Page 3 of 3 FirstFirst 123
Results 41 to 59 of 59
  1. #41
    dfiocch's Avatar
    dfiocch is offline Private Member
    Join Date
    September 2006
    Posts
    878
    Thanks
    789
    Thanked 567 Times in 350 Posts

    Default

    For Chrome Users;

    -Install the widget "Redirect Path" by Ayma (you can find it on Chrome Web Store)
    https://chrome.google.com/webstore/d.../related?hl=en

    This widget just traces all redirections checked by the browser. After installation,in this case:

    1. Copy (just a sample link found on Leopold's link, Seochat) and paste the following link into your browser
    http://www.scout.ge/flash/slots/Bonu...Casino-Titan/1

    2. You will see that the above link redirects to (302 response code)
    http://crystalcasino.com/?partner=ga_w7452r274001p88_world <---- Affiliate tracking code?


    You can use this tool also on other... suspicious websites... it's funny...

    Closing communications on my end, too many DDOSS attacks and a blast of ****** incoming links. Over.
    Last edited by dfiocch; 14 November 2014 at 8:38 am.

  2. The Following 2 Users Say Thank You to dfiocch For This Useful Post:

    -Shay- (14 November 2014), Roulette Zeitung (14 November 2014)

  3. #42
    Slava Sushko is offline Non-sponsor Affiliate Program
    Join Date
    March 2014
    Location
    United Kingdom
    Posts
    29
    Thanks
    3
    Thanked 6 Times in 4 Posts

    Default

    Leopold,

    The webmaster account is blocked within the GamblingAttack program due to all his fraudulent redirections.

    Quote Originally Posted by Roulette Zeitung View Post
    SCOUT.GE
    A sober analysis of a suspicious domain

    "we [...] don't tolerate [...] blackhat activity. [...] As for the scout.ge webmaster, we apply the most stringent measures."

    Really?

    ---

    The webmaster of the suspicious domain is hiding the content of his pages.

    Suspicious?

    Yes.

    The domain SCOUT.GE was reported by @cass as suspicious here on GPWA and also by other people via email to me. So there is nothing wrong with a closer look.

    The system of Scout.GE: A few moments after any page of the domain is loaded the visitor will be forcibly redirected to Crystal Casino. You have no chance to look behind the curtains.

    But there is an opportunity to stop the clock: You have to watch the site with the eyes of a search engine crawler!

    Look closely at the real (!) content!

    I will give you an example with one of the sites of Scout.GE: scout.ge/flash/slots/Bonusse-Codes-für-Casino-Titan/1


    Click on the link to see the real (!) content of the website, the dark side of Moon:

    ===> http://tools.seochat.com/tools/searc...&submit=Spider

    You see title, description but also the spidered content ...

    Scroll down the page!


    twitter.com/_NoDepositBonus

    facebook.com/Online.Casino.No.Deposit.Bonus

    plus.google.com/+Thebigfreechiplist (dead site)

    All 3 outgoing links are the origin of thebigfreechiplist.com.

    Decide yourself if this is white hat.

    I have no idea, why the whole domain and content and in this way search engine snippets are overlapped by a
    forcibly Cristal Casino redirection, but for every question there is an answer.

    Again: This was a sober analysis of SCOUT.GE!

    Leopold


  4. The Following 3 Users Say Thank You to Slava Sushko For This Useful Post:

    -Shay- (14 November 2014), dfiocch (14 November 2014), Roulette Zeitung (14 November 2014)

  5. #43
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    Addendum to the SCOUT.GE analysis

    Full SCOUT.GE analysis: https://www.gpwa.org/forum/affiliate...tml#post772436

    "The webmaster account is blocked within the GamblingAttack program due to all his fraudulent redirections."

    With high probability the webmaster did more.

    One point of my analysis will not leave me in peace:

    Will a successfully and well known webmaster, who is working with so many programs a) damage oneself with this kind of stupid content and b) risk all his reputation with black hat actions while promoting only one casino (Crystal Casino)?

    This is an important question, because the origin of SCOUT.GE's content demonstrably is this GPWA member: https://www.gpwa.org/member/thebigfreechiplist

    ---

    Double or stolen content?

    It looks like, that the whole content of SCOUT.GE is a copy, stolen by a thief. Stolen and copied from thebigfreechiplist.com website.

    See yourself:

    I will show you by only one example. You can try it with all other pages from SCOUT.GE!

    Click here for a special Google result page: http://tinyurl.com/mjljgk5


    The search is for "Most Fair Casinos Reviews & Bonuses - 2014 #15"

    Place #1 and #2?



