I have a database that tracks all incoming requests referrer field. I was looking at something today, and I'm not sure what to make of it. A good number of my refers from google are without any querystr whatsoever. In other words the header simply says:

others have normal parameters, some of which are usually encrypted.

It looks as though ALL the requests from https are this way and the non-secured http have a query string.

It's been awhile since I studied this. Is this normal? Or should I be investigating further? I use this information to track the number of times someone lands on one of my pages from google (and other sources). The numbers have NEVER been an exact match with WMT or GA. What am I missing here? Can referral headers be easily spoofed? And what would the purpose of that be?

My first thought was that Google was being even more secretive now and simpy providing no information at all for requests from logged in users.