Help.......

[mojo]

The people are vicious. I am getting about 200 mails an hour. Literally thousands. All identical except for the header and fictious senders names. I have successfully blocked them in the past but they are baaaackk.
Any help is appreciated to rid them once and for all.

Thanks, Mojo

Here is one header. The subject line is always the same: Good Luck!

From ithomason@maeroa.school.nz Wed Mar 21 13:17:10 2007
Received: from 151-45-46 (ppp83-237-251-64.pppoe.mtu-net.ru [83.237.251.64])
by host5.successfulhosting.com (8.12.11.20060614/8.12.10) with ESMTP id l2LHH8xA024726
for <webmaster@gamblingmojo.com>; Wed, 21 Mar 2007 13:17:10 -0400
Received: from 202.89.50.51 (HELO smtp02.mailwatch.co.nz)
by gamblingmojo.com with esmtp (FZ(D8+2A: ;22RYJ)
id C37<*U-2F=''S-63
for webmaster@gamblingmojo.com; Wed, 21 Mar 2007 17:22:53 -0300
From: "Carlton Wheeler" <ithomason@maeroa.school.nz>
To: <webmaster@gamblingmojo.com>
Subject: Good Luck!
Date: Wed, 21 Mar 2007 17:22:53 -0300
Message-ID: <01c76bdd$8eccf650$6c822ecf@ithomason>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C76BF6.B41A2E50"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2663
Importance: Normal
Status: R

[aksana]

You may add it to your email filter on your server. For example, add such filter: all emails with the subject "Good luck!" must be blocked.

[mojo]

Thanks aksana. That is what I did the first time and it worked. It has been some months and they are back with a vengence. They appeared in the spam folder that my server set up this morning. I just went out for an hour or so and they have moved into my inbox. "Good Luck!" is set in my filter to be deleted but they have found a way around it. Here is the numbers:

Inbox 46
Spam 95
--DELETE-- 2

All "Good Luck!"

I would like to know who they are and what in the world is the possible motive for this.

Greek?

Mojo

[mojo]

It's been 5 mins...

Spam
189 unread / 190 messages / 312KB

[mojo]

In the body of the mail I hovered but did not click. Here is the address:

*warning* do not go to this address****

xxxhttp://simpehr.com/micro/26

I am not knowledgeable enough to go to that and do not recommend anyone else to unless you know how to protect yourself.


Mojo

[mojo]

This is "Royal Red Casino" and I have gotten over 2000 mails today. The phone is disconnected. All the links lead to download. We need to address this.


Mojo

[pgaming]

I will have a look at my server quickly.

greek39

[mojo]

Who is

Domain Name.......... simpehr.com
Creation Date........ 2007-02-11
Registration Date.... 2007-02-11
Expiry Date.......... 2008-02-11
Organisation Name.... brandon hathcock
Organisation Address. 2816 evergreen church road
Organisation Address.
Organisation Address. adel
Organisation Address. 31620
Organisation Address. GA
Organisation Address. UNITED STATES

Admin Name........... brandon hathcock
Admin Address........ 2816 evergreen church road
Admin Address........
Admin Address........ adel
Admin Address........ 31620
Admin Address........ GA
Admin Address........ UNITED STATES
Admin Email.......... hilarcilont@yahoo.com
Admin Phone.......... +1.2295497995
Admin Fax............

Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domain.tech@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax.............
Name Server.......... ns1.embankmend.com
Name Server.......... ns2.rembassy.com

[pgaming]

Try blocking the IP with your filter wait a hour or two. The spam is coming from Russia and is blacklisted. This may not be 100% accurate given the urgency of the matter.

Here's a link xxhttp://www.robtex.com/rbls/83.237.251.64.html

Spamhaus and Sorbs are reporting the IP as being spam. The are changing the message ID I think. This is how they are getting through. Block the servers as well.

Best I can do for now. I checked my own I have ten not enough.

greek39

[mojo]

Thank you greek. The blocking that had worked in the past is no longer effecitive. I was annoyed enough and brave enough to hit the download. It went to Phoenecian. I will pm Renee.

This action is not something we need in this industry right now. I have 57 more emails.

Mojo

[pgaming]

No problem mojo not enough time to fully investigate. What i normally do is shut down the email account. This gives me a bit of time to investigate it further. Another plus is the email bounces giving the spammer a negative return. Must be quick on the draw using this approach.

Let Renee look into it she has been excellent at handling these issues.

Good Luck

greek39

[mojo]

Well, I got 650 more this morn but Renee is on it. Not a one since. I didn't want to just block them again, they need to be stopped. I'm sure I wasn't the only one. Thanks for checking greek and yes.. Renee rocks!


Mojo

[pgaming]

Sorry Mojo I couldn't have been of more assistance, just not enough time. This fellow will likely jump around quite a bit from one brand to another. Pin him down and report to server, host and the other agencies I have listed before.

Good Luck

greek39

[mojo]

Correct greek. They have moved to Mint Las Vegas and Jupiter Club. I have reported it to Referspot. Tomorrow it may be something else. I have not gotten any more Good Lucks...yet.

Mojo

[bb1web]

Sorry Mojo I couldn't have been of more assistance, just not enough time

Hi all,

I know Greek has had his share of conflicts at some sites. I cannot guess whether he was right or wrong..... but I did want to take time out to point out ..... how helpful he has been to nearly anyone in need of his knowledgeable assistance.

I think this buys a lot. I know personally that he loses a lot of time working on his own situation ...... to better that of others.

That should not go un-applauded.

Thank you Greek for taking time to care for others at the cost of your own sake. Whether right or wrong in some instances .... I cannot and do not ignore your selflessness in such matters.

[mojo]

Boy you got that right bb. I have to say that greek has always been there for me. There is a thread another place here where you can see how he devotes alot of time helping others. I admit I selfishly called upon him earlier in this thread (sorry greek).

As far as other places go and contraversies, it is often found that one persons experiences quite differ with others. What works for some does not bide well for others. It's particulary true with Affiliate programs. Some that simply do not work for me work very well for others. It's all quite natural to have conflicts.

I would personally like to see more tolerance as we work together for the industry as a whole.

Thank you for pointing this out and I most definatly appriciate greek!!

Regards,
Mo