+ '.micro36.com', // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
+ '.movie1945.com', // by Zhang Teng, content from lineage.jp, hidden JavaScript
+ ),
+ 'mk_slowman at yahoo.com' => array( // by Mike Slowman (mk_slowman at yahoo.com)
+ '.auto-fgen.info',
+ '.fast-marketing.info',
+ '.from-usa.info',
+ '.generic-pharm.info',
+ '.pharm-directory.info',
+ '.popular-people.info',
+ '.safe-health.info',
+ '.star-celebrities.info',
+ '.super-home-biz.info',
+ '.top5-auto.info',
+ '.top5-cars.info',
+ '.vip-furniture.info',
+ '.vip-pc.info',
+ '.vip-pets.info',
+ ),
+ 'abuse at search-store.org' => array(
+ '.travel-gen.info', // by Mike Slowman (abuse at search-store.org)
+ ),
+ 'Leading Edge Marketing Inc.' => array(
+ // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
+ '.abemedical.com',
+ '.attractwomennow.com',
+ '.bettersexmall.com',
+ '.buymaxoderm.com',
+ '.buyvprx.com',
+ '.genf20.com',
+ '.infinityhealthnews.com',
+ '.istnewsletter.com',
+ '.leadingedgecash.com',
+ '.leadingedgeherbals.com',
+ '.leadingedgevipsonly.com',
+ '.lecash.com',
+ '.leminfo.com',
+ '.proextendersystem.com',
+ '.provestra.com',
+ '.semenax.com',
+ '.shavenomore.com',
+ '.theedgenewsletter.com',
+ '.vigorelle.com',
+ '.vigrx.com',
+ '.vigrxplus.com',
+ '.wbstnewsletter.com',
+ ),
+ 'clickx at bk.ru' => array( // by Alexey Enrertov
+ '.coolget*.info' =>
+ '#^(?:.*\.)?' . 'coolget' .
+ '(?:bus|find|news|php|place|post|srch)' .
+ '\.info$#',
+ '.coolgirl*.info' =>
+ '#^(?:.*\.)?' . 'coolgirl' .
+ '(?:apple|fish|search)' .
+ '\.info$#',
+ '.coolmeet*.info' =>
+ '#^(?:.*\.)?' . 'coolmeet' .
+ '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
+ '\.info$#',
+ '.cool**.info' =>
+ '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
+ '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
+ '\.info$#',
+ '.freseasy*.info' =>
+ '#^(?:.*\.)?' . 'freseasy' .
+ '(?:apple|click|find|fish|post|search)' .
+ '\.info$#',
+ '.fres**.info' =>
+ '#^(?:.*\.)?' .
+ 'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
+ '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
+ '\.info$#',
+ // These are not found yet:
+ // fresgirlsrch.info
+ // fresadultapple.info
+ // fresadultclick.info
+ // frestheplace.info
+
+ // 66.232.113.44
+ '.nuhost.info',
+ '.susearch.info',
+
+ // 66.232.126.74(hv94.steephost.com)
+ '.dilej.com',
+ '.fyvij.com',
+ '.howus.com',
+ '.jisyn.com',
+ '.kaxem.com',
+ '.mihug.com',
+ '.mobyb.com',
+ '.qidat.com',
+ '.qihek.com',
+ '.ryzic.com',
+ '.sasuv.com',
+ '.tuquh.com',
+ '.vehyq.com',
+ '.wezid.com',
+ '.wifuj.com',
+ '.xijyt.com',
+ '.zuqyn.com',
+ ),
+ 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru
+ '.hitsearching.info',
+ '.hugeamountdata.info',
+ '.megafasthost.info',
+ '.real-big-host.info',
+ '.search4freez.info',
+ '.yasech.info',
+ ),
+ 'ice--man at mail.ru' => array(
+ // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
+ '.bestcreola.com',
+ '.crekatierra.com',
+ '.creolafire.com',
+ '.crolik.com',
+ '.croller.cn',
+ '.ecrmx.com',
+ '.eflashpoint.com',
+ '.exoticmed.com',
+ '.feelview.com',
+ '.greatexotic.com',
+ '.icrtx.com',
+ '.icyhip.com',
+ '.icyiceman.com',
+ '.icypopular.com',
+ '.iflashpoint.com',
+ '.justmdx.com',
+ '.klickerr.com',
+ '.klickerrworld.com',
+ '.kreolic.com',
+ '.margansitio.com',
+ '.margantierra.com',
+ '.mimargan.com',
+ '.oilkeys.com',
+ '.planetmdx.com',
+ '.thekeyse.com',
