Hi Roller Casino - Vegas Red - spammy deceptive affiliate?

[The Dude]

I've just been in formed that the evil affiliate(s) accounts have been closed, and that the spam mails should come to a halt.

I wonder which casino the spamster will choose to promote next

 

[spearmaster]

Nice post, ezlxq, and welcome to Casinomeister!

So evil affiliate account "closed" - uh huh. I know I've heard this before elsewhere... LOL... I sure hope Casino Partners really meant what they said.

 

[winbig]

Just checked one of the domains that was up yesterday and was sent to a domain placeholder, so it's looking good so far

 

[winbig]

I've just been in formed that the evil affiliate(s) accounts have been closed, and that the spam mails should come to a halt.

I wonder which casino the spamster will choose to promote next

Tell them to look again. Just recieved an email about an hour ago, new domain, same Vegas Red BS.

 

[ergopro]

I still get about 5emails per day promoting hi-roller casino

 

[ergopro]

got this 5minutes ago...

At Hi Roller Casino, we are so sure you are going to love our games that we are giving you up to $888.00 FREE just for trying our Casino.
$ 888.00 FREE!
Click Here Now!
edited link: httpx://CasinoClean.com

Hi Roller is the best in the industry because we offer: * $888.00 FREE to new depositors * Fast Payouts * 24-hour support * Exciting games * A complete and SAFE gaming experience
Give us a try! Remember, Free $888.00 is ON THE HOUSE!
Start Winning Now!

 

[dominique]

I got one too, but they are likely in queue to be sent and it should stop soon.

 

[ergopro]

Do these ever stop?

Ruby Mcdowell <qjacolff@ypuhctkuevc.com>
Vastaanottaja xxxxxx@xxxxxx.fi
Lhetetty 21.7.2006 18:39:21
Aihe Re: Collect your Bonus Now!!!
Viesti: Good evening,

At Hi Roller Casino, we are so sure you are going to love our games that we are giving you up to $888.00 FREE just for trying our Casino.
$ 888.00 FREE!
Click Here Now!

Link Removed ( Old/Invalid)


Benefits include:
* Up to $888 real money to gamble with
* Fastest growing/most trusted online company
* Play all your favorite games: Poker, Hold'em, Black Jack, Slots, etc.
* Play at no-cost to see how exciting and easy it is * Rapid payouts to all clientele & 24/7 support
* Great games, Big Winnings, & thousands of players

if you want to be removed click below

Link Removed ( Old/Invalid)

 

[winbig]

I got one too, but they are likely in queue to be sent and it should stop soon.

They should be finished by now, but aren't. I worked at an ISP, and when we'd get hit by spammers relaying through a server (this was before spam was such a major issue that it is now), it'd process about 2,000/hr minimum.

 

[winbig]

They're buying (or harvesting) more addresses

Bryan, is there an update regarding this situation? I can tell you for a fact that they're adding new names to their spam list. They just sent an email to my other gmail account that was previously free of this Vegas Red spam.

To me, this definately verifies that the affiliate account(s) is(are) still open.

X-Gmail-Received: f801b18291545d71d11efd33b49343f441a3b92e
Delivered-To: xxxxx@gmail.com
Received: by 10.78.186.8 with SMTP id j8cs17642huf;
Fri, 21 Jul 2006 17:58:27 -0700 (PDT)
Received: by 10.54.113.19 with SMTP id l19mr1396724wrc;
Fri, 21 Jul 2006 17:58:26 -0700 (PDT)
Return-Path: <Grunion77@hushmail.com>
Received: from dsl-201-128-51-246.prod-infinitum.com.mx (dsl-201-128-51-246.prod-infinitum.com.mx [201.128.51.246])
by mx.gmail.com with SMTP id g2si2723956wra.2006.07.21.17.58.21;
Fri, 21 Jul 2006 17:58:26 -0700 (PDT)
Received-SPF: neutral (gmail.com: 201.128.51.246 is neither permitted nor denied by domain of Grunion77@hushmail.com)
Date: Tue, 24 May 2005 00:12:23 +0000
From: Irene Levine <Grunion77@hushmail.com>
X-Mailer: The Bat! (v2.12.00) CD5BF9353B3B7091
Reply-To: Irene Levine <Grunion77@hushmail.com>
X-Priority: 3 (Normal)
Message-ID: <880964197.1116893543@hushmail.com>
To: xxxx@gmail.com
Subject: you are gonna love are games -Irene
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

At Hi-Roller Casin0, we are so sure you are going to love our games
that we are giving you up to $888.00 F-R-E- E
just for trying our Casin0.

$ 888.00 F-R-E- E!
Do it NOW

[spam url deleted]

 

[winyourwager]

I'm still getting these junk mailers

 

[Andreas]

This one is really getting out of hand... I'm on this spammer for quite some time now, doing my research and stuff, doing posts on GPWA and CAP and on my own sites...

