+ // 125.65.112.11
+ // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
+ 'shoopivdoor.w19.cdnhost.cn', // web001.cdnhost.cn
+ '.shoopivdoor.com',
+
+ // 125.65.112.12
+ // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
+ '.hosetaibei.com',
+ '.playsese.com',
+
+ // 125.65.112.13
+ // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
+ '.ahatena.com',
+ '.asdsdgh-jp.com',
+ '.conecojp.net',
+ '.game-oekakibbs.com',
+ '.geocitygame.com',
+ '.gsisdokf.net',
+ '.korunowish.com',
+ '.netgamelivedoor.com',
+ '.soultakerbbs.net',
+ '.yahoo-gamebbs.com',
+ '.ywdgigkb-jp.com',
+
+ // 125.65.112.14
+ // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
+ '.acyberhome.com',
+ '.bbs-qrcode.com',
+ '.gamesroro.com',
+ '.gameyoou.com',
+ '.gangnu.com',
+ '.goodclup.com',
+ '.lineage321.com',
+ '.linkcetou.com',
+ '.love888888.com',
+ '.ragnarok-bbs.com',
+ '.ragnarok-game.com',
+ '.rmt-navip.com',
+ '.watcheimpress.com',
+
+ // 125.65.112.15
+ // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
+ '.18girl-av.com',
+ '.aurasoul-visjp.com',
+ '.gamaniaech.com',
+ '.game-mmobbs.com',
+ '.gameslin.net',
+ '.gemnnammobbs.com',
+ '.gogolineage.net',
+ '.grandchasse.com',
+ '.jpragnarokonline.com',
+ '.jprmthome.com',
+ '.maplestorfy.com',
+ '.netgamero.net',
+ '.nothing-wiki.com',
+ '.ourafamily.com',
+ '.ragnarok-sara.com',
+ '.rmt-lineagecanopus.com',
+ '.rmt-ranloki.com',
+ '.rogamesline.com',
+ '.roprice.com',
+ '.tuankong.com',
+ '.twreatch.com',
+
+ // 125.65.112.22
+ // The same IP: web013.cdnhost.cn
+ '.lzy88588.com',
+ '.ragnaroklink.com',
+
+ // 125.65.112.24
+ '.rmtfane.com',
+ '.fc2weday.com',
+ '.nlftweb.com',
+
+ // 125.65.112.27
+ '.i520i.com',
+ '.sunwayto.com',
+
+ // 125.65.112.31
+ // The same IP: web016.cdnhost.cn
+ '.twyaooplay.com',
+
+ // 125.65.112.32
+ // The same IP: web037.cdnhost.cn
+ '.emeriss.com',
+ '.raginfoy.com',
+ '.ragnarokgvg.com',
+ '.rentalbbs-livedoor.com',
+ '.romaker.com',
+ '.sagewikoo.com',
+ '.samples112xrea.com',
+ '.wiki-house.com',
+
+ // 125.65.112.49
+ '.chaosx0.com',
+
+ // 125.65.112.88
+ // The same IP: web015.cdnhost.cn
+ '.a-hatena.com',
+ '.biglobe-ne.com',
+ '.blogplaync.com',
+ '.din-or.com',
+ '.dtg-gamania.com',
+ '.fcty-net.com',
+ '.game-fc2blog.com',
+ '.gameurdr.com',
+ '.getamped-garm.com',
+ '.interzq.com',
+ '.linbbs.com', // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
+ '.luobuogood.com',
+ '.ragnarok-search.com',
+ '.rinku-livedoor.com',
+
+ // 125.65.112.90
+ '.gtvxi.com',
+
+ // 125.65.112.91
+ // The same IP: web004.cdnhost.cn
+ '.6828teacup.com',
+ '.blog-livedoor.net',
+ '.cityblog-fc2web.com',
+ '.deco030-cscblog.com',
+ '.imbbs2t4u.com',
+ '.k5dionne.com',
+ '.lineagejp-game.com',
+ '.mbspro6uic.com',
+ '.slower-qth.com',
+ '.wikiwiki-game.com',
+
+ // 125.65.112.93
+ // The same IP: web022.cdnhost.cn
+ '.aaa-livedoor.net',
+ '.cityhokkai.com', // web022.cdnhost.cn
+ '.fanavier.net',
+ '.geocitylinks.com', // web022.cdnhost.cn
+ '.kuronowish.net', // web022.cdnhost.cn
+ '.ro-bot.net',
+
+ // 125.65.112.95
+ // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
+ '.23styles.com',
+ '.aehatena-jp.com',
+ '.ameblog-jp.net',
+ '.antuclt.com',
+ '.blog-ekndesign.com',
+ '.d-jamesinfo.com',
+ '.editco-jp.com',
+ '.ezbbsy.com',
+ '.extd-web.com',
+ '.fotblong.com',
+ '.game62chjp.net',
+ '.gamegohi.com',
+ '.gamesmusic-realcgi.net',
+ '.gamesragnaroklink.net',
+ '.homepage-nifty.com',
+ '.ie6xp.com',
+ '.irisdti-jp.com',
+ '.jklomo-jp.com',
+ '.jpxpie6-7net.com',
+ '.lian-game.com',
+ '.lineage-bbs.com',
+ '.lineage1bbs.com',
+ '.livedoor-game.com',
+ '.litcan.com',
+ '.lovejpjp.com',
+ '.m-phage.com',
+ '.muantang.com',
+ '.plusd-itmedia.com',
+ '.runbal-fc2web.com',
+ '.saussrea.com',
+ '.tooalt.com',
+ '.toriningena.net',
+ '.yahoodoor-blog.com',
+ '.yy14-kakiko.com',
+
+ // 125.65.112.137
+ '.clublineage.com',
+
+ // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
+ '.kaukoo.com', // 219.153.14.228, by zeng xianming (expshell at 163.com)
+ '.linrmb.com', // 219.153.14.228, by zeng xianming (qqvod at qq.com)
+
+ '.ptxk.com', // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
+ '.rormb.com', // 222.73.236.239, by zeng xianming (qqvod at qq.com)
+
+ '.games-nifty.com', // 255.255.255.255 now
+ '.homepage3-nifty.com', // 255.255.255.255 now
+ ),
+ 'caddd at 126.com' => array(
+ '.chengzhibing.com', // by chen gzhibing
+ '.jplinux.com', // by lian liang
+ '.lineageink.com', // by cai zibing, iframe to goodclup.com
+ '.lineagekin.com', // by cai zibing, iframe to goodclup.com
+ '.tooplogui.com', // by zibing cai
+ '.twsunkom.com', // by guo zhi wei
+ '.twmsn-ga.com', // by guo zhi wei, iframe to grandchasse.com
+ ),
+ 'nuigiym2 at 163.com' => array( // by fly bg
+ '.linainfo.net', // Seems IP not allocated now
+ '.lineagalink.com', // 220.247.157.99
+ '.lineagecojp.com', // 61.139.126.10
+ '.ragnarokonlina.com', // 220.247.158.99
+ ),
+ 'aakin at yandex.ru' => array(
+ // 89.149.206.225(*.internetserviceteam.com) by Baer
+ '.entirestar.com',
+ '.joppperl.info',
+ '.onlinedrugsdirect.com',
+ '.pilkazen.info',
+ '.superbuycheap.com',
+ '.supersmartdrugs.com',
+ '.thecheappillspharmacy.com',
+ '.topdircet.com',
+ ),
+ 'newblog9 at gmail.com' => array( // by jiuhatu kou
+ '.tianmieccp.com',
+ '.xianqiao.net',
+ ),
+ 'm.frenzy at yahoo.com' => array( // by Michael
+ '.p5v.org',
+ '.j111.net',
+ '.searchhunter.info',
+ '.soft2you.info',
+ '.top20health.info',
+ '.top20ringtones.info',
+ '.top20travels.info',
+ '.v09v.info',
+ '.x09x.info',
+ '.zb-1.com',
+ ),
+ 'serega555serega555 at yandex.ru' => array( // by Lebedev Sergey
+ '.bingogoldenpalace.info',
+ '.ccarisoprodol.info',
+ '.ezxcv.info',
+ '.isuperdrug.com',
+ '.pharmacif.info',
+ '.pornsexteen.biz',
+ '.ugfds.info',
+ '.vviagra.info',
+ ),
+ 'anatolsenator at gmail.com' => array( // by Anatol
+ '.cheapestviagraonline.info',
+ '.buyphentermineworld.info'
+ ),
+ 'webmaster at mederotica.com' => array(
+ '.listsitepro.com', // by VO Entertainment Inc (webmaster at mederotica.com)
+ '.testviagra.org', // by Chong Li (chongli at mederotica.com)
+ '.viagra-best.org', // by Chong Li (chongli at mederotica.com)
+ '.viagra-kaufen.org', // by Chong Li (chongli at mederotica.com)
+ ),
+ 'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
+ '.auase.info', // by ilemavyq7461 at techie.com
+ '.axeboxew.info', // by zygeu220 at writeme.com
+ '.boluzuhy.info', // by pikico5419 at post.com
+ '.ekafoloz.info', // by nuzunyly8401 at techie.com
+ '.ejixyzeh.info', // by vubulyma5163 at consultant.com
+ '.emyfyr.info', // by osiqabu9669 at writeme.com
+ '.exidiqe.info', // by kufyca5475 at mail.com
+ '.gerucovo.info', // by apegityk7224 at writeme.com
+ '.gubiwu.info', // by lywunef6532 at iname.com
+ '.ijizauax.info', // by ysauuz2341 at iname.com
+ '.ixahagi.info', // 70.47.89.60 by famevi9827 at email.com
+ '.jiuuz.info', // by meqil6549 at mail.com
+ '.nudetar.info', // by vohepafi3536 at techie.com
+ '.nipud.info', // by bohox9872 at mindless.com
+ '.mejymik.info', // by fiqiji3529 at cheerful.com
+ '.mylexus.info', // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
+ '.olasep.info', // by lizon8506 at mail.com
+ '.oueuidop.info', // by arytyb6913 at europe.com
+ '.oviravy.info', // by amyuu3883 at london.com
+ '.ovuri.info', // by exumaxyt1371 at consultant.com
+ '.ragibe.info', // by ehome4458 at myself.com
+ '.ucazib.info', // by gorare7222 at consultant.com
+ '.udaxu.info', // by gubima4007 at usa.com
+ '.ulycigop.info', // by unodyqil6241 at mindless.com
+ '.vubiheq.info', // by uisujih5849 at hotmail.com
+ '.xyloq.info', // 70.47.89.60 by yuunehi8586 at myself.com
+ '.yvaxat.info', // by koqun9660 at mindless.com
+ '.yxyzauiq.info', // by robemuq8455 at cheerful.com
+ ),
+ 'Carmodelrank.com etc' => array(
+ // by Brianna Dunlord (briasmi at yahoo.com)
+ // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
+ // by Alice T. Horst (Alice.T.Horst at pookmail.com)
+ '.carmodelrank.com',// by Brianna
+ '.cutestories.net', // by Brianna
+ '.sturducs.com',
+ '.bestother.info', // by Tim
+ '.premiumcasinogames.com', // by Brianna)
+ '.yaahooo.info', // by Alice
+ ),
+ 'aliacsandr at yahoo.com' => array(
+ '.cubub.info', // "Free Web Hosting"
+ ),
+ 'aliacsandr85 at yahoo.com' => array(
+ // by Dr. Portillo or Eva Sabina Lopez Castell
+ '.xoomer.alice.it', // "Free Web Hosting"
+ '.freebloghost.org', // "Free Web Hosting" by Dr.
+ '.freeprohosting.org', // "Free Web Hosting" by Dr.
+ '.googlebot-welcome.org', // "Free Web Hosting" by Dr.
+ '.icesearch.org', // "Free Web Hosting" by Eva
+ '.phpfreehosting.org', // "Free Web Hosting" by Dr.
+ '.sashawww.info', // "Free Web Hosting" by Dr.
+ '.sashawww-vip-vip.org', // "Free Web Hosting" by Dr.
+ '.topadult10.org', // "Free Web Hosting" by Eva
+ '.xer-vam.org', // "Ongline Catalog" by Dr.
