Hi Roller Casino - Vegas Red - spammy deceptive affiliate?

[The Dude]

I've been getting spammed recently by some a-hole who has harvested emails off of Casinomeister.com. These spam mails are the following:

X-Persona: <Casinomeister>
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: (fqmail 28932 invoked from network); 05 Jul 2006 16:51:02 -0000
Received: from mx08.futurequest.net (mx08.futurequest.net [69.5.6.180])
by pt02.futurequest.net ([69.5.6.173])
with FQDP via TCP; 05 Jul 2006 16:51:02 -0000
Received: (qmail 18841 invoked from network); 5 Jul 2006 16:51:02 -0000
Received: from pt02.futurequest.net (pt02.futurequest.net [69.5.6.173])
by mx08.futurequest.net ([69.5.6.180])
with QMQP via TCP; 05 Jul 2006 16:51:02 -0000
Delivered-To: [email protected]
Received: (fqmail 28922 invoked from network); 05 Jul 2006 16:51:02 -0000
Received: from mx10.futurequest.net (mx10.futurequest.net [69.5.6.182])
by pt02.futurequest.net ([69.5.6.173])
with FQDP via TCP; 05 Jul 2006 16:51:02 -0000
Received: (qmail 3625 invoked from network); 5 Jul 2006 16:51:02 -0000
Received: from EU-QSAW9M6EMYW6 (201-27-114-167.dsl.telesp.net.br [201.27.114.167])
by mx10.futurequest.net ([69.5.6.182])
with ESMTP via TCP; 05 Jul 2006 16:50:56 -0000
Message-ID: <42677823962184.789B499BF8@RYERL>
From: "Garth" <[email protected]>
To: <[email protected]>
Subject: * Featuring 85+ Award Winning Games
Date: Wed, 5 Jul 2006 13:51:09 -0200
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: r3fo11QtMzjpjldXLlXcfeMmRcon69hmppPf
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit


Good day to you Sir!


iH Roller is the best in the industry because we offer:


* 24-hour support
* Featuring 85+ Award Winning Games
* Including blackjack, roulette, slots, craps, baccarat, and video poker
* Several options that allow you to control the playing environment


Give us a try! Remember, Free $888.00 is ON THE HOUSE!


Knowledgeable and helpful 24/7 phone and live chat support team


Start Winning Now!


http://familyrollcall.com/d1/check



Learn to say no It will be of more use to you than to be able to read Latin Elementary sartorial techniques initially applied obviate the need for repetitive similar actions to the square of three. Don't byte off more than you can view..

I have a number of these pointing differing websites.

http://familyrollcall.com/d1/check
http://bigclubs.com/d1/check

Just to name a couple

I've been deleting these as they come in, but today I decided to check out just who this asshole is. The casino website is totally nondescript, but for the links "Fair Gaming" and "Completely Safe" you're forced to download the casino software.

Well, I downloaded it and began the install - it's Vegas Red Casino.

I'm searching for aff links, and I hope to find them shortly.

I'm also contacting Vegas Red to let them know they have a problem on their hands. These are the affiliates that should be drawn and quartered. Spam mails and deceptive websites such as these are inexcusable.

 

[Simmo!]

I've had this one loads of times. But i also had it to a hotmail email address that is "unknown" at Casinomeister. In fact pretty much anywhere as I don't use it except for one or two research accounts at the less reputable casinos.

 

[dominique]

Googling the website brings the peacock and also a second sender address:

You do not have permission to view link Log in or register now.

But googling the other website brings you to - lots of places.



Link Removed (invalid URL)

 

[uungy]

I have had quite a few of them too. The thing is they keep getting new domain names, and them discarding the domain. So in a couple of weeks time the below sites will no longer work

I have

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)

The only ones I could find for the moment, but they don't work any more, so I would advise taking a hard copy of the html and pictures if you report them, as by the time they look into it, the site will no longer be there

 

[unicorn40]

I've been getting emails 3-6 a day for that place for a while and i can't get them to stop.I block them and they still come......I clicked the links and the website it takes you to,you click "support" and it trys to load the casino.....

