1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

[Help] What Makes A Referer Leak?

Discussion in 'Black Hat SEO' started by MrBeastsOnToast, Nov 6, 2012.

  1. MrBeastsOnToast

    MrBeastsOnToast Jr. VIP Jr. VIP

    Dec 17, 2011
    Likes Received:
    The Internetz
    Im trying to cloak my refferer and want to make it as tight as possible...
    I need to know something. What makes them leak?

    Is it literately browser types and versions - some work / some don't? Or are there other factors that can make it leak (Bad requests etc)?

    Basically what i want to code is this (>>> = Redirects):

    Shady Traffic >>> CPA Redirector >>> PHP Script that will check referer 


    If (Referer Cloaked OK) >>> 2nd CPA Redirector >>> Offer

    Else If (Referer Leaked) >>> Go to random safe page

    But what id like to know is that if the CPA Redirector works the first time, will it always work the second time based on my psuedo code above? basically letting me check the users system allows cloaking before sending the traffic on.
  2. pj413

    pj413 Regular Member

    Mar 5, 2009
    Likes Received:
    You're on the right track. A few things I'd change to your setup.

    First of all, don't use a PHP redirect. PHP redirects have a higher likelihood of leaking. Use a double meta refresh redirect. In other words, send the traffic to one domain that has a meta refresh redirect to a second completely different domain (not a different page on the same domain.) The second page also meta refreshes, sending the traffic to the CPA link. Double meta redirects are the safest way to scrub referrer data.

    Second thing, yes, your if else loop looks good. But instead of "if referer leaked, send to safe page" just create a loop instead. The loop says:
    If Referrer == Blank, Send traffic to CPA
    If Referrer != Blank, Meta refresh to a page on another domain that bounces them back to this page. Repeat loop.

    In other words, the code checks for a referrer. If there isn't one, the traffic is passed to the offer. If there IS a referrer, instead of wasting the traffic you send them through another refresh to clear the referrer. They come back, they're checked for referrer data again. If they're clear, they're sent on, otherwise they go through the loop again. You can code a max to the loop, maybe 3x or something like that. This way you don't waste traffic. Generally one double meta refresh redirect will do the job, but the PHP script can be there to help make extra sure.
  3. Blackman75

    Blackman75 Registered Member

    Oct 10, 2012
    Likes Received:
    Helpful thread. Thanks guys. Unfortunately I am a bit of a noob to faking or blanking referrers. A few questions if I may.

    1. Is this a method to fake or blank?

    2. Isn't it better to fake as the CPA will see a legit website where the traffic is supposedly coming from and if its blanked they will see no referer and get suspicious?

    3. Is the above quote saying that the CPA Redirector plugin can leak and to use some sort of manual coding method? Or is the coding mentioned here something to be used in conjunction with the CPA Redirector by Brad?

    4. With any method of faking the referer or blanking, if you show the traffic as coming from ABCsite.com, or if its blanked and they ask you where its coming from and you say ABCsite.com, then couldn't they do a quick Google search and see that you can't be getting any traffic since you aren't on the first page or two of Google or don't have an ad there purchased using Google adwords? Or could you just say for that campaign you drive traffic by a mailing list?

    I may be misunderstanding the whole Google adwords thing. From what I have been reading about PPC, which is mostly how CPA's think we are driving traffic to our sites, you purchase certain adwords and that advertises you on the first pages of Google when someone searches for a certain keyword. Sorry for the noob questions, I hope they make sense and thanks in advance for the help.

    UPDATE: I did some more research and I think I understand PPC a bit better. I was going to edit out the bit about PPC in my post but just in case someone else is wondering the same. Basically PPC ads can appear anywhere on any site that is related to your purchased keywords in order to drive traffic to your site. Am I correct?
    Last edited: Nov 14, 2012