Affiliate Program Notice of the Criminal Activity of Verifiedcasinos.com

[dfiocch]

For Chrome Users;

-Install the widget "Redirect Path" by Ayma (you can find it on Chrome Web Store)
https://chrome.google.com/webstore/d.../related?hl=en

This widget just traces all redirections checked by the browser. After installation,in this case:

1. Copy (just a sample link found on Leopold's link, Seochat) and paste the following link into your browser
http://www.scout.ge/flash/slots/Bonu...Casino-Titan/1

2. You will see that the above link redirects to (302 response code)
http://crystalcasino.com/?partner=ga_w7452r274001p88_world <---- Affiliate tracking code?


You can use this tool also on other... suspicious websites... it's funny...

Closing communications on my end, too many DDOSS attacks and a blast of ****** incoming links. Over.

[Slava Sushko]

Leopold,

The webmaster account is blocked within the GamblingAttack program due to all his fraudulent redirections.

SCOUT.GE
A sober analysis of a suspicious domain

"we [...] don't tolerate [...] blackhat activity. [...] As for the scout.ge webmaster, we apply the most stringent measures."

Really?

---

The webmaster of the suspicious domain is hiding the content of his pages.

Suspicious?

Yes.

The domain SCOUT.GE was reported by @cass as suspicious here on GPWA and also by other people via email to me. So there is nothing wrong with a closer look.

The system of Scout.GE: A few moments after any page of the domain is loaded the visitor will be forcibly redirected to Crystal Casino. You have no chance to look behind the curtains.

But there is an opportunity to stop the clock: You have to watch the site with the eyes of a search engine crawler!

Look closely at the real (!) content!

I will give you an example with one of the sites of Scout.GE: scout.ge/flash/slots/Bonusse-Codes-für-Casino-Titan/1

Click on the link to see the real (!) content of the website, the dark side of Moon:

===> http://tools.seochat.com/tools/searc...&submit=Spider

You see title, description but also the spidered content ...

Scroll down the page!


twitter.com/_NoDepositBonus

facebook.com/Online.Casino.No.Deposit.Bonus

plus.google.com/+Thebigfreechiplist (dead site)

All 3 outgoing links are the origin of thebigfreechiplist.com.

Decide yourself if this is white hat.

I have no idea, why the whole domain and content and in this way search engine snippets are overlapped by a forcibly Cristal Casino redirection, but for every question there is an answer.

Again: This was a sober analysis of SCOUT.GE!

Leopold

[Roulette Zeitung]

Addendum to the SCOUT.GE analysis

Full SCOUT.GE analysis: https://www.gpwa.org/forum/affiliate...tml#post772436

"The webmaster account is blocked within the GamblingAttack program due to all his fraudulent redirections."

With high probability the webmaster did more.

One point of my analysis will not leave me in peace:

Will a successfully and well known webmaster, who is working with so many programs a) damage oneself with this kind of stupid content and b) risk all his reputation with black hat actions while promoting only one casino (Crystal Casino)?

This is an important question, because the origin of SCOUT.GE's content demonstrably is this GPWA member: https://www.gpwa.org/member/thebigfreechiplist

---

Double or stolen content?

It looks like, that the whole content of SCOUT.GE is a copy, stolen by a thief. Stolen and copied from thebigfreechiplist.com website.

See yourself:

I will show you by only one example. You can try it with all other pages from SCOUT.GE!

Click here for a special Google result page: http://tinyurl.com/mjljgk5

The search is for "Most Fair Casinos Reviews & Bonuses - 2014 #15"

Place #1 and #2?



It's the same content, and if you load some pages from SCOUT.GE you can see for half a second before redirection that it's really the same content and page style. Obviously only the thebigfreechiplist header and links to the casinos are removed.

Compare it with the original: thebigfreechiplist.com/fairest-online-casinos/15

Sidenote A: At the top right of the original you will find all 3 outgoing button links to Twitter, Facebook and Google+, the same outgoing links from the SCOUT.GE copy with the same dead link to Google+!

Sidenote B: At least on German Google the copy of SCOUT.GE is on place #1 and the original only on place #2!

---

Conclusion: It looks like, that a content thief, a shabby scapegrace made a copy of thebigfreechiplist.com to promote Gambling Attack's Crystal Casino and thebigfreechiplist.com is a victim of content theft.

But if I am honest ... one thing bothers me:

thebigfreechiplist on GPWA
Posts: 2
Last Activity: 4 Sep 2014
Join Date: 15 Sep 2013

Source: https://www.gpwa.org/member/thebigfreechiplist



thebigfreechiplist on GPWA
4 Sep 2014

"I have been in a close relationship with Affpower and Fernanda and I have nothing else to say but good things about them.. Quick on the replies and very helpful."

