# 
# this list of ponmocup malware redirection domains and infected web-servers is maintained by 
# email:   toms.security.stuff -at- gmail.com
# twitter: @c_APT_ure
# blog:    http://c-apt-ure.blogspot.com/
#
# for use with CIF see malware-feeds here:
# http://security-research.dyndns.org/pub/malware-feeds/
# 
date started: Fri Mar  7 12:00:01 CET 2014
checking domain: www.alexnorrieswimwear.com --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.hostal3soles.com --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 91.237.88.233
checking domain: suitesofdorchester.com --> seems to be INFECTED: http://kek.invisatred.com/url --> DNS: kek.invisatred.com / 178.211.33.205
checking domain: medical-swiss.com --> seems to be INFECTED: http://zulainis.theinvisatread.com/url --> DNS: zulainis.theinvisatread.com / 69.43.161.174
checking domain: www.bienenmilch.com --> seems to be INFECTED: http://jonestown.serenehomeandlandscapes.com/s --> DNS: jonestown.serenehomeandlandscapes.com / 81.92.219.61
checking domain: www.classic-tubeware-kunisch.de --> seems to be INFECTED: http://rostomyan.vehicleexchangeprogram.com/api/getCount2.php --> DNS: rostomyan.vehicleexchangeprogram.com / 31.210.96.157
checking domain: www.deinebettwaesche.de --> seems to be INFECTED: http://xney.softmn.com/api/getCount2.php --> DNS: xney.softmn.com / 31.210.96.157
checking domain: www.highsport.se --> seems to be INFECTED: http://udomchum.telecommichigan.com/t.gif --> DNS: udomchum.telecommichigan.com / 31.210.96.155
checking domain: www.livre-etre-bien.com --> seems to be INFECTED: http://nedou.kidstryingtopayforcollege.com/url --> DNS: nedou.kidstryingtopayforcollege.com / 81.92.219.61
checking domain: www.naturalimagen.com --> seems to be INFECTED: http://ranthi.thomasdesgrp.com/b --> DNS: ranthi.thomasdesgrp.com / 31.210.96.158
checking domain: www.stadt-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155
checking domain: www.radiogurbeti.com --> seems to be INFECTED: http://sonagara.slyforkfarm.com/b --> DNS: sonagara.slyforkfarm.com / 81.92.219.60
checking domain: www.bluestar.us --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: www.creativ-art1.com --> seems to be INFECTED: http://vermillon.serenehomeandlandscapes.com/t.gif --> DNS: vermillon.serenehomeandlandscapes.com / 81.92.219.61
checking domain: www.mercatus.pt --> seems to be INFECTED: http://priori.vehicleexchangeprogram.com/lg.php --> DNS: priori.vehicleexchangeprogram.com / 31.210.96.157
checking domain: www.mansfieldtwp-nj.com --> seems to be INFECTED: http://vestica.defeatliberalmedia.com/lg.php --> DNS: vestica.defeatliberalmedia.com / 81.92.219.60
checking domain: www.accomo-metall.de --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: www.little-moon-aussies.com --> seems to be INFECTED: http://jahren.prestigehonda.net/new/www/delivery/ajs.php --> DNS: jahren.prestigehonda.net / 31.210.96.157
checking domain: www.hummel-print.biz --> seems to be INFECTED: http://44099.pballgames.com/url --> DNS: 44099.pballgames.com / 91.207.4.51
checking domain: www.rockbackingtracks.co.uk --> seems to be INFECTED: http://zeok.bumperstickerpatriot.com/s.php --> DNS: zeok.bumperstickerpatriot.com / 81.92.219.60
checking domain: www.lemmon.es --> seems to be INFECTED: http://nelav.savedalyfield.com/p --> DNS: nelav.savedalyfield.com / 31.210.96.157
checking domain: www.toutenmarchant.com --> seems to be INFECTED: http://baunchand.usedmobi.com/b/ss/hmagglobal,hmagmarieclaire/1/H.24.4/s97705060495788 --> DNS: baunchand.usedmobi.com / 31.210.96.156
checking domain: www.flushingpheasantrussells.com --> seems to be INFECTED: http://50042.southwestdiscus.com/url --> DNS: 50042.southwestdiscus.com / 178.211.33.203
checking domain: www.tetovo.gov.mk --> seems to be INFECTED: http://yunmin.decreasemyelectricbill.com/s.php --> DNS: yunmin.decreasemyelectricbill.com / 81.92.219.61
checking domain: www.bodasexclusivas.com --> seems to be INFECTED: http://compass.automotiveeventregistration.com/gampad/ads --> DNS: compass.automotiveeventregistration.com / 31.210.96.157
checking domain: www.cobraode.fr --> seems to be INFECTED: http://trolleeroy.propertiespain.com/__utm.gif --> DNS: trolleeroy.propertiespain.com / 31.210.96.158
checking domain: www.garten-spaeth.de --> seems to be INFECTED: http://nickolich.autoserviceevent.com/ec --> DNS: nickolich.autoserviceevent.com / 31.210.96.157
checking domain: www.metnitztalerhof.at --> seems to be INFECTED: http://xerdaiv.theknowledgekingdom.com/api/getCount2.php --> DNS: xerdaiv.theknowledgekingdom.com / 81.92.219.61
checking domain: www.nicholas-williams.com --> seems to be INFECTED: http://mildworm.thecinema6.com/api/getCount2.php --> DNS: mildworm.thecinema6.com / 31.210.96.156
checking domain: www.worb5.com --> seems to be INFECTED: http://sleepsolutions.bristolblog.com/HG --> DNS: sleepsolutions.bristolblog.com / 81.92.219.61
