Seven Stars Online Casino - Spring gift, 1000 at registration
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Mon Apr 26 17:58:12 2010
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 94.41.229.234
X-YMailISG:
w77jHCkWLDvJWXTdE.CfSRpaBFZcoPvymn6NLxhXPBMMzwfOT1RpqqABTyDmcL2PdW6C8rwR6s13l9lT1Z6GENgEi...
.y8H3hUpgBYDKTZCSK7h5F0ftB5gk7T9NKt7YeWlKHsg9tOuP.l4z.bPaK.d51cbmTX2POeUoPBwbQ7OzBIDdW8byFod...
Bjg9FTmJwF_Z2e_3.Io97I6yo1jSwAmz7FQXwaQ3WHt7493yIEjt8ooiJHEEul5d5bXrsZYXSwtobSL3XOtYUuHUvgfZ...
fka_yF080FKjuiY1RO5_I0UNy2RiRN0U3QlLMMy5_e_.b9nXly8XZ11mrqhGbY6gYLVwFNSKVgHtffMLOj_gOA6oFKvQ...
GeNA_2P.m2A5s3.EP0Un6HtqC7Sv_wlkMdgJ_oBhipA0Py.KvfDbRexIonefvIlMSxPXRoZ5rQwGqhhNtN.TJ6nL9TsZ...
6CW8jrH9W0r5HfMJvp7ckHMURkqW7VIuT0Jfy5ERuiQPfVrJjKIwxA6oQr9xcuQAu9n.31dh73UStEqu51QOLMFAI2EK...
1OM3oI5gZL8z1AL1CGasGxQFFeRkAmbHJVnQmJh_9s_HU_weAIvUuj.6IbmIzs_KM_lUN8CcQ3sHBXasRcAac4Dz2...
X-Originating-IP: [94.41.229.234]
Authentication-Results: mta1092.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig); from=amltd.org; dkim=neutral
(no sig)
Received: from 127.0.0.1 (HELO 94.41.229.234.dynamic.str.ufanet.ru) (94.41.229.234)
by mta1092.mail.ukl.yahoo.com with SMTP; Sun, 25 Apr 2010 08:05:04 -0700
Date: Sun, 25 Apr 2010 14:59:58 -0100
Message-ID: <x@bronx.esmas.com>
From: "Seven Stars Casino©" <HopeSnell@amltd.org>
To: x
Subject: Spring gift, €1000 at registration
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 94.41.229.234
X-YMailISG:
w77jHCkWLDvJWXTdE.CfSRpaBFZcoPvymn6NLxhXPBMMzwfOT1RpqqABTyDmcL2PdW6C8rwR6s13l9lT1Z6GENgEi...
.y8H3hUpgBYDKTZCSK7h5F0ftB5gk7T9NKt7YeWlKHsg9tOuP.l4z.bPaK.d51cbmTX2POeUoPBwbQ7OzBIDdW8byFod...
Bjg9FTmJwF_Z2e_3.Io97I6yo1jSwAmz7FQXwaQ3WHt7493yIEjt8ooiJHEEul5d5bXrsZYXSwtobSL3XOtYUuHUvgfZ...
fka_yF080FKjuiY1RO5_I0UNy2RiRN0U3QlLMMy5_e_.b9nXly8XZ11mrqhGbY6gYLVwFNSKVgHtffMLOj_gOA6oFKvQ...
GeNA_2P.m2A5s3.EP0Un6HtqC7Sv_wlkMdgJ_oBhipA0Py.KvfDbRexIonefvIlMSxPXRoZ5rQwGqhhNtN.TJ6nL9TsZ...
6CW8jrH9W0r5HfMJvp7ckHMURkqW7VIuT0Jfy5ERuiQPfVrJjKIwxA6oQr9xcuQAu9n.31dh73UStEqu51QOLMFAI2EK...
1OM3oI5gZL8z1AL1CGasGxQFFeRkAmbHJVnQmJh_9s_HU_weAIvUuj.6IbmIzs_KM_lUN8CcQ3sHBXasRcAac4Dz2...
X-Originating-IP: [94.41.229.234]
Authentication-Results: mta1092.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig); from=amltd.org; dkim=neutral
(no sig)
Received: from 127.0.0.1 (HELO 94.41.229.234.dynamic.str.ufanet.ru) (94.41.229.234)
by mta1092.mail.ukl.yahoo.com with SMTP; Sun, 25 Apr 2010 08:05:04 -0700
Date: Sun, 25 Apr 2010 14:59:58 -0100
Message-ID: <x@bronx.esmas.com>
From: "Seven Stars Casino©" <HopeSnell@amltd.org>
To: x
Subject: Spring gift, €1000 at registration
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Body:
| We’ve prepared a prime spot for you at our online casino, where only the best will do for our happy players! Everything about our online casino is first-class: our games, our security, our customer support and our ability to pay out incredible rewards! So maybe the month of love wasn’t good for you, but we’re here to help you turn that around by giving you a loving 1000€ Free bonus! |
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Reel Vegas Online Casino Spam - Spring Gift, 1200 at RegistrationEuro Dice Stars Online Gambling and Casino Spam
BlackJack Ballroom - Your ticket number could be a winner
World Casino Online Gambling Spam
Casino Action Spam - You are among the winners
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Details about the spamvertised domain:
Created and registered on: 2010-04-12 17:06:01 (Note the date and time)
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD
Owner: Sun Qiang from China
DNS Servers (Registry): ns1.bestseasilver.com and ns2.bestseasilver.com
DNS Server (Actual): 59.53.91.116 (no reverse DNS entry)
The only difference is the origin of the spam e-mail. The Royal Vegas Online Casino spam e-mail came from China but this e-mail originated from the Russian Federation (Yuri Vernitsky of bestseasilver.com ???). On 27 April 2010 we received another Seven Stars Casino spam example. The spamvertised domain was created and registered on 2010-04-12 17:06:05. The rest of the registry information was the same as mentioned above, but this time the e-mail originated from Brazil. Below is an extract from the second spam e-mail:
One of the big reasons our online casino is preferred above the rest is because we can prove just how many winners we’ve had, even on a weekly basis!
Take your 1000€ Free offer at our casino and turn that grand into an even grander winning streak!
SEVEN STARS CASINO - 1000€ You can receive this GIFT...
The origin of these e-mails are purely academic, but each one leads to a spamvertised online casino website, acting as a host for an online gambling software downloader. In each case the actual software belongs to an online casino that's a member of the Fortune Lounge Group. It is interesting to note that the name of the online casino advertised on the spamvertised site, is never exactly the same as the actual online casino, but it always has a close resemblance to the name of the actual online casino.
Preview of the spamvertised website: