# # this list of ponmocup malware redirection URLs is maintained by # email: toms.security.stuff -at- gmail.com # twitter: @c_APT_ure # blog: http://c-apt-ure.blogspot.com/ # # last updated: 2012-10-16 # # sorry about the double date format (yyyy-mm-dd & dd/Mon/yyyy) # date domain port uri-path uri-params ip 2012-08-24 winrich.alloymuffles.com 80 /__utm.gif ?utmwv=5.3.3&utms=1&utmn=7375673&utmhn=www.jobstreet.co.id&utmcs=UTF-8&utmsr=1024x768&utmvp=1007x610&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=8.0%20%20r22&utmdt=Lowongan%20kerja%20Indonesia%20%26%20lamaran%20kerja%20terbaru%20%7C%20Jobs%20in%20Indonesia%20-%20Jobstreet.com&utmhid=1105431089&utmr=http%3A%2F%2Fwww.epigeos.ch%2F&utmp=/&utmac=UA-226014-6&utmcc=__utma%3D15386153.1052193777.1341300794.1341300794.1341300794.1%3B%2B__utmz%3D15386153.1341300794.1.1.utmcsr%3Dgoogle%7Cutmccn%3D(organic)%7Cutmcmd%3Dorganic%7Cutmctr%3Djob%2520street%3B&utmu=qhC~ 31.210.96.155 2012-08-27 nuddy.alternateolympics.com 80 /__utm.gif ?utmwv=5.3.3&utms=2&utmn=1048723253&utmhn=forum.detik.com&utmcs=ISO-8859-1&utmsr=1024x768&utmvp=1007x605&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=11.3%20r300&utmdt=Lagi%2C%20di%20Indonesia%20tdk%20dihargai%20di%20Singapore%20malah%20dapet%20bea%20siswa%20-%20Page%207%20-%20DetikForum&utmhid=195818111&utmr=http%3A%2F%2Fwww.maxx.de%2F&utmp=/lagi-di-indonesia-tdk-dihargai-di-singapore-malah-dapet-bea-t187297p7.html&utmac=UA-891770-59&utmcc=__utma%3D260341530.541210193.1342169926.1342169926.1342169926.1%3B%2B__utmz%3D260341530.1342170031.1.2.utmcsr%3Dgoogle%7Cutmccn%3D(organic)%7Cutmcmd%3Dorganic%7Cutmctr%3Dpemenang%2520olimpiade%2520fisika%25202012%3B&utmu=qBAAAAAgAAIAAAAAQ~ 31.210.96.155 2012-08-27 qushawnda.thebabiesandbeyondpeds.com 80 /t.gif ?_=1341643996932&count=horizontal&counturl=http%3A%2F%2Fwww.smartek.ch%2F&id=twitter_tweet_button_2&lang=id&original_referer=http%3A%2F%2Fwww.smartek.ch%2F&text=Penelitian%20Hubungkan%20Kotoran%20Kucing%20dengan%20Bunuh%20Diri%20Perempuan%20-%20Yahoo!%20News%20Indonesia&url=http%3A%2F%2Fwww.smartek.ch%2F&via=yahoo_id&type=share&size=m&twttr_referrer=http%3A%2F%2Fwww.smartek.ch%2F&twttr_widget=1&twttr_hask=0&twttr_li=0&twttr_pid=v3:1341640385427767411434927 31.210.96.155 2012-08-29 chanrat.heattreatalloy.com 80 /pview ?event=pview&fpc=d96b1f4-137eaa87da1-3bf81330-8994&sessionID=1341492448898.50813&sourceURL=http%3A%2F%2Fkantine-postzentrum.ch%2F&hostname=www.mangahere.com&location=/manga/shuukatsu_kimi_ni_naitei/v02/c009/28.html&publisher=e47efe7d-147b-4731-ac42-9838ccdc52f2&shareHash=sthash.r51uHQUu&incomingHash=&refDomain=www.mangahere.com&refQuery=manga/shuukatsu_kimi_ni_naitei/v02/c009/27.html&url=http%3A%2F%2Fkantine-postzentrum.ch%2F&sharURL=&source=share5x&title=Shuukatsu!!%20-%20Kimi%20ni%20Naitei%209%20-%20Read%20Shuukatsu!!%20-%20Kimi%20ni%20Naitei%20Chapter%209%20Online%20-%20Page%2028&ts1341492448900.0= 31.210.96.155 2012-08-29 www.okubil.com 80 /dukan-diyeti-nedir-nasil-yapilir-6382.html - 31.210.96.146 2012-08-30 lureen.telecomillinois.com 80 /imghover ?iact=hm&ei=uuPnT9_AF9DNrQeG77j9CA&q=kangin&tbs=&page=1&tbnh=149&tbnw=193&start=0&ndsp=17&dur=23&tbnid=0otUVDT8_LZPlM:&hovh=196&hovw=257&vpx=108&vpy=10&imgurl=http%3A%2F%2Fwww.norduserforum.com%2F&imgrefurl=http%3A%2F%2Fwww.norduserforum.com%2F&ved=1t:1527,r:11,s:0,i:104&vetl=ms 31.210.96.155 2012-08-30 qushawnda.thebabiesandbeyondpeds.com 80 /t.gif ?