+ '.viewgreat.com',
+ '.yourcreola.com',
+
+ // 69.46.23.48
+ '.crekadirecto.com',
+ '.getflashsite.com',
+ '.sucreka.com',
+ ),
+ 'nijeoi at hotmai.com' => array(
+ // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
+ '.bowij.com',
+ '.bozib.com',
+ '.cavux.com',
+ '.dipov.com',
+ '.gumoz.com',
+ '.hakyb.com',
+ '.hehyv.com',
+ '.hepyt.com',
+ '.howoj.com',
+ '.jywaz.com',
+ '.ka4search.info', // Found at faweji.cn/ and jytame.cn/, / forbidden
+ '.kyheq.com',
+ '.kyzad.com',
+ '.qicad.com',
+ '.qubyd.com',
+ '.mocyq.com',
+ '.muloq.com',
+ '.myxim.com',
+ '.nufyp.com',
+ '.waqog.com',
+ '.wyduc.com',
+ '.xefyv.com',
+ '.xomej.com',
+ '.xomip.com',
+ '.xykyl.com',
+ '.zakuw.com',
+ '.zeliw.com',
+ '.zimev.com',
+ '.zipif.com',
+ ),
+ 'niichka at hotmail.com' => array(
+ // 66.232.113.44, the same approach and IP of clickx at bk.ru
+ '.aerosearch.info',
+ '.freader.info',
+ '.info4searchz.info',
+ '.nice-host.info',
+ '.realyfast.info',
+ '.resuts.info',
+ ),
+ 'porychik at hot.ee' => array( // by Igor
+ '.tedstate.info', // "Free Web Hosting"
+ '.giftsee.com',
+ ),
+ 'aofa at vip.163.com' => array(
+ '.bdjyw.net', // by gaoyun, infected images, iframe to 5944.net's VBScript
+ '.5944.net',
+ ),
+ 'zerberster at gmail.com' => array( // by Curtis D. Pick, / not found
+ '.maxrentcar.info',
+ '.newsonyericsson.info',
+ '.pornositeworld.biz',
+ '.rentcarweb.info',
+ ),
+ 'kopper1970 at gmail.com' => array(
+ '.cardealerall.info', // by Green
+ '.donatecarsales.info', // by Sipil
+ '.ringtonewilly.info', // by Sipil
+ '.travelstraveling.info', // by Chinik
+ '.viagrabuyonline.org', // by Sipil
+ '.viagraorderbuy.com', // by Anatol
+ '.worldcuptourism.info', // by Sipil
+ ),
+ 'lisaedwards at ledw.th' => array( // by Lisa Edwards
+ '.globalinfoland.info',
+ '.goodlifesearch.info',
+ '.hotnetinfo.info',
+ '.hotpornmovies.org',
+ '.infopilot.info',
+ ),
+ 'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
+ '.bang-bro.org',
+ '.datinghost.info',
+ '.hello-craulers.info',
+ '.free-blog-host.info',
+ '.sucking-boobs.info',
+ ),
+ 'chub at seznam.cz' => array( // "CamsGen 1.0" by Lee Chen Ho
+ '.allcamsguide.info',
+ '.camerascams.info',
+ '.camerasera.info',
+ '.girlcamsworld.info',
+ '.hiddenlimocams.info',
+ '.redlivecams.info',
+ '.spycamsgear.info',
+ '.spycamssite.info',
+ '.supercamsusa.info',
+ '.thecamsnow.info',
+ ),
+ '87.242.116.81' => array(
+ '.axit.ru', // by Sergej L Ivanov (deeeport at yandex.ru)
+ '.bilbidon.ru', // by Ilya S Vorobiyov (reginamedom at yandex.ru)
+ '.flating.ru', // by Sergej L Ivanov (deeeport at yandex.ru)
+ '.kalisto.ru', // by Vladimir I Sokolov (azimut at gmail.ru)
+ '.sanartuk.ru', // by Vladimir I Noskov (hoskv2003 at gmail.ru)
+ ),
+ '208.70.75.153' => array(
+ '.cerc-fi.info', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-fo.info', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-no.info', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-on.info',
+ '.cerc-sv.info', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-sx.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-te.info', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-tr.info',
+ '.cerc-tw.info',
+ '.cerc-fi.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-fo.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-no.org', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-on.org', // by cerca-one at ya.ru
