Possible compromise of major booking site

[Generic]

Got a call from the MBS today. This series of websites do not belong to any of their affiliates. (Again, this one claimed this is just a website directed at hotels in my state. She didn't 'get' this same website exists for every state and has all of their info on it.) They do not accept that their info was hijacked and that guest info is at risk. They won't intercede for me because they are not me. They say they cannot intercede for me with a website that seems to have stolen all my info from them.
I explained, again, I will not be responsible for any compromised guest data that is entered on that site.
She asked me to wait for the owner of the site to 'reach out to me'. (Can we FINALLY agree that is an awful phrase and retire it?)
Anyway, I explained my next move was contacting Google and filing a a complaint. She didn't sound too happy with that but hey, she won't be there next week anyway..

I don't think the person you spoke to is computer savvy enough. Was this person at booking.com? Escalate it through their email system. B-King.com has people who will look into this. They don't want their reputation tarnished and it's a violation of their affiliate program. You can also start to send notices to some of the other B&Bs you know and point out what is being done in their name. The more voices, the harder to ignore.
This is the important snippet of code...
<script>
var b_hostname = "secure.booking.com",
splitHostName = b_hostname.split( '.' ),
sHNLength = splitHostName.length - 1,
b_cutHostName = ( b_hostname.match( /co.uk|ac.uk|org.uk|me.uk|ltd.uk|plc.uk|co.jp/ ) )? splitHostName[ sHNLength - 2 ] + "." + splitHostName[ sHNLength - 1 ] + "." + splitHostName[ sHNLength ] : splitHostName[ sHNLength - 1 ] + "." + splitHostName[ sHNLength ] ;
dataLayer = [{
'label' : 'Template:102',
'aid' : '312164',
'b_partner_channel_id' : '2',
'b_partner_id' : '406360',
'pageType' : 'book',
'mydomain' : b_cutHostName
,'template_version': 'book'
,'aff_aa_ga_tracking_test_bs2' : '0'
}];
</script>
So likely 'b_partner_channel_id' : '2', means b-king.com and 'b_partner_id' : '406360', is their affiliate number.
As for the owner of the website, you should send him/her a DMCA notice for the usage of your pictures without autorization. Or an invoice for the usage of the copyrighted photos. Either one should get your point across.

 

[Morticia]

Got a call from the MBS today. This series of websites do not belong to any of their affiliates. (Again, this one claimed this is just a website directed at hotels in my state. She didn't 'get' this same website exists for every state and has all of their info on it.) They do not accept that their info was hijacked and that guest info is at risk. They won't intercede for me because they are not me. They say they cannot intercede for me with a website that seems to have stolen all my info from them.
I explained, again, I will not be responsible for any compromised guest data that is entered on that site.
She asked me to wait for the owner of the site to 'reach out to me'. (Can we FINALLY agree that is an awful phrase and retire it?)
Anyway, I explained my next move was contacting Google and filing a a complaint. She didn't sound too happy with that but hey, she won't be there next week anyway..

I don't think the person you spoke to is computer savvy enough. Was this person at booking.com? Escalate it through their email system. B-King.com has people who will look into this. They don't want their reputation tarnished and it's a violation of their affiliate program. You can also start to send notices to some of the other B&Bs you know and point out what is being done in their name. The more voices, the harder to ignore.
This is the important snippet of code...
<script>
var b_hostname = "secure.booking.com",
splitHostName = b_hostname.split( '.' ),
sHNLength = splitHostName.length - 1,
b_cutHostName = ( b_hostname.match( /co.uk|ac.uk|org.uk|me.uk|ltd.uk|plc.uk|co.jp/ ) )? splitHostName[ sHNLength - 2 ] + "." + splitHostName[ sHNLength - 1 ] + "." + splitHostName[ sHNLength ] : splitHostName[ sHNLength - 1 ] + "." + splitHostName[ sHNLength ] ;
dataLayer = [{
'label' : 'Template:102',
'aid' : '312164',
'b_partner_channel_id' : '2',
'b_partner_id' : '406360',
'pageType' : 'book',
'mydomain' : b_cutHostName
,'template_version': 'book'
,'aff_aa_ga_tracking_test_bs2' : '0'
}];
</script>
So likely 'b_partner_channel_id' : '2', means b-king.com and 'b_partner_id' : '406360', is their affiliate number.
As for the owner of the website, you should send him/her a DMCA notice for the usage of your pictures without autorization. Or an invoice for the usage of the copyrighted photos. Either one should get your point across.
.

