spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.202 2010/12/15 16:07:38 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 //      'official/dev'  => FALSE,
  45 );
  46
  47 // 'list': Normal list
  48 $blocklist['list'] = array(
  49         'A-1'           => TRUE,        // General redirection services
  50         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  51         'B-1'           => TRUE,        // Web N.M spaces
  52         'B-2'           => TRUE,        // Jacked contents, something implanted
  53         'C'                     => TRUE,        // Exclusive spam domains
  54         //'D'           => TRUE,        // "Third party in good faith"s
  55         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  56         'Z'                     => TRUE,        // Yours
  57 );
  58
  59
  60 // --------------------------------------------------
  61 // Ignorance list
  62
  63 $blocklist['goodhost'] = array(
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65 );
  66
  67 $blocklist['official/dev'] = array(
  68         // PukiWiki-official/dev specific
  69         'pukiwiki.sourceforge.jp',
  70         '.nyaa.tk',     // (Paid *.tk domain, Expire on 2008-05-19)
  71         '.wanwan.tk',   // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         'emasaka.blog65.fc2.com',       // Text-to-Impress converter
  73         'ifastnet.com',                         // Server hosting
  74         'threefortune.ifastnet.com',    // Server hosting
  75         'sirakaba.s21.xrea.com',                // Ratbeta, known as PukiWiki hacker
  76         'desperadoes.biz',                      // YEAR OF THE CAT, PukiWiki skin designer
  77 );
  78
  79
  80 // --------------------------------------------------
  81 // A: Sample setting of
  82 // Existing URI redirection or masking services
  83
  84 $blocklist['A-1'] = array(
  85
  86         // A-1: General redirection or masking services -- by HTML meta, HTML frame, JavaScript,
  87         // web-based proxy, DNS subdomains, etc
  88         // http://en.wikipedia.org/wiki/URL_redirection
  89         //
  90         // as known as cheap URI obscuring services today,
  91         // for spammers and affiliate users dazed by money.
  92         //
  93         //   Messages from forerunners:
  94         //     idek.net
  95         //       "..., idek will stop accepting requests to
  96         //        create new urls. "
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     symy.jp
 104         //       "One or more users are using our URL redirect
 105         //        service for spam/botnet.
 106         //        So we closed this service."
 107         //     tinyclick.com
 108         //       "...stop offering it's free services because
 109         //        too many people were taking advantage of it"
 110         //     tr.im
 111         //       "The decision is based on waving the white
 112         //        flag on a never ending battle with spammers
 113         //        that relentlessly abuse tr.im."
 114         //     u.nu
 115         //        "Since the beginning, it has been plagued
 116         //         with abuse from spammers and other
 117         //         no-goodniks."
 118         //     xjs.org
 119         //       "We have been forced to close this facility
 120         //        due to a minority of knuckle draggers who
 121         //        abused this web site."
 122         //
 123         // Please notify us about this list with reason:
 124         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 125         //
 126         '0nz.org',
 127         '0rz.tw',
 128         '0url.com',
 129         '0zed.info',
 130         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 131         '123.que.jp',
 132         '12url.org',
 133         '*.15h.com',
 134         '*.1dr.biz',
 135         '1K.pl' => array(
 136                 '*.1k.pl',
 137                 '*.5g.pl',
 138                 '*.orq.pl',
 139         ),
 140         '1nk.us',
 141         '1url.org',
 142         '1url.in',
 143         '1webspace.org',
 144         '2am.jp',
 145         '2Ch.net' => array(
 146                 'ime.nu',
 147                 'ime.st',
 148         ),
 149         '2ch2.net',
 150         '2hop4.com',
 151         '2s.ca',
 152         '2site.com',
 153         '2url.org',
 154         '301url.com',
 155         '32url.com',
 156         '.3dg.de',
 157         '*.4bb.ru',
 158         'big5.51job.com',       ///gate/big5/
 159         '5jp.net',
 160         '.6url.com',
 161         '*.6x.to',
 162         '7ref.com',
 163         '82m.org',
 164         '*.8rf.com',
 165         '98.to',
 166         'abbrv.co.uk',
 167         '*.abwb.org',
 168         'acnw.de',
 169         'Active.ws' => array(
 170                 '*.321.cn',
 171                 '*.4x2.net',
 172                 'active.ws',
 173                 '*.better.ws',
 174                 '*.here.ws',
 175                 '*.mypiece.com',
 176                 '*.official.ws',
 177                 '*.ouch.ws',
 178                 '*.premium.ws',
 179                 '*.such.info',
 180                 '*.true.ws',
 181                 '*.visit.ws',
 182         ),
 183         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 184         'aifam.com',
 185         'All4WebMasters.pl' => array(
 186                 '*.ovp.pl',
 187                 '*.6-6-6.pl',
 188         ),
 189         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 190         'amoo.org',
 191         'web.archive.org',              ///web/2
 192         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 193                 'jmp2.net',
 194                 '2me.tw',
 195         ),
 196         'ataja.es',
 197         'ATBHost.com' => array(
 198                 '*.atbhost.com',
 199                 '*.bzhost.net',
 200         ),
 201         'atk.jp',
 202         'clearp.ath.cx',
 203         'athomebiz.com',
 204         'aukcje1.pl',
 205         'beam.to',
 206         '*.bebo.com',
 207         'beermapping.com',
 208         'besturl.in',
 209         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 210         'biglnk.com',
 211         'bingr.com',
 212         'bit.ly' => array(
 213                 'bit.ly',
 214                 'j.mp',
 215         ),
 216         'bittyurl.com',
 217         '*.bizz.cc',
 218         '*.blo.pl',
 219         '*.bo.pl',
 220         'briefurl.com',
 221         'brokenscript.com',
 222         'BucksoGen.com' => array(
 223                 '*.bucksogen.com',
 224                 '*.bulochka.org',
 225                 '*.korzhik.org',
 226                 '*.kovrizhka.org',
 227                 '*.pirozhok.org',
 228                 '*.plushka.org',
 229                 '*.pryanik.org',
 230                 '*.sushka.org',
 231         ),
 232         'budgethosts.org',
 233         'budu.com',                             // by peter.eder at imcworld.com
 234         'budurl.com',
 235         '*.buzznet.com',
 236         '*.bydl.com',
 237         'C-O.IN' => array(
 238                 '*.c-o.cc',
 239                 '*.c-o.in',
 240                 '*.coz.in',
 241                 '*.cq.bz',
 242         ),
 243         'c64.ch',
 244         'c711.com',
 245         '*.cej.pl',
 246         'checkasite.net',
 247         'url.chefhost.com',
 248         '*.chicappa.jp',
 249         'chilicity.com',
 250         'big5.china.com',               ///gate/big5/
 251         'chopurl.com',
 252         'christopherleestreet.com',
 253         'cintcm.com',
 254         '*.cjb.net',
 255         'cli.gs',
 256         'clipurl.com',
 257         '*.co.nr',
 258         'Comtech Enterprises ' => array(        // comteche.com
 259                 'tinyurl.name',
 260                 'tinyurl.us',
 261         ),
 262         'Cool168.com' => array(
 263                 '*.cool158.com',
 264                 '*.cool168.com',
 265                 '*.ko168.com',
 266                 '*.ko188.com',
 267         ),
 268         'Coolurl.de' => array(
 269                 'coolurl.de',
 270                 'dornenboy.de',
 271                 'eyeqweb.com',
 272                 'hardcore-porn.de',
 273                 'maschinen-bluten-nicht.de',
 274         ),
 275         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 276         'cutalink.com',
 277         '*.da.cx',
 278         '*.da.ru',
 279         'dae2.com',
 280         'dephine.org',
 281         'desiurl.com',
 282         'dhurl.com',
 283         'digbig.com',
 284         'Digipills.com' => array(
 285                 '*.digipills.com',
 286                 'minilien.com',
 287                 'tinylink.com',
 288         ),
 289         '*.discutbb.com',
 290         'DL.AM' => array(
 291                 '*.cx.la',
 292                 '*.dl.am',
 293         ),
 294         '*.dl.pl',
 295         '*.dmdns.com',
 296         'doiop.com',
 297         'drlinky.com',
 298         'durl.us',
 299         '*.dvdonly.ru',
 300         '*.dynu.ca',
 301         'dwarf.name',
 302         '*.eadf.com',
 303         'easyURL.net' => array(
 304                 '*.easyurl.net',
 305                 '.goshrink.com',
 306                 'ushrink.com',
 307         ),
 308         '.eazylink.net',        // 2010/08 by info at digitalinsights.biz
 309         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 310                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 311                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 312                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 313                 //   "Keep continuing to seek originality and contribute it to local,
 314                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 315                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 316                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 317                 // I'm so much impressed of the situation around this imported one today.
 318         'elfurl.com',
 319         'eny.pl',
 320         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 321                 '.mywiitime.com',
 322                 '.surfindark.com',              // webmaster at etechfocus.com
 323                 '.surfinshade.com',
 324                 '.surfinshadow.com',
 325                 '.surfinwind.com',
 326                 '.topsecretlive.com',
 327         ),
 328         '*.eu.org',
 329         'F2B.be' => array(
 330                 '*.f2b.be',
 331                 '*.freakz.eu',
 332                 '*.n0.be',
 333                 '*.n3t.nl',
 334                 '*.short.be',
 335                 '*.ssr.be',
 336                 '*.tweaker.eu',
 337         ),
 338         '*.fancyurl.com',
 339         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 340                 'blue11.jp',
 341                 'fanznet.com',
 342                 'katou.in',
 343                 'mymap.in',
 344                 'saitou.in',
 345                 'satou.in',
 346                 'susan.in',
 347         ),
 348         '.fe.pl',                       // Redirection and subdomain
 349         'ffwd.to',
 350         'url.fibiger.org',
 351         'FireMe.to' => array(
 352                 'fireme.to',
 353                 'nextdoor.to',
 354                 'ontheway.to',
 355         ),
 356         'flingk.com',
 357         'flog.jp',                      // careless redirector and bbs
 358         'fm7.biz',
 359         'fnbi.jp',
 360         '*.fnbi.jp',
 361         'forgeturl.com',
 362         '*.free.bg',
 363         'Freeservers.com' => array(     // United Online Web Services, Inc.
 364                 '*.4mg.com',
 365                 '*.4t.com',
 366                 '*.8m.com',
 367                 '*.8m.net',
 368                 '*.8k.com',
 369                 '*.faithweb.com',
 370                 '*.freehosting.net',
 371                 '*.freeservers.com',
 372                 '*.gq.nu',
 373                 '*.htmlplanet.com',
 374                 '*.itgo.com',
 375                 '*.iwarp.com',
 376                 '*.s5.com',
 377                 '*.scriptmania.com',
 378                 '*.tvheaven.com',
 379         ),
 380         '*.freewebpages.com',
 381         'FreeWebServices.net' => array( // Host Department LLC
 382                 '*.about.gs',   // Dead?
 383                 '*.about.tc',
 384                 '*.about.vg',
 385                 '*.aboutus.gs',
 386                 '*.aboutus.ms',
 387                 '*.aboutus.tc',
 388                 '*.aboutus.vg',
 389                 '*.biografi.biz',
 390                 '*.biografi.info',
 391                 '*.biografi.org',
 392                 '*.biografi.us',
 393                 '*.datadiri.biz',
 394                 '*.datadiri.cc',
 395                 '*.datadiri.com',
 396                 '*.datadiri.info',
 397                 '*.datadiri.net',
 398                 '*.datadiri.org',
 399                 '*.datadiri.tv',
 400                 '*.datadiri.us',
 401                 '*.ecv.gs',
 402                 '*.ecv.ms',
 403                 '*.ecv.tc',
 404                 '*.ecv.vg',
 405                 '*.eprofile.us',
 406                 '*.go2net.ws',
 407                 '*.hits.io',
 408                 '*.hostingweb.us',
 409                 '*.hub.io',
 410                 '*.indo.bz',
 411                 '*.indo.cc',
 412                 '*.indo.gs',
 413                 '*.indo.ms',
 414                 '*.indo.tc',
 415                 '*.indo.vg',
 416                 '*.infinitehosting.net',
 417                 '*.infinites.net',
 418                 '*.lan.io',
 419                 '*.max.io',
 420                 '*.mycv.bz',
 421                 '*.mycv.nu',
 422                 '*.mycv.tv',
 423                 '*.myweb.io',
 424                 '*.ourprofile.biz',
 425                 '*.ourprofile.info',
 426                 '*.ourprofile.net',     // Dead?
 427                 '*.ourprofile.org',
 428                 '*.ourprofile.us',
 429                 '*.profil.bz',
 430                 '*.profil.cc',
 431                 '*.profil.cn',
 432                 '*.profil.gs',
 433                 '*.profil.in',
 434                 '*.profil.ms',
 435                 '*.profil.tc',
 436                 '*.profil.tv',
 437                 '*.profil.vg',  // ?
 438                 '*.site.io',
 439                 '*.wan.io',
 440                 '*.web-cam.ws',
 441                 '*.webs.io',
 442                 '*.zip.io',
 443         ),
 444         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 445         '*.fx.to',
 446         'fyad.org',
 447         'fype.com',
 448         'gentleurl.net',
 449         'Get2.us' => array(
 450                 '*.get2.us',
 451                 '*.hasballs.com',
 452                 '*.ismyidol.com',
 453                 '*.spotted.us',
 454                 '*.went2.us',
 455                 '*.wentto.us',
 456         ),
 457         'glinki.com',
 458         '*.globalredirect.com',
 459         'gnu.vu',
 460         '*.go.cc',
 461         'Google.com' => array(
 462         //              google.com/translate_c\?u=(?:http://)?
 463                 'goo.gl',       // by (dns-admin at google.com)
 464         ),
 465         'goonlink.com',
 466         '.gourl.org',
 467         '.greatitem.com',
 468         'gzurl.com',
 469         'url.grillsportverein.de',
 470         'Harudake.net' => array('*.hyu.jp'),
 471         'hatena.ne.jp related' => array(
 472                 'htn.to',       // 2010-09 59.106.108.106 (hatena.ne.jp is 59.106.108.106)
 473         ),
 474         'Hattinger Linux User Group' => array('short.hatlug.de'),
 475         'Hexten.net' => array('lyxus.net'),
 476         'here.is',
 477         'HispaVista.com' => array(
 478                 '*.blogdiario.com',
 479                 '*.hispavista.com',
 480                 '.galeon.com',
 481         ),
 482         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 483                 '*.8l.pl',
 484                 '*.blg.pl',
 485                 '*.czytajto.pl',
 486                 '*.ryj.pl',
 487                 '*.xit.pl',
 488                 '*.xlc.pl',
 489                 '*.hk.pl',
 490                 '*.home.pl',
 491                 '*.of.pl',
 492         ),
 493         'hort.net',
 494         'free4.hostrocket.com',
 495         '*.hotindex.ru',
 496         'HotRedirect.com' => array(
 497                 '*.coolhere.com',
 498                 '*.homepagehere.com',
 499                 '*.hothere.com',
 500                 '*.mustbehere.com',
 501                 '*.onlyhere.net',
 502                 '*.pagehere.com',
 503                 '*.surfhere.net',
 504                 '*.zonehere.com',
 505         ),
 506         'hotshorturl.com',
 507         'hotwebcomics.com',     ///search_redirect.php
 508         'hurl.to',
 509         '*.hux.de',
 510         '*.i89.us',
 511         'iat.net',                      // 74.208.58.130 by Tony Carter
 512         'ibm.com',                      ///links (Correct it)
 513         '*.iceglow.com',
 514         'internetadresi.com' => array (
 515                 'rxbuycheap.com',
 516                 'rxcheapwestern.com',
 517         ),
 518         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 519         'Ideas para Nuevos Mercados SL' => array(
 520                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 521                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 522                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 523                 // by edgar bortolin (oscar at i4nm.com)
 524                 // by Edgar Bortolin  (oscar at i4nm.com)
 525                 // by oscar florez (oscar at i4nm.com)
 526                 // by Oscar Florez (oscar at red-es.com)
 527                 // by covadonga del valle (oscar at i4nm.com)
 528                 '*.ar.gd',
 529                 '*.ar.gs',      // ns *.nora.net
 530                 '*.ar.kz',      // by oscar
 531                 '*.ar.nu',      // by Edgar
 532                 '*.ar.tc',      // by oscar
 533                 '*.ar.vg',      // by oscar
 534                 '*.bo.kz',      // by oscar
 535                 '*.bo.nu',      // by covadonga
 536                 '*.bo.tc',      // by oscar
 537                 '*.bo.tf',      // by Oscar
 538                 '*.bo.vg',      // by oscar
 539                 '*.br.gd',
 540                 '*.br.gs',      // ns *.nora.net
 541                 '*.br.nu',      // by edgar
 542                 '*.br.vg',      // by oscar
 543                 '*.ca.gs',      // by oscar
 544                 '*.ca.kz',      // by oscar
 545                 '*.cl.gd',      // by oscar
 546                 '*.cl.kz',      // by oscar
 547                 '*.cl.nu',      // by edgar
 548                 '*.cl.tc',      // by oscar
 549                 '*.cl.tf',      // by Oscar
 550                 '*.cl.vg',      // by oscar
 551                 '*.col.nu',     // by Edgar
 552                 '*.cr.gs',      // ns *.nora.net
 553                 '*.cr.kz',      // by oscar
 554                 '*.cr.nu',      // by edgar
 555                 '*.cr.tc',      // by oscar
 556                 '*.cu.tc',      // by oscar
 557                 '*.do.kz',      // by oscar
 558                 '*.do.nu',      // by edgar
 559                 '*.ec.kz',      // by edgar
 560                 '*.ec.nu',      // by Edgar
 561                 '*.ec.tf',      // by Oscar
 562                 '*.es.kz',      // by oscar
 563                 '*.eu.kz',      // by oscar
 564                 '*.gt.gs',      // ns *.nora.net
 565                 '*.gt.tc',      // by oscar
 566                 '*.gt.tf',      // by Oscar
 567                 '*.gt.vg',      // by Oscar
 568                 '*.hn.gs',      // ns *.nora.net
 569                 '*.hn.tc',      // by oscar
 570                 '*.hn.tf',      // by Oscar
 571                 '*.hn.vg',      // by oscar
 572                 '*.mx.gd',
 573                 '*.mx.gs',      // ns *.nora.net
 574                 '*.mx.kz',      // by oscar
 575                 '*.mx.vg',      // by oscar
 576                 '*.ni.kz',      // by oscar
 577                 '*.pa.kz',      // by oscar
 578                 '*.pe.kz',      // by oscar
 579                 '*.pe.nu',      // by Edgar
 580                 '*.pr.kz',      // by oscar
 581                 '*.pr.nu',      // by edgar
 582                 '*.pt.gs',      // ns *.nora.net
 583                 '*.pt.kz',      // by edgar
 584                 '*.pt.nu',      // by edgar
 585                 '*.pt.tc',      // by oscar
 586                 '*.pt.tf',      // by Oscar
 587                 '*.py.gs',      // ns *.nora.net
 588                 '*.py.nu',      // by edgar
 589                 '*.py.tc',      // by oscar
 590                 '*.py.tf',      // by Oscar
 591                 '*.py.vg',      // by oscar
 592                 '*.sv.tc',      // by oscar
 593                 '*.usa.gs',     // ns *.nora.net
 594                 '*.uy.gs',      // ns *.nora.net
 595                 '*.uy.kz',      // by oscar
 596                 '*.uy.nu',      // by edgar
 597                 '*.uy.tc',      // by oscar
 598                 '*.uy.tf',      // by Oscar
 599                 '*.uy.vg',      // by oscar
 600                 '*.ve.gs',      // by oscar
 601                 '*.ve.tc',      // by oscar
 602                 '*.ve.tf',      // by Oscar
 603                 '*.ve.vg',      // by oscar
 604                 '*.ven.nu',     // by edgar
 605         ),
 606         'ie.to',
 607         'igoto.co.uk',
 608         'ilook.tw',
 609         'indianpad.com',                ///view/
 610         'iNetwork.co.il' => array(
 611                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 612                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 613                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 614         ),
 615         '*.infogami.com',
 616         'infotop.jp',
 617         'ipoo.org',
 618         'IR.pl' => array(
 619                 '*.aj.pl',
 620                 '*.aliasy.org',
 621                 '*.gu.pl',
 622                 '*.hu.pl',
 623                 '*.ir.pl',
 624                 '*.jo.pl',
 625                 '*.su.pl',
 626                 '*.td.pl',
 627                 '*.uk.pl',
 628                 '*.uy.pl',
 629                 '*.xa.pl',
 630                 '*.zj.pl',
 631         ),
 632         'irotator.com',
 633         '.iwebtool.com',
 634         'j6.bz',
 635         'jeeee.net',
 636         'is.gd',
 637         'Jaze Redirect Services' => array(
 638                 '*.arecool.net',
 639                 '*.iscool.net',
 640                 '*.isfun.net',
 641                 '*.tux.nu',
 642         ),
 643         '*.jed.pl',
 644         'JeremyJohnstone.com' => array('url.vg'),
 645         'jemurl.com',
 646         'jggj.net',
 647         'jpan.jp',
 648         'josh.nu',
 649         'kat.cc',
 650         'Kickme.to' => array(
 651                 '.1024bit.at',
 652                 '.128bit.at',
 653                 '.16bit.at',
 654                 '.256bit.at',
 655                 '.32bit.at',
 656                 '.512bit.at',
 657                 '.64bit.at',
 658                 '.8bit.at',
 659                 '.adores.it',
 660                 '.again.at',
 661                 '.allday.at',
 662                 '.alone.at',
 663                 '.altair.at',
 664                 '.american.at',
 665                 '.amiga500.at',
 666                 '.ammo.at',
 667                 '.amplifier.at',
 668                 '.amstrad.at',
 669                 '.anglican.at',
 670                 '.angry.at',
 671                 '.around.at',
 672                 '.arrange.at',
 673                 '.australian.at',
 674                 '.baptist.at',
 675                 '.basque.at',
 676                 '.battle.at',
 677                 '.bazooka.at',
 678                 '.berber.at',
 679                 '.blackhole.at',
 680                 '.booze.at',
 681                 '.bosnian.at',
 682                 '.brainiac.at',
 683                 '.brazilian.at',
 684                 '.bummer.at',
 685                 '.burn.at',
 686                 '.c-64.at',
 687                 '.catalonian.at',
 688                 '.catholic.at',
 689                 '.chapel.at',
 690                 '.chills.it',
 691                 '.christiandemocrats.at',
 692                 '.cname.at',
 693                 '.colors.at',
 694                 '.commodore.at',
 695                 '.commodore64.at',
 696                 '.communists.at',
 697                 '.conservatives.at',
 698                 '.conspiracy.at',
 699                 '.cooldude.at',
 700                 '.craves.it',
 701                 '.croatian.at',
 702                 '.cuteboy.at',
 703                 '.dancemix.at',
 704                 '.danceparty.at',
 705                 '.dances.it',
 706                 '.danish.at',
 707                 '.dealing.at',
 708                 '.deep.at',
 709                 '.democrats.at',
 710                 '.digs.it',
 711                 '.divxlinks.at',
 712                 '.divxmovies.at',
 713                 '.divxstuff.at',
 714                 '.dizzy.at',
 715                 '.does.it',
 716                 '.dork.at',
 717                 '.drives.it',
 718                 '.dutch.at',
 719                 '.dvdlinks.at',
 720                 '.dvdmovies.at',
 721                 '.dvdstuff.at',
 722                 '.emulators.at',
 723                 '.end.at',
 724                 '.english.at',
 725                 '.eniac.at',
 726                 '.error403.at',
 727                 '.error404.at',
 728                 '.evangelism.at',
 729                 '.exhibitionist.at',
 730                 '.faith.at',
 731                 '.fight.at',
 732                 '.finish.at',
 733                 '.finnish.at',
 734                 '.forward.at',
 735                 '.freebie.at',
 736                 '.freemp3.at',
 737                 '.french.at',
 738                 '.graduatejobs.at',
 739                 '.greenparty.at',
 740                 '.grunge.at',
 741                 '.hacked.at',
 742                 '.hang.at',
 743                 '.hangup.at',
 744                 '.has.it',
 745                 '.hide.at',
 746                 '.hindu.at',
 747                 '.htmlpage.at',
 748                 '.hungarian.at',
 749                 '.icelandic.at',
 750                 '.independents.at',
 751                 '.invisible.at',
 752                 '.is-chillin.it',
 753                 '.is-groovin.it',
 754                 '.japanese.at',
 755                 '.jive.at',
 756                 '.kickass.at',
 757                 '.kickme.to',
 758                 '.kindergarden.at',
 759                 '.knows.it',
 760                 '.kurd.at',
 761                 '.labour.at',
 762                 '.leech.at',
 763                 '.liberals.at',
 764                 '.linuxserver.at',
 765                 '.liqour.at',
 766                 '.lovez.it',
 767                 '.makes.it',
 768                 '.maxed.at',
 769                 '.means.it',
 770                 '.meltdown.at',
 771                 '.methodist.at',
 772                 '.microcomputers.at',
 773                 '.mingle.at',
 774                 '.mirror.at',
 775                 '.moan.at',
 776                 '.mormons.at',
 777                 '.musicmix.at',
 778                 '.nationalists.at',
 779                 '.needz.it',
 780                 '.nerds.at',
 781                 '.neuromancer.at',
 782                 '.newbie.at',
 783                 '.nicepage.at',
 784                 '.ninja.at',
 785                 '.norwegian.at',
 786                 '.ntserver.at',
 787                 '.owns.it',
 788                 '.paint.at',
 789                 '.palestinian.at',
 790                 '.phoneme.at',
 791                 '.phreaking.at',
 792                 '.playz.it',
 793                 '.polish.at',
 794                 '.popmusic.at',
 795                 '.portuguese.at',
 796                 '.powermac.at',
 797                 '.processor.at',
 798                 '.prospects.at',
 799                 '.protestant.at',
 800                 '.rapmusic.at',
 801                 '.raveparty.at',
 802                 '.reachme.at',
 803                 '.reads.it',
 804                 '.reboot.at',
 805                 '.relaxed.at',
 806                 '.republicans.at',
 807                 '.researcher.at',
 808                 '.reset.at',
 809                 '.resolve.at',
 810                 '.retrocomputers.at',
 811                 '.rockparty.at',
 812                 '.rocks.it',
 813                 '.rollover.at',
 814                 '.rough.at',
 815                 '.rules.it',
 816                 '.rumble.at',
 817                 '.russian.at',
 818                 '.says.it',
 819                 '.scared.at',
 820                 '.seikh.at',
 821                 '.serbian.at',
 822                 '.short.as',
 823                 '.shows.it',
 824                 '.silence.at',
 825                 '.simpler.at',
 826                 '.sinclair.at',
 827                 '.singz.it',
 828                 '.slowdown.at',
 829                 '.socialists.at',
 830                 '.spanish.at',
 831                 '.split.at',
 832                 '.stand.at',
 833                 '.stoned.at',
 834                 '.stumble.at',
 835                 '.supercomputer.at',
 836                 '.surfs.it',
 837                 '.swedish.at',
 838                 '.swims.it',
 839                 '.synagogue.at',
 840                 '.syntax.at',
 841                 '.syntaxerror.at',
 842                 '.techie.at',
 843                 '.temple.at',
 844                 '.thinkbig.at',
 845                 '.thirsty.at',
 846                 '.throw.at',
 847                 '.toplist.at',
 848                 '.trekkie.at',
 849                 '.trouble.at',
 850                 '.turkish.at',
 851                 '.unexplained.at',
 852                 '.unixserver.at',
 853                 '.vegetarian.at',
 854                 '.venture.at',
 855                 '.verycool.at',
 856                 '.vic-20.at',
 857                 '.viewing.at',
 858                 '.vintagecomputers.at',
 859                 '.virii.at',
 860                 '.vodka.at',
 861                 '.wannabe.at',
 862                 '.webpagedesign.at',
 863                 '.wheels.at',
 864                 '.whisper.at',
 865                 '.whiz.at',
 866                 '.wonderful.at',
 867                 '.zor.org',
 868                 '.zx80.at',
 869                 '.zx81.at',
 870                 '.zxspectrum.at',
 871         ),
 872         'kisaweb.com',
 873         'krotki.pl',
 874         'kuerzer.de',
 875         '*.kupisz.pl',
 876         'kuso.cc',
 877         '*.l8t.com',
 878         'lame.name',
 879         'lediga.st',
 880         'liencourt.com',
 881         'liteurl.com',
 882         'linkachi.com',
 883         'linkezy.com',
 884         'linkfrog.net',
 885         'linkook.com',
 886         'linkyme.com',
 887         'linkzip.net',
 888         'lispurl.com',
 889         'lnk.in',
 890         'makeashorterlink.com',
 891         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 892                 '*.3gp.fr',
 893                 '*.gtx.fr',
 894                 '*.ici.st',
 895                 '*.max.st',
 896                 '*.nn.cx',              // ns *.sivit.org
 897                 '*.site.cx',    // ns *.sivit.org
 898                 '*.user.fr',
 899                 '*.zxr.fr',
 900         ),
 901         'mcturl.com',
 902         'memurl.com',
 903         'Metamark.net' => array('xrl.us'),
 904         'midgeturl.com',
 905         'Minilink.org' => array('lnk.nu'),
 906         'miniurl.org',
 907         'miniurl.pl',
 908         'mixi.bz',
 909         'mo-v.jp',
 910         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 911                 '.com.md',
 912                 '.co.md',
 913                 '.org.md',
 914                 '.info.md',
 915                 '.host.md',
 916         ),
 917         'monster-submit.com',
 918         'mooo.jp',
 919         'moourl.com',
 920         'murl.net',
 921         'myactivesurf.net',
 922         'mytinylink.com',
 923         'myurl.in',
 924         'myurl.com.tw',
 925         'nanoref.com',
 926         'Ne1.net' => array(
 927                 '*.ne1.net',
 928                 '*.r8.org',
 929         ),
 930         'Nashville Linux Users Group' => array('nlug.org'),
 931         'not2long.net',
 932         '*.notlong.com',
 933         '*.nuv.pl',
 934         'ofzo.be',
 935         '*.ontheinter.net',
 936         'ourl.org',
 937         'ov2.net',                              // frame
 938         'ow.ly',
 939         '*.ozonez.com',
 940         'pagebang.com',
 941         'palurl.com',
 942         '*.paulding.net',
 943         'phpfaber.org',
 944         'pygmyurl.com',
 945         'pnope.com',
 946         'prettylink.com',
 947         'PROXID.net' => array(  // also xRelay.net
 948                 '*.asso.ws',
 949                 '*.corp.st',
 950                 '*.euro.tm',
 951                 '*.perso.tc',
 952                 '*.site.tc',
 953                 '*.societe.st',
 954         ),
 955         'qqa.jp',
 956         'qrl.jp',
 957         'qurl.net',
 958         'qwer.org',
 959         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 960         'radiobase.net',
 961         'Rakuten.co.jp' => array(
 962                 'pt.afl.rakuten.co.jp', ///c/
 963         ),
 964         'RedirectFree.com' => array(
 965                 '*.red.tc',
 966                 '*.redirectfree.com',
 967                 '*.sky.tc',
 968                 '*.the.vg',
 969         ),
 970         'redirme.com',
 971         'redirectme.to',
 972         'relic.net',
 973         'rezma.info',
 974         'rio.st',
 975         'rlink.org',
 976         '*.rmcinfo.fr',
 977         'roo.to',               // Seems closed, says "bye-bye"
 978         'rubyurl.com',
 979         '*.runboard.com',
 980         'runurl.com',
 981         's-url.net',
 982         's1u.net',
 983         'SG5.co.uk' => array(
 984                 '*.sg5.co.uk',
 985                 '*.sg5.info',
 986         ),
 987         'Shim.net' => array(
 988                 '*.0kn.com',
 989                 '*.2cd.net',
 990                 '*.freebiefinders.net',
 991                 '*.freegaming.org',
 992                 '*.op7.net',
 993                 '*.shim.net',
 994                 '*.v9z.com',
 995         ),
 996         'big5.shippingchina.com',
 997         'shorl.com',
 998         'shortenurl.com',
 999         'shorterlink.com',
1000         'shortlinks.co.uk',
1001         'shorttext.com',
1002         'shorturl-accessanalyzer.com',
1003         'Shortify.com' => array(
1004                 '74678439.com',
1005                 'shortify.com',
1006         ),
1007         'shortlink.co.uk',
1008         'ShortURL.com' => array(
1009                 '*.1sta.com',
1010                 '*.24ex.com',
1011                 '*.2fear.com',
1012                 '*.2fortune.com',
1013                 '*.2freedom.com',
1014                 '*.2hell.com',
1015                 '*.2savvy.com',
1016                 '*.2truth.com',
1017                 '*.2tunes.com',
1018                 '*.2ya.com',
1019                 '*.alturl.com',
1020                 '*.antiblog.com',
1021                 '*.bigbig.com',
1022                 '*.dealtap.com',
1023                 '*.ebored.com',
1024                 '*.echoz.com',
1025                 '*.filetap.com',
1026                 '*.funurl.com',
1027                 '*.headplug.com',
1028                 '*.hereweb.com',
1029                 '*.hitart.com',
1030                 '*.mirrorz.com',
1031                 '*.shorturl.com',
1032                 '*.spyw.com',
1033                 '*.vze.com',
1034         ),
1035         'shrinkalink.com',
1036         'shrinkthatlink.com',
1037         'shrinkurl.us',
1038         'shrt.org',
1039         'shrunkurl.com',
1040         'shurl.org',
1041         'shurl.net',
1042         'sid.to',
1043         'simurl.com',
1044         'sitefwd.com',
1045         'Sitelutions.com' => array(
1046                 '*.assexy.as',
1047                 '*.athersite.com',
1048                 '*.athissite.com',
1049                 '*.bestdeals.at',
1050                 '*.byinter.net',
1051                 '*.findhere.org',
1052                 '*.fw.nu',
1053                 '*.isgre.at',
1054                 '*.isthebe.st',
1055                 '*.kwik.to',
1056                 '*.lookin.at',
1057                 '*.lowestprices.at',
1058                 '*.onthenet.as',
1059                 '*.ontheweb.nu',
1060                 '*.pass.as',
1061                 '*.passingg.as',
1062                 '*.redirect.hm',
1063                 '*.rr.nu',
1064                 '*.ugly.as',
1065         ),
1066         '*.skracaj.pl',
1067         'skiltechurl.com',
1068         'skocz.pl',
1069         'slimurl.jp',
1070         'slink.in',
1071         'smallurl.eu',
1072         'smurl.name',
1073         'sn.im',
1074         'snipurl.com',
1075         'sp-nov.net',
1076         'splashblog.com',
1077         'spod.cx',
1078         '*.spydar.com',
1079         'StumbleUpon.com' => array(
1080                 'su.pr',        // by (hostmaster at stumbleupon.com)
1081         ),
1082         'Subdomain.gr' => array(
1083                 '*.p2p.gr',
1084                 '*.subdomain.gr',
1085         ),
1086         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1087         'surl.se',
1088         'surl.ws',
1089         'tdurl.com',
1090         'tighturl.com',
1091         'tiniuri.com',
1092         'tiny.cc',
1093         'tiny.pl',
1094         'tiny2go.com',
1095         'tinylink.eu',
1096         'tinylinkworld.com',
1097         'tinypic.com',
1098         'tinyr.us',
1099         'TinyURL.com' => array(
1100                 'tinyurl.com',
1101                 'preview.tinyurl.com',
1102                 'tinyurl.co.uk',
1103         ),
1104         'titlien.com',
1105         '*.tlg.pl',
1106         'tlurl.com',
1107         'twurl.nl',             // 2010-09 87.255.53.196 (redirects tweetburner.com 87.255.53.196)
1108         'link.toolbot.com',
1109         'tnij.org',
1110         'Tokelau ccTLD' => array('.tk'),
1111         'toila.net',
1112         '*.toolbot.com',
1113         '*.torontonian.com',
1114         'trimurl.com',
1115         //'ttu.cc',             // Seems closed
1116         'turl.jp',
1117         'Twitter.com' => array(
1118                 't.co',         // by (cofounders at cointernet.co)
1119                 'twt.tl',
1120         ),
1121         '*.tz4.com',
1122         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1123                 '*.1.to',
1124                 '*.4.to',
1125                 '*.5.to',
1126                 '*.82.to',
1127                 '*.s.to',
1128                 '*.u.to',
1129                 '*.ce.to',
1130                 '*.cz.to',
1131                 '*.if.to',
1132                 '*.it.to',
1133                 '*.kp.to',
1134                 '*.ne.to',
1135                 '*.ok.to',
1136                 '*.pc.to',
1137                 '*.tv.to',
1138                 '*.dd.to',
1139                 '*.ee.to',
1140                 '*.hh.to',
1141                 '*.kk.to',
1142                 '*.mm.to',
1143                 '*.qq.to',
1144                 '*.xx.to',
1145                 '*.zz.to',
1146                 '*.ivy.to',
1147                 '*.joa.to',
1148                 '*.ever.to',
1149                 '*.mini.to',
1150         ),
1151         'u-go.to',
1152         'uchinoko.in',
1153         'Ulimit.com' => array(
1154                 '*.be.tf',
1155                 '*.best.cd',
1156                 '*.bsd-fan.com',
1157                 '*.c0m.st',
1158                 '*.ca.tc',
1159                 '*.clan.st',
1160                 '*.com02.com',
1161                 '*.en.st',
1162                 '*.euro.st',
1163                 '*.fr.fm',
1164                 '*.fr.st',
1165                 '*.fr.vu',
1166                 '*.gr.st',
1167                 '*.ht.st',
1168                 '*.int.ms',
1169                 '*.it.st',
1170                 '*.java-fan.com',
1171                 '*.linux-fan.com',
1172                 '*.mac-fan.com',
1173                 '*.mp3.ms',
1174                 '*.qc.tc',
1175                 '*.sp.st',
1176                 '*.suisse.st',
1177                 '*.t2u.com',
1178                 '*.unixlover.com',
1179                 '*.zik.mu',
1180         ),
1181         'urltea.com',
1182         '*.uni.cc',
1183         'UNONIC.com' => array(
1184                 '*.at.tf',      // AlpenNIC
1185                 '*.bg.tf',
1186                 '*.ca.tf',
1187                 '*.ch.tf',      // AlpenNIC
1188                 '*.cz.tf',
1189                 '*.de.tf',      // AlpenNIC
1190                 '*.edu.tf',
1191                 '*.eu.tf',
1192                 '*.int.tf',
1193                 '*.net.tf',
1194                 '*.pl.tf',
1195                 '*.ru.tf',
1196                 '*.sg.tf',
1197                 '*.us.tf',
1198         ),
1199         'Up.pl' => array(
1200                 '.69.pl',                       // by nsk101869
1201                 '.crack.pl',            // by nsk101869
1202                 '.film.pl',                     // by sibr19002
1203                 '.h2o.pl',                      // by nsk101869
1204                 '.hostessy.pl',         // by nsk101869
1205                 '.komis.pl',            // by nsk101869
1206                 '.laski.pl',            // by nsk101869
1207                 '.modelki.pl',          // by nsk101869
1208                 '.muzyka.pl',           // by sibr19002
1209                 '.nastolatki.pl',       // by nsk101869
1210                 '.obuwie.pl',           // by nsk101869
1211                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1212                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1213                 '.sexchat.pl',          // by nsk101869
1214                 '.sexlive.pl',          // by nsk101869
1215                 '.tv.pl',                       // by nsk101869
1216                 '.up.pl',                       // by nsk101869
1217                 '.video.pl',            // by nsk101869
1218                 '.xp.pl',                       // nsk101869
1219         ),
1220         '*.uploadr.com',
1221         'url.ie',
1222         'url4.net',
1223         'url-c.com',
1224         'urlbee.com',
1225         'urlbounce.com',
1226         'urlcut.com',
1227         'urlcutter.com',
1228         'urlic.com',
1229         'urlin.it',
1230         'urlkick.com',
1231         'URLLogs.com' => array(
