<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>The Bot Blog | Button Solutions</title>
    <link>https://button.solutions/blog/</link>
    <description>Evidence-led research into bot traffic, fingerprinting, ad fraud and paid-traffic intelligence.</description>
    <language>en</language>
    <atom:link href="https://button.solutions/blog/rss.xml" rel="self" type="application/rss+xml"/>
    <lastBuildDate>Mon, 02 Nov 2026 06:00:00 GMT</lastBuildDate>
    <item>
      <title>Why Performance Max advice keeps changing: the strategy debate through 2025 and 2026</title>
      <link>https://button.solutions/blog/why-performance-max-advice-keeps-changing/</link>
      <guid isPermaLink="true">https://button.solutions/blog/why-performance-max-advice-keeps-changing/</guid>
      <pubDate>Mon, 02 Nov 2026 06:00:00 GMT</pubDate>
      <description>Explore the PMax strategy debate through 2025 and 2026: feed-only campaigns, brand exclusions, consolidation and Google’s new channel controls.</description>
    </item>
    <item>
      <title>How to evaluate click fraud detection beyond the marketing claims</title>
      <link>https://button.solutions/blog/how-to-evaluate-click-fraud-detection/</link>
      <guid isPermaLink="true">https://button.solutions/blog/how-to-evaluate-click-fraud-detection/</guid>
      <pubDate>Sat, 31 Oct 2026 20:04:00 GMT</pubDate>
      <description>Ask for detection coverage, legitimate-user tests, inspectable decisions and measured outcomes. A practical evaluation plan for standalone and agency-bundled protection.</description>
    </item>
    <item>
      <title>A form submission, a trusted browser and a qualified lead are different things</title>
      <link>https://button.solutions/blog/form-submission-trusted-browser-qualified-lead/</link>
      <guid isPermaLink="true">https://button.solutions/blog/form-submission-trusted-browser-qualified-lead/</guid>
      <pubDate>Sat, 31 Oct 2026 20:03:00 GMT</pubDate>
      <description>Connect browser evidence, conversion events and CRM outcomes without treating one as proof of the others. A practical framework for investigating paid lead quality.</description>
    </item>
    <item>
      <title>How to audit a click fraud tool&apos;s savings report</title>
      <link>https://button.solutions/blog/click-fraud-savings-how-to-audit-the-numbers/</link>
      <guid isPermaLink="true">https://button.solutions/blog/click-fraud-savings-how-to-audit-the-numbers/</guid>
      <pubDate>Sat, 31 Oct 2026 20:02:00 GMT</pubDate>
      <description>Suspicious clicks, platform credits and prevented spend measure different things. Audit the assumptions behind a click fraud savings figure before relying on it.</description>
    </item>
    <item>
      <title>Google Ads IP exclusions: what can they actually prevent?</title>
      <link>https://button.solutions/blog/google-ads-ip-exclusions-what-they-can-and-cannot-prevent/</link>
      <guid isPermaLink="true">https://button.solutions/blog/google-ads-ip-exclusions-what-they-can-and-cannot-prevent/</guid>
      <pubDate>Sat, 31 Oct 2026 20:01:00 GMT</pubDate>
      <description>IP exclusions act on future ad delivery. Learn how scope, repeat timing, changing addresses and shared networks affect what a block list can achieve.</description>
    </item>
    <item>
      <title>Can click fraud protection block real customers?</title>
      <link>https://button.solutions/blog/click-fraud-protection-without-blocking-real-customers/</link>
      <guid isPermaLink="true">https://button.solutions/blog/click-fraud-protection-without-blocking-real-customers/</guid>
      <pubDate>Sat, 31 Oct 2026 20:00:00 GMT</pubDate>
      <description>Shared IPs and privacy relays make aggressive blocking risky. Learn how to check buyer exposure and test a traffic rule before excluding potential customers.</description>
    </item>
    <item>
      <title>Which campaigns send suspicious traffic? A practical investigation</title>
      <link>https://button.solutions/blog/which-campaigns-send-suspicious-traffic/</link>
      <guid isPermaLink="true">https://button.solutions/blog/which-campaigns-send-suspicious-traffic/</guid>
      <pubDate>Sat, 31 Oct 2026 19:32:00 GMT</pubDate>
      <description>Compare campaigns using paid-click evidence, collection coverage and visitor journeys. A small published location study shows why account averages can hide a specific problem.</description>
    </item>
    <item>
      <title>Are bots clicking your ads? How to check the evidence</title>
      <link>https://button.solutions/blog/are-bots-clicking-your-ads/</link>
      <guid isPermaLink="true">https://button.solutions/blog/are-bots-clicking-your-ads/</guid>
