Lets block referral spam!

Referral spam block
Example of referral spam in GA

Yes we block all the advertisements online, but there is one spam type that annoys us even more. It’s called referral spam and can be found on all our websites these days. Never heard of it? You probably have but are ignorant and saw the domains semalt.com, humanorightwatch.org, forum20.smailik.org and many other referral websites in your Google Analytics as legit referrals. Well guess what! This is a prank of some Russian called Popov A. Vitaly that is massively spamming the web with fake data in your Google Analytics. But don’t worry as we can help you block all the ads online we’re also able to remove the referral spam hitting on your websites.

[adsense]

What is referral spam?

Referral spam is exactly what the name says it is. It pops up as a referral website in your Google Analytics Data and looks like another backlink. To bad because it isn’t a backlink that referrers potential new clients/visitors to your website. It’s a ghost visitor that leaves a digital footprint in your Google Analytics Account Data and yes it is SPAM! Therefore, we need to remove the referral spam and block those referrers on our websites. All the spam domains that Popov A. Vitaly use are abusing an open window in de Google Analytics UA-******** codes to mess up your data.

Is referral spam harmful?

No, referral spam isn’t harmful for your website or visitors. It does not install infected software, malware or leaves any crap behind. Nevertheless, it can be financially harmful because it leaves a digital footprint in your Google Analytics Data that is 100% useless. The referral spam visits that your website receives multiple times a day are useless because every visit is exactly 0,00 seconds and has a 100% bounce rate. This means that your beautiful website Analytics data is going to give a disturbed image of your actual traffic data. When you are trying to sell the website to a third party this isn’t going to help you since the stats are way lower than they actually are.

The mastermind behind the spambot referral is Popov A Vitaly and claims to have created the spam websites and malicious spamcode for the fun, just to annoy us hard working people. The loose Internet Laws in Russia don’t forbid him in doing so which makes it even more annoying. But the real reason he created the referral spam is because of money. When you visit a spamdomain he redirects you to a webshop with his affiliate link, this way you receive the webshops cookie and Mr Vitaly is making money on that, lots of it. To some extend this practice is just another advertising channel for us to stop. In the end Google itself has to stop it by closing the window in the Google Analytics code. But this is going to be a difficult task since the spamdomains randomly generate infinite UA-******* codes until it hits your (randomly chosen) domain. Now lets move on to the solution on how to ban referral spam.

The referral spam websites

Underneath you will find a list of referral spam website that we encountered in our Google Analytics Data. The list is updated daily and everybody is welcome to add a spam website if they find one. This will only benefit us all!

