I'm checking my affiliate network links, and seeing if they are brokering any traffic.
Anyone has any clue on who lunapark.go2cloud.org and clfstrk.go2cloud.org are?
https://lunapark.hasoffers.com/
http://clfstrk.hasoffers.com/
you can always replace go2clould.org to hasoffers.com