I did use the email system to send my complaint. Thanks for the code. I'll email them again and tell them the partner id. And tell them to get it fixed.

 

[Copperhead]

Got a call from the MBS today. This series of websites do not belong to any of their affiliates. (Again, this one claimed this is just a website directed at hotels in my state. She didn't 'get' this same website exists for every state and has all of their info on it.) They do not accept that their info was hijacked and that guest info is at risk. They won't intercede for me because they are not me. They say they cannot intercede for me with a website that seems to have stolen all my info from them.
I explained, again, I will not be responsible for any compromised guest data that is entered on that site.
She asked me to wait for the owner of the site to 'reach out to me'. (Can we FINALLY agree that is an awful phrase and retire it?)
Anyway, I explained my next move was contacting Google and filing a a complaint. She didn't sound too happy with that but hey, she won't be there next week anyway..

I don't think the person you spoke to is computer savvy enough. Was this person at booking.com? Escalate it through their email system. B-King.com has people who will look into this. They don't want their reputation tarnished and it's a violation of their affiliate program. You can also start to send notices to some of the other B&Bs you know and point out what is being done in their name. The more voices, the harder to ignore.
This is the important snippet of code...
<script>
var b_hostname = "secure.booking.com",
splitHostName = b_hostname.split( '.' ),
sHNLength = splitHostName.length - 1,
b_cutHostName = ( b_hostname.match( /co.uk|ac.uk|org.uk|me.uk|ltd.uk|plc.uk|co.jp/ ) )? splitHostName[ sHNLength - 2 ] + "." + splitHostName[ sHNLength - 1 ] + "." + splitHostName[ sHNLength ] : splitHostName[ sHNLength - 1 ] + "." + splitHostName[ sHNLength ] ;
dataLayer = [{
'label' : 'Template:102',
'aid' : '312164',
'b_partner_channel_id' : '2',
'b_partner_id' : '406360',
'pageType' : 'book',
'mydomain' : b_cutHostName
,'template_version': 'book'
,'aff_aa_ga_tracking_test_bs2' : '0'
}];
</script>
So likely 'b_partner_channel_id' : '2', means b-king.com and 'b_partner_id' : '406360', is their affiliate number.
As for the owner of the website, you should send him/her a DMCA notice for the usage of your pictures without autorization. Or an invoice for the usage of the copyrighted photos. Either one should get your point across.
.

Thanks for the code.
My Booking.com rep is coming here on Friday morning and I am going to show her how they are miss representing my site and that they are an affiliate.

If any of you see your B&B listed on this site and have issues, I will be glad to provide your info to my rep as well. Please inbox your info to me by Thursday evening. (June 11, 2015)

 

[Copperhead]

Rep came by yesterday - she is very, very helpful.
I showed her the website in this thread by searching my B&B. Showed her the incorrect data and how the link takes us to another site to book.
She said that it was very suspicious and did not look like any affiliate she has seen before. I provided the code that Jon tracked down as well.
She was going to submit it to the proper department to research and they in turn will sent it to the corp. legal dept. to handle.
She also encouraged us to send Feedback through the website about any and all issues we have with their business. She said they are ALL read, each and every one. She even had submitted feedback when she did not get results by going directly inter office. She received a call from the proper office in corp. headquarters who thanked her for going the extra mile to get her issue to the proper group.
So, regarding the new policy about guest email data, submit that feedback!