{"id":5136,"date":"2022-11-23T15:08:59","date_gmt":"2022-11-23T15:08:59","guid":{"rendered":"https:\/\/adex.com\/?p=5136"},"modified":"2026-04-23T10:48:20","modified_gmt":"2026-04-23T10:48:20","slug":"adex-discovers-potential-dns-vulnerability-and-3rd-party-fraud-on-fc-barcelonas-official-website","status":"publish","type":"post","link":"https:\/\/adex.com\/blog\/adex-discovers-potential-dns-vulnerability-and-3rd-party-fraud-on-fc-barcelonas-official-website\/","title":{"rendered":"ADEX Discovers: Potential DNS Vulnerability and 3rd Party Fraud on FC Barcelona\u2019s Official Website"},"content":{"rendered":"\n

Adex recently revealed a potential 3rd party fraud scheme at play involving one of the top European football clubs’ websites \u2013 FC Barcelona\u2019s website.<\/em><\/p>\n\n\n\n

Among the major Adex\u2019s clients is a global ad network \u2013 PropellerAds, which employs Adex to check millions of ad campaigns being launched on their platform. The company is extremely meticulous regarding fraud prevention and brand safety.<\/p>\n\n\n\n

On November 16, during routine automated campaign checks and monitoring, Adex specialists identified a suspicious link leading to the official website of Barcelona FC. This anomaly immediately alerted the anti-fraud squad and triggered the manual review process.<\/p>\n\n\n\n

\"Adex<\/a><\/figure>\n\n\n\n
\"Adex<\/a><\/figure>\n\n\n\n

Upon scrupulous analysis, a mismatch of NS records in the second- and third-level domains has been spotted. The official website (root domain) is hosted on AWS (Amazon Web Services), yet the NS records of the subdomain are on Google Cloud DNS.<\/p>\n\n\n\n

\"Adex<\/a>
Root domain<\/em><\/figcaption><\/figure>\n\n\n\n
\"Adex<\/a>
Subdomain<\/em><\/figcaption><\/figure>\n\n\n\n

Based on these facts combined with further research indicating that IP addresses do not match, we can say that this iGaming page is most probably fraudulent and likely started operating around October 26.<\/p>\n\n\n\n

\n\n\n\n

Fake subdomain<\/strong><\/h2>\n\n\n\n

Clearly, the ad campaign was instantly banned to prevent any possible fraud attack. <\/p>\n\n\n\n

The contents of the subdomain webpage represented a huge risk not just in terms of brand safety but also of potential illegal gambling.<\/p>\n\n\n\n

It is possible that the Football club didn\u2019t notice the illegal activity due to several factors, including:<\/p>\n\n\n\n

    \n
  • The subdomain was not indexed by Google<\/strong><\/li>\n\n\n\n
  • There was no traffic spike since the subdomain was hosted on a different server<\/li>\n<\/ul>\n\n\n

    Our leading anti-fraud expert adds: \u2018It definitely doesn\u2019t happen every day to expose such a fraud case. Usually, criminals mimic popular or authoritative websites by switching a letter or two in the domain name or copying the interface’s design. It\u2019s a bold move to hijack a subdomain of a club loved by many and use their good name to deceive users.\u2019\u00a0\u00a0<\/em><\/p>\n<\/div><\/div>\n