http://{BLOCKED}ncessurplus.com/adobe/

July 29, 2013

• Email
• Facebook
• Twitter
• Google+
• Linkedin

 Analysis by: Kenneth Guang Zheng Lee

---

 URL BLOCKING DATE/TIME: 23 Jul 2013 11:32:00 PM GMT-8

 RATING: HIGH

 DOMAIN: fragrancessurplus.com/

 CATEGORY: Phishing

 DESCRIPTION:

JS_OBFUSC.BEB redirects browsers to this site. This malware is related to a spammed message that leverages the news on the royal baby, Prince George.

Related URLs

• http://{BLOCKED}ncessurplus.com/topic/accidentally-results-stay.php?aZwosKokEzNu=vzmAn&vNEop=hEIaaGrlzBScvF
• http://{BLOCKED}ncessurplus.com/topic/accidentally-results-stay.php?yqAFwbPCLno=5257533130&ioidSagKPlS=x&wSaZlXDijTvPq=302g572f5352572i572f333357312h522j2h2g562f2j&wiZCFhFFDxy=2d2b2d2b2d2b2d

Related Malware

• JS_OBFUSC.BEB

Related SPAM

• Royal Baby Birth with a Blackhole Exploit Kit Spam Twin