# # this list of ponmocup malware redirection domains and infected web-servers is maintained by # email: toms.security.stuff -at- gmail.com # twitter: @c_APT_ure # blog: http://c-apt-ure.blogspot.com/ # # for use with CIF see malware-feeds here: # http://security-research.dyndns.org/pub/malware-feeds/ # date started: Mon Dec 22 12:00:02 CET 2014 checking domain: www.agliran.co.il --> seems to be INFECTED: http://mercysiste.vehicleservicediscount.com/__utm.gif --> DNS: mercysiste.vehicleservicediscount.com / 31.210.96.157 checking domain: www.ccpa.org.tw --> seems to be INFECTED: http://sandercoe.mwhiteman.com/plugins/like.php --> DNS: sandercoe.mwhiteman.com / 31.210.96.155 checking domain: www.lac-cdf.ch --> seems to be INFECTED: http://vpcs.gliscastings.net/b/ss/aa-airasia-id-prd,aa-airasia-global/1/H.24.1/s56778938677726 --> DNS: vpcs.gliscastings.net / 31.210.96.155 checking domain: b-my.de --> seems to be INFECTED: http://zailawatikarim.automotiveeventregistration.com/csi --> DNS: zailawatikarim.automotiveeventregistration.com / 31.210.96.157 checking domain: cioks.com --> seems to be INFECTED: http://rimei.integratedpipe.com/p --> DNS: rimei.integratedpipe.com / 31.210.96.158 checking domain: www.toisondor.be --> seems to be INFECTED: http://radolinski.makingwaves-salon.com/t.gif --> DNS: radolinski.makingwaves-salon.com / 31.210.96.158 checking domain: www.aca-uccle.be --> seems to be INFECTED: http://omonkhegbele.wenerdhard.com/t.gif --> DNS: omonkhegbele.wenerdhard.com / 31.210.96.155 checking domain: www.lesscouts.be --> seems to be INFECTED: http://andryukov.whichcameratookthis.com/imghover --> DNS: andryukov.whichcameratookthis.com / 31.210.96.157 checking domain: www.centrumgregoriaans.be --> seems to be INFECTED: http://wanthegreat.pinkdollaratm.com/dcs1tn7q7wz5bdpbasr9xsxin_9s8i/dcs.gif --> DNS: wanthegreat.pinkdollaratm.com / 31.210.96.156 checking domain: www.trikalasport.gr --> seems to be INFECTED: http://siene.webrunchhard.com/imgres --> DNS: siene.webrunchhard.com / 31.210.96.155 checking domain: www.sukerbuyc.be --> seems to be INFECTED: http://siddieq.autoeventregistration.com/t.gif --> DNS: siddieq.autoeventregistration.com / 31.210.96.157 checking domain: www.destrangers.org --> seems to be INFECTED: http://bidin.golfnewslouisiana.com/pview --> DNS: bidin.golfnewslouisiana.com / 31.210.96.157 checking domain: www.vtf.co.at --> seems to be INFECTED: http://santamore.vehicleexchangeprogram.com/pview --> DNS: santamore.vehicleexchangeprogram.com / 31.210.96.157 checking domain: gezinsbondzarren.be --> seems to be INFECTED: http://kumher.savedalyfield.com/pview --> DNS: kumher.savedalyfield.com / 31.210.96.157 checking domain: www.silvergrey.es --> seems to be INFECTED: http://ambalanchery.drdekloet.com/__utm.gif --> DNS: ambalanchery.drdekloet.com / failed: Name or service not known. checking domain: www.dioxinnz.com --> seems to be INFECTED: http://plapplatong.workoutebook.com/t.gif --> DNS: plapplatong.workoutebook.com / failed: Name or service not known. checking domain: 1980622.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: addison-electronique.com --> seems to be INFECTED: http://arjarn.sellitandforgetittoday.com/__utm.gif --> DNS: arjarn.sellitandforgetittoday.com / 31.210.96.156 checking domain: afag.com.br --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: agirazul.com.br --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 185.53.179.19 checking domain: akhbaralyom.net --> seems to be INFECTED: http://sazdoski.chelseyfatula.com/pview --> DNS: sazdoski.chelseyfatula.com / 185.53.177.13 checking domain: alastech.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: allandalla.ro --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: anzaisekizaiten.co.jp --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177 checking domain: apprendre-l-arabe.fr --> seems to be INFECTED: http://yasnid.vehicleservicediscount.com/b --> DNS: yasnid.vehicleservicediscount.com / 31.210.96.157 checking domain: area-press.eu --> seems to be INFECTED: http://yerme.techsupportauctions.com/b --> DNS: yerme.techsupportauctions.com / 31.210.96.158 checking domain: arlington.ph --> seems to be INFECTED: http://voutilainen.wenerdhard.com/tracker --> DNS: voutilainen.wenerdhard.com / 31.210.96.155 checking domain: article-marketing.eu --> seems to be INFECTED: http://yerme.techsupportauctions.com/1pix.gif --> DNS: yerme.techsupportauctions.com / 31.210.96.158 checking domain: autokompleks-jastrzebie.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: avionhome.com.tw --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com / 141.8.225.80 checking domain: avkolik.net --> seems to be INFECTED: http://shijothomas.softmn.com/fpc.pl --> DNS: shijothomas.softmn.com / 31.210.96.157 checking domain: badwapi.in --> seems to be INFECTED: http://behrakis.integratedpipe.com/router/ --> DNS: behrakis.integratedpipe.com / 31.210.96.158 checking domain: bcrwd.com --> seems to be INFECTED: http://youshawna.docneil.com/url --> DNS: youshawna.docneil.com / 178.211.33.203 checking domain: belles-bellies.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 185.53.179.9 checking domain: between2rivers.net --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 185.53.177.20 checking domain: bintanworld.com --> seems to be INFECTED: http://yangad.automotiveservicesavings.com/b --> DNS: yangad.automotiveservicesavings.com / 31.210.96.157 checking domain: blackcanyoncoffee.com --> seems to be INFECTED: http://mudras.jordandowney.net/c.gif --> DNS: mudras.jordandowney.net / 31.210.96.155 checking domain: blog.autourdeminuit.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.8.225.80 checking domain: blogfilcamsvarese.it --> seems to be INFECTED: http://loolu.carolinadreamrealestate.net/url --> DNS: loolu.carolinadreamrealestate.net / 178.211.33.205 checking domain: bluewingz.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: boisdolivier.biz --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.120 checking domain: bralux-saiko.com --> seems to be INFECTED: http://philosophymercer.com/cgi-bin/r.cgi --> DNS: philosophymercer.com / 192.64.147.205 checking domain: bramsche-basketball.de --> seems to be INFECTED: http://kinlichini.imfamousontheinternet.com/__utm.gif --> DNS: kinlichini.imfamousontheinternet.com / failed: Name or service not known. checking domain: bridalcookie.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: businessbythespirit.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177 checking domain: californiaoutdoorproperties.com --> seems to be INFECTED: http://jelow.be3ny.com/new/www/delivery/ajs.php --> DNS: jelow.be3ny.com / 31.210.96.156 checking domain: catholique.info --> seems to be INFECTED: http://savando.salutencwine.net/url --> DNS: savando.salutencwine.net / 178.211.33.205 checking domain: cbm.esp.br --> seems to be INFECTED: http://nalaras.farremuebles.com/b/ss/hphqglobal,hpcsecglobal,hphqna,hphqnahpshopping,hpcsecamsushhos/1/H.24.3/s81763155704102 --> DNS: nalaras.farremuebles.com / 81.92.219.62 checking domain: cdcookingbook.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: cemerhn.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: chadflick.ws --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: chardonrecords.com --> seems to be INFECTED: http://indanetwall.net/cgi-bin/r.cgi --> DNS: indanetwall.net / 199.59.243.120 checking domain: checkscrub.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: clarkpoolinteriors.com.au --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: classroom334.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: cloudflood.com --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 185.53.177.20 checking domain: coachingteams.eu --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: coloresmedia.com --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 185.53.179.9 checking domain: comunicati-stampa.ws --> seems to be INFECTED: http://yerme.techsupportauctions.com/b --> DNS: yerme.techsupportauctions.com / 31.210.96.158 checking domain: coolnet.com.pl --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.8.225.80 checking domain: coptichistory.org --> seems to be INFECTED: http://bearjew.myfuturephysique.com/s --> DNS: bearjew.myfuturephysique.com / 31.210.96.158 checking domain: cpmprint.