# this list of ponmocup malware redirection domains is maintained by # email: toms.security.stuff -at- gmail.com # twitter: @c_APT_ure # blog: http://c-apt-ure.blogspot.com/ # # last updated: 2012-06-05 # # the following domains were seen with random subdomains, e.g. port number (4-5 digits) or random alpha-chars # the subdomains had different IPs than the parent domains! # ottawaapplianceservice.com kmpowersports.com 3d-tablet.cc aabathlift.com akitahusky.com akitahusky.net akitahusky.org albinopleco.com bapiescafe.com customshowerdoorsc.com dancearkansas.com ilyanet.info peachtreepropainters.biz peachtreepropainters.com peachtreepropainters.info peachtreepropainters.net puritanhardrive.com soroki.info thepetserver.com vicandbarbs.net 3d-tablet.biz 3d-tablet.me 3d-tablet.tv appliancerecyclingportland.com crisisice.com entrygrid.com iphone-yes.us jennyswanepoel.com kingoftheaquarium.com learn2drive4free.com nosilentnight.com ns.themahoganylife.com p-ballgames.com pballgames.com perfectgameproductions.biz reefclown.com suncoastintegration.com thesubtleactivist.com thomasyohannan.com travel-yes.com bankingonbankers.com # # the following domains were seen without subdomains # argumenthistorical.org besidesdream.com capitalinformer.com dmjxluffloundering.info dutytraditional.net dvmsoft.eu earlyanswered.com formedtouch.com gtracking.org interestingchapter.net jesusonlynet.org khyiftcrusher.info nbeegclassics.info oorvyvwdeciphers.info reportedtechniques.org sahnespender.com sqpgksbweathering.info szentkoronaradio.com teethalong.org travelmeant.net twiceseparate.com underbuild.net virtualmapping.org watchingsquare.com