Author Topic: Crimepack domains  (Read 3362 times)

0 Members and 1 Guest are viewing this topic.

November 06, 2010, 06:04:40 pm
Read 3362 times

michajp

  • Full Member

  • Offline
  • ***

  • 59
Injected links like the following:

Code: [Select]
hxxp://inexper.com/count19.php
hxxp://bliman.com/count12.php
hxxp://crunobl.com/count16.php
hxxp://ferefr.com/count17.php
hxxp://reberi.com/count15.php
hxxp://waistor.com/count28.php
hxxp://blackry.com/count21.php
hxxp://wiggete.com/count24.php
hxxp://lageny.com/count27.php

did redirect to these domains:

Code: [Select]
hxxp://expobeam.co.cc/download/?hash=temp123&c=rect&i=2&p=165&refresh=rect&on=image
hxxp://managerexpert.co.cc/news/?db=protected&num=165&refresh=get&term=temp123&a=3
hxxp://managerexpert.co.cc/user/index.php?tid=165&token=temp123&app=undo&db=protected&last=img&pool=protected
hxxp://managerexpert.co.cc/user/index.php?sid=165&name=temp123&pool=5
hxxp://wideaccess.co.cc/wiki/?topic=165&hash=temp123&c=image
hxxp://wideaccess.co.cc/ajax/index.php?tid=165&showtopic=temp123&up=disabled
hxxp://wideaccess.co.cc/user/index.php?e=img&nid=165&showtopic=temp123&i=undo
hxxp://perfectplace.co.cc/download/?pool=image&box=1&pid=165&version=temp123&app=img
hxxp://perfectplace.co.cc/get/index.php?author=temp123&message=165&c=off&refresh=redirect
hxxp://quadpassport.co.cc/images/index.php?cat=165&account=temp123&a=http
hxxp://quadpassport.co.cc/get/index.php?token=temp123&table=param&php=2&php=2&topic=165&ajax=back
hxxp://quadpassport.co.cc/images/index.php?rnd=on&html=rect&pid=165&get=temp123&html=on
hxxp://vicemenu.co.cc/images/?db=rect&catid=165&action=temp123&map=hidden&app=do
hxxp://enginemove.co.cc/images/index.php?refresh=img&num=165&account=temp123&past=text
hxxp://enginemove.co.cc/news/index.php?comment=165&onpage=temp123&past=snd
hxxp://zonepass.co.cc/get/index.php?db=5&on=on&pool=1&msg=165&do=temp123&done=ssl
hxxp://zonepass.co.cc/download/?comment=165&db=post&token=temp123&i=ssl
hxxp://zonepass.co.cc/images/?p=165&nav=temp123&map=post
hxxp://zonepass.co.cc/download/?get=temp123&box=img&comment=165&html=post
hxxp://busygain.co.cc/ajax/?refresh=0&n=165&period=temp123&table=get
hxxp://busygain.co.cc/images/?n=165&get=temp123&on=on
hxxp://staticfiles.co.cc/get/?table=http&msg=165&term=temp123&vid=2
hxxp://staticfiles.co.cc/download/?a=redirect&topic=165&next=text&mode=temp123&php=do&past=4
hxxp://spotones.co.cc/get/?account=temp123&up=on&rnd=on&catid=165&up=snd&a=off
hxxp://spotones.co.cc/news/?hash=temp123&catid=165&xml=0
hxxp://expomatrix.co.cc/ajax/?token=temp123&on=5&page=165&app=http&vid=4&last=back
hxxp://expomatrix.co.cc/news/index.php?version=temp123&nid=165&a=image
hxxp://expomatrix.co.cc/news/?bid=165&refresh=rect&e=redirect&navig=temp123&c=redirect&c=redirect
hxxp://plugindomain.co.cc/get/?cat=165&mode=temp123&html=1
hxxp://plugindomain.co.cc/user/?cat=165&do=temp123&rnd=enabled
hxxp://plugindomain.co.cc/news/?on=enabled&pool=redirect&hash=temp123&p=165&on=0
hxxp://spotredirect.co.cc/images/?bid=165&mode=temp123&pool=rect
hxxp://spotredirect.co.cc/images/?php=1&page=165&hash=temp123&next=post
hxxp://spotredirect.co.cc/download/index.php?pg=165&table=image&author=temp123&php=enabled
hxxp://expoplugin.co.cc/ajax/?term=temp123&catid=165&ajax=4&rnd=back
hxxp://expoplugin.co.cc/get/index.php?box=2&done=protected&name=temp123&acc=165&o=1
hxxp://expoplugin.co.cc/user/index.php?rnd=4&period=temp123&map=1&ajax=hidden&message=165&rnd=undo
hxxp://firstbell.co.cc/wiki/?onpage=temp123&str=off&catid=165&a=ssl&xml=hidden&a=2
hxxp://firstbell.co.cc/news/?version=temp123&sid=165&map=do
hxxp://firstbell.co.cc/ajax/?db=enabled&php=hidden&msg=165&name=temp123&app=get&on=hidden
hxxp://prosuccess.co.cc/get/index.php?term=temp123&page=165&rnd=rect
hxxp://prosuccess.co.cc/images/index.php?name=temp123&msg=165&i=do&table=image&on=do&php=undo
hxxp://prosuccess.co.cc/download/index.php?html=off&xml=redirect&do=temp123&catid=165&vid=disabled
hxxp://firstbell.co.cc/user/index.php?version=temp123&catid=165&map=param
hxxp://firstbell.co.cc/download/?nid=165&nav=temp123&str=param
hxxp://basicicon.co.cc/ajax/index.php?app=disabled&last=get&db=ssl&pid=165&action=temp123&e=image
hxxp://basicicon.co.cc/images/index.php?on=back&nav=temp123&rnd=back&msg=165&db=http
hxxp://basicicon.co.cc/user/?search=temp123&pg=165&db=img&str=3
hxxp://basicicon.co.cc/user/?e=1&comment=165&onpage=temp123&o=redirect&last=param&table=rect
hxxp://bestconnector.co.cc/get/?nav=temp123&ajax=ssl&vid=enabled&str=back&key=165&db=post
hxxp://bestconnector.co.cc/user/?message=165&box=2&token=temp123&php=2&app=snd
hxxp://bestconnector.co.cc/images/index.php?last=http&refresh=undo&sid=165&o=http&author=temp123&e=do
hxxp://bestconnector.co.cc/images/index.php?do=temp123&tid=165&e=rect
hxxp://megaaccess.co.cc/get/index.php?version=temp123&num=165&php=protected&box=http&done=hidden&past=3
hxxp://megaaccess.co.cc/news/index.php?done=0&do=temp123&pool=param&tid=165&c=snd
hxxp://eachbone.co.cc/user/index.php?term=temp123&i=post&p=165&c=redirect
hxxp://eachbone.co.cc/news/?c=img&mode=temp123&page=165&html=redirect
hxxp://eachbone.co.cc/news/index.php?ajax=ssl&period=temp123&tid=165&offset=redirect&rnd=back
hxxp://eachbone.co.cc/wiki/?map=3&page=165&showtopic=temp123&up=redirect&i=http&offset=3
hxxp://peakport.co.cc/get/?nav=temp123&gid=165&offset=do
hxxp://nullportal.co.cc/images/index.php?nav=temp123&comment=165&html=enabled
hxxp://nullportal.co.cc/images/index.php?num=165&box=param&php=4&c=2&mode=temp123&o=rect
hxxp://nullportal.co.cc/get/index.php?done=0&period=temp123&acc=165&on=back
hxxp://nullportal.co.cc/download/index.php?str=text&name=temp123&topic=165&refresh=post&on=get
hxxp://moredisk.co.cc/ajax/index.php?showtopic=temp123&sid=165&html=disabled
hxxp://moredisk.co.cc/download/?past=undo&catid=165&showtopic=temp123&up=1
hxxp://debugresolve.co.cc/images/?account=temp123&bid=165&past=3
hxxp://debugresolve.co.cc/download/?action=temp123&tid=165&str=http
hxxp://cooldatabase.co.cc/get/index.php?n=165&get=temp123&offset=rect
hxxp://cooldatabase.co.cc/wiki/?onpage=temp123&topic=165&a=back
hxxp://softbooster.co.cc/user/?o=0&c=undo&page=165&period=temp123&i=do
hxxp://softbooster.co.cc/images/?msg=165&get=temp123&refresh=enabled
hxxp://winmini.co.cc/news/?a=disabled&gid=165&author=temp123&c=undo
hxxp://winmini.co.cc/ajax/index.php?a=ssl&topic=165&token=temp123&db=hidden&offset=img
hxxp://winmini.co.cc/get/?showtopic=temp123&i=4&app=image&acc=165&next=on&refresh=image
hxxp://mildsite.co.cc/images/index.php?ajax=back&account=temp123&sid=165&up=enabled&map=http
hxxp://mildsite.co.cc/images/?message=165&on=disabled&a=hidden&past=disabled&name=temp123&php=1
hxxp://servicereactor.co.cc/wiki/?o=img&category=165&e=redirect&do=temp123&app=4
hxxp://servicereactor.co.cc/user/?period=temp123&xml=img&done=1&tid=165&e=ssl
hxxp://servicereactor.co.cc/ajax/index.php?html=param&msg=165&version=temp123&html=ssl&app=redirect
hxxp://servicereactor.co.cc/wiki/index.php?message=165&pool=on&term=temp123&app=1
hxxp://zoneclick.co.cc/user/?done=undo&n=165&offset=http&onpage=temp123&ajax=do&i=do
hxxp://betapool.co.cc/download/index.php?a=text&n=165&offset=enabled&period=temp123&pool=on
hxxp://betapool.co.cc/user/index.php?token=temp123&p=165&refresh=img
hxxp://solidredirect.co.cc/get/index.php?bid=165&get=temp123&a=http
hxxp://mildbeat.co.cc/wiki/index.php?nav=temp123&msg=165&html=enabled
hxxp://mildbeat.co.cc/get/?name=temp123&ajax=back&acc=165&o=get&offset=back
hxxp://mildbeat.co.cc/download/?table=enabled&sid=165&showtopic=temp123&map=on
hxxp://moreservice.co.cc/ajax/index.php?showtopic=temp123&msg=165&past=get&offset=5&pool=ssl
hxxp://moreservice.co.cc/wiki/?vid=back&cat=165&db=2&mode=temp123&xml=ssl
hxxp://vicemanager.co.cc/ajax/index.php?catid=165&search=temp123&c=disabled
hxxp://vicemanager.co.cc/wiki/index.php?pg=165&next=param&period=temp123&pool=protected&o=do
hxxp://vicemanager.co.cc/user/?map=0&catid=165&account=temp123&o=on
hxxp://totalcollector.co.cc/download/index.php?n=165&html=5&search=temp123&done=on
hxxp://totalcollector.co.cc/download/?comment=165&rnd=1&onpage=temp123&offset=1
hxxp://totalcollector.co.cc/user/index.php?table=post&term=temp123&refresh=undo&acc=165&o=4
hxxp://peaksuccess.co.cc/user/?hash=temp123&message=165&table=do&xml=1
hxxp://peaksuccess.co.cc/user/?msg=165&period=temp123&refresh=back
hxxp://peaksuccess.co.cc/download/index.php?name=temp123&page=165&xml=off
hxxp://peaksuccess.co.cc/wiki/?period=temp123&num=165&rnd=enabled
hxxp://defenderdebug.co.cc/images/index.php?php=1&period=temp123&pg=165&last=post
hxxp://defenderdebug.co.cc/ajax/index.php?sid=165&map=back&author=temp123&offset=on
hxxp://nicepool.co.cc/download/index.php?app=off&get=temp123&gid=165&pool=post
hxxp://nicepool.co.cc/wiki/index.php?xml=3&version=temp123&comment=165&xml=protected&up=post
hxxp://nicepool.co.cc/wiki/?on=5&page=165&navig=temp123&map=4&app=enabled
hxxp://listcore.co.cc/user/?num=165&author=temp123&html=image&rnd=on&rnd=img&i=text
hxxp://listcore.co.cc/news/?db=1&next=do&comment=165&search=temp123&done=image&php=hidden
hxxp://binarycollector.co.cc/news/index.php?table=do&navig=temp123&topic=165&offset=text
hxxp://greatsavings.co.cc/ajax/index.php?tid=165&account=temp123&app=param&xml=param&box=undo
hxxp://enginebusiness.co.cc/download/index.php?num=165&search=temp123&offset=http
hxxp://enginebusiness.co.cc/wiki/index.php?message=165&account=temp123&table=do
hxxp://enginebusiness.co.cc/ajax/index.php?map=protected&mode=temp123&n=165&app=snd
hxxp://justanalyzer.co.cc/download/?mode=temp123&msg=165&ajax=snd
hxxp://justanalyzer.co.cc/wiki/index.php?category=165&o=2&hash=temp123&map=do&past=protected
hxxp://servicesanalyzer.co.cc/get/index.php?str=enabled&rnd=rect&n=165&showtopic=temp123&i=on
hxxp://servicesanalyzer.co.cc/ajax/?a=text&sid=165&map=2&onpage=temp123&box=img
hxxp://productkey.co.cc/ajax/index.php?vid=snd&showtopic=temp123&refresh=http&bid=165&ajax=hidden
hxxp://productkey.co.cc/get/index.php?done=4&mode=temp123&category=165&str=disabled
hxxp://productkey.co.cc/images/index.php?p=165&author=temp123&vid=enabled&php=do&up=get
hxxp://productkey.co.cc/wiki/index.php?account=temp123&category=165&on=undo&a=off&map=http&i=rect
hxxp://globalicons.co.cc/user/?nav=temp123&message=165&past=image
hxxp://globalicons.co.cc/get/index.php?key=165&ajax=3&do=temp123&ajax=back&next=5&next=enabled
hxxp://globalicons.co.cc/images/?mode=temp123&tid=165&up=redirect&vid=4
hxxp://betaicons.co.cc/download/?html=back&c=3&page=165&navig=temp123&a=protected&past=do
hxxp://betaicons.co.cc/user/?msg=165&next=2&map=get&term=temp123&next=5
hxxp://betaicons.co.cc/user/index.php?showtopic=temp123&topic=165&php=0&up=ssl
hxxp://betaicons.co.cc/get/index.php?msg=165&past=snd&name=temp123&up=5&next=text
hxxp://vivasoftware.co.cc/ajax/index.php?nav=temp123&page=165&table=1
hxxp://vivasoftware.co.cc/user/?c=snd&navig=temp123&bid=165&table=disabled&c=snd
hxxp://vivasoftware.co.cc/user/?i=param&on=4&get=temp123&gid=165&o=hidden
hxxp://dnsdatabase.co.cc/download/index.php?next=image&search=temp123&pid=165&done=ssl&past=4
hxxp://dnsdatabase.co.cc/get/index.php?map=redirect&pid=165&term=temp123&map=enabled
hxxp://dnsdatabase.co.cc/get/index.php?n=165&mode=temp123&c=post
hxxp://softsite.co.cc/ajax/?hash=temp123&bid=165&box=param
hxxp://softsite.co.cc/wiki/index.php?page=165&onpage=temp123&vid=get
hxxp://softsite.co.cc/wiki/?html=redirect&p=165&hash=temp123&str=rect
hxxp://nicedisk.co.cc/news/index.php?account=temp123&key=165&html=3
hxxp://nicedisk.co.cc/download/index.php?acc=165&mode=temp123&offset=3&a=5&table=enabled&c=4
hxxp://nicedisk.co.cc/download/index.php?get=temp123&acc=165&box=image
hxxp://internethelp.co.cc/download/index.php?box=ssl&pid=165&on=param&do=temp123&last=text
hxxp://internethelp.co.cc/images/index.php?table=back&author=temp123&nid=165&db=image&vid=rect
hxxp://internethelp.co.cc/ajax/index.php?version=temp123&sid=165&box=redirect
hxxp://internethelp.co.cc/news/?msg=165&mode=temp123&table=text
hxxp://pluginhelp.co.cc/get/?term=temp123&n=165&rnd=hidden&past=param
hxxp://advanceddebug.co.cc/images/index.php?on=3&bid=165&mode=temp123&pool=off&rnd=get&db=ssl
hxxp://advanceddebug.co.cc/images/?bid=165&term=temp123&offset=0&map=get
hxxp://advanceddebug.co.cc/get/index.php?do=temp123&nid=165&str=post
hxxp://staticresolve.co.cc/get/index.php?map=ssl&showtopic=temp123&past=param&sid=165&html=0
hxxp://staticresolve.co.cc/ajax/index.php?mode=temp123&key=165&pool=http
hxxp://staticresolve.co.cc/wiki/?cat=165&navig=temp123&c=3
hxxp://staticresolve.co.cc/get/?done=do&pg=165&version=temp123&o=5
hxxp://dualanalyzer.co.cc/download/?up=hidden&o=0&i=param&sid=165&token=temp123&last=post
hxxp://dualanalyzer.co.cc/wiki/?comment=165&on=http&showtopic=temp123&on=disabled&next=image
hxxp://windowscontrol.co.cc/user/index.php?nav=temp123&up=image&message=165&past=img
hxxp://dualanalyzer.co.cc/download/index.php?bid=165&c=on&do=temp123&map=0&e=off&table=2
hxxp://basiccollector.co.cc/get/?author=temp123&a=param&message=165&c=4
hxxp://productfiles.co.cc/user/index.php?nid=165&db=4&author=temp123&str=disabled
hxxp://productfiles.co.cc/wiki/?past=post&past=on&mode=temp123&tid=165&app=undo
hxxp://productfiles.co.cc/images/index.php?rnd=text&action=temp123&cat=165&next=hidden&e=back
hxxp://winnews.co.cc/wiki/?box=image&offset=ssl&period=temp123&ajax=enabled&p=165&on=img
hxxp://winnews.co.cc/get/index.php?search=temp123&i=disabled&tid=165&past=post
hxxp://winnews.co.cc/get/?cat=165&account=temp123&table=snd&offset=get
hxxp://winnews.co.cc/wiki/?done=5&php=2&token=temp123&topic=165&c=text&map=img
hxxp://dynamicrouter.co.cc/get/index.php?comment=165&nav=temp123&php=enabled
hxxp://dynamicrouter.co.cc/get/?acc=165&db=back&version=temp123&next=enabled&pool=hidden
hxxp://linkmatrix.co.cc/ajax/index.php?a=back&topic=165&account=temp123&refresh=5
hxxp://linkmatrix.co.cc/wiki/index.php?xml=post&version=temp123&a=protected&pid=165&map=4
hxxp://linkmatrix.co.cc/user/index.php?hash=temp123&acc=165&db=4&past=off
