Pop / Pop-underBanner / DisplayWhich ExoClick zones send real traffic?
Not all ExoClick traffic is equal. ValidVisit scores every visit 0–100 and pins it to the exact zone that sent it — so you can tell real humans from bots and invalid clicks, worst zones first.
site / zone in ExoClickThe buyer switches Target Mode to Block and pastes the bad Zone IDs as a comma-separated list (no spaces) via "Bulk Select Zones", choosing per entry to block just that zone or all zones on its site; sites can also be blacklisted account-wide.
ValidVisit reports the device, OS, browser — down to the version — plus the language and ISP behind every flagged visit, and ExoClick supports OS version, browser, language, device type and connection type targeting. The segments we flag are segments you can exclude.
How invalid traffic slips in through ExoClick zones.
ExoClick operates one of the largest open-marketplace adult and mainstream networks, running pop-under, push notification, and display inventory across thousands of publisher sites worldwide. That breadth is its strength and its risk: a pop-under fires on page load or tab open without any explicit user gesture, which means a low-quality publisher can drive automated page loads at scale and let the resulting pops count as ad impressions. Because there is no intent signal baked into the format, the only way to separate legitimate human exposure from scripted volume is to look at the traffic once it lands — at the session level, attributed to the publisher and zone that sent it. ValidVisit integrates with ExoClick's click macros — capturing `{site_id}`, `{zone_id}`, and `{conversions_tracking}` on every event — so that every scored visit maps back to the exact publisher site and zone responsible, not just a campaign-level average you cannot act on.
Pop-under inventory on ExoClick carries a distinct IVT signature that differs from push or display. Because the format triggers without a user click, bad actors can fire pops at volume using scripted tab-open loops or server-side URL cycling — sessions that arrive with no referrer chain, no real browser state, and no subsequent page interaction. ValidVisit pulls together more than 100 independent data points for each visit — covering the network path it travelled, the device on the other end, and the way the visitor actually behaves — and folds them into one 0-100 quality score. Genuine human exposure clears that bar comfortably; scripted pop traffic, even when it routes through residential proxy pools to imitate consumer IPs or spoofs its browser identity, tends to land in the low end of the range and cluster tightly by source. On push notification zones the pattern shifts toward automated subscription followed by high click volume with near-zero engagement depth — sessions that pass referrer checks but share suspiciously uniform timing profiles across many different IPs. Grouping ValidVisit scores by `{zone_id}` and `{site_id}` reveals which specific publisher zones are generating these profiles, giving you the sub-source precision needed to act rather than penalizing an entire campaign.
What to watch on ExoClick
Group your ValidVisit report by {site_id}. If a small number of publisher sites account for a disproportionate share of clicks while producing negligible on-site engagement, that concentration pattern is the clearest indicator of bot-inflated inventory. Legitimate pop traffic distributes across many sites; automated volume tends to cluster on the publisher properties that are easiest to inflate programmatically.
ExoClick's {zone_id} token lets ValidVisit isolate individual ad zones within a publisher site. A zone whose quality scores sit well below your campaign baseline while the same publisher's other zones look clean is a common pattern in open-marketplace pop networks — one abusive placement inside an otherwise acceptable site. Those zones are candidates for manual exclusion at the campaign level without touching the rest of your publisher mix.
Pop traffic is especially exposed to server-side bots because no user gesture is required to trigger the ad. Track how each {site_id} scores against the rest of your mix, watching for publishers whose sessions consistently fall into the low end of the 0-100 range. A property that records plenty of clicks yet almost none that read as a real person browsing points to scripted page-load abuse — the URL was fetched, but nobody ever actually engaged with the landing page.
Residential proxy pools are a common cover for ExoClick pop bot traffic because they route automated requests through consumer IP ranges. ValidVisit's scoring weighs the network path each click took as one of its many inputs, so this kind of routing shows up in the quality score. When a single {site_id} generates a concentrated share of low-scoring traffic from a narrow band of sources, the pattern points to coordinated source abuse rather than organic geographic spread.
Pinpoint the bot publishers & placements in ExoClick.
ExoClick itself isn't the problem — bots and invalid traffic concentrate in a handful of its sub-sources: the publisher, site or zone, and the placement or widget within it. So we roll the score up by those ExoClick tokens, not by creative (which says nothing about whether a click was human).
Bought as one ExoClick line, your spend is a single number. Scored per sub-source it runs from 85 down to 18 — the worst is nearly all bots. That’s the leak a blended average hides.
ExoClick traffic scored 0–100 per sub-source, worst first — down to the placement you buy.
Bot / invalid-traffic score broken down by:
- Site ID
{site_id}The ID number of the site where the ad is displayed.
Bot / invalid-traffic score broken down by:
- Zone ID
{zone_id}The ID of the ad zone where the ad is displayed (the publisher's specific ad placement/slot).
Per-click id: ExoClick passes a unique click id, so we also run velocity, deduplication and repeat-source checks on every visit.
