AussieDave
Banned User
- Joined
- Dec 24, 2005
- Location
- Australia
Hi All,
For a while now I've been receiving mailers from c-f-1.com.
Casino Share along with their other casino properties have been using this to send out their mailers.
Today I received one from Players Palace Casino. It had my Name and casino account attached.
However immediately following that email I received another one from c-f-1.com BUT this was SPAM.
I'm going to post everything I have so far on this including all headers.
My email program highlights possible phishing URL hence the true email URL are shown in some of these emails:
Players Palace Mailer:
Return-Path: <playerspalace@playerspalacemail.eu>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.14-fmsvn18487-ec538ff5) with LMTPA;
Sat, 11 Apr 2009 04:01:39 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: playerspalace@playerspalacemail.eu
Received: from mx6.messagingengine.com ([10.202.2.205])
by compute2.internal (LMTPProxy); Sat, 11 Apr 2009 04:01:39 -0400
Received: from dispatch22.c-f-1.com (dispatch22.c-f-1.com [213.121.128.123])
by mx6.messagingengine.com (Postfix) with ESMTP id A8E2C5796F
for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 04:01:38 -0400 (EDT)
Received: by dispatch22.c-f-1.com (PowerMTA(TM) v3.5r11) id hs17660mjucs for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 08:01:33 +0000 (envelope-from <playerspalace@playerspalacemail.eu>)
From: "Player's Palace Casino" <playerspalace@playerspalacemail.eu>
To: "xxxxxxx@fastmail.com.au" <xxxxxxx@fastmail.com.au>
Date: Sat, 11 Apr 2009 08:01:33 +0000
Subject: David, nine more high-tech prizes have to go!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=aspNetEmail=_801391440f6341248981efa54727d851"
X-Mailer: aspNetEmail ver 3.6.0.65
X-UEmailID: UE%3dQoNP1eTrOwcUZDuJ630d8w
X-DispatchID: CommunicatorCorp_639448
Message-ID: <APP5-487PN3Jb3b29539aa3543d69d8b74d489b5994f@APP5-487PN3J>
Dear David (tccrxxxxxxxx)
Beam me up, Slotty!
Nine lucky players have already won prizes like a state-of-the-art HP 2140 Mini-Note laptop, Apple iPhone 3Gs, Blackberries, cameras, camcorders and home theater systems.
This just goes to show that when it comes to promotions and prizes Players Palace Casino is light-years ahead!
There are loads more prizes to win, so make sure you enter and qualify today!
Enter here now!
Terms and Conditions:
* To enter this promotion, follow this link now.
* For an entry into the lucky draw, purchase 50 credits and wager 500 or more on ANY game.
* This offer may not be taken up in conjunction with any other offers.
* This promotional period: 16 30 April, 2009.
Want to find out more about Beam me up, Slotty? Follow this link!
Best Regards
Steven Barry
Casino Manager
24/7 Email support at FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=QoNP1eTrOwcUZDuJ630d8w&c=1&linkID=1291876'. Original text='playerspalacecasino@casinoemailsupport.com'. For more information on phishing click here.
You have selected to receive promotional email from us at this address: xxxxxxx@fastmail.com.au
In order to remove this email address from our lists, simply reply to this message or email
FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=QoNP1eTrOwcUZDuJ630d8w&c=1&linkID=1291877'. Original text='playerspalacecasino@casinoemailsupport.com '. For more information on phishing click here.
#########
Casino SPAM
Return-Path: <CurgamThursday@c-f-1.com>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.14-fmsvn18487-ec538ff5) with LMTPA;
Sat, 11 Apr 2009 03:18:27 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: CurgamThursday@c-f-1.com
Received: from mx2.messagingengine.com ([10.202.2.201])
by compute2.internal (LMTPProxy); Sat, 11 Apr 2009 03:18:27 -0400
Received: from dispatch40.c-f-1.com (dispatch40.c-f-1.com [213.121.129.209])
by mx2.messagingengine.com (Postfix) with ESMTP id A88FE137
for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 03:18:26 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=c-f-1.com;
h=From:To
ate:Subject:MIME-Version:Content-Type:Message-ID; i=CurgamThursday@c-f-1.com;
bh=q4AjOJHnBbtNuhFLQC8hx5wmH4g=;
b=pGX+CKcxPpk39cwYQSwKD4tNsgTojJGx4cqNURJMwO17GSNaZglSo6uglya0ibHYfpJAhjXBuIRJ
qgiwL2U1jOQsfZK/ovk9pptZ62AJ4M7Cz6KWlxGCD1ZyhNnHRD0ZFrOIW+4LStRUcMk54grYeCa/
afs2E6PrpNLJOZHtrP8=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=c-f-1.com;
b=XTHjrPd0Ka2fyKa1MaZiy4zWJB/XX4K9nsRLOKXEUwxJGdrhhooQQIByNb5kxq7ASnr6eHYaPFyS
7kZhsIrl0ymJuL3Pf10BxXE+V1NuWaiCQ6+Wdw3LT86y7NRRm7VhVY7LntORIUYkMjxoY+Liny6L
eJseG5iHNQOoC1SdzWA=;
Received: by dispatch40.c-f-1.com (PowerMTA(TM) v3.5r11) id hs12440i0hkp for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 07:18:18 +0000 (envelope-from <CurgamThursday@c-f-1.com>)
From: "Casino Manager" <CurgamThursday@c-f-1.com>
To: "xxxxxxx@fastmail.com.au" <xxxxxxx@fastmail.com.au>
Date: Fri, 10 Apr 2009 18:40:48 +0000
Subject: Win with out risking one dime
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=aspNetEmail=_eef1341277954f90b62e80559a283b36"
X-Mailer: aspNetEmail ver 3.6.0.65
X-UEmailID: UE%3dg4b8TigYj5KxaKVF2YYVYF
X-DispatchID: CommunicatorCorp_640334
Message-ID: <APP3-6ZF6R2J-I23edc6426f532e4694a1837840aa02a549@APP3-6ZF6R2J-I23>
Easter celebrations starts early with the most amazing bonuses
15 x 900% SLOT BONUSES for you to redeem this weekend!!
