Facebook cookie stuffing or something BH... (8)
Hi Guys/girls,
So like a lot of guys i start a joint venture with someone but call me paranoid but if i met you on the internet i dont trust you! 
So is it possible that if my JV partner has access to my safe page and LP that he can steal conversions/clicks from me?
I dont see a lot of clicks missing from facebook (he doesnt have access to that) to my safe page and LP but is it possible that after that something cookie stuffiing kinda thing happens that he redirects clicks from the LP to his offer and leave some for me sometimes (so i dont get suspicious).
How does this shit works?
PS i am talking about cookie stuffing because i found info on that area but maybe there are other possibilities also.
If I understood this right:
FB traffic -> Your lander -> offer, and you wonder if he sends a % of traffic to his offer?
If he owns a step between your lander and the offer, i.e he owns the redirect link and it goes via php on, then he can set up something, and the only way to know would be to look at his php code.
Otherwise....
He has done something to your actual LP it should be pretty obvious, if you see obfuscated javascript in the code, that you didn't put there that would be a red flag. Or if it's not obfuscated, do a search for "http" or "www." or anything that might be in his url in all the files (.css, .js, .html) and see if you find something suspicious.
If he does cookie stuffing (and he can't control anything but the lander code), then the code for stuffing his cookie will be somewhere in your lander - which would be a dumb move because it's almost impossible to hide it well, unless the lander is 1M lines of code and has 50,000 outgoing links.
Originally Posted by ysekse
Originally Posted by ysekse
Originally Posted by ysekse
Yeah the only way is for him to put some code in his lander but it should be easy to find. If you're still feeling paranoid also check the external libraries that aren't publicly hosted, for example if he's using a custom jquery.min.js, the code COULD be embedded in there... Easiest way to spot stuff there is compare the file size of the jquery.min.js to the file size of the same jquery version hosted on google CDN.
Unless he's extremely clever and has put in redirect code AND removed the same amount of characters of the original code without breaking the LP, the file will be bigger. Or if he owns a domain that looks almost like google cdn linking to a malicious library, like:
https://ajax.googleapis.com/ajax/lib.../jquery.min.js
https://ajax.google-apis.com/ajax/li.../jquery.min.js
https://ajax-googleapis.com/ajax/lib.../jquery.min.js
but no matter what you do it's impossible to hide this, you could also try to do 100 manual clickthroughs with a custom token value and check if it shows up 100x on the other end 
Originally Posted by imdutch
Originally Posted by ysekse
Unless he's extremely clever and has put in redirect code AND removed the same amount of characters of the original code without breaking the LP, the file will be bigger. Or if he owns a domain that looks almost like google cdn linking to a malicious library, like:
https://ajax.googleapis.com/ajax/lib.../jquery.min.js
https://ajax.google-apis.com/ajax/li.../jquery.min.js
https://ajax-googleapis.com/ajax/lib.../jquery.min.js
but no matter what you do it's impossible to hide this, you could also try to do 100 manual clickthroughs with a custom token value and check if it shows up 100x on the other end
Originally Posted by spartanen
So like a lot of guys i start a joint venture with someone but call me paranoid but if i met you on the internet i dont trust you!
So is it possible that if my JV partner has access to my safe page and LP that he can steal conversions/clicks from me?
I dont see a lot of clicks missing from facebook (he doesnt have access to that) to my safe page and LP but is it possible that after that something cookie stuffiing kinda thing happens that he redirects clicks from the LP to his offer and leave some for me sometimes (so i dont get suspicious).
How does this shit works?
PS i am talking about cookie stuffing because i found info on that area but maybe there are other possibilities also.
Has your safe page got any PHP code on it? Has it got any JavaScript you don't understand?
Isolate the CTA button and look around that for PHP code / element names. Then look at the JS code for onclick events / links / obfuscated code.
Have a programmer quickly scan the source code if it puts your paranoia to rest.
Home > Paid Traffic Sources > Facebook & Instagram