Website 1Website 2Website 3
share-buttons.xyz
simple-share-buttons.com
sharebutton.org
s.click.aliexpress.com
social-buttons.com
site12.social-buttons.com
adcash.com
adviceforum.info
anticrawler.org
cenokos.ru
cityadspix.com
edakgfvwql.ru
gobongo.info
kambasoft.com
luxup.ru
4webmasters.org
get-free-traffic-now.com
Best-seo-offer.com
Theguardlan.com
www1.social-buttons.com
netvibes.com
webcrawler.com
www.get-free-traffic-now.com
sanjosestartups.com
100dollars-seo.com
view.contextualyield.com
Site1.floating-share-buttons.com
Site2.floating-share-buttons.com
Trafficmonetizer.org
erot.co
ops.picscout.com
Chinese-amezon.com
Rednise.com
Nexus.search-helper.ru
Cgi2.nintendo.co.jp
Explorer.cognitiveseo.com
Copyrightclaims.org
semalt.com
Darodar.com
Priceg.com
7makemoneyonline.com
Buttons-for-website.com
Ilovevitaly.com
Blackhatworth.com
Econom.co
Iskalko.ru
Lomb.co
Lombia.co
hulfingtonpost.com
cenoval.ru
bestwebsitesawards.com
net-profits.xyz
social-widget.xyz
Traffic-cash.xyz
Eu-cookie-law-enforcement-7.xyz
Monetizationking.net
Fix-website-errors.com
law-enforcement-dd.xyz
law-enforcement-check-three.xyz
social-buttons-ff-xyz
keywords-monitoring-success.com
magicdiet.gq
ownshop.cf
monetizationking.net
site-auditor.online
Eu-cookie-law.blogspot.com
Social-buttons-ddd.xyz
petitions.whitehouse.gov
growth-hackingy.info
krumblez-ads.info
99-reasons-for-seo.com
ssss
verhaal.ng
casinoduende.com
displayed-your-ads-here.info
bottraffic.pw
howblog.top
foxweber.com
12-reasons-why-your-business-absolutely-needs-seo.com
display-your-ads-hereti.info
o-o-6-o-o.com
humanorightswatch.org
forum20.smailik.org
myftpupload.com
prodvigator.ua
best-seo-solution.com
Buttons-for-your-website.com
Buy-cheap-online.info
offers.bycontext.com
website-errors-scanner.com
webmaster-traffic.com
guardlink.org
www.event-tracking.com
trafficmonetize.org
traffic-paradise.org
cambridgeshire.libnet.info
непереводимая.рф
webmonetizer.net
Videos-for-your-business.com
success-seo.com
wpsecuritycheck.co.uk
traffic2money.com
Qualitymarketzone.com
Seo-platform.com
ranksonic.com
resellerclub.com
savetubevideo.com
screentoolkit.com
seoexperimenty.ru
slftsdybbg.ru
socialseet.ru
superiends.org
vodkoved.ru
websocial.me
ykecwqlixx.ru
76brighton.co.uk
paparazzistudios.com.au
powitania.pl
sharebutton.net
tasteidea.com
descargar-musica-gratis.net
torontoplumbinggroup.com
cyprusbuyproperties.com
ranksonic.org
Googlsucks.com
free-share-buttons.com
securesuite.co.uk
securesuite.net
www3.free-social-buttons.com
free-social-buttons.com
increasewwwtraffic.info
website-stealer-warning-alert.hdmoviecams.com
auto-seo-service.org
auto-seo-service.com
autoseo-service.org
autoseoservice.org
resell-seo-services.com
earn-moneyty.info
nubuilder.com
earn-moneyty.info
getism-more-free-visitors.info
get-clickian.info
we-ping-for-youli.info
bestorofferhdd.info
getadsincomeian.info
seoservices2018.com
goq-it.com
Seogoodhelper.com
krumblean-advertising.info
trafficbot4free.host
gammatraffic.com
krumble-adsist.info
marketland.ml
best-deal-hdd.pro«─────══━─━═━visit-ʋs
best-offer-hdd.xyz〈═━══━━═─═━─νisit-us
popular-church-arrow-voucher.info
best-ping-service-usa-1.space⏪──═━─vɪsit-us
sitevaluation.org
howtostopreferralspam.eu
semaltmedia.com
start.otgmanagement.com
E-buyeasy.com
Googleweblight.com
Get-free-social-traffic.com
sexyali.com
site2.free-floating-buttons.com
free-floating-buttons.com
Video–production.com
Hongfanji.com
Feedback.sharemyfile.ru
Alibestsale.com
rankings-analytics.com
best-seo-software.xyz
ranksonic.net
traffic2cash.org
justprofit.xyz
video–production.com
boost-my-site.com
claim46201893.copyrightclaims.org
get-your-social-buttons.info
hosting-tracker.com
santasgift.ml
quit-smoking.ga
black-friday.ga
cyber-monday.ga
fast-wordpress-start.com
floating-share-buttons.com
site9.free-floating-buttons.com
top1-seo-service.com
notify.bluecoat.com
rusexy.xyz
wordpress-crew.net
www8.buyerpricer.com
traffic2cash.xyz
website-analyzer.info
googlemare.com
o-o-8-o-o.com
scripted.com
topseoservices.co
trafficgenius.xyz
build-audience.for-your.website
new-look.for-your.website
w3javascript.com
Video–production.com
Responsive-test.net
Uptime.com
Dogsrun.net
Linkquality.zomdir.com
Rank-checker.online
Ranksonic.com
WordPresscore.com
Adtiger.tk
Quirktools.com
Getrichquick.ml
Getrichquickly.info
Free-video-tool.com
Keywords-monitoring-your-succes.com
social-traffic-6.xyz
makeprogress.ga
increasewwwtraffic.info
How.to.travel.and.make.money.with.maps.ilikevitaly.com