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 185.53.179.7 checking domain: cyberairlines.net --> seems to be INFECTED: http://34704.thomasyohannan.com/url --> DNS: 34704.thomasyohannan.com / 178.211.33.203 checking domain: darraghkelly.me --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 185.53.179.19 checking domain: demo.crg-sa.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com / 185.53.178.9 checking domain: desarrollos.localhost.net.ar --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: desifucker.com --> seems to be INFECTED: http://hardenburger.myredhomingpidgeon.com/__utm.gif --> DNS: hardenburger.myredhomingpidgeon.com / 69.43.160.163 checking domain: dgmarketingdesign.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: dialolinks.de --> seems to be INFECTED: http://hartrup.kemperfitness.com/__utm.gif --> DNS: hartrup.kemperfitness.com / 81.92.219.60 checking domain: diningcity.net --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: d-math1.com --> seems to be INFECTED: http://renolla.golfnewsnewyork.com/data/RNRoc1azVY00oW --> DNS: renolla.golfnewsnewyork.com / 31.210.96.157 checking domain: doggi-game.pl --> seems to be INFECTED: http://zifer.autoserviceevent.com/api/getCount2.php --> DNS: zifer.autoserviceevent.com / 31.210.96.157 checking domain: dome2nite.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177 checking domain: doolittletrailers.com --> seems to be INFECTED: http://scheina.pleinairolney.com/pagead/ads --> DNS: scheina.pleinairolney.com / 81.92.219.60 checking domain: drdenmarksaidit.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: dropshipthai.com --> seems to be INFECTED: http://abusayed.serenehomeandlandscapes.com/api/getCount2.php --> DNS: abusayed.serenehomeandlandscapes.com / 81.92.219.61 checking domain: duikeninzutphen.nl --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: eagle-software.co.uk --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: ecoswaycolombia.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 185.53.179.7 checking domain: ekrosno.pl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: elderdayservices.com --> seems to be INFECTED: http://ciciretto.prestigehonda.net/url --> DNS: ciciretto.prestigehonda.net / 31.210.96.157 checking domain: eniaktesting.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: epicboardskins.com --> seems to be INFECTED: http://vasimon.theknowledgekingdom.com/t.gif --> DNS: vasimon.theknowledgekingdom.com / 31.210.96.158 checking domain: equestrianinfluence.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: essa-lyon.org --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: exclusivesms.com --> seems to be INFECTED: http://ifteiha.lions-mark.com/b/ss/ahmhondacomprod/0/FAS-1.3/s04833861524239 --> DNS: ifteiha.lions-mark.com / 31.210.96.158 checking domain: ezkahuda.cz --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 185.53.179.9 checking domain: faithcolumbus.com --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org / 185.53.177.9 checking domain: famedomain.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: fiatclubpt.com --> seems to be INFECTED: http://yovette.javaemulator.com/pview --> DNS: yovette.javaemulator.com / 31.210.96.156 checking domain: filmbirodalom.com --> seems to be INFECTED: http://janulewicz.theneighborhoodaddressshop.com/__utm.gif --> DNS: janulewicz.theneighborhoodaddressshop.com / 185.53.177.7 checking domain: firstsaturday.hu --> seems to be INFECTED: http://vertica.reikisolar.com/delivery/ajs.php --> DNS: vertica.reikisolar.com / 31.210.96.157 checking domain: floridadeluxevillas.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com / 185.53.178.9 checking domain: foropicos.net --> seems to be INFECTED: http://39755.flatblastard.com/url --> DNS: 39755.flatblastard.com / 91.207.4.51 checking domain: forum.auto.am --> seems to be INFECTED: http://witchwyd.bestsilvercufflinks.com/__utm.gif --> DNS: witchwyd.bestsilvercufflinks.com / 31.210.96.156 checking domain: forum.tierhilfe-antalya.de --> seems to be INFECTED: http://snitchel.automotiveservicesavings.com/avatar/47615e9a02ce37bf16a329ed90f8711d --> DNS: snitchel.automotiveservicesavings.com / 31.210.96.157 checking domain: freexxsbikinis.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: ftiindia.com --> seems to be INFECTED: http://wangga.autoeventregistration.com/t.gif --> DNS: wangga.autoeventregistration.com / 31.210.96.157 checking domain: gaeaforms.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177 checking domain: gandmand.com --> seems to be INFECTED: http://mindarto.myabadi.com/st --> DNS: mindarto.myabadi.com / 31.210.96.158 checking domain: greeni-shop.eu --> seems to be INFECTED: http://henessa.webdeploymenttool.com/url --> DNS: henessa.webdeploymenttool.com / 178.211.33.205 checking domain: gujaratnewsdesk.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / 69.172.201.208 checking domain: hackshark.com --> seems to be INFECTED: http://zemres.unlockiphonedallas.com/url --> DNS: zemres.unlockiphonedallas.com / 178.211.33.205 checking domain: harlawacademy.org --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 185.53.179.7 checking domain: hazmester.etrend.hu --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: healthnews8at8.com --> seems to be INFECTED: http://youjizzboy.autoserviceevent.com/ --> DNS: youjizzboy.autoserviceevent.com / 31.210.96.157 checking domain: highextreme.co.uk --> seems to be INFECTED: http://alintanahin.greatserviceforless.com/pview --> DNS: alintanahin.greatserviceforless.com / 31.210.96.157 checking domain: hippiehalloween.org --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: homeimprovement.com --> seems to be INFECTED: http://mikuz.animalgenetics.com/imghover --> DNS: mikuz.animalgenetics.com / 31.210.96.158 checking domain: hospitalesangeles.com --> seems to be INFECTED: http://crdoba.hartford-capital.com/api/getCount2.php --> DNS: crdoba.hartford-capital.com / 31.210.96.155 checking domain: hot-masti.com --> seems to be INFECTED: http://khayeb.nacprint.com/t.gif --> DNS: khayeb.nacprint.com / 31.210.96.158 checking domain: hungryviki.com --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com / 141.8.225.80 checking domain: images.wiltec.info --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: infobunda.com --> seems to be INFECTED: http://51463.clickbanksite.org/url --> DNS: 51463.clickbanksite.org / 69.172.201.208 checking domain: intermundos.org --> seems to be INFECTED: http://poumtas.effectsllc.com/new2/www/delivery/lg.php --> DNS: poumtas.effectsllc.com / 31.210.96.158 checking domain: janeece.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: jornalsodesporto.com --> seems to be INFECTED: http://yononz.totalslipsolutions.net/url --> DNS: yononz.totalslipsolutions.net / 178.211.33.205 checking domain: jornalvakio.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: jwegener.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: karavelle.com.br --> seems to be INFECTED: http://britts.oharvest.net/getSegment.php --> DNS: britts.oharvest.net / 31.210.96.156 checking domain: key2debtfreedom.co.za --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 185.53.179.9 checking domain: killerbee.dk --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: koninskiozpn.pl --> seems to be INFECTED: http://zhezha.theafternoonjoker.com/spc.php --> DNS: zhezha.theafternoonjoker.com / 31.210.96.158 checking domain: koznejaknekodzic.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: kw-dl.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: ladidah.net --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 185.53.177.20 checking domain: lancesys.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: laserme.de --> seems to be INFECTED: http://dauginas.mittromneyinternetcampaign.com/__utm.gif --> DNS: dauginas.mittromneyinternetcampaign.com / 141.8.224.183 checking domain: leandromauricio.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: leftiesshowroom.com --> seems to be INFECTED: http://agiula.agentonpoint.com/c.gif --> DNS: agiula.agentonpoint.com / 31.210.96.156 checking domain: legno-olivo.biz --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: lesmanguiers.com --> seems to be INFECTED: http://jernighan.sullivan-county.com/delivery/lg.php --> DNS: jernighan.sullivan-county.com / 31.210.96.158 checking domain: levantdistribution.