Casino Database for sale

[BAUS]

I got this email today. Some jerk off trying to sell me a player database....probably stolen from a casino. Shows how safe our info really is with these places.



Dear , Sir

We are offer complete gaming player & Casino Database include player
deposited over $10 million.

Our Database from group of 7 online casinos offering 50 games+ and
sportsbook (per casino) established mid 2002 with their company software
licensed from one of the very top tier companies in the industry.

Price includes: Database of 14,000 + are depositing players.

The casinos generate net profits of $300,000 ++ (6 Casino) monthly after
all expenses and royalties have been paid.

The casino group has taken deposits of over $10 Million since their launch.

Our Database include :

** Player Database 14,000 + Depositor Player
-Customer Email
-First Name & Last Name & Nickname
-Adrress , City , State , ZIP , Country
-Phone Numbers
-Amount & time & Date of deposited.

** Player Control info
-Gain and loss statistics
-view casino winners
-view casino losser
-view Suspicious players

** Webmaster info
-View webmaster info

** Accounting info
-Casino Summary
-Casino Balance
-Players Balance

Our Player Database very fresh and never sell to any people It very best
for your marketing.

We are accept deal this database with 10 people only in all around the world.

** We need you to proof us before payment by come to deal with us and
payment with cash after proofed with yourself.

Live discuss with us :
http://67.15.112.130/phplive/request...n&x=1&deptid=1

E-mail : nuttawut@sppdl.com

Sincerely,

SPPDL Networks, Inc.







BAUS

[jetset]

Bastards. That name nuttawut has come up before and not in a nice way - I'll do some digging and try to find it.

These sort of crooks and thieves need to be found and publicised, whether they actually own the casino or have simply stolen the database.

[jetset]

Yep, he's been here before - this is from May 7 2004 Casinomeister News:

CASINO CAUTIONS
7 May 2004

Privacy pirates

Joining the lowest of the low in Internet gambling this week was a barely literate crew operating from the newlycasino.com email address and offering to sell to the highest bidder a complete online casino or sportsbook player database including credit card details!

InfoPowa was following up on a reported player privacy invasion case in Gambling911 concerning Newlycasino, which was allegedly posting database samples of player addresses and telephone numbers on various websites. We understand that the broker's name is Thomas T Sullivan of NewlyCasino Ltd admin@newlycasino.com operating from St Petersburg, Florida 33713 US.

On contacting the email address and clearly stating who we were and why we were enquiring, the goon on the other end, who seems to rejoice in the exotic name Nuttawut Sophapadunglert appeared to mistake us for potential customers, and in the ensuing exchange declined to identify the database but confirmed that it included full credit card details. The matter has been reported to the authorities.

[jetset]

It's probably concealed, but could you post the email headers on this, please BAUS?

[BAUS]

I don't know if it is "concealed" but here it is:


From: SPPDL@mx6.daemonmail.net, Networks@mx6.daemonmail.net


BAUS

[sw2003]

I don't know if it is "concealed" but here it is:


From: SPPDL@mx6.daemonmail.net, Networks@mx6.daemonmail.net


BAUS

You posted the email addresses! The previous post was asking for the "header" which contains IP info, mail server where it was from, mail server where the mail was accepted etc. In other words the juicy part, it might be hidden from normal email users, you need to pick the options in your emailer for the mail header to show.

[bjking]

Hi,

I also had the same mail. I wasn't quite sure what you were after so you will have to bear with me. Below i have added a load of info.

