# 
# this list of ponmocup malware redirection domains and infected web-servers is maintained by 
# email:   toms.security.stuff -at- gmail.com
# twitter: @c_APT_ure
# blog:    http://c-apt-ure.blogspot.com/
#
# for use with CIF see malware-feeds here:
# http://security-research.dyndns.org/pub/malware-feeds/
# 
date started: Mon Nov 23 00:00:01 PST 2015
checking domain: beplants.be --> seems to be INFECTED: http://yasonia.vehicleexchangeprogram.com/widget/v3/metadata/ --> DNS: yasonia.vehicleexchangeprogram.com (yasonia.vehicleexchangeprogram.com) / 31.210.96.157
checking domain: www.jacquestrifin.be --> seems to be INFECTED: http://golfforkids.assistlist.com/p --> DNS: golfforkids.assistlist.com (golfforkids.assistlist.com) / 31.210.96.158
checking domain: upetterbeek.be --> seems to be INFECTED: http://seelback.tfgjustsayin.net/delivery/lg.php --> DNS: seelback.tfgjustsayin.net (seelback.tfgjustsayin.net) / 31.210.96.157
checking domain: www.supportedholidaysantequera.co.uk --> seems to be INFECTED: http://shahree.azdiscus.com/url --> DNS: shahree.azdiscus.com (shahree.azdiscus.com) / 178.211.33.203
checking domain: www.ilmatrimoniocivile.it --> seems to be INFECTED: http://yoheezy.devilwithacause.com/st --> DNS: yoheezy.devilwithacause.com (yoheezy.devilwithacause.com) / 31.210.96.155
checking domain: www.tvoberwallis.tv --> seems to be INFECTED: http://osew.arc4g.com/ad/js/710/dramacrazy/300x250/dramacrazy_atf --> DNS: osew.arc4g.com (osew.arc4g.com) / 31.210.96.158
checking domain: www.feger-nentwich.at --> seems to be INFECTED: http://harikai.softmn.com/api/getCount2.php --> DNS: harikai.softmn.com (harikai.softmn.com) / 31.210.96.157
checking domain: www.segelclubhochheim.de --> seems to be INFECTED: http://zoulys.fatlosstoolkit.com/t.gif --> DNS: zoulys.fatlosstoolkit.com (zoulys.fatlosstoolkit.com) / 31.210.96.156
checking domain: abus-spirituel.org --> seems to be INFECTED: http://transforminator.juddnelsonstudio.com/b/ss/jobsdb-prd-id/1/H.23.6/s99086773976871 --> DNS: transforminator.juddnelsonstudio.com (transforminator.juddnelsonstudio.com) / failed: Name or service not known.
checking domain: www.dynasun.com --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com (thousandmilitary.com) / 185.53.179.11
checking domain: www.agliran.co.il --> seems to be INFECTED: http://mercysiste.vehicleservicediscount.com/pview --> DNS: mercysiste.vehicleservicediscount.com (mercysiste.vehicleservicediscount.com) / 31.210.96.157
checking domain: www.ccpa.org.tw --> seems to be INFECTED: http://sandercoe.gliscentrifugal.com/new2/www/delivery/lg.php --> DNS: sandercoe.gliscentrifugal.com (sandercoe.gliscentrifugal.com) / 31.210.96.155
checking domain: cioks.com --> seems to be INFECTED: http://rimei.integratedpipe.com/ads/www/delivery/ajs.php --> DNS: rimei.integratedpipe.com (rimei.integratedpipe.com) / failed: Name or service not known.
checking domain: www.aca-uccle.be --> seems to be INFECTED: http://omonkhegbele.wenerdhard.com/servlet/ajrotator/2000399/0/vj --> DNS: omonkhegbele.wenerdhard.com (omonkhegbele.wenerdhard.com) / 31.210.96.155
checking domain: www.upetterbeek.be --> seems to be INFECTED: http://seelback.tfgjustsayin.net/b --> DNS: seelback.tfgjustsayin.net (seelback.tfgjustsayin.net) / 31.210.96.157
checking domain: www.trikalasport.gr --> seems to be INFECTED: http://siene.webrunchhard.com/delivery/lg.php --> DNS: siene.webrunchhard.com (siene.webrunchhard.com) / 31.210.96.155
checking domain: www.destrangers.org --> seems to be INFECTED: http://bidin.golfnewslouisiana.com/delivery/lg.php --> DNS: bidin.golfnewslouisiana.com (bidin.golfnewslouisiana.com) / 141.8.224.93
checking domain: www.vtf.co.at --> seems to be INFECTED: http://santamore.vehicleexchangeprogram.com/www/delivery/lg.php --> DNS: santamore.vehicleexchangeprogram.com (santamore.vehicleexchangeprogram.com) / 31.210.96.157
checking domain: gezinsbondzarren.be --> seems to be INFECTED: http://kumher.savedalyfield.com/s --> DNS: kumher.savedalyfield.com (kumher.savedalyfield.com) / 31.210.96.157
checking domain: www.dioxinnz.com --> seems to be INFECTED: http://plapplatong.workoutebook.com/new2/www/delivery/lg.php --> DNS: plapplatong.workoutebook.com (plapplatong.workoutebook.com) / 141.8.225.163
checking domain: 1980622.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: abdfuels.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: ads.thinkingaustralia.tv --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: afag.com.br --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: agirazul.com.br --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com (lewisentitled.com) / 64.74.223.30
checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com (voictoall.com) / 185.53.179.19
checking domain: alastech.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: anzaisekizaiten.co.jp --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com (formedtouch.com) / 103.224.182.248
checking domain: apprendre-l-arabe.fr --> seems to be INFECTED: http://yasnid.vehicleservicediscount.com/b --> DNS: yasnid.vehicleservicediscount.com (yasnid.vehicleservicediscount.com) / 31.210.96.157
checking domain: area-press.eu --> seems to be INFECTED: http://yerme.techsupportauctions.com/pview --> DNS: yerme.techsupportauctions.com (yerme.techsupportauctions.com) / 31.210.96.158
checking domain: arlington.ph --> seems to be INFECTED: http://voutilainen.wenerdhard.com/b/ss/intelcorp,intelcorpsupp/1/H.20.3/s23315728755785 --> DNS: voutilainen.wenerdhard.com (voutilainen.wenerdhard.com) / 31.210.96.155
checking domain: article-marketing.eu --> seems to be INFECTED: http://yerme.techsupportauctions.com/imghover --> DNS: yerme.techsupportauctions.com (yerme.techsupportauctions.com) / 31.210.96.158
checking domain: autokompleks-jastrzebie.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: avionhome.com.tw --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com (intronetech.com) / 141.8.225.80
checking domain: avkolik.net --> seems to be INFECTED: http://shijothomas.softmn.com/openx/www/delivery/spc.php --> DNS: shijothomas.softmn.com (shijothomas.softmn.com) / 31.210.96.157
checking domain: between2rivers.net --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com (thousandmilitary.com) / 185.53.179.11
checking domain: bintanworld.com --> seems to be INFECTED: http://yangad.automotiveservicesavings.com/b --> DNS: yangad.automotiveservicesavings.com (yangad.automotiveservicesavings.com) / 31.210.96.157
checking domain: blackcanyoncoffee.com --> seems to be INFECTED: http://mudras.jordandowney.net/1pix.gif --> DNS: mudras.jordandowney.net (mudras.jordandowney.net) / failed: Name or service not known.
