Paid traffic recognition
Detects advertising traffic through current Google Ads markers, rotating suffix versions, Sklik identifiers and UTM-based paid sources.
- Google Ads suffix support
- Sklik and Seznam paid markers
- Legacy parameter awareness
Click Fraud Block combines paid-click detection, server-side blocking, bot scoring, range escalation and exportable evidence in one protection layer.
Detects advertising traffic through current Google Ads markers, rotating suffix versions, Sklik identifiers and UTM-based paid sources.
Suspicious requests are handled before the landing page logic needs to run. This reduces dependency on cookies, JavaScript and client-side analytics.
Repeated abuse can escalate from individual IPs to smarter network ranges, including IPv4 /24 and IPv6 /64.
Tracks repeated paid URL markers and suspicious identifier reuse, especially when the same ad URL is hit again and again.
For paid traffic, the system can collect browser client hints and lightweight fingerprint signals to strengthen fraud analysis.
Known hosting and datacenter ranges can be classified more aggressively than normal residential or mobile networks.
Google and Seznam infrastructure can be treated separately from human paid clicks to avoid false positives in replay statistics.
Review blocks, passes, ranges, reasons and export status from a dashboard and a machine-readable blacklist API.
Paid click events are retained for investigation, evidence gathering and comparison against advertising platform data.
| Signal | Purpose | Typical action |
|---|---|---|
| Burst rate | Finds repeated hits in a short time window. | Block IP and record evidence. |
| Paid URL replay | Detects repeated ad URL markers and reused identifiers. | Increase suspicion and trigger range rules. |
| IPv4 /24 | Groups related IPv4 traffic from the same local network block. | Export or block range when evidence is strong. |
| IPv6 /64 | Handles modern mobile and residential IPv6 traffic safely. | Escalate at /64 instead of dangerous /32 blocks. |
| Datacenter CIDR | Identifies server-farm clicks. | Strong bot reason and faster range escalation. |
| Verified crawlers | Keeps infrastructure checks out of human fraud statistics. | Pass and ignore for replay scoring. |