Casino Action Spam - You are among the winners
X-Apparently-To: x via 220.127.116.11; Tue, 10 May 2011 06:38:14 +0000
Received-SPF: pass (mta1066.mail.ird.yahoo.com: domain of email@example.com designates
18.104.22.168 as permitted sender)
Authentication-Results: mta1066.mail.ird.yahoo.com from=eb02.executivemailingservices.com; domainkeys=neutral (no sig);
from=eb02.executivemailingservices.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO eb02.executivemailingservices.com) (22.214.171.124)
by mta1066.mail.ird.yahoo.com with SMTP; Tue, 10 May 2011 06:38:14 +0000
Received: by eb02.executivemailingservices.com (Postfix, from userid 0)
id 3C7902036DE; Tue, 10 May 2011 02:38:13 -0400 (EDT)
Subject: You are among the winners
X-Report-Abuse: Please report abuse for this campaign here:
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=eb02.executivemailingservices.com;
firstname.lastname@example.org; q=dns/txt; s=ebmailerd; t=1305009393; h=From:Sender;
From: "Support" <email@example.com>
Date: Tue, 10 May 2011 02:38:13 -0400 (EDT)
|This email was sent to x by firstname.lastname@example.org.|
|Click here to view it in your browser | Click here to Unsubscribe.|
IMPORTANT - NOTICE OF WINNINGS
-- €£$1250* --
CasinoAction is offering you £€$1250 Free*!
To CLAIM YOUR MONEY all you have to do is login to CasinoAction
Congratulations and best of luck!
Terms & conditions may apply
This mailing system may only be used for sending permission based email.
If you did not give permission to receive emails from this sender, please notify us.
Franco Lippi - Beaufort House, PO BOX 437, Road Town, Tortola, 10111, Virgin Islands (British)
All the links on the fake cheque takes you to the spamvertised website where you can download the casino software installer (a file called casinoaction.exe hosted on download1.casinoaction.com). As with all the other casino spam examples we've analysed so far, the file doesn't appear to be malicious.
Once you've installed the software you get the chance to register as a player via the software interface. Uninstalling the software is not a problem, but the designers try to change your mind one last time by LETTING you win a small slot machine game.
The spammer seems to be an affiliate marketer of Casino Action, an online partner of Casino Rewards/Rewards Affiliates. So it is not Casino Action doing the actual spamming but one of their affiliate members.
Also refer to BlackJack Ballroom Spam Example for more further information about this spammer.
Related Cyber Criminal Profiles:No related profiles found.
Similar Spam Examples:BlackJack Ballroom - Your ticket number could be a winner
Online Gambling and Casino Spam - Congratulations, you have just won
PPC Click Fraud Spam - Medical billing & coding programs
Seven Stars Online Casino - Spring gift, 1000 at registration
Euro Dice Stars Online Gambling and Casino Spam