copy it. Vote for Trump!” / language spam may have valid hostname, valid or fake referral sources
- 2016-10-26 /sharebutton.to landing page spam
- 2016-10-26 /www1.free-share-buttons.top landing page spam
- 2016-10-26 various keyword combinations of sharebutton.to with social, share, buttons, website, this, html, linked, in, add, and other words
- 2016-10-25 3-letter-domains.net / referral SPAM CRAWLER
- 2016-10-24 24×7-server-support.site / referral ghost spam
- 2016-10-12 “cdn front.to” organic keyword ghost spam
- 2016-10-11 #-#.site-speed-check.site, #-#.site-speed-checker.site, #-#.site-speed-up.site, #-#.site-speed-up.top, #-#.website-speed-check.site, #-#.website-speed-checker.site, #-#.website-speed-up.top / referral ghost spam
- 2016-10-02 – uptime-alpha.net / referral SPAM CRAWLER
- 2016-09-24 – golden-catalog.pro / referral ghost spam
- 2016-09-10 – scanner-alex.top, scanner-alexa.top, scanner-andrew.top, scanner-barak.top, scanner-brian.top, scanner-don.top, scanner-donald.top, scanner-elena.top, scanner-fred.top, scanner-george.top, scanner-ivan.top, scanner-jack.top, scanner-jane.top, scanner-jess.top, scanner-jessica.top, scanner-john.top, scanner-josh.top, scanner-julia.top, scanner-julianna.top, scanner-margo.top, scanner-mark.top, scanner-mary.top, scanner-marwin.top, scanner-nelson.top, scanner-olga.top, scanner-viktor.top, scanner-walt, scanner-walter, scanner-willy.top / referral ghost spam
- 2016-08-30 – compliance-alex.top, compliance-alexa.top, compliance-andrew.top, compliance-barak.top, compliance-brian.top, compliance-don.top, compliance-donald.top, compliance-elena.top, compliance-fred.top, compliance-george.top, compliance-ivan.top, compliance-jack.top, compliance-jane.top, compliance-jess.top, compliance-jessica.top, compliance-john.top, compliance-josh.top, compliance-julia.top, compliance-julianna.top, compliance-margo.top, compliance-mark.top, compliance-mary.top, compliance-nelson.top, compliance-olga.top, compliance-viktor.top, compliance-willy.top / referral ghost spam
- 2016-08-27 – homemade.gq / referral ghost spam
- 2016-08-23 – gq-catalog.gq / referral ghost spam
- 2016-08-22 – eyes-on-you.ga / referral ghost spam
- 2016-08-18 – familyholiday.ml, executehosting.com, ussearche.cf, bugof.gq / referral ghost spam
- 2016-08-18 – 1-free-share-buttons.com / referral SPAM CRAWLER
- 2016-08-18 – 1-99seo.com / referral SPAM CRAWLER
- 2016-08-12 – timer4web.com / referral SPAM CRAWLER
- 2016-08-12 – globalscam.ga, wowas31.ucoz.ru, cookielawblog.wordpress.com, expdom.com / referral ghost spam
- 2016-08-09 – spin2016.cf, turkeyreport.tk, nyfinance.ml / referral ghost spam
- 2016-08-03 – fashionindeed.ml / referral ghost spam
- 2016-08-02 – platezhka.net / referral SPAM CRAWLER
- 2016-08-02 – californianews.cf / referral ghost spam
- 2016-07-30 – pogodnyyeavarii.gq / referral ghost spam
- 2016-07-30 – asacopaco.tk / referral ghost spam
- 2016-07-28 – biketank.ga / referral ghost spam
- 2016-07-27 – doyouknowtheword-flummox.ml / referral ghost spam
- 2016-07-26 – ######.social-s-bbb-xyz / referral ghost spam
- 2016-07-25 – itrevolution.cf / referral ghost spam
- 2016-07-21 – kiwi237au.tk / referral ghost spam
- 2016-07-21 – social-buttons-aaa.xyz, social-buttons-bbb.xyz, social-buttons-ccc.xyz, social-buttons-ddd.xyz, social-buttons-eee.xyz, social-buttons-fff.xyz, social-buttons-ggg.xyz, social-buttons-hhh.xyz, social-buttons-iii.xyz / referral ghost spam
- 2016-07-21 – law-enforcement-one.xyz, law-enforcement-two.xyz, law-enforcement-three.xyz, law-enforcement-four.xyz, law-enforcement-five.xyz, law-enforcement-six.xyz, law-enforcement-seven.xyz, law-enforcement-eight.xyz, law-enforcement-nine.xyz, law-enforcement-ten.xyz/ referral ghost spam
