visitors from an xurl redirect what is it?

by 26 replies
31
I have been getting alot of hits from an xurl redirect to one of my sites. Interestingly enough my clickbank sales have dropped to almost nothing. Not sure what an xurl is or what to make of it. The visitors from these redirect stay on for much longer then the normal visitor.

Here is an example of one of the urls

http://146.185.250.135/?xurl=http://...rlgoeshere.com

should i be worried or is this normal?
#main internet marketing discussion forum #redirect #visitors #xurl
  • Now these days I am also getting lot of visits from xurl visitors from the same ip s



    I searched in many forums and lot of google searches, couldn't found what is it and wher it comes?

    Can anyone tell as about them? will them affet search engine rankings?
    • [1] reply
    • Is the IP always the same? http://146.185.250.135

      Also the xurl bit is a variable used by some sort of script on that ip. The ip lookup for that is in Russia. It could just be some sort of affiliate rediret
      Although looking at some of the results in google is your site selling a clickbank product?

      Search this in google /?xurl=http://
      • [1] reply
  • Do you have access to the servers log files? If so see what they are doing while they are on the site. Also speak to your host to see if they are having any problems. How many hits are we talking about? Did your other traffic go down? Or is this extra traffic.
    PM me if you don't want it public.
    • [1] reply
    • yes, i have access to log files. I have checked it. I think they are hitting most of the images(gif, png and jpg). The most visited url is /

      I am getting around 100 hits per day, I am getting other traffic as usual before. This is extra traffic.
      • [1] reply
  • blacklist those specific IP addresses using either cpanel or a security software.

    otherwise, a fun thing to do is not block the sites and let them steal your images. what they are essentially stealing is usually not the image itself, but a link to the image. wait for a few days, then do a rename of the images on your site. use the same names for the old images, but replace them with pictures that say "I STOLE THIS PICTURE FROM [your site]"

    this is also something you can do to people who copy blog posts - just insert a tiny .gif or .jpeg file, then do the same tactic a few days after you've uploaded it.
    • [ 2 ] Thanks
    • [1] reply

    • How to blacklist those IP s since every visitors are coming from different Ips? , only the refferal url is the same
      • [1] reply
  • Could really do with seeing the site and knowing more about it's history.
    How long have you had the domain?
    Has it recently been changed. Design, layout, scripts?
    Whats it's topic.
    • [ 1 ] Thanks
  • @Wilde

    Now I just checked the visitor activity in the cpanel. See what I found

    Visitor from UK (188.221.239.92)


    My statcounter account shows, only 3 visits, total time spent 2 mins 16 secsrefferal link is







    over 100 visits in 3 seconds from the same IP

    the first visit is from the above refferal url to my homepage














    etc

    (each image visited one time only except the image





    so the same visitor(188.221.239.92) first visited my homepage from the xurl refferer. Then he used my homepage as reffering url to visit or use most of the images from my image folder.

    From yesterday I am using hotlink protection in cpanel(only my website can use the image now) but still am getting visits.

    So from the points above what are they?
    Anyone copying my site?

    Thanks in advance
  • K, yes you can block with the snippet but you will need to use regular expressions in there, not the actual snippet.

    I don't suppose that you use the images on your site for anything like emails or even in your ebook? Do you have affiliate sales?

    To be honest it just looks like somekind of sniffer/phishing bot looking at your site. Keep an eye on your conversions and ftp logs to see if anything changes. If you
    • [ 1 ] Thanks
  • No, I don't use any special images. They are visiting evan the template border, buttons etc. No, I am not using affiliate system to sell.

    Since the visiting refferals always begins with ,

    • [1] reply
    • Why is everyone worried about it... do you really have nothing better to do then to speculate and try to figure out why these new visitors are coming to your site, already deciding that they should be blocked because it looks weird? If you have time for that, you should be in IM. Unless you have very strong proof to support that this is a problem, ignore it do the important stuff, like writing a new blog post....
      • [2] replies
  • Banned
    [DELETED]
  • I don't normally post code on sites like this as it can end up confusing some, more than it helps but here goes. The following should block anything that comes to your site with xurl=http in the referrer string and should be put in your .htaccess file, make a backup of your existing one first.

    This sets a apache variable called xspam:
    SetEnvIfNoCase Referer ".*xurl=http.*" xspam

    This then checks if it's set or not and blocks access accordingly. Some of this you may all ready have in your .htaccess some you may not:
    <Limit GET POST PUT>
    Order Allow,Deny
    Allow from all
    Deny from env=xspam
    </Limit>

    The bolded line is the line that does the work, so if that above section is already in your .htaccess file then just put that line in there. After editing your .htaccess then it's always a good idea to restart your browser and check your site all through to make sure the pages are loading

    Try it and let me know if it works.

    P.S I haven't tried this as the only site I had that was getting these is now sold
    • [ 1 ] Thanks
    • [1] reply
    • As you said it is confusing.

      I have some knowledge about .htaccess so I can add the line Deny from env=xspam to .htaccess.

      Should I edit or add apache varibale? If so where should I add the following line



      Or should I just add Deny from env=xspam to .htaccess?

      Only that part is confusing, kindly guide me

      Once again thank you for the great help
  • Both lines go in your .htaccess file.

    Make sure the Deny from env=xspam goes in the limit section of your .htaccess the other line can be put as far as I know before or after the limit section. Although I would put it before as it.... well, my preference
    • [1] reply

    • I did it after I read them carefully. Since then I didn't got any vsisits yet...I think its working

      I will let you know after some hours....thank you so much
      • [1] reply

Next Topics on Trending Feed

  • 31

    I have been getting alot of hits from an xurl redirect to one of my sites. Interestingly enough my clickbank sales have dropped to almost nothing. Not sure what an xurl is or what to make of it. The visitors from these redirect stay on for much longer then the normal visitor. Here is an example of one of the urls