Results 1 to 12 of 12
  1. #1
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default New hack MO dealt with right

    I quickly want to alert the community to a new style of hack that I encountered for the first time a couple of days ago.

    While doing some research for an article I found wattlawfirm.com coming up in the rankings with the standard hack urls (/?en=/some gambling related term)

    What was different this time is when you open the page, rather than load the standard review page it loads a casino home page that looks identical to the casino home page (including feeds), the only difference being the url in the address bar. Specifically all the pages on this site were loading AffiliateEdge (Club World group) pages. What concerned me in the first instance was that all the links on these pages were direct links with no aff tag even going to so far as to offer the correct link to the regulator license page.

    There are two purposes to this post. The first is to highlight this new style of hacked page and the second is to highlight what should be done when a program finds out one of their affiliates is engaged in hacking.

    I contacted Affiliate Edge about this on Monday evening (UK time). First thing Tuesday morning I was contacted by Martyn Beacon and we took a look at the pages in question. Using a tool called Fiddler (which I'm sure many of you are familiar with but I wasn't) we managed to track the aff code on load as can be seen here;

    Name:  club-world-hack-3.jpg
Views: 486
Size:  121.3 KB

    At that point AffiliateEdge did 3 things;

    1) Suspend the affiliates account
    2) Contact the affiliate to offer the opportunity to explain what we'd seen
    3) Waited a little more than 24h and when no response was forthcoming redirect this affiliates links to dead space.

    You can test point 3 for yourself. Do a site search in google for wattlawfirm.com with any generic casino term. You'll get lots of results coming up but now (if they would have loaded up a AE venue - more about that shortly) they're loading a blank page. I sat on Skype with Martyn this morning, he asked me to load a page which came up fine, asked me to reload it less than 1 minute later and it came up blank.

    The point I'm making here is that killing the affiliate's account isn't enough. If the casino continue to receive traffic from hacked sites, regardless of whether or not they're paying for it, they're receiving stolen goods. AffiliateEdge demonstrated unquestionably that it's an absolutely trivial task to redirect an affiliate's tracking code to dead space. (Let's all give it up for a program that acts responsibly)

    Given that we know the hacker is deliberately leaving up killed accounts to cause confusion, redirecting affiliate links to dead space demonstrates unequivocally that the affiliate program really have shut the account and are no longer benefiting from hacked traffic. There's no reason not to do it, unless they're still looking to keep the traffic, just not pay for it.

    So the question remains - why are the below programs still showing up regularly on hacked sites with active links?

    888 (no board I could see)
    AffActive (message left on forum)
    AffClub (no board I could see)
    Fortune Affiliates (message left on forum)
    Revenue Jet (no board I could see)
    Slot Vendor (no board I could see)
    Winner (no board I could see)

    These are just the aff brands I saw from a quick look and I've excluded AffPower as they've made clear they don't care.

    I'll post an alert in each of the relevant forums to this post. It's time each of these vendors stepped up to the plate and stopped saying one thing while doing another. No more excuses of 'we closed the account', the traffic needs to be redirected away from the casino's site.

    On a side note, this particular hack appears to have been browser specific. It seems to have been showing the AffiliateEdge properties in Chrome and FireFox and Welcome Partners properties (a primarily Russian facing operation) in other browsers. If you look closely at the screenshot above you'll see images for "wulkan", "multigam", "max casino" and "bet365", though after testing using proxy servers and different web browsers I saw the Russian facing casinos a lot but never Bet365.

    Also - some of these pages started to change to the same thing but with Ace Revenue casinos last night - I've not been able to track down any Ace Revenue pages again so can't yet extract the aff code, but I would encourage Ace Revenue to review their recent affiliate sign-ups and be vigilant for this activity.
    Last edited by thepogg; 18 February 2015 at 10:29 am.
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  2. The Following 11 Users Say Thank You to thepogg For This Useful Post:

    -Shay- (18 February 2015), AE-Martyn (18 February 2015), Anthony (18 February 2015), dfiocch (19 February 2015), Moonlight Cat (18 February 2015), Redbush54 (18 February 2015), TheGooner (18 February 2015), Triple7 (23 July 2015), universal4 (18 February 2015), Zuga (19 February 2015)

  3. #2
    AE-Martyn is offline Former AM
    Join Date
    March 2008
    Location
    Manchester
    Posts
    2,050
    Blog Entries
    3
    Thanks
    637
    Thanked 763 Times in 434 Posts

    Default

    Thank you for the kind words Mr Pogg.

