PPC SE Referrer Spoofing - GoFuckYourself.com

Quickdraw · 11-15-2005, 08:47 PM

I have been getting hits from affiliate(s) of PPC engines that send fake referrer information.
I added a simple stats program which of course can be seen with the server logs, and while viewing these logs I see the following:

Quote:

Host: 65.11.223.54 /
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 5874
Referer: http://lastxdoor.com/search.php?q=term%20here
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/css/table.css
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 2557
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/count/ax.pl?mode=img&ref=http%3A//www.google.com/search%3Fhl%3Den%26q%3Dterm+here
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 54
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/my-logo.gif
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 13026
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

These hits are coming from several domains and use various well known engines from MSN to Yahoo and Google. They never seem to make it past the index page(imagine that)

Just a heads up for those that care.

MattO · 11-15-2005, 08:54 PM

That's how they gather their excellent and relative listings and makes them so damn useful to our surfer friends.

Furious_Male · 11-15-2005, 09:21 PM

I see that a lot.

Its not always spoofing. I see a lot of PPC SE "affiliates" getting a high ranking in google or yahoo for an illegal term (kp related etc.). They then simply redirect that traffic directly through the PPC SEs feed to my site.

Dagwolf · 11-15-2005, 09:22 PM

Spoofing sucks.

wobseek · 12-05-2005, 04:22 AM

thanks for sharing the info
very useful for detecting fraud

11-15-2005, 09:21 PM	#3
Furious_Male Doing the grind since 99 Industry Role: Join Date: Oct 2003 Location: Buffalo NY Posts: 16,881	I see that a lot. Its not always spoofing. I see a lot of PPC SE "affiliates" getting a high ranking in google or yahoo for an illegal term (kp related etc.). They then simply redirect that traffic directly through the PPC SEs feed to my site. __________________ Living in Virtual Reality Contact: Email (preferred): furiousmale .at. gmail - Skype: live:shanedws

11-15-2005, 09:22 PM	#4
Dagwolf President of Canada Join Date: Sep 2003 Location: Leaving Hell, Entering Limbo Posts: 23,141	Spoofing sucks. __________________ Sleep well, and dream of large women.

12-05-2005, 04:22 AM	#5
wobseek Registered User Join Date: Nov 2005 Posts: 23	thanks for sharing the info very useful for detecting fraud __________________ http://wobseek.com - Great PPC program pay up to $2 per click (Accept Adult Content) Yahoo Msg: wobseek AIM: wobseek MSN Msg: [email protected] ICQ#: 312147020

11-15-2005, 08:54 PM	#2
MattO The O is for Oohhh Join Date: Feb 2003 Location: AUSTIN TEJAS Posts: 10,861	That's how they gather their excellent and relative listings and makes them so damn useful to our surfer friends.