- '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
- '.mncxvsm.info', // 217.11.233.105, / blank
- '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
- '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
- '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com)
- '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
- '.wbtechs.us', // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
- '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
- '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com
-
- '.oppe.biz', // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
- '.thesuperxxx.com', // 81.29.249.27(non-existent)