Seconded. Password protect any test site.

It keeps everything out: bots, hackers, and customers straying where they shouldn't.


Take all analytics code off the test site OR set up an filter in analytics so that off-domain pageviews are not included in the main analytics profile.