BlackJack Ballroom - Your ticket number could be a winner

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

From - Wed Jun 1 23:26:23 2011
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.123; Sat, 14 May 2011 16:26:54 +0000
X-YahooFilteredBulk: 208.73.3.105
Received-SPF: pass (mta1011.mail.ird.yahoo.com: domain of bonusupdates@jangomail.com designates 208.73.3.105 as
permitted sender)
X-YMailISG: x
X-Originating-IP: [208.73.3.105]
Authentication-Results: mta1011.mail.ird.yahoo.com from=eworimail.com; domainkeys=neutral (no sig);
from=eworimail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO as001-c.jsmtp.net) (208.73.3.105)
by mta1011.mail.ird.yahoo.com with SMTP; Sat, 14 May 2011 16:26:54 +0000
Message-ID: <x@jngomktg.net>
Subject: x, your ticket number could be a winner
From: "Jack Mitchell" <support@eworimail.com>
Date: Sat, 14 May 2011 15:41:07 +0000
To: x
X-Priority: 3
MIME-Version: 1.0
X-Mailer: N/A
List-Unsubscribe: x
X-UserID: 588413.278194883T199790
X-VConfig: T.278194883
Content-Type: multipart/alternative;
boundary=--boundary_289304_2521a6b5-5295-4992-94d4-a6b9d397711d
Reply-To: BonusUpdates@jangomail.com

Body:

Please make sure you enable images to collect an exclusive FreeOffer!

Delivered to
Name: x
Email: x

Our system has indicated that you are in this week's pool of potential winners. You could be eligible to collect £€$500FREE. All you need to do to collect £€$500FREE, is verify your winning code with the code pool below. If you have a match, then click below to secure your prize!

Here is your unique winning code
Check to see if it matches a code below.
If you have a matching code, then click below to get your prize.

86422198

86422196
86422197
86422198
86422199

54713265
54713266
54713267
54713268

86321511
86321512
86321513
86321514

*For new players only
Terms & conditions may apply

to no longer recieve the offers please go here http://cr.cr-news.com/main/unsub.asp

Comments:

BlackJack Ballroom Casino is also an online partner of Casino Rewards/Rewards Affiliates and the affiliate id at the bottom of the spamvertised site, namely aff86307:jtp, is the same as the affiliate id at the bottom of the spamvertised site from the Casino Action Spam Example, so this is most certainly the same spammer. This site also contains a link to an executable file, as in the Casino Action Spam Example, but this time the file is called bjballroom.exe (hosted on download.blackjackballroom.com).

Both these examples are hosted on promo1.c-rewards.com. The domain c-rewards.com and casinorewards.com are both registered to Domain Directors Pty. Ltd. a name associated with several casino websites.

The fact that the spammer mentions the name of the recipient, tells us that the spammer has more personal information about his/her spam victims that meets the eye.

One thing that's very interesting is that the e-mail mentions a €£$500 bonus. We wonder how this is possible because €500 does not equal £500 and neither equals $500. Just comes to show how little these spammers care about logic, they want you to react to their junk, whether it makes sense or not. But it doesn't really matter now, does it? Ignorant, greedy, money-hungry gamblers will respond to these e-mails whether they make sense or not.

[Previous Example] [Back To The Main SHPAMEE Index] [Next Example]