spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.172 2007/10/10 12:48:15 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         // Yours
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'amoo.org',
 177         'web.archive.org',              ///web/2
 178         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 179                 'jmp2.net',
 180                 '2me.tw',
 181         ),
 182         'ataja.es',
 183         'ATBHost.com' => array(
 184                 '*.atbhost.com',
 185                 '*.bzhost.net',
 186         ),
 187         'atk.jp',
 188         'clearp.ath.cx',
 189         'athomebiz.com',
 190         'aukcje1.pl',
 191         'beam.to',
 192         'beermapping.com',
 193         'besturl.in',
 194         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 195         'biglnk.com',
 196         'bingr.com',
 197         'bittyurl.com',
 198         '*.bizz.cc',
 199         '*.blo.pl',
 200         '*.bo.pl',
 201         'briefurl.com',
 202         'brokenscript.com',
 203         'BucksoGen.com' => array(
 204                 '*.bucksogen.com',
 205                 '*.bulochka.org',
 206                 '*.korzhik.org',
 207                 '*.kovrizhka.org',
 208                 '*.pirozhok.org',
 209                 '*.plushka.org',
 210                 '*.pryanik.org',
 211                 '*.sushka.org',
 212         ),
 213         'budgethosts.org',
 214         'budu.com',                             // by peter.eder at imcworld.com
 215         '*.buzznet.com',
 216         '*.bydl.com',
 217         'C-O.IN' => array(
 218                 '*.c-o.cc',
 219                 '*.c-o.in',
 220                 '*.coz.in',
 221                 '*.cq.bz',
 222         ),
 223         'c64.ch',
 224         'c711.com',
 225         '*.cej.pl',
 226         'checkasite.net',
 227         'url.chefhost.com',
 228         '*.chicappa.jp',
 229         'chilicity.com',
 230         'big5.china.com',               ///gate/big5/
 231         'chopurl.com',
 232         'christopherleestreet.com',
 233         'cintcm.com',
 234         '*.cjb.net',
 235         'clipurl.com',
 236         '*.co.nr',
 237         'Comtech Enterprises ' => array(        // comteche.com
 238                 'tinyurl.name',
 239                 'tinyurl.us',
 240         ),
 241         'Cool168.com' => array(
 242                 '*.cool158.com',
 243                 '*.cool168.com',
 244                 '*.ko168.com',
 245                 '*.ko188.com',
 246         ),
 247         'Coolurl.de' => array(
 248                 'coolurl.de',
 249                 'dornenboy.de',
 250                 'eyeqweb.com',
 251                 'hardcore-porn.de',
 252                 'maschinen-bluten-nicht.de',
 253         ),
 254         'cutalink.com',
 255         '*.da.cx',
 256         '*.da.ru',
 257         'dae2.com',
 258         'dephine.org',
 259         'desiurl.com',
 260         'dhurl.com',
 261         'digbig.com',
 262         'Digipills.com' => array(
 263                 '*.digipills.com',
 264                 'minilien.com',
 265                 'tinylink.com',
 266         ),
 267         '*.discutbb.com',
 268         'DL.AM' => array(
 269                 '*.cx.la',
 270                 '*.dl.am',
 271         ),
 272         '*.dl.pl',
 273         '*.dmdns.com',
 274         'doiop.com',
 275         'drlinky.com',
 276         'durl.us',
 277         '*.dvdonly.ru',
 278         '*.dynu.ca',
 279         'dwarf.name',
 280         '*.eadf.com',
 281         'easyURL.net' => array(
 282                 '*.easyurl.net',
 283                 '.goshrink.com',
 284                 'ushrink.com',
 285         ),
 286         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 287                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 288                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 289                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 290                 //   "Keep continuing to seek originality and contribute it to local,
 291                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 292                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 293                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 294                 // I'm so much impressed of the situation around this imported one today.
 295         'elfurl.com',
 296         'eny.pl',
 297         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 298                 '.mywiitime.com',
 299                 '.surfindark.com',              // webmaster at etechfocus.com
 300                 '.surfinshade.com',
 301                 '.surfinshadow.com',
 302                 '.surfinwind.com',
 303                 '.topsecretlive.com',
 304         ),
 305         '*.eu.org',
 306         'F2B.be' => array(
 307                 '*.f2b.be',
 308                 '*.freakz.eu',
 309                 '*.n0.be',
 310                 '*.n3t.nl',
 311                 '*.short.be',
 312                 '*.ssr.be',
 313                 '*.tweaker.eu',
 314         ),
 315         '*.fancyurl.com',
 316         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 317                 'blue11.jp',
 318                 'fanznet.com',
 319                 'katou.in',
 320                 'mymap.in',
 321                 'saitou.in',
 322                 'satou.in',
 323                 'susan.in',
 324         ),
 325         '.fe.pl',                       // Redirection and subdomain
 326         'ffwd.to',
 327         'url.fibiger.org',
 328         'FireMe.to' => array(
 329                 'fireme.to',
 330                 'nextdoor.to',
 331                 'ontheway.to',
 332         ),
 333         'flingk.com',
 334         'flog.jp',                      // careless redirector and bbs
 335         'fm7.biz',
 336         'fnbi.jp',
 337         '*.fnbi.jp',
 338         'forgeturl.com',
 339         '*.free.bg',
 340         'Freeservers.com' => array(     // United Online Web Services, Inc.
 341                 '*.4mg.com',
 342                 '*.4t.com',
 343                 '*.8m.com',
 344                 '*.8m.net',
 345                 '*.8k.com',
 346                 '*.faithweb.com',
 347                 '*.freehosting.net',
 348                 '*.freeservers.com',
 349                 '*.gq.nu',
 350                 '*.htmlplanet.com',
 351                 '*.itgo.com',
 352                 '*.iwarp.com',
 353                 '*.s5.com',
 354                 '*.scriptmania.com',
 355                 '*.tvheaven.com',
 356         ),
 357         '*.freewebpages.com',
 358         'FreeWebServices.net' => array( // Host Department LLC
 359                 '*.about.gs',   // Dead?
 360                 '*.about.tc',
 361                 '*.about.vg',
 362                 '*.aboutus.gs',
 363                 '*.aboutus.ms',
 364                 '*.aboutus.tc',
 365                 '*.aboutus.vg',
 366                 '*.biografi.biz',
 367                 '*.biografi.info',
 368                 '*.biografi.org',
 369                 '*.biografi.us',
 370                 '*.datadiri.biz',
 371                 '*.datadiri.cc',
 372                 '*.datadiri.com',
 373                 '*.datadiri.info',
 374                 '*.datadiri.net',
 375                 '*.datadiri.org',
 376                 '*.datadiri.tv',
 377                 '*.datadiri.us',
 378                 '*.ecv.gs',
 379                 '*.ecv.ms',
 380                 '*.ecv.tc',
 381                 '*.ecv.vg',
 382                 '*.eprofile.us',
 383                 '*.go2net.ws',
 384                 '*.hits.io',
 385                 '*.hostingweb.us',
 386                 '*.hub.io',
 387                 '*.indo.bz',
 388                 '*.indo.cc',
 389                 '*.indo.gs',
 390                 '*.indo.ms',
 391                 '*.indo.tc',
 392                 '*.indo.vg',
 393                 '*.infinitehosting.net',
 394                 '*.infinites.net',
 395                 '*.lan.io',
 396                 '*.max.io',
 397                 '*.mycv.bz',
 398                 '*.mycv.nu',
 399                 '*.mycv.tv',
 400                 '*.myweb.io',
 401                 '*.ourprofile.biz',
 402                 '*.ourprofile.info',
 403                 '*.ourprofile.net',     // Dead?
 404                 '*.ourprofile.org',
 405                 '*.ourprofile.us',
 406                 '*.profil.bz',
 407                 '*.profil.cc',
 408                 '*.profil.cn',
 409                 '*.profil.gs',
 410                 '*.profil.in',
 411                 '*.profil.ms',
 412                 '*.profil.tc',
 413                 '*.profil.tv',
 414                 '*.profil.vg',  // ?
 415                 '*.site.io',
 416                 '*.wan.io',
 417                 '*.web-cam.ws',
 418                 '*.webs.io',
 419                 '*.zip.io',
 420         ),
 421         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 422         '*.fx.to',
 423         'fyad.org',
 424         'fype.com',
 425         'gentleurl.net',
 426         'Get2.us' => array(
 427                 '*.get2.us',
 428                 '*.hasballs.com',
 429                 '*.ismyidol.com',
 430                 '*.spotted.us',
 431                 '*.went2.us',
 432                 '*.wentto.us',
 433         ),
 434         'glinki.com',
 435         '*.globalredirect.com',
 436         'gnu.vu',
 437         '*.go.cc',
 438         //'Google.com' => array(
 439         //              google.com/translate_c\?u=(?:http://)?
 440         //),
 441         'goonlink.com',
 442         '.gourl.org',
 443         '.greatitem.com',
 444         'gzurl.com',
 445         'url.grillsportverein.de',
 446         'Harudake.net' => array('*.hyu.jp'),
 447         'Hattinger Linux User Group' => array('short.hatlug.de'),
 448         'Hexten.net' => array('lyxus.net'),
 449         'here.is',
 450         'HispaVista.com' => array(
 451                 '*.blogdiario.com',
 452                 '*.hispavista.com',
 453                 '.galeon.com',
 454         ),
 455         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 456                 '*.8l.pl',
 457                 '*.blg.pl',
 458                 '*.czytajto.pl',
 459                 '*.ryj.pl',
 460                 '*.xit.pl',
 461                 '*.xlc.pl',
 462                 '*.hk.pl',
 463                 '*.home.pl',
 464                 '*.of.pl',
 465         ),
 466         'hort.net',
 467         'free4.hostrocket.com',
 468         '*.hotindex.ru',
 469         'HotRedirect.com' => array(
 470                 '*.coolhere.com',
 471                 '*.homepagehere.com',
 472                 '*.hothere.com',
 473                 '*.mustbehere.com',
 474                 '*.onlyhere.net',
 475                 '*.pagehere.com',
 476                 '*.surfhere.net',
 477                 '*.zonehere.com',
 478         ),
 479         'hotshorturl.com',
 480         'hotwebcomics.com',     ///search_redirect.php
 481         'hurl.to',
 482         '*.hux.de',
 483         '*.i89.us',
 484         'iat.net',                      // 74.208.58.130 by Tony Carter
 485         'ibm.com',                      ///links (Correct it)
 486         '*.iceglow.com',
 487         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 488         'Ideas para Nuevos Mercados SL' => array(
 489                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 490                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 491                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 492                 // by edgar bortolin (oscar at i4nm.com)
 493                 // by Edgar Bortolin  (oscar at i4nm.com)
 494                 // by oscar florez (oscar at i4nm.com)
 495                 // by Oscar Florez (oscar at red-es.com)
 496                 // by covadonga del valle (oscar at i4nm.com)
 497                 '*.ar.gd',
 498                 '*.ar.gs',      // ns *.nora.net
 499                 '*.ar.kz',      // by oscar
 500                 '*.ar.nu',      // by Edgar
 501                 '*.ar.tc',      // by oscar
 502                 '*.ar.vg',      // by oscar
 503                 '*.bo.kz',      // by oscar
 504                 '*.bo.nu',      // by covadonga
 505                 '*.bo.tc',      // by oscar
 506                 '*.bo.tf',      // by Oscar
 507                 '*.bo.vg',      // by oscar
 508                 '*.br.gd',
 509                 '*.br.gs',      // ns *.nora.net
 510                 '*.br.nu',      // by edgar
 511                 '*.br.vg',      // by oscar
 512                 '*.ca.gs',      // by oscar
 513                 '*.ca.kz',      // by oscar
 514                 '*.cl.gd',      // by oscar
 515                 '*.cl.kz',      // by oscar
 516                 '*.cl.nu',      // by edgar
 517                 '*.cl.tc',      // by oscar
 518                 '*.cl.tf',      // by Oscar
 519                 '*.cl.vg',      // by oscar
 520                 '*.col.nu',     // by Edgar
 521                 '*.cr.gs',      // ns *.nora.net
 522                 '*.cr.kz',      // by oscar
 523                 '*.cr.nu',      // by edgar
 524                 '*.cr.tc',      // by oscar
 525                 '*.cu.tc',      // by oscar
 526                 '*.do.kz',      // by oscar
 527                 '*.do.nu',      // by edgar
 528                 '*.ec.kz',      // by edgar
 529                 '*.ec.nu',      // by Edgar
 530                 '*.ec.tf',      // by Oscar
 531                 '*.es.kz',      // by oscar
 532                 '*.eu.kz',      // by oscar
 533                 '*.gt.gs',      // ns *.nora.net
 534                 '*.gt.tc',      // by oscar
 535                 '*.gt.tf',      // by Oscar
 536                 '*.gt.vg',      // by Oscar
 537                 '*.hn.gs',      // ns *.nora.net
 538                 '*.hn.tc',      // by oscar
 539                 '*.hn.tf',      // by Oscar
 540                 '*.hn.vg',      // by oscar
 541                 '*.mx.gd',
 542                 '*.mx.gs',      // ns *.nora.net
 543                 '*.mx.kz',      // by oscar
 544                 '*.mx.vg',      // by oscar
 545                 '*.ni.kz',      // by oscar
 546                 '*.pa.kz',      // by oscar
 547                 '*.pe.kz',      // by oscar
 548                 '*.pe.nu',      // by Edgar
 549                 '*.pr.kz',      // by oscar
 550                 '*.pr.nu',      // by edgar
 551                 '*.pt.gs',      // ns *.nora.net
 552                 '*.pt.kz',      // by edgar
 553                 '*.pt.nu',      // by edgar
 554                 '*.pt.tc',      // by oscar
 555                 '*.pt.tf',      // by Oscar
 556                 '*.py.gs',      // ns *.nora.net
 557                 '*.py.nu',      // by edgar
 558                 '*.py.tc',      // by oscar
 559                 '*.py.tf',      // by Oscar
 560                 '*.py.vg',      // by oscar
 561                 '*.sv.tc',      // by oscar
 562                 '*.usa.gs',     // ns *.nora.net
 563                 '*.uy.gs',      // ns *.nora.net
 564                 '*.uy.kz',      // by oscar
 565                 '*.uy.nu',      // by edgar
 566                 '*.uy.tc',      // by oscar
 567                 '*.uy.tf',      // by Oscar
 568                 '*.uy.vg',      // by oscar
 569                 '*.ve.gs',      // by oscar
 570                 '*.ve.tc',      // by oscar
 571                 '*.ve.tf',      // by Oscar
 572                 '*.ve.vg',      // by oscar
 573                 '*.ven.nu',     // by edgar
 574         ),
 575         'ie.to',
 576         'igoto.co.uk',
 577         'ilook.tw',
 578         'indianpad.com',                ///view/
 579         'iNetwork.co.il' => array(
 580                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 581                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 582                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 583         ),
 584         '*.infogami.com',
 585         'infotop.jp',
 586         'ipoo.org',
 587         'IR.pl' => array(
 588                 '*.aj.pl',
 589                 '*.aliasy.org',
 590                 '*.gu.pl',
 591                 '*.hu.pl',
 592                 '*.ir.pl',
 593                 '*.jo.pl',
 594                 '*.su.pl',
 595                 '*.td.pl',
 596                 '*.uk.pl',
 597                 '*.uy.pl',
 598                 '*.xa.pl',
 599                 '*.zj.pl',
 600         ),
 601         'irotator.com',
 602         '.iwebtool.com',
 603         'j6.bz',
 604         'jeeee.net',
 605         'Jaze Redirect Services' => array(
 606                 '*.arecool.net',
 607                 '*.iscool.net',
 608                 '*.isfun.net',
 609                 '*.tux.nu',
 610         ),
 611         '*.jed.pl',
 612         'JeremyJohnstone.com' => array('url.vg'),
 613         'jemurl.com',
 614         'jggj.net',
 615         'jpan.jp',
 616         'josh.nu',
 617         'kat.cc',
 618         'Kickme.to' => array(
 619                 '.1024bit.at',
 620                 '.128bit.at',
 621                 '.16bit.at',
 622                 '.256bit.at',
 623                 '.32bit.at',
 624                 '.512bit.at',
 625                 '.64bit.at',
 626                 '.8bit.at',
 627                 '.adores.it',
 628                 '.again.at',
 629                 '.allday.at',
 630                 '.alone.at',
 631                 '.altair.at',
 632                 '.american.at',
 633                 '.amiga500.at',
 634                 '.ammo.at',
 635                 '.amplifier.at',
 636                 '.amstrad.at',
 637                 '.anglican.at',
 638                 '.angry.at',
 639                 '.around.at',
 640                 '.arrange.at',
 641                 '.australian.at',
 642                 '.baptist.at',
 643                 '.basque.at',
 644                 '.battle.at',
 645                 '.bazooka.at',
 646                 '.berber.at',
 647                 '.blackhole.at',
 648                 '.booze.at',
 649                 '.bosnian.at',
 650                 '.brainiac.at',
 651                 '.brazilian.at',
 652                 '.bummer.at',
 653                 '.burn.at',
 654                 '.c-64.at',
 655                 '.catalonian.at',
 656                 '.catholic.at',
 657                 '.chapel.at',
 658                 '.chills.it',
 659                 '.christiandemocrats.at',
 660                 '.cname.at',
 661                 '.colors.at',
 662                 '.commodore.at',
 663                 '.commodore64.at',
 664                 '.communists.at',
 665                 '.conservatives.at',
 666                 '.conspiracy.at',
 667                 '.cooldude.at',
 668                 '.craves.it',
 669                 '.croatian.at',
 670                 '.cuteboy.at',
 671                 '.dancemix.at',
 672                 '.danceparty.at',
 673                 '.dances.it',
 674                 '.danish.at',
 675                 '.dealing.at',
 676                 '.deep.at',
 677                 '.democrats.at',
 678                 '.digs.it',
 679                 '.divxlinks.at',
 680                 '.divxmovies.at',
 681                 '.divxstuff.at',
 682                 '.dizzy.at',
 683                 '.does.it',
 684                 '.dork.at',
 685                 '.drives.it',
 686                 '.dutch.at',
 687                 '.dvdlinks.at',
 688                 '.dvdmovies.at',
 689                 '.dvdstuff.at',
 690                 '.emulators.at',
 691                 '.end.at',
 692                 '.english.at',
 693                 '.eniac.at',
 694                 '.error403.at',
 695                 '.error404.at',
 696                 '.evangelism.at',
 697                 '.exhibitionist.at',
 698                 '.faith.at',
 699                 '.fight.at',
 700                 '.finish.at',
 701                 '.finnish.at',
 702                 '.forward.at',
 703                 '.freebie.at',
 704                 '.freemp3.at',
 705                 '.french.at',
 706                 '.graduatejobs.at',
 707                 '.greenparty.at',
 708                 '.grunge.at',
 709                 '.hacked.at',
 710                 '.hang.at',
 711                 '.hangup.at',
 712                 '.has.it',
 713                 '.hide.at',
 714                 '.hindu.at',
 715                 '.htmlpage.at',
 716                 '.hungarian.at',
 717                 '.icelandic.at',
 718                 '.independents.at',
 719                 '.invisible.at',
 720                 '.is-chillin.it',
 721                 '.is-groovin.it',
 722                 '.japanese.at',
 723                 '.jive.at',
 724                 '.kickass.at',
 725                 '.kickme.to',
 726                 '.kindergarden.at',
 727                 '.knows.it',
 728                 '.kurd.at',
 729                 '.labour.at',
 730                 '.leech.at',
 731                 '.liberals.at',
 732                 '.linuxserver.at',
 733                 '.liqour.at',
 734                 '.lovez.it',
 735                 '.makes.it',
 736                 '.maxed.at',
 737                 '.means.it',
 738                 '.meltdown.at',
 739                 '.methodist.at',
 740                 '.microcomputers.at',
 741                 '.mingle.at',
 742                 '.mirror.at',
 743                 '.moan.at',
 744                 '.mormons.at',
 745                 '.musicmix.at',
 746                 '.nationalists.at',
 747                 '.needz.it',
 748                 '.nerds.at',
 749                 '.neuromancer.at',
 750                 '.newbie.at',
 751                 '.nicepage.at',
 752                 '.ninja.at',
 753                 '.norwegian.at',
 754                 '.ntserver.at',
 755                 '.owns.it',
 756                 '.paint.at',
 757                 '.palestinian.at',
 758                 '.phoneme.at',
 759                 '.phreaking.at',
 760                 '.playz.it',
 761                 '.polish.at',
 762                 '.popmusic.at',
 763                 '.portuguese.at',
 764                 '.powermac.at',
 765                 '.processor.at',
 766                 '.prospects.at',
 767                 '.protestant.at',
 768                 '.rapmusic.at',
 769                 '.raveparty.at',
 770                 '.reachme.at',
 771                 '.reads.it',
 772                 '.reboot.at',
 773                 '.relaxed.at',
 774                 '.republicans.at',
 775                 '.researcher.at',
 776                 '.reset.at',
 777                 '.resolve.at',
 778                 '.retrocomputers.at',
 779                 '.rockparty.at',
 780                 '.rocks.it',
 781                 '.rollover.at',
 782                 '.rough.at',
 783                 '.rules.it',
 784                 '.rumble.at',
 785                 '.russian.at',
 786                 '.says.it',
 787                 '.scared.at',
 788                 '.seikh.at',
 789                 '.serbian.at',
 790                 '.short.as',
 791                 '.shows.it',
 792                 '.silence.at',
 793                 '.simpler.at',
 794                 '.sinclair.at',
 795                 '.singz.it',
 796                 '.slowdown.at',
 797                 '.socialists.at',
 798                 '.spanish.at',
 799                 '.split.at',
 800                 '.stand.at',
 801                 '.stoned.at',
 802                 '.stumble.at',
 803                 '.supercomputer.at',
 804                 '.surfs.it',
 805                 '.swedish.at',
 806                 '.swims.it',
 807                 '.synagogue.at',
 808                 '.syntax.at',
 809                 '.syntaxerror.at',
 810                 '.techie.at',
 811                 '.temple.at',
 812                 '.thinkbig.at',
 813                 '.thirsty.at',
 814                 '.throw.at',
 815                 '.toplist.at',
 816                 '.trekkie.at',
 817                 '.trouble.at',
 818                 '.turkish.at',
 819                 '.unexplained.at',
 820                 '.unixserver.at',
 821                 '.vegetarian.at',
 822                 '.venture.at',
 823                 '.verycool.at',
 824                 '.vic-20.at',
 825                 '.viewing.at',
 826                 '.vintagecomputers.at',
 827                 '.virii.at',
 828                 '.vodka.at',
 829                 '.wannabe.at',
 830                 '.webpagedesign.at',
 831                 '.wheels.at',
 832                 '.whisper.at',
 833                 '.whiz.at',
 834                 '.wonderful.at',
 835                 '.zor.org',
 836                 '.zx80.at',
 837                 '.zx81.at',
 838                 '.zxspectrum.at',
 839         ),
 840         'kisaweb.com',
 841         'krotki.pl',
 842         'kuerzer.de',
 843         '*.kupisz.pl',
 844         'kuso.cc',
 845         '*.l8t.com',
 846         'lame.name',
 847         'lediga.st',
 848         'liencourt.com',
 849         'liteurl.com',
 850         'linkachi.com',
 851         'linkezy.com',
 852         'linkfrog.net',
 853         'linkook.com',
 854         'linkzip.net',
 855         'lispurl.com',
 856         'lnk.in',
 857         'makeashorterlink.com',
 858         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 859                 '*.3gp.fr',
 860                 '*.gtx.fr',
 861                 '*.ici.st',
 862                 '*.max.st',
 863                 '*.nn.cx',              // ns *.sivit.org
 864                 '*.site.cx',    // ns *.sivit.org
 865                 '*.user.fr',
 866                 '*.zxr.fr',
 867         ),
 868         'mcturl.com',
 869         'memurl.com',
 870         'Metamark.net' => array('xrl.us'),
 871         'midgeturl.com',
 872         'Minilink.org' => array('lnk.nu'),
 873         'miniurl.org',
 874         'miniurl.pl',
 875         'mixi.bz',
 876         'mo-v.jp',
 877         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 878                 '.com.md',
 879                 '.co.md',
 880                 '.org.md',
 881                 '.info.md',
 882                 '.host.md',
 883         ),
 884         'monster-submit.com',
 885         'mooo.jp',
 886         'murl.net',
 887         'myactivesurf.net',
 888         'mytinylink.com',
 889         'myurl.in',
 890         'myurl.com.tw',
 891         'nanoref.com',
 892         'Ne1.net' => array(
 893                 '*.ne1.net',
 894                 '*.r8.org',
 895         ),
 896         'Nashville Linux Users Group' => array('nlug.org'),
 897         'not2long.net',
 898         '*.notlong.com',
 899         '*.nuv.pl',
 900         'ofzo.be',
 901         '*.ontheinter.net',
 902         'ourl.org',
 903         'ov2.net',                              // frame
 904         '*.ozonez.com',
 905         'pagebang.com',
 906         'palurl.com',
 907         '*.paulding.net',
 908         'phpfaber.org',
 909         'pnope.com',
 910         'prettylink.com',
 911         'PROXID.net' => array(  // also xRelay.net
 912                 '*.asso.ws',
 913                 '*.corp.st',
 914                 '*.euro.tm',
 915                 '*.perso.tc',
 916                 '*.site.tc',
 917                 '*.societe.st',
 918         ),
 919         'qrl.jp',
 920         'qurl.net',
 921         'qwer.org',
 922         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 923         'radiobase.net',
 924         'Rakuten.co.jp' => array(
 925                 'pt.afl.rakuten.co.jp', ///c/
 926         ),
 927         'RedirectFree.com' => array(
 928                 '*.red.tc',
 929                 '*.redirectfree.com',
 930                 '*.sky.tc',
 931                 '*.the.vg',
 932         ),
 933         'redirme.com',
 934         'redirectme.to',
 935         'relic.net',
 936         'rezma.info',
 937         'rio.st',
 938         'rlink.org',
 939         '*.rmcinfo.fr',
 940         'rubyurl.com',
 941         '*.runboard.com',
 942         'runurl.com',
 943         's-url.net',
 944         's1u.net',
 945         'SG5.co.uk' => array(
 946                 '*.sg5.co.uk',
 947                 '*.sg5.info',
 948         ),
 949         'Shim.net' => array(
 950                 '*.0kn.com',
 951                 '*.2cd.net',
 952                 '*.freebiefinders.net',
 953                 '*.freegaming.org',
 954                 '*.op7.net',
 955                 '*.shim.net',
 956                 '*.v9z.com',
