Anyone else getting bombarded by SPAM today?

[TheGooner]

Over a 100 in the last hour - all the same sort of format and from about half a dozen casino domains.
I think it actually is an newish affiliate who doesn't realise he's burning these domains.


Some of the domains are millions.com, freecasinobonus.com, specialoffers.com, casino4all.org, millionscasino.com and specialbonuses.com

The sending email address changes but the domains don't. So easy enough to block with some rules.
I deleted most of them - and have put blocking rules in place for the rest.


UPDATE :
Also got one from 4ubonus.com which isn't registered according to whois - so some may be spoofed domains as the spammer learns.

[TheGooner]

Here are some of the spammers affiliate tags

https://au.betatcasino.com/?btag=655...5987B3675535DE
https://betatcasino.com/?btag=655017...5987B3675535DE

which is promoted by "Bring it" Affiliates.
http://bringitaffiliates.com/

I have communicated by their contact-us form ... let's see if they stop.
(if they'd had an email I would have rerouted all the messages back to them so they could enjoy amateur spammer hour!)

[universal4]

Actually it's a light day for me but that is normal. I see less spam on the weekends.

I did see a few more casino related than normal for a Saturday but only a few extra, but I have been real aggressive against some spam operators.

For many months I have noticed a change in patterns from the larger spam operators. They will target a list and then totally slam that list from the same subnets, than tomorrow use another subnet, then the third day another subnet, and so on and so on. They will work this same list from the same subnets over the course of a week, then the same operators move on to new subnets next week, and so on, and so on.

Sorry, but it isn't logical for a single email address to get 50 or 60 emails from a single subnet (within a class c or /26 or /25) in a week's time frame.

If the majority of the 100 or so you got are from mostly different ip classes, then its a purchased spam run on one of the bot networks, which is much harder to stop.

The biggest problem I have seen is that too many POC's (points of contact) for ip addresses have false information up at ARIN/APNIC/LACNIC/RIPE.

Overall, I have found casino related spam to be one of the least amount type of spam I see.

The best way to combat casino spam is forwarding affiliate links to the programs and target the spammers wallet.

Rick
Universal4

[TheGooner]

No reaction yet from the BringIt Affiliate group (registered out of Malta).
Next step (in 24 hours) will be to forward all emails to their casino email inbox via routing rules.

[universal4]

Let us know how it goes for you, and if we can help in any way, don't hesitate to ask.

Rick
Universal4

[Danstrik]

Yep Happen to me to day aswell

[universal4]

After you posted this Paul, I have been keeping an eye out and I also have seen an increase in gaming related spam since that day.

I am also seeing the same kinds of other spam that jumps from subnet to subnet. Why they think it's smart to send 40 or 60 or 80 spams from the same subnet within a 2 or 3 day time frame, then move to a new subnet tomorrow and send the same 40 or 60 or 80 spams, then keep up the same pattern ???

Rick
Universal4

[TheGooner]

I got no response from "Bringit affiliates" back - but they may have done something directly with the spammer?

It's hard to tell because I configured my email to automatically bounce any emails received from those domains - and I have not yet received another batch from a new set .... yet.