Get exclusive CAP network offers from top brands

View CAP Offers

CPays / Spammers / 21 Magic

[bsa_pro_ad_space id=2]
  • This topic is empty.
Viewing 15 posts - 1 through 15 (of 18 total)
  • Author
    Posts
  • #596683
    Anonymous
    Inactive

    Hey Greek,

    I opened up this thread for you to comment in.

    Everyone: I truly believe that CPays is still entrenched in BH tactics despite their ‘meetings’. If anyone can help decompile the 21Magic casino and pull out it’s Playtech info, that would be most helpful and damaging information.

    So far (Historical Rundown):

    1. Amber Coast was downloaded and all IP’s were logged and tracked.
    2. 21 Magic was downloaded and all IP’s were logged and tracked.

    ** Found: Significant TCP packets were found to link up with the IP address 212.111.40.5 which houses Club Dice Casino’s Secure Transaction Processing (SSL Cert – Secure Socket Layer Certification used for securing banking transactions, typically). BOTH casinos used this IP address when running.

    3. Checked Playtech’s server for 21 Magic

    ** Found: No 21 Magic folder structure, but folder structure exists for all other Playtech casinos

    4. Checked Playtech’s Jackpots for 21 Magic

    ** Found: You CAN retrieve jackpots for 21 Magic as if it is a real playtech casino

    That is all I have for now. Wish I had more :(

    #705296
    Anonymous
    Inactive

    Thanks kwblue, my sense is telling me cpays knows something about what is going on. I also beleive 888 is trying very hard to distant themselves from Empire. In any case, I will concentrate on one site because it will limit the confusion.

    seoexp.info is a good search term.

    I will be taking the weekend off from posting. But Study the information provided. greek39

    #705568
    Anonymous
    Inactive

    It is Tradal causing the problems, all the roads lead back to Him. I quess he was pretty pissed when 888 pulled the plug. I have search high and low for Ziv but only found some spam blogging. I have some screen shots and links tradal is using.

    Cpays is fully engaged with Tradal and the out come is the very same scenario as 888.

    Here is one link http://xxxcasino.zerohosting.org view source grab the title then in yahoo type the title along with your domain.

    title your “domain”

    greek39

    #705570
    Anonymous
    Inactive

    I have always mistrusted Tradal.

    Stealing my players, selling my players without reimbursing me, I don’t trust them as far as I can throw them.

    #705571
    Anonymous
    Inactive

    Dom I looked at your spammers and holy shit. I have tons of info now, this has been the person doing 90% of the scraping!! greek39

    #705592
    Anonymous
    Inactive

    Yes, I have a lot of spammers.

    They don’t like me it seems. tongue2.gif

    I wonder why?

    So what did you find out, Greek?

    #705594
    Anonymous
    Inactive
    #705598
    vladcizsol
    Member

    Both Ziv and Shawn Berkowitz are scraping heavily. I spoke on the phone with Shawns lead SEO guy when this all started (it was almost two years ago when they co-developed the program it actually started out as an SEO tool that they hacked and modified into the automated scraper, page generator we see now.

    I am also told that a small group is registering up to 1 million expired/expring domains at a time using an automated script that tracks the age, back links, PR and DMOZ placement before adding desired candidates to the list for automated ordering ironically they dont even KEEP 95% of the domains, they just control them for several months until the credit card charges are reversed on the ones they have already had banned from the engines! Its quite the set up.

    #705623
    Anonymous
    Inactive

    To a certain extent I agree this would be plausible and true. For exampe the domain 21magic had expired in 2005. The domain was quickly picked and use for a platyech casino.

    When cpays intially launch their seo contest I ram into sites that redirected in this order.

    xxxmydomain.com>>>>xxxseo.info>>>>xxxentercasino.com>>>>xxx.casinos777portal.com

    I intially thought nothing of it really just another spam redirect. Besides the other information I have, over the weekend I was tipped off on this site http://xxxcasino.zerohosting.org I decided to take a look on google and found 374 pages with all enabled links, pretty cool I thought.

