Tricky image spam
I got two spam e-mails (to two of my main addresses) advertizing pokerloco, a Swedish (they say Costa Rica, but nobody’s fooled by that) owned poker site.
The spam originated from Ukraine and Russia:
81.21.14.3
78.85.26.6
But here’s the wrinkle. The HTML in the file was a bit tricky, and I wasn’t sure the images would load. So I checked, and found that when viewed in an HTML browser/viewer, you’d only see an image flogging a stock (CHINA YOUTV CORP) from one of these sites:
mediapix.ru
imgnation.net
The pokerloco e-mail looks as though it’s an e-mail sent from them to one of their customers, somebody by the name of Anders. And it was written in Swedish. It might have been cribbed from somewhere, then used to confuse spam hunters.