Is ExoClick traffic real? How to check ExoClick traffic quality
site / zone in ExoClickValidVisit flags the bad site / zone id; add them to ExoClick's Sites & Zones blacklist.
ExoClick operates one of the largest open-marketplace adult and mainstream networks, running pop-under, push notification, and display inventory across thousands of publisher sites worldwide. That breadth is its strength and its risk: a pop-under fires on page load or tab open without any explicit user gesture, which means a low-quality publisher can drive automated page loads at scale and let the resulting pops count as ad impressions. Because there is no intent signal baked into the format, the only way to separate legitimate human exposure from scripted volume is to look at the traffic once it lands — at the session level, attributed to the publisher and zone that sent it. ValidVisit integrates with ExoClick's click macros — capturing `{site_id}`, `{zone_id}`, and `{conversions_tracking}` on every event — so that every scored click maps back to the exact publisher site and zone responsible, not just a campaign-level average you cannot act on.
https://yoursite.com/landing?utm_source=exoclick&utm_medium=pop&vv_campaign_id={campaign_id}&vv_click_id={conversions_tracking}&vv_creative_id={variation_id}&vv_placement_id={zone_id}&vv_publisher_id={site_id}&vv_keyword={keyword}How invalid traffic shows up on ExoClick
Pop-under inventory on ExoClick carries a distinct IVT signature that differs from push or display. Because the format triggers without a user click, bad actors can fire pops at volume using scripted tab-open loops or server-side URL cycling — sessions that arrive with no referrer chain, no real browser state, and no subsequent page interaction. ValidVisit pulls together more than 100 independent data points for each click — covering the network path it travelled, the device on the other end, and the way the visitor actually behaves — and folds them into one 0-100 quality score. Genuine human exposure clears that bar comfortably; scripted pop traffic, even when it routes through residential proxy pools to imitate consumer IPs or spoofs its browser identity, tends to land in the low end of the range and cluster tightly by source. On push notification zones the pattern shifts toward automated subscription followed by high click volume with near-zero engagement depth — sessions that pass referrer checks but share suspiciously uniform timing profiles across many different IPs. Grouping ValidVisit scores by `{zone_id}` and `{site_id}` reveals which specific publisher zones are generating these profiles, giving you the sub-source precision needed to act rather than penalizing an entire campaign.
What to watch on ExoClick
Group your ValidVisit report by {site_id}. If a small number of publisher sites account for a disproportionate share of clicks while producing negligible on-site engagement, that concentration pattern is the clearest indicator of bot-inflated inventory. Legitimate pop traffic distributes across many sites; automated volume tends to cluster on the publisher properties that are easiest to inflate programmatically.
ExoClick's {zone_id} token lets ValidVisit isolate individual ad zones within a publisher site. A zone whose quality scores sit well below your campaign baseline while the same publisher's other zones look clean is a common pattern in open-marketplace pop networks — one abusive placement inside an otherwise acceptable site. Those zones are candidates for manual exclusion at the campaign level without touching the rest of your publisher mix.
Pop traffic is especially exposed to server-side bots because no user gesture is required to trigger the ad. Track how each {site_id} scores against the rest of your mix, watching for publishers whose sessions consistently fall into the low end of the 0-100 range. A property that records plenty of clicks yet almost none that read as a real person browsing points to scripted page-load abuse — the URL was fetched, but nobody ever actually engaged with the landing page.
Residential proxy pools are a common cover for ExoClick pop bot traffic because they route automated requests through consumer IP ranges. ValidVisit's scoring weighs the network path each click took as one of its many inputs, so this kind of routing shows up in the quality score. When a single {site_id} generates a concentrated share of low-scoring traffic from a narrow band of sources, the pattern points to coordinated source abuse rather than organic geographic spread.
