Seven Stars Online Casino - Spring gift, 1000 at registration
Authentication-Results: mta1092.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig); from=amltd.org; dkim=neutral
Received: from 127.0.0.1 (HELO 220.127.116.11.dynamic.str.ufanet.ru) (18.104.22.168)
by mta1092.mail.ukl.yahoo.com with SMTP; Sun, 25 Apr 2010 08:05:04 -0700
Date: Sun, 25 Apr 2010 14:59:58 -0100
From: "Seven Stars Casino©" <HopeSnell@amltd.org>
Subject: Spring gift, €1000 at registration
Content-Type: text/html; charset=iso-8859-1
We’ve prepared a prime spot for you at our online casino, where only the best will do for our happy players!
Everything about our online casino is first-class: our games, our security, our customer support and our ability to pay out incredible rewards!
So maybe the month of love wasn’t good for you, but we’re here to help you turn that around by giving you a loving 1000€ Free bonus!
Details about the spamvertised domain:
Created and registered on: 2010-04-12 17:06:01 (Note the date and time)
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD
Owner: Sun Qiang from China
DNS Servers (Registry): ns1.bestseasilver.com and ns2.bestseasilver.com
DNS Server (Actual): 22.214.171.124 (no reverse DNS entry)
The only difference is the origin of the spam e-mail. The Royal Vegas Online Casino spam e-mail came from China but this e-mail originated from the Russian Federation (Yuri Vernitsky of bestseasilver.com ???). On 27 April 2010 we received another Seven Stars Casino spam example. The spamvertised domain was created and registered on 2010-04-12 17:06:05. The rest of the registry information was the same as mentioned above, but this time the e-mail originated from Brazil. Below is an extract from the second spam e-mail:
One of the big reasons our online casino is preferred above the rest is because we can prove just how many winners we’ve had, even on a weekly basis!
Take your 1000€ Free offer at our casino and turn that grand into an even grander winning streak!
The origin of these e-mails are purely academic, but each one leads to a spamvertised online casino website, acting as a host for an online gambling software downloader. In each case the actual software belongs to an online casino that's a member of the Fortune Lounge Group. It is interesting to note that the name of the online casino advertised on the spamvertised site, is never exactly the same as the actual online casino, but it always has a close resemblance to the name of the actual online casino.
Preview of the spamvertised website:
Related Cyber Criminal Profiles:No related profiles found.
Similar Spam Examples:Reel Vegas Online Casino Spam - Spring Gift, 1200 at Registration
Euro Dice Stars Online Gambling and Casino Spam
BlackJack Ballroom - Your ticket number could be a winner
World Casino Online Gambling Spam
Casino Action Spam - You are among the winners