{"id":6149,"date":"2026-09-21T10:04:06","date_gmt":"2026-09-21T10:04:06","guid":{"rendered":"https:\/\/adex.com\/blog\/?p=6149"},"modified":"2026-09-21T10:53:11","modified_gmt":"2026-09-21T10:53:11","slug":"igaming-redirect-chain-hacked-educational-site","status":"publish","type":"post","link":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/","title":{"rendered":"Trusted Domain, Untrusted Destination: A Hacked Educational Site in an iGaming Redirect Chain"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A reputable domain often feels like a safety net, especially when the destination URL sits on a university or a government site. However, the assumption that such a domain is strictly controlled and poses no risk to users broke years ago, and fraudsters have built schemes around that gap ever since.<\/p>\n\n\n<div class=\"block__bord\"><div class=\"block__bord_desc\"><p>ADEX recently uncovered a campaign built entirely on exploiting a trusted domain. On paper, the client&#8217;s campaign was spotless: a valid URL, a respectable educational website, and a creative that passed every check. However, the fraud happened after the click, which is why no amount of domain checking would have found it.\u00a0<\/p>\n<\/div><\/div>\n<style>\n.block__bord { margin: 32px 0; padding: 1.25em 2.375em;\tborder-radius: 24px; background: rgba(0, 220, 200, 0.20); }\n.block__bord_desc {font-size: 16px !important;font-weight: 400 !important;color: #606060 !important;}\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">In this piece, we will describe how the scheme worked in detail, explain why safe domain logic cannot catch this type of fraud, and what advertisers, networks, and site owners can do about it.<\/p>\n\n\n<div class=\"toc\"><h4 class=\"toc__title\" id=\"contents\">Contents<\/h4><ul class=\"toc__list\"><li class=\"toc__list_item\"><a href=\"#what-adex-found-out-the-igaming-platform-instead-of-a-college-site\">What ADEX Found Out: The iGaming Platform Instead of A College Site<\/a><\/li><li class=\"toc__list_item\"><a href=\"#is-this-a-one-off-or-a-common-issue\">Is This a One-Off Or a Common Issue?<\/a><\/li><li class=\"toc__list_item\"><a href=\"#how-to-recognize-and-avoid-site-reputation-abuse\">How to Recognize and Avoid Site Reputation Abuse?<\/a><\/li><li class=\"toc__list_item\"><a href=\"#what-does-it-mean-for-the-industry\">What Does It Mean For The Industry?<\/a><\/li><\/ul><\/div><style>\n.toc {}\n.toc__title {\n      font-size: 32px;\n    line-height: 40px;\n    font-weight: 700;\n}\n.toc__list_item {\n    color: #FE645A !important;\n}\n.toc__list_item:not(:last-child){\n    margin-bottom: 5px;\n}\n.toc__list_item a {\n    font-size: 18px;\n    line-height: 24px;\n    color: #FE645A;\n    font-weight: 600;\n}\n.toc__list_item a:hover {\n    text-decoration: underline;\n}\n@media (max-width: 1023px) {.toc__title {font-size: 24px;line-height: 32px;}}\n<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-adex-found-out-the-igaming-platform-instead-of-a-college-site\">What ADEX Found Out: The iGaming Platform Instead of A College Site<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our monitoring team spotted a suspicious advertising campaign in our clients\u2019 ads. Instead of a landing page, the ad sent people on a detour that looked completely ordinary \u2013 a Google search in Thai. At the end of that detour was an iGaming platform, which is precisely why the detour existed.&nbsp;<\/p>\n\n\n\n<div class=\"tdsc-root\" role=\"group\" aria-label=\"How the scheme worked\">\n\n  <p class=\"tdsc-phase\">Before the campaign<\/p>\n\n  <div class=\"tdsc-node tdsc-node--serious\">\n    <span class=\"tdsc-n\">1<\/span>\n\n    <div class=\"tdsc-body\">\n      <div class=\"tdsc-title\">The college site is hacked<\/div>\n\n      <p class=\"tdsc-text\">\n        Someone plants an iGaming page on the genuine domain of a real educational institution.\n      <\/p>\n\n      <span class=\"tdsc-tag\">\n        <i aria-hidden=\"true\"><\/i>\n        <span>\u26a0 COMPROMISED SITE<\/span>\n      <\/span>\n    <\/div>\n  <\/div>\n\n  <div class=\"tdsc-link\" aria-hidden=\"true\"><\/div>\n\n  <div class=\"tdsc-node tdsc-node--clean\">\n    <span class=\"tdsc-n\">2<\/span>\n\n    <div class=\"tdsc-body\">\n      <div class=\"tdsc-title\">Google indexes it and ranks it first<\/div>\n\n      <p class=\"tdsc-text\">\n        The page never earns that position. It inherits the authority of an academic zone reserved for education. The crawler is the only reader it ever gets.\n      <\/p>\n\n      <span class=\"tdsc-tag\">\n        <i aria-hidden=\"true\"><\/i>\n        <span>TRUSTED ZONE<\/span>\n      <\/span>\n    <\/div>\n  <\/div>\n\n  <div class=\"tdsc-link\" aria-hidden=\"true\"><\/div>\n\n  <p class=\"tdsc-phase\">Campaign live<\/p>\n\n  <div class=\"tdsc-node tdsc-node--clean\">\n    <span class=\"tdsc-n\">3<\/span>\n\n    <div class=\"tdsc-body\">\n      <div class=\"tdsc-title\">The ad points at a Google search<\/div>\n\n      <p class=\"tdsc-text\">\n        Destination URL is <code>google.com\/search?q=\u2026<\/code> with the query already filled in. Not the advertiser&#8217;s site, not the final destination.\n      <\/p>\n\n      <span class=\"tdsc-tag\">\n        <i aria-hidden=\"true\"><\/i>\n        <span>NOTHING IN THE CREATIVE TO REJECT<\/span>\n      <\/span>\n    <\/div>\n  <\/div>\n\n  <div class=\"tdsc-link\" aria-hidden=\"true\"><\/div>\n\n  <div class=\"tdsc-node tdsc-node--clean\">\n    <span class=\"tdsc-n\">4<\/span>\n\n    <div class=\"tdsc-body\">\n      <div class=\"tdsc-title\">The user clicks the top result<\/div>\n\n      <p class=\"tdsc-text\">\n        A second click, made by the user, on a third party&#8217;s results page. That click is what carries the traffic onward.\n      <\/p>\n\n      <span class=\"tdsc-tag\">\n        <i aria-hidden=\"true\"><\/i>\n        <span>OUTSIDE THE AD&#8217;S CLICK PATH<\/span>\n      <\/span>\n    <\/div>\n  <\/div>\n\n  <div class=\"tdsc-link\" aria-hidden=\"true\"><\/div>\n\n  <div class=\"tdsc-node tdsc-node--critical\">\n    <span class=\"tdsc-n\">5<\/span>\n\n    <div class=\"tdsc-body\">\n      <div class=\"tdsc-title\">The page redirects on load<\/div>\n\n      <p class=\"tdsc-text\">\n        It never renders. The user lands on the iGaming site without ever seeing the college page they passed through.\n      <\/p>\n\n      <span class=\"tdsc-tag\">\n        <i aria-hidden=\"true\"><\/i>\n        <span>\u26d4 iGaming DESTINATION<\/span>\n      <\/span>\n    <\/div>\n  <\/div>\n\n<\/div>\n\n<style>\n  .tdsc-root {\n    --tdsc-surface: #FCFCFB;\n    --tdsc-plane: #F9F9F7;\n    --tdsc-ink: #0B0B0B;\n    --tdsc-ink-secondary: #52514E;\n    --tdsc-muted: #898781;\n    --tdsc-hairline: #E1E0D9;\n    --tdsc-border: rgba(11, 11, 11, 0.1);\n    --tdsc-clean: #2A78D6;\n    --tdsc-serious: #EC835A;\n    --tdsc-critical: #D03B3B;\n    --tdsc-chip-background: rgba(11, 11, 11, 0.04);\n\n    width: 100%;\n    max-width: 660px;\n    margin: 0 auto;\n    padding: 26px 24px 28px;\n    overflow: hidden;\n    border-radius: 14px;\n    background: var(--tdsc-plane);\n    color: var(--tdsc-ink);\n    font-family: system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\",\n      Roboto, Arial, sans-serif;\n    text-align: left;\n  }\n\n  .tdsc-root,\n  .tdsc-root *,\n  .tdsc-root *::before,\n  .tdsc-root *::after {\n    box-sizing: border-box;\n  }\n\n  .tdsc-phase {\n    display: flex;\n    align-items: center;\n    gap: 10px;\n    margin: 0 0 12px;\n    padding: 0;\n    color: var(--tdsc-muted);\n    font-size: 10.5px;\n    font-weight: 700;\n    line-height: 1.3;\n    letter-spacing: 0.09em;\n    text-transform: uppercase;\n  }\n\n  .tdsc-phase:not(:first-child) {\n    margin-top: 6px;\n  }\n\n  .tdsc-phase::after {\n    content: \"\";\n    flex: 1;\n    min-width: 20px;\n    height: 1px;\n    background: var(--tdsc-hairline);\n  }\n\n  .tdsc-node {\n    --tdsc-accent: var(--tdsc-clean);\n\n    position: relative;\n    display: flex;\n    align-items: flex-start;\n    gap: 13px;\n    width: 100%;\n    padding: 13px 16px 13px 17px;\n    overflow: hidden;\n    border: 1px solid var(--tdsc-border);\n    border-radius: 10px;\n    background: var(--tdsc-surface);\n  }\n\n  .tdsc-node::before {\n    content: \"\";\n    position: absolute;\n    top: 0;\n    bottom: 0;\n    left: 0;\n    width: 3px;\n    border-radius: 10px 0 0 10px;\n    background: var(--tdsc-accent);\n  }\n\n  .tdsc-node--clean {\n    --tdsc-accent: var(--tdsc-clean);\n  }\n\n  .tdsc-node--serious {\n    --tdsc-accent: var(--tdsc-serious);\n  }\n\n  .tdsc-node--critical {\n    --tdsc-accent: var(--tdsc-critical);\n  }\n\n  .tdsc-n {\n    display: grid;\n    flex: 0 0 22px;\n    place-items: center;\n    width: 22px;\n    height: 22px;\n    margin-top: 1px;\n    border: 1px solid var(--tdsc-border);\n    border-radius: 50%;\n    background: var(--tdsc-chip-background);\n    color: var(--tdsc-ink-secondary);\n    font-size: 11px;\n    font-weight: 700;\n    line-height: 1;\n  }\n\n  .tdsc-body {\n    display: flex;\n    flex: 1;\n    flex-direction: column;\n    gap: 4px;\n    min-width: 0;\n  }\n\n  .tdsc-title {\n    margin: 0;\n    padding: 0;\n    color: var(--tdsc-ink);\n    font-family: inherit;\n    font-size: 14.5px;\n    font-weight: 700;\n    line-height: 1.3;\n  }\n\n  .tdsc-text {\n    margin: 0;\n    padding: 0;\n    overflow-wrap: anywhere;\n    color: var(--tdsc-ink-secondary);\n    font-size: 12.5px;\n    font-weight: 400;\n    line-height: 1.45;\n  }\n\n  .tdsc-root code {\n    padding: 1px 5px;\n    border: 0;\n    border-radius: 4px;\n    background: var(--tdsc-chip-background);\n    color: var(--tdsc-ink);\n    font-family: ui-monospace, \"SFMono-Regular\", \"SF Mono\", Menlo, Consolas,\n      monospace;\n    font-size: 11px;\n    white-space: normal;\n    overflow-wrap: anywhere;\n  }\n\n  .tdsc-tag {\n    display: inline-flex;\n    align-self: flex-start;\n    align-items: center;\n    gap: 6px;\n    max-width: 100%;\n    margin-top: 4px;\n    padding: 4px 9px;\n    border: 1px solid var(--tdsc-border);\n    border-radius: 999px;\n    background: var(--tdsc-chip-background);\n    color: var(--tdsc-ink);\n    font-size: 10.5px;\n    font-weight: 700;\n    line-height: 1.3;\n    letter-spacing: 0.03em;\n    white-space: normal;\n  }\n\n  .tdsc-tag i {\n    flex: 0 0 6px;\n    width: 6px;\n    height: 6px;\n    border-radius: 50%;\n    background: var(--tdsc-accent);\n  }\n\n  .tdsc-link {\n    position: relative;\n    width: 10px;\n    height: 26px;\n    margin-left: 28px;\n  }\n\n  .tdsc-link::before {\n    content: \"\";\n    position: absolute;\n    top: 0;\n    bottom: 6px;\n    left: 0;\n    width: 2px;\n    background: var(--tdsc-hairline);\n  }\n\n  .tdsc-link::after {\n    content: \"\";\n    position: absolute;\n    bottom: 0;\n    left: -3px;\n    border-top: 6px solid var(--tdsc-hairline);\n    border-right: 4px solid transparent;\n    border-left: 4px solid transparent;\n  }\n\n  @media (max-width: 520px) {\n    .tdsc-root {\n      padding: 20px 14px 22px;\n      border-radius: 12px;\n    }\n\n    .tdsc-node {\n      gap: 11px;\n      padding: 12px 12px 12px 14px;\n    }\n\n    .tdsc-title {\n      font-size: 14px;\n    }\n\n    .tdsc-text {\n      font-size: 12px;\n    }\n\n    .tdsc-tag {\n      padding: 4px 8px;\n      font-size: 9.5px;\n      letter-spacing: 0.02em;\n    }\n\n    .tdsc-link {\n      height: 23px;\n      margin-left: 25px;\n    }\n  }\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here is how the scheme worked step by step:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Step 1. The college website was compromised.<\/strong> Before the campaign launched, someone planted an iGaming-themed page on km.chpc.ac.th, the genuine domain of a Thai educational institution.<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Step 2. Google indexed the planted page. <\/strong>The page appeared as the top result for a specific Thai-language query. Instead of building a new domain\u2019s reputation, the operator used a page hosted on an established educational domain<strong>.<\/strong><\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Indexed-Planted-iGaming-Page.jpg\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"1280\" height=\"268\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Indexed-Planted-iGaming-Page.jpg\" alt=\"Adex - Google search showing a planted iGaming page ranking first for a Thai-language query on an educational domain.\" class=\"wp-image-6152\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Indexed-Planted-iGaming-Page.jpg 1280w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Indexed-Planted-iGaming-Page-300x63.jpg 300w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Indexed-Planted-iGaming-Page-1024x214.jpg 1024w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Indexed-Planted-iGaming-Page-768x161.jpg 768w\" sizes=\"(max-width: 1280px) 100vw, 1280px\" \/><\/a><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Step 3. The ad pointed to a Google search results page<\/strong>. <strong>The ad pointed at the Google search results, not a landing page.<\/strong> A search results page has an ordinary URL, and an ordinary URL can be dropped into a creative like any other: in this campaign, the destination was google.com\/search?q=\u2026, with a Thai query already filled in. Neither the advertiser&#8217;s own site nor the iGaming-related page appeared anywhere in the campaign. Whatever a reviewer opened, and whatever a crawler followed, resolved to Google.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Search-Results-Ad-Destination.jpg\" target=\"_blank\" rel=\" noreferrer noopener\"><img decoding=\"async\" width=\"1280\" height=\"230\" src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Search-Results-Ad-Destination.jpg\" alt=\"Adex - Google search result for a planted iGaming page used as the campaign's indirect ad destination.