hxxp://dualanalyzer.co.cc/get/?do=temp123&bid=165&xml=get&db=redirect
hxxp://enginelink.co.cc/get/index.php?account=temp123&message=165&map=snd
hxxp://enginelink.co.cc/download/?ajax=ssl&map=0&topic=165&navig=temp123&xml=snd
hxxp://enginelink.co.cc/get/?p=165&account=temp123&a=enabled
hxxp://enginelink.co.cc/download/?i=hidden&topic=165&period=temp123&html=param&rnd=img
hxxp://basicbell.co.cc/wiki/?o=protected&search=temp123&tid=165&o=back&i=hidden
hxxp://basicbell.co.cc/images/?box=4&refresh=on&period=temp123&app=2&p=165&o=2
hxxp://magicmove.co.cc/images/?period=temp123&vid=back&up=img&tid=165&e=4
hxxp://magicmove.co.cc/wiki/index.php?done=enabled&msg=165&showtopic=temp123&pool=on
hxxp://magicmove.co.cc/user/index.php?gid=165&offset=redirect&version=temp123&refresh=protected&refresh=hidden
hxxp://magicmove.co.cc/ajax/index.php?navig=temp123&box=4&category=165&xml=ssl&c=text&e=4
hxxp://megabrowser.co.cc/ajax/index.php?token=temp123&refresh=img&a=rect&tid=165&a=rect
hxxp://megabrowser.co.cc/download/index.php?page=165&do=temp123&refresh=2
hxxp://mainsite.co.cc/get/index.php?i=snd&html=redirect&navig=temp123&key=165&str=disabled
hxxp://magicdefender.co.cc/news/?pool=rect&up=image&account=temp123&table=text&comment=165&i=rect
hxxp://magicdefender.co.cc/user/?o=image&msg=165&o=snd&version=temp123&box=3&i=5
hxxp://magicdefender.co.cc/download/index.php?vid=post&topic=165&mode=temp123&offset=hidden&rnd=4&refresh=enabled
hxxp://mainsite.co.cc/user/index.php?sid=165&next=do&showtopic=temp123&html=hidden&o=image&next=post
hxxp://productmode.co.cc/user/index.php?next=rect&category=165&navig=temp123&on=image&table=hidden&on=http
hxxp://productmode.co.cc/wiki/index.php?version=temp123&num=165&done=disabled
hxxp://productmode.co.cc/user/index.php?a=0&name=temp123&table=redirect&past=disabled&key=165&table=redirect
hxxp://mildbrowser.co.cc/download/?table=4&pg=165&period=temp123&rnd=text
hxxp://mildbrowser.co.cc/images/index.php?hash=temp123&vid=img&app=post&cat=165&on=redirect
hxxp://mildbrowser.co.cc/user/?ajax=redirect&period=temp123&o=rect&message=165&past=on&o=http
hxxp://mildbrowser.co.cc/wiki/index.php?pool=img&acc=165&html=img&token=temp123&up=2
hxxp://rapidicons.co.cc/user/index.php?hash=temp123&up=snd&offset=3&p=165&i=ssl&on=param
hxxp://rapidicons.co.cc/ajax/?comment=165&hash=temp123&up=redirect&ajax=get&e=5&str=ssl
hxxp://fullcore.co.cc/get/index.php?tid=165&get=temp123&xml=disabled
hxxp://fullcore.co.cc/wiki/index.php?e=on&search=temp123&up=4&xml=post&category=165&refresh=do
hxxp://fullcore.co.cc/news/?map=img&up=redirect&msg=165&offset=4&mode=temp123&e=param
hxxp://fullcore.co.cc/images/?next=enabled&a=3&period=temp123&comment=165&str=hidden
hxxp://deepworld.co.cc/download/index.php?offset=rect&term=temp123&topic=165&db=rect&html=4
hxxp://deepworld.co.cc/news/index.php?on=on&vid=protected&bid=165&onpage=temp123&app=snd
hxxp://deepworld.co.cc/get/?n=165&showtopic=temp123&o=2
hxxp://defendericon.co.cc/download/?ajax=snd&map=off&tid=165&showtopic=temp123&e=undo
hxxp://defendericon.co.cc/download/index.php?period=temp123&num=165&xml=hidden&db=on&next=post
hxxp://defendericon.co.cc/images/index.php?table=3&rnd=ssl&xml=enabled&msg=165&nav=temp123&rnd=rect
hxxp://eachdata.co.cc/get/?db=ssl&name=temp123&done=3&xml=undo&p=165&pool=ssl
hxxp://eachdata.co.cc/news/?nav=temp123&pid=165&str=5
hxxp://bulkservice.co.cc/get/index.php?p=165&name=temp123&db=do
hxxp://bulkservice.co.cc/wiki/?pool=image&search=temp123&cat=165&done=4&e=4
hxxp://bulkservice.co.cc/get/?author=temp123&cat=165&e=disabled&map=back&app=param
hxxp://perfectconnector.co.cc/ajax/?done=4&cat=165&refresh=1&onpage=temp123&done=undo&php=ssl
hxxp://perfectconnector.co.cc/download/?term=temp123&message=165&table=off
hxxp://perfectconnector.co.cc/news/?vid=0&navig=temp123&c=snd&last=rect&tid=165&on=post
hxxp://internetcore.co.cc/download/index.php?past=enabled&action=temp123&last=undo&cat=165&done=5
hxxp://internetcore.co.cc/wiki/?xml=image&o=do&hash=temp123&gid=165&app=2&html=enabled
hxxp://totaldata.co.cc/get/?e=4&cat=165&do=temp123&offset=3
hxxp://totaldata.co.cc/download/index.php?xml=param&message=165&navig=temp123&on=undo
hxxp://protectanalyzer.co.cc/download/index.php?showtopic=temp123&php=5&nid=165&refresh=rect&next=snd
hxxp://protectanalyzer.co.cc/download/?e=enabled&table=0&pg=165&version=temp123&offset=ssl&last=text
hxxp://protectanalyzer.co.cc/ajax/index.php?hash=temp123&message=165&last=undo
hxxp://domainpc.co.cc/ajax/?author=temp123&rnd=5&c=2&category=165&box=image
hxxp://domainpc.co.cc/get/index.php?pid=165&token=temp123&refresh=get&ajax=http
hxxp://vicesite.co.cc/download/?category=165&hash=temp123&xml=param
hxxp://vicesite.co.cc/news/index.php?e=snd&map=off&do=temp123&num=165&past=off&php=5
hxxp://vicesite.co.cc/news/?catid=165&html=param&period=temp123&e=0&a=rect
hxxp://vicesite.co.cc/get/?topic=165&author=temp123&on=post
hxxp://winexpress.co.cc/news/?cat=165&db=disabled&term=temp123&rnd=img
hxxp://winexpress.co.cc/download/index.php?nav=temp123&category=165&map=2
hxxp://winexpress.co.cc/user/index.php?php=img&catid=165&name=temp123&past=disabled
hxxp://milddemo.co.cc/images/index.php?str=rect&page=165&rnd=image&past=post&token=temp123&past=2
hxxp://milddemo.co.cc/ajax/index.php?navig=temp123&acc=165&up=text
hxxp://milddemo.co.cc/images/index.php?refresh=http&pg=165&map=on&box=img&navig=temp123&xml=4
hxxp://globalanalyzer.co.cc/ajax/index.php?rnd=ssl&cat=165&hash=temp123&php=disabled
hxxp://globalanalyzer.co.cc/images/?pid=165&showtopic=temp123&up=do
hxxp://realseo.co.cc/news/?version=temp123&message=165&app=enabled
hxxp://realseo.co.cc/download/?navig=temp123&gid=165&refresh=1
hxxp://spotvalue.co.cc/download/index.php?vid=rect&author=temp123&p=165&ajax=3
hxxp://spotvalue.co.cc/ajax/index.php?on=enabled&next=redirect&cat=165&showtopic=temp123&past=snd
hxxp://easyredirect.co.cc/news/index.php?action=temp123&num=165&done=2
hxxp://trustedbell.co.cc/user/?xml=param&comment=165&c=protected&token=temp123&box=get
hxxp://trustedbell.co.cc/news/index.php?gid=165&php=get&showtopic=temp123&map=post
hxxp://trustedbell.co.cc/ajax/?version=temp123&refresh=img&page=165&html=ssl
hxxp://eachrank.co.cc/user/?do=temp123&catid=165&php=undo&vid=3
hxxp://prodefender.co.cc/news/index.php?o=undo&php=1&box=protected&nav=temp123&pg=165&e=undo
hxxp://prodefender.co.cc/news/?hash=temp123&tid=165&table=img&xml=disabled
hxxp://topgain.co.cc/news/?ajax=back&comment=165&offset=post&navig=temp123&last=4&db=4
hxxp://topgain.co.cc/download/index.php?e=get&mode=temp123&n=165&e=4&box=off&up=do
hxxp://busysoft.co.cc/get/index.php?mode=temp123&key=165&xml=http
hxxp://busysoft.co.cc/news/index.php?pid=165&pool=text&period=temp123&map=text
hxxp://busysoft.co.cc/news/?msg=165&done=text&refresh=back&token=temp123&box=protected&box=redirect
hxxp://fastadvisor.co.cc/download/?pool=snd&rnd=redirect&msg=165&account=temp123&e=http
hxxp://ultravalue.co.cc/images/index.php?tid=165&map=protected&onpage=temp123&box=protected
