Blog
Practical guides on website monitoring, GDPR/EAA compliance, security headers, SEO and Core Web Vitals — from real work with XICTRAQ.
Soft 404s: When Error Pages Return HTTP Status 200
Error pages returning status code 200 tell every check the site is fine while visitors hit a dead end. How to detect soft 404s and wrong status codes.
AI Referrals Drive Revenue: Measuring the New Channel
Visitors from AI assistants buy far more often. Here is how to detect and value AI referral traffic in cookieless analytics and steer the new channel.
Checking Attack Surface: Internet Services as a Way In
Vulnerability exploitation is the top way into attacks in 2026 at 31%. Learn to capture and continuously monitor open ports, outdated services and orphaned subdomains.
BFSG Warning Letters: Securing Accessibility in 2026
A year after the BFSG, online shops face cease-and-desist letters over missing accessibility. Secure WCAG 2.1 AA, your statement and deploy regressions.
llms.txt and AI Crawlers: Control and Verify Access 2026
llms.txt sits on just 10.13% of domains while AI crawlers grow to 20.3% of bot traffic. Here is how to control and verify access from GPTBot and friends.
AI Overviews Cost 61% of Clicks: Make the Loss Visible
AI Overviews push organic CTR down by 61% (1.76% to 0.61%). Here is how to make the zero-click effect visible per page in cookieless analytics.
Email Delivery 2026: Meeting the Bulk-Sending Rules
Google, Yahoo and Microsoft reject non-compliant bulk mail with 550. Here is how to meet SPF, DKIM, DMARC and the sub-0.10% spam rate - and monitor delivery continuously.
Google Tag Manager Needs Consent: 2026 Ruling
VG Hannover: merely loading gtm.js needs consent. Fines up to 300,000 euros. How to check whether your tags fire before consent - and how to stop it.
Privacy Sandbox Is Dead: Cookieless Measurement in 2026
Google shut down the Privacy Sandbox in October 2025 and keeps cookies in Chrome. Why cookieless Chrome failed and how cookieless first-party analytics close the gap.