# this list of ponmocup malware redirection domains is maintained by 
# email:   toms.security.stuff -at- gmail.com
# twitter: @c_APT_ure
# blog:    http://c-apt-ure.blogspot.com/
#
# last updated: 2012-06-05
#
# the following domains were seen witH random subdomain, e.g. port number (4-5 digits) or random alpha-chars
# the subdomains had different IPs than the parent domains!
#
*.ottawaapplianceservice.com
*.kmpowersports.com
*.3d-tablet.cc
*.aabathlift.com
*.akitahusky.com
*.akitahusky.net
*.akitahusky.org
*.albinopleco.com
*.bapiescafe.com
*.customshowerdoorsc.com
*.dancearkansas.com
*.ilyanet.info
*.peachtreepropainters.biz
*.peachtreepropainters.com
*.peachtreepropainters.info
*.peachtreepropainters.net
*.puritanhardrive.com
*.soroki.info
*.thepetserver.com
*.vicandbarbs.net
*.3d-tablet.biz
*.3d-tablet.me
*.3d-tablet.tv
*.appliancerecyclingportland.com
*.crisisice.com
*.entrygrid.com
*.iphone-yes.us
*.jennyswanepoel.com
*.kingoftheaquarium.com
*.learn2drive4free.com
*.nosilentnight.com
*.ns.themahoganylife.com
*.p-ballgames.com
*.pballgames.com
*.perfectgameproductions.biz
*.reefclown.com
*.suncoastintegration.com
*.thesubtleactivist.com
*.thomasyohannan.com
*.travel-yes.com
*.bankingonbankers.com
#
# the following domains were seen without subdomains
#
argumenthistorical.org
besidesdream.com
capitalinformer.com
dmjxluffloundering.info
dutytraditional.net
dvmsoft.eu
earlyanswered.com
formedtouch.com
gtracking.org
interestingchapter.net
jesusonlynet.org
khyiftcrusher.info
nbeegclassics.info
oorvyvwdeciphers.info
reportedtechniques.org
sahnespender.com
sqpgksbweathering.info
szentkoronaradio.com
teethalong.org
travelmeant.net
twiceseparate.com
underbuild.net
virtualmapping.org
watchingsquare.com