hxxp://ultravalue.co.cc/images/index.php?o=off&cat=165&search=temp123&php=redirect
hxxp://basicinternet.co.cc/wiki/?table=enabled&app=do&action=temp123&topic=165&i=1&offset=protected
hxxp://basicinternet.co.cc/ajax/?topic=165&nav=temp123&app=rect
hxxp://engineboot.co.cc/wiki/index.php?topic=165&name=temp123&xml=redirect
hxxp://mildplan.co.cc/user/index.php?num=165&version=temp123&box=protected&i=snd
hxxp://mildplan.co.cc/get/?get=temp123&comment=165&up=ssl
hxxp://mildplan.co.cc/get/index.php?vid=post&on=post&done=text&name=temp123&catid=165&refresh=http
hxxp://pcbusiness.co.cc/wiki/index.php?gid=165&showtopic=temp123&c=http&pool=4&vid=4
hxxp://pcbusiness.co.cc/wiki/?next=rect&done=protected&tid=165&search=temp123&app=4
hxxp://betaeffect.co.cc/images/?search=temp123&n=165&next=back
hxxp://betaeffect.co.cc/wiki/?version=temp123&past=img&a=img&php=rect&pg=165&box=0
hxxp://truename.co.cc/images/index.php?term=temp123&up=ssl&pg=165&refresh=ssl&rnd=4&map=hidden
hxxp://truename.co.cc/get/index.php?get=temp123&done=text&num=165&a=back
hxxp://truename.co.cc/images/index.php?showtopic=temp123&php=protected&nid=165&past=disabled
hxxp://safeplus.co.cc/user/?html=post&c=get&table=get&cat=165&name=temp123&on=ssl
hxxp://safeplus.co.cc/wiki/index.php?offset=post&up=img&gid=165&do=temp123&o=disabled
hxxp://safeplus.co.cc/user/index.php?msg=165&name=temp123&done=do
hxxp://mildalias.co.cc/user/?author=temp123&comment=165&html=snd&a=on
hxxp://mildalias.co.cc/user/index.php?token=temp123&past=http&bid=165&e=param&a=do
hxxp://magicbrowser.co.cc/user/index.php?sid=165&do=temp123&next=text
hxxp://highonline.co.cc/get/?db=disabled&comment=165&get=temp123&next=4&on=text
hxxp://domainsaddon.co.cc/user/index.php?nid=165&vid=post&token=temp123&box=4&i=0&up=enabled
hxxp://domainsaddon.co.cc/news/?refresh=image&box=on&navig=temp123&gid=165&e=http&next=0
hxxp://domainsaddon.co.cc/ajax/?gid=165&showtopic=temp123&vid=post&i=hidden
hxxp://highonline.co.cc/get/index.php?get=temp123&o=do&n=165&xml=back
hxxp://highonline.co.cc/download/?o=disabled&hash=temp123&p=165&pool=on&app=1
hxxp://highonline.co.cc/get/?pid=165&account=temp123&a=text
hxxp://strongprotocol.co.cc/news/index.php?msg=165&e=protected&search=temp123&done=do
hxxp://strongprotocol.co.cc/images/?showtopic=temp123&message=165&app=5
hxxp://strongprotocol.co.cc/download/index.php?page=165&app=redirect&period=temp123&last=3&last=img
hxxp://domainresult.co.cc/download/?catid=165&hash=temp123&str=post&i=4
hxxp://domainresult.co.cc/images/?done=disabled&up=redirect&p=165&nav=temp123&ajax=img
hxxp://cpuconsulting.co.cc/ajax/index.php?version=temp123&comment=165&next=on
hxxp://cpuconsulting.co.cc/images/index.php?pg=165&a=enabled&table=off&get=temp123&pool=img&db=enabled
hxxp://megamini.co.cc/get/?navig=temp123&nid=165&e=disabled
hxxp://megamini.co.cc/download/?message=165&e=3&ajax=on&author=temp123&box=get
hxxp://megamini.co.cc/download/index.php?table=4&i=get&term=temp123&gid=165&up=hidden
hxxp://zoneconsulting.co.cc/images/?last=ssl&cat=165&refresh=5&on=hidden&onpage=temp123&php=param
hxxp://zoneconsulting.co.cc/news/index.php?nav=temp123&e=redirect&xml=ssl&acc=165&i=snd&next=ssl
hxxp://zoneconsulting.co.cc/get/?hash=temp123&pid=165&pool=post
hxxp://quickrank.co.cc/images/index.php?tid=165&done=disabled&search=temp123&db=enabled&str=http
hxxp://quickrank.co.cc/wiki/?done=off&php=rect&category=165&hash=temp123&offset=rect&ajax=ssl
hxxp://softplugin.co.cc/get/?comment=165&author=temp123&rnd=enabled