1232                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1233                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1234         ),
1235         '*.urlproxy.com',
1236         'urlser.com',
1237         'urlshorteningservicefortwitter.com',
1238         'urlsnip.com',
1239         'urlzip.de',
1240         'urlx.org',
1241         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1242         'utun.jp',
1243         'uxxy.com',
1244         'uzo.in',                       // 2010-09 redirects, and subdomain
1245         '*.v27.net',
1246         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1247                 '*.all.at',
1248                 '*.back.to',
1249                 '*.beam.at',
1250                 '*.been.at',
1251                 '*.bite.to',
1252                 '*.board.to',
1253                 '*.bounce.to',
1254                 '*.bowl.to',
1255                 '*.break.at',
1256                 '*.browse.to',
1257                 '*.change.to',
1258                 '*.chip.ms',
1259                 '*.connect.to',
1260                 '*.crash.to',
1261                 '*.cut.by',
1262                 '*.direct.at',
1263                 '*.dive.to',
1264                 '*.drink.to',
1265                 '*.drive.to',
1266                 '*.drop.to',
1267                 '*.easy.to',
1268                 '*.everything.at',
1269                 '*.fade.to',
1270                 '*.fanclub.ms',
1271                 '*.firstpage.de',
1272                 '*.fly.to',
1273                 '*.flying.to',
1274                 '*.fortunecity.co.uk',
1275                 '*.fortunecity.com',
1276                 '*.forward.to',
1277                 '*.fullspeed.to',
1278                 '*.fun.ms',
1279                 '*.gameday.de',
1280                 '*.germany.ms',
1281                 '*.get.to',
1282                 '*.getit.at',
1283                 '*.hard-ware.de',
1284                 '*.hello.to',
1285                 '*.hey.to',
1286                 '*.hop.to',
1287                 '*.how.to',
1288                 '*.hp.ms',
1289                 '*.jump.to',
1290                 '*.kiss.to',
1291                 '*.listen.to',
1292                 '*.mediasite.de',
1293                 '*.megapage.de',
1294                 '*.messages.to',
1295                 '*.mine.at',
1296                 '*.more.at',
1297                 '*.more.by',
1298                 '*.move.to',
1299                 '*.musicpage.de',
1300                 '*.mypage.org',
1301                 '*.mysite.de',
1302                 '*.nav.to',
1303                 '*.notrix.at',
1304                 '*.notrix.ch',
1305                 '*.notrix.de',
1306                 '*.notrix.net',
1307                 '*.on.to',
1308                 '*.page.to',
1309                 '*.pagina.de',
1310                 '*.played.by',
1311                 '*.playsite.de',
1312                 '*.privat.ms',
1313                 '*.quickly.to',
1314                 '*.redirect.to',
1315                 '*.rulestheweb.com',
1316                 '*.run.to',
1317                 '*.scroll.to',
1318                 '*.seite.ms',
1319                 '*.shortcut.to',
1320                 '*.skip.to snap.to',
1321                 '*.soft-ware.de',
1322                 '*.start.at',
1323                 '*.stick.by',
1324                 '*.surf.to',
1325                 '*.switch.to',
1326                 '*.talk.to',
1327                 '*.tip.nu',
1328                 '*.top.ms',
1329                 '*.transfer.to',
1330                 '*.travel.to',
1331                 '*.turn.to',
1332                 '*.vacations.to',
1333                 '*.videopage.de',
1334                 '*.virtualpage.de',
1335                 '*.w3.to',
1336                 '*.walk.to',
1337                 '*.warp9.to',
1338                 '*.window.to',
1339                 '*.yours.at',
1340                 '*.zap.to',
1341                 '*.zip.to',
1342         ),
1343         'VDirect.com' => array(
1344                 '*.emailme.net',
1345                 '*.getto.net',
1346                 '*.inetgames.com',
1347                 '*.netbounce.com',
1348                 '*.netbounce.net',
1349                 '*.oneaddress.net',
1350                 '*.snapto.net',
1351                 '*.vdirect.com',
1352                 '*.vdirect.net',
1353                 '*.webrally.net',
1354         ),
1355         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1356         'vgo2.com',
1357         'Voila.fr' => array('r.voila.fr'),      // Fix it
1358         'w3t.org',
1359         'wapurl.co.uk',
1360         'Wb.st' => array(
1361                 '*.team.st',
1362                 '*.wb.st',
1363         ),
1364         'wbkt.net',
1365         'WebAlias.com' => array(
1366                 '*.andmuchmore.com',
1367                 '*.browser.to',
1368                 '*.escape.to',
1369                 '*.fornovices.com',
1370                 '*.fun.to',
1371                 '*.got.to',
1372                 '*.hottestpix.com',
1373                 '*.imegastores.com',
1374                 '*.latest-info.com',
1375                 '*.learn.to',
1376                 '*.moviefever.com',
1377                 '*.mp3-archives.com',
1378                 '*.myprivateidaho.com',
1379                 '*.radpages.com',
1380                 '*.remember.to',
1381                 '*.resourcez.com',
1382                 '*.return.to',
1383                 '*.sail.to',
1384                 '*.sports-reports.com',
1385                 '*.stop.to',
1386                 '*.thrill.to',
1387                 '*.tophonors.com',
1388                 '*.uncutuncensored.com',
1389                 '*.up.to',
1390                 '*.veryweird.com',
1391                 '*.way.to',
1392                 '*.web-freebies.com',
1393                 '.webalias.com',
1394                 '*.webdare.com',
1395                 '*.xxx-posed.com',
1396         ),
1397         'webmasterwise.com',
1398         'witherst at hotmail.com' => array(     // by Tim Withers
1399                 '*.associates-program.com',
1400                 '*.casinogopher.com',
1401                 '*.ezpagez.com',
1402                 '*.vgfaqs.com',
1403         ),
1404         'wittylink.com',
1405         'wiz.sc',                       // tiny.cc related
1406         'X50.us' => array(
1407                 '*.i50.de',
1408                 '*.x50.us',
1409         ),
1410         'big5.xinhuanet.com',   ///gate/big5/
1411         'xhref.com',
1412         'Xn6.net' => array(
1413                 '*.9ax.net',
1414                 '*.xn6.net',
1415         ),
1416         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1417         '.y11.net',
1418         'Yahoo.co.jp' => array(
1419                 'wrs.search.yahoo.co.jp',
1420         ),
1421         'Yahoo.com' => array(
1422                 'rds.yahoo.com',
1423         ),
1424         'yatuc.com',
1425         'yep.it',
1426         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1427                 '*.yesns.com',
1428                 '*.srv4u.net',
1429                 //blogne.com
1430         ),
1431         'yumlum.com',
1432         'yurel.com',
1433         'Z.la' => array(
1434                 'z.la',
1435                 't.z.la',
1436         ),
1437         'zaable.com',
1438         'zapurl.com',
1439         'zarr.co.uk',
1440         'zerourl.com',
1441         'ZeroWeb.org' => array(
1442                 '*.80t.com',
1443                 '*.firez.org',
1444                 '*.fizz.nu',
1445                 '*.ingame.org',
1446                 '*.irio.net',
1447                 '*.v33.org',
1448                 '*.zeroweb.org',
1449         ),
1450         'zhukcity.ru',
1451         'zippedurl.com',
1452         'zr5.us',
1453         '*.zs.pl',
1454         '*.zu5.net',
1455         'zuso.tw',
1456         '*.zwap.to',
1457 );
1458
1459 // --------------------------------------------------
1460
1461 $blocklist['A-2'] = array(
1462
1463         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1464         //
1465         //'*.dyndns.*', // Wildcard for dyndns
1466         //
1467         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1468         'ddns.ru' => array('*.bpa.nu'),
1469         'Dhs.org' => array(
1470                 '*.2y.net',
1471                 '*.dhs.org',
1472         ),
1473         '*.dnip.net',
1474         '*.dyndns.co.za',
1475         '*.dyndns.dk',
1476         '*.dyndns.nemox.net',
1477         'DyDNS.com' => array(
1478                 '*.ath.cx',
1479                 '*.dnsalias.org',
1480                 '*.dyndns.org',
1481                 '*.homeip.net',
1482                 '*.homelinux.net',
1483                 '*.mine.nu',
1484                 '*.shacknet.nu',
1485         ),
1486         '*.dtdns.net',                  // by jscott at sceiron.com
1487         '*.dynu.com',
1488         '*.dynup.net',
1489         '*.fdns.net',
1490         'J-Speed.net' => array(
1491                 '*.bne.jp',
1492                 '*.ii2.cc',
1493                 '*.jdyn.cc',
1494                 '*.jspeed.jp',
1495         ),
1496         '*.mydyn.de',
1497         '*.nerdcamp.net',
1498         'No-IP.com' => array(
1499                         '*.bounceme.net',
1500                         '*.hopto.org',
1501                         '*.myftp.biz',
1502                         '*.myftp.org',
1503                         '*.myvnc.com',
1504                         '*.no-ip.biz',
1505                         '*.no-ip.info',
1506                         '*.no-ip.org',
1507                         '*.redirectme.net',
1508                         '*.servebeer.com',
1509                         '*.serveblog.net',
1510                         '*.servecounterstrike.com',
1511                         '*.serveftp.com',
1512                         '*.servegame.com',
1513                         '*.servehalflife.com',
1514                         '*.servehttp.com',
1515                         '*.servemp3.com',
1516                         '*.servepics.com',
1517                         '*.servequake.com',
1518                         '*.sytes.net',
1519                         '*.zapto.org',
1520         ),
1521         '*.opendns.be',
1522         'Yi.org' => array(      // by dns at whyi.org
1523                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1524
1525                 // 72.55.129.46(redirect.yi.org)
1526                 '*.whyi.org',
1527                 '*.weedns.com',
1528         ),
1529         '*.zenno.info',
1530         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1531                         // and all non-recorded domains redirect to 'agoga.com' now
1532                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1533                         // http://agoga.com/aboutus.html
1534 );
1535
1536 // --------------------------------------------------
1537
1538 // B: Sample setting of:
1539 // Jacked (taken advantage of) and cleaning-less sites
1540 //
1541 // Please notify us about this list with reason:
1542 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1543
1544 $blocklist['B-1'] = array(
1545
1546         // B-1: Web N.M spaces (N > 0, M >= 0)
1547         //
1548         //   Messages from forerunners:
1549         //     activefreehost.com
1550         //       "We regret to inform you that ActiveFreeHost
1551         //        free hosting service has is now closed (as of
1552         //        September 18). We have been online for over
1553         //        two and half years, but have recently decided
1554         //        to take time for software improvement to fight
1555         //        with server abuse, Spam advertisement and
1556         //        fraud."
1557         //     wsboards.com
1558         //        had been removed due to spam (noticed by its domain owner)
1559         //
1560         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1561         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1562         '*.007webpro.com',              // by richord at ientry.com
1563         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1564         '*.0buckhost.com',              // by tycho at e-lab.nl
1565         '0Catch.com related' => array(
1566                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1567
1568                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1569                 '*.100megsfree5.com',
1570
1571                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1572                 '*.100freemb.com',              // by Danny Ashworth
1573                 '*.easyfreehosting.com',
1574                 '*.exactpages.com',
1575                 '*.fcpages.com',
1576                 '*.wtcsites.com',
1577
1578                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1579                 '*.741.com',
1580                 '*.freecities.com',
1581                 '*.freesite.org',
1582                 '*.freewebpages.org',
1583                 '*.freewebsitehosting.com',
1584                 '*.jvl.com',
1585
1586                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1587                 '*.freespaceusa.com',
1588                 '*.usafreespace.com',
1589
1590                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1591                 '*.dex1.com',
1592                 '*.questh.com',
1593
1594                 // 209.63.57.10(*snip*), ns *.0catch.com
1595                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1596                 '*.012webpages.com',    // by support at 0catch.com
1597                 '*.150m.com',
1598                 '*.1sweethost.com',             // by whois at bluehost.com
1599                 '*.250m.com',                   // by jason at fahlman.net
1600                 '*.9cy.com',                    // by paulw0t at gmail.com
1601                 '*.angelcities.com',    // by cliff at eccentrix.com
1602                 '*.arcadepages.com',    // by admin at site-see.com
1603                 '*.e-host.ws',                  // by dns at jomax.net
1604                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1605                 '*.fw.bz',                              // by ben at kuehl.as
1606                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1607                 '*.g0g.net',                    // by domains at seem.co.uk
1608                 '*.galaxy99.net',               // by admin at bagchi.org
1609                 '*.greatnow.com',               // by peo at peakspace.com
1610                 '*.hautlynx.com',               // by hlewis28 at juno.com
1611                 '*.ibnsites.com',               // by cmrojas at mail.com
1612                 '*.just-allen.com',             // by extremehype at msn.com
1613                 '*.kogaryu.com',                // by angelguerra at msn.com
1614                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1615                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1616                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1617                 '*.s-enterprize.com',
1618                 '*.servetown.com',              // by jonahbliss at earthlink.net
1619                 '*.stinkdot.org',               // by bluedot at ziplip.com
1620                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1621                 '*.zomi.net',                   // by sianpu at gmail.com
1622         ),
1623         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1624         '100 Best Inc' => array(
1625                 // by 100 Best Inc (info at 100best.com)
1626
1627                 // 66.235.204.7(h204-007.bluefishhosting.com)
1628                 '*.2-hi.com',
1629                 '*.20fr.com',
1630                 '*.20ii.com',
1631                 '*.20is.com',
1632                 '*.20it.com',
1633                 '*.20m.com',    // by jlee at 100bestinc.com
1634                 '*.20to.com',
1635                 '*.2u-2.com',
1636                 '*.3-st.com',
1637                 '*.fws1.com',
1638                 '*.fw-2.com',
1639                 '*.inc5.com',
1640                 '*.on-4.com',
1641                 '*.st-3.com',
1642                 '*.st20.com',
1643                 '*.up-a.com',
1644
1645                 // 216.40.33.252(www-pd.mdnsservice.com)
1646                 '*.0-st.com',
1647                 '*.20me.com',
1648         ),
1649         '*.100foros.com',
1650         '*.101freehost.com',
1651         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1652         '20six Weblog Services' => array(
1653                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1654                 '.20six.co.uk',
1655                 '.20six.fr',
1656                 'myblog.de',
1657                 'myblog.es',
1658         ),
1659         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1660         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1661         '2IP.com' => array(
1662                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1663                 '*.2ip.jp',
1664                 '*.474.jp',
1665                 '*.consensus.jp',
1666                 '*.desyo.jp',
1667                 '*.dif.jp',
1668                 '*.pastels.jp',
1669                 '*.powerblogger.jp',
1670                 '*.vippers.jp',
1671                 '*.webpages.jp',
1672
1673                 // 205.209.97.56(non-existent)
1674                 '*.biografi.biz',
1675                 '*.biografi.info',
1676                 '*.biografi.org',
1677                 '*.biografi.us',
1678                 '*.datadiri.biz',
1679                 '*.datadiri.cc',
1680                 '*.datadiri.com',
1681                 '*.datadiri.info',
1682                 '*.datadiri.net',
1683                 '*.datadiri.org',
1684                 '*.datadiri.tv',
1685                 '*.datadiri.us',
1686                 '*.indo.bz',
1687                 '*.indo.cc',
1688                 '*.profil.bz',
1689                 '*.profil.cc',
1690                 '*.profil.cn',
1691                 '*.profil.in',
1692                 '*.profil.tv',
1693
1694                 // 205.209.101.47(non-existent)
1695                 '*.about.tc',
1696                 '*.about.vg',
1697                 '*.aboutus.gs',
1698                 '*.aboutus.ms',
1699                 '*.aboutus.tc',
1700                 '*.aboutus.vg',
1701                 '*.band.io',
1702                 '*.beijing.am',
1703                 '*.blogs.io',
1704                 '*.boke.am',
1705                 '*.clan.io',
1706                 '*.ecv.gs',
1707                 '*.ecv.ms',
1708                 '*.ecv.vg',
1709                 '*.freekong.cn',
1710                 '*.go2net.ws',
1711                 '*.hello.cn.com',
1712                 '*.hello.io',
1713                 '*.hits.io',
1714                 '*.hostingweb.us',
1715                 '*.hub.io',
1716                 '*.ide.am',
1717                 '*.inc.io',
1718                 '*.incn.in',
1719                 '*.indo.gs',
1720                 '*.indo.ms',
1721                 '*.indo.tc',
1722                 '*.indo.vg',
1723                 '*.infinitehosting.net',
1724                 '*.infinites.net',
1725                 '*.jushige.cn',
1726                 '*.jushige.com',
1727                 '*.kongjian.in',
1728                 '*.lan.io',
1729                 '*.llc.nu',
1730                 '*.maimai.in',
1731                 '*.max.io',
1732                 '*.musician.io',
1733                 '*.mycv.bz',
1734                 '*.mycv.nu',
1735                 '*.mycv.tv',
1736                 '*.myweb.io',
1737                 '*.ourprofile.biz',
1738                 '*.ourprofile.info',
1739                 '*.ourprofile.net',
1740                 '*.ourprofile.org',
1741                 '*.ourprofile.us',
1742                 '*.profil.gs',
1743                 '*.profil.ms',
1744                 '*.profil.tc',
1745                 '*.qiye.in',
1746                 '*.site.io',
1747                 '*.wan.io',
1748                 '*.web-cam.ws',
1749                 '*.webs.io',
1750                 '*.xixu.cc',
1751                 '*.zaici.am',
1752                 '*.zip.io',
1753                 '*.zuzhi.in',
1754
1755                 '*.profil.vg',          // 205.209.101.67(non-existent)
1756                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1757                 //'*.about.gs',         // No record
1758                 //'*.eprofile.us',      // non-existent
1759         ),
1760         '2Page.de' => array(
1761                 '.dreipage.de',
1762                 '.2page.de',
1763         ),
1764         '*.3-hosting.net',
1765         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1766         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1767         '*.8000web.com',        // 75.126.189.45
1768         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1769         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1770         'Ai.NET' => array(
1771                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1772                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1773         ),
1774         '*.aimoo.com',
1775         '*.alkablog.com',
1776         '*.alluwant.de',
1777         '.amkbb.com',
1778         'answerbag.com',        // 8.5.0.128
1779         'anyboard.net',
1780         'AOL.com' =>    // http://about.aol.com/international_services
1781                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1782                 '(?:aol|americaonline)\.' .
