Got the lander, how do I clean it? (17)

Lets say the lander is flawless with scripts, images, etc.

Before launch, I am a bit worried that one of these files might be a malicious backdoor script that is going to steal a % of my traffic!

How does a noob go about cleaning his or her landers?

* Please use Adplexity as a reference if possible *

I need to know this as well. I know how to remove/exchange and change images and the tracking code. But I haven't figured out how to take away the secret code that redirects a certain percentage of the traffic to another affiliate .

its difficult to tell without seeing the code, you filthy thieves, but you could start by searching the source code for stuff like ...
".location"
".history"
".navigate"

See here: http://stackoverflow.com/a/21396837

This is generally how a redirect is done with javascript.

After a while you just know what to look for, as well as knowing some coding helps.
Do CTRL+F and type in http and look at some of the links that are there, replace all the ones that arent yours.
Also replace the JS files like jquery with one off of a CDN.
There can also be code in other JS files and CSS files.

These are only a few steps to take...However, the code be obsfucated as well, so ctrl+f won't find the links and you might not notice it unless you know what to look for....

On chrome load the lander, press F12, and click sources...Check if its making any calls to any external sites

Originally Posted by barman

its difficult to tell without seeing the code, you filthy thieves, but you could start by searching the source code for stuff like ...
".location"
".history"
".navigate"

See here: http://stackoverflow.com/a/21396837

This is generally how a redirect is done with javascript.

Originally Posted by racket

After a while you just know what to look for, as well as knowing some coding helps.
Do CTRL+F and type in http and look at some of the links that are there, replace all the ones that arent yours.
Also replace the JS files like jquery with one off of a CDN.
There can also be code in other JS files and CSS files.

These are only a few steps to take...However, the code be obsfucated as well, so ctrl+f won't find the links and you might not notice it unless you know what to look for....

On chrome load the lander, press F12, and click sources...Check if its making any calls to any external sites

Will update this when I come across a lander that's worth sharing.

