• Resolved xxxhoop

    (@xxxhoop)


    I only installed this security plugin because it is recommended as the best in security and stopping spam. I keep getting this spam fake urls on my google analytics that are created elsewhere and have nothing to do with my content. I cought one originating form a site in Bulgaria and i blocked the IP address but that has not hepled because it seems this hack is coming from multiple sources but initiated by a single source. How do i stop this? your plugin does not seem to detect this type of site security breach.

    Example of fake urls with a 404 redirect.

    https://alternativesmallbusiness.fund/www.cashadvance.com/unsubscribe
    https://alternativesmallbusiness.fund/common-questions? https://alternativesmallbusiness.fund/scams? https://alternativesmallbusiness.fund/www.cashadvance.com/account-center? https://alternativesmallbusiness.fund/www.cashadvance.com/sitemap
    https://alternativesmallbusiness.fund/fees
    https://alternativesmallbusiness.fund/account-center/forgot-password
    https://alternativesmallbusiness.fund/www.cashadvance.com/start-here
    https://alternativesmallbusiness.fund/www.cashadvance.com/sitemap
    https://alternativesmallbusiness.fund/www.cashadvance.com/scams
    https://alternativesmallbusiness.fund/www.cashadvance.com/policy/
    https://alternativesmallbusiness.fund/www.cashadvance.com/policy
    https://alternativesmallbusiness.fund/www.cashadvance.com/locations
    https://alternativesmallbusiness.fund/www.cashadvance.com/loan-alternatives/
    https://alternativesmallbusiness.fund/www.cashadvance.com/fees/
    https://alternativesmallbusiness.fund/www.cashadvance.com/fees
    https://alternativesmallbusiness.fund/www.cashadvance.com/espanol
    https://alternativesmallbusiness.fund/www.cashadvance.com/econsent
    https://alternativesmallbusiness.fund/www.cashadvance.com/disclosure
    https://alternativesmallbusiness.fundhttps/www.cashadvance.com/disclaimer
    https://alternativesmallbusiness.fund/www.cashadvance.com/contact-us/
    https://alternativesmallbusiness.fund/www.cashadvance.com/contact-us
    https://alternativesmallbusiness.fund/www.cashadvance.com/common-questions/
    https://alternativesmallbusiness.fund/www.cashadvance.com/common-questions
    https://alternativesmallbusiness.fund/www.cashadvance.com/
    https://alternativesmallbusiness.fund/www.cashadvance.com
    https://alternativesmallbusiness.fund/partner/
    https://alternativesmallbusiness.fund/locations
    https://alternativesmallbusiness.fund/fees
    https://alternativesmallbusiness.fund/econsent
    https://alternativesmallbusiness.fund/disclosure/
    https://alternativesmallbusiness.fund/disclosure
    https://alternativesmallbusiness.fund/account-center/forgot-password
    https://alternativesmallbusiness.fund/www.cashadvance.com/account-center
    https://alternativesmallbusiness.fund/scams/
    https://alternativesmallbusiness.fund/common-questions/
    • This topic was modified 3 years, 8 months ago by xxxhoop.
    • This topic was modified 3 years, 8 months ago by xxxhoop.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support WFAdam

    (@wfadam)

    Hello @xxxhoop and thanks for reaching out to us!

    You mentioned seeing these on your GA but are you seeing these hits in your Wordfence > Tools > Live Traffic page?

    I see cashadvance.com as the target URL but for some reason, it has your URL in front of it. If I were to guess, I think someone is running a script against your GA referrer, but the script is written poorly.

    What you might be seeing is called a Ghost Referer or Ghost Hits. This is where a bot uses your Analytics code on a completely different site and submits fake traffic directly to Google Analytics (or another tracking service). Ghost referrer spam never touches your website. Thus this traffic will not be visible in your Wordfence “Live Traffic” feed and it is not possible to stop this traffic by adding any code to your website. Instead, you have to set filters in your analytics tool to filter out such traffic from your results.

    There is a really good article about ghost referrers:
    https://moz.com/blog/stop-ghost-spam-in-google-analytics-with-one-filter
    It explains what it is, what methods of blocking don’t work, and the way to properly block it in Google Analytics.

    Let me know if this helps!

    Thanks again!

Viewing 1 replies (of 1 total)
  • The topic ‘Fake Page URL Loads Indicated By Google Analytics’ is closed to new replies.