bonus-analyze.com spam

I am getting spam with redirects through bonus-analyze.com

Registrant:
Domains by Proxy, Inc.

DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BONUS-ANALYZE.COM
Created on: 05-Dec-07
Expires on: 05-Dec-08
Last Updated on: 05-Dec-07

Administrative Contact:
Private, Registration [email protected]
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2599

Technical Contact:
Private, Registration [email protected]
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2599

Domain servers in listed order:
NS27.DOMAINCONTROL.COM
NS28.DOMAINCONTROL.COM

Registry Status: clientRenewProhibited
Registry Status: clientTransferProhibited
Registry Status: clientUpdateProhibited
Registry Status: clientDeleteProhibited

Redirects are going to Grand Mondial, Platinum Play, 7-Sultans, and Royal Vegas

Here are some of the affiliate links being used.

xxxhttp://www.platinum-play.com/default.asp?BTag=MS_673700_824830_104054
xxxhttp://www.7-sultans.com/default.asp?btag=MS_673700_824830_104054
xxxhttp://www.royalvegas.com/countdown/default.asp?BTag=MS_673700_824830_104054
xxxhttp://g3.grandmondial.com/en/href.g3?ai=10935_t1_en

I have been getting a lot of spam emails lately from casinos and usually I don’t have time to do anything about them so I just mark as spam and move on but its starting to get annoying. I would like to find out who is selling these email addresses or who is behind all this so I think I will start posting them here more often.

Edit: Here are the headers

Delivered-To: [email protected]
Received: by 10.100.225.4 with SMTP id x4cs201367ang;
Mon, 17 Dec 2007 09:20:34 -0800 (PST)
Received: by 10.142.165.9 with SMTP id n9mr790614wfe.93.1197912033203;
Mon, 17 Dec 2007 09:20:33 -0800 (PST)
Return-Path:
Received: from k2smtpout05-01.prod.mesa1.secureserver.net (k2smtpout05-01.prod.mesa1.secureserver.net [64.202.189.56])
by mx.google.com with SMTP id h14si5005982wxd.2007.12.17.09.20.32;
Mon, 17 Dec 2007 09:20:33 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 64.202.189.56 as permitted sender) client-ip=64.202.189.56;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 64.202.189.56 as permitted sender) [email protected]
Received: (qmail 30325 invoked from network); 17 Dec 2007 17:20:32 -0000
Received: from unknown (HELO bonus-analyze.com) (72.167.115.144)
by k2smtpout05-01.prod.mesa1.secureserver.net (64.202.189.56) with ESMTP; 17 Dec 2007 17:20:31 -0000
Received: from http://www.bonus-analyze.com ([127.0.0.1]) by bonus-analyze.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 17 Dec 2007 10:20:31 -0700
To: [email protected]
Subject: =?UTF-8?B?TmV3IEltcHJvdmVkIENhc2lubyBLaXQg?=
Message-ID: <[email protected]>
Return-Path: [email protected]
Date: Mon, 17 Dec 2007 06:30:06 -0700
From: “=?UTF-8?B?T3ByYSBXLg==”
Reply-To: [email protected]
MIME-Version: 1.0
X-Mailer-LID: 6,8
X-Mailer-SID: 16
X-Mailer-Sent-By: 1
Content-Type: text/html; charset=”UTF-8″
Content-Transfer-Encoding: 8bit
X-OriginalArrivalTime: 17 Dec 2007 17:20:31.0935 (UTC) FILETIME=[2099C4F0:01C840D1]