checking domain: blog.autourdeminuit.com --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com (trackallnet.com) / 141.8.225.80
checking domain: blogfilcamsvarese.it --> seems to be INFECTED: http://loolu.carolinadreamrealestate.net/url --> DNS: loolu.carolinadreamrealestate.net (loolu.carolinadreamrealestate.net) / 178.211.33.205
checking domain: boisdolivier.biz --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com (herocopter.com) / 185.53.178.6
checking domain: bridalcookie.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: businessbythespirit.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org (everybodynames.org) / 103.224.182.248
checking domain: cbm.esp.br --> seems to be INFECTED: http://nalaras.farremuebles.com/__utm.gif --> DNS: nalaras.farremuebles.com (nalaras.farremuebles.com) / 81.92.219.62
checking domain: cdcookingbook.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: cemerhn.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: chadflick.ws --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: chardonrecords.com --> seems to be INFECTED: http://indanetwall.net/cgi-bin/r.cgi --> DNS: indanetwall.net (indanetwall.net) / 199.59.243.120
checking domain: classroom334.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: cloudflood.com --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org (reportedtechniques.org) / 54.72.9.51
checking domain: coachingteams.eu --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: coolnet.com.pl --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com (trackallnet.com) / 141.8.225.80
checking domain: cpmprint.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org (teethalong.org) / 85.17.25.242
checking domain: cyberairlines.net --> seems to be INFECTED: http://52976.thomasyohannan.com/url --> DNS: 52976.thomasyohannan.com (52976.thomasyohannan.com) / 178.211.33.203
checking domain: demo.crg-sa.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com (sslabssys.com) / 66.135.47.125
checking domain: desarrollos.localhost.net.ar --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: dgmarketingdesign.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: dialolinks.de --> seems to be INFECTED: http://hartrup.kemperfitness.com/webpagethumbnail --> DNS: hartrup.kemperfitness.com (hartrup.kemperfitness.com) / failed: Name or service not known.
checking domain: diningcity.net --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net (allintercom.net) / 185.53.179.8
checking domain: d-math1.com --> seems to be INFECTED: http://renolla.golfnewsnewyork.com/data/RNRoc1azVY00oW --> DNS: renolla.golfnewsnewyork.com (renolla.golfnewsnewyork.com) / failed: Name or service not known.
checking domain: drdenmarksaidit.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: duikeninzutphen.nl --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: ecoswaycolombia.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org (teethalong.org) / 66.135.47.125
checking domain: ekrosno.pl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: eniaktesting.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: equestrianinfluence.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: exclusivesms.com --> seems to be INFECTED: http://ifteiha.lions-mark.com/t.gif --> DNS: ifteiha.lions-mark.com (ifteiha.lions-mark.com) / 31.210.96.158
checking domain: ezkahuda.cz --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com (costslaid.com) / 185.53.179.9
checking domain: famedomain.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.211.178, 208.73.210.200, 208.73.210.214,  /
checking domain: fiatclubpt.com --> seems to be INFECTED: http://yovette.javaemulator.com/__utm.gif --> DNS: yovette.javaemulator.com (yovette.javaemulator.com) / 31.210.96.156
checking domain: firstsaturday.hu --> seems to be INFECTED: http://vertica.reikisolar.com/_xhr/ugccomments/ --> DNS: vertica.reikisolar.com (vertica.reikisolar.com) / 31.210.96.157
checking domain: foropicos.net --> seems to be INFECTED: http://55352.flatblastard.com/url --> DNS: 55352.flatblastard.com (55352.flatblastard.com) / 91.207.4.51
checking domain: forum.auto.am --> seems to be INFECTED: http://witchwyd.bestsilvercufflinks.com/__utm.gif --> DNS: witchwyd.bestsilvercufflinks.com (witchwyd.bestsilvercufflinks.com) / 209.99.40.222
checking domain: greeni-shop.eu --> seems to be INFECTED: http://henessa.webdeploymenttool.com/url --> DNS: henessa.webdeploymenttool.com (henessa.webdeploymenttool.com) / 178.211.33.205
checking domain: harlawacademy.org --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org (teethalong.org) / 66.135.47.125
checking domain: highextreme.co.uk --> seems to be INFECTED: http://alintanahin.greatserviceforless.com/www/delivery/lg.php --> DNS: alintanahin.greatserviceforless.com (alintanahin.greatserviceforless.com) / 31.210.96.157
checking domain: hippiehalloween.org --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: hungryviki.com --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com (intronetech.com) / 141.8.225.80
checking domain: infobunda.com --> seems to be INFECTED: http://34402.clickbanksite.org/url --> DNS: 34402.clickbanksite.org (34402.clickbanksite.org) / 141.8.224.239
checking domain: intermundos.org --> seems to be INFECTED: http://poumtas.effectsllc.com/www/delivery/lg.php --> DNS: poumtas.effectsllc.com (poumtas.effectsllc.com) / 31.210.96.158
checking domain: janeece.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: jornalsodesporto.com --> seems to be INFECTED: http://yononz.totalslipsolutions.net/url --> DNS: yononz.totalslipsolutions.net (yononz.totalslipsolutions.net) / 178.211.33.205
checking domain: jornalvakio.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: jwegener.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: karavelle.com.br --> seems to be INFECTED: http://britts.oharvest.net/b --> DNS: britts.oharvest.net (britts.oharvest.net) / 31.210.96.156
checking domain: kewb.co.ke --> seems to be INFECTED: http://ugwuezumba.iconarchitects.net/v1/counter --> DNS: ugwuezumba.iconarchitects.net (ugwuezumba.iconarchitects.net) / failed: Name or service not known.
checking domain: koninskiozpn.pl --> seems to be INFECTED: http://zhezha.theafternoonjoker.com/_xhr/ugccomments/ --> DNS: zhezha.theafternoonjoker.com (zhezha.theafternoonjoker.com) / 31.210.96.158
checking domain: koznejaknekodzic.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: kw-dl.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: leandromauricio.com --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: leftiesshowroom.com --> seems to be INFECTED: http://agiula.agentonpoint.com/__utm.gif --> DNS: agiula.agentonpoint.com (agiula.agentonpoint.com) / failed: Name or service not known.
checking domain: legno-olivo.biz --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: lesmanguiers.com --> seems to be INFECTED: http://jernighan.sullivan-county.com/delivery/lg.php --> DNS: jernighan.sullivan-county.com (jernighan.sullivan-county.com) / 31.210.96.158
checking domain: levantdistribution.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com (herocopter.com) / 185.53.178.6
checking domain: matzlpage.de --> seems to be INFECTED: http://forhed.dealerholidayevent.com/wcv.php --> DNS: forhed.dealerholidayevent.com (forhed.dealerholidayevent.com) / 31.210.96.157
checking domain: mehfil.urdustan.net --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com (besidesdream.com) / 185.53.178.7
checking domain: meteomaastricht.nl --> seems to be INFECTED: http://50334.p-balls.com/url --> DNS: 50334.p-balls.com (50334.p-balls.com) / failed: Name or service not known.
checking domain: metrotecegypt.info --> seems to be INFECTED: http://hobart.softmn.com/www/delivery/ajs.php --> DNS: hobart.softmn.com (hobart.softmn.com) / 31.210.96.157
checking domain: mile2000.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: ministerfortson.com --> seems to be INFECTED: http://bazti.momsagainstmercury.com/_xhr/ugccomments/ --> DNS: bazti.momsagainstmercury.com (bazti.momsagainstmercury.com) / 31.210.96.156
checking domain: m.kfc.fr --> seems to be INFECTED: http://52901.politcalnews.com/url --> DNS: 52901.politcalnews.com (52901.politcalnews.com) / failed: Name or service not known.
checking domain: mvrccc.com.au --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: myexfuzeoffice.com --> seems to be INFECTED: http://batilekaleka.laallstars.com/url --> DNS: batilekaleka.laallstars.com (batilekaleka.laallstars.com) / 178.211.33.205
checking domain: myomnistar.com --> seems to be INFECTED: http://radeth.joeywilliamsdrums.com/__utm.gif --> DNS: radeth.joeywilliamsdrums.com (radeth.joeywilliamsdrums.com) / 185.53.177.6
checking domain: myyogasource.com --> seems to be INFECTED: http://ushean.8jutawan.com/pview --> DNS: ushean.8jutawan.com (ushean.8jutawan.com) / 31.210.96.156
checking domain: nancyhudsonassociates.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: ncpo.cc --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: nitpl.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: northbatonrougejournal.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: ofarroupilha.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: oople.com --> seems to be INFECTED: http://assington.whhusainc.net/csi --> DNS: assington.whhusainc.net (assington.whhusainc.net) / failed: Name or service not known.
checking domain: optionpixel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: parngkhaw.com --> seems to be INFECTED: http://kuckenbecker.strevel.net/pview --> DNS: kuckenbecker.strevel.net (kuckenbecker.strevel.net) / 81.92.219.62
checking domain: patrickwolf.org --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net (bonusforall.net) / 141.8.226.22
checking domain: perca.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: perthcrew.com.au --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: php2.twinner.com.tw --> seems to be INFECTED: http://43059.flatblastard.com/url --> DNS: 43059.flatblastard.com (43059.flatblastard.com) / 91.207.4.51
checking domain: phuongdanhvonghe.edu.vn --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org (everybodynames.org) / 103.224.182.248
checking domain: piccolistudio.com.br --> seems to be INFECTED: http://handsexual.com/cgi-bin/r.cgi --> DNS: handsexual.com (handsexual.com) / 141.8.225.77
checking domain: pileus.fr --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: playgroundpups.com --> seems to be INFECTED: http://usva.automotiveeventregistration.com/__utm.gif --> DNS: usva.automotiveeventregistration.com (usva.automotiveeventregistration.com) / 31.210.96.157
checking domain: pmmilrec.com --> seems to be INFECTED: http://elinah.midnightastronomy.com/b/ss/th-web-dev/1/H.24.3/s48689637278662 --> DNS: elinah.midnightastronomy.com (elinah.midnightastronomy.com) / 31.210.96.155
checking domain: pntc.ac.th --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com (twowayserf.com) / 65.19.157.235
checking domain: police.moraga.ca.us --> seems to be INFECTED: http://clubshop.boeckman.net/f.gif --> DNS: clubshop.boeckman.net (clubshop.boeckman.net) / 31.210.96.158
checking domain: porntamil.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org (germanattention.org) / 8.5.1.33
checking domain: proreha.net --> seems to be INFECTED: http://wedcheel.gliscentrifugal.com/imgres --> DNS: wedcheel.gliscentrifugal.com (wedcheel.gliscentrifugal.com) / 31.210.96.155
checking domain: quantica.cl --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org (gamecomes.org) / 185.53.177.9
checking domain: radiogurbeti.com --> seems to be INFECTED: http://sonagara.slyforkfarm.com/pingjs/ --> DNS: sonagara.slyforkfarm.com (sonagara.slyforkfarm.com) / 141.8.224.93
checking domain: re4m.me --> seems to be INFECTED: http://vhinmhy.serenehomeandlandscapes.com/_xhr/ugccomments/ --> DNS: vhinmhy.serenehomeandlandscapes.com (vhinmhy.serenehomeandlandscapes.com) / 96.127.180.210
checking domain: redbarrack.net --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com (lewisentitled.com) / 64.74.223.30
checking domain: registrovip.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: reimagery.com --> seems to be INFECTED: http://stiepcic.z-sat.com/spc.php --> DNS: stiepcic.z-sat.com (stiepcic.z-sat.com) / 31.210.96.158
checking domain: rhs-airco.com --> seems to be INFECTED: http://kaliosa.mrsstyleseeker.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: kaliosa.mrsstyleseeker.com (kaliosa.mrsstyleseeker.com) / 31.210.96.157
checking domain: rhs-klima.de --> seems to be INFECTED: http://kaliosa.autoeventregistration.com/v1/beacons/log --> DNS: kaliosa.autoeventregistration.com (kaliosa.autoeventregistration.com) / 31.210.96.157
checking domain: rohanwaterpark.in --> seems to be INFECTED: http://larnchester.crowncitycomputer.com/b/ss/marthacom,marthacomglobal/1/H.22.1/s0264389380411 --> DNS: larnchester.crowncitycomputer.com (larnchester.crowncitycomputer.com) / 81.92.219.61
checking domain: rose.kuro-tejina.com --> seems to be INFECTED: http://intronetech.com/cgi-bin/r.cgi --> DNS: intronetech.com (intronetech.com) / 141.8.225.80
checking domain: saibabamandirs.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: saobacdau.com.vn --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net (underbuild.net) / 78.153.194.100
checking domain: saranf.net --> seems to be INFECTED: http://hombrado.yourspartanmovers.com/piwik/piwik.php --> DNS: hombrado.yourspartanmovers.com (hombrado.yourspartanmovers.com) / 31.210.96.158
checking domain: sesc-sc.com.br --> seems to be INFECTED: http://shatto.8jutawan.com/openx/www/delivery/lg.php --> DNS: shatto.8jutawan.com (shatto.8jutawan.com) / 31.210.96.156
checking domain: spitzer-onlinemarketing.de --> seems to be INFECTED: http://vuruya.avuzedesigns.com/t.gif --> DNS: vuruya.avuzedesigns.com (vuruya.avuzedesigns.com) / 178.211.33.205
checking domain: sports-rehab-and-education.co.uk --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com (herocopter.com) / 185.53.178.6
checking domain: sseo.elk.pl --> seems to be INFECTED: http://gensapa.valentinesalesevent.com/imghover --> DNS: gensapa.valentinesalesevent.com (gensapa.valentinesalesevent.com) / 31.210.96.156
checking domain: stw-eu.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: syrena.gminanekla.pl --> seems to be INFECTED: http://apartliberal.com/cgi-bin/r.cgi --> DNS: apartliberal.com (apartliberal.com) / 103.224.182.248
checking domain: tappukidukaan.com --> seems to be INFECTED: http://primeiro.faustoteran.com/s --> DNS: primeiro.faustoteran.com (primeiro.faustoteran.com) / 81.92.219.62
checking domain: theflightattendantlife.com --> seems to be INFECTED: http://skagger.automotiveservicesavings.com/delivery/lg.php --> DNS: skagger.automotiveservicesavings.com (skagger.automotiveservicesavings.com) / 31.210.96.157
checking domain: thepennystockblog.com --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org (gtracking.org) / 141.8.224.239
checking domain: tkne.net --> seems to be INFECTED: http://tytui.tri-swelding.com/__utm.gif --> DNS: tytui.tri-swelding.com (tytui.tri-swelding.com) / 31.210.96.158
checking domain: toyboxinnovations.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net (bonusforall.net) / 141.8.226.22
checking domain: tpm-corp.es --> seems to be INFECTED: http://yolivet.automotiveservicesavings.com/pview --> DNS: yolivet.automotiveservicesavings.com (yolivet.automotiveservicesavings.com) / 31.210.96.157
checking domain: upunder.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org (everybodynames.org) / 103.224.182.248
checking domain: valsystem.cl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: vbcc.fr --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: watchourvideo.net --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com (formedtouch.com) / 103.224.182.248
checking domain: wbu.wroc.pl --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: weterynarz-zawiercie.pl --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com (lewisentitled.com) / 64.74.223.30
checking domain: windomallergy.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: winegasmeatery.com --> seems to be INFECTED: http://mykole.dealerholidayevent.com/__utm.gif --> DNS: mykole.dealerholidayevent.com (mykole.dealerholidayevent.com) / 31.210.96.157
checking domain: wirdumonline.nl --> seems to be INFECTED: http://luckyhosting.org/cgi-bin/r.cgi --> DNS: luckyhosting.org (luckyhosting.org) / failed: Name or service not known.
checking domain: wodzirejka.com.pl --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com (formedtouch.com) / 103.224.182.248
checking domain: workandlifebalance.eu --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: workpanel.de --> seems to be INFECTED: http://creighton.wenerdhard.com/new2/www/delivery/lg.php --> DNS: creighton.wenerdhard.com (creighton.wenerdhard.com) / 31.210.96.155
checking domain: www.accomo-metall.de --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org (everybodynames.org) / 103.224.182.248
checking domain: www.actiogen.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org (teethalong.org) / 85.17.25.242
checking domain: www.addbeton.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: www.aguadarocha.com.br --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com (costslaid.com) / 185.53.179.9
checking domain: www.alexnorrieswimwear.com --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com (twowayserf.com) / 65.19.157.235
checking domain: www.alhassanain.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: www.alnimrexpo.com --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: www.am830klaa.com --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com (voictoall.com) / 185.53.179.19
checking domain: www.amikoslovakia.sk --> seems to be INFECTED: http://yespicture.org/cgi-bin/r.cgi --> DNS: yespicture.org (yespicture.org) / failed: Name or service not known.
checking domain: www.apmc.com.hk --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: www.arlington.ph --> seems to be INFECTED: http://voutilainen.wenerdhard.com/tracker --> DNS: voutilainen.wenerdhard.com (voutilainen.wenerdhard.com) / 31.210.96.155
checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.210.214, 208.73.211.178, 208.73.210.217,  /
checking domain: www.aspi.ag --> seems to be INFECTED: http://umxamzah.mrsstyleseeker.com/__utm.gif --> DNS: umxamzah.mrsstyleseeker.com (umxamzah.mrsstyleseeker.com) / 31.210.96.157
checking domain: www.aztechprep.org --> seems to be INFECTED: http://mathanie.renzograciemexico.com/__utm.gif --> DNS: mathanie.renzograciemexico.com (mathanie.renzograciemexico.com) / 31.210.96.156
checking domain: www.backupdunyasi.com --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com (twiceseparate.com) / 78.153.194.100
checking domain: www.baliindividuellreisen.com --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com (besidesdream.com) / 185.53.178.7
checking domain: www.baliniksoma.com --> seems to be INFECTED: http://dirdam.castlelawpa.com/t.gif --> DNS: dirdam.castlelawpa.com (dirdam.castlelawpa.com) / 31.210.96.158
checking domain: www.bebenatur.com --> seems to be INFECTED: http://poeya.cubpack910.com/url --> DNS: poeya.cubpack910.com (poeya.cubpack910.com) / 141.8.224.239
checking domain: www.berdee.com --> seems to be INFECTED: http://ugiwa.rled.net/1pix.gif --> DNS: ugiwa.rled.net (ugiwa.rled.net) / 31.210.96.158
checking domain: www.berera.com --> seems to be INFECTED: http://jojua.remodelgreaterphoenix.com/imghover --> DNS: jojua.remodelgreaterphoenix.com (jojua.remodelgreaterphoenix.com) / 31.210.96.157
checking domain: www.bharatinfoline.com --> seems to be INFECTED: http://lesbon.ksupridewrestling.com/lg.php --> DNS: lesbon.ksupridewrestling.com (lesbon.ksupridewrestling.com) / failed: Name or service not known.
checking domain: www.bienenmilch.com --> seems to be INFECTED: http://jonestown.serenehomeandlandscapes.com/__utm.gif --> DNS: jonestown.serenehomeandlandscapes.com (jonestown.serenehomeandlandscapes.com) / 96.127.180.210
checking domain: www.bikersandbabesatthebeach.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.bitbank.com.lb --> seems to be INFECTED: http://rungbahadoor.oharvest.net/pview --> DNS: rungbahadoor.oharvest.net (rungbahadoor.oharvest.net) / 31.210.96.156
checking domain: www.bitcell.com.mx --> seems to be INFECTED: http://ushiar.vehicleservicediscount.com/t.gif --> DNS: ushiar.vehicleservicediscount.com (ushiar.vehicleservicediscount.com) / 31.210.96.157
checking domain: www.bluechipsportfishing.com --> seems to be INFECTED: http://treffinah.rled.net/imghover --> DNS: treffinah.rled.net (treffinah.rled.net) / 31.210.96.158
checking domain: www.bluestar.us --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com (twowayserf.com) / 65.19.157.235
checking domain: www.bobthebugman.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: www.bodasexclusivas.com --> seems to be INFECTED: http://compass.automotiveeventregistration.com/__utm.gif --> DNS: compass.automotiveeventregistration.com (compass.automotiveeventregistration.com) / 31.210.96.157
checking domain: www.bralicias.com --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net (dutytraditional.net) / 54.72.9.51
checking domain: www.brianpatten.co.uk --> seems to be INFECTED: http://bjrneset.ahtcna.com/tracker --> DNS: bjrneset.ahtcna.com (bjrneset.ahtcna.com) / 31.210.96.158
checking domain: www.buybutcherblock.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net (underbuild.net) / 184.172.106.42
checking domain: www.calltoislam.com --> seems to be INFECTED: http://griscom.mrsstyleseeker.com/re_/ping --> DNS: griscom.mrsstyleseeker.com (griscom.mrsstyleseeker.com) / 31.210.96.157
checking domain: www.carlosmeschini.com.br --> seems to be INFECTED: http://fulpagar.tropicaltoner.com/b --> DNS: fulpagar.tropicaltoner.com (fulpagar.tropicaltoner.com) / 31.210.96.158
checking domain: www.carlosvuam.com --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com (lewisentitled.com) / 64.74.223.30
checking domain: www.chiangkongonline.com --> seems to be INFECTED: http://zoenna.newlogiq.com/ps/ifr --> DNS: zoenna.newlogiq.com (zoenna.newlogiq.com) / 31.210.96.155
checking domain: www.ciren.net --> seems to be INFECTED: http://treescha.automotiveservicesavings.com/__utm.gif --> DNS: treescha.automotiveservicesavings.com (treescha.automotiveservicesavings.com) / 31.210.96.157
checking domain: www.clarkcoky.com --> seems to be INFECTED: http://panalangin.automotiveeventregistration.com/t.gif --> DNS: panalangin.automotiveeventregistration.com (panalangin.automotiveeventregistration.com) / 31.210.96.157
checking domain: www.comune.santa-maria-capua-vetere.ce.it --> seems to be INFECTED: http://gesneriaceae.telecomillinois.com/neo/darla/php/fc.php --> DNS: gesneriaceae.telecomillinois.com (gesneriaceae.telecomillinois.com) / 31.210.96.155
checking domain: www.crcnk.com.au --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.210.217, 208.73.210.214, 208.73.211.178,  /