+ '.xxxse.info', // "Free Web Hosting" by Eva
+ '.viagra-price.org', // by Eva
+ '.vvsa.org', // "Free Web Hosting" by Eva
+ '.free-webhosts.com', // "Free Web Hosting" by Free Webspace
+ ),
+ '.onegoodauto.org', // "Free Web Hosting" by sqrtv2 at gmail.com
+ 'Something-Gamble' => array(
+ // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
+ '.atonlineroulette.com', // by Blaise Johns
+ '.atroulette.com', // by Gino Sand
+ '.betting-123.com', // by Joana Caceres
+ '.betting-i.biz', // by Joaquina Angus
+ '.casino-challenge.com', // by Maren Camara
+ '.casino-gambling-i.biz', // by Giselle Nations
+ '.casino-italian.com', // by Holley Yan
+ '.casino123.net', // by Ta Baines
+ '.casinohammamet.com', // by Inger Barhorst
+ '.casinoqz.com', // by Berenice Snow
+ '.casinos-777.net', // by Iona Ayotte
+ '.crapsok.com', // by Devon Adair,
+ '.dcasinoa.com', // by August Hawkinson
+ '.e-poker-4u.com', // by Issac Leibowitz
+ '.free-dvd-player.biz', // by Rosario Kidd
+ '.florida-lottery-01.com', // by Romeo Dillon
+ '.gaming-123.com', // by Jennifer Byrne
+ '.kenogo.com', // by Adriane Bell
+ '.mycaribbeanpoker.com', // by Andy Mullis
+ '.onbaccarat.com', // by Kassandra Dunn
+ '.online-experts.biz', // by Liberty Helmick
+ '.onlinepoker-123.com', // by Andrea Feaster
+ '.playpokeronline-123.com', // by Don Lenard
+ '.poker-123.com', // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
+ '.texasholdem123.com', // by Savion Lasseter
+ '.texasholdem-777.com', // by Savanna Lederman
+ '.the-casino-directory-1715.us', // by Thora Oldenburg
+ '.the-craps-100.us', // by Lorrine Ripley
+ '.the-free-online-game-913.us', // by Kanesha Clem
+ '.the-free-poker-1798.us', // by Elaina Witte
+ '.the-las-vegas-gambling-939.us', // by Jesusita Hageman
+ '.the-online-game-poker-1185.us', // by Merna Bey
+ '.the-playing-black-jack.com', // by Kristine Brinker
+ '.the-poker-1082.us', // by Kristofer Boldt
+ '.the-rule-texas-hold-em-2496.us', // by Melvina Stamper
+ '.the-texas-strategy-holdem-1124.us', // by Neda Frantz
+ '.the-video-black-jack.com', // by Jagger Godin
+ ),
+ 'Something-Insurance' => array(
+ // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
+
+ // 0-9
+ '.0q.org', // by Shamika Curtin, "Online car insurance information"
+ '.1-bookmark.com', // by Sonia Snyder, "Titan auto insurance information"
+ '.1day-insurance.com', // by Kelsie Strouse, "Car insurance costs"
+ '.1upinof.com', // by Diego Johnson, "Car insurance quote online uk resource"
+ '.18wkcf.com', // by Lexy Bohannon
+ '.2001werm.org', // by Raphael Rayburn
+ '.2004heeparea1.org', // by Dinorah Andrews
+ '.21nt.net', // by Jaida Estabrook
+ '.3finfo.com', // by Damian Pearsall
+ '.3somes.org', // by Mauro Tillett
+ '.453531.com', // by Kurt Flannery
+ '.4freesay.com', // by Eloy Jones
+ '.5ssurvey.com', // by Annamarie Kowalski
+ '.8-f22.com', // by Larraine Evers
+ '.9q.org', // by Ami Boynton
+
+ // A
+ '.a40infobahn.com', // by Amit Nguyen
+ '.a4h-squad.com', // by Ross Locklear
+ '.aac2000.org', // by Randi Turner
+ '.aaadvertisingjobs.com', // by Luciano Frisbie
+ '.acahost.com', // by Milton Haberman
+ '.aconspiracyofmountains.com', // by Lovell Gaines
+ '.acornwebdesign.co.uk', // by Uriel Dorian
+ '.activel-learning-site.com', // by Mateo Conn
+ '.ad-makers.com', // by Shemeka Arsenault
+ '.ada-information.org', // by Josef Osullivan
+ '.adelawarerefinance.com', // by Particia Mcmillan, "Delaware refinance advisor"
+ '.adult-personal-ads-e-site.info', // by Nery Ainsworth
+ '.aequityrefinance.com', // by Jadwiga Duckworth
+ '.aerovac-hotpress.com', // by Trey Marlow
+ '.agfbiosensors.com', // by Lionel Dempsey
+ '.ahomeloanrefinance.com', // by Leslie Kinser
+ '.affordablerealestate.net', // by Season Otoole
+ '.ahomerefinancingloans.com', // by Julie Buck, "Home refinancing loans guide"
+ '.ahouserefinance.com', // by Young Alley
+ '.akirasworld.com', // by Piper Sullivan
+ '.alderik-production.com', // by Joan Stiles
+ '.alltechdata.com', // by Dom Laporte
+ '.amconllc.com', // by Syble Benjamin
+ '.amobilehomerefinancing.com', // by Clyfland Buckley, "Mobile home refinancing"
+ '.amortgagerefinancepennsylvania.com', // by Richard Battle, "Mortgage refinance pennsylvania articles"
+ '.angelandcrown.net', // by Claretta Najera
+ '.ankoralina.com', // by Eladia Demers
+ '.antiquegoldmine.com', // by Keena Marlow
+ '.aquinosotros.com', // by Nanci Prentice
+ '.architectionale.com', // by Wilbur Cornett
+ '.arcreditcards.com', // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
+ '.arefinancebadcredit.com', // by Isaac Mejia, "Refinance bad credit"
+ '.arefinancehome.com', // by Duane Doran
+ '.arefinancinghome.com', // by Ike Laney
+ '.athletic-shoes-e-shop.info', // by Romelia Money
+ '.auction-emall-site.info', // by Dayle Denman
+ '.auctions-site.info', // by Cammie Chiu, "Online loan mortgage info"
+ '.auto-buy-rite.com', // by Asuncion Buie
+ '.axxinet.net', // by Roberta Gasper
+ '.azimutservizi.com', // by Ethelene Brook
+ '.azstudies.org', // by Bernardina Walden
+
+ // B
+ '.babtrek.com', // by Simonette Mcbrayer
+ '.babycujo.com', // by Francisco Akers
+ '.bakeddelights.com', // by Dave Evenson
+ '.bbcart.com', // by Lucio Hamlin
+ '.berlin-hotel-4u.com', // by Grisel Tillotson
+ '.best-digital-phone.us', // by Meghann Crockett
+ '.bjamusements.com', // by Lurlene Butz
+ '.blursgsu.com', // by Weston Killian
+ '.bookwide.net', // by Tequila Zacharias
+ '.boreholes.org', // by Flora Reed
+ '.breathingassociaiton.org', // by Alfred Crayton
+ '.birdingnh.com', // by Donald Healy
+ '.bisdragons.org', // by Lupe Cassity
+ '.blcschools.net', // by Alycia Jolly
+ '.bronte-foods.com', // by Kary Pfeiffer
+ '.buckscountyneighbors.org', // by Maile Gaffney
+ '.buffalofudge.com', // by Mable Whisenhunt
+ '.burlisonforcongress.com', // by Luann King
+ '.byairlinecreditcard.com', // by Cali Stevenson, "Airline credit card search"
+ '.byplatinumcard.com', // by Pearl Cross, "Discover platinum card info"
+
+ // C
+ '.cabanes-web.com', // by Vaughn Latham
+ '.cardko.com', // by Terris Cain, "Chase visa card search"
+ '.cardpose.com', // by Deerward Gross, "Gm mastercard articles"
+ '.checaloya.com', // by Susana Coburn
+ '.calvarychapelrgvt.org', // by Karan Kittle
+ '.cameras-esite.info', // by Karlee Frisch
+ '.cancerkidsforum.org', // by Samson Constantino
+ '.ccchoices.org', // by Kenia Cranford
+ '.ccupca.org', // by Evonne Serrano
+ '.celebratemehome.com', // by Soraya Tower
+ '.centerfornourishingthefuture.org', // by Elisa Wilt
+ '.chelseaartmmuseum.org', // by Kayla Vanhorn
+ '.choose-shoes.net', // by Geoffrey Setser
+ '.churla.com', // by Ollie Wolford
+ '.circuithorns.co.uk', // by Nathanial Halle
+ '.clanbov.com', // by Donell Hozier
+ '.cnm-ok.org', // by Thalia Moye
+ '.coalitioncoalition.org', // by Ned Macklin
+ '.consoleaddicts.com', // by Dorla Hoy
+ '.counterclockwise.net', // by Melynda Hartzell
+ '.codypub.com', // by Mercedes Coffman
+ '.comedystore.net', // by Floy Donald
+ '.covsys.co.uk', // by Abby Jacey
+ '.cpusa364-northsacramento.com', // by Dannette Lejeune
+ '.craftybidders.com', // by Dannie Lazo
+ '.credit-card-finder.net', // by Mellie Deherrera
+ '.credit-cards-4u.info', // by Antonina Hil, "Credit cards info"
+ '.creditcardstot.com', // by Bobby Alvarado, "Shell credit cards"
+ '.ctwine.org', // by Hailey Knox
+
+ // D
+ '.dazyation.com', // by Louis Strasser
+ '.deepfoam.org', // by Ethelyn Southard
+ '.debt-fixing.com', // by Dagny Rickman
+ '.dgmarketingwebdesign.com', // by Nubia Lea
+ '.domainadoption.com', // by Breann Pappas
+ '.diannbomkamp.com', // by Russel Croteau
+ '.dictionary-spanish.us', // by Jacki Gilbreath
+ '.dictionary-yahoo.us', // by Lili Mitchem
+ '.digital-camera-review-esite.info', // by Milagros Jowers
+ '.digital-cameras-esite.info', // by Milan Jolin
+ '.dnstechnet.net', // by Tamera Oman
+ '.drivenbydata.org', // by Katherine Noyes
+ '.dtmf.net', // by Micki Slayton
+ '.domainsfound.com', // by Blossom Lively
+
+ // E
+ '.ecstacyabuse.net', // by Alana Knight
+ '.e-digital-camera-esite.info', // by Romaine Cress
+ '.eda-aahperd.org', // by Kaliyah Hammonds
+ '.eldorabusecenter.org', // by Annabella Oneal
+ '.emicorporation.com', // by (Deangelo_Mikayla at marketing-support.info)
+ '.encaponline.com', // by Patrick Keel
+ '.ez-shopping-online.com', // by Gail Bartlett
+
+ // F
+ '.faithfulwordcf.com', // by Bart Weeks
+ '.fammedassoc.com', // by Joshua Nelson
+ '.federalministryoffinance.net', // by Jeffry Mcmillan
+ '.f00k.org', // by Leslie Chapman
+ '.foreignrealtions.org', // by Krystal Hawley
+ '.fortwebsite.org', // by Kristina Motley
+ '.fotofirstdigital.com', // by Tad Whitfield
+ '.foundationcommons.org', // by Caryn Eskew
+ '.fraisierest-alexandre.com', // by Dwayne Douglas
+ '.freaky-cheats.com', // by Al Klein
+ '.free--spyware.com', // by Nikki Contreras
+ '.french-home-finance-consultant.info', // by Santana Melton
+ '.fuel-tax-software-advisor.info', // by Derrick Snyder
+
+ // G
+ '.gaintrafficfast.com', // by Lila Meekins
+ '.gaygain.org', // by Shell Davila
+ '.gcaaa.com', // by Vallie Jaworski
+ '.generalsysteme.com', // by Cale Vogel
+ '.generation4games.co.uk', // by Sonya Graham
+ '.german-dictionary.us', // by Rex Daniel
+ '.gilmerrec.com', // by Leighann Guillory
+ '.glenthuntly-athletics.com', // by Julee Hair
+ '.glorybaskets.com', // by Lynette Lavelle
+ '.goconstructionloan.com', // by Willis Monahan
+ '.gohireit.com', // by Bertha Metzger
+ '.godcenteredpeople.com', // by Jaycee Coble
+
+ // H
+ '.healthinsuranceem.com', // by Justin Munson
+ '.hearthorizon.info', // by Kory Session
+ '.hegerindustrial.com', // by Toni Wesley
+ '.herzequip.com', // by Princess Dunkle
+ '.hglcms.org', // by Gladwin Ng
+ '.hipanoempresa.com', // by Shannon Staub
+ '.hitempfurnaces.com', // by Rebbeca Jaeger
+ '.horse-racing-result.com', // by Rodney Reynolds
+ '.hueckerfamily.com', // by Hershel Sell
+
+ // I
+ '.ilove2win.com', // by Lamont Dickerson
+ '.ilruralassistgrp.org', // by Moises Hauser
+ '.imageonsolutions.com', // by Porsche Dubois
+ '.infoanddatacenter.com', // by Eva Okelley
+ '.islamfakta.org', // by Goldie Boykin
+ '.ithomemortgage.com', // by Adelaide Towers
+ '.iyoerg.com', // by Madyson Gagliano
+
+ // J
+ '.jeffaxelsen.com', // by Daphne William
+ '.jeffreyf.net', // by Vito Platt
+ '.johnmartinsreality.com', // by Pamela Larry
+ '.johnsilvers.net', // by Silver Battaglia
+
+ // K
+ '.kcgerbil.org', // by Marisa Thayer
+ '.kdc-phoenix.com', // by Salma Shoulders
+ '.kingscreditcard.com', // by Sean Parsons, "Credit card info"
+ '.kosove.org', // by Darwin Schneider
+
+ // L
+ '.leading-digital-camera-esite.info', // by Charles Moore, "Online home loan articles"
+ '.letsgokayaking.net', // by Winnie Adair
+ '.libertycabs.com', // by Adela Bonds
+ '.liquor-store-cellar.info', // by Hugh Pearson
+ '.locomojo.net', // by Marco Harmon
+ '.lodatissimo.com', // by Adrian Greeson
+ '.lsawc.org', // by Lara Han
+ '.lycos-test.net', // by Rigoberto Oakley
+
+ // M
+ '.macro-society.com', // by Venessa Hodgson
+ '.marthasflavorfest.com', // by Ahmad Lau
+ '.martin-rank.com', // by Cathleen Crist
+ '.maryandfrank.org', // by Theodore Apodaca
+ '.masterkwonhapkido.com', // by Misty Graham
+ '.maxrpm-demo.com', // by Cristal Cho
+ '.mechanomorphic.com', // by Stanford Crow
+ '.mepublishing.net', // by Karly Fleenor
+ '.meyerlanguageservices.co.uk', // by Breana Kennedy
+ '.metwahairports.com', // by Nan Kitchen
+ '.middle-eastnews.com', // by Tybalt Altmann
+ '.mikepelchy.com', // by Sherly Pearson
+ '.milpa.org', // by Nelly Aguilera
+ '.modayun.com', // by Camilla Velasco
+ '.moonstoneerp.com', // by Garret Salmon
+ '.morosozinho.com', // by Lenore Tovar
+ '.morphadox.com', // by Hung Zielinski
+ '.moscasenlared.com', // by Tera Gant
+ '.sdjavasig.com', // by Gia Swisher
+ '.mpeg-radio.com', // by Sincere Beebe
+ '.mrg-now-yes.com', // by Sparkle Gallegos
+ '.mtseniorcenter.org', // by Frederic Ortega
+ '.mysteryclips.com', // by Edward Ashford
+
+ // N
+ '.naavs.org', // by Yuridia Gandy
+ '.naval-aviation.org', // by Roselle Campo
+ '.navigare-ischia.com', // by Arielle Coons
+ '.ncredc.org', // by Brenda Nye
+ '.neonmotorsports.com', // by Giovanna Vue
+ '.nf-ny.com', // by Yadira Hibbard
+ '.ngfdyqva.com', // by Emiliano Samples
+ '.nicozone.com', // by Blaine Shell
+ '.nmbusinessroundtable.org', // by Chantel Mccourt
+ '.npawny.org', // by Willard Murphy
+ '.nysdoed.org', // by Elric Delgadillo
+ '.nyswasteless.org', // by Shaylee Moskowitz
+ '.nytech-ir.com', // by Adrien Beals
+
+ // O
+ '.oadmidwest.com', // by Gavin Kaplan
+ '.oarauto.com', // by Susann Merriman
+ '.onairmilescard.com', // by Tomoko Hart, "Air miles card information"
+ '.onbusinesscard.com', // by Farris Lane, "Gm business card"
+ '.oncashbackcreditcard.com', // by Ida Willis, "Cash back credit card articles"
+ '.onimagegoldcard.com', // by Roxanna Sims, "Imagine gold mastercard information"
+ '.online-pills-24x7.biz', // by Aide Hallock
+ '.online-shopping-site-24x7.info', // by Stacy Ricketts
+ '.onlinehomeloanrefinance.com', // by Chaz Lynch
+ '.onlinehomeloanfinancing.com', // by Humbert Eldridge
+ '.onunicarehealthinsurance.com', // by Lawerence Paredes
+ '.otterbayweb.com', // by Maxwell Irizarry
+
+ // P
+ '.painting-technique.us', // by Bryanna Tooley
+ '.pakamrcongress.com', // by Bryce Summerville
+ '.patabney.com', // by Kailyn Slone
+ '.parde.org', // by Ellie Yates
+ '.participatingprofiles.com', // by Jaelynn Meacham
+ '.partnershipconference.org', // by Alla Floyd
+ '.pet-stars.com', // by Carmon Luevano
+ '.planning-law.org', // by Trista Holcombe
+ '.ppawa.com', // by Evonne Scarlett
+ '.precisionfilters.net', // by Faustina Fell
+
+ // Q
+ '.qacards.com', // by Perye Estrada, "Citi visa cards"
+ '.quick-debt-consolidation.net', // by Lala Marte
+ '.quicktvr.com', // by Vernell Crenshaw
+
+ // R
+ '.radicalsolutions.org', // by Reece Medlin
+ '.randallburgos.com', // by Bradly Villa
+ '.rcassel.com', // by Janiah Gallant
+ '.rearchitect.org', // by Marcus Gaudet
+ '.rent-an-mba.com', // by Valentina Mcdermott
+ '.reprisenashville.com', // by Hester Khan
+ '.reptilemedia.com', // by Alicia Patel
+ '.resellers2000.com', // by Dedra Kennedy
+ '.reverse-billing.com', // by Lazaro Gluck
+ '.richcapaldi.com', // by Kya Haggard
+ '.richformissouri.com', // by Alanna Elston
+ '.robstraley.com', // by Leida Bartell
+ '.rollingprairie-candlecompany.com', // by Leigha Aker
+ '.rpgbbs.com', // by Leonel Peart
+ '.ruralbusinessonline.org', // by Lynsey Watters
+ '.ruwomenscenter.org', // by Vince Mclemore
+ '.ryanjowens.com', // by Janine Smythe
+
+ // S
+ '.sagarmathatv.org', // by Liam Funke
+ '.sakyathubtenling.org', // by Liane Falgout
+ '.sandiegolawyer.net', // by Linnie Sommervill
+ '.sandishaven.com', // by Lino Soloman
+ '.scienkeen.com', // by Liza Navarra
+ '.seimenswestinghouse.com', // by Teresa Benedetto
+ '.severios.com', // by Isa Steffen
+ '.sexual-hot-girls.com', // by Viviana Bolton
+ '.shakespearelrc.com', // by Luciana Weaver
+ '.shashran.org', // by Adriel Humphries
+ '.shoes-shop.us', // by Austen Higginbotham
+ '.skagitvalleybassanglers.com', // by Necole Thiele
+ '.skinsciencesalon.com', // by Nena Rook
+ '.smartalternative.net', // by Nicki Lariviere
+ '.sml338.org', // by Nickole Krol
+ '.smogfee.com', // by Sienna Kimble
+ '.sneakers-e-shop.info', // by Nikki Fye
+ '.spacewavemedia.com', // by Thanh Gast
+ '.softkernel.com', // by Nicol Hummer
+ '.stjoanmerrillville.com', // by Hunter Beckham
+ '.strelinger.com', // by Arron Highsmith
+ '.striking-viking.com', // by Kylie Endsley
+ '.sunnydeception.org', // by Amaya Llora
+ '.sunzmicro.com', // by Goddard Arreola
+ '.sv-iabc.org', // by Braden Buck
+ '.sykotick.com', // by Pierce Knecht
+
+ // T
+ '.tbody.net', // by Ormond Roman
+ '.the-pizzaman.com', // by Mario Ramsey
+ '.the-shoes.us', // by Alejandro Gaffney
+ '.theborneocompany.com', // by Bryanna Tooley
+ '.theflashchannel.com', // by Terrilyn Tam, "Loan financing info"
+ '.thehomeschool.net', // by September Concepcio
+ '.thenewlywed.com', // by Allegra Marra
+ '.tigerspice.com', // by Denis Mosser
+ '.tnaa.net', // by Jasmine Andress
+ '.top-finance-sites.com', // by Maryann Doud
+ '.tradereport.org', // by Bettie Sisk
+ '.transmodeling.com', // by Martine Button
+ '.travel-01.net', // by Jay Kim, "Refinance on line"
+ '.tsaoc.com', // by Heriberto Mcfall
+ '.tsunamidinner.com', // by Nannie Richey
+
+ // U
+ '.uhsaaa.com', // by Risa Herbert
+ '.ultradeepfield.org', // by Bobby Ragland
+ '.umkclaw.info', // by Cammy Kern
+ '.unitedsafetycontainer.com', // by Shreya Heckendora
+ '.usa-wolf.com', // by Jacklyn Morrill
+ '.usjobfair.com', // by Lorina Burchette
+
+ // V
+ '.vacancesalouer.com', // by Loris Bergquist
+ '.vagents.com', // by Lorna Beaudette, "Refinancing home loan info"
+ '.valleylibertarians.org', // by Lena Massengale
+ '.vanderbiltevents.com', // by Gannon Krueger
+ '.vanwallree.com', // by Michelina Donahue
+ '.vcertificates.com', // by Hyun Lamp
+ '.vonormytexas.us', // by Suzette Waymire
+
+ // W
+ '.washingtondc-areahomes.net', // by Ailene Broome
+ '.web-hosting-forum.net', // by Deedra Breen, "Mortgage information"
+ '.wolsaoh.org', // by Daniela English
+ '.worldpropertycatalog.com', // by Aray Baxter
+
+ // Y
+ '.yankee-merchants.com', // by Jackson Hinojosa
+ '.yourbeachhouse.com', // by Dedrian Ryals
+ '.yourdomainsource.com', // by Deems Weingarten
+
+ // Z
+ '.zkashan.com', // by Evan Light
+ '.zockclock.com', // by Dorothea Guthrie
+ ),
+ 'Something-Drugs' => array(
+ // Drugs / Pills / Diet
+ '.adult-dvd-rental-top-shop.info', // by Gregoria Keating
+ '.abdelghani-shady.com', // by Elly Alton
+ '.bangbangfilm.com', // by Davin Chou
+ '.centroantequera.com', // by Keon Kwiatkowski
+ '.champagne-cellar.info', // by Kandis Rizzo
+ '.chix0r.org', // by Christoper Baird
+ '.discout-watches-deals.info', // by Taunya Limon, Insurance -> Drugs?
+ '.fantasticbooks-shop.com', // by Kermit Ashley
+ '.fast-cash-01.com', // by Edgar Oliver
+ '.ficeb.info', // by Vaughn Jacobson, "Phentermine news"
+ '.fn-nato.com', // by Donny Dunlap
+ '.gqyinran.com', // by Alejandro Parks
+ '.juris-net.com', // by Rachelle Bravo
+ '.leftpencey.com', // by Aileen Ashby
+ '.miamicaribbeancarnival.com', // by Herminia Barrios
+ '.nike-shoes-e-shop.info', // by Machelle Groce, "Phentermine"
+ '.palaceroyale.net', // by Brycen Stebbins
+ '.pocket-watches-deals.info', // by Dorinda Stromberg
+ '.regresiones.net', // by Lauralee Smtih, "Online phentermine updates"
+ '.yukissushi.com', // by Donell Hozier
+ ),
+ 'Something-Others' => array(
+ '.consulting-cu.com', // by Albina Rauch, 404 not found
+ '.dvd-rentals-top-shop.info', // by Lashunda Pettway, 404 not found
+ ),
+ 'Something-NoApp' => array(
+ '.auctioncarslisting.com', // "No application configured at this url." by John Davis
+ '.buy-cheap-hardware.com', // "No application configured at this url." by Tim Morison (domains at sunex.ru)
+ '.carsgarage.net', // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
+ '.digitshopping.net', // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
+ '.your-insurance.biz', // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
+ ),
+ 'Cortez and family' => array(
+ // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
+ '.dronadaarsujf.info', // by Cortez
+ '.fromnananaref.info', // by Cortez
+ '.goorkkjsaka.info', // by Cortez
+ '.jkdfjjkkdfe.info', // by Rico
+ '.jkllloldkjsa.info', // by Cortez
+ '.nnjdksfornms.info', // by Rico
+ '.mcmdkkksaoka.info', // by Cortez
+ '.srattaragfon.info', // by Cortez
+ '.yreifnnonoom.info', // by Rico
+ '.zjajjsvgeuds.info', // by Cortez
+ ),
+ 'admin at ematuranza.com' => array(
+ '.ancorlontano.com',
+ '.dentroallago.com',
+ '.digiovinezza.com',
+ '.ematuranza.com',
+ '.ilfango.com',
+ '.nullarimane.com',
+ '.questaimmensa.com',
+ '.tentailvolo.com',
+ '.unatenerezza.com',
+ '.volgondilettose.com',
+ ),
+ 'admin at edeuj84.info' => array( // by Cornelius Boyers
+ '.bid99df.info',
+ '.bj498uf.info',
+ '.edeuj84.info',
+ '.f4mfid.info',
+ '.g4vf03a.info',
+ '.j09j4r.info',
+ '.jv4r8hv.info',
+ '.k43sd3.info',
+ '.k4r84d.info',
+ '.k4rvda.info',
+ '.k4v0df.info',
+ '.k903os.info',
+ '.k9df93d.info',
+ '.kv94fd.info',
+ '.ksjs93.info',
+ '.l0ks03.info',
+ '.l9u3jc.info',
+ '.lv043a.info',
+ '.nh94h9.info',
+ '.m94r9d.info',
+ '.s87fvd.info',
+ '.v3k0d.info',
+ '.v4r8j4.info',
+ '.vf044s.info',
+ '.vj49rs.info',
+ '.vk498j.info',
+ '.u03jow.info',
+ ),
+ 'Nikhil and Brian' => array(
+ // by Brian Dieckman (info at iudndjsdhgas.info)
+ // by Nikhil Swafford (info at jhcjdnbkrfo.info)
+ // by Gerardo Figueiredo (info at jikpbtjiougje.info)
+ '.ihfjeswouigf.info', // by Brian, / was not found
+ '.iudndjsdhgas.info', // by Brian, / was not found
+ '.iufbsehxrtcd.info', // by Brian, / was not found
+ '.jiatdbdisut.info', // by Brian, / was not found
+ '.jkfierwoundhw.info', // by Brian, / was not found
+ '.kfjeoutweh.info', // by Brian, / was not found
+ '.ncjsdhjahsjendl.info',// by Brian, / was not found
+ '.oudjskdwibfm.info', // by Brian, / was not found
+ '.cnewuhkqnfke.info', // by Nikhil, / was not found
+ '.itxbsjacun.info', // by Nikhil, / was not found
+ '.jahvjrijvv.info', // by Nikhil (info at jikpbtjiougje.info), / was not found
+ '.jhcjdnbkrfo.info', // by Nikhil, / was not found
+ '.najedncdcounrd.info', // by Nikhil, / was not found
+ '.mcsjjaouvd.info', // by Nikhil, / was not found
+ '.oujvjfdndl.info', // by Nikhil, / was not found
+ '.uodncnewnncds.info', // by Nikhil, / was not found
+ '.jikpbtjiougje.info', // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
+ '.cijkalvcjirem.info', // by Gerardo, / was not found
+ '.nkcjfkvnvpow.info', // by Gerardo, / was not found
+ '.nmiiamfoujvnme.info', // by Gerardo, / was not found
+ '.nxuwnkajgufvl.info', // by Gerardo, / was not found
+ '.mkjajkfoejvnm.info', // by Gerardo, / was not found
+ ),
+ 'wealth777 at gmail.com' => array( // by Henry Ford
+ '.brutal-forced.com',
+ '.library-bdsm.com',
+ '.rape-fantasy.us',
+ ),
+ 'Croesus International Inc.' => array( // by Croesus International Inc. (olex at okhei.net)
+ '.purerotica.com',
+ '.richsex.com',
+ '.servik.net',
+ '.withsex.com',
+ ),
+ 'dreamteammoney.com' => array(
+ '.dreamteammoney.com', // dtmurl.com related
+ '.dtmurl.com', // by dreamteammoney.com, redirection service
+ ),
+ 'KLIK VIP Search and family' => array(
+ '.cheepmed.org', // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
+ '.fastearning.net', // "KlikVIPsearch.com" by Matthew Parry (fastearning at mail.ru)
+ '.klikvipsearch.com', // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
+ '.looked-for.info', // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
+ '.mnepoxuy.info', // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
+ '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
+ '.visabiz.net', // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
+ ),
+ 'vasyapupkin78 at bk.ru' => array( // by Andrey Kozlov
+ '.antivirs.info',
+ '.antivirus1.info',
+ '.antivirus2.info',
+ ),
+ 'wasam at vangers.net and family' => array(
+
+ // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
+ '.bahatoca.org',
+ '.digestlycos.org',
+ '.educativaanale.info',
+ '.guildstuscan.org',
+ '.isaakrobbins.info',
+ '.isfelons.org',
+ '.lvwelevated.org',
+ '.macphersonaca.org',
+ '.markyaustrian.org',
+ '.michelepug.org',
+ '.opalbusy.info',
+ '.quijotebachata.info',
+ '.salthjc.info',
+ '.shogunnerd.info',
+ '.solarissean.org',
+ '.sparkgsx.info',
+ '.tarzanyearly.org',
+ '.tulabnsf.org',
+ '.vaccarinos.org',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
+ '.e2007.info',
+ '.cmoss.info',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
+ '.finddesk.org',
+ '.gsfind.org', // You mean: sfind.net by tvaals at vangers.net
+ '.my-top.org', // You mean: my-top.net by tvaals at vangers.net
+ '.rcatalog.org',
+ '.sbitzone.org',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
+ '.cheapns.org',
+ '.my-top.net',
+ '.sfind.net',
+ '.sspot.net',
+ '.suvfind.info',
+
+ // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
+ '.trumber.com',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
+ '.blogduet.org',
+ '.carelf.info',
+ '.cmagic.org',
+ '.cspell.org',
+ '.dspark.org',
+ '.dtonic.org',
+ '.mcharm.info',
+ '.mslook.info',
+ '.phpdinnerware.info',
+ '.rnation.org',
+ '.uzing.org',
+
+ // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
+ '.allbar.info',
+ '.allersearch.org',
+ '.allzoom.org',
+ '.dynall.org',
+ '.fastopia.org',
+ '.offasfast.info',
+ '.rblast.org',
+ '.rchistes.info',
+ '.rette.org',
+ '.shufflequince.org',
+ '.suvlook.org',
+
+ // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
+ '.290cabeza.org',
+ '.bossierpainted.org',
+ '.connickkarel.info', // Admin: tvaals at vangers.net
+ '.definekonica.info', // Admin: tvaals at vangers.net
+ '.gradetelemundo.info',
+ '.hydraulickin.info',
+ '.indicadorestmj.info',
+ '.keeleykincaid.org',
+ '.kleenbowser.info',
+ '.pipnickname.info',
+ '.pacolily.org',
+ '.redeemtrabalho.info',
+ '.scanmakerchua.info',
+ '.titanmessina.info',
+ '.tragratuit.org',
+ '.yeareola.info',
+ ),
+ 'SearchHealtAdvCorpGb.com' => array( // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
+ '.canadianmedsworld.info', // 84.252.133.112
+ '.tabsdrugstore.info', // 84.252.133.114
+ '.tabsstore.info', // 84.252.133.114
+ '.topcholesterol.info', // 84.252.133.132
+ ),
+ 'be.cx' => array(
+ '.be.cx',
+ '.ca.cx',
+ ),
+ 'john780321 at yahoo.com' => array( // by John Brown
+ '.bestdiscountpharmacy.biz', // 2007-01-27, 61.144.122.45
+ '.drugs4all.us', // 2007-03-09, 202.67.150.250
+ '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
+ ),
+ 'tremagl.freet at gmail.com' => array( // by Treman Eagles, redirect to searchadv.com
+ '.bertela.info',
+ '.forblis.info',
+ '.frenallo.info',
+ '.goyahoo.info',
+ '.herbak.info',
+ '.kiokast.info',
+ '.nerenok.info',
+ '.pestgets.info',
+ '.snukker.info',
+ '.thegetspons.info',
+ ),
+ '2xxc at 2xxc.net' => array( // by 2xxc, 404 not found
+ '.bobop.info',
+ '.kwwwe.info',
+ '.piikz.info',
+ '.moosm.info',
+ '.vvvw.info',
+ ),
+ 'support at 51g.net' => array( // iframe www.lovetw.webnow.biz
+ '.ftplin.com', // 125.65.112.15, by Yongchun Liao
+ '.jplin.com', // 125.65.112.15, by Yongchun Liao
+ '.jplineage.com', // 221.238.195.113, by Yongchun Liao
+ '.jplingood.com', // 125.65.112.15
+ '.linenew.com', // 203.191.148.96
+ '.lyftp.com', // 218.5.77.17, by Yongchun Liao (weboy at 51g.net)
+ '.yzlin.com', // 220.162.244.36
+ ),
+ 'Betty.J.Pelletier at pookmail.com' => array( // by Betty J. Pelletier
+ '.1111mb.com',
+ '.2sex18.com',
+ '.69porn1.com',
+ ),
+ 'ECTechnology' => array(
+ '.atmouse.co.kr', // by EG gisul (kpgak at hanmail.net)
+ '.auto-mouse.com', // "Copyright Ã’$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
+ '.automouse.jp',
+ ),
+ 'lyqz at 21cn.com' => array(
+ '.japangame1.com',
+ '.lineinfo-jp.com', // www.lineinfo-jp.com is 61.139.126.10
+ '.livedoor1.com',
+ '.ragnarokonline1.com',
+ '.zhangweijp.com', // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
+ ),
+ 'kingrou at hotmail.com' => array( // by yangjianhe
+ '.youshini.com', // Two iframe to 453787.com's *.exe
+ '.453787.com',
+ ),
+ 'anpaul541000 at 163.com' => array( // by su qiuqing
+ '.cetname.com', // 222.77.185.87
+ '.jpgamer.net', // 220.247.157.106
+ '.jpplay.net', // 222.77.185.87, iframe www.lovetw.webnow.biz
+ '.lovejptt.com', // 222.77.185.87
+ '.pangzigame.com', // 220.247.134.136, by qiuqingshan
+ '.playncsoft.net', // 220.247.157.106
+ ),
+ 'abc00613 at 163.com' => array( // by guo yong
+ '.avtw1068.com', // 64.74.223.11
+ '.dj5566.org', // Seems IP not allocated now, by yongchao li
+ '.djkkk66990.com', // 68.178.232.99
+ '.lingamesjp.com', // 219.153.13.23(8.myadmin.cn), by guo jinlong
+ ),
+ 'thomas.jsp at libertysurf.fr' => array( // by Perez Thomas
+ '.cmonfofo.com',
+ '.discutbb.com',
+ ),
+ 'Dorothy.D.Adams at mailinator.com' => array( // by Dorothy D. Adams
+ '.preca.info',
+ '.skiaggi.info',
+ '.scrianal.info',
+ '.tageom.info',
+ ),
+ 'Inpros.net' => array( // by Hayato Hikari (hikari at t-dm.co.jp)
+ '.inpros.biz', // 38.99.91.137, redirect to inpros.net
+ '.inpros.net', // 202.181.98.79
+ '.gametradeonline.jp', // 210.188.204.233, by Hayato Hikari, RMT
+ ),
+ 'szczffhh_sso at 21cn.net' => array( // by zhenfei chen
+ '.ec51.com',
+ '.ec51.net',
+ ),
+ 'abbevillelaties at yahoo.fr etc' => array(
+ // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
+ '.ringtones-rate.com',
+ '.ringtones-dir.net', // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
+ '.special-ringtones.net',
+ ),
+ 'gibson or gibs0n at skysquad.net' => array( // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
+ '.1sgsc.info',
+ '.3h4r89h.info',
+ '.3v44dd.info',
+ '.6rfuh6.info',
+ '.84hd8.info',
+ '.94bui89.info',
+ '.agysb3.info',
+ '.asdjhs.info',
+ '.bcvnrth.info',
+ '.bheb4r.info',
+ '.bhiuno.info',
+ '.biug7g.info',
+ '.bjb5f4.info',
+ '.bob8g7g.info',
+ '.br89bdd.info',
+ '.bsa3h.info',
+ '.bsieb8.info',
+ '.basbiubf.info',
+ '.bobwwfs2.info',
+ '.ciuv9t.info',
+ '.dbmdx4.info',
+ '.dbrjms.info',
+ '.dbtcm.info',
+ '.dff9ghu.info',
+ '.dfshbb.info',
+ '.dgd4ffdh.info',
+ '.dh3ge.info',
+ '.duc86jh.info',
+ '.ergth45.info',
+ '.f78bf7ffb.info',
+ '.gbdfbo4.info',
+ '.ger45.info',
+ '.gnvnrrg.info',
+ '.h47he7.info',
+ '.h488hbd4.info',
+ '.hd72b94.info',
+ '.he74b7.info',
+ '.hfujfnr.info',
+ '.husdhd42.info',
+ '.hbwje.info',
+ '.itg87gji.info',
+ '.iugiougiuh.info',
+ '.jhd4f4aa.info',
+ '.jshd73.info',
+ '.krhpgd.info',
+ '.lyihjn.info',
+ '.nfyjnfj.info',
+ '.oihbv.info',
+ '.os44fvs.info',
+ '.sdfsd3.info',
+ '.sdiug4.info',
+ '.sdkufhh.info',
+ '.sdugb4f.info',
+ '.skdbf.info',
+ '.sipiv78.info',
+ '.sudbfb.info',
+ '.tymbbmy.info',
+ '.uilhjk.info',
+ '.vi87vub.info',
+ '.vfuyf87f.info',
+ '.viyvvj877.info',
+ '.w7fc8eu.info',
+ '.wefg43g.info',
+ '.xbrch78e.info',
+ '.ywsfu.info',
+ '.zxcbiv.info',
+ ),
+ 'info at infooracle.com' => array( // by Marek Luto Marek Luto
+ '.abofios.info',
+ '.amlekfn.info',
+ '.amlkdoie.info',
+ '.amkslewq.info',
+ '.alemfu.info',
+ '.aloweks1.info',
+ '.alposd3.info',
+ '.bamhpb.info',
+ '.bhjkb.info',
+ '.bjqnj.info',
+ '.cvcxcbhpr.info',
+ '.czoypaiat.info',
+ '.dbpmgc.info',
+ '.dgvogrxs.info',
+ '.dldksf.info',
+ '.dlor6za.com',
+ '.dmkoiew.info',
+ '.eewrefr.info',
+ '.eladne.info',
+ '.elksem.info',
+ '.elwpod.info',
+ '.emlwkdnr.info',
+ '.esgmyqk.info',
+ '.fauqv.info',
+ '.fgxkgy.info',
+ '.fhryns.info',
+ '.fj38n4g.info',
+ '.fjnesal.info',
+ '.fmkfoe.info',
+ '.fqkcfldtr.info',
+ '.fwcigpdwz.info',
+ '.fyhik.info',
+ '.glrkje.info',
+ '.gwkslfq.info',
+ '.gwjracvh.info',
+ '.hihopepe.info',
+ '.hwlyggbkw.info',
+ '.hmwbfw.info',
+ '.hthyeb.info',
+ '.iaofkyaw.info',
+ '.uldkxuiw.info',
+ '.is7c6w4.info',
+ '.ivuddhdk.info',
+ '.jgfndjem.info',
+ '.jgmdlek.info',
+ '.jkrnvmpad.info',
+ '.jqujn.info',
+ '.jvgmmba.info',
+ '.kbaur.info',
+ '.kgjindptv.info',
+ '.kleo7s9.info',
+ '.lezfgam.info',
+ '.lfaasy.info',
+ '.ljpdjki.info',
+ '.lmnpis.info',
+ '.lpzcu2f.info',
+ '.lrptn.info',
+ '.lursqt.info',
+ '.mgkabviil.info',
+ '.mhtknjyt.info',
+ '.mksuuku.info',
+ '.mkyky.info',
+ '.mloaisn.com',
+ '.mlsiknd.info',
+ '.mthqz.info',
+ '.nnooq.info',
+ '.nohhylvc.info',
+ '.nuprndsye.info',
+ '.nsoelam.info',
+ '.nykobczv.info',
+ '.nzuhli.info',
+ '.odyqzgylr.info',
+ '.oidiau.info',
+ '.oitzkw.info',
+ '.okdmrpz.info',
+ '.ooinziti.info',
+ '.ortqr.info',
+ '.osmkpnekv.info',
+ '.ozkzfih.info',
+ '.p3ix8wc.com',
+ '.piwyt.info',
+ '.pfkijrm.info',
+ '.pjktcragi.info',
+ '.pleoz.info',
+ '.plvqm73.info',
+ '.pqyrem.info',
+ '.qipgqd.info',
+ '.qlewixu.com',
+ '.qmlskme.info',
+ '.qtuff.info',
+ '.quoga.info',
+ '.quqz.info',
+ '.qzxuw.info',
+ '.rcaidegp.info',
+ '.rlkmdi.info',
+ '.rnsoiov.info',
+ '.rnwlams.info',
+ '.rprgkgqld.info',
+ '.rubqvxrn.info',
+ '.spqxstl.info',
+ '.syckoqjql.info',
+ '.tbirb.info',
+ '.thalc34.info',
+ '.tiabq.info',
+ '.tszzpjr.info',
+ '.tyjdyn.info',
+ '.twgugpns.info',
+ '.uaezrqp.info',
+ '.udlkasu.info',
+ '.uejncyf.info',
+ '.ukvflb.info',
+ '.ugsuv.info',
+ '.ukhgpcp.info',
+ '.urprzn.info',
+ '.uuhememkw.info',
+ '.yalc7en.info',
+ '.ybuid.info',
+ '.yhdkgfob.info',
+ '.ymenq.info',
+ '.ynlyb.info',
+ '.vieatlubk.info',
+ '.vltcaho.info',
+ '.wlamsiek.info',
+ '.wlerp.info',
+ '.wlmtshzi.info',
+ '.wmlkams.info',
+ '.wprqd.info',
+ '.wpyspszi.info',
+ '.xdscc.info',
+ '.xdvy.info',
+ '.xeypku.info',
+ '.xsrxh.info',
+ '.xwjyrpfe.info',
+ '.yxcqw.info',
+ '.zhbktrh.info',
+ '.zspepn.info',
+ '.zsxtz.info',
+ ),
+ 'survi at poczta.fm and smiley' => array(
+ '.pperd.info', // "main site :>" by Domagala Andrzej (survi at poczta.fm)
+ '.ppert.info',
+ '.pperta.info',
+ '.pperts.info',
+ '.pprtuis.info',
+ '.13iuey.info', // ":>"
+ '.13jkhs.info',
+ '.13lksa.info',
+ '.13rxtx.info',
+ '.13slkd.info',
+ '.13zaer.info',
+ ),
+ 'admin at esemeski.com' => array( // by Jan Kalka
+ '.kxils.info',
+ '.kuaph.info',
+ '.lncdc.info',
+ '.lsqpd.info',
+ '.mczed.info',
+ '.npous.info',
+ '.obgju.info',
+ ),
+ 'LiquidNetLimited.com' => array(
+ // liquidnetltd.net, // 216.65.1.131(duoservers.com)
+
+ // FateBack.com related
+ // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
+ '.bebto.com',
+ '.fateback.com',
+ '.undonet.com',
+ '.yoll.net',
+ '.sinfree.net', // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
+
+ // 50webs.com // 64.72.112.10
+ // dns2.50webs.com // 64.72.112.11
+ '*.freehostia.com', // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
+ // dns2.freehostia.com // 64.72.112.13
+ // serv3.freehostia.com // 64.72.112.14
+ // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
+ // mail.50webs.com // 64.72.112.26
+ // supremecenter41.com // 64.72.112.52
+ // 50webs2.50webs.com // 64.72.112.89
+ // supremecenter39.com // 64.72.112.103
+
+ // by LiquidNet Ltd. (support at propersupport.com)
+ '*.50webs.com', // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
+ // propersupport.com // 216.65.1.129(dns1.supremecenter.com)
+ 'duoservers.com', // 216.65.1.130
+
+ // 100ws.com // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
+ ),
+ 'domains at agava.com' => array(
+ '.h18.ru',
+ '.hut1.ru',
+ ),
+ 'wlmx009 at hotmail.com' => array(
+ '.123lineage.com',
+ '.ff11-info.com',
+ '.lastlineage.com',
+ '.lineage2-ol.com',
+ '.lineage2006.com',
+ '.lineagefirst.com',
+ ),
+ 'Zettahost.com' => array(
+ '.atspace.biz', // sales at zettahost.com
+ '.atspace.com', // abuse at zettahost.com
+ '.atspace.name', // NS atspace.com
+ '.awardspace.com', // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
+ '.awardspace.us', // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
+ ),
+ 'hlq9814 at 163.com' => array(
+ '.kotonohax.com', // by ling bao
+ '.ragnarox.mobi', // by lin bao, *.exe download
+ '.rokonline-jp.com', // by hang long
+ ),
+ '77ch.jp' => array(
+ '.77ch.jp',
+ '.gamorimori.net', // by ryo takami (infomation at 77ch.jp)
+ ),
+ 'serchportal at mail.ru' => array( // by Namu Adin
+ '.43fert.info',
+ '.belis.info',
+ '.bonu.info',
+ '.chelsite.info',
+ '.chparael.info',
+ '.cool9f.info',
+ '.dada2.info',
+ '.dorplanete.info',
+ '.dormonde.info',
+ '.dorprojet.info',
+ '.faciledor.info',
+ '.fastsearchgroup.info',
+ '.gerta0.info',
+ '.getse.info',
+ '.gopvl.info',
+ '.knopki.info',
+ '.propidor.info',
+ '.quicksearchnet.info',
+ '.ret5.info',
+ '.slimfastsearch.info',
+ '.virtualpvl.info',
+ '.vpvla.info',
+ '.xjdor.info',
+ '.zhopki.info',
+ ),
+ 'SoniqHost.com' => array( // by Stanley Gutowski (support at soniqhost.com)
+ '*.444mb.com', // Free hosting
+ 'urlnip.com', // Redirection
+ ),
+ 'WWW.RU' => array( // by Angela (abuse at www.ru)
+ '.1fasttimesatnau.info',
+ '.1freecybersex.info',
+ '.1freexxxcomics.info',
+ '.1fuckingmywife.info',
+ '.1pornpreview.info',
+ 'www.ru', // by (service at demos.ru), redirection
+ ),
+ '65.90.250.10' => array( // IP seems the same (65.90.250.10)
+ '.adultschat.info',
+ '.livecamonline.info',
+ '.webcam4u.info',
+ '.younghot.info',
+ ),
+ 'hostorgadmin at googlemail.com' => array( // Byethost Internet Ltd.
+ '.yoursupportgroup.com', // 72.36.219.162(*.static.reverse.ltdomains.com)
+
+ // 209.51.196.242
+ '.22web.net',
+ '.2kool4u.net',
+ '.9skul.com',
+ '.alojalo.info',
+ '.byet.net',
+ '.byethost2.com',
+ '.byethost3.com',
+ '.byethost4.com',
+ '.byethost5.com',
+ '.byethost6.com',
+ '.byethost7.com',
+ '.byethost8.com',
+ '.byethost9.com',
+ '.byethost10.com',
+ '.byethost11.com',
+ '.byethost12.com',
+ '.byethost13.com',
+ '.byethost14.com',
+ '.byethost15.com',
+ '.byethost16.com',
+ '.byethost17.com',
+ '.byethost18.com',
+ '.headshothost.net',
+ '.hostwq.net',
+ '.mega-file.net',
+ '.truefreehost.com',
+
+ '.ifastnet.com', // 209.51.196.243
+
+ // 209.190.16.82(mx1.byet.org)
+ '.1sthost.org',
+ '.4sql.net',
+ '.byet.org',
+ '.hyperphp.com',
+ '.kwikphp.com',
+ '.my-php.net',
+ '.my-place.us',
+ '.my-webs.org',
+ '.netfast.org',
+ '.php0h.com',
+ '.php1h.com',
+ '.php2h.com', // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
+ '.phpnet.us',
+ '.prohosts.org',
+ '.pro-php.org',
+ '.prophp.org',
+ '.sprinterweb.net',
+ '.swiftphp.com',
+ '.xlphp.net',
+
+ // 209.190.16.83(mx2.byet.org)
+ '.instant-wiki.net',
+
+ // 209.190.16.84(mx3.byet.org)
+
+ // 209.190.16.85(mx4.byet.org)
+ '.instant-blog.net',
+ '.instant-forum.net',
+
+ '.byethost.com', // 209.190.18.138
+ ),
+ 'webmaster at bestgirlssex.info' => array( // by lemnaru ionut, ns *.hostgator.com
+ '.analmoviesite.info',
+ '.bestgirlssex.info',
+ '.boxvagina.info',
+ '.cyberlivegirls.info',
+ '.hotredgirls.info',
+ '.forsexlove.info',
+ '.hotnudezone.info',
+ '.hotredpussy.info',
+ '.lesbians-live.info',
+ '.lesbians-on-cam.info',
+ '.onlinegirlssite.info',
+ '.sexloveonline.info',
+ '.teensexcard.info',
+ '.teensexdirect.info',
+ '.topnudesite.info',
+ '.vaginafree.info',
+ '.webcam-show.info',
+ '.webcamshow.info',
+ '.youngsexchat.info',
+ '.yourcumshot.info',
+ ),
+ 'stocking.club at gmail.com' => array(
+ '.adulthotmodels.com', // by David Zajwzran
+ '.aretheshit.info', // by David Theissen (zjwzra at mail.ru)
+ '.cash-call.info', // by David Theissen
+ '.cialis-compare-levitra-viagra.info', // by David Theissen
+ '.cheap-online-viagra.info', // by David Theissen
+ '.drugcleansing.net', // by David Zajwzran
+ '.men-health-zone.com', // by David Theissen
+ '.purchase-viagra.info', // by David Theissen
+ '.realdrunkengirls.biz', // by David Theissen
+ '.sextoyslife.com', // by David Zajwzran
+ '.sexysubjects.info', // by David Zajwzran
+ '.shithotsex.info', // by David Theissen (zjwzra at mail.ru)
+ '.stocks-trader.info', // by David Theissen (zjwzra at mail.ru)
+ '.travelcardsite.info', // by David Theissen
+ ),
+ 'lustiq at p5com.com' => array(
+ '.wonkalook.com', // ns *.willywonka.co.in, 85.255.117.226
+ '.willywonka.co.in', // by Nick Priest (lustiq at p5com.com), 85.255.117.226
+ ),
+ 'web at 6jy.com' => array(
+ '.micro36.com', // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
+ '.movie1945.com', // by Zhang Teng, content from lineage.jp, hidden JavaScript
+ ),
+ 'mk_slowman at yahoo.com' => array( // by Mike Slowman (mk_slowman at yahoo.com)
+ '.auto-fgen.info',
+ '.fast-marketing.info',
+ '.from-usa.info',
+ '.generic-pharm.info',
+ '.pharm-directory.info',
+ '.popular-people.info',
+ '.safe-health.info',
+ '.star-celebrities.info',
+ '.super-home-biz.info',
+ '.top5-auto.info',
+ '.top5-cars.info',
+ '.vip-furniture.info',
+ '.vip-pc.info',
+ '.vip-pets.info',
+ ),
+ 'abuse at search-store.org' => array(
+ '.travel-gen.info', // by Mike Slowman (abuse at search-store.org)
+ ),
+ 'Leading Edge Marketing Inc.' => array(
+ // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
+ '.abemedical.com',
+ '.attractwomennow.com',
+ '.bettersexmall.com',
+ '.buymaxoderm.com',
+ '.buyvprx.com',
+ '.genf20.com',
+ '.infinityhealthnews.com',
+ '.istnewsletter.com',
+ '.leadingedgecash.com',
+ '.leadingedgeherbals.com',
+ '.leadingedgevipsonly.com',
+ '.lecash.com',
+ '.leminfo.com',
+ '.proextendersystem.com',
+ '.provestra.com',
+ '.semenax.com',
+ '.shavenomore.com',
+ '.theedgenewsletter.com',
+ '.vigorelle.com',
+ '.vigrx.com',
+ '.vigrxplus.com',
+ '.wbstnewsletter.com',
+ ),
+ 'clickx at bk.ru' => array( // by Alexey Enrertov
+ '.coolget*.info' =>
+ '#^(?:.*\.)?' . 'coolget' .
+ '(?:bus|find|news|php|place|post|srch)' .
+ '\.info$#',
+ '.coolgirl*.info' =>
+ '#^(?:.*\.)?' . 'coolgirl' .
+ '(?:apple|fish|search)' .
+ '\.info$#',
+ '.coolmeet*.info' =>
+ '#^(?:.*\.)?' . 'coolmeet' .
+ '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
+ '\.info$#',
+ '.cool**.info' =>
+ '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
+ '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
+ '\.info$#',
+ '.freseasy*.info' =>
+ '#^(?:.*\.)?' . 'freseasy' .
+ '(?:apple|click|find|fish|post|search)' .
+ '\.info$#',
+ '.fres**.info' =>
+ '#^(?:.*\.)?' .
+ 'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
+ '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
+ '\.info$#',
+ // These are not found yet:
+ // fresgirlsrch.info
+ // fresadultapple.info
+ // fresadultclick.info
+ // frestheplace.info
+
+ // 66.232.113.44
+ '.nuhost.info',
+ '.susearch.info',
+
+ // 66.232.126.74(hv94.steephost.com)
+ '.dilej.com',
+ '.fyvij.com',
+ '.howus.com',
+ '.jisyn.com',
+ '.kaxem.com',
+ '.mihug.com',
+ '.mobyb.com',
+ '.qidat.com',
+ '.qihek.com',
+ '.ryzic.com',
+ '.sasuv.com',
+ '.tuquh.com',
+ '.vehyq.com',
+ '.wezid.com',
+ '.wifuj.com',
+ '.xijyt.com',
+ '.zuqyn.com',
+
+ '.mosugy.com',
+ ),
+ 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru
+ '.hitsearching.info',
+ '.hugeamountdata.info',
+ '.megafasthost.info',
+ '.real-big-host.info',
+ '.search4freez.info',
+ '.yasech.info',
+
+ // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
+ '.bymire.com',
+
+ // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
+ '.ligiwa.com',
+
+ '.mubeho.com',
+ ),
+ 'ice--man at mail.ru related' => array(
+ // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
+ '.bestcreola.com',
+ '.crekatierra.com',
+ '.creolafire.com',
+ '.crolik.com',
+ '.croller.cn',
+ '.ecrmx.com',
+ '.eflashpoint.com',
+ '.exoticmed.com',
+ '.feelview.com',
+ '.greatexotic.com',
+ '.icrtx.com',
+ '.icyhip.com',
+ '.icyiceman.com',
+ '.icypopular.com',
+ '.iflashpoint.com',
+ '.justmdx.com',
+ '.kiliusgroup.com',
+ '.klickerr.com',
+ '.klickerrworld.com',
+ '.kreolic.com',
+ '.margansitio.com',
+ '.margantierra.com',
+ '.mimargan.com',
+ '.oilkeys.com',
+ '.planetmdx.com',
+ '.thekeyse.com',
+ '.viewgreat.com',
+ '.yourcreola.com',
+
+ // 69.46.23.48
+ '.bestkilius.com',
+ '.crekadirecto.com',
+ '.getflashsite.com',
+ '.sucreka.com',
+ '.superkilius.com',
+
+ // 69.46.23.48 by bing-16 at ftunez.org
+ '.bovorup.cn',
+ '.litotar.cn',
+ '.nihydec.cn',
+
+ // 66.232.112.175 by bing-32 at ftunez.org
+ '.lasyxy.cn',
+
+ // by bing-65 at ftunez.org
+ '.coxyvuk.cn', // 66.232.120.111(non-existent)
+ '.comygyx.cn', // 66.232.120.112(non-existent)
+ '.gyqalec.cn', // 66.232.120.114(non-existent)
+ '.paluwir.cn', // 66.232.120.114(non-existent)
+ '.qunonid.cn', // 66.232.120.114(*snip*)
+ '.qupyvin.cn', // 66.232.120.115(non-existent)
+ '.ririjyz.cn', // 66.232.120.111(*snip*)
+ '.saralar.cn', // 66.232.120.113(non-existent)
+ '.vawomyl.cn', // 66.232.120.115(non-existent)
+
+ // 69.46.23.48 by clarkson-34 at ftunez.org
+ '.bumora.cn',
+ '.byxite.cn',
+ '.byxuqu.cn',
+ '.jadama.cn',
+ '.kybope.cn',
+ '.mefeki.cn',
+ '.mokiso.cn',
+ '.niqeme.cn',
+ '.pukafo.cn',
+ '.qesaxa.cn',
+ '.toxezi.cn',
+ '.tujudy.cn',
+ '.tutike.cn',
+
+ // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
+ '.cabino.cn',
+ '.cuwace.cn',
+ '.ferazi.cn',
+ '.gigywy.cn',
+ '.lapype.cn',
+ '.mewabe.cn',
+ '.pezegy.cn',
+ '.pyzuza.cn',
+ '.qypony.cn',
+ '.ropesy.cn',
+ '.wadyfe.cn',
+
+ // 69.46.23.48 clarkson-58 at ftunez.org
+ '.becabe.cn',
+ '.biciqy.cn',
+ '.bezymu.cn',
+ '.cifori.cn',
+ '.ciwyxi.cn',
+ '.dobari.cn',
+ '.dusofe.cn',
+ '.dutyda.cn',
+ '.dykanu.cn',
+ '.fakexu.cn',
+ '.fylema.cn',
+ '.godymo.cn',
+ '.hyhaxy.cn',
+ '.ganosi.cn',
+ '.kuxyju.cn',
+ '.lacezy.cn',
+ '.lonyru.cn',
+ '.lycato.cn',
+ '.nykyby.cn',
+ '.qyhuko.cn',
+ '.redere.cn',
+ '.riwimu.cn',
+ '.wopary.cn',
+ '.xizity.cn',
+ '.xuxusa.cn',
+
+ // by entretov-28 at ftunez.org
+ '.hotejen.cn', // 66.232.120.111(*snip*)
+ '.kyhadat.cn', // 66.232.120.115(*snip*)
+
+ // 69.46.23.48 by entretov-32 at ftunez.org
+ '.cihuji.cn',
+ '.deqyve.cn',
+ '.genefa.cn',
+ '.gujyju.cn',
+ '.hasadu.cn',
+ '.hedomi.cn',
+ '.kecicy.cn',
+ '.kipabo.cn',
+ '.manunu.cn',
+ '.musoru.cn',
+ '.myvuna.cn',
+ '.pikybe.cn',
+ '.riqawo.cn',
+ '.rufuxy.cn',
+ '.vyfilu.cn',
+ '.xadule.cn',
+ '.zolaxe.cn',
+ '.zerixu.cn',
+
+ // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
+ '.dozoda.cn',
+ '.nemipu.cn',
+
+ // entretov-84 at ftunez.org
+ '.muruvun.cn', // 66.232.120.114(*snip*)
+ '.favulol.cn', // 66.232.120.115(*snip*)
+ '.tixuqyx.cn', // 66.232.120.111(*snip*)
+
+ // 69.46.23.48 by jeremy-57 at ftunez.org
+ '.duzele.cn',
+ '.figede.cn',
+ '.fiwany.cn',
+ '.gyfalu.cn',
+ '.jepylo.cn',
+ '.nuqumy.cn',
+
+ // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
+ '.burahu.cn',
+ '.jydijy.cn',
+ '.komyby.cn',
+ '.najepa.cn',
+ '.pylobu.cn',
+ '.qofoly.cn',
+ '.sybuvi.cn',
+ '.vycexu.cn',
+ '.wotyqo.cn',
+ '.xudoli.cn',
+
+ // by entretov-28 at ftunez.org
+ '.xevavuv.cn', // 66.232.120.113(*snip*)
+
+ // by entretov-37 at ftunez.org
+ '.sadyroz.cn', // 66.232.120.114(*snip*)
+ '.zedutox.cn', // 66.232.120.112(non-existent)
+
+ // 66.232.112.175 by entretov-86 at ftunez.org
+ '.faweji.cn',
+ '.jypaci.cn',
+ '.xozuso.cn',
+
+ // 69.46.23.48 by miles-37 at ftunez.org
+ '.beqymo.cn',
+ '.ceqibi.cn',
+ '.dyraqo.cn',
+ '.qenedo.cn',
+ '.qurypa.cn',
+ '.siluvo.cn',
+ '.tujala.cn',
+ '.wukuwi.cn',
+ '.xenibo.cn',
+ '.xiculo.cn',
+ '.zabemu.cn',
+
+ // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
+ '.bevaka.cn',
+ '.fysyte.cn',
+ '.guxixu.cn',
+ '.hatoli.cn',
+ '.jitobu.cn',
+ '.juxeca.cn',
+ '.kifuhy.cn',
+ '.licila.cn',
+ '.mecomy.cn',
+ '.niryko.cn',
+ '.noxoco.cn',
+ '.qiwysu.cn',
+ '.tutysy.cn',
+
+ // by oker-74 at ftunez.org
+ '.navufol.cn',
+
+ // by oker-97 at ftunez.org
+ '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com)
+ '.mesyvuc.cn', // 66.232.120.111(*snip*)