 957         ),
 958         'big5.shippingchina.com',
 959         'shorl.com',
 960         'shortenurl.com',
 961         'shorterlink.com',
 962         'shortlinks.co.uk',
 963         'shorttext.com',
 964         'shorturl-accessanalyzer.com',
 965         'Shortify.com' => array(
 966                 '74678439.com',
 967                 'shortify.com',
 968         ),
 969         'shortlink.co.uk',
 970         'ShortURL.com' => array(
 971                 '*.1sta.com',
 972                 '*.24ex.com',
 973                 '*.2fear.com',
 974                 '*.2fortune.com',
 975                 '*.2freedom.com',
 976                 '*.2hell.com',
 977                 '*.2savvy.com',
 978                 '*.2truth.com',
 979                 '*.2tunes.com',
 980                 '*.2ya.com',
 981                 '*.alturl.com',
 982                 '*.antiblog.com',
 983                 '*.bigbig.com',
 984                 '*.dealtap.com',
 985                 '*.ebored.com',
 986                 '*.echoz.com',
 987                 '*.filetap.com',
 988                 '*.funurl.com',
 989                 '*.headplug.com',
 990                 '*.hereweb.com',
 991                 '*.hitart.com',
 992                 '*.mirrorz.com',
 993                 '*.shorturl.com',
 994                 '*.spyw.com',
 995                 '*.vze.com',
 996         ),
 997         'shrinkalink.com',
 998         'shrinkthatlink.com',
 999         'shrinkurl.us',
1000         'shrt.org',
1001         'shrunkurl.com',
1002         'shurl.org',
1003         'shurl.net',
1004         'sid.to',
1005         'simurl.com',
1006         'sitefwd.com',
1007         'Sitelutions.com' => array(
1008                 '*.assexy.as',
1009                 '*.athersite.com',
1010                 '*.athissite.com',
1011                 '*.bestdeals.at',
1012                 '*.byinter.net',
1013                 '*.findhere.org',
1014                 '*.fw.nu',
1015                 '*.isgre.at',
1016                 '*.isthebe.st',
1017                 '*.kwik.to',
1018                 '*.lookin.at',
1019                 '*.lowestprices.at',
1020                 '*.onthenet.as',
1021                 '*.ontheweb.nu',
1022                 '*.pass.as',
1023                 '*.passingg.as',
1024                 '*.redirect.hm',
1025                 '*.rr.nu',
1026                 '*.ugly.as',
1027         ),
1028         '*.skracaj.pl',
1029         'skiltechurl.com',
1030         'skocz.pl',
1031         'slimurl.jp',
1032         'slink.in',
1033         'smallurl.eu',
1034         'smurl.name',
1035         'snipurl.com',
1036         'sp-nov.net',
1037         'splashblog.com',
1038         'spod.cx',
1039         '*.spydar.com',
1040         'Subdomain.gr' => array(
1041                 '*.p2p.gr',
1042                 '*.subdomain.gr',
1043         ),
1044         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1045         'surl.se',
1046         'surl.ws',
1047         'symy.jp',
1048         'tdurl.com',
1049         'tighturl.com',
1050         'tiniuri.com',
1051         'tiny.cc',
1052         'tiny.pl',
1053         'tiny2go.com',
1054         'tinylink.eu',
1055         'tinylinkworld.com',
1056         'tinypic.com',
1057         'tinyr.us',
1058         'TinyURL.com' => array(
1059                 'tinyurl.com',
1060                 'preview.tinyurl.com',
1061                 'tinyurl.co.uk',
1062         ),
1063         'titlien.com',
1064         '*.tlg.pl',
1065         'tlurl.com',
1066         'link.toolbot.com',
1067         'tnij.org',
1068         'Tokelau ccTLD' => array('.tk'),
1069         'toila.net',
1070         '*.toolbot.com',
1071         '*.torontonian.com',
1072         'trimurl.com',
1073         'ttu.cc',
1074         'turl.jp',
1075         '*.tz4.com',
1076         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1077                 '*.1.to',
1078                 '*.4.to',
1079                 '*.5.to',
1080                 '*.82.to',
1081                 '*.s.to',
1082                 '*.u.to',
1083                 '*.ce.to',
1084                 '*.cz.to',
1085                 '*.if.to',
1086                 '*.it.to',
1087                 '*.kp.to',
1088                 '*.ne.to',
1089                 '*.ok.to',
1090                 '*.pc.to',
1091                 '*.tv.to',
1092                 '*.dd.to',
1093                 '*.ee.to',
1094                 '*.hh.to',
1095                 '*.kk.to',
1096                 '*.mm.to',
1097                 '*.qq.to',
1098                 '*.xx.to',
1099                 '*.zz.to',
1100                 '*.ivy.to',
1101                 '*.joa.to',
1102                 '*.ever.to',
1103                 '*.mini.to',
1104         ),
1105         'uchinoko.in',
1106         'Ulimit.com' => array(
1107                 '*.be.tf',
1108                 '*.best.cd',
1109                 '*.bsd-fan.com',
1110                 '*.c0m.st',
1111                 '*.ca.tc',
1112                 '*.clan.st',
1113                 '*.com02.com',
1114                 '*.en.st',
1115                 '*.euro.st',
1116                 '*.fr.fm',
1117                 '*.fr.st',
1118                 '*.fr.vu',
1119                 '*.gr.st',
1120                 '*.ht.st',
1121                 '*.int.ms',
1122                 '*.it.st',
1123                 '*.java-fan.com',
1124                 '*.linux-fan.com',
1125                 '*.mac-fan.com',
1126                 '*.mp3.ms',
1127                 '*.qc.tc',
1128                 '*.sp.st',
1129                 '*.suisse.st',
1130                 '*.t2u.com',
1131                 '*.unixlover.com',
1132                 '*.zik.mu',
1133         ),
1134         '*.uni.cc',
1135         'UNONIC.com' => array(
1136                 '*.at.tf',      // AlpenNIC
1137                 '*.bg.tf',
1138                 '*.ca.tf',
1139                 '*.ch.tf',      // AlpenNIC
1140                 '*.cz.tf',
1141                 '*.de.tf',      // AlpenNIC
1142                 '*.edu.tf',
1143                 '*.eu.tf',
1144                 '*.int.tf',
1145                 '*.net.tf',
1146                 '*.pl.tf',
1147                 '*.ru.tf',
1148                 '*.sg.tf',
1149                 '*.us.tf',
1150         ),
1151         'Up.pl' => array(
1152                 '.69.pl',                       // by nsk101869
1153                 '.crack.pl',            // by nsk101869
1154                 '.film.pl',                     // by sibr19002
1155                 '.h2o.pl',                      // by nsk101869
1156                 '.hostessy.pl',         // by nsk101869
1157                 '.komis.pl',            // by nsk101869
1158                 '.laski.pl',            // by nsk101869
1159                 '.modelki.pl',          // by nsk101869
1160                 '.muzyka.pl',           // by sibr19002
1161                 '.nastolatki.pl',       // by nsk101869
1162                 '.obuwie.pl',           // by nsk101869
1163                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1164                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1165                 '.sexchat.pl',          // by nsk101869
1166                 '.sexlive.pl',          // by nsk101869
1167                 '.tv.pl',                       // by nsk101869
1168                 '.up.pl',                       // by nsk101869
1169                 '.video.pl',            // by nsk101869
1170                 '.xp.pl',                       // nsk101869
1171         ),
1172         '*.uploadr.com',
1173         'url.ie',
1174         'url4.net',
1175         'url-c.com',
1176         'urlbee.com',
1177         'urlbounce.com',
1178         'urlcut.com',
1179         'urlcutter.com',
1180         'urlic.com',
1181         'urlin.it',
1182         'urlkick.com',
1183         'URLLogs.com' => array(
1184                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1185                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1186         ),
1187         '*.urlproxy.com',
1188         'urlser.com',
1189         'urlsnip.com',
1190         'urlzip.de',
1191         'urlx.org',
1192         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1193         'utun.jp',
1194         'uxxy.com',
1195         '*.v27.net',
1196         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1197                 '*.all.at',
1198                 '*.back.to',
1199                 '*.beam.at',
1200                 '*.been.at',
1201                 '*.bite.to',
1202                 '*.board.to',
1203                 '*.bounce.to',
1204                 '*.bowl.to',
1205                 '*.break.at',
1206                 '*.browse.to',
1207                 '*.change.to',
1208                 '*.chip.ms',
1209                 '*.connect.to',
1210                 '*.crash.to',
1211                 '*.cut.by',
1212                 '*.direct.at',
1213                 '*.dive.to',
1214                 '*.drink.to',
1215                 '*.drive.to',
1216                 '*.drop.to',
1217                 '*.easy.to',
1218                 '*.everything.at',
1219                 '*.fade.to',
1220                 '*.fanclub.ms',
1221                 '*.firstpage.de',
1222                 '*.fly.to',
1223                 '*.flying.to',
1224                 '*.fortunecity.co.uk',
1225                 '*.fortunecity.com',
1226                 '*.forward.to',
1227                 '*.fullspeed.to',
1228                 '*.fun.ms',
1229                 '*.gameday.de',
1230                 '*.germany.ms',
1231                 '*.get.to',
1232                 '*.getit.at',
1233                 '*.hard-ware.de',
1234                 '*.hello.to',
1235                 '*.hey.to',
1236                 '*.hop.to',
1237                 '*.how.to',
1238                 '*.hp.ms',
1239                 '*.jump.to',
1240                 '*.kiss.to',
1241                 '*.listen.to',
1242                 '*.mediasite.de',
1243                 '*.megapage.de',
1244                 '*.messages.to',
1245                 '*.mine.at',
1246                 '*.more.at',
1247                 '*.more.by',
1248                 '*.move.to',
1249                 '*.musicpage.de',
1250                 '*.mypage.org',
1251                 '*.mysite.de',
1252                 '*.nav.to',
1253                 '*.notrix.at',
1254                 '*.notrix.ch',
1255                 '*.notrix.de',
1256                 '*.notrix.net',
1257                 '*.on.to',
1258                 '*.page.to',
1259                 '*.pagina.de',
1260                 '*.played.by',
1261                 '*.playsite.de',
1262                 '*.privat.ms',
1263                 '*.quickly.to',
1264                 '*.redirect.to',
1265                 '*.rulestheweb.com',
1266                 '*.run.to',
1267                 '*.scroll.to',
1268                 '*.seite.ms',
1269                 '*.shortcut.to',
1270                 '*.skip.to snap.to',
1271                 '*.soft-ware.de',
1272                 '*.start.at',
1273                 '*.stick.by',
1274                 '*.surf.to',
1275                 '*.switch.to',
1276                 '*.talk.to',
1277                 '*.tip.nu',
1278                 '*.top.ms',
1279                 '*.transfer.to',
1280                 '*.travel.to',
1281                 '*.turn.to',
1282                 '*.vacations.to',
1283                 '*.videopage.de',
1284                 '*.virtualpage.de',
1285                 '*.w3.to',
1286                 '*.walk.to',
1287                 '*.warp9.to',
1288                 '*.window.to',
1289                 '*.yours.at',
1290                 '*.zap.to',
1291                 '*.zip.to',
1292         ),
1293         'VDirect.com' => array(
1294                 '*.emailme.net',
1295                 '*.getto.net',
1296                 '*.inetgames.com',
1297                 '*.netbounce.com',
1298                 '*.netbounce.net',
1299                 '*.oneaddress.net',
1300                 '*.snapto.net',
1301                 '*.vdirect.com',
1302                 '*.vdirect.net',
1303                 '*.webrally.net',
1304         ),
1305         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1306         'vgo2.com',
1307         'Voila.fr' => array('r.voila.fr'),      // Fix it
1308         'w3t.org',
1309         'wapurl.co.uk',
1310         'Wb.st' => array(
1311                 '*.team.st',
1312                 '*.wb.st',
1313         ),
1314         'wbkt.net',
1315         'WebAlias.com' => array(
1316                 '*.andmuchmore.com',
1317                 '*.browser.to',
1318                 '*.escape.to',
1319                 '*.fornovices.com',
1320                 '*.fun.to',
1321                 '*.got.to',
1322                 '*.hottestpix.com',
1323                 '*.imegastores.com',
1324                 '*.latest-info.com',
1325                 '*.learn.to',
1326                 '*.moviefever.com',
1327                 '*.mp3-archives.com',
1328                 '*.myprivateidaho.com',
1329                 '*.radpages.com',
1330                 '*.remember.to',
1331                 '*.resourcez.com',
1332                 '*.return.to',
1333                 '*.sail.to',
1334                 '*.sports-reports.com',
1335                 '*.stop.to',
1336                 '*.thrill.to',
1337                 '*.tophonors.com',
1338                 '*.uncutuncensored.com',
1339                 '*.up.to',
1340                 '*.veryweird.com',
1341                 '*.way.to',
1342                 '*.web-freebies.com',
1343                 '.webalias.com',
1344                 '*.webdare.com',
1345                 '*.xxx-posed.com',
1346         ),
1347         'webmasterwise.com',
1348         'witherst at hotmail.com' => array(     // by Tim Withers
1349                 '*.associates-program.com',
1350                 '*.casinogopher.com',
1351                 '*.ezpagez.com',
1352                 '*.vgfaqs.com',
1353         ),
1354         'wittylink.com',
1355         'wiz.sc',                       // tiny.cc related
1356         'X50.us' => array(
1357                 '*.i50.de',
1358                 '*.x50.us',
1359         ),
1360         'big5.xinhuanet.com',   ///gate/big5/
1361         'xhref.com',
1362         'Xn6.net' => array(
1363                 '*.9ax.net',
1364                 '*.xn6.net',
1365         ),
1366         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1367         '.y11.net',
1368         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1369                 '*.yesns.com',
1370                 '*.srv4u.net',
1371                 //blogne.com
1372         ),
1373         'yatuc.com',
1374         'yep.it',
1375         'yumlum.com',
1376         'yurel.com',
1377         'Z.la' => array(
1378                 'z.la',
1379                 't.z.la',
1380         ),
1381         'zaable.com',
1382         'zapurl.com',
1383         'zarr.co.uk',
1384         'zerourl.com',
1385         'ZeroWeb.org' => array(
1386                 '*.80t.com',
1387                 '*.firez.org',
1388                 '*.fizz.nu',
1389                 '*.ingame.org',
1390                 '*.irio.net',
1391                 '*.v33.org',
1392                 '*.zeroweb.org',
1393         ),
1394         'zhukcity.ru',
1395         'zippedurl.com',
1396         'zr5.us',
1397         '*.zs.pl',
1398         '*.zu5.net',
1399         'zuso.tw',
1400         '*.zwap.to',
1401 );
1402
1403 // --------------------------------------------------
1404
1405 $blocklist['A-2'] = array(
1406
1407         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1408         //
1409         //'*.dyndns.*', // Wildcard for dyndns
1410         //
1411         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1412         'ddns.ru' => array('*.bpa.nu'),
1413         'Dhs.org' => array(
1414                 '*.2y.net',
1415                 '*.dhs.org',
1416         ),
1417         '*.dnip.net',
1418         '*.dyndns.co.za',
1419         '*.dyndns.dk',
1420         '*.dyndns.nemox.net',
1421         'DyDNS.com' => array(
1422                 '*.ath.cx',
1423                 '*.dnsalias.org',
1424                 '*.dyndns.org',
1425                 '*.homeip.net',
1426                 '*.homelinux.net',
1427                 '*.mine.nu',
1428                 '*.shacknet.nu',
1429         ),
1430         '*.dtdns.net',                  // by jscott at sceiron.com
1431         '*.dynu.com',
1432         '*.dynup.net',
1433         '*.fdns.net',
1434         'J-Speed.net' => array(
1435                 '*.bne.jp',
1436                 '*.ii2.cc',
1437                 '*.jdyn.cc',
1438                 '*.jspeed.jp',
1439         ),
1440         '*.mydyn.de',
1441         '*.nerdcamp.net',
1442         'No-IP.com' => array(
1443                         '*.bounceme.net',
1444                         '*.hopto.org',
1445                         '*.myftp.biz',
1446                         '*.myftp.org',
1447                         '*.myvnc.com',
1448                         '*.no-ip.biz',
1449                         '*.no-ip.info',
1450                         '*.no-ip.org',
1451                         '*.redirectme.net',
1452                         '*.servebeer.com',
1453                         '*.serveblog.net',
1454                         '*.servecounterstrike.com',
1455                         '*.serveftp.com',
1456                         '*.servegame.com',
1457                         '*.servehalflife.com',
1458                         '*.servehttp.com',
1459                         '*.servemp3.com',
1460                         '*.servepics.com',
1461                         '*.servequake.com',
1462                         '*.sytes.net',
1463                         '*.zapto.org',
1464         ),
1465         '*.opendns.be',
1466         'Yi.org' => array(      // by dns at whyi.org
1467                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1468
1469                 // 72.55.129.46(redirect.yi.org)
1470                 '*.whyi.org',
1471                 '*.weedns.com',
1472         ),
1473         '*.zenno.info',
1474         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1475                         // and all non-recorded domains redirect to 'agoga.com' now
1476                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1477                         // http://agoga.com/aboutus.html
1478 );
1479
1480 // --------------------------------------------------
1481
1482 // B: Sample setting of:
1483 // Jacked (taken advantage of) and cleaning-less sites
1484 //
1485 // Please notify us about this list with reason:
1486 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1487
1488 $blocklist['B-1'] = array(
1489
1490         // B-1: Web spaces
1491         //
1492         //   Messages from forerunners:
1493         //     activefreehost.com
1494         //       "We regret to inform you that ActiveFreeHost
1495         //        free hosting service has is now closed (as of
1496         //        September 18). We have been online for over
1497         //        two and half years, but have recently decided
1498         //        to take time for software improvement to fight
1499         //        with server abuse, Spam advertisement and
1500         //        fraud."
1501         //
1502         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1503         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1504         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1505         '0Catch.com related' => array(
1506                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1507
1508                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1509                 '*.100freemb.com',              // by Danny Ashworth
1510                 '*.exactpages.com',
1511                 '*.fcpages.com',
1512                 '*.wtcsites.com',
1513
1514                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1515                 '*.741.com',
1516                 '*.freecities.com',
1517                 '*.freesite.org',
1518                 '*.freewebpages.org',
1519                 '*.freewebsitehosting.com',
1520                 '*.jvl.com',
1521
1522                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1523                 '*.freespaceusa.com',
1524                 '*.usafreespace.com',
1525
1526                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1527                 '*.dex1.com',
1528                 '*.questh.com',
1529
1530                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1531                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1532                 '*.012webpages.com',    // by support at 0catch.com
1533                 '*.150m.com',
1534                 '*.1sweethost.com',             // by whois at bluehost.com
1535                 '*.250m.com',                   // by jason at fahlman.net
1536                 '*.9cy.com',                    // by paulw0t at gmail.com
1537                 '*.angelcities.com',    // by cliff at eccentrix.com
1538                 '*.arcadepages.com',    // by admin at site-see.com
1539                 '*.e-host.ws',                  // by dns at jomax.net
1540                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1541                 '*.fw.bz',                              // by ben at kuehl.as
1542                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1543                 '*.g0g.net',                    // by domains at seem.co.uk
1544                 '*.galaxy99.net',               // by admin at bagchi.org
1545                 '*.greatnow.com',               // by peo at peakspace.com
1546                 '*.hautlynx.com',               // by hlewis28 at juno.com
1547                 '*.ibnsites.com',               // by cmrojas at mail.com
1548                 '*.just-allen.com',             // by extremehype at msn.com
1549                 '*.kogaryu.com',                // by angelguerra at msn.com
1550                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1551                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1552                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1553                 '*.s-enterprize.com',
1554                 '*.servetown.com',              // by jonahbliss at earthlink.net
1555                 '*.stinkdot.org',               // by bluedot at ziplip.com
1556                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1557                 '*.zomi.net',                   // by sianpu at gmail.com
1558         ),
1559         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1560         '100 Best Inc' => array(
1561                 // by 100 Best Inc (info at 100best.com)
1562
1563                 // 66.235.204.7(h204-007.bluefishhosting.com)
1564                 '*.2-hi.com',
1565                 '*.20fr.com',
1566                 '*.20ii.com',
1567                 '*.20is.com',
1568                 '*.20it.com',
1569                 '*.20m.com',    // by jlee at 100bestinc.com
1570                 '*.20to.com',
1571                 '*.2u-2.com',
1572                 '*.3-st.com',
1573                 '*.fws1.com',
1574                 '*.fw-2.com',
1575                 '*.inc5.com',
1576                 '*.on-4.com',
1577                 '*.st-3.com',
1578                 '*.st20.com',
1579                 '*.up-a.com',
1580
1581                 // 216.40.33.252(www-pd.mdnsservice.com)
1582                 '*.0-st.com',
1583                 '*.20me.com',
1584         ),
1585         '*.100foros.com',
1586         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1587         '20six Weblog Services' => array(
1588                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1589                 '.20six.co.uk',
1590                 '.20six.fr',
1591                 'myblog.de',
1592                 'myblog.es',
1593         ),
1594         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1595         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1596         '2IP.com' => array(
1597                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1598                 '*.2ip.jp',
1599                 '*.474.jp',
1600                 '*.consensus.jp',
1601                 '*.desyo.jp',
1602                 '*.dif.jp',
1603                 '*.pastels.jp',
1604                 '*.powerblogger.jp',
1605                 '*.vippers.jp',
1606                 '*.webpages.jp',
1607
1608                 // 205.209.97.56(non-existent)
1609                 '*.biografi.biz',
1610                 '*.biografi.info',
1611                 '*.biografi.org',
1612                 '*.biografi.us',
1613                 '*.datadiri.biz',
1614                 '*.datadiri.cc',
1615                 '*.datadiri.com',
1616                 '*.datadiri.info',
1617                 '*.datadiri.net',
1618                 '*.datadiri.org',
1619                 '*.datadiri.tv',
1620                 '*.datadiri.us',
1621                 '*.indo.bz',
1622                 '*.indo.cc',
1623                 '*.profil.bz',
1624                 '*.profil.cc',
1625                 '*.profil.cn',
1626                 '*.profil.in',
1627                 '*.profil.tv',
1628
1629                 // 205.209.101.47(non-existent)
1630                 '*.about.tc',
1631                 '*.about.vg',
1632                 '*.aboutus.gs',
1633                 '*.aboutus.ms',
1634                 '*.aboutus.tc',
1635                 '*.aboutus.vg',
1636                 '*.band.io',
1637                 '*.beijing.am',
1638                 '*.blogs.io',
1639                 '*.boke.am',
1640                 '*.clan.io',
1641                 '*.ecv.gs',
1642                 '*.ecv.ms',
1643                 '*.ecv.vg',
1644                 '*.freekong.cn',
1645                 '*.go2net.ws',
1646                 '*.hello.cn.com',
1647                 '*.hello.io',
1648                 '*.hits.io',
1649                 '*.hostingweb.us',
1650                 '*.hub.io',
1651                 '*.ide.am',
1652                 '*.inc.io',
1653                 '*.incn.in',
1654                 '*.indo.gs',
1655                 '*.indo.ms',
1656                 '*.indo.tc',
1657                 '*.indo.vg',
1658                 '*.infinitehosting.net',
1659                 '*.infinites.net',
1660                 '*.jushige.cn',
1661                 '*.jushige.com',
1662                 '*.kongjian.in',
1663                 '*.lan.io',
1664                 '*.llc.nu',
1665                 '*.maimai.in',
1666                 '*.max.io',
1667                 '*.musician.io',
1668                 '*.mycv.bz',
1669                 '*.mycv.nu',
1670                 '*.mycv.tv',
1671                 '*.myweb.io',
1672                 '*.ourprofile.biz',
1673                 '*.ourprofile.info',
1674                 '*.ourprofile.net',
1675                 '*.ourprofile.org',
1676                 '*.ourprofile.us',
1677                 '*.profil.gs',
1678                 '*.profil.ms',
1679                 '*.profil.tc',
1680                 '*.qiye.in',
1681                 '*.site.io',
1682                 '*.wan.io',
1683                 '*.web-cam.ws',
1684                 '*.webs.io',
1685                 '*.xixu.cc',
1686                 '*.zaici.am',
1687                 '*.zip.io',
1688                 '*.zuzhi.in',
1689
1690                 '*.profil.vg',          // 205.209.101.67(non-existent)
1691                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1692                 //'*.about.gs',         // No record
1693                 //'*.eprofile.us',      // non-existent
1694         ),
1695         '2Page.de' => array(
1696                 '.dreipage.de',
1697                 '.2page.de',
1698         ),
1699         '*.3-hosting.net',
1700         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1701         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1702         '*.8000web.com',        // 75.126.189.45
1703         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1704         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1705         'Ai.NET' => array(
1706                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1707                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1708         ),
1709         '*.aimoo.com',
1710         '*.alkablog.com',
1711         '*.alluwant.de',
1712         '.amkbb.com',
1713         'answerbag.com',        // 8.5.0.128
1714         'anyboard.net',
1715         'AOL.com' =>    // http://about.aol.com/international_services
1716                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1717                 '(?:aol|americaonline)\.' .