- 2016-07-20 – ranking2017.ga / referral ghost spam
- 2016-07-20 – bestofferswalkmydogouteveryday.gq / referral ghost spam
- 2016-07-18 – luxmagazine.cf / referral ghost spam
- 2016-07-17 – ranking2017.ga / referral ghost spam
- 2016-07-16 – exchangeit.gq / referral ghost spam
- 2016-07-16 – “eu-cookie-law.info …” organic keyword ghost spam
- 2016-07-15 – pokemongooo.ml / referral ghost spam
- 2016-07-13 – bestchoice.cf / referral ghost spam
- 2016-07-11 – seo-2-0.com / referral SPAM CRAWLER
- 2016-07-08 – botd.wordpress.com / referral ghost spam
- 2016-07-08 – eu-cookie-law.blogspot.* / referral ghost spam
- 2016-07-08 – free-share-buttons.blogspot.* / referral ghost spam
- 2016-07-04 – law-one.xyz, law-two.xyz, law-three.xyz, law-four.xyz, law-five.xyz, law-six.xyz, law-seven.xyz, law-eight.xyz, law-nine.xyz, law-ten.xyz / referral ghost spam
- 2016-07-01 – free-share-buttons-???.xyz / referral ghost spam
- 2016-06-27 – forum.topic#.ilovevitaly.xyz / referral ghost spam
- 2016-06-19 – slow-website.xyz / referral ghost spam
- 2016-06-19 – law-enforcement-check-*.xyz / referral ghost spam
- 2016-06-19 – free-social-buttons-???.xyz / referral ghost spam
- 2016-06-17 – site-auditor.online / referral ghost spam
- 2016-06-16 – eu-cookie-law.info organic keywords ghost spam
- 2016-06-11 – law-enforcement-bot-??.xyz / referral ghost
- 2016-06-08 – social-buttons-??.xyz / referral ghost spam
- 2016-06-04 – law-enforcement-??.xyz / referral ghost spam
- 2016-06-04 – fix-website-errors.xyz / referral SPAM CRAWLER
- 2016-05-31 – cookie-law-enforcement-ii.xyz / referral ghost spam
- 2016-05-31 – cookie-law-enforcement-hh.xyz / referral ghost spam
- 2016-05-31 – cookie-law-enforcement-gg.xyz / referral ghost spam
- 2016-05-29 – cookie-law-enforcement-ff.xyz / referral ghost spam
- 2016-05-28 – magicdiet.gq / referral ghost spam
- 2016-05-28 – forum.topic#.ghostvisitor.com / referral ghost spam
- 2016-05-28 – ghostvisitor.com / referral ghost spam
- 2016-05-27 – burn-fat.ga / referral ghost spam
- 2016-05-27 – cookie-law-enforcement-??.xyz / referral ghost spam
- 2016-05-27 – eu-cookie-law-enforcement#.xyz / referral ghost spam
- 2016-05-27 – http://link.web-list.xyz/ / referral ghost spam
- 2016-05-27 – keywords-monitoring-success.com / referral SPAM CRAWLER
- 2016-05-27 – monetizationking.net / referral ghost spam
- 2016-05-27 – popads.net / referral
- 2016-05-25 – www.get-free-social-traffic.com organic keywords ghost spam
- 2016-06-23 – ownshop.cf / referral ghost spam
- 2016-05-20 – a.pr-cy.ru / referral spam crawler
- 2016-05-20 – eu-cookie-law-enforcement-#.xyz / referral ghost spam
- 2016-05-18 – getlamborghini.ga / referral ghost spam
- 2016-05-16 – dominateforex.ml / referral ghost spam
- 2016-05-08 topquality.cf / referral ghost spam
- 2016-05-05 share-button.xyz / referral ghost spam
- 2016-05-04 marketland.ml / referral ghost spam
- 2016-04-30 unpredictable.ga / referral ghost spam
- 2016-04-28 increasewwwtraffic.info / referral ghost spam
- 2016-04-26 website-stealer-warning-alert.hdmoviecams.com / referral ghost spam
- 2016-04-25 ‘i came up with a method and 1,5 years forcing…’ ghost organic keywords
- 2016-04-25 lots of other ghost organic keywords, including share-button.xyz, m-google.xyz, socialbutton.xyz, and others
- 2016-04-25 social-traffic-#.xyz / referral ghost spam
- 2016-04-18 smartphonediscount.info / referral ghost spam
- 2016-04-18 free-social-buttons#.xyz / referral ghost spam (# is 2, 3, 6, 7, etc)
- 2016-04-17 forum.topic#.6hopping.com and free-social-buttons6.xyz / referral ghost spam
- 2016-04-14 keywords-monitoring-your-success.com / referral crawler
- 2016-04-11 makeprogress.ga / referral ghost spam
- 2016-04-10 m-google.xyz and fuck-paid-share-buttons.xyz / referral ghost spam