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.120 checking domain: livretsbaroques.fr --> seems to be INFECTED: http://suhaifah.psychictx.com/url --> DNS: suhaifah.psychictx.com / 178.211.33.205 checking domain: louismarie.be --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: mantralingua.com --> seems to be INFECTED: http://imsun.memorialdaysavingsevent.com/pview --> DNS: imsun.memorialdaysavingsevent.com / 31.210.96.156 checking domain: masterweaverindia.com --> seems to be INFECTED: http://quirarte.dealerholidayevent.com/lg.php --> DNS: quirarte.dealerholidayevent.com / 31.210.96.157 checking domain: matzlpage.de --> seems to be INFECTED: http://forhed.animalhospitalgreensboro.com/safe_image.php --> DNS: forhed.animalhospitalgreensboro.com / failed: Connection timed out. checking domain: mehfil.urdustan.net --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 185.53.178.7 checking domain: meredithbrooks.com --> seems to be INFECTED: http://52550.flatblastard.com/url --> DNS: 52550.flatblastard.com / 91.207.4.51 checking domain: meteomaastricht.nl --> seems to be INFECTED: http://56027.p-balls.com/url --> DNS: 56027.p-balls.com / 91.207.4.51 checking domain: metrotecegypt.info --> seems to be INFECTED: http://hobart.softmn.com/t.gif --> DNS: hobart.softmn.com / 31.210.96.157 checking domain: mile2000.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: ministerfortson.com --> seems to be INFECTED: http://bazti.momsagainstmercury.com/s --> DNS: bazti.momsagainstmercury.com / 31.210.96.156 checking domain: m.kfc.fr --> seems to be INFECTED: http://55548.politcalnews.com/url --> DNS: 55548.politcalnews.com / failed: Name or service not known. checking domain: mozicsillag.cc --> seems to be INFECTED: http://janulewicz.theneighborhoodaddressshop.com/event.js --> DNS: janulewicz.theneighborhoodaddressshop.com / 185.53.177.7 checking domain: munifrutillar.cl --> seems to be INFECTED: http://valdinger.chrisvessey.com/__utm.gif --> DNS: valdinger.chrisvessey.com / 31.210.96.155 checking domain: mvrccc.com.au --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: myexfuzeoffice.com --> seems to be INFECTED: http://batilekaleka.laallstars.com/url --> DNS: batilekaleka.laallstars.com / 178.211.33.205 checking domain: myomnistar.com --> seems to be INFECTED: http://radeth.joeywilliamsdrums.com/lg.php --> DNS: radeth.joeywilliamsdrums.com / 185.53.177.6 checking domain: myyogasource.com --> seems to be INFECTED: http://ushean.8jutawan.com/pview --> DNS: ushean.8jutawan.com / 31.210.96.156 checking domain: nancyhudsonassociates.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: ncpo.cc --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: nicolaegabriel.info --> seems to be INFECTED: http://wangsha.prestigehonda.net/cmd/neobux --> DNS: wangsha.prestigehonda.net / 31.210.96.157 checking domain: northbatonrougejournal.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: ofarroupilha.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: oople.com --> seems to be INFECTED: http://assington.whhusainc.net/__utm.gif --> DNS: assington.whhusainc.net / 31.210.96.156 checking domain: optionpixel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: parngkhaw.com --> seems to be INFECTED: http://kuckenbecker.strevel.net/pview --> DNS: kuckenbecker.strevel.net / 81.92.219.62 checking domain: partitionsbaroques.fr --> seems to be INFECTED: http://suhaifah.psychictx.com/url --> DNS: suhaifah.psychictx.com / 178.211.33.205 checking domain: patrickwolf.org --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out. checking domain: pcjiasu.com --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 185.53.179.9 checking domain: perca.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: perthcrew.com.au --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: php2.twinner.com.tw --> seems to be INFECTED: http://52723.flatblastard.com/url --> DNS: 52723.flatblastard.com / 91.207.4.51 checking domain: phuongdanhvonghe.edu.vn --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177 checking domain: piccolistudio.com.br --> seems to be INFECTED: http://handsexual.com/cgi-bin/r.cgi --> DNS: handsexual.com / 141.8.225.77 checking domain: pileus.fr --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: playgroundpups.com --> seems to be INFECTED: http://usva.automotiveeventregistration.com/__utm.gif --> DNS: usva.automotiveeventregistration.com / 31.210.96.157 checking domain: plural.ca --> seems to be INFECTED: http://doosani.aliquidcorporation.com/t.gif --> DNS: doosani.aliquidcorporation.com / 185.53.177.8 checking domain: pmmilrec.com --> seems to be INFECTED: http://elinah.midnightastronomy.com/s --> DNS: elinah.midnightastronomy.com / 31.210.96.155 checking domain: pntc.ac.th --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / failed: Connection timed out. checking domain: police.moraga.ca.us --> seems to be INFECTED: http://clubshop.boeckman.net/pview --> DNS: clubshop.boeckman.net / 31.210.96.158 checking domain: porntamil.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org / 8.5.1.33 checking domain: proreha.net --> seems to be INFECTED: http://wedcheel.gliscentrifugal.com/delivery/lg.php --> DNS: wedcheel.gliscentrifugal.com / 31.210.96.155 checking domain: prp.co.th --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: puntomascotas.cl --> seems to be INFECTED: http://mchal.vehicleservicediscount.com/widget/v3/data/ --> DNS: mchal.vehicleservicediscount.com / 31.210.96.157 checking domain: quantica.cl --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org / 185.53.177.9 checking domain: radiogurbeti.com --> seems to be INFECTED: http://sonagara.slyforkfarm.com/b/ss/jobsdb-prd-id/1/H.23.6/s21023602889073 --> DNS: sonagara.slyforkfarm.com / 31.210.96.157 checking domain: ravdaniel.brinkster.net --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 185.53.177.9 checking domain: re4m.me --> seems to be INFECTED: http://vhinmhy.serenehomeandlandscapes.com/navbar.g --> DNS: vhinmhy.serenehomeandlandscapes.com / 81.92.219.61 checking domain: redbarrack.net --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: reimagery.com --> seems to be INFECTED: http://stiepcic.z-sat.com/pview --> DNS: stiepcic.z-sat.com / 31.210.96.158 checking domain: rhs-airco.com --> seems to be INFECTED: http://kaliosa.mrsstyleseeker.com/tracker --> DNS: kaliosa.mrsstyleseeker.com / 31.210.96.157 checking domain: rhs-klima.de --> seems to be INFECTED: http://kaliosa.autoeventregistration.com/api/getCount2.php --> DNS: kaliosa.autoeventregistration.com / 31.210.96.157 checking domain: rohanwaterpark.in --> seems to be INFECTED: http://larnchester.crowncitycomputer.com/b --> DNS: larnchester.crowncitycomputer.com / 81.92.219.61 checking domain: rose.kuro-tejina.com --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com / 141.8.225.80 checking domain: saibabamandirs.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: saobacdau.com.vn --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 184.172.106.42 checking domain: sap.org.ar --> seems to be INFECTED: http://stasiauskaite.custom-chocolate-favors.com/delivery/lg.php --> DNS: stasiauskaite.custom-chocolate-favors.com / 31.210.96.155 checking domain: saranf.net --> seems to be INFECTED: http://hombrado.yourspartanmovers.com/t.gif --> DNS: hombrado.yourspartanmovers.com / 31.210.96.158 checking domain: sesc-sc.com.br --> seems to be INFECTED: http://shatto.8jutawan.com/widgets/tweet_button.html --> DNS: shatto.8jutawan.com / 31.210.96.156 checking domain: sharpeiyboxerdebluemar.com --> seems to be INFECTED: http://ryzhenko.sciconsultinggroup.com/delivery/ajs.php --> DNS: ryzhenko.sciconsultinggroup.com / 81.92.219.60 checking domain: southindia-tourism.net --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 185.53.177.20 checking domain: spitzer-onlinemarketing.de --> seems to be INFECTED: http://vuruya.avuzedesigns.com/delivery/lg.php --> DNS: vuruya.avuzedesigns.com / 178.211.33.205 checking domain: sportprnews.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: sports-rehab-and-education.co.uk --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.120 checking domain: sseo.elk.pl --> seems to be INFECTED: http://gensapa.valentinesalesevent.com/api/getCount2.php --> DNS: gensapa.valentinesalesevent.com / 31.210.96.156 checking domain: stalders.com --> seems to be INFECTED: http://phalangy.hartford-capital.com/widget/get_form_comment/ --> DNS: phalangy.hartford-capital.com / 31.210.96.155 checking domain: stillcatholic.com --> seems to be INFECTED: http://zahasky.greatserviceforless.com/www/delivery/lg.php --> DNS: zahasky.greatserviceforless.com / 31.210.96.157 checking domain: stw-eu.