Unsolicited emails from Kings Palace Casino & its affiliates

[RUSTYROO]

vinylweatherman You need to write a book on casino's...The good the bad and the fraudly. You just know so much.

So other than not knowing hardly anything about online casino's besides the basics and playing them, where would I go to inform those providers as I am now some what in over my head about what is and could be going on, or do they frequent the forum some where and can just be drawn to this thread?

Here is the details of one of the emails, I forgot to add this before but don't know if it helps any.

From Selina Neal Tue Nov 22 14:06:27 2011
X-Apparently-To: @ via 98.139.218.54; Sun, 23 Oct 2011 16:05:19 -0700
Return-Path: <managerdin@eum.hu>
X-YahooFilteredBulk: 109.206.123.6
Received-SPF: none (domain of eum.hu does not designate permitted sender hosts)
X-YMailISG: yMEBzioWLDvAEeRApBpONql4Q.jtgM5i7Z6fT3QmE8Z1Mlps
td.V5DRSQ08cq5P_1_D46qigiQJ2XujsCt58PFmv9r.uDy.8o7 QHwyrUIPAd
J7hx712jXrE0.0gfdVCL4RRqx6cw8K9Y0H_clopnLSbkxp9IRg zjpwrWkWjL
21wb45tlnk3cVy.UJqiE7WBNlBs7arUpewQ2u.pZhXG7_Qk8Po Yo_naRNOsV
vXbQM0e3QMFW_GJrQd3WASEZXknRPdyoENKd1O5o60yLKzShmA hyHaFw09e3
xPQIJPB0w_GejAhNNyBN2q_5IphqSR3QowLx0pqJsWsRVWp8QD boKlg5vUOh
6iBdgk7OXvgfUQVMn2hkBOWWhZJPNnZCEk0b1OXlsaNrX5ccRM r33lyDMvWA
aH9vaKQrr_LmMFytqt60S5_t7AqRzD0cob8.MXez0u5AjcDPAl TByKdmBZmE
2IvbNPl67N5z47G8WmQSuEsn01DGi5xdO8E4TZLQMj5yYfWUIY 4k.f7Pw0D3
83SxOQuGnHnl_MlFxkL00K3AmvwYe7m6moXRDJ1B1a7MOKe09s MA.DsYksOx
eMW3Q8JPgBua67vLFvlkDeLXLWlQKoXZ88ai9t1a82ItrQ371Q sAfDfEZEE2
uTfwo8FKx9BKyyDrLjCS22.JlZ4rNsj1L.KKrHaUzNREuB3uqX 9V_VRQQoyu
UphsJs_GZuTXJdTbv6soCwr_SsEuNCCYc8RuQzf9Zd20Lqqcx4 gl7I2azYxW
Zg13XP5ZU0opIPTHQeehYAd7C1Ifk8SkAzFrgZjpHoQawLztbI CowmJUhDbs
4r2BB8b2VfoEPQGrcO66HcLqojVPGt7Z5ibrc1hbD24K1P61Hg x_lquKGaRZ
Lb5qSotYdk3NpZvpdsUe9JChVXsl21iIln8gUQuLxyRvUcezsf LUg5T3v9F.
Puht72lcLae.DxWTB04P8c8xyMQOYzHaAVxhlv.CkCWIZAOwu6 87VWU7o.Ix
r4JBlQyPvHs8S5vrM98QXVoLWselpw--
X-Originating-IP: [109.206.123.6]
Authentication-Results: mta1083.mail.ac4.yahoo.com from=eum.hu; domainkeys=neutral (no sig); from=eum.hu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dyn-123-6.kbcnet.rs) (109.206.123.6)
by mta1083.mail.ac4.yahoo.com with SMTP; Sun, 23 Oct 2011 16:05:19 -0700
Received: from [109.206.123.6] (HELO TYDQC)
by dyn-123-6.kbcnet.rs (8.14.3/8.14.3)
with SMTP id 40272231 for @; Tue, 22 Nov 2011 23:06:27 +0100
Message-ID: <000001cca962fb5ee090067bce6d@dyn1236.kbcnet.rs>
From: "Selina Neal" <Managerdin@eum.hu>
To: @
Subject: Let Vegas come to you when you claim your 1,000 free money offer
Date: Tue, 22 Nov 2011 23:06:27 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01CCA962.FB5EE090"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2644
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2827
This is a multi-part message in MIME format.
Content-Length: 1995

[RUSTYROO]

I got this page when i went to the address in my above post....

Cheers
Gremmy

I have an account with Casino Elegance and that is a live promo for the Grand Virtual casinos.

Jeez I'm so glad I'm not a newbie to the fascinating world of online casinos as this would confuse me even more than it is now

[vinylweatherman]

vinylweatherman You need to write a book on casino's...The good the bad and the fraudly. You just know so much.

