Using Zango to steal Ccbill join form traffic. What can we do about this?
 

This was posted in another thread.
If a surfer with the zango toolbar tries to join a ccbill site they get popped with the XXXPass join form on top of the Ccbill join form.

What can be done to stop this? This is definitely hurts all sites processing with ccbill.

actually the most amazing thing in the WEG thread was so few noticed this or seemed to realize what this screencap meant. it's far far worse than free trial join schemes - i talked to Mark from CCBILL about it, they are aware of it and gathering info.

i don't think anybody will be coming in here supporting QuickBuck stealing join page traffic.

I guess you could drop ccbill

Wonder if the same hook works in Firefox..

I was surprised by that too. For all the hoopla over smaller things that take place on the board, everyone seemed to ignore the fact a company is phishing signups.

It's not just ccbill either..
This just came up as I was checking out Twistys join pages..
Again, I had to resize the popup so you could see what it popped over.
Target = wnu.com
http://img66.imageshack.us/img66/2256/wnuxxxpasstq9.jpg

Who has the .htaccess code to dump zango toolbar referrers? I remember seeing it and not putting it on my server. Anyone have that?

The worst part is surfers don't understand our business and will think I'm trying to sell them off for extra money. We get complaints about stuff we have no control of. Surfers don't know how the business works and they would think in this situation Twistys is trying to make more money off me. And as a result would leave me site and possibly stop spending online for some time.

not really a solution - the surfer infected with Zango is trying to join a paysite - why wouldn't you want him? i doubt there is a way with htaccess to stop the QuickBucks pop up from being triggered.

Damn this sucks ,

I would like to get that script that redirect all zango users to a removal page.

Anyone can link me

That is assuming they even realize it is a popup. It comes up pretty fast and covers the screen once you click a link to either ccbill or wnu. They probably think it's just your 'network' signup page or something.

It's interesting how I called out Wegcash on something that a large number of program owners felt was not a problem but now after the shitstorm has settled it's been revealed that one of the companies Weg cash cross sells to is in turn turning around and stealing our join form hits. I'm sure this is just the tip of the iceberg as well.

i missed it because i joined the thread late and didnt read through the first 5 pages but see it now. :mad::mad::mad::mad::disgust

You could stop them from ever getting to the fraudulent join page and cut off the scammer's income.

RewriteCond %{HTTP_USER_AGENT} zango [NC]
RewriteRule ^$ http://www.send-em-here.com/zango-removal-page.html [R]

Definitely theft and fraud. They should get hit with some sort of class action law suit.

This stuff should not only be going against the sponsors that are buying these clicks, but this is also great evidence against Zango themselves.

This type of practice is not just shady, it's outright theft. Somebody should make sure copies of evidence like this get filed in complaints with the FTC and anyone else who can prosecute them, like the credit card companies.

there isnt even a grey line with that shit. it is straight up theft. not a surprise coming from quickbuck though.

thx.. that url is 404 though, however, I see what needs to be here so cool. Smokey also has a javascript popup to infected referrers which retains the traffic.

<script>
var agt=navigator.userAgent.toLowerCase();
if (agt.indexOf("zango")!=-1)
alert("WARNING - do not close this message - please read - You have what many people call dangerous spyware known as ZANGO installed on your system. We are not here to sell you anything you can remove it for free simply go to google and type REMOVE ZANGO into the search box and you will find many websites to help you remove it.");
</script>

That's just brutal.

Should we expect a reply from Quickbuck in here?

this is not good :disgust

Btw is Xxxpass definitely quickbuck?

Lmao.. send-em-here.. didn't even notice that.. oh shit.. nm

:1orglaugh

The big problem I see is that I am 100&#37; certain this is not limited to zango toolbar only. How many other spyware programs are out there where the same thing (if not worse) is happening without any of us knowing?

of course it is quickbuck, they have pulled this shit for years. look up idownload or isearch. they are literally stealing signups by acting like the join page for another site. it also pisses off customers who think they are signing up for one site and realize they did not. guys like shap get stuck answering emails about why their signup did not go through.

if it was me and my signups being stolen, there would not be beers and handshakes at the next show.

Who's site is XXXPass.com? Is it Quickbucks?
Edit:already answered.

I recently joined their program, good thing I just caught this thread. I am not sending them a single unique.
Fuckers.

