cNotes 検索 一覧 カテゴリ

Transaction details - CVE2011-3544

Published: 2012/01/26

その他にも、サブジェクトにバリエーション多数

 Transaction_details 
 Information_on_your_pending_transaction 
 Notification_of_your_pending_transaction 
 Your_ACH_transaction_details 
 Your_pending_transaction 
 Details_of_your_pending_transaction 
 Notice:_pending_transaction 
 Pending_transaction_from_your_account 
 Status_of_your_transaction:_pending 

文面はいつもの系統。

文中のリンクはこのような感じ。

乗っ取られ系ですかね。(.coopとか珍しい)
http://0349a74.netsolhost.comUvRgYbruindex.html
http://client.derryberryaudio.comgJCNqnm1index.html
http://fastbusinesscomputing.com.auKHHK4CsAindex.html
http://ftp.gaeilge.ieLutM3TN7index.html
http://psottocornola.altervista.orgSqLg7YVMindex.html
http://0319417.netsolhost.comLutM3TN7index.html
http://0319417.netsolhost.comSqLg7YVMindex.html
http://0349a74.netsolhost.comGdCDpsNHindex.html
http://a2ztradingco.comdqTp4jFKindex.html
http://advocacydirect.comyJ4UnjnSindex.html
http://afterhoursmustangs.netGkACRjNTindex.html
http://afterhoursmustangs.netdqTp4jFKindex.html
http://aigr.itLMRbSuLfindex.html
http://aigr.itSqLg7YVMindex.html
http://client.derryberryaudio.comK9DNfNRuindex.html
http://client.derryberryaudio.comzYygPNJDindex.html
http://connerth.de0PU2Gdpqindex.html
http://connerth.de2JGrW5ieindex.html
http://connerth.de4Hxi2Mdyindex.html
http://constructionstones.comSqLg7YVMindex.html
http://fastbusinesscomputing.com.ausV0bg9agindex.html
http://ftp.waeva1.comLMRbSuLfindex.html
http://homedesk.com.brLMRbSuLfindex.html
http://mormeck.comLutM3TN7index.html
http://nicolekrell.deGkACRjNTindex.html
http://nolly.piranho.deGkACRjNTindex.html
http://plasberg.infoLMRbSuLfindex.html
http://plasberg.infoSqLg7YVMindex.html
http://postcard.customer.netspace.net.auHaeaU5xFindex.html
http://postcard.customer.netspace.net.auqwQti8Vgindex.html
http://psottocornola.altervista.orgLutM3TN7index.html
http://psottocornola.altervista.orgdqTp4jFKindex.html
http://ryanphillips.com.auNQLzQo1hindex.html
http://smrbuilders.net.inLMRbSuLfindex.html
http://smrbuilders.net.indqTp4jFKindex.html
http://southernislandtravels.comLutM3TN7index.html
http://teamit.com.auLMRbSuLfindex.html
http://theppcservices.comLutM3TN7index.html
http://trasteverehouse.itGkACRjNTindex.html
http://trasteverehouse.itdqTp4jFKindex.html
http://urbanbites.net.auNQLzQo1hindex.html
http://weaverstreetmarket.coopGkACRjNTindex.html
http://weaverstreetmarket.coopLMRbSuLfindex.html
http://weaverstreetmarket.coopLutM3TN7index.html
http://webinteli.comSqLg7YVMindex.html
http://xtechpc.comyJ4UnjnSindex.html

index.htmlの中身はこれ。

以下いつもどおり。


domainip逆引きASAS name
telegrafia.ro188.215.54.121NONE34358CLAXTELECOM_CLAX_TELECOM_SRLRO
provelavoro1982.altervista.org176.9.24.196ns145.altervista.org.24940HETZNER-AS_Hetzner_Online_AG_RZDE
saraldo.com82.165.79.117kundenserver.de.8560ONEANDONE-AS_1&1_Internet_AGDE
www.weka-druk.nl80.65.96.106web6.introweb.nl.20847PREVIDER-AS_Previder_B.V.NL

[カテゴリ:spam観察日記]

by jyake