This code produces a pic.. is it malicious

<img style="padding-top:10px;" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAJYAAAA1CAMAAAC UV+KQAAACKFBMVEUAAAAPDQ4MDRUQDxcAGw8DGjYwEgoAdkISV 8AOR54RVb2BKx8JM3IGFzITZeEBe0YQSJ0KMW4HJFEMIUJCMAI HGzgHIksNLmAHIk0pGgXIPSoNS6gMQZAKOoVpIRdcQgIEGjs2E QwRY+ERWskJLWQWaegMSqiZMyWMLB9yJRtTGxM0TkcxEAsfc/LMPSkOWMkRXdCpMSISU7asfwWEYgdxUQNbHBNNGxRHGBEVbfER Z+oUa+8cbegRX9cUY9vUnAqYawB0IxgKMWtDFxH/xxbdRzLSPCkPYuD6swHSSjjwrQEAdj2wNSWkMSGOZwNyJBro8f 7kVUP9wBHRTjwbad7kqAe8PCq6Py+mPjCVNikNOn1aQQNPOQL/whb9ugDkVkUjdfDVRTDdUkEqeO+5NSQdZtTbngRHjPTKkwesOC nBjQe3gwNNGxTk5/HZQiwAkEzyuhQAf0IQWceZLB4YQoMAOB4InVwDkVMobdZGiOwA aDYgXbpDe88CUi8/ZqDDTT0HjlNAcrwSaewSbPUYcvr/uAIAnFgYbu8QZugTbvnVQCrYQy0Ua+/bRjAhe/8AmVUFp2AAl1PdQCv/uwIBoFsCo13oSTP/vgIdcvDrV0MQZ+3eSDTYPyvSPSkXc/4fdPXcTTjgQy3/wgETb/0YcPQQafIZdv/2X0vlRC4iefsAlFD/wQoddvvjUD3wTzrjSTP/xgHrTTj/yAv/tADnUT3/vBD/zRT/1RqJgXA6AAAAgnRSTlMACxEXKzckx7+VtX9oIuPHjmBGLy8nUE xAHtyjiXxiTkAw6sJT6rqcj29QKyny6NbLu6yWb1xZRT359PPk 3tXBjIpaN/739vHu5OLQxKyAeBT59Nva1MrAppJzRjn+9u/q6ubfz8rHw7Oxq6JMCfPt49XLpmpK8NLAsaahmGhfz7h9b5jEa QAACDJJREFUWMPVmPlbEkEYgGeXJBAkUMwD0RTLIy3vq7S87bT 7vu/7vu92l2QRsTBBTgVFJS3zyP69ZpZrd6Gw59GHen/ah4HhnW++75sB8F+Apbx59fwq5Pmr9282gpUC2xgALIVklYweH 6cho6M06SU2yxPASpDxdPADYvA1iE3+ZaPReEisSE9ISG/J0tRTPWMUrckHyw7+7smTj4glWKUmGn1GUTLrhawtNEGQlCZ9u bUwAZ6ArJ4uIVTnfL5zLTxTEUUQhKsMA8vOqo8fBz+uAbF4ZBz 2HUoBfORjBF0mgA/x0VIYh4fPpYJIRK4VsEJag4OxtdJ9w0O+ZBBNq2lFrJDW51hau Gx4yCiOOpSVBFaEVZ9ja8mNQ8OlMaKy7FqfY2mlDg8NTYvBisP XGvyzlngaasVoTiug9eHPWnjeWM+wDFv6ydF6q7i2JOr7Bcqcn JNKLNpRm7w2DAa1PvC1sFzutGlUT8904hKdhJK31omJCev+gwV 1fKeqbad//vy52HbvRg53JK2iFB5r0xRifHz8BIjUqjt21j/t8ZJgwiMt+dIOs+P7J84e6+4u2GH9al04lsEeq7r3s+3a3qrKw 22n29q2KcMDKSJjqbxFoSqF3zPWKHqgAIzWB5ZWxrGJiaOSouM H4bT7iwDDM7KnB60gNq0HJ6wSnPGTfB0ZWdgRDljGtsXFSkYTq zpw+sfpA9WhUJUaLwsYvSZ49h9CDYev1Xph4kKtf9kLcFoJerx 9kYBaUhCburPW/bUgQDb0GmlvDe7tvcXFquDQqQM/fvxoC3illPpKUwO7LBsjqCY8Qiv3rPWCEPgpQMtFX7IPabmWoC W8YLUWgRASc1+fPRP3p+vhubmb4aHqOeh1wL+Pl32+itB1joLf JA5pfV7t//BBqzU7lCbn4axHkNY5pKWOrXXU+nUHxqqcTHtv78xxgKhcnDog BGGuTWm1U9uYLTQOGcMJkgi96pN4WhLOvEfsffbZ1kC0qNjdtP jbyLcCwCLb3Nvb245slHNTc1fYQ6emtNDrJHxS+YaMCk7RuxRc LWzH14VjoWAVtZvtu7NxJrcIghLFDtbCyLciTqPZ1AfDJUHBmr PMVQI2V1C4bsCHJnjaSsMfQdmVFdDq92vdgsstDCRZ4flvOwpz A5VoIIiePCxWZn21j8zWADYFbr2+bzcA2M4py9xezlAVClcXBv D1UCsLsHYxqNUf1Cqctc8iLazm6Oy3IzBQAV6SKFyRhw+2LkQy Dmpm7XaeVs2kXq/fhAOlZ2DgO1dLaYFaA0oggFrDrJ2QQy21X6u//wOjdd1sNxeAEhio9oJW9sWUhlqRyYVrXDRNkwbIaCLOFJ45G7A p6YVazhKQ8x1qsTcRBRBqWXIAdgheA1iXEzXUSuZq7Z6BBX0dB UrAvUAYoFbPepwXK3njZkgnHDOgCm9GWhLATS6HU+/MBdVQy3MDcNg2wGiBiukhdinKqTEZFqHVZ2+HRxmfB8wu8vu8P 9k2kDodmRDQmtkDOFxyOJ1OIaNlOcwdumnRziOttHF44mwNLbl szJUPGK1P/Z/8WuVQy1wMIpGOMuESgEiQFmFDWkXmXhhsbmGUm5wot056YB6dy eAMbbfMz2uVKMmn4YkbbKj5lCsL8LQKZmA9F4JIMBnaRlr1Gy0 do1U70wu9cvlajnIAMs7ARPJU87W0O9EiBFspeLapmHilbYFWf C3U/vrO4yASBUVAKMVvtYJdyizhb6KpCCWSBWrd4G3i/ID/OErSjFM91FaxVC2i6ltASOtTQEvYDrvypAREIZFGXlvSo2sRSA sUolWxdhGZ6p0daOurPDBc3F28AlPrVOC5JXF9/RhFUWOUFERqgXI39LojBJEIGklUcVG8NniDWsI7MFyT7BZRZ3K aJP52MADDVcmesGt+4Bqr2aSmiClU7WytL/1+rdpJh17vPhKtn6euZ7zqpb/XAt1mvb53E6swHjocl/yT5TDhYl399lq0Xdz1V9BwO5LCWl++BLXAHtSW3UcF0byamH2k K1KjaYU/7r4eGrrlcGwqCWb4d1iMh0PBUHZptScj84RMxNhanwJagkw38s oMdYncmtuhOKtIVI9kgziB3epFNiblGbA9MNzuPYFVFXeYMnPD leeByXQlEKBTOz1dOfwu5EKrLguu+nE/9Lr72K8pRF5Oh3t3UatQmJtdfold8GllNEnoCJIsEyuS4V9c+d KsxDybjfTmpYSufnfcDlNmd65AWLzHbXrIDnv1To92oGv7KUHG yUqLB97l+WhItOr1aQCRcLf/E6T/7v3HTLyuu016p9NhcnR0mCbLMwCH/MQGkjTYDCQ6CslRiFcmUifjrGOwMNM0aZ7UmyY7Htbxymbv4QH Pd3Q8Wq7xQpWUr1ZpZBSTvqQUvffF/V0M919ggdiXd5gY9LtrQARJLWJRY15nZ2de42aRSp2fElEfWF1 2c3NzUW20BFVW792+vSongzuluowed21p1Gx4wKTvqAJERVjc3 dzcXVMCfgOGCwQCHAPLAi7f4hrVSFOYiKvrUfrWJ4A4g36EkbI 0ECRdRqJ6BHEmCbZDWRL7hSaDjmhIAvFFRBJ0C1c0z6Yjk0FcS ScJG/9HgpTUkWtBXMmiCcNm/r426Mh0EFdUJGFo5EVL0GlrEIA4grTgoZHAq00DWQHii5TW6Qy 8diAnDfHuWzgsOx0pBizSCFoN4k0+TUAvTaghYGoDLQfxR9GAf gt4N8M7ybpkhVg22ikF/wIpqgavTUd4vV6bd5TOyxKAf4TURy8vb4UcEsnTcPBPcXvfvn3 gr/gFtPjxV6+wbjIAAAAASUVORK5CYII=">