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: suitesofdorchester.com --> seems to be INFECTED: http://kek.invisatred.com/url --> DNS: kek.invisatred.com / 178.211.33.205 checking domain: sunliktrading.com --> seems to be INFECTED: http://wsbj.ancestorworshippublishing.com/t.gif --> DNS: wsbj.ancestorworshippublishing.com / 31.210.96.158 checking domain: swchan.com --> seems to be INFECTED: http://mustaqbal.totalcaminhoes.com/hit.xiti --> DNS: mustaqbal.totalcaminhoes.com / failed: Name or service not known. checking domain: syrena.gminanekla.pl --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177 checking domain: tappukidukaan.com --> seems to be INFECTED: http://primeiro.faustoteran.com/ps/ifr --> DNS: primeiro.faustoteran.com / 81.92.219.62 checking domain: teamgod.net --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: theflightattendantlife.com --> seems to be INFECTED: http://skagger.automotiveservicesavings.com/_xhr/ugccomments/ --> DNS: skagger.automotiveservicesavings.com / 31.210.96.157 checking domain: thepennystockblog.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / 69.172.201.208 checking domain: theredpill.com.sg --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 185.53.177.20 checking domain: tikokupon.com --> seems to be INFECTED: http://tryko.omobia.com/imghover --> DNS: tryko.omobia.com / 31.210.96.156 checking domain: tkne.net --> seems to be INFECTED: http://tytui.tri-swelding.com/__utm.gif --> DNS: tytui.tri-swelding.com / 31.210.96.158 checking domain: toyboxinnovations.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out. checking domain: tpm-corp.es --> seems to be INFECTED: http://yolivet.automotiveservicesavings.com/imgres --> DNS: yolivet.automotiveservicesavings.com / 31.210.96.157 checking domain: triconinnovations.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: upunder.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177 checking domain: valsystem.cl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: vbcc.fr --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: vetrocolorito.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: watchourvideo.net --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177 checking domain: wbu.wroc.pl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: webdesignfm.com --> seems to be INFECTED: http://berethalmi.libertywildlife.net/delivery/ajs.php --> DNS: berethalmi.libertywildlife.net / 178.211.33.205 checking domain: westindiesrestaurant.com --> seems to be INFECTED: http://almonares.golfironworks.com/pview --> DNS: almonares.golfironworks.com / 31.210.96.155 checking domain: weterynarz-zawiercie.pl --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: windomallergy.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: winegasmeatery.com --> seems to be INFECTED: http://mykole.dealerholidayevent.com/ps/ifr --> DNS: mykole.dealerholidayevent.com / 31.210.96.157 checking domain: wirdumonline.nl --> seems to be INFECTED: http://luckyhosting.org/cgi-bin/r.cgi --> DNS: luckyhosting.org / failed: Name or service not known. checking domain: wodzirejka.com.pl --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177 checking domain: workandlifebalance.eu --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: workpanel.de --> seems to be INFECTED: http://creighton.wenerdhard.com/t.gif --> DNS: creighton.wenerdhard.com / 31.210.96.155 checking domain: worldwidemusicc.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out. checking domain: writing.infraordinario.it --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: wroclawpanorama.rotary.org.pl --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: www.1964toppsset.com --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com / 69.43.161.177 checking domain: www.accomo-metall.de --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177 checking domain: www.actiogen.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 185.53.179.7 checking domain: www.addbeton.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.aguadarocha.com.br --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 185.53.179.9 checking domain: www.alexnorrieswimwear.com --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / failed: Connection timed out. checking domain: www.aleyasin.nl --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.alhassanain.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: www.alnimrexpo.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: www.alphaville.com.br --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 184.172.106.42 checking domain: www.am830klaa.com --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 185.53.179.19 checking domain: www.amcmp.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 185.53.177.9 checking domain: www.americanshaolinkungfu.org --> seems to be INFECTED: http://54154.restoreuganda.org/url --> DNS: 54154.restoreuganda.org / 178.211.33.202 checking domain: www.amikoslovakia.sk --> seems to be INFECTED: http://yespicture.org/cgi-bin/r.cgi --> DNS: yespicture.org / 216.55.178.173 checking domain: www.apmc.com.hk --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: www.arlington.ph --> seems to be INFECTED: http://voutilainen.wenerdhard.com/b/ss/intelcorp,intelcorpsupp/1/H.20.3/s23315728755785 --> DNS: voutilainen.wenerdhard.com / 31.210.96.155 checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.aspi.ag --> seems to be INFECTED: http://umxamzah.mrsstyleseeker.com/__utm.gif --> DNS: umxamzah.mrsstyleseeker.com / 31.210.96.157 checking domain: www.aztechprep.org --> seems to be INFECTED: http://mathanie.renzograciemexico.com/1pix.gif --> DNS: mathanie.renzograciemexico.com / 31.210.96.156 checking domain: www.backupdunyasi.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 184.172.106.42 checking domain: www.bad-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155 checking domain: www.baliindividuellreisen.com --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 185.53.178.7 checking domain: www.baliniksoma.com --> seems to be INFECTED: http://dirdam.castlelawpa.com/_xhr/ugccomments/ --> DNS: dirdam.castlelawpa.com / 31.210.96.158 checking domain: www.banksglobaltransport.com --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 185.53.179.7 checking domain: www.batasnatin.com --> seems to be INFECTED: http://morsh.joannheilman.com/t.gif --> DNS: morsh.joannheilman.com / 31.210.96.158 checking domain: www.bebenatur.com --> seems to be INFECTED: http://poeya.cubpack910.com/url --> DNS: poeya.cubpack910.com / failed: Connection timed out. checking domain: www.bel.com --> seems to be INFECTED: http://44998.southwestdiscus.com/url --> DNS: 44998.southwestdiscus.com / 178.211.33.203 checking domain: www.berdee.com --> seems to be INFECTED: http://ugiwa.rled.net/url --> DNS: ugiwa.rled.net / 31.210.96.158 checking domain: www.berera.com --> seems to be INFECTED: http://jojua.remodelgreaterphoenix.com/b --> DNS: jojua.remodelgreaterphoenix.com / 31.210.96.157 checking domain: www.bestattungsinstitut-petri.de --> seems to be INFECTED: http://youremy.autoeventregistration.com/st --> DNS: youremy.autoeventregistration.com / 31.210.96.157 checking domain: www.bharatinfoline.com --> seems to be INFECTED: http://lesbon.ksupridewrestling.com/lg.php --> DNS: lesbon.ksupridewrestling.com / 31.210.96.155 checking domain: www.bikersandbabesatthebeach.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.bitbank.com.lb --> seems to be INFECTED: http://rungbahadoor.oharvest.net/pview --> DNS: rungbahadoor.oharvest.net / 31.210.96.156 checking domain: www.bitcell.com.mx --> seems to be INFECTED: http://ushiar.vehicleservicediscount.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: ushiar.vehicleservicediscount.com / 31.210.96.157 checking domain: www.bluechipsportfishing.com --> seems to be INFECTED: http://treffinah.rled.net/__utm.gif --> DNS: treffinah.rled.net / 31.210.96.158 checking domain: www.bluestar.us --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / failed: Connection timed out. checking domain: www.bluraymods.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 185.53.177.9 checking domain: www.bobthebugman.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.bodasexclusivas.com --> seems to be INFECTED: http://compass.automotiveeventregistration.com/imgres --> DNS: compass.automotiveeventregistration.com / 31.210.96.157 checking domain: www.bogon.de --> seems to be INFECTED: http://digiampietro.greatserviceforless.com/navbar.g --> DNS: digiampietro.greatserviceforless.com / 31.210.96.157 checking domain: www.bralicias.