Thursday, June 12, 2008

List of Malicious Sites

List of Malicious Sites

Zlob sites update:

Zlob Trojan Distributing site:
Site Name: Aviexecution.com
IP Address: 77.91.231.183

Site Name: Mpegupdate.com
IP Address: 85.255.120.108

Site Name: Flwassistant.com
IP Address: 77.91.231.201

Site Name: Aviinstrument.com
IP Address: 85.255.120.106

Scam Internet Security Page:
Site Name: Dobrowsesecure.com
IP Address: 85.255.116.214

404Errorpage Scam:
Site Name: Errorallhere.com
IP Address: 85.255.118.244

Security Guide Scam Page:
Site Name: Truesafetyrules.com
IP Address: 85.255.118.213

Reference pages:
www.truesafetyrules(dot)com/soft/?c=05333
www.truesafetyrules(dot)com/test/?c=05434

Ad-Server-Gate Pages:
Site Name: Gatezx.com
IP Address: 85.255.118.37

Site Name: Gateiu.com
IP Address: 85.255.118.37

The Ad-Server-Gate pages redirects to fake Security center site Securitycenteralerts.com which promotes Rogue security applications.

Site Name: Securitycenteralerts.com
IP Address: 85.255.118.38

Also the following site is used in Zlob tool bar to redirect users to malicious domains.

Site Name: Toolbargate.com
IP Address: 85.255.118.35

The Zlob trojan is now pushing Antispycheck, Pest-Patrol and other well documented rogue security applications.

DNS Changer Trojan Distributing sites:

Site Name: Vivaticket.net
IP Address: 64.28.184.175

Site Name: Wotticket.net
IP Address: 64.28.184.176

A list of new scam sites used by old Rogues:

WinSpywareProtect uses the following new sites:

Site Name: Winspywarescanner.com
IP Address: 71.6.202.216

Site Name: Winspywareprotects.com
Site Name: Wspsale.com
IP Address: 85.255.119.26

Reference links:
scan(dot)winspywarescanner.com/227/503
scan(dot)winspywareprotects.com/227/501

MalWarrior uses the following new sites:

Site Name: Malwarrior2008.com
Site Name: Wspdl.com
IP Address: 85.255.119.26

Stay away from all these sites.

Bharath MN

blog comments powered by Disqus