1718                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1719                 // Rough but works
1720         'Apple.com' => array('idisk.mac.com'),
1721         '*.askfaq.org',
1722         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1723         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1724         '*.asphost4free.com',
1725         'basenow.com',
1726         'BatCave.net' => array(
1727                 '.batcave.net',                 // 64.22.112.226
1728                 '.freehostpro.com',             // 64.22.112.226
1729         ),
1730         '*.bb-fr.com',
1731         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1732         '*.beeplog.com',
1733         'beepworld.it',
1734         'bestfreeforums.com',
1735         'bestvotexxx.com',
1736         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1737         'blinklist.com',
1738         'Blog.com' => array(
1739                 '*.blog.com',
1740                 '*.blogandorra.com',    // by admin.domains at co.blog.com
1741                 '*.blogangola.com',             // by admin.domains at co.blog.com
1742         ),
1743         '*.blog.com.es',
1744         '*.blog.hr',
1745         '*.blog4ever.com',
1746         '*.blog-fx.com',
1747         '*.blogbeee.com',
1748         'blogas.lt',
1749         'blogbud.com',
1750         '*.blogburkinafaso.com',
1751         '*.blogcu.com',                 // by info at nokta.com
1752         'blogfreely.com',
1753         '*.blogdrive.com',
1754         '*.blogg.de',
1755         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1756         'bloggercrab.com',
1757         'bloggers.nl',
1758         '*.bloggingmylife.com',
1759         '*.bloggles.info',
1760         '*.blogharbor.com',
1761         '*.bloguj.eu',
1762         'bloguitos.com',
1763         'blogosfer.com',
1764         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1765         '*.blogslive.net',
1766         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1767         '*.blogstream.com',
1768         'blogyaz.com',
1769         'bloodee.com',
1770         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1771         'board-4you.de',
1772         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1773         '*.boardhost.com',
1774         'Bravenet.com' => array(
1775                 '*.bravenet.com',
1776                 '*.bravehost.com',
1777         ),
1778         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1779         'C2k.jp' => array(
1780                 // by Makoto Okuse (webmaster at 2style.net)
1781                 '.081.in',
1782                 '.2style.in',
1783                 '.bian.in',
1784                 '.curl.in',
1785                 '.ennui.in',
1786                 '.jinx.in',
1787                 '.loose.in',
1788                 '.mist.in',
1789                 '.muu.in',
1790                 '.naive.in',
1791                 '.panic.in',
1792                 '.slum.in',
1793
1794                 // by 2style, ns *.click2k.net, *.2style.net
1795                 '.2st.jp',
1796                 '.betty.jp',
1797                 '.cabin.jp',
1798                 '.cult.jp',
1799                 '.mippi.jp',
1800                 '.purety.jp',
1801                 '.rapa.jp',
1802                 '.side-b.jp',
1803                 '.web-box.jp',
1804                 '.yea.jp',
1805
1806                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1807                 '.2style.net',
1808                 '.click2k.net',
1809                 '.houka5.com',
1810
1811                 // by click2k, ns *.click2k.net, *.2style.net
1812                 '.psyco.jp',
1813                 '.sweety.jp',
1814
1815                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1816                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1817         ),
1818         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1819         '*.chueca.com',
1820         'city-forum.com',
1821         '*.craigslist.org',
1822         'concepts-mall.com',
1823         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1824         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1825         'counterhit.de',
1826         '*.createforum.net',
1827         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1828         '*.createmybb.com',
1829         'CwCity.de' => array(
1830                 '.cwcity.de',
1831                 '.cwsurf.de',
1832         ),
1833         'dakrats.net',
1834         '*.dcswtech.com',
1835         'del.icio.us',
1836         '*.devil.it',
1837         '*.diaryland.com',
1838         'digg.com',
1839         'digstock.com',
1840         'domains at galaxywave.net' => array(
1841                 'blogstation.net',
1842                 '.phpbb-host.com',
1843         ),
1844         'dotbb.be',
1845         '*.dox.hu',                             // dns at 1b.hu
1846         '*.eadf.com',
1847         '*.eblog.com.au',
1848         '*.ekiwi.de',
1849         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1850         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1851         '*.ebloggy.com',
1852         'enunblog.com',
1853         '*.epinoy.com',
1854         '*.ez-sites.ws',
1855         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1856         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1857         '*.fathippohosting.com',        // 208.101.3.192
1858         'FC2.com' => array(
1859                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1860                         // Many traps available:
1861                         //      bqdr.blog98.fc2.com,       iframe
1862                         //      csfir.blog87.fc2.com,      iframe
1863                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1864                         //      sippou2006.blog60.fc2.com, iframe
1865                         // NOTE: 'blog.fc2.com' is not included
1866                 '*.h.fc2.com',  // Adult
1867         ),
1868         '*.fizwig.com',
1869         'forum.ezedia.net',
1870         '*.extra.hu',                   // angelo at jasmin.hu
1871         '*.fanforum.cc',
1872         'fingerprintmedia.com',
1873         '*.filelan.com',
1874         '*.fora.pl',
1875         '*.forka.eu',
1876         '*.foren-city.de',
1877         'foren-gratis.de',
1878         '*.foros.tv',
1879         '*.forospace.com',
1880         'foroswebgratis.com',
1881         '*.forum-on.de',
1882         '*.forum24.se',
1883         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1884         '.forum66.com',
1885         'Forumotion.com' => array(
1886                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1887                 '*.forumactif.com',     // 91.121.41.79
1888                 '*.editboard.com',      // 75.126.156.15
1889                 '*.sosblog.com',        // 74.86.25.140
1890
1891                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1892                 '*.0forum.biz',
1893                 '*.1forum.biz',
1894                 '*.1fr1.net',
1895                 '*.1talk.net',
1896                 '*.2forum.biz',
1897                 '*.3forum.biz',
1898                 '*.4forum.biz',
1899                 '*.4rumer.com',
1900                 '*.4rumer.net',
1901                 '*.4umer.com',
1902                 '*.4umer.net',
1903                 '*.5forum.biz',
1904                 '*.5forum.info',
1905                 '*.5forum.net',
1906                 '*.6forum.biz',
1907                 '*.6forum.info',
1908                 '*.77forum.com',
1909                 '*.7forum.biz',
1910                 '*.7forum.info',
1911                 '*.7forum.net',
1912                 '*.8forum.biz',
1913                 '*.8forum.info',
1914                 '*.8forum.net',
1915                 '*.9forum.biz',
1916                 '*.9forum.info',
1917                 '*.activebb.net',
1918                 '*.aforumfree.com',
1919                 '*.all-forum.net',
1920                 '*.all-up.com',
1921                 '*.alldiscussion.net',
1922                 '*.allgoo.net',
1923                 '*.allgoo.us',
1924                 '*.american-forum.net',
1925                 '*.americantalk.net',
1926                 '*.annuaire-forums.com',
1927                 '*.asiafreeforum.com',
1928                 '*.asianfreeforum.com',
1929                 '*.azureforum.com',
1930                 '*.azurforum.com',
1931                 '*.bestcheapforum.com',
1932                 '*.bestdiscussion.net',
1933                 '*.bestgoo.com',
1934                 '*.bestofforum.com',
1935                 '*.bestofforum.net',
1936                 '*.bestoforum.net',
1937                 '*.bforum.biz',
1938                 '*.big-forum.net',
1939                 '*.board-poster.com',
1940                 '*.board-realtors.com',
1941                 '*.boardonly.com',
1942                 '*.boardrealtors.net',
1943                 '*.boardsmessage.com',
1944                 '*.briceboard.com',
1945                 '*.bubblelol.com',
1946                 '*.buy-forum.com',
1947                 '*.buy-talk.com',
1948                 '*.buyforum.net',
1949                 '*.buygoo.net',
1950                 '*.buygoo.us',
1951                 '*.camelscrew.com',
1952                 '*.cheap-forum.com',
1953                 '*.cheapforum.net',
1954                 '*.chocoforum.com',
1955                 '*.chocoforum.net',
1956                 '*.clic-topic.com',
1957                 '*.clicboard.com',
1958                 '*.clictopic.com',
1959                 '*.clictopic.net',
1960                 '*.clictopics.com',
1961                 '*.clubdiscussion.net',
1962                 '*.coolbb.net',
1963                 '*.crazy4us.com',
1964                 '*.crazyfruits.net',
1965                 '*.createmyboard.com',
1966                 '*.crewcamel.com',
1967                 '*.cyberfreeforum.com',
1968                 '*.discutforum.com',
1969                 '*.discutfree.com',
1970                 '*.do-forum.com',
1971                 '*.do-goo.com',
1972                 '*.do-goo.net',
1973                 '*.do-talk.com',
1974                 '*.dodiscussion.com',
1975                 '*.dogoo.us',
1976                 '*.easydiscussion.net',
1977                 '*.easyforumlive.com',
1978                 '*.englishboard.net',
1979                 '*.englishboards.com',
1980                 '*.ephpbb.com',
1981                 '*.eraseboard.net',
1982                 '*.eraseboards.net',
1983                 '*.euro-talk.net',
1984                 '*.eurodiscussion.net',
1985                 '*.eurogoo.com',
1986                 '*.exchangesboard.com',
1987                 '*.exprimetoi.net',
1988                 '*.fairtopic.com',
1989                 '*.fforum.biz',
1990                 '*.fforumfree.com',
1991                 '*.first-forum.com',
1992                 '*.firstgoo.com',
1993                 '*.fororama.com',
1994                 '*.forum-2007.com',
1995                 '*.forum-actif.net',
1996                 '*.forum-free.biz',
1997                 '*.forum-free.org',
1998                 '*.forum-motion.com',
1999                 '*.forum0.biz',
2000                 '*.forum0.info',
2001                 '*.forum0.net',
2002                 '*.forum2.biz',
2003                 '*.forum3.biz',
2004                 '*.forum3.info',
2005                 '*.forum5.info',
2006                 '*.forum6.biz',
2007                 '*.forum6.info',
2008                 '*.forum7.biz',
2009                 '*.forum777.com',
2010                 '*.forum8.biz',
2011                 '*.forum9.biz',
2012                 '*.foruma.biz',
2013                 '*.forumactif.biz',
2014                 '*.forumactif.info',
2015                 '*.forumactif.name',
2016                 '*.forumactif.ws',
2017                 '*.forumaction.net',
2018                 '*.forumakers.com',
2019                 '*.forumandco.com',
2020                 '*.forumb.biz',
2021                 '*.forumc.biz',
2022                 '*.forumd.biz',
2023                 '*.forumdediscussions.com',
2024                 '*.forumdediscussions.net',
2025                 '*.forume.biz',
2026                 '*.forumeast.com',
2027                 '*.forumf.biz',
2028                 '*.forumfreek.com',
2029                 '*.forumfreez.com',
2030                 '*.forumg.biz',
2031                 '*.forumh.biz',
2032                 '*.forumh.net',
2033                 '*.forumhope.com',
2034                 '*.forumi.biz',
2035                 '*.forumice.net',
2036                 '*.foruminute.com',
2037                 '*.forumj.biz',
2038                 '*.forumj.net',
2039                 '*.forumjonction.com',
2040                 '*.forumk.biz',
2041                 '*.foruml.biz',
2042                 '*.forumm.biz',
2043                 '*.forummotion.com',
2044                 '*.forummotions.com',
2045                 '*.forumn.biz',
2046                 '*.forumn.net',
2047                 '*.forumo.biz',
2048                 '*.forumonline.biz',
2049                 '*.forumotions.com',
2050                 '*.forump.biz',
2051                 '*.forump.info',
2052                 '*.forumperso.com',
2053                 '*.forumpersos.com',
2054                 '*.forumplatinum.com',
2055                 '*.forumpro.fr',
2056                 '*.forumq.biz',
2057                 '*.forumr.biz',
2058                 '*.forumr.net',
2059                 '*.forumrama.com',
2060                 '*.forums-actifs.com',
2061                 '*.forums-actifs.net',
2062                 '*.forums1.net',
2063                 '*.forumsactifs.com',
2064                 '*.forumsactifs.net',
2065                 '*.forumsfree.org',
2066                 '*.forumsline.com',
2067                 '*.forumsmakers.com',
2068                 '*.forumsmotion.com',
2069                 '*.forumsmotions.com',
2070                 '*.forumt.biz',
2071                 '*.forumv.biz',
2072                 '*.forumvalue.com',
2073                 '*.forumw.biz',
2074                 '*.forumy.biz',
2075                 '*.free-boards.net',
2076                 '*.freediscussion.net',
2077                 '*.freediscussions.net',
2078                 '*.freeforum.me.uk',
2079                 '*.freeforumboard.net',
2080                 '*.freeforumfree.com',
2081                 '*.freevideotalk.com',
2082                 '*.frenchboard.com',
2083                 '*.fruitsandco.com',
2084                 '*.fullboards.com',
2085                 '*.fullsubject.com',
2086                 '*.fullsubject.net',
2087                 '*.get-forum.net',
2088                 '*.getdiscussion.com',
2089                 '*.getgoo.net',
2090                 '*.getgoo.us',
2091                 '*.gettalk.net',
2092                 '*.go-board.com',
2093                 '*.go-board.net',
2094                 '*.go-forum.net',
2095                 '*.go-ogler.com',
2096                 '*.gofreeforum.com',
2097                 '*.gogoo.us',
2098                 '*.goo-board.com',
2099                 '*.goo-boys.com',
2100                 '*.goo-dart.com',
2101                 '*.goo-dole.com',
2102                 '*.goo-done.com',
2103                 '*.gooboards.com',
2104                 '*.goodbb.net',
2105                 '*.goodearths.com',
2106                 '*.goodforum.net',
2107                 '*.goodoles.com',
2108                 '*.goodoolz.com',
2109                 '*.gooforum.com',
2110                 '*.gooforums.com',
2111                 '*.googoolz.com',
2112                 '*.great-forum.com',
2113                 '*.heavenforum.com',
2114                 '*.hforum.biz',
2115                 '*.high-forums.com',
2116                 '*.highbb.com',
2117                 '*.highforum.net',
2118                 '*.hightoxic.com',
2119                 '*.homediscussion.net',
2120                 '*.homegoo.com',
2121                 '*.hooxs.com',
2122                 '*.hot-me.com',
2123                 '*.hot4um.com',
2124                 '*.hotdiscussion.net',
2125                 '*.hotgoo.net',
2126                 '*.in-goo.com',
2127                 '*.in-goo.net',
2128                 '*.infodiscussion.net',
2129                 '*.ingoo.us',
2130                 '*.iowoi.com',
2131                 '*.jforum.biz',
2132                 '*.just-forum.net',
2133                 '*.justboard.net',
2134                 '*.justdiscussion.com',
2135                 '*.justforum.net',
2136                 '*.justgoo.com',
2137                 '*.keuf.net',
2138                 '*.lforum.biz',
2139                 '*.lifediscussion.net',
2140                 '*.lifeme.net',
2141                 '*.lightbb.com',
2142                 '*.logu2.com',
2143                 '*.longdomaine.com',
2144                 '*.lovediscussion.net',
2145                 '*.lowcostforum.com',
2146                 '*.make-free-forum.com',
2147                 '*.makeforumfree.com',
2148                 '*.makefreeforum.com',
2149                 '*.mam9.com',
2150                 '*.manageboard.com',
2151                 '*.max2forum.com',
2152                 '*.meabout.com',
2153                 '*.megabb.com',
2154                 '*.moncontact.com',
2155                 '*.moninter.net',
2156                 '*.motion-forum.net',
2157                 '*.motionforum.net',
2158                 '*.motionsforum.com',
2159                 '*.mrforum.net',
2160                 '*.msnboard.net',
2161                 '*.msnyou.com',
2162                 '*.my-free-board.com',
2163                 '*.my-free-boards.com',
2164                 '*.my-free-forum.com',
2165                 '*.my-free-forums.com',
2166                 '*.my-goo.com',
2167                 '*.my-goo.net',
2168                 '*.mydiscussionboard.com',
2169                 '*.myfreeboard.net',
2170                 '*.mygoo.org',
2171                 '*.myrealboard.com',
2172                 '*.netboarder.com',
2173                 '*.netdiscussion.net',
2174                 '*.netgoo.org',
2175                 '*.new-forum.net',
2176                 '*.newdiscussion.net',
2177                 '*.newgoo.net',
2178                 '*.nforum.biz',
2179                 '*.nice-album.com',
2180                 '*.nice-board.biz',
2181                 '*.nice-board.com',
2182                 '*.nice-board.net',
2183                 '*.nice-boards.com',
2184                 '*.nice-boards.net',
2185                 '*.nice-forum.com',
2186                 '*.nice-forum.net',
2187                 '*.nice-forums.com',
2188                 '*.nice-forums.net',
2189                 '*.nice-gallery.net',
2190                 '*.nice-subject.com',
2191                 '*.nice-subjects.com',
2192                 '*.nice-theme.com',
2193                 '*.nice-topic.com',
2194                 '*.nice-topics.com',
2195                 '*.nicealbums.com',
2196                 '*.niceboard.biz',
2197                 '*.niceboard.net',
2198                 '*.niceboards.net',
2199                 '*.nicegalleries.net',
2200                 '*.nicesubject.com',
2201                 '*.nicesubjects.com',
2202                 '*.nicetopic.net',
2203                 '*.nicetopics.com',
2204                 '*.nightforum.net',
2205                 '*.nocost-forum.com',
2206                 '*.nofeeforum.com',
2207                 '*.one-forum.net',
2208                 '*.onediscussion.net',
2209                 '*.onegoo.us',
2210                 '*.onlinegoo.com',
2211                 '*.onlyquery.com',
2212                 '*.open-board.com',
2213                 '*.openu2.com',
2214                 '*.othersboards.com',
2215                 '*.own0.com',
2216                 '*.pforum.biz',
2217                 '*.phpbb9.com',
2218                 '*.phpbbtest.com',
2219                 '*.positifforum.com',
2220                 '*.postalboard.com',
2221                 '*.prodiscussion.net',
2222                 '*.progoo.us',
2223                 '*.pureforum.net',
2224                 '*.qforum.biz',
2225                 '*.quickbb.net',
2226                 '*.realbb.net',
2227                 '*.realfreeforum.com',
2228                 '*.realmsn.com',
2229                 '*.rforum.biz',
2230                 '*.road2us.com',
2231                 '*.roomforum.com',
2232                 '*.saveboard.com',
2233                 '*.screwcamel.com',
2234                 '*.screwcamels.com',
2235                 '*.sendboard.com',
2236                 '*.sephorum.com',
2237                 '*.sforum.biz',
2238                 '*.shootboard.com',
2239                 '*.shop-forum.net',
2240                 '*.shopsubject.com',
2241                 '*.simpleboard.net',
2242                 '*.site-forums.com',
2243                 '*.smileyforum.net',
2244                 '*.sos-forum.net',
2245                 '*.sos4um.com',
2246                 '*.sos4um.net',
2247                 '*.sosforum.net',
2248                 '*.speedyforum.com',
2249                 '*.stationforum.com',
2250                 '*.subject-expert.com',
2251                 '*.subject-line.com',
2252                 '*.subject-tracer.com',
2253                 '*.subjectchange.com',
2254                 '*.subjectdeals.com',
2255                 '*.subjectdebate.com',
2256                 '*.subjectdone.com',
2257                 '*.subjectonline.com',
2258                 '*.subjectschange.com',
2259                 '*.subjectsecrets.com',
2260                 '*.super-forum.net',
2261                 '*.talk-forums.com',
2262                 '*.team-forum.net',
2263                 '*.team-talk.net',
2264                 '*.teamconvention.com',
2265                 '*.teamgoo.net',
2266                 '*.teensboards.com',
2267                 '*.the-talk.net',
2268                 '*.the-up.com',
2269                 '*.thegoo.us',
2270                 '*.thinksubject.com',
2271                 '*.top-board.com',
2272                 '*.top-forum.net',
2273                 '*.top-me.com',
2274                 '*.top-talk.net',
2275                 '*.topdiscussion.com',
2276                 '*.topgoo.net',
2277                 '*.topic-board.com',
2278                 '*.topic-board.net',
2279                 '*.topic-debate.com',
2280                 '*.topic-ideas.com',
2281                 '*.topic-mail.com',
2282                 '*.topic-zone.com',
2283                 '*.topicboard.net',
2284                 '*.topicboards.com',
2285                 '*.topicmanager.com',
2286                 '*.topicsolutions.net',
2287                 '*.toxicfarm.com',
2288                 '*.unlimitboard.com',
2289                 '*.unlimitedboard.com',
2290                 '*.unlimitedforum.com',
2291                 '*.up-with.com',
2292                 '*.up-your.com',
2293                 '*.urealboard.com',
2294                 '*.user-board.net',
2295                 '*.userboard.net',
2296                 '*.users-board.com',
2297                 '*.users-board.net',
2298                 '*.usersboard.com',
2299                 '*.usersboard.net',
2300                 '*.webgoo.us',
2301                 '*.withboards.com',
2302                 '*.withme.us',
2303                 '*.worldgoo.com',
2304                 '*.yahooboard.net',
2305                 '*.yforum.biz',
2306                 '*.yoo7.com',
2307                 '*.youneed.us',
2308                 '*.your-board.com',
2309                 '*.your-talk.com',
2310                 '*.yourme.net',
2311                 '*.zforum.biz',
2312
2313                 // 75.126.156.15 redirect to forumactif.com
2314                 '*.actifforum.com',
2315                 '*.fr-bb.com',
2316                 '*.superforum.fr',
2317
2318                 // 75.126.156.15 redirect to editboard.com
2319                 '*.bbfr.net',
2320                 '*.bbgraf.com',
2321                 '*.cinebb.com',
2322                 '*.darkbb.com',
2323                 '*.dynamicbb.com',
2324                 '*.zikforum.com',
2325
2326                 // 74.86.25.140 Used: sosblog.com
2327                 '*.0-up.com',
2328                 '*.0-yo.com',
2329                 '*.04live.com',
2330                 '*.06fr.com',
2331                 '*.0fra.com',
2332                 '*.0jet.com',
2333                 '*.0yoo.com',
2334                 '*.1toxic.com',
2335                 '*.2k00.com',
2336                 '*.2xik.com',
2337                 '*.blog-2007.com',
2338                 '*.blog-2008.com',
2339                 '*.blog-2009.com',
2340                 '*.blog-2010.com',
2341                 '*.blog-actif.net',
2342                 '*.blog-marley.com',
2343                 '*.blog-talker.com',
2344                 '*.blog2009.com',
2345                 '*.blogactif.net',
2346                 '*.blogalbums.com',
2347                 '*.blogalerie.com',
2348                 '*.blogaleries.com',
2349                 '*.blogallerys.com',
2350                 '*.blogandme.com',
2351                 '*.blogandyou.com',
2352                 '*.blogbubble.net',
2353                 '*.blogdollz.com',
2354                 '*.bloggeuse.net',
2355                 '*.bloggeuses.com',
2356                 '*.bloginstinct.com',
2357                 '*.bloginternet.net',
2358                 '*.blogmakers.net',
2359                 '*.blogmarley.net',
2360                 '*.blogminister.net',
2361                 '*.blogmorane.com',
2362                 '*.blognboard.com',
2363                 '*.blogotek.net',
2364                 '*.blogpas.com',
2365                 '*.blogpublisher.net',
2366                 '*.blogsalbum.com',
2367                 '*.blogsalbums.com',
2368                 '*.blogsfan.net',
2369                 '*.blogsgallerys.com',
2370                 '*.blogsitephp.com',
2371                 '*.blogsland.net',
2372                 '*.blogsmaker.com',
2373                 '*.blogsmakers.com',
2374                 '*.blogspeed.net',
2375                 '*.blogsup.net',
2376                 '*.blogsutil.com',
2377                 '*.blogsutils.com',
2378                 '*.blogsystem.net',
2379                 '*.blogtalker.net',
2380                 '*.blogtheque.net',
2381                 '*.blogutil.com',
2382                 '*.blogvsboard.com',
2383                 '*.briceblog.com',
2384                 '*.cibleblog.com',
2385                 '*.cristalblog.com',
2386                 '*.crystalblog.net',
2387                 '*.dad-blog.com',
2388                 '*.daddy-blog.com',
2389                 '*.defaultblog.com',
2390                 '*.discussionsblog.com',
2391                 '*.dollzblog.com',
2392                 '*.dtoxic.com',
2393                 '*.easiestblog.net',
2394                 '*.espaceblog.net',
2395                 '*.exitblog.net',
2396                 '*.expensiveblog.com',
2397                 '*.extra-blog.net',
2398                 '*.extrablog.net',
2399                 '*.facileblog.com',
2400                 '*.forblogger.com',
2401                 '*.forumsblogs.com',
2402                 '*.freephpblog.com',
2403                 '*.fresh-blog.net',
2404                 '*.galleryblog.net',
2405                 '*.galleryblogs.net',
2406                 '*.gallerysblog.com',
2407                 '*.gallerysblogs.com',
2408                 '*.hyper-blog.net',
2409                 '*.hyper-blogger.com',
2410                 '*.hyper-blogger.net',
2411                 '*.hyperblogger.net',
2412                 '*.instinctblog.com',
2413                 '*.jeunblog.com',
2414                 '*.jeuneblog.com',
2415                 '*.judblog.com',
2416                 '*.makeblog.net',
2417                 '*.man-blog.net',
2418                 '*.man-blogs.com',
2419                 '*.man-blogs.net',
2420                 '*.manblog.net',
2421                 '*.manblog.org',
2422                 '*.manblog.us',
2423                 '*.manblogs.net',
2424                 '*.mansblog.net',
2425                 '*.mansblogs.com',
2426                 '*.mansblogs.net',
2427                 '*.meetingsblogs.com',
2428                 '*.men-blog.net',
2429                 '*.men-blogs.com',
2430                 '*.men-blogs.net',
2431                 '*.menblog.us',
2432                 '*.menblogs.net',
2433                 '*.mensblogs.net',
2434                 '*.messaginblog.com',
2435                 '*.monblogger.com',
2436                 '*.mum-blog.com',
2437                 '*.mummy-blog.com',
2438                 '*.mummyblog.com',
2439                 '*.myareablog.com',
2440                 '*.myblog-online.net',
2441                 '*.mybloginternet.com',
2442                 '*.myblogland.com',
2443                 '*.myblogmag.com',
2444                 '*.myfreshblog.com',
2445                 '*.myinternetblog.net',
2446                 '*.myoverblog.com',
2447                 '*.myoverblog.net',
2448                 '*.mysharedblog.com',
2449                 '*.nice-albums.com',
2450                 '*.nice-galleries.com',
2451                 '*.nicealbum.net',
2452                 '*.nicegallery.net',
2453                 '*.notreblogger.com',
2454                 '*.outilblog.com',
2455                 '*.over-blogger.com',
2456                 '*.overblogger.com',
2457                 '*.pasblog.com',
2458                 '*.pasblog.net',
2459                 '*.perfect-blog.net',
2460                 '*.perfectblog.net',
2461                 '*.phpblogsite.com',
2462                 '*.phpmyblog.net',
2463                 '*.plateformeblog.com',
2464                 '*.playblogger.com',
2465                 '*.publishmyblog.com',
2466                 '*.pulseblog.net',
2467                 '*.pulseblogs.com',
2468                 '*.puretoxic.com',
2469                 '*.reservedblog.com',
2470                 '*.shareblog.net',
2471                 '*.shareblogs.net',
2472                 '*.shared-blogs.com',
2473                 '*.sharedblog.net',
2474                 '*.sharedblogs.net',
2475                 '*.solideblog.com',
2476                 '*.systemeblog.com',
2477                 '*.talkmeblog.com',
2478                 '*.toolsblog.net',
2479                 '*.toxicplace.com',
2480                 '*.ufreeblog.com',
2481                 '*.uliveblog.com',
2482                 '*.ultratoxic.com',
2483                 '*.utilblog.com',
2484                 '*.utilblogs.com',
2485                 '*.utilsblog.com',
2486                 '*.utilsblogs.com',
2487                 '*.various-blog.com',
2488                 '*.various-blog.net',
2489                 '*.various-blogs.com',
2490                 '*.various-blogs.net',
2491                 '*.variusblog.com',
2492                 '*.versusblog.com',
2493                 '*.vieuxblog.com',
2494                 '*.web-day.net',
2495                 '*.whatsblog.net',
2496                 '*.woman-blog.net',
2497                 '*.woman-blogs.com',
2498                 '*.woman-blogs.net',
2499                 '*.womanblog.com',
2500                 '*.womanblog.org',
2501                 '*.womanblog.us',
2502                 '*.womanblogs.net',
2503                 '*.womansblogs.com',
2504                 '*.womansblogs.net',
2505                 '*.women-blog.net',
2506                 '*.women-blogs.com',
2507                 '*.women-blogs.net',
2508                 '*.womenblog.us',
2509                 '*.womenblogs.net',
2510                 '*.womensblog.net',
2511                 '*.womensblogs.net',
2512                 '*.youblog.net',
2513                 '*.yourliveblog.com',
2514                 '*.yourweblog.net',
2515         ),
2516         '*.forumcommunity.net',
2517         '*.forumer.com',
2518         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2519         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2520         'forumhosting.org',
2521         '*.forums.com',
2522         'forumbolt.com',
2523         'phpbb.forumgratis.com',
2524         'forumlari.net',
2525         '*.forumlivre.com',
2526         'forumnow.com.br',
2527         '*.forumppl.com',
2528         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2529         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2530                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2531                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2532                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2533         '*.fory.pl',
2534         'fotolog.com',
2535         '*.fr33webhost.com',
2536         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2537         '*.free-25.de',
2538         '*.free-bb.com',
2539         'Free-Blog-Hosting.com' => array(
2540                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2541                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
2542                 'blog-tonite.com',                      // ns *.phpwebhosting.com
2543                 'blogznow.com',                         // ns *.phpwebhosting.com
2544                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
2545                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
2546         ),
2547         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2548         'free-guestbook.net',
2549         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2550         'freebb.nl',
2551         '*.freeclans.de',
2552         '*.freelinuxhost.com',  // by 100webspace.com
2553         '*.nofeehost.com',
2554         '*.freehyperspace.com',
2555         'freeforum.at',                 // by Sandro Wilhelmy
2556         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2557         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2558         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2559         '*.freewebhostingpro.com',
2560         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2561         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2562                 '*.6te.net',
2563                 '*.ueuo.com',
2564                 '*.orgfree.com',
2565         ),
2566         '*.freewebpage.org',
2567         'Freewebs.com' => array(        // by inquiries at freewebs.com
2568                 'freewebs.com',
2569                 'freewebsfarms.com',
2570         ),
2571         '*.freewebspace.net.au',
2572         '*.freemyforum.com',    // by messahost at gmail.com
2573         'freepowerboards.com',
2574         '*.freepowerboards.com',
2575         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2576         'Funpic.de' => array(   // by alexander at liemen.net
2577                 '*.funpic.de',
2578                 '*.funpic.org',
2579         ),
2580         'gb-hoster.de',
2581         '*.genblogger.com',
2582         'GetBetterHosting.com' => array(
2583                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2584                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2585         ),
2586         '*.goodboard.de',
2587         'gossiping.net',
2588         '*.greatnuke.com',
2589         '*.guestbook.de',
2590         'gwebspace.de',
2591         'Google.com' => array(
2592                 '*.blogspot.com',
2593                 'docs.google.com',
2594                 '*.googlepages.com',
2595                 'groups-beta.google.com',
2596         ),
2597         'guestbook.at',
2598         'club.giovani.it',
2599         '*.gratis-server.de',
2600         'healthcaregroup.com',
2601         '*.heliohost.org',
2602         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2603                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2604                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2605                 '*.front.ru',           // (domain at hc.ru)
2606                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2607                 '*.hotbox.ru',          // (domain at hc.ru)
2608                 '*.hotmail.ru',         // (hosting at hc.ru)
2609                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2610                 '*.land.ru',            // (domain at hc.ru)
2611                 '*.mail15.com',         // (hosting at hc.ru)
2612                 '*.mail333.com',        // (hosting at hc.ru)
2613                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2614                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2615                 '*.pisem.net',          // (hosting at hc.ru)
2616                 '*.pochta.ru',          // (domain at hc.ru)
2617                 '*.pochtamt.ru',        // (domain at hc.ru)
2618                 '*.pop3.ru',            // (domain at hc.ru)
2619                 '*.rbcmail.ru',         // (domain at hc.ru)
2620                 '*.smtp.ru',            // (domain at hc.ru)
2621         ),
2622         '*.hiblogger.com',              // by chiaokin at gmail.com
2623         '*.hit.bg',                             // by forumup.com ??
