（元）うつ病患者の独り言 for はてなブログ

★ここ（はてなブログ）は、自身のポータル（自己紹介、リンク集）および、はてなダイアリー過去掲載分保管用に運用しています。通常のつぶやきはX（Twitter）及びタイッツーをどうぞ。　※ブログコメントは無効にしています。反応はX（Twitter）またははてなブックマークでお願いします。

今日のspam

Spam

昨日から同一文面の英文迷惑メールが大量発生しています！
そのメールの情報を調べて曝してみます。
（spam対策のため、メールアドレスやURLは一部伏せます）
　
まず1件、ヘッダまで曝してaguse.jpで調査してみました。

Received: from [89.190.52.77] ([89.190.52.77])
by asm1.tnc.ne.jp ([218.219.15.243])
with ESMTP id 2009050819:49:08:803356.15353.546
Fri, 08 May 2009 19:49:07 +0900 (JST)
Message-ID: <000d01○○○fdc6c0$6400a8c0@bayouh3>
From: "Lupe Walden"
To:
Subject: We know how to stop the aging process.
Date: Fri, 8 May 2009 12:48:26 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C9CFCA.83FDC6C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-TERRACE-SPAMMARK: YES-Spam_Category:ETC (SR:0.00)
(SRN:BAD_Format:FAKE_MSOE31) -----------------
　
This is a multi-part message in MIME format.
　
------=_NextPart_000_0007_01C9CFCA.83FDC6C0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
　
【以下テキスト部本文デコード】
　

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe
you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service
advertised. Prices and item availability subject to change without notice.

2009 Microsoft | Unsubscribe | More Newsletters | Privacy

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052




This message was sent from iContact to zamorano@tokai.or.jp. It was sent from: iContact AutoResponder, 2635 Meridian Pkwy Suite 200, Durham, NC 27713. You can modify/update your subscription via the link below.





View this message in the iContact Community:



View message




Comment on this message




Receive as RSS

　
------=_NextPart_000_0007_01C9CFCA.83FDC6C0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
　







【HTML部本文は正常に表示できないため省略】


------=_NextPart_000_0007_01C9CFCA.83FDC6C0--


  • HTML部分の文章転載

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

2009 Microsoft | Unsubscribe | More Newsletters | Privacy

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

  • メール内URL調査結果

（aguse.jp：http://www.aguse.jp/?m=w&url=http%3A%2F%2Falice.xowgamid.cn%2F%3F%2Ftake.html&retry.x=76&retry.y=6）

  • メールヘッダ調査結果

（aguse.jp：http://www.aguse.jp/?m=m&id=f69b85af36dc8cce312021082f62d99da2758361%2F76f3c3771a7d27a541cae741fd576b32819b630e）

・メール送信元はチェコ共和国、ブラックリスト入りしています。URL表示サーバは中国、ブラックリスト入りしています。
　
・で、このスパム、本文は同一のまま、件名や送信元をコロコロと変更させて大量に送りつけてきます。今日来た分の送信元と件名を一覧にしてみます。

Received: from [24.121.117.136]
Received: from [85.108.156.16]
Received: from [89.178.167.189]
Received: from [78.131.182.250]
Received: from [189.26.170.54]
Received: from [94.29.6.37]
Received: from [90.168.97.89]
Received: from [201.13.114.68]
Received: from [173.45.219.198]
Received: from [218.107.10.27]
Received: from [190.20.227.150]
Received: from [41.205.127.241]
Received: from [75.90.173.172]
Received: from [190.108.143.131]
Received: from [187.22.92.18]
Received: from [78.183.74.162]
Received: from [74.223.62.154]
Received: from [78.179.227.180]
Received: from [201.17.20.49]
Received: from [88.227.135.183]
Received: from [173.28.92.122]
Received: from [190.138.99.167]
Received: from [77.72.244.68]
Received: from [85.103.177.188]
Received: from [217.43.32.204]
Received: from [77.200.94.208]

  • 送信元メールアドレス

From: "Bud Kraft"
From: "Alex Cunningham"
From: "Cecile Mcmillan"
From: "Gregorio Lord"
From: "Ila Napier"
From: "Alonzo Benavides"
From: "Crystal Mccray"
From: "Deann Tripp"
From: "Marcella Connor"
From: "Twila Pickett"
From: "Carole Gibbs"
From: "Felicia Mcdonough"
From: "Johnnie Stark"
From: "Meredith Vann"
From: "Edna Barry"
From: "Cara Tidwell"
From: "Hugo Salgado"
From: "Adela Oneal"
From: "Shawn Lockhart"
From: "Brandie Heard"
From: "Lynda Riddle"
From: "Meagan Thomason"
From: "Carlo Garrett"
From: "Chris Gentry"
From: "Courtney Conway"
From: "April Diggs"

  • 件名

Subject: We got tablets to heal any illness you suffer from.
Subject: We know how to wake your little friend up.
Subject: Your device is so tiny she scarcely finds it in bed?
Subject: Your bedroom doesn稚 smell like passion anymore? alter it.
Subject: We have pills to heal any pain you suffer from.
Subject: Being healthy and sound has to be your prime task.
Subject: Take a glance at tablets of super quality but friendly prices.
Subject: We offer cheap medicine from every illness.
Subject: We know how to get your little buddy up.
Subject: We have drugs to cure any disease you suffer from.
Subject: You have no strength any more to please your lover?
Subject: Forget about bad mood and be in a perfect mood all the time.
Subject: We will take a proper care of your body and soul.
Subject: You could turn back the hands of time and be young again.
Subject: You can be on top in bedroom again !)just ask us for assistance.
Subject: Your male energy and endurance will be regenerated again.
Subject: If you feel that your manhood is already dead,contact us.
Subject: Your bedroom doesn稚 smell like love anymore? alter it.
Subject: Lost your libido and stamina? We would help you look for it.
Subject: If watering your tool doesn稚 help it grow we know what works.
Subject: Show your lover that there still can be a lot of passion in your bed.
Subject: Take a glance at tablets of great quality but low prices.
Subject: Thanks to us your private life will be back on track.
Subject: Wanna be irresistible in that bikini? Keep fit with us.
Subject: We got tablets to heal any illness you suffer from.
Subject: Your male stamina and endurance will be restored again.

・．．．全27件。IPアドレス、メールアドレス、件名、いずれも重複したものはありません。ちなみに件名（Subject:）は、「=?koi8-r?」から始まるエンコードされたものが混じってますが、デコードしたものを掲載しました。
・なお、送信先（To:）も、ほとんどが僕のメールアドレスではなく、偽装したかBCCで送付されてきたものです。
・全メールの共通点は、本文が「About this mailing:」で始まっていること。これをキーワードにすれば、取りあえず排除は出来るでしょう。
　
・．．．これだけの数の転記、コピー＆ペーストでも疲れた。おのれ、スパマーめ！