hxxp://softplugin.co.cc/get/index.php?do=temp123&on=rect&xml=on&last=hidden&comment=165&app=img
hxxp://softplugin.co.cc/ajax/index.php?search=temp123&i=enabled&cat=165&php=rect
hxxp://defendercult.co.cc/get/?name=temp123&p=165&php=back
hxxp://defendercult.co.cc/ajax/index.php?last=0&mode=temp123&msg=165&rnd=param&xml=disabled
hxxp://defendercult.co.cc/wiki/?page=165&period=temp123&table=image
hxxp://eachpool.co.cc/wiki/?php=redirect&hash=temp123&pg=165&map=post&php=protected
hxxp://topmove.co.cc/wiki/index.php?message=165&nav=temp123&pool=5
hxxp://topmove.co.cc/ajax/?name=temp123&category=165&last=5&str=post&refresh=image
hxxp://greatleader.co.cc/get/?php=back&past=hidden&do=temp123&catid=165&next=http
hxxp://greatleader.co.cc/news/?message=165&c=5&offset=0&navig=temp123&done=hidden&refresh=protected
hxxp://greatleader.co.cc/get/index.php?showtopic=temp123&key=165&table=http&str=1
hxxp://freekey.co.cc/get/index.php?page=165&version=temp123&next=param
hxxp://freekey.co.cc/news/index.php?map=enabled&vid=on&gid=165&mode=temp123&pool=http
hxxp://enginelink.co.cc/ajax/index.php?catid=165&ajax=on&showtopic=temp123&str=enabled&offset=on&box=5
hxxp://enginelink.co.cc/get/?str=post&pid=165&period=temp123&box=disabled
hxxp://enginelink.co.cc/news/?up=text&account=temp123&gid=165&xml=rect
hxxp://basicbell.co.cc/news/?showtopic=temp123&nid=165&next=3
hxxp://basicbell.co.cc/images/index.php?action=temp123&table=enabled&db=hidden&pid=165&next=get&on=do
hxxp://magicmove.co.cc/wiki/index.php?i=protected&showtopic=temp123&past=param&cat=165&offset=rect
hxxp://magicmove.co.cc/images/?action=temp123&category=165&last=on
hxxp://magicmove.co.cc/download/index.php?onpage=temp123&box=disabled&cat=165&past=3&past=0
hxxp://megabrowser.co.cc/images/index.php?nid=165&html=hidden&str=undo&period=temp123&on=on
hxxp://mainsite.co.cc/ajax/index.php?account=temp123&n=165&past=img
hxxp://productmode.co.cc/images/index.php?past=snd&message=165&search=temp123&app=enabled&o=on&db=0
hxxp://productmode.co.cc/user/index.php?comment=165&php=http&mode=temp123&last=back
hxxp://productmode.co.cc/images/?table=disabled&tid=165&action=temp123&i=text&a=post
hxxp://mildbrowser.co.cc/download/index.php?get=temp123&next=protected&a=rect&acc=165&vid=text&ajax=get
hxxp://rapidicons.co.cc/ajax/?xml=rect&db=image&pg=165&period=temp123&o=rect
hxxp://rapidicons.co.cc/user/?pool=1&refresh=off&page=165&version=temp123&xml=enabled
hxxp://fullcore.co.cc/download/?refresh=text&html=redirect&version=temp123&cat=165&past=back
hxxp://fullcore.co.cc/news/?past=http&onpage=temp123&refresh=4&nid=165&last=1
hxxp://fullcore.co.cc/ajax/?rnd=off&o=enabled&n=165&up=param&account=temp123&app=5
hxxp://defendericon.co.cc/user/index.php?gid=165&onpage=temp123&refresh=image&html=off
hxxp://defendericon.co.cc/wiki/index.php?db=text&acc=165&search=temp123&xml=post
hxxp://magicdefender.co.cc/user/index.php?action=temp123&rnd=1&last=2&bid=165&c=2
hxxp://magicdefender.co.cc/images/?tid=165&table=do&refresh=param&xml=param&term=temp123&done=rect
hxxp://magicdefender.co.cc/wiki/index.php?key=165&get=temp123&php=on
hxxp://eachdata.co.cc/news/?navig=temp123&msg=165&last=undo&ajax=do
hxxp://bulkservice.co.cc/user/index.php?search=temp123&box=5&next=image&o=post&acc=165&on=http
hxxp://bulkservice.co.cc/wiki/index.php?get=temp123&offset=http&i=2&num=165&up=img
hxxp://perfectconnector.co.cc/download/?msg=165&name=temp123&on=text&past=protected&a=4
hxxp://perfectconnector.co.cc/ajax/?acc=165&ajax=snd&get=temp123&html=text&map=undo&rnd=do