Some of the addresses I'm getting spam on were never on my current mail server (they were registered with the sponsor years ago on a now gone server) - mail server being compromised does not explain these spams.

There IS one common thread to virtually all of the sponsors (apparently) involved and even the (apparent) beneficiaries of the spam - the same billing processor seems to keep coming up from both ends.

This may just be an obvious coincidence with such a small number of popular processors out there to start with - or not?

What do you think?

Would it be reasonable (without implying any complicity) to ask the billing processor to officially chime in on this issue and add their perspective to it?

I posted some in this thread...

http://www.gofuckyourself.com/showthread.php?t=602795

Here's another one:

http: // www . pepesadventures.com / ? revid=19381 & pid=36

This is Platinum Bucks isn't it?

Yep... They're spamming lots of platinumbucks sites, all revid 19381

hardflics.com redirects to harderflicz.com for me... there's like entire "program" worth of sites like this in all niches, no webmaster links though. Processed thru Paycom. Been around for quite some time now as I've run accross their sites before.

There's a link on their sites to
naughty.com
has the same whois/hosting as hardflics.com

2257 records indicate this:

Elizabeth Leach
Balboa Point Building Piso 6
Avenida Balboa
Panama City, Panama

hardflics.com registered to:

Casa Dominio SA
Corregimiento de Bella Vista, Avenida Balboa
Edificio Tricom, piso No 6
Panama
PA

administrator
Gabriel Dominguz legal at casadominio.com
Casa Dominio SA

casadominio.com - hosted by dynamicpipe.com ontario canada
hardflics.com - hosted by dynamicpipe.com ontario canada

harderflicz.com registered to:
Lux Cadella Corporation
1601 NW 97th Avenue
Unit 3-101
Miami
FL
33102-5216

Admin contact:
Jorge Marin legal at luxcadellacorp.com
Lux Cadella Corporation

harderflicz.com - hosted by dynamicpipe.com ontario canada

luxcadellacorp.com - hosted by Qix Hosting???

Qix Hosting and dynamicpipe are listed as the same company here:
http://www.switchanddata.com/custome...int=1&navid=39

it's getting outta hand in the last couple dayz.

* bump *

The spam is directed to a bunch of new domains created around April 25 this year.

The volume of spam to affiliate email addresses is still very high today.

You would think that the spammers would realize that their jig is up by now and they are going to be losing all their sales when their account is closed.

I just got spammed on the email I gave to Platinum Bucks, and on the one I gave to ProAdult.

* bump *

hehehehe

thats the exact same day mine started. and the only people that have that addy are epassporte and pimproll

so it seems like the only link between all this crud is paycom

That seems to be my experience as well - most of the sponsor email addresses I'm getting spammed on for this past week all seem to be using paycom.

And, the spammers seem to be using paycom sites as well.

Anyone else seeing this trend?

Is there a paycom rep who responds to b2b issues on GFY?

Hmmm, same here :Oh crap

mine just started too, all you guys signed up for sexmoney?

Its redirecting to this site: http://www.14inch.com/index.phtml?1261829120

Here is there billing page: https://wnu.com/secure/fpost.cgi?opt...d%3D3570055 7

Who are they paycom? Could you tell them to please remove me?...

oh check this out, on that exit popup, when you click 2257. Its not the fake panama addy there

http://www.movieland.com/2257.html

Copies of every depiction, together with searchable fully indexed and cross-referenced photo-ID database, is available for inspection Mon-Fri, from 08:00 to 12:00, at Netwave Inc.hahaha8217;s (content licensee) and Kingfisherhahaha8217;s Trade & Commerce Ltd.hahaha8217;s (content host) place of business:

R. Hagen, Custodian of Records
Stekkenbergweg
4 1105 AJ
Amsterdam
The Netherlands

im getting spammed from ars

* bump *

edit edit

Isn't hardflics and 14inch.com in the family of Dollar Machine?

Because most of the email addresses targeted by the spammers in this wave were specific to Paycom sponsor programs and the spam seems to point back to Paycom sponsor/processed programs, I sent an email to Paycom/Epoch support to get their take on this.

I got a reply within minutes - the matter has been forwarded to their legal department.

I would like to put together a concise package of info so they can sort out how our affiliate info *seems* to have been leaked to spammers.

I would appreciate if anyone else hit by this same wave of spam could email me at:

sponsorspam.1795 at dinocortez.com

so we can compare notes regarding:

1) Sponsors for which our email addresses are getting spammed. Are they truly unique email addresses or obvious ones which could have been guessed with dictionary attack.

2) Who seems to be the beneficiary of the spam in your case.

3) When your spam started in noticeable volumes.

Again, I don't believe that individual sponsors are behind the apparant email leak and I'm not drawing any conclusions about (if any) Paycom's role (through any acts and/or ommissions) about this.

I'm just collecting and passing suspicious patterns of information to those who seem to be involved in one way or another.

Thanks for your help with this!

I'm sorry american perv, we only send the "Infocus Newsletter" Mailer to our webmasters, or plain text announcements. You can opt out by using your ARS account admin.

If you are getting a spam promoting an ARS site. Please forward is to us. We do not allow email promotions. techsupport at i2intl.com