You can claim your SENSATIONAL 900% SLOT BONUSES @ each of our 5 sister sites:
* REAL VEGAS ONLINE: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298634'. Original text=' www.realvegasonline.com'. For more information on phishing click here.
* MIGHTY SLOTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298635'. Original text=' www.mightyslots.com'. For more information on phishing click here.
* SLOT NUTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298636'. Original text='www.slotnuts.com'. For more information on phishing click here.
* PLENTY JACKPOTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298637'. Original text=' www.plentyjackpots.com'. For more information on phishing click here.
* 99 SLOT MACHINES: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298638'. Original text=' www.99slotmachines.com'. For more information on phishing click here.
If you haven't yet joined each of our 5 sites then:
1) Visit the web sites above
2) Download our FREE SOFTWARE
3) Register an account and start playing to WIN!!
Claiming your 900% EASTER BONUSES is as easy as 1,2,3:
1) Log into your account
2) Redeem this coupon code in the cashier: KJEDB
or click on the scrolling marquee in the casino lobby
3) Deposit between $20-$100
Your account will INSTANTLY be your 900% SLOT BONUSES!!
Remember - This AMAZING OFFER can be redeemed 15 times
in EACH of our 5 sister sites between NOW and Sunday April 12th!!
#########
I'll contiue on another post as this is pretty big
For a while now I've been receiving mailers from c-f-1.com.
Casino Share along with their other casino properties have been using this to send out their mailers.
Today I received one from Players Palace Casino. It had my Name and casino account attached.
However immediately following that email I received another one from c-f-1.com BUT this was SPAM.
I'm going to post everything I have so far on this including all headers.
My email program highlights possible phishing URL hence the true email URL are shown in some of these emails:
Players Palace Mailer:
Return-Path: <playerspalace@playerspalacemail.eu>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.14-fmsvn18487-ec538ff5) with LMTPA;
Sat, 11 Apr 2009 04:01:39 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: playerspalace@playerspalacemail.eu
Received: from mx6.messagingengine.com ([10.202.2.205])
by compute2.internal (LMTPProxy); Sat, 11 Apr 2009 04:01:39 -0400
Received: from dispatch22.c-f-1.com (dispatch22.c-f-1.com [213.121.128.123])
by mx6.messagingengine.com (Postfix) with ESMTP id A8E2C5796F
for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 04:01:38 -0400 (EDT)
Received: by dispatch22.c-f-1.com (PowerMTA(TM) v3.5r11) id hs17660mjucs for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 08:01:33 +0000 (envelope-from <playerspalace@playerspalacemail.eu>)
From: "Player's Palace Casino" <playerspalace@playerspalacemail.eu>
To: "xxxxxxx@fastmail.com.au" <xxxxxxx@fastmail.com.au>
Date: Sat, 11 Apr 2009 08:01:33 +0000
Subject: David, nine more high-tech prizes have to go!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=aspNetEmail=_801391440f6341248981efa54727d851"
X-Mailer: aspNetEmail ver 3.6.0.65
X-UEmailID: UE%3dQoNP1eTrOwcUZDuJ630d8w
X-DispatchID: CommunicatorCorp_639448
Message-ID: <APP5-487PN3Jb3b29539aa3543d69d8b74d489b5994f@APP5-487PN3J>
Dear David (tccrxxxxxxxx)
Beam me up, Slotty!
Nine lucky players have already won prizes like a state-of-the-art HP 2140 Mini-Note laptop, Apple iPhone 3Gs, Blackberries, cameras, camcorders and home theater systems.
This just goes to show that when it comes to promotions and prizes Players Palace Casino is light-years ahead!
There are loads more prizes to win, so make sure you enter and qualify today!
Enter here now!
Terms and Conditions:
* To enter this promotion, follow this link now.
* For an entry into the lucky draw, purchase 50 credits and wager 500 or more on ANY game.
* This offer may not be taken up in conjunction with any other offers.