2016-04-09 free-video-tool.com / referral spam crawler added to filter expressions
- 2016-04-08 getrichquickly.info / referral ghost spam
- 2016-04-01 getrichquick.ml /referral and яндех-херня.рф / referral ghost spam
- 2016-03-23 magnet-to-torrent.com / referral and torrent-to-magnet.com / referral added to spam crawler filters
- 2016-03-23 adtiger.tk / referral ghost spam
- 2016-03-21 wordpresscore.com/ referral ghost spam
- 2016-03-18 feedback.sharemyfile.ru /referral ghost spam
- 2016-03-15 rank-checker.online / referral ghost spam
- 2016-03-10 dogsrun.net / referral spam crawler
- 2016-03-05 #.responsive-test.net / referral spam crawler
- 2016-03-03 why.does.spacebarnot.work? / organic search from o-o-11-o-o.com hostname ghost spam
- 2016-03-03 uptime.com / referral spam crawler
- 2016-02-28 hostgator.com / referral ghost spam
stablehost.com / referral ghost spam
digitalfaq.com / referral ghost spam
bluehost.com / referral ghost spam
site5.com / referral ghost spam
cutalltheshit.com / referral ghost spam
veerotech.com / referral ghost spam
mddhosting.com / referral ghost spam
siteground.com / referral ghost spam
- 2016-02-27 domain-tracker.com / referral ghost spam
- 2016-02-16 go.ekatalog.xyz / referral ghost spam
- 2016-02-10 китай.с.новым.годом.рф / referral ghost spam
- 2016-01-26 how.to.travel.and.make.money.with.maps.ilikevitaly.com / referral ghost spam
- 2016-01-22 web-revenue.xyz / referral ghost spam (traffic2cash.xyz)
- 2016-01-22 free-traffic.xyz / referral ghost spam (sharebutton.to)
- 2016-01-20 social-widget.xyz / referral ghost spam (sharebutton.to)
- 2016-01-20 free-social-buttons.xyz / referral ghost spam (sharebutton.to)
- 2016-01-20 net-profits.xyz / referral ghost spam (sharebutton.to)
- 2016-01-20 traffic-cash.xyz / referral ghost spam (traffic2cash.xyz)
- 2016-01-13 rankings-analytics.com / referral spam crawlers
- 2016-01-03 share-buttons.xyz / referral ghost spam (sharebutton.to)
- 2016-01-01 с.новым.годом.рф / referral (ilovevitaly) ghost spam
- 2015-12-31 happy.new.yeartwit.com / referral (ilovevitaly) ghost spam
- 2015-12-29 build-a-better-business.2your.site / referral ghost spam (ontraport.com)
- 2015-12-25 build-audience.for-your.website/ referral ghost spam (easyvideosuite.com / easywebinar.com)
- trafficgenius.xyz / referral ghost spam (publishvault.com)
- new-look.for-your.website / referral ghost spam (teslathemes.com)
- onlinetvseries.me / referral ghost spam
- uptimechecker.com / referral spam crawlers
- uptimebot.net / referral spam crawlers
- topseoservices.co / referral ghost spam (www.semrush.com)
- website-analyzer.info/ referral ghost spam (ranksonic.com)
- trafficgenius.xyz / referral ghost spam (publishvault.com)
- smarter-content.for-your.website / referral ghost spam (scribecontent.com)
- 2015-12-22 traffic2cash.xyz / referral ghost spam
- 2015-12-20 website-stealer.nufaq.com / referral ghost spam
- 2015-12-19 website-stealer-warning.hdmoviecamera.net / referral ghost spam
- 2015-12-14 ^scripted.com /referral added to spam crawlers filters
- 2015-12-09 googlemare.com / referral (ilovevitaly) ghost spam
- 2015-12-08 boost-my-site.com / referral (ranksonic.com) ghost spam
- 2015-12-08 top1-seo-service.com / referral (semalt.com) added to spam crawler filters
- 2015-12-04 santasgift.ml / referral ghost spam
- 2015-12-04 rusexy.xyz / referral ghost spam
- 2015-12-02 quit-smoking.ga / referral ghost spam
- 2015-12-01 o-o-8-o-o.com / referral ghost spam
- 2015-11-27 cyber-monday.ga /referral ghost spam
- 2015-11-27 fast-wordpress-start.com / referral (startwp.org) added to spam crawler filters
- 2015-11-27 lsex.xyz / referral (http://work-from-home-earn-money-online.com/) ghost spam
- 2015-11-27 traffic2cash.org / referral ghost spam