    If anyone is going to be harmed the most by theis person it would be Don. So I ran a check using this method xcasino.zerohosting”xgamesandcasino.com” What I found was

    Colony free game play poker rush [new window][frame][cache][preview][close preview][clusters]
    Online Skill Games – GamesandCasino.com … word games and online strategy games, you can play them … http://casino.zerohosting.org/daily-keno.html; Casino strategy – Play At The Best Online Casinos And …
    x1073.dctdmd.org-MSN 1, MSN 2, MSN 3

    Hoyle card games – Money Casino Now Offers Both Instant Play and Downloadable … [new window][frame][cache][preview][close preview][clusters]
    … gamesandcasino com paiute palace.. In the table below, 1 hour 30 …
    Description:Online casino featuring a host of great casino games including online blackjack, online slots, online progressive slots, online roulette, online craps, online baccarat, online video online poker, and much more. Signup today and get a welcome bonus. Lessons of hoyle card games.
    xcasino.zerohosting.org/hoyle-card-games.html-Gigablast 1

    Instant no deposit casino bonuses [new window][frame][cache][preview][close preview][clusters]
    http://casino.zerohosting.org/no-deposit-casino-bonus.html – Cached – … http://www.gamesandcasino.com/keno/bonuses.htm – Cached – Similar …
    x826.dgd4ffdh.info-Gigablast 2

    Casino bonus 500 [new window][frame][cache][preview][close preview][clusters]
    Current Online Casino Deposit Bonus Offers – GamesandCasino.com. … http://casino.zerohosting.org/no-deposit-casino-bonus.html – Cached – … http://www.gamesandcasino.com/links.htm – Cached – Similar pages. …
    x2704.bgsoebf.info-Gigablast 3, Gigablast 4

    This is but a few, nothing really special. Something Dominique is probably used to by now.

    Now the interesting part I took a screen shot for http://xxxcasino.zerohosting.org

    #705635
    Anonymous
    Inactive

    To a certain extent I agree this would be plausible and true. For example the domain 21magic had expired in 2004. The domain was quickly picked and use for a platyech casino 21magic.

    When cpays intially launch their seo contest I ran into sites that redirected in this order.

    xxxmydomain.com>>>>xxxseo.info>>>>xxxentercasino.com>>>>xxx.casinos777portal.com

    I intially thought nothing of it really just another spam redirect. Over the weekend I was tipped off on this site http://xxxcasino.zerohosting.org I decided to take a look on google and found 374 pages indexed on google with all enabled links, pretty cool I thought.

    If anyone is going to be harmed the most by theis person it would be Dom. So I ran a check using this method xcasino.zerohosting”xgamesandcasino.com” What I found was

    Colony free game play poker rush [new window][frame][cache][preview][close preview][clusters]
    Online Skill Games – GamesandCasino.com … word games and online strategy games, you can play them … http://casino.zerohosting.org/daily-keno.html; Casino strategy – Play At The Best Online Casinos And …
    x1073.dctdmd.org-MSN 1, MSN 2, MSN 3

    Hoyle card games – Money Casino Now Offers Both Instant Play and Downloadable … [new window][frame][cache][preview][close preview][clusters]
    … gamesandcasino com paiute palace.. In the table below, 1 hour 30 …
    Description:Online casino featuring a host of great casino games including online blackjack, online slots, online progressive slots, online roulette, online craps, online baccarat, online video online poker, and much more. Signup today and get a welcome bonus. Lessons of hoyle card games.
    xcasino.zerohosting.org/hoyle-card-games.html-Gigablast 1

    Instant no deposit casino bonuses [new window][frame][cache][preview][close preview][clusters]
    http://xcasino.zerohosting.org/no-deposit-casino-bonus.html – Cached – … http://xwww.gamesandcasino.com/keno/bonuses.htm – Cached – Similar …
    x826.dgd4ffdh.info-Gigablast 2

    Casino bonus 500 [new window][frame][cache][preview][close preview][clusters]
    Current Online Casino Deposit Bonus Offers – GamesandCasino.com. … http://xcasino.zerohosting.org/no-deposit-casino-bonus.html – Cached – … http://xwww.gamesandcasino.com/links.htm – Cached – Similar pages. …
    x2704.bgsoebf.info-Gigablast 3, Gigablast 4

    This is but a few, nothing really special. Something Dominique is probably used to by now.

    Now the interesting part I took a screen shot for http://xxxcasino.zerohosting.org see attachments. Now since I made my last post xcasino.zerohosting all 374 indexed pages are showing DNS error, the cache version is viewable.

    Its a good thing I took that screen shot, otherwise all would be lost.

