Yet more Palace group SPAM!

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
There's a huge amount of javascript, but I found this which looks like the casino client is downloaded from the spammer's server and not from Spin Palace

function launchDownload(ul,afterPage) {
ul = ul || "en";
afterPage = afterPage || "getting-started/";
if (_isMac) {
var width = $(window).width() - 100;
var height = $(window).height() - 100;
var top = $(window).height() / 2 - height / 2;
var left = $(window).width() / 2 - width / 2;
} else {
window.location = "../downloads/sp-casino-setup-" + ul + ".exe"
setTimeout(function(){window.location=afterPage},2500);
}
}

But it's also running scripts directly from Spin Palace

<script src="http://www.thepalacegroup.com/scripts/tickerScript.js"></script>

So far I'm not able to find any affiliate tags though. :rolleyes:
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
More from this same guy
www(dot)spgoldgamew(dot)net


And now I'm also getting the Betway ones - I went through the 60 mails I received TODAY and pulled out these links

www(dot)bet2betdot(dot)com
www(dot)bet2betz(dot)com
www(dot)bet2betn(dot)com
www(dot)bet2betk(dot)com
www(dot)bet2bete(dot)com
www(dot)ibet2beta(dot)com
www(dot)ibet2bett(dot)com
www(dot)ibet2beti(dot)com
www(dot)ibet2beto(dot)com

I'm not going to post them all - obviously it's bet2bet or ibet2bet plus a letter of the alphabet . Interestingly though, all of the above are downloading from either
casinobet2day(dot)net
bet2day-casino(dot)net

and none of the downloads work. I don't know if that's because Palace Group has disabled it or the guy didn't set it up right.

But seriously, I'm so sick of this jerk.
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
More from this same guy
www(dot)spgoldgamew(dot)net


And now I'm also getting the Betway ones - I went through the 60 mails I received TODAY and pulled out these links

www(dot)bet2betdot(dot)com
www(dot)bet2betz(dot)com
www(dot)bet2betn(dot)com
www(dot)bet2betk(dot)com
www(dot)bet2bete(dot)com
www(dot)ibet2beta(dot)com
www(dot)ibet2bett(dot)com
www(dot)ibet2beti(dot)com
www(dot)ibet2beto(dot)com

I'm not going to post them all - obviously it's bet2bet or ibet2bet plus a letter of the alphabet . Interestingly though, all of the above are downloading from either
casinobet2day(dot)net
bet2day-casino(dot)net

and none of the downloads work. I don't know if that's because Palace Group has disabled it or the guy didn't set it up right.

But seriously, I'm so sick of this jerk.

That may be because they have made up their own installer, so whenever there is an update the old installer is no longer usable, and since it does not come from the official site, it would have to be manaually "re-stolen" by the affiliate and placed on his sites.

This is clearly no "misunderstanding" between what constitutes spam and allowable promotion. This person knows exactly what they are doing is "hardcore" spamming, and they are no amateur either as they employ many "black hat" skills in staying one step ahead of enforcement.

It seems they design their sites for a short lifetime, but redirect to a pair of disguised longer term domains in order to service the download. The use of their own installer rather than the official one is probably because they have custom built it to contain the affy tag, which removes the need to show it in source listings in their spam domains.

Taking apart their rogue installer may reveal their tag. If the tag is "null", it's not an affiliate at all.

The nickname "spcasino" has appeared in some highly questionable snail mail I received a couple of years ago, and this spammers use of "sp" suggests it's the same bunch behind both this spam and the dodgy snail mail. This points to a rogue direct marketing company, rather than your usual affiliate, and tracking may not be needed as they may have a different kind of contract with Palace group.
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
I can't believe this person is not doing more harm than good to the Palace Group with this spamming. I know I'm not the only person who has closed my accounts in frustration after numerous complaints about it fell on deaf ears. This has been going on for a LONG time - it started with the fake Ruby Fortune websites, then Spin Palace and now Betway.
 

zebedy

No!!!! Im Spartacus
Joined
Jun 1, 2007
Location
Up a Tree
Yeah i was also plagued by these.
I ended up reporting the sites as web Forgery's through Firefox
as well as reporting them to Spamcom and Can the Spam

Dont know if it did any good though
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
Still coming.....

