BlackJack Ballroom - Your ticket number could be a winner
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.123; Sat, 14 May 2011 16:26:54 +0000
X-YahooFilteredBulk: 208.73.3.105
Received-SPF: pass (mta1011.mail.ird.yahoo.com: domain of bonusupdates@jangomail.com designates 208.73.3.105 as
permitted sender)
X-YMailISG: x
X-Originating-IP: [208.73.3.105]
Authentication-Results: mta1011.mail.ird.yahoo.com from=eworimail.com; domainkeys=neutral (no sig);
from=eworimail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO as001-c.jsmtp.net) (208.73.3.105)
by mta1011.mail.ird.yahoo.com with SMTP; Sat, 14 May 2011 16:26:54 +0000
Message-ID: <x@jngomktg.net>
Subject: x, your ticket number could be a winner
From: "Jack Mitchell" <support@eworimail.com>
Date: Sat, 14 May 2011 15:41:07 +0000
To: x
X-Priority: 3
MIME-Version: 1.0
X-Mailer: N/A
List-Unsubscribe: x
X-UserID: 588413.278194883T199790
X-VConfig: T.278194883
Content-Type: multipart/alternative;
boundary=--boundary_289304_2521a6b5-5295-4992-94d4-a6b9d397711d
Reply-To: BonusUpdates@jangomail.com
Body:
to no longer recieve the offers please go here http://cr.cr-news.com/main/unsub.asp
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Casino Action Spam - You are among the winnersSeven Stars Online Casino - Spring gift, 1000 at registration
Reel Vegas Online Casino Spam - Spring Gift, 1200 at Registration
World Casino Online Gambling Spam
Anonymous Online Casino Spam
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Both these examples are hosted on promo1.c-rewards.com. The domain c-rewards.com and casinorewards.com are both registered to Domain Directors Pty. Ltd. a name associated with several casino websites.
The fact that the spammer mentions the name of the recipient, tells us that the spammer has more personal information about his/her spam victims that meets the eye.
One thing that's very interesting is that the e-mail mentions a €£$500 bonus. We wonder how this is possible because €500 does not equal £500 and neither equals $500. Just comes to show how little these spammers care about logic, they want you to react to their junk, whether it makes sense or not. But it doesn't really matter now, does it? Ignorant, greedy, money-hungry gamblers will respond to these e-mails whether they make sense or not.