    #705636
    Anonymous
    Inactive

    To a certain extent I agree this would be plausible and true. For example the domain 21magic had expired in 2004. The domain was quickly picked and use for a platyech casino 21magic.

    When cpays intially launch their seo contest I ran into sites that redirected in this order.

    xxxmydomain.com>>>>xxxseo.info>>>>xxxentercasino.com>>>>xxx.casinos777portal.com

    I intially thought nothing of it really just another spam redirect. Over the weekend I was tipped off on this site http://xxxcasino.zerohosting.org I decided to take a look on google and found 374 pages indexed on google with all enabled links, pretty cool I thought.

    If anyone is going to be harmed the most by this person it would be Dom. So I ran a check using this method xcasino.zerohosting”xgamesandcasino.com” What I found was

    Colony free game play poker rush [new window][frame][cache][preview][close preview][clusters]
    Online Skill Games – GamesandCasino.com … word games and online strategy games, you can play them … [url]xhttp://casino.zerohosting.org/daily-keno.html;[/url] Casino strategy – Play At The Best Online Casinos And …
    x1073.dctdmd.org-MSN 1, MSN 2, MSN 3

    Hoyle card games – Money Casino Now Offers Both Instant Play and Downloadable … [new window][frame][cache][preview][close preview][clusters]
    … gamesandcasino com paiute palace.. In the table below, 1 hour 30 …
    Description:Online casino featuring a host of great casino games including online blackjack, online slots, online progressive slots, online roulette, online craps, online baccarat, online video online poker, and much more. Signup today and get a welcome bonus. Lessons of hoyle card games.
    xcasino.zerohosting.org/hoyle-card-games.html-Gigablast 1

    Instant no deposit casino bonuses [new window][frame][cache][preview][close preview][clusters]
    http://xcasino.zerohosting.org/no-deposit-casino-bonus.html – Cached – … http://xwww.gamesandcasino.com/keno/bonuses.htm – Cached – Similar …
    x826.dgd4ffdh.info-Gigablast 2

    Casino bonus 500 [new window][frame][cache][preview][close preview][clusters]
    Current Online Casino Deposit Bonus Offers – GamesandCasino.com. … http://xcasino.zerohosting.org/no-deposit-casino-bonus.html – Cached – … http://xwww.gamesandcasino.com/links.htm – Cached – Similar pages. …
    x2704.bgsoebf.info-Gigablast 3, Gigablast 4

    This is but a few, nothing really special. Something Dominique is probably used to by now.

    Now the interesting part I took a screen shot for http://xxxcasino.zerohosting.org see attachments. Now since I made my last post xcasino.zerohosting all 374 indexed pages are showing DNS error, the cache version is viewable.

    Hoyle card games – Money Casino Now Offers Both Instant Play and …Brandy casino there39s always something happening by atlantic city ca casino games , xgamesandcasino com paiute palace . …
    xcasino.zerohosting.org/hoyle-card-games.html – 46k – Supplemental Result – Cached – Similar pages

    Its a good thing I took these screen shots, otherwise all would be lost.

    greek39

    #705638
    Anonymous
    Inactive

    Soon after I made this post I receive this to my personal email box. Now this is cryptic language of one form. I have received many such emails but never bothered trying to deceifer what it is saying.

