cloaking script

welax0x

welax0x

Newbie
Joined
Jan 19, 2025
Messages
22
Reaction score
9
I want to run crypto related ads on Facebook but my ads always get rejected.
I found out about cloaking and decided to make my own script.
So far my script blocks unwanted visitors based on IP addresses, user agents, VPN usage, and geographic location.
  1. IP Blocking: It checks the visitor's IP address against various external bots lists hosted on GitHub.
  2. User-Agent Filtering: It examines the user's browser user-agent string to detect bots, crawlers, and scrapers.
  3. VPN & Country Restriction: It determines if the visitor is using a VPN or if their country is not in the allowed list (US for example). If the IP is flagged as a VPN or comes from a restricted country, access is denied.
  4. Blacklist Management: The script maintains a local blacklist and blocks any previously flagged IPs to avoid wasting api calls and fetching the github lists over and over again.
  5. Visit Limit Enforcement: It tracks visits per IP . If an IP exceeds five visits, it is blacklisted.
  6. Redirection & Blog Page: If an IP is blocked, the user is redirected to a static blog page about meme coins and airdrops. Otherwise, they are redirected to an external site.
I wanna launch ads again but I want to know if that is enough.
I am open to suggestions or any ideas since this is my first time cloaking.

Thank you
 
Advertise on BHW
Instead of relying only on IPs and User-Agents, consider device fingerprinting using JavaScript e.g., canvas fingerprinting, WebRTC leak detection, remember to avoid linking personal accounts and use aged BM accounts with good history.
 
henki said:
Instead of relying only on IPs and User-Agents, consider device fingerprinting using JavaScript e.g., canvas fingerprinting, WebRTC leak detection, remember to avoid linking personal accounts and use aged BM accounts with good history.
Click to expand...

Good advice here
 
henki said:
Instead of relying only on IPs and User-Agents, consider device fingerprinting using JavaScript e.g., canvas fingerprinting, WebRTC leak detection, remember to avoid linking personal accounts and use aged BM accounts with good history.
Click to expand...
thank u
I'll do that
 
welax0x said:
I want to run crypto related ads on Facebook but my ads always get rejected.
I found out about cloaking and decided to make my own script.
So far my script blocks unwanted visitors based on IP addresses, user agents, VPN usage, and geographic location.
  1. IP Blocking: It checks the visitor's IP address against various external bots lists hosted on GitHub.
  2. User-Agent Filtering: It examines the user's browser user-agent string to detect bots, crawlers, and scrapers.
  3. VPN & Country Restriction: It determines if the visitor is using a VPN or if their country is not in the allowed list (US for example). If the IP is flagged as a VPN or comes from a restricted country, access is denied.
  4. Blacklist Management: The script maintains a local blacklist and blocks any previously flagged IPs to avoid wasting api calls and fetching the github lists over and over again.
  5. Visit Limit Enforcement: It tracks visits per IP . If an IP exceeds five visits, it is blacklisted.
  6. Redirection & Blog Page: If an IP is blocked, the user is redirected to a static blog page about meme coins and airdrops. Otherwise, they are redirected to an external site.
I wanna launch ads again but I want to know if that is enough.
I am open to suggestions or any ideas since this is my first time cloaking.

Thank you
Click to expand...
Your setup is solid, but Facebook’s AI is pretty advanced, and they also analyze post-click behavior. You might want to add JavaScript-based fingerprinting to detect bots more effectively. Also, consider dynamic cloaking where the real page loads only for organic traffic first before showing ads. Have you tested different pre-landers to see what gets flagged?
 
Might wanna add JS-based bot detection too, some crawlers bypass IP/User-Agent checks easy
 
welax0x said:
I want to run crypto related ads on Facebook but my ads always get rejected.
I found out about cloaking and decided to make my own script.
So far my script blocks unwanted visitors based on IP addresses, user agents, VPN usage, and geographic location.
  1. IP Blocking: It checks the visitor's IP address against various external bots lists hosted on GitHub.
  2. User-Agent Filtering: It examines the user's browser user-agent string to detect bots, crawlers, and scrapers.
  3. VPN & Country Restriction: It determines if the visitor is using a VPN or if their country is not in the allowed list (US for example). If the IP is flagged as a VPN or comes from a restricted country, access is denied.
  4. Blacklist Management: The script maintains a local blacklist and blocks any previously flagged IPs to avoid wasting api calls and fetching the github lists over and over again.
  5. Visit Limit Enforcement: It tracks visits per IP . If an IP exceeds five visits, it is blacklisted.
  6. Redirection & Blog Page: If an IP is blocked, the user is redirected to a static blog page about meme coins and airdrops. Otherwise, they are redirected to an external site.
I wanna launch ads again but I want to know if that is enough.
I am open to suggestions or any ideas since this is my first time cloaking.