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.brianpatten.co.uk --> seems to be INFECTED: http://bjrneset.ahtcna.com/delivery/lg.php --> DNS: bjrneset.ahtcna.com / 31.210.96.158 checking domain: www.brichzin.de --> seems to be INFECTED: http://zhainia.prestigehonda.net/delivery/lg.php --> DNS: zhainia.prestigehonda.net / 31.210.96.157 checking domain: www.buybutcherblock.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 184.172.106.42 checking domain: www.californiaoutdoorproperties.com --> seems to be INFECTED: http://jelow.be3ny.com/log --> DNS: jelow.be3ny.com / 31.210.96.156 checking domain: www.calltoislam.com --> seems to be INFECTED: http://griscom.mrsstyleseeker.com/pview --> DNS: griscom.mrsstyleseeker.com / 31.210.96.157 checking domain: www.carlosmeschini.com.br --> seems to be INFECTED: http://fulpagar.tropicaltoner.com/imghover --> DNS: fulpagar.tropicaltoner.com / 31.210.96.158 checking domain: www.carlosvuam.com --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: www.cases.batasnatin.com --> seems to be INFECTED: http://morsh.joannheilman.com/__utm.gif --> DNS: morsh.joannheilman.com / 31.210.96.158 checking domain: www.ccaclog.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: www.chiangkongonline.com --> seems to be INFECTED: http://zoenna.newlogiq.com/imghover --> DNS: zoenna.newlogiq.com / 31.210.96.155 checking domain: www.chingssecret.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 184.172.106.42 checking domain: www.choice.md --> seems to be INFECTED: http://rangihaeata.kemperfitness.com/__utm.gif --> DNS: rangihaeata.kemperfitness.com / 81.92.219.60 checking domain: www.ciren.net --> seems to be INFECTED: http://treescha.automotiveservicesavings.com/ps/ifr --> DNS: treescha.automotiveservicesavings.com / 31.210.96.157 checking domain: www.civilunderground.co.nz --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.clarkcoky.com --> seems to be INFECTED: http://panalangin.automotiveeventregistration.com/api/getCount2.php --> DNS: panalangin.automotiveeventregistration.com / 31.210.96.157 checking domain: www.clubescuelagr.com --> seems to be INFECTED: http://nakashian.mrsstyleseeker.com/nn_frame.php --> DNS: nakashian.mrsstyleseeker.com / 31.210.96.157 checking domain: www.cobraode.fr --> seems to be INFECTED: http://trolleeroy.ancestorworshippublishing.com/dcs84j0o400000gs4jddirf7y_3j9x/dcs.gif --> DNS: trolleeroy.ancestorworshippublishing.com / 31.210.96.158 checking domain: www.compta-geniale.com --> seems to be INFECTED: http://alipan.fantasyintro.com/f.gif --> DNS: alipan.fantasyintro.com / failed: Name or service not known. checking domain: www.comune.santa-maria-capua-vetere.ce.it --> seems to be INFECTED: http://gesneriaceae.telecomillinois.com/pview --> DNS: gesneriaceae.telecomillinois.com / 31.210.96.155 checking domain: www.countrywidetherapy.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.8.225.80 checking domain: www.crcnk.com.au --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.creatingyourfreedom.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: www.creativ-art1.com --> seems to be INFECTED: http://vermillon.serenehomeandlandscapes.com/s --> DNS: vermillon.serenehomeandlandscapes.com / 81.92.219.61 checking domain: www.dallascustomfurniture.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net / failed: Connection timed out. checking domain: www.damiannowak.pl --> seems to be INFECTED: http://jianjia.teeboxpromo.com/guesseurope/ZANOX/fallwinter/spa/swf/336x280.swf --> DNS: jianjia.teeboxpromo.com / 31.210.96.158 checking domain: www.deauville.org --> seems to be INFECTED: http://merluzzo.thenightlyjoker.com/b/ss/mxmacromedia/1/H.24.4T/s07966294499385 --> DNS: merluzzo.thenightlyjoker.com / 31.210.96.158 checking domain: www.defensepenale.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.8.225.80 checking domain: www.depednaga.com.ph --> seems to be INFECTED: http://alliovida.newcarsat.com/b --> DNS: alliovida.newcarsat.com / 31.210.96.157 checking domain: www.designerdogwear.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: www.detailformation.com --> seems to be INFECTED: http://chitlinlover.vehicleservicediscount.com/www/delivery/lg.php --> DNS: chitlinlover.vehicleservicediscount.com / 31.210.96.157 checking domain: www.diamondswindon.co.uk --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 69.172.201.208 checking domain: www.dieta-dimagrante.com --> seems to be INFECTED: http://yerme.techsupportauctions.com/2012/4th/index.php/widgetapi --> DNS: yerme.techsupportauctions.com / 31.210.96.158 checking domain: www.dimclay.com --> seems to be INFECTED: http://aujikar.golfnewsiowa.com/new/www/delivery/lg.php --> DNS: aujikar.golfnewsiowa.com / 31.210.96.157 checking domain: www.dixielectricar.com --> seems to be INFECTED: http://redzhebova.glsmarketing.net/b --> DNS: redzhebova.glsmarketing.net / 81.92.219.62 checking domain: www.doctorhelp.de --> seems to be INFECTED: http://switchett.virtualsofts.com/new/www/delivery/lg.php --> DNS: switchett.virtualsofts.com / 31.210.96.158 checking domain: www.dogtreatrecipes.com.au --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: www.dolphinnaples.com --> seems to be INFECTED: http://denhard.golfnewssouthcarolina.com/pview --> DNS: denhard.golfnewssouthcarolina.com / 31.210.96.156 checking domain: www.downgradeps3.com --> seems to be INFECTED: http://trolleeroy.ancestorworshippublishing.com/t.gif --> DNS: trolleeroy.ancestorworshippublishing.com / 31.210.96.158 checking domain: www.doxon.com --> seems to be INFECTED: http://xxmohammed.matthewstarner.com/uk.f288.mail.yahoo.com/ya/securedownload --> DNS: xxmohammed.matthewstarner.com / 31.210.96.158 checking domain: www.dreamboxturk.com --> seems to be INFECTED: http://baylet.autoeventregistration.com/t.gif --> DNS: baylet.autoeventregistration.com / 31.210.96.157 checking domain: www.dulceselsombreron.com --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com / 185.53.177.20 checking domain: www.dumontduneriders.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com / 185.53.178.9 checking domain: www.dwowvod.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.120 checking domain: www.eaf.edu.mx --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: www.eastwesthealthcare.net --> seems to be INFECTED: http://vukodlak.prestigehonda.net/__utm.gif --> DNS: vukodlak.prestigehonda.net / 31.210.96.157 checking domain: www.ejmii.com --> seems to be INFECTED: http://mahaphontrakoon.vehicleservicediscount.com/ping --> DNS: mahaphontrakoon.vehicleservicediscount.com / 31.210.96.157 checking domain: www.elsiedesigns.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: www.enimex.gr --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: www.extremebusa.com --> seems to be INFECTED: http://mehyaoui.newcarsat.com/__utm.gif --> DNS: mehyaoui.newcarsat.com / 31.210.96.157 checking domain: www.farmasanmodababy.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.fastflowtransport.com.au --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.fatherlinh.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org / 8.5.1.33 checking domain: www.fcc.com --> seems to be INFECTED: http://mikuz.animalgenetics.com/pview --> DNS: mikuz.animalgenetics.com / 31.210.96.158 checking domain: www.femecog.org.mx --> seems to be INFECTED: http://rodli.automotiveeventregistration.com/statapi/stat/add --> DNS: rodli.automotiveeventregistration.com / 31.210.96.157 checking domain: www.firm.batasnatin.com --> seems to be INFECTED: http://morsh.joannheilman.com/pview --> DNS: morsh.joannheilman.com / 31.210.96.158 checking domain: www.flatbasher.co.uk --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com / failed: Connection timed out. checking domain: www.flushingpheasantrussells.com --> seems to be INFECTED: http://51763.southwestdiscus.com/url --> DNS: 51763.southwestdiscus.com / 178.211.33.203 checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/t.gif --> DNS: praylu.nutritionbydesign.com / 31.210.96.156 checking domain: www.freesure.com.tr --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 185.53.179.7 checking domain: www.freilandschwein.info --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 185.53.179.7 checking domain: www.gamanteles.