 

[Mousey]

I'm getting half a dozen or so of these things per day, too. Different titles and different email addresses in the 'from'. Different link addys also. The most recent:

$lots-Blackjack-More <[email protected]>
Visit theHiRoller Casino where we give you $$ toPlay!
LiveDealers, JackpotSlots, MuchMORE!
XhttpX://www.goesdoing.com

I checked the 'source' on this email. It's full of weird stuff you don't see when you look at the 95% white page email, a couple of different languages, and ... well... here's a snippet from the English bit:

he next general meeting of both WSSA and Iota Iota Iota will be
October 4th at 8:00pm in DM 212.

Just a couple quick announcements:

WSSA and Iota Iota Iota each have a webpage.....

And another ... what language?:

Wat ontzettend leuk dat ze Jack, Sarina en de andere genetisch
gemanipuleerden nog een keer hebben teruggehaald. Gelukkig is er,
ondanks de verwikkelingen rond o.a. Dax en Sisko, ook nog aandacht voor
de anderen en Bashir verdient natuurlijk veel eigen afleveringen.

And another snippet from another section:

IWACO is een internationaal adviesbureau voor water en milieu, met
vestigingen in binnen- en buitenland. Bij IWACO werk je in een informele
sfeer samen met hooggekwalificeerde collega's. Als adviseur heb je een
grote eigen verantwoordelijkheid. Je krijgt volop de ruimte creatieve
opiossingen te bedenken voor de vaak ....

I have no idea WTF it's saying so pardon if there's something vile in the languages I don't read. Why hide that crap in emails?

 

[dominique]

These look dutch to me.

 

[winyourwager]

I get these spam mailers every day. Sometimes 10 or more

 

[Salmon100]

For a long period I was spammed with 5-10 emails every day.

A few weeks ago I decided to se if it was possible to stop the spamming as it is a pain in the b..

Via Google I found this page

You do not have permission to view link Log in or register now.

- they send warning information to the internet service provider responsible for hosting the services used by the spammer.

Well, I filed a free report on each of the spammails I had received the last two days and havnt received any spammails for the last 14 days !

Try them, I am quite sure it will help you get rid of these irritating mails.

 

[unicorn40]

Each one i get is from a dif. email addy.....I have 10 so far from the yesterday and today all from dif. ones.....

 

[winbig]

The latest

Ok, now that I have the right thread...lol


I too am sick of getting this crap from vegas red. Don't bother with the email address, it's a fake. I've reported this to the registrar, as it's in violation of ICANN rules to register with any fake info.

One ray of light, give 'em a call, I've confirmed the phone # via reverse lookup. It does match the address & name

Here's the contact information for one of the affiliates in question (pulled the info from the spam domain they used in this instance)

Domain: galoren.com

Registrant
Anne Nottingham
jermernolt
[email protected]
1050 Wabash Ave
Medford, OR 97504 US
+1.5417731141

 

[The Dude]

I've been in touch with the casino, and they say they've been aware of this problem. It seems as though there are a team of affiliates working together on this.

 

[winbig]

I've been in touch with the casino, and they say they've been aware of this problem. It seems as though there are a team of affiliates working together on this.

So are they planning on doing anything about this?

Every single email is the same. Every email points to the exact same webpage; IE: Same affliate code, same affiliate. When a domain is shutdown for abuse, they move to a new one. Only then do the emails change.

The IP addresses that they originate from, however, are different. This could mean there are multiple people working on the same affiliate account, or the affiliate in question is simply finding a ton of insecure mailservers.

Having said that, I think their response is total BS. I could understand if there were multiple domains involved in the spam mails, but when every single one points to the same domain......


[edit]
And seeing as how the mails never change, the first report they recieve that matches the email in question, they should shut down the affiliate account right then and there. No questions asked, do not pass go, do not collect $200.

Obviously they're turning a blind eye to this. If they cancelled the affiliate account in question, why does the spam continue?

 

[kwblue]

I get about 10-20 emails a day PER ACCOUNT. I have many email accounts and tons of these mails. I am sure that they can shut down the affiliate. If they do, then we won't get emails because it would not be of benefit to these a-holes.


I don't even know how they get the email addy's. Some of my email addy's are used only to communicate to affiliate programs.

 

[lots0]

I don't even know how they get the email addy's. Some of my email addy's are used only to communicate to affiliate programs.

If thats the case the affiliate program either gave them your email address or they stole it from the affilaite program.

 

[winbig]

If you're sick of it too,

Forward copies of these emails to [email protected]. This is the contact addresses for the servers they're using for hosting.

The spammers actually have directory listing enabled, and the dates on alot of those directories were from May, so they've been using this company all along.

IP Address: 65.98.99.152

NetRange: 65.98.0.0 - 65.98.127.255
CIDR: 65.98.0.0/17
NetName: FORTRESSITX
NetHandle: NET-65-98-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PWEBTECH.COM
NameServer: NS2.PWEBTECH.COM
Comment:
RegDate: 2004-07-21
Updated: 2006-05-17

OrgAbuseHandle: FIAD-ARIN
OrgAbuseName: Fortress ITX Abuse Dept
OrgAbusePhone: +1-973-572-1070
OrgAbuseEmail: [email protected]

 

[Mousey]

Miraculously, I have not received any HiRoller spam for several days in either of my email accounts that were 'hit'.

 

[kwblue]

I would rather their affiliate program (probably Casino Partners) shut down their account instead of their server's being shut down. It is quite easy to get another set of servers, but if all their 'hard work' is gone because they cannot promote Vegas Red (I believe that is the skin they are using) anylonger - then it may be a while before they are back in business.

 

[paul02085]

I just read this thread yesterday and today i got the spam (for the first time).

"Deon" <[email protected]> Add to Address Book Add Mobile Alert
Yahoo! DomainKeys has confirmed that this message was sent by gmail.com. Learn more
To: [email protected]
Subject: New and hot CASINO for you to enjoy
Date: Sun, 16 Jul 2006 10:53:02 +0000

Good day my friend!,
OUR CASINO:
* Fast Payouts
* New Players get up to $888 FREE in Welcome Bonuses at Hi Roller
* Hi Roller Cassino is one of the oldest and most established online
cassino.
* With amazing graphics and sounds you will not be disappointed
Link Removed ( Old/Invalid)
Solid, Reliable and Respectable
with 100% Security, Privacy & 24/7 support

 

[Mousey]

I just read this thread yesterday and today i got the spam (for the first time).

.......
* Hi Roller Cassino is one of the oldest and most established online
cassino.
* With amazing graphics and sounds you will not be disappointed
Link Removed ( Old/Invalid)
Solid, Reliable and Respectable
with 100% Security, Privacy & 24/7 support

Geocities?!?!?!? Oh, they're gonna love this! May I suggest forwarding this garbage to the appropriate Geocities dept.?

Very professional -- not! Who are these people??

 

[GrandMaster]

I got a very similar one from [email protected]

Dear client.,
OUR CASINO:
* 24-hour support
* LIVE DEALERS & Fast Downloads
* Hi Roller Cassino is one of the oldest and most established online cassino.
* Several options that allow you to control the playing environment
Link Removed ( Old/Invalid)
Knowledgeable and helpful 24/7 phone and
live chat support team

These morons are also spamming me on a work e-mail address that they could only have harvested from the web.

 

[winbig]

I would rather their affiliate program (probably Casino Partners) shut down their account instead of their server's being shut down. It is quite easy to get another set of servers, but if all their 'hard work' is gone because they cannot promote Vegas Red (I believe that is the skin they are using) anylonger - then it may be a while before they are back in business.

Yes, it's CasinoPartners, and they've been contacted also. Haven't heard back from them because it's the weekend.

 

[ezlxq]

Forward copies of these emails to [email protected]. This is the contact addresses for the servers they're using for hosting.

Not to burst anyone's bubble but that's only one of dozens of registrars. Several of these go back to highroller themselves, which tells me that vegasred exists solely to spam people.

Here's a list of domains I've been tracking on this one:

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)

You do not have permission to view link Log in or register now.

URL Not Found / Outdated
Link Removed ( Old/Invalid)

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid) <- the most recent one spammed using a geocities domain.


Every single one of them is hosted in different locations, with distinct DNS, etc.