_=1341643996932&count=horizontal&counturl=http%3A%2F%2Fwww.smartek.ch%2F&id=twitter_tweet_button_2&lang=id&original_referer=http%3A%2F%2Fwww.smartek.ch%2F&text=Penelitian%20Hubungkan%20Kotoran%20Kucing%20dengan%20Bunuh%20Diri%20Perempuan%20-%20Yahoo!%20News%20Indonesia&url=http%3A%2F%2Fwww.smartek.ch%2F&via=yahoo_id&type=share&size=m&twttr_referrer=http%3A%2F%2Fwww.smartek.ch%2F&twttr_widget=1&twttr_hask=0&twttr_li=0&twttr_pid=v3:1341640385427767411434927 31.210.96.155 2012-09-04 esthin.advertisementdevil.com 80 /b ?c1=8&c2=6135404&c3=28&c4=13310&c10=3325558&ns__t=1341636325549&ns_c=ISO-8859-1&c8=&c7=http%3A%2F%2Fwww.ambu-wiesendamm.ch%2F&c9=http%3A%2F%2Fwww.ambu-wiesendamm.ch%2F 31.210.96.155 2012-09-04 winrich.alloymuffles.com 80 /new2/www/delivery/lg.php ?bannerid=9805&campaignid=15&zoneid=869&loc=http%3A%2F%2Fwww.epigeos.ch%2F&cb=948b3ab727 31.210.96.155 2012-09-07 boukydis.hollyspringssavingsnetwork.com 80 /b ?c1=2&c2=8443234&ns__t=1340245269929&ns_c=ISO-8859-1&c8=Ada%20apa%20antara%20Audy%20Item%20ma%20Iko%20Uwais-Jane%20Shalimar%20ya%3F%20-%20Page%20487%20-%20DetikForum&c7=http%3A%2F%2Fwww.fallas.com%2F&c9=http%3A%2F%2Fwww.fallas.com%2F 31.210.96.155 2012-09-07 chanrat.heattreatalloy.com 80 /w/1.0/arj ?auid=151893&o=2399749916&callback=MM_127454_1&url=http%3A%2F%2Fkantine-postzentrum.ch%2F&ref=http%3A%2F%2Fkantine-postzentrum.ch%2F&cb=2399749916 31.210.96.155 2012-09-07 nuddy.alternateolympics.com 80 /www/delivery/lg.php ?bannerid=4859&campaignid=1288&zoneid=153&loc=1&referer=http%3A%2F%2Fwww.maxx.de%2F&cb=062a4314ea 31.210.96.155 2012-09-09 qushawnda.thebabiesandbeyondpeds.com 80 /t.gif ?_=1341643996932&count=horizontal&counturl=http%3A%2F%2Fwww.smartek.ch%2F&id=twitter_tweet_button_2&lang=id&original_referer=http%3A%2F%2Fwww.smartek.ch%2F&text=Penelitian%20Hubungkan%20Kotoran%20Kucing%20dengan%20Bunuh%20Diri%20Perempuan%20-%20Yahoo!%20News%20Indonesia&url=http%3A%2F%2Fwww.smartek.ch%2F&via=yahoo_id&type=share&size=m&twttr_referrer=http%3A%2F%2Fwww.smartek.ch%2F&twttr_widget=1&twttr_hask=0&twttr_li=0&twttr_pid=v3:1341640385427767411434927 31.210.96.155 2012-09-11 kandira.uksportbook.com 80 /b ?c1=8&c2=6299460&c3=1000000000000000002&ns__t=1340700275980&ns_c=UTF-8&c8=Komik%20Fairy%20Tail%20%7C%20Chapter%20288%20289%20Hal%2018%20-%20Baca%20Manga%20Bahasa%20Indonesia%20Online&c7=http%3A%2F%2Fwww.gran-canaria-insider.info%2F&c9=http%3A%2F%2Fwww.gran-canaria-insider.info%2F 31.210.96.157 20/Sep/2012 larico.mellodj.com /imghover ?iact=hm&ei=i1D6T-ueMtGzrAeg99DgBg&q=kreativitas&tbs=&page=3&tbnh=122&tbnw=163&start=39&ndsp=27&dur=393&tbnid=A6DmTtDKdV1BeM:&hovh=194&hovw=259&vpx=578&vpy=249&imgurl=http%3A%2F%2Fwww.hotel-hohentwiel.de%2F&imgrefurl=http%3A%2F%2Fwww.hotel-hohentwiel.de%2F&ved=1t:1527,r:3,s:39,i:207&vetl=ms 31.210.96.156 20/Sep/2012 kandira.uksportbook.com /t.gif ?_=1340179656794&count=none&id=twitter-widget-0&lang=id&original_referer=http%3A%2F%2Fwww.gran-canaria-insider.info%2F&size=m&text=Sensus%20Penduduk%202010%20-%20Provinsi%20Kep.