    It's how we work, we're different, we're honest and want no part in receiving stolen traffic no matter how profitable it could be. I'd rather not find out.

  4. The Following 7 Users Say Thank You to AE-Martyn For This Useful Post:

    -Shay- (18 February 2015), dfiocch (19 February 2015), Renee (18 February 2015), TheGooner (18 February 2015), thepogg (19 February 2015), Zuga (19 February 2015)

  5. #3
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    26,774
    Thanks
    1,818
    Thanked 7,640 Times in 4,826 Posts

    Default

    Kudos to Martyn and his team, and special thanks to ThePogg.

    Rick
    Universal4

  6. The Following 3 Users Say Thank You to universal4 For This Useful Post:

    -Shay- (18 February 2015), AE-Martyn (19 February 2015), thepogg (19 February 2015)

  7. #4
    mojo's Avatar
    mojo is offline Private Member
    Join Date
    March 2005
    Posts
    4,985
    Thanks
    1,933
    Thanked 1,882 Times in 1,222 Posts

    Default

    Well done to all involved!

  8. The Following 2 Users Say Thank You to mojo For This Useful Post:

    AE-Martyn (19 February 2015), thepogg (19 February 2015)

  9. #5
    sweetbet's Avatar
    sweetbet is offline Private Member
    Join Date
    November 2012
    Posts
    2,819
    Blog Entries
    5
    Thanks
    899
    Thanked 1,582 Times in 1,089 Posts

    Default

    Affiliate Edge ROCKS!! It's one of the most solid and honest programs out there
    Sweet Bet - Reviews of reputable online casinos, poker sites, sportsbooks & bingo halls
    USA Online Casinos | Canadian Online Casinos | Bitcoin Casinos | Live Dealer Casinos | Free Spin Casinos | US Online Casinos

  10. The Following 2 Users Say Thank You to sweetbet For This Useful Post:

    AE-Martyn (19 February 2015), thepogg (19 February 2015)

  11. #6
    TravG's Avatar
    TravG is offline Private Member
    Join Date
    September 2008
    Posts
    2,039
    Thanks
    34
    Thanked 179 Times in 130 Posts

    Default

    Nice Job guys. It is god to know there are some god people out there still and I just might give an AE brand a better placement!
    Live Casino USA - the best USA live online casinos. Play USA online slots and other casino games like USA online blackjack. Like poker? See www.usalegalpoker.com for the best USA poker sites and USA online casinos for the best USA online casino. https://mobileslotslisting.com
    www.usalegalslots.com - www.playusaonlinepoker.com - www.4deucespoker.com

  12. The Following 2 Users Say Thank You to TravG For This Useful Post:

    AE-Martyn (19 February 2015), thepogg (19 February 2015)

  13. #7
    AE-Martyn is offline Former AM
    Join Date
    March 2008
    Location
    Manchester
    Posts
    2,050
    Blog Entries
    3
    Thanks
    637
    Thanked 763 Times in 434 Posts

    Default

    Quote Originally Posted by UltimatePokerBonus View Post
    Nice Job guys. It is god to know there are some god people out there still and I just might give an AE brand a better placement!
    I took a screenshot of this, just in case.

    Thanks to all for the kind words - I hope we can work more with you guys going forward. Give us a nudge should you need us.

