Need help with fake referral

[jr2007]

Okay so to being I'm new. I want to disguise my traffic source of origination and I've looked at several scripts here, some more complex than others. I figure I should begin by asking some basic questions first. What is the best option for traffic redirection in 2016? I've read about meta refresh and all manner of other things but I am specifically looking to make something work within word press. I've been looking for a solution for days, and Ive found a few things here that I either dont understand or are way outdated. If anyone can point me to a method that works in 2016 and has a guide, or maybe a guide can be made please help me out.

 

[Des_cartes]

Depends, are you trying to blank it or fake it? There is no perfect solution since each browser has it's own policy regarding referer.

 

[ChanzGrande]

One more vote for JohnsonDaniel referrer spoof solution here. You'll have to try to find it somehow. You do have to own the referring domain, but as far as I know it continues to work without issues to this day. At least that's what my checks keep saying.

Anyway, that script will do both for you. When it can't spoof the referrer it will blank it.

I do agree there is no perfect solution, but this option continue to work for me at this time. An alternative approach which might cost a little more, but is a more modern approach would be to cloak this traffic, and I would highly recommend OP to move in this direction as the continued safety of referrer blanking and spoofing is far from assured.

Many of your affiliate companies can already determine referrer spoof attempts and it may be exposing your accounts to unnecessary risk. Time to update the monetary protection mechanisms you employ. I don't think this approach has much life left in it at all. But, it does have a place currently.

 

[jr2007]

I've been looking at cloaking but would that work with say black hat traffic, I've not seen a great cloaking product yet so I am most certainly open to suggestions.

 

[jr2007]

I'm going to go ahead and bump this as im still looking for a solution

 

[Des_cartes]

I'm gonna awnser your PM here since it might help other people.
So I'm hoping the form redirect method is still working with all browsers (up to you to test with different browser I only tried Firefox 44 and Chrome 48), here what you can do:

WARNING: This code contain a fail safe, if the referer can't be changed the traffic will not be redirected! This is for education only, use it at your own risk!

<?php
if(isset($_GET['redir']) && !empty($_GET['redir'])) {
    $redir_url = substr($_SERVER["REQUEST_URI"], strpos($_SERVER["REQUEST_URI"], "=") + 1);
    $refresh_url = 'http://' . $_SERVER['HTTP_HOST'] . strtok($_SERVER["REQUEST_URI"],'?');
    setcookie("redir", $redir_url, time()+5);
    exit(header('Location: ' . $refresh_url));
}
elseif(isset($_COOKIE['redir']) && !empty($_COOKIE['redir'])) {
    $referer = $_SERVER['HTTP_REFERER'];
    $domain = $_SERVER['HTTP_HOST'];
    if(strpos($referer, $domain) !== false) {
        $redir_url = urldecode($_COOKIE['redir']);
        setcookie("redir", "", time()-5);
        exit(header('Location: ' . $redir_url));
    } else {
        echo '<form action="" method="get"></form>';
        echo '<script>document.forms[0].submit();</script>';
    }
}
?>

Send traffic to 'http://mydomain.com?redir=http://redirdomain.com' (where 'http://redirdomain.com' is the url where you want to send traffic to and 'http://mydomain.com/' the referer you want to display).

 

[jr2007]

Good to know this one is still working ill try it with Internet explorer and opera. Is this sufficient to keep my accounts safe. Someone was talking about cloaking the traffic but the information I've been reading leads me to think that may not be the best option. Ill keep looking into it.

 

[Des_cartes]

You use a cloaker when you want to hide the traffic provider provider (whether it's paid traffic, social media or search engine traffic) where the traffic is going and you fake/blank the referer when you want to hide where the traffic comes from.

 

[jr2007]

So, then would it be best to do both?

 

[jr2007]

With the assistance of Daver$ we've tried a multitude of scripts inclusive of your code Des_cartes.

 

[ChanzGrande]

Des_cartes - tried your code on multiple sites, and it simply generated a 404 error. Seems like a lot of people are looking for a solution on this front. I thought I had a working spoof with a JohnsonDaniel script I had from ContentLockPro, but it seems that was just for blanking.

Hope someone comes along with a working solution soon.

 

[Des_cartes]

PM your Skype and I'll take a look, probably an issue with your server configuration.


Edit: my bad there was an issue with my code, I edited the post, here the fix:

Change this line:

 $refresh_url = strtok($_SERVER["REQUEST_URI"],'?');

with:

$refresh_url = 'http://' . $_SERVER['HTTP_HOST'] . strtok($_SERVER["REQUEST_URI"],'?');

 

[jr2007]

I can confirm Des_Cartes code is working

 

[feskhiddo]

Please any1 know where i can get blackhat traffic? Logitraffic isnt working again.

 

[jr2007]

Please any1 know where i can get blackhat traffic? Logitraffic isnt working again.

Did you find the answer to your question id like to know too.

 

[feskhiddo]

Nah, not yet. What about fox visits, any1 tried it?

 

[jr2007]

If you link it I wouldnt mind trying it but it seems the other site mentioned it still up.