+ '.cerc-sv.org', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-sx.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-te.org', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-tr.org', // by cerca-one at ya.ru
+ '.cerc-tw.org', // by cerca-one at ya.ru
+ '.cerca-fi.org', // by orgitaly1 at ya.ru
+ '.cerca-fo.info',
+ '.cerca-no.info',
+ '.cerca-on.info',
+ '.cerca-sv.info',
+ '.cerca-sx.org', // by orgitaly2 at ya.ru
+ '.cerca-te.info',
+ '.cerca-tr.info',
+ '.cerca-sx.org',
+ '.cerca-tr.org', // orgitaly1 at ya.ru
+ '.ricerca-fiv.org', // orgitaly1 at ya.ru
+ '.ricerca-fo.info',
+ '.ricerca-one.org',
+ '.ricerca-sv.org',
+ '.ricerca-sx.org',
+ '.ricerca-te.org',
+ '.ricerca-tw.org', // orgitaly1 at ya.ru
+ '.subit01.org',
+ '.subit02.org',
+ '.subit03.org',
+ '.subit04.org',
+ '.subit05.org',
+ '.subit06.org',
+ '.subit01.info',
+ '.subit02.info',
+ '.subit03.info',
+ '.subit04.info',
+ '.subit05.info',
+ '.subit06.info',
+ ),
+ 'ernestppc at yahoo.com' => array( // by Anrey Markov (ernestppc at yahoo.com)
+ '.5-base.com',
+ '.pharmacy-style.com',
+ ),
+ 'snmaster at yandex.ru' => array( // by Andrey M Somov (snmaster at yandex.ru)
+ '.ista-2006.ru',
+ '.wefas.ru',
+ ),
+ 'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
+ '.tourismworldsite.info',
+ '.yourtourismtravel.info',
+ ),
+ 'x-mail007 at mail.ru' => array( // by Boris britva (x-mail007 at mail.ru)
+ '.easyfindcar.info',
+ '.siteinfosystems.info',
+ ),
+ 'smesh1155 at gmail.com' => array(
+ '.hospitalforyou.info', // by Gimmi
+ '.thephentermineonline.info', // by Kipola
+ ),
+ 'supermaster at pisem.net' => array( // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
+ '.kiski.net.in',
+ '.pipki.org.in',
+ '.siski.co.in',
+ ),
+ 'tiptronikmike at mail.com' => array(
+ 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
+ // by Michael Tronik (tiptronikmike at mail.com), e.g.
+ // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
+ // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
+ //'.i0sex.info', // Michael
+ //'.i1sex.info', // Michael
+ //'.i2sex.info', // Martin
+ //'.i3sex.info', // Martin
+ //'.i4sex.info', // Adulterra
+ //'.i5sex.info', // Adulterra
+ //[irvyz]6sex.info not found
+ '.i8sex.info', // by Martin
+ ),
+ 'skuarlytronald at mail.com' => array(
+ '.girlsfreewild.info', // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
+ '.girlsgoingmad.info', // 64.27.13.120
+ '.girlsgonewildside.info', // 64.27.13.120
+ ),
+ '66.232.109.250' => array(
+ '.1626pornporno.info',
+ '.1851pornporno.info',
+ '.1876pornporno.info',
+ '.476pornporno.info',
+ ),
+ 'LiveAdultHost.com' => array( // by Daniel Simeonov (dsim at mbox.contact.bg)
+ '.compactxxx.com',
+ '.eadulthost.com',
+ '.eadultview.com',
+ '.eroticpool.net',
+ '.ipornservice.com',
+ '.liveadulthost.com',
+ '.nudepal.com',
+ '.sweetservers.com',
+ ),
+ 'support at orgija.org' => array(
+ '.assfuckporn.org',
+ '.dosugmos.org',
+ '.fuckporn.org',
+ '.girlsdosug.org',
+ '.girlsporno.org',
+ '.moscowintim.org',
+ '.pornass.org',
+ '.pornopussy.org',
+ '.progirlsporn.org',
+ '.pussypornogirls.org',
+ ),
+ '125.65.112.93' => array(
+ '.gamanir.com', // by yangjianhe (upload888 at 126.com), malicious file
+ '.twurbbs.com', // by mingzhong ni (ggyydiy at 163.com)
+ ),
+ 'm_koz at mail.ru' => array( // 217.11.233.76 by Kozlov Maxim
+ '.beta-google.com',
+ '.tv-reklama.info',