Here's the whois for the first domain in that list:

Whois Record for Wirelessonce.com
Page Information
Website Title: Hi-Roller Casino  
Record Type: Domain Name 

Indexed Data
Alexa Trend/Rank:  565,208 (1 Month) 1,192,287 (3 Month)  

Server Data
Server Type: Apache/1.3.33 (Unix) Resin/2.1.14 mod_throttle/3.1.2 mod_ssl/2.8.22 OpenSSL/0.9.7e
(Spry.com also uses Apache)  
IP Address: 211.144.69.235  
IP Location:  - Shanghai - Shanghai - Hltt Communication Co. Ltd  
Response Code: 206 
Blacklist Status: Clear (history)  
SSL Cert: No valid SSL on this Host 
Website Status: Active  
Reverse IP: 27 other sites hosted on this server 


Registry Data
ICANN Registrar: ENOM, INC. 
Created: 30-May-2006 
Expires: 30-May-2007 
Registrar Status: REGISTRAR-LOCK 
Whois Server: whois.enom.com 
Name Server: NS2.H1R0LLER.INFO

Note the name server host...

Casinopartners has not responded to any of the numerous requests I made to investigate this issue. They are certainly aware of it, but appear to be choosing not to do anything about it or communicate their alleged progress on this issue to anyone.

Thought I'd contribute to this thread since this is the only legitimate forum I could find where it was being discussed.

I lost a family member to a gambling related suicide last year and the fact that I continue to receive these spams is insulting in the extreme. I certainly would NEVER sign up for these emails but these spammers don't care.

Anyway there it is. If anyone has any idea how we can shut these morons down I am all ears.

ezlxq
Aggravated Casino Spam Recipient

 

[winbig]

Maybe if Casino Partners started getting voice calls from many pi$$ed off spamees, they might start doing something about it.

Tollfree Phones:

USA: 1 800 968 0196

UK: 0800 066 4322

France: 0800 917 293

Spain: 900 957 056

Japan: 00 53 116 0575

Italy: 800 788 401

Germany: 0800 181 3800

Fax: 1 646 304 7062

 

[kwblue]

Maybe if Casino Partners started getting voice calls from many pi$$ed off spamees, they might start doing something about it.

I have forwarded one email... However, I am giving them 1 week to clean it up. After that WE should all forward the SPAM mails to CP. Flood THEIR inboxes for a change.

 

[The Dude]

I've just been in formed that the evil affiliate(s) accounts have been closed, and that the spam mails should come to a halt.

I wonder which casino the spamster will choose to promote next

 

[spearmaster]

Nice post, ezlxq, and welcome to Casinomeister!

So evil affiliate account "closed" - uh huh. I know I've heard this before elsewhere... LOL... I sure hope Casino Partners really meant what they said.

 

[winbig]

Just checked one of the domains that was up yesterday and was sent to a domain placeholder, so it's looking good so far

 

[winbig]

I've just been in formed that the evil affiliate(s) accounts have been closed, and that the spam mails should come to a halt.

I wonder which casino the spamster will choose to promote next

Tell them to look again. Just recieved an email about an hour ago, new domain, same Vegas Red BS.

 

[ergopro]

I still get about 5emails per day promoting hi-roller casino

 

[ergopro]

got this 5minutes ago...

At Hi Roller Casino, we are so sure you are going to love our games that we are giving you up to $888.00 FREE just for trying our Casino.
$ 888.00 FREE!
Click Here Now!
edited link: httpx://CasinoClean.com

Hi Roller is the best in the industry because we offer: * $888.00 FREE to new depositors * Fast Payouts * 24-hour support * Exciting games * A complete and SAFE gaming experience
Give us a try! Remember, Free $888.00 is ON THE HOUSE!
Start Winning Now!

 

[dominique]

I got one too, but they are likely in queue to be sent and it should stop soon.

 

[ergopro]

Do these ever stop?

Ruby Mcdowell <[email protected]>
Vastaanottaja [email protected]
Lhetetty 21.7.2006 18:39:21
Aihe Re: Collect your Bonus Now!!!
Viesti: Good evening,

At Hi Roller Casino, we are so sure you are going to love our games that we are giving you up to $888.00 FREE just for trying our Casino.
$ 888.00 FREE!
Click Here Now!

