Saturday, July 12, 2008

Zlob sites update

Zlob sites update

Scam Internet Security Page:
Site Name: Safepageplace.com
IP Address: 85.255.116.210

404Errorpage Scam:
Site Name: Serverserror.com
IP Address: 85.255.118.246

Security Guide Scam Page:
Site Name: Websecurelinks.com
IP Address: 85.255.118.210

Reference pages:
www.Websecurelinks(dot)com/soft/?c=05333
www.Websecurelinks(dot)com/test/?c=05434

This links redirects user to different Scare/fake scanner pages, The new scare scan site in the list is:

Scare/Fake scanner page:
Site Name: Winspywareprotectscan.com

Ad-Server-Gate Pages:
Site Name: Gatelp.com
IP Address: 85.255.118.212

Site Name: Gatecd.com
IP Address: 85.255.118.213

Reference links:
Gatelp(dot)com/gatevc.php?pn=srch0p1total7s2&c=441041
Gatecd(dot)com/gatevc.php?id=dw01


The Ad-Server-Gate pages redirects to fake Security center site Securewarn.com which promotes Rogue security applications.

Site Name: Securewarn.com
IP Address: 85.255.118.35
Reference links:
Securewarn(dot)com/v6/01-sad42k/

Other component sites:

Site Name: Ietoolsite.com
IP Address: 216.255.179.244

Ietoolsite(dot)com/redirect.php-> redirects to scan.wspscanner.com, which is a fake/scare scan page used to push WinSpywareProtect rogue security application.

The following site is used in Zlob toolbar to redirect users to malicious domains distributing rogue security aplications.

Site Name: Caretoolbar.com
IP Address: 85.255.118.38

All the above mentioned sites advertise/push well documented Rogue security applications. Stay away from these sites.

Bharath M N

blog comments powered by Disqus