Compare bot & invalid-traffic breakdown across every ad network →See your own ExoClick sub-sources scored this way.
How ValidVisit attributes ExoClick traffic
Each ExoClick macro maps to a normalized parameter, so every scored click is pinned to the right campaign, creative and publisher.
https://yoursite.com/landing?utm_source=exoclick&utm_medium=pop&vv_campaign_id={campaign_id}&vv_click_id={conversions_tracking}&vv_creative_id={variation_id}&vv_placement_id={zone_id}&vv_publisher_id={site_id}&vv_keyword={keyword}| Token | ExoClick macro | Maps to | Identifies |
|---|---|---|---|
| Campaign ID | {campaign_id} | campaign_id | campaign |
| Conversion Tracking String (Click ID) | {conversions_tracking} | click_id | click |
| Variation ID (Creative/Banner) | {variation_id} | creative_id | creative |
| Zone ID | {zone_id} | placement_id | placement |
| Site ID | {site_id} | publisher_id | publisher |
| Keyword | {keyword} | keyword | keyword |
- ExoClick macro
{campaign_id}- Maps to
- campaign_id
- Identifies
- campaign
- ExoClick macro
{conversions_tracking}- Maps to
- click_id
- Identifies
- click
- ExoClick macro
{variation_id}- Maps to
- creative_id
- Identifies
- creative
- ExoClick macro
{zone_id}- Maps to
- placement_id
- Identifies
- placement
- ExoClick macro
{site_id}- Maps to
- publisher_id
- Identifies
- publisher
- ExoClick macro
{keyword}- Maps to
- keyword
- Identifies
- keyword
How the detection works.
Data points → one score
Every visit is weighed against more than a hundred independent data points and reduced to a single, sortable 0–100 quality score.
Many angles, combined
Each data point is combined rather than checked in isolation, so a genuine human almost never trips enough of them to be flagged — and bots that beat one rarely beat the rest.
Proprietary, not a black box
The detection model is ours and stays that way. What you get is a clear verdict on every visit — not a single brittle rule you can game, and not an unexplained number you can't act on.
Pinned to the source
Every verdict maps to the campaign, publisher and placement that sent the click — so you know exactly which source to cut.
How ValidVisit helps you cut fraud and bad site / zones on ExoClick.
Scoring and attribution are the means — the point is cutting the ExoClick traffic that wastes your spend. Here's how ValidVisit gets you a list you can act on.
- Score
See what's actually landing
You buy ExoClick clicks; what arrives are visits. ValidVisit scores each one 0–100 so real humans stand out from bots and invalid traffic — one script, no funnel hop, no fingerprinting.
- Attribute
Pin the fraud to its source
Every scored visit is tied to the exact ExoClick site / zone and zone via the network's own tokens — so the bad traffic has an address, not just a headline percentage.
- Cut
Take the site / zones off your buy
You get the worst offenders as a ready-to-use list plus postbacks to your tracker — so you can exclude them in ExoClick and put your next dollar behind the traffic that converts.
ExoClick traffic quality, answered.
Does ValidVisit interfere with ExoClick's pop-under mechanics or add latency to the page load?+
No. ValidVisit's measurement runs on your landing page after the pop fires — it does not sit in the click path, does not divert sessions, and does not terminate or alter the page render. It scores the session once it has arrived, drawing on 100+ independent data points about the network it came through, the device behind it, and how the visitor behaves, then records a single 0-100 quality score against the ExoClick tokens you passed in the URL. The process is report-only and non-blocking, so it cannot break your funnel or affect ExoClick's delivery mechanics.
ExoClick already has a traffic quality team — what does ValidVisit add?+
ExoClick's quality enforcement protects the platform as a whole and operates at thresholds that make sense across all its advertisers. It does not produce per-campaign, per-zone IVT breakdowns tied to your specific tracking parameters, and it does not surface which of your {site_id} and {zone_id} values are the marginal sources dragging down your conversion data. ValidVisit gives you an independent 0-100 score for every visit against your own campaign — built from 100+ data points you can review for yourself — so your exclusion decisions are based on your traffic pattern, not a shared platform average you have no visibility into.
Which ExoClick tokens matter most for diagnosing pop IVT?+
For pop campaigns, {site_id} and {zone_id} are the two dimensions that explain nearly all sub-source variation — the publisher and the specific zone within it. Pass {conversions_tracking} as well to enable click ID tracking across the session. {campaign_id} is useful for multi-campaign reporting but adds less diagnostic value per visit than the publisher and zone dimensions, since IVT on ExoClick pop tends to be a supply-side pattern tied to specific publishers rather than something that varies by your campaign settings.
Detect fraud on other pop / pop-under networks
Find the bots in your ExoClick spend.
See which publishers and placements send real buyers vs bots — every visit scored 0–100, worst first.
Free trial at launch · just your email
One script · no cookies · no fingerprinting · raw IP never stored