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: www.garten-spaeth.de --> seems to be INFECTED: http://nickolich.autoserviceevent.com/imghover --> DNS: nickolich.autoserviceevent.com / 31.210.96.157 checking domain: www.gastronj.com --> seems to be INFECTED: http://stanclous.telecomchicago.com/spc.php --> DNS: stanclous.telecomchicago.com / 31.210.96.155 checking domain: www.geoffwhite.ws --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com / 141.8.225.80 checking domain: www.glodyne.com --> seems to be INFECTED: http://ramaila.inboccaproductions.com/lg.php --> DNS: ramaila.inboccaproductions.com / 31.210.96.156 checking domain: www.golden-champion.com --> seems to be INFECTED: http://updude.glsfinancials.com/servidor/www/delivery/lg.php --> DNS: updude.glsfinancials.com / 141.8.224.183 checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/delivery/lg.php --> DNS: moutsiouna.iretarpg.com / 185.53.177.13 checking domain: www.griotcalendar.org --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 185.53.179.19 checking domain: www.healthnews8at8.com --> seems to be INFECTED: http://youjizzboy.autoserviceevent.com/new/www/delivery/ajs.php --> DNS: youjizzboy.autoserviceevent.com / 31.210.96.157 checking domain: www.highwaterbrewing.com --> seems to be INFECTED: http://tirtawijaya.mrsstyleseeker.com/1pix.gif --> DNS: tirtawijaya.mrsstyleseeker.com / 31.210.96.157 checking domain: www.hillfarmoils.com --> seems to be INFECTED: http://saiee.golfnewswestvirginia.com/_xhr/ugccomments/ --> DNS: saiee.golfnewswestvirginia.com / 31.210.96.157 checking domain: www.holidayinn-mulhouse.com --> seems to be INFECTED: http://hunton.valentinesalesevent.com/t.gif --> DNS: hunton.valentinesalesevent.com / 31.210.96.156 checking domain: www.hospitalesangeles.com --> seems to be INFECTED: http://crdoba.hartford-capital.com/pview --> DNS: crdoba.hartford-capital.com / 31.210.96.155 checking domain: www.hostal3soles.com --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 185.53.178.7 checking domain: www.hostpix.de --> seems to be INFECTED: http://xlau.kalkanturqouise.com/dcsis0ifv10000gg3ag82u4rf_7b1e/dcs.gif --> DNS: xlau.kalkanturqouise.com / failed: Connection timed out. checking domain: www.hummel-print.biz --> seems to be INFECTED: http://43324.pballgames.com/url --> DNS: 43324.pballgames.com / 91.207.4.51 checking domain: www.hutano.com --> seems to be INFECTED: http://vocken.panjiaying.com/b --> DNS: vocken.panjiaying.com / 31.210.96.156 checking domain: www.iagu.org --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: www.ijerd.com --> seems to be INFECTED: http://verzeroli.outbreakm3dia.com/api/getCount2.php --> DNS: verzeroli.outbreakm3dia.com / 184.172.106.42 checking domain: www.ilovethefingerlakes.com --> seems to be INFECTED: http://ailinn.automotiveservicesavings.com/ping --> DNS: ailinn.automotiveservicesavings.com / 31.210.96.157 checking domain: www.information-international.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: www.innisicss.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.inteki.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: www.jailbreak-ps3.com --> seems to be INFECTED: http://trolleeroy.ancestorworshippublishing.com/navbar.g --> DNS: trolleeroy.ancestorworshippublishing.com / 31.210.96.158 checking domain: www.jalba.gr --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 185.53.177.9 checking domain: www.jawa-club.at --> seems to be INFECTED: http://matinisi.nitplus.com/www/delivery/lg.php --> DNS: matinisi.nitplus.com / 31.210.96.156 checking domain: www.jcs3.com --> seems to be INFECTED: http://linita.golfnewsmontana.com/__utm.gif --> DNS: linita.golfnewsmontana.com / 31.210.96.157 checking domain: www.jollybeach.net --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 185.53.179.9 checking domain: www.jonaswelsch.com --> seems to be INFECTED: http://forcea.glisinc.com/www/delivery/lg.php --> DNS: forcea.glisinc.com / 31.210.96.155 checking domain: www.jordanbad.de --> seems to be INFECTED: http://facuri.chelseyfatula.com/tracker --> DNS: facuri.chelseyfatula.com / 185.53.177.13 checking domain: www.jornalfarroupilha.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.jornalocaminho.com.br --> seems to be INFECTED: http://gramelis.newyorkmascot.com/delivery/lg.php --> DNS: gramelis.newyorkmascot.com / failed: Name or service not known. checking domain: www.jtcomms.com --> seems to be INFECTED: http://solichana.telecommichigan.com/www/delivery/lg.php --> DNS: solichana.telecommichigan.com / 31.210.96.155 checking domain: www.karavelle.com.br --> seems to be INFECTED: http://britts.oharvest.net/b --> DNS: britts.oharvest.net / 31.210.96.156 checking domain: www.kbhbrandmuseum.dk --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177 checking domain: www.keepcalm.com.br --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 185.53.179.7 checking domain: www.kenyatentedcamps.com --> seems to be INFECTED: http://rapbit.omobia.net/2/Trader/nba.com/grizzlies/roster/2011/index/9109349013@x96 --> DNS: rapbit.omobia.net / 31.210.96.156 checking domain: www.kgpagolf.com --> seems to be INFECTED: http://namdarian.sellitandforgetittoday.com/BurstingPipe/adServer.bs --> DNS: namdarian.sellitandforgetittoday.com / 31.210.96.156 checking domain: www.klanglos-studio.de --> seems to be INFECTED: http://camplong.barbeveragesnv.com/delivery/lg.php --> DNS: camplong.barbeveragesnv.com / failed: Name or service not known. checking domain: www.klaumonforma.com.br --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.klokast.se --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 185.53.177.20 checking domain: www.koreanmartialarts.com --> seems to be INFECTED: http://xpod.gryphonaz.com/delivery/ajs.php --> DNS: xpod.gryphonaz.com / 31.210.96.157 checking domain: www.kuriren.net --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.kvalitetsansvariga.se --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.la-mer-en-livres.fr --> seems to be INFECTED: http://vieka.pleinairolney.com/event.js --> DNS: vieka.pleinairolney.com / 81.92.219.60 checking domain: www.larcheedmonton.org --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: www.ledluminausa.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.120 checking domain: www.leisurelanespa.com --> seems to be INFECTED: http://thehunt.newcarsat.com/getSegment.php --> DNS: thehunt.newcarsat.com / 31.210.96.157 checking domain: www.levin.com.br --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: www.listalapiazza.it --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: www.little-moon-aussies.com --> seems to be INFECTED: http://jahren.prestigehonda.net/imghover --> DNS: jahren.prestigehonda.net / 31.210.96.157 checking domain: www.livre-etre-bien.com --> seems to be INFECTED: http://nedou.kidstryingtopayforcollege.com/b --> DNS: nedou.kidstryingtopayforcollege.com / 81.92.219.61 checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.powerplaycreative.com/__utm.gif --> DNS: wcameron.powerplaycreative.com / 31.210.96.158 checking domain: www.lovethisgirl.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 72.52.4.91 checking domain: www.loxsavvy.com.au --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: www.makelovelocks.com --> seems to be INFECTED: http://faaez.makingwaves-salon.com/1pix.gif --> DNS: faaez.makingwaves-salon.com / 31.210.96.158 checking domain: www.mantralingua.com --> seems to be INFECTED: http://imsun.memorialdaysavingsevent.com/pview --> DNS: imsun.memorialdaysavingsevent.com / 31.210.96.156 checking domain: www.maquinaslitograficas.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.mayer.com.ro --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177 checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 69.43.161.171 checking domain: www.medical-swiss.com --> seems to be INFECTED: http://zulainis.theinvisatread.com/url --> DNS: zulainis.theinvisatread.com / 185.53.178.6 checking domain: www.meredithbrooks.com --> seems to be INFECTED: http://53660.flatblastard.com/url --> DNS: 53660.flatblastard.com / 91.207.4.51 checking domain: www.michielvandamme.be --> seems to be INFECTED: http://velarasi.8jutawan.com/api/getCount2.php --> DNS: velarasi.8jutawan.com / 31.210.96.156 checking domain: www.microforme.com --> seems to be INFECTED: http://suryoko.hitodeki.com/neo/darla/php/fc.php --> DNS: suryoko.hitodeki.com / failed: Name or service not known. checking domain: www.mind-body-soul.de --> seems to be INFECTED: http://timp.automotiveservicesavings.com/widgets/tweet_button.html --> DNS: timp.automotiveservicesavings.com / 31.210.96.157 checking domain: www.miniaturesupplier.com --> seems to be INFECTED: http://koumparou.mwhiteman.com/b --> DNS: koumparou.mwhiteman.com / 31.210.96.155 checking domain: www.mintfinancial.com.au --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.mitsuadvclub.net --> seems to be INFECTED: http://loardy.exquisiteclasscenter.com/url --> DNS: loardy.exquisiteclasscenter.com / 178.211.33.203 checking domain: www.modellfly.no --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / 69.172.201.208 checking domain: www.moebel-direkt.net --> seems to be INFECTED: http://reset.com/pview --> DNS: reset.com / 54.235.181.217, 54.243.199.7, 2406:da00:ff00::36eb:b5d9, / checking domain: www.monah.us --> seems to be INFECTED: http://kukuljac.concretevibration.com/s --> DNS: kukuljac.concretevibration.com / 31.210.96.158 checking domain: www.movingtransfer.com --> seems to be INFECTED: http://taiugac.vehicleservicediscount.com/openx/www/delivery/lg.php --> DNS: taiugac.vehicleservicediscount.com / 31.210.96.157 checking domain: www.mrlatinomagazine.