http://{blocked}rp.com/stat/ga te_in.php

 Analysis by: Paul Tiu

 URL BLOCKING DATE/TIME: 24 Dec 2010 08:25:00 AM GMT-8
 RATING: HIGH
 DOMAIN: hxxp://sourcorp.com
 CATEGORY: Disease Vector
 DESCRIPTION:
TSPY_ZBOT.XMAS sends the information it gathered to this URL via HTTP POST.