Online Casino

[supervince]

I am getting spam with redirects through bonus-analyze.com

Registrant:
Domains by Proxy, Inc.

DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BONUS-ANALYZE.COM
Created on: 05-Dec-07
Expires on: 05-Dec-08
Last Updated on: 05-Dec-07

Administrative Contact:
Private, Registration BONUS-ANALYZE.COM@domainsbyproxy.com
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2599

Technical Contact:
Private, Registration BONUS-ANALYZE.COM@domainsbyproxy.com
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2599

Domain servers in listed order:
NS27.DOMAINCONTROL.COM
NS28.DOMAINCONTROL.COM

Registry Status: clientRenewProhibited
Registry Status: clientTransferProhibited
Registry Status: clientUpdateProhibited
Registry Status: clientDeleteProhibited

Redirects are going to Grand Mondial, Platinum Play, 7-Sultans, and Royal Vegas

Here are some of the affiliate links being used.

xxxhttp://www.platinum-play.com/default.asp?BTag=MS_673700_824830_104054
xxxhttp://www.7-sultans.com/default.asp?btag=MS_673700_824830_104054
xxxhttp://www.royalvegas.com/countdown/default.asp?BTag=MS_673700_824830_104054
xxxhttp://g3.grandmondial.com/en/href.g3?ai=10935_t1_en

I have been getting a lot of spam emails lately from casinos and usually I don’t have time to do anything about them so I just mark as spam and move on but its starting to get annoying. I would like to find out who is selling these email addresses or who is behind all this so I think I will start posting them here more often.

Edit: Here are the headers

Delivered-To: xxxxxxxx@gmail.com
Received: by 10.100.225.4 with SMTP id x4cs201367ang;
Mon, 17 Dec 2007 09:20:34 -0800 (PST)
Received: by 10.142.165.9 with SMTP id n9mr790614wfe.93.1197912033203;
Mon, 17 Dec 2007 09:20:33 -0800 (PST)
Return-Path:
Received: from k2smtpout05-01.prod.mesa1.secureserver.net (k2smtpout05-01.prod.mesa1.secureserver.net [64.202.189.56])
by mx.google.com with SMTP id h14si5005982wxd.2007.12.17.09.20.32;
Mon, 17 Dec 2007 09:20:33 -0800 (PST)
Received-SPF: pass (google.com: domain of bounce@bonus-analyze.com designates 64.202.189.56 as permitted sender) client-ip=64.202.189.56;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce@bonus-analyze.com designates 64.202.189.56 as permitted sender) smtp.mail=bounce@bonus-analyze.com
Received: (qmail 30325 invoked from network); 17 Dec 2007 17:20:32 -0000
Received: from unknown (HELO bonus-analyze.com) (72.167.115.144)
by k2smtpout05-01.prod.mesa1.secureserver.net (64.202.189.56) with ESMTP; 17 Dec 2007 17:20:31 -0000
Received: from http://www.bonus-analyze.com ([127.0.0.1]) by bonus-analyze.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 17 Dec 2007 10:20:31 -0700
To: xxxxxxxx@gmail.com
Subject: =?UTF-8?B?TmV3IEltcHJvdmVkIENhc2lubyBLaXQg?=
Message-ID: <988de94eef404327d5fac1b690c29bd7@www.bonus-analyze.com>
Return-Path: bounce@bonus-analyze.com
Date: Mon, 17 Dec 2007 06:30:06 -0700
From: “=?UTF-8?B?T3ByYSBXLg==”
Reply-To: reply@bonus-analyze.com
MIME-Version: 1.0
X-Mailer-LID: 6,8
X-Mailer-SID: 16
X-Mailer-Sent-By: 1
Content-Type: text/html; charset=”UTF-8″
Content-Transfer-Encoding: 8bit
X-OriginalArrivalTime: 17 Dec 2007 17:20:31.0935 (UTC) FILETIME=[2099C4F0:01C840D1]

[golda]

I don’t think that site is even up?

[supervince]

There is no home page. It was registered on December 5th and it appears they are just using it for redirects. Since they only registered it for 1 year then they probably expect it to get blacklisted soon and will use another domain when that happens.

[Anonymous]

If it is used for re-directing only, then it really doesn’t matter if it is ever blacklisted.

[supervince]

It doesn’t matter if its blacklisted by the search engines. What I meant was that it will eventually be blacklisted by the major email programs such as yahoo, aol, gmail, etc and any emails from that domain will automatically be filtered.

[Anonymous]

@Rob472 148405 wrote:

It doesn’t matter if its blacklisted by the search engines. What I meant was that it will eventually be blacklisted by the major email programs such as yahoo, aol, gmail, etc and any emails from that domain will automatically be filtered.

Ah! Good point.

[Author]

Posts