It would appear our favourite rogues, Personal Antivirus (PAV), are fans of Malware Domain List, as evidenced by a domain found by SysAdMini, administrator of MDL;
malwaredomainslist.com - 220.127.116.11 (static.18.104.22.168.clients.your-server.de)
Recognize the IP? You should do, it's associated with a previous post and belongs to Senpai IT Solutions.
Interestingly, the WhoIs for this one isn't hidden;
It's processors are also hosted at Senpai IT Solutions;
The e-mail address for the rogues are likely fake, especially the Hotmail ones, if the following is anything to go by (they're either fake, or the government is involved in this ;o));
I've removed reference to Senpai IT Solutions being part of the RBN as it appears I was wrong with this connection.