This is an embedded PNG image.
If you want to change it just replace it by linking another image from the LP's folder or CDN.
Example: <img style="padding-top:10px;" src="imagename.png">

Originally Posted by platinum

This is an embedded PNG image.
If you want to change it just replace it by linking another image from the LP's folder or CDN.
Example: <img style="padding-top:10px;" src="imagename.png">

Originally Posted by nirvana

I have a lander and it had this code. Could that code have malicious code in it?

Originally Posted by platinum

I doubt it may have one, but you can replace it in seconds.
Or you can generate your own image similar code and embed it like this.

It's a google logo. Check here
But be aware that some traffic sources won't accept your landing page if it holds a logo like this, and for any malware related concern, just replace it

Originally Posted by platinum

It's a google logo. Check here
But be aware that some traffic sources won't accept your landing page if it holds a logo like this, and for any malware related concern, just replace it

Questions please:



Does this qualify for the .location you were referring to? Does this mean it's a malicious 100% or just might be and better to cut out?
DO I need to cut out the whole script as seen in the screenshot?

And:
"Also replace the JS files like jquery with one off of a CDN.
There can also be code in other JS files and CSS files."

Sorry but what does this mean? And what do I need to do?

Originally Posted by Micha

Questions please:

Does this qualify for the .location you were referring to? Does this mean it's a malicious 100% or just might be and better to cut out?

this is an image .
okay put this in your browser address bar

<img style="padding-top:10px;" src="imagename.png">
like what platinum told you

good luck with that