There is also a new kind of referral spam making its way up. Namely the IP spam like this address: 127.0.0.1:8888 which keeps sending useless referral traffic.

How to remove referrer spam

You can block referrer spam in two ways. First, you can block the spam website in your Htaccess file with some simple code we provided below. Will this work? Yes and no, because the ghost visitor never actually visits your website. It only leaves a digital footprint in your Google Analytics data that messes everything up. The best way to remove the referral spam is to filter the spam website in your Google Analytics account. This way the referral data is blocked and filtered and you are left with clean GA web data. Nevertheless, doing both the Htaccess file block and Google Analytics filter won’t do any harm.

The .Htaccess code

Simply copy and past the follow code in your .Htacces file on your website host. If you found a new spam website that isn’t in our list please put it in a reply so we can add it to the spamlist. You can also generate your own .Htacces blockfile at http://tools.dynamicdrive.com/userban/ by simply adding the websites you want to block. Here is the code so far;


RewriteEngine on
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*semalt\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Darodar\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Priceg\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*7makemoneyonline\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Buttons-for-website\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Ilovevitaly\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Blackhatworth\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Econom\.co [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Iskalko\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Lomb\.co [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Lombia\.co [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*hulfingtonpost\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cenoval\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*o\-o\-6\-o\-o\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*humanorightswatch\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*simple\-share\-buttons\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sharebutton\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*s\.click\.aliexpress\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*social\-buttons\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*anticrawler\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site12\.social\-buttons\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*adcash\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*adviceforum\.info [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*anticrawler\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*blackhatworth\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cenokos\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cityadspix\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*edakgfvwql\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*gobongo\.info [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*iskalko\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*kambasoft\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*luxup\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*myftpupload\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*prodvigator\.ua [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*resellerclub\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*savetubevideo\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*screentoolkit\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*seoexperimenty\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*slftsdybbg\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*socialseet\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*superiends\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*vodkoved\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*websocial\.me [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ykecwqlixx\.ru [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*76brighton\.co\.uk [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*paparazzistudios\.com\.au [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*powitania\.pl [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sharebutton\.net [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*tasteidea\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*descargar\-musica\-gratis\.net [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*torontoplumbinggroup\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cyprusbuyproperties\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ranksonic\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*best\-seo\-solution\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*get\-free\-traffic\-now\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*googlsucks\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Buttons\-for\-your\-website\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*Best\-seo\-offer\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*offers\.bycontext\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www1\.social\-buttons\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*website\-errors\-scanner\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*free\-share\-buttons\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*theguardlan\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*buy\-cheap\-online\.info [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*netvibes\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*guardlink\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*securesuite\.co\.uk [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*securesuite\.net [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sitevaluation\.org [NC,OR]
RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*forum20\.smailik\.org [NC]
RewriteRule .* - [F]


Filter referral spam from your Google Analytics

Filtering the referral spam from your Google Analytics is the most efficient and effective way to create clean webdata. It is also the simplest solution if you don’t have any knowledge of Htaccess files. First go to your “Admin” tab in your Google Analytics account. You will see the main account column on the left with the option to choose “All Filters”. Choose this option and then push “+ New Filter”. Give the filter the referral spamwebsites name, push custom and select in the dropdown “filter field” the option “Referral”. Enter the url without www. or http://, for example buttons-for-websites.com or 4webmasters.org in the “Filter Pattern” box. Apply the filter to all your websites in Google analytics and push “Save”.

