System and method for detecting fraudulent internet traffic
AssigneeNS8, Inc.
InventorAdam Rogas
Life of this patent
Estimating the term…
Abstract
Systems and methods for identifying fraudulent Internet traffic are provided. A tracking script is provided that generates a unique URL encoding an IP address of a client device. In order to find an IP address associated with the unique URL, a request for the IP address associated with the unique URL is received at a DNS resolver server from a DNS server upstream from the client device. The IP address of the client device, the DNS server upstream from the client device and the DNS resolver server in a database are correlated to obtain information about the Internet traffic to determine the likelihood that the traffic is fraudulently generated.
Claims15
A method for detecting fraudulent Internet traffic, the method comprising:
- providing a tracking script that generates a unique URL;
- receiving a request for an IP address associated with the unique URL at a DNS resolver server from a DNS server upstream from a requesting client device;
- correlating the requesting client device, the DNS server upstream from the requesting client device and the DNS resolver server in a database;
- receiving a communication from the requesting client device;
- and
- comparing an expected communication time based on the geographic location of the DNS resolver server and an actual communication time.
A system for detecting fraudulent Internet traffic, the system comprising:
- a DNS resolver server that is configured to receive a unique URL generated from a tracking script running on a website which is accessed by a client device requesting content;
- the DNS resolver server receiving the unique URL in a request from an upstream DNS server for an IP address corresponding to the unique URL, the DNS resolver server correlating the client device to a geographic location of the upstream DNS server,
- wherein the DNS resolver server receives a communication from the client device and compares an expected communication time based on a reported geographic location of the client device and an actual communication time.
Dependencies are inferred from the claim text.