今日のspam

久しぶりの迷惑メール曝しです。1週間ほど前から、やっかいなやつが多数届いています。
（spam対策のため、メールアドレスやURLは一部伏せます）

Received: from [190.24.237.128] ([190.24.237.128])
by asm2.tnc.ne.jp ([218.219.15.244])
with ESMTP id 2009082422:13:48:899491.7297.873
Mon, 24 Aug 2009 22:13:47 +0900 (JST)
Message-ID: <000d01○○○00a8c0@outsizes>
From: "Monica Ham"
To:
Subject: With that watch you will shine like the diamonds on it.
Date: Mon, 24 Aug 2009 08:13:42 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CA24BC.B42C8AB0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-TERRACE-SPAMMARK: YES-Spam_Category:ETC (SR:0.00)
(SRN:BAD_Format:FAKE_MSOE31) -----------------
　
This is a multi-part message in MIME format.
　
------=_NextPart_000_0007_01CA24BC.B42C8AB0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
　
Brand name quality timepieces are affordable for everybody =96 so don=92t m=
iss your opportunity and choose the watch you like out of big variety of pr=
ecious timepieces.
 

Our store
http://groups.yahoo.com/group/○○○nkyrgg
------=_NextPart_000_0007_01CA24BC.B42C8AB0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

＜!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
＜HTML>＜HEAD>
＜META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1"=
>
＜META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
＜STYLE>.
＜/STYLE>
＜/HEAD>
＜BODY bgColor=3D#ffffff>
＜DIV align=3Dcenter>＜FONT face=3DArial size=3D2>Brand name quality timepiec=
es are affordable for everybody =96 so don=92t miss your opportunity and ch=
oose the watch you like out of big variety of precious timepieces.＜/FONT>＜/=
DIV>
＜DIV align=3Dcenter>＜/FONT> ＜/DIV>
＜DIV align=3Dcenter>
＜A href=3D"http://groups.yahoo.com/group/○○○nkyrgg">Our store＜/A>＜/FONT>＜/=
DIV>＜/BODY>＜/HTML>

------=_NextPart_000_0007_01CA24BC.B42C8AB0--

（HTMLタグを無効化するため、一部「<>」を「＜＞」に変更しました）

• メール内URL調査結果

（aguse.jp：http://www.aguse.jp/?m=w&url=http%3A%2F%2Fgroups.yahoo.com%2Fgroup%2Fiscvnkyrgg&x=102&y=16）

• メールヘッダ調査結果

（aguse.jp：http://www.aguse.jp/?m=m&id=ab6d249c6c0192c52b02dbecae52119e85f94ec0%2Fdbe8726fbdecfcb4e92e0dd314300027f94d1a1f）

・メール送信元はコロンビア、ブラックリスト入りしています。URL表示サーバはアメリカのYahoo.com、ブラックリスト入りしていません。
・やっかいなのが、スパム内URLの「Yahoo!Groups」（http://groups.yahoo.com/）は正規のサイトのためか、うまくプロバイダのスパムフィルタに引っかかってくれません。そして最近この「Yahoo!Groups」を悪用したスパムが多量に着信しています。
・今日届いた分の、発信元IPアドレスと件名とURLだけ列挙してみます。

※注意：以下URLをそのまま掲載しますが、不正な情報サイトの可能性が非常に高いので、不用意にリンクを開かないでください。

Received: from [196.3.183.72] ([196.3.183.72])

Subject: If you have a huge stick, women will never tell you to get out of bed.

http://groups.yahoo.com/group/ofwnaqhyly

Received: from [201.9.204.196] ([201.9.204.196])

Subject: The more inches you have the more times your lady will hit the point.

http://groups.yahoo.com/group/autokjjida

Received: from [201.9.204.196] ([201.9.204.196])

Subject: Change your little pecker to enormous beast.

http://groups.yahoo.com/group/autokjjida

Received: from [211.247.51.3] ([211.247.51.3])

Subject: Feel the wonder of having a tremendous instrument.

http://groups.yahoo.com/group/tnmgfausnh

Received: from [221.120.240.53] ([221.120.240.53])

Subject: =?koi8-r?B?QmUgYSByZWFsIG1hbiCWIGJpZ2dpZXNpemUgeW91ciBkZXZpY2Uu?=

http://groups.yahoo.com/group/fbcaroplij

Received: from [124.121.232.150] ([124.121.232.150])

Subject: If you had a gold fish, you would ask for a bigger instrument.

http://groups.yahoo.com/group/qciomtarhn

Received: from [118.68.62.255] ([118.68.62.255])

Subject: Every macho should have a cool watch.

http://groups.yahoo.com/group/xldajblrwc

Received: from [123.5.232.7] ([123.5.232.7])

Subject: No luck with pretty women? Enlarging your stick is your way out.

http://groups.yahoo.com/group/otqiwjtymn

Received: from [123.24.180.114] ([123.24.180.114])

Subject: =?koi8-r?B?WW91IGNhbiBzYXkgk2dvb2QtYnlllCB0byB5b3VyIG9sZCB1Z2x5IHdh?=
=?koi8-r?B?dGNoLg==?=

http://groups.yahoo.com/group/muxedgfrdt

・今日の12:00以降半日でこれだけの数が．．．おのれスパマーめ！！