http://{blocked}npay.com/gbt/u ka.ok

 Analysis by: Cris Lumague

 URL BLOCKING DATE/TIME: 15 Nov 2010 10:39:00 AM GMT-8
 RATING: HIGH
 DOMAIN: crimsonpay.com
 CATEGORY: Disease Vector
 DESCRIPTION:

TSPY_ZBOT.ZCB accesses this URL to download a configuration file.