checking domain: www.creatingyourfreedom.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: www.creativ-art1.com --> seems to be INFECTED: http://vermillon.serenehomeandlandscapes.com/pview --> DNS: vermillon.serenehomeandlandscapes.com (vermillon.serenehomeandlandscapes.com) / 96.127.180.210
checking domain: www.dallascustomfurniture.com --> seems to be INFECTED: http://bonusforall.net/cgi-bin/r.cgi --> DNS: bonusforall.net (bonusforall.net) / 141.8.226.22
checking domain: www.deauville.org --> seems to be INFECTED: http://merluzzo.thenightlyjoker.com/b/ss/mxmacromedia/1/H.24.4T/s07966294499385 --> DNS: merluzzo.thenightlyjoker.com (merluzzo.thenightlyjoker.com) / 31.210.96.158
checking domain: www.depednaga.com.ph --> seems to be INFECTED: http://alliovida.newcarsat.com/delivery/lg.php --> DNS: alliovida.newcarsat.com (alliovida.newcarsat.com) / 31.210.96.157
checking domain: www.designerdogwear.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net (allintercom.net) / 185.53.179.8
checking domain: www.detailformation.com --> seems to be INFECTED: http://chitlinlover.vehicleservicediscount.com/b --> DNS: chitlinlover.vehicleservicediscount.com (chitlinlover.vehicleservicediscount.com) / 31.210.96.157
checking domain: www.dieta-dimagrante.com --> seems to be INFECTED: http://yerme.techsupportauctions.com/b --> DNS: yerme.techsupportauctions.com (yerme.techsupportauctions.com) / 31.210.96.158
checking domain: www.dimclay.com --> seems to be INFECTED: http://aujikar.golfnewsiowa.com/ads/openx/www/delivery/ajs.php --> DNS: aujikar.golfnewsiowa.com (aujikar.golfnewsiowa.com) / 204.11.56.48
checking domain: www.dixielectricar.com --> seems to be INFECTED: http://redzhebova.midjerseymasonry.com/navbar.g --> DNS: redzhebova.midjerseymasonry.com (redzhebova.midjerseymasonry.com) / failed: Name or service not known.
checking domain: www.doctorhelp.de --> seems to be INFECTED: http://switchett.virtualsofts.com/405/257/13161289051321 --> DNS: switchett.virtualsofts.com (switchett.virtualsofts.com) / 31.210.96.158
checking domain: www.dogtreatrecipes.com.au --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: www.dreamboxturk.com --> seems to be INFECTED: http://baylet.autoeventregistration.com/servlet/ajrotator/123508/0/vj --> DNS: baylet.autoeventregistration.com (baylet.autoeventregistration.com) / 31.210.96.157
checking domain: www.dulceselsombreron.com --> seems to be INFECTED: http://thousandmilitary.com/cgi-bin/r.cgi --> DNS: thousandmilitary.com (thousandmilitary.com) / 185.53.179.11
checking domain: www.dumontduneriders.com --> seems to be INFECTED: http://sslabssys.com/cgi-bin/r.cgi --> DNS: sslabssys.com (sslabssys.com) / 85.17.25.242
checking domain: www.dwowvod.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com (herocopter.com) / 185.53.178.6
checking domain: www.eaf.edu.mx --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: www.eastwesthealthcare.net --> seems to be INFECTED: http://vukodlak.prestigehonda.net/imghover --> DNS: vukodlak.prestigehonda.net (vukodlak.prestigehonda.net) / 31.210.96.157
checking domain: www.ejmii.com --> seems to be INFECTED: http://mahaphontrakoon.vehicleservicediscount.com/s --> DNS: mahaphontrakoon.vehicleservicediscount.com (mahaphontrakoon.vehicleservicediscount.com) / 31.210.96.157
checking domain: www.elsiedesigns.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net (allintercom.net) / 185.53.179.8
checking domain: www.enimex.gr --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: www.extremebusa.com --> seems to be INFECTED: http://mehyaoui.newcarsat.com/t.gif --> DNS: mehyaoui.newcarsat.com (mehyaoui.newcarsat.com) / 31.210.96.157
checking domain: www.farmasanmodababy.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.210.217, 208.73.210.214, 208.73.211.178,  /
checking domain: www.fatherlinh.com --> seems to be INFECTED: http://germanattention.org/cgi-bin/r.cgi --> DNS: germanattention.org (germanattention.org) / 8.5.1.33
checking domain: www.fishingtackleindia.com --> seems to be INFECTED: http://urladyms.newlogiq.com/delivery/lg.php --> DNS: urladyms.newlogiq.com (urladyms.newlogiq.com) / 31.210.96.155
checking domain: www.flatbasher.co.uk --> seems to be INFECTED: http://twowayserf.com/cgi-bin/r.cgi --> DNS: twowayserf.com (twowayserf.com) / 65.19.157.235
checking domain: www.flushingpheasantrussells.com --> seems to be INFECTED: http://38694.southwestdiscus.com/url --> DNS: 38694.southwestdiscus.com (38694.southwestdiscus.com) / 178.211.33.203
checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/t.gif --> DNS: praylu.nutritionbydesign.com (praylu.nutritionbydesign.com) / 31.210.96.156
checking domain: www.freesure.com.tr --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com (earlyanswered.com) / 54.72.9.51
checking domain: www.freilandschwein.info --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com (earlyanswered.com) / 54.72.9.51
checking domain: www.gastronj.com --> seems to be INFECTED: http://stanclous.telecomchicago.com/widgets/like.php --> DNS: stanclous.telecomchicago.com (stanclous.telecomchicago.com) / 31.210.96.155
checking domain: www.geoffwhite.ws --> seems to be INFECTED: http://trackallnet.com/cgi-bin/r.cgi --> DNS: trackallnet.com (trackallnet.com) / 141.8.225.80
checking domain: www.glodyne.com --> seems to be INFECTED: http://ramaila.inboccaproductions.com/b --> DNS: ramaila.inboccaproductions.com (ramaila.inboccaproductions.com) / 31.210.96.156
checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/url --> DNS: moutsiouna.iretarpg.com (moutsiouna.iretarpg.com) / 185.53.177.9
checking domain: www.griotcalendar.org --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com (voictoall.com) / 185.53.179.19
checking domain: www.gswsftp01.com --> seems to be INFECTED: http://parallag.bmemkitchens.com/b --> DNS: parallag.bmemkitchens.com (parallag.bmemkitchens.com) / 78.153.194.100
checking domain: www.highsport.se --> seems to be INFECTED: http://udomchum.telecommichigan.com/delivery/lg.php --> DNS: udomchum.telecommichigan.com (udomchum.telecommichigan.com) / 31.210.96.155
checking domain: www.holidayinn-mulhouse.com --> seems to be INFECTED: http://hunton.valentinesalesevent.com/delivery/lg.php --> DNS: hunton.valentinesalesevent.com (hunton.valentinesalesevent.com) / 31.210.96.156
checking domain: www.hostal3soles.com --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com (besidesdream.com) / 185.53.178.7
checking domain: www.hostpix.de --> seems to be INFECTED: http://xlau.kalkanturqouise.com/imghover --> DNS: xlau.kalkanturqouise.com (xlau.kalkanturqouise.com) / failed: Name or service not known.
