Spam for Vegas Red / Casino Partners

**Maxfalcon** · 13 June 2006, 7:27 am

Replied this, and copied the evidence to Casino Partners:

PS TO CASINO PARTNERS - this guy, whether is a joke or not, is holding me responsible of the spam for YOUR casino, Vegas Red Casino. Stop the offender by shutting down its account, you've been aware of this issue since a long time.
-> https://www.gpwa.org/forum/spam-vegas-red-casino-partners-167057.html
----------------------------------------------------

You're a comic. Show me any proves that it is related to my company, since you want to play with me? And explain me how I can control something that even the US governement itself cannot control at a federal level?

And it seems you've some technical internet knowledge, so that make you heavily suspect. My bet is that you're someone in the organization that send those spams, but I may be wrong, until you prove me anything.

I've also copied the email to those responsible for the casino advertised in this spam.

Cedric

**Maxfalcon** · 14 June 2006, 1:52 am

This is becoming very amusing - in reply to my last message:

I received another 4 emails in the past two days. I am now forwarding any emails i receive for your product directly to the Federal Trade Commission. They will trace the software to its source and prosecute. Have a wonderful day.

I think we have our spammer here (or a very very dumb person). He/she is surely not happy of this thread.

If I ever get any damage for this (I think this guy is just playing, but who knows...), I will hold Casino Partners responsible and will have a judiciary action against them.

Anti-Spam Policy
Please remember that neither we, nor our ISP, tolerate spam of any kind. Any affiliate caught spamming will be placed on probation from the affiliate programs and all earnings will be void.

Yes, and what Casino Partners has done since this spammer is spamming? I've got no reply or anything to my emails.

I've removed Casino Partners from my list of approved affiliate programs for webmasters.

**universal4** · 14 June 2006, 10:48 am

3 New ones

xxhttp://lloipw.com/casino/ mailed 6-13-06
xxhttp://orgfhanza.com/casino/ mailed 6-13-06
xxhttp://instaoa.com/casino/ mailed 6-14-06

Rick
Universal4

**universal4** · 18 June 2006, 12:48 pm

This spammer is not slowing down at all.

Two more....and he is getting disgusting with domain name choices.
xxhttp://denamis.com/d1/super/
xxhttp://pipenis.com/d1/super/ mailed 6-18-06

There is absolutely no excuse for not doing SOMETHING about this.

Rick
Universal4

**universal4** · 20 June 2006, 2:20 pm

xxhttp://meseron.com/d1/total mailed 6-20-06 (Created: 2006-06-15 16:54:0

Rick
Universal4

**Maxfalcon** · 21 June 2006, 2:17 am

The amount of SPAM from this jerk is INCREASING.

That shows that there are NO ACTION from the affiliate program itself.

But, this spam may 'come' (=outsourced) from the casino itself, because I have a hard time to think that Casino Partners does not do anything about this.

There are no excuses, I'm really off to show this to important industry bodies and persons.

What kind of image Vegas Red wants to have? Are they in the short-term business?

And why nodody cares to reply here?

**universal4** · 23 June 2006, 11:19 am

Another for the list

xxhttp://alphapersuasion.com/d1/total mailed 6-21-06

Rick
Universal4

**universal4** · 25 June 2006, 2:46 pm

Please do something about this jerk

Here are two more

xxhttp://ewcnss.com/d1/check mailed 6-23-06
xxhttp://losingourhomesoon.com/d1/total mailed 6-25-06

Rick
Universal4

**downie** · 30 June 2006, 7:36 pm

Hi,
I work to shut down fraudulent websites, and I think this site was part of the recruitment of PCs to host them. The .exe file contains a virus. The latest version is at xxhttp://haanalon.com/wow/ and xxhttp://ribofils.com/wow/.
What is this affiliate information that you extracted? I'm not familiar with the organisations you mention. Anything which would help to locate these crooks would be very welcome.
Thanks
GD

**universal4** · 30 June 2006, 8:49 pm

This particular spammer was promoting a "white label" of the Vegas Red Casino site.

Vegas Red is marketed by casinopartners dot com.

We have been notified that this particular situation has been taken care of.

Rick
Universal4

**Maxfalcon** · 1 July 2006, 1:56 am

We have been notified that this particular situation has been taken care of.

As of today, I'm still seeing some spam from this jerk, less than before. I think this situation will take some time to be completely resolved.

The .exe file contains a virus

What a moron!

I work to shut down fraudulent websites, and I think this site was part of the recruitment of PCs to host them

For who are you working? And to who you relate with "PCs"? I'm not sure I have completely understood this sentence.

It will be good also if you unlink the URLs that contains the viruses, some persons may click on them without reading everything.

**universal4** · 1 July 2006, 10:35 am

I unlinked thse urls.

I think he was speaking in terms of the software was dropping a trojan on the downloaders' systems to turn the user's computer into a "zombie" system.

Thousands of zombie systems are controlled by bot networks. In fact, access to the bot networks are sold and rented to spamms and scammers.

They are also sold to those who would use them for DDOS attacks.

Rick
Universal4

Note: I do not know if this group was actually involved in this, or if the exe actually contained a virus or trojan.

**downie** · 1 July 2006, 7:59 pm

For who are you working?

Not for, with: like-minded internet users.
The quoted URLs are connected with a botnet which hosts several phishing and otherwise fraudulent sites. A virus scan at http://virusscan.jotti.org/ produced:
File: setupcasino_101.exe
Status: INFECTED/MALWARE
MD5: be6eb504d425d15203534f8ee8fa62a1
Packers detected: PE_PATCH.PECOMPACT, PECBUNDLE, PECOMPACT

Scanner results:
AntiVir---Found nothing
ArcaVir---Found Dialer.D107
Avast---Found nothing
AVG Antivirus---Found nothing
BitDefender---Found nothing
ClamAV---Found nothing
Dr.Web---Found nothing
F-Prot Antivirus---Found nothing
Fortinet---Found Misc/VegasredCas
Kaspersky Anti-Virus---Found nothing
NOD32---Found nothing
Norman Virus Control---Found nothing
UNA---Found nothing
VirusBuster---Found nothing
VBA32---Found nothing

What would be the normal behaviour of this download? Would it ask for bank or credit card details? That could be another criminal use for it.
GD

**Maxfalcon** · 3 July 2006, 4:18 am

I think he was speaking in terms of the software was dropping a trojan on the downloaders' systems to turn the user's computer into a "zombie" system.

Ohh, my bad. I haven't understood it that way... Now I see.

Not for, with: like-minded internet users.

Congrats, so. It's people like you who help the Internet industry as a whole.

File: setupcasino_101.exe
Status: INFECTED/MALWARE
MD5: be6eb504d425d15203534f8ee8fa62a1
Packers detected: PE_PATCH.PECOMPACT, PECBUNDLE, PECOMPACT

What would be the normal behaviour of this download? Would it ask for bank or credit card details? That could be another criminal use for it.

Uhh, that's worse than what I thought. Yes, that could lead to give up some important personal details.

I'm still getting spam from this jerk.

**Maxfalcon** · 3 July 2006, 4:22 am

Usually, The VegasRedCasino exe original file must communicate with a server during a secured connection for handling the purchases. Maybe it has been flagged by one of the programs 'unfairly', as this is a normal process.

As for "Dialer.D107", this is not normal.

**universal4** · 3 July 2006, 1:34 pm

Maybe it has been flagged by one of the programs 'unfairly', as this is a normal process.

Yes I am concerned about this also.

Since

Avast---Found nothing
AVG Antivirus---Found nothing
F-Prot Antivirus---Found nothing
Kaspersky Anti-Virus---Found nothing
NOD32---Found nothing

I am wondering if the flagging is unfair. I would think that at least one of the few I singled out would flag the exe if it was truly needed.

Rick
Universal4

**universal4** · 5 July 2006, 10:42 am

xxhttp://crmapp.com/d1/total mailed 6-28-06 (was dead when checked)
xxhttp://ewcnss.com/d1/check mailed 6-28-06 (was dead when checked)
xxhttp://aircoolbits.com/d1/total mailed 6-30-06 (still up)
xxhttp://williamscourt.com/d1/super mailed 6-30-06 (was dead when checked)(mailed 7-1-06)
xxhttp://themgclub.com/d1/check mailed mailed 7-1-06 (was dead when checked)
xxhttp://bigclubs.com/d1/check mailed 7-02-06 mailed again 7-05-06 (dead on 7-05)
xxhttp://cluescript.com/d1/total mailed 7-05-06 (was dead when checked)

Rick
Universal4

**universal4** · 5 July 2006, 11:22 am

xxhttp://familyrollcall.com/d1/check mailed 7-05-06 (was dead when checked)
xxhttp://wallstreetnupes.com/d1/super/ mailed 7-05-06 (was dead when checked)

Rick
Universal4

**Maxfalcon** · 6 July 2006, 3:10 am

I am wondering if the flagging is unfair

Adaware flags also unfairly. I've got one of my sites URLs and cookies (a cookie used for my members to log in..., with no additional information in it, just the session to keep them connected) flagged by adaware in a scan result. I've been a lot upset, since I've nothing to do with adware, spyware and other pest software of the web. They need to calm down a bit and to refine their filters. That can be a case to go in court.

As for the spammer, he/she is still around. Rick, I think we need to revive a bit the thread in Casino Partners forum...

**universal4** · 6 July 2006, 10:10 am

xxhttp://bandssports.com/d1/super mailed 7-05-06 (was dead when checked)
xxhttp://borgorto.com/d1/total mailed 7-06-06 (was active when checked)

Rick
Universal4

Thread: Spam for Vegas Red / Casino Partners

LinkBack

Thread Tools

Search Thread

Display

Posting Permissions