The question remains, how do we convince the limited resources of law enforcement that a spammer is more than "just another spammer" and is actually someone who should be pursued?
As we were looking through spam clusters on the UAB Spam Data Mine this weekend, one interesting pattern stood out, because it seemed to be an indication that a particular viagra spammer may actually be breaking in to websites (that is, committing violations of Title 18 Section 1030, "Computer Intrusion") in order to avoid being caught as a spammer.
This particular spammer sent us 359,205 spam messages between July 14, 2010 and July 30, 2010. While some were part of the group that uses the pattern:
drug-word first-name ## single-letter.ru
such as:
drugsearlie81n.ru
drugsevered38n.ru
drugsgalen74d.ru
drugshewitt18d.ru
drugsjeffry83k.ru
drugskingsley84h.ru
drugslars14n.ru
drugspembroke96s.ru
drugsriley58y.ru
drugswelby44f.ru
erectemmy70j.ru
erectkendricks53f.ru
erectkipp65u.ru
erectlin78m.ru
erectmateo49r.ru
erectmontague29s.ru
erectnorman26y.ru
erectoates91h.ru
erectrochester45v.ru
erectvirgil32q.ru
erectzebadiah53f.ru
medeugene90r.ru
medhallsy90l.ru
medhaydon28m.ru
medirv71r.ru
medkerr99f.ru
medmarkus92g.ru
medmarve20c.ru
mednathan34i.ru
medorion83c.ru
medrodolfo70p.ru
medstanislas30w.ru
medwright43k.ru
onlinedionysus67o.ru
onlinedomenic30y.ru
onlinedonal35s.ru
onlineevered63q.ru
onlinehiram95x.ru
onlinelennie29g.ru
onlinemichel76v.ru
onlineputnem18s.ru
onlinerex79v.ru
onlineric66x.ru
onlinewashington74m.ru
pharmdennison39g.ru
pharmdmitri100w.ru
pharmduke37h.ru
pharmedvard64m.ru
pharmedward90e.ru
pharmfranky22b.ru
pharmharmon55g.ru
pharmmassimiliano76l.ru
pharmmerv65b.ru
pharmvasilis56n.ru
pharmwillis62s.ru
pilldouglas96s.ru
pillgalvin35u.ru
pillgilles66p.ru
pillnevil74n.ru
pillozzy100m.ru
pillperceval95p.ru
pillrafael62w.ru
pillrand38w.ru
pillrich68f.ru
pilltait46y.ru
pillwylie79b.ru
refilleuell67g.ru
refillgodfry93b.ru
refillhaley40t.ru
refilljeddy66n.ru
refillmikol21g.ru
refillparrnell52y.ru
refillpaxon50v.ru
refillpincus65o.ru
refilltamas79f.ru
refillulberto61u.ru
tabdaven30a.ru
tabdonny22g.ru
tabev81y.ru
tabgeorg44n.ru
tabholly40z.ru
tabiosep71x.ru
tabkillian87i.ru
tablorrie41x.ru
tabmicah54i.ru
tabrutger42l.ru
tabshay90s.ru
tabtitos57s.ru
tabtom34o.ru
I was actually far more interested in another subgroup from this spammer.
The 498 websites listed below are each a pre-existing website which has been hacked in the same manner that a phisher may hack a website. In this case a single file has been placed on each server, and it is that file that is used in the spam messages. Although the spam that I used to generate this group was all from July 14 to July 30, 299 of the websites remain "hacked" as of this writing.
If you are a webmaster for one of the sites listed below, we would be very interested in three facts from you:
1) do you have any log or theory showing how your website was hacked?
2) do you have logs that we could review to count how many people "clicked through" your site?
3) have you experienced other forms of defacement since being hacked by the "viagra hacker?"
