A New Year For Us - html添付スパム

添付されるhtmlファイル

 foryou.html

難読化を解読すると

 ｈttp：//myhometourgallery.com／xxx.html

アクセス先のスクリプト内のURL

 ｈttp：//occurleast．com　　→　薬屋
 
 ｈttp：//assofy．angiestargallery.com:8080／index.php?pid=10　→PDF等

サブジェクトと文面のみが違う同タイプもあります。

 Expressions Of Love
 How Much I Love You
 I Only Love You
 If Only I'd Known
 Never Another
 No Fooling This Love
 So Perfect For Me
 To My Amazing Guy
 Why You?
 You Are

   Domain Name: MYHOMETOURGALLERY.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS37.DOMAINCONTROL.COM
   Name Server: NS38.DOMAINCONTROL.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 14-sep-2009
   Creation Date: 18-jun-2009
   Expiration Date: 13-sep-2019

 myhometourgallery.com has address 97.74.144.131
 
 NetRange:   97.74.0.0 - 97.74.255.255 
 CIDR:       97.74.0.0/16 
 OriginAS:   AS26496
 NetName:    GO-DADDY-SOFTWARE-INC
 NetHandle:  NET-97-74-0-0-1
 Parent:     NET-97-0-0-0-0
 NetType:    Direct Allocation
 NameServer: CNS1.SECURESERVER.NET
 NameServer: CNS2.SECURESERVER.NET
 NameServer: CNS3.SECURESERVER.NET
 Comment:    Please send abuse complaints to abuse@godaddy.com
 RegDate:    2008-08-14
 Updated:    2008-08-14

   Domain Name: OCCURLEAST.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPENDLAKE.COM
   Name Server: NS2.SPENDLAKE.COM
   Name Server: NS3.STREAMCROSS.COM
   Name Server: NS4.STREAMCROSS.COM
   Name Server: NS5.0QF.RU
   Name Server: NS6.0QF.RU
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-jun-2010
   Creation Date: 22-jun-2010
   Expiration Date: 22-jun-2011

 OCCURLEAST.COM has address 111.224.252.6
 
 inetnum:      111.224.0.0 - 111.227.255.255
 netname:      CHINANET-HE
 descr:        CHINANET hebei province network
 descr:        China Telecom
 descr:        No.31,jingrong street
 descr:        Beijing 100032
 country:      CN

   Domain Name: ANGIESTARGALLERY.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS11.DOMAINCONTROL.COM
   Name Server: NS12.DOMAINCONTROL.COM
   Status: ok
   Updated Date: 23-oct-2009
   Creation Date: 23-oct-2003
   Expiration Date: 23-oct-2011

 assofy.angiestargallery.com has address 138.4.113.20
 
 inetnum:        138.4.0.0 - 138.4.255.255
 netname:        UPM
 descr:          Universidad Politecnica de Madrid
 descr:          Madrid, Spain
 country:        ES

[カテゴリ:spam観察日記]