date started: Thu May 30 12:00:01 CEST 2013
checking domain: image.dashzracing.com --> seems to be CLEAN
checking domain: www.la-mer-en-livres.fr --> seems to be INFECTED: http://vieka.pleinairolney.com/event.js --> DNS: vieka.pleinairolney.com / 81.92.219.60
checking domain: www.pons.de --> seems to be CLEAN
checking domain: photos.ltahserver.com --> seems to be CLEAN
checking domain: www.maigrir-patch-xs24-pro.com --> seems to be CLEAN
checking domain: images.wiltec.info --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: www.rci-jeux.com --> seems to be INFECTED: http://zarona.3tserver.net/url --> DNS: zarona.3tserver.net / 74.86.197.160, 208.87.34.65, 23.23.210.22
checking domain: repairgaragedoors.com --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 208.73.210.207
checking domain: leftiesshowroom.com --> seems to be INFECTED: http://agiula.agentonpoint.com/__utm.gif --> DNS: agiula.agentonpoint.com / 81.92.219.62
checking domain: leosat.at --> seems to be INFECTED: http://baygo.ata-contractors.com/1pix.gif --> DNS: baygo.ata-contractors.com / 81.92.219.62
checking domain: rhs-airco.com --> seems to be INFECTED: http://kaliosa.mrsstyleseeker.com/__utm.gif --> DNS: kaliosa.mrsstyleseeker.com / 31.210.96.157
checking domain: rhs-klima.de --> seems to be INFECTED: http://kaliosa.autoeventregistration.com/re_/ping --> DNS: kaliosa.autoeventregistration.com / 31.210.96.157
checking domain: www.automania.ch --> seems to be INFECTED: http://rahpita.custom-chocolate-favors.com/new2/www/delivery/lg.php --> DNS: rahpita.custom-chocolate-favors.com / 31.210.96.155
checking domain: www.bootsboerse24.de --> seems to be INFECTED: http://karkala.elcevent.com/w/2.0/ajs --> DNS: karkala.elcevent.com / 31.210.96.155
checking domain: www.mc-ststephan.ch --> seems to be INFECTED: http://gauntsmith.southvalleyrugby.com/t.gif --> DNS: gauntsmith.southvalleyrugby.com / 31.210.96.155
checking domain: www.moratec.ch --> seems to be INFECTED: http://tweddy.devilwithacause.com/t.gif --> DNS: tweddy.devilwithacause.com / 31.210.96.155
checking domain: www.psicoterapeutas.org --> seems to be INFECTED: http://pantakit.registerforautoevent.com/1pix.gif --> DNS: pantakit.registerforautoevent.com / 31.210.96.158
checking domain: www.rebo-rohstoffe.de --> seems to be INFECTED: http://argles.autoeventregistration.com/statapi/stat/add --> DNS: argles.autoeventregistration.com / 31.210.96.157
checking domain: www.samariter-richterswil.ch --> seems to be CLEAN
checking domain: equestrianinfluence.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.165
checking domain: www.publibusiness24.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 62.116.181.25
checking domain: www.empfehlungsmarketing-studie.de --> seems to be INFECTED: http://cylla.softmn.com/www/delivery/lg.php --> DNS: cylla.softmn.com / 31.210.96.157
checking domain: www.lifeatpga.com --> seems to be CLEAN
checking domain: web88.my.ibone.ch --> seems to be CLEAN
checking domain: www.berglodge.de --> seems to be CLEAN
checking domain: stalders.com --> seems to be INFECTED: http://phalangy.hartford-capital.com/tracker --> DNS: phalangy.hartford-capital.com / 31.210.96.155
checking domain: www.riviera-raptors.ch --> seems to be INFECTED: http://xaahie.southvalleyrugby.com/1pix.gif --> DNS: xaahie.southvalleyrugby.com / 31.210.96.155
checking domain: firstsaturday.hu --> seems to be INFECTED: http://vertica.reikisolar.com/_xhr/ugccomments/ --> DNS: vertica.reikisolar.com / 31.210.96.157
checking domain: www.nordicneurolab.com --> seems to be INFECTED: http://hormilla.jordandowney.net/neo/darla/php/fc.php --> DNS: hormilla.jordandowney.net / 31.210.96.155