Please feel free to email me with this type of information at:
g a r @ c i s . u a b . e d u
s2k.dyndns.org /~administrator/court48.html
homes.ieu.edu.tr /~ayamuc/army41.html
mis.im.tku.edu.tw /~benboy21c/alum38.html
banana3306.maido3.com /~bj1461/jejune21.html
siteground222.com /~bjsa1/kike16.html
home.planet.nl /~boend165/pectic60.html
www.ravangrad.net /~brankovica/behalf19.html
c07.future-shop.jp /~c07develop/blimp15.html
www.muslim.org /~convention/zeal34.html
www.createam.hu /~createam.hu_reckitt/pluck65.html
hoanganh.com.vn /~datsach/spicy86.html
www.island.net /~dkay/barbel70.html
cheap-nursery-furniture.info /~epyzul/solar65.html
pshgroup.net /~eusfellt/soviet52.html
gumpert.maiatech.com /~fgpaguest/tweedy86.html
www.sergipehost.com.br /~fotos/unsaid62.html
ns3.bilgehosting.com /~globalko/waylay19.html
www.telusplanet.net /~grimjack/mind98.html
wzserwis.pl /~het/sludge72.html
www.pateco.ch /~island/sleeve27.html
hosting.czechowice.net.pl /~janusz/nephew74.html
strw.net /~jskim/afresh35.html
k-ow.net /~kostek/slat87.html
blinkb.vn /~live/option62.html
www.lqehv.nl /~lqehv/ketch26.html
sv86.wadax.ne.jp /~m-mobius-co-jp/seraph13.html
www.mtvk.pl /~pietrowska/severe15.html
willow.lunarbreeze.com /~rosar5/follow61.html
stu.ntue.edu.tw /~s109613015/frost15.html
intranet.wahyan.edu.hk /~s21881/ashcan48.html
fs2.just.edu.tw /~s9546135/resin84.html
FTP.simonis-web.org /~simonisw/uncork87.html
strony.toya.net.pl /~szatan13/snoot95.html
www6.ocn.ne.jp /~takajolo/nestle48.html
xserver.dfmk.hu /~tigrincs/fillip73.html
www.jagruktimes.com /~tledgeda/namely13.html
aqua.mech.upatras.gr /~tsinop/fluent99.html
www.pinnaclecad.com /~upload/crook50.html
www.imperialprod.fr /~videolfsm/cliff77.html
www.kolumbus.fi /~w496735/punic90.html
master.pl /~wojts/detest79.html
watt22.hu /accede98.html
www.adrrportal.com.br /acrid33.html
burhan94.www.burhan94.bu.funpic.de /addict83.html
www.adixsprawdz.yoyo.pl /amour85.html
www.mieszkanie-warszawa.info /anchor41.html
www.secretsquirrelsports.com /annul73.html
www.enerbat.com.py /arise33.html
jct.co.in /armful48.html
www.orlandogoinggreen.com /arrow86.html
www.webshree.com /arty90.html
evrikashop.gr /ascend68.html
foliyuentech.com /assort66.html
earthbilisim.org /assort83.html
www.bohemiancharm.com /astray90.html
www.gemuender-park-restaurant.de /aura32.html
911-omsk.ru /baccy80.html
www.cracklsat.com /bade71.html
www.webtasarimyazilim.com /baker14.html
solmed.by.ru /ballot24.html
webactive.qupis.com /banal84.html
paketwebhosting.com /bantam97.html
portal.miele.pt /barbel46.html
foundationtattoo.com /baron32.html
theweddingbutler.com /basics88.html
al7anmoon.com /baste31.html
pftf.w.interia.pl /batik60.html
www.deadeternity.hu /bazaar93.html
www.greenpixel.com.ar /beady58.html
www.isiolcum.com /beery93.html
www.pvcontabil.com.br /behalf24.html
www.cortextra.com /belly81.html
www.japastudionet.com.br /besom49.html
abgirl.com.br /bethel98.html
www.themisstisdale.net /better32.html
kvdeoria.org /bias90.html
www.celebicatering.com /bilk91.html
bossmanautos.com /birch66.html
sch-22.by.ru /blase86.html
