URGENT: ALL Affiliate programs: BAN VERIFIEDCASINOS.COM For Serious Hacking! (proof)

[antihacker]

Yes, it does, ty.

I will not be smartassing here on forum, but I will send you one advice via PM.

Hi Sherlock,

I for one know you are not 'smartassing' anyone and I truly appreciate your care and your tip you've sent me.
I am glad you asked. Now it is out in the open for all to see what price I've paid.

Thank you, it is a good feeling to know people care.

Antihacker.

[Lotus_AffMan]

Hi Guys...As a recent victom myself of being hacked I definitely do not approve and will keep an eye out for this affiliate, he is not currently working with us and wont be anytime in the near or distant future. Thanks for the heads up though...much appreciated

[universal4]

After I read all this it seems that the hacker used the old trick where websites with poor security allow redirects through the special parameter and those redirecting pages are filled with backlinks. This is well known blackhat technique. It can be called hacking, but for sure there is no breaking into servers etc.

Poor security or not, ANYONE that posts anything to a website that is NOT theirs and WITHOUT PERMISSION is hacking.

It IS illegal and they should be prosecuted and hung by their short hairs.

I agree that site owners should be using better security and stronger passwords etc, and I also agree that hosts should help watch out for and encourage stronger security to their clients, but make no mistake, hackers should be exposed and prosecuted.

Rick
Universal4

[marawa]

@antihacker

Thank you so much for all the information you shared with us! I see that it was a lot of work!

Affiliates not responding to stuff like this is pretty common so it is not a lack of interest! I just think a lot of affiliates and operators are in shock about this situation.

We shared this information with all our Dutch sub-affiliates, Operators and Partners, to be sure that no one is affected! And published it on our website! http://www.casinomedia.nl/verifiedca...te-oplichting/


When we find out that partners and/or operators not take actions against this hacker! We will advice all our partners/subaffiliates to not longer promote them!


I want to ask all the casinos involved to share with us what steps they took to stop this hacker!


I want to say many thanks again to Antihacker

[lunaraurora]

I did not see you until you found out that your site is being used.

I've just been informed via mail by the GPWA about this thread, i already knew of this problem on my site and since it was inherent in the dicussion, i've explained it, but it don't mean that my site has been hacked .. what i see is an abuse of the main keyword to develop spammy-like pages that leads to an affiliate account .. a part to alter the serp for the site's title to my disadvantage, i really do not understand what kind of damage should i receive by these pages. Anyway thanks for your tips.

[antihacker]

I've just been informed via mail by the GPWA about this thread, i already knew of this problem on my site and since it was inherent in the dicussion, i've explained it, but it don't mean that my site has been hacked .. what i see is an abuse of the main keyword to develop spammy-like pages that leads to an affiliate account .. a part to alter the serp for the site's title to my disadvantage, i really do not understand what kind of damage should i receive by these pages. Anyway thanks for your tips.

I meant no disrespect, and as previously noted, if I were to be wrong, I'd be the first to apologize. I was until that moment unaware of said email campaign Michael had sent out. So, clearly I was and would like to apologize once more. Please do take a moment to report this / these sites to affactive. They seem to be the main 'sponsor' on those pages you pointed out.

Thanks.

PS:

i really do not understand what kind of damage should i receive by these pages. Anyway thanks for your tips.

Wait until these hackers outrank you on your own keywords. Best is not to and proactively fight them with the tips I've given you. Also, since your main keywords seem to have been used, Google might punish you for it. More than likely not so, but still, since it is so close to your main 'trade mark' it could happen. Best is not to wait for that. Report them.

Thank you..

[antihacker]

@antihacker

Thank you so much for all the information you shared with us! I see that it was a lot of work!

Affiliates not responding to stuff like this is pretty common so it is not a lack of interest! I just think a lot of affiliates and operators are in shock about this situation.

We shared this information with all our Dutch sub-affiliates, Operators and Partners, to be sure that no one is affected! And published it on our website! http://www.casinomedia.nl/verifiedca...te-oplichting/


When we find out that partners and/or operators not take actions against this hacker! We will advice all our partners/subaffiliates to not longer promote them!


I want to ask all the casinos involved to share with us what steps they took to stop this hacker!


I want to say many thanks again to Antihacker

Hi there,

Thank you for your uplifting words and gratitude, they mean a lot to me. On top of that, thank you for giving it such great attention on your own sites / pages. It is great to see.

Thank you very much.

