Get exclusive CAP network offers from top brands

View CAP Offers

bonus-analyze.com spam

[bsa_pro_ad_space id=2]
  • This topic is empty.
Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • #606478
    supervince
    Member

    I am getting spam with redirects through bonus-analyze.com

    Registrant:
    Domains by Proxy, Inc.

    DomainsByProxy.com
    15111 N. Hayden Rd., Ste 160, PMB 353
    Scottsdale, Arizona 85260
    United States

    Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
    Domain Name: BONUS-ANALYZE.COM
    Created on: 05-Dec-07
    Expires on: 05-Dec-08
    Last Updated on: 05-Dec-07

    Administrative Contact:
    Private, Registration BONUS-ANALYZE.COM@domainsbyproxy.com
    Domains by Proxy, Inc.
    DomainsByProxy.com
    15111 N. Hayden Rd., Ste 160, PMB 353
    Scottsdale, Arizona 85260
    United States
    (480) 624-2599 Fax — (480) 624-2599

    Technical Contact:
    Private, Registration BONUS-ANALYZE.COM@domainsbyproxy.com
    Domains by Proxy, Inc.
    DomainsByProxy.com
    15111 N. Hayden Rd., Ste 160, PMB 353
    Scottsdale, Arizona 85260
    United States
    (480) 624-2599 Fax — (480) 624-2599

    Domain servers in listed order:
    NS27.DOMAINCONTROL.COM
    NS28.DOMAINCONTROL.COM

    Registry Status: clientRenewProhibited
    Registry Status: clientTransferProhibited
    Registry Status: clientUpdateProhibited
    Registry Status: clientDeleteProhibited

    Redirects are going to Grand Mondial, Platinum Play, 7-Sultans, and Royal Vegas

    Here are some of the affiliate links being used.

    xxxhttp://www.platinum-play.com/default.asp?BTag=MS_673700_824830_104054
    xxxhttp://www.7-sultans.com/default.asp?btag=MS_673700_824830_104054
    xxxhttp://www.royalvegas.com/countdown/default.asp?BTag=MS_673700_824830_104054
    xxxhttp://g3.grandmondial.com/en/href.g3?ai=10935_t1_en

    I have been getting a lot of spam emails lately from casinos and usually I don’t have time to do anything about them so I just mark as spam and move on but its starting to get annoying. I would like to find out who is selling these email addresses or who is behind all this so I think I will start posting them here more often.

    Edit: Here are the headers

    Delivered-To: xxxxxxxx@gmail.com
    Received: by 10.100.225.4 with SMTP id x4cs201367ang;
    Mon, 17 Dec 2007 09:20:34 -0800 (PST)
    Received: by 10.142.165.9 with SMTP id n9mr790614wfe.93.1197912033203;
    Mon, 17 Dec 2007 09:20:33 -0800 (PST)
    Return-Path:
    Received: from k2smtpout05-01.prod.mesa1.secureserver.net (k2smtpout05-01.prod.mesa1.secureserver.net [64.202.189.56])
    by mx.google.com with SMTP id h14si5005982wxd.2007.12.17.09.20.32;
    Mon, 17 Dec 2007 09:20:33 -0800 (PST)
    Received-SPF: pass (google.com: domain of bounce@bonus-analyze.com designates 64.202.189.56 as permitted sender) client-ip=64.202.189.56;
    Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce@bonus-analyze.com designates 64.202.189.56 as permitted sender) smtp.mail=bounce@bonus-analyze.com
    Received: (qmail 30325 invoked from network); 17 Dec 2007 17:20:32 -0000
    Received: from unknown (HELO bonus-analyze.com) (72.167.115.144)
    by k2smtpout05-01.prod.mesa1.secureserver.net (64.202.189.56) with ESMTP; 17 Dec 2007 17:20:31 -0000
    Received: from http://www.bonus-analyze.com ([127.0.0.1]) by bonus-analyze.com with Microsoft SMTPSVC(6.0.3790.3959);
    Mon, 17 Dec 2007 10:20:31 -0700
    To: xxxxxxxx@gmail.com
    Subject: =?UTF-8?B?TmV3IEltcHJvdmVkIENhc2lubyBLaXQg?=
    Message-ID: <988de94eef404327d5fac1b690c29bd7@www.bonus-analyze.com>
    Return-Path: bounce@bonus-analyze.com
    Date: Mon, 17 Dec 2007 06:30:06 -0700
    From: “=?UTF-8?B?T3ByYSBXLg==?=”
    Reply-To: reply@bonus-analyze.com
    MIME-Version: 1.0
    X-Mailer-LID: 6,8
    X-Mailer-SID: 16
    X-Mailer-Sent-By: 1
    Content-Type: text/html; charset=”UTF-8″
    Content-Transfer-Encoding: 8bit
    X-OriginalArrivalTime: 17 Dec 2007 17:20:31.0935 (UTC) FILETIME=[2099C4F0:01C840D1]

    #756737
    golda
    Member

    I don’t think that site is even up?

    #756740
    supervince
    Member

    There is no home page. It was registered on December 5th and it appears they are just using it for redirects. Since they only registered it for 1 year then they probably expect it to get blacklisted soon and will use another domain when that happens.

    #756743
    Anonymous
    Inactive

    If it is used for re-directing only, then it really doesn’t matter if it is ever blacklisted.

    #756747
    supervince
    Member

    It doesn’t matter if its blacklisted by the search engines. What I meant was that it will eventually be blacklisted by the major email programs such as yahoo, aol, gmail, etc and any emails from that domain will automatically be filtered.

    #756750
    Anonymous
    Inactive

    @Rob472 148405 wrote:

    It doesn’t matter if its blacklisted by the search engines. What I meant was that it will eventually be blacklisted by the major email programs such as yahoo, aol, gmail, etc and any emails from that domain will automatically be filtered.

    Ah! Good point.

Viewing 6 posts - 1 through 6 (of 6 total)