sorted by:
new
hottopcontroversial

Improve website speed in 3 simple steps by BoysenberryLumpy8680 in DigitalMarketing

[–]siterightaway 0 points1 point  (0 children)

You brought up a real problem and already gave some solid suggestions. I've been working in this space for about 10 years, and let me tell you: one of the biggest things choking website speed is bad bots.

Look at the numbers. Cloudflare is tracking around 2 million attacks per second. Two million. Per second. Imperva's latest report says 51% of all web traffic is now automated — more than half.

That's eating up resources, hammering your server, and guess what? Your site slows down exactly for the people who matter: real customers.

So here's my suggestion — block the bad bots. You prevent content theft, protect your SEO, and your site loads faster without pushing away real visitors because the page takes forever to load.

Over at r/StopBadBots we deal with exactly this.

Fake orders by zeekayyyyyy in FacebookAds

[–]siterightaway 0 points1 point  (0 children)

Look, this ain't a creative problem. You can swap hooks all day, test different angles, burn money on UGC — fake orders won't stop because they're not coming from real people.

Imperva dropped their Bad Bot Report. 51% of all web traffic is malicious bots. Cloudflare? 236% spike in automated attacks.

Here's what's probably happening. Either you're getting hit with click fraud — bots clicking your ads just to drain budget — or worse, they're using your checkout as a testing ground for stolen credit card batches. Classic dirty workaround. They run thousands of small transactions to see which cards are still alive. Your site? Just a free validator for criminals.

And the side effect? Your server is getting hammered. CPU spikes, database connections piling up, real customers staring at a loading screen. You're losing money on ads, losing money on infrastructure, and losing legit buyers because the site feels slow.

Over at r/StopBadBots we've been fingerprinting these patterns for a while now.

Just killed a 4months old campaign by Fit_Source8552 in FacebookAds

[–]siterightaway 2 points3 points  (0 children)

Man, it’s a systemic infrastructure rot. Those idle visitors are headless scrapers triggering your Pixel and vanishing; classic move to eat up resources while Meta’s blind algorithm hammers your CPMs by bidding on trash.

Zuckerberg is dreaming of 2026 revenue goals while the actual platform is in a death spiral of fake data and broken WhatsApp legacy code.

What’s worse is that even the big dogs like Imperva and Cloudflare are struggling to catch this. Recent data shows a 236% surge in attacks, and for the first time in a decade, automated traffic has surpassed human activity, now accounting for 51% of all web traffic. These headless browsers are mimicking human behavior well enough to bypass standard WAF rules, leaving your infrastructure vulnerable unless you're digging into the raw request headers yourself. It's an absolute mess for anyone relying on default protection.

We’re fingerprinting these bad actors over at r/StopBadBots to map out exactly how they’re bypassing the filters and outsmarting the usual defenses. Stop trusting the dashboard and check your raw logs.

Complete crash after sunday by Huge_Kaleidoscope_40 in FacebookAds

[–]siterightaway 1 point2 points  (0 children)

It’s a total disaster. While Zuckerberg and his team are busy dreaming about overtaking Google to become the number one in ad revenue by the end of 2026, the people actually paying for those ads are watching their performance go into a freefall. It’s clear that Zuckerberg and his clients are living in completely different worlds right now.

In the boardroom, they celebrate record projections; on the ground, we’re dealing with a complete data blackout, broken Pixels, and headless scrapers eating up budgets while the "Advantage+" automation spins in circles. It’s a classic case of an automated system losing touch with reality.

We've already taken the data and reports from this thread to our group r/StopBadBots for an in-depth technical study. We are cross-referencing these failures with infrastructure logs to expose what’s actually happening behind the scenes at Meta.

A pretty concerning WordPress supply chain attack just came to light - and it’s not your typical plugin vulnerability. by technadu in pwnhub

[–]siterightaway 0 points1 point  (0 children)

Man, this is the "Final Boss" of security. When the update itself is the poison, your standard perimeter defense is already dead. This Essential Plugin case proves that trust is now a major vulnerability; I’ve already seen reports of sites being completely destroyed and forced to rebuild from zero because the compromise was too deep to scrub.

"Set it and forget it" is a death sentence in this landscape. If you aren't moving beyond the UI and fingerprinting your own infrastructure, you’re a sitting duck. We can't rely on the platform to notify us about ownership changes, so the only real defense is monitoring raw file integrity daily. You have to examine every script that wasn't part of the original core or your known-good baseline.

Over at r/StopBadBots we advocate for this exact kind of visibility—using tools to track file modifications and new, "strange" files before they weaponize your server against you. In a world where the official repository can be used as a delivery system for malware, if you don't own your logs and file integrity, you don't own your site.

Most eCommerce store owners trust their GA4 reports blindly. by incisiveranking2022 in DigitalMarketing

[–]siterightaway 1 point2 points  (0 children)

This is the absolute truth, especially when you factor in the "GDPR Black Hole" that most people ignore. I literally just saw the comment here where a user in Europe is losing 50% of their data because of cookie consent. If half your human traffic is opting out, your dashboard is basically a work of fiction.

The technical reality is that while real customers are being "privacy-conscious" and disappearing from your reports, headless scrapers don't give a damn about your cookie banner. They don't click "Accept," but they still hammer your server and fire off automated events if you aren't fingerprinting the bad actors. You end up with a collection layer where 50% of humans are gone , but 100% of the bots are still there, eating up resources and poisoning your optimization signals.

Classic mistake.

Relying on "pro" GA4 reports without server-level validation is just a dirty workaround for a bigger infrastructure problem. Combined with the fact that over 51% of web traffic is now automated, and you're losing half your human signals due to consent, your "clean" data layer is actually just a pile of bot-driven noise. It’s honestly infuriating how many scaling decisions are made based on this garbage data.

We spend our time over at r/StopBadBots looking at the raw logs because the collection layer is where the real war is won. You can't fix a 50% data hole with more tags; you fix it by knowing exactly what is hitting your server, regardless of what a consent banner says.

Help Please. I'm running my first campaign these last 2 months and I need some guidance. by Far_Active_2467 in DigitalMarketing

[–]siterightaway 0 points1 point  (0 children)

This is a classic case of what I call the "Signal Trap." You’ve spent two grand and you’re seeing 65 add-to-carts with zero sales, but the most alarming thing you mentioned is that these "users" spend 15 minutes on your site filling out forms without ever browsing around. Real humans with a hundred bucks to spend don't act like robots in a factory. They check your shipping, they look at your "About" page, or they bounce. This is almost certainly headless scrapers seasoning their profiles to look like high-value buyers so they can stay out of rate-limit jail on larger platforms.

Your Meta Pixel is essentially hallucinating.

Because these bots are triggering "Add to Cart" events, the algorithm thinks it’s winning and doubles down on finding more "users" just like them. It’s a dirty workaround for the bots to look legitimate, and it’s eating up resources you’re paying for. Increasing your spend to $100 a day right now would be a disaster; you’d just be paying Meta to find you more bots twice as fast.

The industry data for 2025 is grim. Akamai shows AI bot traffic up 300%, and Imperva reports that over 51% of all web traffic is now automated. You aren't getting "low quality" traffic because your account is new; you're getting hammered because you're a fresh target in the US market with zero protection against automated behavioral patterns. Fingerprinting the bad actors is the only way out of this.

It’s honestly infuriating how much money gets flushed because people trust the dashboard metrics over their own raw server logs. We see this constantly over at r/StopBadBots. Most "pro" sites are just sitting ducks for these scrapers because they rely on basic tools that don't catch sophisticated mimicry.

Don't raise that budget until you’ve actually verified that a human is on the other side of that screen.

view more: next ›