  14. #8
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    I'm now seeing Ace Revenue casinos on the previously killed Affiliate Edge pages. They're not loading consistently (sometimes the same page will load blank), but they are there. The aff tracker link included below;


    Name:  Ace-Revenue-Hack.jpg
Views: 636
Size:  159.2 KB

    I don't work with Ace Revenue and all the necessary information is already contained within this thread, but if an AR rep feels they need further information they are welcome to contact me.
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  15. The Following User Says Thank You to thepogg For This Useful Post:

    -Shay- (19 February 2015)

  16. #9
    AceVentura is offline Non-sponsor Affiliate Program
    Join Date
    May 2013
    Location
    Vancouver
    Posts
    5
    Thanks
    0
    Thanked 8 Times in 3 Posts

    Default

    Hey Mr Pogg,

    Dan here from AceRevenue.com. I was JUST told about this 10 minutes ago, and following what I read on this forum, I'm also doing the following:

    "At that point AffiliateEdge did 3 things;

    1) Suspend the affiliates account - Done
    2) Contact the affiliate to offer the opportunity to explain what we'd seen - Sent Email, awaiting response.
    3) Waited a little more than 24h and when no response was forthcoming redirect this affiliates links to dead space." - Will follow up to make sure this is done as well.

    I would like to thank Martyn, for not only being extremely good looking, but also ensuring a high level of integrity in a matter such as this. Its important that this industry continues to instill fair-play policies when marketing their brands.

    We also do not participate in accepting any stolen traffic, and if this ever comes up again, do not hesitate to call/email/skype/ me about it.


    Sincerely,

    Dan


    Quote Originally Posted by thepogg View Post
    I'm now seeing Ace Revenue casinos on the previously killed Affiliate Edge pages. They're not loading consistently (sometimes the same page will load blank), but they are there. The aff tracker link included below;


    Name:  Ace-Revenue-Hack.jpg
Views: 636
Size:  159.2 KB

    I don't work with Ace Revenue and all the necessary information is already contained within this thread, but if an AR rep feels they need further information they are welcome to contact me.

  17. The Following 4 Users Say Thank You to AceVentura For This Useful Post:

    -Shay- (19 February 2015), AE-Martyn (23 February 2015), Anthony (19 February 2015), thepogg (19 February 2015)

  18. #10
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    26,774
    Thanks
    1,818
    Thanked 7,640 Times in 4,826 Posts

    Default

    Another group that recognizes this issue for what it is and is following up and doing the RIGHT THING.

    I have not yet had the chance to take a close look at your group Ace, but I damn sure will set aside time to do so now!!

    I encourage other affiliates to also add Ace Revenue to their list of possible groups to work with, based upon the above. (at least take a look to see if they are a fit on your sites)

    Rick
    Universal4

  19. The Following 2 Users Say Thank You to universal4 For This Useful Post:

    -Shay- (19 February 2015), thepogg (19 February 2015)

  20. #11
    AE-Martyn is offline Former AM
    Join Date
    March 2008
    Location
    Manchester
    Posts
    2,050
    Blog Entries
    3
    Thanks
    637
    Thanked 763 Times in 434 Posts

    Default

    Quote Originally Posted by AceVentura View Post
    I would like to thank Martyn, for not only being extremely good looking..
    LOL, you sir are a scream!

  21. #12
    GCG
    GCG is offline Public Member
    Join Date
    February 2009
    Location
    Not here
    Posts
    1,248
    Thanks
    291
    Thanked 758 Times in 417 Posts

    Default

    Quote Originally Posted by AceVentura View Post
    Hey Mr Pogg,

    Dan here from AceRevenue.com. I was JUST told about this 10 minutes ago, and following what I read on this forum, I'm also doing the following:

    "At that point AffiliateEdge did 3 things;

    1) Suspend the affiliates account - Done
    2) Contact the affiliate to offer the opportunity to explain what we'd seen - Sent Email, awaiting response.
    3) Waited a little more than 24h and when no response was forthcoming redirect this affiliates links to dead space." - Will follow up to make sure this is done as well.

    I would like to thank Martyn, for not only being extremely good looking, but also ensuring a high level of integrity in a matter such as this. Its important that this industry continues to instill fair-play policies when marketing their brands.

    We also do not participate in accepting any stolen traffic, and if this ever comes up again, do not hesitate to call/email/skype/ me about it.


    Sincerely,

    Dan

    account silveroakcasino.eu/click/1/164/5104/1/landing

    allcasinos.name/?template=lp3&lang=us

    is still active

  22. The Following User Says Thank You to GCG For This Useful Post:

    Triple7 (23 July 2015)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •