Fix My Hacked Website

Affiliate Partners Pass Review -
Then Become a Risk

Continuous validation for publisher onboarding, campaign QA, and live traffic monitoring.


Malicious redirects, browser-side threats, and partner behavior changes often appear after approval—disrupting campaigns, advertiser trust, and affiliate revenue.

Continuous validation between approval and conversion
Start 14-Day Free Trial View API Pricing

Built for high-volume affiliate environments — see how it works

Illustrative deployment scenario based on observed customer usage patterns. Actual volumes and efficiency gains vary by implementation.
0
Domains validated daily
0
Scans per month
0%
Less manual review
The problem — the approval gap
Publisher applies
→
Onboarding scan: clean
→
Campaign goes live
→
Week 2…
→
Malicious redirect injected
→
Advertiser escalates
→
Campaign paused
Approval is a snapshot. Partner websites, redirect chains, and traffic behavior evolve continuously after onboarding. The gap between approval and live operation is where security incidents, attribution abuse, and revenue leakage occur—and where Quttera's API provides continuous validation.
The API — Four Affiliate Validation Stages
Select a stage to explore the API: auto-advancing
Onboarding
Campaign QA
Live monitoring
Pre-payout
Scan publisher domain before approval
Two calls per publisher — malware scan and blacklist check — before any campaign goes live. Returns scanner result, blacklist status across Google, Yandex, Phishtank and others.
Step 1 — trigger malware scan
POSTscannerapi.quttera.com/api/v3/{api-key}/url/scan/partner-site.com.json
"error": 200, "errorstr": "success", "status": { "blacklisted": "no", "scanner_result": "undef", "state": "DOWNLOAD", "url": "partner-site.com" }
Step 2 — retrieve report when state = DONE
GETscannerapi.quttera.com/api/v3/{api-key}/url/report/partner-site.com.json
"report": { "state": "clean", "scanned_files": 24, "malicious_files": 0, "suspicious_files": 0, "blacklist_report": { "blacklist_status": "NoThreat", "providers": [ { "name": "Google Safebrowsing", "status": "NoThreat" }, { "name": "Yandex Safebrowsing", "status": "NoThreat" }, { "name": "Phishtank", "status": "NoThreat" } ] } }
Validate landing pages and redirect chains before launch
Two targeted scans catch the issues that matter most before a campaign spends budget — redirect manipulation (integrity scan) and SSL certificate health.
Step 1 — integrity scan (redirect chains, broken links, HTTP headers)
POSTscannerapi.quttera.com/api/v3/{api-key}/integrity/scan/lp.partner-b.com.json
"report": { "state": "DONE", "headers_comments": [ "ALERT: HTTP security header 'Content-Security-Policy' is missing", "ALERT: HTTP security header 'X-Frame-Options' is missing" ], "links_alert": [ { "alert": "redirection", "url": "https://lp.partner-b.com/offer", "redir_target": "https://suspicious-domain.ru/cread.php", "http_status": "302" } ] }
Step 2 — SSL certificate health
POSTscannerapi.quttera.com/api/v3/{api-key}/ssl/scan/lp.partner-b.com.json
"report": { "trusted": true, "expired": false, "expiration_days": 187, "cert_issuer_o": "Sectigo Limited", "state": "DONE" }
Continuous post-approval monitoring
Poll status endpoints on a schedule. When state returns DONE, pull the full report and check scanner_result. Any result other than "clean" triggers your review workflow.
Step 1 — check scan status (poll until DONE)
GETscannerapi.quttera.com/api/v3/{api-key}/url/status/partner-c.com.json
"status": { "state": "DONE", "scanner_result": "suspicious", "blacklisted": "yes", "sensitivity": "HEURISTIC", "url": "partner-c.com" }
Step 2 — retrieve full report for flagged domain
GETscannerapi.quttera.com/api/v3/{api-key}/url/report/partner-c.com.json
"report": { "state": "suspicious", "malicious_files": 2, "suspicious_files": 3, "files": [ { "filename": "partner-c.com/checkout.js", "threat": "Malicious", "threat_name": "Trojan.JS.Injection.gen", "reason": "Injected script exfiltrating form data" } ] }
Assess Attribution and Partner Risk Before Commission Approval
Before releasing payout, run two checks: a blacklist report across supported authorities and a compliance scan mapped to selected PCI DSS, SOC 2, and ISO/IEC 27001 controls. Any detected violation or material risk signal can flag the payout for review according to the network’s policies.
Step 1 — full blacklist report across all authorities
GETscannerapi.quttera.com/api/v3/{api-key}/blacklist/report/partner-d.com.json
"status": { "blacklisted": "yes", "url": "partner-d.com" }, "authority": [ { "name": "Google Safebrowsing", "blacklisted": "yes" }, { "name": "Phishtank", "blacklisted": "no" }, { "name": "Yandex Safebrowsing", "blacklisted": "no" }, { "name": "Quttera Labs", "blacklisted": "yes" } ]
Step 2 — compliance scan mapped to PCI-DSS / SOC 2 / ISO 27001
GETscannerapi.quttera.com/api/v3/{api-key}/compliance/report/partner-d.com.json
"report": { "summary": { "PCI-DSSv4.0": 4, "SOC2": 4, "ISO/IEC:27001": 6 }, "controls": { "CC6.1": { "info": { "standard": "SOC2", "title": "Unauthorized Access Prevention" }, "violations": [ { "threat_name": "Trojan.JS.Injection.gen.2DB", "group": "Code Injection, Obfuscation" } ] } } }

Compliance mappings provide structured technical evidence for review and reporting. They do not independently establish or certify compliance.


Live scan simulator — try it
Simulates the url/scan → url/report flow using realistic API response structures.
Scanning…
Live partner risk dashboard
Domain Malware scan Blacklist State

Approval Does Not Mean Ongoing Safety

Affiliate networks review publishers at onboarding—but partner websites are dynamic.

Domains that appear clean during approval can later:
  • activate malicious redirects
  • inject hidden scripts
  • manipulate landing page behavior
  • redirect users to unsafe destinations
  • change redirect chains after approval
  • introduce traffic integrity issues such as brand interception or attribution abuse
These changes often occur after campaigns go live, creating a gap between approval and actual behavior.

Why This Matters for Affiliate Networks

When partner domains drift from safe to malicious:

  • Advertisers escalate issues
  • Campaigns are paused or terminated
  • EPC and performance metrics degrade
  • User trust is impacted
  • Network reputation is at risk
These are not just security issues—they directly affect advertiser trust, campaign performance, attribution accuracy, and network revenue.

The Affiliate Validation Gap

Traditional validation is static.
Affiliate ecosystems are dynamic.
Approval ≠ ongoing safety
Risk appears after campaigns go live
No visibility between approval and conversion

Continuous Affiliate Network Risk Validation

Quttera provides continuous external validation of:


✓ Publisher landing pages
✓ Redirect chains
✓ Campaign URLs
✓ Browser-side behavior


During onboarding
Before campaign launch
Continuously after activation

Built for Network Quality and Compliance Workflows

  • Onboarding

    Scan publisher domains before approval

  • Campaign QA

    Validate landing pages and redirect chains

  • Live Monitoring

    Detect post-approval behavior changes

  • Pre-Payout Validation

    Score attribution risk before commission approval
Structured Risk Signals for Fast Decisions
Reduces manual work and speeds decisions.
  • Risk score
    Each partner, landing page, and redirect chain is assigned a structured risk score based on browser behavior, redirect integrity, script activity, domain reputation, and behavioral changes detected after approval.

    Scores are continuously updated as conditions change—giving your team a real-time view of partner risk.
  • Threat Type and Severity
    Detected issues are categorized by threat type and severity, including malicious redirects, injected JavaScript, cloaked content, and suspicious third-party behavior. This helps teams quickly understand the nature and urgency of each risk.
  • Flexibility
    Each risk signal includes a recommended action to support fast decision-making and consistent enforcement across the network.

    ✓ Approve
    ✓ Approve
    ✓ Review
    ✓ Block
    ✓ Suspend
    ✓ Hold payout
    ✓ Escalate
    ✓ Request remediation

    Recommended actions are configurable and should be applied according to the affiliate network’s own review, enforcement, campaign, and payout policies.

Four Website Threat Classifications

Quttera classifies scanned affiliate websites and campaign destinations using four website-security results. Affiliate networks can combine these results with the structured risk score, partner history, campaign context, and internal enforcement policies.

  • Risk score
    Each partner, landing page, and redirect chain is assigned a structured risk score based on browser behavior, redirect integrity, script activity, domain reputation, and behavioral changes detected after approval.

    Scores are continuously updated as conditions change—giving your team a real-time view of partner risk.
  • Threat Type and Severity
    Detected issues are categorized by threat type and severity, including malicious redirects, injected JavaScript, cloaked content, and suspicious third-party behavior. This helps teams quickly understand the nature and urgency of each risk.
  • Flexibility
    Each risk signal includes a recommended action to support fast decision-making and consistent enforcement across the network.

    ✓ Approve
    ✓ Approve
    ✓ Review
    ✓ Block
    ✓ Suspend
    ✓ Hold payout
    ✓ Escalate
    ✓ Request remediation

    Recommended actions are configurable and should be applied according to the affiliate network’s own review, enforcement, campaign, and payout policies.

Four Website Threat Classifications

Quttera classifies scanned affiliate websites and campaign destinations using four website-security results. Affiliate networks can combine these results with the structured risk score, partner history, campaign context, and internal enforcement policies.

  • Clean
    No malicious or suspicious website activity was identified within the scope of the scan.
  • Potentially Suspicious
    Unusual indicators or anomalies were detected and may require additional review.
  • Suspicious
    Suspicious website activity or evidence was identified and warrants investigation.

  • Malicious
    Malicious content, scripts, redirects, behavior, or other confirmed threats were identified.

Built for High-Volume Affiliate Environments

Used by global affiliate platforms processing hundreds of partner domains daily

  • 300-500

    Domains validated daily

  • 10,000 +

    Scans per month

  • ~ 90%

    Reduction in manual review
  • ✓ No malicious redirects reaching users
    ✓ Continuous monitoring across all partners
    ✓ Risks detected before campaign impact
When partner domains drift from safe to risky:

  • advertisers escalate issues
  • campaigns are paused or terminated
  • EPC and performance metrics degrade
  • user trust is impacted
  • network reputation is at risk
This is a revenue and trust problem, not just security.

How Affiliate Partner Validation Works

Steps
  • Submit the publisher or campaign asset
    Send a publisher domain, landing page, campaign URL, or redirect destination through the API.
    01
  • Analyze the website and redirect chain
    Quttera checks malware, scripts, redirects, blocklists, SSL configuration, browser behavior, and related website-risk signals.
    02
  • Retrieve the structured result
    Receive the classification, structured risk score, technical findings, and supporting evidence.
    03
  • Apply affiliate review rules
    Combine Quttera findings with partner history, campaign context, and internal network policies.
    04
  • Continue monitoring after approval
    Revalidate approved partners and campaign destinations for post-onboarding changes.
    05
  • Revalidate before payout
    Review current website, redirect, blacklist, risk-score, and compliance-related evidence before commission approval.
    06
  • Take the appropriate action
    Approve, review, block, suspend, hold, escalate, or request remediation.
    07

API-Based Integration

  • Integrates into

    onboarding pipelines

    campaign QA workflows

    monitoring systems

  • Supports
    real-time + batch validation
    structured responses
    scalable inspection
  • More info
    API Overview
    API Pricing
    API Docs
Affiliate Network Risk Validation FAQ
  • Question
    What is affiliate network risk validation?
    Answer
    Affiliate network risk validation is the continuous analysis of publisher websites, landing pages, redirect chains, campaign URLs, and browser-side behavior throughout the affiliate lifecycle. It helps identify malware, malicious redirects, injected scripts, blacklist events, suspicious behavior, and other changes that can affect campaign quality, advertiser trust, and revenue.
  • Question
    Why is publisher onboarding validation not enough?
    Answer
    Onboarding provides only a point-in-time assessment. A publisher website that is clean during approval can later introduce malicious redirects, hidden scripts, cloaked content, unsafe destinations, blacklist events, or traffic-integrity issues. Continuous monitoring helps affiliate networks identify these post-approval changes.
  • Question
    What affiliate assets can Quttera validate?
    Answer
    Quttera can validate publisher domains, landing pages, campaign URLs, redirect destinations, redirect chains, SSL certificate status, browser-side behavior, third-party scripts, blacklist status, and other external website risk signals.
  • Question
    Where can Quttera integrate into an affiliate network workflow?
    Answer
    Quttera can be integrated into publisher onboarding, campaign quality assurance, continuous live monitoring, and pre-payout review. The API supports real-time and batch validation and returns structured findings that affiliate platforms can incorporate into their own review and enforcement workflows.
  • Question
    How does Quttera support pre-payout validation?
    Answer
    Before commission approval, affiliate teams can use Quttera to review current malware findings, blacklist status, redirect behavior, website risk signals, compliance-related evidence, and the continuously updated partner risk score. These findings can support decisions to approve, review, hold, suspend, escalate, or request remediation according to the network’s policies.
  • Question
    What website threat classifications does Quttera return?
    Answer
    Quttera returns four website-security classifications: Clean, Potentially Suspicious, Suspicious, and Malicious. Affiliate networks can combine these classifications with partner history, campaign context, the structured risk score, and internal enforcement policies.
  • Question
    Does Quttera automatically approve or block affiliate partners?
    Answer
    Quttera provides structured security findings, risk signals, classifications, and recommended actions. The affiliate network defines and applies its own approval, review, blocking, suspension, escalation, remediation, and payout policies.
  • Question
    Does Quttera certify affiliate partners as compliant?
    Answer
    No. Quttera provides technical findings and mappings that can support selected SOC 2, PCI DSS, and ISO/IEC 27001 evidence and reporting workflows. These findings do not independently establish or certify compliance.

Understand the Validation Model

Explore the full framework, threat models, and validation layers.

Download Framework