Dear Fortune500: If you see traffic going to these domains, you've been PWND http://www.f-secure.com/weblog/archives/00002505.html (ht @fsecure)