Skewing Analytics
Marketing No Comments »Towards the end of May, the AVG Security Suite started spewing fake hits to websites across the web which appear as web stats in your web analytics reports. Given there are approximately 20 million users of the new AVG suite, this amounts to a very large amount of fake traffic.
In February, AVG acquired Exploit Prevention Labs and its LinkScanner tool, then bundled the tool in the latest AVG release. What the LinkScanner does - in an effort to protect the user from being hacked, spammed or spoofed - is to pretend that it is a human and “clicks” on every link found in search engine results. So when you visit Google and search for something, every single result found is visited by LinkScanner to determine if the website linked is legitimate or a link to malware. The end result is what appears to be real traffic on the website.
For small sites, this is not going to make much difference, although it may appear you have more visitors than usual. For larger sites with high traffic volumes, this will mean a large spike in traffic. But, it will also potentially mean larger bills because website owners have to pay for bandwidth (small sites are below the minimum threshold so this doesn’t become an issue).
Adam Beale, who runs a UK-based internet consultancy, says that across his small stable of clients, traffic has spiked as much as 80 per cent on some sites. And this is more than just an inconvenience. After all, sites live and die by their traffic numbers. And net resources aren’t free.
“Although [the AVG LinkScanner] might be good for the security of users, it’s a real pain for website owners and webmasters. It’s causing people to think their traffic is increasing, costing those who pay for bandwidth, and wasting disk space with large amounts of unnecessary lines in log files.”
One of his clients, Beale says, normally pulls in 140GB of bandwidth a month, and for June, he predicts a 5 per cent jump.
At the moment, there is a way of filtering AVG traffic from log files. But it’s unclear whether this method would filter out legitimate traffic as well. After all, the traffic appears to come from numerous legitimate IP addresses of general web users. And AVG suggests that - in the name of high security - they may make changes that prevent such filtering. After all, if you can filter it, so can the malware producers they are trying to block.
“A situation like this generates false traffic, bogus data, and this leads to wrong budget decisions and marketing activities,” says Barry Parshall, director of product management at WebTrends, a popular web analytics firm. “I completely get the value proposition [of LinkScanner], but it would be responsible of them to identify themselves, with agent code or whatever it might be, so legitimate businesses can serve their customers properly.”
AVG have promised a fix to alleviate this condition, but until then pay close attention to the number of very short duration visits you receive on your website (assuming you have good analytics software that shows you this kind of statistic). If you are using basic log file analysis software that does not show the duration of visits or allow you to drill down into the details, it may be time to upgrade or consider more thorough tools such as Google Analytics, Yahoo!, comScore, or Nielsen NetRatings.