So other than not knowing hardly anything about online casino's besides the basics and playing them, where would I go to inform those providers as I am now some what in over my head about what is and could be going on, or do they frequent the forum some where and can just be drawn to this thread?

Here is the details of one of the emails, I forgot to add this before but don't know if it helps any.

From Selina Neal Tue Nov 22 14:06:27 2011
X-Apparently-To: @ via 98.139.218.54; Sun, 23 Oct 2011 16:05:19 -0700
Return-Path: <managerdin@eum.hu>
X-YahooFilteredBulk: 109.206.123.6
Received-SPF: none (domain of eum.hu does not designate permitted sender hosts)
X-YMailISG: yMEBzioWLDvAEeRApBpONql4Q.jtgM5i7Z6fT3QmE8Z1Mlps
td.V5DRSQ08cq5P_1_D46qigiQJ2XujsCt58PFmv9r.uDy.8o7 QHwyrUIPAd
J7hx712jXrE0.0gfdVCL4RRqx6cw8K9Y0H_clopnLSbkxp9IRg zjpwrWkWjL
21wb45tlnk3cVy.UJqiE7WBNlBs7arUpewQ2u.pZhXG7_Qk8Po Yo_naRNOsV
vXbQM0e3QMFW_GJrQd3WASEZXknRPdyoENKd1O5o60yLKzShmA hyHaFw09e3
xPQIJPB0w_GejAhNNyBN2q_5IphqSR3QowLx0pqJsWsRVWp8QD boKlg5vUOh
6iBdgk7OXvgfUQVMn2hkBOWWhZJPNnZCEk0b1OXlsaNrX5ccRM r33lyDMvWA
aH9vaKQrr_LmMFytqt60S5_t7AqRzD0cob8.MXez0u5AjcDPAl TByKdmBZmE
2IvbNPl67N5z47G8WmQSuEsn01DGi5xdO8E4TZLQMj5yYfWUIY 4k.f7Pw0D3
83SxOQuGnHnl_MlFxkL00K3AmvwYe7m6moXRDJ1B1a7MOKe09s MA.DsYksOx
eMW3Q8JPgBua67vLFvlkDeLXLWlQKoXZ88ai9t1a82ItrQ371Q sAfDfEZEE2
uTfwo8FKx9BKyyDrLjCS22.JlZ4rNsj1L.KKrHaUzNREuB3uqX 9V_VRQQoyu
UphsJs_GZuTXJdTbv6soCwr_SsEuNCCYc8RuQzf9Zd20Lqqcx4 gl7I2azYxW
Zg13XP5ZU0opIPTHQeehYAd7C1Ifk8SkAzFrgZjpHoQawLztbI CowmJUhDbs
4r2BB8b2VfoEPQGrcO66HcLqojVPGt7Z5ibrc1hbD24K1P61Hg x_lquKGaRZ
Lb5qSotYdk3NpZvpdsUe9JChVXsl21iIln8gUQuLxyRvUcezsf LUg5T3v9F.
Puht72lcLae.DxWTB04P8c8xyMQOYzHaAVxhlv.CkCWIZAOwu6 87VWU7o.Ix
r4JBlQyPvHs8S5vrM98QXVoLWselpw--
X-Originating-IP: [109.206.123.6]
Authentication-Results: mta1083.mail.ac4.yahoo.com from=eum.hu; domainkeys=neutral (no sig); from=eum.hu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dyn-123-6.kbcnet.rs) (109.206.123.6)
by mta1083.mail.ac4.yahoo.com with SMTP; Sun, 23 Oct 2011 16:05:19 -0700
Received: from [109.206.123.6] (HELO TYDQC)
by dyn-123-6.kbcnet.rs (8.14.3/8.14.3)
with SMTP id 40272231 for @; Tue, 22 Nov 2011 23:06:27 +0100
Message-ID: <000001cca962fb5ee090067bce6d@dyn1236.kbcnet.rs>
From: "Selina Neal" <Managerdin@eum.hu>
To: @
Subject: Let Vegas come to you when you claim your 1,000 free money offer
Date: Tue, 22 Nov 2011 23:06:27 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01CCA962.FB5EE090"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2644
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2827
This is a multi-part message in MIME format.
Content-Length: 1995

Operators do have reps that frequent the forum, but first we have to identify who is involved. So far, it seems only Everest casino is involved at an operator level, with Playtech being involved at a software supplier level. In order to get more information, it will need someone to try installing the software to see which casino is REALLY involved. It will need someone not averse to wiping their OS and reinstalling Windows should this end up with them getting infected with something.

If a spambot is involved, this is a great means for them to spread it over even more PCs than they already have.

I am going to do a reset to factory settings on this PC at some stage, but am not yet ready to be bulldozed into doing this. The only PC I can afford to compromise is the old Windows 98 one, but it will probably not run the install.

I would also want to prepare a disposable email address before doing anything along these lines, so I can ditch it after the investigations, because it will no doubt be inundated with spam. It would also be a great way to see the connections without having to guess whether spam was coming from other sources.