www.qtech.com.pk /blot34.html
www.recyklaceplastu.cz /bodily41.html
mucraiova.srw.ro /bony48.html
www.mactabilisarts.com /boom18.html
vaojogar.www.webng.com /boot89.html
www.pccel.com.br /boss53.html
www.sonde2000.nl /bowls20.html
mygold.atspace.com /bowser99.html
acornwarehousestorage.com /breeze21.html
sloniki.by.ru /bright10.html
www.drapak.eu /budget78.html
www.kuantosmesescare.pt /bully67.html
igoraha.by.ru /bungle69.html
www.lagerlokal.nu /bursar23.html
obsidianzero.tweakdsl.nl /bylaw63.html
choisis-ta-vie.com /came97.html
www.puma86.yoyo.pl /cancel55.html
assutech.com /canon13.html
www.swedengoinggreen.com /card10.html
www.mucevhermuzayedesi.com /caste13.html
www.elaynafernandez.com /caster73.html
www.alquimiaperfume.com.br /cavil43.html
takumi1067.sakura.ne.jp /cent65.html
mototribo.com.br /center91.html
sieuthigo.com /chalk52.html
adrenaline.mysite4now.net /cheek63.html
strawberrysquare.com /child39.html
barwex.whshost.com /chop22.html
www.moduhall.com /choral11.html
sprng-worck.by.ru /chrome78.html
www.notcommon.com.br /cite33.html
www.cs-fpg.yoyo.pl /clef29.html
villagenorthwest.org /cocoa28.html
filatelista.prodejce.cz /cocoon21.html
ppapaknorthern.com /codger71.html
www.kosmet-udruzenje.net /coir54.html
atmaxlink.com /cola93.html
gravisenergy.com /comfy87.html
www.musiknytt.se /coop23.html
www.daffodilspreschool.in /corbel76.html
adrianpiatek.w.interia.pl /corny90.html
osiris.userclub.be /corpse88.html
choosingdiamonds.com /covet13.html
aiti.runride.com /creamy72.html
bazzar.t35.com /crock63.html
s186623472.onlinehome.us /crummy28.html
jawa50-typ05.czweb.org /crunch36.html
tumbaiball555.freehostia.com /crutch17.html
safensureindia.com /cubit24.html
www.altunbasinsaat.net /cumber96.html
islaminur.awardspace.biz /cupric89.html
www.48film.co.th /curfew63.html
www.linearunit.com /curtsy29.html
www.washingtongoinggreen.com /cutout18.html
www.taslicayliyiz.biz /cyst42.html
lesovik.euweb.cz /darken97.html
slotha.homepage.dk /days66.html
wl2www911.webland.ch /decor73.html
www.pavelmalon.unas.cz /defeat54.html
www.kohalalhub.com.my /deism33.html
www.diamantschleifer.de /deism80.html
canalsims.awardspace.co.uk /delta87.html
doliveira.com.br /derive73.html
www.mark4polo.ch /devil18.html
www.pracadom.yoyo.pl /devout21.html
www.andrewplynch.com /dogged15.html
bublaci.unas.cz /dogs10.html
www.atelier-epure.ca /donor46.html
ftp2.matsonmultimedia.com /dottle73.html
www.napfenystudio.hu /drafty65.html
www.gumuselbetonboru.com /drag91.html
nuntab.50webs.com /ducat69.html
1300visahelp.com /duffel58.html
www.nail-wire.com /duly53.html
www.cardsolutions.us /earful94.html
macius210.w.interia.pl /earthy52.html
www.pharmdmand.com /eats78.html
danielconsultancy.com /egoism77.html
gluskonline.by.ru /emblem45.html
www.pasa.fr /emboss55.html
akuzmin.100webspace.net /encore66.html
kurumsalofis.com /enjoin86.html
netxplor.3x.ro /enter72.html
12popugaev.vndv.com /entice57.html
rafael.3x.ro /entity59.html
www.alpaltay.com /escort80.html
reklama-spb.by.ru /ethics14.html
www.gizliarkadas.net /evade74.html
cangkal.com /evil23.html
www.enlytetheworld.com /except15.html
www.kiss-mezeskalacs.hu /exhale52.html
www.navkarstationers.in /exhort18.html
katya-nail.by.ru /exhume77.html
www.ayseyildirim.com /eyeful47.html
mechuleyolculuk.com /famed99.html
chevalierglobalng.com /fiasco48.html
airplanegear.com /filter31.html
www.naasty.com /finite99.html
topido.365managed.net /firm92.html
markterlbach-ditib.freewebhostx.com /first64.html
www.ace-online.yoyo.pl /fleecy91.html
surf-roma.by.ru /foeman21.html
olajos.net /folio47.html
www.HolidayClassic.com /follow16.html
gazgaz.by.ru /freak58.html
www.pctools.com /free-antivirus/
www.eliteweb.com.br /frigid65.html
intelligender.com /frond96.html
www.yumurtakabugu.com /frothy99.html
www.dewfrm.net /gaff81.html
www.cxiome.es /gasman93.html
sistemweb.tk /gent33.html
lockerzinvite.kolgames.us /giggle12.html
gagankalra.vndv.com /girdle89.html
www.teamkreativ.net /gladly87.html
sirokujira.s79.coreserver.jp /glebe63.html
snezhena.by.ru /glide45.html
neaster.bplaced.net /goer74.html
www.unicaro.pt /grate79.html
www.4wd1.com /grey99.html
www.rbmphoto.altervista.org /grin16.html
www.bioplastica.it /grouse72.html
novah.by.ru /growl35.html
myped.com.tr /gunnel71.html
xox.awardspace.us /halma11.html
www.2gservis.cz /halve17.html
www.tucsoncondominiumsguide.com /haver48.html
shaoz3.hosting.paran.com /heel17.html
www.hunermund.dk /hereof79.html
www.auto-gric.info /hewn37.html
davetiyeniz.net /hewn51.html
webart.unas.cz /hippy95.html
erkeh.com /hoary69.html
www.enginerge.com /hobo23.html
www.dj-alih.fr /homily41.html
ferdiii.vndv.com /homing82.html
mujtaba316.www.mujtaba316.webng.com /husky74.html
seslinur.com /ikon10.html
amorequartet.com /impair93.html
kamadokura.com /impose72.html
www.tcskolkata.com /inert67.html
www.mgfsrl.it /input63.html
www.mobiliaria.com.br /inside49.html
www.nti.nagaloka.org /insult85.html
myhotels.com.my /intent54.html
coleqa.www.coleqa.co.funpic.de /inward75.html
golonka.unas.cz /italic58.html
www.kaderkarakus.tk /item56.html
lkw7854.com.ne.kr /jabber50.html
www.cle-is.be /jaunty26.html
bioedem.gr /jersey38.html
www.karproduksiyon.com /jigger60.html
shent.kbs.seoul.kr /joyous14.html
lingua-dz.com /karate21.html
www.rajaahaider.com /khan89.html
detalirovka.ru /kidney94.html
read4us.50webs.com /kilo91.html
alphabtech.com /kinky25.html
akj-sbk-production.com /kitten33.html
www.rainmakerfg.com /kneel50.html
samsam.wippiespace.com /late12.html
www.cognitoconcepts.com /launch64.html
hammermap.by.ru /leech83.html
rangelmuebles.mx /leek89.html
teplograd.by.ru /leer31.html
www.bware.se /letup92.html
ilios.pl /liable65.html
tuga-information.frag-power.com /lights23.html
rsanacona.bplaced.net /lilac35.html
www.lsac.com /lint37.html
pridehomecare.com /lisle70.html
www.genyas123.chat.ru /lisp91.html
www.sardunyabar.com /lobby92.html
teplieokna.by.ru /lobe45.html
www.tsdpierron.es /locker89.html
zajosi.borec.cz /lollop18.html
www.expressodasnove.pt /lusty88.html
michaelastastna.euweb.cz /malt37.html
www.offre-emploi-php.fr /mantle29.html
www.roti4u.com /maraud76.html
eonlinecash.50webs.com /marmot29.html
www.4652323.com /marvel94.html
