Hi Roller Casino - Vegas Red - spammy deceptive affiliate?

Casinomeister

Forum Cheermeister
Staff member
Joined
Jun 30, 1998
Location
Bierland
I've been getting spammed recently by some a-hole who has harvested emails off of Casinomeister.com. These spam mails are the following:

X-Persona: <Casinomeister>
Return-Path: <GarthClements@earthlink.net>
Delivered-To: xxxx@casinomeister.com
Received: (fqmail 28932 invoked from network); 05 Jul 2006 16:51:02 -0000
Received: from mx08.futurequest.net (mx08.futurequest.net [69.5.6.180])
by pt02.futurequest.net ([69.5.6.173])
with FQDP via TCP; 05 Jul 2006 16:51:02 -0000
Received: (qmail 18841 invoked from network); 5 Jul 2006 16:51:02 -0000
Received: from pt02.futurequest.net (pt02.futurequest.net [69.5.6.173])
by mx08.futurequest.net ([69.5.6.180])
with QMQP via TCP; 05 Jul 2006 16:51:02 -0000
Delivered-To: xxxx@casinomeister.ru
Received: (fqmail 28922 invoked from network); 05 Jul 2006 16:51:02 -0000
Received: from mx10.futurequest.net (mx10.futurequest.net [69.5.6.182])
by pt02.futurequest.net ([69.5.6.173])
with FQDP via TCP; 05 Jul 2006 16:51:02 -0000
Received: (qmail 3625 invoked from network); 5 Jul 2006 16:51:02 -0000
Received: from EU-QSAW9M6EMYW6 (201-27-114-167.dsl.telesp.net.br [201.27.114.167])
by mx10.futurequest.net ([69.5.6.182])
with ESMTP via TCP; 05 Jul 2006 16:50:56 -0000
Message-ID: <42677823962184.789B499BF8@RYERL>
From: "Garth" <GarthPeacock@earthlink.net>
To: <xxxx@casinomeister.ru>
Subject: * Featuring 85+ Award Winning Games
Date: Wed, 5 Jul 2006 13:51:09 -0200
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: r3fo11QtMzjpjldXLlXcfeMmRcon69hmppPf
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit


Good day to you Sir!


iH Roller is the best in the industry because we offer:


* 24-hour support
* Featuring 85+ Award Winning Games
* Including blackjack, roulette, slots, craps, baccarat, and video poker
* Several options that allow you to control the playing environment


Give us a try! Remember, Free $888.00 is ON THE HOUSE!


Knowledgeable and helpful 24/7 phone and live chat support team


Start Winning Now!


http://familyrollcall.com/d1/check



Learn to say no It will be of more use to you than to be able to read Latin Elementary sartorial techniques initially applied obviate the need for repetitive similar actions to the square of three. Don't byte off more than you can view..


I have a number of these pointing differing websites.

http://familyrollcall.com/d1/check
http://bigclubs.com/d1/check

Just to name a couple

I've been deleting these as they come in, but today I decided to check out just who this asshole is. The casino website is totally nondescript, but for the links "Fair Gaming" and "Completely Safe" you're forced to download the casino software.

Well, I downloaded it and began the install - it's Vegas Red Casino.

I'm searching for aff links, and I hope to find them shortly.

I'm also contacting Vegas Red to let them know they have a problem on their hands. These are the affiliates that should be drawn and quartered. Spam mails and deceptive websites such as these are inexcusable.
 
I've had this one loads of times. But i also had it to a hotmail email address that is "unknown" at Casinomeister. In fact pretty much anywhere as I don't use it except for one or two research accounts at the less reputable casinos.
 
I have had quite a few of them too. The thing is they keep getting new domain names, and them discarding the domain. So in a couple of weeks time the below sites will no longer work

I have

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)

The only ones I could find for the moment, but they don't work any more, so I would advise taking a hard copy of the html and pictures if you report them, as by the time they look into it, the site will no longer be there
 
I've been getting emails 3-6 a day for that place for a while and i can't get them to stop.I block them and they still come......I clicked the links and the website it takes you to,you click "support" and it trys to load the casino.....
 
I'm getting half a dozen or so of these things per day, too. Different titles and different email addresses in the 'from'. Different link addys also. The most recent:

$lots-Blackjack-More <qwpoeialmndf@hotmail.ca>
Visit theHiRoller Casino where we give you $$ toPlay!
LiveDealers, JackpotSlots, MuchMORE!
XhttpX://www.goesdoing.com

I checked the 'source' on this email. It's full of weird stuff you don't see when you look at the 95% white page email, a couple of different languages, and ... well... here's a snippet from the English bit:

he next general meeting of both WSSA and Iota Iota Iota will be
October 4th at 8:00pm in DM 212.

Just a couple quick announcements:

WSSA and Iota Iota Iota each have a webpage.....