1783                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1784                 // Rough but works
1785         'Apple.com' => array('idisk.mac.com'),
1786         '*.askfaq.org',
1787         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1788         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1789         '*.asphost4free.com',
1790         'basenow.com',
1791         'BatCave.net' => array(
1792                 '.batcave.net',                 // 64.22.112.226
1793                 '.freehostpro.com',             // 64.22.112.226
1794         ),
1795         '*.bb-fr.com',
1796         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1797         '*.beeplog.com',
1798         'beepworld.it',
1799         'bestfreeforums.com',
1800         'bestvotexxx.com',
1801         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1802         'blinklist.com',
1803         'Blog.com' => array(
1804                 // by admin.domains at co.blog.com
1805                 '*.blog.com',
1806                 '*.blogandorra.com',
1807                 '*.blogangola.com',
1808                 '*.blogaruba.com',
1809                 '*.blogaustria.at',
1810         ),
1811         '*.blog.com.es',
1812         '*.blog.hr',
1813         '*.blog4ever.com',
1814         '*.blog-fx.com',
1815         '*.blogbeee.com',
1816         'blogas.lt',
1817         'blogbud.com',
1818         '*.blogburkinafaso.com',
1819         '*.blogcu.com',                 // by info at nokta.com
1820         'blogfreely.com',
1821         '*.blogdrive.com',
1822         '*.blogg.de',
1823         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1824         'bloggercrab.com',
1825         'bloggers.nl',
1826         '*.bloggingmylife.com',
1827         '*.bloggles.info',
1828         '*.blogharbor.com',
1829         '*.bloguj.eu',
1830         'bloguitos.com',
1831         'blogosfer.com',
1832         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1833         '*.blogslive.net',
1834         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1835         '*.blogstream.com',
1836         'blogyaz.com',
1837         'bloodee.com',
1838         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1839         'board-4you.de',
1840         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1841         '*.boardhost.com',
1842         'Bravenet.com' => array(
1843                 '*.bravenet.com',
1844                 '*.bravehost.com',
1845         ),
1846         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1847         'C2k.jp' => array(
1848                 // by Makoto Okuse (webmaster at 2style.net)
1849                 '.081.in',
1850                 '.2style.in',
1851                 '.bian.in',
1852                 '.curl.in',
1853                 '.ennui.in',
1854                 '.jinx.in',
1855                 '.loose.in',
1856                 '.mist.in',
1857                 '.muu.in',
1858                 '.naive.in',
1859                 '.panic.in',
1860                 '.slum.in',
1861
1862                 // by 2style, ns *.click2k.net, *.2style.net
1863                 '.2st.jp',
1864                 '.betty.jp',
1865                 '.cabin.jp',
1866                 '.cult.jp',
1867                 '.mippi.jp',
1868                 '.purety.jp',
1869                 '.rapa.jp',
1870                 '.side-b.jp',
1871                 '.web-box.jp',
1872                 '.yea.jp',
1873
1874                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1875                 '.2style.net',
1876                 '.click2k.net',
1877                 '.houka5.com',
1878
1879                 // by click2k, ns *.click2k.net, *.2style.net
1880                 '.psyco.jp',
1881                 '.sweety.jp',
1882
1883                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1884                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1885         ),
1886         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1887         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1888         '*.chueca.com',
1889         'city-forum.com',
1890         '*.clicdev.com',
1891         '*.craigslist.org',
1892         'concepts-mall.com',
1893         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1894         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1895         'counterhit.de',
1896         '*.createblog.com',
1897         '*.createforum.net',
1898         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1899         '*.createmybb.com',
1900         'CwCity.de' => array(
1901                 '.cwcity.de',
1902                 '.cwsurf.de',
1903         ),
1904         'dakrats.net',
1905         '*.dcswtech.com',
1906         'del.icio.us',
1907         '*.devil.it',
1908         '*.diaryland.com',
1909         'diigo.com',                    ///user/
1910         'digg.com',
1911         'digstock.com',
1912         'domains at galaxywave.net' => array(
1913                 'blogstation.net',
1914                 '.phpbb-host.com',
1915         ),
1916         'dotbb.be',
1917         '*.dox.hu',                             // dns at 1b.hu
1918         '*.eadf.com',
1919         '*.eblog.com.au',
1920         '*.ekiwi.de',
1921         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1922         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1923         '*.easyjournal.com',
1924         '*.ebloggy.com',
1925         'enunblog.com',
1926         '*.epinoy.com',
1927         '*.ez-sites.ws',
1928         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1929         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1930         '*.fathippohosting.com',        // 208.101.3.192
1931         'FC2.com' => array(
1932                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1933                         // Many traps available:
1934                         //      bqdr.blog98.fc2.com,       iframe
1935                         //      csfir.blog87.fc2.com,      iframe
1936                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1937                         //      sippou2006.blog60.fc2.com, iframe
1938                         // NOTE: 'blog.fc2.com' is not included
1939                 '*.h.fc2.com',  // Adult
1940         ),
1941         '*.fizwig.com',
1942         'forum.ezedia.net',
1943         '*.extra.hu',                   // angelo at jasmin.hu
1944         '*.fanforum.cc',
1945         'fingerprintmedia.com',
1946         '*.filelan.com',
1947         '*.fora.pl',
1948         '*.forka.eu',
1949         '*.foren-city.de',
1950         'foren-gratis.de',
1951         '*.foros.tv',
1952         '*.forospace.com',
1953         'foroswebgratis.com',
1954         '*.forum-on.de',
1955         '*.forum24.se',
1956         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1957         '.forum66.com',
1958         'Forumotion.com' => array(
1959                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1960                 '*.forumactif.com',     // 91.121.41.79
1961                 '*.editboard.com',      // 75.126.156.15
1962                 '*.sosblog.com',        // 74.86.25.140
1963
1964                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1965                 '*.0forum.biz',
1966                 '*.1forum.biz',
1967                 '*.1fr1.net',
1968                 '*.1talk.net',
1969                 '*.2forum.biz',
1970                 '*.3forum.biz',
1971                 '*.4forum.biz',
1972                 '*.4rumer.com',
1973                 '*.4rumer.net',
1974                 '*.4umer.com',
1975                 '*.4umer.net',
1976                 '*.5forum.biz',
1977                 '*.5forum.info',
1978                 '*.5forum.net',
1979                 '*.6forum.biz',
1980                 '*.6forum.info',
1981                 '*.77forum.com',
1982                 '*.7forum.biz',
1983                 '*.7forum.info',
1984                 '*.7forum.net',
1985                 '*.8forum.biz',
1986                 '*.8forum.info',
1987                 '*.8forum.net',
1988                 '*.9forum.biz',
1989                 '*.9forum.info',
1990                 '*.activebb.net',
1991                 '*.aforumfree.com',
1992                 '*.all-forum.net',
1993                 '*.all-up.com',
1994                 '*.alldiscussion.net',
1995                 '*.allgoo.net',
1996                 '*.allgoo.us',
1997                 '*.american-forum.net',
1998                 '*.americantalk.net',
1999                 '*.annuaire-forums.com',
2000                 '*.asiafreeforum.com',
2001                 '*.asianfreeforum.com',
2002                 '*.azureforum.com',
2003                 '*.azurforum.com',
2004                 '*.bestcheapforum.com',
2005                 '*.bestdiscussion.net',
2006                 '*.bestgoo.com',
2007                 '*.bestofforum.com',
2008                 '*.bestofforum.net',
2009                 '*.bestoforum.net',
2010                 '*.bforum.biz',
2011                 '*.big-forum.net',
2012                 '*.board-poster.com',
2013                 '*.board-realtors.com',
2014                 '*.boardonly.com',
2015                 '*.boardrealtors.net',
2016                 '*.boardsmessage.com',
2017                 '*.briceboard.com',
2018                 '*.bubblelol.com',
2019                 '*.buy-forum.com',
2020                 '*.buy-talk.com',
2021                 '*.buyforum.net',
2022                 '*.buygoo.net',
2023                 '*.buygoo.us',
2024                 '*.camelscrew.com',
2025                 '*.cheap-forum.com',
2026                 '*.cheapforum.net',
2027                 '*.chocoforum.com',
2028                 '*.chocoforum.net',
2029                 '*.clic-topic.com',
2030                 '*.clicboard.com',
2031                 '*.clictopic.com',
2032                 '*.clictopic.net',
2033                 '*.clictopics.com',
2034                 '*.clubdiscussion.net',
2035                 '*.coolbb.net',
2036                 '*.crazy4us.com',
2037                 '*.crazyfruits.net',
2038                 '*.createmyboard.com',
2039                 '*.crewcamel.com',
2040                 '*.cyberfreeforum.com',
2041                 '*.discutforum.com',
2042                 '*.discutfree.com',
2043                 '*.do-forum.com',
2044                 '*.do-goo.com',
2045                 '*.do-goo.net',
2046                 '*.do-talk.com',
2047                 '*.dodiscussion.com',
2048                 '*.dogoo.us',
2049                 '*.easydiscussion.net',
2050                 '*.easyforumlive.com',
2051                 '*.englishboard.net',
2052                 '*.englishboards.com',
2053                 '*.ephpbb.com',
2054                 '*.eraseboard.net',
2055                 '*.eraseboards.net',
2056                 '*.euro-talk.net',
2057                 '*.eurodiscussion.net',
2058                 '*.eurogoo.com',
2059                 '*.exchangesboard.com',
2060                 '*.exprimetoi.net',
2061                 '*.fairtopic.com',
2062                 '*.fforum.biz',
2063                 '*.fforumfree.com',
2064                 '*.first-forum.com',
2065                 '*.firstgoo.com',
2066                 '*.fororama.com',
2067                 '*.forum-2007.com',
2068                 '*.forum-actif.net',
2069                 '*.forum-free.biz',
2070                 '*.forum-free.org',
2071                 '*.forum-motion.com',
2072                 '*.forum0.biz',
2073                 '*.forum0.info',
2074                 '*.forum0.net',
2075                 '*.forum2.biz',
2076                 '*.forum3.biz',
2077                 '*.forum3.info',
2078                 '*.forum5.info',
2079                 '*.forum6.biz',
2080                 '*.forum6.info',
2081                 '*.forum7.biz',
2082                 '*.forum777.com',
2083                 '*.forum8.biz',
2084                 '*.forum9.biz',
2085                 '*.foruma.biz',
2086                 '*.forumactif.biz',
2087                 '*.forumactif.info',
2088                 '*.forumactif.name',
2089                 '*.forumactif.ws',
2090                 '*.forumaction.net',
2091                 '*.forumakers.com',
2092                 '*.forumandco.com',
2093                 '*.forumb.biz',
2094                 '*.forumc.biz',
2095                 '*.forumd.biz',
2096                 '*.forumdediscussions.com',
2097                 '*.forumdediscussions.net',
2098                 '*.forume.biz',
2099                 '*.forumeast.com',
2100                 '*.forumf.biz',
2101                 '*.forumfreek.com',
2102                 '*.forumfreez.com',
2103                 '*.forumg.biz',
2104                 '*.forumh.biz',
2105                 '*.forumh.net',
2106                 '*.forumhope.com',
2107                 '*.forumi.biz',
2108                 '*.forumice.net',
2109                 '*.foruminute.com',
2110                 '*.forumj.biz',
2111                 '*.forumj.net',
2112                 '*.forumjonction.com',
2113                 '*.forumk.biz',
2114                 '*.foruml.biz',
2115                 '*.forumm.biz',
2116                 '*.forummotion.com',
2117                 '*.forummotions.com',
2118                 '*.forumn.biz',
2119                 '*.forumn.net',
2120                 '*.forumo.biz',
2121                 '*.forumonline.biz',
2122                 '*.forumotions.com',
2123                 '*.forump.biz',
2124                 '*.forump.info',
2125                 '*.forumperso.com',
2126                 '*.forumpersos.com',
2127                 '*.forumplatinum.com',
2128                 '*.forumpro.fr',
2129                 '*.forumq.biz',
2130                 '*.forumr.biz',
2131                 '*.forumr.net',
2132                 '*.forumrama.com',
2133                 '*.forums-actifs.com',
2134                 '*.forums-actifs.net',
2135                 '*.forums1.net',
2136                 '*.forumsactifs.com',
2137                 '*.forumsactifs.net',
2138                 '*.forumsfree.org',
2139                 '*.forumsline.com',
2140                 '*.forumsmakers.com',
2141                 '*.forumsmotion.com',
2142                 '*.forumsmotions.com',
2143                 '*.forumt.biz',
2144                 '*.forumv.biz',
2145                 '*.forumvalue.com',
2146                 '*.forumw.biz',
2147                 '*.forumy.biz',
2148                 '*.free-boards.net',
2149                 '*.freediscussion.net',
2150                 '*.freediscussions.net',
2151                 '*.freeforum.me.uk',
2152                 '*.freeforumboard.net',
2153                 '*.freeforumfree.com',
2154                 '*.freevideotalk.com',
2155                 '*.frenchboard.com',
2156                 '*.fruitsandco.com',
2157                 '*.fullboards.com',
2158                 '*.fullsubject.com',
2159                 '*.fullsubject.net',
2160                 '*.get-forum.net',
2161                 '*.getdiscussion.com',
2162                 '*.getgoo.net',
2163                 '*.getgoo.us',
2164                 '*.gettalk.net',
2165                 '*.go-board.com',
2166                 '*.go-board.net',
2167                 '*.go-forum.net',
2168                 '*.go-ogler.com',
2169                 '*.gofreeforum.com',
2170                 '*.gogoo.us',
2171                 '*.goo-board.com',
2172                 '*.goo-boys.com',
2173                 '*.goo-dart.com',
2174                 '*.goo-dole.com',
2175                 '*.goo-done.com',
2176                 '*.gooboards.com',
2177                 '*.goodbb.net',
2178                 '*.goodearths.com',
2179                 '*.goodforum.net',
2180                 '*.goodoles.com',
2181                 '*.goodoolz.com',
2182                 '*.gooforum.com',
2183                 '*.gooforums.com',
2184                 '*.googoolz.com',
2185                 '*.great-forum.com',
2186                 '*.heavenforum.com',
2187                 '*.hforum.biz',
2188                 '*.high-forums.com',
2189                 '*.highbb.com',
2190                 '*.highforum.net',
2191                 '*.hightoxic.com',
2192                 '*.homediscussion.net',
2193                 '*.homegoo.com',
2194                 '*.hooxs.com',
2195                 '*.hot-me.com',
2196                 '*.hot4um.com',
2197                 '*.hotdiscussion.net',
2198                 '*.hotgoo.net',
2199                 '*.in-goo.com',
2200                 '*.in-goo.net',
2201                 '*.infodiscussion.net',
2202                 '*.ingoo.us',
2203                 '*.iowoi.com',
2204                 '*.jforum.biz',
2205                 '*.just-forum.net',
2206                 '*.justboard.net',
2207                 '*.justdiscussion.com',
2208                 '*.justforum.net',
2209                 '*.justgoo.com',
2210                 '*.keuf.net',
2211                 '*.lforum.biz',
2212                 '*.lifediscussion.net',
2213                 '*.lifeme.net',
2214                 '*.lightbb.com',
2215                 '*.logu2.com',
2216                 '*.longdomaine.com',
2217                 '*.lovediscussion.net',
2218                 '*.lowcostforum.com',
2219                 '*.make-free-forum.com',
2220                 '*.makeforumfree.com',
2221                 '*.makefreeforum.com',
2222                 '*.mam9.com',
2223                 '*.manageboard.com',
2224                 '*.max2forum.com',
2225                 '*.meabout.com',
2226                 '*.megabb.com',
2227                 '*.moncontact.com',
2228                 '*.moninter.net',
2229                 '*.motion-forum.net',
2230                 '*.motionforum.net',
2231                 '*.motionsforum.com',
2232                 '*.mrforum.net',
2233                 '*.msnboard.net',
2234                 '*.msnyou.com',
2235                 '*.my-free-board.com',
2236                 '*.my-free-boards.com',
2237                 '*.my-free-forum.com',
2238                 '*.my-free-forums.com',
2239                 '*.my-goo.com',
2240                 '*.my-goo.net',
2241                 '*.mydiscussionboard.com',
2242                 '*.myfreeboard.net',
2243                 '*.mygoo.org',
2244                 '*.myrealboard.com',
2245                 '*.netboarder.com',
2246                 '*.netdiscussion.net',
2247                 '*.netgoo.org',
2248                 '*.new-forum.net',
2249                 '*.newdiscussion.net',
2250                 '*.newgoo.net',
2251                 '*.nforum.biz',
2252                 '*.nice-album.com',
2253                 '*.nice-board.biz',
2254                 '*.nice-board.com',
2255                 '*.nice-board.net',
2256                 '*.nice-boards.com',
2257                 '*.nice-boards.net',
2258                 '*.nice-forum.com',
2259                 '*.nice-forum.net',
2260                 '*.nice-forums.com',
2261                 '*.nice-forums.net',
2262                 '*.nice-gallery.net',
2263                 '*.nice-subject.com',
2264                 '*.nice-subjects.com',
2265                 '*.nice-theme.com',
2266                 '*.nice-topic.com',
2267                 '*.nice-topics.com',
2268                 '*.nicealbums.com',
2269                 '*.niceboard.biz',
2270                 '*.niceboard.net',
2271                 '*.niceboards.net',
2272                 '*.nicegalleries.net',
2273                 '*.nicesubject.com',
2274                 '*.nicesubjects.com',
2275                 '*.nicetopic.net',
2276                 '*.nicetopics.com',
2277                 '*.nightforum.net',
2278                 '*.nocost-forum.com',
2279                 '*.nofeeforum.com',
2280                 '*.one-forum.net',
2281                 '*.onediscussion.net',
2282                 '*.onegoo.us',
2283                 '*.onlinegoo.com',
2284                 '*.onlyquery.com',
2285                 '*.open-board.com',
2286                 '*.openu2.com',
2287                 '*.othersboards.com',
2288                 '*.own0.com',
2289                 '*.pforum.biz',
2290                 '*.phpbb9.com',
2291                 '*.phpbbtest.com',
2292                 '*.positifforum.com',
2293                 '*.postalboard.com',
2294                 '*.prodiscussion.net',
2295                 '*.progoo.us',
2296                 '*.pureforum.net',
2297                 '*.qforum.biz',
2298                 '*.quickbb.net',
2299                 '*.realbb.net',
2300                 '*.realfreeforum.com',
2301                 '*.realmsn.com',
2302                 '*.rforum.biz',
2303                 '*.road2us.com',