2624         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2625         '*.host-page.com',
2626         '*.hostingclub.de',
2627         'forums.hspn.com',
2628         '*.httpsuites.com',
2629         '*.hut2.ru',
2630         'ibfree.org',                   // 208.101.45.88
2631         'IC.cz' => array(
2632                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2633                 '*.hu.cz',                      // internetcentrum at gmail.com
2634                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2635                 '*.ic.cz',                      // internetcentrum at gmail.com
2636                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2637                 '*.own.cz',                     // internetcentrum at gmail.com
2638                 '*.phorum.cz',          // internetcentrum at gmail.com
2639                 '*.tym.cz',                     // internetcentrum at gmail.com
2640                 '*.tym.sk',                     // jobot at ignum.cz
2641                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2642                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2643                 '*.yw.sk',                      // jobot at ignum.cz
2644         ),
2645         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2646                 '*.0moola.com',
2647                 '*.3000mb.com',
2648                 '.501megs.com',
2649                 '*.teracities.com',
2650                 '*.xoompages.com',
2651         ),
2652         '*.icspace.net',
2653         'iEUROP.net' => array(
2654                 '*.ibelgique.com',
2655                 '*.iespana.es',
2656                 '*.ifrance.com',
2657                 '*.iitalia.com',
2658                 '*.iquebec.com',
2659                 '*.isuisse.com',
2660         ),
2661         '*.ihateclowns.net',
2662         '*.ii55.com',
2663         '*.ipbfree.com',
2664         '*.iphorum.com',
2665         '*.blog.ijijiji.com',
2666         '*.info.com',
2667         '*.informe.com',
2668         'it168.com',
2669         '.iwannaforum.com',
2670         '*.jconserv.net',
2671         '*.jeeran.com',
2672         '*.jeun.fr',
2673         '*.joolo.com',
2674         '*.journalscape.com',
2675         '*.justfree.com',
2676         '*.blog.kataweb.it',
2677         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2678         '*.kokoom.com',
2679         'koolpages.com',
2680         '*.kostenlose-foren.org',
2681         '*.ksiegagosci.info',
2682         'Lide.cz' => array(
2683                 '*.lide.cz',
2684                 '*.sblog.cz',
2685         ),
2686         'limmon.net',
2687         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2688         'listible.com',                 ///list/
2689         'Livedoor.com' => array(
2690                 'blog.livedoor.jp',
2691                 '*.blog.livedoor.com',  // redirection
2692         ),
2693         '*.livejournal.com',
2694         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2695         '*.logme.nl',
2696         'lol.to',
2697         'ltss.luton.ac.uk',
2698         'Lycos.com' => array(
2699                 '.angelfire.com',       // angelfire.lycos.com
2700
2701                 '*.jubii.dk',   // search., medlem.
2702                 '*.jubiiblog.co.uk',
2703                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2704                 '*.jubiiblog.de',
2705                 '*.jubiiblog.dk',
2706                 '*.jubiiblog.fr',
2707                 '*.jubiiblog.it',
2708                 '*.jubiiblog.nl',
2709
2710                 '*.lycos.at',
2711                 '*.lycos.ch',
2712                 '*.lycos.co.uk',
2713                 'angelfire.lycos.com',
2714                 '*.lycos.de',
2715                 '*.lycos.es',
2716                 '*.lycos.fr',
2717                 '*.lycos.it',           // by Lycos Europe GmbH
2718                 '*.lycos.nl',
2719
2720                 '*.spray.se',
2721                 '*.sprayblog.se',
2722
2723                 '*.tripod.com',
2724         ),
2725         '*.mastertopforum.com',
2726         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2727         'meneame.net',
2728         '*.memebot.com',
2729         '*.messageboard.nl',
2730         'mokono GmbH' => array(
2731                 '*.blog.com.es',
2732                 '*.blog.de',
2733                 '*.blog.fr',
2734                 '*.blog.co.uk',
2735                 '*.blog.ca',
2736                 '*.blogs.se',
2737                 '*.blogs.fi',
2738                 '*.blogs.no',
2739                 '*.blogs.dk',
2740                 '*.blogs.ro',
2741                 '*.weblogs.pl',
2742                 '*.weblogs.cz',
2743                 '*.weblogs.hu',
2744         ),
2745         'mojklc.com',
2746         '*.mundoforo.com',
2747         'MonForum.com' => array(
2748                 '*.monforum.com',
2749                 '*.monforum.fr',
2750         ),
2751         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2752         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2753         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2754         'myblog.is',
2755         'myblogma.com',
2756         '*.myblogvoice.com',
2757         'myblogwiki.com',
2758         '*.myforum.ro',
2759         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2760         '*.myfreewebs.net',
2761         '*.mysite.com',
2762         '*.myxhost.com',
2763         '*.netfast.org',
2764         'NetGears.com' => array(
2765                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2766                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2767                 '*.freewebspace.com',   // 64.49.236.72
2768         ),
2769         'Netscape.com' => array('*.netscape.com'),
2770         'users.newblog.com',
2771         'neweconomics.info',
2772         '*.newsit.es',                          // 75.126.252.108
2773         '*.nm.ru',
2774         '*.nmj.pl',
2775         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2776         'Northsky.com' => array(
2777                 // by hostmaster at northsky.com
2778                 // northsky.com redirects to communityarchitect.com
2779
2780                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2781                 '*.00author.com',
2782                 '*.00band.com',
2783                 '*.00books.com',
2784                 '*.00cash.com',
2785                 '*.00cd.com',
2786                 '*.00dvd.com',
2787                 '*.00family.com',
2788                 '*.00game.com',
2789                 '*.00home.com',
2790                 '*.00it.com',
2791                 '*.00me.com',
2792                 '*.00movies.com',
2793                 '*.00page.com',
2794                 '*.00politics.com',
2795                 '*.00sf.com',
2796                 '*.00show.com',
2797                 '*.00song.com',
2798                 '*.00trek.com',
2799                 '*.00video.com',
2800                 '*.0me.com',
2801                 '*.0pi.com',
2802                 '*.happy-couple.com',
2803                 '*.warp0.com',
2804
2805                 '*.50megs.com',         // 64.136.25.170
2806
2807                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2808                 '*.00server.com',
2809                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2810                 '*.fanspace.com',
2811
2812                 // 64.136.25.168 by Mark Bishop
2813                 '*.00go.com',
2814                 '*.00space.com',
2815                 '*.00sports.com',
2816         ),
2817         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2818         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2819         'onlyfree.de',
2820         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2821         '*.ohost.de',
2822         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2823                 '.friko.pl',
2824                 '.jak.pl',
2825                 '.nazwa.pl',
2826                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2827                 '.w8w.pl',
2828                 '.za.pl',
2829                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2830         ),
2831         'oyax.com',                             ///user_links.php
2832         '*.p2a.pl',
2833         '*.parlaris.com',
2834         '*.pathfinder.gr',
2835         '*.persianblog.com',
2836         '*.phorum.pl',
2837         'Phpbb24.com' => array( // by Daniel Eriksson
2838                 '*.createforum.us',     // registry at webbland.se
2839                 '*.forumportal.us',     // registry at webbland.se
2840                 '*.freeportal.us',      // registry at network24.se
2841                 '*.phpbb2.us',          // daniel at danielos.com
2842                 '*.phpbb24.com',        // daniel at danielos.com
2843                 '*.myforumportal.com',  // daniel at webbland.se
2844         ),
2845         'phpbb4you.com',
2846         'phpbbcommunity.com',
2847         '*.phpbbx.de',
2848         '*.pochta.ru',
2849         '*.portbb.com',
2850         '*.portcms.com',
2851         'powerwebmaster.de',
2852         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2853         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2854         '*.probook.de',
2855         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2856         '*.pun.pl',
2857         'putfile.com',
2858         '*.quickfreehost.com',
2859         'quizilla.com',
2860         '*.quotaless.com',
2861         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2862         'razyboard.com',
2863         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2864         'realhp.de',
2865         'reddit.com',           ///user/
2866         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2867                 '*.juicypornhost.com',
2868                 '*.pornzonehost.com',
2869                 '*.xhostar.com',
2870         ),
2871         'RIN.ru' => array(
2872                 '*.sbn.bz',
2873                 '*.wol.bz',
2874         ),
2875         '*.sayt.ws',
2876         'Seblg.com' => array(
2877                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2878                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2879         ),
2880         '*.seo-blog.org',
2881         '*.shoutpost.com',
2882         '*.siamforum.com',
2883         '*.siteburg.com',
2884         '*.sitehome.ru',
2885         '*.sitesfree.com',              // support at livesearching.com
2886         '*.sitesled.com',
2887         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2888         'SmarTrans.com' => array(
2889                 '.3w.to',
2890                 '.aim.to',
2891                 '.djmp.jp',
2892                 '.nihongourl.nu',
2893                 '.urljp.com',
2894                 '.www1.to',
2895                 '.www2.to',
2896                 '.www3.to',
2897         ),
2898         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2899         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2900         'members.spboards.com',
2901         'forums.speedguide.net',
2902         'Sphosting.com' => array(       // by admin at sphosting.com
2903                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2904                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2905                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2906                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2907                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2908         ),
2909         '*.spicyblogger.com',
2910         '*.spotbb.com',
2911         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2912         '*.squarespace.com',
2913         'stickypond.com',
2914         'stormloader.com',
2915         'strikebang.com',
2916         '*.sultryserver.com',
2917         '*.t35.com',
2918         '*.talks.at',
2919         'tabletpcbuzz.com',
2920         '*.talkthis.com',
2921         'tbns.net',
2922         'telasipforums.com',
2923         'thestudentunderground.org',
2924         'think.ubc.ca',
2925         '*.thumblogger.com',
2926         'Topix.com' => array(
2927                 'topix.com',
2928                 'topix.net',
2929         ),
2930         'forum.tourism-talk.com.au',
2931         'tycho at e-lab.nl' => array(
2932                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2933                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2934         ),
2935         '*.tumblr.com',
2936         'UcoZ Web-Services' => array(
2937                 '*.3dn.ru',
2938                 '*.clan.su',
2939                 '*.moy.su',
2940                 '*.my1.ru',
2941                 '*.p0.ru',
2942                 '*.pp.net.ua',
2943                 '*.ucoz.co.uk',
2944                 '*.ucoz.com',
2945                 '*.ucoz.net',
2946                 '*.ucoz.org',
2947                 '*.ucoz.ru',
2948                 '*.ws.co.ua',
2949         ),
2950         '*.unforo.net',
2951         'veoh.com',
2952         '*.vdforum.ru',
2953         '*.vtost.com',
2954         '*.vidiac.com',
2955         'Voila.fr' => array('.site.voila.fr'),
2956         'volny.cz',
2957         'voy.com',
2958         '*.welover.org',
2959         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2960                 '*.fasthost.tv',
2961                 '*.hothost.tv',
2962                 '*.isgreat.tv',
2963                 '*.issexy.tv',
2964                 '*.isterrible.tv',
2965                 '*.somegood.tv',
2966                 '*.adultnations.com',
2967                 '*.alladultfemale.com',
2968                 '*.alladultmale.com',
2969                 '*.allbisexual.com',
2970                 '*.allbreast.com',
2971                 '*.allfeminism.com',
2972                 '*.allmanpages.com',
2973                 '*.allmendirect.com',
2974                 '*.allphotoalbum.com',
2975                 '*.allsexpages.com',
2976                 '*.allwomanweb.com',
2977                 '*.attorney-site.com',
2978                 '*.bedclip.com',
2979                 '*.bestfamilysite.com',
2980                 '*.bestmusicpages.com',
2981                 '*.bigmoron.com',
2982                 '*.bourgeoisonline.com',
2983                 '*.candyfrom.us',
2984                 '*.cartoonhit.com',
2985                 '*.cat-on-line.com',
2986                 '*.chokesondick.com',
2987                 '*.closeupsof.us',
2988                 '*.cpa-site.com',
2989                 '*.dampgirl.com',
2990                 '*.dampgirls.com',
2991                 '*.deepestfetish.com',
2992                 '*.docspages.com',
2993                 '*.dog-on-line.com',
2994                 '*.dogcountries.com',
2995                 '*.dognations.com',
2996                 '*.doingitwith.us',
2997                 '*.drenchedface.com',
2998                 '*.drenchedlips.com',
2999                 '*.drspages.com',
3000                 '*.edogden.com',
3001                 '*.eroticountry.com',
3002                 '*.fasthost.tv',
3003                 '*.fineststars.com',
3004                 '*.foronlinegames.com',
3005                 '*.forplanetearth.com',
3006                 '*.freeadultparty.com',
3007                 '*.freespeechsite.com',
3008                 '*.gayadultxxx.com',
3009                 '*.gaytaboo.com',
3010                 '*.greatcookery.com',
3011                 '*.greatrecipepages.com',
3012                 '*.greatstreamingvideo.com',
3013                 '*.hatesit.com',
3014                 '*.hothost.tv',
3015                 '*.iscrappy.com',
3016                 '*.isgreat.tv',
3017                 '*.issexy.tv',
3018                 '*.isterrible.tv',
3019                 '*.itinto.us',
3020                 '*.japannudes.net',
3021                 '*.jesussave.us',
3022                 '*.jesussaveus.com',
3023                 '*.labialand.com',
3024                 '*.lettersfrom.us',
3025                 '*.lookingat.us',
3026                 '*.lunaticsworld.com',
3027                 '*.microphallus.com',
3028                 '*.mycatshow.com',
3029                 '*.mydogshow.com',
3030                 '*.myhardman.com',
3031                 '*.mylawsite.net',
3032                 '*.mylovething.com',
3033                 '*.onasoapbox.com',
3034                 '*.onlinepulpit.com',
3035                 '*.petitionthegovernment.com',
3036                 '*.photosfor.us',
3037                 '*.picturetrades.com',
3038                 '*.pleasekiss.us',
3039                 '*.politicalemergency.com',
3040                 '*.power-emergency.com',
3041                 '*.prayingfor.us',
3042                 '*.realbadidea.com',
3043                 '*.realisticpolitics.com',
3044                 '*.reallybites.com',
3045                 '*.reallypumping.us',
3046                 '*.reallyrules.com',
3047                 '*.reallysuckass.com',
3048                 '*.reallysucksass.com',
3049                 '*.realsweetheart.com',
3050                 '*.rottenass.com',
3051                 '*.schoolreference.com',
3052                 '*.sexheroes.com',
3053                 '*.sharewith.us',
3054                 '*.smutstars.com',
3055                 '*.soakinglips.com',
3056                 '*.somegood.tv',
3057                 '*.songsfrom.us',
3058                 '*.stinkingfart.com',
3059                 '*.stinkyhands.com',
3060                 '*.storiesfrom.us',
3061                 '*.taboocountry.com',
3062                 '*.television-series.com',
3063                 '*.thisbelongsto.us',
3064                 '*.totallyboning.us',
3065                 '*.vaginasisters.com',
3066                 '*.verydirtylaundry.com',
3067                 '*.videosfor.us',
3068                 '*.videosfrom.us',
3069                 '*.videosof.us',
3070                 '*.virtualdogshit.com',
3071                 '*.web1000.com',
3072                 '*.webpicturebook.com',
3073                 '*.wronger.com',
3074                 '*.xxxnations.com',
3075                 '*.yourwaywith.us',
3076         ),
3077         'webblog.ru',
3078         'weblogmaniacs.com',
3079         '.webng.com',                   // www.*, www3.*
3080         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3081         'websitetoolbox.com',
3082         '*.webtropia.com',
3083         'Welnet.de' => array(
3084                 'welnet.de',
3085                 'welnet4u.de',
3086         ),
3087         'wh-gb.de',
3088         '*.wikidot.com',
3089         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3090         '*.wmjblogs.ru',
3091         '*.wordpress.com',
3092         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3093         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3094         '*.xforum.se',
3095         'xfreeforum.com',
3096         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3097         '*.xoomwebs.com',
3098         '.xterm.org',
3099         '.freeblogs.xp.tl',
3100         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3101         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3102         'Yahoo.com' => array(
3103                 'flickr.com',
3104                 'geocities.com',
3105         ),
3106         'YANDEX, LLC.' => array(        // noc at yandex.net
3107                 '*.narod.ru',
3108                 'ya.ru',
3109                 'yandex.ru',
3110         ),
3111         '*.yeahost.com',
3112         'yourfreebb.de',
3113         'Your-Websites.com' => array(
3114                 '*.your-websites.net',
3115                 '*.web-space.ws',
3116         ),
3117 );
3118
3119 // --------------------------------------------------
3120
3121 $blocklist['B-2'] = array(
3122
3123         // B-2: Jacked contents, something implanted
3124         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3125         '*.3dm3.com',
3126         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3127         '*.1fr1.com',
3128         'a4aid.org',
3129         'aac.com',
3130         '*.aamad.org',
3131         'ad-pecjak.si',
3132         'agnt.org',
3133         'alwanforthearts.org',
3134         '*.anchor.net.au',
3135         'anewme.org',
3136         'internetyfamilia.asturiastelecentros.com',
3137         'Ball State University' => array('web.bsu.edu'),
3138         'btofaq.net',                   ///v3/forum
3139         'blepharospasm.org',
3140         'nyweb.bowlnfun.dk',
3141         '*.buzznet.com',
3142         '*.canberra.net.au',
3143         'castus.com',
3144         'Case Western Reserve University' => array('case.edu'),
3145         'ceval.de',
3146         'chaco.gov.ar',
3147         'codespeak.net',
3148         'Colorado School of Mines' => array('ticc.mines.edu'),
3149         '*.colourware.co.uk',
3150         'cpuisp.com',
3151         'International Christian University' => array('icu.edu.ua'),
3152         '*.iphpbb.com',
3153         'board-z.de',
3154         '*.board-z.de',
3155         'California State University Stanislaus' => array('writing.csustan.edu'),
3156         'cannon.co.za',
3157         'columbosgarden.com',
3158         '*.communityhost.de',
3159         'connectionone.org',
3160         'deathwinds.com',
3161         'deforum.org',
3162         'delayedreaction.org',
3163         'deproduction.org',
3164         'dc503.org',
3165         'dre-centro.pt',
3166         'Duke University' => array('devel.linux.duke.edu'),
3167         '*.esen.edu.sv',
3168         'forums.drumcore.com',
3169         'dundeeunited.org',
3170         'energyglass.com.ua',
3171         'exclusivehotels.com',
3172         'info.ems-rfid.com',
3173         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3174         'fbwloc.com',
3175         '.fhmcsa.org.au',
3176         'findyourwave.co.uk',
3177         'frogcafe.net',
3178         'plone4.fnal.gov',
3179         'freeforen.com',
3180         'funkdoc.com',
3181         'funnyclipcentral.com',
3182         'gearseds.com',
3183         'generationrice.com',
3184         'ghettojava.com',
3185         'gnacademy.org',
3186         '*.goodboard.de',
3187         'GreenDayVideo.net' => array(
3188                 'greendayvideo.net',
3189                 'espanol.greendayvideo.net',
3190         ),
3191         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3192         'Harvard Law School' => array('blogs.law.harvard.edu'),
3193         'helpiammoving.com',
3194         'homepage-dienste.com',
3195         'Howard University' => array('networks.howard.edu'),
3196         'hullandhull.com',
3197         'Huntington University' => array('huntington.edu'),
3198         'huskerink.com',
3199         '.hyba.info',
3200         'inda.org',
3201         '*.indymedia.org',      // by abdecom at riseup.net
3202         'instantbulletin.com',
3203         'internetincomeclub.com',
3204         '*.inventforum.com',
3205         'Iowa State University' => array('boole.cs.iastate.edu'),
3206         'ipwso.org',
3207         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3208         'ironmind.com',
3209         'skkustp.itgozone.com', // hidden JavaScript
3210         'jazz2online.com',
3211         '.jloo.org',
3212         'Kazan State University' => array(
3213                 'dir.kzn.ru',
3214                 'sys.kcn.ru',
3215         ),
3216         'test.kernel.org',
3217         'kevindmurray.com',
3218         'kroegjesroutes.nl',
3219         '.legion.org',
3220         'Loyola Marymount University' => array('lmu.edu'),
3221         'forum.lixium.fr',
3222         'macfaq.net',
3223         'me4x4.com',
3224         'microbial-ecology.net',
3225         'minsterscouts.org',
3226         'morallaw.org',
3227         'morerevealed.com',
3228         'macronet.org',
3229         'mamiya.co.uk',
3230         'vcd.mmvcd.com',
3231         'Monmouth College' => array('department.monm.edu'),
3232         'mountainjusticemedia.org',
3233         '*.mybbland.com',
3234         'mydlstore.com',
3235         '*.netboardz.com',
3236         'North Carolina A&T State University' => array(
3237                 'ncat.edu',
3238                 'my.ncat.edu',
3239                 'hlc.ncat.edu',
3240         ),
3241         'placetobe.org',
3242         'users.nethit.pl',
3243         'nightclubvip.net',
3244         'njbodybuilding.com',
3245         'nlen.org',
3246         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3247         'offtextbooks.com',
3248         'ofimatika.com',
3249         'omakase-net',                  // iframe
3250         'omikudzi.ru',
3251         'openchemist.net',
3252         'palungjit.com',
3253         'pataphysics-lab.com',
3254         'paypaldev.org',
3255         'paullima.com',
3256         'perl.org.br',
3257         'pfff.co.uk',
3258         'pimpo.com',                    ///_old_site/
3259         'pix4online.co.uk',
3260         'plone.dk',
3261         'preform.dk',
3262         'privatforum.de',
3263         'publicityhound.net',
3264         'qea.com',
3265         'rbkdesign.com',
3266         'rehoboth.com',
3267         'rodee.org',
3268         'ryanclark.org',
3269         '*.reallifelog.com',
3270         'rkphunt.com',
3271         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3272         'sapphireblue.com',
3273         'saskchamber.com',
3274         'savevoorhees.org',
3275         'selikoff.net',
3276         'serbisyopilipino.org',
3277         'setbb.com',
3278         'sharejesusinternational.com',
3279         'silver-tears.net',
3280         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3281         '.softpress.com',
3282         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3283         'fora.taniemilitaria.pl',       ///phpbb
3284         'tehudar.ru',
3285         'Tennessee Tech University' => array('manila.tntech.edu'),
3286         'thebluebird.ws',
3287         'theosis.org',
3288         '*.thoforum.com',
3289         'troms-slekt.com',
3290         'theedgeblueisland.com',
3291         'toyshop.com.tw',               // /images/sigui/
3292         'torontoplace.com',
3293         'chat.travlang.com',
3294         'trickropingbylassue.com',
3295         'Truman State University' => array('mathbio.truman.edu'),
3296         'tuathadedannan.org',
3297         'txgotg.com',
3298         'tzaneen.co.za',
3299         'forums.ugo.com',
3300         'whole.cs.unibo.it',
3301         'The University of North Dakota' => array(
3302                 'learn.aero.und.edu',
3303                 'ez.asn.und.edu',
3304         ),
3305         'The University of Alabama' => array('bama.ua.edu'),
3306         'unisonscotlandlaw.co.uk',
3307         'University of California' => array('classes.design.ucla.edu'),
3308         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3309         'University of Northern Colorado' => array('unco.edu'),
3310         'University of Toronto' => array(
3311                 'environment.utoronto.ca',
3312                 'grail.oise.utoronto.ca',
3313                 'utsc.utoronto.ca',
3314         ),
3315         'urgentclick.com',
3316         'vacant.org.uk',
3317         'Villa Julie College' => array('www4.vjc.edu'),
3318         'Vail Valley Foundation' => array('.vvf.org'),
3319         'wabson.org',
3320         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3321         'webarch.com',          // by WebArchitects (webarch at insync.net)
3322         'weehob.com',
3323         'West Virginia University Parkersburg' => array('wvup.edu'),
3324         'williamsburgrentals.com',
3325         'wolvas.org.uk',
3326         'wookiewiki.org',
3327         'xsgaming.com',                 // Jacked
3328         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3329         'Yahoo.com' => array(
3330                 'blog.360.yahoo.com',
3331                 '*.groups.yahoo.com'
3332         ),
3333         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3334         'youthpeer.org',
3335         '*.zenburger.com',
3336         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3337 );
3338
3339 // --------------------------------------------------
3340
3341 $blocklist['C'] = array(
3342
3343         // C: Sample setting of:
3344         // Exclusive spam domains
3345         //
3346         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3347         // affiliates, finance, sending viruses, malicious attacks to browsers,
3348         // and/or mixed ones
3349         //
3350         // Please notify us about this list with reason:
3351         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3352
3353         // C-1: Domain sets (seems to be) born to spam you
3354         //
3355         // All buziness-related spam
3356         //'.biz'
3357         //
3358         'admin at seekforweb.com' => array(
3359                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3360                 '.lovestoryx.com',
3361                 '.loveaffairx.com',
3362                 '.onmore.info',
3363                 '.scfind.info',
3364                 '.scinfo.info',
3365                 '.webwork88.info',
3366         ),
3367         'boss at bse-sofia.bg' => array(        // by Boris
3368                 '.htewbop.org',
3369                 '.kimm--d.org',
3370                 '.gtre--h.org',
3371                 '.npou--k.org',
3372                 '.bres--z.org',
3373                 '.berk--p.org',
3374                 '.bplo--s.org',
3375                 '.basdpo.org',
3376                 '.jisu--m.org',
3377                 '.kire--z.org',
3378                 '.mertnop.org',
3379                 '.mooa--c.org',
3380                 '.nake--h.org',
3381                 '.noov--b.org',
3382                 '.suke--y.org',
3383                 '.vasdipv.org',
3384                 '.vase--l.org',
3385                 '.vertinds.org',
3386         ),
3387         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3388                 '.aqq3.info',
3389                 '.axa00.info',
3390                 '.okweb11.org',
3391                 '.okweb12.org',
3392                 '.okweb13.org',
3393                 '.okweb14.org',
3394         ),
3395         'opezdol at gmail.com' => array(
3396                 '.informazionicentro.info',
3397                 '.notiziacentro.info',
3398         ),
3399         'SomethingGen' => array(
3400                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3401                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3402                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3403                 // by Lee Chang (nebucha at model-x.com)
3404                 '.adult-chat-world.info',       // by Lui
3405                 '.adult-chat-world.org',        // by Lui
3406                 '.adult-sex-chat.info',         // by Lui
3407                 '.adult-sex-chat.org',          // by Lui
3408                 '.adult-cam-chat.info',         // by Lui
3409                 '.adult-cam-chat.org',          // by Lui
3410                 '.dildo-chat.org',                      // by Lui
3411                 '.dildo-chat.info',                     // by Lui
3412                 // flirt-online.info is not CamsGen
3413                 '.flirt-online.org',            // by Lui
3414                 '.live-adult-chat.info',        // by Lui
3415                 '.live-adult-chat.org',         // by Lui
3416                 '.sexy-chat-rooms.info',        // by Lui
3417                 '.sexy-chat-rooms.org',         // by Lui
3418                 '.swinger-sex-chat.info',       // by Lui
3419                 '.swinger-sex-chat.org',        // by Lui
3420                 '.nasty-sex-chat.info',         // by Lui
3421                 '.nasty-sex-chat.org',          // by Lui
3422
3423                 '.camshost.info',                       // by Sergey
3424                 '.camdoors.info',                       // by Sergey
3425                 '.chatdoors.info',                      // by Sergey
3426
3427                 '.lebedi.info',                         // by Pronin
3428                 '.loshad.info',                         // by Pronin
3429                 '.porosenok.info',                      // by Pronin
3430                 '.indyushonok.info',            // by Pronin
3431                 '.kotyonok.info',                       // by Pronin
3432                 '.kozlyonok.info',                      // by Pronin
3433                 '.magnoliya.info',                      // by Pronin
3434                 '.svinka.info',                         // by Pronin
3435                 '.svinya.info',                         // by Pronin
3436                 '.zherebyonok.info',            // 89.149.206.225 by Pronin
3437
3438                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3439
3440                 '.adult-cam-chat-sex.info',             // by Lee
3441                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3442                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3443                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3444                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3445                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3446                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3447                 '.sex-chat-porn-cam.info',              // by Lee
3448         ),
3449         'mital at topo20.org' => array( // by Marcello Italianore
3450                 '.trevisos.org',
3451                 '.topo20.org',
3452         ),
3453         'WellCams.com' => array(
3454                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3455                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3456                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3457         ),
3458         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3459                 '.besturgent.org',
3460                 '.googletalknow.org',
3461                 '.montypythonltd.org',
3462                 '.supersettlemet.org',
3463                 '.thepythonfoxy.org',
3464                 '.ukgamesyahoo.org',
3465                 '.youryahoochat.org',
3466         ),
3467         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3468                 '.dbsajax.org',
3469                 '.acgt2005.org',
3470                 '.gopikottoor.com',
3471                 '.koosx.org',
3472                 '.mmgz.org',
3473                 '.zhiyehua.net',
3474         ),
3475         'vdf at lovespb.com' => array(  // by Andrey
3476                 '.02psa.info',
3477                 '.1818u.org',
3478                 '.18ew.info',
3479                 '.43sexx.org',
3480                 '.56porn.org',
3481                 '.6discount.info',
3482                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3483                 '.78rus.info',
3484                 '.92ssex.org',          // "ForumGenerator"
3485                 '.93adult.org',         // "ForumGenerator"
3486                 '.aboutsr.info',
3487                 '.aboutzw.info',
3488                 '.all23.info',
3489                 '.allvdf.info',
3490                 '.buy-dge.info',
3491                 '.buypo.info',
3492                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3493                 '.cv83.info',
3494                 '.cvwifw.info',
3495                 '.dabouts.info',
3496                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3497                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3498                 '.free01sa.info',
3499                 '.frees1.info',
3500                 '.freexz.info',
3501                 '.ifree-search.org',
3502                 '.lovespb.info',
3503                 '.myso2.info',
3504                 '.nb74u.info',
3505                 '.ohhh2.info',
3506                 '.ol43.info',
3507                 '.olala18.info',
3508                 '.oursales.info',
3509                 '.pasian1.info',
3510                 '.pldk.info',
3511                 '.po473.info',
3512                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3513                 '.poz2.info',
3514                 '.qpf8j4d.info',
3515                 '.saleqw.info',
3516                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3517                 '.sexz18.info',
3518                 '.sexy69a.info',
3519                 '.shedikc.info',
3520                 '.spb78.info',
3521                 '.usacanadauk.info',
3522                 '.v782mks.info',
3523                 '.vny0.info',
3524                 '.wifes1.info',
3525                 '.xranvam.info',
3526                 '.zenitcx.info',
3527                 '.zxolala.info',
3528         ),
3529         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3530                 '.care01.info',
3531                 '.care02.info',
3532                 '.care03.info',
3533                 '.care04.info',
3534                 '.care05.info',
3535                 '.care06.info',
3536                 '.care07.info',
3537                 '.care08.info',
3538                 '.care09.info',