It may be possible to identify the individual Playtech casino involved by examining the file without actually installing it.

[maxd]

Can a mod please remove the non modified image?

Done.

[pinkfloyd]

slightly offtopic but ontopic

there was an article today on a new glitch/virus affecting facebook where people where sending/ receiving invites from unwanted people , exboyfriends girlfriends strangers and they are worried that it is a phishing scam for legitimate emails

they went on to say that the sale of legitimate email adresses can fetch between 20c and $1 , and rusty i have no doubt in my mind that these people who sent you the original spam email bought it from somehwere

we should set up 20 different email accounts and sign up to 20 different casinos fun mode only and see which one gets spammed the most , should be a rouge offence !


@mr fruits if u set up a blank laptop to install this software use it at a wifi free hotspot , that way they arent going to ping u at a permanent ip address , might save u from any future attacks ( a little bit of paranoia goes a long way lol )

[RUSTYROO]

LMAO It took me a while... I was like where is this post from 'mr fruits' and I'm re reading the posts then it hits me....
mr fruits aka VWM In my defence, it is getting rather late here

[vinylweatherman]

slightly offtopic but ontopic

there was an article today on a new glitch/virus affecting facebook where people where sending/ receiving invites from unwanted people , exboyfriends girlfriends strangers and they are worried that it is a phishing scam for legitimate emails

they went on to say that the sale of legitimate email adresses can fetch between 20c and $1 , and rusty i have no doubt in my mind that these people who sent you the original spam email bought it from somehwere

we should set up 20 different email accounts and sign up to 20 different casinos fun mode only and see which one gets spammed the most , should be a rouge offence !


@mr fruits if u set up a blank laptop to install this software use it at a wifi free hotspot , that way they arent going to ping u at a permanent ip address , might save u from any future attacks ( a little bit of paranoia goes a long way lol )

I do have a laptop, but my Niece has it, and dropped it. It was then with someone for repair, and after months of waiting she has told me it can't be repaired by this relative, and I can have it back. Unfortunately, it's not at her place, and I don't think she has gone to fetch it.

The fault just means the fan doesn't turn on, but it's not the fan itself. This can be cured by getting one of those "cooling mats" and sitting it on that. I could then use it for this type of investigation.

[Jasminebed]

I received some more new spam from Gamblerzguide... this time for Del Rio, with a $20 free chip awaiting me.

I'm sorry I've already blocked and binned it, or I would have posted more info. Hadn't realized the connection with the King's Palace Spam.

[vinylweatherman]

I received some more new spam from Gamblerzguide... this time for Del Rio, with a $20 free chip awaiting me.

I'm sorry I've already blocked and binned it, or I would have posted more info. Hadn't realized the connection with the King's Palace Spam.

Seems to support my theory that this site acts as some kind of central hub for a mass spamming network, possibly bot based spamming. Killing this domain could deal them a nasty blow, but it would probably be a temporary one as I am sure they have already thought of this.

What is more concerning is that this seems to go beyond mere mass spamming, they are actually stealing installers from genuine casinos, repackaging them with fake names and fake websites, altering the installer file in some way, and even going so far as to fake the promotional terms and conditions for the genuine casinos users will end up installing by feeding them from their own domain, rather than that belonging to the casino.

I suspect the affiliate program is being defrauded too, as this could generate fake traffic, with players first signing up, but then not depositing because when they try to claim one of the fake promos fed from gamblerzguide they will be told their is no such promo, and never was. They may argue that they saw it on the casino website, and believe the casino is lying about never having had the promo. This is because the player would assume that the menu opened a page from within the Kings Palace site, but in fact it pulls in the pop-up from gamblerzguide.

I am also concerned at what looks like a fake Everest Gaming live CS hosted on "houseoffun(dot)com". This is where players will end up after having installed Kings Palace, and perhaps found it is actually Everest Casino, unless of course the changes made to the installer have been to change the name of the casino to Kings Palace, but it is actually Everest in disguise. In such a case, the fraudsters won't make money directly, but will be able to "skim" some from the transactions through the affiliate program, and may also be able to sell on the details of players, who will blame Everest gaming for having sold them out to the spammers. The email addresses alone are worth money.

[Man_to_Man1]

I have had the exact same problem receiving up to 20 or so per day. The have been going to my spam filter but it still is a ridiculous amount to send.

I have G mail, and what I was able to do was go in and create a filter asking to delete the email from "nonreply@softwareplus.com Kings Palace Casino" since then, I have not had a single one show up, it has only been two days mind you!

Regards,
Me!

It's a couple of days I'm receiving spam from Kings Palace Casino, mails that I've never requested/subscribed. I've tried to lookout for any support on their page just to remove my email address, buu I couldn't find any. Is there any REp to contact? Thanks for your suggestions

Live long and prosper