Weiter geht's mit CRoom ...

Wie schon in der Spam von vorgestern wirbt BGO Entertainment Limited auch heute wieder für "CRoom". Ebenfalls führen die Links des identischen Textes wieder zu "wehavebestoffer.com" und auch die Absenderadresse ist unverändert geblieben.

Die Domain "wehavebestoffer.com" wird übrigens unter der IP 185.60.145.2 in der Schweiz bei "SOFTplus Entwicklungen GmbH" gehostet. Sie dient nur als Sprungbrett über "ads.ellmountgaming.com" im Vereinigten Königreich zu "casinoroom.com" in Costa Rica:

Return-Path: web.de.483010.MeinName@size.wehavebestoffer.com
Received: from size.wehavebestoffer.com ([185.60.145.9]) by mx-ha.web.de (mxweb106) with ESMTP (Nemesis) id 0M9Zop-1XnPwX0Kr9-00D3Yi for [MeinName@web.de]; Sat, 22 Nov 2014 11:56:22 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=wehavebestoffer.com; s=s512; l=7449; x=1417258581; h=From:To: Subject:Content-Type:Date:Message-ID; b=aTpLRKGZlomYwNUFaMmvE/ik 1WMjrCD2V2EYQCoJiCavqBKcBq+TpfJBmAH+gdc9R3od0VmEprRVrpmyPCNLRw==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=wehavebestoffer.com; s=s512; l=7449; x=1417258581; h=From:To: Subject:Content-Type:Date:Message-ID; bh=wtEfiSab6ZfiC+WyrlCGb0t K+/8=; b=e9S2w2Sh1j0hjO6kAUoc0wU9jLteIjUhhuw90HuWRpNJNw34OSo7jW4 5+YYWn11xzMk9fWySeCAugevdmr4NVw==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=wehavebestoffer.com; b=A1fytkmZ+LgXahiKxpyZoEW3ll8MiW4anfRSWoLtDXXByie2+FyQeYUqVtcjP2sJ+Vi/mYmwPDQwvJxJeXpzNg==;
Received: from size.wehavebestoffer.com [185.60.145.9] by size.wehavebestoffer.com [185.60.145.9]; Fri, 21 Nov 2014 22:06:00 +0100
MIME-Version: 1.0
From: C.Room[CRoossm@wehavebestoffer.com]
To: MeinName@web.de
Subject: 120 Freespins on Starburst as an extra welcome gift!
Content-Type: multipart/alternative; boundary="-=3dcf2b1b77ae968d29f9e6ffecfb2c53";
Date: Fri, 21 Nov 2014 22:06:00 +0100
Message-ID: [2-483010-lRmLiV2dA5hmb1mclhWbph2ZY9maP@wehavebestoffer.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]
X-UI-Filterresults: notjunk:1;V01:K0:LhkzuXSujnk=:YvSACOs8oeDLdsfDLuyMeIcMSS S7aocSZC11pXiFmCkusUiDyOZQAhhw2KlvG5rZmrLFD9U4o86aP0zXeMxRJyMixTfEdwiUzIV DE23NkO9psSmwh98RXHGuRoVcKnLmO49di5Eve4dikiaHV1jujro5a7L4xUWAk/AvLlo/qqtM evCPM7CqXn3W+pJbJfHpTJ3fv3af8xtScW99oOT866+UpevW3dELXTgITAPAsSm9IqrSjb12G rHLseBrYGnVRruOBFfrduh4OGXRRjxtn0NxDyr5o5i/qARHEnnCX7MHlpG8ozoRt4z/GZgNv2 J3o5h5A7fSm0MPFgIl5++v7oJg5/wkvPjHOGNSprazAMX1SazS1VEGAiU/s3SWU/3h8U14X/w 6tIuOFdxoCTRMXihfeu9rJ0CAIJ5XIxanAuvbo2uY85wbmXTeChJm8Q9d36Hf0UZGPcingoi8 ApU0tUe4BwSwC7BfaummMT1ZK7qrIPQ/x1lXfBA9dM0FJGCq4Rpap0BY37w936dq4uXaiosFX pPMFEzGZ3wBBjjni1yEkVBYnp9SVNf2Dk1Ck8xXdqF8cVJKQPWSt4fshUdUs5hbTO0WEheDOT VjuKr8LvnNozj8CmB+Ke+nwNGRhE7JUuZnmF0YvAooEGABg50TI3VkWKMfZKYh3js9Ej4OZe7 MFl29ZH2WJjfqsQUB0j/B2JYhdu7oQzOk4Vxg/sJspXYc0XbuXwwD5+56dTqdgoD4wPdzq6Jg qZumfpW+lf7Sphb+q3r9QEJcLlUfoClytdh+c0NIhm+2tdz0F7DgVLy52M8iZwj7OTb+c/9pp 5iHQvEv8d1hTnEFwRzBb3L2ThmiRGsKmAUIjJ8I1pBsrEx1awZiqYieYsFEHbyR+rCDCowwMw Zxx28jK6oFkMYTEjpuIgOeskR0XhGKaccgo7cmTOncsl4SSWd+k/oRPAdy/f10bs4Wz2UXbTa QBIKhcER4Jr37MHYmeHeqex9uCB2Qy1vbJtsyd+x0dTsRgIjFvAB8cYV6qwhLLKZT0ZjQMCPf tlF/JLFekL+EKsHb6kyg2Fi+RCsvjChrbRJQfV2AE2XMdql4y52GzE0V3tPVDRIDNeNVGAYVo UX/wQULRnD9mmJ5XD0xGVlAe4qapU8VLlDSHNjL9b74WlLPI9rIrMaPTvCWz51jCNZV59uaRz rgBe9ad0mmlSQhoIbT/Ox2UL7liCBdLa0cI7HTaYbvxpeSstkN0WwjWR4ILyLW0jNese1hRmd FJ3/1RkCVJFXOAWULQjuBK827Yeg3utWFo/9SM5X8/MWpXyaZKfE1Msz2kph2EBtINRJ9E/bj SNGrqPH/sFW/XPCSeJJ2NDVtUi/g26B5O//eSRjrNNlS4VuR/nS3h/plYLoMh/JI1arQ3MEdk Esl/fyEr6IJkJTeakesorsEUk9lZLV2v8u1QApyw5STTDE43e0EETrEQcZkIus2OzWwTfI7vT 0DLEv7TbninZPM13WvvgnoLjS1kbWe5ADCVXSlJSFRxm+uOwqAZaywlZ8o+CYcOp1brVzrPMO JRyelIWzKHAVh7L5h3EGqpsXOB7FGCBXk9RmOQnSTzIojPOsBPcST7NRQQkAzOynodmEFdr9+ 3bKiBAcLhjM=