checking domain: www.schwarzwald-ferien-wohnung.de --> seems to be INFECTED: http://chimonzo.talentbuyeronline.com/url --> DNS: chimonzo.talentbuyeronline.com / 178.211.33.205
checking domain: www.margrith.at --> seems to be INFECTED: http://trameal.webdeploymenttool.com/url --> DNS: trameal.webdeploymenttool.com / 178.211.33.205
checking domain: janeece.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: mile2000.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.detailformation.com --> seems to be INFECTED: http://chitlinlover.vehicleservicediscount.com/www/delivery/lg.php --> DNS: chitlinlover.vehicleservicediscount.com / 31.210.96.157
checking domain: www.tunefreak.org --> seems to be INFECTED: http://wawabeh.williamsfp.com/getSegment.php --> DNS: wawabeh.williamsfp.com / failed: Name or service not known.
checking domain: www.temsa-nord.de --> seems to be INFECTED: http://dayfa.myredhomingpidgeon.com/safe_image.php --> DNS: dayfa.myredhomingpidgeon.com / 31.210.96.158
checking domain: www.kyrimai.gr --> seems to be INFECTED: http://runs.softmn.com/delivery/lg.php --> DNS: runs.softmn.com / 31.210.96.157
checking domain: www.drcere.com --> seems to be INFECTED: http://vivilyn.salutencwine.net/url%3fsa=X&source=web&cd=43&ved=0idZI5WiR&url=http://www.drcere.com/&ei=25Muc6vH56axq42Jx1I0+5i1oQ==&usg=ekL4X6bR9Ug84V5iUQAunq&sig2=xmc6khPGMDk0VMmvFH8Gt4 --> DNS: vivilyn.salutencwine.net / 178.211.33.205
checking domain: www.jalba.gr --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.freilandschwein.info --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 91.237.88.233
checking domain: www.superpass.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 208.91.197.104
checking domain: www.stublla.net --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.scga.at --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.barometer-group.com --> seems to be INFECTED: http://zailawatikarim.automotiveeventregistration.com/csi --> DNS: zailawatikarim.automotiveeventregistration.com / 31.210.96.157
checking domain: www.vfbhermsdorf.de --> seems to be INFECTED: http://hinouchi.greatserviceforless.com/delivery/lg.php --> DNS: hinouchi.greatserviceforless.com / 31.210.96.157
checking domain: metrotecegypt.info --> seems to be INFECTED: http://hobart.softmn.com/www/delivery/ajs.php --> DNS: hobart.softmn.com / 31.210.96.157
checking domain: www.hammam-ensa.com --> seems to be INFECTED: http://tesfalem.italy-in-bocca.com/b --> DNS: tesfalem.italy-in-bocca.com / 81.92.219.62
checking domain: www.vespa-motorroller-helme.de --> seems to be INFECTED: http://madamanchi.schonbjj.com/new/www/delivery/ajs.php --> DNS: madamanchi.schonbjj.com / 31.210.96.155
checking domain: forum.auto.am --> seems to be INFECTED: http://witchwyd.bestsilvercufflinks.com/__utm.gif --> DNS: witchwyd.bestsilvercufflinks.com / 81.92.219.62
checking domain: reimagery.com --> seems to be INFECTED: http://stiepcic.z-sat.com/pview --> DNS: stiepcic.z-sat.com / 81.92.219.61
checking domain: swchan.com --> seems to be INFECTED: http://mustaqbal.totalcaminhoes.com/hit.xiti --> DNS: mustaqbal.totalcaminhoes.com / 31.210.96.157
checking domain: www.downgradeps3.com --> seems to be INFECTED: http://trolleeroy.propertiespain.com/pview --> DNS: trolleeroy.propertiespain.com / 31.210.96.158
checking domain: www.jailbreak-ps3.com --> seems to be INFECTED: http://trolleeroy.propertiespain.com/t.gif --> DNS: trolleeroy.propertiespain.com / 31.210.96.158
checking domain: www.rollershop.de --> seems to be INFECTED: http://yinpou.aredietsok.com/b/ss/wbextextibrd,wbglobalext/1/G.9p2/s5601663509823 --> DNS: yinpou.aredietsok.com / 31.210.96.158
checking domain: www.michaelerberg.at --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.welte.de --> seems to be INFECTED: http://ikhuichi.ahtcna.com/delivery/lg.php --> DNS: ikhuichi.ahtcna.com / 81.92.219.61
checking domain: www.la-mer-en-livres.fr --> seems to be INFECTED: http://vieka.pleinairolney.com/__utm.gif --> DNS: vieka.pleinairolney.com / 81.92.219.60
checking domain: images.wiltec.info --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: www.rci-jeux.com --> seems to be INFECTED: http://zarona.3tserver.net/url --> DNS: zarona.3tserver.net / 95.211.117.206, 216.55.178.173
checking domain: repairgaragedoors.com --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: leftiesshowroom.com --> seems to be INFECTED: http://agiula.agentonpoint.com/fpc.pl --> DNS: agiula.agentonpoint.com / 81.92.219.62
checking domain: rhs-airco.com --> seems to be INFECTED: http://kaliosa.mrsstyleseeker.com/__utm.gif --> DNS: kaliosa.mrsstyleseeker.com / 31.210.96.157
checking domain: rhs-klima.de --> seems to be INFECTED: http://kaliosa.autoeventregistration.com/api/getCount2.php --> DNS: kaliosa.autoeventregistration.com / 31.210.96.157
checking domain: www.bootsboerse24.de --> seems to be INFECTED: http://karkala.elcevent.com/__utm.gif --> DNS: karkala.elcevent.com / failed: Name or service not known.