Source: https://www.gpwa.org/forum/affpower-...tml#post765979

Decide yourself!

Leopold

[-Shay-]

Conclusion: It looks like, that a content thief, a shabby scapegrace made a copy of thebigfreechiplist.com to promote Gambling Attack's Crystal Casino and thebigfreechiplist.com is a victim of content theft.

But if I am honest ... one thing bothers me:

thebigfreechiplist on GPWA
Posts: 2
Last Activity: 4 Sep 2014
Join Date: 15 Sep 2013

Source: https://www.gpwa.org/member/thebigfreechiplist



thebigfreechiplist on GPWA
4 Sep 2014

"I have been in a close relationship with Affpower and Fernanda and I have nothing else to say but good things about them.. Quick on the replies and very helpful."

Source: https://www.gpwa.org/forum/affpower-...tml#post765979

Decide yourself!

Leopold

It is quite odd... person openly supporting a rogue and also coming up as a main topic as a rogue themselves. Circumstantial evidence? Perhaps. But definitely "smoke" coming from that area. I'm interested in learning more.

[Roulette Zeitung]

It's really unbelievable, that important information was withheld by at least one GPWA member!
Is it so difficult to write the words "Warning: GamblingYard.com" into a forum that the community can start investigations to help other people?

A new criminal list is online, and perhaps some programs don't know, that they will be abused again!

One new root of evil is

GamblingYard.com

The domain was created on 11. October 2014, and the IP address is 37.1.222.78.

Official hosted by

tds-hooligana.ru

But the server is located in Germany!

Behind the German IP is the company 3NT | 3nt.com.

They hide the server location with an offshore address, but I found it:

===> https://maps.google.com/maps?q=51.11...classic&dg=brw

The address is

Street: End 53
Zipcode: 52525
City: Heinsberg
Country: Germany

The address is a multi-family house, but German police would be able to investigate (the server owner) on the spot.

Important

The following domains are hosted on the same web server as gamblingyard.com:

lazygamer.net
peykekhabar.com
tout.com
irinn.ir

Leopold

[Roulette Zeitung]

Addendum

This time it's not so easy to find victim's website.

But I found a way to show the programs concerned at least a few to get a feel for the system!

Search with Google for

biggame/ roulette-online-click-and-buy

==> http://tinyurl.com/nsjub29

On the first position is GPWA, because of the posts from yesterday.

Look at the results, where you can see /biggame/ in the url followed by a (random) number.

That are victims websites.

Leopold

[universal4]

The additional websites listed as being hosted on the same sever, does not mean they are connected, just that they reside on the same server.

Using some IP location services shows a possible connection in Montana, although that isn't defined so may be an erroneous listing.

Ripe shows that 3nt is in the UK. Also the IP space is owned by Leaseweb BV and reallocated to 3nt by them.

Rick
Universal4

[Roulette Zeitung]

"Ripe shows that 3nt is in the UK."

3nt.com is a fake website!
A one-page-flashbang!

Proof: http://tinyurl.com/kyx8bb7

The "official" address in UK (3NT Solutions LLP, DALTON HOUSE 60, WINDSOR AVENUE, LONDON, SW19 2RR) is nothing but an offshore maildrop. Everyone on Earth can rent the same address, even you and me:

===> londonoffice.co.uk/contact-london-office

Round about 20 years ago I have had just for fun a maildrop address in Empire State Building for some time.

Moreover: Look at the right bottom of 3nt.com!

latest latest
Wow! Summer 2012 promotions!

use code SUMMER+30

Of course ... latest latest ... 2012 ...!!!

Leopold

[universal4]

Whether the address is a maildrop or not, it does give them a physical address in the UK, which may or may not qualify for a UK Corporation. I do not know all of the corporate laws in the UK so not sure on that one.

The P.O.C. (point of contact) and the RIPE registered address is at that address in the UK. Ripe is a bit more strict about addresses and POC's email and so forth, so I will make a first guess that those addresses are real and do not bounce. If they did happen to bounce or were not real addresses, I do not know how quick RIPE follows up, but I have always understood that RIPE does in fact react quicker then some of the other NCC's on reports of invalid POC information.


Rick
Universal4

[Roulette Zeitung]

This thread is a good example.
We are talking about the bad ones.
Nearly every day.
Nearly no one is talking about the good ones.
Good news ... the good ones ... are no thrill.

A well known and very nice person left this industry for now these days ...

And (nearly) nobody recognized it.

This is also a statement about the so called "community".

Who it is?

===> https://www.gpwa.org/forum/leopolds-...tml#post773312

Leopold

[grem]

Big media just needs to publish how dark the gambling business is and then maybe programs will try to clean their name faster.

[webanalysissolutions]

Big media just needs to publish how dark the gambling business is and then maybe programs will try to clean their name faster.

