Red Stag Spam

Discussion in 'Deckmedia Affiliates' started by AussieDave, Dec 3, 2015.

  1.  
    AussieDave

    AussieDave 17 years & still going!

    Messages:
    2,879
    Likes Received:
    1,386
    Joined:
    Nov 28, 2013
    Doesn't take spamming affiliates long does it!

    Cloaked URL:
    192.99.147.213/mailmaster/link.php?M=10005790&N=3&L=2&F=H

    Redirected Aff URL
    :
    redstagcasino.eu/fivestags?c=80386&s=1211564
     
  2.  
    AussieDave

    AussieDave 17 years & still going!

    Messages:
    2,879
    Likes Received:
    1,386
    Joined:
    Nov 28, 2013
    Return-Path: <bounce@mbqw72br.eu>
    Received: from compute1.internal (compute1.nyi.internal [10.202.2.41])
    by sloti35d1t40 (Cyrus 3.0.0-beta1-git-fastmail-11934) with LMTPA;
    Wed, 02 Dec 2015 18:04:21 -0500
    X-Sieve: CMU Sieve 2.4
    Subject: {SPAM 21.9} $5 FreePlays plus 2500 usd welcomes
    X-Spam: high
    X-Spam-score: 21.9
    X-Spam-hits: BAYES_99 3.5, BAYES_999 1.2, DCC_CHECK 1.1, HTML_IMAGE_ONLY_12 2.059,
    HTML_MESSAGE 0.001, LIST_PARTIAL_SHORT_MSG 1.999, MPART_ALT_DIFF 0.79,
    NORMAL_HTTP_TO_IP 0.001, RCVD_IN_INVALUEMENT 2, RCVD_IN_INVALUEMENT24 2,
    SPF_PASS -0.001, SUBJ_DOLLARS 1.8, T_RP_MATCHES_RCVD -0.01,
    URIBL_INVALUEMENT 3, URI_DQ_UNSUB 2.499, LANGUAGES en, BAYES_USED global,
    SA_VERSION 3.3.2
    X-Spam-source: IP='192.99.216.114', Host='mta51.mbqw72br.eu', Country='CA',
    FromHeader='eu', MailFrom='eu'
    X-Spam-charsets: plain='UTF-8', html='UTF-8'
    X-Resolved-to: xxxxxxx AT fastmail.com.au
    X-Delivered-to: xxxxxxx AT fastmail.com.au
    X-Mail-from: bounce@mbqw72br.eu
    Received: from mx3 ([10.202.2.202])
    by compute1.internal (LMTPProxy); Wed, 02 Dec 2015 18:04:21 -0500
    Received: from mx3.messagingengine.com (localhost [127.0.0.1])
    by mx3.nyi.internal (Postfix) with ESMTP id C072FC0034
    for <xxxxxxx AT fastmail.com.au>; Wed, 2 Dec 2015 18:04:20 -0500 (EST)
    Received: from mx3.nyi.internal (localhost [127.0.0.1])
    by mx3.messagingengine.com (Authentication Milter) with ESMTP
    id A7B8A7F1440.69F13C0067;
    Wed, 2 Dec 2015 18:04:20 -0500
    Authentication-Results: mx3.messagingengine.com;
    dkim=pass (1024-bit rsa key) header.d=mbqw72br.eu header.i=admin@mbqw72br.eu header.b=B9q1yTmP;
    dmarc=fail (p=none) header.from=mbqw72br.eu;
    domainkeys=fail (message has been altered; 1024-bit rsa key) header.d=mbqw72br.eu header.b=THmqlUB3;
    spf=pass smtp.mailfrom=bounce@mbqw72br.eu smtp.helo=mta51.mbqw72br.eu
    Received-SPF: pass (mbqw72br.eu: 192.99.216.114 is authorized to use 'bounce@mbqw72br.eu' in 'mfrom' identity (mechanism 'ip4:192.99.216.0/24' matched)) receiver=mx3.messagingengine.com; identity=mailfrom; envelope-from="bounce@mbqw72br.eu"; helo=mta51.mbqw72br.eu; client-ip=192.99.216.114
    Received: from mta51.mbqw72br.eu (mta51.mbqw72br.eu [192.99.216.114])
    by mx3.messagingengine.com (Postfix) with ESMTP id 69F13C0067
    for <xxxxxxx AT fastmail.com.au>; Wed, 2 Dec 2015 18:04:20 -0500 (EST)
    DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=mbqw72br.eu;
    h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=admin@mbqw72br.eu;
    bh=QWTYoXUvASyBV536dsZkXhrEzkM=;
    b=B9q1yTmPv4dsP8yN6t9mm4NK8+fb3MQZrMvV+7ezZUcFgY93n8ukVPf5FDr5lycLvVBcFKE+GQ49
    dhEFgMuObUuSHBk0pevdwZSKnGmdRnJgOSWX5ZGaF0iLkPuCS50L7RsSW39+DypzAfkU7TncSg+V
    gcJb+qyfoSuyeWuwEBU=
    DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=mbqw72br.eu;
    b=THmqlUB31bishrmQDu3PkgjP2Kc3CCi7QaW1avR/dEucaLZ01gs8YmtjqfxUAx/cxGWNCs+V+wEF
    YH6U4G/8KZ7M/o9CBy0j2BunqAOJypdtuwaodOtqRNTlr5vShLSgeBGW3CIQ1s7iTSjC3CifQ5KH
    UHAp1aenrNauW4QU5jI=;
    To: xxxxxxx AT fastmail.com.au
    X-Spam-orig-subject: $5 FreePlays plus 2500 usd welcomes
    Message-ID: <0eddc352732fd91a1d9c5768990cfdfb@192.99.147.213>
    Date: Wed, 02 Dec 2015 23:03:51 +0000
    From: "Reinaldo Feiler" <info@mbqw72br.eu>
    Reply-To: info@mbqw72br.eu
    MIME-Version: 1.0
    X-Mailer-LID: 42
    List-Unsubscribe: <192.99.147.213/mailmaster/unsubscribe.php?M=10005790&C=95ac31a6267c4492fddef250adc66c00&L=42&N=3>
    X-Mailer-RecptId: 10005790
    X-Mailer-SID: 3
    X-Mailer-Sent-By: 1
    Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_16d42acba18188e99e6531ada465cfbe"
    Content-Transfer-Encoding: 8bit
     
