The "magic" spammer (Top Game Casino Spam)

[universal4]

Who the hell is this "magic" spammer?

Every few hours I check my email I have a ton of spam advertising a different "magic" domain....and the domains all have a Royal VIP Casino front on them.

The casino fron does NOT have the software logo on it so I do not know what they are using and I do not immediately recognize the 1 or 2 slots listed on the home page.

Over the last few days I have gotten in the neighborhood of 400-500 spams from this piece of scum....and I have checked them at random and have seen close to a dozen domains....

This scumbag is really getting on my nerves....

The domains all have the word magic in them.

Here is just one example of a domain. (I added xx's)
xxmagicbenefice.com

Domain Name: xxMAGICBENEFICE.COM

Creation Date: 19-Aug-2010
Modification Date: 19-Aug-2010
Expiration Date: 19-Aug-2011

Domain servers in listed order:
ns1.nspamns.com
ns2.nspamns.com
ns3.nspamns.com

Registrant:
Vladimir Stepanischev stepanishevvv@mail.ru
Private person
Serafimovicha, 15, 1
Shakhty, 346512
RUSSIAN FEDERATION
+7.8636238481


Billing Contact:
Vladimir Stepanischev stepanishevvv@mail.ru
Serafimovicha, 15, 1
Shakhty, 346512
RUSSIAN FEDERATION
+7.8636238481


Administrative Contact:
Vladimir Stepanischev stepanishevvv@mail.ru
Private person
Serafimovicha, 15, 1
Shakhty, 346512
RUSSIAN FEDERATION
+7.8636238481


Technical Contact:
Vladimir Stepanischev stepanishevvv@mail.ru
Private person
Serafimovicha, 15, 1
Shakhty, 346512
RUSSIAN FEDERATION
+7.8636238481



This guy need to be hung up by the short hairs....

Rick
Universal4

[universal4]

Well I logged into an email account and found about a dozen more spams advertising a few more "magic" domains.

So I visited the sites, viewed the source, grabbed the download javascript location, and tyhen downloaded the javascript code so I could view it.

I ran this test on 2 or 3 domains and sure enough they are all the same (I already knew this but you guys know I like to verify facts before posting unless I specifically state it is speculation, but the following is NOT speculating)

This scumbag is spamming (predominantly non-casino email accounts) and he is spamming for a Top Game Casino.

The casino being spammed is Royal Kings

The affiliate code of the spammer is
xxhttp://topgame-online.com/gs2c/royalkings/download/?sourceID=1018327

Performing whois lookups of some of the domains randomly shows they were created YESTERDAY!!

I request that someone from Top Game stop this crap immediately....

Asking the scumbag to remove my email account alone is certainly NOT enough since I have no intention or providing all the email accounts I am recieving this crap at....and failure to act will certasinly show the policy of how spammers are handled....

Researching the email headers shows hundreds of mailers and ip addresses so this scumbag has purchased spamming services from someone who uses a fairly large bot network.

This is the kind of stuff that makes all gambling affiliates look bad....

Rick
Universal4

[hakank]

Good work Rick!

I think it's going to take a while before we or anybody can stop him though..

He has as you wrote probably a large mailinglist with thousands of emails, for me it started when I posted my email in a post here on GPWA (I think it was here..) but I "masked" it with [a) instead of @ but it got caught by someones email spider anyway I guess.

/Hakan

[FictionNet]

I just got hit by the same scumbag - again for Royal Kings. The link kicked out a virus warning too.

Pick the winning slots game of the day.

http://www.snatch-casino.ru

[LiveCasinoPartners]

Great job Rick! You went above and beyond on this one. Our industry can't afford to have spammers. These are the types of actions that make other webmaster consider online gaming a "bad neighborhood".