checking domain: www.hummel-print.biz --> seems to be INFECTED: http://60936.pballgames.com/url --> DNS: 60936.pballgames.com (60936.pballgames.com) / failed: Name or service not known.
checking domain: www.iagu.org --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: www.ijerd.com --> seems to be INFECTED: http://verzeroli.outbreakm3dia.com/__utm.gif --> DNS: verzeroli.outbreakm3dia.com (verzeroli.outbreakm3dia.com) / 184.172.106.42
checking domain: www.ilovethefingerlakes.com --> seems to be INFECTED: http://ailinn.automotiveservicesavings.com/if --> DNS: ailinn.automotiveservicesavings.com (ailinn.automotiveservicesavings.com) / 31.210.96.157
checking domain: www.inteki.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: www.jalba.gr --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com (watchingsquare.com) / 185.53.177.9
checking domain: www.jawa-club.at --> seems to be INFECTED: http://matinisi.nitplus.com/__utm.gif --> DNS: matinisi.nitplus.com (matinisi.nitplus.com) / 96.90.178.97
checking domain: www.jcs3.com --> seems to be INFECTED: http://linita.golfnewsmontana.com/imghover --> DNS: linita.golfnewsmontana.com (linita.golfnewsmontana.com) / failed: Name or service not known.
checking domain: www.jonaswelsch.com --> seems to be INFECTED: http://forcea.glisinc.com/webpagethumbnail --> DNS: forcea.glisinc.com (forcea.glisinc.com) / failed: Name or service not known.
checking domain: www.jornalfarroupilha.com.br --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: www.jornalocaminho.com.br --> seems to be INFECTED: http://gramelis.newyorkmascot.com/b --> DNS: gramelis.newyorkmascot.com (gramelis.newyorkmascot.com) / failed: Name or service not known.
checking domain: www.jpot.com.sg --> seems to be INFECTED: http://maturkanic.girlsgoneglamis.com/__utm.gif --> DNS: maturkanic.girlsgoneglamis.com (maturkanic.girlsgoneglamis.com) / 69.162.80.55
checking domain: www.jtcomms.com --> seems to be INFECTED: http://solichana.telecommichigan.com/safe_image.php --> DNS: solichana.telecommichigan.com (solichana.telecommichigan.com) / 31.210.96.155
checking domain: www.karavelle.com.br --> seems to be INFECTED: http://britts.oharvest.net/__utm.gif --> DNS: britts.oharvest.net (britts.oharvest.net) / 31.210.96.156
checking domain: www.kbhbrandmuseum.dk --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com (formedtouch.com) / 103.224.182.248
checking domain: www.keepcalm.com.br --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org (teethalong.org) / 66.135.47.125
checking domain: www.klanglos-studio.de --> seems to be INFECTED: http://camplong.barbeveragesnv.com/ps/ifr --> DNS: camplong.barbeveragesnv.com (camplong.barbeveragesnv.com) / failed: Name or service not known.
checking domain: www.klaumonforma.com.br --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net (dutytraditional.net) / 54.72.9.51
checking domain: www.koreanmartialarts.com --> seems to be INFECTED: http://xpod.gryphonaz.com/delivery/lg.php --> DNS: xpod.gryphonaz.com (xpod.gryphonaz.com) / 31.210.96.157
checking domain: www.kuriren.net --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.kyalasushi.com --> seems to be INFECTED: http://vesman.autoserviceevent.com/url --> DNS: vesman.autoserviceevent.com (vesman.autoserviceevent.com) / 31.210.96.157
checking domain: www.larcheedmonton.org --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: www.ledluminausa.com --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com (herocopter.com) / 185.53.178.6
checking domain: www.levin.com.br --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com (lewisentitled.com) / 64.74.223.30
checking domain: www.lipika.com --> seems to be INFECTED: http://malamut.revolverindy.com/pagead/ads --> DNS: malamut.revolverindy.com (malamut.revolverindy.com) / 172.99.89.202
checking domain: www.little-moon-aussies.com --> seems to be INFECTED: http://jahren.prestigehonda.net/www/delivery/lg.php --> DNS: jahren.prestigehonda.net (jahren.prestigehonda.net) / 31.210.96.157
checking domain: www.livre-etre-bien.com --> seems to be INFECTED: http://nedou.kidstryingtopayforcollege.com/url --> DNS: nedou.kidstryingtopayforcollege.com (nedou.kidstryingtopayforcollege.com) / 81.92.219.61
checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.powerplaycreative.com/delivery/lg.php --> DNS: wcameron.powerplaycreative.com (wcameron.powerplaycreative.com) / 31.210.96.158
checking domain: www.lovethisgirl.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com (capitalinformer.com) / 72.52.4.91
checking domain: www.loxsavvy.com.au --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net (trialworld.net) / 103.224.182.248
checking domain: www.maquinaslitograficas.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.210.200, 208.73.210.217, 208.73.210.214,  /
checking domain: www.mayer.com.ro --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com (formedtouch.com) / 103.224.182.248
checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net (allintercom.net) / 185.53.179.8
checking domain: www.microforme.com --> seems to be INFECTED: http://suryoko.hitodeki.com/api/getCount2.php --> DNS: suryoko.hitodeki.com (suryoko.hitodeki.com) / failed: Name or service not known.
checking domain: www.mind-body-soul.de --> seems to be INFECTED: http://timp.automotiveservicesavings.com/delivery/lg.php --> DNS: timp.automotiveservicesavings.com (timp.automotiveservicesavings.com) / 31.210.96.157
checking domain: www.miniaturesupplier.com --> seems to be INFECTED: http://koumparou.mwhiteman.com/img/3.gif --> DNS: koumparou.mwhiteman.com (koumparou.mwhiteman.com) / failed: Name or service not known.