Link Removed ( Old/Invalid)


Benefits include:
* Up to $888 real money to gamble with
* Fastest growing/most trusted online company
* Play all your favorite games: Poker, Hold'em, Black Jack, Slots, etc.
* Play at no-cost to see how exciting and easy it is * Rapid payouts to all clientele & 24/7 support
* Great games, Big Winnings, & thousands of players

if you want to be removed click below

Link Removed ( Old/Invalid)

 

[winbig]

I got one too, but they are likely in queue to be sent and it should stop soon.

They should be finished by now, but aren't. I worked at an ISP, and when we'd get hit by spammers relaying through a server (this was before spam was such a major issue that it is now), it'd process about 2,000/hr minimum.

 

[winbig]

They're buying (or harvesting) more addresses

Bryan, is there an update regarding this situation? I can tell you for a fact that they're adding new names to their spam list. They just sent an email to my other gmail account that was previously free of this Vegas Red spam.

To me, this definately verifies that the affiliate account(s) is(are) still open.

X-Gmail-Received: f801b18291545d71d11efd33b49343f441a3b92e
Delivered-To: [email protected]
Received: by 10.78.186.8 with SMTP id j8cs17642huf;
Fri, 21 Jul 2006 17:58:27 -0700 (PDT)
Received: by 10.54.113.19 with SMTP id l19mr1396724wrc;
Fri, 21 Jul 2006 17:58:26 -0700 (PDT)
Return-Path: <[email protected]>
Received: from dsl-201-128-51-246.prod-infinitum.com.mx (dsl-201-128-51-246.prod-infinitum.com.mx [201.128.51.246])
by mx.gmail.com with SMTP id g2si2723956wra.2006.07.21.17.58.21;
Fri, 21 Jul 2006 17:58:26 -0700 (PDT)
Received-SPF: neutral (gmail.com: 201.128.51.246 is neither permitted nor denied by domain of [email protected])
Date: Tue, 24 May 2005 00:12:23 +0000
From: Irene Levine <[email protected]>
X-Mailer: The Bat! (v2.12.00) CD5BF9353B3B7091
Reply-To: Irene Levine <[email protected]>
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: [email protected]
Subject: you are gonna love are games -Irene
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

At Hi-Roller Casin0, we are so sure you are going to love our games
that we are giving you up to $888.00 F-R-E- E
just for trying our Casin0.

$ 888.00 F-R-E- E!
Do it NOW

[spam url deleted]

 

[winyourwager]

I'm still getting these junk mailers

 

[Andreas]

This one is really getting out of hand... I'm on this spammer for quite some time now, doing my research and stuff, doing posts on GPWA and CAP and on my own sites...

I just post here the post I just did on CAP, maybe I'm just to lazy to write this again, maybe I've spent to much time time on this issue in the past few days...

There are several threads going on all over the gambling boards and also several spamfighter boards about this hi roller spam wave for Vegas Red...
So maybe this will give you some more insight on this issue...

Here are the links to the threads
GPWA:

You do not have permission to view link Log in or register now.

CAP:

You do not have permission to view link Log in or register now.

GamblingGuards: Link Removed ( Old/Invalid)

What the F... is going on at Casino Partners?

Here is another one I just received!!
same setup, again one of the affiliate ID's used in the mailings over the last month: vegas22

*****************************************

Quote:
Hi-Roller is one of todays leading online casinos.

As one of the oldest and most established online casino, Hi-Roller caters not only to the serious seasoned gambler, but also to players new to the online gaming experience.

Complete with over 85 games featuring state-of-the-art graphics (powered by PlayTech software,) a knowledgeable and helpful 24/7 phone and live chat support team, fast payouts, and a payout rate of over 97%, Hi-Roller is THE PLACE to be!

Come grab your $888 Welcome Bonus today! Link Removed ( Old/Invalid)

*****************************************
Created: 2006-07-16 ! again the old sheme, just a few days before the spamming starts the domain was registered....