2304                 '*.roomforum.com',
2305                 '*.saveboard.com',
2306                 '*.screwcamel.com',
2307                 '*.screwcamels.com',
2308                 '*.sendboard.com',
2309                 '*.sephorum.com',
2310                 '*.sforum.biz',
2311                 '*.shootboard.com',
2312                 '*.shop-forum.net',
2313                 '*.shopsubject.com',
2314                 '*.simpleboard.net',
2315                 '*.site-forums.com',
2316                 '*.smileyforum.net',
2317                 '*.sos-forum.net',
2318                 '*.sos4um.com',
2319                 '*.sos4um.net',
2320                 '*.sosforum.net',
2321                 '*.speedyforum.com',
2322                 '*.stationforum.com',
2323                 '*.subject-expert.com',
2324                 '*.subject-line.com',
2325                 '*.subject-tracer.com',
2326                 '*.subjectchange.com',
2327                 '*.subjectdeals.com',
2328                 '*.subjectdebate.com',
2329                 '*.subjectdone.com',
2330                 '*.subjectonline.com',
2331                 '*.subjectschange.com',
2332                 '*.subjectsecrets.com',
2333                 '*.super-forum.net',
2334                 '*.talk-forums.com',
2335                 '*.team-forum.net',
2336                 '*.team-talk.net',
2337                 '*.teamconvention.com',
2338                 '*.teamgoo.net',
2339                 '*.teensboards.com',
2340                 '*.the-talk.net',
2341                 '*.the-up.com',
2342                 '*.thegoo.us',
2343                 '*.thinksubject.com',
2344                 '*.top-board.com',
2345                 '*.top-forum.net',
2346                 '*.top-me.com',
2347                 '*.top-talk.net',
2348                 '*.topdiscussion.com',
2349                 '*.topgoo.net',
2350                 '*.topic-board.com',
2351                 '*.topic-board.net',
2352                 '*.topic-debate.com',
2353                 '*.topic-ideas.com',
2354                 '*.topic-mail.com',
2355                 '*.topic-zone.com',
2356                 '*.topicboard.net',
2357                 '*.topicboards.com',
2358                 '*.topicmanager.com',
2359                 '*.topicsolutions.net',
2360                 '*.toxicfarm.com',
2361                 '*.unlimitboard.com',
2362                 '*.unlimitedboard.com',
2363                 '*.unlimitedforum.com',
2364                 '*.up-with.com',
2365                 '*.up-your.com',
2366                 '*.urealboard.com',
2367                 '*.user-board.net',
2368                 '*.userboard.net',
2369                 '*.users-board.com',
2370                 '*.users-board.net',
2371                 '*.usersboard.com',
2372                 '*.usersboard.net',
2373                 '*.webgoo.us',
2374                 '*.withboards.com',
2375                 '*.withme.us',
2376                 '*.worldgoo.com',
2377                 '*.yahooboard.net',
2378                 '*.yforum.biz',
2379                 '*.yoo7.com',
2380                 '*.youneed.us',
2381                 '*.your-board.com',
2382                 '*.your-talk.com',
2383                 '*.yourme.net',
2384                 '*.zforum.biz',
2385
2386                 // 75.126.156.15 redirect to forumactif.com
2387                 '*.actifforum.com',
2388                 '*.fr-bb.com',
2389                 '*.superforum.fr',
2390
2391                 // 75.126.156.15 redirect to editboard.com
2392                 '*.bbfr.net',
2393                 '*.bbgraf.com',
2394                 '*.cinebb.com',
2395                 '*.darkbb.com',
2396                 '*.dynamicbb.com',
2397                 '*.zikforum.com',
2398
2399                 // 74.86.25.140 Used: sosblog.com
2400                 '*.0-up.com',
2401                 '*.0-yo.com',
2402                 '*.04live.com',
2403                 '*.06fr.com',
2404                 '*.0fra.com',
2405                 '*.0jet.com',
2406                 '*.0yoo.com',
2407                 '*.1toxic.com',
2408                 '*.2k00.com',
2409                 '*.2xik.com',
2410                 '*.blog-2007.com',
2411                 '*.blog-2008.com',
2412                 '*.blog-2009.com',
2413                 '*.blog-2010.com',
2414                 '*.blog-actif.net',
2415                 '*.blog-marley.com',
2416                 '*.blog-talker.com',
2417                 '*.blog2009.com',
2418                 '*.blogactif.net',
2419                 '*.blogalbums.com',
2420                 '*.blogalerie.com',
2421                 '*.blogaleries.com',
2422                 '*.blogallerys.com',
2423                 '*.blogandme.com',
2424                 '*.blogandyou.com',
2425                 '*.blogbubble.net',
2426                 '*.blogdollz.com',
2427                 '*.bloggeuse.net',
2428                 '*.bloggeuses.com',
2429                 '*.bloginstinct.com',
2430                 '*.bloginternet.net',
2431                 '*.blogmakers.net',
2432                 '*.blogmarley.net',
2433                 '*.blogminister.net',
2434                 '*.blogmorane.com',
2435                 '*.blognboard.com',
2436                 '*.blogotek.net',
2437                 '*.blogpas.com',
2438                 '*.blogpublisher.net',
2439                 '*.blogsalbum.com',
2440                 '*.blogsalbums.com',
2441                 '*.blogsfan.net',
2442                 '*.blogsgallerys.com',
2443                 '*.blogsitephp.com',
2444                 '*.blogsland.net',
2445                 '*.blogsmaker.com',
2446                 '*.blogsmakers.com',
2447                 '*.blogspeed.net',
2448                 '*.blogsup.net',
2449                 '*.blogsutil.com',
2450                 '*.blogsutils.com',
2451                 '*.blogsystem.net',
2452                 '*.blogtalker.net',
2453                 '*.blogtheque.net',
2454                 '*.blogutil.com',
2455                 '*.blogvsboard.com',
2456                 '*.briceblog.com',
2457                 '*.cibleblog.com',
2458                 '*.cristalblog.com',
2459                 '*.crystalblog.net',
2460                 '*.dad-blog.com',
2461                 '*.daddy-blog.com',
2462                 '*.defaultblog.com',
2463                 '*.discussionsblog.com',
2464                 '*.dollzblog.com',
2465                 '*.dtoxic.com',
2466                 '*.easiestblog.net',
2467                 '*.espaceblog.net',
2468                 '*.exitblog.net',
2469                 '*.expensiveblog.com',
2470                 '*.extra-blog.net',
2471                 '*.extrablog.net',
2472                 '*.facileblog.com',
2473                 '*.forblogger.com',
2474                 '*.forumsblogs.com',
2475                 '*.freephpblog.com',
2476                 '*.fresh-blog.net',
2477                 '*.galleryblog.net',
2478                 '*.galleryblogs.net',
2479                 '*.gallerysblog.com',
2480                 '*.gallerysblogs.com',
2481                 '*.hyper-blog.net',
2482                 '*.hyper-blogger.com',
2483                 '*.hyper-blogger.net',
2484                 '*.hyperblogger.net',
2485                 '*.instinctblog.com',
2486                 '*.jeunblog.com',
2487                 '*.jeuneblog.com',
2488                 '*.judblog.com',
2489                 '*.makeblog.net',
2490                 '*.man-blog.net',
2491                 '*.man-blogs.com',
2492                 '*.man-blogs.net',
2493                 '*.manblog.net',
2494                 '*.manblog.org',
2495                 '*.manblog.us',
2496                 '*.manblogs.net',
2497                 '*.mansblog.net',
2498                 '*.mansblogs.com',
2499                 '*.mansblogs.net',
2500                 '*.meetingsblogs.com',
2501                 '*.men-blog.net',
2502                 '*.men-blogs.com',
2503                 '*.men-blogs.net',
2504                 '*.menblog.us',
2505                 '*.menblogs.net',
2506                 '*.mensblogs.net',
2507                 '*.messaginblog.com',
2508                 '*.monblogger.com',
2509                 '*.mum-blog.com',
2510                 '*.mummy-blog.com',
2511                 '*.mummyblog.com',
2512                 '*.myareablog.com',
2513                 '*.myblog-online.net',
2514                 '*.mybloginternet.com',
2515                 '*.myblogland.com',
2516                 '*.myblogmag.com',
2517                 '*.myfreshblog.com',
2518                 '*.myinternetblog.net',
2519                 '*.myoverblog.com',
2520                 '*.myoverblog.net',
2521                 '*.mysharedblog.com',
2522                 '*.nice-albums.com',
2523                 '*.nice-galleries.com',
2524                 '*.nicealbum.net',
2525                 '*.nicegallery.net',
2526                 '*.notreblogger.com',
2527                 '*.outilblog.com',
2528                 '*.over-blogger.com',
2529                 '*.overblogger.com',
2530                 '*.pasblog.com',
2531                 '*.pasblog.net',
2532                 '*.perfect-blog.net',
2533                 '*.perfectblog.net',
2534                 '*.phpblogsite.com',
2535                 '*.phpmyblog.net',
2536                 '*.plateformeblog.com',
2537                 '*.playblogger.com',
2538                 '*.publishmyblog.com',
2539                 '*.pulseblog.net',
2540                 '*.pulseblogs.com',
2541                 '*.puretoxic.com',
2542                 '*.reservedblog.com',
2543                 '*.shareblog.net',
2544                 '*.shareblogs.net',
2545                 '*.shared-blogs.com',
2546                 '*.sharedblog.net',
2547                 '*.sharedblogs.net',
2548                 '*.solideblog.com',
2549                 '*.systemeblog.com',
2550                 '*.talkmeblog.com',
2551                 '*.toolsblog.net',
2552                 '*.toxicplace.com',
2553                 '*.ufreeblog.com',
2554                 '*.uliveblog.com',
2555                 '*.ultratoxic.com',
2556                 '*.utilblog.com',
2557                 '*.utilblogs.com',
2558                 '*.utilsblog.com',
2559                 '*.utilsblogs.com',
2560                 '*.various-blog.com',
2561                 '*.various-blog.net',
2562                 '*.various-blogs.com',
2563                 '*.various-blogs.net',
2564                 '*.variusblog.com',
2565                 '*.versusblog.com',
2566                 '*.vieuxblog.com',
2567                 '*.web-day.net',
2568                 '*.whatsblog.net',
2569                 '*.woman-blog.net',
2570                 '*.woman-blogs.com',
2571                 '*.woman-blogs.net',
2572                 '*.womanblog.com',
2573                 '*.womanblog.org',
2574                 '*.womanblog.us',
2575                 '*.womanblogs.net',
2576                 '*.womansblogs.com',
2577                 '*.womansblogs.net',
2578                 '*.women-blog.net',
2579                 '*.women-blogs.com',
2580                 '*.women-blogs.net',
2581                 '*.womenblog.us',
2582                 '*.womenblogs.net',
2583                 '*.womensblog.net',
2584                 '*.womensblogs.net',
2585                 '*.youblog.net',
2586                 '*.yourliveblog.com',
2587                 '*.yourweblog.net',
2588         ),
2589         '*.forumcommunity.net',
2590         '*.forumer.com',
2591         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2592         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2593         'forumhosting.org',
2594         '*.forums.com',
2595         'forumbolt.com',
2596         'phpbb.forumgratis.com',
2597         'forumlari.net',
2598         '*.forumlivre.com',
2599         'forumnow.com.br',
2600         '*.forumppl.com',
2601         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2602         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2603                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2604                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2605                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2606         '*.fory.pl',
2607         'fotolog.com',
2608         '*.fr33webhost.com',
2609         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2610         '*.free-25.de',
2611         '*.free-bb.com',
2612         'Free-Blog-Hosting.com' => array(
2613                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2614                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2615                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2616                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2617                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2618         ),
2619         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2620         'free-guestbook.net',
2621         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2622         'freebb.nl',
2623         '*.freeclans.de',
2624         '*.freehostplace.com',  // by contact at keepclear.co.uk
2625         '*.freelinuxhost.com',  // by 100webspace.com
2626         '*.nofeehost.com',
2627         '*.freehyperspace.com',
2628         'freeforum.at',                 // by Sandro Wilhelmy
2629         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2630         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2631         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2632         '*.freewebhostingpro.com',
2633         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2634         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2635                 '*.6te.net',
2636                 '*.ueuo.com',
2637                 '*.orgfree.com',
2638         ),
2639         '*.freewebpage.org',
2640         'Freewebs.com' => array(        // by inquiries at freewebs.com
2641                 'freewebs.com',
2642                 'freewebsfarms.com',
2643         ),
2644         '*.freewebspace.net.au',
2645         'freewebtown.com',
2646         '*.freemyforum.com',    // by messahost at gmail.com
2647         'freepowerboards.com',
2648         '*.freepowerboards.com',
2649         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2650         'Funpic.de' => array(   // by alexander at liemen.net
2651                 '*.funpic.de',
2652                 '*.funpic.org',
2653         ),
2654         'gb-hoster.de',
2655         '*.genblogger.com',
2656         'GetBetterHosting.com' => array(
2657                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2658                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2659         ),
2660         '*.gexxe.com',
2661         '*.goodboard.de',
2662         'gossiping.net',
2663         '*.greatnuke.com',
2664         '*.guestbook.de',
2665         'gwebspace.de',
2666         'Google.com' => array(
2667                 '*.blogspot.com',
2668                 'docs.google.com',
2669                 '*.googlegroups.com',           ///web/
2670                 '*.googlepages.com',
2671                 'groups-beta.google.com',
2672                 'groups.google.*',       ///group/ Seems widely distributed
2673                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2674                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2675                         //'groups.google.it', ...
2676         ),
2677         'guestbook.at',
2678         'club.giovani.it',
2679         '*.gratis-server.de',
2680         'healthcaregroup.com',
2681         '*.heliohost.org',
2682         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2683                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2684                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2685                 '*.front.ru',           // (domain at hc.ru)
2686                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2687                 '*.hotbox.ru',          // (domain at hc.ru)
2688                 '*.hotmail.ru',         // (hosting at hc.ru)
2689                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2690                 '*.land.ru',            // (domain at hc.ru)
2691                 '*.mail15.com',         // (hosting at hc.ru)
2692                 '*.mail333.com',        // (hosting at hc.ru)
2693                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2694                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2695                 '*.pisem.net',          // (hosting at hc.ru)
2696                 '*.pochta.ru',          // (domain at hc.ru)
2697                 '*.pochtamt.ru',        // (domain at hc.ru)
2698                 '*.pop3.ru',            // (domain at hc.ru)
2699                 '*.rbcmail.ru',         // (domain at hc.ru)
2700                 '*.smtp.ru',            // (domain at hc.ru)
2701         ),
2702         '*.hiblogger.com',              // by chiaokin at gmail.com
2703         '*.hit.bg',                             // by forumup.com ??
2704         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2705         '*.host-page.com',
2706         '*.hostingclub.de',
2707         'forums.hspn.com',
2708         '*.httpsuites.com',
2709         '*.hut2.ru',
2710         'ibfree.org',                   // 208.101.45.88
2711         'IC.cz' => array(
2712                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2713                 '*.hu.cz',                      // internetcentrum at gmail.com
2714                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2715                 '*.ic.cz',                      // internetcentrum at gmail.com
2716                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2717                 '*.own.cz',                     // internetcentrum at gmail.com
2718                 '*.phorum.cz',          // internetcentrum at gmail.com
2719                 '*.tym.cz',                     // internetcentrum at gmail.com
2720                 '*.tym.sk',                     // jobot at ignum.cz
2721                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2722                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2723                 '*.yw.sk',                      // jobot at ignum.cz
2724         ),
2725         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2726                 '*.0moola.com',
2727                 '*.3000mb.com',
2728                 '.501megs.com',
2729                 '*.teracities.com',
2730                 '*.xoompages.com',
2731         ),
2732         '*.icspace.net',
2733         'iEUROP.net' => array(
2734                 '*.ibelgique.com',
2735                 '*.iespana.es',
2736                 '*.ifrance.com',
2737                 '*.iitalia.com',
2738                 '*.iquebec.com',
2739                 '*.isuisse.com',
2740         ),
2741         '*.ihateclowns.net',
2742         '*.ii55.com',
2743         '*.ipbfree.com',
2744         '*.iphorum.com',
2745         '*.blog.ijijiji.com',
2746         '*.info.com',
2747         '*.informe.com',
2748         'it168.com',
2749         '.iwannaforum.com',
2750         '*.jconserv.net',
2751         '*.jeeran.com',
2752         '*.jeun.fr',
2753         '*.joolo.com',
2754         '*.journalscape.com',
2755         '*.justfree.com',
2756         'kataweb.it' => array(          // kata-redir.kataweb.it
2757                 '*.blog.kataweb.it',
2758                 '*.repubblica.it',
2759         ),
2760         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2761         '*.kokoom.com',
2762         'koolpages.com',
2763         '*.kostenlose-foren.org',
2764         '*.ksiegagosci.info',
2765         'LaCoctelera.com' => array(
2766                 'lacoctelera.com',      // by alberto at the-cocktail.com
2767                 'espacioblog.com',      // by dominios at ferca.com
2768         ),
2769         'Lide.cz' => array(
2770                 '*.lide.cz',
2771                 '*.sblog.cz',
2772         ),
2773         '*.lioru.com',
2774         'limmon.net',
2775         'linkinn.com',
2776         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2777         'listible.com',                 ///list/
2778         'Livedoor.com' => array(
2779                 'blog.livedoor.jp',
2780                 '*.blog.livedoor.com',  // redirection
2781         ),
2782         '*.livejournal.com',
2783         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2784         '*.logme.nl',
2785         'lol.to',
2786         'ltss.luton.ac.uk',
2787         'Lycos.com' => array(
2788                 '.angelfire.com',       // angelfire.lycos.com
2789
2790                 '*.jubii.dk',   // search., medlem.
2791                 '*.jubiiblog.co.uk',
2792                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2793                 '*.jubiiblog.de',
2794                 '*.jubiiblog.dk',
2795                 '*.jubiiblog.fr',
2796                 '*.jubiiblog.it',
2797                 '*.jubiiblog.nl',
2798
2799                 '*.lycos.at',
2800                 '*.lycos.ch',
2801                 '*.lycos.co.uk',
2802                 'angelfire.lycos.com',
2803                 '*.lycos.de',
2804                 '*.lycos.es',
2805                 '*.lycos.fr',
2806                 '*.lycos.it',           // by Lycos Europe GmbH
2807                 '*.lycos.nl',
2808
2809                 '*.spray.se',
2810                 '*.sprayblog.se',
2811
2812                 '*.tripod.com',
2813         ),
2814         '*.mastertopforum.com',
2815         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2816         'meneame.net',
2817         '*.memebot.com',
2818         '*.messageboard.nl',
2819         'mokono GmbH' => array(
2820                 '*.blog.com.es',
2821                 '*.blog.de',
2822                 '*.blog.fr',
2823                 '*.blog.co.uk',
2824                 '*.blog.ca',
2825                 '*.blogs.se',
2826                 '*.blogs.fi',
2827                 '*.blogs.no',
2828                 '*.blogs.dk',
2829                 '*.blogs.ro',
2830                 '*.weblogs.pl',
2831                 '*.weblogs.cz',
2832                 '*.weblogs.hu',
2833         ),
2834         'mojklc.com',
2835         '*.mundoforo.com',
2836         '*.money-host.com',
2837         'MonForum.com' => array(
2838                 '*.monforum.com',
2839                 '*.monforum.fr',
2840         ),
2841         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2842         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2843         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2844         'myblog.is',
2845         'myblogma.com',
2846         '*.myblogvoice.com',
2847         'myblogwiki.com',
2848         '*.myforum.ro',
2849         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2850         '*.myfreewebs.net',
2851         '*.mysite.com',
2852         '*.myxhost.com',
2853         '*.netfast.org',
2854         'NetGears.com' => array(
2855                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2856                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2857                 '*.freewebspace.com',   // 64.49.236.72
2858         ),
2859         'Netscape.com' => array('*.netscape.com'),
2860         'users.newblog.com',
2861         'neweconomics.info',
2862         '*.newsit.es',                          // 75.126.252.108
2863         '*.nm.ru',
2864         '*.nmj.pl',
2865         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2866         'Northsky.com' => array(
2867                 // by hostmaster at northsky.com
2868                 // northsky.com redirects to communityarchitect.com
2869
2870                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2871                 '*.00author.com',
2872                 '*.00band.com',
2873                 '*.00books.com',
2874                 '*.00cash.com',
2875                 '*.00cd.com',
2876                 '*.00dvd.com',
2877                 '*.00family.com',
2878                 '*.00game.com',
2879                 '*.00home.com',
2880                 '*.00it.com',
2881                 '*.00me.com',
2882                 '*.00movies.com',
2883                 '*.00page.com',
2884                 '*.00politics.com',
2885                 '*.00sf.com',
2886                 '*.00show.com',
2887                 '*.00song.com',
2888                 '*.00trek.com',
2889                 '*.00video.com',
2890                 '*.0me.com',
2891                 '*.0pi.com',
2892                 '*.happy-couple.com',
2893                 '*.warp0.com',
2894
2895                 '*.50megs.com',         // 64.136.25.170
2896
2897                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2898                 '*.00server.com',
2899                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2900                 '*.fanspace.com',
2901
2902                 // 64.136.25.168 by Mark Bishop
2903                 '*.00go.com',
2904                 '*.00space.com',
2905                 '*.00sports.com',
2906         ),
2907         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2908         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2909         'onlyfree.de',
2910         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2911         '*.ohost.de',
2912         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2913                 '.friko.pl',
2914                 '.jak.pl',
2915                 '.nazwa.pl',
2916                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2917                 '.w8w.pl',
2918                 '.za.pl',
2919                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2920         ),
2921         'oyax.com',                             ///user_links.php
2922         '*.p2a.pl',
2923         '*.parlaris.com',
2924         '*.pathfinder.gr',
2925         '*.persianblog.com',
2926         '*.phorum.pl',
2927         'Phpbb24.com' => array( // by Daniel Eriksson
2928                 '*.createforum.us',     // registry at webbland.se
2929                 '*.forumportal.us',     // registry at webbland.se
2930                 '*.freeportal.us',      // registry at network24.se
2931                 '*.phpbb2.us',          // daniel at danielos.com
2932                 '*.phpbb24.com',        // daniel at danielos.com
2933                 '*.myforumportal.com',  // daniel at webbland.se
2934         ),
2935         'phpbb4you.com',
2936         'phpbbcommunity.com',
2937         '*.phpbbx.de',
2938         '*.pochta.ru',
2939         '*.portbb.com',
2940         '*.portcms.com',
2941         'powerwebmaster.de',
2942         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2943         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2944         '*.probook.de',
2945         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2946         '*.pun.pl',
2947         'putfile.com',
2948         '*.quickfreehost.com',
2949         'quizilla.com',
2950         '*.quotaless.com',
2951         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2952         'razyboard.com',
2953         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2954         'realhp.de',
2955         'reddit.com',           ///user/
2956         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2957                 '*.juicypornhost.com',
2958                 '*.pornzonehost.com',
2959                 '*.xhostar.com',
2960         ),
2961         'RIN.ru' => array(
2962                 '*.sbn.bz',
2963                 '*.wol.bz',
2964         ),
2965         '*.sayt.ws',
2966         'Seblg.com' => array(
2967                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2968                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2969         ),
2970         '*.seo-blog.org',
2971         '*.shoutpost.com',
2972         '*.siamforum.com',
2973         '*.siteburg.com',
2974         '*.sitehome.ru',
2975         '*.sitesfree.com',              // support at livesearching.com
2976         '*.sitesled.com',
2977         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2978         'SmarTrans.com' => array(
2979                 '.3w.to',
2980                 '.aim.to',
2981                 '.djmp.jp',
2982                 '.nihongourl.nu',
2983                 '.url.sh',              // Says SmarTrans
2984                 '.urljp.com',
2985                 '.www1.to',
2986                 '.www2.to',
2987                 '.www3.to',
2988         ),
2989         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2990         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2991         'members.spboards.com',
2992         'forums.speedguide.net',
2993         'Sphosting.com' => array(       // by admin at sphosting.com
2994                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2995                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2996                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2997                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2998                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2999         ),
3000         '*.spicyblogger.com',
3001         '*.spotbb.com',
3002         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
3003         '*.squarespace.com',
3004         'stickypond.com',
3005         'stormloader.com',
3006         'strikebang.com',
3007         '*.sultryserver.com',
3008         '*.t35.com',
3009         '*.talks.at',
3010         'tabletpcbuzz.com',
3011         '*.talkthis.com',
3012         'tbns.net',
3013         'telasipforums.com',
3014         'theforumhub.com',
3015         'thestudentunderground.org',
3016         'think.ubc.ca',
3017         '*.thumblogger.com',
3018         'Topix.com' => array(
3019                 'topix.com',
3020                 'topix.net',
3021         ),
3022         'forum.tourism-talk.com.au',
3023         'tycho at e-lab.nl' => array(
3024                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
3025                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
3026         ),
3027         '*.tumblr.com',
3028         'UcoZ Web-Services' => array(
3029                 '*.3dn.ru',
3030                 '*.clan.su',
3031                 '*.moy.su',
3032                 '*.my1.ru',
3033                 '*.p0.ru',
3034                 '*.pp.net.ua',
3035                 '*.ucoz.co.uk',
3036                 '*.ucoz.com',
3037                 '*.ucoz.net',
3038                 '*.ucoz.org',
3039                 '*.ucoz.ru',
3040                 '*.ws.co.ua',
3041         ),
3042         '*.unforo.net',
3043         'veoh.com',
3044         '*.vdforum.ru',
3045         '*.vtost.com',
3046         '*.vidiac.com',
3047         'Voila.fr' => array('.site.voila.fr'),
3048         'volny.cz',
3049         'voy.com',
3050         '*.welover.org',
3051         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
3052                 '*.fasthost.tv',
3053                 '*.hothost.tv',
3054                 '*.isgreat.tv',
3055                 '*.issexy.tv',
3056                 '*.isterrible.tv',
3057                 '*.somegood.tv',
3058                 '*.adultnations.com',
3059                 '*.alladultfemale.com',
3060                 '*.alladultmale.com',
3061                 '*.allbisexual.com',
3062                 '*.allbreast.com',
3063                 '*.allfeminism.com',
3064                 '*.allmanpages.com',
3065                 '*.allmendirect.com',
3066                 '*.allphotoalbum.com',
3067                 '*.allsexpages.com',
3068                 '*.allwomanweb.com',
3069                 '*.attorney-site.com',
3070                 '*.bedclip.com',
3071                 '*.bestfamilysite.com',
3072                 '*.bestmusicpages.com',
3073                 '*.bigmoron.com',
3074                 '*.bourgeoisonline.com',
3075                 '*.candyfrom.us',
3076                 '*.cartoonhit.com',
3077                 '*.cat-on-line.com',
3078                 '*.chokesondick.com',
3079                 '*.closeupsof.us',
3080                 '*.cpa-site.com',
3081                 '*.dampgirl.com',
3082                 '*.dampgirls.com',
3083                 '*.deepestfetish.com',
3084                 '*.docspages.com',
3085                 '*.dog-on-line.com',
3086                 '*.dogcountries.com',
3087                 '*.dognations.com',
3088                 '*.doingitwith.us',
3089                 '*.drenchedface.com',
3090                 '*.drenchedlips.com',
3091                 '*.drspages.com',
3092                 '*.edogden.com',
3093                 '*.eroticountry.com',
3094                 '*.fasthost.tv',
3095                 '*.fineststars.com',
3096                 '*.foronlinegames.com',
3097                 '*.forplanetearth.com',
3098                 '*.freeadultparty.com',
3099                 '*.freespeechsite.com',
3100                 '*.gayadultxxx.com',
3101                 '*.gaytaboo.com',
3102                 '*.greatcookery.com',
3103                 '*.greatrecipepages.com',
3104                 '*.greatstreamingvideo.com',
3105                 '*.hatesit.com',
3106                 '*.hothost.tv',
3107                 '*.iscrappy.com',
3108                 '*.isgreat.tv',
3109                 '*.issexy.tv',
3110                 '*.isterrible.tv',
3111                 '*.itinto.us',
3112                 '*.japannudes.net',
3113                 '*.jesussave.us',
3114                 '*.jesussaveus.com',
3115                 '*.labialand.com',
3116                 '*.lettersfrom.us',
3117                 '*.lookingat.us',
3118                 '*.lunaticsworld.com',
3119                 '*.microphallus.com',
3120                 '*.mycatshow.com',
3121                 '*.mydogshow.com',
3122                 '*.myhardman.com',
3123                 '*.mylawsite.net',
3124                 '*.mylovething.com',
3125                 '*.onasoapbox.com',
3126                 '*.onlinepulpit.com',
3127                 '*.petitionthegovernment.com',
3128                 '*.photosfor.us',
3129                 '*.picturetrades.com',
3130                 '*.pleasekiss.us',
3131                 '*.politicalemergency.com',
3132                 '*.power-emergency.com',
3133                 '*.prayingfor.us',
3134                 '*.realbadidea.com',
3135                 '*.realisticpolitics.com',
3136                 '*.reallybites.com',
3137                 '*.reallypumping.us',
3138                 '*.reallyrules.com',
3139                 '*.reallysuckass.com',
3140                 '*.reallysucksass.com',
3141                 '*.realsweetheart.com',
3142                 '*.rottenass.com',
3143                 '*.schoolreference.com',
3144                 '*.sexheroes.com',
3145                 '*.sharewith.us',
3146                 '*.smutstars.com',
3147                 '*.soakinglips.com',
3148                 '*.somegood.tv',
3149                 '*.songsfrom.us',
3150                 '*.stinkingfart.com',
3151                 '*.stinkyhands.com',
3152                 '*.storiesfrom.us',
3153                 '*.taboocountry.com',
3154                 '*.television-series.com',
3155                 '*.thisbelongsto.us',
3156                 '*.totallyboning.us',
3157                 '*.vaginasisters.com',
3158                 '*.verydirtylaundry.com',
3159                 '*.videosfor.us',
3160                 '*.videosfrom.us',
3161                 '*.videosof.us',
3162                 '*.virtualdogshit.com',
3163                 '*.web1000.com',
3164                 '*.webpicturebook.com',
3165                 '*.wronger.com',
3166                 '*.xxxnations.com',
3167                 '*.yourwaywith.us',
3168         ),
3169         'webblog.ru',
3170         'weblogmaniacs.com',
3171         '.webng.com',                   // www.*, www3.*
3172         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3173         'websitetoolbox.com',
3174         '*.webtropia.com',
3175         'Welnet.de' => array(
3176                 'welnet.de',
3177                 'welnet4u.de',
3178         ),
3179         'wh-gb.de',
3180         '*.wikidot.com',
3181         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3182         '*.wmjblogs.ru',
3183         '*.wordpress.com',
3184         //'.wsboards.com',              // Noticed this site had been removed due to spam
3185         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3186         '*.xforum.se',
3187         'xfreeforum.com',
3188         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3189         '*.xoomwebs.com',
3190         '.xterm.org',
3191         '.freeblogs.xp.tl',
3192         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3193         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3194         'Yahoo.com' => array(
3195                 'flickr.com',
3196                 'geocities.com',
3197         ),
3198         'YANDEX, LLC.' => array(        // noc at yandex.net
3199                 '*.narod.ru',
3200                 'ya.ru',
3201                 'yandex.ru',
3202         ),
3203         '*.yeahost.com',
3204         'yourfreebb.de',
3205         'Your-Websites.com' => array(
3206                 '*.your-websites.net',
3207                 '*.web-space.ws',
3208         ),
3209
3210
3211         '*.heliohost.org',      // by ashoat at gmail.com
3212         'X10Hosting.com' => array(
3213                 // by support at clockworkcomputers.com
3214                 '*.x10hosting.com',
3215                 '*.elementfx.com',
3216                 '*.exofire.net',
3217                 '*.pcriot.com',
3218         ),
3219         '.zendurl.com',         // by ajcar1992 at gmail.com
3220 );
3221
3222 // --------------------------------------------------
3223
3224 $blocklist['B-2'] = array(
3225
3226         // B-2: Jacked contents, something implanted
3227         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3228         '*.3dm3.com',
3229         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3230         '*.1fr1.com',
3231         'a4aid.org',
3232         'aac.com',
3233         '*.aamad.org',
3234         'ad-pecjak.si',
3235         'agnt.org',
3236         'alwanforthearts.org',
3237         '*.anchor.net.au',
3238         'anewme.org',
3239         'arcrockett.com',               ///golf/excel/
3240         'arisedesign.net',              //Portfolio/d981/
3241         'internetyfamilia.asturiastelecentros.com',
3242         'ballblair.com',                ///images/thumbs/
3243         'Ball State University' => array('web.bsu.edu'),
3244         'btofaq.net',                   ///v3/forum
3245         'blepharospasm.org',
3246         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3247         'nyweb.bowlnfun.dk',
3248         '*.buzznet.com',
3249         'Carroll College' => array(
3250                 'carroll.edu',          ///boards/
3251         ),
3252         '*.canberra.net.au',
3253         'castus.com',
3254         'Case Western Reserve University' => array('case.edu'),
3255         'ceval.de',
3256         'chaco.gov.ar',
3257         'chasingrainbowsaustralia.com', ///geometry/
3258         'codespeak.net',
3259         'Colorado School of Mines' => array('ticc.mines.edu'),
3260         '*.colourware.co.uk',
3261         'cpuisp.com',
3262         'International Christian University' => array('icu.edu.ua'),
3263         '*.iphpbb.com',
3264         'board-z.de',
3265         '*.board-z.de',
3266         'California State University Stanislaus' => array('writing.csustan.edu'),
3267         'cannon.co.za',
3268         'columbosgarden.com',
3269         '*.communityhost.de',
3270         'connectionone.org',
3271         'deathwinds.com',
3272         'deforum.org',
3273         'delayedreaction.org',
3274         'deproduction.org',
3275         'dc503.org',
3276         'dialadeck.com',                ///images/
3277         'dre-centro.pt',
3278         'Duke University' => array('devel.linux.duke.edu'),
3279         '*.esen.edu.sv',
3280         'forums.drumcore.com',
3281         'dundeeunited.org',
3282         'energyglass.com.ua',
3283         'equitas.com.au',               ///images/mim3/, no index.html
3284         'exclusivehotels.com',
3285         'info.ems-rfid.com',
3286         'fairyfunkyard.com',    ///images_files/files/
3287         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3288         'fbwloc.com',
3289         '.fhmcsa.org.au',
3290         'findyourwave.co.uk',
3291         'frogcafe.net',
3292         'plone4.fnal.gov',
3293         'freeforen.com',
3294         'funkdoc.com',
3295         'funnyclipcentral.com',
3296         'gearseds.com',
3297         'generationrice.com',
3298         'ghettojava.com',
3299         'gnacademy.org',
3300         '*.goodboard.de',
3301         'GreenDayVideo.net' => array(
3302                 'greendayvideo.net',
3303                 'espanol.greendayvideo.net',
3304         ),
3305         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3306         'Harvard Law School' => array('blogs.law.harvard.edu'),
3307         'helpiammoving.com',
3308         'homepage-dienste.com',
3309         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3310         'Howard University' => array('networks.howard.edu'),
3311         'hullandhull.com',
3312         'Huntington University' => array('huntington.edu'),
3313         'huskerink.com',
3314         '.hyba.info',
3315         'ideas4you.com',        ///photos/
3316         'inda.org',
3317         '*.indymedia.org',      // by abdecom at riseup.net
3318         'instantbulletin.com',
3319         'internetincomeclub.com',
3320         '*.inventforum.com',
3321         'Iowa State University' => array('boole.cs.iastate.edu'),
3322         'ipwso.org',
3323         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3324         'ironmind.com',
3325         'skkustp.itgozone.com', // hidden JavaScript
3326         'jazz2online.com',
3327         '.jloo.org',
3328         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3329         'kjon.com',
3330         'Kazan State University' => array(
3331                 'dir.kzn.ru',
3332                 'sys.kcn.ru',
3333         ),
3334         'test.kernel.org',
3335         'kevindmurray.com',
3336         'kroegjesroutes.nl',
3337         '.legion.org',
3338         'Loyola Marymount University' => array('lmu.edu'),
3339         'forum.lixium.fr',
3340         'macfaq.net',
3341         'macvirus.org',         ///board/
3342         'me4x4.com',
3343         'microbial-ecology.net',
3344         'minsterscouts.org',
3345         'morallaw.org',
3346         'morerevealed.com',
3347         'macronet.org',
3348         'mamiya.co.uk',
3349         'vcd.mmvcd.com',
3350         'Monmouth College' => array('department.monm.edu'),
3351         'mountainjusticemedia.org',
3352         '*.mybbland.com',
3353         'mydlstore.com',
3354         '*.netboardz.com',
3355         'North Carolina A&T State University' => array(
3356                 'ncat.edu',
3357                 'my.ncat.edu',
3358                 'hlc.ncat.edu',
3359         ),
3360         'placetobe.org',
3361         'Naropa University' => array(
3362                 'naropa.edu',                   ///forum/
3363         ),
3364         'users.nethit.pl',
3365         'nightclubvip.net',
3366         'njbodybuilding.com',
3367         'nlen.org',
3368         'North Carolina School of Science and Mathematics' => array(
3369                 'neverland.ncssm.edu',  ///include/web/forum/
3370                 'grid.ncssm.edu',               ///ncssm_grid/
3371         ),
3372         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3373         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3374         'offtextbooks.com',
3375         'ofimatika.com',
3376         'olympiafoto.com',              ///images/
3377         'omakase-net',                  // iframe
3378         'omikudzi.ru',
3379         'openchemist.net',
3380         'palungjit.com',
3381         'pataphysics-lab.com',
3382         'paypaldev.org',
3383         'paullima.com',
3384         'perl.org.br',
3385         'pfff.co.uk',
3386         'pimpo.com',                    ///_old_site/
3387         'pix4online.co.uk',
3388         'plone.dk',
3389         'preform.dk',
3390         'privatforum.de',
3391         'publicityhound.net',
3392         'puppylinux.net',               ///news/content/counter/pages/
3393         'qea.com',
3394         'rbkdesign.com',
3395         'rehoboth.com',
3396         'rodee.org',
3397         'ryanclark.org',
3398         '*.reallifelog.com',
3399         'rkphunt.com',
3400         'rso-csp.org',                  ///bulletins/
3401         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3402         'sapphireblue.com',
3403         'saskchamber.com',
3404         'savevoorhees.org',
3405         'sdhmalenovice.cz',             //galerie/
3406         'selikoff.net',
3407         'serbisyopilipino.org',
3408         'setbb.com',
3409         'sharejesusinternational.com',
3410         'silver-tears.net',
3411         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3412         '.softpress.com',
3413         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3414         'fora.taniemilitaria.pl',       ///phpbb
3415         'tehudar.ru',
3416         'Tennessee Tech University' => array('manila.tntech.edu'),
3417         'thebluebird.ws',
3418         'theosis.org',
3419         '*.thoforum.com',
3420         'troms-slekt.com',
3421         'theedgeblueisland.com',
3422         'toyshop.com.tw',               // /images/sigui/
3423         'torontoplace.com',
3424         'chat.travlang.com',
3425         'trickropingbylassue.com',
3426         'Truman State University' => array('mathbio.truman.edu'),
3427         'tuathadedannan.org',
3428         'txgotg.com',
3429         'tzaneen.co.za',
3430         'ugeavisen.com',                ///style/
3431         'forums.ugo.com',
3432         'whole.cs.unibo.it',
3433         'The University of North Dakota' => array(
3434                 'learn.aero.und.edu',
3435                 'ez.asn.und.edu',
3436         ),
3437         'The University of Alabama' => array('bama.ua.edu'),
3438         'unisonscotlandlaw.co.uk',
3439         'University of California' => array('classes.design.ucla.edu'),
3440         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3441         'University of Northern Colorado' => array('unco.edu'),
3442         'University of North Carolina' => array(
3443                 'elm.cis.uncw.edu'      ///testBoinc/
3444         ),
3445         'University of Toronto' => array(
3446                 'environment.utoronto.ca',
3447                 'grail.oise.utoronto.ca',
3448                 'utsc.utoronto.ca',
3449         ),
3450         'University of Wisconsin' => array(
3451                 'einstein.phys.uwm.edu'
3452         ),
3453         'urgentclick.com',
3454         'vacant.org.uk',
3455         'Villa Julie College' => array('www4.vjc.edu'),
3456         'Vail Valley Foundation' => array('.vvf.org'),
3457         'wabson.org',
3458         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3459         'webarch.com',          // by WebArchitects (webarch at insync.net)
3460         'weehob.com',
3461         'West Virginia University Parkersburg' => array('wvup.edu'),
3462         'williamsburgrentals.com',
3463         'wolvas.org.uk',
3464         'wookiewiki.org',
3465         'xsgaming.com',                 // Jacked
3466         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3467         'Yahoo.com' => array(
3468                 'blog.360.yahoo.com',
3469                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3470         ),
3471         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3472         'youthpeer.org',
3473         '*.zenburger.com',
3474         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3475 );
3476
3477 // --------------------------------------------------
3478
3479 $blocklist['C'] = array(
3480
3481         // C: Sample setting of:
3482         // Exclusive spam domains
3483         //
3484         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3485         // affiliates, finance, sending viruses, malicious attacks to browsers,
3486         // and/or mixed ones
3487         //
3488         // Please notify us about this list with reason:
3489         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3490
3491         // C-1: Domain sets (seems to be) born to spam you
3492         //
3493         // All buziness-related spam
3494         //'.biz'
3495         //
3496         'admin at seekforweb.com' => array(
3497                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3498                 '.lovestoryx.com',
3499                 '.loveaffairx.com',
3500                 '.onmore.info',
3501                 '.scfind.info',
3502                 '.scinfo.info',
3503                 '.webwork88.info',
3504         ),
3505         'boss at bse-sofia.bg' => array(        // by Boris
3506                 '.htewbop.org',
3507                 '.kimm--d.org',
3508                 '.gtre--h.org',
3509                 '.npou--k.org',
3510                 '.bres--z.org',
3511                 '.berk--p.org',
3512                 '.bplo--s.org',
3513                 '.basdpo.org',
3514                 '.jisu--m.org',
3515                 '.kire--z.org',
3516                 '.mertnop.org',
3517                 '.mooa--c.org',
3518                 '.nake--h.org',
3519                 '.noov--b.org',
3520                 '.suke--y.org',
3521                 '.vasdipv.org',
3522                 '.vase--l.org',
3523                 '.vertinds.org',
3524         ),
3525         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3526                 '.aqq3.info',
3527                 '.axa00.info',
3528                 '.okweb11.org',
3529                 '.okweb12.org',
3530                 '.okweb13.org',
3531                 '.okweb14.org',
3532         ),
3533         'opezdol at gmail.com' => array(
3534                 '.informazionicentro.info',
3535                 '.notiziacentro.info',
3536         ),
3537         'SomethingGen' => array(
3538                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3539                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3540                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3541                 // by Lee Chang (nebucha at model-x.com)
3542                 '.adult-chat-world.info',       // by Lui
3543                 '.adult-chat-world.org',        // by Lui
3544                 '.adult-sex-chat.info',         // by Lui
3545                 '.adult-sex-chat.org',          // by Lui
3546                 '.adult-cam-chat.info',         // by Lui
3547                 '.adult-cam-chat.org',          // by Lui
3548                 '.dildo-chat.org',                      // by Lui
3549                 '.dildo-chat.info',                     // by Lui
3550                 // flirt-online.info is not CamsGen
3551                 '.flirt-online.org',            // by Lui
3552                 '.live-adult-chat.info',        // by Lui
3553                 '.live-adult-chat.org',         // by Lui
3554                 '.sexy-chat-rooms.info',        // by Lui
3555                 '.sexy-chat-rooms.org',         // by Lui
3556                 '.swinger-sex-chat.info',       // by Lui
3557                 '.swinger-sex-chat.org',        // by Lui
3558                 '.nasty-sex-chat.info',         // by Lui
3559                 '.nasty-sex-chat.org',          // by Lui
3560
3561                 '.camshost.info',                       // by Sergey
3562                 '.camdoors.info',                       // by Sergey
3563                 '.chatdoors.info',                      // by Sergey
3564
3565                 // 89.149.206.225 by Pronin
3566                 '.dorozhka.info',
3567                 '.kolonochka.info',
3568                 '.knizhechka.info',
3569                 '.krantik.info',
3570                 '.lebedi.info',
3571                 '.loshad.info',
3572                 '.pechenka.info',
3573                 '.porosenok.info',
3574                 '.indyushonok.info',
3575                 '.kotyonok.info',
3576                 '.kozlyonok.info',
3577                 '.magnoliya.info',
3578                 '.svinka.info',
3579                 '.svinya.info',
3580                 '.televizorchik.info',
3581                 '.tumbochka.info',
3582                 '.zherebyonok.info',
3583
3584                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3585
3586                 '.adult-cam-chat-sex.info',             // by Lee
3587                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3588                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3589                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3590                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3591                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3592                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3593                 '.sex-chat-porn-cam.info',              // by Lee
3594         ),
3595         'mital at topo20.org' => array( // by Marcello Italianore
3596                 '.trevisos.org',
3597                 '.topo20.org',
3598         ),
3599         'WellCams.com' => array(
3600                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3601                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3602                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3603         ),
3604         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3605                 '.besturgent.org',
3606                 '.googletalknow.org',
3607                 '.montypythonltd.org',
3608                 '.supersettlemet.org',
3609                 '.thepythonfoxy.org',
3610                 '.ukgamesyahoo.org',
3611                 '.youryahoochat.org',
3612         ),
3613         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3614                 '.dbsajax.org',
3615                 '.acgt2005.org',
3616                 '.gopikottoor.com',
3617                 '.koosx.org',
3618                 '.mmgz.org',
3619                 '.zhiyehua.net',
3620         ),
3621         'vdf at lovespb.com' => array(  // by Andrey
3622                 '.02psa.info',
3623                 '.1818u.org',
3624                 '.18ew.info',
3625                 '.43sexx.org',
3626                 '.56porn.org',
3627                 '.6discount.info',
3628                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3629                 '.78rus.info',
3630                 '.92ssex.org',          // "ForumGenerator"
3631                 '.93adult.org',         // "ForumGenerator"
3632                 '.aboutsr.info',
3633                 '.aboutzw.info',
3634                 '.all23.info',
3635                 '.allvdf.info',
3636                 '.buy-dge.info',
3637                 '.buypo.info',
3638                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3639                 '.cv83.info',
3640                 '.cvwifw.info',
3641                 '.dabouts.info',
3642                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3643                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3644                 '.free01sa.info',
3645                 '.frees1.info',
3646                 '.freexz.info',
3647                 '.ifree-search.org',
3648                 '.lovespb.info',
3649                 '.myso2.info',
3650                 '.nb74u.info',
3651                 '.ohhh2.info',
3652                 '.ol43.info',
3653                 '.olala18.info',
3654                 '.oursales.info',
3655                 '.pasian1.info',
3656                 '.pldk.info',
3657                 '.po473.info',
3658                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3659                 '.poz2.info',
3660                 '.qpf8j4d.info',
3661                 '.saleqw.info',
3662                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3663                 '.sexz18.info',
3664                 '.sexy69a.info',
3665                 '.shedikc.info',
3666                 '.spb78.info',
3667                 '.usacanadauk.info',
3668                 '.v782mks.info',
3669                 '.vny0.info',
3670                 '.wifes1.info',
3671                 '.xranvam.info',
3672                 '.zenitcx.info',
3673                 '.zxolala.info',
3674         ),
3675         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3676                 '.care01.info',
3677                 '.care02.info',
3678                 '.care03.info',
3679                 '.care04.info',
3680                 '.care05.info',
3681                 '.care06.info',
3682                 '.care07.info',
3683                 '.care08.info',
3684                 '.care09.info',
3685                 '.care10.info',
3686                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3687                 '.klastar01.info',
3688                 '.klastar02.info',
3689                 '.klastar03.info',
3690                 '.klastar04.info',
3691                 '.klastar05.info',
3692                 '.klastar06.info',
3693                 '.klastar07.info',
3694                 '.klastar08.info',
3695                 '.klastar09.info',
3696                 '.klastar10.info',
3697                 '.um20ax01.info',
3698                 '.um20ax02.info',
3699                 '.um20ax03.info',
3700                 '.um20ax04.info',
3701                 '.um20ax05.info',
3702                 '.um20ax06.info',
3703                 '.um20ax07.info',
3704                 '.um20ax08.info',
3705                 '.um20ax09.info',
3706                 '.um20ax10.info',
3707         ),
3708         'forrass at gmail.com' => array(        // by Ismail
3709                 '.zmh01.info',
3710                 '.zmh02.info',
3711                 '.zmh03.info',
3712                 '.zmh04.info',
3713                 '.zmh05.info',
3714                 '.zmh06.info',
3715                 '.zmh07.info',
3716                 '.zmh08.info',
3717                 '.zmh09.info',
3718                 '.zmh10.info',
3719         ),
3720         'Varsylenko Vladimir and family' => array(
3721                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3722                 // by David C. Lack (David.C.Lack at dodgeit.com)
3723                 // by Kuzma V Safonov (admin at irtes.ru)
3724                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3725                 // by LAURI FUNK (vvm_kz at rambler.ru)
3726
3727                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3728                 '.abrek.info',                          // by Petrov
3729                 '.allsexonline.info',           // by Varsylenko
3730                 '.d1rnow.info',                         // by Petrov
3731                 '.doxer.info',                          // Petrov
3732                 '.freeforworld.info',           // Varsylenko
3733                 '.goodworksite.info',           // Varsylenko
3734                 '.onall.info',                          // by Varsylenko
3735                 '.powersiteonline.info',        // by Varsylenko
3736                 '.rentmysite.info',                     // by Varsylenko
3737                 '.sexdrink.info',                       // by Petrov
3738                 '.siteszone.info',                      // by Varsylenko
3739                 '.sfup.info',                           // by Petrov
3740                 '.superfreedownload.info',      // by Varsylenko
3741                 '.superneeded.info',            // by Varsylenko
3742                 '.srup.info',                           // by Petrov
3743
3744                 // 66.235.185.143(*.svabuse.info)
3745                 '.accommodationwiltshire.com',  // by Petrov
3746                 '.levines.info',                        // by Petrov
3747                 '.sernost.info',                        // by Petrov
3748                 '.sexvideosite.info',           // by Petrov
3749                 '.vvsag.info',                          // by Petrov
3750
3751                 // 81.0.195.134
3752                 '.michost.info',                        // by LAURI
3753                 '.parther.info',                        // by LAURI
3754
3755                 // 88.214.202.100
3756                 '.gitsite.info',                        // by Petrov
3757                 '.organiq.info',                        // by Petrov
3758                 '.yoursitedh.info',                     // by Petrov
3759
3760                 // 217.11.233.58 by Petrov
3761                 '.mp3vault.info',
3762
3763                 // DNS time out or failed
3764                 '.bequeous.info',                       // by Davi
3765                 '.sopius.info',                         // by Kuzma
3766                 '.sovidopad.info',                      // by Kuzma
3767                 '.yerap.info',                          // by Kuzma
3768         ),
3769         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3770                 '.flywebs.com',
3771                 '.hostrim.com',
3772                 '.playbit.com',
3773         ),
3774         'webmaster at dgo3d.info' => array(     // by Son Dittman
3775                 '.bsb3b.info',
3776                 '.dgo3d.info',
3777                 '.dgo5d.info',
3778         ),
3779         'cooler.infomedia at gmail.com' => array(
3780                 '.diabetescarelink.com',
3781                 '.firstdebthelp.com',
3782         ),
3783         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3784                 '.pokah.lv',
3785                 '.astrons.com',
3786         ),
3787         'seocool at bk.ru' => array(    // by Skar
3788                 '.implex3.com',
3789                 '.implex6.info',
3790                 '.softprof.org',
3791         ),
3792         'Caslim.info' => array(
3793                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3794                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3795         ),
3796         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3797                 '.777-poker.biz',
3798                 '.porn-11.com',
3799         ),
3800         'Conto.pl' => array(
3801                 '.8x.pl',               // domena at az.pl
3802                 '.3x3.pl',              // by biuro at nazwa.pl
3803                 '.conto.pl',    // by biuro at nazwa.pl
3804                 '.guu.pl',              // by conto.pl (domena at az.pl)
3805                 '.xcx.pl',              // domena at az.pl
3806                 '.yo24.pl',             // domena at az.pl
3807         ),
3808         'mail at pcinc.cn' => array(
3809                 // Domains by Lin Zhi Qiang
3810                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3811
3812                 // 125.65.112.11
3813                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3814                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3815                 '.shoopivdoor.com',
3816
3817                 // 125.65.112.12
3818                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3819                 '.hosetaibei.com',
3820                 '.playsese.com',
3821
3822                 // 125.65.112.13
3823                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3824                 '.ahatena.com',
3825                 '.asdsdgh-jp.com',
3826                 '.conecojp.net',
3827                 '.game-oekakibbs.com',
3828                 '.geocitygame.com',
3829                 '.gsisdokf.net',
3830                 '.korunowish.com',
3831                 '.netgamelivedoor.com',
3832                 '.soultakerbbs.net',
3833                 '.yahoo-gamebbs.com',
3834                 '.ywdgigkb-jp.com',
3835
3836                 // 125.65.112.14
3837                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3838                 '.acyberhome.com',
3839                 '.bbs-qrcode.com',
3840                 '.gamesroro.com',
3841                 '.gameyoou.com',
3842                 '.gangnu.com',
3843                 '.goodclup.com',
3844                 '.lineage321.com',
3845                 '.linkcetou.com',
3846                 '.love888888.com',
3847                 '.ragnarok-bbs.com',
3848                 '.ragnarok-game.com',
3849                 '.rmt-navip.com',
3850                 '.watcheimpress.com',
3851
3852                 // 125.65.112.15
3853                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3854                 '.18girl-av.com',
3855                 '.aurasoul-visjp.com',
3856                 '.gamaniaech.com',
3857                 '.game-mmobbs.com',
3858                 '.gameslin.net',
3859                 '.gemnnammobbs.com',
3860                 '.gogolineage.net',
3861                 '.grandchasse.com',
3862                 '.jpragnarokonline.com',
3863                 '.jprmthome.com',
3864                 '.maplestorfy.com',
3865                 '.netgamero.net',
3866                 '.nothing-wiki.com',
3867                 '.ourafamily.com',
3868                 '.ragnarok-sara.com',
3869                 '.rmt-lineagecanopus.com',
3870                 '.rmt-ranloki.com',
3871                 '.rogamesline.com',
3872                 '.roprice.com',
3873                 '.tuankong.com',
3874                 '.twreatch.com',
3875
3876                 // 125.65.112.22
3877                 // The same IP: web013.cdnhost.cn
3878                 '.lzy88588.com',
3879                 '.ragnaroklink.com',
3880
3881                 // 125.65.112.24
3882                 '.rmtfane.com',
3883                 '.fc2weday.com',
3884                 '.nlftweb.com',
3885
3886                 // 125.65.112.27
3887                 '.i520i.com',
3888                 '.sunwayto.com',
3889
3890                 // 125.65.112.31
3891                 // The same IP: web016.cdnhost.cn
3892                 '.twyaooplay.com',
3893
3894                 // 125.65.112.32
3895                 // The same IP: web037.cdnhost.cn
3896                 '.emeriss.com',
3897                 '.raginfoy.com',
3898                 '.ragnarokgvg.com',
3899                 '.rentalbbs-livedoor.com',
3900                 '.romaker.com',
3901                 '.sagewikoo.com',
3902                 '.samples112xrea.com',
3903                 '.wiki-house.com',
3904
3905                 // 125.65.112.49
3906                 '.chaosx0.com',
3907
3908                 // 125.65.112.88
3909                 // The same IP: web015.cdnhost.cn
3910                 '.a-hatena.com',
3911                 '.biglobe-ne.com',
3912                 '.blogplaync.com',
3913                 '.din-or.com',
3914                 '.dtg-gamania.com',
3915                 '.fcty-net.com',
3916                 '.game-fc2blog.com',
3917                 '.gameurdr.com',
3918                 '.getamped-garm.com',
3919                 '.interzq.com',
3920                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3921                 '.luobuogood.com',
3922                 '.ragnarok-search.com',
3923                 '.rinku-livedoor.com',
3924
3925                 // 125.65.112.90
3926                 '.gtvxi.com',
3927
3928                 // 125.65.112.91
3929                 // The same IP: web004.cdnhost.cn
3930                 '.6828teacup.com',
3931                 '.blog-livedoor.net',
3932                 '.cityblog-fc2web.com',
3933                 '.deco030-cscblog.com',
3934                 '.imbbs2t4u.com',
3935                 '.k5dionne.com',
3936                 '.lineagejp-game.com',
3937                 '.mbspro6uic.com',
3938                 '.slower-qth.com',
3939                 '.wikiwiki-game.com',
3940
3941                 // 125.65.112.93
3942                 // The same IP: web022.cdnhost.cn
3943                 '.aaa-livedoor.net',
3944                 '.cityhokkai.com',              // web022.cdnhost.cn
3945                 '.fanavier.net',
3946                 '.geocitylinks.com',    // web022.cdnhost.cn
3947                 '.kuronowish.net',              // web022.cdnhost.cn
3948                 '.ro-bot.net',
3949
3950                 // 125.65.112.95
3951                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3952                 '.23styles.com',
3953                 '.aehatena-jp.com',
3954                 '.ameblog-jp.net',
3955                 '.antuclt.com',
3956                 '.blog-ekndesign.com',
3957                 '.d-jamesinfo.com',
3958                 '.editco-jp.com',
3959                 '.ezbbsy.com',
3960                 '.extd-web.com',
3961                 '.fotblong.com',
3962                 '.game62chjp.net',
3963                 '.gamegohi.com',
3964                 '.gamesmusic-realcgi.net',
3965                 '.gamesragnaroklink.net',
3966                 '.homepage-nifty.com',
3967                 '.ie6xp.com',
3968                 '.irisdti-jp.com',
3969                 '.jklomo-jp.com',
3970                 '.jpxpie6-7net.com',
3971                 '.lian-game.com',
3972                 '.lineage-bbs.com',
3973                 '.lineage1bbs.com',
3974                 '.livedoor-game.com',
3975                 '.litcan.com',
3976                 '.lovejpjp.com',
3977                 '.m-phage.com',
3978                 '.muantang.com',
3979                 '.plusd-itmedia.com',
3980                 '.runbal-fc2web.com',
3981                 '.saussrea.com',
3982                 '.tooalt.com',
3983                 '.toriningena.net',
3984                 '.yahoodoor-blog.com',
3985                 '.yy14-kakiko.com',
3986
3987                 // 125.65.112.137
3988                 '.clublineage.com',
3989
3990                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3991                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3992                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3993
3994                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3995                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3996
3997                 '.games-nifty.com',             // 255.255.255.255 now
3998                 '.homepage3-nifty.com', // 255.255.255.255 now
3999         ),
4000         'caddd at 126.com' => array(
4001                 '.chengzhibing.com',    // by chen gzhibing
4002                 '.jplinux.com',                 // by lian liang
4003                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
4004                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
4005                 '.tooplogui.com',               // by zibing cai
4006                 '.twsunkom.com',                // by guo zhi wei
4007                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
4008         ),
4009         'nuigiym2 at 163.com' => array( // by fly bg
4010                 '.linainfo.net',                // Seems IP not allocated now
4011                 '.lineagalink.com',             // 220.247.157.99
4012                 '.lineagecojp.com',             // 61.139.126.10
4013                 '.ragnarokonlina.com',  // 220.247.158.99
4014         ),
4015         'aakin at yandex.ru' => array(
4016                 // 89.149.206.225(*.internetserviceteam.com) by Baer
4017                 '.entirestar.com',
4018                 '.joppperl.info',
4019                 '.onlinedrugsdirect.com',
4020                 '.pilkazen.info',
4021                 '.superbuycheap.com',
4022                 '.supersmartdrugs.com',
4023                 '.thecheappillspharmacy.com',
4024                 '.topdircet.com',
4025         ),
4026         'newblog9 at gmail.com' => array(       // by jiuhatu kou
4027                 '.tianmieccp.com',
4028                 '.xianqiao.net',
4029         ),
4030         'm.frenzy at yahoo.com' => array(       // by Michael
4031                 '.p5v.org',
4032                 '.j111.net',
4033                 '.searchhunter.info',
4034                 '.soft2you.info',
4035                 '.top20health.info',
4036                 '.top20ringtones.info',
4037                 '.top20travels.info',
4038                 '.v09v.info',
4039                 '.x09x.info',
4040                 '.zb-1.com',
4041         ),
4042         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
4043                 '.bingogoldenpalace.info',
4044                 '.ccarisoprodol.info',
4045                 '.ezxcv.info',
4046                 '.isuperdrug.com',
4047                 '.pharmacif.info',
4048                 '.pornsexteen.biz',
4049                 '.ugfds.info',
4050                 '.vviagra.info',
4051         ),
4052         'anatolsenator at gmail.com' => array(  // by Anatol
4053                 '.cheapestviagraonline.info',
4054                 '.buyphentermineworld.info'
4055         ),
4056         'webmaster at mederotica.com' => array(
4057                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
4058                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
4059                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4060                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4061         ),
4062         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4063                 '.auase.info',          // by ilemavyq7461 at techie.com
4064                 '.axeboxew.info',       // by zygeu220 at writeme.com
4065                 '.boluzuhy.info',       // by pikico5419 at post.com
4066                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4067                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4068                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4069                 '.exidiqe.info',        // by kufyca5475 at mail.com
4070                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4071                 '.gubiwu.info',         // by lywunef6532 at iname.com
4072                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4073                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4074                 '.jiuuz.info',          // by meqil6549 at mail.com
4075                 '.nudetar.info',        // by vohepafi3536 at techie.com
4076                 '.nipud.info',          // by bohox9872 at mindless.com
4077                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4078                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4079                 '.olasep.info',         // by lizon8506 at mail.com
4080                 '.oueuidop.info',       // by arytyb6913 at europe.com
4081                 '.oviravy.info',        // by amyuu3883 at london.com
4082                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4083                 '.ragibe.info',         // by ehome4458 at myself.com
4084                 '.ucazib.info',         // by gorare7222 at consultant.com
4085                 '.udaxu.info',          // by gubima4007 at usa.com
