King Dice

Well, I don't know who they are, but they had my first and last name. A google search didn't turn up anything, and I did not click the link.

Mine came from DaleRudolf23@live.com

they are sending from multiple addies here is the header from mine cause dummy me clicked it lol


Date: Thursday, December 25, 2008 11:58:30 PM
To: <XXXXXXX @rock.com>
CC:
From: jakeshumaker8@live.com
Subject: Cindy King Dice invites you to win
Return-Path: <jakeshumaker8@live.com>
Delivered-To:
Received: (qmail 24847 invoked by uid 0); 26 Dec 2008 04:58:31 -0000
X-Ob-Received: from unknown (192.168.8.39) by mta45-1.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
Received: (qmail 18158 invoked by uid 1001); 26 Dec 2008 04:58:31 -0000
X-Ob-Delivered-To:
X-Ob-Received: from unknown (192.168.8.150) by as1-7.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
X-Spam-Cmae-Analysis: v=1.0 c=1 a=wD6_E5tSKSIA:10 a=PlHbuPsuAAAA:20 a=DPdd6oeZAAAA:8 a=5I-QHjpE7WXdEExJ150A:9 a=9UCfI1-dzWV_t03MrzDMHjGHm4QA:4 a=ZZFUEJcJZocA:10 a=LVFWH4gLBqYA:10 a=Jx-a9I9z1ujxIuZ37dYA:9 a=Ufh0pqRNBai3GuXsmjAA:7 a=y3nImzvg_LK2w3Ag-t1YcIW_0hsA:4 a=37WNUvjkh6kA:10 xcat=Undefined/Undefined
X-Spam-Score: 0.001
X-Ob-Received: from unknown (192.168.9.23) by as1-7.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
Received: from av1-5.us4.outblaze.com (localhost.localdomain [127.0.0.1]) by av1-5.us4.outblaze.com (Postfix) with SMTP id 812113BC040 for <"jas2587:rock.com"@rock.com-us4-5_normal1.avs.int>; Fri, 26 Dec 2008 04:58:31 +0000 (GMT)
Received: from blu0-omc4-s33.blu0.hotmail.com (blu0-omc4-s33.blu0.hotmail.com [65.55.111.172]) by spf5-5.us4.outblaze.com (Postfix) with ESMTP id 2DD11BDC97 ; Fri, 26 Dec 2008 04:58:31 +0000 (GMT)
Received: from BLU128-W51 ([65.55.111.136]) by blu0-omc4-s33.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 25 Dec 2008 20:58:31 -0800
Message-Id: <BLU128-W51B8D4D99D11E46E4B935D80EB0@phx.gbl>
Content-Type: multipart/alternative; boundary="_2e2ef05c-b219-4878-a494-88cb3999d5e9_"
X-Originating-Ip: [68.149.50.194]
Importance: Normal
Mime-Version: 1.0
X-Originalarrivaltime: 26 Dec 2008 04:58:31.0242 (UTC) FILETIME=[991B62A0:01C96716]

0 Forwarded Message(s)


Cindy
 
an here

Date: Thursday, December 25, 2008 11:21:25 PM
To:
CC:
From: kayceesansing48@live.com
Subject: Cindy Get the royal treatment in 2009
Return-Path: <kayceesansing48@live.com>
Delivered-To:
Received: (qmail 27462 invoked by uid 0); 26 Dec 2008 04:21:26 -0000
X-Ob-Received: from unknown (192.168.8.39) by mta5-2.us4.outblaze.com; 26 Dec 2008 04:21:26 -0000
Received: (qmail 29576 invoked by uid 1001); 26 Dec 2008 04:21:26 -0000
X-Ob-Delivered-To:
X-Ob-Received: from unknown (192.168.8.148) by as1-7.us4.outblaze.com; 26 Dec 2008 04:21:26 -0000
X-Spam-Cmae-Analysis: v=1.0 c=1 a=-4ZChu_kJEMA:10 a=aY_jbAtoAAAA:20 a=DPdd6oeZAAAA:8 a=ygx06beLAaJ5AsSFyhAA:9 a=xOU183xslkQUpprAYHE9_-hnLqUA:4 a=0RZtuabbrfMA:10 a=62Vu6yig9osA:10 a=2j94LtEd2l3RQB76_RYA:9 a=h1pMwyr7T8Oa5bfA-sUA:7 a=hAS61N8e0a0k_CJ9pT_-xUMNtCcA:4 a=37WNUvjkh6kA:10 xcat=Undefined/Undefined
X-Spam-Score: 0.501
X-Ob-Received: from unknown (192.168.9.23) by as1-7.us4.outblaze.com; 26 Dec 2008 04:21:26 -0000
Received: from av1-5.us4.outblaze.com (localhost.localdomain [127.0.0.1]) by av1-5.us4.outblaze.com (Postfix) with SMTP id 5D8103BC041 for <"-us4-5_normal1.avs.int>; Fri, 26 Dec 2008 04:21:26 +0000 (GMT)
Received: from blu0-omc4-s22.blu0.hotmail.com (blu0-omc4-s22.blu0.hotmail.com [65.55.111.161]) by spf5-1.us4.outblaze.com (Postfix) with ESMTP id 2BC806419F for ; Fri, 26 Dec 2008 04:21:26 +0000 (GMT)
Received: from BLU135-W16 ([65.55.111.135]) by blu0-omc4-s22.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 25 Dec 2008 20:21:26 -0800
Message-Id: <BLU135-W16A01AFFA8E9EF941D0BE9D0EB0@phx.gbl>
Content-Type: multipart/alternative; boundary="_9994828a-79cb-4dea-aa0c-ddaeeebb43bd_"
X-Originating-Ip: [190.38.6.11]
Importance: Normal
Mime-Version: 1.0
X-Originalarrivaltime: 26 Dec 2008 04:21:26.0055 (UTC) FILETIME=[6ACACB70:01C96711]

0 Forwarded Message(s)
0 Attachment(s)/Image(s)



an that is just at 1 addie

Cindy
 
I got them too & with my full name to boot :eek:

Although the strange thing is although they came thru to email addresses I've used for gambling, they also hit 1 of my business email addy's as well.

In my business capacity I've only conducted projects with one casino group and a handful of industry people. So when I cross reference that against the email address used that narrows the field down a lot. :D


Cheers
T
 
I got them too & with my full name to boot :eek:

Although the strange thing is although they came thru to email addresses I've used for gambling, they also hit 1 of my business email addy's as well.

In my business capacity I've only conducted projects with one casino group and a handful of industry people. So when I cross reference that against the email address used that narrows the field down a lot. :D


Cheers
T
Yep, me too.
Full name on mails sent to several of my accounts - including the one I only use for dealing with casino affiliate teams and no one else at all.

How do these bastards get all our details??? :eek:

KK
 
they are sending from multiple addies here is the header from mine cause dummy me clicked it lol


Date: Thursday, December 25, 2008 11:58:30 PM
To: <XXXXXXX @rock.com>
CC:
From: jakeshumaker8@live.com
Subject: Cindy King Dice invites you to win
Return-Path: <jakeshumaker8@live.com>
Delivered-To:
Received: (qmail 24847 invoked by uid 0); 26 Dec 2008 04:58:31 -0000
X-Ob-Received: from unknown (192.168.8.39) by mta45-1.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
Received: (qmail 18158 invoked by uid 1001); 26 Dec 2008 04:58:31 -0000
X-Ob-Delivered-To:
X-Ob-Received: from unknown (192.168.8.150) by as1-7.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
X-Spam-Cmae-Analysis: v=1.0 c=1 a=wD6_E5tSKSIA:10 a=PlHbuPsuAAAA:20 a=DPdd6oeZAAAA:8 a=5I-QHjpE7WXdEExJ150A:9 a=9UCfI1-dzWV_t03MrzDMHjGHm4QA:4 a=ZZFUEJcJZocA:10 a=LVFWH4gLBqYA:10 a=Jx-a9I9z1ujxIuZ37dYA:9 a=Ufh0pqRNBai3GuXsmjAA:7 a=y3nImzvg_LK2w3Ag-t1YcIW_0hsA:4 a=37WNUvjkh6kA:10 xcat=Undefined/Undefined
X-Spam-Score: 0.001
X-Ob-Received: from unknown (192.168.9.23) by as1-7.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
Received: from av1-5.us4.outblaze.com (localhost.localdomain [127.0.0.1]) by av1-5.us4.outblaze.com (Postfix) with SMTP id 812113BC040 for <"jas2587:rock.com"@rock.com-us4-5_normal1.avs.int>; Fri, 26 Dec 2008 04:58:31 +0000 (GMT)
Received: from blu0-omc4-s33.blu0.hotmail.com (blu0-omc4-s33.blu0.hotmail.com [65.55.111.172]) by spf5-5.us4.outblaze.com (Postfix) with ESMTP id 2DD11BDC97 ; Fri, 26 Dec 2008 04:58:31 +0000 (GMT)
Received: from BLU128-W51 ([65.55.111.136]) by blu0-omc4-s33.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 25 Dec 2008 20:58:31 -0800
Message-Id: <BLU128-W51B8D4D99D11E46E4B935D80EB0@phx.gbl>
Content-Type: multipart/alternative; boundary="_2e2ef05c-b219-4878-a494-88cb3999d5e9_"
X-Originating-Ip: [68.149.50.194]
Importance: Normal
Mime-Version: 1.0
X-Originalarrivaltime: 26 Dec 2008 04:58:31.0242 (UTC) FILETIME=[991B62A0:01C96716]

0 Forwarded Message(s)


Cindy

Here is what the Originating-Ip: [68.149.50.194] shows ! :) Forward this email and headers to their abuse email below.


OrgName: Shaw Communications Inc.
OrgID: SHAWC
Address: Suite 800
Address: 630 - 3rd Ave. SW
City: Calgary
StateProv: AB
PostalCode: T2P-4L4
Country: CA

ReferralServer: rwhois://rwhois.shawcable.net:4321/

NetRange: 68.144.0.0 - 68.151.255.255
CIDR: 68.144.0.0/13
NetName: SHAW-COMM
NetHandle: NET-68-144-0-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
NameServer: NS7.NO.CG.SHAWCABLE.NET
NameServer: NS8.SO.CG.SHAWCABLE.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-06-03
Updated: 2006-02-08

OrgAbuseHandle: SHAWA-ARIN
OrgAbuseName: SHAW ABUSE
OrgAbusePhone: +1-403-750-7420
OrgAbuseEmail: internet.abuse@sjrb.ca

OrgTechHandle: ZS178-ARIN
OrgTechName: Shaw High-Speed Internet
OrgTechPhone: +1-403-750-7428
OrgTechEmail: ipadmin@sjrb.ca
 
an here

Date: Thursday, December 25, 2008 11:21:25 PM
To:
CC:
From: kayceesansing48@live.com
Subject: Cindy Get the royal treatment in 2009
Return-Path: <kayceesansing48@live.com>
Delivered-To:
Received: (qmail 27462 invoked by uid 0); 26 Dec 2008 04:21:26 -0000
X-Ob-Received: from unknown (192.168.8.39) by mta5-2.us4.outblaze.com; 26 Dec 2008 04:21:26 -0000
Received: (qmail 29576 invoked by uid 1001); 26 Dec 2008 04:21:26 -0000
X-Ob-Delivered-To:
X-Ob-Received: from unknown (192.168.8.148) by as1-7.us4.outblaze.com; 26 Dec 2008 04:21:26 -0000
X-Spam-Cmae-Analysis: v=1.0 c=1 a=-4ZChu_kJEMA:10 a=aY_jbAtoAAAA:20 a=DPdd6oeZAAAA:8 a=ygx06beLAaJ5AsSFyhAA:9 a=xOU183xslkQUpprAYHE9_-hnLqUA:4 a=0RZtuabbrfMA:10 a=62Vu6yig9osA:10 a=2j94LtEd2l3RQB76_RYA:9 a=h1pMwyr7T8Oa5bfA-sUA:7 a=hAS61N8e0a0k_CJ9pT_-xUMNtCcA:4 a=37WNUvjkh6kA:10 xcat=Undefined/Undefined
X-Spam-Score: 0.501
X-Ob-Received: from unknown (192.168.9.23) by as1-7.us4.outblaze.com; 26 Dec 2008 04:21:26 -0000
Received: from av1-5.us4.outblaze.com (localhost.localdomain [127.0.0.1]) by av1-5.us4.outblaze.com (Postfix) with SMTP id 5D8103BC041 for <"-us4-5_normal1.avs.int>; Fri, 26 Dec 2008 04:21:26 +0000 (GMT)
Received: from blu0-omc4-s22.blu0.hotmail.com (blu0-omc4-s22.blu0.hotmail.com [65.55.111.161]) by spf5-1.us4.outblaze.com (Postfix) with ESMTP id 2BC806419F for ; Fri, 26 Dec 2008 04:21:26 +0000 (GMT)
Received: from BLU135-W16 ([65.55.111.135]) by blu0-omc4-s22.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 25 Dec 2008 20:21:26 -0800
Message-Id: <BLU135-W16A01AFFA8E9EF941D0BE9D0EB0@phx.gbl>
Content-Type: multipart/alternative; boundary="_9994828a-79cb-4dea-aa0c-ddaeeebb43bd_"
X-Originating-Ip: [190.38.6.11]
Importance: Normal
Mime-Version: 1.0
X-Originalarrivaltime: 26 Dec 2008 04:21:26.0055 (UTC) FILETIME=[6ACACB70:01C96711]