[antihacker]

Attention: Yet another..

sobieski. org.pl/slots/jackpot/onlinecasino-sk-com.html
clearly sobieski. org.pl has nothing to do with casinos.

spinpalace. com/?a=1188583645438010
casinolasvegas. com/cgi-bin/redir.cgi?id=N&member=24000000&profile=132097
europalace. com/btag-P35953-PR132-CM13479-TS48520/
888casino. com/?sr=1131339
winner. co. uk/promoRedirect?member=newone&campaign=DEFAULT&chann el=DEFAULT&zone=53928942&lp=0
jackpotcitycasino. com/?a=1188583645438010
rubyfortune. com/?a=1188583645438010
royalvegascasino. com/aff/1200geo/btag-P35953-PR115-CM13078-TS48520/

original site: siteswaps. com/ (I've seen this site before)

Also uses
tds-hooligana. ru/bf4c

Hosted in Germany by Darl Telecom

Registrant siteswaps Email: dipsik1005001 @mail .ru
Registry Admin ID:
Admin Name: Dmitriy Klimov
Admin Organization: Private Person
Admin Street: ul. Parkovaya, 24, 2
Admin City: Moscow
Admin State/Province: Moscow Region
Admin Postal Code: 117623
Admin Country: RU
Admin Phone: +74587632144
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: dipsik1005001@ mail .ru

hosted: NEOHOST-AS FOP ILIUSHENKO VOLODYMYR OLEXANDROVUCH

Also suspect of phising mails. So, lovely guy we are dealing with here.

PS: Did anyone notice the 'winner' affiliate member name? ?member=newone... Might this be telling us something?

[antihacker]

Attention: Yet another..

So far, I have discovered this hacker (which might WELL be the same, but who knows...) to be promoting the following brands:

7regal casino
21 grand casino
triple 8 casino
888 casino
Royal Vegas casino
Ruby Fortune casino
winner casino
Begado casino
Bet2day
Betway dot com
Black Diamond Casino
cabaret club casino
carnival casino
casino fiz
casino king
casino las vegas
club dice casino
magic box casino
noble casino
swiss casino
titan casino
casino tropez
classy coin casino
cosmik casino
deuce club casino
euro dice stars casino
diceland casino
euro dice exchange
euro king casino
euro palace dot com
europa casino
festival club
fiesta casino
gaming club casino
gold fishka casino
golden cherry casino
grand parker casino
grand spin casino
grandluxe casino
jackpot grand casino
jackpot city casino
liberty slots casino
lincoln casino
loco panda casino
lucky dice casino
lucky nugget casino
miami club casino
mona online casino
mr green casino
mummys gold casino
onbling casino
platinum casino
play2win casino
rockbet
royal vegas casino
ruby slots casino
scasino
silver oak casino
cool cat casino
slots jackpot casino
sp casino
spin palace casino
surpreme play casino
tradition casino
casino tropez
vegas days casino
and last but not least:
william hill casino

[antihacker]

So far, I have discovered that this hacker (which might WELL be the same, but who knows...) is a lot more 'thorough' as I've seen before:

Are you sitting? Best you do before you see this:

Check this out: http://www.google.com/search?q=site:...tory.org/slots

And, this is just on ONE of his victims.

And, to refer back to the victim above:

http://www.google.com/search?q=site:....org.pl/slots/

Steve's first operation was child's play compared to this heavy duty crap.

[clarar]

Hi guys,


I was out of the office for holidays for quite sometime. I'm receiving the updates in regards to this issue and as I mentioned to one of our partners, we disabled this affiliate account at the beginning of August.

Since some sections were still active with our brands, we went through all the site and requested to remove all our brands from there.

I might have missed something so Ill go over it again to double check that none of our brands are displayed.

[mojo]

So far, I have discovered that this hacker (which might WELL be the same, but who knows...) is a lot more 'thorough' as I've seen before:

Are you sitting? Best you do before you see this:

Check this out: http://www.google.com/search?q=site:...tory.org/slots

And, this is just on ONE of his victims.

And, to refer back to the victim above:

http://www.google.com/search?q=site:....org.pl/slots/

Steve's first operation was child's play compared to this heavy duty crap.

I found this site numerous times in my tracker last night and of course found myself a victim. For anyone looking, my tracker indicates all of it (on my sites) originates anonymously from Brazil but I'm sure that's not accurate. There are sooo many of us affiliates that are to numerous to count that are victims.

Google some your random text to find the site antihacker mentioned. I notice he scrapes randomly throughout our pages and not your typical first paragraph.

[antihacker]

I found this site numerous times in my tracker last night and of course found myself a victim. For anyone looking, my tracker indicates all of it (on my sites) originates anonymously from Brazil but I'm sure that's not accurate. There are sooo many of us affiliates that are to numerous to count that are victims.

Google some your random text to find the site antihacker mentioned. I notice he scrapes randomly throughout our pages and not your typical first paragraph.

Yeah, this is a whole different cookie..

At this stage, it looks we are a bit of sand under the massive oceans of hackers and blackhatters. Something needs to be done ASAP.

And, I'm working on it. I'm waiting on a few answers from Michael etc. In order to start I need some help, which I hope he can organize.

If I get my way, this will be gone forever. Period. (Includes hacking and blackhat seo and any other unethical behavior.)

