+ 'snap990 at yahoo.com' => array( // by John Glade (snap990 at yahoo.com)
+ '.date-x.info', // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
+ '.getrun.cn', // 208.73.34.48
+ '.ipod-application.info', // NO IP
+ '.love-total.net', // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
+ '.stonesex.info', // NO IP, was 74.50.97.136
+ ),
+ 'germerts at yandex.ru' => array(
+ // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
+ '.andatra.info',
+ '.banchitos.info',
+ '.batareya.info',
+ '.blevota.info',
+ '.broneslon.info',
+ '.gamadril.info',
+ '.gipotenuza.info',
+ '.govnosaklo.info',
+ '.muflon.info',
+ '.termitnik.info',
+ '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..)
+ ),
+ '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru)
+ '.acronis-true-image.info',
+ '.calcio-xp.info',
+ '.cosanova.info',
+ '.cose-rx.info',
+ '.dictip.info',
+ '.findig.info',
+ '.fotonow.info',
+ '.lavoro-tip.info',
+ '.loan-homes.info',
+ '.mionovita.info',
+ '.mustv.info',
+ '.newsnaked.info',
+ '.online-tod.info',
+ '.opakit.info',
+ '.opanow.info',
+ '.opriton.info',
+ '.porta-bl.info',
+ '.refdif.info',
+ '.xzmovie.info',
+ ),
+ '84.252.148.120 etc' => array(
+ '.isurfind.ru', // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
+ '.planetavilton.info', // 84.252.148.120
+ '.softfind.info', // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
+ ),
+ 'cxh at 99jk.com' => array( // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
+ '.99jk.com',
+ '.99jk.com.cn',
+ '.99jk.cn',
+ ),
+ 'kiler81 at yandex.ru' => array( // by Vasiliy (kiler81 at yandex.ru)
+ '.kliktop.biz',
+ '.kliktop.org',
+ '.pharmatop.us',
+ '.supertop.us',
+ '.supervaizer.info',
+ ),
+ 'infomed2004 at mail.ru' => array( // by Andrey Ushakov (infomed2004 at mail.ru)
+ '.freeamateursexx.info', // 81.0.195.228
+ '.freeanalsexx.info', // 217.11.233.97
+ '.freegaysexx.info', // 81.0.195.228
+ ),
+ 'support at dns4me.biz' => array( // 89.149.228.237 by John Black (support at dns4me.biz)
+ '.abbhi.info',
+ '.gayblogguide.biz',
+ '.huope.info',
+ '.thebdsmday.info',
+ '.zioprt.info', // 89.149.228.237
+ ),
+ 'dzheker at yandex.ru' => array( // by dzheker at yandex.ru
+ '.boblisk.info',
+ '.factyri.info',
+ '.jorge1.info',
+ ),
+ 'lichincool at gmail.com' => array( // 72.232.229.115 by lichincool at gmail.com, / meanless
+ '.bestmindstorm.org',
+ '.redstoreonline.org',
+ ),
+ '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
+ '.8e8ae.net',
+ '.c-cock.com',
+ '.fa59eaf.com',
+ '.set-place.net',
+ '.sex-beauty.net',
+ ),
+ '84.252.148.140' => array( // 84.252.148.140(kratos.mchost.ru)
+ '.tomdir.info',
+ '.tomdirdirect.info',
+ '.tomdirworld.info',
+ '.treton.info',
+ '.trefas.info',
+ '.tretonmondo.info',
+ '.unefout.info',
+ '.unefoutprojet.info',
+ '.unitfree.info',
+ '.vilret.info',
+ '.vilttown.info',
+ '.votrefout.info',
+ '.warmfind.info',
+ '.warptop.info',
+ '.wildtram.info',
+ '.xofind.info',
+ '.xopdiscover.info',
+ '.xopfind.info',