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.msm.mc --> seems to be INFECTED: http://poserio.thecaregrouppc.net/getSegment.php --> DNS: poserio.thecaregrouppc.net / 81.92.219.62 checking domain: www.my-hebrew-programs.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.mywoom.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.nahuelsanchez.com --> seems to be INFECTED: http://hesnan.theaddressshop.com/go/ --> DNS: hesnan.theaddressshop.com / 81.92.219.62 checking domain: www.nccdirect.com --> seems to be INFECTED: http://kulingoski.golfnewspennsylvania.com/openx/www/delivery/lg.php --> DNS: kulingoski.golfnewspennsylvania.com / 31.210.96.157 checking domain: www.neonconcursos.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.newsflash.org --> seems to be INFECTED: http://srse.techsupportauction.com/1pix.gif --> DNS: srse.techsupportauction.com / failed: Name or service not known. checking domain: www.niceshop.at --> seems to be INFECTED: http://perrugina.sciencehunk.com/__utm.gif --> DNS: perrugina.sciencehunk.com / failed: Name or service not known. checking domain: www.nicholas-williams.com --> seems to be INFECTED: http://mildworm.thecinema6.com/ps/ifr --> DNS: mildworm.thecinema6.com / 31.210.96.156 checking domain: www.norweger-in-not.de --> seems to be INFECTED: http://godhy.gayilluminati.com/tracker --> DNS: godhy.gayilluminati.com / failed: Name or service not known. checking domain: www.nqsacademy.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.nwd-ly.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.oo5.com --> seems to be INFECTED: http://uglyugly.savedalyfield.com/s --> DNS: uglyugly.savedalyfield.com / 31.210.96.157 checking domain: www.oople.com --> seems to be INFECTED: http://assington.whhusainc.net/b --> DNS: assington.whhusainc.net / 31.210.96.156 checking domain: www.osbycentralservice.se --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com / 69.43.161.177 checking domain: www.padraoeditorial.com.br --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 185.53.179.9 checking domain: www.painphysicianjournal.com --> seems to be INFECTED: http://brinning.automotiveeventregistration.com/new2/www/delivery/lg.php --> DNS: brinning.automotiveeventregistration.com / 31.210.96.157 checking domain: www.pbemarking.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 184.172.106.42 checking domain: www.pearlscorniche.com --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org / 185.53.177.9 checking domain: www.pearlsindiatour.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 184.172.106.42 checking domain: www.perstererfineart.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 185.53.177.9 checking domain: www.pfotenranch.de --> seems to be INFECTED: http://zaquitsha.vetsingreensboro.com/imghover --> DNS: zaquitsha.vetsingreensboro.com / 185.53.179.10 checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.pixled.pl --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.planet-pulse.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.pmg.kncity.info --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.praxpetroleum.com --> seems to be INFECTED: http://kumasegawa.themorningjoker.com/openx/www/delivery/spc.php --> DNS: kumasegawa.themorningjoker.com / 31.210.96.158 checking domain: www.prestigegym.com --> seems to be INFECTED: http://tippetts.prestigehonda.net/__utm.gif --> DNS: tippetts.prestigehonda.net / 31.210.96.157 checking domain: www.proreha.net --> seems to be INFECTED: http://wedcheel.gliscentrifugal.com/b --> DNS: wedcheel.gliscentrifugal.com / 31.210.96.155 checking domain: www.psicoterapeutas.org --> seems to be INFECTED: http://pantakit.powerplaycreative.com/imghover --> DNS: pantakit.powerplaycreative.com / 31.210.96.158 checking domain: www.quintadamainha.com --> seems to be INFECTED: http://limpiado.autoeventregistration.com/__utm.gif --> DNS: limpiado.autoeventregistration.com / 31.210.96.157 checking domain: www.rac-italia.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.radiogurbeti.com --> seems to be INFECTED: http://sonagara.slyforkfarm.com/b/ss/jobsdb-prd-id/1/H.23.6/s21023602889073 --> DNS: sonagara.slyforkfarm.com / 31.210.96.157 checking domain: www.rci-jeux.com --> seems to be INFECTED: http://zarona.3tserver.net/url --> DNS: zarona.3tserver.net / 216.55.178.173 checking domain: www.rdm.hr --> seems to be INFECTED: http://40579.azdiscus.com/url --> DNS: 40579.azdiscus.com / 178.211.33.203 checking domain: www.rebo-rohstoffe.de --> seems to be INFECTED: http://argles.autoeventregistration.com/TAGPUBLISH/getad.aspx --> DNS: argles.autoeventregistration.com / 31.210.96.157 checking domain: www.recrutam.ro --> seems to be INFECTED: http://dambalang.vehicleexchangeprogram.com/imghover --> DNS: dambalang.vehicleexchangeprogram.com / 31.210.96.157 checking domain: www.redboxsoccer.com --> seems to be INFECTED: http://zenevich.realdealpsychic.com/getSegment.php --> DNS: zenevich.realdealpsychic.com / 31.210.96.155 checking domain: www.resistantculture.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.retrosheet.org --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: www.rgjassociation.info --> seems to be INFECTED: http://weedx.fubarpaintball.com/s --> DNS: weedx.fubarpaintball.com / 31.210.96.156 checking domain: www.rich.co.ke --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.rollershop.de --> seems to be INFECTED: http://yinpou.aredietsok.com/__utm.gif --> DNS: yinpou.aredietsok.com / 31.210.96.158 checking domain: www.rotoconcept.com --> seems to be INFECTED: http://mius.autoserviceevent.com/tracker --> DNS: mius.autoserviceevent.com / 31.210.96.157 checking domain: www.royalbambi.de --> seems to be INFECTED: http://yukusai.emergencyvetdanvilleva.com/delivery/lg.php --> DNS: yukusai.emergencyvetdanvilleva.com / failed: Name or service not known. checking domain: www.royaltyautoplaza.com --> seems to be INFECTED: http://peppen.studiosylverline.com/_xhr/ugccomments/ --> DNS: peppen.studiosylverline.com / 31.210.96.157 checking domain: www.sandiegoinsidertours.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org / 69.43.161.177 checking domain: www.santuariodalapa.pt --> seems to be INFECTED: http://tixon.theafternoonjoker.com/api/getCount2.php --> DNS: tixon.theafternoonjoker.com / 31.210.96.158 checking domain: www.sasgroup.