\" class=\"wp-image-6153\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Search-Results-Ad-Destination.jpg 1280w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Search-Results-Ad-Destination-300x54.jpg 300w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Search-Results-Ad-Destination-1024x184.jpg 1024w, https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-Google-Search-Results-Ad-Destination-768x138.jpg 768w\" sizes=\"(max-width: 1280px) 100vw, 1280px\" \/><\/a><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Step 4. The user clicked the top search result.<\/strong> This second click occurred on Google\u2019s results page and led to the compromised college domain, placing the next stage outside the ad\u2019s direct click path.<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Step 5. The compromised page redirected to the iGaming site.<\/strong> The planted page redirected immediately instead of rendering visible content. The user therefore reached the iGaming platform without seeing the college page through which the traffic had passed.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"is-this-a-one-off-or-a-common-issue\">Is This a One-Off Or a Common Issue?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This case was not an isolated incident; here is what the public record says.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2023, <a href=\"https:\/\/www.bangkokpost.com\/thailand\/general\/2486484\/state-computers-littered-with-online-gambling-links\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">the Ministry of Digital Economy and Society of Thailand reported<\/a> roughly 30 million iGaming-related URLs sitting across about a thousand public-sector sites.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Ministry of Public Health alone accounted for some 8 million injected scripts. Neighboring Indonesia tells the same story: its <a href=\"https:\/\/databoks.katadata.co.id\/en\/technology-telecommunications\/statistics\/b94bdd4d9228ef7\/the-ministry-of-communication-and-informatics-blocks-683-government-and-education-websites-infiltrated-by-online-gambling-details-inside\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Ministry of Communication and Informatics blocked<\/a> 683 government and educational sites that had been injected with iGaming content, 461 in the <strong><em>.go.id<\/em><\/strong> zone and 222 in <strong><em>.ac.id<\/em><\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Independent researchers have measured it, too: an <a href=\"https:\/\/arxiv.org\/html\/2508.19368v1\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">academic study published in August 2025<\/a> spent a single month crawling Indonesian domains for iGaming keywords and found 147 compromised domains and 346 pages, with the academic <strong><em>.ac.id<\/em><\/strong> zone in first place at 65 sites.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On 51.7% of pages, the injected iGaming text sat in the page&#8217;s code with a CSS instruction not to display it; on another 22.8%, it was shoved thousands of pixels off the edge of the screen. A visitor sees an ordinary university page; Google&#8217;s crawler reads a page full of iGaming-themed keywords. It is the same trick ADEX found on the Thai college site \u2013 done with markup instead of a redirect.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Beyond the aggregate numbers, there are several individual case studies \u2013 also showing how little this technique depends on vulnerabilities, certain verticals, or a victim:<\/p>\n\n\n\n<div class=\"tdud-root\">\n  <p class=\"tdud-eyebrow\">Documented cases of abusing trusted domains<\/p>\n\n  <div class=\"tdud-track\" tabindex=\"0\" role=\"group\" aria-label=\"Documented cases, 3 cards. Use the left and right arrow keys to navigate.\">\n\n    <!-- Case 1 -->\n    <article class=\"tdud-card\" aria-label=\"Case 1 of 3\">\n      <div class=\"tdud-card-top\">\n        <span class=\"tdud-date\">February 2024<\/span>\n        <span class=\"tdud-counter\">1 \/ 3<\/span>\n      <\/div>\n\n      <div class=\"tdud-title\">The FCKeditor campaign<\/div>\n\n      <div class=\"tdud-hero\">\n        <span class=\"tdud-fig\">2010<\/span>\n        <span class=\"tdud-cap\">\n          the year the exploited CMS editor was discontinued, still unpatched 14 years later\n        <\/span>\n      <\/div>\n\n      <ul class=\"tdud-facts\">\n        <li>\n          Open redirects abused on <b>nine universities<\/b>, two city and state government sites and a national government&#8217;s web resources\n        <\/li>\n        <li>\n          Payload was <b>scams, fake news, phishing and malicious extensions<\/b>, not iGaming\n        <\/li>\n      <\/ul>\n\n      <p class=\"tdud-proves\">\n        <span>What it proves<\/span>\n        The technique isn&#8217;t tied to a vertical.\n      <\/p>\n\n      <p class=\"tdud-src\">\n        Reported by\n        <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-exploit-14-year-old-cms-editor-on-govt-edu-sites-for-seo-poisoning\/\" target=\"_blank\" rel=\"noopener nofollow\">BleepingComputer<\/a>,\n        26 February 2024.\n      <\/p>\n    <\/article>\n\n    <!-- Case 2 -->\n    <article class=\"tdud-card\" aria-label=\"Case 2 of 3\">\n      <div class=\"tdud-card-top\">\n        <span class=\"tdud-date\">September 2025<\/span>\n        <span class=\"tdud-counter\">2 \/ 3<\/span>\n      <\/div>\n\n      <div class=\"tdud-title\">Parasite SEO on .gov and .edu<\/div>\n\n      <div class=\"tdud-hero\">\n        <span class=\"tdud-fig\">21.8M<\/span>\n        <span class=\"tdud-cap\">\n          organic visitors reached by a hijacked subdomain of a large university\n        <\/span>\n      <\/div>\n\n      <ul class=\"tdud-facts\">\n        <li>\n          <b>1,200+ spam-optimised PDFs<\/b> planted on that single subdomain\n        <\/li>\n        <li>\n          <b>3,000+ compromised pages<\/b> found on a state government portal\n        <\/li>\n        <li>\n          Verticals: iGaming and assorted grey-area services\n        <\/li>\n      <\/ul>\n\n      <p class=\"tdud-proves\">\n        <span>What it proves<\/span>\n        Borrowed authority delivers an audience at a scale no fresh domain can buy.\n      <\/p>\n\n      <p class=\"tdud-src\">\n        Reported by\n        <a href=\"https:\/\/il.ly\/blog\/parasite-seo-attack-gov-edu\" target=\"_blank\" rel=\"noopener nofollow\">Ilias Ism<\/a>,\n        12 September 2025.\n      <\/p>\n    <\/article>\n\n    <!-- Case 3 -->\n    <article class=\"tdud-card\" aria-label=\"Case 3 of 3\">\n      <div class=\"tdud-card-top\">\n        <span class=\"tdud-date\">June 2026<\/span>\n        <span class=\"tdud-counter\">3 \/ 3<\/span>\n      <\/div>\n\n      <div class=\"tdud-title\">\u201cBorrowed Trust\u201d<\/div>\n\n      <div class=\"tdud-hero\">\n        <span class=\"tdud-fig\">163<\/span>\n        <span class=\"tdud-cap\">\n          organisations across 30+ countries, all serving the same iGaming offers\n        <\/span>\n      <\/div>\n\n      <ul class=\"tdud-facts\">\n        <li>\n          In <b>150+ cases nothing was hacked<\/b>. Attackers simply claimed abandoned cloud DNS delegations left behind by closed projects\n        <\/li>\n        <li>\n          One pharma subdomain had sat unclaimed for <b>6.5 years<\/b>\n        <\/li>\n        <li>\n          One telecom operator was the exception: stolen DNS credentials, <b>1,000+ iGaming subdomains<\/b> on a dead charity subdomain, each with a valid TLS certificate and a padlock in the address bar\n        <\/li>\n      <\/ul>\n\n      <p class=\"tdud-proves\">\n        <span>What it proves<\/span>\n        You don&#8217;t even need to break in. It&#8217;s enough to claim what was left unclaimed.\n      <\/p>\n\n      <p class=\"tdud-src\">\n        Reported by\n        <a href=\"https:\/\/cyble.com\/blog\/borrowed-trust-cloud-dns-takeover-thai-iGaming-seo-poisoning\/\" target=\"_blank\" rel=\"noopener nofollow\">Cyble<\/a>,\n        \u201cBorrowed Trust\u201d, 12 June 2026.\n      <\/p>\n    <\/article>\n\n  <\/div>\n\n  <div class=\"tdud-controls\">\n    <div class=\"tdud-dots\" aria-label=\"Choose a documented case\"><\/div>\n\n    <button class=\"tdud-nav tdud-prev\" type=\"button\" aria-label=\"Previous case\">\u2039<\/button>\n\n    <button class=\"tdud-nav tdud-next\" type=\"button\" aria-label=\"Next case\">\u203a<\/button>\n  <\/div>\n\n  <p class=\"tdud-foot\">\n    All figures above are as reported by the source cited on each card.\n  <\/p>\n<\/div>\n\n<style>\n  .tdud-root {\n    --tdud-width: 620px;\n    --tdud-surface: #FCFCFB;\n    --tdud-plane: #F9F9F7;\n    --tdud-text-primary: #0B0B0B;\n    --tdud-text-secondary: #52514E;\n    --tdud-muted: #898781;\n    --tdud-hairline: #E1E0D9;\n    --tdud-border: rgba(11, 11, 11, 0.1);\n    --tdud-accent: #2A78D6;\n    --tdud-chip-background: rgba(11, 11, 11, 0.04);\n    --tdud-button-hover: rgba(11, 11, 11, 0.06);\n\n    width: 100%;\n    max-width: var(--tdud-width);\n    margin: 0 auto;\n    padding: 18px 18px 20px;\n    overflow: hidden;\n    border-radius: 14px;\n    background: var(--tdud-plane);\n    color: var(--tdud-text-primary);\n    font-family: system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\",\n      Roboto, Arial, sans-serif;\n    text-align: left;\n    color-scheme: light;\n  }\n\n  .tdud-root,\n  .tdud-root *,\n  .tdud-root *::before,\n  .tdud-root *::after {\n    box-sizing: border-box;\n  }\n\n  .tdud-eyebrow {\n    margin: 0 0 12px;\n    padding: 0;\n    color: var(--tdud-muted);\n    font-size: 10.5px;\n    font-weight: 700;\n    line-height: 1.35;\n    letter-spacing: 0.09em;\n    text-transform: uppercase;\n  }\n\n  \/* Carousel *\/\n  .tdud-track {\n    display: flex;\n    align-items: stretch;\n    gap: 14px;\n    width: 100%;\n    margin: 0;\n    padding: 0 0 2px;\n    overflow-x: auto;\n    outline: none;\n    scroll-behavior: smooth;\n    scroll-snap-type: x mandatory;\n    scrollbar-width: none;\n    overscroll-behavior-x: contain;\n    -webkit-overflow-scrolling: touch;\n  }\n\n  .tdud-track::-webkit-scrollbar {\n    display: none;\n  }\n\n  .tdud-track:focus-visible {\n    border-radius: 12px;\n    box-shadow: 0 0 0 2px var(--tdud-accent);\n  }\n\n  .tdud-card {\n    display: flex;\n    flex: 0 0 100%;\n    flex-direction: column;\n    gap: 11px;\n    min-width: 0;\n    margin: 0;\n    padding: 18px 18px 16px;\n    border: 1px solid var(--tdud-border);\n    border-radius: 12px;\n    background: var(--tdud-surface);\n    scroll-snap-align: start;\n    scroll-snap-stop: always;\n  }\n\n  .tdud-card-top {\n    display: flex;\n    align-items: baseline;\n    gap: 10px;\n  }\n\n  .tdud-date {\n    color: var(--tdud-accent);\n    font-size: 11px;\n    font-weight: 700;\n    line-height: 1.3;\n    letter-spacing: 0.05em;\n    text-transform: uppercase;\n  }\n\n  .tdud-counter {\n    margin-left: auto;\n    color: var(--tdud-muted);\n    font-size: 11px;\n    font-weight: 600;\n    line-height: 1.3;\n  }\n\n  .tdud-title {\n    margin: 0;\n    padding: 0;\n    color: var(--tdud-text-primary);\n    font-family: inherit;\n    font-size: 17px;\n    font-weight: 700;\n    line-height: 1.25;\n  }\n\n  .tdud-hero {\n    display: flex;\n    flex-wrap: wrap;\n    align-items: baseline;\n    gap: 8px;\n    padding: 11px 0 10px;\n    border-top: 1px solid var(--tdud-hairline);\n    border-bottom: 1px solid var(--tdud-hairline);\n  }\n\n  .tdud-fig {\n    color: var(--tdud-text-primary);\n    font-size: 29px;\n    font-weight: 700;\n    line-height: 1;\n    letter-spacing: -0.02em;\n  }\n\n  .tdud-cap {\n    flex: 1 1 55%;\n    min-width: 150px;\n    color: var(--tdud-text-secondary);\n    font-size: 12.5px;\n    font-weight: 400;\n    line-height: 1.35;\n  }\n\n  .tdud-facts {\n    display: flex;\n    flex-direction: column;\n    gap: 7px;\n    margin: 0;\n    padding: 0;\n  }\n\n  \/* \u0422\u0435\u043c\u0430 \u0431\u043b\u043e\u0433\u0430 \u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u0442 list-style \u043f\u0440\u044f\u043c\u043e \u043d\u0430 li, \u0438 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u0431\u0438\u0432\u0430\u0435\u0442\n     \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442 ul \u2014 \u043e\u0442\u0441\u044e\u0434\u0430 \u0432\u0442\u043e\u0440\u043e\u0439, \u0440\u043e\u0434\u043d\u043e\u0439 \u043c\u0430\u0440\u043a\u0435\u0440 \u0440\u044f\u0434\u043e\u043c \u0441 \u043d\u0430\u0448\u0435\u0439 \u0442\u043e\u0447\u043a\u043e\u0439.\n     \u0413\u0430\u0441\u0438\u043c \u043c\u0430\u0440\u043a\u0435\u0440 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c li \u0438 \u043d\u0430 ::marker, \u0430 \u0441\u0432\u043e\u044e \u0442\u043e\u0447\u043a\u0443 \u0440\u0438\u0441\u0443\u0435\u043c \u0441\u0435\u043b\u0435\u043a\u0442\u043e\u0440\u043e\u043c\n     \u0441 .tdud-root, \u0447\u0442\u043e\u0431\u044b \u0435\u0451 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0432\u044b\u0448\u0435 \u0442\u0435\u043c\u0438\u043d\u043e\u0439. *\/\n  .tdud-root .tdud-facts,\n  .tdud-root .tdud-facts li {\n    list-style: none;\n    list-style-type: none;\n    list-style-image: none;\n  }\n\n  .tdud-root .tdud-facts li::marker {\n    content: \"\";\n  }\n\n  .tdud-facts li {\n    position: relative;\n    margin: 0;\n    padding: 0 0 0 14px;\n    overflow-wrap: anywhere;\n    color: var(--tdud-text-secondary);\n    font-size: 13px;\n    font-weight: 400;\n    line-height: 1.4;\n  }\n\n  .tdud-root .tdud-facts li::before {\n    content: \"\";\n    position: absolute;\n    top: 7px;\n    left: 0;\n    width: 5px;\n    height: 5px;\n    margin: 0;\n    padding: 0;\n    border: 0;\n    border-radius: 50%;\n    background: var(--tdud-muted);\n  }\n\n  .tdud-facts b {\n    color: var(--tdud-text-primary);\n    font-weight: 700;\n  }\n\n  .tdud-proves {\n    margin: auto 0 0;\n    padding: 10px 12px;\n    border-left: 2px solid var(--tdud-accent);\n    border-radius: 0 6px 6px 0;\n    background: var(--tdud-chip-background);\n    color: var(--tdud-text-secondary);\n    font-size: 13px;\n    font-weight: 400;\n    line-height: 1.45;\n  }\n\n  .tdud-proves span {\n    display: block;\n    margin-bottom: 3px;\n    color: var(--tdud-muted);\n    font-size: 10.5px;\n    font-weight: 700;\n    line-height: 1.3;\n    letter-spacing: 0.07em;\n    text-transform: uppercase;\n  }\n\n  .tdud-src {\n    margin: 0;\n    padding: 9px 0 0;\n    border-top: 1px solid var(--tdud-hairline);\n    color: var(--tdud-muted);\n    font-size: 11px;\n    font-weight: 400;\n    line-height: 1.45;\n  }\n\n  .tdud-src a {\n    color: var(--tdud-accent);\n    font-weight: 700;\n    text-decoration: none;\n    border-bottom: 1px solid rgba(42, 120, 214, 0.4);\n  }\n\n  .tdud-src a:hover,\n  .tdud-src a:focus-visible {\n    border-bottom-color: var(--tdud-accent);\n  }\n\n  \/* Controls *\/\n  .tdud-controls {\n    display: flex;\n    align-items: center;\n    gap: 10px;\n    margin-top: 14px;\n  }\n\n  .tdud-dots {\n    display: flex;\n    gap: 6px;\n    margin-right: auto;\n  }\n\n  .tdud-dot {\n    width: 7px;\n    height: 7px;\n    margin: 0;\n    padding: 0;\n    border: 0;\n    border-radius: 50%;\n    background: var(--tdud-hairline);\n    cursor: pointer;\n    appearance: none;\n    -webkit-appearance: none;\n  }\n\n  .tdud-dot[aria-current=\"true\"] {\n    background: var(--tdud-accent);\n  }\n\n  .tdud-dot:focus-visible {\n    outline: 2px solid var(--tdud-accent);\n    outline-offset: 3px;\n  }\n\n  .tdud-nav {\n    display: grid;\n    place-items: center;\n    width: 34px;\n    height: 34px;\n    margin: 0;\n    padding: 0;\n    border: 1px solid var(--tdud-border);\n    border-radius: 50%;\n    background: var(--tdud-surface);\n    color: var(--tdud-text-primary);\n    font-family: inherit;\n    font-size: 15px;\n    font-weight: 600;\n    line-height: 1;\n    cursor: pointer;\n    appearance: none;\n    -webkit-appearance: none;\n  }\n\n  .tdud-nav:hover {\n    background: var(--tdud-button-hover);\n  }\n\n  .tdud-nav:focus-visible {\n    outline: 2px solid var(--tdud-accent);\n    outline-offset: 2px;\n  }\n\n  .tdud-nav:disabled {\n    opacity: 0.35;\n    cursor: default;\n  }\n\n  .tdud-foot {\n    margin: 12px 0 0;\n    padding: 0;\n    color: var(--tdud-muted);\n    font-size: 11px;\n    font-weight: 400;\n    line-height: 1.5;\n  }\n\n  @media (max-width: 520px) {\n    .tdud-root {\n      padding: 15px 12px 17px;\n      border-radius: 12px;\n    }\n\n    .tdud-card {\n      gap: 10px;\n      padding: 15px 14px 14px;\n    }\n\n    .tdud-title {\n      font-size: 16px;\n    }\n\n    .tdud-fig {\n      font-size: 26px;\n    }\n\n    .tdud-cap {\n      min-width: 130px;\n      font-size: 12px;\n    }\n\n    .tdud-facts li,\n    .tdud-proves {\n      font-size: 12.5px;\n    }\n\n    .tdud-controls {\n      margin-top: 12px;\n    }\n  }\n\n  @media (prefers-reduced-motion: reduce) {\n    .tdud-track {\n      scroll-behavior: auto;\n    }\n  }\n<\/style>\n\n<script>\n  (function () {\n    var roots = document.querySelectorAll(\".tdud-root\");\n\n    roots.forEach(function (root) {\n      if (root.getAttribute(\"data-tdud-ready\") === \"true\") return;\n      root.setAttribute(\"data-tdud-ready\", \"true\");\n\n      var track = root.querySelector(\".tdud-track\");\n      var cards = Array.prototype.slice.call(\n        root.querySelectorAll(\".tdud-card\")\n      );\n      var dotsBox = root.querySelector(\".tdud-dots\");\n      var previousButton = root.querySelector(\".tdud-prev\");\n      var nextButton = root.querySelector(\".tdud-next\");\n      var index = 0;\n      var scrollFrame = null;\n\n      if (\n        !track ||\n        !cards.length ||\n        !dotsBox ||\n        !previousButton ||\n        !nextButton\n      ) {\n        return;\n      }\n\n      cards.forEach(function (card, cardIndex) {\n        var dot = document.createElement(\"button\");\n\n        dot.className = \"tdud-dot\";\n        dot.type = \"button\";\n        dot.setAttribute(\"aria-label\", \"Go to case \" + (cardIndex + 1));\n        dot.addEventListener(\"click\", function () {\n          goToCard(cardIndex, true);\n        });\n\n        dotsBox.appendChild(dot);\n      });\n\n      var dots = Array.prototype.slice.call(dotsBox.children);\n\n      function syncControls() {\n        dots.forEach(function (dot, dotIndex) {\n          dot.setAttribute(\n            \"aria-current\",\n            dotIndex === index ? \"true\" : \"false\"\n          );\n        });\n\n        previousButton.disabled = index === 0;\n        nextButton.disabled = index === cards.length - 1;\n      }\n\n      function getCardPosition(card) {\n        return card.offsetLeft - track.offsetLeft;\n      }\n\n      function goToCard(cardIndex, smooth) {\n        index = Math.max(0, Math.min(cards.length - 1, cardIndex));\n\n        track.scrollTo({\n          left: getCardPosition(cards[index]),\n          behavior: smooth ? \"smooth\" : \"auto\"\n        });\n\n        syncControls();\n      }\n\n      function getNearestCard() {\n        var trackMiddle = track.scrollLeft + track.clientWidth \/ 2;\n        var nearestIndex = 0;\n        var nearestDistance = Infinity;\n\n        cards.forEach(function (card, cardIndex) {\n          var cardMiddle =\n            getCardPosition(card) + card.clientWidth \/ 2;\n          var distance = Math.abs(cardMiddle - trackMiddle);\n\n          if (distance < nearestDistance) {\n            nearestDistance = distance;\n            nearestIndex = cardIndex;\n          }\n        });\n\n        return nearestIndex;\n      }\n\n      previousButton.addEventListener(\"click\", function () {\n        goToCard(index - 1, true);\n      });\n\n      nextButton.addEventListener(\"click\", function () {\n        goToCard(index + 1, true);\n      });\n\n      track.addEventListener(\n        \"scroll\",\n        function () {\n          if (scrollFrame) {\n            window.cancelAnimationFrame(scrollFrame);\n          }\n\n          scrollFrame = window.requestAnimationFrame(function () {\n            var nearestIndex = getNearestCard();\n\n            if (nearestIndex !== index) {\n              index = nearestIndex;\n              syncControls();\n            }\n          });\n        },\n        { passive: true }\n      );\n\n      track.addEventListener(\"keydown\", function (event) {\n        if (event.key === \"ArrowRight\") {\n          event.preventDefault();\n          goToCard(index + 1, true);\n        }\n\n        if (event.key === \"ArrowLeft\") {\n          event.preventDefault();\n          goToCard(index - 1, true);\n        }\n      });\n\n      window.addEventListener(\"resize\", function () {\n        goToCard(index, false);\n      });\n\n      syncControls();\n    });\n  })();\n<\/script>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Has the industry reacted? To some extent, yes: in March 2024, <a href=\"https:\/\/developers.google.com\/search\/docs\/essentials\/spam-policies#site-reputation-abuse\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Google added a rule<\/a> to its spam policies called site reputation abuse. It prohibits one specific thing: publishing someone else's content on a trusted site to borrow that site's ranking. In November 2024, <a href=\"https:\/\/developers.google.com\/search\/blog\/2024\/11\/site-reputation-abuse\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">the rule was tightened<\/a>, and a site owner's involvement is no longer an excuse.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, it helps very little for a case like this one with a Thai college, as it is written for sites that <em>knowingly<\/em> rent out their reputation. A hacked college was not a willing participant, but also a victim and most likely nobody there knows the planted page exists. To anyone who saw the page in Google, it could look as if the college had published or supported irrelevant or untrusted content. This could harm its reputation and put visitors at risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So what does help?<\/p>\n\n\n<div class=\"block__preview\">\n        <a href=\"https:\/\/adex.com\/blog\/ad-cloaking\/\" class=\"block__preview_img\"><img src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/06\/Adex-Ad-Cloaking-Reviewer-User-Split.png\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/06\/Adex-Ad-Cloaking-Reviewer-User-Split.png\" sizes=\"100vw\" alt=\"Adex - ad cloaking and reviewer-user split, showing how fraudsters serve clean pages to moderators and malicious pages to real users.\" decoding=\"async\" class=\"lazy\"><\/a>\n    <div class=\"block__preview_box\">\n        <a href=\"https:\/\/adex.com\/blog\/category\/current_risks\/\" class=\"block__preview_box-cat\">Current risks<\/a>        <h3 class=\"block__preview_box-title\" id=\"ad-cloaking-when-fraudsters-show-moderators-one-page-and-users-another\"><a href=\"https:\/\/adex.com\/blog\/ad-cloaking\/\">Ad Cloaking: When Fraudsters Show Moderators One Page and Users Another<\/a><\/h3>\n    <\/div>\n<\/div>\n<style>\n.block__preview {display: flex;align-items: center;justify-content: center; margin: 32px 0;}\n.block__preview a {text-decoration: none;}\n.block__preview_img {min-width: 360px;max-width: 360px;min-height: 188px;width: 100%;height: 100%;}\n.block__preview_img img {width: 100%;height: 100%;}\n.block__preview_box {margin-left: 40px;max-width: 360px;}\n.block__preview_box-cat {color: #00B8A7 !important;font-weight: 600;font-size: 12px;line-height: 16px;text-transform: uppercase; display: block; margin-bottom: 4px;}\n.block__preview_box-cat:hover {color: #FE645A !important; text-decoration: none !important;}\n.block__preview_box-title {font-size: 20px;font-weight: 700;line-height: 24px;color: #0B172D;}\n.block__preview_box-title a {color: #0B172D !important;}\n.block__preview_box-title a:hover {color: #FE645A !important;}\n@media screen and (max-width: 768px) {.block__preview {flex-direction: column;}.block__preview_box {max-width: 100%; margin-top: 32px;margin-left: 0px;}.block__preview_img {max-width: 100%;min-width: 100%;min-height: 100%;}}<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-to-recognize-and-avoid-site-reputation-abuse\">How to Recognize and Avoid Site Reputation Abuse?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We put this question to our expert to understand: which signals should raise a flag when an advertiser or ad network reviews a redirect chain, and how can publishers avoid being hacked for cloaking?<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"for-ad-networks-and-advertisers\">For ad networks and advertisers<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">According to the expert, the first thing to watch for during the check is restricted domain zones \u2013&nbsp;<strong><em>ac.*, .gov, .edu, .mi.*, .go.*.<\/em><\/strong> \u2013&nbsp; and treat them as a flag rather than a pass. If one of those turns up anywhere in a redirect chain, it\u2019s worth looking at the campaign itself: it may be perfectly justified, for instance, a university advertising its own programs.&nbsp;<\/p>\n\n\n<div class=\"block__bord\"><div class=\"block__bord_desc\"><p><strong>Checking a single landing page isn&#8217;t enough, because the target URL itself, as in this case, is entirely unremarkable, and whatever is malicious sits behind it.<\/strong><\/p>\n<\/div><\/div>\n<style>\n.block__bord { margin: 32px 0; padding: 1.25em 2.375em;\tborder-radius: 24px; background: rgba(0, 220, 200, 0.20); }\n.block__bord_desc {font-size: 16px !important;font-weight: 400 !important;color: #606060 !important;}\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">The rest of the checklist involves the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Compare what a crawler sees with what a real user sees<\/strong> using the geo and device profile from the campaign's own targeting.<\/li>\n\n\n\n<li><strong>Re-check campaigns that have already been approved. <\/strong>A redirect chain can be rewired after review, and an injected page can appear on a clean domain at any time<strong>.<\/strong><\/li>\n\n\n\n<li>Don't read a valid TLS certificate as a trust signal. In the Borrowed Trust case (see <a href=\"#is-this-a-one-off-or-a-common-issue\" type=\"internal\" id=\"#is-this-a-one-off-or-a-common-issue\">Is This a One-Off Or a Common Issue block<\/a>), the iGaming site had a perfectly good certificate on a Fortune 500 domain.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"for-publishers\">For publishers<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The site owners, whose sites are compromised, are also victims in this chain. How do they check that their site is clean, and what should they do if it isn't?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here is what our expert suggests:<\/p>\n\n\n    <div class=\"block__quote\"><p class=\"block__quote_desc\"><p>Keep the software on your servers and workstations up to date. A large share of compromises happen for exactly this reason. And be careful with suspicious emails and messenger messages: phishing through social engineering is one the most common ways an attack begins. If you already suspect a compromise, you can start with antivirus tools, but if you run a large site, bring in a company that specializes in cybersecurity as early as you can.<\/p>\n<\/p><\/div>\n    <style>.block__quote {margin: 32px 0;padding-left: 20px;border-left: 3px solid #00B8A7;}.block__quote_desc {font-weight: 700 !important;font-size: 18px !important;line-height: 28px !important;margin-bottom: 24px !important;}.block__quote_author {display: none;}<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">And, two tips to add, suggested by the cases mentioned above:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Inventory your own subdomains<\/strong>. <a href=\"#is-this-a-one-off-or-a-common-issue\" type=\"internal\" id=\"#is-this-a-one-off-or-a-common-issue\">The Borrowed Trust campaign<\/a> lived entirely on forgotten ones, and a subdomain you no longer use is still lending your name to whoever claims it.\u00a0<\/li>\n\n\n\n<li><strong>Search for yourself the way an attacker would<\/strong>: query your own domain in Google alongside misleading keywords. Injected pages are usually hidden from visitors, but are perfectly visible to search.