Website is getting fraudulent traffic

SaveFiles said:
The issue with this is that it doesn't work through iframe embeds:

View attachment 419588

It actually makes every embed not work. We could not include the embeds as part of the WAF, but then people could still send fake traffic through these embeds.
Click to expand...
Can you use embed, object, or video elements instead of iframe?
 
Advertise on BHW
Zombie Pop said:
Can you use embed, object, or video elements instead of iframe?
Click to expand...
Not sure. Here's an example of our embed code:

<iframe src="https://savefiles.com/e/1738768927081e866d5d35710152c" width="800" height="600" allowfullscreen allowtransparency allow="autoplay" scrolling="no" frameborder="0"></iframe>

Our ad networks are still saying we have bots, which sucks because I'm trying to find the best way to detect this fraud and block it
 
SaveFiles said:
Not sure. Here's an example of our embed code:

<iframe src="https://savefiles.com/e/1738768927081e866d5d35710152c" width="800" height="600" allowfullscreen allowtransparency allow="autoplay" scrolling="no" frameborder="0"></iframe>

Our ad networks are still saying we have bots, which sucks because I'm trying to find the best way to detect this fraud and block it
Click to expand...
Try to find another way to display the video that is more secure and won’t interfere with your web application firewall. That would be my first move.
 
Zombie Pop said:
Try to find another way to display the video that is more secure and won’t interfere with your web application firewall. That would be my first move.
Click to expand...
Well every other large file host such as Streamtape, uses iFrame. So if they can get away with detecting and blocking fraud, so should I
 
SaveFiles said:
Well every other large file host such as Streamtape, uses iFrame. So if they can get away with detecting and blocking fraud, so should I
Click to expand...
Is the issue that your page is being loaded on other websites in iframes?

Have you tried using the X-FRAME-OPTIONS header tag, specifically with DENY, and SAME origin?

Do you have a content security policy header?
 
Zombie Pop said:
Have you tried using the X-FRAME-OPTIONS header tag, specifically with DENY, and SAME origin?
Click to expand...
This x-frame-options I’ve heard about. Was very complicated and I didn’t want to mess anything up. I might have to look into this more
 
You could try Claude ai or chat gpt to help you with deploying the headers. I used to use Claude exclusively for coding, web servers, web dev etc but chat gpt 4o with websearch has stepped it up significantly.

Today I just deployed another bare metal LEMP stack for staging websites on my LAN with dedicated IPs for websites and SSL. ChatGPT only made one mistake, as compared to a year ago when it couldn’t do it at all.

I recommend having a staging site to make changes on and test to ensure there’s no issues before pushing to the production website.
 
SaveFiles said:
Okay, I'm manually going through my Cloudflare and I'm searching top IP's.

I found this one: 45.128.78.194

1739077416128.png



When I go to RapidSeedbox website, they sell rotating residential proxies, which is obviously people sending fake traffic to my website.

Correct?

Now, there is a different ip 104.28.214.161:
1739077471940.png


It has "Hosting" as TRUE. Does this mean it is a bad ip too, and I should block it?
Click to expand...
Try going to WAF => Create rule => Password leaked => Block. See if it works.

I was once attacked by a proxy. You can't block by IP since it changes constantly. WAF has many blocking options; you should take advantage of them.
 
Zombie Pop said:
any thoughts on this firewall rule as of yet?
Click to expand...
1739241350288.png
0 Traffic for that so far. But the Managed Challenge for everyone with a threat score above 1 is good. I'm not sure if this will correlate to better cpms with our ad networks (meaning the fake traffic is blocked)
 
SaveFiles said:
View attachment 419955
0 Traffic for that so far. But the Managed Challenge for everyone with a threat score above 1 is good. I'm not sure if this will correlate to better cpms with our ad networks (meaning the fake traffic is blocked)
Click to expand...
I use public and private proxies quite a bit. Since 2013. I was scratching my head at the statement that proxies are related to data leaks. CF uses their own list of leaked passwords and a third party list of leaked passwords which is the data that is used in relation to the leaked passwords WAF rule. It only contains leaked passwords.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top