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org / failed: Connection timed out. checking domain: www.scantexas.com --> seems to be INFECTED: http://titasic.vehicleservicediscount.com/fpc.pl --> DNS: titasic.vehicleservicediscount.com / 31.210.96.157 checking domain: www.scga.at --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.schwesternmaria.de --> seems to be INFECTED: http://dekatey.cubpack910.com/url --> DNS: dekatey.cubpack910.com / failed: Connection timed out. checking domain: www.sculpture1940.com --> seems to be INFECTED: http://pizzaexperience.internet1495.com/avatar/1157a9858c2bccc90dc7f8610956ee4c --> DNS: pizzaexperience.internet1495.com / 178.211.33.203 checking domain: www.sdfbd.org --> seems to be INFECTED: http://handsexual.com/cgi-bin/r.cgi --> DNS: handsexual.com / 141.8.225.77 checking domain: www.secondhandoptik.de --> seems to be INFECTED: http://whiff.newcarsat.com/__utm.gif --> DNS: whiff.newcarsat.com / 31.210.96.157 checking domain: www.sedonadreammaker.com --> seems to be INFECTED: http://yargici.autoserviceevent.com/t.gif --> DNS: yargici.autoserviceevent.com / 31.210.96.157 checking domain: www.servcorpdirect.com --> seems to be INFECTED: http://bythesea.valentinesalesevent.com/__utm.gif --> DNS: bythesea.valentinesalesevent.com / 31.210.96.156 checking domain: www.siacgroup.com --> seems to be INFECTED: http://37657.azdiscus.com/url --> DNS: 37657.azdiscus.com / 178.211.33.203 checking domain: www.singaporeparties.com.sg --> seems to be INFECTED: http://rothermich.freelifelinegovernmentphone.com/pview --> DNS: rothermich.freelifelinegovernmentphone.com / 141.8.224.235 checking domain: www.skleprower.pl --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 184.172.106.42 checking domain: www.sportstoursinternational.co.uk --> seems to be INFECTED: http://tripplett.z-sat.com/__utm.gif --> DNS: tripplett.z-sat.com / 31.210.96.158 checking domain: www.sreinc.net --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 185.53.177.9 checking domain: www.sri.cmu.ac.th --> seems to be INFECTED: http://twansha.yourcakedecoratingclass.com/imghover --> DNS: twansha.yourcakedecoratingclass.com / 31.210.96.158 checking domain: www.ssdrivingschooltampa.com --> seems to be INFECTED: http://quirarte.dealerholidayevent.com/lg.php --> DNS: quirarte.dealerholidayevent.com / 31.210.96.157 checking domain: www.stadt-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155 checking domain: www.stillo-jablonec.cz --> seems to be INFECTED: http://cathaleen.jonesatlarge.com/t.gif --> DNS: cathaleen.jonesatlarge.com / 81.92.219.61 checking domain: www.stublla.net --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.120 checking domain: www.successinteaching.info --> seems to be INFECTED: http://protechere.com/cgi-bin/r.cgi --> DNS: protechere.com / 69.43.161.177 checking domain: www.superpass.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org / 185.53.179.7 checking domain: www.systemcv.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.szkolatanca.co.uk --> seems to be INFECTED: http://payuk.automotiveeventregistration.com/delivery/lg.php --> DNS: payuk.automotiveeventregistration.com / 31.210.96.157 checking domain: www.tab-blog.de --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 69.172.201.208 checking domain: www.tailormadegolftours.com --> seems to be INFECTED: http://zivarous.vehicleexchangeprogram.com/s --> DNS: zivarous.vehicleexchangeprogram.com / 31.210.96.157 checking domain: www.techniweldusa.com --> seems to be INFECTED: http://heinzel.reikisolar.com/delivery/lg.php --> DNS: heinzel.reikisolar.com / 31.210.96.157 checking domain: www.televideoproductions.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net / 185.53.177.6 checking domain: www.temsa-nord.de --> seems to be INFECTED: http://dayfa.myredhomingpidgeon.com/t.gif --> DNS: dayfa.myredhomingpidgeon.com / 69.43.160.163 checking domain: www.texcon.net --> seems to be INFECTED: http://gharavi.dealerholidayevent.com/s --> DNS: gharavi.dealerholidayevent.com / 31.210.96.157 checking domain: www.thailandsoft.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org / 69.172.201.208 checking domain: www.thehalfking.com --> seems to be INFECTED: http://flexwala.golfironworks.com/s --> DNS: flexwala.golfironworks.com / 31.210.96.155 checking domain: www.thepatientsspeak.org --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com / 184.172.106.42 checking domain: www.therapiehyperbare.com --> seems to be INFECTED: http://tagipur.mrsstyleseeker.com/st --> DNS: tagipur.mrsstyleseeker.com / 31.210.96.157 checking domain: www.theresastouchdayspa.ca --> seems to be INFECTED: http://prunotto.newcarsat.com/st --> DNS: prunotto.newcarsat.com / 31.210.96.157 checking domain: www.thestampspot.com.au --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / failed: Connection timed out. checking domain: www.timelessimagesmi.com --> seems to be INFECTED: http://abusalewm.exceltoner.com/url --> DNS: abusalewm.exceltoner.com / 31.210.96.158 checking domain: www.timfirth.com --> seems to be INFECTED: http://holdpoker.ancestorworshippublishing.com/imghover --> DNS: holdpoker.ancestorworshippublishing.com / 31.210.96.158 checking domain: www.tintasluxor.com.br --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com / 141.8.224.25 checking domain: www.tri-tex.net --> seems to be INFECTED: http://vicrant.newworldheroes.com/www/delivery/ajs.php --> DNS: vicrant.newworldheroes.com / 31.210.96.158 checking domain: www.tubtimsiam.com --> seems to be INFECTED: http://abew.whonose.com/fpc.pl --> DNS: abew.whonose.com / 178.211.33.203 checking domain: www.tumbadack.se --> seems to be INFECTED: http://alflo.autoserviceevent.com/pview --> DNS: alflo.autoserviceevent.com / 31.210.96.157 checking domain: www.tunefreak.org --> seems to be INFECTED: http://wawabeh.williamsfp.com/getSegment.php --> DNS: wawabeh.williamsfp.com / failed: Name or service not known. checking domain: www.turbo-mixer.de --> seems to be INFECTED: http://schmakel.strongpsychic.com/imghover --> DNS: schmakel.strongpsychic.com / 31.210.96.155 checking domain: www.turkescortbayanlar.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.120 checking domain: www.ucamb.org --> seems to be INFECTED: http://smittendorf.2cuonline.com/imgres --> DNS: smittendorf.2cuonline.com / 31.210.96.155 checking domain: www.unitedmgtii.com --> seems to be INFECTED: http://petel.golfnewstennessee.com/imp --> DNS: petel.golfnewstennessee.com / 31.210.96.157 checking domain: www.vantetoys.com --> seems to be INFECTED: http://witnest.sciconsultinggroup.com/pview --> DNS: witnest.sciconsultinggroup.com / 81.92.219.60 checking domain: www.veerdharauk.com --> seems to be INFECTED: http://vangavolu.ancestorworshippublishing.com/__utm.gif --> DNS: vangavolu.ancestorworshippublishing.com / 31.210.96.158 checking domain: www.velayet.com --> seems to be INFECTED: http://strom.sciconsultinggroup.com/b --> DNS: strom.sciconsultinggroup.com / 81.92.219.60 checking domain: www.veterinarkliniken.se --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net / 185.53.177.20 checking domain: www.vfbhermsdorf.de --> seems to be INFECTED: http://hinouchi.greatserviceforless.com/gadgets/ifr --> DNS: hinouchi.greatserviceforless.com / 31.210.96.157 checking domain: www.vidvanern.se --> seems to be INFECTED: http://usnai.restoremystuff.com/__utm.gif --> DNS: usnai.restoremystuff.com / 31.210.96.156 checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/panel/openx/www/delivery/ajs.php --> DNS: karepii.dealerholidayevent.com / 31.210.96.157 checking domain: www.wallyontheweb.com --> seems to be INFECTED: http://ichinohe.casabodamia.com/b --> DNS: ichinohe.casabodamia.com / failed: Name or service not known. checking domain: www.wcgconline.net --> seems to be INFECTED: http://keniisha.realdealpsychic.com/f.gif --> DNS: keniisha.realdealpsychic.com / 31.210.96.155 checking domain: www.welte.de --> seems to be INFECTED: http://ikhuichi.ahtcna.com/__utm.gif --> DNS: ikhuichi.ahtcna.com / 31.210.96.158 checking domain: www.weltkinderdoerfer.ch --> seems to be INFECTED: http://dekatey.cubpack910.com/url --> DNS: dekatey.cubpack910.com / failed: Connection timed out. checking domain: www.wheelsacademy.com --> seems to be INFECTED: http://gadbaw.sunshinerealtyone.com/__utm.gif --> DNS: gadbaw.sunshinerealtyone.com / failed: Name or service not known. checking domain: www.wmc.kylos.pl --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.wonderwhistle.co.uk --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com / failed: Connection timed out. checking domain: www.wronashouseofviolins.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 72.52.4.120 checking domain: www.xerox-drucker.de --> seems to be INFECTED: http://alothaim.mrsstyleseeker.com/__utm.gif --> DNS: alothaim.mrsstyleseeker.com / 31.210.96.157 checking domain: www.xn--espaodoesporte-jjb.com.br --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 184.172.106.42 checking domain: www.yoderscountrymarket.com --> seems to be INFECTED: http://vaiduriam.vehicleexchangeprogram.com/delivery/lg.php --> DNS: vaiduriam.vehicleexchangeprogram.com / 31.210.96.157 checking domain: www.yvesmaquettes.fr --> seems to be INFECTED: http://zamine.theknowledgekingdom.com/st --> DNS: zamine.theknowledgekingdom.com / 31.210.96.158 checking domain: www.zoeblitzer-natursteine.de --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com / 185.53.178.7 checking domain: zarov.com.br --> seems to be INFECTED: http://upanesh.kemperfitness.com/openx/www/delivery/spc.php --> DNS: upanesh.kemperfitness.com / 81.92.219.60 date finished: Mon Dec 22 12:38:13 CET 2014