riverty logo

Docs

Subdomain Setup

Securing the JavaScript agent from being blocked

The Profile Tracking JavaScript gathers browser attributes and distinguishes visitors by initiating HTTP network requests to the Experian servers. However, because fingerprinting can be sometimes used to compromise customers' privacy, ad blockers and browsers emphasizing privacy may obstruct these requests, hindering our ability to recognize visitors and potentially fraudulent activities.

Blocking tools such as Adblock or uBlock Origin, as well as privacy-focused browsers, actively block such requests. These tools keep a record of domains hosting the fingerprint API used for Profile Tracking, identifying and blocking browser requests associated with those domains. Certain VPN providers may also implement measures to block Profile Tracking domains at the DNS level.

Routing requests via your subdomain

The most effective method to prevent the blocking of JS agent requests is to route them through your own domain. Instead of directly accessing the Profile Tracking APIs, you invoke a proxy function hosted on your domain or subdomain, such as x2y.yourdomain.com. This proxy function then forwards the request to the Profile Tracking API.

By adopting this approach:

  • Requests occur within the same site, preventing interference from ad blockers.
  • Cookies generated by the request are classified as "first-party," enabling storage in the visitor's browser, especially in cases where third-party cookies are blocked (e.g., Safari's default blocking of third-party cookies). Additionally, these cookies may have an extended lifespan in certain browsers compared to those not routed through your domain.
  • The usage of Profile Tracking becomes more challenging for fraudsters and malicious entities to detect.

This strategy enhances both the efficiency and precision of visitor identification.

Common subdomain selection

A subdomain may only consist of a combination of letters, numbers and hyphens.

Example of valid subdomains:

  • aob2.yourdomain-xyz.com
  • dn.yourdomain.com
  • hirs.yourdomain.com

If you operate with several brands and multiple countries, it is sufficient for you to align the subdomains with the brands.

Example:

  • Brand 1 (countries: GB, DE, AT, CH, PL)
  • Brand 2 (countries: GB, DE, AT, LU, FR)
  • Brand 3 (countries: IE, DE, NL, CH, PL)

In this case, you can assign exactly 3 subdomains (1 subdomain for each brand) and use the corresponding subdomain for the respective countries.

Setting the DNS entries

Please create a CNAME entry (e.g. (string).(yourdomain).com) that points to the Experian server with the following URL - whm.asip.cloud.

Notes:

  • currently, only IPv4 addresses are supported
  • a rather small TTL value (recommendation: 3600 seconds) should be set up
  • the DNS records must point to servers that are operated at Experian

Configuration of the selected subdomains via Let’s Encrypt

Experian uses the Let’s Encrypt automated service and carries out the necessary configuration activities. You will be informed after the configuration activities are finished.