Thank you
Click to expand...
I will recommend you a cloaking ads that will suite the ads you want to run and your wont be suspended
 
I can’t advise on cloaking since it violates Facebook's ad policies and can result in permanent ad account bans or legal action. Instead, consider Facebook's approved crypto ad guidelines by obtaining proper authorization and running ads within their compliance framework.

If you're facing rejection, try:

Getting pre-approval Apply for Facebook’s crypto ad authorization based on their rules.
Adjusting ad copy & landing pages Avoid misleading claims and ensure transparency.
Using alternative ad platforms Consider Google Ads (if compliant), Twitter X, or crypto specific networks like Coinzilla or Bitmedia.
Let me know if you need help with compliant ad strategies!

 
boldslice said:
Your setup is solid, but Facebook’s AI is pretty advanced, and they also analyze post-click behavior. You might want to add JavaScript-based fingerprinting to detect bots more effectively. Also, consider dynamic cloaking where the real page loads only for organic traffic first before showing ads. Have you tested different pre-landers to see what gets flagged?
Click to expand...
I have added fingerprints detection and blacklisting. thank u

Have you tested different pre-landers to see what gets flagged?
Click to expand...
I did, and the facebook bots gets blacklisted. usually ipv6 addresses
 
welax0x said:
I want to run crypto related ads on Facebook but my ads always get rejected.
I found out about cloaking and decided to make my own script.
So far my script blocks unwanted visitors based on IP addresses, user agents, VPN usage, and geographic location.
  1. IP Blocking: It checks the visitor's IP address against various external bots lists hosted on GitHub.
  2. User-Agent Filtering: It examines the user's browser user-agent string to detect bots, crawlers, and scrapers.
  3. VPN & Country Restriction: It determines if the visitor is using a VPN or if their country is not in the allowed list (US for example). If the IP is flagged as a VPN or comes from a restricted country, access is denied.
  4. Blacklist Management: The script maintains a local blacklist and blocks any previously flagged IPs to avoid wasting api calls and fetching the github lists over and over again.
  5. Visit Limit Enforcement: It tracks visits per IP . If an IP exceeds five visits, it is blacklisted.
  6. Redirection & Blog Page: If an IP is blocked, the user is redirected to a static blog page about meme coins and airdrops. Otherwise, they are redirected to an external site.
I wanna launch ads again but I want to know if that is enough.
I am open to suggestions or any ideas since this is my first time cloaking.

Thank you
Click to expand...
If you really want your ads to get approved! You will need to bypass it so that it will never be seen by the bot moderator and it will be successful approved
 
You need to redirect the control ip addresses of Facebook bots to another site.
 
1. On fb, the post-click analysis of users' behaviour is a tough obstacle in cloaking.
2. Fingerprinting by using javascript is an weak approach, as any reference to client side scripting can be detected on the spot. The argument that some are using js successfully is not valid, because there are many reasons for which a campaign is not bsnned right away.
A js script should be cloaked but in this case won't be possible to use it as a first line of defense.
For instance, I have been able to hide the whole meta tag that calls to the js only on wp context, seeing that wp uses the LOOP function. But even so a preloader is needed (a complimentary pugin is used on this purpose). However, this way the whole cloaking leaves no traces. If a remote client passes the original filters, js script is loaded, but even in this case the js code is not suspicious, it only does some basic checks on client.
The bottom line: there is no silver bullet for cloaking but different solutions different scenarios. Even the ultra-hyped claims about using machine learning are not entirely true, because in this case the ML dataframe becomes a sort of weighed DB, which slows down a lot the script speed.
 
Have you tried reversing what your competitors are doing? Any clues there?
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top