+ '.ebooktradingpost.com', // Anonymous but 217.11.233.76, ns *.ruswm.com
+ '.constitutionpartyofwa.org', // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
+ ),
+ '81.0.195.148' => array( // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
+ '.abobrinha.org',
+ '.aneurysmic.com', // / not found
+ '.physcomp.org', // / not found
+ '.seriedelcaribe2006.org',
+ '.refugeeyouthinamerica.com',
+ ),
+ 'skip_20022 at yahoo.com' => array(
+ // 203.174.83.55
+ '.a28hosting.info', // by Bill Jones
+ '.besthealth06.org', // by yakon, "Free Web Hosting Services" but "BestHealth"
+ '.besthentai06.org', // by yakon
+ ),
+ 'USFINE.com' => array(
+ '.usfine.com', // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
+ '.usfine.net', // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
+ ),
+ '68.178.211.57' => array(
+ '.igsstar.com', // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
+ '.powerleveling-wow.com', // 68.178.211.57 by zhang jun (zpq689 at 163.com)
+ ),
+ 'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
+ '.google-yahoo-msn.org',
+ '.expedia-travel.org',
+ ),
+ 'admin at newestsearch.com' => array( // by Gibrel Sitce
+ '.emr5ce.org',
+ '.wfe7nv.org',
+ '.xyr99yx.org',
+ ),
+ '203.171.230.39' => array( // registrar bizcn.com, iframe + cursor
+ '.playonlinenc.com',
+ '.playboss-jp.com',
+ ),
+ 'Digi-Rock.com' => array(
+ '.rom776.com',
+ // owner-organization: DIGIROCK, INC.
+ // owner-email: domain-contact at digi-rock.com
+ // with an external ad-and-JavaScript,
+ // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
+ // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
+ ),
+ 'snap990 at yahoo.com' => array( // by John Glade (snap990 at yahoo.com)
+ '.date-x.info', // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
+ '.ipod-application.info', // NO IP
+ '.love-total.net', // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
+ '.stonesex.info', // NO IP, was 74.50.97.136
+ ),
+ 'germerts at yandex.ru' => array( // by Sergey Marchenko (germerts at yandex.ru)
+ '.andatra.info',
+ '.banchitos.info',
+ '.batareya.info',
+ '.blevota.info',
+ '.broneslon.info',
+ '.gamadril.info',
+ '.gipotenuza.info',
+ '.govnosaklo.info',
+ ),
+ '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru)
+ '.acronis-true-image.info',
+ '.calcio-xp.info',
+ '.cosanova.info',
+ '.cose-rx.info',
+ '.dictip.info',
+ '.findig.info',
+ '.fotonow.info',
+ '.lavoro-tip.info',
+ '.loan-homes.info',
+ '.mionovita.info',
+ '.mustv.info',
+ '.newsnaked.info',
+ '.online-tod.info',
+ '.opakit.info',
+ '.opanow.info',
+ '.opriton.info',
+ '.porta-bl.info',
+ '.refdif.info',
+ '.xzmovie.info',
+ ),
+ '84.252.148.120 etc' => array(
+ '.isurfind.ru', // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
+ '.planetavilton.info', // 84.252.148.120
+ '.softfind.info', // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
+ ),
+ 'cxh at 99jk.com' => array( // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
+ '.99jk.com',
+ '.99jk.com.cn',
+ '.99jk.cn',
+ ),
+ 'kiler81 at yandex.ru' => array( // by Vasiliy (kiler81 at yandex.ru)
+ '.kliktop.biz',
+ '.kliktop.org',
+ '.pharmatop.us',
+ '.supertop.us',
+ '.supervaizer.info',
+ ),
+ 'infomed2004 at mail.ru' => array( // by Andrey Ushakov (infomed2004 at mail.ru)
+ '.freeamateursexx.info', // 81.0.195.228
+ '.freeanalsexx.info', // 217.11.233.97
+ '.freegaysexx.info', // 81.0.195.228
+ ),
+ 'support at dns4me.biz' => array( // 89.149.228.237 by John Black (support at dns4me.biz)
+ '.abbhi.info',
+ '.gayblogguide.biz',
+ '.huope.info',
+ '.thebdsmday.info',
+ '.zioprt.info', // 89.149.228.237
+ ),
+ 'dzheker at yandex.ru' => array( // by dzheker at yandex.ru
+ '.boblisk.info',
+ '.factyri.info',
+ '.jorge1.info',
+ ),
+ 'lichincool at gmail.com' => array( // 72.232.229.115 by lichincool at gmail.com, / meanless
+ '.bestmindstorm.org',
+ '.redstoreonline.org',
+ ),
+ '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
+ '.8e8ae.net',
+ '.c-cock.com',
+ '.fa59eaf.com',
+ '.set-place.net',
+ '.sex-beauty.net',
+ ),
+ '84.252.148.140' => array( // 84.252.148.140(kratos.mchost.ru)
+ '.tomdir.info',
+ '.tomdirdirect.info',
+ '.tomdirworld.info',
+ '.treton.info',
+ '.trefas.info',
+ '.tretonmondo.info',
+ '.unefout.info',
+ '.unefoutprojet.info',
+ '.unitfree.info',
+ '.vilret.info',
+ '.vilttown.info',
+ '.votrefout.info',
+ '.warmfind.info',
+ '.warptop.info',
+ '.wildtram.info',
+ '.xofind.info',
+ '.xopdiscover.info',
+ '.xopfind.info',
+ '.xoplocate.info',
+ '.xopseek.info',
+ '.xpfirst.info',
+ '.xphighest.info',
+ '.xptop.info',
+ ),
+ 'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
+ '.myviagrasite.com', // 80.74.153.2
+ '.thecanadianmeds.com', // 80.74.153.17
+ ),
+ 'sania at zmail.ru' => array( // by Mark Williams (sania at zmail.ru)
+ '.bigemot.com', // 217.11.233.34, / not found
+ '.espharmacy.com', // 217.11.233.34
+ '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript
+ '.ringtonecooler.com', // 217.11.233.34
+ ),
+ 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn)
+ '.okwit.com', // 220.166.64.44
+ '.sakerver.com', // 220.166.64.194
+ '.motewiki.net', // 220.166.64.194
+ ),
+ 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
+ '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net)
+ '.lookmedicine.info', // 206.161.205.22
+ '.lookshop.info', // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
+ '.searchhealth.info', // 206.161.205.30(seg.fau.lt)
+ '.worldsitesearch.info', // 209.8.40.59
+ ),
+ 'lee.seery at gmail.com' => array(
+ '.klikgoogle.com', // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
+ '.lingvol.com', // 64.21.34.55
+ '.micevol.com', // 64.21.34.55
+ '.heyhey.info', // 64.21.34.55 by anonymous
+ ),
+ '69-64-64-71.dedicated.abac.net etc' => array( // ns *.trklink.com
+ // 69-64-64-71.dedicated.abac.net
+ '.520-ard.info',
+ '.550bcards.info',
+ '.559-cads.info',
+ '.559caard.info',
+ '.565-caaard.info',
+ '.575cadr.info',
+ '.577cadrs.info',
+ '.590-acrds.info',
+ '.596-cadrs.info',
+ '.596caards.info',
+ '.596caaard.info',
+ '.asstablishingcads.info',
+ '.astablish-ard.info',
+ '.astablishcacrds.info',
+ '.begginers-acards.info',
+ '.begginersacrds.info',
+ '.beggingcaaard.info',
+ '.beginercacrds.info',
+ '.cacrdscreating.info',
+ '.caditbegging.info',
+ '.cadr-buildup.info',
+ '.cadr-establilsh.info',
+ '.cadrs-buildercredit.info',
+ '.cadrs570.info',
+ '.cads-565.info',
+
+ // 69-64-64-113.dedicated.abac.net
+ '.interistacards.info',
+ '.intrust-ards.info',
+ '.intrustacrds.info',
+ '.lfixed-ard.info',
+ '.lowerate-ard.info',
+ '.lowpercentage-ard.info',
+ '.lowpercentageacrd.info',
+ ),
+ 'acua at mail.ru' => array(
+
+ // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
+ '.dns4babka.info', // by acua at mail.ru
+ // by webmaster at dns4babka.info
+ '.credh.cn',
+ '.fucfv.cn',
+ '.gdxnk.cn',
+ '.sqrrt.cn',
+ '.ywtmd.cn',
+ '.kncqy.cn', // by webmaster at allmyns.info
+
+ // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
+ '.dedka2ns.info', // by acua at mail.ru
+ // by webmaster at dedka2ns.info
+ '.ascpo.cn',
+ '.jgycr.cn',
+ '.nqdtt.cn',
+ '.oswde.cn',
+ '.qeyig.cn',
+ '.soqsx.cn',
+ '.ukncd.cn',
+ '.zijgb.cn',
+
+ // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
+ '.dns4dedka.info', // by acua at mail.ru
+ // by webmaster at dns4dedka.info
+ '.bcpnb.cn',
+ '.cfbpr.cn',
+ '.dnndb.cn',
+ '.ekwme.cn',
+ '.iutps.cn',
+ '.ryftj.cn',
+ '.vxqcb.cn',
+ '.zxvlr.cn', // by webmaster at allmyns.info
+
+ // by dig at dns4dedka.info
+ '.bdnge.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
+ '.dcdsu.cn', // 217.20.112.102(*.internetserviceteam.com)
+ '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
+ '.frvdv.cn', // 84.16.226.28(*snip*)
+ '.heulw.cn', // 84.16.226.217(mand.zapto.org -- Non-existent)
+ '.hissw.cn', // 84.16.249.240(*snip*)
+ '.lwqjr.cn', // 84.16.255.253(*snip*)
+ '.obwew.cn', // 84.16.251.218(*.internetserviceteam.com)
+ '.otkiu.cn', // 84.16.255.254(*.internetserviceteam.com)
+ '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com)
+ '.rgjcs.cn', // 84.16.251.219(*.internetserviceteam.com)
+ '.rjskp.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net)
+ '.sokrp.cn', // 84.16.226.217(*snip*)
+ '.ubtnp.cn', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de)
+ '.vdecc.cn', // 84.16.226.29(*snip*)
+ '.vgkkc.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
+ '.vqsmy.cn', // 84.16.249.239(*snip*)
+ '.xcmsp.cn', // 84.16.251.223(freebsd .. what)
+ '.xiuky.cn', // 84.16.251.222(*snip*)
+ '.xrqcd.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
+
+ // by la at dns4dedka.info
+ '.aeyzf.cn', // 84.16.251.218(*snip*)
+ '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
+ '.bgslu.cn', // 89.149.228.163(*snip*)
+ '.dxouw.cn', // 84.16.255.253(*snip*)
+ '.ecsbe.cn', // 84.16.251.218(*snip*)
+ '.eothy.cn', // 84.16.249.241(*snip*)
+ '.epocy.cn', // 84.16.251.220(*.internetserviceteam.com)
+ '.ewvjw.cn', // 89.149.196.72(*snip*)
+ '.faacz.cn', // 84.16.251.222(*snip*)
+ '.filun.cn', // 89.149.196.72(*snip*)
+ '.fzdpk.cn', // 84.16.249.239(*snip*)
+ '.hatyg.cn', // 84.16.251.223(*snip*)
+ '.hmtqn.cn', // 84.16.249.240(*snip*)
+ '.ibfte.cn', // 89.149.196.19(*snip*)
+ '.jcaym.cn', // 84.16.249.240(*snip*)
+ '.iqzaw.cn', // 84.16.255.254(*snip*)
+ '.jclsf.cn', // 84.16.249.240(*snip*)
+ '.jefdh.cn', // 84.16.249.240(*snip*)
+ '.kchjh.cn', // 84.16.251.219(*snip*)
+ '.krumo.cn', // 84.16.226.217(*snip*)
+ '.lbava.cn', // 217.20.112.102(*snip*)
+ '.mqrtw.cn', // 84.16.226.29(*snip*)
+ '.njpgv.cn', // 84.16.251.219(*snip*)
+ '.npovm.cn', // 84.16.226.28(*snip*)
+ '.nyobt.cn', // 89.149.196.19(*snip*)
+ '.ovxxt.cn', // 84.16.251.223(*snip*)
+ '.owhwz.cn', // 89.149.228.163(*snip*)
+ '.ozjyi.cn', // 84.16.249.241(*snip*)
+ '.pfnzj.cn', // 84.16.226.217(*snip*)
+ '.pixvf.cn', // 84.16.255.254(*snip*)
+ '.qydph.cn', // 89.149.228.163(*snip*)
+ '.rxens.cn', // 89.149.196.72(*snip*)
+ '.sojbp.cn', // 84.16.249.239(*snip*)
+ '.srths.cn', // 84.16.251.222(*snip*)
+ '.tdytc.cn', // 84.16.255.254(*snip*)
+ '.unquz.cn', // 84.16.251.223(*snip*)
+ '.uwcns.cn', // 89.149.196.19(*snip*)
+ '.vcbdm.cn', // 84.16.251.220(*snip*)
+ '.wnmat.cn', // 84.16.255.253(*snip*)
