The original post: /r/hacking by /u/BorvuxVI on 2024-05-17 22:44:04.

For more than 2 months we get several alerts that our specific customer branding is appearing on sketchy websites. I look at the screenshots taken by the tooling and the client brand is just referenced in a hosted ad.

I’ve looked for overlapping characteristics on more than 20 domains at DNS/WHOIS/content level. Reviewed all the DOM sections of URLScan. Checked for Google/Adsense ID’s. Nothing. I’m stumped.

I’ve set my VM to the same parameters of those used by the tooling to try and trigger adverts geared towards a local audience, and I can’t seem to make these adverts appear again. I really want to know why the sudden surge, what these adverts direct users to etc.

I’ve checked with the client as well as our vendor, no insights shared to explain. I’m out of ideas and now hoping the community can point me in the right direction.

Thanks!