I just post here the post I just did on CAP, maybe I'm just to lazy to write this again, maybe I've spent to much time time on this issue in the past few days...

There are several threads going on all over the gambling boards and also several spamfighter boards about this hi roller spam wave for Vegas Red...
So maybe this will give you some more insight on this issue...

Here are the links to the threads
GPWA:

You do not have permission to view link Log in or register now.

CAP:

You do not have permission to view link Log in or register now.

GamblingGuards: Link Removed ( Old/Invalid)

What the F... is going on at Casino Partners?

Here is another one I just received!!
same setup, again one of the affiliate ID's used in the mailings over the last month: vegas22

*****************************************

Quote:
Hi-Roller is one of todays leading online casinos.

As one of the oldest and most established online casino, Hi-Roller caters not only to the serious seasoned gambler, but also to players new to the online gaming experience.

Complete with over 85 games featuring state-of-the-art graphics (powered by PlayTech software,) a knowledgeable and helpful 24/7 phone and live chat support team, fast payouts, and a payout rate of over 97%, Hi-Roller is THE PLACE to be!

Come grab your $888 Welcome Bonus today! Link Removed ( Old/Invalid)

*****************************************
Created: 2006-07-16 ! again the old sheme, just a few days before the spamming starts the domain was registered....

Laurent, you told us Casino Partners cut ties with this "agency"...
Close this and all the other affiliate accounts for sending spam!!!
If you can't find all the accociated affiliate accounts I just post them here again:

vegas1, vegas2, vegas3, vegas4, vegas5, vegas6, vegas7, vegas8, vegas9 vegas10, vegas11, vegas12, vegas13, vegas14, vegas15, vegas16, vegas17, vegas18, vegas19, vegas20, vegas21, vegas22, vegas23, vegas24, vegas25, vegas30, vegas31, vegas32, vegas33, vegas34, vegas35, vegas36, vegas37, vegas38, vegas39 vegas40, vegas43, vegas45, vegas46, vegas47, vegas48, vegas49, vegas50, vegas51, vegas52, vegas53, vegas54, vegas55, vegas56, vegas57, vegas58, vegas59, vegas60, vegas61, vegas62, vegas63, vegas64, vegas65, vegas66, vegas67, vegas68, vegas69, vegas70, vegas71
momo1, momo2, momo3, momo4, momo5
vjmed

check out my last post here to discover who really is behind this so called "advertising agency":
Link Removed ( Old/Invalid)

are you trying to tell that you guys working over years with an marketing agency what is using absolutly illegally methods?
-like hiding their true identity,
-modifying header informations and stuff,
-sending e-mails using hijacked computers and
-hosting sites on hijacked servers?
-Registering hundreds of domains within days, using fake registration informations for those domains like:

-Central Intelligence Agency
-United States Agency for International Development
-Environmental Protection Agency
-Food Standards Agency
-Radiocommunications Agency
-Air Fresh Technologies
-Slando Investment
-Soronte Vine Shop
-African Souvenir Store
-African and Asian Accessories
-Saltero Pizza
-fashist
just to name a few out of a few hundred...

OK, you said CP cut ties with this company, do you mind revealing the name and information on this so called "advertising agency"? Maybe some guys are interested to get them known, allone the modified e-mail headers are a serios crime.... just not to think about using open relays to send their spam e-mails and hosting their sites on hijacked servers....

This "advertising agency" is not really an real agency... isn't it?

I just post a part of my post here, you can read the full story here:
Link Removed ( Old/Invalid)

Quote:
......Now, this guys there are no rookys when it comes to spam, they ping the servers, trace the IP's and doing all kinds of stuff to discover things... Then they monitor the servers and providers.... First they go the usual way, contacting the providers and registrars and stuff, but in cases like this it not really works...

Pretty fast was clear that this Hi Roller Spam had his point of orgin probably at the top 3 of the worlds worst spammers: Alex Blood, Michael Lindsay and Leo Kuvayev.... Thats basicly the creme dela creme of the internationally spam business... read more about this guys at Spamhaus.org:

You do not have permission to view link Log in or register now.

Here is how those guys shut down the Hi-Roller Casino Domains within hours....
They use a tool called .......

