Domains that where included from http://security-research.dyndns.org/pub/malware-feeds/ponmocup-botnet-domains.txt

checkwebspeed.net
intromem.com
montyinc.net
neededpay.com
victoryltd.net