Spammer! Unsolicited emails from Kings Palace Casino & its affiliates

t1000

Dormant account
Joined
Jun 9, 2010
Location
Italy
It's a couple of days I'm receiving spam from Kings Palace Casino, mails that I've never requested/subscribed. I've tried to lookout for any support on their page just to remove my email address, buu I couldn't find any. Is there any REp to contact? Thanks for your suggestions

Live long and prosper :lolup:
 

Jasminebed

Game old gal
Joined
Mar 13, 2008
Location
Ontario
They've found me too. Red Flags all over the page.... no company name divulged, no licensing showing, no testing, no terms other than the bonus terms, which frankly aren't all that brilliant.
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
I am ready to pull my hair out!! :mad:

Two days ago I made a fatal mistake and clicked the unsubscribe link on an iffy email and it brought up a new email with an unsubscribe address so I sent it...

And now I am being bombarded with spam.

I am getting on average 50 - 60 every day of the same email.

The link is Link Removed ( Old/Invalid) and leads to kings palace casino.

My email picks it up as spam and puts it in the spam folder but I also get a few emails that fall into the spam folder that I need so it is hard to weed through so much crap.

Does anyone have any advice of what I can do to stop this low life scum bag and would it be much help to inform kings palace casino or are they just as bad, as the only place I have ever heard of this casino was from spam emails?

Below is what the emails look like, except every email has a different subject and sender name but the link is the same.
 

Attachments

  • Untitled.jpg
    Untitled.jpg
    27.9 KB · Views: 165

Greigssy

Senior Member
Joined
Aug 13, 2010
Location
Scotland
Ive had to open a third email account just to deal with my day to day stuff like banking,shopping,facebook etc etc. I get that much spam 9 out of 10 are from all sorts of weird and wonderful casinos and the others are for miracle growth pills........my ex must have got a hold of my email address!
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
:lolup::lolup: Yeah I get those stupid ones too, to email addresses I don't use for casinos... usually something along the lines of 'pleasure your lady' and 'pecker enlargements 100% satisfaction' and l just think umm okay I don't have a pecker but if I did, I would most definitely click on your link...not! :)


Ive had to open a third email account just to deal with my day to day stuff like banking,shopping,facebook etc etc. I get that much spam 9 out of 10 are from all sorts of weird and wonderful casinos and the others are for miracle growth pills........my ex must have got a hold of my email address!
 
Last edited:

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
I am ready to pull my hair out!! :mad:

Two days ago I made a fatal mistake and clicked the unsubscribe link on an iffy email and it brought up a new email with an unsubscribe address so I sent it...

And now I am being bombarded with spam.

I am getting on average 50 - 60 every day of the same email.

The link is Link Removed ( Old/Invalid) and leads to kings palace casino.

My email picks it up as spam and puts it in the spam folder but I also get a few emails that fall into the spam folder that I need so it is hard to weed through so much crap.

Does anyone have any advice of what I can do to stop this low life scum bag and would it be much help to inform kings palace casino or are they just as bad, as the only place I have ever heard of this casino was from spam emails?

Below is what the emails look like, except every email has a different subject and sender name but the link is the same.

Well, so much for those casino reps who can't see why it's such an issue. "Just click unsubscribe" they say. This is not just one loose cannon, this looks like a rogue program. This is a "big league" spammer, and should never have got into the affiliate program in the first place.

This suggests that this casino has links to Gold VIP Club or similar. In the case of Gold VIP Club, it was the OPERATOR that was behind all the spamming, yet tried to make out it was some out of control affiliate. It was exposed when they were caught red handed on a forum for "black hat SEO" asking for help to construct a mass spamming campaign targetting email and search engines.

Contacting King's Palace by email could have the same effect as their bogus unsubscribe, confirming your email address and it then being inundated with spam.

Maybe you should try to "unsubscribe" a few people from the DoJ, senate, and congress - or similar in other countries where online gambling is frowned upon, if not illegal. This will ensure King's Palace gets some attention they DON'T want, which will teach them to better police their program.

I am sure I will get some of these, and I shall remember NOT to use "unsubscribe".
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
I went to their shitty website to try to find some form of contact info....

The only form of contact is Under FAQ:

Contact Us!

You can contact us from the casino software once it is installed on your computer.

:puke: Are you kidding me... After what has already happened to my email address there is fat chance in hell I am going to download some fishy programme from their dodgy site just to complain about them.

I thought maybe I could try and report the asswipe that is sending me all of this but judging from their website layout and wealth of information, IMO they where probably the culprits or at least know full well what their affiliates are up to.

I think my only option now is to start afresh with a new email address, Thanks Kings palace casino :mad:
 

same_old

Dormant account
webmeister
PABaccred
Joined
Mar 4, 2007
Location
Australia
Never click on unsubscribe mate.

What you have now done is confirmed that your email address is active and you will get spammed the shit out of, like you are now doing.

You are just best to open a new email addy just for casinos and have your private one for the online banking and stuff.
Personally I would now get rid of that email address and start over.
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
A lesson badly learnt that I will never do again.

Oh well, at least some good may come out of it from people reading this and not falling for the same thing I did.:nod:
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
I went to their shitty website to try to find some form of contact info....

The only form of contact is Under FAQ:

Contact Us!

You can contact us from the casino software once it is installed on your computer.

:puke: Are you kidding me... After what has already happened to my email address there is fat chance in hell I am going to download some fishy programme from their dodgy site just to complain about them.

I thought maybe I could try and report the asswipe that is sending me all of this but judging from their website layout and wealth of information, IMO they where probably the culprits or at least know full well what their affiliates are up to.

I think my only option now is to start afresh with a new email address, Thanks Kings palace casino :mad:


This could be a fake casino to front something more sinister to do with misuse of personal information. They have already misused the hell out of your email address, and made sure there is no avenue for you to request removal from the mailing list, nor complain about it, unless you install their questionable software, and presumably give them ALL your personal information.

Is there enough on the site to identify the software, and check to see whether it uses stolen content from other providers?

Even without stolen content, it could be our old friends "Ministering Angel" back again. They too had bespoke, rather than nicked, games, but were found to be a front for something far more sinsister, with a suggestion that organised crime was involved, and the casino was a means to gather personal and banking info from victims. They kicked off by stealing from a business who designed their graphics, taking their work and never paying for it as promised.
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
Is there enough on the site to identify the software, and check to see whether it uses stolen content from other providers?

I went to the site again to have a look and the closest I came to finding the software was under game rules and I clicked on video slots and it showed pictures of 3 games... Space Ace, Faerie Tale, Eureka and those games belong to Grand Virtual but they just don't look right.

The site looks shite like I mean I have no idea how to make a website but I'm sure I could do it better... It is very very basic.

If you want, just type in www. kingspalacecasino .com and you will see what I mean.
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
There is something SERIOUSLY wrong here!

1) Their certificate does not exist. It has a "click here to see our certificate", but clicking produces a "page not found" error, in other words, they don't have one, but pretend they do.

2) Their "promotions" link is fed from a completely different website, gamblerzguide(dot)com, and another link comes from yet another different site. NO legitimate casino would have a site like this, EVERYTHING would be on their own domain. This is yet another "red flag" on top of the lack of certificate.

3) On the main page, almost EVERYTHING is a disguised link that directly downloads the software, yet pretends to be links to information about games, offers, and other aspects of the casino.

4) The download itself is signed as coming from the publisher "Everest Gaming".

It looks like they have stolen the software, or at least the client, chopped it about, and used it to run their own casino. Only THREE video slots seem to exist, yet I am sure there would be many more in a legit Everest Gaming casino. The jackpot is a casino-wide amount, and covers both slot and non-slot games. It therefore CANNOT be awarded "naturally" by an in game random event, such as a royal flush, or jackpot combination on a slot. despite this, they claim the games are random, and have been independently tested by the lab granting their non-existent certificate (the "page not found" error).

5) As stated, there is no way to contact them other than installing their software, and if they are up to no good, this would be too late!


The only way to REALLY investigate further would be to take the risk of installing the software, and seeing what is REALLY there.

For the moment, the best bet is to inform Everest gaming of this, and if they deny owning this casino, it should be thrown in the pit. If Everest DO own it, THEY should be thrown in the pit for this APALLING effort.

Those other domains that feed the popups that SHOULD be hosted on the casino's domain may provide a way to track down who is behind this.


It also looks like it is the casino itself that is running the "black hat" spamming campain, and the risk with registering an account, even to test, is that they would be able to do far more than spam an email address with it.

The fact that the trail has been engineered to point the finger at Everest gaming is going to cause THEM damage, and they are probably unaware of this because nothing on the site itself indicates this connection, it's in the digital signature of the installer file.
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
Interesting string data in the installer file.

A part has "downloading the latest Everest casino.............", whereas one would expect to see "downloading the latest Kings Palace casino............"
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
:confused::confused: Now i am getting that same email but every link on it is different to the next.

They all share the same ending which is .betfro.com and the start of them, take for example the latest ones I have received today Link Removed ( Old/Invalid) , Link Removed ( Old/Invalid) , Link Removed ( Old/Invalid) , Link Removed ( Old/Invalid) , Link Removed ( Old/Invalid) .

Every one has started with an A which leads me to think maybe it could be going through the alphabet and this is only the begging?

What is stranger still is if you click on the link in the email it comes up with a different page for Kings palace casino and shows Playtech games and it even says EU Approved and yet still no links other than to download the casino, which lol I will only go so far to prove these dipsticks out and downloading the casino aint one of em. :)
 

Attachments

  • Untitled.jpg
    Untitled.jpg
    54.4 KB · Views: 38

Gremmyboy

Dormant account
Joined
Feb 25, 2011
Location
Australia
Their Disclaimer....!

Kings Palace Casino™ is restricted to individuals of legal age of majority who are residents of jurisdictions ("layers") where the use of Kings Palace Casino and its games ("Games") is not prohibited by law. All Kings Palace Casino's games are void where prohibited by law. Minors are strictly forbidden to play. No purchase is necessary to play. Players may enter and play Games free of charge and without betting money. Players who choose to play for money do so at their own discretion and risk. As in any gambling game, there is the risk of loss of money.
By using the Games software, Players agree to be bound by the following:

Player is at least the age of legal majority in the jurisdiction in which Player resides.
Player understands that Player may play games free, or for money.
Player does not find the Game of the Web site to be offensive, objectionable, unfair, nor indecent.
Player shall hold the Company, its employees, officers, directors, licensees, distributors, wholesalers, affiliates, subsidiaries, advertising, promotion or other agencies, media partners, agents and retailers harmless and shall fully indemnify the same from any and all costs, expenses, liabilities and damages whatsoever that may arise as a result of Player's; (i) entry, use, or reuse of the Web site, (ii) use of any materials at the Web site, (iii) entry, use, or reuse of the Casino Server, (iv) participation in the Game, or, (v) the acceptance of any Prize.
Player shall periodically review these Terms and Conditions posted at this Web site at a rate not less than once monthly.
Player shall not participate in the Games, open, use or reuse an account, enter the Web site, or the Casino, nor accept any Prize if Player does not fully understand, agree to, become a party to, and shall abide by, without exception, all rules, regulations, terms and conditions contained herein and as such rules, regulations, terms and conditions may change from time-to-time.
Members are solely responsible for their account transactions and should keep their account information confidential. Should a member give away, share or lose his account number and/or password Kings Palace Casino will not be held liable for any claims regarding that account.
Player agrees to receive periodic email correspondence from the casino management. This correspondence can be stopped by the user with an opt-out request. :eek:
Personal identity and details of all members will remain confidential. Kings Palace Casino™ will not report wagering information on behalf of any member All rules, regulations, and payoffs contained herein are subject to change and revision by the management without prior written notice.

To get started
CLICK HERE TO DOWNLOAD THE CASINO SOFTWARE
or click on the following graphic


REMEMBER, YOU CAN'T WIN IF YOU DON'T PLAY!

Cheers
Gremmy
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
:lolup::lolup:
It just makes ya wanna join even more doesn't it? :lolsign:

Check out the FAQ section...
I wish to close out my Casino Account.

You can close your Casino Account at any time by writing to our Player Support Team. Please provide your Casino Account username along with your email address, and indicate that you wish to close your account. We will write back to you requesting a confirmation and asking for some validating information. Upon your reply, we will cash out any remaining balance and permanently disable your account. You will no longer have access to the account or to the information in your Transaction History section. If you wish to continue playing casino games for real money, you can simply open a new Casino Account.

In any normal legit casino wouldn't that warrant duplicate accounts?
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
The plot thickens. I have downloaded the GENUINE Everest casino installer from their site, and the files DO NOT MATCH, yet the Thawte certificate DOES! There is a slight difference in length, and the Kings Palace download comes from yet another domain "homeoffun(dot)com". Typing this in directly brings up a "player support centre" for Everest gaming in general, with certificates available, and licensed in Gibraltar.

Interestingly, the Kings Palace site claims US players can play, yet the player support centre says they CAN'T play.