0 Forwarded Message(s)
0 Attachment(s)/Image(s)

an that is just at 1 addie

Cindy


This one is from here....:)

inetnum: 190.36/14
status: allocated
owner: CANTV Servicios, Venezuela
ownerid: VE-CSVE-LACNIC
responsible: Ramn Cabello
address: Segunda Avenida de los Palos Grandes, 000, Entre Av. Fr
address: 1060 - Caracas - MI
country: VE
phone: +58 212 2095710 []
owner-c: LUM
tech-c: LUM
abuse-c: LUM
inetrev: 190.36/14
nserver: DNS1.CANTV.NET
nsstat: 20081225 AA
nslastaa: 20081225
nserver: DNS2.CANTV.NET
nsstat: 20081225 AA
nslastaa: 20081225
created: 20060605
changed: 20060605

nic-hdl: LUM
person: Ramn Cabello
e-mail: ipadmin@CANTV.NET
address: Segunda Avenida de los Palos Grandes, Entre Av. Fr, 000,
address: 1060 - Caracas - MI
country: VE
phone: +58 212 2095609 []
created: 20020911
changed: 20040818


Registrant:
CANTV.NET
2da Av. con 3era Transversal Los Cortijos de Lourdes
Edif Cantv, Los Cortijos
Caracas, Miranda 1060
VE

Domain name: CANTV.NET


Administrative Contact:
Domain Registration, CANTV.NET csdomreg@cantv.net
2da Av. con 3era Transversal Los Cortijos de Lourdes
Edif Cantv, Los Cortijos
Caracas, Miranda 1060
VE
582-9013850 Fax: 582-9013763

Technical Contact:
Domain Registration, CANTV Servicios csdomreg@cantv.net
Av. Francisco de Miranda, Centro Lido
Torre A, Piso 4, Oficina. 41-A
Caracas, Miranda 1060
VE
582-9013850 Fax: 582-9013763



Registration Service Provider:
CANTV.NET, csdomreg@cantv.net
58-0800-22688-00
You do not have permission to view link Log in or register now.

This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.


Registrar of Record: TUCOWS, INC.
Record last updated on 08-Sep-2008.
Record expires on 27-Sep-2010.
Record created on 28-Sep-1996.

Registrar Domain Name Help Center:
You do not have permission to view link Log in or register now.


Domain servers in listed order:
DNS1.CANTV.NET 200.44.32.10
DNS2.CANTV.NET 200.11.248.11

You should also send to abuse@msn.com
and abuse@hotmail.com
 
Yep, me too.
Full name on mails sent to several of my accounts - including the one I only use for dealing with casino affiliate teams and no one else at all.

How do these bastards get all our details??? :eek:

KK

Folks are getting hard up for money and a lot of them are compiling email lists and selling them, I've noticed a big increase in this over the past several months and when I receive one of these spam emails I am looking up all the relevant info I can find in their IP's and domain names and blasting them right back with real nice choice words...:D

Only problem is it's real time consuming having to do the lookup research and also find all the name servers that they are associated with thru the traceroute and bounce and oh yea the ping comes in handy too...and then there ends up being about 6-8 email addresses in the email I shoot back to them, but it does seem to stop a lot of the spam I was getting since I recently started doing this back a couple of months ago. ;)
 
I got one yesterday from "casinomeister@hotmail.com" and it was from King Dice at my email address that I only use for certain casinos. But I also got one from some other address at my email address that is my generic one. I'm going to check and see what email address I have listed here. If it is the one I have at gmail then either the few casinos that have that address have sold my address or someone here has given it out. And that would not be a nice thing to do.
 
i was told awhile back from someone that email addys are bought and sold from different casinos and online scammers , the going price can go up to 6.00 per email addy:eek:.

i checked my emails this morning and there it was...... King Dice.......it promptly went into the trash bin:D.................laurie
 
The gmail account that I got the 'casinomeister@hotmail.com' spam from them is the one I use here and at Rivals, Villento, Club World and the Rushmore groups. I use my Yahoo! account for all other casinos etc. How interesting to get spam in gmail account when I never ever did before.

Maybe Meister might check this out especially since they are using his name (I assume it is trademarked) for their spam.
 
Me Too!

I have gotten them also in my email account that I use exclusively for casino's. I have gotten 3 today alone, each from a different source.
 
my newest one:mad:

King Dice gives you the royal treatment?
From: @live.com
You may not know this sender.Mark as safe|Mark as unsafe
Sent: Fri 12/26/08 2:30 PM
To: hotmail.com[/email]

Hello

Your 2009 New Years resolution is to play at King Dice and get rich.

in the trash bin it goes:mad:.......................laurie
 
The gmail account that I got the 'casinomeister@hotmail.com' spam from them is the one I use here and at Rivals, Villento, Club World and the Rushmore groups. I use my Yahoo! account for all other casinos etc. How interesting to get spam in gmail account when I never ever did before.

Maybe Meister might check this out especially since they are using his name (I assume it is trademarked) for their spam.

Annie, if you go down to the Spam Complaints forum, there is a whole lengthy thread on the casinomeister@hotmail spam that everyone seems to be getting lately. If this is a new one though, you may wanna post it in there, as well as forwarding a copy to him directly thru email. Just a thought.
 
I've been getting alot of these also.First and last name..........what???
probably been the last three months......alot of spam with my full name.First time I got one it freaked me out.
I got to think maybe getting the odd free chip from a questionable/new casino has just given them my details for nothing but resale.Kinda like selling your soul for a free 10 chip.
 
I received a few of these myself and the last one was from live.com
Got tired of getting them and replied back with...I'm one of the 3 Blind mice and don't want to play at King Dice :D
 
I've been getting burried with them for a few weeks now.
There was another one, Royal VIP I received on Dec 2.

I complained over in CAP and AGD sent me this link:

Link Removed (invalid URL)
 
There is no point in wasting your time doing traces on the IP addresses. These are not your average backyard spammers. They're using open mail servers, anonymous proxies servers and other means to hide their originating identities.

They also daisy chain the open mail servers and proxies which make it next to impossible to track.

This spam is getting a lot worse. I can't do much to combat this problem on my free email accounts, but I can take steps to stop it hitting my own domain emails.

The big issue for people like us is we receive legitimate casino emails. So trying to identify the spam & not block the legit emails, is an exercise in itself :eek:

Granted we can whitelist email addy's however the casinos are also having to change to throw away domains because they are getting blacklisted, so it turns into problem that just causes another problem and so on.

Ultimately though imho the onus falls back onto the casinos. If all casinos actually stood up for their zero spam tolerance rules then they'd take action on their 1 stike & your out rule. But it's obvious that these spammers make the casinos money. In which case we all know that most casinos wont cut off a line of income even if it's being generate by spam!

Cheers

T
 
I got an email from King dice on christmas too. I just delted it. Ive been getting alot of "live.com" emails but they just go in my spam basket
 
There is no point in wasting your time doing traces on the IP addresses. These are not your average backyard spammers. They're using open mail servers, anonymous proxies servers and other means to hide their originating identities.

They also daisy chain the open mail servers and proxies which make it next to impossible to track.

This spam is getting a lot worse. I can't do much to combat this problem on my free email accounts, but I can take steps to stop it hitting my own domain emails.

The big issue for people like us is we receive legitimate casino emails. So trying to identify the spam & not block the legit emails, is an exercise in itself :eek:

Granted we can whitelist email addy's however the casinos are also having to change to throw away domains because they are getting blacklisted, so it turns into problem that just causes another problem and so on.

Ultimately though imho the onus falls back onto the casinos. If all casinos actually stood up for their zero spam tolerance rules then they'd take action on their 1 stike & your out rule. But it's obvious that these spammers make the casinos money. In which case we all know that most casinos wont cut off a line of income even if it's being generate by spam!

Cheers

T


Exactly, and the other thing that I do too besides what I previously stated is to bombard the support email and any other email addresses that I can find for the casino in question over a weeks period or more, using several different email addresses....so two can play this BS game..:p

I also find out the email addresses to the name servers that they use and where each IP and web domain name is registered and who with, like Ripe, Arin, LACNIC etc. etc. and also send all of them emails to their abuse dept., it has really cut down on the amount of Spam that I receive now...I also have recently started doing the same with the pharmacy Spam from the .cn domains too !
 
In the past week I've had at least two or three of these King Dice spam emails (apparently from the live.com domain, with my full name in the subject line) sent directly to my inbox :mad: As was already mentioned, I've noticed that the volume of bulk mail has increased a lot over the last month or two, and I now don't try to chase down the worse casino/poker affiliate spammers like I sometimes used to. I only get realy irritated when this crap doesn't first land in the junk folder where it belongs, until I delete it for good.
 
The spammers, as was mentioned, are a group of very sophisticated Russian spammers (I think it was mentioned). They have had emails from many databases for some time, but the most recent was noted here:

Link Removed (invalid URL)

The information there is from a known leak and is the reason that First and Last names are part of these emails. I do not know the full extent of the information stolen from the database... only that the database mentioned is the one that the emails spawned from.


It is very unfortunate and very difficult to filter out these spam mailers - but WAY MORE unfortunate that this ever happened. :(
 

Users who are viewing this thread

Meister Ratings

Back
Top