mansioncasino.com - a casino with a bad reputation and a hidden ownership

by Rudolf Faix 14. June 2015 12:37

MansionCasino.comThe online casino affiliates have been years ago a good business for affiliates. More then 20 years ago one of my friends in Austria earned very good by promoting online casinos. It seems the time has changed a lot and/or the casino owners have been coming too greedy that they need to use spyware and adware in their own software for spying their users. Whatever the real reason is, we can only guess it.

My opinion that someone, which hides his name at the domain registration data by using a proxy service, has something more to hide then only his privacy gets confirmed in this case.

Fact is that I got the following warning by opening the site from mansioncasino.com:

Warning! Could be unsafe!
 

Adguard has blocked access to this page

This web page at www.mansioncasino.com, has been reported as a phishing page and has been blocked based on your security preferences.

Adguard has found that this page may be a forgery or imitation of another website, designed to trick users into sharing personal or financial information. Entering any personal information on this page may result in identity theft or other abuse.

As one warning comes seldom alone I got immediately the next one after proceeding to the page:

WOT reputation of mansioncasino.com

I have one comment picked from the the comments at Web Of Trust for the site mansioncasino.com:

User picture

Malware or viruses

Spam

Distributes Adware see
https://www.virustotal.com/en/file/dda8fbf57f9ddc8c2b04ed65d59c59d054d89...
Hidden Registrant related to / owned by same company as Casino.com.
Affiliates / Microworkers posting Fake comments on Site Advisor see https://www.siteadvisor.com/sites/msgpage/mansioncasino.com/postid "

 

 

 

 

 

 

 

Especially the adware link inside the above message is interesting:

VirusTotal

All these adware and trojans are built for stealing information from your computer and deliver promotion to you.

Win.Adware.Agent-6597 is a malicious application that is designed to circumvent computer security, compromise a system, and deploy various advertising elements. These can include pop-up windows, browser redirects, and other problems. Some Win.Adware.Agent-6597 poses an additional threat by allowing personal information and computing activity to be collected and tracked.

The dangerous virus Win32.Troj.Undef(kcloud) is developed by the hackers to get the remote access to your computer, and steal your confidential data. This information may include the passwords, username, credit card numbers, and browsing history. The hackers use this data in the online frauds, and resultantly you lose your hard earned money. Besides that, this deadly dangerous virus modifies the windows registry by adding corrupt entries that cause regular crashes. Once installed, the Win32.Troj.Undef(kcloud) make your computer extremely slow by occupying the resources installed on the system.

I don't really like to test if they have removed or replaced the trojans and adware already. Such a report makes the site only more worse then only hiding their identity in the domain registration:

Domain Name: mansioncasino.com
Registry Domain ID: 101010471_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.ipmirror.com
Registrar URL: http://www.ipmirror.com
Updated Date: 2015-06-10T04:15:49Z
Creation Date: 2003-07-25T00:32:47Z
Registrar Registration Expiration Date: 2016-07-25T00:32:47Z
Registrar: IP Mirror Pte Ltd
Registrar IANA ID: 890
Registrar Abuse Contact Email: TLDSupport@cscglobal.com
Registrar Abuse Contact Phone: +1.8887802723
Reseller: 
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registry Registrant ID: 
Registrant Name: c/o Premium Registration Service
Registrant Organization: Corporation Service Company (UK) Ltd
Registrant Street: 1st Floor, 2-5 Benjamin Street 
Registrant City: London
Registrant State/Province: 
Registrant Postal Code: EC1M 5QL
Registrant Country: United Kingdom
Registrant Phone: +44.2074604060
Registrant Phone Ext: 
Registrant Fax: +44.2075494101
Registrant Fax Ext: 
Registrant Email: whoisprivacy@cscglobal.com
Registry Admin ID: 
Admin Name: c/o Premium Registration Service
Admin Organization: Corporation Service Company (UK) Ltd
Admin Street: 1st Floor, 2-5 Benjamin Street 
Admin City: London
Admin State/Province: 
Admin Postal Code: EC1M 5QL
Admin Country: United Kingdom
Admin Phone: +44.2074604060
Admin Phone Ext: 
Admin Fax: +44.2075494101
Admin Fax Ext: 
Admin Email: whoisprivacy@cscglobal.com
Registry Tech ID: 
Tech Name: c/o Premium Registration Service
Tech Organization: Corporation Service Company (UK) Ltd
Tech Street: 1st Floor, 2-5 Benjamin Street 
Tech City: London
Tech State/Province: 
Tech Postal Code: EC1M 5QL
Tech Country: United Kingdom
Tech Phone: +44.2074604060
Tech Phone Ext: 
Tech Fax: +44.2075494101
Tech Fax Ext: 
Tech Email: whoisprivacy@cscglobal.com
Name Server: pdns1.ultradns.net
Name Server: pdns2.ultradns.net
Name Server: pdns3.ultradns.org
Name Server: pdns4.ultradns.org
Name Server: pdns5.ultradns.info
Name Server: pdns6.ultradns.co.uk
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2015-06-10T04:30:12Z <<<

The domain, which is managing the affiliate system from mansioncasino.com, is iaffiliates.com. iaffiliates.com is using the same proxy provider as mansioncasino.com. They are also managing the affiliate systems for the following brands: casino.com, lesacasino.com, club777.com and slotsheaven.com. 

All these domains have a bad reputation already, using the same proxy service and the same DNS servers for their internet service. For me it seems that they have the same owner.

Casino.comClub 777
LesACasino.comSlots Heaven

web-of-trust-report-mansioncasino.pdf (381.15 kb)

 

Tags: , , , , , , , , , , , ,

Suspicious Sites

Follow me

AboutMe

I'm since more then 35 years in the computer business (programming and technical support) and using the Internet since it has started. Since 2002 I'm programming solutions for Asterisk and since 2004 I'm in the call center industry.

Disclaimer

All data and information provided on this site is for informational purposes only. I make no representations as to accuracy, completeness, currentness, suitability, or validity of any information on this site and will not be liable for any errors, omissions, or delays in this information or any losses, injuries, or damages arising from its display or use. All information is provided on an as-is basis. By browsing or using content from this site you accept the full legal disclaimer of this website.



hit counters