gim5.by.ru /masked69.html
www.4thirds.co.za /mason86.html
carrieall.com /medic25.html
newteknik.com /meed78.html
www.tesfe.yoyo.pl /menses75.html
www.sabitkanat.com /merge38.html
unmicrc.org /midway47.html
www.kubzavod.com /mimosa13.html
www.newarkgoinggreen.com /mingle81.html
www.crin.es /mingy35.html
www.creativeplacement.org /misled28.html
lpg.sml.by /mock52.html
www.savethelight.wz.cz /moiety61.html
www.cruzdasalmas.ba.gov.br /mores15.html
bskdou27.by.ru /mouser59.html
inventosweb.freehostia.com /mugger88.html
www.foxmind.yoyo.pl /mulch52.html
trojka.s3.pl /mullah16.html
voyrising.com /mumble54.html
www.ewebvision.co.in /munch83.html
poortal.ru /musky91.html
musegallery.co.il /muted56.html
www.villederigaud.com /nabob97.html
www.saribekir.com /napalm59.html
cleaningcontractor.com.au /napalm93.html
phonies.cz /nibs38.html
qlkt39a.com /niter51.html
leandromauricio.com /noble52.html
heblakostravice.unas.cz /nodal83.html
mob39.by.ru /norman26.html
www.sonodyne.com /notice73.html
botom.piwko.pl /obtain92.html
www.garlandgoinggreen.com /odium81.html
teplovent.by.ru /office19.html
nifia.net /olive82.html
soysaldanismanlik.com /omega68.html
wl31www162.webland.ch /opener76.html
edisongame.com /orgasm67.html
atlanta.webservis.ru /orgy39.html
www.sinaitech.net /other69.html
vensalabs.com /otter10.html
arlabrise.be /ozone26.html
www.polskanet.yoyo.pl /pail72.html
all4mlm.com /pain55.html
hotelhindustaninternational.net /pall42.html
www.mojserwisik.yoyo.pl /palter17.html
zvi.by.ru /pansy88.html
temptingcareers.com.sg /panty12.html
www.wwqccertifications.com /parry79.html
www.judgesworld.de /parse13.html
bettymude.h800051.serverkompetenz.net /passim82.html
www.haixingbaby.com /pasty11.html
www.hoteldemunck.com /pasty95.html
www.lifestyleweightmanagement.com /patter26.html
www.gateway-riga.com /pawn66.html
www.lumutwaterfrontvilla.com /peahen41.html
finodezhda.ru /pebble45.html
mahacandu.com /peek92.html
sola2379.avafreehost.com /perk16.html
strempacklaw.com /pewit91.html
dmkmusic.by.ru /pick11.html
www.a-d-c.fr /pierce14.html
www.colorschemepainting.com /pivot68.html
www.jasprabh.com /planet40.html
legacy-studios.co.uk /plexus75.html
vsxwebdesign.com /polish66.html
vakum.com.tr /pomade34.html
profit-group.org /pommel87.html
www.eriegoinggreen.com /pommy11.html
www.lorenz-frank-privat.de /pong93.html
agapoll.com /pother64.html
cwr.uz /pram55.html
cyber-work.by.ru /prig62.html
greyhawk.by.ru /prison31.html
arnaldofoto.com.br /prole60.html
apexkarting.com /psych56.html
www.ramatci.com /pukka63.html
kinfo.110mb.com /puny76.html
www.arditech.es /purge79.html
www.svetcollege.com /purify67.html
sweetart-ist.com /python95.html
www.garykonet.com /quaint15.html
aerion.by.ru /quaver48.html
www.pazalocristiano.com /quell43.html
home.netsocius.com /quilt87.html
www.drjoshicancercentre.com /quiz77.html
videorelax.by.ru /rabies33.html
eddieth.info /ragbag98.html
www.gamesjockey.com /rail88.html
www.maxlks.info /rake18.html
www.callbihar.com /rally64.html
kucirkova.borec.cz /rascal34.html
baktianggun.com /ratter25.html
www.bassoy.com /raven45.html