* This promotional period: 16 30 April, 2009.
Want to find out more about Beam me up, Slotty? Follow this link!
Best Regards
Steven Barry
Casino Manager
You do not have permission to view link
Log in or register now.
24/7 Email support at FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=QoNP1eTrOwcUZDuJ630d8w&c=1&linkID=1291876'. Original text='playerspalacecasino@casinoemailsupport.com'. For more information on phishing click here.
You have selected to receive promotional email from us at this address: xxxxxxx@fastmail.com.au
In order to remove this email address from our lists, simply reply to this message or email
FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=QoNP1eTrOwcUZDuJ630d8w&c=1&linkID=1291877'. Original text='playerspalacecasino@casinoemailsupport.com '. For more information on phishing click here.
#########
Casino SPAM
Return-Path: <CurgamThursday@c-f-1.com>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.14-fmsvn18487-ec538ff5) with LMTPA;
Sat, 11 Apr 2009 03:18:27 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: CurgamThursday@c-f-1.com
Received: from mx2.messagingengine.com ([10.202.2.201])
by compute2.internal (LMTPProxy); Sat, 11 Apr 2009 03:18:27 -0400
Received: from dispatch40.c-f-1.com (dispatch40.c-f-1.com [213.121.129.209])
by mx2.messagingengine.com (Postfix) with ESMTP id A88FE137
for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 03:18:26 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=c-f-1.com;
h=From:To
ate:Subject:MIME-Version:Content-Type:Message-ID; i=CurgamThursday@c-f-1.com;bh=q4AjOJHnBbtNuhFLQC8hx5wmH4g=;
b=pGX+CKcxPpk39cwYQSwKD4tNsgTojJGx4cqNURJMwO17GSNaZglSo6uglya0ibHYfpJAhjXBuIRJ
qgiwL2U1jOQsfZK/ovk9pptZ62AJ4M7Cz6KWlxGCD1ZyhNnHRD0ZFrOIW+4LStRUcMk54grYeCa/
afs2E6PrpNLJOZHtrP8=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=c-f-1.com;
b=XTHjrPd0Ka2fyKa1MaZiy4zWJB/XX4K9nsRLOKXEUwxJGdrhhooQQIByNb5kxq7ASnr6eHYaPFyS
7kZhsIrl0ymJuL3Pf10BxXE+V1NuWaiCQ6+Wdw3LT86y7NRRm7VhVY7LntORIUYkMjxoY+Liny6L
eJseG5iHNQOoC1SdzWA=;
Received: by dispatch40.c-f-1.com (PowerMTA(TM) v3.5r11) id hs12440i0hkp for <xxxxxxx@fastmail.com.au>; Sat, 11 Apr 2009 07:18:18 +0000 (envelope-from <CurgamThursday@c-f-1.com>)
From: "Casino Manager" <CurgamThursday@c-f-1.com>
To: "xxxxxxx@fastmail.com.au" <xxxxxxx@fastmail.com.au>
Date: Fri, 10 Apr 2009 18:40:48 +0000
Subject: Win with out risking one dime
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=aspNetEmail=_eef1341277954f90b62e80559a283b36"
X-Mailer: aspNetEmail ver 3.6.0.65
X-UEmailID: UE%3dg4b8TigYj5KxaKVF2YYVYF
X-DispatchID: CommunicatorCorp_640334
Message-ID: <APP3-6ZF6R2J-I23edc6426f532e4694a1837840aa02a549@APP3-6ZF6R2J-I23>
Easter celebrations starts early with the most amazing bonuses
15 x 900% SLOT BONUSES for you to redeem this weekend!!
You can claim your SENSATIONAL 900% SLOT BONUSES @ each of our 5 sister sites:
* REAL VEGAS ONLINE: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298634'. Original text=' www.realvegasonline.com'. For more information on phishing click here.
* MIGHTY SLOTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298635'. Original text=' www.mightyslots.com'. For more information on phishing click here.
* SLOT NUTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298636'. Original text='www.slotnuts.com'. For more information on phishing click here.
* PLENTY JACKPOTS: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298637'. Original text=' www.plentyjackpots.com'. For more information on phishing click here.
* 99 SLOT MACHINES: FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://www.c-f-1.com/d.aspx?e=UE=g4b8TigYj5KxaKVF2YYVYF&c=1&linkID=1298638'. Original text=' www.99slotmachines.com'. For more information on phishing click here.
If you haven't yet joined each of our 5 sites then:
1) Visit the web sites above
2) Download our FREE SOFTWARE
3) Register an account and start playing to WIN!!
Claiming your 900% EASTER BONUSES is as easy as 1,2,3:
1) Log into your account
2) Redeem this coupon code in the cashier: KJEDB
or click on the scrolling marquee in the casino lobby
3) Deposit between $20-$100
Your account will INSTANTLY be your 900% SLOT BONUSES!!
Remember - This AMAZING OFFER can be redeemed 15 times
in EACH of our 5 sister sites between NOW and Sunday April 12th!!
#########
I'll contiue on another post as this is pretty big
:notworthy
