cNotes 検索 一覧 カテゴリ

注文したKindleが届くらしい - Your Kindle e-book Amazon receipt

Published: 2013/02/06

Amazonから注文したKindleに関するメールが届きます。

注文してませんが。

これは結局いつものBHEK2を利用した攻撃サイトへ誘導されます。

誘導URLはこれ。

いつものようにWordpressを使っているサイトが利用されています。

プラグインの「tell-a-friend」のディレクトリにリダイレクタが設置されています。

 http://seanjewelersaruba.com/wp-content/plugins/tell-a-friend/orderedlistamazon.html
 http://v-mishchenko.com/wp-content/plugins/tell-a-friend/orderedlistamazon.html
 http://weddingdirection.com/wp-content/plugins/tell-a-friend/amazonbrorder.html

飛ばされ先はここ。

 http://starsoftgroup.net/detects/weeks_movie_whether.php

domainIP逆引きASAS NameCountry
en-center.ru81.177.141.122NONE8342RTCOMM-AS_OJSC_RTComm.RURussianFederation
dolcevita-rostov.ru92.53.96.221gagarin.timeweb.ru.9123TIMEWEB-AS_OOO_TimeWebRussianFederation
larafit-univoran.com37.59.53.182ks3266927.kimsufi.com.16276OVH_OVH_SystemsFrance
bmvsupermarket.com111.118.212.190indifer.websitedns.in.18229CTRLS-AS-IN_CtrlS_Datacenters_Ltd.India
realblackdiamonds.com182.18.152.157static-182-18-152-157.ctrls.in.18229CTRLS-AS-IN_CtrlS_Datacenters_Ltd.India
shakaeng.com184.106.55.68NONE19994RACKSPACE_-_Rackspace_HostingUnitedStates
batukbhairav.com174.122.148.1589e.94.7aae.static.theplanet.com.21844THEPLANET-AS_-_ThePlanet.com_Internet_Services_Inc.UnitedStates
capkassociates.com174.120.23.1267e.17.78ae.static.theplanet.com.21844THEPLANET-AS_-_ThePlanet.com_Internet_Services_Inc.UnitedStates
fraternal.ru174.120.242.251fb.f2.78ae.static.theplanet.com.21844THEPLANET-AS_-_ThePlanet.com_Internet_Services_Inc.UnitedStates
sriwijaiklan.com174.120.232.195c3.e8.78ae.static.theplanet.com.21844THEPLANET-AS_-_ThePlanet.com_Internet_Services_Inc.UnitedStates
weddingdirection.com174.132.77.1549a.4d.84ae.static.theplanet.com.21844THEPLANET-AS_-_ThePlanet.com_Internet_Services_Inc.UnitedStates
wordofhisgraceministry.com74.53.117.603c.75.354a.static.theplanet.com.21844THEPLANET-AS_-_ThePlanet.com_Internet_Services_Inc.UnitedStates
jingxingshi.com221.231.140.143NONE23650CHINANET-JS-AS-AP_AS_Number_for_CHINANET_jiangsu_province_backboneChina
hacksplay.com78.46.37.187s57.linuxpl.com.24940HETZNER-AS_Hetzner_Online_AGGermany
phenom-br.com189.113.7.50hw96.webservidor.net.28209Brazil
deltaoiltrading.com50.6.115.47NONE32392OPENTRANSFER-ECOMMERCE_-_Ecommerce_CorporationUnitedStates
gununoyuncagi.com94.73.146.7094-73-146-70.cizgi.net.tr.34619CIZGI_Cizgi_Telekomunikasyon_Hizmetleri_Sanayi_Ve_Ticaret_Limited_SirketiTurkey
botspvtlimited.com108.167.184.34NONE36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
driflowers.com184.172.184.192ns2882.hostgator.com.36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
gspublishinghouse.com50.116.74.221NONE36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
igadget4all.com50.116.72.219NONE36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
joanaduartefan.com50.97.209.3550.97.209.35-static.reverse.softlayer.com.36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
millenniumsl.com108.167.136.107NONE36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
seanjewelersaruba.com50.116.122.160ns1674.websitewelcome.com.36351SOFTLAYER_-_SoftLayer_Technologies_Inc.UnitedStates
fatlossfactorscams.com93.115.84.136lh21018.voxility.net.39743VOXILITY-AS_Voxility_S.R.L.Romania
alrayyanpools.com208.91.198.76cp-27.webhostbox.net.40034CONFLUENCE-NETWORK-INC_-_Confluence_Networks_IncUnitedStates
swimtemp.ru89.111.178.165fe-tp-1.hc.ru.41126CENTROHOST-AS_JSC_CentrohostRussianFederation
balkurabiyecim.com93.187.205.2ns32.dnscini.com.43391NETDIREKT-TR_Netdirekt_A.S.Turkey
paperassault.com50.87.138.23250-87-138-232.unifiedlayer.com.46606UNIFIEDLAYER-AS-1_-_Unified_LayerUnitedStates
pasadenacaregiver.com173.254.57.150173-254-57-150.unifiedlayer.com.46606UNIFIEDLAYER-AS-1_-_Unified_LayerUnitedStates
qsbim.com50.87.23.19650-87-23-196.unifiedlayer.com.46606UNIFIEDLAYER-AS-1_-_Unified_LayerUnitedStates
v-mishchenko.com74.220.207.112host112.hostmonster.com.46606UNIFIEDLAYER-AS-1_-_Unified_LayerUnitedStates
ginm.ru79.174.68.5d756.colo.hc.ru.47385HOSTING-COMPANY-AS_Hosting_Company_RBCRussianFederation
saucesanddipszone.com119.59.120.17ns99.hostinglotus.net.56067METRABYTE-TH_453_Ladplacout_JorakhaebuaThailand

[カテゴリ:spam観察日記]

by jyake