CLUB VIP spamming

[universal4]

Does anyone know who this ClubVIP spamming ass is?

I got about 6 or 8 different emails today after getting more than a dozen yesterday....

Yesterday all the spams promote a different domain and all of them redirected to
xxhttp://http://www.gamingluckyvip.com/

Yesterday all the spams used a fake sender of LuckyVIP and todays sender was ClubVIP.

whois on one of the domains show

Results for XXcasino-clubvip.com :

domain: XXcasino-clubvip.com

owner: Teresa Thomas

email: poppy@mailti.com

address: 1321 Dufferin Street

city: Toronto

postal-code: M6H 4B6

country: CA

phone: +1.4165167760

admin-c: CCOM-1833285 poppy@mailti.com

tech-c: CCOM-1833285 poppy@mailti.com

billing-c: CCOM-1833285 poppy@mailti.com

nserver: ns1.pniae.ru

nserver: ns2.pniae.ru

nserver: ns3.pniae.ru

nserver: ns4.pniae.ru

status: lock

created: 2011-11-29 21:37:20 UTC

modified: 2011-11-29 21:37:32 UTC

expires: 2012-11-29 21:37:20 UTC

query-source: 208.77.188.117



contact-hdl: CCOM-1833285

person: Teresa Thomas

email: poppy@mailti.com

address: 1321 Dufferin Street

city: Toronto

postal-code: M6H 4B6

country: CA

phone: +1.4165167760



source: joker.com live whois service

query-time: 0.010879

db-updated: 2011-12-09 19:23:38



Rick
Universal4

[universal4]

This guy has not stopped and in fact today I logged in to an account to see 10 of the damn things.....

I checked a few and they appear to be pointing at different domains which redirect back to the same front....

I will look at them later to get a list of domains.

Rick
Universal4

[Nodepositworld]

Well Rick, this person lives 15 minutes away from me. You wish to have me visit them and take care of business? ( Evil Laugh !!! )

address: 1321 Dufferin Street

city: Toronto

postal-code: M6H 4B6

country: CA

[universal4]

Well I wonder if the address is faked or not....

Today's spams redirect to a different domain name, same front as before, with a different Toront address....

I am fairly sure this is all one operation since out of this "group" of spams I have been getting the past few weeks.... (the club vip, or lucky vip, or derrivative similar) they all end up being redirected back to the same front with a bunch of different names....

In each case the front allows nothing being done except a download.....the help desk, preview, promotions, payment links...all of them point at the download....

Rick
Universal4

[Daera]

I'm receiving them too. Luckily they're going straight to my spam box so they're not annoying me too much yet. Spammers suck!

[universal4]

Another 8 or 10 yesterday and another half dozen today....

I have been taking the time to challenge the person to have the ba*** to talk to me.....

I have offered numerous times to have a meeting with their web host....

Rick
Universal4

[grem]

Call the phone number to see if they answer.

Are they spamming your affiliate emails or player emails?

[universal4]

Most of the time this particular one comes to a non-gambling account that is only used for non-G stuff...

Rick
Universal4

[FutureCasino]

Deleting 5 each day. The download, btw, goes to CWC brands.

[universal4]

This guy just won't stop....

4 new domains being used today

Rick
Universal4

[CityGuard]

I received some details from another recipient of their messages. I've cut out the recipient's name and email address and added XX in the link from the email body. Here is the message and the header info.


Email Content
From: ClubVIP entertainment <lvvxqrbcs@abasd.org>
Subject: Hard to resist bonus offers at ClubVIP
Date: 30 December 2011 05:27:53 GMT+08:00
To: [removed recipient info]

For gaming entertainment at its luxurious best, look no further than ClubVIP.

A quick, smooth, and free download of our gaming software places at your disposal a whopping USD777 as "Welcome Bonus".

Come over and enjoy more than 120 games with one of the most awesome collection of slots games to be found anywhere in the online gaming universe.

