Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Block Cityadspix(.)com Referral Spam from Google Analytics

Referral spam by Cityadspix(.)com web links has been reported to affect hosts’ Google Analytics data. The questionable spam leads to what appears to be a blank website with a white dot in the middle. However, there are various URLs advertised via it that may redirect to different sites and collect information from users. All website publishers who have been affected by this referral spam should take actions to block it, instructions for which we have provided after this article.

Name Cityadspix(.)com
Type Referral Spam
Short Description The spam might corrupt Google Analytics data and its URLs might have a negative impact on some users.
Symptoms The user may witness redirects after visiting the web links that are spammed and website publishers may notice different information of their site to have sudden spikes and the aggregated statistical numbers to rapidly change.
Distribution Method Via spamming software.
Detection Tool Download Malware Removal Tool, to See If Your System Has Been Affected by Cityadspix(.)com
User Experience Join our forum to discuss Cityadspix(.)com.

spam-sensorstechforumSource: cqcounter.com

What is Cityadspix(.)com Referral Spam

The US-based domain is reported several times to affect users globally. It has no relations to other domains, however, researchers report that it may advertise several pay-per-click type of services or suspicious URLs. Users and site publishers may encounter the spam web links in several formats, for example:

  • http://Cityadspix(.)com/2dh23inf32i2.html
  • http://222e91Cityadspix(.)com

What is more, the URLs shared in spam messages connected to Cityadspix may be used primarily to generate hoax traffic to sites or in pay-per-click schemes such as the adf(.)ly spam scheme, for example. There are many risks that exist and are associated with these spam messages. They may quickly devaluate the site publisher’s data and even sometimes be malicious and infect users who click on them.

Here are several dangers that may be associated with spam links:

  • Infect computers with malware, like Trojans, Rootkits or Worms.
  • Con the user into calling fake tech support representatives that may obtain information and funds.
  • Rope affected users into entering their financial data in phishing sites that look the same as legitimate ones, like eBay, Amazon, PayPal, AliExpress.
  • Scam users for financial credentials using “You have won” type of social engineering surveys.

What is more, the web domain links might use various tracking technologies, such as:

  • Targeting cookies.
  • Analytical cookies.
  • Session cookies.
  • Pixels.
  • Tags.
  • Web Beacons.
  • Local shared objects (LSOs).

How Is Cityadspix(.)com Referral Spam Distributed

When it comes to distribution, Cityadspix(.)com referral spam might employ two techniques to flood your site:

Crawlers

Web Crawlers have the potential to automatically spread on different websites. The otherwise known spiders may begin to crawl the web looking for various domains, based on certain criteria like site activity, traffic, captcha defenses and others. This may allow it to spam effectively on websites that are not well developed regarding spam defenses and devaluate their GA data rather quickly. The good news is that this particular spam bot is not as aggressive as initially believed to be since it may back away after some content is removed or the user IP is banned from the site.

Ghost Referral

Also known as Ghost Referrers, this type of spam is very powerful. In fact, it can have an effect on how your website appears in Google, and if it is not stopped in time, the spam may target different statistics. This happens by taking advantage of the HTTP connection that can be intercepted by the software. Taking advantage of this and other weaknesses, the spam bot can conduct its spam by not even being present on the site it targets. This allows it to remain hidden for longer periods of time, just like a ghost.

Referral spam by Cityadspix(.)com URLs may be of all types of origins. It may devaluate your Google Analytics data and cause your website a lot of headaches if you are not careful. Cyber-crooks who aim to generate profits online via malicious practices constantly come up with increasingly sophisticated attacks. This is why, an average user and a website publisher should keep up with the latest developments regarding online security since it significantly increases protection.

Block Cityadspix(.)com Referral Spam Completely

To stop Cityadspix(.)com referral spam in the future, it is important to implement more than just one spam blocking technique. This is why we recommend following the after-mentioned instructions to block out this and other spammed domains from spreading in the future.

Method 1: Filtering Cityadspix(.)com Spam in Google Analytics:

Step 1: Click on the ‘Admin’ tab on your GA web page.
Step 2: Choose which ‘View’ is to be filtered and then click the ‘Filters’ button.
Step 3: Click on ‘New Filter’.
Step 4: Write a name, such as ‘Spam Referrals’.
Step 5: On Filter Type choose Custom Filter –>Exclude Filter –> Field: Campaign Source–> Filter Pattern. Then on the Pattern, enter the domain name – Cityadspix(.)com Step 6: Select Views to Apply Filter.
Step 7: Save the filter, by clicking on the ‘Save’ button.
You are done! Congratulations!

Also, make sure you check out these several methods to help you further block out this referrer spam from Google Analytics:

More Methods To Stop Spam Bots and Spiders In Google Analytics

We have also researched the following methods to remove this spam:

Method 2: Block Cityadspix(.)com from your server.

In case you have a server that is Apache HTTP Server, you may want to try the following commands to block Cityadspix(.)com domains in the .htaccess file:

RewriteEngine on

RewriteCond %{HTTP_REFERER} ^http://.*Cityadspix \.com/ [NC,OR]

RewriteCond %{HTTP_REFERER} ^http://.*Cityadspix \-for\-website\.com/ [NC,OR]

RewriteRule ^(.*)$ – [F,L]

Also here is a web link to some spam URLs being blacklisted from other servers:

Ultimate Referrer Blacklist by Perishablepress.com

Disclaimer: This type of domain blocking in Apache servers has not yet been tested and it should be done by experienced professionals. Backup is always recommended.

Method 3 – Stop Cityadspix(.)com Via WordPress

There is a method outlined by security researchers online that uses WordPress plugins to block referrer spams from sites. There are many plugins that help deal with referrer spam, simply do a google search. We have currently seen one particular plugin reported to work, called WP-Ban, but bear in mind that you may find an equally good or better. WP-Ban has the ability to block users based on their IP address and other information such as the URL, for example.

Also, in case you feel like you may have clicked and been redirected to one of the domains mentioned in the spam message, and you believe your system may be compromised, you should scan your computer with a particular anti-malware tool. Downloading such software will also make sure your computer is safe against any future intrusions as well.

donload_now_250
Spy Hunter scanner will only detect the threat. If you want the threat to be automatically removed, you need to purchase the full version of the anti-malware tool.Find Out More About SpyHunter Anti-Malware Tool / How to Uninstall SpyHunter

Vencislav Krustev

A network administrator and malware researcher at SensorsTechForum with passion for discovery of new shifts and innovations in cyber security. Strong believer in basic education of every user towards online safety.

More Posts - Website

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...
Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.