+ '.xoplocate.info',
+ '.xopseek.info',
+ '.xpfirst.info',
+ '.xphighest.info',
+ '.xptop.info',
+ ),
+ 'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
+ '.myviagrasite.com', // 80.74.153.2
+ '.thecanadianmeds.com', // 80.74.153.17
+ ),
+ 'sania at zmail.ru' => array( // by Mark Williams (sania at zmail.ru)
+ '.bigemot.com', // 217.11.233.34, / not found
+ '.espharmacy.com', // 217.11.233.34
+ '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript
+ '.ringtonecooler.com', // 217.11.233.34
+ ),
+ 'dfym at dfym.cn' => array(
+ // ANI, JavaScript, iframe
+
+ // 220.166.64.44 by chen jinian (dfym at dfym.cn)
+ '.okwit.com',
+ '.sakerver.com',
+ '.motewiki.net',
+
+ '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
+
+ '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
+
+ // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
+ '.bbtv-chat.com',
+ '.ketubatle.com',
+ '.playonlanei.com',
+ '.rmtfcne.com',
+
+ ),
+ 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
+ '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net)
+ '.lookmedicine.info', // 206.161.205.22
+ '.lookshop.info', // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
+ '.searchhealth.info', // 206.161.205.30(seg.fau.lt)
+ '.worldsitesearch.info', // 209.8.40.59
+ ),
+ 'lee.seery at gmail.com' => array(
+ '.klikgoogle.com', // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
+ '.lingvol.com', // 64.21.34.55
+ '.micevol.com', // 64.21.34.55
+ '.heyhey.info', // 64.21.34.55 by anonymous
+ ),
+ '69-64-64-71.dedicated.abac.net etc' => array( // ns *.trklink.com
+ // 69-64-64-71.dedicated.abac.net
+ '.520-ard.info',
+ '.550bcards.info',
+ '.559-cads.info',
+ '.559caard.info',
+ '.565-caaard.info',
+ '.575cadr.info',
+ '.577cadrs.info',
+ '.590-acrds.info',
+ '.596-cadrs.info',
+ '.596caards.info',
+ '.596caaard.info',
+ '.asstablishingcads.info',
+ '.astablish-ard.info',
+ '.astablishcacrds.info',
+ '.begginers-acards.info',
+ '.begginersacrds.info',
+ '.beggingcaaard.info',
+ '.beginercacrds.info',
+ '.cacrdscreating.info',
+ '.caditbegging.info',
+ '.cadr-buildup.info',
+ '.cadr-establilsh.info',
+ '.cadrs-buildercredit.info',
+ '.cadrs570.info',
+ '.cads-565.info',
+
+ // 69-64-64-113.dedicated.abac.net
+ '.interistacards.info',
+ '.intrust-ards.info',
+ '.intrustacrds.info',
+ '.lfixed-ard.info',
+ '.lowerate-ard.info',
+ '.lowpercentage-ard.info',
+ '.lowpercentageacrd.info',
+ ),
+ 'acua at mail.ru' => array(
+
+ '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden
+
+ // by adventurer at allmyns.info
+ '.zgyfubsvi.cn', // 84.16.251.218(*.internetserviceteam.com)
+
+ // by webmaster at allmyns.info
+ '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS)
+ '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
+ '.lbtuo.cn', // 84.16.255.254(*.internetserviceteam.com)
+ '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net)
+ '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent)
+ '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
+ '.riumh.cn', // 84.16.226.28(*snip*)
+ '.zbtym.cn', // 84.16.251.219(*.internetserviceteam.com)
+ '.zjcgx.cn', // 217.20.112.102(*.internetserviceteam.com)
+ '.zxvlr.cn', // 84.16.255.253(*.internetserviceteam.com)
+
+ // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
+ '.dns4babka.info', // by acua at mail.ru
+
+ // by golubcov at dns4babka.info
+ '.toiulw.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
+
+ // by webmaster at dns4babka.info
+ '.credh.cn',
+ '.fucfv.cn',
+ '.gdxnk.cn',
+ '.sqrrt.cn',
+ '.ywtmd.cn',
+ '.kncqy.cn', // by webmaster at allmyns.info
+
+ // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
+ '.dedka2ns.info', // by acua at mail.ru
+
+ // by chasik at dedka2ns.info
+ '.vlqnoj.cn', // 84.16.251.220(*.internetserviceteam.com)
+
+ // by rochel at dedka2ns.info
+ '.fudhxjjqh.cn',
+
+ // by webmaster at dedka2ns.info
+ '.ascpo.cn',
+ '.jgycr.cn',
+ '.nqdtt.cn',
+ '.oswde.cn',
+ '.qeyig.cn',
+ '.soqsx.cn',
+ '.ukncd.cn',
+ '.zijgb.cn',
+
+ // 84.16.255.253(*snip*), / says 'noy found'
+ '.dns4dedka.info', // by acua at mail.ru
+
+ // by aleon at dns4dedka.info
+ '.afjjvumqa.cn', // 84.16.249.240(*snip*)
+
+ // by dig at dns4dedka.info
+ '.bdnge.cn', // 84.16.226.28(*snip*)
+ '.dcdsu.cn', // 217.20.112.102(*snip*)
+ '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
+ '.frvdv.cn', // 84.16.226.28(*snip*)
+ '.heulw.cn', // 84.16.226.217(*snip*)
+ '.hissw.cn', // 84.16.249.240(*snip*)
+ '.lwqjr.cn', // 84.16.255.253(*snip*)
+ '.obwew.cn', // 84.16.251.218(*snip*)
+ '.otkiu.cn', // 84.16.255.254(*snip*)
+ '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com)
+ '.rgjcs.cn', // 84.16.251.219(*snip*)
+ '.rjskp.cn', // 84.16.249.241(*snip*)
+ '.sokrp.cn', // 84.16.226.217(*snip*)
+ '.ubtnp.cn', // 84.16.226.29(*snip*)
+ '.vdecc.cn', // 84.16.226.29(*snip*)
+ '.vgkkc.cn', // 89.149.196.72(*snip*)
+ '.vqsmy.cn', // 84.16.249.239(*snip*)
+ '.xcmsp.cn', // 84.16.251.223(freebsd .. what)
+ '.xiuky.cn', // 84.16.251.222(*snip*)
+ '.xrqcd.cn', // 89.149.196.19(*snip*)
+
+ // by la at dns4dedka.info
+ '.aeyzf.cn', // 84.16.251.218(*snip*)
+ '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
+ '.bgslu.cn', // 89.149.228.163(*snip*)
+ '.dxouw.cn', // 84.16.255.253(*snip*)
+ '.ecsbe.cn', // 84.16.251.218(*snip*)
+ '.eothy.cn', // 84.16.249.241(*snip*)
+ '.epocy.cn', // 84.16.251.220(*snip*)
+ '.ewvjw.cn', // 89.149.196.72(*snip*)
+ '.faacz.cn', // 84.16.251.222(*snip*)
+ '.filun.cn', // 89.149.196.72(*snip*)
+ '.fzdpk.cn', // 84.16.249.239(*snip*)
+ '.hatyg.cn', // 84.16.251.223(*snip*)
+ '.hmtqn.cn', // 84.16.249.240(*snip*)
+ '.ibfte.cn', // 89.149.196.19(*snip*)
+ '.jcaym.cn', // 84.16.249.240(*snip*)
+ '.iqzaw.cn', // 84.16.255.254(*snip*)
+ '.jclsf.cn', // 84.16.249.240(*snip*)
+ '.jefdh.cn', // 84.16.249.240(*snip*)
+ '.kchjh.cn', // 84.16.251.219(*snip*)
+ '.krumo.cn', // 84.16.226.217(*snip*)
+ '.lbava.cn', // 217.20.112.102(*snip*)
+ '.mqrtw.cn', // 84.16.226.29(*snip*)
+ '.njpgv.cn', // 84.16.251.219(*snip*)
+ '.npovm.cn', // 84.16.226.28(*snip*)
+ '.nyobt.cn', // 89.149.196.19(*snip*)
+ '.ovxxt.cn', // 84.16.251.223(*snip*)
+ '.owhwz.cn', // 89.149.228.163(*snip*)
+ '.ozjyi.cn', // 84.16.249.241(*snip*)
+ '.pfnzj.cn', // 84.16.226.217(*snip*)
+ '.pixvf.cn', // 84.16.255.254(*snip*)
+ '.qydph.cn', // 89.149.228.163(*snip*)
+ '.rxens.cn', // 89.149.196.72(*snip*)
+ '.sojbp.cn', // 84.16.249.239(*snip*)
+ '.srths.cn', // 84.16.251.222(*snip*)
+ '.tdytc.cn', // 84.16.255.254(*snip*)
+ '.unquz.cn', // 84.16.251.223(*snip*)
+ '.uwcns.cn', // 89.149.196.19(*snip*)
+ '.vcbdm.cn', // 84.16.251.220(*snip*)
+ '.wnmat.cn', // 84.16.255.253(*snip*)
+ '.wttmr.cn', // 84.16.226.29(*snip*)
+ '.xpwib.cn', // 84.16.251.220(*snip*)
+ '.yrogt.cn', // 84.16.249.239(*snip*)
+
+ // by le at dns4dedka.info
+ '.goslw.cn', // 84.16.251.220(*snip*)
+ '.hqbmh.cn', // 84.16.251.223(*snip*)
+ '.iewik.cn', // 84.16.255.254(*snip*)
+ '.jnkeh.cn', // 89.149.228.163(*snip*)
+ '.pifyp.cn', // 89.149.228.163(*snip*)
+ '.nohyl.cn', // 89.149.196.72(*snip*)
+ '.nvzvx.cn', // 84.16.255.254(*snip*)
+ '.uchoe.cn', // 84.16.249.239(*snip*)
+ '.ujoyf.cn', // 84.16.251.218(*snip*)
+ '.ulfqh.cn', // 89.149.196.19(*snip*)
+ '.vxugv.cn', // 84.16.251.223(*snip*)
+ '.dbgti.cn', // 84.16.249.240(*snip*)
+ '.oelmv.cn', // 84.16.226.28(*snip*)
+ '.qniww.cn', // 84.16.251.218(*snip*)
+ '.vtvyq.cn', // 84.16.251.219(*snip*)
+ '.zqonm.cn', // 84.16.249.241(*snip*)
+
+ // by skspb at dns4dedka.info
+ '.hxkxkjy.cn', // 84.16.226.28(*snip*)
+
+ // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
+ '.bcpnb.cn',
+ '.cfbpr.cn',
+ '.dnndb.cn',
+ '.ekwme.cn',
+ '.iutps.cn',
+ '.ryftj.cn',
+ '.vxqcb.cn',
+
+ '.ns2best.info', // 89.149.196.19(*snip*) by acua at mail.ru
+ // by apple at ns2best.info
+ '.ptiey.cn', // 84.16.252.80(*.internetserviceteam.com)
+ // by paulwolf at ns2best.info
+ '.ifytzq.cn',
+
+ '.sedns.info', // 84.16.226.216(*snip*) by acua at mail.ru
+ // by pigato at sedns.info
+ '.xjvbunksa.cn', // 217.20.112.102(*snip*)
+ // by roschem at sedns.info
+ '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent)
+ // by op at sedns.info
+ '.bumfn.cn',
+ '.csmlu.cn',
+ '.epcwi.cn',
+ '.krwzn.cn',
+ '.lkvcp.cn',
+ '.mvmkh.cn',
+ '.nwpeg.cn',
+ '.rnqol.cn',
+ '.tyuaf.cn',
+ '.ucysa.cn',
+ '.vhyom.cn',
+ '.wtstu.cn',
+ '.zslxr.cn',
+ ),
+ 'gilvcta sy jilbertsbram.com' => array(
+ // 206.53.51.126
+ '.dsfljkeilm1.cn',
+ '.dsfljkeilm2.cn',
+ '.dsfljkeilm3.cn',
+ '.dsfljkeilm4.cn',
+ '.dsfljkeilm5.cn',
+ '.dsfljkeilm6.cn',
+ '.dsfljkeilm7.cn',
+ '.dsfljkeilm8.cn',
+ '.dsfljkeilm9.cn',
+ '.dsfljkeilm10.cn',
+ ),
+ 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com)
+
+ // 69.64.82.76(*.dedicated.abac.net)
+ '.bruised-criedit.info',
+ '.bruised-crtedit.info',
+ '.bruised-czrd.info',
+ '.bruisedcreditcars.info',
+ '.bruisedcreitcard.info',
+ '.bruisedcreitd.info',
+ '.buliderscreadet.info',
+ '.cleaningup-cdit.info',
+ '.cleaningup-cedict.info',
+ '.cleaningup-cerdic.info',
+ '.cleanup-crrd.info',
+
+ // 69.64.82.77(*.dedicated.abac.net)
+ '.bruised-crediot.info',
+ '.bruised-credtid.info',
+ '.bruisedcriet.info',
+ '.bruisedredit.info',
+ '.buliders-crdt.info',
+ '.buliders-cre4dit.info',
+ '.buliders-creadt.info',
+ '.buliders-credcards.info',
+ '.buliders-credictcard.info',
+ '.cleaningupccreditcards.info',
+ '.cleaningupcdedit.info',
+ '.cleaningupcedirt.info',
+ '.cleaningupceidt.info',
+ '.cleaningupcrasd.info',
+ '.cleaningupcreait.info',
+
+ // 69.64.82.78(*.dedicated.abac.net)
+ '.bruised-cridet.info',
+ '.bruised-drecit.info',
+ '.bruised-reditcards.info',
+ '.bruisedcredikt.info',
+ '.bruisedcredith.info',
+ '.bruisedcredtid.info',
+ '.cleanup-criet.info',
+ '.cleanup-csrds.info',
+ '.cleanup-dards.info',
+
+ // 69.64.82.79(*.dedicated.abac.net)
+ '.bruised-crediotcards.info',
+ '.bruised-creditcar.info',
+ '.bruised-creid.info',
+ '.bruised-creidtcard.info',
+ '.buliders-crdit.info',
+ '.buliders-creadet.info',
+ '.cleaningup-ceridt.info',
+ '.cleaningupcrecit.info',
+ '.cleaningupccritcard.info',
+ '.cleanupdredit.info',
+ '.cleanupredit.info',
+ ),
+ '.malwarealarm.com',
+ // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
+ // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
+ // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
+ '.viagraorder.org', // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
+ 'Inet-Traffic.com' => array(
+ // "The Inet-Traffic network offers over 6 million unique visitors a month."
+ //'.dcomm.com', // by D Communications Inc. S.A.
+
+ '.freehomepages.com', // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
+ '.inet-traffic.com', // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.114(www.searchit.com -> 205.237.204.151)
+ // ...
+ '.homepagez.com', // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
+ // ...
+ '.pagerealm.com', // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
+ '.koolpages.com', // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
+ '.oddworldz.com', // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cybcity.com', // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cybamall.com', // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
+ '.haywired.com', // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
+ '.cyberturf.com', // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
+ '.dazzled.com', // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
+ '.megaone.com', // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.131(www.powow.com -> 205.237.204.136)
+ // 205.237.204.132(www.pcpages.com -> 205.237.204.135)
+ // ...
+ '.pcpages.com', // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
+ '.powow.com', // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
+ // ...
+ // 205.237.204.143(gameroom.com -> 72.32.22.210)
+ // ...
+ '.searchit.com', // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
+ // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
+ // ...
+ '.gameroom.com', // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
+ ),
+ 'andreyletov at yahoo.com related' => array(
+ '.180haifa.com', // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
+ '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
+ '.pills-supplier.com', // 89.248.99.118 by Boris Rabinovich
+
+ // 89.248.99.118 by anonymous
+ '.lpgpharmacy.com',
+ '.onlybestgalleries.com',
+ '.viagrabest.info',
+ '.viagrabestprice.info',
+ '.viagratop.info',
+
+ '.canadians-medication.com', // 89.248.99.118 by beseo at bk.ru
+ '.absulutepills.com', // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
+ '.eyzempills.com', // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
+ ),
+ 'alrusnac at hotmail.com' => array(
+ '.122mb.com', // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
+ //'.cigarettesportal.com', // 72.36.211.194(*.static.reverse.ltdomains.com)
+ ),
+ '203.116.63.123' => array(
+ '.fast4me.info', // by Hakan Durov (poddubok at inbox.ru), / is blank
+ '.fastmoms.info', // by Pavel Golyshev (pogol at walla.com), / is blank
+ ),
+ 'goodwin77 at bk.ru' => array( // ns *.petterhill.ru
+ '.autotowncar.cn', // 69.73.146.184
+ '.badgirlhome.cn', // 69.73.146.186
+ ),
+ 'Wmp.co.jp' => array(
+ // 219.94.134.208, ns *.dns.ne.jp, adult
+ '.celebe.net', // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
+ '.kousyunyu.com', // Admin/Billing/Tech Email: * at wmp.co.jp
+ // online-support.jp // 202.222.19.81(sv70.lolipop.jp), / blank
+ ),
+ 'Macherie.tv' => array(
+ '.macherie.tv', // 124.32.230.31, pr to himehime.com
+ '.himehime.com', // 124.32.230.94(recruit.macherie.tv)
+ '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
+ ),
+ 'admin at fr4f3ds.info' => array( // 217.11.233.54, / forbidden
+ '.yemine.info',
+ '.fr4f3ds.info',
+ ),
+ '75.126.129.222' => array(
+ // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
+ '.viagrabuycheap.info', // ns *.advernsserver.com
+ '.viagrageneric.org', // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
+ ),
+ 'sqr at bk.ru' => array(
+ // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
+ '.masserch.info', // "Free Web Hosting", spam
+ '.miserch.info',
+ ),
+ 'gangstadra at hotmail.com' => array(
+ '.kenrucky.com', // 82.98.86.167(*.sedoparking.com)
+ '.michigab.com', // 82.98.86.175(*.sedoparking.com)
+ '.pimperos.com', // 82.98.86.163(*.sedoparking.com)
+ '.pimpcupid.com', // 89.149.226.111(*.internetserviceteam.com)
+ ),
+ 'hosan by front.ru' => array(
+ '.salihome.info', // 206.53.51.155(non-existent)
+ '.online-freesearch.com', // 206.53.51.155
+ '.choosefinest.com', // 206.53.51.157
+ '.carsprojects.com', // 206.53.51.159
+ '.sport-brands.com', // 206.53.51.167
+ '.online-pharmaceutics.com', // 206.53.51.168
+ ),
+ '89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent)
+ '.canadians-health.com', // by andreyletov at yahoo.com
+ '.cialischeap.info',
+ '.superrv.info',
+ ),
+ 'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
+ '.hatbi.com',
+ '.justrty.com',
+ '.kol2you.com',
+ '.kolplanet.com',
+ '.myrty.com',
+ '.officialrty.com',
+ '.pbaol.com',
+ '.planetkol.com',
+ ),
+ 'Abra1.com' => array(
+ // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
+ '.abra1.com', // by info at maisontropicale.com
+ '.abra4.com', // by websites at caribbeanonlineinternational.com
+
+ // 209.85.51.238(*.opticaljungle.com -> non-existent)
+ '.abra2.com', // by domain at anondns.org
+ '.abra3.com', // by domain at anondns.org
+ ),
+ 'topdomainz at gmail.com' => array(
+ // 217.73.201.237 , ns *.parked.ru
+ '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info
+ '.aboutgooglegroup.info',
+ '.aboutgoogleimage.info',
+ '.aboutgooglemail.info',
+ '.aboutgooglemap.info',
+ '.aboutgooglenews.info',
+ '.aboutgooglevideo.info',
+ '.bestgoogleearth.info',
+ '.magicgoogleearth.info',
+ '.magicgooglemap.info',
+ '.magicgooglevideo.info',
+
+ // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
+ '.slajzer.info',
+ '.tonoscelular.info',
+ '.tonosmotorola.info',
+ ),
+ 'Anderson at extra.by' => array(
+ // Encoded JavaScript
+
+ // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
+ '.4cat.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6dir.info',
+ '.8dir.info',
+ '.9dir.info',
+ '.2pro.info',
+ '.5pro.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6pro.info',
+ '.7pro.info',
+ '.8pro.info',
+ '.9pro.info',
+ '.5sms.info',
+ '.6sms.info',
+ '.8sms.info',