checking domain: www.psicoterapeutas.org --> seems to be INFECTED: http://pantakit.powerplaycreative.com/_xhr/ugccomments/ --> DNS: pantakit.powerplaycreative.com / 31.210.96.158
checking domain: www.rebo-rohstoffe.de --> seems to be INFECTED: http://argles.autoeventregistration.com/TAGPUBLISH/getad.aspx --> DNS: argles.autoeventregistration.com / 31.210.96.157
checking domain: equestrianinfluence.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: stalders.com --> seems to be INFECTED: http://phalangy.hartford-capital.com/b/ss/intelcorp,intelcorpcim/1/H.20.3/s13352403448801 --> DNS: phalangy.hartford-capital.com / 31.210.96.155
checking domain: firstsaturday.hu --> seems to be INFECTED: http://vertica.reikisolar.com/new/www/delivery/lg.php --> DNS: vertica.reikisolar.com / 31.210.96.157
checking domain: www.bestattungsinstitut-petri.de --> seems to be INFECTED: http://youremy.autoeventregistration.com/widgets/fan.php --> DNS: youremy.autoeventregistration.com / 31.210.96.157
checking domain: www.clubescuelagr.com --> seems to be INFECTED: http://nakashian.mrsstyleseeker.com/fpc.pl --> DNS: nakashian.mrsstyleseeker.com / 31.210.96.157
checking domain: www.tab-blog.de --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 176.74.176.178
checking domain: www.aceefrancophonie.org --> seems to be INFECTED: http://dahro.strevel.net/delivery/lg.php --> DNS: dahro.strevel.net / 81.92.219.62
checking domain: www.zum-fliegenden-bauern.de --> seems to be INFECTED: http://hudgson.thehiddencorner.com/__utm.gif --> DNS: hudgson.thehiddencorner.com / 31.210.96.155
checking domain: www.holidayinn-mulhouse.com --> seems to be INFECTED: http://hunton.homehuntingtips.com/piwik.php --> DNS: hunton.homehuntingtips.com / 81.92.219.60
checking domain: www.hostpix.de --> seems to be INFECTED: http://xlau.kalkanturqouise.com/imghover --> DNS: xlau.kalkanturqouise.com / failed: Name or service not known.
