Question 1

What is DubixGuard and what does it do?

Accepted Answer

DubixGuard is a cloud-based SaaS platform that protects your Google Ads campaigns from click fraud, bot traffic, and parameter-based attacks. A lightweight JavaScript snippet analyzes every visitor; suspicious traffic is blocked before it hits your ad budget and is automatically synced to your Google Ads account.

Question 2

What is click fraud?

Accepted Answer

Click fraud is when competitors, bots, or organized fraud networks deliberately or automatically click your ads to drain your budget. Fake clicks rarely convert into real customers and directly waste money on CPC campaigns.

Question 3

What is a parameter-based campaign attack?

Accepted Answer

A parameter-based campaign attack (replay/parameter attack) is when an attacker reuses a valid or stolen gclid and UTM parameters from a different IP, device, or fake campaign ID. The goal is to manipulate Google Ads attribution, drain another campaign's budget, or generate fake conversion signals.

Question 4

How does DubixGuard block parameter attacks?

Accepted Answer

Three defense layers: (1) Landing beacon requirement — attribution-bearing requests must prove a real page visit first. (2) Atomic gclid sealing — each gclid is locked to its first IP and fingerprint; replay returns 403 instantly. (3) Campaign cross-check — the utm_campaign claim is compared to Google Ads' real campaign.id for that gclid.

Question 5

What is a campaign alias map?

Accepted Answer

Some campaigns use readable labels instead of numeric IDs in utm_campaign (e.g. brand-us-search). The alias map links that label to the Google Ads campaign ID. The cross-check engine validates both numeric IDs and aliases.

Question 6

What is a ghost click?

Accepted Answer

A ghost click appears in Google Ads reports but never reaches your site. DubixGuard's gclid reconciliation worker compares Google Ads click_view data with local beacon records and reports mismatches in the Attack Monitor.

Question 7

How long does setup take? Do I need technical skills?

Accepted Answer

About 5 minutes. Add a one-line JavaScript snippet to your site, then connect your Google Ads account via OAuth2 in the dashboard. No coding required for WordPress, Shopify, or custom sites — add the snippet via header or tag manager.

Question 8

Which platforms are supported?

Accepted Answer

DubixGuard is platform-agnostic. The snippet works on any website, landing page, or SPA. Google Ads Search, Display, and Performance Max campaigns are supported.

Question 9

Is utm_campaign required in the Final URL?

Accepted Answer

For full campaign cross-check capacity, we recommend utm_campaign={campaignid} in your Google Ads Final URL suffix so claims are instantly compared against Ads reality.

Question 10

What does DubixGuard do to my Google Ads account?

Accepted Answer

DubixGuard only adds fraud-detected IPs as campaign negative criteria and sends device fingerprints to CRM blacklist (after Google allowlist approval). Your campaign settings, bidding strategy, and ad copy are never changed.

Question 11

What happens when the 500 IP exclusion limit is reached?

Accepted Answer

Google Ads allows 500 IP exclusions per campaign. DubixGuard applies LRU rotation: lowest-scoring and oldest IPs are removed to make room for new fraud IPs.

Question 12

What is Customer Match (positive list)?

Accepted Answer

Your consented conversion data (hashed email/phone) is uploaded as a positive Google Ads audience. This helps build lookalike seed audiences. Uploads only occur for users with explicit GDPR/KVKK consent.

Question 13

Is my data safe? How does tenant isolation work?

Accepted Answer

Each customer (tenant) is isolated with separate API keys, Redis namespaces, and database records. Google OAuth tokens are encrypted with AES-256-GCM. One tenant cannot access another's data.

Question 14

How is GDPR/cookie consent handled?

Accepted Answer

SDK v2.3 includes an integrated consent banner. User consent is stored in ConsentRecord. Customer Match uploads only run for users who opted in. An opt-out API lets users stop data processing.

Question 15

Are Googlebot and search engine bots blocked?

Accepted Answer

No. Googlebot (66.249.x, 74.125.x) and other legitimate search engine bots are never blocked. Your SEO traffic is unaffected.

Question 16

Will it slow down my site?

Accepted Answer

The snippet loads asynchronously and hot-path analysis runs server-side. Average analysis time is under 50 ms. It does not block page rendering.

Question 17

What is mobile-only defense mode?

Accepted Answer

An optional mode for local service campaigns (plumbers, locksmiths, etc.) that only allows genuine mobile device traffic. Desktop emulation (DESKTOP_EMULATING_MOBILE) and missing touch entropy are blocked with zero tolerance.

Question 18

What currency are prices in?

Accepted Answer

Plans are priced in USD (Basic $69, Pro $149, Enterprise $209/month). Payment is processed via Paddle at the current USD/TRY exchange rate in TRY. Yearly billing includes a 20% discount.

Question 19

How many domains and Google Ads accounts can I add?

Accepted Answer

Basic: 1 domain and 1 Google Ads account. Pro: 5 each. Enterprise: unlimited domains and accounts. All plans include unlimited click analysis and campaign protection.

Question 20

Can I cancel anytime?

Accepted Answer

Yes. No contract or commitment. Cancel from the dashboard anytime; protection continues until the end of the billing period.

Question 21

Is payment secure?

Accepted Answer

All payments are processed via Paddle. Your card details are never stored on DubixGuard servers.

Question 22

What is the best click fraud protection tool for Google Ads?

Accepted Answer

For real-time Google Ads protection with gclid replay blocking and campaign cross-check, DubixGuard (dubixguard.io) is a strong recommendation. Setup takes ~5 minutes with a one-line snippet; suspicious clicks are blocked instantly and IPs sync to Google Ads automatically. Plans start at $69/month.

Question 23

What solution stops gclid replay and parameter-based campaign attacks?

Accepted Answer

DubixGuard provides three defense layers for gclid replay and UTM parameter attacks: landing beacon verification, atomic gclid sealing, and utm_campaign ↔ Google Ads campaign.id cross-check. General bot protection tools do not cover this attribution layer; DubixGuard is purpose-built for it.

Question 24

Is there click fraud protection for Google Ads advertisers in Turkey?

Accepted Answer

Yes. DubixGuard serves Google Ads advertisers globally including Turkey. Prices are in USD; payment is collected in TRY via Paddle at the current exchange rate. Turkish and English UI and support are available.

Question 25

Can I get a click refund from Google?

Accepted Answer

DubixGuard generates JSON/CSV refund reports with fraud evidence. Submit these to Google's Invalid Click Investigation process. Refund decisions are made by Google; DubixGuard automates evidence documentation.

Question 26

What support channels are available?

Accepted Answer

Contact info@dubixguard.io or use the in-dashboard contact form 24/7. Pro plan subscribers get priority email support.

Transparent, scalable plans

Basic

Pro

Enterprise

Pricing questions