Start winning big with our generous welcome bonus at Euro Dice Stars!
Received-SPF: pass (domain of speelbosjoure.nl designates 22.214.171.124 as permitted sender)
Authentication-Results: mta1029.mail.ird.yahoo.com from=speelbosjoure.nl; domainkeys=neutral (no sig);
from=speelbosjoure.nl; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO speelbosjoure.nl) (126.96.36.199)
by mta1029.mail.ird.yahoo.com with SMTP; Tue, 02 Oct 2012 19:28:28 +0000
Date: Tue, 02 Oct 2012 12:28:28 -0700
From: 300% Bonus <firstname.lastname@example.org>
Subject: Start winning big with our generous welcome bonus at Euro Dice Stars!
Content-Type: text/plain; charset=iso-8859-1
Euro Dice Stars Casino has a whole range of excellent games.
Deposit 100 Euro and play with 400 Euro.
With loads of money to be won and an excellent operating system you just a click away from your first million!
Start playing today to win the big bucks. http://wwwt.igreattopeudice.pl
The link in the e-mail points to a random site that loads the actual spamvertised site in an iframe. The actual spamvertised site is also not visible in plain sight but the URL is disguised in Unicode characters, for example starseurodice.com is displayed as:
Only two main websites are associated with this spam namely starseurodice.com and istarseurodice.com and both are hosted on Russian servers (which shouldn't come as a surprise). The link in the spam e-mail always points to a domain containing the phrase eudice or eurodice. Most of the sites are .pl but some are .net and .com. It is also noticeable that the spammers use different servers for the same domains (most probably to prevent one server from being overloaded, because they send out a lot of spam e-mails on a daily basis). For example you would get one spam e-mail pointing to wwwt.igreattopeudice.pl and another one pointing to wwwo.igreattopeudice.pl. At the same time the spammers are mixing up the text in the spam e-mail while pointing to the same site.
The following domain names, associated with this spam, have been recorded so far:
Below is a screenshot of the spamvertised website. You will immediately notice the similarities between this site and the two examples mentioned before:
Related Cyber Criminal Profiles:No related profiles found.
Similar Spam Examples:Seven Stars Online Casino - Spring gift, 1000 at registration
Casino Action Spam - You are among the winners
Online Gambling and Casino Spam - Congratulations, you have just won
World Casino Online Gambling Spam
Anonymous Online Casino Spam