And another ... what language?:
Wat ontzettend leuk dat ze Jack, Sarina en de andere genetisch
gemanipuleerden nog een keer hebben teruggehaald. Gelukkig is er,
ondanks de verwikkelingen rond o.a. Dax en Sisko, ook nog aandacht voor
de anderen en Bashir verdient natuurlijk veel eigen afleveringen.

And another snippet from another section:
IWACO is een internationaal adviesbureau voor water en milieu, met
vestigingen in binnen- en buitenland. Bij IWACO werk je in een informele
sfeer samen met hooggekwalificeerde collega's. Als adviseur heb je een
grote eigen verantwoordelijkheid. Je krijgt volop de ruimte creatieve
opiossingen te bedenken voor de vaak ....

I have no idea WTF it's saying so pardon if there's something vile in the languages I don't read. Why hide that crap in emails?
 
For a long period I was spammed with 5-10 emails every day.

A few weeks ago I decided to se if it was possible to stop the spamming as it is a pain in the b..

Via Google I found this page
You do not have permission to view link Log in or register now.
- they send warning information to the internet service provider responsible for hosting the services used by the spammer.

Well, I filed a free report on each of the spammails I had received the last two days and havnt received any spammails for the last 14 days !

Try them, I am quite sure it will help you get rid of these irritating mails.
 
Last edited:
The latest

Ok, now that I have the right thread...lol


I too am sick of getting this crap from vegas red. Don't bother with the email address, it's a fake. I've reported this to the registrar, as it's in violation of ICANN rules to register with any fake info.

One ray of light, give 'em a call, I've confirmed the phone # via reverse lookup. It does match the address & name :)

Here's the contact information for one of the affiliates in question (pulled the info from the spam domain they used in this instance)

Domain: galoren.com

Registrant
Anne Nottingham
jermernolt
darselgon@beuwi.org
1050 Wabash Ave
Medford, OR 97504 US
+1.5417731141
 
I've been in touch with the casino, and they say they've been aware of this problem. It seems as though there are a team of affiliates working together on this.
 
Casinomeister said:
I've been in touch with the casino, and they say they've been aware of this problem. It seems as though there are a team of affiliates working together on this.

So are they planning on doing anything about this?

Every single email is the same. Every email points to the exact same webpage; IE: Same affliate code, same affiliate. When a domain is shutdown for abuse, they move to a new one. Only then do the emails change.

The IP addresses that they originate from, however, are different. This could mean there are multiple people working on the same affiliate account, or the affiliate in question is simply finding a ton of insecure mailservers.

Having said that, I think their response is total BS. I could understand if there were multiple domains involved in the spam mails, but when every single one points to the same domain......


[edit]
And seeing as how the mails never change, the first report they recieve that matches the email in question, they should shut down the affiliate account right then and there. No questions asked, do not pass go, do not collect $200.

Obviously they're turning a blind eye to this. If they cancelled the affiliate account in question, why does the spam continue?
 
Last edited:
I get about 10-20 emails a day PER ACCOUNT. I have many email accounts and tons of these mails. I am sure that they can shut down the affiliate. If they do, then we won't get emails because it would not be of benefit to these a-holes.


I don't even know how they get the email addy's. Some of my email addy's are used only to communicate to affiliate programs. :(
 
I don't even know how they get the email addy's. Some of my email addy's are used only to communicate to affiliate programs.
If thats the case the affiliate program either gave them your email address or they stole it from the affilaite program.
 
If you're sick of it too,

Forward copies of these emails to abuse@fortressitx.com. This is the contact addresses for the servers they're using for hosting.

The spammers actually have directory listing enabled, and the dates on alot of those directories were from May, so they've been using this company all along.

IP Address: 65.98.99.152

NetRange: 65.98.0.0 - 65.98.127.255
CIDR: 65.98.0.0/17
NetName: FORTRESSITX
NetHandle: NET-65-98-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PWEBTECH.COM
NameServer: NS2.PWEBTECH.COM
Comment:
RegDate: 2004-07-21
Updated: 2006-05-17

OrgAbuseHandle: FIAD-ARIN
OrgAbuseName: Fortress ITX Abuse Dept
OrgAbusePhone: +1-973-572-1070
OrgAbuseEmail: abuse@fortressitx.com
 
Miraculously, I have not received any HiRoller spam for several days in either of my email accounts that were 'hit'.
 
I would rather their affiliate program (probably Casino Partners) shut down their account instead of their server's being shut down. It is quite easy to get another set of servers, but if all their 'hard work' is gone because they cannot promote Vegas Red (I believe that is the skin they are using) anylonger - then it may be a while before they are back in business.
 
I just read this thread yesterday and today i got the spam (for the first time).

"Deon" <kaitlynn.traviswymmh@gmail.com> Add to Address Book Add Mobile Alert
Yahoo! DomainKeys has confirmed that this message was sent by gmail.com. Learn more
To: xxxxxxxxx@yahoo.com
Subject: New and hot CASINO for you to enjoy
Date: Sun, 16 Jul 2006 10:53:02 +0000

Good day my friend!,
OUR CASINO:
* Fast Payouts
* New Players get up to $888 FREE in Welcome Bonuses at Hi Roller
* Hi Roller Cassino is one of the oldest and most established online
cassino.
* With amazing graphics and sounds you will not be disappointed
Link Removed ( Old/Invalid)
Solid, Reliable and Respectable
with 100% Security, Privacy & 24/7 support
 
paul02085 said:
I just read this thread yesterday and today i got the spam (for the first time).

.......
* Hi Roller Cassino is one of the oldest and most established online
cassino.
* With amazing graphics and sounds you will not be disappointed
Link Removed ( Old/Invalid)
Solid, Reliable and Respectable
with 100% Security, Privacy & 24/7 support


Geocities?!?!?!? Oh, they're gonna love this! May I suggest forwarding this garbage to the appropriate Geocities dept.?

Very professional -- not! Who are these people?? :eek2:
 
I got a very similar one from yancey.tedn4r@gmail.com

Dear client.,
OUR CASINO:
* 24-hour support
* LIVE DEALERS & Fast Downloads
* Hi Roller Cassino is one of the oldest and most established online cassino.
* Several options that allow you to control the playing environment
Link Removed ( Old/Invalid)
Knowledgeable and helpful 24/7 phone and
live chat support team

These morons are also spamming me on a work e-mail address that they could only have harvested from the web.
 
kwblue said:
I would rather their affiliate program (probably Casino Partners) shut down their account instead of their server's being shut down. It is quite easy to get another set of servers, but if all their 'hard work' is gone because they cannot promote Vegas Red (I believe that is the skin they are using) anylonger - then it may be a while before they are back in business.


Yes, it's CasinoPartners, and they've been contacted also. Haven't heard back from them because it's the weekend.
 
winbig said:
Forward copies of these emails to abuse@fortressitx.com. This is the contact addresses for the servers they're using for hosting.

Not to burst anyone's bubble but that's only one of dozens of registrars. Several of these go back to highroller themselves, which tells me that vegasred exists solely to spam people.

Here's a list of domains I've been tracking on this one:

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
You do not have permission to view link Log in or register now.

URL Not Found / Outdated
Link Removed ( Old/Invalid)
You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid)
Link Removed ( Old/Invalid) <- the most recent one spammed using a geocities domain.


Every single one of them is hosted in different locations, with distinct DNS, etc.


Here's the whois for the first domain in that list:

Code:
Whois Record for Wirelessonce.com
Page Information
Website Title: Hi-Roller Casino  
Record Type: Domain Name 

Indexed Data
Alexa Trend/Rank:  565,208 (1 Month) 1,192,287 (3 Month)  

Server Data
Server Type: Apache/1.3.33 (Unix) Resin/2.1.14 mod_throttle/3.1.2 mod_ssl/2.8.22 OpenSSL/0.9.7e
(Spry.com also uses Apache)  
IP Address: 211.144.69.235  
IP Location:  - Shanghai - Shanghai - Hltt Communication Co. Ltd  
Response Code: 206 
Blacklist Status: Clear (history)  
SSL Cert: No valid SSL on this Host 
Website Status: Active  
Reverse IP: 27 other sites hosted on this server 


Registry Data
ICANN Registrar: ENOM, INC. 
Created: 30-May-2006 
Expires: 30-May-2007 
Registrar Status: REGISTRAR-LOCK 
Whois Server: whois.enom.com 
Name Server: NS2.H1R0LLER.INFO


Note the name server host...

Casinopartners has not responded to any of the numerous requests I made to investigate this issue. They are certainly aware of it, but appear to be choosing not to do anything about it or communicate their alleged progress on this issue to anyone.

Thought I'd contribute to this thread since this is the only legitimate forum I could find where it was being discussed.

I lost a family member to a gambling related suicide last year and the fact that I continue to receive these spams is insulting in the extreme. I certainly would NEVER sign up for these emails but these spammers don't care.

Anyway there it is. If anyone has any idea how we can shut these morons down I am all ears.

ezlxq
Aggravated Casino Spam Recipient
 
Maybe if Casino Partners started getting voice calls from many pi$$ed off spamees, they might start doing something about it.

Tollfree Phones:

USA: 1 800 968 0196

UK: 0800 066 4322

France: 0800 917 293

Spain: 900 957 056

Japan: 00 53 116 0575

Italy: 800 788 401

Germany: 0800 181 3800

Fax: 1 646 304 7062
 
winbig said:
Maybe if Casino Partners started getting voice calls from many pi$$ed off spamees, they might start doing something about it.

I have forwarded one email... However, I am giving them 1 week to clean it up. After that WE should all forward the SPAM mails to CP. Flood THEIR inboxes for a change.
 

Users who are viewing this thread

Meister Ratings

Back
Top