How ValidVisit attributes ExoClick traffic
Each ExoClick macro maps to a normalized parameter, so every scored click is pinned to the right campaign, creative and publisher.
| Token | ExoClick macro | Maps to | Identifies |
|---|---|---|---|
| Campaign ID | {campaign_id} | campaign_id | campaign |
| Conversion Tracking String (Click ID) | {conversions_tracking} | click_id | click |
| Variation ID (Creative/Banner) | {variation_id} | creative_id | creative |
| Zone ID | {zone_id} | placement_id | placement |
| Site ID | {site_id} | publisher_id | publisher |
| Keyword | {keyword} | keyword | keyword |
- ExoClick macro
{campaign_id}- Maps to
- campaign_id
- Identifies
- campaign
- ExoClick macro
{conversions_tracking}- Maps to
- click_id
- Identifies
- click
- ExoClick macro
{variation_id}- Maps to
- creative_id
- Identifies
- creative
- ExoClick macro
{zone_id}- Maps to
- placement_id
- Identifies
- placement
- ExoClick macro
{site_id}- Maps to
- publisher_id
- Identifies
- publisher
- ExoClick macro
{keyword}- Maps to
- keyword
- Identifies
- keyword
Pinpoint the bot publishers & placements in ExoClick
ExoClickitself isn’t the problem — bots and invalid traffic concentrate in a handful of its sub-sources: the publisher, site or zone, and the placement or widget within it. So we roll the score up by those ExoClick tokens, not by creative (which says nothing about whether a click was human).
Illustrative example — ExoClick traffic scored 0–100 per sub-source, worst first.
See your own ExoClick sub-sources scored this way.
Bot / invalid-traffic score broken down by:
- Site ID
{site_id}The ID number of the site where the ad is displayed.
Bot / invalid-traffic score broken down by:
- Zone ID
{zone_id}The ID of the ad zone where the ad is displayed (the publisher's specific ad placement/slot).
Per-click id: ExoClick passes a unique click id, so we also run velocity, deduplication and repeat-source checks on every click.
Compare bot & invalid-traffic breakdown across every ad network →How the detection works
Data points → one score
Every click is weighed against more than a hundred independent data points and reduced to a single, sortable 0–100 quality score.
Many angles, combined
Each data point is combined rather than checked in isolation, so a genuine human almost never trips enough of them to be flagged — and bots that beat one rarely beat the rest.
Proprietary, not a black box
The detection model is ours and stays that way. What you get is a clear verdict on every click — not a single brittle rule you can game, and not an unexplained number you can't act on.
Pinned to the source
Every verdict maps to the campaign, publisher and placement that sent the click — so you know exactly which source to cut.
ExoClick traffic quality — FAQ
Does ValidVisit interfere with ExoClick's pop-under mechanics or add latency to the page load?+
No. ValidVisit's measurement runs on your landing page after the pop fires — it does not sit in the click path, does not divert sessions, and does not terminate or alter the page render. It scores the session once it has arrived, drawing on 100+ independent data points about the network it came through, the device behind it, and how the visitor behaves, then records a single 0-100 quality score against the ExoClick tokens you passed in the URL. The process is report-only and non-blocking, so it cannot break your funnel or affect ExoClick's delivery mechanics.
ExoClick already has a traffic quality team — what does ValidVisit add?+
ExoClick's quality enforcement protects the platform as a whole and operates at thresholds that make sense across all its advertisers. It does not produce per-campaign, per-zone IVT breakdowns tied to your specific tracking parameters, and it does not surface which of your {site_id} and {zone_id} values are the marginal sources dragging down your conversion data. ValidVisit gives you an independent 0-100 score for every click against your own campaign — built from 100+ data points you can review for yourself — so your exclusion decisions are based on your traffic pattern, not a shared platform average you have no visibility into.
Which ExoClick tokens matter most for diagnosing pop IVT?+
For pop campaigns, {site_id} and {zone_id} are the two dimensions that explain nearly all sub-source variation — the publisher and the specific zone within it. Pass {conversions_tracking} as well to enable click ID tracking across the session. {campaign_id} is useful for multi-campaign reporting but adds less diagnostic value per click than the publisher and zone dimensions, since IVT on ExoClick pop tends to be a supply-side pattern tied to specific publishers rather than something that varies by your campaign settings.
Catch the fake clicks on ExoClick.
See which campaigns and publishers send real, converting traffic vs bots — every click scored 0–100.
Free trial at launch · lock in early-access pricing
One script · raw IP never stored · GDPR legitimate-interest basis