Spam Received

[FictionNet]

HTML mailer came from jackpots@private-slots.com

Promoting Phoenician - here's the source code:

Return-path: <wwwrun@emarsys.net>
Envelope-to: removed
Delivery-date: Mon, 28 Jun 2010 12:14:25 +0100
Received: from [212.159.7.102] (helo=mx.pcl-ipin03.plus.net)
by inmx04.plus.net with esmtp (PlusNet MXCore v2.00) id 1OTCID-0006zF-J0
for removed; Mon, 28 Jun 2010 12:14:25 +0100
Received-SPF: None identity=pra; client-ip=85.125.87.224;
receiver=mx.pcl-ipin03.plus.net;
envelope-from="wwwrun@emarsys.net";
x-sender="jackpots@private-slots.com";
x-conformance=sidf_compatible
Received-SPF: SoftFail identity=mailfrom; client-ip=85.125.87.224;
receiver=mx.pcl-ipin03.plus.net;
envelope-from="wwwrun@emarsys.net";
x-sender="wwwrun@emarsys.net";
x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=85.125.87.224;
receiver=mx.pcl-ipin03.plus.net;
envelope-from="wwwrun@emarsys.net";
x-sender="postmaster@pmta87224.emsmtp.com";
x-conformance=sidf_compatible
X-SBRS: 0.0
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AoTzABMhKExVfVfgZGdsb2JhbAB8AUYKAYFMhAuHRoQSjDEIJQ oJDyIEARiwdoEajFABBIUk
X-BV-Spam-Flag: Yes
X-IronPort-AV: E=McAfee;i="5300,2777,6026"; a="354665108"
X-IronPort-AV: E=Sophos;i="4.53,496,1272841200";
d="scan'208,217";a="354665108"
Received: from pmta87224.emsmtp.com ([85.125.87.224])
by mx.pcl-ipin03.plus.net with ESMTP; 28 Jun 2010 12:14:25 +0100
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=key1; d=private-slots.com;
h=To:Subject:From:MIME-Version:Content-Type:Message-Idate; i=jackpots@private-slots.com;
bh=Z7vfBCtoLRVjuij/mXLZmpyvIpQ
b=BV+Ve2XJzw9wT+C4WI+KuJdLfiC9wuRagz8OFmVAyW/1Ad2CNJiWGo1muKPlxx4xBjVgBpCbQz6h
rKe25p5oHWCmi7KSlSzbG+jX0wFjo+1qsODBFrhTp4g7HV0Zh/U6
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=key1; d=private-slots.com;
b=cuUQ23BQf0VkdjUtTBlV0TzQNVwjXC5Yet3iJXz7jTKuvK4o bb1MpCYdNrnOcOQv1DusrV43I/bd
Q6MYZPjEtuEOWCAxkItizfjLPiEY67U9Mva461SQSsvcGdF9xN ZG;
Received: from (91.194.249.230) by pmta87224.emsmtp.com (PowerMTA(TM) v3.5r11) id h522120k83sk for <removed>; Mon, 28 Jun 2010 13:14:24 +0200 (envelope-from <wwwrun@emarsys.net>)
To: <removed>
X-Mailer: class SMTPMail
From: "Magic Bonus" <jackpots@private-slots.com>
MIME-Version: 1.0
X-EMarSys-Identify: 129145407_204948_195759
X-EMarSys-Environment: wwwrun
Message-Id: <4C288410.00000C17@pmta87224.emsmtp.com>
Date: Mon, 28 Jun 2010 13:14:24 +0200
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: free bonus cash of $7200 + 250%
X-Antivirus: AVG for E-mail 9.0.830 [271.1.1/2967]
Content-Type: multipart/mixed; boundary="=======AVGMAIL-28A413A6======="


- - -

It links to http://info.private-slots.com/u/nrd....759_204948_1_1

which redirects to

http://promo.c-rewards.com/splash/phc/en/sp5/

[universal4]

The redirect has been changed.

It now redirects to:
http://crowneurope.affeurope.com/cgi...&profile=lucen

It could mean that RA contacted the affiliate after seeing the post, or it could be that the affiliate saw the post and knew that Renee WOULD react to it and their affiliate account may have been jeopardized, so they changed it.

Now that it goes where it does...who knows....

Rick
Universal4

[Renee]

Well considering I was asleep, unless I'm really that talented and can work while sleeping, it's definitely not that we contacted them...

Either way, this link tells me nothing: http://promo.c-rewards.com/splash/phc/en/sp5/

I could draw an affiliate out of a hat with that.

Perhaps next time you should email me... I think sometimes you guys shoot yourself in the foot by posting this stuff. No offense.

Sorry we couldn't catch him guys.
Maybe next time.

[arkyt]

Just got yet another SPAM from private-slots.com - this one is promoting silver oak casino

silveroakcasino.com/?affid=12451 / Ace Revenue

info.private-slots.com/u/nrd.php?p=MVEF1Sp1qv_121505_207270_1_3

[Renee]

Silver Oak is not part of the Casino Rewards group.

[arkyt]

Silver Oak is not part of the Casino Rewards group.

:P

I knew that, but had done a search on this post and assumed it was in the unethical forum and not the CR forum - sorry about that.

[graham]

UPDATE: Renee msgd back and is looking into it.