      <pubDate>Sat, 31 Oct 2026 19:31:00 GMT</pubDate>
      <description>Separate bots on your website from suspicious paid clicks. Use browser evidence, click identifiers and visitor journeys without treating every non-buyer as fraud.</description>
    </item>
    <item>
      <title>Google Ads clicks but no sales? How to investigate your traffic</title>
      <link>https://button.solutions/blog/google-ads-clicks-but-no-sales/</link>
      <guid isPermaLink="true">https://button.solutions/blog/google-ads-clicks-but-no-sales/</guid>
      <pubDate>Sat, 31 Oct 2026 19:30:00 GMT</pubDate>
      <description>Check tracking, targeting, visitor journeys and bot evidence to find why paid clicks are not becoming sales, with examples from Button&apos;s published studies.</description>
    </item>
    <item>
      <title>How ecommerce companies detect bot traffic hiding behind proxies</title>
      <link>https://button.solutions/blog/ecommerce-bot-traffic-behind-proxies/</link>
      <guid isPermaLink="true">https://button.solutions/blog/ecommerce-bot-traffic-behind-proxies/</guid>
      <pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate>
      <description>Learn how ecommerce teams detect bots behind residential proxies using browser signals, journey patterns and campaign evidence—without blocking shoppers.</description>
    </item>
    <item>
      <title>We Studied Bot Traffic Across Three Websites. The Click Fraud Story Wasn&apos;t What We Expected.</title>
      <link>https://button.solutions/blog/we-studied-bot-traffic-across-three-websites-the-click-fraud-story-wasnt-what-we-expected/</link>
      <guid isPermaLink="true">https://button.solutions/blog/we-studied-bot-traffic-across-three-websites-the-click-fraud-story-wasnt-what-we-expected/</guid>
      <pubDate>Sun, 18 Oct 2026 12:35:08 GMT</pubDate>
      <description>Five research articles examine what IP reputation, browser fingerprints, location and visitor behavior can—and cannot—tell advertisers about the quality of their traffic. Most ad fraud protection products begin with a s</description>
    </item>
    <item>
      <title>A navigator.userAgentData sensor: what one inconsistency says about a visitor</title>
      <link>https://button.solutions/blog/a-navigator-useragentdata-sensor-what-one-inconsistency-says-about-a-visitor/</link>
      <guid isPermaLink="true">https://button.solutions/blog/a-navigator-useragentdata-sensor-what-one-inconsistency-says-about-a-visitor/</guid>
      <pubDate>Wed, 14 Oct 2026 09:32:06 GMT</pubDate>
      <description>On three small sites, 882 of 1,409 desktop Chromium visitors gave a navigator.userAgentData answer that didn&apos;t fit their device. None of them clicked an ad.</description>
    </item>
    <item>
      <title>Does your visitor&apos;s clock agree with their IP address?</title>
      <link>https://button.solutions/blog/does-your-visitors-clock-agree-with-their-ip-address/</link>
      <guid isPermaLink="true">https://button.solutions/blog/does-your-visitors-clock-agree-with-their-ip-address/</guid>
      <pubDate>Wed, 14 Oct 2026 09:31:18 GMT</pubDate>
      <description>On three small sites, 39% of visitors&apos; device clocks disagreed with their IP country, almost all on datacenter addresses. Among ad clickers it was 3%.</description>
    </item>
    <item>
      <title>Paying for ad clicks from the wrong country</title>
      <link>https://button.solutions/blog/paying-for-ad-clicks-from-the-wrong-country/</link>
      <guid isPermaLink="true">https://button.solutions/blog/paying-for-ad-clicks-from-the-wrong-country/</guid>
      <pubDate>Wed, 14 Oct 2026 09:30:28 GMT</pubDate>
      <description>Foreign ad clicks were 0.4% on an Israeli store and 4–6% on two UK sites, but one Google campaign got all 9 clicks from abroad. Check campaign settings first.</description>
    </item>
    <item>
      <title>A residential proxy flag doesn&apos;t necessarily mean bad ad traffic</title>
      <link>https://button.solutions/blog/a-residential-proxy-flag-doesnt-necessarily-mean-bad-ad-traffic/</link>
      <guid isPermaLink="true">https://button.solutions/blog/a-residential-proxy-flag-doesnt-necessarily-mean-bad-ad-traffic/</guid>
      <pubDate>Wed, 14 Oct 2026 09:29:35 GMT</pubDate>
      <description>Should you block residential proxies? In one short store study, a proxy rule would have included 3 of 7 IPs seen on a payment-success page. The label alone was insufficient.</description>
    </item>
    <item>
      <title>What does gad_source mean? Nobody outside Google knows</title>
      <link>https://button.solutions/blog/what-does-gad_source-mean-nobody-outside-google-knows/</link>
      <guid isPermaLink="true">https://button.solutions/blog/what-does-gad_source-mean-nobody-outside-google-knows/</guid>
      <pubDate>Sun, 11 Oct 2026 17:47:41 GMT</pubDate>
      <description>gad_source is the number Google Ads adds to ad click URLs. Only gad_source=1 (Search) is clear; two unconfirmed lists disagree on 2 to 7. How to check yours.</description>
    </item>
    <item>
      <title>98% of your visitors share a clock: testing a 2018 fingerprinting study on three small stores</title>
      <link>https://button.solutions/blog/98-of-your-visitors-share-a-clock-testing-a-2018-fingerprinting-study-on-three-small-stores/</link>
      <guid isPermaLink="true">https://button.solutions/blog/98-of-your-visitors-share-a-clock-testing-a-2018-fingerprinting-study-on-three-small-stores/</guid>
      <pubDate>Wed, 07 Oct 2026 22:27:30 GMT</pubDate>
      <description>A 2018 study found 98% of a one-country site&apos;s visitors share a time zone. On three small stores it held for the clock, less for language.</description>
    </item>
    <item>
      <title>How to Make Money from Google Ads in 2026</title>
      <link>https://button.solutions/blog/how-to-make-money-from-google-ads/</link>
      <guid isPermaLink="true">https://button.solutions/blog/how-to-make-money-from-google-ads/</guid>
      <pubDate>Sun, 19 Jul 2026 23:28:52 GMT</pubDate>
      <description>Learn how to make money from Google Ads in 2026 and beyond.</description>
    </item>
    <item>
      <title>The Mystery of Google Chrome&apos;s On Device Model</title>
      <link>https://button.solutions/blog/the-mystery-of-google-chromes-on-device-model/</link>
      <guid isPermaLink="true">https://button.solutions/blog/the-mystery-of-google-chromes-on-device-model/</guid>
      <pubDate>Thu, 07 May 2026 09:33:08 GMT</pubDate>
      <description>Does Chrome silently install a 4GB on-device AI model? On Linux we measured far less, and Chromium&apos;s build flags show which platforms ship it.</description>
    </item>
    <item>
      <title>on preventing replay attacks</title>
      <link>https://button.solutions/blog/on-preventing-replay-attacks/</link>
      <guid isPermaLink="true">https://button.solutions/blog/on-preventing-replay-attacks/</guid>
      <pubDate>Tue, 24 Mar 2026 15:38:33 GMT</pubDate>
      <description>Replay attacks are a constant threat for websites currently protected by typical bot management solutions. Back when we started research into these products two years ago, the obfuscation on multi-billion dollar compani</description>
    </item>
    <item>
      <title>Stopping Excessive Bot Traffic</title>
      <link>https://button.solutions/blog/stopping-excessive-bot-traffic/</link>
      <guid isPermaLink="true">https://button.solutions/blog/stopping-excessive-bot-traffic/</guid>
      <pubDate>Tue, 24 Mar 2026 08:32:02 GMT</pubDate>
      <description>To stop excessive bot traffic,implement a Web Application Firewall (WAF) like Cloudflare, enforce rate limiting to block high-frequency IPs, and deploy CAPTCHAs on all forms. Further steps include updating robots.txt to</description>
    </item>
    <item>
      <title>How Do I Protect My Website Against Bots?</title>
      <link>https://button.solutions/blog/how-do-i-protect-my-website-against-bots/</link>
      <guid isPermaLink="true">https://button.solutions/blog/how-do-i-protect-my-website-against-bots/</guid>
      <pubDate>Tue, 24 Mar 2026 08:29:12 GMT</pubDate>
      <description>Protecting your website against malicious bots involves a multi-layered approach: implementing a Web Application Firewall (WAF) like Cloudflare or Sucuri, setting rate limits to throttle excessive requests, using CAPTCHA</description>
    </item>
    <item>
      <title>FPScanner : a great starting point</title>
      <link>https://button.solutions/blog/fpscanner-a-great-starting-point/</link>
      <guid isPermaLink="true">https://button.solutions/blog/fpscanner-a-great-starting-point/</guid>
      <pubDate>Thu, 19 Mar 2026 11:05:28 GMT</pubDate>
      <description>FPScanner shows the browser inconsistencies that bot detection relies on. A good starting point, but every one of these signals can be spoofed.</description>
    </item>
    <item>
      <title>the non-obvious obvious</title>
      <link>https://button.solutions/blog/the-non-obvious-obvious/</link>
      <guid isPermaLink="true">https://button.solutions/blog/the-non-obvious-obvious/</guid>
      <pubDate>Thu, 19 Mar 2026 10:38:26 GMT</pubDate>
      <description>Let&apos;s talk about the obvious. CreepJS Intro If you don&apos;t know what this is, you don&apos;t really know how to block bots. There are a lot of good sensors here - and it is very hard to spoof them all, perfectly. But ther</description>
    </item>
  </channel>
</rss>