    Gas cal… yahoo voice changer voi… Status fake statuses for… Poster =
    post messages Ads acd bul… Aone photos text ca… Bingo Wave files =
    WA… DBVA Eclipse database plugin suppo… ZenKEY launches restores =
    programs windows using… Ultra Joiner large mov…
    GamesFF Plugins Top Security News News: Shorter URLsURLs Click shorten =
    urls freeView kAdvanced Torrents Web MMission TS Tamale DVDRip Breed =
    LiMiTED Returns Xvid Evidence Parts CAM Distance Cassandra Crossing Vice =
    TC Mapper SQL Manager MySQL Comparer Server DB Pro Executive v… Design =
    Specialty Windows Internet Washer AnyDVD Chubby Brown Live Liverpool Dog =
    Wicker Speed Most Wanted Star Wars II Original MIDI WAV Maker Audio =
    Player CD Extractor Ripper Clean Registry Fun Morph Spears From Hedge =
    George
    Xilisoft Converter extracts audio tracks AVI DivX MPE… Code Library =
    source code library Anti Spyware Toolkit Utility Antivirus scans =
    computer developed subtitle oriented medi… Password Recovery .l =
    recover lost forgotten passwords WinX ideal
    Provider Todd DavisIn walks Templates Editor concepts. Working Jason N. =
    GaylordIn examines sending emails Submit Forward Abrams Trey platform =
    happy already it.. grab post: digg Fixing button prototype adds sample =
    API beyond restoring clean model. hidden API. Basically changes events =
    triggered Button Nikhil Kotharis partial Improve Brian Goldfarbs solid =
    shortcut OReilly
    healthy chockfull profits Inflation equipment capex Street Consumers =
    pace. Meanwhile trade healthy. Exports rose annual imports increased =
    Jobs running low. certain officials wake rally. Because President Bushs =
    fiscal policies restrain spending reduce tax rates Higher aftertax =
    returns attract foreign capital world. hadnt noticed Japans slumping =
    again. Europes recovered place. China becoming Expect moves February =
    central target bottom June tighter Commodity story. CRB spot index =
    slowed markedly yearly spring recently. sensitive indicator dollars =
    slower Another relative economic cousins Japan. Lower monetary scarcity =
    tonic market. Provided maestro restraint far. posted Comments: Jake =
    said… sick tired parking worst Herbert Hoover Anonymous Democrats =
    Congress growth.
    viewing while typing notes timecodes QuickTime iNMR analysis Schedula =
    Daybook scheduler FileMaker EasyTask Todo GTD getting done Square Fill =
    square game Sync folders: overwrite newer FStream Little WebRadio =
    listener Stack brain BwanaDik address WAN LAN menu Gaming minutes Dark =
    Messiah Might Magic Kill Kevin Trailer puts players Just Cause Mini =
    operative regime ch… Warhammer Dawn Crusade Second expansion internal =
    THQ studio Relic Single HalfLife Episode Two Gameplay second trilogy =
    exp… Heroes WWII Strategy brings Ship Simulator German
    Finland might Girl Athletes More Likely Have Injured Knees athletes =
    eight higher risk injuring anterior cruciate ligament ACL Setup creators =
    Cover editors …CD/DVD Burning Shell BIOS FIRMWARE GRAPHICS BOARD =
    ..File Managers Freeware Shareware …IPOD TOOLS Office Podcast =
    Browsers Email FTP Clients Chat …Linux Adaptive Artistic …MAC =
    Dashboard Widgets Ericsson Network …Office suites Text CAD Decoding =
    Firewall …System Info

    (HELO [81.80.97.173]) ([81.80.97.173])
    by wnpgmb02-c600a.mts.net with ESMTP; 11 Sep 2006 05:55:55 -0500
    X-BrightmailFiltered: true
    X-Brightmail-Tracker: AAAAAA==
    X-IronPort-AV: i=”4.09,144,1157346000″;
    d=”gif’147?scan’147,208,217,147″; a=”440435990:sNHT50489075″
    Message-ID: <001101c6d591$37753440$ad615051@STATION0124>
    From: “regarded”
    To:
    Subject: clues. Cryptic
    Date: Mon, 11 Sep 2006 12:58:30 -0200
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.2869
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
    X-Antivirus: AVG for E-mail 7.1.405 [268.12.2/441]
    Mime-Version: 1.0

    #705668
    Anonymous
    Inactive

    I received a PM from CPays with some interesting findings…

    I will have to check it out myself yet, but their team ran a full network sniffer/logger (more detailed than my own) on the 21 Magic casino and it’s SSL Cert is Casino Tropez.

    I have to verify this as I know it is using ClubDice SSL Cert server for some reason or another.

    Anyway – thought I would post this before I did a detail run.

    #705692
    Anonymous
    Inactive

    Keep me posted kwblue. I so much unformatted material it will take some time to make it useful for viewing. For 21magic I will try and break it down. In any case I think you are sniffing out something good. I know you are a person who doesn’t give up easily.

    greek39

    #705694
    Anonymous
    Inactive

    Here is what I found and will likely post public as soon as all us private members comment…

    First of all, clubdice’s secure server WAS being used – but is no longer being used. Here is a pic of the TCP packets being used when I used my securepc to log in and create a 21 Magic Real Money Account:

    21Magic.jpg

    In case it doesn’t show here, the url is:

    xxxhttp://www.postanarticle.com/gambling/images/21Magic.jpg

Viewing 15 posts - 1 through 15 (of 18 total)