[GET] Cloaker Script 2013

I thought it would be something like that, but it isn't working.

For example, my IP is: 111.111.111.50

I've put on the ban list: 111.111.111.0/51
And I'm in fact banned, I get redirected to yahoo news.

But when I put this IP instead: 111.111.111.0/49 I shouldn't be banned, because my IP is 111.111.111.50
The thing is that I'm banned even with 0/49, and the only way to get unbanned is to delete the IP completely on the ban list.

Do you think I'm doing something wrong?

lel... nothing like googling what's a CIDR format IP: http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing

Anyway, if someone wants the Facebook IP blocks:

'64.15.0.0/16','65.201.0.0/16','65.204.0.0/16','66.92.0.0/16','66.93.0.0/16','66.199.0.0/16','66.220.0.0/16','67.200.0.0/16','69.63.0.0/16','69.171.0.0/16','74.119.0.0/16','74.125.0.0/16','165.225.0.0/16'

Click to expand...

If you know some other Facebook IP block that I didn't mentioned, please post it here.

Do not complicate use 111.111.111.0/24 , that covers 111.111.111.0 - 111.111.111.254 and that is a usual range of home routers, if that is a case.

Not sure what you are trying to accomplish with FB ranges but if is for blocking them to see something, maybe you should try another approach. I strongly believe that they are not so stupid to do checking from their own IP's, easy to find. They have people all around the world, payed to do a job from home connections for example. Anyway, here is their list

Oh, but they check from those IP ranges, and they also check from 2 specific IP ranges of my country, but I already caught their IP.

When I created ads, I saw that after a couple of minutes, 2 different IP from my country accessed my "money page" from facebook, while my ad wasn't approved, so that could only be some Facebook employees.

Anyway, their IP is already on my blacklist, and if by any chance, tomorrow, when I create my new account, some other IP appear from my country, I'll also block their entire range, and I will keep doing it, until I blocked the entire Facebook worldwide to view my "money site".

Right now, if I knew what was my country IP block range, I would "block" the entire World IP's, besides my country, my ads are just targeted for my country, so that would be no problem for me.

You can do that with .htaccess, but again - facebook geeks are not stupid, they will see that access is not allowed or redirected...

ok, find your country ip's here


and put list in .htaccess


your country will have access, others will be blocked.

how dose it work for site hosted on blogspot .......???

Works like for any other website / blog / web property.

I will not really "block" facebook.

I have 2 websites under the same IP/server.

And when you access a DNS (the URL that I'm advertising on facebook), if you've got Facebook IP, you'll see a fancy page with a "legit" product for sale, if you've got a IP from my country, you'll see my real "money page" with my adult products for sale.

About facebook nerds, I may be able to own then, because my website url are under a DNS, so it's normal to be redirected, I don't think they'll get suspicious about it.

Update:

Well, I've managed to trick them with the cloaking method, and my ad was approved.

BUT, I've made a new paypal account with a new vcc, but I didn't verified the PP account, anyway it's useable to make payments, I've added that paypal account to facebook ads, and they blocked my payments forever saying shit about "suspected fraudulent activity", and after a couple of hours, my ad was approved, but I can't pay for it.

Someone knows what payment method can I use to bypass this block from facebook ads?

Pretty decent scripts with lots of features

Yeah. Few days ago I saw one post about Trust Jacker, figured how it works and made it to work even better than that plugin, feature for "trust jacking" is included so script can make money now. Can not talk a lot about it here since I am selling it, and it is on another forum.

TZ2011,why won't you share it here with all of us,bro?

Thank you. love it

does this work with adwords?

hey man, thanks for the great script.

I cannot get the script to work with cloudflare.

My site is using cloudflare (for IP diversity) and the script just won't forward the traffic, and there's no trace of traffic in the logs either, seems like the script is picking up something and requests just times out. (no redirect)

any idea how I could troubleshoot this?

thanks!

Try to remove all ip's and hosts, I have blocked a lot of cloud servers and providers since human traffic is not coming from there anyway, just bots... I didn't tested it with cloudflare, to be honest, if is not problem in blocked hosts, not sure what else can be since in basic script is doing very simple redirect. Did you tried same script on some other server ? Maybe is just some apostrophe or comma missed, it happens...

okay, I found the problem, I was using OpenDNS's public DNS and reverse lookups were timing out, hence why the host filter wasn't working properly.

I changed the DNS and now the script works and is much faster.

cheers!

Woot killer script

Script updated.

What is new in this update 6.6.2013 :

Added javascript recognition of screen size and browser plugins.Now is easier to detect if someone is faking User Agent.

details:

This is regular log, from my Firefox browser and normal computer

6/6/2013 01:48 PM | UA: Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0 | IP: 186.6.37.247
HOST: 247.37.6.186.f.dyn.codetel.net.do | REFERRER: (empty) | TOR: False | GET DATA: [] | POST DATA: []
Client-side data: OS: Win32 | Screen Resolution: 1525x858 | Installed Plugins: Shockwave Flash, IE Tab plugin, Silverlight Plug-In, Google Update, Shockwave for Director
-----

So, even if I change user agent to looks like I am coming from mobile browser and device, it will still read data from real browser and real device behind. Unfortunately there is no way to get OS details with javascript, but from user agent only and that can be faked. With browser details and screen size, it need extra effort to fake it, effort that bots will not do, of course.

This is faked User Agent visit from mobile device

6/6/2013 01:49 PM | UA: Mozilla/5.0 (X11; U; Linux arm7tdmi; rv:1.8.1.11) Gecko/20071130 Minimo/0.025 | IP: 186.6.37.247
HOST: 247.37.6.186.f.dyn.codetel.net.do | REFERRER: (empty) | TOR: False | GET DATA: [] | POST DATA: []
Client-side data: OS: | Screen Resolution: 1525x858 | Installed Plugins: Shockwave Flash, IE Tab plugin, Silverlight Plug-In, Google Update, Shockwave for Director

real data detected. Good to know.

================================================== =
Just a short reminder how to work with script:

How to use script:

- Open script in good text editor, put your websites (money links), your email account where to receive logs (optional) and check options - with switches true/false you can enable/disable specific functions in script and make it to work just how you want and need.
NOTE: - be careful while editing around links, one missing or added comma, apostrophe or bracket can make error.
- Upload script to your FTP server and send traffic to it , script is currently named june-6.php but you can rename it to somethingelse.php and send traffic from twitter and/or other sources to www.yourthrowawaydomain.com/somethingelse.php

How it works:

- Script is separating traffic by type of visits - mobile users will be redirected to mobile sites and offers, desktop/laptop visitors to regular sites and offers, and bad bots/ip's/hosts will be redirected to safe sites, random news sites
- All you have to do is to send traffic to the script; traffic will be checked for all bad or undesired visits looking in IP / Bot / Host lists in the script. This is database that is good for my needs but if you want something else to allow or redirect from your site, you can remove or add your data.

Functions:

- no-cache headers that are rotating "time in past" data on each visit | prevent from search engines cashing and gives randomness / reduce footprints
- mobile recognition, optional usage (if you don't want to redirect mobile users, switch true to false)
- IP recognition works with ranges (123.123.123.0-123.123.123.255) and / or CIDR (123.123.123.0/24) format
- extensive list of IP's / Bots / Hosts (lists of crawlers, bots and IP's from various forums and sites for tracking bots, botnets, malware domains etc plus my findings)
- logging of Date / Time / User Agent / IP / Host / Tor and Proxy access / GET and POST requests / Screen Resolution, OS, Browser plugins
- logs separated in 3 files: 1. regular desktop visitors, 2. mobile visitors and 3. bots/ip's/hosts | much easier to see number of real visitors
- send logs to hotmail, gmail or domain email by your choice. Timeframe is adjustable, currently default report emailing is set to 6 hours
- option to send visitors coming with specific referrers to safe sites (random news sites)
- option to send visitors coming with specific referrers to specific sites by your choice
- switch to use script with curl fetch OR with classic 301 redirect / Curl will show same domain where script is but other website in it (websites by your choice), 301 redirect is doing full redirect to another domain
- script can erase itself after X hours or days from the server (optional, if you are doing some funny stuff)


Download:


Virus Total scan:

[TABLE="class: cms_table"]
[TR]
[TD]SHA256:[/TD]
[TD]7313dac01d13ea21d076292a856e6975c0aa7b8a3f761010d9 6d9fe7118d99f4[/TD]
[/TR]
[TR]
[TD]File name:[/TD]
[TD]Cloaker Script 2013 - 6.6.2013.zip[/TD]
[/TR]
[TR]
[TD]Detection ratio:[/TD]
[TD="class: cms_table_text-green"] 0 / 44[/TD]
[/TR]
[TR]
[TD]Analysis date:[/TD]
[TD] 2013-06-06 19:47:25 UTC ( 4 minutes ago )[/TD]
[/TR]
[/TABLE]

+ Repped. Thanks for sharing this script!!