The website’s affiliate structure is displayed in an image on its homepage.
Within CPABuild, there are various tiers of users. The website claims it has paid out more than $40 million to publishers and has thousands of templates and landing pages. The website claims it has “daily” fraud checks in place to catch bad actors abusing its platform, and its terms of service prohibit those using it from being involved in fraud and from sharing multiple kinds of content. The company website does not name any individuals who are behind CPABuild and is sparse on overall details. WIRED contacted multiple email addresses listed on CPABuild’s website, as well as sending questions via a contact form, but we did not receive any response. This results-based process is known as a cost per action (CPA) by advertisers and marketers. They often do so via spamming links to YouTube comments or creating the kind of pop-up “locker” pages towards the end of the poison PDF click chain. Then users of CPABuild, often known as affiliates, try to get people to complete these offers. Googling for a file linked to the PDFs brings up pages of results of compromised websites.ĬPABuild’s website, which lists its legal registry in Nevada, describes itself as a “content-locking network first and foremost.” The company, which has existed since 2016, hosts tasks from its customers, such as giving people the chance to win money by submitting their email and postal code details. “They're pushing advertising campaigns into someone else’s infrastructure,” he says.
All the compromised websites that have PDFs uploaded are calling to command-and-control servers owned by CPABuild, Edwards says. But these stand out, as they all have links back to the advertising firm CPABuild and the members that work for its network, Edwards says. These kinds of scams have been around for a while, ad fraud researchers say.
0 kommentar(er)