- 2015-11-26 black-friday.ga / referral ghost spam
- 2015-11-26 kiwe-analytics.com / referral ghost spam
- 2015-11-24 adf.ly / referral ghost spam
- 2015-11-23 hosting-tracker.com / referral (syfonix.com) ghost spam
- 2015-11-20 wordpress-crew.net / referral added to spam crawler filters
- 2015-11-19 get-your-social-buttons.info / referral (sharebutton.to) ghost spam
- 2015-11-18 traffic2cash.net / referral ghost spam
- 2015-11-18 ranksonic.net / referral (ranksonic.com) ghost spam
- 2015-11-17 snip.to / referral (snip.ly) ghost spam
- 2015-11-16 alibest.com /referral ghost spam
- 2015-11-16 claim#######.copyrightclaims.org / referral (ilovevitaly.com) ghost spam
- 2015-11-16 dbutton.net / referral spam crawler
- 2015-11-16 o00.in / referral spam crawler
- 2015-10-08 rankings-analytics.com /referral spam crawler
- 2015-10-04: nexus.search-helper.ru / referral spam crawler
- 2015-09-21: rednise.com / referral ghost spam
- 2015-09-21: 127.0.0.1:80## / referral: some spammers don’t know what they are doing
- 2015-09-16: best-seo-software.xyz / referral ghost spam
- 2015-09-15: justprofit.xyz added to spam crawler filters
- 2015-09-01: qualitymarketzone.com which redirects to www.tkqlhce.com
- 2015-09-01: seo-platform.com which redirects to affiliate.ranksonic.com
- 2015-08-26: ghost spam is free from the politics, we dancing like a paralytics / organic keywords
- 2015-08-15: how-to-earn-quick-money.com / referral
- 2015-08-13: sexyali.com / referral**
- 2015-08-13: hongfanji.com / referral
- 2015-08-09: free-floating-buttons.com / referral
- 2015-08-09: get-free-social-traffic.com / referral
- 2015-08-05: satellite.maps.ilovevitaly.com / referral
- 2015-08-05: chinese-amezon.com / referral
- 2015-07-29: pops.foundation / referral
- 2015-07-24: traffic2money.com / referral
- 2015-07-20: e-buyeasy.com / referral
- 2015-07-02 site#.floating-share-buttons.com / referral
- 2015-06-26 erot.co / referral
- 2015-06-18 webmonetizer.net / referral
- 2015-06-09 howtostopreferralspam.eu / referral and organic
- 2015-06-04 trafficmonetizer.org / referral
- 2015-06-03 непереводимая.рф / referral
- 2015-06-01 непереводимая.рф / organic
- 2015-05-29 sanjosestartups.com / organic
- 2015-05-27 websites-reviews.com / referral
- 2015-05-26 sanjosestartups.com / referral
- 2015-05-21 ilovevitaly.com / organic
- 2015-05-19 s.click.aliexpress.com / organic
- 2015-05-15 site4.free-share-buttons.com / referral and free-social-buttons.com / referral and webmaster-traffic.com / referral
- 2015-05-06 www.event-tracking.com / referral, www.kabbalah-red-bracelets.com / referral, guardlink.org / referral and some spikes of direct traffic (direct) / (none).
- 2015-04-28 (google / organic) search spam with keyword “vitaly rules google…”
- 2015-04-24 (free-share-buttons.com / referral, pornhub-forum.ga / referral, youporn-forum.ga / referral, rapidgator-porn.ga / referral, domination.ml / referral, torture.ml / referral, www.Get-Free-Traffic-Now.com / referral, buy-cheap-online.info / referral, theguardlan.com / referral)
- 2015-04-06 (editors.choice#######.hulfingtonpost.com / referral) and (googlsucks.com / referral) and Get-Free-Traffic-Now.com
- 2015-04-02 addons.mozilla.org / referral
- 2015-03-26 4webmasters.org / referral
- 2015-02-23 www1.social-buttons.com / referral
- 2015-03-16 s.click.aliexpress.com / referral and simple-share-buttons.com
- 2015-03-11 ranksonic.org
- 2015-03-04 humanorightswatch.org / referral
- 2015-02-25: o-o-6-o-o.com / referral
- 2015-02-11: message####.cenokos.ru
- 2015-02-04: bestwebsitesawards.com / referral
- 2015-01-27: cenoval.ru / referral
- 2015-01-19: “google officially -recommends ilovevitaly.com search shell” and “resellerclub scam” organic
- 2015-01-15: “hulfingtonpost.com / referral
- …and more…