Category Archives:

Internet

False traffic

Traffic I was wondering several weeks ago why the “raw” access counter for my music quote list was going through the roof (and the usage statistics showing unusual changes) without similar increases in “real” visitor numbers, but did not pursue this matter further yet. Earlier this month, a post about spam protection on Holy Shmoly! (whose feed is also included in the WordPress dashboard) also mentioned additional traffic caused by the AVG LinkScanner – an additional program of AVG’s virus scanner which loads all links on search engine results paged beforehand and checks them for malicious code and scripts. AVG Watch has all the background information on that.

At first, this doesn’t sound too bad an idea, however it generates lots of traffic without the found pages actually being read by someone – it would really be sufficient to check the pages when accessing them… And this additional traffic and the tampering of statistics it caused – statistics that have financial consequences for professional sites, and statistics analysts could, at best, only react with some delay on these effects – was what drove many webmasters crazy.

Now, basically, I got unlimited traffic included in my little shared hosting package (though I don’t need to test how unlimited that actually is) and the server didn’t seem to crash under the load, and I certainly wasn’t going crazy – but I did want to have a closer look and of course see whether it really was this AVG LinkScanner that caused the access increase I had noticed. So I grabbed my logfiles and analyzed them for the four different referrers characteristic for AVG – the following chart shows the result for the aforementioned music quote list, which is the post that got the (relative) majority of search engine referrals by far, especially for English sentences (click for large version with longer period):

AVG LinkScanner Traffic

Accesses according to WordPress.com stats (visitors with JavaScript)*
All other normal accesses (search engine robots, visitors without JavaScriipt)*
Various LinkScanner referrers
Redirections using .htaccess
* both without my own accesses

Meaning of the labelled days:
1: Public release of the new AVG version with LinkScanner on April 23.
2: Holy Shmoly! reports, and I add the .htaccess redirections.
3: Small change in redirection, thus letting through a few again.

So we see: The LinkScanner caused up to 1000 additional accesses per day for this post, up to 7 times of real visitor numbers. By the way, it read the page itself (PHP and database accesses) and all JavaScript files linked in it each time (and often a particular GIF image, for whatever reason).

In the mean time – AVG changed LinkScanner’s behavior – the “false traffic” has decreased greatly again.

But it actually had a positive side effect: You could get a little rough impresion of how often your site shows up on the search result pages without the users clicking them…

.com with a .net

Net (part) On 17 June at 01:43, a “nice” mail arrived from a Daniel Kagan from a pretended “Domains Alert Service” (domainsalertservice.com): “cimddwc.com for the owner of cimddwc.net” – and I wasn’t the only one. Its content:

Lately, we obtained cimddwc.com for our development plans.

Oh, right, great plans you got there, you spammer.

But, as you are the owner of .net, we first decided to let you know of an opportunity to acquire this valuable .COM.

Domains Alert Service is an engine specialized in search of domain names related to our customers’ business.

That is, trying to squeeze money out of them for nothing they couldn’t do without you.

We assist our clients to be professionally promoted on the Internet by other measures too (Search Engine Optimization, etc.)

There are several reasons why you should own a .com version of your domain and among them the following: […]
– .com indicates reliability and professionalism.

Then why do you use a .com address?

[…] If you have any interest in securing this domain, please act quickly, as we will not be interested in selling it once our development team starts working with it.

Whatever you‘d actually do with such a silly domain name…

Next mail 11 days later:

The price for cimddwc.com has decreased

Recently, we made an offer to you to purchase the domain cimddwc.com. As we found no need in this domain,

Oh, really?

we are ready to sell it to you for the price we’ve got it for.

Click here to buy cimddwc.com for $50!

Sorry if you haven’t bought it for any other reason than price and this message is of no use for you.

As others also mentioned, such as there at fanboygeeks (especially in the comments), this guy doesn’t even register the domains in the first place.

But, well, I think it might be not that bad to acually have cimddwc.com, so I indeed registered it – not from that spammer, of course, but through a local registrar, for less than half of his last “offer”.

domainsalertservice.com, by the way, now displays “The requested domain is no longer available for purchase. We apologise for the inconvenience.” for this specific domain. Now exactly which inconvenience is he talking about…?

Everywhere and nowhere

united-domains.de had their special offer of 1€ per year for .eu domains in June (this month it’s .info) – and I registered, just for fun, llareb.eu, which is ue.berall spelled backwards, and überall is German for everywhere/anywhere.

I don’t really know yet what to do with it – maybe I’ll just cancel it after this cheap year –, so for now I’ve put up a little JavaScript silliness which I might expand from time to time. So have a look, can be a little time filler (for maybe 5 seconds or so); maybe some of you can even create “artworks” with it… :lol:

Ideas and suggestions for improvements welcome…

Lottery spam from the future

It should be well-known that e-mail addresses can’t win lotteries – especially without actually participating in them – and such “win notifications” only are interested in address and bank data and possibly advance-fee fraud.

Also known should be that automatic translations can produce funny results.1

But that such mails come from the future – wow!

This one specimen arrived on July 7 at 17:11 (that’s 5:11 pm), but would be will sent on July 8 at 11:09 UTC in order to will informed have me on July 9 about the “drawing” from July 8 had. Or something to that extent. It’s so difficult with these tenses…

(The mail is also funny for its “German”, but there’s not much point in showing it here in the English part of my blog…)

  1. especially if they need two steps, e.g. Russian → English → German []