xxx-plaza.net sends fake traffic

elmister · 2004-12-13, 08:04 PM

Don't trade with xxx-plaza.net
after signing up in his ucj, i started to receive strange traffic. Apache logs showed this

218.2.2.153 - - [30/Nov/2004:11:13:57 +0000] "GET / HTTP/1.1" 200 29285 "http://
www.xxx-plaza.net/index.shtml\r" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98;
Win 9x 4.90)" -

first, the referer with that strange "\r" at the end.
the visitor doesn't load graphics

then, a click to out.cgi link of my site.
About 150 visitors doing exactly the same, all with the same user-agent, the same "\r" in the referer and click one of the links. After i redirected his visitors to load a different page in another domain, i started to get clicks in the same domain for urls on the other domains (were relative links, his hitbot is not perfect and didn't notice he was redirected to another domain)

2004-12-13, 08:04 PM	#1
elmister Banned Join Date: Jun 2004 Location: Spain (Europe) Posts: 12	xxx-plaza.net sends fake traffic Don't trade with xxx-plaza.net after signing up in his ucj, i started to receive strange traffic. Apache logs showed this 218.2.2.153 - - [30/Nov/2004:11:13:57 +0000] "GET / HTTP/1.1" 200 29285 "http:// www.xxx-plaza.net/index.shtml\r" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)" - first, the referer with that strange "\r" at the end. the visitor doesn't load graphics then, a click to out.cgi link of my site. About 150 visitors doing exactly the same, all with the same user-agent, the same "\r" in the referer and click one of the links. After i redirected his visitors to load a different page in another domain, i started to get clicks in the same domain for urls on the other domains (were relative links, his hitbot is not perfect and didn't notice he was redirected to another domain)