    It's the same content, and if you load some pages from SCOUT.GE you can see for half a second before redirection that it's really the same content and page style. Obviously only the thebigfreechiplist header and links to the casinos are removed.

    Compare it with the original: thebigfreechiplist.com/fairest-online-casinos/15

    Sidenote A: At the top right of the original you will find all 3 outgoing button links to Twitter, Facebook and Google+, the same outgoing links from the SCOUT.GE copy with the same dead link to Google+!

    Sidenote B: At least on German Google the copy of SCOUT.GE is on place #1 and the original only on place #2!

    ---

    Conclusion: It looks like, that a content thief, a shabby scapegrace made a copy of
    thebigfreechiplist.com to promote Gambling Attack's Crystal Casino and thebigfreechiplist.com is a victim of content theft.

    But if I am honest ... one thing bothers me:

    thebigfreechiplist on GPWA
    Posts: 2
    Last Activity: 4 Sep 2014
    Join Date: 15 Sep 2013


    Source: https://www.gpwa.org/member/thebigfreechiplist



    thebigfreechiplist on GPWA
    4 Sep 2014

    "I have been in a close relationship with Affpower and Fernanda and I have nothing else to say but good things about them.. Quick on the replies and very helpful."

    Source: https://www.gpwa.org/forum/affpower-...tml#post765979

    Decide yourself!

    Leopold


  6. The Following User Says Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (15 November 2014)

  7. #44
    -Shay- is offline Public Member
    Join Date
    November 2012
    Posts
    3,060
    Thanks
    12,188
    Thanked 3,159 Times in 1,693 Posts

    Default

    Quote Originally Posted by Roulette Zeitung View Post


    Conclusion: It looks like, that a content thief, a shabby scapegrace made a copy of
    thebigfreechiplist.com to promote Gambling Attack's Crystal Casino and thebigfreechiplist.com is a victim of content theft.

    But if I am honest ... one thing bothers me:

    thebigfreechiplist on GPWA
    Posts: 2
    Last Activity: 4 Sep 2014
    Join Date: 15 Sep 2013


    Source: https://www.gpwa.org/member/thebigfreechiplist



    thebigfreechiplist on GPWA
    4 Sep 2014

    "I have been in a close relationship with Affpower and Fernanda and I have nothing else to say but good things about them.. Quick on the replies and very helpful."

    Source: https://www.gpwa.org/forum/affpower-...tml#post765979

    Decide yourself!

    Leopold


    It is quite odd... person openly supporting a rogue and also coming up as a main topic as a rogue themselves. Circumstantial evidence? Perhaps. But definitely "smoke" coming from that area. I'm interested in learning more.

  8. The Following User Says Thank You to -Shay- For This Useful Post:

    Roulette Zeitung (15 November 2014)

  9. #45
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    It's really unbelievable, that important information was withheld by at least one GPWA member!
    Is it so difficult to write the words "Warning: GamblingYard.com" into a forum that the community can start investigations to help other people?

    A new criminal list is online, and perhaps some programs don't know, that they will be abused again!

    One new root of evil is

    GamblingYard.com

    The domain was created on 11. October 2014, and the IP address is 37.1.222.78.

    Official hosted by

    tds-hooligana.ru

    But the server is located in Germany!

    Behind the German IP is the company 3NT | 3nt.com.

    They hide the server location with an offshore address, but I found it:

    ===>
    https://maps.google.com/maps?q=51.11...classic&dg=brw

    The address is

    Street: End 53
    Zipcode: 52525
    City: Heinsberg
    Country: Germany


    The address is a multi-family house, but German police would be able to investigate (the server owner) on the spot.

    Important

    The following domains are hosted on the same web server as gamblingyard.com:

    lazygamer.net
    peykekhabar.com
    tout.com
    irinn.ir

    Leopold

  10. The Following 3 Users Say Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (16 November 2014), cass (16 November 2014), timicas (3 December 2014)

  11. #46
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    Addendum

    This time it's not so easy to find victim's website.

    But I found a way to show the programs concerned at least a few to get a feel for the system!

    Search with Google for

    biggame/ roulette-online-click-and-buy


    ==> http://tinyurl.com/nsjub29

    On the first position is GPWA, because of the posts from yesterday.

    Look at the results, where you can see /biggame/ in the url followed by a (random) number.

    That are victims websites.

    Leopold

  12. The Following User Says Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (17 November 2014)

  13. #47
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    26,759
    Thanks
    1,815
    Thanked 7,639 Times in 4,825 Posts

    Default

    The additional websites listed as being hosted on the same sever, does not mean they are connected, just that they reside on the same server.

    Using some IP location services shows a possible connection in Montana, although that isn't defined so may be an erroneous listing.

    Ripe shows that 3nt is in the UK. Also the IP space is owned by Leaseweb BV and reallocated to 3nt by them.

    Rick
    Universal4

  14. The Following User Says Thank You to universal4 For This Useful Post:

    -Shay- (17 November 2014)

  15. #48
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    "Ripe shows that 3nt is in the UK."

    3nt.com is a fake website!
    A one-page-flashbang!

    Proof: http://tinyurl.com/kyx8bb7

    The "official" address in UK (3NT Solutions LLP, DALTON HOUSE 60, WINDSOR AVENUE, LONDON, SW19 2RR) is nothing but an offshore maildrop. Everyone on Earth can rent the same address, even you and me:

    ===> londonoffice.co.uk/contact-london-office

    Round about 20 years ago I have had just for fun a maildrop address in Empire State Building for some time.

    Moreover: Look at the right bottom of 3nt.com!

    latest latest
    Wow! Summer 2012 promotions!

    use code SUMMER+30
    Of course ... latest latest ... 2012 ...!!!

    Leopold

  16. #49
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    26,759
    Thanks
    1,815
    Thanked 7,639 Times in 4,825 Posts

    Default

    Whether the address is a maildrop or not, it does give them a physical address in the UK, which may or may not qualify for a UK Corporation. I do not know all of the corporate laws in the UK so not sure on that one.

    The P.O.C. (point of contact) and the RIPE registered address is at that address in the UK. Ripe is a bit more strict about addresses and POC's email and so forth, so I will make a first guess that those addresses are real and do not bounce. If they did happen to bounce or were not real addresses, I do not know how quick RIPE follows up, but I have always understood that RIPE does in fact react quicker then some of the other NCC's on reports of invalid POC information.


    Rick
    Universal4

  17. #50
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    This thread is a good example.
    We are talking about the bad ones.
    Nearly every day.
    Nearly no one is talking about the good ones.
    Good news ... the good ones ... are no thrill.

    A well known and very nice person left this industry for now these days ...

    And (nearly) nobody recognized it.

    This is also a statement about the so called "community".

    Who it is?

    ===> https://www.gpwa.org/forum/leopolds-...tml#post773312

    Leopold

  18. #51
    grem's Avatar
    grem is offline Public Member
    Join Date
    July 2010
    Location
    CBN
    Posts
    1,451
    Blog Entries
    19
    Thanks
    254
    Thanked 418 Times in 205 Posts

    Default

    Big media just needs to publish how dark the gambling business is and then maybe programs will try to clean their name faster.

  19. #52
    webanalysissolutions is offline Private Member
    Join Date
    April 2012
    Posts
    369
    Thanks
    143
    Thanked 322 Times in 190 Posts

    Default

    Quote Originally Posted by grem View Post
    Big media just needs to publish how dark the gambling business is and then maybe programs will try to clean their name faster.
    The problem is, gambling, betting, casinos, corruption, immorality, etc etc, go hand in hand in Joe Public's mind, so it wouldn't be such a sensational story if a newspaper for example highlighted that some sort of strange goings on were happening.

    It's ironic that when this sort of debate happens time and time again that someone has to defend the industry by picking out the odd good person - it's almost self-fulfilling that by doing this you're implying that the other 95% are not that great at all In most industries you have the odd "bad apple", but in the gaming industry it sometimes seems you're wading through a bad orchard, trying to find the good apple!

  20. The Following 2 Users Say Thank You to webanalysissolutions For This Useful Post:

    cass (27 November 2014), Roulette Zeitung (8 January 2015)

  21. #53
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    "Affiliate Program Notice of the Criminal Activity of Verifiedcasinos.com" Reloaded

    Casino affiliate programs standing on the edge of an abyss again!


    This is the right place for an add-on information to a new thread on GPWA.

    No one can cry later "I didn't heard about it."

    The story continues with a worthy successor ...

    Quote Originally Posted by thepogg View Post
    That a second individual - with a clean sheet
    or ...

    Quote Originally Posted by dfiocch View Post
    Probably the same scumbag
    Whatever the case may be, ...

    One thing is certain:

    All programs, that are on the new list, should not work with an affiliate who is abusing children, old and ill people and their helpers! You can stop the cooperation in less than the blink of an eye.

    Because that can come to a bad end. Remember the AffEuropeGate. That program is as dead as a dodo. Living with a public mark of Cain is no dolce vita.



    Dear reading representative,

    the audience and I, we invite you to check if you are a part of the disgusting abuse of e.g. schools, nursing homes, doctors surgeries or other medical assistants right now in this moment.

    It takes only a few seconds: https://www.gpwa.org/forum/current-c...tml#post776188



    Leopold

  22. #54
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,180
    Thanks
    1,901
    Thanked 4,121 Times in 1,955 Posts

    Default

    So - who are the programs still being promoted on these hacks?
    Where is the place to find the updated list of programs to be avoided?

  23. #55
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    Quote Originally Posted by Roulette Zeitung View Post


    Dear reading representative,

    the audience and I, we invite you to check if you are a part of the disgusting abuse of e.g. schools, nursing homes, doctors surgeries or other medical assistants right now in this moment.

    It takes only a few seconds: https://www.gpwa.org/forum/current-c...tml#post776188
    Quote Originally Posted by TheGooner View Post
    So - who are the programs still being promoted on these hacks?
    Where is the place to find the updated list of programs to be avoided?
    Once again ...

    Quote Originally Posted by Roulette Zeitung View Post
    The updated list is automatically online on your screen if you just copy and paste the link -given in that thread- into your browser address bar. Indeed, "it takes only a few seconds", and you always have the latest data.

    Moreover: Within the next days you will find in that thread also all information about the hack, how to fix the security vulnerability and how a victim can stop it.

    If you need any further assistance or have queries regarding that new case, please do not hesitate to ask me.

    Leopold

  24. #56
    GCG
    GCG is offline Public Member
    Join Date
    February 2009
    Location
    Not here
    Posts
    1,248
    Thanks
    291
    Thanked 758 Times in 417 Posts

    Default

    some more domains used by these wankers :

    mosttrustedcasinos.name
    777bestcasinos.com
    online77casino.com
    etc et

  25. #57
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,180
    Thanks
    1,901
    Thanked 4,121 Times in 1,955 Posts

    Default

    That doesn't provide a current list of programs being promoted ... it's another thread.
    Sometimes simply stating the facts - the list - would be better than providing an involved breadcrumb trail.

    There is mention of a target site luckycasinoslist.com ... but directing people there is problematic as if it really is the hacker base it could EASILY contain malicious code.

    And that place seems to provides one occurance with a one page list of (geo-targeted?) casinos without mention of the affiliate programs involved.
    - Does the list change?
    - Who are the programs behind the casino brands?

    I'd like to know the list - I'd like to help by ensuring we don't work with these brands.

    We get approached daily by various and numerous smaller casino brands and if I had a point of contact to see the current state of play as to who is considered to be wilfully participating then I can easily reject bad brands - and give them a reason why.

    If enough affiliates are saying "NO - because you are associated with the hack" then it might cause a change?

  26. The Following User Says Thank You to TheGooner For This Useful Post:

    -Shay- (8 January 2015)

  27. #58
    GCG
    GCG is offline Public Member
    Join Date
    February 2009
    Location
    Not here
    Posts
    1,248
    Thanks
    291
    Thanked 758 Times in 417 Posts

    Default

    programs (partners in cyber crime) on their sites :

    fortune affiliates
    buffalo partners

    I just do not understand why these programs have the need to jeopardize their reputation to the level of money laundering.

    IMO they have started to untag players from affiliates.

  28. The Following 2 Users Say Thank You to GCG For This Useful Post:

    -Shay- (8 January 2015), TheGooner (8 January 2015)

  29. #59
    Roulette Zeitung's Avatar
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,011
    Thanked 6,901 Times in 3,000 Posts

    Default

    My goal is to help victims, who have to suffer under this new hack, and I started to do that directly, because cooperation with victims via phone and email is in the final a valuable information pool for the public. If you want a list on your desk, then take pen and paper. There are country flags on the list. Free proxy server are also online.

    And this time it will be not so easy for the programs to find excuses or biding time.

    Sometimes we should think twice before writing, because it's a better solution to focus on the needs of the many than exercising one's personal interests.

    This time a group of people are victims, where really no other things should be in the focus than the needs of these victims.

    I am in the progress to get a decoded version of the infecting php file.

    My research and investigations took and will take a lot of time. It was very hard to find this new hack, because it's 10 times more tricky than the other, also very hard to find in Google serps. So I can't waste my time regarding this case for senseless discussions here if helpless people are victims now. It's a matter of decency.

    So dear reader,

    all my researched relevant and detailed information regarding this new case you will find here:

    ===> https://www.gpwa.org/forum/current-c...tml#post776188

    -EOF-

    Leopold

Page 3 of 3 FirstFirst 123

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •