+ '89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent)
+ '.canadians-health.com', // by andreyletov at yahoo.com
+ '.cialischeap.info',
+ '.superrv.info',
+ ),
+ 'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
+ '.hatbi.com',
+ '.justrty.com',
+ '.kol2you.com',
+ '.kolplanet.com',
+ '.myrty.com',
+ '.officialrty.com',
+ '.pbaol.com',
+ '.planetkol.com',
+ ),
+ 'Abra1.com' => array(
+ // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
+ '.abra1.com', // by info at maisontropicale.com
+ '.abra4.com', // by websites at caribbeanonlineinternational.com
+
+ // 209.85.51.238(*.opticaljungle.com -> non-existent)
+ '.abra2.com', // by domain at anondns.org
+ '.abra3.com', // by domain at anondns.org
+ ),
+ 'topdomainz at gmail.com' => array(
+ // 217.73.201.237 , ns *.parked.ru
+ '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info
+ '.aboutgooglegroup.info',
+ '.aboutgoogleimage.info',
+ '.aboutgooglemail.info',
+ '.aboutgooglemap.info',
+ '.aboutgooglenews.info',
+ '.aboutgooglevideo.info',
+ '.bestgoogleearth.info',
+ '.magicgoogleearth.info',
+ '.magicgooglemap.info',
+ '.magicgooglevideo.info',
+
+ // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
+ '.slajzer.info',
+ '.tonoscelular.info',
+ '.tonosmotorola.info',
+ ),
+ 'Anderson at extra.by' => array(
+ // Encoded JavaScript
+
+ // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
+ '.4cat.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6dir.info',
+ '.8dir.info',
+ '.9dir.info',
+ '.2pro.info',
+ '.5pro.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6pro.info',
+ '.7pro.info',
+ '.8pro.info',
+ '.9pro.info',
+ '.5sms.info',
+ '.6sms.info',
+ '.8sms.info',
+ '.9sms.info',
+ '.1upp.info',
+ '.2upp.info',
+ '.3upp.info',
+ '.4upp.info',
+ '.5upp.info',
+ '.6upp.info',
+ '.7upp.info',
+ '.8upp.info',
+ '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
+ '.2vip.info', // by Anderson at extra.by
+ '.4vip.info',
+ '.5vip.info',
+ '.6vip.info',
+ '.7vip.info',
+ '.8vip.info', // ns *.9upp.info
+ '.9vip.info',
+
+ // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
+ '.w3rar.info',
+ '.w3sex.info',
+ '.w3zip.info',
+ '.w3in.info',
+ '.w3out.info',
+ ),
+ 'zorkin87 at mail.ru' => array(
+ // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
+ '.ruqore.com',
+ '.goxama.com',
+ '.cazebi.com',
+ '.fukeqa.com',
+ '.fydoge.com',
+ '.jukaly.com',
+ '.jumoga.com',
+ '.jumuxo.com',
+ '.tyriva.com',
+ '.vudyho.com'
+ ),
+ 'jessicaeagloff at yahoo.co.uk' => array(
+ '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
+ '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com
+ '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
+ '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk
+ ),
+ 'qbbs at xinoffice.com' => array(
+ // ns *.name-services.com
+ '.lingage.com', // 8.15.231.118
+ '.puksins.com', // IP not allocated now
+ ),
+ 'advertolog at gmail.com' =>
+ // 81.0.250.86(network.upl.cz => non-existent) or
+ // 217.11.233.27
+ '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030
+ 'contact at aboutdomain.com' => array(
+ '.lopieur0.com', // Not match but used
+ '.lopieur1.com', // Not match but used
+ '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
+ ),
+ 'info at cash4wm.biz related' => array(
+ // 84.16.233.12(*.internetserviceteam.com)
+ '.newsblogforu.com',
+
+ // 84.16.235.141()
+ '.informator4you.com',
+
+ // 84.16.240.68(*.internetserviceteam.com)
+ '.absolute-best-site.com',
+ '.new-blog-for-you.com',
+
+ // 84.16.240.69(*.internetserviceteam.com)
+ '.best-sport-blog.com',
+ '.big-internet-site.com',
+ '.brendsite.com',
+ '.my-news-blog.com',
+
+ // 84.16.242.123(*.internetserviceteam.com)
+ '.best-news-blog.com',
+ '.site-with-content.com',
+
+ // The same method with info at cash4wm.biz
+ '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com),
+ '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com)
+ '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent)
+ '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
+ '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
+ '.bloginfo4u.info', // 89.149.247.25
+ ),
+ 'kerjy at yahoo.com' => array(
+ '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
+ '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
+ '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
+ '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
+ '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
+ ),
+ 'vme at hotmail.ru' => array(
+ '.seoblack.net', // 216.195.33.112(non-exsistent)
+ '.seoblack.biz', // 216.195.33.113(non-exsistent)
+ ),
+ 'john at hellomyns.info' => array(
+ '.cuhdw.cn', // 217.20.113.27, / nothing
+ '.byouz.cn', // 89.149.247.24, / nothing
+ '.idghc.cn',
+ '.inxrj.cn',
+ '.jqzdf.cn',
+ '.vsxej.cn',
+ '.wkgnr.cn',
+ ),
+ '.CN spam payload' => array(
+ '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com
+ '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com
+ '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net
+ '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
+ '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com
+ '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn
+ '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
+ '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com
+ '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com
+ '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
+ ),
+ 'Time2ns.info' => array(
+ // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
+ '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
+ '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
+ '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
+ ),
+ 'Ilovemyns.info' => array(
+ // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
+ ),
+ 'Freehostdns.info' => array(
+ // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
+ '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
+ '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
+ ),
+ 'Newns4me.info' => array(
+ // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
+ '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
+ ),