Zlob sites update

Zlob sites update

Zlob Trojan Distributing site:
Site Name: Movupdate.com
IP Address: 77.91.231.201

Site Name: Flwdirection.com
IP Address: 85.255.120.106

Scam Internet Security Page:
Site Name: Homesecurepage.com
IP Address: 85.255.116.210

404Errorpage Scam:
Site Name: Nopagedns.com
IP Address: 85.255.118.245

Security Guide Scam Page:
Site Name: Warningurls.com
IP Address: 85.255.118.37

Reference pages:
www.Warningurls(dot)com/soft/?c=05333
www.Warningurls(dot)com/test/?c=05434

Ad-Server-Gate Pages:
Site Name: Gatebs.com
IP Address: 85.255.118.37

Site Name: Gatefc.com
IP Address: 85.255.118.214

Reference links:
gatebs(dot)com/gatevc.php?pn=srch0p1total7s2&c=55832
gatefc(dot)com/gatevc.php?id=icn02

The Ad-Server-Gate pages redirects to fake Security center site Anysafereviews.com which promotes Rogue security applications.

Site Name: Anysafereviews.com
IP Address: 85.255.118.212

anysafereviews(dot).com/pp/01-byu8kl/

Other component sites

Site Name: Sysmergerer.com
IP Address: 85.255.117.204

http://www.sysmergerer(dot)com/get.php?partner=192 -> downloads Antispycheck Rogue security application

Site Name: Iexplorergate.com
IP Address: 216.255.179.245

Site Name: Wspscanner.com

http://www.iexplorergate(dot)com/redirect.php -> redirects to scan.wspscanner.com, which is a fake/scare scan page used to push WinSpywareProtect rogue security application.

All the above mentioned sites advertise/push well documented Rogue security applications. Stay away from these sites.

Bharath M N