checking domain: www.tumegl-tomils.com --> seems to be INFECTED: http://51173.soroki.info/url --> DNS: 51173.soroki.info / 176.53.112.108
checking domain: bramsche-basketball.de --> seems to be INFECTED: http://kinlichini.imfamousontheinternet.com/navbar.g --> DNS: kinlichini.imfamousontheinternet.com / 31.210.96.155
checking domain: sivota-land.gr --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: laserme.de --> seems to be INFECTED: http://dauginas.mittromneyinternetcampaign.com/pagead/ads --> DNS: dauginas.mittromneyinternetcampaign.com / 69.43.161.172
checking domain: www.recrutam.ro --> seems to be INFECTED: http://dambalang.vehicleexchangeprogram.com/imghover --> DNS: dambalang.vehicleexchangeprogram.com / 31.210.96.157
checking domain: www.xerox-drucker.de --> seems to be INFECTED: http://alothaim.mrsstyleseeker.com/__utm.gif --> DNS: alothaim.mrsstyleseeker.com / 31.210.96.157
checking domain: www.compta-geniale.com --> seems to be INFECTED: http://alipan.fantasyintro.com/b/ss/rimglobal,rimbbid/1/H.22.1/s92052015245067 --> DNS: alipan.fantasyintro.com / 31.210.96.156
checking domain: www.laufen-in-koeln.de --> seems to be INFECTED: http://avgeros.ssavla.com/__utm.gif --> DNS: avgeros.ssavla.com / 209.157.71.123
checking domain: www.agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 91.237.88.233
checking domain: www.niceshop.at --> seems to be INFECTED: http://perrugina.sciencehunk.com/www/delivery/lg.php --> DNS: perrugina.sciencehunk.com / 31.210.96.155
checking domain: www.phuketvilla-elisabeth.com --> seems to be INFECTED: http://kovacina.dreamingofnewyork.com/f.gif --> DNS: kovacina.dreamingofnewyork.com / 31.210.96.155
checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: www.artistas-americanos.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/st --> DNS: praylu.nutritionbydesign.com / 81.92.219.62
checking domain: www.golden-champion.com --> seems to be INFECTED: http://updude.glsfinancials.com/gen_204 --> DNS: updude.glsfinancials.com / 69.43.161.172
checking domain: www.brichzin.de --> seems to be INFECTED: http://zhainia.prestigehonda.net/s --> DNS: zhainia.prestigehonda.net / 31.210.96.157
checking domain: www.franken-gmbh.de --> seems to be INFECTED: http://grosaru.dunstablekitchens.com/__utm.gif --> DNS: grosaru.dunstablekitchens.com / 31.210.96.155
checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: vestidosnoivaoramatina.net --> seems to be INFECTED: http://kruch.zarrisgroup.com/www/app_full_proxy.php --> DNS: kruch.zarrisgroup.com / 182.50.130.117
checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/delivery/lg.php --> DNS: moutsiouna.iretarpg.com / 69.43.161.171
checking domain: www.hekimce.com --> seems to be INFECTED: http://merchx.automotiveservicesavings.com/__utm.gif --> DNS: merchx.automotiveservicesavings.com / 31.210.96.157
checking domain: www.jordanbad.de --> seems to be INFECTED: http://facuri.chelseyfatula.com/__utm.gif --> DNS: facuri.chelseyfatula.com / 184.168.221.96
checking domain: www.oople.com --> seems to be INFECTED: http://assington.whhusainc.net/imp --> DNS: assington.whhusainc.net / 81.92.219.62
checking domain: www.sportmodelagency.com --> seems to be INFECTED: http://violoka.hugesavingsevent.com/gadgets/ifr --> DNS: violoka.hugesavingsevent.com / 31.210.96.156
checking domain: www.windsorsuiteshotel.com --> seems to be INFECTED: http://mishor.ancestorworshippublishing.com/__utm.gif --> DNS: mishor.ancestorworshippublishing.com / 81.92.219.61
checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 91.237.88.233
checking domain: kewb.co.ke --> seems to be INFECTED: http://ugwuezumba.iconarchitects.net/t.gif --> DNS: ugwuezumba.iconarchitects.net / failed: Name or service not known.
checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/__utm.gif --> DNS: karepii.dealerholidayevent.com / 31.210.96.157
checking domain: www.bad-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/neo/darla/php/fc.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155
checking domain: www.kelliewinnell.com.au --> seems to be INFECTED: http://yiceli.thecinema6.com/pview --> DNS: yiceli.thecinema6.com / 31.210.96.156
checking domain: www.elektrolok.de --> seems to be INFECTED: http://malvaez.mycameraleash.com/fpc.pl --> DNS: malvaez.mycameraleash.com / 31.210.96.158
checking domain: www.perfume-worldwide.com --> seems to be INFECTED: http://cosha.electhillary2016.com/delivery/lg.php --> DNS: cosha.electhillary2016.com / 81.92.219.60
checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.powerplaycreative.com/delivery/lg.php --> DNS: wcameron.powerplaycreative.com / 31.210.96.158
checking domain: forum.adoptionefa.org --> seems to be INFECTED: http://delacuseta.ancestorworshippublishing.com/__utm.gif --> DNS: delacuseta.ancestorworshippublishing.com / 81.92.219.61
checking domain: bgs-architekten.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: 17.com.tr --> seems to be INFECTED: http://www.17.com.tr/ --> DNS: www.17.com.tr / 77.79.81.253
checking domain: 1964toppsset.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: 2ne1world.com --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: ads.thinkingaustralia.tv --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: afag.com.br --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: agenciaamazonia.com.br --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: agirazul.com.br --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: aguadarocha.com.br --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: ai-crm.com --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: alastech.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: aleyasin.nl --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: alius.net --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: allandalla.ro --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: alumni.vru.ac.th --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: anzaisekizaiten.co.jp --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: auctionvideotutorials.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: aurafilm.net --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: autokompleks-jastrzebie.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: avionhome.com.tw --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com / 190.93.244.20, 190.93.245.20, 190.93.246.20,  /
checking domain: beakable.com --> seems to be INFECTED: http://www.beakable.com/ --> DNS: www.beakable.com / 216.119.135.2
checking domain: belles-bellies.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: between2rivers.net --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 62.116.181.25
checking domain: bluewingz.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: bocadoinferno.com --> seems to be INFECTED: http://bocadoinferno.com.br/ --> DNS: bocadoinferno.com.br / 108.163.171.250
checking domain: bonetown.com --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 91.237.88.233
checking domain: bookofsongs.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: boomcoaching.ca --> seems to be INFECTED: http://luckyhosting.org/cgi-bin/r.cgi --> DNS: luckyhosting.org / failed: Connection timed out.