checking domain: www.mintfinancial.com.au --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: www.mitsuadvclub.net --> seems to be INFECTED: http://loardy.exquisiteclasscenter.com/url --> DNS: loardy.exquisiteclasscenter.com (loardy.exquisiteclasscenter.com) / 178.211.33.203
checking domain: www.modellfly.no --> seems to be INFECTED: http://gtracking.org/cgi-bin/r.cgi --> DNS: gtracking.org (gtracking.org) / 141.8.224.239
checking domain: www.moebel-direkt.net --> seems to be INFECTED: http://reset.com/__utm.gif --> DNS: reset.com (reset.com) / 69.172.201.208
checking domain: www.monah.us --> seems to be INFECTED: http://kukuljac.concretevibration.com/__utm.gif --> DNS: kukuljac.concretevibration.com (kukuljac.concretevibration.com) / 31.210.96.158
checking domain: www.movingtransfer.com --> seems to be INFECTED: http://taiugac.vehicleservicediscount.com/openx/www/delivery/lg.php --> DNS: taiugac.vehicleservicediscount.com (taiugac.vehicleservicediscount.com) / 31.210.96.157
checking domain: www.mrlatinomagazine.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: www.msm.mc --> seems to be INFECTED: http://poserio.thecaregrouppc.net/delivery/lg.php --> DNS: poserio.thecaregrouppc.net (poserio.thecaregrouppc.net) / 81.92.219.62
checking domain: www.my-hebrew-programs.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: www.mywoom.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.neonconcursos.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: www.newsflash.org --> seems to be INFECTED: http://srse.techsupportauction.com/_xhr/ugccomments/ --> DNS: srse.techsupportauction.com (srse.techsupportauction.com) / failed: Name or service not known.
checking domain: www.nicholas-williams.com --> seems to be INFECTED: http://mildworm.thecinema6.com/imgres --> DNS: mildworm.thecinema6.com (mildworm.thecinema6.com) / 31.210.96.156
checking domain: www.nwd-ly.com --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.210.214, 208.73.210.217, 208.73.210.200,  /
checking domain: www.oo5.com --> seems to be INFECTED: http://uglyugly.savedalyfield.com/images/rt.gif --> DNS: uglyugly.savedalyfield.com (uglyugly.savedalyfield.com) / 31.210.96.157
checking domain: www.oople.com --> seems to be INFECTED: http://assington.whhusainc.net/s2.html --> DNS: assington.whhusainc.net (assington.whhusainc.net) / failed: Name or service not known.
checking domain: www.osbycentralservice.se --> seems to be INFECTED: http://formedtouch.com/cgi-bin/r.cgi --> DNS: formedtouch.com (formedtouch.com) / 103.224.182.248
checking domain: www.padraoeditorial.com.br --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net (iamprotectedfrom.net) / 185.53.179.9
checking domain: www.pearlscorniche.com --> seems to be INFECTED: http://gamecomes.org/cgi-bin/r.cgi --> DNS: gamecomes.org (gamecomes.org) / 185.53.177.9
checking domain: www.perstererfineart.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com (watchingsquare.com) / 185.53.177.9
checking domain: www.pfotenranch.de --> seems to be INFECTED: http://zaquitsha.vetsingreensboro.com/s --> DNS: zaquitsha.vetsingreensboro.com (zaquitsha.vetsingreensboro.com) / 185.53.179.6
checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.pixled.pl --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.praxpetroleum.com --> seems to be INFECTED: http://kumasegawa.themorningjoker.com/t.gif --> DNS: kumasegawa.themorningjoker.com (kumasegawa.themorningjoker.com) / 31.210.96.158
checking domain: www.prestigegym.com --> seems to be INFECTED: http://tippetts.prestigehonda.net/t.gif --> DNS: tippetts.prestigehonda.net (tippetts.prestigehonda.net) / 31.210.96.157
checking domain: www.proreha.net --> seems to be INFECTED: http://wedcheel.gliscentrifugal.com/b --> DNS: wedcheel.gliscentrifugal.com (wedcheel.gliscentrifugal.com) / 31.210.96.155
checking domain: www.psicoterapeutas.org --> seems to be INFECTED: http://pantakit.powerplaycreative.com/_xhr/ugccomments/ --> DNS: pantakit.powerplaycreative.com (pantakit.powerplaycreative.com) / 31.210.96.158
checking domain: www.quintadamainha.com --> seems to be INFECTED: http://limpiado.autoeventregistration.com/st --> DNS: limpiado.autoeventregistration.com (limpiado.autoeventregistration.com) / 31.210.96.157
checking domain: www.rac-italia.com --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: www.radiogurbeti.com --> seems to be INFECTED: http://sonagara.slyforkfarm.com/cmd/huaxiast --> DNS: sonagara.slyforkfarm.com (sonagara.slyforkfarm.com) / 141.8.224.93
checking domain: www.rdm.hr --> seems to be INFECTED: http://42447.azdiscus.com/url --> DNS: 42447.azdiscus.com (42447.azdiscus.com) / 178.211.33.203
checking domain: www.rebo-rohstoffe.de --> seems to be INFECTED: http://argles.autoeventregistration.com/TAGPUBLISH/getad.aspx --> DNS: argles.autoeventregistration.com (argles.autoeventregistration.com) / 31.210.96.157
checking domain: www.resistantculture.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.retrosheet.org --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: www.rgjassociation.info --> seems to be INFECTED: http://weedx.fubarpaintball.com/s --> DNS: weedx.fubarpaintball.com (weedx.fubarpaintball.com) / 31.210.96.156
checking domain: www.rich.co.ke --> seems to be INFECTED: http://andritsos.newyorkjester.com/imp --> DNS: andritsos.newyorkjester.com (andritsos.newyorkjester.com) / 208.73.210.217, 208.73.210.200, 208.73.211.178,  /
checking domain: www.rollershop.de --> seems to be INFECTED: http://yinpou.aredietsok.com/b/ss/wbextextibrd,wbglobalext/1/G.9p2/s5601663509823 --> DNS: yinpou.aredietsok.com (yinpou.aredietsok.com) / 31.210.96.158
checking domain: www.sandiegoinsidertours.com --> seems to be INFECTED: http://everybodynames.org/cgi-bin/r.cgi --> DNS: everybodynames.org (everybodynames.org) / 103.224.182.248
checking domain: www.santuariodalapa.pt --> seems to be INFECTED: http://tixon.theafternoonjoker.com/s --> DNS: tixon.theafternoonjoker.com (tixon.theafternoonjoker.com) / 31.210.96.158
checking domain: www.sasgroup.pl --> seems to be INFECTED: http://trafficsources.org/cgi-bin/r.cgi --> DNS: trafficsources.org (trafficsources.org) / 103.224.182.249
checking domain: www.scga.at --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.210.200, 208.73.210.217, 208.73.210.214,  /
checking domain: www.sculpture1940.com --> seems to be INFECTED: http://pizzaexperience.internet1495.com/t.gif --> DNS: pizzaexperience.internet1495.com (pizzaexperience.internet1495.com) / 178.211.33.203
checking domain: www.sdfbd.org --> seems to be INFECTED: http://handsexual.com/cgi-bin/r.cgi --> DNS: handsexual.com (handsexual.com) / 141.8.225.77