Can't say much more, but it's going to be effective.

[universal4]

I sent the St Mary's webmaster and whois contact an email alerting them of the hack and provided a link to the Google search. Hopefully they will see that the search link contains a valid string and will see this and take care of it.

Rick
Universal4

[Anthony]

I am on my way to the airport for BAC and SiGMA

I will look into the new info while I'm traveling.

There has been a lot of positive responses from the letter Michael sent out and the hacker is running out of programs to promote. If this is someone else the same thing will happen to this one.

I will be back in the office 4 November.

[DaftDog]

This is a South African site that has been hacked. This criminal also has a South African verified casino section on his site.
Casino Midas masked aff link httpxx://XXXwww.verifiedcasinos.com/bonus/south-africa/casinomidas/online3casino3reviews999southafricadesktop.



As can be seen Casino Midas, Casino.com, Cosmik Casino, 888 Casino, City Club Casino, Megacasino brands still being promoted by this criminal.

[mojo]

This may have been posted already. I'm still trying to get my head around it. These casinos appear over and over again for this hacker.

Casino dot com = iaffiliates, a silver sponsor at gpwa and a bronze sponsor in Barcelona.

Casino Midas = affistars, a gold sponsor at gpwa.

Cozmik = affpower


GPWA and Barcelona sponsorship does matter.

[marvel]

Some more hackers with new system of links strukture or the same hackers!!

links allways different

?zzsbftzfqw=0&q=/
/?kfkukhkddd=0&q=/
...

links total shows...

If you check the source code of this sites is allways different for google...

Website: http://alfarabi.com.br/?kfkukhkddd=0...en-um-geld.php
Source-Code: view-source:http://alfarabi.com.br/?kfkukhkddd=0...en-um-geld.php



http://www.sorso-preferito.com/?zzsb...einzahlung.php
Source-Code: view-source:http://www.sorso-preferito.com/?zzsb...einzahlung.php


google search insert same like "/?q=online-casino"

Landing Page is: bathler. net/de/



Domain Info:

Domain Name: BATHLER.NETRegistry Domain ID: 1872972094_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.regtime.net
Registrar URL: http://www.webnames.ru
Updated Date: 2014-08-27T18:01:48+04:00
Creation Date: 2014-08-27T00:00:00+04:00
Registrar Registration Expiration Date: 2015-08-27T04:00:00+04:00
Registrar: REGTIME LTD.
Registrar IANA ID: 1362
Registrar Abuse Contact Email: abuse@regtime.net
Registrar Abuse Contact Phone: +7.8463733047
Domain Status: OK
Registry Registrant ID: CO1551070-RT
Registrant Name: Yuliya Esipenko
Registrant Organization: Yuliya Esipenko
Registrant Street: Morozova str. 13
Registrant City: Rezh
Registrant State/Province: Sverdlovskaya obl
Registrant Postal Code: 693524
Registrant Country: RU
Registrant Phone: +7.4954927649
Registrant Email: bathler.net@allperson.ru
Registry Admin ID: CA1551070-RT
Admin Name: Yuliya Esipenko
Admin Organization: Yuliya Esipenko
Admin Street: Morozova str. 13
Admin City: Rezh
Admin State/Province: Sverdlovskaya obl
Admin Postal Code: 693524
Admin Country: RU
Admin Phone: +7.4954927649
Admin Email: bathler.net@allperson.ru
Registry Tech ID: CT1551070-RT
Tech Name: Yuliya Esipenko
Tech Organization: Yuliya Esipenko
Tech Street: Morozova str. 13
Tech City: Rezh
Tech State/Province: Sverdlovskaya obl
Tech Postal Code: 693524
Tech Country: RU
Tech Phone: +7.4954927649
Tech Email: bathler.net@allperson.ru
Name Server: DNS1.YANDEX.NET Name Server: DNS2.YANDEX.NET

Use Server in US: 50.118.112.108

[GCG]

This may have been posted already. I'm still trying to get my head around it. These casinos appear over and over again for this hacker.

Casino dot com = iaffiliates, a silver sponsor at gpwa and a bronze sponsor in Barcelona.

Casino Midas = affistars, a gold sponsor at gpwa.

Cozmik = affpower


GPWA and Barcelona sponsorship does matter.

"GPWA supports cybercrime" otherwise they would have dropped the sponsor. Any legal contract can be discontinued for this.
the money must be sweet as honey.

[antihacker]

"GPWA supports cybercrime" otherwise they would have dropped the sponsor. Any legal contract can be discontinued for this.
the money must be sweet as honey.

I understand you are saying this. It used to be me saying it. But 'behind the scenes' things are happening. If I get my way, all of this will be over sooner rather than later. It is not just a matter of 'kicking out a program'. It is a lot more complex.

Let's be positive and proactive instead of negative. Shall we?

Thank you.