Referral Spam Google Analytics block
Steps to block referral spam in GA

Viola you are done and referral spam free. Your Google Analytics data is no longer violated and polluted by spam created by a annoying person. Wan’t to know why Google isn’t blocking referral spam? We explained it here.

Filter a country

Are you also annoyed by the Russian spam ip’s of Vitaly? Then here is also the option to filter a country. You will lose potential visitors from Russia but if your website is aimed at a local business it isn’t such a bad idea at all. To apply a total land filter you can go via Admin → All Filters → Custom → Country → Russia. Easy peasy and never ever receive Russian referral spam anymore.

Help the web by sharing

Have you found any new referral spamwebsites that aren’t in our spamlist please let us know! Sharing is caring and we will add it to our list so everybody can be referral spam free. This way we can take the joy out of it for Vitaly and other people that are infesting our web experience. The Dutch version of this referral spam guide can be found here. Special thanks to Raoul.io.

98 thoughts on “Lets block referral spam!”

  1. Hi,

    I have same trouble with these spam guys. I’m using already a htaccess file with that code, but still see same spam visits in google analytics. Any idea?

    Reply
  2. Thank …. you!!!!!

    Add these too:

    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*floating-share\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site2\.floating-share-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site1\.floating-share-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site4\.floating-share-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site5\.floating-share-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site3\.floating-share-buttons\.com [NC,OR]

    Reply
  3. Here’s my current list, alphabetized:

    RewriteEngine on
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*100dollars-seo\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.tk [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.uni [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*76brighton\.co\.uk [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*7makemoneyonline\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*a\-hau\.mk [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*adcash\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*adviceforum\.info [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*adviceforum\.es [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*amanda\-porn\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*anal\-acrobats\.hol\.es [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*anticrawler\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*backgroundpictures\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*baixar\-musicas\-gratis\-comsavetubevideo\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*best\-seo\-offer\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*best\-seo\-solution\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*bestwebsiteawards\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*bestwebsitesawards\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*blackhatworth\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*buttons\-for\-website\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*buttons\-for\-your\-website\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*buy\-cheap\-online\.info [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cenokos\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cenoval\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cfsrating\.sonicwall\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cityadspix\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*cyprusbuyproperties\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*dailyrank\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*darodar\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*depositfiles\-porn\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*descargar\-musica\-gratis\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*domination\.ml [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*econom\.co [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*edakgfvwql\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*embedle\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*event\-tracking\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*extener\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*extener\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*fbdownloader\.com [NC]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*fbfreegifts\.com [NC]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*feedouble\.com [NC]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*feedouble\.net [NC]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*forum20\.smailik\.org [NC]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*forum69\.info [NC]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*free\-share\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*free\-social\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*generalporn\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*get\-free\-traffic\-now\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*gobongo\.info [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*googlsucks\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*guardlink\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*howtostopreferralspam\.eu [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*hulfingtonpost\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*humanorightswatch\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ilovevitaly\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ilovevitaly\.co [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ilovevitaly\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*iskalko\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*japfm\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*joinandplay\.me [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*joingames\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*kabbalah\-red\-bracelets\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*kambasoft\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*lomb\.co [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*lombia\.co [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*luxup\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*makemoneyonline\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*meendo\-free\-traffic\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*musicprojectfoundation\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*myprintscreen\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*myftpupload\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*netvibes\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*o\-o\-6\-o\-o\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*o\-o\-8\-o\-o\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*offers\.bycontext\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*openfrost\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*openfrost\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*openmediasoft\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*paparazzistudios\.com\.au [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*pornhub\-forum\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*pornhubforum\.tk [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*powitania\.pl [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*priceg\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*prodvigator\.ua [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ranksonic\.info [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*rapidgator\-porn\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ranksonic\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*redtub\-talk\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*resellerclub\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*s\.click\.aliexpress\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sanjosestartups\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*savetubevideo\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*screentoolkit\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*securesuite\.co\.uk [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*securesuite\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*semalt\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*seoexperimenty\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*serw\.clicksor\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sexyteens\.hol\.es [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sharebutton\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sharebutton\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*simple\-share\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*site12\.social\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*sitevaluation\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*slftsdybbg\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*smailik\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*social\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*socialseet\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*softomix\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*softomix\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*softomix\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*soundfrost\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*srecorder\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*star61\.de [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*superiends\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*tasteidea\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*theguardlan\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*torontoplumbinggroup\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*torture\.ml [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*trafficmonetize\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*vapmedia\.rorgu [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*viandpet\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*videofrost\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*vodkoved\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*webmaster\-traffic\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*websocial\.me [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*website\-errors\-scanner\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www1\.social\-buttons\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*ykecwqlixx\.ru [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*yougetsignal\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*youporn\-forum\.ga [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*youtubedownload\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*zazagames\.org [NC,OR]
    RewriteRule .* – [F]

    Reply
  4. Few More..
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*trafficmonetize\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*traffic\-paradise\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*webmonetizer\.net [NC,OR]

    Reply
  5. Want to OWN referral spam… here’s the best dang blog post around…
    https://brianclifton.com/blog/2015/05/29/removing-referral-spam/?utm_source=conversionworks&utm_medium=blog&utm_campaign=antispam

    I duplicated all sessions and added a previous posters analytics formatted conditional segment

    blogs\.forum\d+\.info|boostmyppc\.com|bestwebsitesawards\.com|semalt\.com|Darodar\.com|Priceg\.com|7makemoneyonline\.com|Buttons-for-website\.com|Ilovevitaly\.com|Blackhatworth\.com|Econom\.co|Iskalko\.ru|Lomb\.co|Lombia\.co|hulfingtonpost\.com|cenoval\.ru|o\-o\-6\-o\-o\.com|humanorightswatch\.org|simple\-share\-buttons\.com|sharebutton\.org|s\.click\.aliexpress\.com|social\-buttons\.com|anticrawler\.org|site12\.social\-buttons\.com|adcash\.com|adviceforum\.info|anticrawler\.org|blackhatworth\.com|cenokos\.ru|cityadspix\.com|edakgfvwql\.ru|gobongo\.info|iskalko\.ru|kambasoft\.com|luxup\.ru|myftpupload\.com|prodvigator\.ua|resellerclub\.com|savetubevideo\.com|screentoolkit\.com|seoexperimenty\.ru|slftsdybbg\.ru|socialseet\.ru|superiends\.org|vodkoved\.ru|websocial\.me|ykecwqlixx\.ru|76brighton\.co\.uk|paparazzistudios\.com\.au|powitania\.pl|sharebutton\.net|tasteidea\.com|descargar\-music\-gratis\.net|torontoplumbinggroup\.com|cyprusbuyproperties\.com|4webmasters\.org|ranksonic\.org|best\-seo\-solution\.com|get\-free\-traffic\-now\.com|googlsucks\.com|Buttons\-for\-your\-website\.com|Best\-seo\-offer\.com|offers\.bycontext\.com|ww1\.social\-buttons\.com|website\-errors\-scanner\.com|free\-share\-buttons\.com|theguardlan\.com|buy\-cheap\-online\.info|netvibes\.com|guardlink\.org|securesuite\.co\.uk|securesuite\.net|forum20\.smailik\.org|fiverr\.com|aincyunt\.eu|trafficmonetize\.org|100dollars\-seo\.com

    There is NO character limit to doing this in the segment view. Make this your default and you’ll never have to worry about seeing referal spam again. Best part, it is availalbe in ALL of your views, so do it once and you can see it in any GA account you manage. I have several hundred, huge time saver.

    If you choose to implement the filter (I did on a few top clients) then eventually you won’t need this segment. But for looking at historical data this segment is true referral ownage! Any new creepers come along and you add them once, and voila all your views are protected.

    Reply
  6. I currently use this method…

    ## BLOCK SPAM ##
    SetEnvIfNoCase Referer semalt.com spammer=yes
    SetEnvIfNoCase Referer 100dollars-seo.com spammer=yes
    SetEnvIfNoCase Referer trafficmonetize.org spammer=yes
    SetEnvIfNoCase Referer 4webmasters.org spammer=yes
    SetEnvIfNoCase Referer best-seo-offer.com spammer=yes
    SetEnvIfNoCase Referer sanjosestartups.com spammer=yes
    SetEnvIfNoCase Referer buttons-for-your-website.com spammer=yes
    SetEnvIfNoCase Referer howtostopreferralspam.eu spammer=yes
    SetEnvIfNoCase Referer sitevaluation.org spammer=yes
    SetEnvIfNoCase Referer ilovevitaly.com spammer=yes
    SetEnvIfNoCase Referer dailyrank.net spammer=yes
    SetEnvIfNoCase Referer непереводимая.рф spammer=yes
    SetEnvIfNoCase Referer thecommonseastport.com spammer=yes
    Order allow,deny
    Allow from all
    Deny from env=spammer

    Reply
    • Nothing works. I tried:
      SetEnvIfNoCase Referer floating-share-buttons.com spammer=yes
      Order allow,deny
      Allow from all
      Deny from env=spammer
      OR
      RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*floating-share-buttons\.com [NC,OR]

      and still get traffic from them! I also try to block them from admin google analytics still nothing!

      Reply
  7. Here are more
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www1\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www2\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www3\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www4\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www5\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www6\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www7\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www8\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www9\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*www10\.free\-social\-buttons.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*inside\.ae [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*guardlink\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*evaliant\.net [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*matchmaking\.delegia\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*a\.xtopoly\.com [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*guardlink\.org [NC,OR]
    RewriteCond %{HTTP_REFERER} ^https?:\/\/([^.]+\.)*4webmasters\.org [NC,OR]

    Reply
  8. Delete your analytics accounts then perhaps Google will actually do something. The stats are useless anyway. Way too much bother to add all the addresses in filters and keep them up to date.
    It looks like Google won’t bother to do anything while we put up with it.
    And ONE PERSON can ruin Google analytics??????

    Reply
  9. This sitevaluation.org was on my site yesterday supposedly from US. A total of 15 sessions, 33% new, 66% bounce rate, pages 5.33 and avg. session of 7.30. Will not list state but shows as (not set) when putting in Region. If it is a robot why are they actually on my site and showing time spent on my site and is there a different way to stop them from showing up on google?

    Reply
    • Yes! trafficmonetize.org is our latest thorn. 15,000+ visits in the last month! So tired of dealing with these scammers. My data is so useless unless I keep adding filters. It really is a huge waste of time.

      Reply
  10. Argh … The GA filters are not working. I deleted the extensions in the filtering rules leaving only the domain name. The variable I used is “Sites Référents” in french. The filter does apply whatever vision used (today, yesterday, last month, last week). Anyone have the same problem ?

    Reply
  11. Great job. I would be interesting to complete this article with an exemple of GA filters with regular expression like in the comments. Thanks for all.

    Reply
  12. I’ve tried setting up some filters but when I try to verify them they have no effect. I tried the filter fields “Referral” and “Campaign Referral Path”. If I change it to “Hostname” it does then verify as having an effect. Anyone know where I’m going wrong if indeed I am?

    Reply
    • I had the same issue yesterday. When I look at the referral path in GA reporting, I see “/” for the 4webmasters.org pageview. So changing the filter to Hostname instead of Referral worked. There were several other examples, including a darodar.com, where changing to Hostname worked, too.

      Are there some where using Referral is required and others where using Hostname is required to filter them out?

      Reply

Share those thoughts!