+ '.nyjyzup.cn', // 66.232.127.126(*snip*)
+ '.qagibit.cn', // 66.232.120.114(*snip*)
+ '.rovazaw.cn', // 66.232.120.112(*snip*)
+ '.tozojug.cn', // 66.232.120.111(*snip*)
+ '.xywataw.cn', // 66.232.120.112(*snip*)
+
+ // by polet-20 at ftunez.org
+ '.mopoxon.cn', // 66.232.127.126(*snip*)
+
+ // 66.232.112.175 by sabrosky-49 at ftunez.org
+ '.gywiqe.cn',
+ '.jotapo.cn',
+ '.jywixa.cn',
+
+ // 69.46.23.48 by sabrosky-60 at ftunez.org
+ '.bawegap.cn',
+ '.buremyl.cn',
+ '.cilybut.cn',
+ '.cutufek.cn',
+ '.defypyr.cn',
+ '.femaxij.cn',
+ '.gelejo.cn',
+ '.gocylyv.cn',
+ '.kehiqaq.cn',
+ '.ninyjit.cn',
+ '.ruroruw.cn',
+ '.vetehow.cn',
+
+ // 69.46.23.48 sabrosky-85 at ftunez.org
+ '.banyla.cn',
+ '.bubaqu.cn',
+ '.bygage.cn',
+ '.dafozy.cn',
+ '.kaxyjo.cn',
+ '.makyle.cn',
+ '.naleto.cn',
+ '.pidele.cn',
+ '.poqexa.cn',
+ '.pymaqo.cn',
+ '.qupiqy.cn',
+ '.reqefy.cn',
+ '.sopocy.cn',
+ '.vuhexo.cn',
+ '.weryso.cn',
+ '.wubula.cn',
+ '.xufuxy.cn',
+ '.zuhyxu.cn',
+
+ // 69.46.23.48 by tribiani-97 at ftunez.org
+ '.dyxorod.cn',
+ '.firywoz.cn',
+ '.jixezyx.cn',
+ '.joveraw.cn',
+ '.jowaxup.cn',
+ '.nodarej.cn',
+ '.pimijom.cn',
+ '.tugupeg.cn',
+
+ // 66.232.112.175 by abuse-here at inbox.ru
+ '.catybe.cn',
+ '.jytame.cn',
+ '.wygete.cn',
+ ),
+ '74.50.97.*' => array(
+ '.kaqeje.com', // 74.50.97.51(non-existent) by abuse-here at inbox.ru
+ '.cumimo.com', // 74.50.97.51(non-existent) by olga at ike.com
+ '.kaxavo.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
+ '.hoheru.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
+ '.tyqoti.com', // 74.50.97.52(non-existent) by anna at hotmail.com
+ '.fupopu.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
+ '.poxupo.com', // 74.50.97.53(non-existent) by inna at gmail.com
+ '.kuluvo.com', // 74.50.97.53(non-existent) by gunter at ftunez.org
+ '.wugoba.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
+ '.civuhe.com', // 74.50.97.54(non-existent) by olga at ike.com
+ '.zasuly.com', // 74.50.97.54(non-existent) by olga at ike.com
+ '.liwowu.com', // 74.50.97.54(non-existent) by abuse-here at inbox.ru
+ '.vobime.com', // 74.50.97.55(non-existent) by inna at gmail.com
+ '.nyrive.com', // 74.50.97.55(non-existent) by anna at hotmail.com
+ '.hehepu.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
+ '.bynute.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
+
+ '.sevimy.com', // 66.232.124.12(time-out) by inna at gmail.com
+ '.gapubo.com', // 66.232.124.12(time-out) by gunter at ftunez.org
+ '.vejoku.com', // 66.232.124.12(time-out) by olga at ike.com
+ '.qysahu.com', // 66.232.124.12(time-out) by abuse-here at inbox.ru
+ '.hidolu.com', // 66.232.124.13(time-out) by inna at gmail.com
+ '.tetace.com', // 66.232.124.13(time-out) by gunter at ftunez.org
+ '.vuxilu.com', // 66.232.124.13(time-out) by olga at ike.com
+ '.teboca.com', // 66.232.124.13(time-out) by olga at ike.com
+ '.dizive.com', // 66.232.124.14(time-out) by olga at ike.com
+ '.peduxe.com', // 66.232.124.14(time-out) by gunter at ftunez.org
+ '.sybyna.com', // 66.232.124.14(time-out) by gunter at ftunez.org
+ '.bepofe.com', // 66.232.124.15(time-out) by anna at hotmail.com
+ '.kuloja.com', // 66.232.124.15(time-out) by gunter at ftunez.org
+ '.tetadu.com', // 66.232.124.15(time-out) by inna at gmail.com
+ '.qilato.com', // 66.232.124.15(time-out) by inna at gmail.com
+ '.lobimi.com', // 66.232.124.16(time-out) by olga at ike.com
+ '.tazuwe.com', // 66.232.124.16(time-out) by olga at ike.com
+ '.pihufo.com', // 66.232.124.16(time-out) by olga at ike.com
+ '.decewa.com', // 66.232.124.16(time-out) by gunter at ftunez.org
+
+ '.lynymu.com', // 206.51.226.194(time-out) by abuse-here at inbox.ru
+ '.saciqo.com', // 206.51.226.194(time-out) by olga at ike.com
+ '.zalajy.com', // 206.51.226.194(time-out) by inna at gmail.com
+ '.hisimy.com', // 206.51.226.194(time-out) by inna at gmail.com
+ '.qysowe.com', // 206.51.226.194(time-out) by olga at ike.com
+ ),
+ 'nijeoi at hotmai.com' => array(
+ // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
+ '.bowij.com',
+ '.bozib.com',
+ '.cavux.com',
+ '.dipov.com',
+ '.gumoz.com',
+ '.hakyb.com',
+ '.hehyv.com',
+ '.hepyt.com',
+ '.howoj.com',
+ '.jywaz.com',
+ '.ka4search.info', // Found at faweji.cn/ and jytame.cn/, / forbidden
+ '.kyheq.com',
+ '.kyzad.com',
+ '.qicad.com',
+ '.qubyd.com',
+ '.mocyq.com',
+ '.muloq.com',
+ '.myxim.com',
+ '.nufyp.com',
+ '.waqog.com',
+ '.wyduc.com',
+ '.xefyv.com',
+ '.xomej.com',
+ '.xomip.com',
+ '.xykyl.com',
+ '.zakuw.com',
+ '.zeliw.com',
+ '.zimev.com',
+ '.zipif.com',
+
+ // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
+ '.tycoco.com',
+
+ // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
+ '.pufeqa.com',
+
+ '.xehymi.com',
+ ),
+ 'niichka at hotmail.com' => array(
+ // 66.232.113.44, the same approach and IP of clickx at bk.ru
+ '.aerosearch.info',
+ '.freader.info',
+ '.info4searchz.info',
+ '.nice-host.info',
+ '.realyfast.info',
+ '.resuts.info',
+
+ // 66.232.126.74, the same approach and IP of clickx at bk.ru
+ '.bepoh.com',
+ '.gufiq.com',
+ '.kedyh.com',
+ '.pofyb.com',
+ '.rurid.com',
+ '.vucaj.com',
+ '.vuwir.com',
+
+ // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
+ '.bejefe.com',
+
+ // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
+ '.tidawu.com',
+
+ // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
+ '.rofuqa.com',
+ ),
+ 'porychik at hot.ee' => array( // by Igor
+ '.tedstate.info', // "Free Web Hosting"
+ '.giftsee.com',
+ ),
+ 'admin at pertol.info' => array(
+ // 81.0.195.189 "Free Web Hosting"
+ '.laparka.cn',
+ '.mirlos.cn',
+ '.oldmoms.cn',
+
+ // 217.11.233.64(timed-out)
+ '.ejmpep.cn', // by admin at pertol.info
+ '.ytere.cn', // by admin at x2t.com
+
+ '.pertol.info', // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
+ '.pornography-world.com', // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
+
+ // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
+ '.new-greece-travel.com',
+ '.peraonline.info',
+
+ '.barkman.cn',
+ ),
+
+ 'aofa at vip.163.com' => array(
+ '.bdjyw.net', // by gaoyun, infected images, iframe to 5944.net's VBScript
+ '.5944.net',
+ ),
+ 'zerberster at gmail.com' => array( // by Curtis D. Pick, / not found
+ '.maxrentcar.info',
+ '.newsonyericsson.info',
+ '.pornositeworld.biz',
+ '.rentcarweb.info',
+ '.xxxdomainsex.biz',
+ ),
+ 'kopper1970 at gmail.com' => array(
+ '.cardealerall.info', // by Green
+ '.donatecarsales.info', // by Sipil
+ '.ringtonewilly.info', // by Sipil
+ '.travelstraveling.info', // by Chinik
+ '.viagrabuyonline.org', // by Sipil
+ '.viagraorderbuy.com', // by Anatol
+ '.worldcuptourism.info', // by Sipil
+ ),
+ 'lisaedwards at ledw.th' => array( // by Lisa Edwards
+ '.globalinfoland.info',
+ '.goodlifesearch.info',
+ '.hotnetinfo.info',
+ '.hotpornmovies.org',
+ '.infopilot.info',
+ ),
+ 'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
+ '.bang-bro.org',
+ '.datinghost.info',
+ '.hello-craulers.info',
+ '.free-blog-host.info',
+ '.sucking-boobs.info',
+ ),
+ 'chub at seznam.cz' => array( // "CamsGen 1.0" by Lee Chen Ho
+ '.allcamsguide.info',
+ '.camerascams.info',
+ '.camerasera.info',
+ '.girlcamsworld.info',
+ '.hiddenlimocams.info',
+ '.redlivecams.info',
+ '.spycamsgear.info',
+ '.spycamssite.info',
+ '.supercamsusa.info',
+ '.thecamsnow.info',
+ ),
+ '87.242.116.81' => array(
+ '.axit.ru', // by Sergej L Ivanov (deeeport at yandex.ru)
+ '.bilbidon.ru', // by Ilya S Vorobiyov (reginamedom at yandex.ru)
+ '.flating.ru', // by Sergej L Ivanov (deeeport at yandex.ru)
+ '.kalisto.ru', // by Vladimir I Sokolov (azimut at gmail.ru)
+ '.sanartuk.ru', // by Vladimir I Noskov (hoskv2003 at gmail.ru)
+ ),
+ '208.70.75.153' => array(
+ '.cerc-fi.info', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-fo.info', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-no.info', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-on.info',
+ '.cerc-sv.info', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-sx.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-te.info', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-tr.info',
+ '.cerc-tw.info',
+ '.cerc-fi.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-fo.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-no.org', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-on.org', // by cerca-one at ya.ru
+ '.cerc-sv.org', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-sx.org', // by Kon Bi (cerca-two at ya.ru)
+ '.cerc-te.org', // by Ru Lee (cerca-tree at ya.ru)
+ '.cerc-tr.org', // by cerca-one at ya.ru
+ '.cerc-tw.org', // by cerca-one at ya.ru
+ '.cerca-fi.org', // by orgitaly1 at ya.ru
+ '.cerca-fo.info',
+ '.cerca-no.info',
+ '.cerca-on.info',
+ '.cerca-sv.info',
+ '.cerca-sx.org', // by orgitaly2 at ya.ru
+ '.cerca-te.info',
+ '.cerca-tr.info',
+ '.cerca-sx.org',
+ '.cerca-tr.org', // orgitaly1 at ya.ru
+ '.ricerca-fiv.org', // orgitaly1 at ya.ru
+ '.ricerca-fo.info',
+ '.ricerca-one.org',
+ '.ricerca-sv.org',
+ '.ricerca-sx.org',
+ '.ricerca-te.org',
+ '.ricerca-tw.org', // orgitaly1 at ya.ru
+ '.subit01.org',
+ '.subit02.org',
+ '.subit03.org',
+ '.subit04.org',
+ '.subit05.org',
+ '.subit06.org',
+ '.subit01.info',
+ '.subit02.info',
+ '.subit03.info',
+ '.subit04.info',
+ '.subit05.info',
+ '.subit06.info',
+ ),
+ 'ernestppc at yahoo.com' => array( // by Anrey Markov (ernestppc at yahoo.com)
+ '.5-base.com',
+ '.pharmacy-style.com',
+ ),
+ 'snmaster at yandex.ru' => array( // by Andrey M Somov (snmaster at yandex.ru)
+ '.ista-2006.ru',
+ '.wefas.ru',
+ ),
+ 'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
+ '.tourismworldsite.info',
+ '.yourtourismtravel.info',
+ ),
+ 'x-mail007 at mail.ru' => array( // by Boris britva (x-mail007 at mail.ru)
+ '.easyfindcar.info',
+ '.siteinfosystems.info',
+ ),
+ 'smesh1155 at gmail.com' => array(
+ '.hospitalforyou.info', // by Gimmi
+ '.thephentermineonline.info', // by Kipola
+ ),
+ 'supermaster at pisem.net' => array( // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
+ '.kiski.net.in',
+ '.pipki.org.in',
+ '.popki.ind.in',
+ '.siski.co.in',
+ ),
+ 'tiptronikmike at mail.com' => array(
+ 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
+ // by Michael Tronik (tiptronikmike at mail.com), e.g.
+ // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
+ // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
+ //'.i0sex.info', // Michael
+ //'.i1sex.info', // Michael
+ //'.i2sex.info', // Martin
+ //'.i3sex.info', // Martin
+ //'.i4sex.info', // Adulterra
+ //'.i5sex.info', // Adulterra
+ //[irvyz]6sex.info not found
+ '.i8sex.info', // by Martin
+ ),
+ 'skuarlytronald at mail.com' => array(
+ '.girlsfreewild.info', // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
+ '.girlsgoingmad.info', // 64.27.13.120
+ '.girlsgonewildside.info', // 64.27.13.120
+ ),
+ '66.232.109.250' => array(
+ '.1626pornporno.info',
+ '.1851pornporno.info',
+ '.1876pornporno.info',
+ '.476pornporno.info',
+ ),
+ 'LiveAdultHost.com' => array( // by Daniel Simeonov (dsim at mbox.contact.bg)
+ '.compactxxx.com',
+ '.eadulthost.com',
+ '.eadultview.com',
+ '.eroticpool.net',
+ '.ipornservice.com',
+ '.liveadulthost.com',
+ '.nudepal.com',
+ '.sweetservers.com',
+ ),
+ 'support at orgija.org' => array(
+ '.assfuckporn.org',
+ '.dosugmos.org',
+ '.fuckporn.org',
+ '.girlsdosug.org',
+ '.girlsporno.org',
+ '.moscowintim.org',
+ '.pornass.org',
+ '.pornopussy.org',
+ '.progirlsporn.org',
+ '.pussypornogirls.org',
+ ),
+ '125.65.112.93' => array(
+ '.gamanir.com', // by yangjianhe (upload888 at 126.com), malicious file
+ '.twurbbs.com', // by mingzhong ni (ggyydiy at 163.com)
+ ),
+ 'm_koz at mail.ru' => array( // 217.11.233.76 by Kozlov Maxim
+ '.beta-google.com',
+ '.tv-reklama.info',
+ '.ebooktradingpost.com', // Anonymous but 217.11.233.76, ns *.ruswm.com
+ '.constitutionpartyofwa.org', // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
+ ),
+ '81.0.195.148' => array( // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
+ '.abobrinha.org',
+ '.aneurysmic.com', // / not found
+ '.physcomp.org', // / not found
+ '.seriedelcaribe2006.org',
+ '.refugeeyouthinamerica.com',
+ ),
+ 'skip_20022 at yahoo.com' => array(
+ // 203.174.83.55
+ '.a28hosting.info', // by Bill Jones
+ '.besthealth06.org', // by yakon, "Free Web Hosting Services" but "BestHealth"
+ '.besthentai06.org', // by yakon
+ ),
+ 'USFINE.com' => array(
+ '.usfine.com', // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
+ '.usfine.net', // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
+ ),
+ '68.178.211.57' => array(
+ '.igsstar.com', // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
+ '.powerleveling-wow.com', // 68.178.211.57 by zhang jun (zpq689 at 163.com)
+ ),
+ 'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
+ '.google-yahoo-msn.org',
+ '.expedia-travel.org',
+ ),
+ 'admin at newestsearch.com' => array( // by Gibrel Sitce
+ '.emr5ce.org',
+ '.wfe7nv.org',
+ '.xyr99yx.org',
+ ),
+ '203.171.230.39' => array(
+ // by 51shell at 163.com
+ '.amatou-fc2.com',
+
+ // registrar bizcn.com, iframe + cursor
+ '.playonlinenc.com',
+ '.playboss-jp.com',
+ ),
+ 'Digi-Rock.com' => array(
+ '.rom776.com',
+ // owner-organization: DIGIROCK, INC.
+ // owner-email: domain-contact at digi-rock.com
+ // with an external ad-and-JavaScript,
+ // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
+ // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
+ ),
+ 'snap990 at yahoo.com' => array( // by John Glade (snap990 at yahoo.com)
+ '.date-x.info', // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
+ '.getrun.cn', // 208.73.34.48
+ '.ipod-application.info', // NO IP
+ '.love-total.net', // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
+ '.stonesex.info', // NO IP, was 74.50.97.136
+ ),
+ 'germerts at yandex.ru' => array(
+ // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
+ '.andatra.info',
+ '.banchitos.info',
+ '.batareya.info',
+ '.blevota.info',
+ '.broneslon.info',
+ '.gamadril.info',
+ '.gipotenuza.info',
+ '.govnosaklo.info',
+ '.muflon.info',
+ '.termitnik.info',
+ '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..)
+ ),
+ '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru)
+ '.acronis-true-image.info',
+ '.calcio-xp.info',
+ '.cosanova.info',
+ '.cose-rx.info',
+ '.dictip.info',
+ '.findig.info',
+ '.fotonow.info',
+ '.lavoro-tip.info',
+ '.loan-homes.info',
+ '.mionovita.info',
+ '.mustv.info',
+ '.newsnaked.info',
+ '.online-tod.info',
+ '.opakit.info',
+ '.opanow.info',
+ '.opriton.info',
+ '.porta-bl.info',
+ '.refdif.info',
+ '.xzmovie.info',
+ ),
+ '84.252.148.120 etc' => array(
+ '.isurfind.ru', // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
+ '.planetavilton.info', // 84.252.148.120
+ '.softfind.info', // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
+ ),
+ 'cxh at 99jk.com' => array( // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
+ '.99jk.com',
+ '.99jk.com.cn',
+ '.99jk.cn',
+ ),
+ 'kiler81 at yandex.ru' => array( // by Vasiliy (kiler81 at yandex.ru)
+ '.kliktop.biz',
+ '.kliktop.org',
+ '.pharmatop.us',
+ '.supertop.us',
+ '.supervaizer.info',
+ ),
+ 'infomed2004 at mail.ru' => array( // by Andrey Ushakov (infomed2004 at mail.ru)
+ '.freeamateursexx.info', // 81.0.195.228
+ '.freeanalsexx.info', // 217.11.233.97
+ '.freegaysexx.info', // 81.0.195.228
+ ),
+ 'support at dns4me.biz' => array( // 89.149.228.237 by John Black (support at dns4me.biz)
+ '.abbhi.info',
+ '.gayblogguide.biz',
+ '.huope.info',
+ '.thebdsmday.info',
+ '.zioprt.info', // 89.149.228.237
+ ),
+ 'dzheker at yandex.ru' => array( // by dzheker at yandex.ru
+ '.boblisk.info',
+ '.factyri.info',
+ '.jorge1.info',
+ ),
+ 'lichincool at gmail.com' => array( // 72.232.229.115 by lichincool at gmail.com, / meanless
+ '.bestmindstorm.org',
+ '.redstoreonline.org',
+ ),
+ '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
+ '.8e8ae.net',
+ '.c-cock.com',
+ '.fa59eaf.com',
+ '.set-place.net',
+ '.sex-beauty.net',
+ ),
+ '84.252.148.140' => array( // 84.252.148.140(kratos.mchost.ru)
+ '.tomdir.info',
+ '.tomdirdirect.info',
+ '.tomdirworld.info',
+ '.treton.info',
+ '.trefas.info',
+ '.tretonmondo.info',
+ '.unefout.info',
+ '.unefoutprojet.info',
+ '.unitfree.info',
+ '.vilret.info',
+ '.vilttown.info',
+ '.votrefout.info',
+ '.warmfind.info',
+ '.warptop.info',
+ '.wildtram.info',
+ '.xofind.info',
+ '.xopdiscover.info',
+ '.xopfind.info',
+ '.xoplocate.info',
+ '.xopseek.info',
+ '.xpfirst.info',
+ '.xphighest.info',
+ '.xptop.info',
+ ),
+ 'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
+ '.myviagrasite.com', // 80.74.153.2
+ '.thecanadianmeds.com', // 80.74.153.17
+ ),
+ 'sania at zmail.ru' => array( // by Mark Williams (sania at zmail.ru)
+ '.bigemot.com', // 217.11.233.34, / not found
+ '.espharmacy.com', // 217.11.233.34
+ '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript
+ '.ringtonecooler.com', // 217.11.233.34
+ ),
+ 'dfym at dfym.cn' => array(
+ // ANI, JavaScript, iframe
+
+ // 220.166.64.44 by chen jinian (dfym at dfym.cn)
+ '.okwit.com',
+ '.sakerver.com',
+ '.motewiki.net',
+
+ '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
+
+ '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
+
+ // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
+ '.bbtv-chat.com',
+ '.ketubatle.com',
+ '.playonlanei.com',
+ '.rmtfcne.com',
+
+ ),
+ 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
+ '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net)
+ '.lookmedicine.info', // 206.161.205.22
+ '.lookshop.info', // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
+ '.searchhealth.info', // 206.161.205.30(seg.fau.lt)
+ '.worldsitesearch.info', // 209.8.40.59
+ ),
+ 'lee.seery at gmail.com' => array(
+ '.klikgoogle.com', // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
+ '.lingvol.com', // 64.21.34.55
+ '.micevol.com', // 64.21.34.55
+ '.heyhey.info', // 64.21.34.55 by anonymous
+ ),
+ '69-64-64-71.dedicated.abac.net etc' => array( // ns *.trklink.com
+ // 69-64-64-71.dedicated.abac.net
+ '.520-ard.info',
+ '.550bcards.info',
+ '.559-cads.info',
+ '.559caard.info',
+ '.565-caaard.info',
+ '.575cadr.info',
+ '.577cadrs.info',
+ '.590-acrds.info',
+ '.596-cadrs.info',
+ '.596caards.info',
+ '.596caaard.info',
+ '.asstablishingcads.info',
+ '.astablish-ard.info',
+ '.astablishcacrds.info',
+ '.begginers-acards.info',
+ '.begginersacrds.info',
+ '.beggingcaaard.info',
+ '.beginercacrds.info',
+ '.cacrdscreating.info',
+ '.caditbegging.info',
+ '.cadr-buildup.info',
+ '.cadr-establilsh.info',
+ '.cadrs-buildercredit.info',
+ '.cadrs570.info',
+ '.cads-565.info',
+
+ // 69-64-64-113.dedicated.abac.net
+ '.interistacards.info',
+ '.intrust-ards.info',
+ '.intrustacrds.info',
+ '.lfixed-ard.info',
+ '.lowerate-ard.info',
+ '.lowpercentage-ard.info',
+ '.lowpercentageacrd.info',
+ ),
+ 'acua at mail.ru' => array(
+
+ '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden
+
+ // by adventurer at allmyns.info
+ '.zgyfubsvi.cn', // 84.16.251.218(*.internetserviceteam.com)
+
+ // by webmaster at allmyns.info
+ '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS)
+ '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
+ '.lbtuo.cn', // 84.16.255.254(*.internetserviceteam.com)
+ '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net)
+ '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent)
+ '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
+ '.riumh.cn', // 84.16.226.28(*snip*)
+ '.zbtym.cn', // 84.16.251.219(*.internetserviceteam.com)
+ '.zjcgx.cn', // 217.20.112.102(*.internetserviceteam.com)
+ '.zxvlr.cn', // 84.16.255.253(*.internetserviceteam.com)
+
+ // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
+ '.dns4babka.info', // by acua at mail.ru
+
+ // by golubcov at dns4babka.info
+ '.toiulw.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
+
+ // by webmaster at dns4babka.info
+ '.credh.cn',
+ '.fucfv.cn',
+ '.gdxnk.cn',
+ '.sqrrt.cn',
+ '.ywtmd.cn',
+ '.kncqy.cn', // by webmaster at allmyns.info
+
+ // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
+ '.dedka2ns.info', // by acua at mail.ru
+
+ // by chasik at dedka2ns.info
+ '.vlqnoj.cn', // 84.16.251.220(*.internetserviceteam.com)
+
+ // by rochel at dedka2ns.info
+ '.fudhxjjqh.cn',
+
+ // by webmaster at dedka2ns.info
+ '.ascpo.cn',
+ '.jgycr.cn',
+ '.nqdtt.cn',
+ '.oswde.cn',
+ '.qeyig.cn',
+ '.soqsx.cn',
+ '.ukncd.cn',
+ '.zijgb.cn',
+
+ // 84.16.255.253(*snip*), / says 'noy found'
+ '.dns4dedka.info', // by acua at mail.ru
+
+ // by aleon at dns4dedka.info
+ '.afjjvumqa.cn', // 84.16.249.240(*snip*)
+
+ // by dig at dns4dedka.info
+ '.bdnge.cn', // 84.16.226.28(*snip*)
+ '.dcdsu.cn', // 217.20.112.102(*snip*)
+ '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
+ '.frvdv.cn', // 84.16.226.28(*snip*)
+ '.heulw.cn', // 84.16.226.217(*snip*)
+ '.hissw.cn', // 84.16.249.240(*snip*)
+ '.lwqjr.cn', // 84.16.255.253(*snip*)
+ '.obwew.cn', // 84.16.251.218(*snip*)
+ '.otkiu.cn', // 84.16.255.254(*snip*)
+ '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com)
+ '.rgjcs.cn', // 84.16.251.219(*snip*)
+ '.rjskp.cn', // 84.16.249.241(*snip*)
+ '.sokrp.cn', // 84.16.226.217(*snip*)
+ '.ubtnp.cn', // 84.16.226.29(*snip*)
+ '.vdecc.cn', // 84.16.226.29(*snip*)
+ '.vgkkc.cn', // 89.149.196.72(*snip*)
+ '.vqsmy.cn', // 84.16.249.239(*snip*)
+ '.xcmsp.cn', // 84.16.251.223(freebsd .. what)
+ '.xiuky.cn', // 84.16.251.222(*snip*)
+ '.xrqcd.cn', // 89.149.196.19(*snip*)
+
+ // by la at dns4dedka.info
+ '.aeyzf.cn', // 84.16.251.218(*snip*)
+ '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
+ '.bgslu.cn', // 89.149.228.163(*snip*)
+ '.dxouw.cn', // 84.16.255.253(*snip*)
+ '.ecsbe.cn', // 84.16.251.218(*snip*)
+ '.eothy.cn', // 84.16.249.241(*snip*)
+ '.epocy.cn', // 84.16.251.220(*snip*)
+ '.ewvjw.cn', // 89.149.196.72(*snip*)
+ '.faacz.cn', // 84.16.251.222(*snip*)
+ '.filun.cn', // 89.149.196.72(*snip*)
+ '.fzdpk.cn', // 84.16.249.239(*snip*)
+ '.hatyg.cn', // 84.16.251.223(*snip*)
+ '.hmtqn.cn', // 84.16.249.240(*snip*)
+ '.ibfte.cn', // 89.149.196.19(*snip*)
+ '.jcaym.cn', // 84.16.249.240(*snip*)
+ '.iqzaw.cn', // 84.16.255.254(*snip*)
+ '.jclsf.cn', // 84.16.249.240(*snip*)
+ '.jefdh.cn', // 84.16.249.240(*snip*)
+ '.kchjh.cn', // 84.16.251.219(*snip*)
+ '.krumo.cn', // 84.16.226.217(*snip*)
+ '.lbava.cn', // 217.20.112.102(*snip*)
+ '.mqrtw.cn', // 84.16.226.29(*snip*)
+ '.njpgv.cn', // 84.16.251.219(*snip*)
+ '.npovm.cn', // 84.16.226.28(*snip*)
+ '.nyobt.cn', // 89.149.196.19(*snip*)
+ '.ovxxt.cn', // 84.16.251.223(*snip*)
+ '.owhwz.cn', // 89.149.228.163(*snip*)
+ '.ozjyi.cn', // 84.16.249.241(*snip*)
+ '.pfnzj.cn', // 84.16.226.217(*snip*)
+ '.pixvf.cn', // 84.16.255.254(*snip*)
+ '.qydph.cn', // 89.149.228.163(*snip*)
+ '.rxens.cn', // 89.149.196.72(*snip*)
+ '.sojbp.cn', // 84.16.249.239(*snip*)
+ '.srths.cn', // 84.16.251.222(*snip*)
+ '.tdytc.cn', // 84.16.255.254(*snip*)
+ '.unquz.cn', // 84.16.251.223(*snip*)
+ '.uwcns.cn', // 89.149.196.19(*snip*)
+ '.vcbdm.cn', // 84.16.251.220(*snip*)
+ '.wnmat.cn', // 84.16.255.253(*snip*)
+ '.wttmr.cn', // 84.16.226.29(*snip*)
+ '.xpwib.cn', // 84.16.251.220(*snip*)
+ '.yrogt.cn', // 84.16.249.239(*snip*)
+
+ // by le at dns4dedka.info
+ '.goslw.cn', // 84.16.251.220(*snip*)
+ '.hqbmh.cn', // 84.16.251.223(*snip*)
+ '.iewik.cn', // 84.16.255.254(*snip*)
+ '.jnkeh.cn', // 89.149.228.163(*snip*)
+ '.pifyp.cn', // 89.149.228.163(*snip*)
+ '.nohyl.cn', // 89.149.196.72(*snip*)
+ '.nvzvx.cn', // 84.16.255.254(*snip*)
+ '.uchoe.cn', // 84.16.249.239(*snip*)
+ '.ujoyf.cn', // 84.16.251.218(*snip*)
+ '.ulfqh.cn', // 89.149.196.19(*snip*)
+ '.vxugv.cn', // 84.16.251.223(*snip*)
+ '.dbgti.cn', // 84.16.249.240(*snip*)
+ '.oelmv.cn', // 84.16.226.28(*snip*)
