CJ Affiliate 3970235 invisibly claiming commission on organic traffic to Skinstore.com

Posted by on Jul 9, 2013 in Adware, Affiliate Fraud, Cookie-Stuffing

Co-authored with Ben Edelman

Using a computer running Zango adware, our crawler browses www.skinstore.com.  Zango sees this traffic and opens a window to firststopmall.com (network trace).  A user sees a popup offer from corehq.com.  But at the same time, an invisible image redirects to the CJ click link with publisher ID 3970235, then on to Skinstore. affiliate fraud

If a user subsequently makes a purchase, CJ and Skinstore records will credit affiliate 3970235 with purportedly causing that purchase.  But in fact the user was already at the Skinstore site before the Zango adware and this affiliate 3970235 intervened.  They did nothing to cause or encourage the user’s purchase, and in fact they affirmatively interfered with the purchase by interrupting the user with an irrelevant popup.  Any payments to this affiliate are entirely wasted.

« »