spam

[universal4]

This scumbag spammer spams me every single day, and I believe them to be behind numerous other spams that I recieve EVERY SINGLE DAY!!

The domain advertised is xxNOWCASHOUT.COM (remove the xx's)

The whois info:

Registrant [2015907]:
Gary J. Kuhlman jevsicom@gmail.com
35, Pireaus Av
Agios Georgios
DE
4740
CY


Administrative Contact [2015907]:
Gary J. Kuhlman jevsicom@gmail.com
35, Pireaus Av
Agios Georgios
DE
4740
CY
Phone: +357.5642137


Billing Contact [2015907]:
Gary J. Kuhlman jevsicom@gmail.com
35, Pireaus Av
Agios Georgios
DE
4740
CY
Phone: +357.5642137


Technical Contact [2015907]:
Gary J. Kuhlman jevsicom@gmail.com
35, Pireaus Av
Agios Georgios
DE
4740
CY
Phone: +357.5642137


Domain servers in listed order:

NS1.xxNOWCASHOUT.COM 85.159.236.213
NS2.xxNOWCASHOUT.COM 77.247.182.236

Record created on: 2010-04-11 08:55:47.0
Database last updated on: 2010-04-11 10:12:00.917
Domain Expires on: 2011-04-11 08:55:48.0



Additional domains from the same spammer advertised by daily spams also are:
xxNIGHTTHEBEST.COM
xxPLAYCLICKWIN.COM
xxNIGHTCOIN.COM
xxBEIGECASINO.COM

Rick
Universal4

[universal4]

Different whois details from the above domains, but the spam emails are almost identical in layout etc...
xxEXCLUSIVECASINOPROMOTIONS.COM
xxYOURGAMBLING4U.COM
xxGAMERSPROMOTION.COM


The whois info:

Registrant [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY


Administrative Contact [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY
Phone: +1.9057385266


Billing Contact [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY
Phone: +1.9057385266


Technical Contact [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY
Phone: +1.9057385266


Domain servers in listed order:

NS1.xxEXCLUSIVECASINOPROMOTIONS.COM 77.247.179.193
NS2.xxEXCLUSIVECASINOPROMOTIONS.COM 77.247.179.234

Record created on: 2008-10-31 06:42:19.0
Database last updated on: 2009-12-16 09:54:36.43
Domain Expires on: 2010-10-31 06:42:20.0


Rick
Universal4

[universal4]

This spammer will not stop

xxWONGETA.COM

The same whois info as above:

Registrant [2015907]:
Gary J. Kuhlman jevsicom@gmail.com
35, Pireaus Av
Agios Georgios
DE
4740
CY



Rick
Universal4

[universal4]

Well it appears this eamil account is invalid.

Could I have at least one other person file an invalid contact report with Internic please?

The rules state the contact info must be valid, and that the Registrars are REQUIRED to follow up on invalid contact reports.

Unknown user: jevsicom@gmail.com
RCPT TO generated following response:
550-5.1.1 The email account that you tried to reach does not exist.

Rick
Universal4

[universal4]

This spammer will just not stop.

Here are more domains they are using.


xxYOURFLYERSPRO.COM expired
xxCASINOBRONZE.COM
xxNOWCASHOUT.COM
xxWONGETA.COM

Rick
Universal4

[universal4]

And here is one that I think is the same mailer with different whouis info so this could be the start of a new round of domains...
xxRENTCLICKSCOM.COM

Registrant [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY

Administrative Contact [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY
Phone: +1.9057385266

Billing Contact [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY
Phone: +1.9057385266

Technical Contact [1280362]:
dave green starzoneenterprises@gmail.com
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
null
1065
CY
Phone: +1.9057385266

Domain servers in listed order:
NS1.xxRENTCLICKSCOM.COM 77.247.182.60
NS2.xxRENTCLICKSCOM.COM 77.247.180.153


Rick
Universal4

[universal4]

Another one from this very same scumbag

xxBEIGECASINO.COM


Rick
Universal4

[universal4]

It seems this scumbag just doesn't know when to stop spamming.

Almost all of the casino spam I am getting in one of my main accounts is advertising a domain with one of these 2 individuals listed as the contacts...and since the one is bouncing I am filing a report on efvery one of them.

Here are more domains....

xxTHEBESTCOOL.COM
xxNIGHTCOIN.COM
xxNIGHTCHIC.COM

Gary J. Kuhlman jevsicom@gmail.com

xxBESTQUALITYPAPER.COM

dave green starzoneenterprises@gmail.com


Rick
Universal4

[Nandakishore]

Many thanks Rick for this thread. I will report if I find any of the spammers on my accounts. So far I have just deleted those mails without bothering further. I will now follow your practice and report here.

[universal4]

Obviously doing this for every single spam you get would be just too time consuming....but I recognized this pattern fairly quickly....

And every single one of these domains is on the same IP (I have also filed a report with the abuse contact on the ip)

I also tried to email the domain contact and that is when I realized the email was bouncing.

Rick
Universal4

[Renee]

Don't suppose you could post which group this guy is spamming? Might make it easier to find for us aff managers...

[universal4]

This person or group is promoting damn near everyone.....

Each email has a series of links that got to a domain that is nothing but a redirect to a casino using an affiliate link.

For obvious reasons I never posted any of the redirect links here.

The spam from this person has slowed down for me, but I am 100% sure it is mainly because I got the upstream providers involved and proved my case that they were breaking their hosting terms of service.

Due to the sheer volume I was getting that contained so many domains I am sure many others were getting these.

My guess is they cross referenced the email address I used to file the complaints and removed my email addy but (inmyopinion) they had no intention of stopping.

Rick
Universal4

[Renee]

If you get another that has one of our links can you please forward it to me.

Cheers

[universal4]

If you want a few Renee, I can forward a few of the original spams.

But in order to find the affy links, you would actually have to follow some of the links and watch for your properties.

Once I saw the pattern of this particular spammer, I started keeping the emails in their own folder...

Rick
Universal4

[Renee]

Yes please...

[nico84]

I have been spammed since months by CR-Bonus.

[Renee]

I have been spammed since months by CR-Bonus.

Please forward the spam through to me so I can take care of it.

Cheers