+ '.wttmr.cn', // 84.16.226.29(*snip*)
+ '.xpwib.cn', // 84.16.251.220(*snip*)
+ '.yrogt.cn', // 84.16.249.239(*snip*)
+
+ // by le at dns4dedka.info
+ '.goslw.cn', // 84.16.251.220(*snip*)
+ '.hqbmh.cn', // 84.16.251.223(*snip*)
+ '.iewik.cn', // 84.16.255.254(*snip*)
+ '.jnkeh.cn', // 89.149.228.163(*snip*)
+ '.pifyp.cn', // 89.149.228.163(*snip*)
+ '.nohyl.cn', // 89.149.196.72(*snip*)
+ '.nvzvx.cn', // 84.16.255.254(*snip*)
+ '.uchoe.cn', // 84.16.249.239(*snip*)
+ '.ujoyf.cn', // 84.16.251.218(*snip*)
+ '.ulfqh.cn', // 89.149.196.19(*snip*)
+ '.vxugv.cn', // 84.16.251.223(*snip*)
+
+ '.dbgti.cn', // 84.16.249.240(*snip*)
+ '.oelmv.cn', // 84.16.226.28(*snip*)
+ '.qniww.cn', // 84.16.251.218(*snip*)
+ '.vtvyq.cn', // 84.16.251.219(*snip*)
+ '.zqonm.cn', // 84.16.249.241(*snip*)
+
+ '.allmyns.info', // 84.16.226.29 by acua at mail.ru, / forbidden
+ // by webmaster at allmyns.info
+ '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS)
+ '.ihpvy.cn', // 84.16.226.28(*snip*)
+ '.lbtuo.cn', // 84.16.255.254(*snip*)
+ '.liunc.cn', // 84.16.249.241(*snip*)
+ '.rcyqr.cn', // 84.16.226.217(*snip*)
+ '.rekth.cn', // 89.149.196.19(*snip*)
+ '.riumh.cn', // 84.16.226.28(*snip*)
+ '.zbtym.cn', // 84.16.251.219(*snip*)
+ '.zjcgx.cn', // 217.20.112.102(*snip*)
+ ),
+ 'gilvcta sy jilbertsbram.com' => array(
+ '.dsfljkeilm1.cn', // 206.53.51.126
+ '.dsfljkeilm2.cn', // 206.53.51.126
+ '.dsfljkeilm3.cn', // IP not allocated now
+ '.dsfljkeilm4.cn', // IP not allocated now
+ '.dsfljkeilm5.cn', // IP not allocated now
+ '.dsfljkeilm6.cn', // IP not allocated now
+ '.dsfljkeilm7.cn', // IP not allocated now
+ '.dsfljkeilm8.cn', // IP not allocated now
+ '.dsfljkeilm9.cn', // IP not allocated now
+ '.dsfljkeilm10.cn', // IP not allocated now
+ ),
+ 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com)
+
+ // 69.64.82.76(*.dedicated.abac.net)
+ '.bruised-criedit.info',
+ '.bruised-crtedit.info',
+ '.bruised-czrd.info',
+ '.bruisedcreditcars.info',
+ '.bruisedcreitcard.info',
+ '.bruisedcreitd.info',
+ '.buliderscreadet.info',
+ '.cleaningup-cdit.info',
+ '.cleaningup-cedict.info',
+ '.cleaningup-cerdic.info',
+ '.cleanup-crrd.info',
+
+ // 69.64.82.77(*.dedicated.abac.net)
+ '.bruised-crediot.info',
+ '.bruised-credtid.info',
+ '.bruisedcriet.info',
+ '.bruisedredit.info',
+ '.buliders-crdt.info',
+ '.buliders-cre4dit.info',
+ '.buliders-creadt.info',
+ '.buliders-credcards.info',
+ '.buliders-credictcard.info',
+ '.cleaningupccreditcards.info',
+ '.cleaningupcdedit.info',
+ '.cleaningupcedirt.info',
+ '.cleaningupceidt.info',
+ '.cleaningupcrasd.info',
+ '.cleaningupcreait.info',
+
+ // 69.64.82.78(*.dedicated.abac.net)
+ '.bruised-cridet.info',
+ '.bruised-drecit.info',
+ '.bruised-reditcards.info',
+ '.bruisedcredikt.info',
+ '.bruisedcredith.info',
+ '.bruisedcredtid.info',
+ '.cleanup-criet.info',
+ '.cleanup-csrds.info',
+ '.cleanup-dards.info',
+
+ // 69.64.82.79(*.dedicated.abac.net)
+ '.bruised-crediotcards.info',
+ '.bruised-creditcar.info',
+ '.bruised-creid.info',
+ '.bruised-creidtcard.info',
+ '.buliders-crdit.info',
+ '.buliders-creadet.info',
+ '.cleaningup-ceridt.info',
+ '.cleaningupcrecit.info',
+ '.cleaningupccritcard.info',
+ '.cleanupdredit.info',
+ '.cleanupredit.info',
+ ),
+ '.malwarealarm.com',
+ // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
+ // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
+ // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
+ '.viagrageneric.org', // IP not allocated, ns *.heyhey.info(IP not allocated)
+ '.viagraorder.org', // IP not allocated, ns *.heyhey.info(IP not allocated)
+ 'Inet-Traffic.com' => array(
+ // "The Inet-Traffic network offers over 6 million unique visitors a month."
+ //'.dcomm.com', // by D Communications Inc. S.A.
+
+ '.freehomepages.com', // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
+ '.inet-traffic.com', // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.114(www.searchit.com -> 205.237.204.151)
+ // ...
+ '.homepagez.com', // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
+ // ...
+ '.pagerealm.com', // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
+ '.koolpages.com', // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
+ '.oddworldz.com', // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cybcity.com', // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cybamall.com', // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
+ '.haywired.com', // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cyberturf.com', // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
+ '.dazzled.com', // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
+ '.megaone.com', // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.131(www.powow.com -> 205.237.204.136)
+ // 205.237.204.132(www.pcpages.com -> 205.237.204.135)
+ // ...
+ '.pcpages.com', // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
+ '.powow.com', // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.143(gameroom.com -> 72.32.22.210)
+ // ...
+ '.searchit.com', // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
+ // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
+ // ...
+ '.gameroom.com', // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
+ ),
+ 'andreyletov at yahoo.com' => array(
+ '.180haifa.com', // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
+ '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
+ '.pills-supplier.com', // 89.248.99.118 by Boris Rabinovich
+ ),
+ 'alrusnac at hotmail.com' => array(
+ '.122mb.com', // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
+ //'.cigarettesportal.com', // 72.36.211.194(*.static.reverse.ltdomains.com)
+ ),
+ '203.116.63.123' => array(
+ '.fast4me.info', // by Hakan Durov (poddubok at inbox.ru), / is blank
+ '.fastmoms.info', // by Pavel Golyshev (pogol at walla.com), / is blank
+ ),
+ 'goodwin77 at bk.ru' => array( // ns *.petterhill.ru
+ '.autotowncar.cn', // 69.73.146.184
+ '.badgirlhome.cn', // 69.73.146.186
+ ),
+ 'Wmp.co.jp' => array(
+ // 219.94.134.208, ns *.dns.ne.jp, adult
+ '.celebe.net', // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
+ '.kousyunyu.com', // Admin/Billing/Tech Email: * at wmp.co.jp
+ // online-support.jp // 202.222.19.81(sv70.lolipop.jp), / blank
+ ),
+ 'Macherie.tv' => array(
+ '.macherie.tv', // 124.32.230.31, pr to himehime.com
+ '.himehime.com', // 124.32.230.94(recruit.macherie.tv)
+ '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
+ ),
+ 'admin at fr4f3ds.info' => array( // 217.11.233.54, / forbidden
+ '.yemine.info',
+ '.fr4f3ds.info',
+ ),
+ '66.232.112.175' => array(
+ '.catybe.cn', // by abuse-here at inbox.ru
+ '.faweji.cn', // by entretov-86 at ftunez.org
+ '.jytame.cn', // by abuse-here at inbox.ru
+ '.wygete.cn', // by abuse-here at inbox.ru