checking domain: bpscapital.com --> seems to be INFECTED: http://www.bpscapital.com/ --> DNS: www.bpscapital.com / 173.254.28.118
checking domain: bralux-saiko.com --> seems to be INFECTED: http://philosophymercer.com/cgi-bin/r.cgi --> DNS: philosophymercer.com / 173.212.56.190
checking domain: bridalcookie.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: businessbythespirit.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: carros--tunados.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: cemerhn.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: chadflick.ws --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: chardonrecords.com --> seems to be INFECTED: http://indanetwall.net/cgi-bin/r.cgi --> DNS: indanetwall.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: checkscrub.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: clarkpoolinteriors.com.au --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: coachingteams.eu --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: coloresmedia.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: coolnet.com.pl --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.101.114.20, 141.101.115.20, 190.93.244.20,  /
checking domain: cpmprint.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 208.91.197.104
checking domain: creatingyourfreedom.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: damiannowak.pl --> seems to be INFECTED: http://jianjia.teeboxpromo.com/delivery/lg.php --> DNS: jianjia.teeboxpromo.com / 81.92.219.61
checking domain: darraghkelly.me --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 91.237.88.233
checking domain: demo.crg-sa.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com / 209.15.13.134
checking domain: demonroad.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: desarrollos.localhost.net.ar --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: designerdogwear.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: dgmarketingdesign.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: diegoeramon.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: diningcity.net --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: dogtreatrecipes.com.au --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: dome2nite.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: d-paradise.com.my --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: drdenmarksaidit.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: eagle-software.co.uk --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: ecoswaycolombia.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 208.91.197.104
checking domain: ekrosno.pl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: elderdayservices.com --> seems to be INFECTED: http://ciciretto.prestigehonda.net/b --> DNS: ciciretto.prestigehonda.net / 31.210.96.157
checking domain: epile.databyte.cl --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: essa-lyon.org --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: etrend.hu --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: ezkahuda.cz --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: f1central.net --> seems to be INFECTED: http://www.f1central.net/ --> DNS: www.f1central.net / 50.63.33.1
checking domain: faithcolumbus.com --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: famedomain.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: fatherlinh.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org / 8.5.1.33
checking domain: floridadeluxevillas.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com / 209.15.13.134
checking domain: franchiseyonet.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: freexxsbikinis.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: gaeaforms.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: gamanteles.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: getmovies.us --> seems to be INFECTED: http://killahtwo.greatserviceforless.com/pview --> DNS: killahtwo.greatserviceforless.com / 31.210.96.157
checking domain: gmkb.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: gogreenshed.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: gowoodward.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: gujaratnewsdesk.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: gwendaviddesigns.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out.
checking domain: harlawacademy.org --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 208.91.197.104
checking domain: hazmester.etrend.hu --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: hippiehalloween.org --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: hollywoodvision.com --> seems to be INFECTED: http://www.hollywoodvision.com/ --> DNS: www.hollywoodvision.com / 98.158.198.11
checking domain: hungryviki.com --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com / 190.93.244.20, 190.93.245.20, 190.93.246.20,  /
checking domain: images.teamfatbird.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: imryanleslie.com --> seems to be INFECTED: http://ww12.imryanleslie.com --> DNS: ww12.imryanleslie.com / 91.237.88.245
checking domain: indieartistradio.net --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: information-international.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: ingecoucn.cl --> seems to be INFECTED: http://inamlica.saving53k.com/__utm.gif --> DNS: inamlica.saving53k.com / 176.74.176.178
checking domain: innerear.co.uk --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: innisaithendral.com --> seems to be INFECTED: http://ww2.innisaithendral.com/ --> DNS: ww2.innisaithendral.com / 208.73.210.233
checking domain: innisicss.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: innovativefutures.org --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: inspiraz.com.sg --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: italkwithspirits.com --> seems to be INFECTED: http://www.italkwithspirits.com/ --> DNS: www.italkwithspirits.com / 75.125.246.210
checking domain: jadedsky.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out.
checking domain: jenniferhejna.com --> seems to be INFECTED: http://www.jenniferhejna.com/ --> DNS: www.jenniferhejna.com / 178.79.165.157
checking domain: jialu.com --> seems to be INFECTED: http://www.jialu.com/ --> DNS: www.jialu.com / 206.188.192.77
checking domain: jollybeach.net --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: jornalvakio.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: juvajuice.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: jwegener.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: keerthiassociates.in --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: key2debtfreedom.co.za --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: killerbee.dk --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: kinkyhair.co.za --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: koznejaknekodzic.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: kw-dl.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: labontesautoschool.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: ladidah.net --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 62.116.181.25
checking domain: lancesys.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: larcheedmonton.org --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: latenightfeelings.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: leandromauricio.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: legno-olivo.biz --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: levantdistribution.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: lgingenieros.com.pe --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: louismarie.be --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: lovethisgirl.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: madisonmoellers.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: makkahmarket.com --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 62.116.181.25
checking domain: matrixneocostume.com --> seems to be INFECTED: http://indanetwall.net/cgi-bin/r.cgi --> DNS: indanetwall.net / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: mayer.com.ro --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: mehfil.urdustan.net --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 91.237.88.233
checking domain: melisdup.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: merceariaoferreira.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: mstolomouc.ambrozy.cz --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: mvrccc.com.au --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: nancyhudsonassociates.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: nasc.in --> seems to be INFECTED: http://www.nasc.in/ --> DNS: www.nasc.in / 208.91.198.170
checking domain: ncasindia.org --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: ncpo.cc --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: nefelejcspekseg.hu --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: net808source.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: nigifilm.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: nogaholding.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: northbatonrougejournal.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: oceansys.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: ofarroupilha.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: optionpixel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: optipaint.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: osbycentralservice.se --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: padraoeditorial.com.br --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: painteranddecoratornorwich.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: palmexotica.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: pcjiasu.com --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: perca.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: perthcrew.com.au --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: phgsc.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: phuongdanhvonghe.edu.vn --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: piccolistudio.com.br --> seems to be INFECTED: http://handsexual.com/cgi-bin/r.cgi --> DNS: handsexual.com / 208.91.197.54
checking domain: pileus.fr --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: pilotclass62a.org --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: pmmilrec.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: pntc.ac.th --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: porntamil.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org / 8.5.1.33
checking domain: pro-bit.rs --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: prospettopotenza.com --> seems to be INFECTED: http://www.prospettopotenza.com/ --> DNS: www.prospettopotenza.com / 62.149.142.150
checking domain: prp.co.th --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: ravdaniel.brinkster.net --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: re4m.me --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: redbarrack.net --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: registrovip.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: resale1.biz --> seems to be INFECTED: http://www.resale1.biz/ --> DNS: www.resale1.biz / 219.94.162.12
checking domain: resistantculture.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: retrosheet.org --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: river.co.th --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: rose.kuro-tejina.com --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com / 190.93.246.20, 141.101.114.20, 141.101.115.20,  /
checking domain: saiamais.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: saibabamandirs.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: sanishaaban.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: schoolkb.net --> seems to be INFECTED: http://valasta.nicholasguiliano.com/b --> DNS: valasta.nicholasguiliano.com / 50.63.87.98
checking domain: seekmecyprus.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: selfdefensesecretsrevealed.com --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 62.116.181.25
checking domain: somaap.mx --> seems to be INFECTED: http://darlami.egunt.com/imghover --> DNS: darlami.egunt.com / 81.92.219.62
checking domain: southindia-tourism.net --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 62.116.181.25
checking domain: spaceylon.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: sportprnews.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: sports-rehab-and-education.co.uk --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: ssr-nu.nl --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 91.237.88.233
checking domain: stevenhillx.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: stockslegal.co.uk --> seems to be INFECTED: http://www.stockslegal.co.uk/ --> DNS: www.stockslegal.co.uk / 176.32.230.22
checking domain: stw-eu.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: syrena.gminanekla.pl --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: systemcv.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: talottainteriors.com --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: teamgod.net --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: thepatientsspeak.org --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: thepennystockblog.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: theredpill.com.sg --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 62.116.181.25
checking domain: thesoulfactory.com --> seems to be INFECTED: http://www.thesoulfactory.com/ --> DNS: www.thesoulfactory.com / 23.23.164.197, 23.23.108.46
checking domain: tintasluxor.com.br --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: tires23.com --> seems to be INFECTED: http://www.tires23.com/ --> DNS: www.tires23.com / 184.106.2.74
checking domain: t-love.art.pl --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: tools.szentkoronaradio.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: toyboxinnovations.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out.
checking domain: trasalud.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 190.93.246.20, 141.101.114.20, 141.101.115.20,  /
checking domain: triconinnovations.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: turkescortbayanlar.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: tusinvitaciones.es --> seems to be INFECTED: http://www.tusinvitaciones.es/ --> DNS: www.tusinvitaciones.es / 5.56.63.212
checking domain: upunder.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: valsystem.cl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: vbcc.fr --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: vetrocolorito.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: vidimozz.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: virginiaxriders.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: vliegenmetkinderen.nl --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 91.237.88.233
checking domain: watchourvideo.net --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: webmatic.es --> seems to be INFECTED: http://www.webmatic.es/ --> DNS: www.webmatic.es / 81.25.126.21
checking domain: weterynarz-zawiercie.pl --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: windomallergy.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: wirdumonline.nl --> seems to be INFECTED: http://luckyhosting.org/cgi-bin/r.cgi --> DNS: luckyhosting.org / failed: Connection timed out.