I hope ccbill slaps them hard.

wow, this is actually pretty fucking serious

They've made it hard as hell to find out. I see the whois info was recently updated back in June to a protected state as well. Quickbuck and xxxpass both sit on the same IP so I would think so.

Well I for one pulled their sig and going to pull links. This is definitely fucked up. Yes XXXPass is Quickbuck.

Gary

Same here.

I've only been sending a couple of dozen hits a day so far.

Luckily, I can pull the links very easily.

Does this happen on all ccbill join pages?

looking to see if have anything going to QuickBuck. if so its getting pulled and blacklisted. this is bullshit and people like this should be blacklisted from our industry, taken out in the streets and beaten.

Consider this thread a sticky. I dont think it will be going away for a while.

Appherently so.

CCBill AND Epoch

I'd expect ccBill and Paycom to get their legal teams all over this.
WG

This is a problem that has been going on for some time now and Zango is a small percentage..very small percentage of what is out there. There was a thread made a few months ago by "porcypig", check it out, watch the videos, follow the links.

Why is it still happening? Simple, not enough people/owners give a fuck.

Why do not enough people/owners give a fuck? Lack of knowledge..lack of truly understanding what is happening and its affect on their biz.

I have spoken to many program owner concerning Septembers HORRIBLE numbers and 90% of them blame the US economy and "maybe its just a bad month" LOL..a bad month?

What do we do? Awareness. Let everyone know that this is indeed a problem and a fucking huge one at that. From there we need to educate our surfers. Other than that, not much else we can do....unless maybe a class action suite that will cost millions and take years.

Ray

I got suckered in by the $50 PPS.

:mad:

I let Wiseman know about this thread and he hasn't responded and it says he's online.

Gary

so anyone who has zango on their pc and tried to signup to a ccbill site or epoch site, will get a quickbuck signup page popped up instantly full screen over the intended site's signup page.

So the affiliate who was sending the traffic doesn't get the sale, the sponsor he was sending it to doesn't get the sale. The surfer who thinks he is signing up to site A, gets access to another site, and he gets screwed.

Way to go QuickBuck, great fucking model. You screw just about everyone here. Someone should do jail time or get hit with a civil suit. If i was ccbill i would own quickbuck by the time this is done. I wonder how much ccbill is losing in processing fees. It might just be 1 or 2 signups for an affiliate, a couple hundred for the sponsors, but think about all of the sponsors using ccbill, ccbill could be having thousands of signups stolen, tons of money in processing fees.

Type in the base url.

http://wow.eroticagateway.com/

Also if you go login to your quickbuck account and you know the program ID of their hidden program (easy to get by decoding the nats code in the url), you can generate linkcodes for xxxpass.com.

Don't forget quickbuck and it's history with their "spyware removal tool"

lol :thumbsup

Heh, I got this email from them just yesterday
Translation: Hurry up and put those links up, we cant wait to fuck you in the ass! :thumbsup

Idiots, quick to blame a mysterious slow down "economy, weather, time of year, summer" never mind the spyware ripping your joins, na that can't be it, its because of gas prices.... idiots... :upsidedow

Those of you with single girl sites might want to check these links:

http://www.carolcox.org/

and

http://www.carolcox.org/links.html

or

http://www.almondtease.org/

or

http://www.arikaames.org/

or

http://www.angiesavage.org/

The list goes on and on....

All sites with un-watermarked content, and if you go through the extensive list of links, I doubt the content has been authorized or bought. All downloads and links eventually point to XXXPass....

This shit is getting out of hand. I for one am glad I'm working my way out of adult. Anymore you just can't trust sponsors especially with all the crap that has been discovered in the last year. Seems I been pulling more links lately than putting them up. Just has gotten way out of hand and the ratios are showing it.

Gary

please post it for us that dont know. post all their history....

yes but with this code the surfer also doesn't get to my join page either - he gets sent to the zango removal page - then he has to go through the steps to remove it - then i have to hope he comes back and joins. it's better than doing nothing cuz i'm sure some would come back and join - breaking legs is probably the best solution unfortunately.

I think people know what is going on, they just don't want to rock the boat. Tons of program owners know they are being fucked, they are just scared to call out a "pioneer" or "industry leader". Until more program owners step up and put their business above some beers at shows and being called a bro, nothing will change.

I hear ya man... headed to mainstream as well.

Alot of PPS companies have XXXPass as their cross sell. Now that this information is public what does that say about those companies if they continue to push their cross sales to XXXPass?