jetpack stats showing clicks not from my site

• 

  blindpiggy · Member · Jul 26, 2012 at 4:30 am

  • Copy link
  • Add topic to favorites

  When viewing “Clicks” from my site on the Jetpack Site Stats page, I’ve started seeing links to sites that I don’t have links to…ex: http://markup.io/v/aj299bcwz4w8

  The link indicated is nowhere on my site (that’s been explicitly set by me). Is my site compromised? I’m thinking it’s some sort of nefarious ad network throwing pop-ups but I don’t know how to identify this.

  Can you help?
  Blog url: http://www.blindpigdesign.com/

  The blog I need help with is: (visible only to logged in users)

• 

  kardotim · Member · Jul 26, 2012 at 11:28 am

  • Copy link

  Could you please try and search for that link in your pages/posts and comments to see if you’re able to find it?

  Sorry for the inconvenience.

• 

  blindpiggy · Member · Jul 26, 2012 at 12:46 pm

  • Copy link

  I did a search through all my comments (not a lot on my site) and all page and post content…there is nothing in there pointing to that site. Or these sites for that matter: http://markup.io/v/a3nqa0nvvxds (the javascript ‘doPopup.php’) has me particularly worried).

• 

  staff-blorbo · Staff · Jul 26, 2012 at 8:51 pm

  • Copy link

  I’m not seeing those myself either.

  Perhaps they’re being added by another plugin or your theme?

• 

  blindpiggy · Member · Jul 26, 2012 at 8:56 pm

  • Copy link

  Hmm…ya, I’ll try disabling some plugins to see. Another thought I had is that I logged on to a hotel wifi while attending a conference. Didn’t think much of it but the favicon when I’m in admin has been changed to the service provider favicon.

  Thanks.

• 

  staff-blorbo · Staff · Jul 26, 2012 at 9:09 pm

  • Copy link

  Oh, it could also be a tracking script injected by your hotel wifi. That’s sadly common these days.

• 

  staff-blorbo · Staff · Jul 26, 2012 at 9:10 pm

  • Copy link

  To clarify, it’s injected across your whole browser session, not injected into your blog.

• 

  blindpiggy · Member · Jul 26, 2012 at 9:18 pm

  • Copy link

  Hmm, that seems plausible (ugh)…but it’s showing up in my stats as a visitor to my site clicking these links. Since I’m logged into admin, my sessions don’t count for stats, correct?

• 

  staff-blorbo · Staff · Jul 26, 2012 at 9:30 pm

  • Copy link

  Were you definitely logged in at the time?

• 

  blindpiggy · Member · Jul 26, 2012 at 9:39 pm

  • Copy link

  I’m always logged in…apart from the odd time I get booted off so I guess it’s possible that it happened while I was not logged in and it came from me – but I wouldn’t be likely to click on these links – and I would’ve noticed if it was on my site (unless it was hidden?).

  I just viewed the source for my site and notice a strange <script> in the head. Here’s a screengrab: http://cl.ly/ILJF

  Looking a bit closer, it seems to originate from this site: http://www.quantcast.com/

  Could this be the culprit? It seems like this thread is getting off-topic but I appreciate the help!

• 

  staff-blorbo · Staff · Jul 26, 2012 at 9:49 pm

  • Copy link

  No, that’s actually from us. It’s part of our stats tracking system.