  3.  
    AussieDave

    AussieDave 17 years & still going!

    Messages:
    2,879
    Likes Received:
    1,386
    Joined:
    Nov 28, 2013
    The same Ass-Clown now sends a spam to my Company email address!

    Cloaked URL:
    170.75.175.88/mailapps/link.php?M=15466&N=8&L=5&F=H

    Redirected Aff URL:
    redstagcasino.eu/fivestags?c=80253&s=1211822

    From - Thu Dec 03 14:26:51 2015
    X-Account-Key: account3
    X-UIDL: UID404-1443193368
    X-Mozilla-Status: 0001
    X-Mozilla-Status2: 00000000
    X-Mozilla-Keys:
    Return-path: <bounce@nhsw25gu.eu>
    Envelope-to: removed-email-addy
    Delivery-date: Thu, 03 Dec 2015 11:49:34 +1100
    Received: from mta5.nhsw25gu.eu ([170.75.175.85]:48440)
    by cp04.mdc.hostgeek.com.au with esmtp (Exim 4.86)
    (envelope-from <bounce@nhsw25gu.eu>)
    id 1a4I5L-0008Eg-TF
    for removed-email-addy; Thu, 03 Dec 2015 11:49:34 +1100
    DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=nhsw25gu.eu;
    h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=admin@nhsw25gu.eu;
    bh=QWLUGkwXfpoXij8YkgWWtoOeksE=;
    b=UFWyFMSq4PCjLB8UzlGhcLV04/XswLiBHJZa4o7j6C5vvseshNt8A3pdqzl6HsRZqxva01AkZg4u
    3fekoF2habwNFuU+jxG8lukVic/VO7BzgAN1s5WMv/RjrBNEwK2OTg1z50gKbdsYr+vShk3HErtM
    utTbCV2VK/+YpCRAZ9k=
    DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=nhsw25gu.eu;
    b=KM67R0AgVh10jt/zt8x/U02LZEu3FAZE/mcIDFI5BoTk3mp2UZSkA0hz71IuSd8bbzxd/OFULKhz
    o7fDSyhbujTog7Fo3caWyWUZ0DVIcfOoJK+yIDkFgrsEmZDNv8XkWDyFma8XSb3BJ5RonwYYSAP4
    tOYh6UFGJqQ3V9z17WU=;
    To: removed-email-addy
    Subject: 5 freechip plus 2500 welcome
    Message-ID: <bb954037f82ba0b282f78d4e40f92e20@170.75.175.88>
    Date: Thu, 03 Dec 2015 00:48:40 +0000
    From: "admin" <admin@nhsw25gu.eu>
    Reply-To: admin@nhsw25gu.eu
    MIME-Version: 1.0
    X-Mailer-LID: 1
    List-Unsubscribe: <http://170.75.175.88/mailapps/unsubscribe.php?M=15466&C=65350d50fbe544aa22be70733215d5d6&L=1&N=8>
    X-Mailer-RecptId: 15466
    X-Mailer-SID: 8
    X-Mailer-Sent-By: 2
    Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_d87f9eb9e12c710eaae562f54ea81689"
    Content-Transfer-Encoding: 8bit
    X-Spam-Status: No, score=4.9
    X-Spam-Score: 49
    X-Spam-Bar: ++++
    X-Ham-Report: Spam detection software, running on the system "cp04.mdc.hostgeek.com.au",
    has NOT identified this incoming email as spam. The original
    message has been attached to this so you can view it or label
    similar future email. If you have any questions, see
    root\@localhost for details.
    Content preview: Your email client cannot read this email. To view it online,
    please go here: 170.75.175.88/mailapps/display.php?M=15466&C=65350d50fbe544aa22be70733215d5d6&S=8&L=1&N=4
    To stop receiving these emails:170.75.175.88/mailapps/unsubscribe.php?M=15466&C=65350d50fbe544aa22be70733215d5d6&L=1&N=8
    [...]
    Content analysis details: (4.9 points, 5.0 required)
    pts rule name description
    ---- ---------------------- --------------------------------------------------
    -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
    domain