<\/li>\n<\/ul>\n\n\n<div class=\"block__preview\">\n        <a href=\"https:\/\/adex.com\/blog\/subdomain-takeovers-prevention\/\" class=\"block__preview_img\"><img src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/05\/Adex-Subdomain-Takeover-Trusted-Domains.png\" srcset=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/05\/Adex-Subdomain-Takeover-Trusted-Domains.png\" sizes=\"100vw\" alt=\"Adex - subdomain takeover visual showing how trusted domains get weaponized in ad ecosystems.\" decoding=\"async\" class=\"lazy\"><\/a>\n    <div class=\"block__preview_box\">\n        <a href=\"https:\/\/adex.com\/blog\/category\/guides\/\" class=\"block__preview_box-cat\">Guides<\/a>        <h3 class=\"block__preview_box-title\" id=\"subdomain-takeover-how-trusted-domains-get-weaponized-and-what-actually-stops-it\"><a href=\"https:\/\/adex.com\/blog\/subdomain-takeovers-prevention\/\">Subdomain Takeover: How Trusted Domains Get Weaponized \u2013 and What Actually Stops It<\/a><\/h3>\n    <\/div>\n<\/div>\n<style>\n.block__preview {display: flex;align-items: center;justify-content: center; margin: 32px 0;}\n.block__preview a {text-decoration: none;}\n.block__preview_img {min-width: 360px;max-width: 360px;min-height: 188px;width: 100%;height: 100%;}\n.block__preview_img img {width: 100%;height: 100%;}\n.block__preview_box {margin-left: 40px;max-width: 360px;}\n.block__preview_box-cat {color: #00B8A7 !important;font-weight: 600;font-size: 12px;line-height: 16px;text-transform: uppercase; display: block; margin-bottom: 4px;}\n.block__preview_box-cat:hover {color: #FE645A !important; text-decoration: none !important;}\n.block__preview_box-title {font-size: 20px;font-weight: 700;line-height: 24px;color: #0B172D;}\n.block__preview_box-title a {color: #0B172D !important;}\n.block__preview_box-title a:hover {color: #FE645A !important;}\n@media screen and (max-width: 768px) {.block__preview {flex-direction: column;}.block__preview_box {max-width: 100%; margin-top: 32px;margin-left: 0px;}.block__preview_img {max-width: 100%;min-width: 100%;min-height: 100%;}}<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-does-it-mean-for-the-industry\">What Does It Mean For The Industry?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">According to our expert, this case is not unique or special. As he puts it,<\/p>\n\n\n    <div class=\"block__quote\"><p class=\"block__quote_desc\"><p>Using compromised infrastructure started a long time ago \u2013 attackers were just more modest about it, sticking to semi-abandoned or obscure domains. The domain as a trust signal stopped working long before this, back when malware started being distributed through the CDNs of major players.<\/p>\n<\/p><\/div>\n    <style>.block__quote {margin: 32px 0;padding-left: 20px;border-left: 3px solid #00B8A7;}.block__quote_desc {font-weight: 700 !important;font-size: 18px !important;line-height: 28px !important;margin-bottom: 24px !important;}.block__quote_author {display: none;}<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">Thus, what has actually changed is the fraudsters' ambition, which leads to a simple conclusion: the only thing still worth checking is where the click actually ends up, and a respectable domain in a redirect chain is a good reason to look one step further.<\/p>\n\n\n    <div class=\"block__buttons\">\n        <a href=\"https:\/\/app.adex.com\/auth\/login\" class=\"block__buttons_btn\">JOIN ADEX<\/a>    <\/div>\n<style>\n    .block__buttons {\n        text-align: center;\n    }\n\n    .block__buttons_btn {\n        background-color: rgba(254, 100, 90, 1) !important;\n        border-radius: 200px !important;\n        padding: 16px 24px !important;\n        font-weight: 600 !important;\n        font-size: 18px !important;\n        line-height: 24px !important;\n        text-align: center !important;\n        display: inline-block !important;\n        color: #fff !important;\n        text-decoration: none !important;\n        text-transform: uppercase !important;\n    }\n\n    .block__buttons_btn:hover {\n        color: rgba(11, 31, 58, 1) !important;\n    }\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>What if a clean-looking ad sent users to a destination reviewers never saw? Follow the iGaming redirect chain ADEX uncovered and learn why checking the destination URL alone is no longer enough.<\/p>\n","protected":false},"author":10,"featured_media":6158,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4],"tags":[18,16],"class_list":["post-6149","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-current_risks","tag-fraud","tag-threat"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>iGaming Redirect Chain Through a Hacked College Site<\/title>\n<meta name=\"description\" content=\"An iGaming redirect chain sent users from a clean-looking ad through Google and a compromised college domain. See how it escaped review.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"iGaming Redirect Chain Through a Hacked College Site\" \/>\n<meta property=\"og:description\" content=\"An iGaming redirect chain sent users from a clean-looking ad through Google and a compromised college domain. See how it escaped review.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/\" \/>\n<meta property=\"og:site_name\" content=\"ADEX\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adexsaas\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-21T10:04:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-21T10:53:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Nevena Stosic\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adexsaas\" \/>\n<meta name=\"twitter:site\" content=\"@adexsaas\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Nevena Stosic\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/\"},\"author\":{\"name\":\"Nevena Stosic\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/person\\\/02cce47bdda1fd3552d99ad1c23ea27e\"},\"headline\":\"Trusted Domain, Untrusted Destination: A Hacked Educational Site in an iGaming Redirect Chain\",\"datePublished\":\"2026-09-21T10:04:06+00:00\",\"dateModified\":\"2026-09-21T10:53:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/\"},\"wordCount\":1536,\"publisher\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Adex-iGaming-Redirect-Chain.png\",\"keywords\":[\"Fraud\",\"Threat\"],\"articleSection\":[\"Current risks\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/\",\"name\":\"iGaming Redirect Chain Through a Hacked College Site\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Adex-iGaming-Redirect-Chain.png\",\"datePublished\":\"2026-09-21T10:04:06+00:00\",\"dateModified\":\"2026-09-21T10:53:11+00:00\",\"description\":\"An iGaming redirect chain sent users from a clean-looking ad through Google and a compromised college domain. See how it escaped review.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#primaryimage\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Adex-iGaming-Redirect-Chain.png\",\"contentUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Adex-iGaming-Redirect-Chain.png\",\"width\":1200,\"height\":628,\"caption\":\"Adex - iGaming redirect chain through Google search results and a compromised educational website.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/igaming-redirect-chain-hacked-educational-site\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/adex.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Trusted Domain, Untrusted Destination: A Hacked Educational Site in an iGaming Redirect Chain\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/\",\"name\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\"},\"alternateName\":\"ADEX\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/adex.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\",\"name\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/CDD2258_copy-48-1.svg\",\"contentUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/CDD2258_copy-48-1.svg\",\"width\":148,\"height\":30,\"caption\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/adexsaas\\\/\",\"https:\\\/\\\/x.com\\\/adexsaas\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/person\\\/02cce47bdda1fd3552d99ad1c23ea27e\",\"name\":\"Nevena Stosic\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/27cae2de5c9571a84bffdad37e300073a9314cd28b69711320dd623954f9661e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/27cae2de5c9571a84bffdad37e300073a9314cd28b69711320dd623954f9661e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/27cae2de5c9571a84bffdad37e300073a9314cd28b69711320dd623954f9661e?s=96&d=mm&r=g\",\"caption\":\"Nevena Stosic\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"iGaming Redirect Chain Through a Hacked College Site","description":"An iGaming redirect chain sent users from a clean-looking ad through Google and a compromised college domain. See how it escaped review.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/","og_locale":"en_US","og_type":"article","og_title":"iGaming Redirect Chain Through a Hacked College Site","og_description":"An iGaming redirect chain sent users from a clean-looking ad through Google and a compromised college domain. See how it escaped review.","og_url":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/","og_site_name":"ADEX","article_publisher":"https:\/\/www.facebook.com\/adexsaas\/","article_published_time":"2026-09-21T10:04:06+00:00","article_modified_time":"2026-09-21T10:53:11+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png","type":"image\/png"}],"author":"Nevena Stosic","twitter_card":"summary_large_image","twitter_creator":"@adexsaas","twitter_site":"@adexsaas","twitter_misc":{"Written by":"Nevena Stosic","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#article","isPartOf":{"@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/"},"author":{"name":"Nevena Stosic","@id":"https:\/\/adex.com\/blog\/#\/schema\/person\/02cce47bdda1fd3552d99ad1c23ea27e"},"headline":"Trusted Domain, Untrusted Destination: A Hacked Educational Site in an iGaming Redirect Chain","datePublished":"2026-09-21T10:04:06+00:00","dateModified":"2026-09-21T10:53:11+00:00","mainEntityOfPage":{"@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/"},"wordCount":1536,"publisher":{"@id":"https:\/\/adex.com\/blog\/#organization"},"image":{"@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#primaryimage"},"thumbnailUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png","keywords":["Fraud","Threat"],"articleSection":["Current risks"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/","url":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/","name":"iGaming Redirect Chain Through a Hacked College Site","isPartOf":{"@id":"https:\/\/adex.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#primaryimage"},"image":{"@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#primaryimage"},"thumbnailUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png","datePublished":"2026-09-21T10:04:06+00:00","dateModified":"2026-09-21T10:53:11+00:00","description":"An iGaming redirect chain sent users from a clean-looking ad through Google and a compromised college domain. See how it escaped review.","breadcrumb":{"@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#primaryimage","url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png","contentUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png","width":1200,"height":628,"caption":"Adex - iGaming redirect chain through Google search results and a compromised educational website."},{"@type":"BreadcrumbList","@id":"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adex.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Trusted Domain, Untrusted Destination: A Hacked Educational Site in an iGaming Redirect Chain"}]},{"@type":"WebSite","@id":"https:\/\/adex.com\/blog\/#website","url":"https:\/\/adex.com\/blog\/","name":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform","description":"","publisher":{"@id":"https:\/\/adex.com\/blog\/#organization"},"alternateName":"ADEX","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adex.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adex.com\/blog\/#organization","name":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform","url":"https:\/\/adex.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adex.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2022\/05\/CDD2258_copy-48-1.svg","contentUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2022\/05\/CDD2258_copy-48-1.svg","width":148,"height":30,"caption":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform"},"image":{"@id":"https:\/\/adex.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adexsaas\/","https:\/\/x.com\/adexsaas"]},{"@type":"Person","@id":"https:\/\/adex.com\/blog\/#\/schema\/person\/02cce47bdda1fd3552d99ad1c23ea27e","name":"Nevena Stosic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/27cae2de5c9571a84bffdad37e300073a9314cd28b69711320dd623954f9661e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/27cae2de5c9571a84bffdad37e300073a9314cd28b69711320dd623954f9661e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/27cae2de5c9571a84bffdad37e300073a9314cd28b69711320dd623954f9661e?s=96&d=mm&r=g","caption":"Nevena Stosic"}}]}},"_links":{"self":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/6149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/comments?post=6149"}],"version-history":[{"count":13,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/6149\/revisions"}],"predecessor-version":[{"id":6183,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/6149\/revisions\/6183"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/media\/6158"}],"wp:attachment":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/media?parent=6149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/categories?post=6149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/tags?post=6149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}