I have blacklisted Clubdice, Carnival, New York, USA Casinos and CDpoker

[GrandMaster]

The situation is getting worse. I got half a dozen of these e-mails informing me of the wonderful opportunity to play at Vegas Lounge or Hi Roller Casin0.

One interesting thing: the domains they are using, e.g., burvirgin.com, wviach.com, stainmayjon.com, ronbervers.com, were all registered on 20 August 2006, the registrants are possibly real people, at least the information is not obviously fake, of course, the spammers could be using real people's names without the victims' knowledge, and all these sites show the hompage of the Romanian Biat group, BIAT GROUP ROMANIA .

[lots0]

usually the domains used to send spam email are spoofed, in other words the spammer finds a mail server that can be cracked (not that hard too do) and makes it look like the email is comming from these domains when the domains in question almost always have nothing to do with the spammer.

[lots0]

If you really want to find the spammer...

I do believe that this guy is a prime suspect...

Domain ID12977564-LRMS
Domain Name:SEOEXP.INFO
Created On:04-Apr-2006 18:44:49 UTC
Last Updated On:31-Jul-2006 23:50:23 UTC
Expiration Date:04-Apr-2007 18:44:49 UTC
Sponsoring Registrarirect Information Pvt. Ltd. d/b/a PublicDomainRegistry.com
(R159-LRMS)
Status:OK
Registrant IDI_2500786
Registrant Name:Alexander Morohin
Registrant Organization:N/A
Registrant Street1:Moscow
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:Moskovskaya oblast
Registrant Postal Code:200000
Registrant Country:RU
Registrant Phone:+095.7492794324
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:srfmaker@gmail.com
Admin IDI_2500786
Admin Name:Alexander Morohin
Admin Organization:N/A
Admin Street1:Moscow
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:Moskovskaya oblast
Admin Postal Code:200000
Admin Country:RU
Admin Phone:+095.7492794324
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:srfmaker@gmail.com
Billing IDI_2500786
Billing Name:Alexander Morohin
Billing Organization:N/A
Billing Street1:Moscow
Billing Street2:
Billing Street3:
Billing City:Moscow
Billing State/Province:Moskovskaya oblast
Billing Postal Code:200000
Billing Country:RU
Billing Phone:+095.7492794324
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:srfmaker@gmail.com
Tech IDI_2500786
Tech Name:Alexander Morohin
Tech Organization:N/A
Tech Street1:Moscow
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:Moskovskaya oblast
Tech Postal Code:200000
Tech Country:RU
Tech Phone:+095.7492794324
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:srfmaker@gmail.com
Name Server:NS1.JFNS.INFO
Name Server:NS2.JFNS.INFO


Oh ya, he also goes by the name "Alex Blood"... A real low life scumbag wannabe gangster...

Come get me Blood, you big pussy...

[kwblue]

Yes, they explot common scripts to send out mail. They send it out through the server: meuorkut.front.ru in a lot of cases, but use other servers as well.

If you have a directory script, article script, CMS, or forum on your site - please update for the latest version and check your logs for page exploits which could look something like:

http://www.yoursite.com/index.php?page=http://meuorkut.front.ru/sendto?

Look for ANYTHING that resembles this or has this pattern to it. You are then basically hosting (including) their script on your site which then uses php mail to send out bulk mail.
The script has 2 textboxes which are then hosted on your site which they can post email addresses and a form letter to. This then runs the script which uses recursive programming and delay to send out mail.

[kwblue]

BTW - CPays has a 'meeting' on Monday to discuss this problem internally. I hope it has a better outcome than their last 'meeting'.

[lots0]

As far as I am concerned, Cpays can say whatever they want at their meeting, it is not going to change my mind or get me to remove them and their casinos from my Blacklist.

I want to see action from Cpays!

All these people do is talk and stall, talk and stall... No more talk... Except to tell players that they are risking their money when they deposit it with the bunch of thieves at Cpays... and that is just what Cpays are a bunch of thieves that employ wannabe gangsters to do their dirty work.

I really am tired of these scumbags at Cpays.

[lots0]

Oh ya, just to make myself feel better, I have submitted MR. Blood's gmail account to every spammer I know of.... Damn that felt good.

I even submitted his email to a few Cpays casinos... lol

[lots0]

I forgot to add that Alex Morohin besides going by the name Alex Blood, also uses other names... Alexander Mosh, Alexey Panov, AlekseyB, Alex Polyakov... Oh and his affiliate code for Cpays is aimer.

Alex is reported to be a member(founder) of the Pavka/Artofit & Leo Kuvayev spam gangs located in the Ukraine. These so called people have been involved with every dirty enterprise on the web from kiddy porn to extortion of websites.

No more shadows Alex my boy, doesn't it feel good to be out in the light for a change you scumbag.

ваш кровь мешка с дерьмом и ваше понижение

[GrandMaster]

He is the world's top spammer according to The Spamhaus Project - ROKSO.

[lots0]

Cpays knows who he is and what he does... yet they keep him on the payroll...

This makes Cpays and their casinos the problem.

Anyone that would hire that scum Alex Blood is a scum.

If you play at a Cpays Casino your funding Russan Orginized crime... Don't do it!

There are many other Online Casinos that don't hire Russan Gangsters to spam for them.