www.legasolv.com /rear40.html
www.rdsfacades.fr /reborn40.html
www.anacatarinamendes.net /redden13.html
www.cevizfidan.com /redden14.html
www.team04.net /redo65.html
krumovgrad.cult.bg /reecho89.html
visual-identity.tv /regime82.html
amerginconsulting.com /rejoin16.html
oportal.czweb.org /relive14.html
ntw.com.vn /remake47.html
npf.dev.mvisolutions.com /repent34.html
www.zacariasdecarvalho.pt /reset14.html
www.subbucmda.com /revers28.html
www.gigiorosapromotions.it /revile54.html
www.bondwest.com.hk /revoke32.html
lepes.com.ar /ribald23.html
virazh-shin.by.ru /ribbed74.html
arora360.com /rigor81.html
www.hkz-zgorzelec.yoyo.pl /ring75.html
www.sanskriti.asia /role87.html
www.homemadeworkshops.nl /rota47.html
software.hso.uk.com /rough14.html
www.jab.com.br /rounds29.html
www.viasae.it /rowdy24.html
stronghold.aspweb.cz /royal56.html
www.piramithouse.com /ruling50.html
www.mystars.by.ru /rumple99.html
www.rikaret.com.tr /rust36.html
dropbox.literacywings.com /sahib60.html
orhanerdem.co.cc /satrap74.html
intimtempmor.racyspace.com /save52.html
www.roubenky.kvalitne.cz /saver47.html
www.novusyapitasarim.com /savoy44.html
asianhotelhcmvn.com /scow49.html
www.decaclub.com.br /scrap42.html
www.clevelandgoinggreen.com /script91.html
www.energieplomberie.fr /second92.html
mmorpgword.altervista.org /sepsis28.html
la155-13.by.ru /shabby69.html
tecompressor.com /shame95.html
interdoors.by.ru /shelf34.html
www.home-interiors.net /shine32.html
sumitelectronic.com /shoe52.html
www.goldsmithinfantschool.co.uk /shore30.html
sdzp.php5.cz /sifter23.html
4bike.cz.cr /silver65.html
www.voteforcars.com /sixths94.html
www.iepse.com.ar /skied30.html
ganyeladim.co.il /skive30.html
model.awardspace.biz /slangy75.html
www.artgemeos.com.br /slime75.html
www.gtamm.yoyo.pl /slip64.html
www.ubranka-karasek.yoyo.pl /slunk65.html
gaelle.100webspace.net /snag46.html
www.sesagold.com /snore42.html
client.sakura.ne.jp /snow70.html
www.ozgurcay.com.tr /soften42.html
www.aquamatik.hu /softy64.html
collection.symmes.ca /sonic74.html
www.xtreamxat.iglu.cz /soot31.html
vivresansetre.fr /sore76.html
a-vt.chytrak.cz /spiky17.html
shelden.by.ru /spill67.html
cibersport.by.ru /spume57.html
hsami.ir /stakes13.html
www.kaplandoors.com /stalls19.html
www.phuromanwojcik.pl /steep59.html
borinqueneers.com /stores43.html
ftpservice.vtsclima.com /strafe58.html
www.esolzdemos.com /stun71.html
transportgodek.home.pl /subtle17.html
www.boonsiriplace.com /suffer98.html
www.e-gmp.home.ro /sulk53.html
www.sunfavorite.com /sulk89.html
www.pibtoledo.org.br /sunray86.html
grze.no.eu.interia.pl /superb22.html
www.cirkusdannebrog.dk /synod29.html
www.kleine-wienker.net /tale38.html
sahyogsociety.com /tampon63.html
preposted.voteplayer.com /tandem40.html
www.amgrafica.it /tansy93.html
www.cambridgegoinggreen.com /tare12.html
www.g5interlinks.com /tattle97.html
waubonsiehockey.com /telfer37.html
hottdotnet.com /tenet16.html
files.fastand.it /that92.html
checkmatepictures.com /thief58.html
rojek.ro.funpic.de /thong34.html
www.ravas.be /thrive31.html
tarjasubory.euweb.cz /thwack31.html
