Rushmore email spam trick

[Caruso]

I just received an email from...myself.

The sender field is my own (personal) email (the details I've erased). I don't know how they do this, nor for that matter how they got my email.

However, more to the point is: why is Rushmore playing these tricks?





(Don't click on the image, or Imageshack will send you a load of crap)

[universal4]

It is likely NOT Rushmore but an affiliate.

There are a number of mailing programs on the market that can insert the recipients email in the senders section as it sends the mail.

Sadly technology allows this and it's too bad.

Rick
Universal4

[matted]

You can check the links in the email... Then email your aff manager with the link and remind him there is a no spam policy and you wish the offending account closed.

[Caruso]

Yes, it's an affiliate. I clicked reply, and lo and behold, I didn't end up talking to myself, but to:

player@vegastreasurechest.com

xxxhttp://www.vegastreasurechest.com/

Scroll down a bit:

"GPWA approved portal".

(It's also "eCOGRA approved", but that's obviously discountable rubbish.)

Anyone know this "GPWA approved" character? Can we ask him why he's doing this, and how he got my email?

And, for that matter, how an affiliate with the ethics of an alley cat got "GPWA approval"?

[JeterForHOF]

This is bad!

[universal4]

The problem is if he forged the sender the reply to could have been fake also.

This could mean the the reply to address is not the true sender but someone who could be accused incorrectly. (it might be the sender but might not)

The affiliate id is the most likely culprit....

Rick
Universal4

[Caruso]

I don't buy that the given sender ID is faked.

This is the header info:

"Received: from vegastreasurechest.com ([216.15.183.117]) by SNT0-MC4-F2.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 28 Sep 2009 15:46:11 -0700
Reply-To: player@vegastreasurechest.com"

The link code is:

xxxhttp://www.rushmoreonline.com/a/b5124/-cn-a16907

What is the GPWA stance on this? Presumably "GPWA approved" warrants at least a note to "Vegas Treasure Chest" to explain himself?

[Caruso]

The account number is identical in the affiliate ID on his site to the number in the link in the mail - a16907. I've checked some other sites to verify that these numbers are unique, and they obviously are.

No question it came from Mr. Vegas Treasure Chest. Pretty serious offence, spoofing an addy on top of the spam, don't we agree?

[Webzcas]

Caruso,

Contact a rushmore rep with that tag, or failing that I will get one to look at it. The affiliate should have his account closed and hopefully, if the affiliate is a gpwa private member, they will let Michael know who he/she is.

[LuckyClickClub]

Caruso That's a technique used by spammers. you can read about this at

http://mail.google.com/support/bin/a...n&answer=50200
http://discussions.apple.com/thread....39412&tstart=0

[quote=Caruso;559513]I just received an email from...myself.

The sender field is my own (personal) email (the details I've erased). I don't know how they do this, nor for that matter how they got my email.

[universal4]

Caruso,

The other research you did by looking at the header, and verifying the affiliate id matches links on the site does certainly look like you verified the source of the email. (headers etc can be forged but in this case it appears it isn't)

Like was stated above, contact a Rushmore rep with your findings.

Rick
Universal4

[Rushmore Ben]

Hi,

Now that you posted the affiliate ID, I have contacted the affiliate and told him to cease with the spam immediately.

Thanks

Ben

I just received an email from...myself.

The sender field is my own (personal) email (the details I've erased). I don't know how they do this, nor for that matter how they got my email.

However, more to the point is: why is Rushmore playing these tricks?





(Don't click on the image, or Imageshack will send you a load of crap)

[pgaming]

I have contacted the affiliate and told him to cease with the spam immediately.

Why not shut him down Ben kick him out permanently. Its' up to you but he will be back to spam another day.

Thanks anyway for taking some action.

greek39

[Caruso]

Now that you posted the affiliate ID, I have contacted the affiliate and told him to cease with the spam immediately.

Gee, talk about decisive action. LMAO.

Will you also tell him to stop spoofing emails?

Will you ask him where he got my address?

I suppose he'll remain "GPWA approved"? What kind of value does that leave "GPWA approved" status? I guess I won't be chasing that accolade any time soon. My loss.

Ah, whatever. Why am I wasting my time.

[Webzcas]

Caruso has got a valid point Ben. The affiliates account should be locked down. Michael should also be made aware if it is a GPWA member.

