http://{BLOCKED}ncessurplus.com/topic/accidentally-results-stay.php?aZwosKokEzNu...

 Analysis by: Kenneth Guang Zheng Lee

 URL BLOCKING DATE/TIME: 24 Jul 2013 06:05:00 AM GMT-8
 RATING: HIGH
 DOMAIN: fragrancessurplus.com/
 CATEGORY: Disease Vector
 DESCRIPTION:

JS_OBFUSC.BEB loads a JAR file from this URL and it passes parameters to it if the computer has a particular Java version installed. This malware is related to a spammed message that leverages the news on the royal baby, Prince George.