    0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
    See
    http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
    for more information.
    [URIs: 170.75.175.88]
    0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
    address
    2.5 URI_DQ_UNSUB URI: IP-address unsubscribe URI
    0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
    0.0 HTML_MESSAGE BODY: HTML included in message
    -0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
    [score: 0.0898]
    -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
    domain
    0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
    -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
    2.0 KAM_BADIPHTTP Due to the Storm Bot Network, IPs in emails is bad
    X-Spam-Flag: NO
     
  4. admin Notification Admin Staff Member

    A reminder is sent to all affiliate managers.
  5.  
    AussieDave

    AussieDave 17 years & still going!

    Messages:
    2,879
    Likes Received:
    1,386
    Joined:
    Nov 28, 2013
  6.  
    Guard Dog

    Guard Dog Guard Dog Staff Member

    Messages:
    7,728
    Likes Received:
    1,154
    Joined:
    Dec 13, 2006
    what is wrong with their post? Certified programs are allowed to post details about their properties and promos.
     
  7.  
    paulajardine

    paulajardine Affiliate Guard Dog Member

    Messages:
    220
    Likes Received:
    77
    Joined:
    Feb 6, 2012
    I took it as though he meant that they came on the forums 8 hours after he had posted this, then came and posted a new thread without replying to this one. Because of that he took it as though they did not care about spam. (That's just how I took it, but I see how you could have taken it another way, and I could have taken it wrong as well.)
    That being said, perhaps deckmedia just missed this post. They have always been helpful to me so perhaps try email them @Bet4You and I am sure they will do something about you getting spammed. I honestly would be surprised if they didn't.
     
  8.  
    Guard Dog

    Guard Dog Guard Dog Staff Member

    Messages:
    7,728
    Likes Received:
    1,154
    Joined:
    Dec 13, 2006
    ah, gotcha. I will notify them about the post.
     
  9.  
    AussieDave

    AussieDave 17 years & still going!

    Messages:
    2,879
    Likes Received:
    1,386
    Joined:
    Nov 28, 2013
    Yes that's exactly what I meant. thanks paulajardine for clearing that up.

    Beats me how it could be taken out of context...
     
  10.  
    sloto

    sloto Affiliate Program Representative

    Messages:
    663
    Likes Received:
    298
    Joined:
    Feb 26, 2009
    Hi Bet4You

    Very sorry to hear about the spam issues, we will take care of this issue

    DECKMEDIA AFFILIATE TEAM
     
    AussieDave likes this.
  11.  
    AussieDave

    AussieDave 17 years & still going!

    Messages:
    2,879
    Likes Received:
    1,386
    Joined:
    Nov 28, 2013
    Thanks for attending to this.
     
  12. admin Notification Admin Staff Member

    A reminder is sent to all affiliate managers.

Share This Page