Results 1 to 5 of 5
  1. #1
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,096
    Thanks
    2,251
    Thanked 7,943 Times in 5,010 Posts

    Default Grand Palace Casino Spam

    Anyone else get this spam today?

    I have one email account that has gotten about 40 or 50 so far....all come from different mailer, all have unique header and from what I have seen unique sending ip's...

    Most if not all point at xxhttp://cabaretrougecasino.com/ but all the artwork shows as Grand Palace Casino and it appears to be a playtech although I have not downloaded te software to verify that.

    The site is hosted on the following ip
    46.36.35.175

    The domain whois info is as follows:

    egistrant Contact:
    Eugenia Toscani
    Eugenia Toscani pico@cabaretrougecasino.com
    +39.03546611605 fax: +39.03546611605
    Vicolo Tre Marchetti 23
    Nervesa Della Battaglia TV 31040
    IT

    Administrative Contact:
    Eugenia Toscani pico@cabaretrougecasino.com
    +39.03546611605 fax: +39.03546611605
    Vicolo Tre Marchetti 23
    Nervesa Della Battaglia TV 31040
    IT

    Technical Contact:
    Eugenia Toscani pico@cabaretrougecasino.com
    +39.03546611605 fax: +39.03546611605
    Vicolo Tre Marchetti 23
    Nervesa Della Battaglia TV 31040
    IT

    Billing Contact:
    Eugenia Toscani pico@cabaretrougecasino.com
    +39.03546611605 fax: +39.03546611605
    Vicolo Tre Marchetti 23
    Nervesa Della Battaglia TV 31040
    IT

    Registration Service Provider:
    name: Bizcn

    DNS:
    ns1.ycasdes.ru
    ns2.ycasdes.ru

    Created: 2013-05-14
    Expires: 2014-05-14

    Registrar: BIZCN.COM, INC.
    Whois Server: whois.bizcn.com
    Creation Date: 14-MAY-2013
    Updated Date: 14-MAY-2013
    Expiration Date: 14-MAY-2014


    OF special note:
    I have already asked for a manual remove by email and instead of being removed I was bombarded with more spam.....

    I tried to file a report at https://partner.r01.ru/contact_admin.khtml on the name server provider but I will admit that the Russian language and my keyboard are not on speaking terms....so I kinda gave up since I saw there was a hammer within arm distance....

    Rick
    Universal4

  2. #2
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,096
    Thanks
    2,251
    Thanked 7,943 Times in 5,010 Posts

    Default

    Did a bit more digging.

    I thought I recognized the logo...

    Either someone stole the logo and is using it without permission, or they have a white label/templated site of Grand Parker Casino.

    I don't have any direct contacts with Revenue Jet, but I do think they might be happy about someone stealing the logo like that. I have sent an email to management at the casino as well as affiliates @ revenuejet.

    Rick
    Universal4

  3. #3
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,096
    Thanks
    2,251
    Thanked 7,943 Times in 5,010 Posts

    Default

    I wonder if Revenue Jet appreciates that this person thought it was humorous to send traffic through
    Cabaret Rouge Casino.

    Rick
    Universal4

  4. #4
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Default

    Hello Rick,

    Quote Originally Posted by universal4
    Most if not all point at xxhttp://cabaretrougecasino.com/ but all the artwork shows as Grand Palace Casino and it appears to be a playtech although I have not downloaded te software to verify that.
    xxcabaretrougecasino.com is gone.

    Quote Originally Posted by universal4
    The site is hosted on the following ip
    46.36.35.175
    Under this ip now one (other) site is located: xxibonusmagicfestival.com

    Lazar Mauer
    Belgrad rkp. 84
    HU-9736 Csepreg
    Tel. +36.94697755
    grunow@ibonusmagicfestival.com

    This email spam was sent out: liamon.com/?address=blah&messageID=121806

    The good news: ibonusmagicfestival.com is gone too.


    Leopold
    Last edited by universal4; 17 June 2013 at 10:13 am. Reason: obsfucate links

  5. #5
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,096
    Thanks
    2,251
    Thanked 7,943 Times in 5,010 Posts

    Default

    That one seems to be down also now Leopold.

    Revenue Jet was made aware of the original issue, so it could be that they helped get this taken down.

    Rick
    Universal4

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •