CJ Affiliate 7115795 claiming commission on organic traffic to Gap

Posted by on Jul 10, 2013 in Adware, Affiliate Fraud, Cookie-Stuffing

Co-authored with Ben Edelman On a computer running Zango adware, our crawler browses the oldnavy.gap.com site.  Zango sees this traffic and opens a window to surveysclick.com (packet trace).  Surveysclick.com returns tricky redirects and eventually does a POST through to a CJ click link with publisher ID 7115795, then on to Gap.  As shown in the […]

CJ Affiliate 3970235 invisibly claiming commission on organic traffic to Skinstore.com

Posted by on Jul 9, 2013 in Adware, Affiliate Fraud, Cookie-Stuffing

Co-authored with Ben Edelman Using a computer running Zango adware, our crawler browses www.skinstore.com.  Zango sees this traffic and opens a window to firststopmall.com (network trace).  A user sees a popup offer from corehq.com.  But at the same time, an invisible image redirects to the CJ click link with publisher ID 3970235, then on to […]

CJ Affiliate 5898178 claiming commission on organic traffic to 123Inkjets

Posted by on Jul 8, 2013 in Adware, Affiliate Fraud, Cookie-Stuffing

Co-authored with Ben Edelman Using a computer running Perion Incredibar adware, our crawler browses the 123Inkjets site.  Incredibar sees this traffic and invisibly invokes the CJ click link with publisher ID 5898178, which redirects back to 123Inkjets. Because the toolbar drops CJ cookies invisibly, there is nothing for us to show in a screenshot.  But […]

CJ Affiliate 5740999 claiming commission on organic traffic to Tirerack

Co-authored with Ben Edelman On a computer running Zango adware, our crawler browses the tirerack.com site.  Zango sees this traffic and opens a window to Trackmyads (packet trace).  Trackmyads returns tricky JavaScript that redirects to Offershack which redirects to the CJ click link with publisher ID 5740999, then on to Tirerack.  As shown in the […]

CJ Affiliate 5669264 invisibly claiming commission on organic traffic to AVG

Posted by on Jul 4, 2013 in Affiliate Fraud, Cookie-Stuffing, Wire Fraud

Co-authored with Ben Edelman On June 25, 2013 using a computer running Perion Incredibar adware, our crawler browses the AVG site.  Incredibar sees this traffic and invisibly invokes the CJ click link with publisher ID 5669264, which redirects back to AVG. Because the toolbar drops CJ cookies invisibly, there is nothing for us to show […]

CJ Affiliate 3744050 claiming commission on organic traffic to Vistaprint

Posted by on Jul 3, 2013 in Adware, Affiliate Fraud, Cookie-Stuffing, PPV, Wire Fraud

Co-authored with Ben Edelman On June 25, 2013 using a computer running Zango adware, our crawler browses the vistaprint.com site.  Zango sees this traffic and opens a window to searchquikly.com (packet trace).  Searchquikly 302 redirects to shoppingcollections.com which returns JavaScript that redirects to an encoded CJ click link (which maps to affiliate ID 3744050), then […]

CJ Affiliate 6365251 invisibly claiming commission on organic traffic to Symantec Norton

Posted by on Jul 2, 2013 in Adware, Affiliate Fraud, Cookie-Stuffing, Wire Fraud

For the remainder of this month I will be working with Ben Edelman to report a flurry of infractions involving rogue affiliates. On June 25, 2013 using a computer running Zango adware, our crawler browses the buy.norton.com site for Symantec Norton software.  Zango sees this traffic and opens a window to Doublemyspeedscam (packet trace).  A user […]

Affiliate Fraud Through Adult Advertising Networks

Posted by on Jul 1, 2013 in Affiliate Fraud, Cookie-Stuffing, Wire Fraud

* This post links to adult content * Spend a while browsing through pornsharia.com (Alexa Rank #1045) and you’re going to stumble across something other than free porn, adult ads and every kind of man or woman looking to “hook up” only a few miles away from you. This packet trace highlights a rogue affiliate in […]

Rogue Venturebeat.com Advertiser Plunders Affiliate Revenue

Venturebeat.com (Alexa Rank #2,957) has a number of options available to advertisers. They range from an $11 300×250 CPM model (that’s per thousand impressions on their site) all the way through to $1,500 per week for a 125×125 button: The weekly button is what is of interest to us today, for one of these advertisers is using […]