The problem is, gambling, betting, casinos, corruption, immorality, etc etc, go hand in hand in Joe Public's mind, so it wouldn't be such a sensational story if a newspaper for example highlighted that some sort of strange goings on were happening.

It's ironic that when this sort of debate happens time and time again that someone has to defend the industry by picking out the odd good person - it's almost self-fulfilling that by doing this you're implying that the other 95% are not that great at all In most industries you have the odd "bad apple", but in the gaming industry it sometimes seems you're wading through a bad orchard, trying to find the good apple!

[Roulette Zeitung]

"Affiliate Program Notice of the Criminal Activity of Verifiedcasinos.com" Reloaded

Casino affiliate programs standing on the edge of an abyss again!

This is the right place for an add-on information to a new thread on GPWA.

No one can cry later "I didn't heard about it."

The story continues with a worthy successor ...

That a second individual - with a clean sheet

or ...

Probably the same scumbag

Whatever the case may be, ...

One thing is certain:

All programs, that are on the new list, should not work with an affiliate who is abusing children, old and ill people and their helpers! You can stop the cooperation in less than the blink of an eye.

Because that can come to a bad end. Remember the AffEuropeGate. That program is as dead as a dodo. Living with a public mark of Cain is no dolce vita.



Dear reading representative,

the audience and I, we invite you to check if you are a part of the disgusting abuse of e.g. schools, nursing homes, doctors surgeries or other medical assistants right now in this moment.

It takes only a few seconds: https://www.gpwa.org/forum/current-c...tml#post776188



Leopold

[TheGooner]

So - who are the programs still being promoted on these hacks?
Where is the place to find the updated list of programs to be avoided?

[Roulette Zeitung]

Dear reading representative,

the audience and I, we invite you to check if you are a part of the disgusting abuse of e.g. schools, nursing homes, doctors surgeries or other medical assistants right now in this moment.

It takes only a few seconds: https://www.gpwa.org/forum/current-c...tml#post776188

So - who are the programs still being promoted on these hacks?
Where is the place to find the updated list of programs to be avoided?

Once again ...

It takes only a few seconds: https://www.gpwa.org/forum/current-c...tml#post776188

The updated list is automatically online on your screen if you just copy and paste the link -given in that thread- into your browser address bar. Indeed, "it takes only a few seconds", and you always have the latest data.

Moreover: Within the next days you will find in that thread also all information about the hack, how to fix the security vulnerability and how a victim can stop it.

If you need any further assistance or have queries regarding that new case, please do not hesitate to ask me.

Leopold

[GCG]

some more domains used by these wankers :

mosttrustedcasinos.name
777bestcasinos.com
online77casino.com
etc et

[TheGooner]

That doesn't provide a current list of programs being promoted ... it's another thread.
Sometimes simply stating the facts - the list - would be better than providing an involved breadcrumb trail.

There is mention of a target site luckycasinoslist.com ... but directing people there is problematic as if it really is the hacker base it could EASILY contain malicious code.

And that place seems to provides one occurance with a one page list of (geo-targeted?) casinos without mention of the affiliate programs involved.
- Does the list change?
- Who are the programs behind the casino brands?

I'd like to know the list - I'd like to help by ensuring we don't work with these brands.

We get approached daily by various and numerous smaller casino brands and if I had a point of contact to see the current state of play as to who is considered to be wilfully participating then I can easily reject bad brands - and give them a reason why.

If enough affiliates are saying "NO - because you are associated with the hack" then it might cause a change?

[GCG]

programs (partners in cyber crime) on their sites :

fortune affiliates
buffalo partners

I just do not understand why these programs have the need to jeopardize their reputation to the level of money laundering.

IMO they have started to untag players from affiliates.

[Roulette Zeitung]

My goal is to help victims, who have to suffer under this new hack, and I started to do that directly, because cooperation with victims via phone and email is in the final a valuable information pool for the public. If you want a list on your desk, then take pen and paper. There are country flags on the list. Free proxy server are also online.

And this time it will be not so easy for the programs to find excuses or biding time.

Sometimes we should think twice before writing, because it's a better solution to focus on the needs of the many than exercising one's personal interests.

This time a group of people are victims, where really no other things should be in the focus than the needs of these victims.

I am in the progress to get a decoded version of the infecting php file.

My research and investigations took and will take a lot of time. It was very hard to find this new hack, because it's 10 times more tricky than the other, also very hard to find in Google serps. So I can't waste my time regarding this case for senseless discussions here if helpless people are victims now. It's a matter of decency.

So dear reader,

all my researched relevant and detailed information regarding this new case you will find here:

===> https://www.gpwa.org/forum/current-c...tml#post776188

-EOF-

Leopold