3539                 '.care10.info',
3540                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3541                 '.klastar01.info',
3542                 '.klastar02.info',
3543                 '.klastar03.info',
3544                 '.klastar04.info',
3545                 '.klastar05.info',
3546                 '.klastar06.info',
3547                 '.klastar07.info',
3548                 '.klastar08.info',
3549                 '.klastar09.info',
3550                 '.klastar10.info',
3551                 '.um20ax01.info',
3552                 '.um20ax02.info',
3553                 '.um20ax03.info',
3554                 '.um20ax04.info',
3555                 '.um20ax05.info',
3556                 '.um20ax06.info',
3557                 '.um20ax07.info',
3558                 '.um20ax08.info',
3559                 '.um20ax09.info',
3560                 '.um20ax10.info',
3561         ),
3562         'forrass at gmail.com' => array(        // by Ismail
3563                 '.zmh01.info',
3564                 '.zmh02.info',
3565                 '.zmh03.info',
3566                 '.zmh04.info',
3567                 '.zmh05.info',
3568                 '.zmh06.info',
3569                 '.zmh07.info',
3570                 '.zmh08.info',
3571                 '.zmh09.info',
3572                 '.zmh10.info',
3573         ),
3574         'Varsylenko Vladimir and family' => array(
3575                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3576                 // by David C. Lack (David.C.Lack at dodgeit.com)
3577                 // by Kuzma V Safonov (admin at irtes.ru)
3578                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3579                 // by LAURI FUNK (vvm_kz at rambler.ru)
3580
3581                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3582                 '.abrek.info',                          // by Petrov
3583                 '.allsexonline.info',           // by Varsylenko
3584                 '.d1rnow.info',                         // by Petrov
3585                 '.doxer.info',                          // Petrov
3586                 '.freeforworld.info',           // Varsylenko
3587                 '.goodworksite.info',           // Varsylenko
3588                 '.onall.info',                          // by Varsylenko
3589                 '.powersiteonline.info',        // by Varsylenko
3590                 '.rentmysite.info',                     // by Varsylenko
3591                 '.sexdrink.info',                       // by Petrov
3592                 '.siteszone.info',                      // by Varsylenko
3593                 '.sfup.info',                           // by Petrov
3594                 '.superfreedownload.info',      // by Varsylenko
3595                 '.superneeded.info',            // by Varsylenko
3596                 '.srup.info',                           // by Petrov
3597
3598                 // 66.235.185.143(*.svabuse.info)
3599                 '.accommodationwiltshire.com',  // by Petrov
3600                 '.levines.info',                        // by Petrov
3601                 '.sernost.info',                        // by Petrov
3602                 '.sexvideosite.info',           // by Petrov
3603                 '.vvsag.info',                          // by Petrov
3604
3605                 // 81.0.195.134
3606                 '.michost.info',                        // by LAURI
3607                 '.parther.info',                        // by LAURI
3608
3609                 // 88.214.202.100
3610                 '.gitsite.info',                        // by Petrov
3611                 '.organiq.info',                        // by Petrov
3612                 '.yoursitedh.info',                     // by Petrov
3613
3614                 // 217.11.233.58 by Petrov
3615                 '.mp3vault.info',
3616
3617                 // DNS time out or failed
3618                 '.bequeous.info',                       // by Davi
3619                 '.sopius.info',                         // by Kuzma
3620                 '.sovidopad.info',                      // by Kuzma
3621                 '.yerap.info',                          // by Kuzma
3622         ),
3623         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3624                 '.flywebs.com',
3625                 '.hostrim.com',
3626                 '.playbit.com',
3627         ),
3628         'webmaster at dgo3d.info' => array(     // by Son Dittman
3629                 '.bsb3b.info',
3630                 '.dgo3d.info',
3631                 '.dgo5d.info',
3632         ),
3633         'cooler.infomedia at gmail.com' => array(
3634                 '.diabetescarelink.com',
3635                 '.firstdebthelp.com',
3636         ),
3637         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3638                 '.pokah.lv',
3639                 '.astrons.com',
3640         ),
3641         'seocool at bk.ru' => array(    // by Skar
3642                 '.implex3.com',
3643                 '.implex6.info',
3644                 '.softprof.org',
3645         ),
3646         'Caslim.info' => array(
3647                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3648                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3649         ),
3650         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3651                 '.777-poker.biz',
3652                 '.porn-11.com',
3653         ),
3654         'Conto.pl' => array(
3655                 '.8x.pl',               // domena at az.pl
3656                 '.3x3.pl',              // by biuro at nazwa.pl
3657                 '.conto.pl',    // by biuro at nazwa.pl
3658                 '.guu.pl',              // by conto.pl (domena at az.pl)
3659                 '.xcx.pl',              // domena at az.pl
3660                 '.yo24.pl',             // domena at az.pl
3661         ),
3662         'mail at pcinc.cn' => array(
3663                 // Domains by Lin Zhi Qiang
3664                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3665
3666                 // 125.65.112.11
3667                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3668                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3669                 '.shoopivdoor.com',
3670
3671                 // 125.65.112.12
3672                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3673                 '.hosetaibei.com',
3674                 '.playsese.com',
3675
3676                 // 125.65.112.13
3677                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3678                 '.ahatena.com',
3679                 '.asdsdgh-jp.com',
3680                 '.conecojp.net',
3681                 '.game-oekakibbs.com',
3682                 '.geocitygame.com',
3683                 '.gsisdokf.net',
3684                 '.korunowish.com',
3685                 '.netgamelivedoor.com',
3686                 '.soultakerbbs.net',
3687                 '.yahoo-gamebbs.com',
3688                 '.ywdgigkb-jp.com',
3689
3690                 // 125.65.112.14
3691                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3692                 '.acyberhome.com',
3693                 '.bbs-qrcode.com',
3694                 '.gamesroro.com',
3695                 '.gameyoou.com',
3696                 '.gangnu.com',
3697                 '.goodclup.com',
3698                 '.lineage321.com',
3699                 '.linkcetou.com',
3700                 '.love888888.com',
3701                 '.ragnarok-bbs.com',
3702                 '.ragnarok-game.com',
3703                 '.rmt-navip.com',
3704                 '.watcheimpress.com',
3705
3706                 // 125.65.112.15
3707                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3708                 '.18girl-av.com',
3709                 '.aurasoul-visjp.com',
3710                 '.gamaniaech.com',
3711                 '.game-mmobbs.com',
3712                 '.gameslin.net',
3713                 '.gemnnammobbs.com',
3714                 '.gogolineage.net',
3715                 '.grandchasse.com',
3716                 '.jpragnarokonline.com',
3717                 '.jprmthome.com',
3718                 '.maplestorfy.com',
3719                 '.netgamero.net',
3720                 '.nothing-wiki.com',
3721                 '.ourafamily.com',
3722                 '.ragnarok-sara.com',
3723                 '.rmt-lineagecanopus.com',
3724                 '.rmt-ranloki.com',
3725                 '.rogamesline.com',
3726                 '.roprice.com',
3727                 '.tuankong.com',
3728                 '.twreatch.com',
3729
3730                 // 125.65.112.22
3731                 // The same IP: web013.cdnhost.cn
3732                 '.lzy88588.com',
3733                 '.ragnaroklink.com',
3734
3735                 // 125.65.112.24
3736                 '.rmtfane.com',
3737                 '.fc2weday.com',
3738                 '.nlftweb.com',
3739
3740                 // 125.65.112.27
3741                 '.i520i.com',
3742                 '.sunwayto.com',
3743
3744                 // 125.65.112.31
3745                 // The same IP: web016.cdnhost.cn
3746                 '.twyaooplay.com',
3747
3748                 // 125.65.112.32
3749                 // The same IP: web037.cdnhost.cn
3750                 '.emeriss.com',
3751                 '.raginfoy.com',
3752                 '.ragnarokgvg.com',
3753                 '.rentalbbs-livedoor.com',
3754                 '.romaker.com',
3755                 '.sagewikoo.com',
3756                 '.samples112xrea.com',
3757                 '.wiki-house.com',
3758
3759                 // 125.65.112.49
3760                 '.chaosx0.com',
3761
3762                 // 125.65.112.88
3763                 // The same IP: web015.cdnhost.cn
3764                 '.a-hatena.com',
3765                 '.biglobe-ne.com',
3766                 '.blogplaync.com',
3767                 '.din-or.com',
3768                 '.dtg-gamania.com',
3769                 '.fcty-net.com',
3770                 '.game-fc2blog.com',
3771                 '.gameurdr.com',
3772                 '.getamped-garm.com',
3773                 '.interzq.com',
3774                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3775                 '.luobuogood.com',
3776                 '.ragnarok-search.com',
3777                 '.rinku-livedoor.com',
3778
3779                 // 125.65.112.90
3780                 '.gtvxi.com',
3781
3782                 // 125.65.112.91
3783                 // The same IP: web004.cdnhost.cn
3784                 '.6828teacup.com',
3785                 '.blog-livedoor.net',
3786                 '.cityblog-fc2web.com',
3787                 '.deco030-cscblog.com',
3788                 '.imbbs2t4u.com',
3789                 '.k5dionne.com',
3790                 '.lineagejp-game.com',
3791                 '.mbspro6uic.com',
3792                 '.slower-qth.com',
3793                 '.wikiwiki-game.com',
3794
3795                 // 125.65.112.93
3796                 // The same IP: web022.cdnhost.cn
3797                 '.aaa-livedoor.net',
3798                 '.cityhokkai.com',              // web022.cdnhost.cn
3799                 '.fanavier.net',
3800                 '.geocitylinks.com',    // web022.cdnhost.cn
3801                 '.kuronowish.net',              // web022.cdnhost.cn
3802                 '.ro-bot.net',
3803
3804                 // 125.65.112.95
3805                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3806                 '.23styles.com',
3807                 '.aehatena-jp.com',
3808                 '.ameblog-jp.net',
3809                 '.antuclt.com',
3810                 '.blog-ekndesign.com',
3811                 '.d-jamesinfo.com',
3812                 '.editco-jp.com',
3813                 '.ezbbsy.com',
3814                 '.extd-web.com',
3815                 '.fotblong.com',
3816                 '.game62chjp.net',
3817                 '.gamegohi.com',
3818                 '.gamesmusic-realcgi.net',
3819                 '.gamesragnaroklink.net',
3820                 '.homepage-nifty.com',
3821                 '.ie6xp.com',
3822                 '.irisdti-jp.com',
3823                 '.jklomo-jp.com',
3824                 '.jpxpie6-7net.com',
3825                 '.lian-game.com',
3826                 '.lineage-bbs.com',
3827                 '.lineage1bbs.com',
3828                 '.livedoor-game.com',
3829                 '.litcan.com',
3830                 '.lovejpjp.com',
3831                 '.m-phage.com',
3832                 '.muantang.com',
3833                 '.plusd-itmedia.com',
3834                 '.runbal-fc2web.com',
3835                 '.saussrea.com',
3836                 '.tooalt.com',
3837                 '.toriningena.net',
3838                 '.yahoodoor-blog.com',
3839                 '.yy14-kakiko.com',
3840
3841                 // 125.65.112.137
3842                 '.clublineage.com',
3843
3844                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3845                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3846                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3847
3848                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3849                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3850
3851                 '.games-nifty.com',             // 255.255.255.255 now
3852                 '.homepage3-nifty.com', // 255.255.255.255 now
3853         ),
3854         'caddd at 126.com' => array(
3855                 '.chengzhibing.com',    // by chen gzhibing
3856                 '.jplinux.com',                 // by lian liang
3857                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3858                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3859                 '.tooplogui.com',               // by zibing cai
3860                 '.twsunkom.com',                // by guo zhi wei
3861                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3862         ),
3863         'nuigiym2 at 163.com' => array( // by fly bg
3864                 '.linainfo.net',                // Seems IP not allocated now
3865                 '.lineagalink.com',             // 220.247.157.99
3866                 '.lineagecojp.com',             // 61.139.126.10
3867                 '.ragnarokonlina.com',  // 220.247.158.99
3868         ),
3869         'aakin at yandex.ru' => array(
3870                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3871                 '.entirestar.com',
3872                 '.superbuycheap.com',
3873                 '.topdircet.com',
3874         ),
3875         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3876                 '.tianmieccp.com',
3877                 '.xianqiao.net',
3878         ),
3879         'm.frenzy at yahoo.com' => array(       // by Michael
3880                 '.p5v.org',
3881                 '.j111.net',
3882                 '.searchhunter.info',
3883                 '.soft2you.info',
3884                 '.top20health.info',
3885                 '.top20ringtones.info',
3886                 '.top20travels.info',
3887                 '.v09v.info',
3888                 '.x09x.info',
3889                 '.zb-1.com',
3890         ),
3891         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3892                 '.bingogoldenpalace.info',
3893                 '.ccarisoprodol.info',
3894                 '.ezxcv.info',
3895                 '.isuperdrug.com',
3896                 '.pharmacif.info',
3897                 '.pornsexteen.biz',
3898                 '.ugfds.info',
3899                 '.vviagra.info',
3900         ),
3901         'anatolsenator at gmail.com' => array(  // by Anatol
3902                 '.cheapestviagraonline.info',
3903                 '.buyphentermineworld.info'
3904         ),
3905         'webmaster at mederotica.com' => array(
3906                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3907                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3908                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3909                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3910         ),
3911         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3912                 '.auase.info',          // by ilemavyq7461 at techie.com
3913                 '.axeboxew.info',       // by zygeu220 at writeme.com
3914                 '.boluzuhy.info',       // by pikico5419 at post.com
3915                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3916                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3917                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3918                 '.exidiqe.info',        // by kufyca5475 at mail.com
3919                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3920                 '.gubiwu.info',         // by lywunef6532 at iname.com
3921                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3922                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3923                 '.jiuuz.info',          // by meqil6549 at mail.com
3924                 '.nudetar.info',        // by vohepafi3536 at techie.com
3925                 '.nipud.info',          // by bohox9872 at mindless.com
3926                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3927                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3928                 '.olasep.info',         // by lizon8506 at mail.com
3929                 '.oueuidop.info',       // by arytyb6913 at europe.com
3930                 '.oviravy.info',        // by amyuu3883 at london.com
3931                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3932                 '.ragibe.info',         // by ehome4458 at myself.com
3933                 '.ucazib.info',         // by gorare7222 at consultant.com
3934                 '.udaxu.info',          // by gubima4007 at usa.com
3935                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3936                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3937                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3938                 '.yvaxat.info',         // by koqun9660 at mindless.com
3939                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3940         ),
3941         'Carmodelrank.com etc' => array(
3942                 // by Brianna Dunlord (briasmi at yahoo.com)
3943                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3944                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3945                 '.carmodelrank.com',// by Brianna
3946                 '.cutestories.net',     // by Brianna
3947                 '.sturducs.com',
3948                 '.bestother.info',      // by Tim
3949                 '.premiumcasinogames.com',      // by Brianna)
3950                 '.yaahooo.info',        // by Alice
3951         ),
3952         'aliacsandr at yahoo.com' => array(
3953                 '.cubub.info',                          // "Free Web Hosting"
3954         ),
3955         'aliacsandr85 at yahoo.com' => array(
3956                 // by Dr. Portillo or Eva Sabina Lopez Castell
3957                 '.xoomer.alice.it',                     // "Free Web Hosting"
3958                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3959                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3960                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3961                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3962                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3963                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3964                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3965                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3966                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3967                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3968                 '.viagra-price.org',            // by Eva
3969                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3970                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3971         ),
3972         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3973         'Something-Gamble' => array(
3974                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3975                 '.atonlineroulette.com',                        // by Blaise Johns
3976                 '.atroulette.com',                                      // by Gino Sand
3977                 '.betting-123.com',                                     // by Joana Caceres
3978                 '.betting-i.biz',                                       // by Joaquina Angus
3979                 '.casino-challenge.com',                        // by Maren Camara
3980                 '.casino-gambling-i.biz',                       // by Giselle Nations
3981                 '.casino-italian.com',                          // by Holley Yan
3982                 '.casino123.net',                                       // by Ta Baines
3983                 '.casinohammamet.com',                          // by Inger Barhorst
3984                 '.casinoqz.com',                                        // by Berenice Snow
3985                 '.casinos-777.net',                                     // by Iona Ayotte
3986                 '.crapsok.com',                                         // by Devon Adair,
3987                 '.dcasinoa.com',                                        // by August Hawkinson
3988                 '.e-poker-4u.com',                                      // by Issac Leibowitz
3989                 '.free-dvd-player.biz',                         // by Rosario Kidd
3990                 '.florida-lottery-01.com',                      // by Romeo Dillon
3991                 '.gaming-123.com',                                      // by Jennifer Byrne
3992                 '.kenogo.com',                                          // by Adriane Bell
3993                 '.mycaribbeanpoker.com',                        // by Andy Mullis
3994                 '.onbaccarat.com',                                      // by Kassandra Dunn
3995                 '.online-experts.biz',                          // by Liberty Helmick
3996                 '.onlinepoker-123.com',                         // by Andrea Feaster
3997                 '.playpokeronline-123.com',                     // by Don Lenard
3998                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
3999                 '.texasholdem123.com',                          // by Savion Lasseter
4000                 '.texasholdem-777.com',                         // by Savanna Lederman
4001                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4002                 '.the-craps-100.us',                            // by Lorrine Ripley
4003                 '.the-free-online-game-913.us',         // by Kanesha Clem
4004                 '.the-free-poker-1798.us',                      // by Elaina Witte
4005                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4006                 '.the-online-game-poker-1185.us',       // by Merna Bey
4007                 '.the-playing-black-jack.com',          // by Kristine Brinker
4008                 '.the-poker-1082.us',                           // by Kristofer Boldt
4009                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4010                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4011                 '.the-video-black-jack.com',            // by Jagger Godin
4012         ),
4013         'Something-Insurance' => array(
4014                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4015
4016                 // 0-9
4017                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4018                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4019                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4020                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4021                 '.18wkcf.com',                                  // by Lexy Bohannon
4022                 '.2001werm.org',                                // by Raphael Rayburn
4023                 '.2004heeparea1.org',                   // by Dinorah Andrews
4024                 '.21nt.net',                                    // by Jaida Estabrook
4025                 '.3finfo.com',                                  // by Damian Pearsall
4026                 '.3somes.org',                                  // by Mauro Tillett
4027                 '.453531.com',                                  // by Kurt Flannery
4028                 '.4freesay.com',                                // by Eloy Jones
4029                 '.5ssurvey.com',                                // by Annamarie Kowalski
4030                 '.8-f22.com',                                   // by Larraine Evers
4031                 '.9q.org',                                              // by Ami Boynton
4032
4033                 // A
4034                 '.a40infobahn.com',                             // by Amit Nguyen
4035                 '.a4h-squad.com',                               // by Ross Locklear
4036                 '.aac2000.org',                                 // by Randi Turner
4037                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4038                 '.acahost.com',                                 // by Milton Haberman
4039                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4040                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4041                 '.activel-learning-site.com',   // by Mateo Conn
4042                 '.ad-makers.com',                               // by Shemeka Arsenault
4043                 '.ada-information.org',                 // by Josef Osullivan
4044                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4045                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4046                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4047                 '.aerovac-hotpress.com',                // by Trey Marlow
4048                 '.agfbiosensors.com',                   // by Lionel Dempsey
4049                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4050                 '.affordablerealestate.net',    // by Season Otoole
4051                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4052                 '.ahouserefinance.com',                 // by Young Alley
4053                 '.akirasworld.com',                             // by Piper Sullivan
4054                 '.alderik-production.com',              // by Joan Stiles
4055                 '.alltechdata.com',                             // by Dom Laporte
4056                 '.amconllc.com',                                // by Syble Benjamin
4057                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4058                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4059                 '.angelandcrown.net',                   // by Claretta Najera
4060                 '.ankoralina.com',                              // by Eladia Demers
4061                 '.antiquegoldmine.com',                 // by Keena Marlow
4062                 '.aquinosotros.com',                    // by Nanci Prentice
4063                 '.architectionale.com',                 // by Wilbur Cornett
4064                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4065                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4066                 '.arefinancehome.com',                  // by Duane Doran
4067                 '.arefinancinghome.com',                // by Ike Laney
4068                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4069                 '.auction-emall-site.info',             // by Dayle Denman
4070                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4071                 '.auto-buy-rite.com',                   // by Asuncion Buie
4072                 '.axxinet.net',                                 // by Roberta Gasper
4073                 '.azimutservizi.com',                   // by Ethelene Brook
4074                 '.azstudies.org',                               // by Bernardina Walden
4075
4076                 // B
4077                 '.babtrek.com',                                 // by Simonette Mcbrayer
4078                 '.babycujo.com',                                // by Francisco Akers
4079                 '.bakeddelights.com',                   // by Dave Evenson
4080                 '.bbcart.com',                                  // by Lucio Hamlin
4081                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4082                 '.best-digital-phone.us',               // by Meghann Crockett
4083                 '.bjamusements.com',                    // by Lurlene Butz
4084                 '.blursgsu.com',                                // by Weston Killian
4085                 '.bookwide.net',                                // by Tequila Zacharias
4086                 '.boreholes.org',                               // by Flora Reed
4087                 '.breathingassociaiton.org',    // by Alfred Crayton
4088                 '.birdingnh.com',                               // by Donald Healy
4089                 '.bisdragons.org',                              // by Lupe Cassity
4090                 '.blcschools.net',                              // by Alycia Jolly
4091                 '.bronte-foods.com',                    // by Kary Pfeiffer
4092                 '.buckscountyneighbors.org',    // by Maile Gaffney
4093                 '.buffalofudge.com',                    // by Mable Whisenhunt
4094                 '.burlisonforcongress.com',             // by Luann King
4095                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4096                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4097
4098                 // C
4099                 '.cabanes-web.com',                             // by Vaughn Latham
4100                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4101                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4102                 '.checaloya.com',                               // by Susana Coburn
4103                 '.calvarychapelrgvt.org',               // by Karan Kittle
4104                 '.cameras-esite.info',                  // by Karlee Frisch
4105                 '.cancerkidsforum.org',                 // by Samson Constantino
4106                 '.ccchoices.org',                               // by Kenia Cranford
4107                 '.ccupca.org',                                  // by Evonne Serrano
4108                 '.celebratemehome.com',                 // by Soraya Tower
4109                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4110                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4111                 '.choose-shoes.net',                    // by Geoffrey Setser
4112                 '.churla.com',                                  // by Ollie Wolford
4113                 '.circuithorns.co.uk',                  // by Nathanial Halle
4114                 '.clanbov.com',                                 // by Donell Hozier
4115                 '.cnm-ok.org',                                  // by Thalia Moye
4116                 '.coalitioncoalition.org',              // by Ned Macklin
4117                 '.consoleaddicts.com',                  // by Dorla Hoy
4118                 '.counterclockwise.net',                // by Melynda Hartzell
4119                 '.codypub.com',                                 // by Mercedes Coffman
4120                 '.comedystore.net',                             // by Floy Donald
4121                 '.covsys.co.uk',                                // by Abby Jacey
4122                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4123                 '.craftybidders.com',                   // by Dannie Lazo
4124                 '.credit-card-finder.net',              // by Mellie Deherrera
4125                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4126                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4127                 '.ctwine.org',                                  // by Hailey Knox
4128
4129                 // D
4130                 '.dazyation.com',                               // by Louis Strasser
4131                 '.deepfoam.org',                                // by Ethelyn Southard
4132                 '.debt-fixing.com',                             // by Dagny Rickman
4133                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4134                 '.domainadoption.com',                  // by Breann Pappas
4135                 '.diannbomkamp.com',                    // by Russel Croteau
4136                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4137                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4138                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4139                 '.digital-cameras-esite.info',  // by Milan Jolin
4140                 '.dnstechnet.net',                              // by Tamera Oman
4141                 '.drivenbydata.org',                    // by Katherine Noyes
4142                 '.dtmf.net',                                    // by Micki Slayton
4143                 '.domainsfound.com',                    // by Blossom Lively
4144
4145                 // E
4146                 '.ecstacyabuse.net',                    // by Alana Knight
4147                 '.e-digital-camera-esite.info', // by Romaine Cress
4148                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4149                 '.eldorabusecenter.org',                // by Annabella Oneal
4150                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4151                 '.encaponline.com',                             // by Patrick Keel
4152                 '.ez-shopping-online.com',              // by Gail Bartlett
4153
4154                 // F
4155                 '.faithfulwordcf.com',                  // by Bart Weeks
4156                 '.fammedassoc.com',                             // by Joshua Nelson
4157                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4158                 '.f00k.org',                                    // by Leslie Chapman
4159                 '.foreignrealtions.org',                // by Krystal Hawley
4160                 '.fortwebsite.org',                             // by Kristina Motley
4161                 '.fotofirstdigital.com',                // by Tad Whitfield
4162                 '.foundationcommons.org',               // by Caryn Eskew
4163                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4164                 '.freaky-cheats.com',                   // by Al Klein
4165                 '.free--spyware.com',                   // by Nikki Contreras
4166                 '.french-home-finance-consultant.info', // by Santana Melton
4167                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4168
4169                 // G
4170                 '.gaintrafficfast.com',                 // by Lila Meekins
4171                 '.gaygain.org',                                 // by Shell Davila
4172                 '.gcaaa.com',                                   // by Vallie Jaworski
4173                 '.generalsysteme.com',                  // by Cale Vogel
4174                 '.generation4games.co.uk',              // by Sonya Graham
4175                 '.german-dictionary.us',                // by Rex Daniel
4176                 '.gilmerrec.com',                               // by Leighann Guillory
4177                 '.glenthuntly-athletics.com',   // by Julee Hair
4178                 '.glorybaskets.com',                    // by Lynette Lavelle
4179                 '.goconstructionloan.com',              // by Willis Monahan
4180                 '.gohireit.com',                                // by Bertha Metzger
4181                 '.godcenteredpeople.com',               // by Jaycee Coble
4182
4183                 // H
4184                 '.healthinsuranceem.com',               // by Justin Munson
4185                 '.hearthorizon.info',                   // by Kory Session
4186                 '.hegerindustrial.com',                 // by Toni Wesley
4187                 '.herzequip.com',                               // by Princess Dunkle
4188                 '.hglcms.org',                                  // by Gladwin Ng
4189                 '.hipanoempresa.com',                   // by Shannon Staub
4190                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4191                 '.horse-racing-result.com',             // by Rodney Reynolds
4192                 '.hueckerfamily.com',                   // by Hershel Sell
4193
4194                 // I
4195                 '.ilove2win.com',                               // by Lamont Dickerson
4196                 '.ilruralassistgrp.org',                // by Moises Hauser