Link Removed ( Old/Invalid)

What about all the other spam e-mails what are using another template of yours, (Casino Tropez) This e-mails are also still comming in!!! Did you guys just cut ties with the "advertising agency" for the english speaking contrys?
I mean It shure looks this way if I now get the same e-mails, same messages, same advertisements only to my .de e-mail adresses all in german??? Is this some kind of tactic to use .com domains for the english laguage market and .info domains for the german market?
Link Removed ( Old/Invalid)


Quote:
Spielen Sie Roulette gegen Live-Dealer in Green Table!
Erfahren Sie den Nervenkitzel eines wirklichen Kasinos auf Ihrem PC.
Gleiche Spiele, gleicher Nervenkitzel, BESSERE CHANCEN!
Spielen Sie jetzt!
xxxhttp://greentable-de.info/



Affiliate ID: omega

If you download the software you download it from a seperate domain: qqcapol.info
Both domains are registered at the same time like all the hundred other ones,
qqcapol.info 19-Jun-2006
greentable-de.info 19-Jun-2006

both are registered to:
Registrant Name: Private Person Private Person
Registrant Organization: Private Person
Registrant Street1ost Office Box 301763

The following domains I discovered doing a reverse IP check, all are setup the same using the "green table" template (Casino Tropez)

3,804 Domains for 221.206.5.51 (Greentable-de.info)
Most of this 3.800 domains are setup for selling fake luxury watches, another spam business I myself and a few million other internet users receive advertising e-mails for almost daily.... but on this server are also setup a few domains for green table casino (Casino Tropez):

casincasa.info Created On:26-Apr-2006 Affiliate ID: hm44bu
cazinoplay.info Created On:23-Jun-2006 Affiliate ID: hm44bu
greenplay.info Created On:02-Jul-2006 Affiliate ID: hm44bu
game-star.info Created On:10-Jul-2006 Affiliate ID: omega
casino-greentable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
casino-grtable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
all of the domains download the software from casincasa.info

some of this domains were also used already back in may for spamming, mostly in the german market.... I don't think I need to post all the info when and how they were spammed here too, it should be enough to get the picture....

The spamming for Vegas Red stopped about three days ago, now it seems to start again....

Actually in my opinion it didn't really stop, there were just different e-mail lists used and the amount of emails sent was decresed....

Laurent, it would be nice to get an honest explanation here!

 

[winbig]

In my opinion, CP is making a fortune off of these spammers and are turning a blind eye to it, along with blowing smoke up our ass saying they've cancelled the affiliate accounts.

If the IP's from the spam headers weren't located all over the world, one would be inclined to think CP is behind this whole thing...unless of course they're using open proxies to connect to, and send this spam through insecure mail servers of course....

[edit]Just read the one at CAP...interesting:

I have catch-all email addresses, so I get one for each 'user' they configure for whatever auto-craptastic software they are using.

Here are examples: administrator, webmaster, sales, info, test, root, advertising, postmaster, support, service, mail, guest, accounts,home

I wonder when large businesses are going to get fed up with this and bring a civil suit against CP for allowing this to continue...ie: Wasted bw, etc. It's been done before. AOL vs. Cyber Entertainment Networks, back in 2001.

You do not have permission to view link Log in or register now.

"Legally the lawsuit is important because it establishes liability for an adult Web site--that they are causing spam to be sent or are knowingly in a conspiracy with the spammers. This makes them negligent in their no-spam policy," said Nicholas Graham, an AOL spokesman.

CP's spam policy:

Please remember that neither we, nor our ISP, tolerate spam of any kind. Any affiliate caught spamming will be placed on probation from the affiliate programs and all earnings will be void.

Seems pretty negligent to me.

 

[Andreas]

exactly..., if they would have cancelled this affiliate accounts then we wouldn't have today again spam mails with new domains and the same affiliate accounts we had for the last two months...

 

[unicorn40]

I'm still getting this crap too.....

 

[winbig]

Wow, CP finally replied.

Tried to feed me more BS, but at least they replied.

On 7/23/06, Support | Casino Partners < support@casinopartners.com> wrote:

Thanks for your complaint. Those spammers should have stopped sending traffic
by now. If you still receive something promoting our brands please forward it
to me.
regards

Needless to say, I'll believe it when I see it. I think I'll just setup a filter for every email that has $888 in it to be forwarded to CP.

edit: I also let them know that we know their accounts aren't shutdown, or they wouldn't be registering new domains every single day as well as using the same affiliate ID's.

 

[winbig]

It seems this group has also added Tropez to its list of casinos to spam now (seperate, but uniform mails).

 

[Andreas]

They promote Tropez also since may.... thats the time the first spammails hit in germany...

The domains involved here are:
casincasa.info Created On:26-Apr-2006 Affiliate ID: hm44bu
cazinoplay.info Created On:23-Jun-2006 Affiliate ID: hm44bu
greenplay.info Created On:02-Jul-2006 Affiliate ID: hm44bu
game-star.info Created On:10-Jul-2006 Affiliate ID: omega
casino-greentable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
casino-grtable.info Created On:13-Jul-2006 Affiliate ID: hm44bu
all of the domains download the software from casincasa.info

same setup like the Vegas red Spam wave, all on one server, same template...
probably the same spammer...

seems to me they target with the .info domains the german market, emails are the same ones like for vegas red, but in german...

did you get some in english for green table?

