Have i been hacked???

[Davek0974]

Or am i just paranoid?

Looking through Google analytics for the last couple of days data I see in "Landing Pages.." tab entries like these...

www .domination.ml /reply945674

Now, I can recommend NOT clicking it as it is hardcore porn, you have been warned

What does that mean and why is it showing in my Analytics????

Any ideas

 

[Nuno]

Apart from kleenex you could clean it up with Wordfence, and keep it clean that way.
Presuming you aren't using "admin" and "mypassword" as your credentials?

 

[Jason L]

Hmmm..as in Google Analytics is suggesting this is a landing page on your site?

Do you have Webmaster Tools installed for the site in question? And has it generated any warnings recently?

 

[OldWelshGuy]

has someone cloned your content? That will then record on your analytics.

 

[Davek0974]

Apart from kleenex you could clean it up with Wordfence, and keep it clean that way.
Presuming you aren't using "admin" and "mypassword" as your credentials?

LOL, no passwords are not simple
will look at wordfence.

 

[Davek0974]

Hmmm..as in Google Analytics is suggesting this is a landing page on your site?

Do you have Webmaster Tools installed for the site in question? And has it generated any warnings recently?

Yes GA landing page stats

Will look at Webtools now

 

[Davek0974]

has someone cloned your content? That will then record on your analytics.

The site has just been moved by TSOhost, i would presume their security/privacy was above suspicion???

 

[Davek0974]

OK< spoke with Google,

it appears that my Google Tag has been farmed.

They go round copying peoples tags, put them on their own site and as soon as some mug like me spots it, they follow the link to the foreign site = easy traffic/advertising I guess.

I can filter the site out but he said its not easy because they change sources regularly, best fix is to wipe my data and start again using Google Tag Manager which cannot be farmed.

The page he looked at had over 500 Google analytic tags on it!!

Bugger.

 

[Ian J]

I have something similar on one of my sites with Google Analytics giving one of my landing pages as a porn forum.

It makes it a bit of a pain trying to see what's what with your website, especially when the most active referrer is quoted as being simple-share-buttons.com followed by site36.simple-share-buttons.com and then buttons-for-website.com

Due to the large number of these visits GA is reporting a bounce rate of 98.05% and an average time on site of 7 seconds which in the circumstances is hardly surprising

Grrr

 

[Davek0974]

Yep i get two or three entries with loads of traffic from simple-share

I'm looking into tag manager but its not making much sense yet.

 

[fisicx]

Stop using GA.

Try clicky.com. Far superior analytics.

 

[Davek0974]

Will look into that now, had a look at tag manager and it makes no sense to me at all

 

[Davek0974]

Ok, clicky looks ok to me, easy to set up, nice clear stats

Will dump GA I think.

 

[Davek0974]

.

 

[fisicx]

Go to Preferences > Visitor Tags and Filters and enter the IP address to ignore their visits.

 

[Davek0974]

thanks.

 

[ADNattan]

I was going to suggest tag farming, but looks like that boat's sailed.

One very simple way to avoid this when you set up GA is to make sure you specify the end number of your tag. All of Google's automatically generated tags end in -1, so the referral spam artists generate tags ending in -1, hoping to match up.

Change your tag to -2, and you should be mainly spam free. Worked for me when I set up GA on my new site last month.

 

[Davek0974]

TBH, Clicky seems just as good for my minimal requirements, faster to load, clear display, all stats are live and delay free too unlike GA.

The free version is pretty restricted but will still be ok.

 

[ADNattan]

No problem. I've never used it, so I'd be interested to hear how you get on.

 

[paulears]

Worth checking that you have disabled ftp access to the site, it's a simple way in for the determined hacker.