Betway:

www(dot)obet2dayhotclub(dot)com
www(dot)abet2daybonusgame(dot)com
www(dot)abet2daytopclub(dot)com
www(dot)ubet2daytopclub(dot)com
www(dot)utopgoldenbet2day(dot)com

Spin Palace:

www(dot)yhittopsproyalty(dot)net

This spammer is also now doing the same thing with Club Dice (which is a rogue Playtech if I'm not mistaken)
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
sigh

www(dot)usphitnethot(dot)com
www(dot)ibet2dayhotclub(dot)nl
www(dot)ibet2daybonushot(dot)nl
www(dot)ibet2dayhotnet(dot)nl

I'm assuming it's pointless to keep posting these, nobody seems to give a stuff.
 

KasinoKing

WebMeister & Slotaholic..
webmeister
PABnonaccred
CAG
MM
Joined
Aug 25, 2004
Location
Bexhill on sea, England
I'm assuming it's pointless to keep posting these, nobody seems to give a stuff.
Well I "give a stuff" and I will be asking Bryan to seriously consider the Accredited status of the Palace Group, because they are STILL doing it!
The fake site "SP casino" is still very much alive and kicking :mad:

Just got this e-mail today:
 

Attachments

  • PGspam_Jul12.JPG
    PGspam_Jul12.JPG
    43.3 KB · Views: 138

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
I'm one of those "big winners" at "SP Casino", or Spin Palace as it is known, and I got bonus banned for my troubles. Despite this, their "casino manager" often emails me suggesting I open a new account there, addresses me by name, yet should know better as the terms and conditions prohibit this.

I fact, this is rogue/deceptive marketing, because although by opening another account at Spin Palace I would be knowingly breaking the terms, I have NEVER had an account at "SP Casino", therefore I would NOT be in breach of the terms if I were to take this offer up, download "SP Casino", and register an account and take this 200% bonus, which incidentally is NOT being offered to regular players at all, not even those at the very top VIP and loyalty level.

This "SP Casino" is no ordinary affiliate either, it is a "super affiliate", and one that also appears to have a direct marketing deal with Palace Group for sending out snail mail, which also invites players to "SP Casino".

I find it hard to believe that Palace Group have been unable to work out which of their affiliates is doing this, so they must know this is going on in their name, and have chosen to "turn a blind eye" because this is an affiliate that draws in significant traffic, which would end up being diverted to a competitor should Palace Group give them the boot.

A spell in the "reservation" might inspire them to take a more robust approach to affiliates that break the rules in order to get results. After all, they would not tolerate a player that "bent the rules to get a result", for example by betting aggressively and/or taking a disciplined mathematical aproach to winning from the bonus spammed to them by this affiliate.

Casinos that persist in phoning players to offer a bonus for reversing their withdrawals might also benefit from a spell there, along with those that regularly take 10 days to pay even though they claim it is 24/72 hours.
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
Luckily this mail is all going to my own server, so I was able to set up my spam blocker and made some rules to catch the rest that it missed. In the past 3 hours (since midnight) my spam blocker caught over 100 spams, half of which are 'bet2day' (the rest are Kings Palace) - and then in my junk mail folder which caught the rest, I had about 12 more. A few of the links here:

www(dot)ybetdaybonusbest(dot)com
www(dot)ylinebestlifebetday(dot)com
www(dot)ywebbetdaybest(dot)com
www(dot)elifebestlinebet2day(dot)nl
www(dot)ebet2daybonusbest(dot)nl
www(dot)ybestgoldenbet2day(dot)nl
www(dot)ybet2daybestline(dot)nl
www(dot)alifetoplinebet2day(dot)nl

Ray gets approximately 30 of these mails every day too.

Interestingly, there's now a LINK at the bottom of the emails to unsubscribe!!!!
To receive no further e-mails, please go:
You do not have permission to view link Log in or register now.
lol, well then I guess they've fixed the problem. :rolleyes: Seriously WTF. Even if anyone was stupid enough to click the link, you'd have to do it for all the thousands of domains this bozo has?
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
Luckily this mail is all going to my own server, so I was able to set up my spam blocker and made some rules to catch the rest that it missed. In the past 3 hours (since midnight) my spam blocker caught over 100 spams, half of which are 'bet2day' (the rest are Kings Palace) - and then in my junk mail folder which caught the rest, I had about 12 more. A few of the links here:

www(dot)ybetdaybonusbest(dot)com
www(dot)ylinebestlifebetday(dot)com
www(dot)ywebbetdaybest(dot)com
www(dot)elifebestlinebet2day(dot)nl
www(dot)ebet2daybonusbest(dot)nl
www(dot)ybestgoldenbet2day(dot)nl
www(dot)ybet2daybestline(dot)nl
www(dot)alifetoplinebet2day(dot)nl

Ray gets approximately 30 of these mails every day too.

Interestingly, there's now a LINK at the bottom of the emails to unsubscribe!!!!

lol, well then I guess they've fixed the problem. :rolleyes: Seriously WTF. Even if anyone was stupid enough to click the link, you'd have to do it for all the thousands of domains this bozo has?

I see, looks like Palace Group HAVE done something about it, they have told the affiliate to include an unsubscribe link:rolleyes:

This is not really good enough, as it doesn't use the "opt in" or "double opt in" method of validating subscriptions, but the "opt out" method. It is a worthless method as it still allows them to send at least one spam to any email address they choose, and if "unsubscribe" is not used by the recipient, then "opt in" status is assumed. Worthless too because there is no way to tell apart genuine "opt out" marketing and "scam" marketing spam, so the general advice is to NEVER use "unsubscribe" for anything you have not specifically opted in to.

The simple fact that the emails employ all these methods that are designed to defeat the users own filters on their email accounts shows that this affiliate knows damn well that his emails are not wanted.

A genuine opt in mailer would be designed so that the recipient could set up a "whitelist rule" to ensure they don't miss any, something you cannot do when they keep changing the "from" address, website, etc.
 

KasinoKing

WebMeister & Slotaholic..
webmeister
PABnonaccred
CAG
MM
Joined
Aug 25, 2004
Location
Bexhill on sea, England
Spamming Season is officially OPEN!

Just got this one to my private e-mail address - the link goes to a completely fake site for Bet2Day-Casino.net - looks totally genuine except there are no icons & links you get at the bottom of all genuine casino's websites.
Clicked on "Download" and at first it did say Bet2Day casino...
But when it got to the installation, it said "Do you want to install BETWAY casino"... :mad:

Hi

As the Casino Manager here at Bet2day, I'd love you to sign-up with us and join our world of winners with a 200% first deposit bonus.

You can win now just like Mr W. did on our fantastic Slots - $ 1,8 million at Major Millions 5 Slot.

Open the account using the link below and you will automatically qualify for the "Triple deposits" offer

hxxp://www.owebbetdaybest.com/

Richard Jones
Casino Manager

====================================
To receive no further e-mails, please go:
hxxp://unsubscribe.owebbetdaybest.com/

Really, this is just getting ridiculous.

KK
 

Westland Bowl

Tin Foil Hat Club Member
PABnonaccred
CAG
Joined
Nov 1, 2005
Location
America
To me, when a casino resorts to these types of email shenanigans or lets affiliates do this, it tells me that the casino is in bad financial shape or run by crooks. I feel that they are trying to snatch small deposits (or large ones) from players who do not know better and snort those deposits into their rigged software. Why would anyone bother with these casinos? :rolleyes:
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
This is even worse than Casino Rewards!. I don't see much of this unless I check my spam folder to see how many genuine emails got trapped. It is often full of casino rewards stuff, and only a few of these fake casinos. Oddly enough, it has the opposite effect because I have never heard of the fake names, and think I know the names of all the better MGS casinos, so avoid them because I think it is not MGS, and probably a "clip joint" using something like Top Game or Rival (who seem to launch an endless stream of white labels).

At least Casino Rewards spam gives the correct name of the casino.
 

vinylweatherman

You type well loads
Joined
Oct 14, 2004
Location
United Kingdom
SP Casino breaks all records!

This is now taking the piss:mad:


I have just cleared out my spam filter, and there are about 100 CONSECUTIVE messages all spamming SP casino. So bad in fact that they are being "stacked" as conversations even though they are from different from addresses. Each message has quite a CC field too. This looks like a "bot" is involved. On top of this is almost as much spam for "Palace of Chance", which is what one would expect from such an operator.


It is clear that NOTHING is being done by Spin Palace affiliates about this, and as a result the problem has escalated significantly.

The extent of this spam is going to result in mail gateways being blacklisted, which could do damage to Spin Palace in terms of communicating with their players.

As this is all "SP casino", and presumably based on the fake landing page infrastructure set up for this, I presume this is all coming from the same affiliate.
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
And they keep coming....

www(dot)uspvipnetlife(dot)com
www(dot)uspluxurynetclub(dot)com
www(dot)uspgoldennetweb(dot)com
www(dot)uspgoldenwebnet(dot)com
www(dot)uspluxlife(dot)com
www(dot)uspvipnetcash(dot)com
www(dot)uspweblife(dot)com
www(dot)uspwebline(dot)com
www(dot)uspluxuryclub(dot)com

www(dot)owebbetdaybest(dot)com
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
sigh....Just cleaned out my spam folder for today. Most of these I had 5 or 6 messages from...

Betway
www(dot)ilinebet2daybest(dot)com
www(dot)ilivebet2daybest(dot)com
www(dot)ibestwebbet2day(dot)com
www(dot)iclubbet2daybest(dot)com
www(dot)igoldenbestbet2day(dot)com
www(dot)qclubbet2daybest(dot)pl
www(dot)qbestbet2daybonus(dot)pl
www(dot)qnetbetdaybest(dot)com
www(dot)qlinebetdaybest(dot)com
www(dot)qclubbetdaybest(dot)com
www(dot)qbestbetdayultra(dot)com
www(dot)qbestlinelifebetday(dot)com
www(dot)abestwebbetday(dot)pl
www(dot)anetbetdaybest(dot)pl
www(dot)abestlinelifebetday(dot)pl
www(dot)alinelifebestbetday(dot)pl
www(dot)abestbetdayultra(dot)pl

Spin Palace
www(dot)ospwebnetgolden(dot)com
www(dot)ospweblinenet(dot)com
www(dot)ospnetclubluxury(dot)com
www(dot)ospnetwebgolden(dot)com
www(dot)ospnetlifevip(dot)com
www(dot)ospnetcashvip(dot)com
www(dot)ospweblifenet(dot)com
www(dot)ospluxlifenet(dot)com
www(dot)ospluxurylinenet(dot)com
www(dot)ospluxclub(dot)com
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
Spin Palace
www(dot)ynetcashvipsp(dot)com
www(dot)ywebnetgoldensp(dot)com/
www(dot)yweblinenetsp(dot)com/
www(dot)yluxlifenetsp(dot)com/
www(dot)ynetclubluxurysp(dot)com
www(dot)yweblifenetsp(dot)com
www(dot)ynetluxclubsp(dot)com
www(dot)ynetwebgoldensp(dot)com
www(dot)ynetlifevipsp(dot)com
www(dot)yweblifenetsp(dot)com
www(dot)yluxurylinenetsp(dot)com

Betway
www(dot)ylifelinebestbetday(dot)pl/
www(dot)ybestbetdaybonus(dot)com/
www(dot)ylinebetdaybest(dot)com/
www(dot)yclubbetdaybest(dot)com/
www(dot)ybestbetdaylife(dot)pl/
www(dot)ybestnetbetday(dot)pl/
www(dot)zbestlinelifebetday(dot)com/
www(dot)znetbetdaybest(dot)com/
www(dot)zlinelifebestbetday(dot)com/
www(dot)alifelinebestbetday(dot)com/
www(dot)abonusbestbetday(dot)com/
www(dot)abestbetdaylife(dot)com/
www(dot)awebbestbetday(dot)com/
www(dot)ilinebet2daybest(dot)com/
www(dot)ilivebet2daybest(dot)com/
www(dot)ibestwebbet2day(dot)com/
www(dot)iclubbet2daybest(dot)com/
www(dot)igoldenbestbet2day(dot)com/
www(dot)qnetbetdaybest(dot)com/
www(dot)qclubbetdaybest(dot)com/
www(dot)qbestbetdayultra(dot)com/
www(dot)qbestlinelifebetday(dot)com/
 

kujis

Experienced Member
Joined
Jan 25, 2009
Location
City of Judgement
My phone is getting bombarded by Roxy Palace. I'm getting a shitty promo message ever 1-2 days, even though I don't even play there.

Trying to contact them and asking to remove me from their spam list just gives an error message: " An error has occurred. Error: Ask Us is currently unavailable. "

Thankfully there was a helpful person in live chat who removed me from their list.
 

chayton

aka LooHoo
webmeister
PABnonaccred
CAG
Joined
Jun 5, 2006
Location
Edmonton Canada
Interesting, I was doing a search a couple days ago after a couple of the website links this spammer sent were blocked with a malware threat on this borrowed computer. I found this blog post from 2010 (!!!) xhttp://blog.mxlab.eu/2010/11/05/casino-spam-leads-to-malware-payload/ - the spam back then was for a casino called "King Spin" which downloaded Spin Palace, another one called "Ruby Fortuna" which downloaded Prime casino. I wonder if it's the same guy? Because at the bottom of the post is some info with his name and possibly his aff tag...? I'm not sure how the aff tags work, maybe one of you more in the know can take a look at it.

I don't know about the whole malware thing or if it's the same guy. But I still find it interesting, considering this exact same kind of fake landing page and spam is still happening TWO years later.
 
Top