How to bypass cloaking? All methods

The number of SPY services is through the roof now. It seems like you can just grab any of them and expose combinations. But spying ads is one thing, while getting through to the pre-lander, bypassing protection as a non-target GEO user, is another. Luckily, arbitrageurs are clever people, always having a couple of life hacks up their sleeve.

 

Below, we'll check out different methods for bypassing cloaking that work in most cases. But first, a brief theoretical overview of how cloaking works. Let's go!

 

How does cloaking work?

Different services use various mechanisms, but the general scheme is as follows:

 

• The webmaster selects traffic filtering parameters. For example, they may choose not to allow users from other countries, desktop users, direct entries from the browser address bar, VPN users, bots, etc.
• As a result, a landing page link is created that filters traffic. Target users are directed to the sales page, while non-target users are sent to a white page (fake landing page) or simply to a placeholder page.

 

Some cloaking services offer filtering for VPN traffic and SPY services. In this case, if you access a site from a SPY service or have a VPN enabled, you’ll be immediately redirected to a placeholder page.

 

Therefore, to bypass cloaking, you need to either meet all the filtering parameters or find the landing page link with the right tags/parameters set by the fellow arbitrageur to get to the pre-lander. 

Let's look at all the ways to bypass cloaking by parameters.

 

Your own account farm for the target GEO

This is a great option if you are working with 1-3 GEOs, as this method is very labor-intensive but also the most reliable since the cloaking system sees you as a target user who saw the ad on social media and clicked on it. Therefore, it allows access.

 

An account farm is created in three steps:

 

• Creating accounts. This must be done manually, not just by purchasing them. This is done in an antidetect profile where relevant GEO proxies are already connected. The account is registered using a virtual number. To create the farm, you can test the Vision browser, where you can distribute the accounts for farming and launching ads into different folders. There is a one-week trial period, which is enough to test and farm a couple of accounts.

• Farming. After creating, we perform regular actions in the FB profile and spend the minimum amount of time on them. It's enough to dedicate 10-15 minutes per day.
• Accumulating cookies based on thematic queries. Simultaneously, we search for queries related to the theme, visit relevant pages, and gather thematic cookies. After a while, advertisements related to these queries should start appearing in the profile.

 

Crypto ads after a few days of searching for crypto-related topics on Google. 

☝️ Next, you just need to click more often on such ads, and they will appear more and more in your feed.

 

Searching for ads can be simplified using the Ad Finder plugin for Google Chrome.

The plugin allows filtering out only the advertising ads in the feed, automatically scrolling the feed (which helps in farming), and saving ads.

Advantages of FB account farm:

 

• When you click on links directly from FB, the cloaking system directs you to the actual landing page;
• The more you click on themed ads, the more they appear in your profile;
• By analyzing comments and likes, it’s easy to determine how long the ad has been running and its success rate (although these metrics can be manipulated).

 

Moreover, there’s no need to perform any “tricks” with the link in the ad — just click on it and you’re already on the landing page.

 

The main drawback of this method is the limitation in GEO and themes. To get ads for a large number of GEOs and themes, you’ll need to maintain a vast number of accounts. For instance, if you’re spying two GEOs and two themes, you’ll already need to create four accounts.

 

Searching through a loophole in Facebook search

This is done in two steps: first, we look for ads in a spy tool or the FB library, and then we find the same ads through a search in Facebook itself.

 

For example, let’s find ads in the FB library using the query “weight loss”.

 

As we can see, all the links have the domain "v3.ketogo.app." Now, we enter this domain into the search and find ads related to it.

 

There are many ads with this domain, targeting different GEOs. However, the ads for the countries set by the proxy appear first. Now you can directly go to the landing page from the ad.

 

As we can see, it opened without any issues. However, the FB library offers limited tools for searching and filtering ads. Spy services have a much better toolkit for this purpose. One of the most well-known services is Adheart. We mention it because the guys initially had detailed filtering options in their database and recently noticed that the spy service underwent a redesign. Here are a couple of screenshots of the interface:

 

In the same way, we look for this ad on Facebook and go to the landing page.

 

To get through cloaking to the landing page, the FB account must at least be opened through a proxy of the corresponding country. Moreover, it needs to rest in a new browser profile; otherwise, the ad might not appear in the search. Even if it does show up, the filter might block you. If the cloaking filter still doesn't let you through, try the third method.

 

Finding a link to bypass cloaking

A method shared long ago by Yellow Web. And it works flawlessly! Let's consider it using an example of a potency enhancer. First, copy the advertising link to paste into the decoder.

 

We go to urldecoder.org and decode this link.

 

In the result, we see the cloaking code — &cobeklo=636823687.

 

Now copy the main domain up to "?utm_campaign" and combine it with the cloaking identifier code.

 

As a result, the page opens.

 

As we can see, it worked. We landed on the Erogan landing page — a well-known potency enhancement product.

 

How to protect your combination from being exposed?

Considering the methods mentioned above — you can't. With 100% certainty, you won't be able to defend against account farms and ad searches. However, most arbitrageurs don't use such advanced approaches, so it's quite realistic to protect yourself from them. This is sufficient to prevent our combination from being massively stolen.

Take any cloaking service and set up the following filters:

 

• Exclude traffic from irrelevant GEOs and devices;
• Block visits from VPNs;
• Prevent direct visits from the browser address bar.

 

These settings are sufficient to filter out many arbitrageurs and thus protect your combination from being widely replicated. Occasionally, someone might detect it, but it won't significantly impact your conversion rates.

 

In conclusion

Each of these methods requires significant time investment and understanding of how cloaking works, which means the mass arbitrage community is unlikely to adopt them widely. In our view, the best approach is to combine traditional spying with independent creation of combinations. Managers from affiliate networks can provide valuable assistance in selecting offers, especially if you establish a good relationship with them. Moreover, they can suggest lesser-known but profitable offers that can help you reap the rewards.