Laurent, you told us Casino Partners cut ties with this "agency"...
Close this and all the other affiliate accounts for sending spam!!!
If you can't find all the accociated affiliate accounts I just post them here again:

vegas1, vegas2, vegas3, vegas4, vegas5, vegas6, vegas7, vegas8, vegas9 vegas10, vegas11, vegas12, vegas13, vegas14, vegas15, vegas16, vegas17, vegas18, vegas19, vegas20, vegas21, vegas22, vegas23, vegas24, vegas25, vegas30, vegas31, vegas32, vegas33, vegas34, vegas35, vegas36, vegas37, vegas38, vegas39 vegas40, vegas43, vegas45, vegas46, vegas47, vegas48, vegas49, vegas50, vegas51, vegas52, vegas53, vegas54, vegas55, vegas56, vegas57, vegas58, vegas59, vegas60, vegas61, vegas62, vegas63, vegas64, vegas65, vegas66, vegas67, vegas68, vegas69, vegas70, vegas71
momo1, momo2, momo3, momo4, momo5
vjmed

check out my last post here to discover who really is behind this so called "advertising agency":
Link Removed ( Old/Invalid)

are you trying to tell that you guys working over years with an marketing agency what is using absolutly illegally methods?
-like hiding their true identity,
-modifying header informations and stuff,
-sending e-mails using hijacked computers and
-hosting sites on hijacked servers?
-Registering hundreds of domains within days, using fake registration informations for those domains like:

-Central Intelligence Agency
-United States Agency for International Development
-Environmental Protection Agency
-Food Standards Agency
-Radiocommunications Agency
-Air Fresh Technologies
-Slando Investment
-Soronte Vine Shop
-African Souvenir Store
-African and Asian Accessories
-Saltero Pizza
-fashist
just to name a few out of a few hundred...

OK, you said CP cut ties with this company, do you mind revealing the name and information on this so called "advertising agency"? Maybe some guys are interested to get them known, allone the modified e-mail headers are a serios crime.... just not to think about using open relays to send their spam e-mails and hosting their sites on hijacked servers....

This "advertising agency" is not really an real agency... isn't it?

I just post a part of my post here, you can read the full story here:
Link Removed ( Old/Invalid)

Quote:
......Now, this guys there are no rookys when it comes to spam, they ping the servers, trace the IP's and doing all kinds of stuff to discover things... Then they monitor the servers and providers.... First they go the usual way, contacting the providers and registrars and stuff, but in cases like this it not really works...

Pretty fast was clear that this Hi Roller Spam had his point of orgin probably at the top 3 of the worlds worst spammers: Alex Blood, Michael Lindsay and Leo Kuvayev.... Thats basicly the creme dela creme of the internationally spam business... read more about this guys at Spamhaus.org:

You do not have permission to view link Log in or register now.

Here is how those guys shut down the Hi-Roller Casino Domains within hours....
They use a tool called .......

Link Removed ( Old/Invalid)

What about all the other spam e-mails what are using another template of yours, (Casino Tropez) This e-mails are also still comming in!!! Did you guys just cut ties with the "advertising agency" for the english speaking contrys?
I mean It shure looks this way if I now get the same e-mails, same messages, same advertisements only to my .de e-mail adresses all in german??? Is this some kind of tactic to use .com domains for the english laguage market and .info domains for the german market?
Link Removed ( Old/Invalid)


Quote:
Spielen Sie Roulette gegen Live-Dealer in Green Table!
Erfahren Sie den Nervenkitzel eines wirklichen Kasinos auf Ihrem PC.
Gleiche Spiele, gleicher Nervenkitzel, BESSERE CHANCEN!
Spielen Sie jetzt!
xxxhttp://greentable-de.info/



Affiliate ID: omega

If you download the software you download it from a seperate domain: qqcapol.info
Both domains are registered at the same time like all the hundred other ones,
qqcapol.info 19-Jun-2006
greentable-de.info 19-Jun-2006

both are registered to:
Registrant Name: Private Person Private Person
Registrant Organization: Private Person
Registrant Street1ost Office Box 301763

The following domains I discovered doing a reverse IP check, all are setup the same using the "green table" template (Casino Tropez)

3,804 Domains for 221.206.5.51 (Greentable-de.info)
Most of this 3.800 domains are setup for selling fake luxury watches, another spam business I myself and a few million other internet users receive advertising e-mails for almost daily.... but on this server are also setup a few domains for green table casino (Casino Tropez):

casincasa.info Created On:26-Apr-2006 Affiliate ID: hm44bu
cazinoplay.info Created On:23-Jun-2006 Affiliate ID: hm44bu
greenplay.info Created On:02-Jul-2006 Affiliate ID: hm44bu
game-star.info Created On:10-Jul-2006 Affiliate ID: omega
casino-greentable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
casino-grtable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
all of the domains download the software from casincasa.info

some of this domains were also used already back in may for spamming, mostly in the german market.... I don't think I need to post all the info when and how they were spammed here too, it should be enough to get the picture....

