Casino Action Spam - You are among the winners
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.123; Tue, 10 May 2011 06:38:14 +0000
X-YahooFilteredBulk: 209.124.73.226
Received-SPF: pass (mta1066.mail.ird.yahoo.com: domain of returns@eb02.executivemailingservices.com designates
209.124.73.226 as permitted sender)
X-YMailISG: x
X-Originating-IP: [209.124.73.226]
Authentication-Results: mta1066.mail.ird.yahoo.com from=eb02.executivemailingservices.com; domainkeys=neutral (no sig);
from=eb02.executivemailingservices.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO eb02.executivemailingservices.com) (209.124.73.226)
by mta1066.mail.ird.yahoo.com with SMTP; Tue, 10 May 2011 06:38:14 +0000
Received: by eb02.executivemailingservices.com (Postfix, from userid 0)
id 3C7902036DE; Tue, 10 May 2011 02:38:13 -0400 (EDT)
To: x
Subject: You are among the winners
Message-ID: <x@eb02.executivemailingservices.com>
List-Unsubscribe: x
X-Report-Abuse: Please report abuse for this campaign here:
http://eb02.executivemailingservices.com/reportabuse.aspx?stid=78126&hitid=1305005805450&...
02&SID=1&token=a4ee0720a1dfe2beb9c47556705a2dda4fd389fb
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=eb02.executivemailingservices.com;
i=@eb02.executivemailingservices.com; q=dns/txt; s=ebmailerd; t=1305009393; h=From:Sender;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0;
b=KM2eYoj1C3RSsYEPJzMqt52Q6eqpNbTdSJ83mgHtVMtbhL+ZWb0Wy0WQYlbkbdEaEmhjBXugj7Y/gEqtjjWgYWr...
IRtIlqcQ+7Srha0eDZOEjDVk6P++jCHWsmRHkiEOQe6d8ktqkVowk=
Sender: returns@eb02.executivemailingservices.com
From: "Support" <support@c-rewardsupdates.com>
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="3ecb59967e75086c5992f529f6eac6c9"
Date: Tue, 10 May 2011 02:38:13 -0400 (EDT)
Body:
| This email was sent to x by support@c-rewardsupdates.com. |
| Click here to view it in your browser | Click here to Unsubscribe. |
IMPORTANT - NOTICE OF WINNINGS | ||
 | ||
 | x -- €£$1250* -- |  |
 | ||
| ||
Congratulations x, CasinoAction is offering you £€$1250 Free*! To CLAIM YOUR MONEY all you have to do is login to CasinoAction
Congratulations and best of luck! Carly |
Terms & conditions may apply
| ||||||||||||||||||
| This mailing system may only be used for sending permission based email. If you did not give permission to receive emails from this sender, please notify us. This email was sent to x by support@c-rewardsupdates.com | Print / PDF version | Read our Privacy Policy. Franco Lippi - Beaufort House, PO BOX 437, Road Town, Tortola, 10111, Virgin Islands (British) | ||||||||||||||||||
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
BlackJack Ballroom - Your ticket number could be a winnerOnline Gambling and Casino Spam - Congratulations, you have just won
PPC Click Fraud Spam - Medical billing & coding programs
Seven Stars Online Casino - Spring gift, 1000 at registration
Euro Dice Stars Online Gambling and Casino Spam
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
All the links on the fake cheque takes you to the spamvertised website where you can download the casino software installer (a file called casinoaction.exe hosted on download1.casinoaction.com). As with all the other casino spam examples we've analysed so far, the file doesn't appear to be malicious.
Once you've installed the software you get the chance to register as a player via the software interface. Uninstalling the software is not a problem, but the designers try to change your mind one last time by LETTING you win a small slot machine game.
The spammer seems to be an affiliate marketer of Casino Action, an online partner of Casino Rewards/Rewards Affiliates. So it is not Casino Action doing the actual spamming but one of their affiliate members.
Also refer to BlackJack Ballroom Spam Example for more further information about this spammer.