We constantly think up new ways to help you with real cash and these ideas find their way into our Daily Promotions.

htXXtp://www.iluckyvipwinners.com/?id4fa2781be498d87ac90abc16d798beed9bd4c362191d594 32854


Message Header
From: ClubVIP entertainment <lvvxqrbcs@abasd.org>
Subject: Hard to resist bonus offers at ClubVIP
Date: 30 December 2011 05:27:53 GMT+08:00
To: [removed recipient info]
Delivered-To: [removed recipient info]
Received: by 10.182.75.10 with SMTP id y10cs185165obv; Thu, 29 Dec 2011 12:27:58 -0800 (PST)
Received: by 10.52.76.196 with SMTP id m4mr17227131vdw.112.1325190476700; Thu, 29 Dec 2011 12:27:56 -0800 (PST)
Received: from 20150024126.user.veloxzone.com.br (20150024126.user.veloxzone.com.br. [201.50.24.126]) by mx.google.com with ESMTP id iq5si7290662vcb.74.2011.12.29.12.27.55; Thu, 29 Dec 2011 12:27:56 -0800 (PST)
Return-Path: <lvvxqrbcs@abasd.org>
Received-Spf: fail (google.com: domain of lvvxqrbcs@abasd.org does not designate 201.50.24.126 as permitted sender) client-ip=201.50.24.126;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of lvvxqrbcs@abasd.org does not designate 201.50.24.126 as permitted sender) smtp.mail=lvvxqrbcs@abasd.org
Message-Id: <8BfRwUK8dBhf4IMn6A3LwOFrg4A7IQb76PeM@uquoloyyrtqo >
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

[Anthony]

I am getting the same one sent to my yahoo account.

[universal4]

The email Steven posted is only ONE of the domains the same group used TODAY....

Some days its two or three....and some days its 5 or more.....

BUT....they come every single day.....

The site itself (that it is redirected to) is on a russian server I believe....the dns certainly is on a russian server with a .ru extension....(that in and of itself doesn't bother me but making someone at the Host level understand is much more difficult)

Rick
Universal4

[FutureCasino]

Anthony, have you contacted Clubworld rep to ask to stop this guy?

[universal4]

I sent Martyn a note and forwarded 1 or 2 emails to him so I am sure he will look into it after getting back on track in the new year.

Rick
Universal4

[AmCan]

I'm only getting about 8 to 10 of these a day from them and have been for weeks. Mine our coming from an address that i've listed on a website (as an image), so i'm not surprised it's being spammed. These guys are starting to make the Viagara spammers and the "good finance blog" spammers look like "good guys".

[universal4]

Yea this guy just wont stop.....

Almost every day is a different domain being used and I am fairly sure that some of the spam fighting a few of us have done with them is the reason they have moved the casino front and their link redirects to a .at domain....

I am starting to reach the point where not only do I want to stop this jerk....but also wanna know who it is.....

I have actually sent a few "notes" requesting that they actually grow a pair and SPEAK to me....

AnCam, I also get the normal 5-6-8-10 a day from them....but I get that amount sent to multiple email accounts....

Rick
Universal4

[universal4]

7 more today, 7 more domains....

This guy really needs to be stopped....

It needs to affect his WALLET!!!

Rick
Universal4

[xecutable]

I get them too directly in my spam box of my gmail account. Is everyone getting those, or should I get worried that it's only people involved with gambling portals ... Rick's favorite theory on email databases being sold

[universal4]

I often am fairly careful about going out on limbs..... (I climb out there all the time but do so with open eyes)...lol

No danger of this limb breaking though....I know for a FACT that these spams are going to people all over the world using mailing lists that are not only connected to gambling lists but general lists as well.

I am personally getting these spams in a number of email accounts, MANY of which have no connections whatsoever to gaming.

If in fact the software that downloads from this loser is from a CWC/AE property, then we need to make sure that AE knows how we all feel about this, and quite possibly if a few of these guys lose their affiliate accounts they might actually pay attention....at least for a short time....

Rick
Universal4