The spamming for Vegas Red stopped about three days ago, now it seems to start again....

Actually in my opinion it didn't really stop, there were just different e-mail lists used and the amount of emails sent was decresed....

Laurent, it would be nice to get an honest explanation here!

 

[winbig]

In my opinion, CP is making a fortune off of these spammers and are turning a blind eye to it, along with blowing smoke up our ass saying they've cancelled the affiliate accounts.

If the IP's from the spam headers weren't located all over the world, one would be inclined to think CP is behind this whole thing...unless of course they're using open proxies to connect to, and send this spam through insecure mail servers of course....

[edit]Just read the one at CAP...interesting:

I have catch-all email addresses, so I get one for each 'user' they configure for whatever auto-craptastic software they are using.

Here are examples: administrator, webmaster, sales, info, test, root, advertising, postmaster, support, service, mail, guest, accounts,home

I wonder when large businesses are going to get fed up with this and bring a civil suit against CP for allowing this to continue...ie: Wasted bw, etc. It's been done before. AOL vs. Cyber Entertainment Networks, back in 2001.

You do not have permission to view link Log in or register now.

"Legally the lawsuit is important because it establishes liability for an adult Web site--that they are causing spam to be sent or are knowingly in a conspiracy with the spammers. This makes them negligent in their no-spam policy," said Nicholas Graham, an AOL spokesman.

CP's spam policy:

Please remember that neither we, nor our ISP, tolerate spam of any kind. Any affiliate caught spamming will be placed on probation from the affiliate programs and all earnings will be void.

Seems pretty negligent to me.

 

[Andreas]

exactly..., if they would have cancelled this affiliate accounts then we wouldn't have today again spam mails with new domains and the same affiliate accounts we had for the last two months...

 

[unicorn40]

I'm still getting this crap too.....

 

[winbig]

Wow, CP finally replied.

Tried to feed me more BS, but at least they replied.

On 7/23/06, Support | Casino Partners < [email protected]> wrote:

Thanks for your complaint. Those spammers should have stopped sending traffic
by now. If you still receive something promoting our brands please forward it
to me.
regards

Needless to say, I'll believe it when I see it. I think I'll just setup a filter for every email that has $888 in it to be forwarded to CP.

edit: I also let them know that we know their accounts aren't shutdown, or they wouldn't be registering new domains every single day as well as using the same affiliate ID's.

 

[winbig]

It seems this group has also added Tropez to its list of casinos to spam now (seperate, but uniform mails).

 

[Andreas]

They promote Tropez also since may.... thats the time the first spammails hit in germany...

The domains involved here are:
casincasa.info Created On:26-Apr-2006 Affiliate ID: hm44bu
cazinoplay.info Created On:23-Jun-2006 Affiliate ID: hm44bu
greenplay.info Created On:02-Jul-2006 Affiliate ID: hm44bu
game-star.info Created On:10-Jul-2006 Affiliate ID: omega
casino-greentable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
casino-grtable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
all of the domains download the software from casincasa.info

same setup like the Vegas red Spam wave, all on one server, same template...
probably the same spammer...

seems to me they target with the .info domains the german market, emails are the same ones like for vegas red, but in german...

did you get some in english for green table?

 

[winbig]

No, but I've got them in French and Spanish....I still can't figure that one out

 

[Andreas]

what for domains are being advertised in the spam you received for Tropez?
also the .info out of my last thread?

 

[winbig]

what for domains are being advertised in the spam you received for Tropez?
also the .info out of my last thread?

Nope, the last one was a redirect to viplucklounge.com. Can't recall the redirect name, but it was definately a .com.

Seems they're advertising Tropez, Vegas Red, and Europa on that site.