 

[winbig]

No, but I've got them in French and Spanish....I still can't figure that one out

 

[Andreas]

what for domains are being advertised in the spam you received for Tropez?
also the .info out of my last thread?

 

[winbig]

what for domains are being advertised in the spam you received for Tropez?
also the .info out of my last thread?

Nope, the last one was a redirect to viplucklounge.com. Can't recall the redirect name, but it was definately a .com.

Seems they're advertising Tropez, Vegas Red, and Europa on that site.

 

[Andreas]

Yep, its the same spammer, I downloaded the software and extracted the affiliate code: vegas63

This one is one of the 70 affiliate accounts used for spamming Vegas Red over the last two month... (check my other posts)

If you receive again any spam, would you please post it to my forum?
Thanks

 

[ezlxq]

The spam barrage continues.

Thank you for the communication on this issue.

I continue to get spammed for Vegas Red / Hi-Roller casinos, usually with urls which are either dead or which now feature placeholders by the ISP.

However I just got one yesterday (claiming to be hi-roller) which used to be a vegas red site:

http://www.CasinoNeat.net

It's now "Secure Casino".

That redirects to:

http://xpshhbah.info/defaultem/

Which is where the download is also hosted.

The affiliate ID enclosed in the exe appears to be "defaultem", which makes sense since that's what the URL has as the subdirectory.

When you close that window it pops a new one (which gets around all the toolbars I tested it on) for a dating site.

http://www.amateurdatingcams.com/?WMID=73163&WMEC=0&CTRLID=JlA99&PID=1 &pop=2

Webmaster / affiliate id = 73163

Affiliate program is run by Sexmoney

www.sexmoney.com

Also if you visit the bare site:

http://xpshhbah.info/

You get a porn site.

What a charmer!

Anyway my point is: not only are these malicious spammers NOT STOPPING with their casino spam onslaught to people like me who REALLY don't want them, now they're also desperately including a bogus dating site and porn sites. How good is that for this industry?

Thought it was worth mentioning.

Is "Secure Casino" also promoted via Casino Partners? I couldn't find any information whatsoever about them.

ezlxq

 

[winbig]

This "Secure casino" is just their way of covering up the true casino; which in this case is Tropez.

For some reason, they advertise behind a front, then when you download the setup .exe, it's for a totally different casino. *shrug*

I've been informed that (and I quote) "Traffic has
dropped 90% since thursday" and "this network of spammers came through a third party company tha we deal with for a long time."

My problem with this is:
Is it me or is this "Third party company" excuse being played out more and more nowdays where SPAM is concerned?
and
Down 90%? Sure. Then why are we all still getting the same amount of mails?

 

[ezlxq]

Right... "third party"

This "Secure casino" is just their way of covering up the true casino; which in this case is Tropez.

Aha. So it is again a Casino partners spammer

For some reason, they advertise behind a front, then when you download the setup .exe, it's for a totally different casino. *shrug*

Spam rule #1: Spammers lie.

My problem with this is:
Is it me or is this "Third party company" excuse being played out more and more nowdays where SPAM is concerned?
and Down 90%? Sure. Then why are we all still getting the same amount of mails?

Okay so: as someone who has been following spam lawsuits for a while, and in particular regarding porn and casino spam, here are the facts.

- Porn companies routinely used to claim that "we have so many affiliates we can't possibly keep track of all of them. We're bound to have a few bad apples."
- Following the instantiation of the CAN-SPAM legislation, which explicitly says several things about how adult content should be advertised if it's done via email, and which further explicitly says that if your affiliate spams your product, you - the company - are responsible, guess how many used that excuse? Absolutely zero. They now have a 100% zero tolerance policy. (By that I mean every single legitimate company out there does.) They find out they have a spammer? That spammer is terminated instantly and they do not get any money, period.

For some reason, casino affiliate programs are nowhere near as responsive, despite the fact that this same rule applies.

As we speak, any of the people on this or any other forum who is an American citizen and wants to launch a class-action against the operators of Vegas Red and Casino Partners, could do so under CAN-SPAM and it would very likely stick. They're operating illegally if they continue to allow their affiliates to do this. If McDonald's hired spammers, McDonald's would be liable if they disobey CAN-SPAM, and could very successfully be prosecuted. End of story.

Casino Partners can say "third party this" or "third party that". It's bullshit. They know they have spammers, they are liable. It's not stopping. I personally am consulting my lawyer about this and have recommended several dozen others to do the same in their jurisdiction. Attorney General Spitzer has successfully brought numerous such lawsuits and it virtually eliminated 80% of all the porn spam that was out there. I'm going to make sure his office is made aware of this abuse as well.

I just thought everyone should know all of this, particularly the American Citizens on this board who have it within their power to do something about this issue.

ezlxq