4197                 '.imageonsolutions.com',                // by Porsche Dubois
4198                 '.infoanddatacenter.com',               // by Eva Okelley
4199                 '.islamfakta.org',                              // by Goldie Boykin
4200                 '.ithomemortgage.com',                  // by Adelaide Towers
4201                 '.iyoerg.com',                                  // by Madyson Gagliano
4202
4203                 // J
4204                 '.jeffaxelsen.com',                             // by Daphne William
4205                 '.jeffreyf.net',                                // by Vito Platt
4206                 '.johnmartinsreality.com',              // by Pamela Larry
4207                 '.johnsilvers.net',                             // by Silver Battaglia
4208
4209                 // K
4210                 '.kcgerbil.org',                                // by Marisa Thayer
4211                 '.kdc-phoenix.com',                             // by Salma Shoulders
4212                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4213                 '.kosove.org',                                  // by Darwin Schneider
4214
4215                 // L
4216                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4217                 '.letsgokayaking.net',                  // by Winnie Adair
4218                 '.libertycabs.com',                             // by Adela Bonds
4219                 '.liquor-store-cellar.info',    // by Hugh Pearson
4220                 '.locomojo.net',                                // by Marco Harmon
4221                 '.lodatissimo.com',                             // by Adrian Greeson
4222                 '.lsawc.org',                                   // by Lara Han
4223                 '.lycos-test.net',                              // by Rigoberto Oakley
4224
4225                 // M
4226                 '.macro-society.com',                   // by Venessa Hodgson
4227                 '.marthasflavorfest.com',               // by Ahmad Lau
4228                 '.martin-rank.com',                             // by Cathleen Crist
4229                 '.maryandfrank.org',                    // by Theodore Apodaca
4230                 '.masterkwonhapkido.com',               // by Misty Graham
4231                 '.maxrpm-demo.com',                             // by Cristal Cho
4232                 '.mechanomorphic.com',                  // by Stanford Crow
4233                 '.mepublishing.net',                    // by Karly Fleenor
4234                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4235                 '.metwahairports.com',                  // by Nan Kitchen
4236                 '.middle-eastnews.com',                 // by Tybalt Altmann
4237                 '.mikepelchy.com',                              // by Sherly Pearson
4238                 '.milpa.org',                                   // by Nelly Aguilera
4239                 '.modayun.com',                                 // by Camilla Velasco
4240                 '.moonstoneerp.com',                    // by Garret Salmon
4241                 '.morosozinho.com',                             // by Lenore Tovar
4242                 '.morphadox.com',                               // by Hung Zielinski
4243                 '.moscasenlared.com',                   // by Tera Gant
4244                 '.sdjavasig.com',                               // by Gia Swisher
4245                 '.mpeg-radio.com',                              // by Sincere Beebe
4246                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4247                 '.mtseniorcenter.org',                  // by Frederic Ortega
4248                 '.mysteryclips.com',                    // by Edward Ashford
4249
4250                 // N
4251                 '.naavs.org',                                   // by Yuridia Gandy
4252                 '.naval-aviation.org',                  // by Roselle Campo
4253                 '.navigare-ischia.com',                 // by Arielle Coons
4254                 '.ncredc.org',                                  // by Brenda Nye
4255                 '.neonmotorsports.com',                 // by Giovanna Vue
4256                 '.nf-ny.com',                                   // by Yadira Hibbard
4257                 '.ngfdyqva.com',                                // by Emiliano Samples
4258                 '.nicozone.com',                                // by Blaine Shell
4259                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4260                 '.npawny.org',                                  // by Willard Murphy
4261                 '.nysdoed.org',                                 // by Elric Delgadillo
4262                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4263                 '.nytech-ir.com',                               // by Adrien Beals
4264
4265                 // O
4266                 '.oadmidwest.com',                              // by Gavin Kaplan
4267                 '.oarauto.com',                                 // by Susann Merriman
4268                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4269                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4270                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4271                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4272                 '.online-pills-24x7.biz',               // by Aide Hallock
4273                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4274                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4275                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4276                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4277                 '.otterbayweb.com',                             // by Maxwell Irizarry
4278
4279                 // P
4280                 '.painting-technique.us',               // by Bryanna Tooley
4281                 '.pakamrcongress.com',                  // by Bryce Summerville
4282                 '.patabney.com',                                // by Kailyn Slone
4283                 '.parde.org',                                   // by Ellie Yates
4284                 '.participatingprofiles.com',   // by Jaelynn Meacham
4285                 '.partnershipconference.org',   // by Alla Floyd
4286                 '.pet-stars.com',                               // by Carmon Luevano
4287                 '.planning-law.org',                    // by Trista Holcombe
4288                 '.ppawa.com',                                   // by Evonne Scarlett
4289                 '.precisionfilters.net',                // by Faustina Fell
4290
4291                 // Q
4292                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4293                 '.quick-debt-consolidation.net',        // by Lala Marte
4294                 '.quicktvr.com',                                // by Vernell Crenshaw
4295
4296                 // R
4297                 '.radicalsolutions.org',                // by Reece Medlin
4298                 '.randallburgos.com',                   // by Bradly Villa
4299                 '.rcassel.com',                                 // by Janiah Gallant
4300                 '.rearchitect.org',                             // by Marcus Gaudet
4301                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4302                 '.reprisenashville.com',                // by Hester Khan
4303                 '.reptilemedia.com',                    // by Alicia Patel
4304                 '.resellers2000.com',                   // by Dedra Kennedy
4305                 '.reverse-billing.com',                 // by Lazaro Gluck
4306                 '.richcapaldi.com',                             // by Kya Haggard
4307                 '.richformissouri.com',                 // by Alanna Elston
4308                 '.robstraley.com',                              // by Leida Bartell
4309                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4310                 '.rpgbbs.com',                                  // by Leonel Peart
4311                 '.ruralbusinessonline.org',             // by Lynsey Watters
4312                 '.ruwomenscenter.org',                  // by Vince Mclemore
4313                 '.ryanjowens.com',                              // by Janine Smythe
4314
4315                 // S
4316                 '.sagarmathatv.org',                    // by Liam Funke
4317                 '.sakyathubtenling.org',                // by Liane Falgout
4318                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4319                 '.sandishaven.com',                             // by Lino Soloman
4320                 '.scienkeen.com',                               // by Liza Navarra
4321                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4322                 '.severios.com',                                // by Isa Steffen
4323                 '.sexual-hot-girls.com',                // by Viviana Bolton
4324                 '.shakespearelrc.com',                  // by Luciana Weaver
4325                 '.shashran.org',                                // by Adriel Humphries
4326                 '.shoes-shop.us',                               // by Austen Higginbotham
4327                 '.skagitvalleybassanglers.com', // by Necole Thiele
4328                 '.skinsciencesalon.com',                // by Nena Rook
4329                 '.smartalternative.net',                // by Nicki Lariviere
4330                 '.sml338.org',                                  // by Nickole Krol
4331                 '.smogfee.com',                                 // by Sienna Kimble
4332                 '.sneakers-e-shop.info',                // by Nikki Fye
4333                 '.spacewavemedia.com',                  // by Thanh Gast
4334                 '.softkernel.com',                              // by Nicol Hummer
4335                 '.stjoanmerrillville.com',              // by Hunter Beckham
4336                 '.strelinger.com',                              // by Arron Highsmith
4337                 '.striking-viking.com',                 // by Kylie Endsley
4338                 '.sunnydeception.org',                  // by Amaya Llora
4339                 '.sunzmicro.com',                               // by Goddard Arreola
4340                 '.sv-iabc.org',                                 // by Braden Buck
4341                 '.sykotick.com',                                // by Pierce Knecht
4342
4343                 // T
4344                 '.tbody.net',                                   // by Ormond Roman
4345                 '.the-pizzaman.com',                    // by Mario Ramsey
4346                 '.the-shoes.us',                                // by Alejandro Gaffney
4347                 '.theborneocompany.com',                // by Bryanna Tooley
4348                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4349                 '.thehomeschool.net',                   // by September Concepcio
4350                 '.thenewlywed.com',                             // by Allegra Marra
4351                 '.tigerspice.com',                              // by Denis Mosser
4352                 '.tnaa.net',                                    // by Jasmine Andress
4353                 '.top-finance-sites.com',               // by Maryann Doud
4354                 '.tradereport.org',                             // by Bettie Sisk
4355                 '.transmodeling.com',                   // by Martine Button
4356                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4357                 '.tsaoc.com',                                   // by Heriberto Mcfall
4358                 '.tsunamidinner.com',                   // by Nannie Richey
4359
4360                 // U
4361                 '.uhsaaa.com',                                  // by Risa Herbert
4362                 '.ultradeepfield.org',                  // by Bobby Ragland
4363                 '.umkclaw.info',                                // by Cammy Kern
4364                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4365                 '.usa-wolf.com',                                // by Jacklyn Morrill
4366                 '.usjobfair.com',                               // by Lorina Burchette
4367
4368                 // V
4369                 '.vacancesalouer.com',                  // by Loris Bergquist
4370                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4371                 '.valleylibertarians.org',              // by Lena Massengale
4372                 '.vanderbiltevents.com',                // by Gannon Krueger
4373                 '.vanwallree.com',                              // by Michelina Donahue
4374                 '.vcertificates.com',                   // by Hyun Lamp
4375                 '.vonormytexas.us',                             // by Suzette Waymire
4376
4377                 // W
4378                 '.washingtondc-areahomes.net',  // by Ailene Broome
4379                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4380                 '.wolsaoh.org',                                 // by Daniela English
4381                 '.worldpropertycatalog.com',    // by Aray Baxter
4382
4383                 // Y
4384                 '.yankee-merchants.com',                // by Jackson Hinojosa
4385                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4386                 '.yourdomainsource.com',                // by Deems Weingarten
4387
4388                 // Z
4389                 '.zkashan.com',                                 // by Evan Light
4390                 '.zockclock.com',                               // by Dorothea Guthrie
4391         ),
4392         'Something-Drugs' => array(
4393                 // Drugs / Pills / Diet
4394                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4395                 '.abdelghani-shady.com',                // by Elly Alton
4396                 '.bangbangfilm.com',                    // by Davin Chou
4397                 '.centroantequera.com',                 // by Keon Kwiatkowski
4398                 '.champagne-cellar.info',               // by Kandis Rizzo
4399                 '.chix0r.org',                                  // by Christoper Baird
4400                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4401                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4402                 '.fast-cash-01.com',                    // by Edgar Oliver
4403                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4404                 '.fn-nato.com',                                 // by Donny Dunlap
4405                 '.gqyinran.com',                                // by Alejandro Parks
4406                 '.juris-net.com',                               // by Rachelle Bravo
4407                 '.leftpencey.com',                              // by Aileen Ashby
4408                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4409                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4410                 '.palaceroyale.net',                    // by Brycen Stebbins
4411                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4412                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4413                 '.yukissushi.com',                              // by Donell Hozier
4414         ),
4415         'Something-Others' => array(
4416                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4417                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4418         ),
4419         'Something-NoApp' => array(
4420                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4421                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4422                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4423                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4424                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4425         ),
4426         'Cortez and family' => array(
4427                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4428                 '.dronadaarsujf.info',  // by Cortez
4429                 '.fromnananaref.info',  // by Cortez
4430                 '.goorkkjsaka.info',    // by Cortez
4431                 '.jkdfjjkkdfe.info',    // by Rico
4432                 '.jkllloldkjsa.info',   // by Cortez
4433                 '.nnjdksfornms.info',   // by Rico
4434                 '.mcmdkkksaoka.info',   // by Cortez
4435                 '.srattaragfon.info',   // by Cortez
4436                 '.yreifnnonoom.info',   // by Rico
4437                 '.zjajjsvgeuds.info',   // by Cortez
4438         ),
4439         'admin at ematuranza.com' => array(
4440                 '.ancorlontano.com',
4441                 '.dentroallago.com',
4442                 '.digiovinezza.com',
4443                 '.ematuranza.com',
4444                 '.ilfango.com',
4445                 '.nullarimane.com',
4446                 '.questaimmensa.com',
4447                 '.tentailvolo.com',
4448                 '.unatenerezza.com',
4449                 '.volgondilettose.com',
4450         ),
4451         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4452                 '.bid99df.info',
4453                 '.bj498uf.info',
4454                 '.edeuj84.info',
4455                 '.f4mfid.info',
4456                 '.g4vf03a.info',
4457                 '.j09j4r.info',
4458                 '.jv4r8hv.info',
4459                 '.k43sd3.info',
4460                 '.k4r84d.info',
4461                 '.k4rvda.info',
4462                 '.k4v0df.info',
4463                 '.k903os.info',
4464                 '.k9df93d.info',
4465                 '.kv94fd.info',
4466                 '.ksjs93.info',
4467                 '.l0ks03.info',
4468                 '.l9u3jc.info',
4469                 '.lv043a.info',
4470                 '.nh94h9.info',
4471                 '.m94r9d.info',
4472                 '.s87fvd.info',
4473                 '.v3k0d.info',
4474                 '.v4r8j4.info',
4475                 '.vf044s.info',
4476                 '.vj49rs.info',
4477                 '.vk498j.info',
4478                 '.u03jow.info',
4479         ),
4480         'Nikhil and Brian' => array(
4481                 // by Brian Dieckman (info at iudndjsdhgas.info)
4482                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4483                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4484                 '.ihfjeswouigf.info',   // by Brian, / was not found
4485                 '.iudndjsdhgas.info',   // by Brian, / was not found
4486                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4487                 '.jiatdbdisut.info',    // by Brian, / was not found
4488                 '.jkfierwoundhw.info',  // by Brian, / was not found
4489                 '.kfjeoutweh.info',             // by Brian, / was not found
4490                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4491                 '.oudjskdwibfm.info',   // by Brian, / was not found
4492                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4493                 '.itxbsjacun.info',             // by Nikhil, / was not found
4494                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4495                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4496                 '.najedncdcounrd.info', // by Nikhil, / was not found
4497                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4498                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4499                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4500                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4501                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4502                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4503                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4504                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4505                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4506         ),
4507         'wealth777 at gmail.com' => array(      // by Henry Ford
4508                 '.brutal-forced.com',
4509                 '.library-bdsm.com',
4510                 '.rape-fantasy.us',
4511         ),
4512         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4513                 '.purerotica.com',
4514                 '.richsex.com',
4515                 '.servik.net',
4516                 '.withsex.com',
4517         ),
4518         'dreamteammoney.com' => array(
4519                 '.dreamteammoney.com',  // dtmurl.com related
4520                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4521         ),
4522         'KLIK VIP Search and family' => array(
4523                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4524                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4525                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4526                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4527                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4528                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4529                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4530         ),
4531         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4532                 '.antivirs.info',
4533                 '.antivirus1.info',
4534                 '.antivirus2.info',
4535         ),
4536         'wasam at vangers.net and family' => array(
4537
4538                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4539                 '.bahatoca.org',
4540                 '.digestlycos.org',
4541                 '.educativaanale.info',
4542                 '.guildstuscan.org',
4543                 '.isaakrobbins.info',
4544                 '.isfelons.org',
4545                 '.lvwelevated.org',
4546                 '.macphersonaca.org',
4547                 '.markyaustrian.org',
4548                 '.michelepug.org',
4549                 '.opalbusy.info',
4550                 '.quijotebachata.info',
4551                 '.salthjc.info',
4552                 '.shogunnerd.info',
4553                 '.solarissean.org',
4554                 '.sparkgsx.info',
4555                 '.tarzanyearly.org',
4556                 '.tulabnsf.org',
4557                 '.vaccarinos.org',
4558
4559                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4560                 '.e2007.info',
4561                 '.cmoss.info',
4562
4563                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4564                 '.finddesk.org',
4565                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4566                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4567                 '.rcatalog.org',
4568                 '.sbitzone.org',
4569
4570                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4571                 '.cheapns.org',
4572                 '.my-top.net',
4573                 '.sfind.net',
4574                 '.sspot.net',
4575                 '.suvfind.info',
4576
4577                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4578                 '.trumber.com',
4579
4580                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4581                 '.blogduet.org',
4582                 '.carelf.info',
4583                 '.cmagic.org',
4584                 '.cspell.org',
4585                 '.dspark.org',
4586                 '.dtonic.org',
4587                 '.mcharm.info',
4588                 '.mslook.info',
4589                 '.phpdinnerware.info',
4590                 '.rnation.org',
4591                 '.uzing.org',
4592
4593                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4594                 '.allbar.info',
4595                 '.allersearch.org',
4596                 '.allzoom.org',
4597                 '.dynall.org',
4598                 '.fastopia.org',
4599                 '.offasfast.info',
4600                 '.rblast.org',
4601                 '.rchistes.info',
4602                 '.rette.org',
4603                 '.shufflequince.org',
4604                 '.suvlook.org',
4605
4606                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4607                 '.290cabeza.org',
4608                 '.bossierpainted.org',
4609                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4610                 '.definekonica.info',   // Admin: tvaals at vangers.net
4611                 '.gradetelemundo.info',
4612                 '.hydraulickin.info',
4613                 '.indicadorestmj.info',
4614                 '.keeleykincaid.org',
4615                 '.kleenbowser.info',
4616                 '.pipnickname.info',
4617                 '.pacolily.org',
4618                 '.redeemtrabalho.info',
4619                 '.scanmakerchua.info',
4620                 '.titanmessina.info',
4621                 '.tragratuit.org',
4622                 '.yeareola.info',
4623         ),
4624         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4625                 '.canadianmedsworld.info',      // 84.252.133.112
4626                 '.tabsdrugstore.info',          // 84.252.133.114
4627                 '.tabsstore.info',                      // 84.252.133.114
4628                 '.topcholesterol.info',         // 84.252.133.132
4629         ),
4630         'be.cx' => array(
4631                 '.be.cx',
4632                 '.ca.cx',
4633         ),
4634         'john780321 at yahoo.com' => array(     // by John  Brown
4635                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4636                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4637                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4638         ),
4639         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4640                 '.bertela.info',
4641                 '.forblis.info',
4642                 '.frenallo.info',
4643                 '.goyahoo.info',
4644                 '.herbak.info',
4645                 '.kiokast.info',
4646                 '.nerenok.info',
4647                 '.pestgets.info',
4648                 '.snukker.info',
4649                 '.thegetspons.info',
4650         ),
4651         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4652                 '.bobop.info',
4653                 '.kwwwe.info',
4654                 '.piikz.info',
4655                 '.moosm.info',
4656                 '.vvvw.info',
4657         ),
4658         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4659                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4660                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4661                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4662                 '.jplingood.com',       // 125.65.112.15
4663                 '.linenew.com',         // 203.191.148.96
4664                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4665                 '.yzlin.com',           // 220.162.244.36
4666         ),
4667         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4668                 '.1111mb.com',
4669                 '.2sex18.com',
4670                 '.69porn1.com',
4671         ),
4672         'ECTechnology' => array(
4673                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4674                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4675                 '.automouse.jp',
4676         ),
4677         'lyqz at 21cn.com' => array(
4678                 '.japangame1.com',
4679                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4680                 '.livedoor1.com',
4681                 '.ragnarokonline1.com',
4682                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4683         ),
4684         'kingrou at hotmail.com' => array(      // by yangjianhe
4685                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4686                 '.453787.com',
4687         ),
4688         'anpaul541000 at 163.com' => array(     // by su qiuqing
4689                 '.cetname.com',                 // 222.77.185.87
4690                 '.jpgamer.net',                 // 220.247.157.106
4691                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4692                 '.lovejptt.com',                // 222.77.185.87
4693                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4694                 '.playncsoft.net',              // 220.247.157.106
4695         ),
4696         'abc00613 at 163.com' => array( // by guo yong
4697                 '.avtw1068.com',                // 64.74.223.11
4698                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4699                 '.djkkk66990.com',              // 68.178.232.99
4700                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4701         ),
4702         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4703                 '.cmonfofo.com',
4704                 '.discutbb.com',
4705         ),
4706         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4707                 '.preca.info',
4708                 '.skiaggi.info',
4709                 '.scrianal.info',
4710                 '.tageom.info',
4711         ),
4712         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4713                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4714                 '.inpros.net',                  // 202.181.98.79
4715                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4716         ),
4717         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4718                 '.ec51.com',
4719                 '.ec51.net',
4720         ),
4721         'abbevillelaties at yahoo.fr etc' => array(
4722                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4723                 '.ringtones-rate.com',
4724                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4725                 '.special-ringtones.net',
4726         ),
4727         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4728                 '.1sgsc.info',
4729                 '.3h4r89h.info',
4730                 '.3v44dd.info',
4731                 '.6rfuh6.info',
4732                 '.84hd8.info',
4733                 '.94bui89.info',
4734                 '.agysb3.info',
4735                 '.asdjhs.info',
4736                 '.bcvnrth.info',
4737                 '.bheb4r.info',
4738                 '.bhiuno.info',
4739                 '.biug7g.info',
4740                 '.bjb5f4.info',
4741                 '.bob8g7g.info',
4742                 '.br89bdd.info',
4743                 '.bsa3h.info',
4744                 '.bsieb8.info',
4745                 '.basbiubf.info',
4746                 '.bobwwfs2.info',
4747                 '.ciuv9t.info',
4748                 '.dbmdx4.info',
4749                 '.dbrjms.info',
4750                 '.dbtcm.info',
4751                 '.dff9ghu.info',
4752                 '.dfshbb.info',
4753                 '.dgd4ffdh.info',
4754                 '.dh3ge.info',
4755                 '.duc86jh.info',
4756                 '.ergth45.info',
4757                 '.f78bf7ffb.info',
4758                 '.gbdfbo4.info',
4759                 '.ger45.info',
4760                 '.gnvnrrg.info',
4761                 '.h47he7.info',
4762                 '.h488hbd4.info',
4763                 '.hd72b94.info',
4764                 '.he74b7.info',
4765                 '.hfujfnr.info',
4766                 '.husdhd42.info',
4767                 '.hbwje.info',
4768                 '.itg87gji.info',
4769                 '.iugiougiuh.info',
4770                 '.jhd4f4aa.info',
4771                 '.jshd73.info',
4772                 '.krhpgd.info',
4773                 '.lyihjn.info',
4774                 '.nfyjnfj.info',
4775                 '.oihbv.info',
4776                 '.os44fvs.info',
4777                 '.sdfsd3.info',
4778                 '.sdiug4.info',
4779                 '.sdkufhh.info',
4780                 '.sdugb4f.info',
4781                 '.skdbf.info',
4782                 '.sipiv78.info',
4783                 '.sudbfb.info',
4784                 '.tymbbmy.info',
4785                 '.uilhjk.info',
4786                 '.vi87vub.info',
4787                 '.vfuyf87f.info',
4788                 '.viyvvj877.info',
4789                 '.w7fc8eu.info',
4790                 '.wefg43g.info',
4791                 '.xbrch78e.info',
4792                 '.ywsfu.info',
4793                 '.zxcbiv.info',
4794         ),
4795         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4796                 '.abofios.info',
4797                 '.amlekfn.info',
4798                 '.amlkdoie.info',
4799                 '.amkslewq.info',
4800                 '.alemfu.info',
4801                 '.aloweks1.info',
4802                 '.alposd3.info',
4803                 '.bamhpb.info',
4804                 '.bhjkb.info',
4805                 '.bjqnj.info',
4806                 '.cvcxcbhpr.info',
4807                 '.czoypaiat.info',
4808                 '.dbpmgc.info',
4809                 '.dgvogrxs.info',
4810                 '.dldksf.info',
4811                 '.dlor6za.com',
4812                 '.dmkoiew.info',
4813                 '.eewrefr.info',
4814                 '.eladne.info',
4815                 '.elksem.info',
4816                 '.elwpod.info',
4817                 '.emlwkdnr.info',
4818                 '.esgmyqk.info',
4819                 '.fauqv.info',
4820                 '.fgxkgy.info',
4821                 '.fhryns.info',
4822                 '.fj38n4g.info',
4823                 '.fjnesal.info',
4824                 '.fmkfoe.info',
4825                 '.fqkcfldtr.info',
4826                 '.fwcigpdwz.info',
4827                 '.fyhik.info',
4828                 '.glrkje.info',
4829                 '.gwkslfq.info',
4830                 '.gwjracvh.info',
4831                 '.hihopepe.info',
4832                 '.hwlyggbkw.info',
4833                 '.hmwbfw.info',
4834                 '.hthyeb.info',
4835                 '.iaofkyaw.info',
4836                 '.uldkxuiw.info',
4837                 '.is7c6w4.info',
4838                 '.ivuddhdk.info',
4839                 '.jgfndjem.info',
4840                 '.jgmdlek.info',
4841                 '.jkrnvmpad.info',
4842                 '.jqujn.info',
4843                 '.jvgmmba.info',
4844                 '.kbaur.info',
4845                 '.kgjindptv.info',
4846                 '.kleo7s9.info',
4847                 '.lezfgam.info',
4848                 '.lfaasy.info',
4849                 '.ljpdjki.info',
4850                 '.lmnpis.info',
4851                 '.lpzcu2f.info',
4852                 '.lrptn.info',
4853                 '.lursqt.info',
4854                 '.mgkabviil.info',
4855                 '.mhtknjyt.info',
4856                 '.mksuuku.info',
4857                 '.mkyky.info',
4858                 '.mloaisn.com',
4859                 '.mlsiknd.info',
4860                 '.mthqz.info',
4861                 '.nnooq.info',
4862                 '.nohhylvc.info',
4863                 '.nuprndsye.info',
4864                 '.nsoelam.info',
4865                 '.nykobczv.info',
4866                 '.nzuhli.info',
4867                 '.odyqzgylr.info',
4868                 '.oidiau.info',
4869                 '.oitzkw.info',
4870                 '.okdmrpz.info',
4871                 '.ooinziti.info',
4872                 '.ortqr.info',
4873                 '.osmkpnekv.info',
4874                 '.ozkzfih.info',
4875                 '.p3ix8wc.com',
4876                 '.piwyt.info',
4877                 '.pfkijrm.info',
4878                 '.pjktcragi.info',
4879                 '.pleoz.info',
4880                 '.plvqm73.info',
4881                 '.pqyrem.info',
4882                 '.qipgqd.info',
4883                 '.qlewixu.com',
4884                 '.qmlskme.info',
4885                 '.qtuff.info',
4886                 '.quoga.info',
4887                 '.quqz.info',
4888                 '.qzxuw.info',
4889                 '.rcaidegp.info',
4890                 '.rlkmdi.info',
4891                 '.rnsoiov.info',
4892                 '.rnwlams.info',
4893                 '.rprgkgqld.info',
4894                 '.rubqvxrn.info',
4895                 '.spqxstl.info',
4896                 '.syckoqjql.info',
4897                 '.tbirb.info',
4898                 '.thalc34.info',
4899                 '.tiabq.info',
4900                 '.tszzpjr.info',
4901                 '.tyjdyn.info',
4902                 '.twgugpns.info',
4903                 '.uaezrqp.info',
4904                 '.udlkasu.info',
4905                 '.uejncyf.info',
4906                 '.ukvflb.info',
4907                 '.ugsuv.info',
4908                 '.ukhgpcp.info',
4909                 '.urprzn.info',
4910                 '.uuhememkw.info',
4911                 '.yalc7en.info',
4912                 '.ybuid.info',
4913                 '.yhdkgfob.info',
4914                 '.ymenq.info',
4915                 '.ynlyb.info',
4916                 '.vieatlubk.info',
4917                 '.vltcaho.info',
4918                 '.wlamsiek.info',
4919                 '.wlerp.info',
4920                 '.wlmtshzi.info',
4921                 '.wmlkams.info',
4922                 '.wprqd.info',
4923                 '.wpyspszi.info',
4924                 '.xdscc.info',
4925                 '.xdvy.info',
4926                 '.xeypku.info',
4927                 '.xsrxh.info',
4928                 '.xwjyrpfe.info',
4929                 '.yxcqw.info',
4930                 '.zhbktrh.info',
4931                 '.zspepn.info',
4932                 '.zsxtz.info',
4933         ),
4934         'survi at poczta.fm and smiley' => array(
4935                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4936                 '.ppert.info',
4937                 '.pperta.info',
4938                 '.pperts.info',
4939                 '.pprtuis.info',
4940                 '.13iuey.info',         // ":>"
4941                 '.13jkhs.info',
4942                 '.13lksa.info',
4943                 '.13rxtx.info',
4944                 '.13slkd.info',
4945                 '.13zaer.info',
4946         ),
4947         'admin at esemeski.com' => array(       // by Jan Kalka
4948                 '.kxils.info',
4949                 '.kuaph.info',
4950                 '.lncdc.info',
4951                 '.lsqpd.info',
4952                 '.mczed.info',
4953                 '.npous.info',
4954                 '.obgju.info',
4955         ),
4956         'LiquidNetLimited.com' => array(
4957                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4958
4959                 // FateBack.com related
4960                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4961                 '.bebto.com',
4962                 '.fateback.com',
4963                 '.undonet.com',
4964                 '.yoll.net',
4965
4966                 // 50webs.com                   // 64.72.112.10
4967                 // dns2.50webs.com              // 64.72.112.11
4968                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4969                 // dns2.freehostia.com  // 64.72.112.13
4970                 // serv3.freehostia.com // 64.72.112.14
4971                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4972                 // mail.50webs.com              // 64.72.112.26
4973                 // supremecenter41.com  // 64.72.112.52
4974                 // 50webs2.50webs.com   // 64.72.112.89
4975                 // supremecenter39.com  // 64.72.112.103
4976
4977                 // by LiquidNet Ltd. (support at propersupport.com)
4978                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
4979                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
4980                         'duoservers.com',               // 216.65.1.130
4981
4982                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
4983         ),
4984         'domains at agava.com' => array(
4985                 '.h18.ru',
4986                 '.hut1.ru',
4987         ),
4988         'wlmx009 at hotmail.com' => array(
4989                 '.123lineage.com',
4990                 '.ff11-info.com',
4991                 '.lastlineage.com',
4992                 '.lineage2-ol.com',
4993                 '.lineage2006.com',
4994                 '.lineagefirst.com',
4995         ),
4996         'Zettahost.com' => array(
4997                 '.atspace.biz',         // sales at zettahost.com
4998                 '.atspace.com',         // abuse at zettahost.com
4999                 '.atspace.name',        // NS atspace.com
5000                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5001                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5002         ),
5003         'hlq9814 at 163.com' => array(
5004                 '.kotonohax.com',               // by ling bao
5005                 '.ragnarox.mobi',               // by lin bao, *.exe download
5006                 '.rokonline-jp.com',    // by hang long
5007         ),
5008         '77ch.jp' => array(
5009                 '.77ch.jp',
5010                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5011         ),
5012         'serchportal at mail.ru' => array(      // by Namu Adin
5013                 '.43fert.info',
5014                 '.belis.info',
5015                 '.bonu.info',
5016                 '.chelsite.info',
5017                 '.chparael.info',
5018                 '.cool9f.info',
5019                 '.dada2.info',
5020                 '.dorplanete.info',
5021                 '.dormonde.info',
5022                 '.dorprojet.info',
5023                 '.faciledor.info',
5024                 '.fastsearchgroup.info',
5025                 '.gerta0.info',
5026                 '.getse.info',
5027                 '.gopvl.info',
5028                 '.knopki.info',
5029                 '.propidor.info',
5030                 '.quicksearchnet.info',
5031                 '.ret5.info',
5032                 '.slimfastsearch.info',
5033                 '.virtualpvl.info',
5034                 '.vpvla.info',
5035                 '.xjdor.info',
5036                 '.zhopki.info',
5037         ),
5038         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5039                 '*.444mb.com',          // Free hosting
5040                 'urlnip.com',           // Redirection
5041         ),
5042         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5043                 '.1fasttimesatnau.info',
5044                 '.1freecybersex.info',
5045                 '.1freexxxcomics.info',
5046                 '.1fuckingmywife.info',
5047                 '.1pornpreview.info',
5048                 'www.ru',                                       // by (service at demos.ru), redirection
5049         ),
5050         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5051                 '.adultschat.info',
5052                 '.livecamonline.info',
5053                 '.webcam4u.info',
5054                 '.younghot.info',
5055         ),
5056         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5057                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5058
5059                 // 209.51.196.242
5060                 '.22web.net',
5061                 '.2kool4u.net',
5062                 '.9skul.com',
5063                 '.alojalo.info',
5064                 '.byet.net',
5065                 '.byethost2.com',
5066                 '.byethost3.com',
5067                 '.byethost4.com',
5068                 '.byethost5.com',
5069                 '.byethost6.com',
5070                 '.byethost7.com',
5071                 '.byethost8.com',
5072                 '.byethost9.com',
5073                 '.byethost10.com',
5074                 '.byethost11.com',
5075                 '.byethost12.com',
5076                 '.byethost13.com',
5077                 '.byethost14.com',
5078                 '.byethost15.com',
5079                 '.byethost16.com',
5080                 '.byethost17.com',
5081                 '.byethost18.com',
5082                 '.headshothost.net',
5083                 '.hostwq.net',
5084                 '.mega-file.net',
5085                 '.truefreehost.com',
5086
5087                 '.ifastnet.com',        // 209.51.196.243
5088
5089                 // 209.190.16.82(mx1.byet.org)
5090                 '.1sthost.org',
5091                 '.4sql.net',
5092                 '.byet.org',
5093                 '.hyperphp.com',
5094                 '.kwikphp.com',
5095                 '.my-php.net',
5096                 '.my-place.us',
5097                 '.my-webs.org',
5098                 '.netfast.org',
5099                 '.php0h.com',
5100                 '.php1h.com',
5101                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5102                 '.phpnet.us',
5103                 '.prohosts.org',
5104                 '.pro-php.org',
5105                 '.prophp.org',
5106                 '.sprinterweb.net',
5107                 '.swiftphp.com',
5108                 '.xlphp.net',
5109
5110                 // 209.190.16.83(mx2.byet.org)
5111                 '.instant-wiki.net',
5112
5113                 // 209.190.16.84(mx3.byet.org)
5114
5115                 // 209.190.16.85(mx4.byet.org)
5116                 '.instant-blog.net',
5117                 '.instant-forum.net',
5118
5119                 '.byethost.com',                        // 209.190.18.138
5120         ),
5121         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5122                 '.analmoviesite.info',
5123                 '.bestgirlssex.info',
5124                 '.boxvagina.info',
5125                 '.cyberlivegirls.info',
5126                 '.hotredgirls.info',
5127                 '.forsexlove.info',
5128                 '.hotnudezone.info',
5129                 '.hotredpussy.info',
5130                 '.lesbians-live.info',
5131                 '.lesbians-on-cam.info',
5132                 '.onlinegirlssite.info',
5133                 '.sexloveonline.info',
5134                 '.teensexcard.info',
5135                 '.teensexdirect.info',
5136                 '.topnudesite.info',
5137                 '.vaginafree.info',
5138                 '.webcam-show.info',
5139                 '.webcamshow.info',
5140                 '.youngsexchat.info',
5141                 '.yourcumshot.info',
5142         ),
5143         'stocking.club at gmail.com' => array(
5144                 '.adulthotmodels.com',          // by David Zajwzran
5145                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5146                 '.cash-call.info',                      // by David Theissen
5147                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5148                 '.cheap-online-viagra.info',    // by David Theissen
5149                 '.drugcleansing.net',           // by David Zajwzran
5150                 '.men-health-zone.com',         // by David Theissen
5151                 '.purchase-viagra.info',        // by David Theissen
5152                 '.realdrunkengirls.biz',        // by David Theissen
5153                 '.sextoyslife.com',                     // by David Zajwzran
5154                 '.sexysubjects.info',           // by David Zajwzran
5155                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5156                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5157                 '.travelcardsite.info',         // by David Theissen
5158         ),
5159         'lustiq at p5com.com' => array(
5160                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5161                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5162         ),
5163         'web at 6jy.com' => array(
5164                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5165                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5166         ),
5167         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5168                 '.auto-fgen.info',
5169                 '.fast-marketing.info',
5170                 '.from-usa.info',
5171                 '.generic-pharm.info',
5172                 '.pharm-directory.info',
5173                 '.popular-people.info',
5174                 '.safe-health.info',
5175                 '.star-celebrities.info',
5176                 '.super-home-biz.info',
5177                 '.top5-auto.info',
5178                 '.top5-cars.info',
5179                 '.vip-furniture.info',
5180                 '.vip-pc.info',
5181                 '.vip-pets.info',
5182         ),
5183         'abuse at search-store.org' => array(
5184                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5185         ),
5186         'Leading Edge Marketing Inc.' => array(
5187                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5188                 '.abemedical.com',
5189                 '.attractwomennow.com',
5190                 '.bettersexmall.com',
5191                 '.buymaxoderm.com',
5192                 '.buyvprx.com',
5193                 '.genf20.com',
5194                 '.infinityhealthnews.com',
5195                 '.istnewsletter.com',
5196                 '.leadingedgecash.com',
5197                 '.leadingedgeherbals.com',
5198                 '.leadingedgevipsonly.com',
5199                 '.lecash.com',
5200                 '.leminfo.com',
5201                 '.proextendersystem.com',
5202                 '.provestra.com',
5203                 '.semenax.com',
5204                 '.shavenomore.com',
5205                 '.theedgenewsletter.com',
5206                 '.vigorelle.com',
5207                 '.vigrx.com',
5208                 '.vigrxplus.com',
5209                 '.wbstnewsletter.com',
5210         ),
5211         'clickx at bk.ru' => array(     // by Alexey Enrertov
5212                 '.coolget*.info' =>
5213                         '#^(?:.*\.)?' . 'coolget' .
5214                         '(?:bus|find|news|php|place|post|srch)' .
5215                         '\.info$#',
5216                 '.coolgirl*.info' =>
5217                         '#^(?:.*\.)?' . 'coolgirl' .
5218                         '(?:apple|fish|search)' .
5219                         '\.info$#',
5220                 '.coolmeet*.info' =>
5221                         '#^(?:.*\.)?' . 'coolmeet' .
5222                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5223                         '\.info$#',
5224                 '.cool**.info' =>
5225                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5226                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5227                         '\.info$#',
5228                 '.freseasy*.info' =>
5229                         '#^(?:.*\.)?' . 'freseasy' .
5230                         '(?:apple|click|find|fish|post|search)' .
5231                         '\.info$#',
5232                 '.fres**.info' =>
5233                         '#^(?:.*\.)?' .
5234                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5235                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5236                         '\.info$#',
5237                         // These are not found yet:
5238                         // fresgirlsrch.info
5239                         // fresadultapple.info
5240                         // fresadultclick.info
5241                         // frestheplace.info
5242
5243                 // 66.232.113.44
5244                 '.nuhost.info',
5245                 '.susearch.info',
5246
5247                 // 66.232.126.74(hv94.steephost.com)
5248                 '.dilej.com',
5249                 '.fyvij.com',
5250                 '.howus.com',
5251                 '.jisyn.com',
5252                 '.kaxem.com',
5253                 '.mihug.com',
5254                 '.mobyb.com',
5255                 '.qidat.com',
5256                 '.qihek.com',
5257                 '.ryzic.com',
5258                 '.sasuv.com',
5259                 '.tuquh.com',
5260                 '.vehyq.com',
5261                 '.wezid.com',
5262                 '.wifuj.com',
5263                 '.xijyt.com',
5264                 '.zuqyn.com',
5265         ),
5266         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5267                 '.hitsearching.info',
5268                 '.hugeamountdata.info',
5269                 '.megafasthost.info',
5270                 '.real-big-host.info',
5271                 '.search4freez.info',
5272                 '.yasech.info',
5273
5274                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5275                 '.bymire.com',
5276
5277                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5278                 '.ligiwa.com',
5279         ),
5280         'ice--man at mail.ru related' => array(
5281                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5282                 '.bestcreola.com',
5283                 '.crekatierra.com',
5284                 '.creolafire.com',
5285                 '.crolik.com',
5286                 '.croller.cn',
5287                 '.ecrmx.com',
5288                 '.eflashpoint.com',
5289                 '.exoticmed.com',
5290                 '.feelview.com',
5291                 '.greatexotic.com',
5292                 '.icrtx.com',
5293                 '.icyhip.com',
5294                 '.icyiceman.com',
5295                 '.icypopular.com',
5296                 '.iflashpoint.com',
5297                 '.justmdx.com',
5298                 '.kiliusgroup.com',
5299                 '.klickerr.com',
5300                 '.klickerrworld.com',
5301                 '.kreolic.com',
5302                 '.margansitio.com',
5303                 '.margantierra.com',
5304                 '.mimargan.com',
5305                 '.oilkeys.com',
5306                 '.planetmdx.com',
5307                 '.thekeyse.com',
5308                 '.viewgreat.com',
5309                 '.yourcreola.com',
5310
5311                 // 69.46.23.48
5312                 '.bestkilius.com',
5313                 '.crekadirecto.com',
5314                 '.getflashsite.com',
5315                 '.sucreka.com',
5316                 '.superkilius.com',
5317
5318                 // 69.46.23.48 by bing-16 at ftunez.org
5319                 '.bovorup.cn',
5320                 '.litotar.cn',
5321                 '.nihydec.cn',
5322
5323                 // 66.232.112.175 by bing-32 at ftunez.org
5324                 '.lasyxy.cn',
5325
5326                 // 69.46.23.48 by clarkson-34 at ftunez.org
5327                 '.bumora.cn',
5328                 '.byxite.cn',
5329                 '.byxuqu.cn',
5330                 '.jadama.cn',
5331                 '.kybope.cn',
5332                 '.mefeki.cn',
5333                 '.mokiso.cn',
5334                 '.niqeme.cn',
5335                 '.pukafo.cn',
5336                 '.qesaxa.cn',
5337                 '.toxezi.cn',
5338                 '.tujudy.cn',
5339                 '.tutike.cn',
5340
5341                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5342                 '.cabino.cn',
5343                 '.cuwace.cn',
5344                 '.ferazi.cn',
5345                 '.gigywy.cn',
5346                 '.lapype.cn',
5347                 '.mewabe.cn',
5348                 '.pezegy.cn',
5349                 '.pyzuza.cn',
5350                 '.qypony.cn',
5351                 '.ropesy.cn',
5352                 '.wadyfe.cn',
5353
5354                 // 69.46.23.48 clarkson-58 at ftunez.org
5355                 '.becabe.cn',
5356                 '.biciqy.cn',
5357                 '.bezymu.cn',
5358                 '.cifori.cn',
5359                 '.ciwyxi.cn',
5360                 '.dobari.cn',
5361                 '.dusofe.cn',
5362                 '.dutyda.cn',
5363                 '.dykanu.cn',
5364                 '.fakexu.cn',
5365                 '.fylema.cn',
5366                 '.godymo.cn',
5367                 '.hyhaxy.cn',
5368                 '.ganosi.cn',
5369                 '.kuxyju.cn',
5370                 '.lacezy.cn',
5371                 '.lonyru.cn',
5372                 '.lycato.cn',
5373                 '.nykyby.cn',
5374                 '.qyhuko.cn',
5375                 '.redere.cn',
5376                 '.riwimu.cn',
5377                 '.wopary.cn',
5378                 '.xizity.cn',
5379                 '.xuxusa.cn',
5380
5381                 // 69.46.23.48 by entretov-32 at ftunez.org
5382                 '.cihuji.cn',
5383                 '.deqyve.cn',
5384                 '.genefa.cn',
5385                 '.gujyju.cn',
5386                 '.hasadu.cn',
5387                 '.hedomi.cn',
5388                 '.kecicy.cn',
5389                 '.kipabo.cn',
5390                 '.manunu.cn',
5391                 '.musoru.cn',
5392                 '.myvuna.cn',
5393                 '.pikybe.cn',
5394                 '.riqawo.cn',
5395                 '.rufuxy.cn',
5396                 '.vyfilu.cn',
5397                 '.xadule.cn',
5398                 '.zolaxe.cn',
5399                 '.zerixu.cn',
5400
5401                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5402                 '.dozoda.cn',
5403                 '.nemipu.cn',
5404
5405                 // 69.46.23.48 by jeremy-57 at ftunez.org
5406                 '.duzele.cn',
5407                 '.figede.cn',
5408                 '.fiwany.cn',
5409                 '.gyfalu.cn',
5410                 '.jepylo.cn',
5411                 '.nuqumy.cn',
5412
5413                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5414                 '.burahu.cn',
5415                 '.jydijy.cn',
5416                 '.komyby.cn',
5417                 '.najepa.cn',
5418                 '.pylobu.cn',
5419                 '.qofoly.cn',
5420                 '.sybuvi.cn',
5421                 '.vycexu.cn',
5422                 '.wotyqo.cn',
5423                 '.xudoli.cn',
5424
5425                 // 66.232.112.175 by entretov-86 at ftunez.org
5426                 '.faweji.cn',
5427                 '.jypaci.cn',
5428                 '.xozuso.cn',
5429
5430                 // 69.46.23.48 by miles-37 at ftunez.org
5431                 '.beqymo.cn',
5432                 '.ceqibi.cn',
5433                 '.dyraqo.cn',
5434                 '.qenedo.cn',
5435                 '.qurypa.cn',
5436                 '.siluvo.cn',
5437                 '.tujala.cn',
5438                 '.wukuwi.cn',
5439                 '.xenibo.cn',
5440                 '.xiculo.cn',
5441                 '.zabemu.cn',
5442
5443                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5444                 '.bevaka.cn',
5445                 '.fysyte.cn',
5446                 '.guxixu.cn',
5447                 '.hatoli.cn',
5448                 '.jitobu.cn',
5449                 '.juxeca.cn',
5450                 '.kifuhy.cn',
5451                 '.licila.cn',
5452                 '.mecomy.cn',
5453                 '.niryko.cn',
5454                 '.noxoco.cn',
5455                 '.qiwysu.cn',
5456                 '.tutysy.cn',
5457
5458                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5459                 '.gywiqe.cn',
5460                 '.jotapo.cn',
5461                 '.jywixa.cn',
5462
5463                 // '69.46.23.48 by sabrosky-60 at ftunez.org
5464                 '.bawegap.cn',
5465                 '.buremyl.cn',
5466                 '.cilybut.cn',
5467                 '.cutufek.cn',
5468                 '.defypyr.cn',
5469                 '.femaxij.cn',
5470                 '.gelejo.cn',
5471                 '.gocylyv.cn',
5472                 '.kehiqaq.cn',
5473                 '.ninyjit.cn',
5474                 '.ruroruw.cn',
5475                 '.vetehow.cn',
5476
5477                 // 69.46.23.48 sabrosky-85 at ftunez.org
5478                 '.banyla.cn',
5479                 '.bubaqu.cn',
5480                 '.bygage.cn',
5481                 '.dafozy.cn',
5482                 '.kaxyjo.cn',
5483                 '.makyle.cn',
5484                 '.naleto.cn',
5485                 '.pidele.cn',
5486                 '.poqexa.cn',
5487                 '.pymaqo.cn',
5488                 '.qupiqy.cn',
5489                 '.reqefy.cn',
5490                 '.sopocy.cn',
5491                 '.vuhexo.cn',
5492                 '.weryso.cn',
5493                 '.wubula.cn',
5494                 '.xufuxy.cn',
5495                 '.zuhyxu.cn',
5496
5497                 // 69.46.23.48 by tribiani-97 at ftunez.org
5498                 '.dyxorod.cn',
5499                 '.firywoz.cn',
5500                 '.jixezyx.cn',
5501                 '.joveraw.cn',
5502                 '.jowaxup.cn',
5503                 '.nodarej.cn',
5504                 '.pimijom.cn',
5505                 '.tugupeg.cn',
5506
5507                 // 66.232.112.175 by abuse-here at inbox.ru
5508                 '.catybe.cn',
5509                 '.jytame.cn',
5510                 '.wygete.cn',
5511         ),
5512         'nijeoi at hotmai.com' => array(
5513                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5514                 '.bowij.com',
5515                 '.bozib.com',
5516                 '.cavux.com',
5517                 '.dipov.com',
5518                 '.gumoz.com',
5519                 '.hakyb.com',
5520                 '.hehyv.com',
5521                 '.hepyt.com',
5522                 '.howoj.com',
5523                 '.jywaz.com',
5524                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5525                 '.kyheq.com',
5526                 '.kyzad.com',
5527                 '.qicad.com',
5528                 '.qubyd.com',
5529                 '.mocyq.com',
5530                 '.muloq.com',
5531                 '.myxim.com',
5532                 '.nufyp.com',
5533                 '.waqog.com',
5534                 '.wyduc.com',
5535                 '.xefyv.com',
5536                 '.xomej.com',
5537                 '.xomip.com',
5538                 '.xykyl.com',
5539                 '.zakuw.com',
5540                 '.zeliw.com',
5541                 '.zimev.com',
5542                 '.zipif.com',
5543
5544                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5545                 '.tycoco.com',
5546
5547                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5548                 '.pufeqa.com',
5549         ),
5550         'niichka at hotmail.com' => array(
5551                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5552                 '.aerosearch.info',
5553                 '.freader.info',
5554                 '.info4searchz.info',
5555                 '.nice-host.info',
5556                 '.realyfast.info',
5557                 '.resuts.info',
5558
5559                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5560                 '.bepoh.com',
5561                 '.gufiq.com',
5562                 '.kedyh.com',
5563                 '.pofyb.com',
5564                 '.rurid.com',
5565                 '.vucaj.com',
5566                 '.vuwir.com',
5567
5568                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5569                 '.bejefe.com',
5570
5571                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5572                 '.tidawu.com',
5573
5574                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5575                 '.rofuqa.com',
5576         ),
5577         'porychik at hot.ee' => array(  // by Igor
5578                 '.tedstate.info',       // "Free Web Hosting"
5579                 '.giftsee.com',
5580         ),
5581         'aofa at vip.163.com' => array(
5582                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5583                 '.5944.net',
5584         ),
5585         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5586                 '.maxrentcar.info',
5587                 '.newsonyericsson.info',
5588                 '.pornositeworld.biz',
5589                 '.rentcarweb.info',
5590                 '.xxxdomainsex.biz',
5591         ),
5592         'kopper1970 at gmail.com' => array(
5593                 '.cardealerall.info',           // by Green
5594                 '.donatecarsales.info',         // by Sipil
5595                 '.ringtonewilly.info',          // by Sipil
5596                 '.travelstraveling.info',       // by Chinik
5597                 '.viagrabuyonline.org',         // by Sipil
5598                 '.viagraorderbuy.com',          // by Anatol
5599                 '.worldcuptourism.info',        // by Sipil
5600         ),
5601         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5602                 '.globalinfoland.info',
5603                 '.goodlifesearch.info',
5604                 '.hotnetinfo.info',
5605                 '.hotpornmovies.org',
5606                 '.infopilot.info',
5607         ),
5608         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5609                 '.bang-bro.org',
5610                 '.datinghost.info',
5611                 '.hello-craulers.info',
5612                 '.free-blog-host.info',
5613                 '.sucking-boobs.info',
5614         ),
5615         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5616                 '.allcamsguide.info',
5617                 '.camerascams.info',
5618                 '.camerasera.info',
5619                 '.girlcamsworld.info',
5620                 '.hiddenlimocams.info',
5621                 '.redlivecams.info',
5622                 '.spycamsgear.info',
5623                 '.spycamssite.info',
5624                 '.supercamsusa.info',
5625                 '.thecamsnow.info',
5626         ),
5627         '87.242.116.81' => array(
5628                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5629                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5630                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5631                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5632                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5633         ),
5634         '208.70.75.153' => array(
5635                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5636                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5637                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5638                 '.cerc-on.info',
5639                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5640                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5641                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5642                 '.cerc-tr.info',
5643                 '.cerc-tw.info',
5644                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5645                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5646                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5647                 '.cerc-on.org',         // by cerca-one at ya.ru
5648                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5649                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5650                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5651                 '.cerc-tr.org',         // by cerca-one at ya.ru
5652                 '.cerc-tw.org',         // by cerca-one at ya.ru
5653                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5654                 '.cerca-fo.info',
5655                 '.cerca-no.info',
5656                 '.cerca-on.info',
5657                 '.cerca-sv.info',
5658                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5659                 '.cerca-te.info',
5660                 '.cerca-tr.info',
5661                 '.cerca-sx.org',
5662                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5663                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5664                 '.ricerca-fo.info',
5665                 '.ricerca-one.org',
5666                 '.ricerca-sv.org',
5667                 '.ricerca-sx.org',
5668                 '.ricerca-te.org',
5669                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5670                 '.subit01.org',
5671                 '.subit02.org',
5672                 '.subit03.org',
5673                 '.subit04.org',
5674                 '.subit05.org',
5675                 '.subit06.org',
5676                 '.subit01.info',
5677                 '.subit02.info',
5678                 '.subit03.info',
5679                 '.subit04.info',
5680                 '.subit05.info',
5681                 '.subit06.info',
5682         ),
5683         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5684                 '.5-base.com',
5685                 '.pharmacy-style.com',
5686         ),
5687         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5688                 '.ista-2006.ru',
5689                 '.wefas.ru',
5690         ),
5691         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5692                 '.tourismworldsite.info',
5693                 '.yourtourismtravel.info',
5694         ),
5695         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5696                 '.easyfindcar.info',
5697                 '.siteinfosystems.info',
5698         ),
5699         'smesh1155 at gmail.com' => array(
5700                 '.hospitalforyou.info',                 // by Gimmi
5701                 '.thephentermineonline.info',   // by Kipola
5702         ),
5703         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5704                 '.kiski.net.in',
5705                 '.pipki.org.in',
5706                 '.popki.ind.in',
5707                 '.siski.co.in',
5708         ),
5709         'tiptronikmike at mail.com' => array(
5710                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5711                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5712                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5713                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5714                 //'.i0sex.info',                // Michael
5715                 //'.i1sex.info',                // Michael
5716                 //'.i2sex.info',                // Martin
5717                 //'.i3sex.info',                // Martin
5718                 //'.i4sex.info',                // Adulterra
5719                 //'.i5sex.info',                // Adulterra
5720                 //[irvyz]6sex.info not found
5721                 '.i8sex.info',                  // by Martin
5722         ),
5723         'skuarlytronald at mail.com' => array(
5724                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5725                 '.girlsgoingmad.info',          // 64.27.13.120
5726                 '.girlsgonewildside.info',      // 64.27.13.120
5727         ),
5728         '66.232.109.250' => array(
5729                 '.1626pornporno.info',
5730                 '.1851pornporno.info',
5731                 '.1876pornporno.info',
5732                 '.476pornporno.info',
5733         ),
5734         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5735                 '.compactxxx.com',
5736                 '.eadulthost.com',
5737                 '.eadultview.com',
5738                 '.eroticpool.net',
5739                 '.ipornservice.com',
5740                 '.liveadulthost.com',
5741                 '.nudepal.com',
5742                 '.sweetservers.com',
5743         ),
5744         'support at orgija.org' => array(
5745                 '.assfuckporn.org',
5746                 '.dosugmos.org',
5747                 '.fuckporn.org',
5748                 '.girlsdosug.org',
5749                 '.girlsporno.org',
5750                 '.moscowintim.org',
5751                 '.pornass.org',
5752                 '.pornopussy.org',
5753                 '.progirlsporn.org',
5754                 '.pussypornogirls.org',
5755         ),
5756         '125.65.112.93' => array(
5757                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5758                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5759         ),
5760         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5761                 '.beta-google.com',
5762                 '.tv-reklama.info',
5763                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5764                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5765         ),
5766         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5767                 '.abobrinha.org',
5768                 '.aneurysmic.com',              // / not found
5769                 '.physcomp.org',                // / not found
5770                 '.seriedelcaribe2006.org',
5771                 '.refugeeyouthinamerica.com',
5772         ),
5773         'skip_20022 at yahoo.com' => array(
5774                 // 203.174.83.55
5775                 '.a28hosting.info',             // by Bill Jones
5776                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5777                 '.besthentai06.org',    // by yakon
5778         ),
5779         'USFINE.com' => array(
5780                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5781                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5782         ),
5783         '68.178.211.57' => array(
5784                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5785                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5786         ),
5787         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5788                 '.google-yahoo-msn.org',
5789                 '.expedia-travel.org',
5790         ),
5791         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5792                 '.emr5ce.org',
5793                 '.wfe7nv.org',
5794                 '.xyr99yx.org',
5795         ),
5796         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
5797                 '.playonlinenc.com',
5798                 '.playboss-jp.com',
5799         ),
5800         'Digi-Rock.com' => array(
5801                 '.rom776.com',
5802                 // owner-organization: DIGIROCK, INC.
5803                 // owner-email: domain-contact at digi-rock.com
5804                 // with an external ad-and-JavaScript,
5805                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
5806                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
5807         ),
5808         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
5809                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
5810                 '.getrun.cn',                           // 208.73.34.48
5811                 '.ipod-application.info',       // NO IP
5812                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
5813                 '.stonesex.info',                       // NO IP, was 74.50.97.136
5814         ),
5815         'germerts at yandex.ru' => array(
5816                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
5817                 '.andatra.info',
5818                 '.banchitos.info',
5819                 '.batareya.info',
5820                 '.blevota.info',
5821                 '.broneslon.info',
5822                 '.gamadril.info',
5823                 '.gipotenuza.info',
5824                 '.govnosaklo.info',
5825                 '.muflon.info',
5826                 '.termitnik.info',
5827         ),
5828         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
5829                 '.acronis-true-image.info',
5830                 '.calcio-xp.info',
5831                 '.cosanova.info',
5832                 '.cose-rx.info',
5833                 '.dictip.info',
5834                 '.findig.info',
5835                 '.fotonow.info',
5836                 '.lavoro-tip.info',
5837                 '.loan-homes.info',
5838                 '.mionovita.info',
5839                 '.mustv.info',
5840                 '.newsnaked.info',
5841                 '.online-tod.info',
5842                 '.opakit.info',
5843                 '.opanow.info',
5844                 '.opriton.info',
5845                 '.porta-bl.info',
5846                 '.refdif.info',
5847                 '.xzmovie.info',
5848         ),
5849         '84.252.148.120 etc' => array(
5850                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
5851                 '.planetavilton.info',  // 84.252.148.120
5852                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
5853         ),
5854         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
5855                 '.99jk.com',
5856                 '.99jk.com.cn',
5857                 '.99jk.cn',
5858         ),
5859         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
5860                 '.kliktop.biz',
5861                 '.kliktop.org',
5862                 '.pharmatop.us',
5863                 '.supertop.us',
5864                 '.supervaizer.info',
5865         ),
5866         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
5867                 '.freeamateursexx.info',        // 81.0.195.228
5868                 '.freeanalsexx.info',           // 217.11.233.97
5869                 '.freegaysexx.info',            // 81.0.195.228
5870         ),
5871         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
5872                 '.abbhi.info',
5873                 '.gayblogguide.biz',
5874                 '.huope.info',
5875                 '.thebdsmday.info',
5876                 '.zioprt.info',                 // 89.149.228.237
5877         ),
5878         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
5879                 '.boblisk.info',
5880                 '.factyri.info',
5881                 '.jorge1.info',
5882         ),
5883         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
5884                 '.bestmindstorm.org',
5885                 '.redstoreonline.org',
5886         ),
5887         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
5888                 '.8e8ae.net',
5889                 '.c-cock.com',
5890                 '.fa59eaf.com',
5891                 '.set-place.net',
5892                 '.sex-beauty.net',
5893         ),
5894         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
5895                 '.tomdir.info',
5896                 '.tomdirdirect.info',
5897                 '.tomdirworld.info',
5898                 '.treton.info',
5899                 '.trefas.info',
5900                 '.tretonmondo.info',
5901                 '.unefout.info',
5902                 '.unefoutprojet.info',
5903                 '.unitfree.info',
5904                 '.vilret.info',
5905                 '.vilttown.info',
5906                 '.votrefout.info',
5907                 '.warmfind.info',
5908                 '.warptop.info',
5909                 '.wildtram.info',
5910                 '.xofind.info',
5911                 '.xopdiscover.info',
5912                 '.xopfind.info',
5913                 '.xoplocate.info',
5914                 '.xopseek.info',
5915                 '.xpfirst.info',
5916                 '.xphighest.info',
5917                 '.xptop.info',
5918         ),
5919         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
5920                 '.myviagrasite.com',    // 80.74.153.2
5921                 '.thecanadianmeds.com', // 80.74.153.17
5922         ),
5923         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
5924                 '.bigemot.com',                         // 217.11.233.34, / not found
5925                 '.espharmacy.com',                      // 217.11.233.34
5926                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
5927                 '.ringtonecooler.com',          // 217.11.233.34
5928         ),
5929         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
5930                 '.okwit.com',           // 220.166.64.44
5931                 '.sakerver.com',        // 220.166.64.194
5932                 '.motewiki.net',        // 220.166.64.194
5933         ),
5934         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
5935                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
5936                 '.lookmedicine.info',           // 206.161.205.22
5937                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
5938                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
5939                 '.worldsitesearch.info',        // 209.8.40.59
5940         ),
5941         'lee.seery at gmail.com' => array(
5942                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
5943                 '.lingvol.com',         // 64.21.34.55
5944                 '.micevol.com',         // 64.21.34.55
5945                 '.heyhey.info',         // 64.21.34.55  by anonymous
5946         ),
5947         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
5948                 // 69-64-64-71.dedicated.abac.net
5949                 '.520-ard.info',
5950                 '.550bcards.info',
5951                 '.559-cads.info',
5952                 '.559caard.info',
5953                 '.565-caaard.info',
5954                 '.575cadr.info',
5955                 '.577cadrs.info',
5956                 '.590-acrds.info',
5957                 '.596-cadrs.info',
5958                 '.596caards.info',
5959                 '.596caaard.info',
5960                 '.asstablishingcads.info',
5961                 '.astablish-ard.info',
5962                 '.astablishcacrds.info',
5963                 '.begginers-acards.info',
5964                 '.begginersacrds.info',
5965                 '.beggingcaaard.info',
5966                 '.beginercacrds.info',
5967                 '.cacrdscreating.info',
5968                 '.caditbegging.info',
5969                 '.cadr-buildup.info',
5970                 '.cadr-establilsh.info',
5971                 '.cadrs-buildercredit.info',
5972                 '.cadrs570.info',
5973                 '.cads-565.info',
5974
5975                 // 69-64-64-113.dedicated.abac.net
5976                 '.interistacards.info',
5977                 '.intrust-ards.info',
5978                 '.intrustacrds.info',
5979                 '.lfixed-ard.info',
5980                 '.lowerate-ard.info',
5981                 '.lowpercentage-ard.info',
5982                 '.lowpercentageacrd.info',
5983         ),
5984         'acua at mail.ru' => array(
5985
5986                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
5987
5988                         // by adventurer at allmyns.info
5989                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
5990
5991                         // by webmaster at allmyns.info
5992                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
5993                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
5994                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
5995                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
5996                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
5997                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
5998                         '.riumh.cn',    // 84.16.226.28(*snip*)
5999                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6000                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6001                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6002
6003                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6004                 '.dns4babka.info',      // by acua at mail.ru
6005
6006                         // by golubcov at dns4babka.info
6007                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6008
6009                         // by webmaster at dns4babka.info
6010                         '.credh.cn',
6011                         '.fucfv.cn',
6012                         '.gdxnk.cn',
6013                         '.sqrrt.cn',
6014                         '.ywtmd.cn',
6015                         '.kncqy.cn',    // by webmaster at allmyns.info
6016
6017                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6018                 '.dedka2ns.info',       // by acua at mail.ru
6019
6020                         // by chasik at dedka2ns.info
6021                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6022
6023                         // by rochel at dedka2ns.info
6024                         '.fudhxjjqh.cn',
6025
6026                         // by webmaster at dedka2ns.info
6027                         '.ascpo.cn',
6028                         '.jgycr.cn',
6029                         '.nqdtt.cn',
6030                         '.oswde.cn',
6031                         '.qeyig.cn',
6032                         '.soqsx.cn',
6033                         '.ukncd.cn',
6034                         '.zijgb.cn',
6035
6036                 // 84.16.255.253(*snip*), / says 'noy found'
6037                 '.dns4dedka.info',      // by acua at mail.ru
6038
6039                         // by aleon at dns4dedka.info
6040                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6041
6042                         // by dig at dns4dedka.info
6043                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6044                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6045                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6046                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6047                         '.heulw.cn',    // 84.16.226.217(*snip*)
6048                         '.hissw.cn',    // 84.16.249.240(*snip*)
6049                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6050                         '.obwew.cn',    // 84.16.251.218(*snip*)
6051                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6052                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6053                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6054                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6055                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6056                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6057                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6058                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6059                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6060                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6061                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6062                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6063
6064                         // by la at dns4dedka.info
6065                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6066                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6067                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6068                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6069                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6070                         '.eothy.cn',    // 84.16.249.241(*snip*)
6071                         '.epocy.cn',    // 84.16.251.220(*snip*)
6072                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6073                         '.faacz.cn',    // 84.16.251.222(*snip*)
6074                         '.filun.cn',    // 89.149.196.72(*snip*)
6075                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6076                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6077                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6078                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6079                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6080                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6081                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6082                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6083                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6084                         '.krumo.cn',    // 84.16.226.217(*snip*)
6085                         '.lbava.cn',    // 217.20.112.102(*snip*)
6086                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6087                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6088                         '.npovm.cn',    // 84.16.226.28(*snip*)
6089                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6090                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6091                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6092                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6093                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6094                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6095                         '.qydph.cn',    // 89.149.228.163(*snip*)
6096                         '.rxens.cn',    // 89.149.196.72(*snip*)
6097                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6098                         '.srths.cn',    // 84.16.251.222(*snip*)
6099                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6100                         '.unquz.cn',    // 84.16.251.223(*snip*)
6101                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6102                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6103                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6104                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6105                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6106                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6107
6108                         // by le at dns4dedka.info
6109                         '.goslw.cn',    // 84.16.251.220(*snip*)
6110                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6111                         '.iewik.cn',    // 84.16.255.254(*snip*)
6112                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6113                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6114                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6115                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6116                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6117                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6118                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6119                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6120                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6121                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6122                         '.qniww.cn',    // 84.16.251.218(*snip*)
6123                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6124                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6125
6126                         // by skspb at dns4dedka.info
6127                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6128
6129                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6130                         '.bcpnb.cn',
6131                         '.cfbpr.cn',
6132                         '.dnndb.cn',
6133                         '.ekwme.cn',
6134                         '.iutps.cn',
6135                         '.ryftj.cn',
6136                         '.vxqcb.cn',
6137
6138                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6139                         // by apple at ns2best.info
6140                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6141                         // by paulwolf at ns2best.info
6142                         '.ifytzq.cn',
6143
6144                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6145                         // by pigato at sedns.info
6146                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6147                         // by roschem at sedns.info
6148                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6149         ),
6150         'gilvcta sy jilbertsbram.com' => array(
6151                 // 206.53.51.126
6152                 '.dsfljkeilm1.cn',
6153                 '.dsfljkeilm2.cn',
6154                 '.dsfljkeilm3.cn',
6155                 '.dsfljkeilm4.cn',
6156                 '.dsfljkeilm5.cn',
6157                 '.dsfljkeilm6.cn',
6158                 '.dsfljkeilm7.cn',
6159                 '.dsfljkeilm8.cn',
6160                 '.dsfljkeilm9.cn',
6161                 '.dsfljkeilm10.cn',
6162         ),
6163         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6164
6165                 // 69.64.82.76(*.dedicated.abac.net)
6166                 '.bruised-criedit.info',
6167                 '.bruised-crtedit.info',
6168                 '.bruised-czrd.info',
6169                 '.bruisedcreditcars.info',
6170                 '.bruisedcreitcard.info',
6171                 '.bruisedcreitd.info',
6172                 '.buliderscreadet.info',
6173                 '.cleaningup-cdit.info',
6174                 '.cleaningup-cedict.info',
6175                 '.cleaningup-cerdic.info',
6176                 '.cleanup-crrd.info',
6177
6178                 // 69.64.82.77(*.dedicated.abac.net)
6179                 '.bruised-crediot.info',
6180                 '.bruised-credtid.info',
6181                 '.bruisedcriet.info',
6182                 '.bruisedredit.info',
6183                 '.buliders-crdt.info',
6184                 '.buliders-cre4dit.info',
6185                 '.buliders-creadt.info',
6186                 '.buliders-credcards.info',
6187                 '.buliders-credictcard.info',
6188                 '.cleaningupccreditcards.info',
6189                 '.cleaningupcdedit.info',
6190                 '.cleaningupcedirt.info',
6191                 '.cleaningupceidt.info',
6192                 '.cleaningupcrasd.info',
6193                 '.cleaningupcreait.info',
6194
6195                 // 69.64.82.78(*.dedicated.abac.net)
6196                 '.bruised-cridet.info',
6197                 '.bruised-drecit.info',
6198                 '.bruised-reditcards.info',
6199                 '.bruisedcredikt.info',
6200                 '.bruisedcredith.info',
6201                 '.bruisedcredtid.info',
6202                 '.cleanup-criet.info',
6203                 '.cleanup-csrds.info',
6204                 '.cleanup-dards.info',
6205
6206                 // 69.64.82.79(*.dedicated.abac.net)
6207                 '.bruised-crediotcards.info',
6208                 '.bruised-creditcar.info',
6209                 '.bruised-creid.info',
6210                 '.bruised-creidtcard.info',
6211                 '.buliders-crdit.info',
6212                 '.buliders-creadet.info',
6213                 '.cleaningup-ceridt.info',
6214                 '.cleaningupcrecit.info',
6215                 '.cleaningupccritcard.info',
6216                 '.cleanupdredit.info',
6217                 '.cleanupredit.info',
6218         ),
6219         '.malwarealarm.com',
6220                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6221                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6222                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6223         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6224         'Inet-Traffic.com' => array(
6225                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6226                 //'.dcomm.com',         // by D Communications Inc. S.A.
6227
6228                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6229                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6230                 // ...
6231                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6232                 // ...
6233                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6234                 // ...
6235                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6236                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6237                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6238                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6239                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6240                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6241                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6242                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6243                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6244                 // ...
6245                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6246                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6247                 // ...
6248                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6249                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6250                 // ...
6251                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6252                 // ...
6253                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6254                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6255                 // ...
6256                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6257         ),
6258         'andreyletov at yahoo.com related' => array(
6259                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6260                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6261                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6262
6263                 // 89.248.99.118 by anonymous
6264                 '.lpgpharmacy.com',
6265                 '.onlybestgalleries.com',
6266                 '.viagrabest.info',
6267                 '.viagrabestprice.info',
6268                 '.viagratop.info',
6269
6270                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6271                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6272                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6273         ),
6274         'alrusnac at hotmail.com' => array(
6275                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6276                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6277         ),
6278         '203.116.63.123' => array(
6279                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6280                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6281         ),
6282         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6283                 '.autotowncar.cn',              // 69.73.146.184
6284                 '.badgirlhome.cn',              // 69.73.146.186
6285         ),
6286         'Wmp.co.jp' => array(
6287                 // 219.94.134.208, ns *.dns.ne.jp, adult
6288                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6289                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6290                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6291         ),
6292         'Macherie.tv' => array(
6293                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6294                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6295                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6296         ),
6297         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6298                 '.yemine.info',
6299                 '.fr4f3ds.info',
6300         ),
6301         '75.126.129.222' => array(
6302                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6303                 '.viagrabuycheap.info', // ns *.advernsserver.com
6304                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6305         ),
6306         'sqr at bk.ru' => array(
6307                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6308                 '.masserch.info',               // "Free Web Hosting", spam
6309                 '.miserch.info',
6310         ),
6311         'gangstadra at hotmail.com' => array(
6312                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6313                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6314                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6315                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6316         ),
6317         'hosan by front.ru' => array(
6318                 '.online-freesearch.com',       // 206.53.51.155
6319                 '.carsprojects.com',            // 206.53.51.159
6320                 '.sport-brands.com',            // 206.53.51.167
6321                 '.choosefinest.com',            // 206.53.51.157
6322                 '.online-pharmaceutics.com',    // 206.53.51.168
6323         ),
6324         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6325                 '.cialischeap.info',
6326                 '.superrv.info',
6327         ),
6328         '74.50.97.*' => array(
6329                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
6330                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
6331                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6332                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6333                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
6334                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6335                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
6336                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
6337                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6338                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6339                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6340                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
6341                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
6342                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
6343                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6344                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6345         ),
6346         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6347                 '.kol2you.com',
6348                 '.kolplanet.com',
6349                 '.pbaol.com',
6350                 '.planetkol.com',
6351         ),
6352
6353         // C-2: Lonely domains (buddies not found yet)
6354         '.0721-4404.com',
6355         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6356         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6357         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6358         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6359         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6360         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6361         '.0annie.info',
6362         '.6i6.de',
6363         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6364         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6365         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6366         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6367         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6368         '.allworlddirect.info', // Forbidden
6369         '.amoreitsex.com',
6370         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6371         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6372         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6373         '.auto-car-cheap.org',
6374         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6375         '.baurish.info',
6376         '.bestop.name',
6377         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6378         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6379         '.bestshopfinder.info',
6380         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6381         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6382         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6383         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6384         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6385         '.catkittenmagazines.org',              // 87.118.97.117
6386         '.covertarena.co.uk',   // by Wayne Huxtable
6387         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6388         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6389         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6390         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6391         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6392         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6393         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6394         '.easyshopusa.com',             // by riter (riter at nm.ru)
6395         '.edu.ph',                              // "philippine network foundation inc"
6396         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6397         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6398         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6399         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6400         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6401         '*.filthserver.com',    // sales at onlinemarketingservices.biz
6402         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6403         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6404         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6405         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6406         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6407         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6408         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6409         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6410         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6411         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6412         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6413         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6414         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6415         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6416         '.gm-exchange.jp',              // 210.188.216.49 RMT
6417         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6418         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6419         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6420         '.greatbestwestern.org',// by gao.wungao at gmail.com
6421         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6422         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6423         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6424         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6425         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6426         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6427         '.hostuju.cz',                  // ns banan.cz, banan.it
6428         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6429         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6430         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6431         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6432         '.infradoc.com',
6433         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6434         '.ismarket.com',                // Google-hiding. intercage.com related IP
6435         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6436         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6437         '.itsexosit.net',
6438         '.itxxxit.net',
6439         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6440         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6441         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6442         '.kingtools.de',
6443         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6444         '.leucainfo.com',
6445         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6446         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
6447         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6448         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6449         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6450         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6451         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6452         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6453         '.megvideochatlive.info',       // Bad seo
6454         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6455         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6456         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6457         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6458         '.mxsupportmailer.com',
6459         '.next-moneylife.com',  // RMT
6460         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6461         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6462         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6463         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6464         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6465         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6466         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6467         '.onlineviagra.de',
6468         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6469         '.ozomw.info',
6470         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6471         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6472         '.perevozka777.ru',             // by witalik at gmail.com
6473         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6474         '.pills-storage.com',   // by
6475         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6476         '.porkyhost.com',               // 79965 at whois.gkg.net
6477         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6478         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6479         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6480         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6481         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6482         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6483         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6484         '.quality-teen-porn-photo.com', // by info at densa.info
6485         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6486         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6487         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6488         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6489         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6490         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6491         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6492         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6493         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6494         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6495         '.sexamoreit.com',
6496         '.sexforit.com',
6497         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6498         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6499         '.sirlook.com',
6500         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6501         '.sepcn.info',                  // / not found
6502         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6503         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6504         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6505         '.superverizonringtones.com',   // by joshua at list.ru
6506         '.thehostcity.com',             // Domains by Proxy
6507         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6508         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6509         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6510         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6511         '.topmeds10.com',
6512         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6513         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6514         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6515         '.unctad.net',                  // by gfdogfd at lovespb.com
6516         '.vacant.org.uk',
6517         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6518         '.virtualsystem.de',
6519         '.vdxhost.com',
6520         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6521         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6522         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6523         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6524         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6525         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6526         '.whoop.to',                    // RMT
6527         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6528         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6529         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6530         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6531         '.wwwna.info',                  // / 404 Not Found
6532         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6533         '.xamorexxx.net',
6534         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6535         '.xsessox.com',
6536         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6537         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6538         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6539         '.zyguo.info',                  // ns globoxhost.net
6540         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6541
6542         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6543         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6544         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6545
6546         '.chatwalker.com',              // 124.32.230.65
6547         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6548         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6549
6550         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6551         '.mncxvsm.info',                // 217.11.233.105, / blank
6552         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6553         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6554         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6555         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6556         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6557         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6558         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6559
6560         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6561         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6562
6563         // The same approach of 'acua at mail.ru'
6564         '.iblcqms.cn',                  // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
6565         '.aasghwf.cn',                  // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
6566         '.fwjjjtmrlr.cn',               // TODO:
6567         '.klmnei.cn',                   // TODO:
6568         '.lumyjugmn.cn',                // TODO:
6569         '.lxwxjzpiy.cn',                // TODO:
6570         '.qyxswynd.cn',                 // TODO:
6571         '.ugivorm.cn',                  // TODO:
6572         '.uxmrscgdi.cn',                // TODO:
6573
6574         // C-3: Not classifiable (information wanted)
6575         //
6576         // Something incoming to pukiwiki related sites
6577         'nana.co.il related' => array(
6578                 '.planetnana.co.il',
6579                 '.nana.co.il',
6580         ),
6581 );
6582
6583 // --------------------------------------------------
6584
6585 $blocklist['D'] = array(
6586         // D: Sample setting of
6587         // "Third party in good faith"s
6588         //
6589         // Hosts shown inside of the implanted contents,
6590         // not used via spam, but maybe useful to detect these contents
6591         //
6592         // 'RESERVED',
6593 );
6594
6595 // --------------------------------------------------
6596
6597 $blocklist['E'] = array(
6598         // E: Sample setting of
6599         // Promoters
6600         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6601         //  Ads, Business promotions)
6602         //
6603         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6604         // Sometimes they may promote each other
6605
6606         '15-Mail.com related' => array(
6607                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6608                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6609                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6610                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
6611                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
6612         ),
6613         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
6614         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
6615         'E-brainers.com related' => array(
6616                 // 202.212.14.101
6617                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
6618                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
6619                 '.my-tune.jp',                                  // by brainers Inc.
6620                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
6621                 '.weekle.jp',                                   // by brainers Inc.
6622
6623                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
6624                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
6625                 '.3minutes-marketing-club.com', // by Fujio
6626                 '.affiliate-vampire.com',               // by Masatoshi
6627                 '.article-site-power-package.com',      // by Masatoshi
6628                 '.audio-marketing-club.com',    // by Fujio
6629                 '.brainers-task-manager.com',   // by Masatoshi
6630                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
6631                 '.brainersbuzz.com',                    // by Masatoshi
6632                 '.den4renz-marketing-club.com', // by Fujio
6633                 '.english-contents-club.com',   // by Masatoshi
6634                 '.fly-in-ads-japan.com',                // by Fujio
6635                 '.free-resalerights-giveaway.com',      // by Fujio
6636                 '.freegiveawaysecret.com',              // by Masatoshi
6637                 '.guaranteedvisitorpro.com',    // by Masatoshi
6638                 '.havads-japan.com',                    // by Masatoshi
6639                 '.info-business123.com',                // by Fujio
6640                 '.instant-marketing-club.com',  // by Fujio
6641                 '.internetmarketinggorinjyu.com',       // by Masatoshi
6642                 '.marketing-force-japan.com',   // by Fujio
6643                 '.masatoshikobayashi.com',              // by Fujio
6644                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
6645                 '.replytomatt.com',                             // by Fujio
6646                 '.santa-deal.com',                              // by Fujio
6647                 '.santa-deal-summer.com',               // by Fujio
6648                 '.scratch-card-factory.com',    // by Masatoshi
6649                 '.script4you-japan.com',                // by Fujio
6650                 '.sell1000000dollarinjapan.com',// by Fujio
6651                 '.squeeze-page-secret.com',             // by Masatoshi
6652                 '.viral-blog-square.com',               // by Fujio
6653                 '.viralarticle.com',                    // by Fujio
6654                 '.wowhoken.com',                                // by Fujio
6655
6656                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
6657                 '.brainerstelevision.com',
6658                 '.demosite4you.com',
6659                 '.keywordcatcherpro.com',
6660                 '.script-marketing-club.com',
6661
6662                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
6663                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
6664                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
6665                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
6666                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
6667                 '.brainerscode.com',    // by akada
6668                 '.brainerslive.com',    // by domain
6669                 '.brainersreview.com',  // by domain
6670                 '.brainerstest.com',    // by akada
6671                 '.otosecret.com',               // by domain
6672                 '.ultimate-marketing-weapon.com',       // by akada
6673                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
6674                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
6675
6676                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
6677                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
6678         ),
6679         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
6680         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
6681         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
6682         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
6683         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
6684                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
6685                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
6686                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
6687
6688                 // Redirects and affiliates:
6689                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
6690                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
6691                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
6692                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
6693                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
6694                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
6695                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
6696                 //   ...
6697
6698                 // Other suggestions:
6699                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
6700
6701                 // Blog posting at the same time
6702                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
6703                 //   2007/06/13 e123.info/archives/76
6704                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
6705                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
6706                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
6707         ),
6708         'info at kobeweb.jp' => array(
6709                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
6710                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
6711                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
6712         ),
6713         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
6714         'Infocart.jp' => array(         // by wai at infocart.jp
6715                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
6716                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
6717                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
6718
6719                 //inetnum:      60.32.154.176 - 60.32.154.183
6720                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
6721                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
6722         ),
6723         'Info-sniper.com' => array(
6724                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
6725                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
6726                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
6727         ),
6728         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
6729         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
6730         'JunSuzuki.com' => array(       // e-brainers.com related
6731                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
6732                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
6733         ),
6734         'Natsukih.net' => array(
6735                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
6736                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
6737                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
6738                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
6739
6740                 // by info at natsukih.net
6741                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
6742                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
6743                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
6744                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
6745                 '.5muryoureport.com',   // 210.251.253.230
6746                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
6747                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
6748                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
6749         ),
6750         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
6751                 '.11kanji.com',         // 211.10.131.88
6752                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
6753                 '.point-park.com',      // 211.10.131.88
6754                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
6755         ),
6756         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
6757         'PRJAPAN.co.jp' => array(
6758                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
6759                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
6760                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
6761                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
6762                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
6763                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
6764         ),
6765         'Rakuten.co.jp' => array(
6766                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
6767                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
6768         ),
6769         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
6770         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
6771         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
6772                 '.e123.info',
6773                 '.ialchemist.net',
6774                 '.j012.net',
6775                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
6776         ),
6777         'Viscose.jp' => array(
6778                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
6779                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
6780         ),
6781         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
6782 );
6783
6784 // --------------------------------------------------
6785
6786 $blocklist['Z'] = array(
6787         // Z: Yours
6788         //
6789         //'',
6790         //'',
6791         //'',
6792 );
6793
6794 ?>