This is bad enough, but now Kings Palace can't make up it's mind whether it is Grand Virtual or Playtech, neither of which accepts US players.


This is now looking like outright fraud coming from an organised crime syndicate. They are probably after as many sets of details and banking info as they can get their hands on. It looks like they are using the same principle as the criminals who fit fake fronts to genuine ATM machines as a means to copy the data being transferred between customer and bank, with the customer not thinking anything is up because they get their money, and probably even know that it is an ATM they have used in the past.

It might explain why the files are slightly different, and come from domains other than the fake casino, or even the genuine casino the files have been lifted from.

As well as informing Grand Virtual, it seems Playtech also need to be informed, as well as the operators of the individual casinos who's install files have been copied for use in this scam. The only common connection is that all the fake casinos are called "Kings Palace", and there are clone domains, one for each stolen casino it seems.

This may well involve a number of other softwares and operators, and could well involve the use of a "spam bot" that has recently been switched on after all the sites have been prepared in advance.


.........and now for the promotions tab. This brings up a window from another domain, gamblerzguide(dot)com.

Typing this directly brings up their home page, which is a "banner exchange" company - so what are they doing hosting casino's current promos from their site unless it is to deliberately mislead players who think the material is coming direct from the casino, and is therefore accurate and binding.

The whole thing looks like a nest of spammers and "black hat" masters, and this domain is simply one of their main coordination hubs, with the other (homeoffun) being used to distribute the gaffed software clients.

Using loads of different domains and interlinking them is probably intended to boost their ranking in search engines so that their fake sites seem legit.
 

Attachments

  • gamblerzguide.jpg
    gamblerzguide.jpg
    46 KB · Views: 36

Gremmyboy

Dormant account
Joined
Feb 25, 2011
Location
Australia
Their monthly promo goes to this address???
Weird:eek2:

I NOTICED THAT YOU CAN'T RIGHT CLICK THIS LINK AND OPEN IN NEW TAB. IT ACTS AS IF IT IS A FRAME.

<a href="javascript:void(0)" onclick="window.open ('Link Removed ( Old/Invalid) ','anywindow','height=550,width=615,scrollbars=yes')">Monthly Promo</a>


Cheers
Gremmy

EDIT:

Kings palace copyright info.....


Copyright © 1992-111 Kings Palace Casino™
No part of this site may be reproduced, stored in any form or by any means,
without the prior written permission of the copyright holder.

The link above's copyright info.....

copyright © 111 all rights reserved
 

Gremmyboy

Dormant account
Joined
Feb 25, 2011
Location
Australia
Can a mod please remove the non modified image? It stuck around even though i edited the post and attached a new image... grrrr!


Cheers
Gremmy
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
vinylweatherman You need to write a book on casino's...The good the bad and the fraudly. You just know so much. :notworthy

So other than not knowing hardly anything about online casino's besides the basics and playing them, where would I go to inform those providers as I am now some what in over my head about what is and could be going on, or do they frequent the forum some where and can just be drawn to this thread?

Here is the details of one of the emails, I forgot to add this before but don't know if it helps any.

From Selina Neal Tue Nov 22 14:06:27 2011
X-Apparently-To: @ via 98.139.218.54; Sun, 23 Oct 2011 16:05:19 -0700
Return-Path: <managerdin@eum.hu>
X-YahooFilteredBulk: 109.206.123.6
Received-SPF: none (domain of eum.hu does not designate permitted sender hosts)
X-YMailISG: yMEBzioWLDvAEeRApBpONql4Q.jtgM5i7Z6fT3QmE8Z1Mlps
td.V5DRSQ08cq5P_1_D46qigiQJ2XujsCt58PFmv9r.uDy.8o7QHwyrUIPAd
J7hx712jXrE0.0gfdVCL4RRqx6cw8K9Y0H_clopnLSbkxp9IRgzjpwrWkWjL
21wb45tlnk3cVy.UJqiE7WBNlBs7arUpewQ2u.pZhXG7_Qk8PoYo_naRNOsV
vXbQM0e3QMFW_GJrQd3WASEZXknRPdyoENKd1O5o60yLKzShmAhyHaFw09e3
xPQIJPB0w_GejAhNNyBN2q_5IphqSR3QowLx0pqJsWsRVWp8QDboKlg5vUOh
6iBdgk7OXvgfUQVMn2hkBOWWhZJPNnZCEk0b1OXlsaNrX5ccRMr33lyDMvWA
aH9vaKQrr_LmMFytqt60S5_t7AqRzD0cob8.MXez0u5AjcDPAlTByKdmBZmE
2IvbNPl67N5z47G8WmQSuEsn01DGi5xdO8E4TZLQMj5yYfWUIY4k.f7Pw0D3
83SxOQuGnHnl_MlFxkL00K3AmvwYe7m6moXRDJ1B1a7MOKe09sMA.DsYksOx
eMW3Q8JPgBua67vLFvlkDeLXLWlQKoXZ88ai9t1a82ItrQ371QsAfDfEZEE2
uTfwo8FKx9BKyyDrLjCS22.JlZ4rNsj1L.KKrHaUzNREuB3uqX9V_VRQQoyu
UphsJs_GZuTXJdTbv6soCwr_SsEuNCCYc8RuQzf9Zd20Lqqcx4gl7I2azYxW
Zg13XP5ZU0opIPTHQeehYAd7C1Ifk8SkAzFrgZjpHoQawLztbICowmJUhDbs
4r2BB8b2VfoEPQGrcO66HcLqojVPGt7Z5ibrc1hbD24K1P61Hgx_lquKGaRZ
Lb5qSotYdk3NpZvpdsUe9JChVXsl21iIln8gUQuLxyRvUcezsfLUg5T3v9F.
Puht72lcLae.DxWTB04P8c8xyMQOYzHaAVxhlv.CkCWIZAOwu687VWU7o.Ix
r4JBlQyPvHs8S5vrM98QXVoLWselpw--
X-Originating-IP: [109.206.123.6]
Authentication-Results: mta1083.mail.ac4.yahoo.com from=eum.hu; domainkeys=neutral (no sig); from=eum.hu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dyn-123-6.kbcnet.rs) (109.206.123.6)
by mta1083.mail.ac4.yahoo.com with SMTP; Sun, 23 Oct 2011 16:05:19 -0700
Received: from [109.206.123.6] (HELO TYDQC)
by dyn-123-6.kbcnet.rs (8.14.3/8.14.3)
with SMTP id 40272231 for @; Tue, 22 Nov 2011 23:06:27 +0100
Message-ID: <000001cca962fb5ee090067bce6d@dyn1236.kbcnet.rs>
From: "Selina Neal" <Managerdin@eum.hu>
To: @
Subject: Let Vegas come to you when you claim your 1,000 free money offer
Date: Tue, 22 Nov 2011 23:06:27 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01CCA962.FB5EE090"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2644
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2827
This is a multi-part message in MIME format.
Content-Length: 1995
 

RUSTYROO

Dormant account
Joined
Oct 9, 2007
Location
Australia
I got this page when i went to the address in my above post....

Cheers
Gremmy

I have an account with Casino Elegance and that is a live promo for the Grand Virtual casinos.

Jeez I'm so glad I'm not a newbie to the fascinating world of online casinos as this would confuse me even more than it is now :eek2:
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
vinylweatherman You need to write a book on casino's...The good the bad and the fraudly. You just know so much. :notworthy

So other than not knowing hardly anything about online casino's besides the basics and playing them, where would I go to inform those providers as I am now some what in over my head about what is and could be going on, or do they frequent the forum some where and can just be drawn to this thread?

Here is the details of one of the emails, I forgot to add this before but don't know if it helps any.

From Selina Neal Tue Nov 22 14:06:27 2011
X-Apparently-To: @ via 98.139.218.54; Sun, 23 Oct 2011 16:05:19 -0700
Return-Path: <managerdin@eum.hu>
X-YahooFilteredBulk: 109.206.123.6
Received-SPF: none (domain of eum.hu does not designate permitted sender hosts)
X-YMailISG: yMEBzioWLDvAEeRApBpONql4Q.jtgM5i7Z6fT3QmE8Z1Mlps
td.V5DRSQ08cq5P_1_D46qigiQJ2XujsCt58PFmv9r.uDy.8o7QHwyrUIPAd
J7hx712jXrE0.0gfdVCL4RRqx6cw8K9Y0H_clopnLSbkxp9IRgzjpwrWkWjL
21wb45tlnk3cVy.UJqiE7WBNlBs7arUpewQ2u.pZhXG7_Qk8PoYo_naRNOsV
vXbQM0e3QMFW_GJrQd3WASEZXknRPdyoENKd1O5o60yLKzShmAhyHaFw09e3
xPQIJPB0w_GejAhNNyBN2q_5IphqSR3QowLx0pqJsWsRVWp8QDboKlg5vUOh
6iBdgk7OXvgfUQVMn2hkBOWWhZJPNnZCEk0b1OXlsaNrX5ccRMr33lyDMvWA
aH9vaKQrr_LmMFytqt60S5_t7AqRzD0cob8.MXez0u5AjcDPAlTByKdmBZmE
2IvbNPl67N5z47G8WmQSuEsn01DGi5xdO8E4TZLQMj5yYfWUIY4k.f7Pw0D3
83SxOQuGnHnl_MlFxkL00K3AmvwYe7m6moXRDJ1B1a7MOKe09sMA.DsYksOx
eMW3Q8JPgBua67vLFvlkDeLXLWlQKoXZ88ai9t1a82ItrQ371QsAfDfEZEE2
uTfwo8FKx9BKyyDrLjCS22.JlZ4rNsj1L.KKrHaUzNREuB3uqX9V_VRQQoyu
UphsJs_GZuTXJdTbv6soCwr_SsEuNCCYc8RuQzf9Zd20Lqqcx4gl7I2azYxW
Zg13XP5ZU0opIPTHQeehYAd7C1Ifk8SkAzFrgZjpHoQawLztbICowmJUhDbs
4r2BB8b2VfoEPQGrcO66HcLqojVPGt7Z5ibrc1hbD24K1P61Hgx_lquKGaRZ
Lb5qSotYdk3NpZvpdsUe9JChVXsl21iIln8gUQuLxyRvUcezsfLUg5T3v9F.
Puht72lcLae.DxWTB04P8c8xyMQOYzHaAVxhlv.CkCWIZAOwu687VWU7o.Ix
r4JBlQyPvHs8S5vrM98QXVoLWselpw--
X-Originating-IP: [109.206.123.6]
Authentication-Results: mta1083.mail.ac4.yahoo.com from=eum.hu; domainkeys=neutral (no sig); from=eum.hu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dyn-123-6.kbcnet.rs) (109.206.123.6)
by mta1083.mail.ac4.yahoo.com with SMTP; Sun, 23 Oct 2011 16:05:19 -0700
Received: from [109.206.123.6] (HELO TYDQC)
by dyn-123-6.kbcnet.rs (8.14.3/8.14.3)
with SMTP id 40272231 for @; Tue, 22 Nov 2011 23:06:27 +0100
Message-ID: <000001cca962fb5ee090067bce6d@dyn1236.kbcnet.rs>
From: "Selina Neal" <Managerdin@eum.hu>
To: @
Subject: Let Vegas come to you when you claim your 1,000 free money offer
Date: Tue, 22 Nov 2011 23:06:27 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01CCA962.FB5EE090"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2644
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2827
This is a multi-part message in MIME format.
Content-Length: 1995


Operators do have reps that frequent the forum, but first we have to identify who is involved. So far, it seems only Everest casino is involved at an operator level, with Playtech being involved at a software supplier level. In order to get more information, it will need someone to try installing the software to see which casino is REALLY involved. It will need someone not averse to wiping their OS and reinstalling Windows should this end up with them getting infected with something.

If a spambot is involved, this is a great means for them to spread it over even more PCs than they already have.

I am going to do a reset to factory settings on this PC at some stage, but am not yet ready to be bulldozed into doing this. The only PC I can afford to compromise is the old Windows 98 one, but it will probably not run the install.

I would also want to prepare a disposable email address before doing anything along these lines, so I can ditch it after the investigations, because it will no doubt be inundated with spam. It would also be a great way to see the connections without having to guess whether spam was coming from other sources.

It may be possible to identify the individual Playtech casino involved by examining the file without actually installing it.
 

pinkfloyd

Full Member
Joined
Jul 13, 2009
Location
aus
slightly offtopic but ontopic

there was an article today on a new glitch/virus affecting facebook where people where sending/ receiving invites from unwanted people , exboyfriends girlfriends strangers and they are worried that it is a phishing scam for legitimate emails

they went on to say that the sale of legitimate email adresses can fetch between 20c and $1 , and rusty i have no doubt in my mind that these people who sent you the original spam email bought it from somehwere

we should set up 20 different email accounts and sign up to 20 different casinos fun mode only and see which one gets spammed the most , should be a rouge offence !


@mr fruits if u set up a blank laptop to install this software use it at a wifi free hotspot , that way they arent going to ping u at a permanent ip address , might save u from any future attacks ( a little bit of paranoia goes a long way lol )
 
Top