 

[Andreas]

Yep, its the same spammer, I downloaded the software and extracted the affiliate code: vegas63

This one is one of the 70 affiliate accounts used for spamming Vegas Red over the last two month... (check my other posts)

If you receive again any spam, would you please post it to my forum?
Thanks

 

[ezlxq]

The spam barrage continues.

Thank you for the communication on this issue.

I continue to get spammed for Vegas Red / Hi-Roller casinos, usually with urls which are either dead or which now feature placeholders by the ISP.

However I just got one yesterday (claiming to be hi-roller) which used to be a vegas red site:

http://www.CasinoNeat.net

It's now "Secure Casino".

That redirects to:

http://xpshhbah.info/defaultem/

Which is where the download is also hosted.

The affiliate ID enclosed in the exe appears to be "defaultem", which makes sense since that's what the URL has as the subdirectory.

When you close that window it pops a new one (which gets around all the toolbars I tested it on) for a dating site.

http://www.amateurdatingcams.com/?WMID=73163&WMEC=0&CTRLID=JlA99&PID=1 &pop=2

Webmaster / affiliate id = 73163

Affiliate program is run by Sexmoney

www.sexmoney.com

Also if you visit the bare site:

http://xpshhbah.info/

You get a porn site.

What a charmer!

Anyway my point is: not only are these malicious spammers NOT STOPPING with their casino spam onslaught to people like me who REALLY don't want them, now they're also desperately including a bogus dating site and porn sites. How good is that for this industry?

Thought it was worth mentioning.

Is "Secure Casino" also promoted via Casino Partners? I couldn't find any information whatsoever about them.

ezlxq

 

[winbig]

This "Secure casino" is just their way of covering up the true casino; which in this case is Tropez.

For some reason, they advertise behind a front, then when you download the setup .exe, it's for a totally different casino. *shrug*

I've been informed that (and I quote) "Traffic has
dropped 90% since thursday" and "this network of spammers came through a third party company tha we deal with for a long time."

My problem with this is:
Is it me or is this "Third party company" excuse being played out more and more nowdays where SPAM is concerned?
and
Down 90%? Sure. Then why are we all still getting the same amount of mails?

 

[ezlxq]

Right... "third party"

This "Secure casino" is just their way of covering up the true casino; which in this case is Tropez.

Aha. So it is again a Casino partners spammer

For some reason, they advertise behind a front, then when you download the setup .exe, it's for a totally different casino. *shrug*

Spam rule #1: Spammers lie.

My problem with this is:
Is it me or is this "Third party company" excuse being played out more and more nowdays where SPAM is concerned?
and Down 90%? Sure. Then why are we all still getting the same amount of mails?

Okay so: as someone who has been following spam lawsuits for a while, and in particular regarding porn and casino spam, here are the facts.

- Porn companies routinely used to claim that "we have so many affiliates we can't possibly keep track of all of them. We're bound to have a few bad apples."
- Following the instantiation of the CAN-SPAM legislation, which explicitly says several things about how adult content should be advertised if it's done via email, and which further explicitly says that if your affiliate spams your product, you - the company - are responsible, guess how many used that excuse? Absolutely zero. They now have a 100% zero tolerance policy. (By that I mean every single legitimate company out there does.) They find out they have a spammer? That spammer is terminated instantly and they do not get any money, period.

For some reason, casino affiliate programs are nowhere near as responsive, despite the fact that this same rule applies.

As we speak, any of the people on this or any other forum who is an American citizen and wants to launch a class-action against the operators of Vegas Red and Casino Partners, could do so under CAN-SPAM and it would very likely stick. They're operating illegally if they continue to allow their affiliates to do this. If McDonald's hired spammers, McDonald's would be liable if they disobey CAN-SPAM, and could very successfully be prosecuted. End of story.

Casino Partners can say "third party this" or "third party that". It's bullshit. They know they have spammers, they are liable. It's not stopping. I personally am consulting my lawyer about this and have recommended several dozen others to do the same in their jurisdiction. Attorney General Spitzer has successfully brought numerous such lawsuits and it virtually eliminated 80% of all the porn spam that was out there. I'm going to make sure his office is made aware of this abuse as well.

I just thought everyone should know all of this, particularly the American Citizens on this board who have it within their power to do something about this issue.

ezlxq