InstallBay / VisiBay / IMINENT SA Review by PayPerInstaller - 3/10 Rating

PayPerInstaller

Junior Member
Joined
Feb 16, 2015
Messages
187
Reaction score
63

INTRODUCTION - HOW OUR INSTALLER WORKS :

When executed, installer pings back home (via http) so we know when an execution is successful. The installer only runs with admin privileges, It doesnt execute under normal user privs. Runs on both 32bit and 64bit operating systems.



This is the first screen user sees (example) :
P1jUGgE


Click on NEXT takes it here :
xCaHaoY


...click on install starts a download & execute code - which cant be aborted by the user. It queries our webserver for dl03.php which contains a direct download link to installbay installer (via a 302 redirect).
8XBKxId


At this point InsallBay installer is executed (our installer stays stuck like this - it can't be closed, it waits for installbay installer to finish whatever it is doing).


DATA :

Total executions : 219
http://pastebin.com/Kysp4BGr

Total callbacks / successful executions of Installbay installer : 165
Installbay installer allows us to specify the URL of our product. What happens is, upon successful execution, their installer immediately connects to our server to download the product.
Without any doubt, every callback = successful execution of installbay installer.
http://pastebin.com/k57LiJ5D

How do we explain the difference between executions and callbacks? Anti Virus + *SUSPICIOUS ACTIVITY

Total conversions : 88 / TOTAL REVENUE : $84.18 (US TRAFFIC, $0.95 per conversion)

Execution / conversion ratio = 40%
Callback / conversion ratio = 53%

*SUSPICIOUS ACTIVITY = We found out by coincidence that they cycle installers - every fifth execution loaded airinstaller.com installer! This installer did not pull our product from our servers so every fifth execution did
not count as a callback! Very unlikely conversions via airinstaller.com got counted.

** SUSPICIOUS ACTIVITY = We also received 122 MAC callbacks but they got 'lost' ! None were reported as conversions :
[2:46:23 PM]VISIBAY AM : I have good news and bad news
[2:46:23 PM]VISIBAY AM : Which ones do you want first?
.... (bad news)...
[2:56:11 PM]VISIBAY AM : I have the data for the Mac executions. Our now old Mac installer counted 215 executions and 0 successful installs.


PAYMENT :
NET20

Due date was 20. Nov. They sent the money to a wrong paypal address and couldn't re-issue because of 'approval'. Got the payment on Monday 23. Nov. Guess what, same thing happened to one other BHW member active here. They misspelled his email just like they did mine. If i had to guess, i'd say they had no money on PayPal on Friday... So sleazy..

CONCLUSION : Shaving + low rates + cycling of third party installers (airinstaller.com) - STAY AWAY

UPDATE 24. Nov. : Avg. rate for US installs has dropped to $0.65


 
I'd like to test couple more networks before giving out recommendations. If anyone has an account with airinstaller, open candy or iron source please PM me.
 
Hey Bro you are doing great job ! HATS OFF !!! Please keep us updated every PPI you try and also recommend the best PPI at the end .. HUNT FOR BEST PPI ..........Counting ...........

Can you please review on revenyou against amonetize ?
 
Last edited:
Hey man, I really appreciate you doing this for us. Keep up the good work!
 
I'm unable to edit first post so here it goes...

Known Romanian scammer KROGERTEK / PUREBITS.NET is still running his scam network! He is using VISIBAY installer!
I've made VISIBAY aware of Purebits.net scam a dozen times. They are aware of the shitlist thread :
http://www.blackhatworld.com/blackhat-seo/shit-list/796541-scammed-purebits-krogertek.html

Both PureBits.net and VisiBay are located in Romania. What I forgot to mention in the first post is that VISIBAY installer had a string "version=Purebits" in their callbacks, eg :
184.20.230.* - - [28/Sep/2015:13:41:28 +0200] "GET /download/player.png HTTP/1.1" 200 3289 "http://s.appfuss.com/setup/start?lcid=1033&publisherid=6183&version=Purebits&compliancy=0&theme=OnePage" "Mozi
lla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"

This was back in September.

I've asked account managers Ciprian and Mihai several times what their relationship with purebits is and every time was told none. They've lied. No reputable company would do business with a known scammer!
 
Purebits are resellers of InstallBay (Visibay). But InstallBay is reseller of InstallCore - IronSrc.
 
Purebits are resellers of InstallBay (Visibay). But InstallBay is reseller of InstallCore - IronSrc.

VisiBay AMs say they run their own installer. I'm going to contact InstallCore, see how they feel about a known scammer (purebits) reselling their services..
 
Back
Top