Important part missing here, they didn't tell anyone about the affiliate URL rewriting and only removed it when caught.