Red Stag Spam

[AussieDave]

Doesn't take spamming affiliates long does it!

Cloaked URL:
192.99.147.213/mailmaster/link.php?M=10005790&N=3&L=2&F=H

Redirected Aff URL:
redstagcasino.eu/fivestags?c=80386&s=1211564

 

[AussieDave]

Return-Path: <bounce@mbqw72br.eu>
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41])
by sloti35d1t40 (Cyrus 3.0.0-beta1-git-fastmail-11934) with LMTPA;
Wed, 02 Dec 2015 18:04:21 -0500
X-Sieve: CMU Sieve 2.4
Subject: {SPAM 21.9} $5 FreePlays plus 2500 usd welcomes
X-Spam: high
X-Spam-score: 21.9
X-Spam-hits: BAYES_99 3.5, BAYES_999 1.2, DCC_CHECK 1.1, HTML_IMAGE_ONLY_12 2.059,
HTML_MESSAGE 0.001, LIST_PARTIAL_SHORT_MSG 1.999, MPART_ALT_DIFF 0.79,
NORMAL_HTTP_TO_IP 0.001, RCVD_IN_INVALUEMENT 2, RCVD_IN_INVALUEMENT24 2,
SPF_PASS -0.001, SUBJ_DOLLARS 1.8, T_RP_MATCHES_RCVD -0.01,
URIBL_INVALUEMENT 3, URI_DQ_UNSUB 2.499, LANGUAGES en, BAYES_USED global,
SA_VERSION 3.3.2
X-Spam-source: IP='192.99.216.114', Host='mta51.mbqw72br.eu', Country='CA',
FromHeader='eu', MailFrom='eu'
X-Spam-charsets: plain='UTF-8', html='UTF-8'
X-Resolved-to: xxxxxxx AT fastmail.com.au
X-Delivered-to: xxxxxxx AT fastmail.com.au
X-Mail-from: bounce@mbqw72br.eu
Received: from mx3 ([10.202.2.202])
by compute1.internal (LMTPProxy); Wed, 02 Dec 2015 18:04:21 -0500
Received: from mx3.messagingengine.com (localhost [127.0.0.1])
by mx3.nyi.internal (Postfix) with ESMTP id C072FC0034
for <xxxxxxx AT fastmail.com.au>; Wed, 2 Dec 2015 18:04:20 -0500 (EST)
Received: from mx3.nyi.internal (localhost [127.0.0.1])
by mx3.messagingengine.com (Authentication Milter) with ESMTP
id A7B8A7F1440.69F13C0067;
Wed, 2 Dec 2015 18:04:20 -0500
Authentication-Results: mx3.messagingengine.com;
dkim=pass (1024-bit rsa key) header.d=mbqw72br.eu header.i=admin@mbqw72br.eu header.b=B9q1yTmP;
dmarc=fail (p=none) header.from=mbqw72br.eu;
domainkeys=fail (message has been altered; 1024-bit rsa key) header.d=mbqw72br.eu header.b=THmqlUB3;
spf=pass smtp.mailfrom=bounce@mbqw72br.eu smtp.helo=mta51.mbqw72br.eu
Received-SPF: pass (mbqw72br.eu: 192.99.216.114 is authorized to use 'bounce@mbqw72br.eu' in 'mfrom' identity (mechanism 'ip4:192.99.216.0/24' matched)) receiver=mx3.messagingengine.com; identity=mailfrom; envelope-from="bounce@mbqw72br.eu"; helo=mta51.mbqw72br.eu; client-ip=192.99.216.114
Received: from mta51.mbqw72br.eu (mta51.mbqw72br.eu [192.99.216.114])
by mx3.messagingengine.com (Postfix) with ESMTP id 69F13C0067
for <xxxxxxx AT fastmail.com.au>; Wed, 2 Dec 2015 18:04:20 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=mbqw72br.eu;
h=To:Subject:Message-IDate:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=admin@mbqw72br.eu;
bh=QWTYoXUvASyBV536dsZkXhrEzkM=;
b=B9q1yTmPv4dsP8yN6t9mm4NK8+fb3MQZrMvV+7ezZUcFgY93n8ukVPf5FDr5lycLvVBcFKE+GQ49
dhEFgMuObUuSHBk0pevdwZSKnGmdRnJgOSWX5ZGaF0iLkPuCS50L7RsSW39+DypzAfkU7TncSg+V
gcJb+qyfoSuyeWuwEBU=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=mbqw72br.eu;
b=THmqlUB31bishrmQDu3PkgjP2Kc3CCi7QaW1avR/dEucaLZ01gs8YmtjqfxUAx/cxGWNCs+V+wEF
YH6U4G/8KZ7M/o9CBy0j2BunqAOJypdtuwaodOtqRNTlr5vShLSgeBGW3CIQ1s7iTSjC3CifQ5KH
UHAp1aenrNauW4QU5jI=;
To: xxxxxxx AT fastmail.com.au
X-Spam-orig-subject: $5 FreePlays plus 2500 usd welcomes
Message-ID: <0eddc352732fd91a1d9c5768990cfdfb@192.99.147.213>
Date: Wed, 02 Dec 2015 23:03:51 +0000
From: "Reinaldo Feiler" <info@mbqw72br.eu>
Reply-To: info@mbqw72br.eu
MIME-Version: 1.0
X-Mailer-LID: 42
List-Unsubscribe: <192.99.147.213/mailmaster/unsubscribe.php?M=10005790&C=95ac31a6267c4492fddef250adc66c00&L=42&N=3>
X-Mailer-RecptId: 10005790
X-Mailer-SID: 3
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_16d42acba18188e99e6531ada465cfbe"
Content-Transfer-Encoding: 8bit

 

[AussieDave]

The same Ass-Clown now sends a spam to my Company email address!

