Post by snoopster » Thu Apr 11, 2013 4:14 am

Hello.

I started editing my shop for page speed compliance and noticed a few advertising/tracking cookies that my shop spreads.
I searched on the internet but couldn't find anything relevant to my situation.
While testing my shop with webpagetest.org, here is what I found:

CDN's Used:

Code: Select all


bcp.crwdcntrl.net 
loadus.exelator.com 
tags.bluekai.com 
tacoda.at.atwola.com 
cm.g.doubleclick.net 
segment-pixel.invitemedia.com 
d.turn.com 
d.p-td.com 
r.nexac.com 
ib.adnxs.com 
g-pixel.invitemedia.com 
e.nexac.com  

Proper cookie usage: 52/100

Code: Select all


FAILED - http://bcp.crwdcntrl.net/5/ct=y/c=1797/tp=ADSH/tpid=5165b348a387642d756d7da2
FAILED - http://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm=&google_sc=&google_tc=
FAILED - http://cm.g.doubleclick.net/pixel?google_sc&google_nid=invitemedia&google_cm&google_hm=kJReHkSzTw6wVUoOP-Ubew==
FAILED - http://e.nexac.com/e/xrefid.xgi?na_exid=ff134f36e09726121a0f4314bed11e84&na_pid=2136
FAILED - http://e.nexac.com/e/xrefid.xgi?na_exid=ff134f36e09726121a0f4314bed11e84&na_pid=2136
FAILED - http://g-pixel.invitemedia.com/gmatcher?google_gid=CAESEK4TRPGz8Wp1t5Brw0biVyI&google_cver=1
FAILED - http://ib.adnxs.com/bounce?%2Fgetuidnb%3Fhttp%3A%2F%2Floadus.exelator.com%2Fload%2F%3Fp%3D204%26g%3D011%26bi%3D%24UID%26j%3D0
FAILED - http://loadus.exelator.com/load/?p=388&g=001&c=20210&j=d&ctg=Apparel%20&%20Clothing&xl8blockcheck=1
FAILED - http://loadus.exelator.com/load/net.php?n=PGltZyBzcmM9Imh0dHA6Ly9zZWdtZW50LXBpeGVsLmludml0ZW1lZGlhLmNvbS9zZXRfcGFydG5lcl91aWQ%2FcGFydG5lcklEPTc5JnBhcnRuZXJVSUQ9ZmYxMzRmMzZlMDk3MjYxMjFhMGY0MzE0YmVkMTFlODQmc3Njc19hY3RpdmU9MSIgd2lkdGg9IjEiIGhlaWdodD0iMSI%2BPC9pbWc%2BPGltZyBzcmM9Imh0dHA6Ly9kLnR1cm4uY29tL3IvZGQvaWQvTDJOemFXUXZNUzlqYVdRdk16Z3pNekU0T1M5MEx6SS9kcHVpZC9mZjEzNGYzNmUwOTcyNjEyMWEwZjQzMTRiZWQxMWU4NCIgd2lkdGg9IjEiIGhlaWdodD0iMSI%2BPC9pbWc%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%2BPC9pbWc%2B&h=72138d1cb986d793ea0adb8cee7dfbb4
FAILED - http://loadus.exelator.com/load/?p=204&g=011&bi=1263994794849983313&j=0
FAILED - http://loadus.exelator.com/load/?p=242&g=900&na_id=&na_mp=&na_da=&j=r&ru=http%3A%2F%2Fe.nexac.com%2Fe%2Fexelate_sync.xgi%3Fna_exid%3Dff134f36e09726121a0f4314bed11e84
FAILED - http://loadus.exelator.com/load/?p=242&g=900&na_id=&na_mp=&na_da=&j=r&ru=http%3A%2F%2Fe.nexac.com%2Fe%2Fexelate_sync.xgi%3Fna_exid%3Dff134f36e09726121a0f4314bed11e84
FAILED - http://tags.bluekai.com/site/6151?dt=0&r=1258061996&sig=253303005&bkca=KJhBiXWvy09xHn2ZwRqWuWGwcG/k+88faaLAugEv5Acb2N7Sc9nnL1hfQ886GJhWe4aBtMM0SXWFMnK8PGzIQKhOEoyZaVJ7wDhg78Lk2r8zKlyTw/mBx4TOA/qcpHlwJ8HbaCmnQSMYm/BzIaoglUdJZI8P17zihHhJvTaSURjCri3N92hBwDL=
FAILED - http://tags.bluekai.com/site/4470?id=18mbcq90fro1nv
FAILED - http://tags.bluekai.com/site/2981?id=&google_gid=CAESEOcu59rj7szhVI_fxq1VRrk&google_cver=1


Can someone guide me to properly remove these from my shop?

Opencart v1.5.3.1

Thank you!

New member

Posts

Joined
Mon Nov 28, 2011 7:06 am

Post by butte » Thu Apr 11, 2013 4:57 am

Hopefully nobody gained access to make those generate from inside your shop. You might be investigating what your machine has already hoarded.

Which browser(s) and version(s) are you using? Did you set each to accept session cookies, and to DENY THIRD-PARTY cookies? Did you kill all cookies and if necessary restart browser(s) before going on your cookie expedition?

