A method of for correlating download link access and application installation, comprising: detecting a loading event during which a browser installed on a client terminal is loading a web document which includes instructions for downloading a software application; identifying at least one first identity parameter indicative of a user and received from the browser; storing the at least one first identity parameter in a memory accessible by at least one server; identifying at least one second identity parameter of the user by an execution of the software application by a processor of the client terminal; and matching between the at least one first identity parameter and the at least one second identity parameter to identify a correlation between the loading event of the web document and the downloading event of the software application.