+ '.qniww.cn', // 84.16.251.218(*snip*)
+ '.vtvyq.cn', // 84.16.251.219(*snip*)
+ '.zqonm.cn', // 84.16.249.241(*snip*)
+
+ // by skspb at dns4dedka.info
+ '.hxkxkjy.cn', // 84.16.226.28(*snip*)
+
+ // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
+ '.bcpnb.cn',
+ '.cfbpr.cn',
+ '.dnndb.cn',
+ '.ekwme.cn',
+ '.iutps.cn',
+ '.ryftj.cn',
+ '.vxqcb.cn',
+
+ '.ns2best.info', // 89.149.196.19(*snip*) by acua at mail.ru
+ // by apple at ns2best.info
+ '.ptiey.cn', // 84.16.252.80(*.internetserviceteam.com)
+ // by paulwolf at ns2best.info
+ '.ifytzq.cn',
+
+ '.sedns.info', // 84.16.226.216(*snip*) by acua at mail.ru
+ // by pigato at sedns.info
+ '.xjvbunksa.cn', // 217.20.112.102(*snip*)
+ // by roschem at sedns.info
+ '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent)
+ // by op at sedns.info
+ '.bumfn.cn',
+ '.csmlu.cn',
+ '.epcwi.cn',
+ '.krwzn.cn',
+ '.lkvcp.cn',
+ '.mvmkh.cn',
+ '.nwpeg.cn',
+ '.rnqol.cn',
+ '.tyuaf.cn',
+ '.ucysa.cn',
+ '.vhyom.cn',
+ '.wtstu.cn',
+ '.zslxr.cn',
+ ),
+ 'gilvcta sy jilbertsbram.com' => array(
+ // 206.53.51.126
+ '.dsfljkeilm1.cn',
+ '.dsfljkeilm2.cn',
+ '.dsfljkeilm3.cn',
+ '.dsfljkeilm4.cn',
+ '.dsfljkeilm5.cn',
+ '.dsfljkeilm6.cn',
+ '.dsfljkeilm7.cn',
+ '.dsfljkeilm8.cn',
+ '.dsfljkeilm9.cn',
+ '.dsfljkeilm10.cn',
+ ),
+ 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com)
+
+ // 69.64.82.76(*.dedicated.abac.net)
+ '.bruised-criedit.info',
+ '.bruised-crtedit.info',
+ '.bruised-czrd.info',
+ '.bruisedcreditcars.info',
+ '.bruisedcreitcard.info',
+ '.bruisedcreitd.info',
+ '.buliderscreadet.info',
+ '.cleaningup-cdit.info',
+ '.cleaningup-cedict.info',
+ '.cleaningup-cerdic.info',
+ '.cleanup-crrd.info',
+
+ // 69.64.82.77(*.dedicated.abac.net)
+ '.bruised-crediot.info',
+ '.bruised-credtid.info',
+ '.bruisedcriet.info',
+ '.bruisedredit.info',
+ '.buliders-crdt.info',
+ '.buliders-cre4dit.info',
+ '.buliders-creadt.info',
+ '.buliders-credcards.info',
+ '.buliders-credictcard.info',
+ '.cleaningupccreditcards.info',
+ '.cleaningupcdedit.info',
+ '.cleaningupcedirt.info',
+ '.cleaningupceidt.info',
+ '.cleaningupcrasd.info',
+ '.cleaningupcreait.info',
+
+ // 69.64.82.78(*.dedicated.abac.net)
+ '.bruised-cridet.info',
+ '.bruised-drecit.info',
+ '.bruised-reditcards.info',
+ '.bruisedcredikt.info',
+ '.bruisedcredith.info',
+ '.bruisedcredtid.info',
+ '.cleanup-criet.info',
+ '.cleanup-csrds.info',
+ '.cleanup-dards.info',
+
+ // 69.64.82.79(*.dedicated.abac.net)
+ '.bruised-crediotcards.info',
+ '.bruised-creditcar.info',
+ '.bruised-creid.info',
+ '.bruised-creidtcard.info',
+ '.buliders-crdit.info',
+ '.buliders-creadet.info',
+ '.cleaningup-ceridt.info',
+ '.cleaningupcrecit.info',
+ '.cleaningupccritcard.info',
+ '.cleanupdredit.info',
+ '.cleanupredit.info',
+ ),
+ '.malwarealarm.com',
+ // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
+ // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
+ // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
+ '.viagraorder.org', // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
+ 'Inet-Traffic.com' => array(
+ // "The Inet-Traffic network offers over 6 million unique visitors a month."
+ //'.dcomm.com', // by D Communications Inc. S.A.
+
+ '.freehomepages.com', // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
+ '.inet-traffic.com', // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.114(www.searchit.com -> 205.237.204.151)
+ // ...
+ '.homepagez.com', // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
+ // ...
+ '.pagerealm.com', // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
+ '.koolpages.com', // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
+ '.oddworldz.com', // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cybcity.com', // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cybamall.com', // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
+ '.haywired.com', // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cyberturf.com', // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
+ '.dazzled.com', // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
+ '.megaone.com', // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.131(www.powow.com -> 205.237.204.136)
+ // 205.237.204.132(www.pcpages.com -> 205.237.204.135)
+ // ...
+ '.pcpages.com', // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
+ '.powow.com', // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.143(gameroom.com -> 72.32.22.210)
+ // ...
+ '.searchit.com', // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
+ // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
+ // ...
+ '.gameroom.com', // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
+ ),
+ 'andreyletov at yahoo.com related' => array(
+ '.180haifa.com', // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
+ '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
+ '.pills-supplier.com', // 89.248.99.118 by Boris Rabinovich
+
+ // 89.248.99.118 by anonymous
+ '.lpgpharmacy.com',
+ '.onlybestgalleries.com',
+ '.viagrabest.info',
+ '.viagrabestprice.info',
+ '.viagratop.info',
+
+ '.canadians-medication.com', // 89.248.99.118 by beseo at bk.ru
+ '.absulutepills.com', // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
+ '.eyzempills.com', // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
+ ),
+ 'alrusnac at hotmail.com' => array(
+ '.122mb.com', // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
+ //'.cigarettesportal.com', // 72.36.211.194(*.static.reverse.ltdomains.com)
+ ),
+ '203.116.63.123' => array(
+ '.fast4me.info', // by Hakan Durov (poddubok at inbox.ru), / is blank
+ '.fastmoms.info', // by Pavel Golyshev (pogol at walla.com), / is blank
+ ),
+ 'goodwin77 at bk.ru' => array( // ns *.petterhill.ru
+ '.autotowncar.cn', // 69.73.146.184
+ '.badgirlhome.cn', // 69.73.146.186
+ ),
+ 'Wmp.co.jp' => array(
+ // 219.94.134.208, ns *.dns.ne.jp, adult
+ '.celebe.net', // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
+ '.kousyunyu.com', // Admin/Billing/Tech Email: * at wmp.co.jp
+ // online-support.jp // 202.222.19.81(sv70.lolipop.jp), / blank
+ ),
+ 'Macherie.tv' => array(
+ '.macherie.tv', // 124.32.230.31, pr to himehime.com
+ '.himehime.com', // 124.32.230.94(recruit.macherie.tv)
+ '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
+ ),
+ 'admin at fr4f3ds.info' => array( // 217.11.233.54, / forbidden
+ '.yemine.info',
+ '.fr4f3ds.info',
+ ),
+ '75.126.129.222' => array(
+ // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
+ '.viagrabuycheap.info', // ns *.advernsserver.com
+ '.viagrageneric.org', // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
+ ),
+ 'sqr at bk.ru' => array(
+ // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
+ '.masserch.info', // "Free Web Hosting", spam
+ '.miserch.info',
+ ),
+ 'gangstadra at hotmail.com' => array(
+ '.kenrucky.com', // 82.98.86.167(*.sedoparking.com)
+ '.michigab.com', // 82.98.86.175(*.sedoparking.com)
+ '.pimperos.com', // 82.98.86.163(*.sedoparking.com)
+ '.pimpcupid.com', // 89.149.226.111(*.internetserviceteam.com)
+ ),
+ 'hosan by front.ru' => array(
+ '.salihome.info', // 206.53.51.155(non-existent)
+ '.online-freesearch.com', // 206.53.51.155
+ '.choosefinest.com', // 206.53.51.157
+ '.carsprojects.com', // 206.53.51.159
+ '.sport-brands.com', // 206.53.51.167
+ '.online-pharmaceutics.com', // 206.53.51.168
+ ),
+ '89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent)
+ '.canadians-health.com', // by andreyletov at yahoo.com
+ '.cialischeap.info',
+ '.superrv.info',
+ ),
+ 'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
+ '.hatbi.com',
+ '.justrty.com',
+ '.kol2you.com',
+ '.kolplanet.com',
+ '.myrty.com',
+ '.officialrty.com',
+ '.pbaol.com',
+ '.planetkol.com',
+ ),
+ 'Abra1.com' => array(
+ // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
+ '.abra1.com', // by info at maisontropicale.com
+ '.abra4.com', // by websites at caribbeanonlineinternational.com
+
+ // 209.85.51.238(*.opticaljungle.com -> non-existent)
+ '.abra2.com', // by domain at anondns.org
+ '.abra3.com', // by domain at anondns.org
+ ),
+ 'topdomainz at gmail.com' => array(
+ // 217.73.201.237 , ns *.parked.ru
+ '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info
+ '.aboutgooglegroup.info',
+ '.aboutgoogleimage.info',
+ '.aboutgooglemail.info',
+ '.aboutgooglemap.info',
+ '.aboutgooglenews.info',
+ '.aboutgooglevideo.info',
+ '.bestgoogleearth.info',
+ '.magicgoogleearth.info',
+ '.magicgooglemap.info',
+ '.magicgooglevideo.info',
+
+ // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
+ '.slajzer.info',
+ '.tonoscelular.info',
+ '.tonosmotorola.info',
+ ),
+ 'Anderson at extra.by' => array(
+ // Encoded JavaScript
+
+ // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
+ '.4cat.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6dir.info',
+ '.8dir.info',
+ '.9dir.info',
+ '.2pro.info',
+ '.5pro.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6pro.info',
+ '.7pro.info',
+ '.8pro.info',
+ '.9pro.info',
+ '.5sms.info',
+ '.6sms.info',
+ '.8sms.info',
+ '.9sms.info',
+ '.1upp.info',
+ '.2upp.info',
+ '.3upp.info',
+ '.4upp.info',
+ '.5upp.info',
+ '.6upp.info',
+ '.7upp.info',
+ '.8upp.info',
+ '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
+ '.2vip.info', // by Anderson at extra.by
+ '.4vip.info',
+ '.5vip.info',
+ '.6vip.info',
+ '.7vip.info',
+ '.8vip.info', // ns *.9upp.info
+ '.9vip.info',
+
+ // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
+ '.w3rar.info',
+ '.w3sex.info',
+ '.w3zip.info',
+ '.w3in.info',
+ '.w3out.info',
+ ),
+ 'zorkin87 at mail.ru' => array(
+ // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
+ '.ruqore.com',
+ '.goxama.com',
+ '.cazebi.com',
+ '.fukeqa.com',
+ '.fydoge.com',
+ '.jukaly.com',
+ '.jumoga.com',
+ '.jumuxo.com',
+ '.tyriva.com',
+ '.vudyho.com'
+ ),
+ 'jessicaeagloff at yahoo.co.uk' => array(
+ '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
+ '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com
+ '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
+ '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk
+ ),
+ 'qbbs at xinoffice.com' => array(
+ // ns *.name-services.com
+ '.lingage.com', // 8.15.231.118
+ '.puksins.com', // IP not allocated now
+ ),
+ 'advertolog at gmail.com' =>
+ // 81.0.250.86(network.upl.cz => non-existent) or
+ // 217.11.233.27
+ '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030
+ 'contact at aboutdomain.com' => array(
+ '.lopieur0.com', // Not match but used
+ '.lopieur1.com', // Not match but used
+ '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
+ ),
+ 'info at cash4wm.biz related' => array(
+ // 84.16.233.12(*.internetserviceteam.com)
+ '.newsblogforu.com',
+
+ // 84.16.235.141()
+ '.informator4you.com',
+
+ // 84.16.240.68(*.internetserviceteam.com)
+ '.absolute-best-site.com',
+ '.new-blog-for-you.com',
+
+ // 84.16.240.69(*.internetserviceteam.com)
+ '.best-sport-blog.com',
+ '.big-internet-site.com',
+ '.brendsite.com',
+ '.my-news-blog.com',
+
+ // 84.16.242.123(*.internetserviceteam.com)
+ '.best-news-blog.com',
+ '.site-with-content.com',
+
+ // The same method with info at cash4wm.biz
+ '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com),
+ '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com)
+ '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent)
+ '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
+ '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
+ '.bloginfo4u.info', // 89.149.247.25
+ ),
+ 'kerjy at yahoo.com' => array(
+ '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
+ '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
+ '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
+ '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
+ '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
+ ),
+ 'vme at hotmail.ru' => array(
+ '.seoblack.net', // 216.195.33.112(non-exsistent)
+ '.seoblack.biz', // 216.195.33.113(non-exsistent)
+ ),
+ 'john at hellomyns.info' => array(
+ '.cuhdw.cn', // 217.20.113.27, / nothing
+ '.byouz.cn', // 89.149.247.24, / nothing
+ '.idghc.cn',
+ '.inxrj.cn',
+ '.jqzdf.cn',
+ '.vsxej.cn',
+ '.wkgnr.cn',
+ ),
+ '.CN spam payload' => array(
+ '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com
+ '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com
+ '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net
+ '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
+ '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com
+ '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn
+ '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
+ '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com
+ '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com
+ '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
+ ),
+ 'Time2ns.info' => array(
+ // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
+ '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
+ '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
+ '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
+ ),
+ 'Ilovemyns.info' => array(
+ // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
+ ),
+ 'Freehostdns.info' => array(
+ // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
+ '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
+ '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
+ ),
+ 'Newns4me.info' => array(
+ // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
+ '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
+ ),