auroraproduccionesdigitales.com.mx /tickle12.html
for-mina.110mb.com /tiepin12.html
www.wetwellsoftware.com /titan54.html
austsecurityfencing.com.au /titter34.html
www.desafioactivia.com.br /togs78.html
tr-al5jal.com /toot39.html
fuzzcats.com /toot89.html
ivms.by.ru /tooth67.html
lesalitedeicampioni.com /topple96.html
softpro.vov.ru /tory36.html
garceslaw.com /tour34.html
www.pattisongc.com /trawl29.html
fejeshangszer.hu /tsar40.html
impresscreations.com /tube21.html
www.asce-ymf.org /tummy12.html
school1115811.web.fc2.com /tumult25.html
www.inz.cz /twang64.html
www.forestgarden.kr /twice11.html
www.italianpeople-lifestyle.com /twine30.html
www.huubdanst.nl /twinge91.html
batya.euro.ru /unison29.html
freelanceblacklist.by.ru /unkind61.html
filonw.w.interia.pl /unless35.html
fsmobility.com.tr /unzip42.html
www.unephoto.fr /uphold75.html
www.smsleaders.com /upland46.html
www.dimextranet.com.br /uptake56.html
abekawamochi.t35.com /user84.html
www.scaraniboats.com /valse64.html
ptberkahcitra.com /veldt68.html
www.okutanayakkabi.com /verb66.html
www.style-polish.co.il /vice85.html
www.gismovitale.com /virgin13.html
www.zoomelece.be /vulgar98.html
raida.s162.coreserver.jp /wart95.html
www.filmyfilmy.yoyo.pl /wave96.html
www.efekorgida.com.tr /weeds15.html
sever7.s277.xrea.com /weedy29.html
clan.grom.eu.interia.pl /week60.html
pousadaserradamantiqueira.com.br /welch75.html
kongsiblog.org /whaler37.html
daythi.69server.net /whites70.html
ceeshunit.atspace.com /whys96.html
vtech.p9.pl /widely56.html
guu-15.by.ru /wigged68.html
hotelconxions.com /wilful18.html
karmabilgisayar.com /will96.html
artvin.tsf.org.tr /winner68.html
rockinsesi.com /wonder83.html
www.as-vclub.com /woozy54.html
gb.comuse.org /wrung18.html
www.cuneytergun.com /yank71.html
wisdommbc.go.ro /yeah13.html
www.magnesat.com.br /yeast50.html
The websites which remain in their "hacked" state redirect to one of the following 35 viagra-sales websites:
count redirection URL
====== ===================================
4 http://bestviagracenter.com:8080/
6 http://bestviagrapills.com:8080/
24 http://buyviagraworld.com:8080/
9 http://chpmedic.com/
4 http://dedcanadadrugs.com/
11 http://esuperviagra.com/
9 http://expressviagraonline.com:8080/
7 http://lemedic.com/
26 http://mybestviagra.com:8080/
8 http://naturalviagraonline.com:8080/
1 http://thenaturalviagra.com:8080/
18 http://theviagrapills.com:8080/
1 http://viagrapriceline.com:8080
23 http://viagrapriceline.com:8080/
107 http://www.czmedicine.com/
2 http://www.fepharmacy.com/
2 http://www.hypharmacy.com/
1 http://www.kepharmacy.com/
8 http://www.litmedic.com/
6 http://www.mamedic.com/
1 http://www.medicineac.com/
2 http://www.medicinecy.com/
1 http://www.medicinegl.com/
1 http://www.medicinelo.com/
2 http://www.medicinelu.com/
2 http://www.medicineor.com/
1 http://www.medicineps.com/
1 http://www.papharmacy.com/
1 http://www.pharmacyan.com/
4 http://www.pharmacydg.com/
2 http://www.pharmacyry.com/
1 http://www.pharmacyth.com/
1 http://www.pharmacytl.com/
1 http://www.phmedicine.com/
1 http://www.tepharmacy.com/
No comments:
Post a Comment