checking domain: www.bestattungsinstitut-petri.de --> seems to be INFECTED: http://youremy.autoeventregistration.com/st --> DNS: youremy.autoeventregistration.com / 31.210.96.157
checking domain: www.seebezirk.grunliberale.ch --> seems to be CLEAN
checking domain: www.saketattoo.com --> seems to be INFECTED: http://indanetwall.net/cgi-bin/r.cgi --> DNS: indanetwall.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: www.clubescuelagr.com --> seems to be CLEAN
checking domain: www.dreams4ever.de --> seems to be INFECTED: http://eredar.kalkanhorizon.com/url --> DNS: eredar.kalkanhorizon.com / 178.211.33.205
checking domain: gyro-bau.ch --> seems to be CLEAN
checking domain: www.tab-blog.de --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 8.5.1.45
checking domain: www.dream-edition.de --> seems to be INFECTED: http://yhulo.fightliberalmedia.com/p --> DNS: yhulo.fightliberalmedia.com / 81.92.219.60
checking domain: www.nimbinmardigrass.com --> seems to be CLEAN
checking domain: www.aceefrancophonie.org --> seems to be INFECTED: http://dahro.strevel.net/images/rt.gif --> DNS: dahro.strevel.net / 81.92.219.62
checking domain: www.zum-fliegenden-bauern.de --> seems to be INFECTED: http://hudgson.thehiddencorner.com/images/rt.gif --> DNS: hudgson.thehiddencorner.com / 31.210.96.155
checking domain: www.schmoove.fr --> seems to be INFECTED: http://mdrafiqul.wanderingwitchdoctor.com/url --> DNS: mdrafiqul.wanderingwitchdoctor.com / 178.211.33.203
checking domain: www.jawa-club.at --> seems to be INFECTED: http://matinisi.nitplus.com/b --> DNS: matinisi.nitplus.com / 81.92.219.62
checking domain: www.okubil.com --> seems to be CLEAN
checking domain: boisdolivier.biz --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: biodis.ch --> seems to be CLEAN
checking domain: www.casa-nostra-tierhilfe.de --> seems to be CLEAN
checking domain: www.holidayinn-mulhouse.com --> seems to be INFECTED: http://hunton.radiadoresautoair.com/api/getCount2.php --> DNS: hunton.radiadoresautoair.com / 178.211.33.203
checking domain: www.buscaaqui.com.br --> seems to be CLEAN
checking domain: www.tatamotors.com --> seems to be CLEAN
checking domain: www.pforster.ch --> seems to be INFECTED: http://belchar.e-squares.com/tracker --> DNS: belchar.e-squares.com / 81.92.219.61
checking domain: www.justin.it --> seems to be INFECTED: http://habibagahi.lynngoodpasture.com/url --> DNS: habibagahi.lynngoodpasture.com / 178.211.33.205
checking domain: www.forum-ofppt.com --> seems to be INFECTED: http://protechere.com/cgi-bin/r.cgi --> DNS: protechere.com / 69.43.161.177
checking domain: www.hostpix.de --> seems to be INFECTED: http://xlau.kalkanturqouise.com/b --> DNS: xlau.kalkanturqouise.com / 31.210.96.156
checking domain: www.tumegl-tomils.com --> seems to be CLEAN
checking domain: www.kreatividee.net --> seems to be INFECTED: http://szufnarowska.savedalyfield.com/t.gif --> DNS: szufnarowska.savedalyfield.com / 31.210.96.157
checking domain: bramsche-basketball.de --> seems to be INFECTED: http://kinlichini.goldenpridewrestling.com/g.gif --> DNS: kinlichini.goldenpridewrestling.com / 31.210.96.155
checking domain: www.alexandria.ro --> seems to be INFECTED: http://vrenily.bedfordshirekitchens.com/new2/www/delivery/ajs.php --> DNS: vrenily.bedfordshirekitchens.com / 31.210.96.155
checking domain: www.look-atme.ch --> seems to be CLEAN
checking domain: www.tempo.co --> seems to be CLEAN
checking domain: www.insieme-nw.ch --> seems to be CLEAN
checking domain: www.myrevelations.de --> seems to be CLEAN
checking domain: www.sportsbutiken.se --> seems to be CLEAN
checking domain: go-project.com --> seems to be CLEAN
checking domain: www.clicker.de --> seems to be INFECTED: http://blesyl.reikisolar.com/delivery/lg.php --> DNS: blesyl.reikisolar.com / 31.210.96.157
checking domain: sivota-land.gr --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: laserme.de --> seems to be INFECTED: http://dauginas.mittromneyinternetcampaign.com/__utm.gif --> DNS: dauginas.mittromneyinternetcampaign.com / 81.92.219.62
checking domain: www.caberg.it --> seems to be CLEAN
checking domain: www.musicpophits.com --> seems to be CLEAN
checking domain: www.recrutam.ro --> seems to be INFECTED: http://dambalang.vehicleexchangeprogram.com/pixel;r=859962289;a=p-5dyPa639IrgIw;event=refresh;fpan=0;fpa=P0-1434396918-1341369573086;ns=0;ce=1;je=0;sr=1024x768x24;enc=n;dst=0;et=1341369784660;tzo=-420;ref=http%3A%2F%2Fwww.recrutam.ro%2F --> DNS: dambalang.vehicleexchangeprogram.com / 31.210.96.157
checking domain: oberland-metzgerei.ch --> seems to be CLEAN
checking domain: boutique-hotel-chiangmai.com --> seems to be INFECTED: http://enenche.alloyradianttubes.com/t.gif --> DNS: enenche.alloyradianttubes.com / 31.210.96.155
checking domain: www.xerox-drucker.de --> seems to be INFECTED: http://alothaim.mrsstyleseeker.com/__utm.gif --> DNS: alothaim.mrsstyleseeker.com / 31.210.96.157
checking domain: www.matarama.co.id --> seems to be CLEAN
checking domain: www.compta-geniale.com --> seems to be INFECTED: http://alipan.fantasyintro.com/www/delivery/lg.php --> DNS: alipan.fantasyintro.com / 31.210.96.156
checking domain: rechercher.aguea.com --> seems to be CLEAN
checking domain: www.fusionwithmike.com --> seems to be CLEAN
checking domain: www.cartridgeworld.de --> seems to be CLEAN
checking domain: www.laufen-in-koeln.de --> seems to be INFECTED: http://45357.majesticbetta.com/url --> DNS: 45357.majesticbetta.com / 178.211.33.203
checking domain: www.hotelwindsornice.com --> seems to be INFECTED: http://benziman.southvalleyrugby.com/openx/www/delivery/lg.php --> DNS: benziman.southvalleyrugby.com / 31.210.96.155
checking domain: www.simplanter.fr --> seems to be CLEAN
checking domain: www.co2partners.com --> seems to be CLEAN
checking domain: www.agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.181.25
checking domain: www.niceshop.at --> seems to be INFECTED: http://perrugina.coreywasley.com/gadgets/ifr --> DNS: perrugina.coreywasley.com / 31.210.96.155
checking domain: www.scmra.ca --> seems to be INFECTED: http://kitabevi.autoeventregistration.com/__utm.gif --> DNS: kitabevi.autoeventregistration.com / 31.210.96.157
checking domain: www.phuketvilla-elisabeth.com --> seems to be INFECTED: http://kovacina.heattreatalloy.com/delivery/lg.php --> DNS: kovacina.heattreatalloy.com / 31.210.96.155
checking domain: www.murgratze.ch --> seems to be CLEAN
checking domain: on-pictures.ch --> seems to be CLEAN
checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 208.73.211.197
checking domain: www.artistas-americanos.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 173.212.56.245
checking domain: www.lerchdesign.ch --> seems to be CLEAN
checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/www/delivery/spc.php --> DNS: praylu.nutritionbydesign.com / 81.92.219.62
checking domain: www.golden-champion.com --> seems to be CLEAN
checking domain: www.valdichianaoutlet.it --> seems to be CLEAN
checking domain: www.bergparadies.ch --> seems to be CLEAN
checking domain: shop.grostar-aquaristik.de --> seems to be INFECTED: http://41688.customshowerdoorsc.com/url --> DNS: 41688.customshowerdoorsc.com / 176.74.176.167
checking domain: www.thorenberg.ch --> seems to be CLEAN
checking domain: www.ofct.ch --> seems to be CLEAN
checking domain: www.hotel-hohentwiel.de --> seems to be CLEAN
checking domain: www.riadcoram.com --> seems to be INFECTED: http://quintenz.advertisewiththedevil.com/neo/darla/php/fc.php --> DNS: quintenz.advertisewiththedevil.com / 31.210.96.155
checking domain: globalserve.com.cy --> seems to be INFECTED: http://weebam.fighttheliberalmedia.com/delivery/lg.php --> DNS: weebam.fighttheliberalmedia.com / 81.92.219.60
checking domain: www.orthopaedie-berlin-marzahn.de --> seems to be CLEAN
checking domain: www.elektrosmognews.de --> seems to be CLEAN
checking domain: www.brichzin.de --> seems to be INFECTED: http://zhainia.prestigehonda.net/s --> DNS: zhainia.prestigehonda.net / 31.210.96.157
checking domain: www.colornova.ch --> seems to be CLEAN
checking domain: www.viceversa.ch --> seems to be CLEAN
checking domain: www.makingofandermatt.ch --> seems to be CLEAN
checking domain: aviationhumor.net --> seems to be CLEAN
checking domain: www.franken-gmbh.de --> seems to be INFECTED: http://grosaru.dunstablekitchens.com/delivery/lg.php --> DNS: grosaru.dunstablekitchens.com / 31.210.96.155
checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.175
checking domain: www.vonjowanka.de --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: www.immobilienportal.li --> seems to be CLEAN
checking domain: dk-media.ch --> seems to be CLEAN
checking domain: download2.microapp.com --> seems to be CLEAN
checking domain: vestidosnoivaoramatina.net --> seems to be INFECTED: http://kruch.zarrisgroup.com/www/app_full_proxy.php --> DNS: kruch.zarrisgroup.com / 182.50.135.128
checking domain: www.blanquettedeveau.fr --> seems to be CLEAN
checking domain: www.gabus.ch --> seems to be CLEAN
checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/delivery/lg.php --> DNS: moutsiouna.iretarpg.com / 31.210.96.155
checking domain: www.hekimce.com --> seems to be INFECTED: http://merchx.automotiveservicesavings.com/phpmv2/phpmyvisites.php --> DNS: merchx.automotiveservicesavings.com / 31.210.96.157
checking domain: www.jordanbad.de --> seems to be INFECTED: http://facuri.chelseyfatula.com/__utm.gif --> DNS: facuri.chelseyfatula.com / 31.210.96.155
checking domain: www.literatur-vsm.at --> seems to be INFECTED: http://wmanou.telecomindiana.com/t.gif --> DNS: wmanou.telecomindiana.com / 31.210.96.155
checking domain: www.oople.com --> seems to be INFECTED: http://assington.outbreakm3dia.com/statapi/stat/add --> DNS: assington.outbreakm3dia.com / 81.92.219.62
checking domain: www.pssst.de --> seems to be INFECTED: http://yhulo.fightliberalmedia.com/pview --> DNS: yhulo.fightliberalmedia.com / 81.92.219.60
checking domain: www.sportmodelagency.com --> seems to be INFECTED: http://violoka.benahavisrealestate.com/s --> DNS: violoka.benahavisrealestate.com / 31.210.96.156
checking domain: www.swisstrex.ch --> seems to be CLEAN
checking domain: www.uebersstillen.org --> seems to be CLEAN
checking domain: www.windsorsuiteshotel.com --> seems to be INFECTED: http://mishor.ancestorworshippublishing.com/neo/darla/php/fc.php --> DNS: mishor.ancestorworshippublishing.com / 81.92.219.61
checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.181.25
checking domain: kewb.co.ke --> seems to be INFECTED: http://ugwuezumba.iconarchitects.net/b --> DNS: ugwuezumba.iconarchitects.net / 81.92.219.61
checking domain: www.weller.to --> seems to be CLEAN
checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / 69.43.161.153
checking domain: www.lesmotsdelle.ch --> seems to be INFECTED: http://udumeighe.thecaregrouppc.net/__utm.gif --> DNS: udumeighe.thecaregrouppc.net / 81.92.219.62
checking domain: www.schmuckcafe.ch --> seems to be CLEAN
checking domain: www.niceshop.ch --> seems to be CLEAN
checking domain: www.mschaer.ch --> seems to be INFECTED: http://waziona.greatserviceforless.com/__utm.gif --> DNS: waziona.greatserviceforless.com / 31.210.96.157
checking domain: www.fsvb.ch --> seems to be CLEAN
checking domain: www.jk-ststephan.ch --> seems to be CLEAN
checking domain: www.fw-whh.ch --> seems to be CLEAN
checking domain: www.brillenpesche.ch --> seems to be INFECTED: http://brayley.telecommichigan.com/__utm.gif --> DNS: brayley.telecommichigan.com / 31.210.96.155
checking domain: www.smartek.ch --> seems to be CLEAN (false-positive detected)
checking domain: www.burger-restaurant.ch --> seems to be CLEAN
checking domain: www.lotusnaturalspa.ch --> seems to be CLEAN
checking domain: www.zebis.ch --> seems to be CLEAN (false-positive detected)
checking domain: www.patisserielaperle.ch --> seems to be CLEAN
checking domain: www.quolibet.ch --> seems to be CLEAN
checking domain: www.stv-neuenhof.ch --> seems to be CLEAN
checking domain: www.tauchen-tgh.ch --> seems to be CLEAN
checking domain: www.easyflaechenvorhang.ch --> seems to be CLEAN
checking domain: www.mastermusic.ch --> seems to be INFECTED: http://pakipot.heattreatalloy.com/__utm.gif --> DNS: pakipot.heattreatalloy.com / 31.210.96.155
checking domain: www.meier-gemuese.ch --> seems to be CLEAN
checking domain: www.systemworx.ch --> seems to be CLEAN
checking domain: www.subash.ch --> seems to be CLEAN
checking domain: importas.ch --> seems to be CLEAN
checking domain: www.bth.ch --> seems to be CLEAN
checking domain: www.epigeos.ch --> seems to be CLEAN
checking domain: www.ambu-wiesendamm.ch --> seems to be CLEAN
checking domain: kantine-postzentrum.ch --> seems to be CLEAN
checking domain: www.humitas.ch --> seems to be CLEAN
checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/__utm.gif --> DNS: karepii.dealerholidayevent.com / 31.210.96.157
checking domain: www.mapet.de --> seems to be INFECTED: http://cielma.williespage.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: cielma.williespage.com / 31.210.96.155
checking domain: www.listen-project.de --> seems to be CLEAN
checking domain: www.bad-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155
checking domain: www.kelliewinnell.com.au --> seems to be INFECTED: http://yiceli.thecinema6.com/pview --> DNS: yiceli.thecinema6.com / 31.210.96.156
checking domain: www.elektrolok.de --> seems to be INFECTED: http://malvaez.bvvk.com/st --> DNS: malvaez.bvvk.com / 31.210.96.158
checking domain: www.rehmracedays.de --> seems to be CLEAN
checking domain: www.cepsuisse.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.perfume-worldwide.com --> seems to be INFECTED: http://cosha.electhillary2016.com/delivery/lg.php --> DNS: cosha.electhillary2016.com / 81.92.219.60
checking domain: www.obius.be --> seems to be CLEAN
checking domain: www.lidersanantonio.cl --> seems to be CLEAN (false-positive detected)
checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.powerplaycreative.com/pixel;r=797711544;a=p-b3sGjMtCFrexE;fpan=0;fpa=P0-1027124899-1339721203186;ns=0;ce=1;je=0;sr=1280x800x24;enc=n;dst=0;et=1341196863997;tzo=-420;ref=;url=http%3A%2F%2Fwww.log-in-verlag.de%2F --> DNS: wcameron.powerplaycreative.com / 31.210.96.158
checking domain: www.gluecksbringer-shop.eu --> seems to be CLEAN
checking domain: forum.adoptionefa.org --> seems to be INFECTED: http://delacuseta.ancestorworshippublishing.com/t.gif --> DNS: delacuseta.ancestorworshippublishing.com / 81.92.219.61
checking domain: www.hese-project.org --> seems to be CLEAN
checking domain: bgs-architekten.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.165
checking domain: www.natalshopping.com.br --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 173.212.56.245
checking domain: www.fraichattitude.com --> seems to be CLEAN
date finished: Thu May 30 12:04:32 CEST 2013