Received: from xanother.com (unverified [216.65.64.230])
by mail.another.com (SurgeMail 2.2c7) with ESMTP id 812030270
for <xxxxxxx@another.com>; Fri, 10 Dec 2004 12:20:49 -0800
Return-Path: <sppdlco@main.asianwebserver.com>
Received-SPF: none (No spf1 record for (main.asianwebserver.com) ) client-ip=67.15.112.8; envelope-from=<sppdlco@main.asianwebserver.com>;
X-Default-Received-SPF: pass (Last token {a} (res=PASS)) client-ip=67.15.112.8; envelope-from=<sppdlco@main.asianwebserver.com>;
Received: from main.asianwebserver.com (unverified [67.15.112.8])
by xanother.com (SurgeMail 2.2c7) with ESMTP id 656941627
for <jward1@another.com>; Fri, 10 Dec 2004 12:24:28 -0800
Return-Path: <sppdlco@main.asianwebserver.com>
Received: from sppdlco by main.asianwebserver.com with local (Exim 4.43)
id 1CcrG0-0007c3-Vn
for xxxxx@another.com; Sat, 11 Dec 2004 03:20:52 +0700
To: jward1@another.com
From: SPPDL Networks, Inc. <nuttawut@sppdl.com>
Subject: Casino Database include player deposited over $10 million.
Message-Id: <E1CcrG0-0007c3-Vn@main.asianwebserver.com>
Date: Sat, 11 Dec 2004 03:20:52 +0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - main.asianwebserver.com
X-AntiAbuse: Original Domain - another.com
X-AntiAbuse: Originator/Caller UID/GID - [32024 526] / [47 12]
X-AntiAbuse: Sender Address Domain - main.asianwebserver.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Server: High Performance Mail Server - http://surgemail.com
X-Rcpt-To: <xxxxx@another.com>
X-Avast: Message is clean
X-IP-stats: No info recorded yet
X-External-IP: 67.15.112.8
Status: U
X-UIDL: 1102710049.5828_939066.another

This was from today. I also had one on 10/12/04. Here are the detail of that one.

Received: from xanother.com (unverified [216.65.64.230])
by mail.another.com (SurgeMail 2.2c7) with ESMTP id 810873085
for <xxxx@another.com>; Fri, 10 Dec 2004 00:00:12 -0800
Return-Path: <nobody@pluto.jtlnet.com>
Received-SPF: none (No spf1 record for (pluto.jtlnet.com) ) client-ip=69.36.9.15; envelope-from=<nobody@pluto.jtlnet.com>;
X-Default-Received-SPF: pass (Last token {a} (res=PASS)) client-ip=69.36.9.15; envelope-from=<nobody@pluto.jtlnet.com>;
Received: from pluto.jtlnet.com (unverified [69.36.9.15])
by xanother.com (SurgeMail 2.2c7) with ESMTP id 656005704
for <xxxxxx@another.com>; Fri, 10 Dec 2004 00:03:47 -0800
Return-Path: <nobody@pluto.jtlnet.com>
Received: from localhost (localhost [127.0.0.1])
(uid 99)
by pluto.jtlnet.com with local; Fri, 10 Dec 2004 02:54:54 -0500
To: xxxxx@another.com
From: SPPDL@pluto.jtlnet.com
Subject: Casino Database include player deposited over $10 million.
Message-ID: <courier.41B9564E.00007FE5@pluto.jtlnet.com>
Date: Fri, 10 Dec 2004 02:54:54 -0500
X-Server: High Performance Mail Server - http://surgemail.com
X-Rcpt-To: <jward1@another.com>
X-Avast: Message is clean
X-IP-stats: No info recorded yet
X-External-IP: 69.36.9.15
Status: U
X-UIDL: 1102665612.5828_685085.another1

I hope this helps. I have both the messages saved if anyone needs them.

Jamie Ward

[jetset]

Determined little bugger, ain't he? We'll do some digging on this info and see what we can see. Anyone who can contribute any more info please do so.

[Casinomeister]

They even have a website:
http://www.jinlongcasino.com/

[Casinomeister]

Looks like they like to rip off other people's ad copy:

Read this:
http://www.vkistudios.com/about.html

And then compare that with this:
http://www.jinlongcasino.com/about.html

I just popped an email over to vkistudio to give them a heads up on this