LinkBack URL
About LinkBacks
Hi All,
For a while now I've been receiving mailers from c-f-1.com.
Casino Share along with their other casino properties have been using this to send out their mailers.
Today I received one from Players Palace Casino. It had my Name and casino account attached.
However immediately following that email I received another one from c-f-1.com BUT this was SPAM.
I'm going to post everything I have so far on this including all headers.
My email program highlights possible phishing URL hence the true email URL are shown in some of these emails:
Players Palace Mailer:
Return-Path: <playerspalace@playerspalacemail.eu>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.14-fmsvn18487-ec538ff5) with LMTPA;
Sat, 11 Apr 2009 04:01:39 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: playerspalace@playerspalacemail.eu
Received: from mx6.messagingengine.com ([10.202.2.205])
by compute2.internal (LMTPProxy); Sat, 11 Apr 2009 04:01:39 -0400
Received: from dispatch22.c-f-1.com (dispatch22.c-f-1.com [213.121.128.123])
by mx6.messagingengine.com (Postfix) with ESMTP id A8E2C5796F
for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 04:01:38 -0400 (EDT)
Received: by dispatch22.c-f-1.com (PowerMTA(TM) v3.5r11) id hs17660mjucs for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 08:01:33 +0000 (envelope-from <playerspalace@playerspalacemail.eu>)
From: "Player's Palace Casino" <playerspalace@playerspalacemail.eu>
To: "xxxxxxx@fastmail.com.au" <xxxxxxx@fastmail.com.au>
Date: Sat, 11 Apr 2009 08:01:33 +0000
Subject: David, nine more high-tech prizes have to go!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=aspNetEmail=_801391440f6341248981efa54 727d851"
X-Mailer: aspNetEmail ver 3.6.0.65
X-UEmailID: UE%3dQoNP1eTrOwcUZDuJ630d8w
X-DispatchID: CommunicatorCorp_639448
Message-ID: <APP5-487PN3Jb3b29539aa3543d69d8b74d489b5994f@APP5-487PN3J>
Dear David (tccrxxxxxxxx)
Beam me up, Slotty!
Nine lucky players have already won prizes like a state-of-the-art HP 2140 Mini-Note laptop, Apple iPhone 3G’s, Blackberries, cameras, camcorders and home theater systems.
This just goes to show that when it comes to promotions and prizes – Player’s Palace Casino is light-years ahead!
There are loads more prizes to win, so make sure you enter and qualify today!
Enter here now!
Terms and Conditions:
* To enter this promotion, follow this link now.
* For an entry into the lucky draw, purchase 50 credits and wager 500 or more on ANY game.
* This offer may not be taken up in conjunction with any other offers.
* This promotional period: 16 – 30 April, 2009.
Want to find out more about ‘Beam me up, Slotty’? Follow this link!
Best Regards
Steven Barry
Casino Manager
http://www.c-f-1.com/d.aspx?e=UE=QoN...linkID=1291878
24/7 Email support at FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=QoNP1eTrOwcUZDuJ630d8w&c=1&linkID=1291 876'. Original text='playerspalacecasino@casinoemailsupport.com'. For more information on phishing click here.
You have selected to receive promotional email from us at this address: xxxxxxx@fastmail.com.au
In order to remove this email address from our lists, simply reply to this message or email
FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=QoNP1eTrOwcUZDuJ630d8w&c=1&linkID=1291 877'. Original text='playerspalacecasino@casinoemailsupport.com '. For more information on phishing click here.
#########
Casino SPAM
Return-Path: <CurgamThursday@c-f-1.com>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.14-fmsvn18487-ec538ff5) with LMTPA;
Sat, 11 Apr 2009 03:18:27 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: CurgamThursday@c-f-1.com
Received: from mx2.messagingengine.com ([10.202.2.201])
by compute2.internal (LMTPProxy); Sat, 11 Apr 2009 03:18:27 -0400
Received: from dispatch40.c-f-1.com (dispatch40.c-f-1.com [213.121.129.209])
by mx2.messagingengine.com (Postfix) with ESMTP id A88FE137
for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 03:18:26 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=c-f-1.com;
h=From:Toate:Subject:MIME-Version:Content-Type:Message-ID; i=CurgamThursday@c-f-1.com;
bh=q4AjOJHnBbtNuhFLQC8hx5wmH4g=;
b=pGX+CKcxPpk39cwYQSwKD4tNsgTojJGx4cqNURJMwO17GSNa ZglSo6uglya0ibHYfpJAhjXBuIRJ
qgiwL2U1jOQsfZK/ovk9pptZ62AJ4M7Cz6KWlxGCD1ZyhNnHRD0ZFrOIW+4LStRUcM k54grYeCa/
afs2E6PrpNLJOZHtrP8=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=c-f-1.com;
b=XTHjrPd0Ka2fyKa1MaZiy4zWJB/XX4K9nsRLOKXEUwxJGdrhhooQQIByNb5kxq7ASnr6eHYaPFyS
7kZhsIrl0ymJuL3Pf10BxXE+V1NuWaiCQ6+Wdw3LT86y7NRRm7 VhVY7LntORIUYkMjxoY+Liny6L
eJseG5iHNQOoC1SdzWA=;
Received: by dispatch40.c-f-1.com (PowerMTA(TM) v3.5r11) id hs12440i0hkp for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 07:18:18 +0000 (envelope-from <CurgamThursday@c-f-1.com>)
From: "Casino Manager" <CurgamThursday@c-f-1.com>
To: "xxxxxxx@fastmail.com.au" <xxxxxxx@fastmail.com.au>
Date: Fri, 10 Apr 2009 18:40:48 +0000
Subject: Win with out risking one dime
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=aspNetEmail=_eef1341277954f90b62e80559 a283b36"
X-Mailer: aspNetEmail ver 3.6.0.65
X-UEmailID: UE%3dg4b8TigYj5KxaKVF2YYVYF
X-DispatchID: CommunicatorCorp_640334
Message-ID: <APP3-6ZF6R2J-I23edc6426f532e4694a1837840aa02a549@APP3-6ZF6R2J-I23>
Easter celebrations starts early with the most amazing bonuses
15 x 900% SLOT BONUSES for you to redeem this weekend!!
You can claim your SENSATIONAL 900% SLOT BONUSES @ each of our 5 sister sites:
* REAL VEGAS ONLINE: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298 634'. Original text=' www.realvegasonline.com'. For more information on phishing click here.
* MIGHTY SLOTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298 635'. Original text=' www.mightyslots.com'. For more information on phishing click here.
* SLOT NUTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298 636'. Original text='www.slotnuts.com'. For more information on phishing click here.
* PLENTY JACKPOTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298 637'. Original text=' www.plentyjackpots.com'. For more information on phishing click here.
* 99 SLOT MACHINES: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298 638'. Original text=' www.99slotmachines.com'. For more information on phishing click here.
If you haven't yet joined each of our 5 sites then:
1) Visit the web sites above
2) Download our FREE SOFTWARE
3) Register an account and start playing to WIN!!
Claiming your 900% EASTER BONUSES is as easy as 1,2,3:
1) Log into your account
2) Redeem this coupon code in the cashier: KJEDB
or click on the scrolling marquee in the casino lobby
3) Deposit between $20-$100
Your account will INSTANTLY be your 900% SLOT BONUSES!!
Remember - This AMAZING OFFER can be redeemed 15 times
in EACH of our 5 sister sites between NOW and Sunday April 12th!!
#########
I'll contiue on another post as this is pretty big
Reply With Quote
Originally Posted by Pinababy69
Bookmarks