[Caruso]

Caruso has got a valid point Ben. The affiliates account should be locked down. Michael should also be made aware if it is a GPWA member.

I see your member (pun noted) and raise you an "approved portal":

http://certify.gpwa.org/verify/vegastreasurechest.com/

An investigative team headed by GPWA's Fair Gaming Advocate has determined that this site:

Does not send spam email.

Acts professionally and respectfully in its business activities.

If you believe this site is not in compliance with any of these Seal of Approval requirements, please report your observations directly to the GPWA's Fair Gaming Advocate. All reports are promptly investigated.

**AHEM**

I suppose "Does not spoof emails" isn't there because it's too ridiculous to list and goes without saying.

Far from professional and respectful, this is a manipulative, sneaky and unethical practice. If portals that do this crap can be "approved", it really makes a farce of the whole thing. As with any other "seal", of course.

[CityGuard]

xxxhttp://www.vegastreasurechest.com/

Scroll down a bit:

"GPWA approved portal".

(It's also "eCOGRA approved", but that's obviously discountable rubbish.)

Anyone know this "GPWA approved" character? Can we ask him why he's doing this, and how he got my email?

And, for that matter, how an affiliate with the ethics of an alley cat got "GPWA approval"?

Thanks for raising the issue that this person is spamming. I'll raise this with the webmaster in question and bring this to the seal review team for a vote.

I don't buy that the given sender ID is faked.

This is the header info:

"Received: from vegastreasurechest.com ([216.15.183.117]) by SNT0-MC4-F2.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 28 Sep 2009 15:46:11 -0700
Reply-To: player@vegastreasurechest.com"

The link code is:

xxxhttp://www.rushmoreonline.com/a/b5124/-cn-a16907

What is the GPWA stance on this? Presumably "GPWA approved" warrants at least a note to "Vegas Treasure Chest" to explain himself?

The account number is identical in the affiliate ID on his site to the number in the link in the mail - a16907. I've checked some other sites to verify that these numbers are unique, and they obviously are.

No question it came from Mr. Vegas Treasure Chest. Pretty serious offence, spoofing an addy on top of the spam, don't we agree?

...they will let Michael know who he/she is.

Based on these details it does appear that the person/company that sent the email is the same as the person/company running Vegas Treasure Chest. We're able to identify the GPWA member connected with this site based on the information already available. The sites are listed in his GPWA member profile (here) and his nickname is "TreasureChest".

I suppose he'll remain "GPWA approved"? What kind of value does that leave "GPWA approved" status? I guess I won't be chasing that accolade any time soon. My loss.

We've revoked a number of GPWA Approved Portal seals since the program was created, and intent to keep addressing any violations that arise. The webmaster was very responsive to feedback and suggestions when he initially joined, and there was no indication or any reason to believe he was spamming -- which we did check at the time. There are over 800 sites approved now, and sometimes what once was run well changes.

The seal verification page itself contains an address for reporting any issues. Since this thread was started less than 24 hours ago and the webmaster in question was identified even more recently than that, and I hadn't seen this thread yet, and the issue wasn't reported to the seal reporting address, we weren't able to act on it yet. We'll treat this thread as a formal violation report.

[CityGuard]

As the start of the process I've asked the webmaster in question for any details he would like to note about what happened. Here is a copy of the PM I sent:

Hi,

There has been a recent report alleging that you've engaged in email spam. I am following up with you about this report because the GPWA Approved Portal seal you were previously awarded requires continued adherence to a set of professional responsibility standards including not sending email spam.

Details of the spamming allegations are available at https://www.gpwa.org/forum/rushmore-...ck-183663.html.

The review team will be examining whether the seal on www.vegastreasurechest.com should be removed. We would like to give you an opportunity to make a statement about the allegations prior to the vote being taken. Please let me know if there is any information you'd like the reviewers to take into account beyond what is included in the thread.


Yours,
Steven

[Caruso]

Fair enough, thank you.

I think as equally disreputable as the spamming is the address spoofing. Spam is irritating and unacceptable, but spoofing addies is plain crappy.

I'd also like to know how he got my address to begin with. I've never used his site, so he can only have got it from a list somewhere.

[pgaming]

I'd also like to know how he got my address to begin with. I've never used his site, so he can only have got it from a list somewhere.

Likely

Look like mirror sites to me

vegastreasurechest dot com

vegastreasurechest dot net

greek39