checking domain: wodzirejka.com.pl --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: wonderwhistle.co.uk --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: workandlifebalance.eu --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: worldwidemusicc.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out.
checking domain: writing.infraordinario.it --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: wroclawpanorama.rotary.org.pl --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: www.100iz.hu --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.1964toppsset.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: www.actiogen.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 208.91.197.104
checking domain: www.addbeton.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.aguadarocha.com.br --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.alnimrexpo.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.alphaville.com.br --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.am830klaa.com --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 91.237.88.233
checking domain: www.amcmp.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.amikoslovakia.sk --> seems to be INFECTED: http://yespicture.org/cgi-bin/r.cgi --> DNS: yespicture.org / 95.211.117.206, 216.55.178.173
checking domain: www.apmc.com.hk --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.auctionvideotutorials.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.backupdunyasi.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.balad2day.com --> seems to be INFECTED: http://www.balad2day.com/site --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.bikersandbabesatthebeach.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.bisleri.com --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: www.bluraymods.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.bmw-135i.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.bobthebugman.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.bonetown.com --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 91.237.88.233
checking domain: www.bralicias.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.btmadhaka.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.buybutcherblock.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 91.237.88.239
checking domain: www.cambiodemocratico.org --> seems to be INFECTED: http://philosophymercer.com/cgi-bin/r.cgi --> DNS: philosophymercer.com / 173.212.56.190
checking domain: www.carlosvuam.com --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: www.carros--tunados.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: www.ccaclog.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: www.chingssecret.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.chinmayanurseryschool.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: www.chonburitv.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.chowking.com --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 176.74.176.178
checking domain: www.civilunderground.co.nz --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.countrywidetherapy.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.101.114.20, 141.101.115.20, 190.93.244.20,  /
checking domain: www.crcnk.com.au --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.creatingyourfreedom.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.dallascustomfurniture.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out.
checking domain: www.damiannowak.pl --> seems to be INFECTED: http://jianjia.teeboxpromo.com/delivery/lg.php --> DNS: jianjia.teeboxpromo.com / 81.92.219.61
checking domain: www.defensepenale.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.101.115.20, 190.93.244.20, 190.93.245.20,  /
checking domain: www.designerdogwear.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: www.diamondswindon.co.uk --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 176.74.176.178
checking domain: www.diegoeramon.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.dogtreatrecipes.com.au --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.dulceselsombreron.com --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 62.116.181.25
checking domain: www.dumontduneriders.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com / 209.15.13.134
checking domain: www.dwowvod.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: www.eaf.edu.mx --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.elsiedesigns.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: www.enimex.gr --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.eqtesady.com --> seems to be INFECTED: http://www.eqtesady.com/site/index.php --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.farmasanmodababy.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.fastflowtransport.com.au --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.fatherlinh.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org / 8.5.1.33
checking domain: www.flatbasher.co.uk --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: www.fotozoom.pl --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.freesure.com.tr --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 91.237.88.233
checking domain: www.french-associates.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.gamanteles.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 82.98.86.177
checking domain: www.geoffwhite.ws --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.101.114.20, 141.101.115.20, 190.93.244.20,  /
checking domain: www.getmovies.us --> seems to be INFECTED: http://killahtwo.greatserviceforless.com/t.gif --> DNS: killahtwo.greatserviceforless.com / 31.210.96.157
checking domain: www.gowoodward.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.griotcalendar.org --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 91.237.88.233
checking domain: www.gswsftp01.com --> seems to be INFECTED: http://parallag.bmemkitchens.com/b/ss/cnn-adbp-intl/1/H.24.1/s0929995991119 --> DNS: parallag.bmemkitchens.com / failed: Name or service not known.
checking domain: www.habitationlacombe.com --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: www.hutano.com --> seems to be INFECTED: http://vocken.panjiaying.com/b --> DNS: vocken.panjiaying.com / 81.92.219.62
checking domain: www.iagu.org --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.icaijodhpur.org --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.indian-desi-wedding-photographers.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.infoanalitica.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.information-international.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.innerear.co.uk --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.innisicss.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.inspiraz.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: www.instelec.com.co --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.inteki.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.intergroup-qatar.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.iskcontirupati.net --> seems to be INFECTED: http://www.iskcontirupati.net/main/ --> DNS: underbuild.net / 91.237.88.239
checking domain: www.jollybeach.net --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: www.jornalfarroupilha.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.keepcalm.com.br --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 208.91.197.104
checking domain: www.khabarlatef.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.kinkyhair.co.za --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.klaumonforma.com.br --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.klokast.se --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 62.116.181.25
checking domain: www.kuriren.net --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.kvalitetsansvariga.se --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.labclinical.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.lami.ai-crm.com --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: www.laqthai.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.larcheedmonton.org --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.latenightfeelings.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.leslink.nl --> seems to be INFECTED: http://yespicture.org/cgi-bin/r.cgi --> DNS: yespicture.org / 216.55.178.173, 95.211.117.206
checking domain: www.levin.com.br --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30
checking domain: www.listalapiazza.it --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.lovethisgirl.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.loxsavvy.com.au --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.maquinaslitograficas.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.marionssewandvac.net --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: www.mayer.com.ro --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: www.melisdup.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
checking domain: www.merceariaoferreira.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: www.michielvandamme.be --> seems to be INFECTED: http://velarasi.8jutawan.com/api/getCount2.php --> DNS: velarasi.8jutawan.com / 31.210.96.156
checking domain: www.mintfinancial.com.au --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.modellfly.no --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: www.moebel-direkt.net --> seems to be INFECTED: http://reset.com/fpc.pl --> DNS: reset.com / 184.73.213.106, 54.243.65.166
checking domain: www.mrlatinomagazine.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.my-hebrew-programs.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.mywoom.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.nautinox.com.br --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: www.nbgroup.in --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.neonconcursos.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.nqsacademy.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.nwd-ly.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.oceansys.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.osbycentralservice.se --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: www.pacificcay.com.au --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105,  /
checking domain: www.padraoeditorial.com.br --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 199.59.243.106, 199.59.243.107, 199.59.243.108,  /
checking domain: www.palaceclub.be --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 62.116.181.25
checking domain: www.pbemarking.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.pearlscorniche.com --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.pearlsindiatour.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 91.237.88.239
checking domain: www.perstererfineart.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.pettmans.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.phoenixexports.in --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.picador.org --> seems to be INFECTED: http://56152.customshowerdoorsc.com/url%3fsa=D&source=web&cd=4&ved=07Dg1lIq5&url=http://www.picador.org/&ei=2ZIvf6vN5K+wq42LxlEy+pm1pw==&usg=lgPYi76y6UqDZRTj517Ep9&sig2=DB2fVNvdES7RlhXzJ2pKDK --> DNS: 56152.customshowerdoorsc.com / 141.8.225.61
checking domain: www.pixled.pl --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.planet-pulse.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.pmg.kncity.info --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.rac-italia.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.rdm.hr --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.resistantculture.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.retrosheet.org --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.revbiolmar.cl --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: www.rich.co.ke --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.ringpublishing.cz --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 199.59.243.107, 199.59.243.108, 199.59.243.109,  /
checking domain: www.saiamais.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.sandiegoinsidertours.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177
checking domain: www.sasgroup.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out.
checking domain: www.scpconsultants.co.uk --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: www.sdfbd.org --> seems to be INFECTED: http://handsexual.com/cgi-bin/r.cgi --> DNS: handsexual.com / 208.91.197.54
checking domain: www.siddhababa.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.105, 199.59.243.106, 199.59.243.107,  /
checking domain: www.singaporeparties.com.sg --> seems to be INFECTED: http://rothermich.freelifelinegovernmentphone.com/navbar.g --> DNS: rothermich.freelifelinegovernmentphone.com / 69.43.161.180
checking domain: www.skleprower.pl --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.skninwestor.com --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177
checking domain: www.sreinc.net --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 91.237.88.233
checking domain: www.ssr-nu.nl --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 91.237.88.233
checking domain: www.successinteaching.info --> seems to be INFECTED: http://protechere.com/cgi-bin/r.cgi --> DNS: protechere.com / 69.43.161.177
checking domain: www.systemcv.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.tansunbright.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177
checking domain: www.televideoproductions.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.thailandsoft.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / failed: Name or service not known.
checking domain: www.thepatientsspeak.org --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.thestampspot.com.au --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Name or service not known.
checking domain: www.tintasluxor.com.br --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25
checking domain: www.tubtimsiam.com --> seems to be INFECTED: http://abew.whonose.com/b --> DNS: abew.whonose.com / 178.211.33.203
checking domain: www.turkescortbayanlar.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.109, 199.59.243.105, 199.59.243.106,  /
checking domain: www.vakiodaily.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.163
checking domain: www.veterinarkliniken.se --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 62.116.181.25
checking domain: www.vidvanern.se --> seems to be INFECTED: http://usnai.restoremystuff.com/__utm.gif --> DNS: usnai.restoremystuff.com / 31.210.96.156
checking domain: www.visitwoodward.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.wandohigh.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 91.237.88.233
checking domain: www.wmc.kylos.pl --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.wonderwhistle.co.uk --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out.
checking domain: www.wronashouseofviolins.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.165
checking domain: www.xn--espaodoesporte-jjb.com.br --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 91.237.88.239
checking domain: www.zmd.ca --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 69.43.161.178
checking domain: www.zoeblitzer-natursteine.de --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 91.237.88.233
checking domain: ychange.ca --> seems to be INFECTED: http://jesusonlynet.org/cgi-bin/r.cgi --> DNS: jesusonlynet.org / 8.5.1.34
checking domain: zawada-reh.pl --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177
date finished: Fri Mar  7 12:44:36 CET 2014