+ '.9sms.info',
+ '.1upp.info',
+ '.2upp.info',
+ '.3upp.info',
+ '.4upp.info',
+ '.5upp.info',
+ '.6upp.info',
+ '.7upp.info',
+ '.8upp.info',
+ '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
+ '.2vip.info', // by Anderson at extra.by
+ '.4vip.info',
+ '.5vip.info',
+ '.6vip.info',
+ '.7vip.info',
+ '.8vip.info', // ns *.9upp.info
+ '.9vip.info',
+
+ // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
+ '.w3rar.info',
+ '.w3sex.info',
+ '.w3zip.info',
+ '.w3in.info',
+ '.w3out.info',
+ ),
+ 'zorkin87 at mail.ru' => array(
+ // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
+ '.ruqore.com',
+ '.goxama.com',
+ '.cazebi.com',
+ '.fukeqa.com',
+ '.fydoge.com',
+ '.jukaly.com',
+ '.jumoga.com',
+ '.jumuxo.com',
+ '.tyriva.com',
+ '.vudyho.com'
+ ),
+ 'jessicaeagloff at yahoo.co.uk' => array(
+ '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
+ '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com
+ '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
+ '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk
+ ),
+ 'qbbs at xinoffice.com' => array(
+ // ns *.name-services.com
+ '.lingage.com', // 8.15.231.118
+ '.puksins.com', // IP not allocated now
+ ),
+ 'advertolog at gmail.com' =>
+ // 81.0.250.86(network.upl.cz => non-existent) or
+ // 217.11.233.27
+ '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030
+ 'contact at aboutdomain.com' => array(
+ '.lopieur0.com', // Not match but used
+ '.lopieur1.com', // Not match but used
+ '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
+ ),
+ 'info at cash4wm.biz related' => array(
+ // 84.16.233.12(*.internetserviceteam.com)
+ '.newsblogforu.com',
+
+ // 84.16.235.141()
+ '.informator4you.com',
+
+ // 84.16.240.68(*.internetserviceteam.com)
+ '.absolute-best-site.com',
+ '.new-blog-for-you.com',
+
+ // 84.16.240.69(*.internetserviceteam.com)
+ '.best-sport-blog.com',
+ '.big-internet-site.com',
+ '.brendsite.com',
+ '.my-news-blog.com',
+
+ // 84.16.242.123(*.internetserviceteam.com)
+ '.best-news-blog.com',
+ '.site-with-content.com',
+
+ // The same method with info at cash4wm.biz
+ '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com),
+ '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com)
+ '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent)
+ '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
+ '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
+ '.bloginfo4u.info', // 89.149.247.25
+ ),
+ 'kerjy at yahoo.com' => array(
+ '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
+ '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
+ '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
+ '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
+ '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
+ ),
+ 'vme at hotmail.ru' => array(
+ '.seoblack.net', // 216.195.33.112(non-exsistent)
+ '.seoblack.biz', // 216.195.33.113(non-exsistent)
+ ),
+ 'john at hellomyns.info' => array(
+ '.cuhdw.cn', // 217.20.113.27, / nothing
+ '.byouz.cn', // 89.149.247.24, / nothing
+ '.idghc.cn',
+ '.inxrj.cn',
+ '.jqzdf.cn',
+ '.vsxej.cn',
+ '.wkgnr.cn',
+ ),
+ '.CN spam payload' => array(
+ '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com
+ '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com
+ '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net
+ '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
+ '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com
+ '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn
+ '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
+ '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com
+ '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com
+ '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
+ ),
+ 'Time2ns.info' => array(
+ // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
+ '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
+ '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
+ '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
+ ),
+ 'Ilovemyns.info' => array(
+ // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
+ ),
+ 'Freehostdns.info' => array(
+ // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
+ '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
+ '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
+ ),
+ 'Newns4me.info' => array(
+ // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
+ '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
+ ),