New set of SSH Zlob Trojan Family’s Component sites

New set of SSH Zlob Trojan Family’s Component sites

Scam Internet Security Page:
Site Name: Safehomesite.com
IP Address: 85.255.116.211

404Errorpage Scam:
Site Name: Dns404rule.com
IP Address: 85.255.118.245

Security Guide Scam Page:
Site Name: Secureprior.com
IP Address: 85.255.118.212

Reference pages:
www.secureprior (dot) com/soft/?c=317378
www.secureprior (dot) com/test/?c=017370

Ad-Server-Gate Pages:
Site Name: Gateiv.com
IP Address: 85.255.118.213

Site Name: Gateaq.com
IP Address: 85.255.118.212

The Ad-Server-Gate pages redirects to fake Security center site Protectalerts.com which promotes Rogue security applications.

Site Name: Protectalerts.com
IP Address: 85.255.118.214

Also the following site is used in Zlob tool bar to redirect users to malicious domains.

Site Name: Toolbarusage.com
IP Address: 85.255.118.34

All the above mentioned sites advertise well documented Rogue security applications. Stay away from these sites.

Bharath M N