Cloaked URL:
170.75.175.88/mailapps/link.php?M=15466&N=8&L=5&F=H

Redirected Aff URL:
redstagcasino.eu/fivestags?c=80253&s=1211822

From - Thu Dec 03 14:26:51 2015
X-Account-Key: account3
X-UIDL: UID404-1443193368
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path: <bounce@nhsw25gu.eu>
Envelope-to: removed-email-addy
Delivery-date: Thu, 03 Dec 2015 11:49:34 +1100
Received: from mta5.nhsw25gu.eu ([170.75.175.85]:48440)
by cp04.mdc.hostgeek.com.au with esmtp (Exim 4.86)
(envelope-from <bounce@nhsw25gu.eu>)
id 1a4I5L-0008Eg-TF
for removed-email-addy; Thu, 03 Dec 2015 11:49:34 +1100
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=nhsw25gu.eu;
h=To:Subject:Message-IDate:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=admin@nhsw25gu.eu;
bh=QWLUGkwXfpoXij8YkgWWtoOeksE=;
b=UFWyFMSq4PCjLB8UzlGhcLV04/XswLiBHJZa4o7j6C5vvseshNt8A3pdqzl6HsRZqxva01AkZg4u
3fekoF2habwNFuU+jxG8lukVic/VO7BzgAN1s5WMv/RjrBNEwK2OTg1z50gKbdsYr+vShk3HErtM
utTbCV2VK/+YpCRAZ9k=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=nhsw25gu.eu;
b=KM67R0AgVh10jt/zt8x/U02LZEu3FAZE/mcIDFI5BoTk3mp2UZSkA0hz71IuSd8bbzxd/OFULKhz
o7fDSyhbujTog7Fo3caWyWUZ0DVIcfOoJK+yIDkFgrsEmZDNv8XkWDyFma8XSb3BJ5RonwYYSAP4
tOYh6UFGJqQ3V9z17WU=;
To: removed-email-addy
Subject: 5 freechip plus 2500 welcome
Message-ID: <bb954037f82ba0b282f78d4e40f92e20@170.75.175.88>
Date: Thu, 03 Dec 2015 00:48:40 +0000
From: "admin" <admin@nhsw25gu.eu>
Reply-To: admin@nhsw25gu.eu
MIME-Version: 1.0
X-Mailer-LID: 1
List-Unsubscribe: <http://170.75.175.88/mailapps/unsubscribe.php?M=15466&C=65350d50fbe544aa22be70733215d5d6&L=1&N=8>
X-Mailer-RecptId: 15466
X-Mailer-SID: 8
X-Mailer-Sent-By: 2
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_d87f9eb9e12c710eaae562f54ea81689"
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "cp04.mdc.hostgeek.com.au",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Your email client cannot read this email. To view it online,
please go here: 170.75.175.88/mailapps/display.php?M=15466&C=65350d50fbe544aa22be70733215d5d6&S=8&L=1&N=4
To stop receiving these emails:170.75.175.88/mailapps/unsubscribe.php?M=15466&C=65350d50fbe544aa22be70733215d5d6&L=1&N=8
[...]
Content analysis details: (4.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 170.75.175.88]
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
2.5 URI_DQ_UNSUB URI: IP-address unsubscribe URI
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.0898]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
2.0 KAM_BADIPHTTP Due to the Storm Bot Network, IPs in emails is bad
X-Spam-Flag: NO

 

[admin]

A reminder is sent to all affiliate managers.

 

[AussieDave]

https://www.affiliateguarddog.com/community/threads/festive-offers-at-deckmedia-new-game.9366/

That promo was posted 8 hour after I commenced this thread...
Would be hard to miss the"Red Stag Spam"... just sayin.

Just checked out your T&C's... Nice to see a program who justifies spam

 

[Guard Dog]

what is wrong with their post? Certified programs are allowed to post details about their properties and promos.

 

[paulajardine]

what is wrong with their post? Certified programs are allowed to post details about their properties and promos.

I took it as though he meant that they came on the forums 8 hours after he had posted this, then came and posted a new thread without replying to this one. Because of that he took it as though they did not care about spam. (That's just how I took it, but I see how you could have taken it another way, and I could have taken it wrong as well.)
That being said, perhaps deckmedia just missed this post. They have always been helpful to me so perhaps try email them @Bet4You and I am sure they will do something about you getting spammed. I honestly would be surprised if they didn't.

 

[Guard Dog]

ah, gotcha. I will notify them about the post.

 

[AussieDave]

I took it as though he meant that they came on the forums 8 hours after he had posted this, then came and posted a new thread without replying to this one. Because of that he took it as though they did not care about spam.

Yes that's exactly what I meant. thanks paulajardine for clearing that up.

Beats me how it could be taken out of context...

 

[sloto]

Hi Bet4You

Very sorry to hear about the spam issues, we will take care of this issue

DECKMEDIA AFFILIATE TEAM

 

[AussieDave]

Thanks for attending to this.

 

[admin]

A reminder is sent to all affiliate managers.