%20Bangka%20Belitung&url=http%3A%2F%2Fwww.gran-canaria-insider.info%2F&type=share&twttr_referrer=http%3A%2F%2Fwww.gran-canaria-insider.info%2F&twttr_widget=1&twttr_hask=1&twttr_li=0&twttr_pid=v3:1334627957284262969318907 31.210.96.157 22/Sep/2012 ukla.freelifelinegovernmentcellphone.com /tracker ?event=media_connect_error&source=http%3A%2F%2Fwww.humitas.ch%2F&video_duration=60&domain=videocloud&playlist=1521712908001&video=1216096166001&platform=as3&time=1340354801125&errorCode=NetStream.Play.StreamNotFound&flash_version=WIN%2010%2C1%2C102%2C64&embed=http%3A%2F%2Fwww.humitas.ch%2F&mediaURL=http%3A%2F%2Fwww.humitas.ch%2F&account=89804535001&player_name=Direct%20Lyrics%20Sidebar%20Playlist%20Player(TEMP)&player=1522730664001&video_name=Taylor%20Swift%20Names%20Billboard%202011%20Woman%20of%20the%20Year 31.210.96.156 28/Sep/2012 facuri.chelseyfatula.com /b/ss/marthacom,marthacomglobal/1/H.22.1/s06844347573044 ?AQB=1&ndh=1&t=16/6/2012%2019:6:40%201%20-420&ce=UTF-8&ns=marthastewart&pageName=msl:home:center:277006:bedroom%20and%20bathroom%20decorating%20-%20bedrooms&g=http%3A%2F%2Fwww.jordanbad.de%2F&cc=USD&ch=msl:home&server=www.marthastewart.com&events=event4&h1=msl%7Chome%7Cbedroom-and-bathroom-decorating%7Cbedrooms&c2=home/bed-bath-design-cnt/bedrooms-design&c4=center&c5=8:00AM&c6=Monday&c7=Weekday&v7=New&c9=msl:274564_good%20things%20for%20the%20bedroom&v9=1&c11=msl:home:center:277006:bedroom%20and%20bathroom%20decorating%20-%20bedrooms&c12=msl:274564/good-things-for-the-bedroom/%40center/277006/bedroom-and-bathroom-decorating&v13=D%3Dc2&v14=msl:home:center:277006:bedroom%20and%20bathroom%20decorating%20-%20bedrooms&v15=1&v16=1&v17=1&v18=D%3Dc6&v19=D%3Dc5&v20=D%3Dc7&c22=msl:274564&v22=msl:home:center:277006:bedroom%20and%20bathroom%20decorating%20-%20bedrooms&v29=D%3Dc4&c30=msl:home&v30=msl:home&c32=274564_good-things-for-the-bedroom_235339&c35=msl:home:bedroom-and-bathroom-decorating:bedrooms&v35=D%3Dc35&v36=D%3Dc36&v37=msl:274564&c43=core&c44=msl&v44=D%3Dc44&s=1360x768&c=24&j=1.7&v=N&k=Y&bw=1360&bh=651&p=Shockwave%20Flash%3Bgomtvx%20NIE%20Module%3BAdobe%20Acrobat%3B2007%20Microsoft%20Office%20system%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&AQE=1 31.210.96.155 05/Oct/2012 zhukova.golfnewsnewmexico.com /ads-iframe-display.php ?type=300x250&login=drenth&cat=2&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=1&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0%E2%8A%82=0&text_only=0&show_thumb=0&idzone=72916&idsite=54349&p=http%3A%2F%2Fwww.fachschaft.biz%2F&dt=1340084017069 31.210.96.156 08/Oct/2012 okoegwale.telecomchicago.com /s ?rt=272.001&len=319.44&et=128.16&cr=ID&vtmp=1&st=110.573&lact=38348&nsidf=15&nsiabblmean=34224.855&rendering=software&vh=356&decoding=software&fmt=34&bc=15307812&vw=640&el=detailpage&tsphab=1&h=356&feature=related&nsiabblc=318&volume=37.72893772893773&tspfdt=437&ns=yt&hbt=46.063&sdetail=f:related%2Crv:z3yPu38-Hgs&vid=imcZodS4emPtmXrcgdkbZHu1Heq6jCQyC&tspne=0&hbd=4359611&sd=B6F5EF808HH1340886243377714&w=640&docid=hqOTUV-mLTw&nsiabblmin=329.000&sourceid=yw&nsivbblmax=454321.000&plid=AATDh2gS0g_PYEp9&tpmt=126&bd=1914204&bt=39.928&hl=en_US&ptk=youtube_none&cfps=7.533902561526871&screenw=1024&screenh=768&playerw=640&nsivbblmean=222784.594&referrer=http%3A%2F%2Fmaxifood-group.com%2F&csipt=watch5&nsivbblc=318&scoville=1&nbe=2&md=1&pd=22.283&fexp=920704,921602,919324,913542,907335,922600,919306,913547,907344,907217,912706,919316,902518,924500,906335&playerh=390&mos=0&sendtmp=1&fs=0&nsivbblmin=20.000&audiofactor=0.6067363189289222&nsiabblmax=68237.000&hasstoryboard=1&vq=auto 31.210.96.155