When Firefox is told to kill all cookies, they are immediately dead. Chrome loves cookies, more than people love chocolate ones, and doesn't make killing them easy if it even will. When IE is told to kill all cookies, many of them remain happily hidden among "Documents and Settings/Users/" as well as certain plural "Temporary Internet Files/" and other temp/ sorts of directories [edit, added:], as well as various cookie/ or cookies/ directories.
Last edited by butte on Mon Apr 15, 2013 6:40 am, edited 1 time in total.

Guru Member

Posts

Joined
Wed Mar 20, 2013 6:58 am

Post by snoopster » Thu Apr 11, 2013 5:42 am

@butte, removed all the cookies, denied third party cookies, but after browser restart, they keep coming back. I am using Firefox v20.

I just don't know how to find the source of these cookies, they are definately somehow planted in my shop...

New member

Posts

Joined
Mon Nov 28, 2011 7:06 am

Post by butte » Thu Apr 11, 2013 6:20 am

Is your hosting itself free of interjected ads that you must accept having there?

Running freeware malwarebytes (from its .org) and freeware spybot search and destroy (from safer-networking.org) may be in order . . .

Guru Member

Posts

Joined
Wed Mar 20, 2013 6:58 am

Post by snoopster » Thu Apr 11, 2013 6:51 am

I have this hosting for four years, never had any problems like this.

This all started about a week ago, after I added the google analytics script to opencart. I removed the code today, but i'm 99% sure it's not from that.

These are for scanning my computer, right? Already started with safer-networking.org.

New member

Posts

Joined
Mon Nov 28, 2011 7:06 am

Post by butte » Thu Apr 11, 2013 9:40 am

Okay, good on the scanner and the scan, which will probably offer several cookies and other stuff to kill (let it). Yes, they're for scanning your own. The two look differently.

If the problems are not resident, then my next guess is that G is the bingo, in relation to where its farthings per chickentrack come from.

Guru Member

Posts

Joined
Wed Mar 20, 2013 6:58 am

Post by snoopster » Fri Apr 12, 2013 1:48 am

I found some problems, but none related to these cookies.

Thanks butte for your suggestions so far.

I really have to find out how to delete them from my server...

New member

Posts

Joined
Mon Nov 28, 2011 7:06 am

Post by butte » Fri Apr 12, 2013 5:47 am

Try looking at cookie-setting by G for sessions and third-parties in the G script . . .

Guru Member

Posts

Joined
Wed Mar 20, 2013 6:58 am

Post by snoopster » Sat Apr 13, 2013 8:13 am

Code: Select all

 var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-XXX]);
  _gaq.push(['_setDomainName', 'xxxxxx.com']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();
This is my analytics script.

New member

Posts

Joined
Mon Nov 28, 2011 7:06 am

Post by butte » Sat Apr 13, 2013 10:13 am

Okay, you might putter a little bit at http://support.google.com/webmasters/?hl=en (or other language) just to see if third-party cookies show up somewhere there. Dunno, dinna look. The code you've given goes this way . . .

The operative script is theirs, ga.js (whatever is inside it), and its looking to a variable for getElementsByTagName, which would be looking to categories and products (which are first-party items, namely yours). Okay. At ga.js lines 11, 13-14, 22-24, it knows about happily setting cookies, timeouts, persistences, paths, campaign sources, terms, id keys, tracking of sample rates, load times, etc., all sorts of details that one would "go for" in G's boots, but in my viewing its code directly from the source machine (G's) it has not set cookie one (odd, that). It is also calling up inpage.js, which has one line and does appear innocent. Each of the total 64+1 lines of code is essentially 4-8 wrapped lines (sometimes fewer or more). Okay. It's good visual spaghetti for anyone who might already be tipsy and reeling, but SEEMS in and of itself not to be a den of third parties. Whether the same problem is just shoved deeper via the G database, dunno.

Guru Member

Posts

Joined
Wed Mar 20, 2013 6:58 am

Post by butte » Mon Apr 15, 2013 6:49 am

If you EVER used IE or Chrome, then you probably have leftover persistent cookies lurking unexpunged on your own machine. They'll be (per above) in "plural "Temporary Internet Files/" and other temp/ sorts of directories [edit, added:], as well as various cookie/ or cookies/ directories" and will not be altogether easy to make disappear. Here I assume that your operating system is Windows. If you use the disc properties' Cleanup tool, it will remove many but not all cookies from "Temporary Internet Files/" and "Cookies/" here and there, but in the "Documents and Settings/" tree and in the [Windows]/" directory some of them will remain unscathed (they'll be where Firefox never put them). You can try using Windows Explorer to eradicate them (block the list, then delete), then try the prompt (del *.* /s), but to be effective both of those approaches will probably need to be done in several passes in Safe Mode. Third-party marketeers' cookies are unnecessarily effective partly because they're put where most users have no idea how to get rid of them, even with administrative privileges (some Win versions will not let even administrators or the machine's own Daddy, if that was set during installation) mess with the "Documents and Settings/" tree (yes, that can be somewhere beyond infuriating).

Guru Member

Posts

Joined
Wed Mar 20, 2013 6:58 am
Who is online

Users browsing this forum: No registered users and 13 guests