checking domain: www.secondhandoptik.de --> seems to be INFECTED: http://whiff.newcarsat.com/imgres --> DNS: whiff.newcarsat.com (whiff.newcarsat.com) / 31.210.96.157
checking domain: www.siacgroup.com --> seems to be INFECTED: http://35608.azdiscus.com/url --> DNS: 35608.azdiscus.com (35608.azdiscus.com) / 178.211.33.203
checking domain: www.signagewidgets.com --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net (travelmeant.net) / 199.59.243.120
checking domain: www.singaporeparties.com.sg --> seems to be INFECTED: http://rothermich.freelifelinegovernmentphone.com/getSegment.php --> DNS: rothermich.freelifelinegovernmentphone.com (rothermich.freelifelinegovernmentphone.com) / 185.53.179.9
checking domain: www.skleprower.pl --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com (twiceseparate.com) / 78.153.194.100
checking domain: www.sportstoursinternational.co.uk --> seems to be INFECTED: http://tripplett.z-sat.com/__utm.gif --> DNS: tripplett.z-sat.com (tripplett.z-sat.com) / 31.210.96.158
checking domain: www.successinteaching.info --> seems to be INFECTED: http://protechere.com/cgi-bin/r.cgi --> DNS: protechere.com (protechere.com) / 103.224.182.248
checking domain: www.superpass.com --> seems to be INFECTED: http://teethalong.org/cgi-bin/r.cgi --> DNS: teethalong.org (teethalong.org) / 66.135.47.125
checking domain: www.systemcv.com.br --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: www.televideoproductions.com --> seems to be INFECTED: http://interestingchapter.net/cgi-bin/r.cgi --> DNS: interestingchapter.net (interestingchapter.net) / 185.53.177.6
checking domain: www.temsa-nord.de --> seems to be INFECTED: http://dayfa.myredhomingpidgeon.com/delivery/lg.php --> DNS: dayfa.myredhomingpidgeon.com (dayfa.myredhomingpidgeon.com) / 95.211.117.206
checking domain: www.texcon.net --> seems to be INFECTED: http://gharavi.dealerholidayevent.com/t.gif --> DNS: gharavi.dealerholidayevent.com (gharavi.dealerholidayevent.com) / 31.210.96.157
checking domain: www.thepatientsspeak.org --> seems to be INFECTED: http://twiceseparate.com/cgi-bin/r.cgi --> DNS: twiceseparate.com (twiceseparate.com) / 78.153.194.100
checking domain: www.therapiehyperbare.com --> seems to be INFECTED: http://tagipur.mrsstyleseeker.com/api/getCount2.php --> DNS: tagipur.mrsstyleseeker.com (tagipur.mrsstyleseeker.com) / 31.210.96.157
checking domain: www.theresastouchdayspa.ca --> seems to be INFECTED: http://prunotto.newcarsat.com/t.gif --> DNS: prunotto.newcarsat.com (prunotto.newcarsat.com) / 31.210.96.157
checking domain: www.thestampspot.com.au --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com (metromanias.com) / 208.73.211.178, 208.73.210.200, 208.73.210.217,  /
checking domain: www.timelessimagesmi.com --> seems to be INFECTED: http://abusalewm.exceltoner.com/gampad/ads --> DNS: abusalewm.exceltoner.com (abusalewm.exceltoner.com) / 31.210.96.158
checking domain: www.timfirth.com --> seems to be INFECTED: http://holdpoker.ancestorworshippublishing.com/_xhr/ugccomments/ --> DNS: holdpoker.ancestorworshippublishing.com (holdpoker.ancestorworshippublishing.com) / 31.210.96.158
checking domain: www.tintasluxor.com.br --> seems to be INFECTED: http://severalcamp.com/cgi-bin/r.cgi --> DNS: severalcamp.com (severalcamp.com) / 141.8.224.25
checking domain: www.tri-tex.net --> seems to be INFECTED: http://vicrant.newworldheroes.com/tracker --> DNS: vicrant.newworldheroes.com (vicrant.newworldheroes.com) / 31.210.96.158
checking domain: www.tubtimsiam.com --> seems to be INFECTED: http://abew.whonose.com/__utm.gif --> DNS: abew.whonose.com (abew.whonose.com) / 178.211.33.203
checking domain: www.tumbadack.se --> seems to be INFECTED: http://alflo.autoserviceevent.com/log --> DNS: alflo.autoserviceevent.com (alflo.autoserviceevent.com) / 31.210.96.157
checking domain: www.tunefreak.org --> seems to be INFECTED: http://wawabeh.williamsfp.com/delivery/lg.php --> DNS: wawabeh.williamsfp.com (wawabeh.williamsfp.com) / failed: Name or service not known.
checking domain: www.turbo-mixer.de --> seems to be INFECTED: http://schmakel.strongpsychic.com/t.gif --> DNS: schmakel.strongpsychic.com (schmakel.strongpsychic.com) / 31.210.96.155
checking domain: www.ucamb.org --> seems to be INFECTED: http://smittendorf.2cuonline.com/t.gif --> DNS: smittendorf.2cuonline.com (smittendorf.2cuonline.com) / 31.210.96.155
checking domain: www.unitedmgtii.com --> seems to be INFECTED: http://petel.golfnewstennessee.com/delivery/lg.php --> DNS: petel.golfnewstennessee.com (petel.golfnewstennessee.com) / 204.11.56.48
checking domain: www.veterinarkliniken.se --> seems to be INFECTED: http://dutytraditional.net/cgi-bin/r.cgi --> DNS: dutytraditional.net (dutytraditional.net) / 54.72.9.51
checking domain: www.vfbhermsdorf.de --> seems to be INFECTED: http://hinouchi.greatserviceforless.com/__utm.gif --> DNS: hinouchi.greatserviceforless.com (hinouchi.greatserviceforless.com) / 31.210.96.157
checking domain: www.vidvanern.se --> seems to be INFECTED: http://usnai.restoremystuff.com/__utm.gif --> DNS: usnai.restoremystuff.com (usnai.restoremystuff.com) / 31.210.96.156
checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/_xhr/ugccomments/ --> DNS: karepii.dealerholidayevent.com (karepii.dealerholidayevent.com) / 31.210.96.157
checking domain: www.wallyontheweb.com --> seems to be INFECTED: http://ichinohe.casabodamia.com/delivery/lg.php --> DNS: ichinohe.casabodamia.com (ichinohe.casabodamia.com) / 141.8.224.169
checking domain: www.wcgconline.net --> seems to be INFECTED: http://keniisha.realdealpsychic.com/b/ss/natgeophoto,natgeoglobal/1/H.23.8/s32297229133495 --> DNS: keniisha.realdealpsychic.com (keniisha.realdealpsychic.com) / 31.210.96.155
checking domain: www.wmc.kylos.pl --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: www.wonderwhistle.co.uk --> seems to be INFECTED: http://infernomag.com/cgi-bin/r.cgi --> DNS: infernomag.com (infernomag.com) / 91.195.241.72
checking domain: www.wordgod.com.tw --> seems to be INFECTED: http://sahmari.theafternoonjoker.com/gadgets/ifr --> DNS: sahmari.theafternoonjoker.com (sahmari.theafternoonjoker.com) / 31.210.96.158
checking domain: www.wronashouseofviolins.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org (virtualmapping.org) / 72.52.4.120
checking domain: www.zoeblitzer-natursteine.de --> seems to be INFECTED: http://besidesdream.com/cgi-bin/r.cgi --> DNS: besidesdream.com (besidesdream.com) / 185.53.178.7
checking domain: zarov.com.br --> seems to be INFECTED: http://upanesh.kemperfitness.com/pview --> DNS: upanesh.kemperfitness.com (upanesh.kemperfitness.com) / failed: Name or service not known.
date finished: Mon Nov 23 00:31:40 PST 2015