4086                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4087                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4088                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4089                 '.yvaxat.info',         // by koqun9660 at mindless.com
4090                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4091         ),
4092         'Carmodelrank.com etc' => array(
4093                 // by Brianna Dunlord (briasmi at yahoo.com)
4094                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4095                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4096                 '.carmodelrank.com',// by Brianna
4097                 '.cutestories.net',     // by Brianna
4098                 '.sturducs.com',
4099                 '.bestother.info',      // by Tim
4100                 '.premiumcasinogames.com',      // by Brianna)
4101                 '.yaahooo.info',        // by Alice
4102         ),
4103         'aliacsandr at yahoo.com' => array(
4104                 '.cubub.info',                          // "Free Web Hosting"
4105         ),
4106         'aliacsandr85 at yahoo.com' => array(
4107                 // by Dr. Portillo or Eva Sabina Lopez Castell
4108                 '.xoomer.alice.it',                     // "Free Web Hosting"
4109                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4110                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4111                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4112                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4113                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4114                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4115                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4116                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4117                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4118                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4119                 '.viagra-price.org',            // by Eva
4120                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4121                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4122         ),
4123         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4124         'Something-Gamble' => array(
4125                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4126                 '.atonlineroulette.com',                        // by Blaise Johns
4127                 '.atroulette.com',                                      // by Gino Sand
4128                 '.betting-123.com',                                     // by Joana Caceres
4129                 '.betting-i.biz',                                       // by Joaquina Angus
4130                 '.casino-challenge.com',                        // by Maren Camara
4131                 '.casino-gambling-i.biz',                       // by Giselle Nations
4132                 '.casino-italian.com',                          // by Holley Yan
4133                 '.casino123.net',                                       // by Ta Baines
4134                 '.casinohammamet.com',                          // by Inger Barhorst
4135                 '.casinoqz.com',                                        // by Berenice Snow
4136                 '.casinos-777.net',                                     // by Iona Ayotte
4137                 '.crapsok.com',                                         // by Devon Adair,
4138                 '.dcasinoa.com',                                        // by August Hawkinson
4139                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4140                 '.free-dvd-player.biz',                         // by Rosario Kidd
4141                 '.florida-lottery-01.com',                      // by Romeo Dillon
4142                 '.gaming-123.com',                                      // by Jennifer Byrne
4143                 '.kenogo.com',                                          // by Adriane Bell
4144                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4145                 '.onbaccarat.com',                                      // by Kassandra Dunn
4146                 '.online-experts.biz',                          // by Liberty Helmick
4147                 '.onlinepoker-123.com',                         // by Andrea Feaster
4148                 '.playpokeronline-123.com',                     // by Don Lenard
4149                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4150                 '.texasholdem123.com',                          // by Savion Lasseter
4151                 '.texasholdem-777.com',                         // by Savanna Lederman
4152                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4153                 '.the-craps-100.us',                            // by Lorrine Ripley
4154                 '.the-free-online-game-913.us',         // by Kanesha Clem
4155                 '.the-free-poker-1798.us',                      // by Elaina Witte
4156                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4157                 '.the-online-game-poker-1185.us',       // by Merna Bey
4158                 '.the-playing-black-jack.com',          // by Kristine Brinker
4159                 '.the-poker-1082.us',                           // by Kristofer Boldt
4160                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4161                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4162                 '.the-video-black-jack.com',            // by Jagger Godin
4163         ),
4164         'Something-Insurance' => array(
4165                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4166
4167                 // 0-9
4168                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4169                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4170                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4171                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4172                 '.18wkcf.com',                                  // by Lexy Bohannon
4173                 '.2001werm.org',                                // by Raphael Rayburn
4174                 '.2004heeparea1.org',                   // by Dinorah Andrews
4175                 '.21nt.net',                                    // by Jaida Estabrook
4176                 '.3finfo.com',                                  // by Damian Pearsall
4177                 '.3somes.org',                                  // by Mauro Tillett
4178                 '.453531.com',                                  // by Kurt Flannery
4179                 '.4freesay.com',                                // by Eloy Jones
4180                 '.5ssurvey.com',                                // by Annamarie Kowalski
4181                 '.8-f22.com',                                   // by Larraine Evers
4182                 '.9q.org',                                              // by Ami Boynton
4183
4184                 // A
4185                 '.a40infobahn.com',                             // by Amit Nguyen
4186                 '.a4h-squad.com',                               // by Ross Locklear
4187                 '.aac2000.org',                                 // by Randi Turner
4188                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4189                 '.acahost.com',                                 // by Milton Haberman
4190                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4191                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4192                 '.activel-learning-site.com',   // by Mateo Conn
4193                 '.ad-makers.com',                               // by Shemeka Arsenault
4194                 '.ada-information.org',                 // by Josef Osullivan
4195                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4196                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4197                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4198                 '.aerovac-hotpress.com',                // by Trey Marlow
4199                 '.agfbiosensors.com',                   // by Lionel Dempsey
4200                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4201                 '.affordablerealestate.net',    // by Season Otoole
4202                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4203                 '.ahouserefinance.com',                 // by Young Alley
4204                 '.akirasworld.com',                             // by Piper Sullivan
4205                 '.alderik-production.com',              // by Joan Stiles
4206                 '.alltechdata.com',                             // by Dom Laporte
4207                 '.amconllc.com',                                // by Syble Benjamin
4208                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4209                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4210                 '.angelandcrown.net',                   // by Claretta Najera
4211                 '.ankoralina.com',                              // by Eladia Demers
4212                 '.antiquegoldmine.com',                 // by Keena Marlow
4213                 '.aquinosotros.com',                    // by Nanci Prentice
4214                 '.architectionale.com',                 // by Wilbur Cornett
4215                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4216                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4217                 '.arefinancehome.com',                  // by Duane Doran
4218                 '.arefinancinghome.com',                // by Ike Laney
4219                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4220                 '.auction-emall-site.info',             // by Dayle Denman
4221                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4222                 '.auto-buy-rite.com',                   // by Asuncion Buie
4223                 '.axxinet.net',                                 // by Roberta Gasper
4224                 '.azimutservizi.com',                   // by Ethelene Brook
4225                 '.azstudies.org',                               // by Bernardina Walden
4226
4227                 // B
4228                 '.babtrek.com',                                 // by Simonette Mcbrayer
4229                 '.babycujo.com',                                // by Francisco Akers
4230                 '.bakeddelights.com',                   // by Dave Evenson
4231                 '.bbcart.com',                                  // by Lucio Hamlin
4232                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4233                 '.best-digital-phone.us',               // by Meghann Crockett
4234                 '.bjamusements.com',                    // by Lurlene Butz
4235                 '.blursgsu.com',                                // by Weston Killian
4236                 '.bookwide.net',                                // by Tequila Zacharias
4237                 '.boreholes.org',                               // by Flora Reed
4238                 '.breathingassociaiton.org',    // by Alfred Crayton
4239                 '.birdingnh.com',                               // by Donald Healy
4240                 '.bisdragons.org',                              // by Lupe Cassity
4241                 '.blcschools.net',                              // by Alycia Jolly
4242                 '.bronte-foods.com',                    // by Kary Pfeiffer
4243                 '.buckscountyneighbors.org',    // by Maile Gaffney
4244                 '.buffalofudge.com',                    // by Mable Whisenhunt
4245                 '.burlisonforcongress.com',             // by Luann King
4246                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4247                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4248
4249                 // C
4250                 '.cabanes-web.com',                             // by Vaughn Latham
4251                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4252                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4253                 '.checaloya.com',                               // by Susana Coburn
4254                 '.calvarychapelrgvt.org',               // by Karan Kittle
4255                 '.cameras-esite.info',                  // by Karlee Frisch
4256                 '.cancerkidsforum.org',                 // by Samson Constantino
4257                 '.ccchoices.org',                               // by Kenia Cranford
4258                 '.ccupca.org',                                  // by Evonne Serrano
4259                 '.celebratemehome.com',                 // by Soraya Tower
4260                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4261                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4262                 '.choose-shoes.net',                    // by Geoffrey Setser
4263                 '.churla.com',                                  // by Ollie Wolford
4264                 '.circuithorns.co.uk',                  // by Nathanial Halle
4265                 '.clanbov.com',                                 // by Donell Hozier
4266                 '.cnm-ok.org',                                  // by Thalia Moye
4267                 '.coalitioncoalition.org',              // by Ned Macklin
4268                 '.consoleaddicts.com',                  // by Dorla Hoy
4269                 '.counterclockwise.net',                // by Melynda Hartzell
4270                 '.codypub.com',                                 // by Mercedes Coffman
4271                 '.comedystore.net',                             // by Floy Donald
4272                 '.covsys.co.uk',                                // by Abby Jacey
4273                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4274                 '.craftybidders.com',                   // by Dannie Lazo
4275                 '.credit-card-finder.net',              // by Mellie Deherrera
4276                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4277                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4278                 '.ctwine.org',                                  // by Hailey Knox
4279
4280                 // D
4281                 '.dazyation.com',                               // by Louis Strasser
4282                 '.deepfoam.org',                                // by Ethelyn Southard
4283                 '.debt-fixing.com',                             // by Dagny Rickman
4284                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4285                 '.domainadoption.com',                  // by Breann Pappas
4286                 '.diannbomkamp.com',                    // by Russel Croteau
4287                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4288                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4289                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4290                 '.digital-cameras-esite.info',  // by Milan Jolin
4291                 '.dnstechnet.net',                              // by Tamera Oman
4292                 '.drivenbydata.org',                    // by Katherine Noyes
4293                 '.dtmf.net',                                    // by Micki Slayton
4294                 '.domainsfound.com',                    // by Blossom Lively
4295
4296                 // E
4297                 '.ecstacyabuse.net',                    // by Alana Knight
4298                 '.e-digital-camera-esite.info', // by Romaine Cress
4299                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4300                 '.eldorabusecenter.org',                // by Annabella Oneal
4301                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4302                 '.encaponline.com',                             // by Patrick Keel
4303                 '.ez-shopping-online.com',              // by Gail Bartlett
4304
4305                 // F
4306                 '.faithfulwordcf.com',                  // by Bart Weeks
4307                 '.fammedassoc.com',                             // by Joshua Nelson
4308                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4309                 '.f00k.org',                                    // by Leslie Chapman
4310                 '.foreignrealtions.org',                // by Krystal Hawley
4311                 '.fortwebsite.org',                             // by Kristina Motley
4312                 '.fotofirstdigital.com',                // by Tad Whitfield
4313                 '.foundationcommons.org',               // by Caryn Eskew
4314                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4315                 '.freaky-cheats.com',                   // by Al Klein
4316                 '.free--spyware.com',                   // by Nikki Contreras
4317                 '.french-home-finance-consultant.info', // by Santana Melton
4318                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4319
4320                 // G
4321                 '.gaintrafficfast.com',                 // by Lila Meekins
4322                 '.gaygain.org',                                 // by Shell Davila
4323                 '.gcaaa.com',                                   // by Vallie Jaworski
4324                 '.generalsysteme.com',                  // by Cale Vogel
4325                 '.generation4games.co.uk',              // by Sonya Graham
4326                 '.german-dictionary.us',                // by Rex Daniel
4327                 '.gilmerrec.com',                               // by Leighann Guillory
4328                 '.glenthuntly-athletics.com',   // by Julee Hair
4329                 '.glorybaskets.com',                    // by Lynette Lavelle
4330                 '.goconstructionloan.com',              // by Willis Monahan
4331                 '.gohireit.com',                                // by Bertha Metzger
4332                 '.godcenteredpeople.com',               // by Jaycee Coble
4333
4334                 // H
4335                 '.healthinsuranceem.com',               // by Justin Munson
4336                 '.hearthorizon.info',                   // by Kory Session
4337                 '.hegerindustrial.com',                 // by Toni Wesley
4338                 '.herzequip.com',                               // by Princess Dunkle
4339                 '.hglcms.org',                                  // by Gladwin Ng
4340                 '.hipanoempresa.com',                   // by Shannon Staub
4341                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4342                 '.horse-racing-result.com',             // by Rodney Reynolds
4343                 '.hueckerfamily.com',                   // by Hershel Sell
4344
4345                 // I
4346                 '.ilove2win.com',                               // by Lamont Dickerson
4347                 '.ilruralassistgrp.org',                // by Moises Hauser
4348                 '.imageonsolutions.com',                // by Porsche Dubois
4349                 '.infoanddatacenter.com',               // by Eva Okelley
4350                 '.islamfakta.org',                              // by Goldie Boykin
4351                 '.ithomemortgage.com',                  // by Adelaide Towers
4352                 '.iyoerg.com',                                  // by Madyson Gagliano
4353
4354                 // J
4355                 '.jeffaxelsen.com',                             // by Daphne William
4356                 '.jeffreyf.net',                                // by Vito Platt
4357                 '.johnmartinsreality.com',              // by Pamela Larry
4358                 '.johnsilvers.net',                             // by Silver Battaglia
4359
4360                 // K
4361                 '.kcgerbil.org',                                // by Marisa Thayer
4362                 '.kdc-phoenix.com',                             // by Salma Shoulders
4363                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4364                 '.kosove.org',                                  // by Darwin Schneider
4365
4366                 // L
4367                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4368                 '.letsgokayaking.net',                  // by Winnie Adair
4369                 '.libertycabs.com',                             // by Adela Bonds
4370                 '.liquor-store-cellar.info',    // by Hugh Pearson
4371                 '.locomojo.net',                                // by Marco Harmon
4372                 '.lodatissimo.com',                             // by Adrian Greeson
4373                 '.lsawc.org',                                   // by Lara Han
4374                 '.lycos-test.net',                              // by Rigoberto Oakley
4375
4376                 // M
4377                 '.macro-society.com',                   // by Venessa Hodgson
4378                 '.marthasflavorfest.com',               // by Ahmad Lau
4379                 '.martin-rank.com',                             // by Cathleen Crist
4380                 '.maryandfrank.org',                    // by Theodore Apodaca
4381                 '.masterkwonhapkido.com',               // by Misty Graham
4382                 '.maxrpm-demo.com',                             // by Cristal Cho
4383                 '.mechanomorphic.com',                  // by Stanford Crow
4384                 '.mepublishing.net',                    // by Karly Fleenor
4385                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4386                 '.metwahairports.com',                  // by Nan Kitchen
4387                 '.middle-eastnews.com',                 // by Tybalt Altmann
4388                 '.mikepelchy.com',                              // by Sherly Pearson
4389                 '.milpa.org',                                   // by Nelly Aguilera
4390                 '.modayun.com',                                 // by Camilla Velasco
4391                 '.moonstoneerp.com',                    // by Garret Salmon
4392                 '.morosozinho.com',                             // by Lenore Tovar
4393                 '.morphadox.com',                               // by Hung Zielinski
4394                 '.moscasenlared.com',                   // by Tera Gant
4395                 '.sdjavasig.com',                               // by Gia Swisher
4396                 '.mpeg-radio.com',                              // by Sincere Beebe
4397                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4398                 '.mtseniorcenter.org',                  // by Frederic Ortega
4399                 '.mysteryclips.com',                    // by Edward Ashford
4400
4401                 // N
4402                 '.naavs.org',                                   // by Yuridia Gandy
4403                 '.naval-aviation.org',                  // by Roselle Campo
4404                 '.navigare-ischia.com',                 // by Arielle Coons
4405                 '.ncredc.org',                                  // by Brenda Nye
4406                 '.neonmotorsports.com',                 // by Giovanna Vue
4407                 '.nf-ny.com',                                   // by Yadira Hibbard
4408                 '.ngfdyqva.com',                                // by Emiliano Samples
4409                 '.nicozone.com',                                // by Blaine Shell
4410                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4411                 '.npawny.org',                                  // by Willard Murphy
4412                 '.nysdoed.org',                                 // by Elric Delgadillo
4413                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4414                 '.nytech-ir.com',                               // by Adrien Beals
4415
4416                 // O
4417                 '.oadmidwest.com',                              // by Gavin Kaplan
4418                 '.oarauto.com',                                 // by Susann Merriman
4419                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4420                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4421                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4422                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4423                 '.online-pills-24x7.biz',               // by Aide Hallock
4424                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4425                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4426                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4427                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4428                 '.otterbayweb.com',                             // by Maxwell Irizarry
4429
4430                 // P
4431                 '.painting-technique.us',               // by Bryanna Tooley
4432                 '.pakamrcongress.com',                  // by Bryce Summerville
4433                 '.patabney.com',                                // by Kailyn Slone
4434                 '.parde.org',                                   // by Ellie Yates
4435                 '.participatingprofiles.com',   // by Jaelynn Meacham
4436                 '.partnershipconference.org',   // by Alla Floyd
4437                 '.pet-stars.com',                               // by Carmon Luevano
4438                 '.planning-law.org',                    // by Trista Holcombe
4439                 '.ppawa.com',                                   // by Evonne Scarlett
4440                 '.precisionfilters.net',                // by Faustina Fell
4441
4442                 // Q
4443                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4444                 '.quick-debt-consolidation.net',        // by Lala Marte
4445                 '.quicktvr.com',                                // by Vernell Crenshaw
4446
4447                 // R
4448                 '.radicalsolutions.org',                // by Reece Medlin
4449                 '.randallburgos.com',                   // by Bradly Villa
4450                 '.rcassel.com',                                 // by Janiah Gallant
4451                 '.rearchitect.org',                             // by Marcus Gaudet
4452                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4453                 '.reprisenashville.com',                // by Hester Khan
4454                 '.reptilemedia.com',                    // by Alicia Patel
4455                 '.resellers2000.com',                   // by Dedra Kennedy
4456                 '.reverse-billing.com',                 // by Lazaro Gluck
4457                 '.richcapaldi.com',                             // by Kya Haggard
4458                 '.richformissouri.com',                 // by Alanna Elston
4459                 '.robstraley.com',                              // by Leida Bartell
4460                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4461                 '.rpgbbs.com',                                  // by Leonel Peart
4462                 '.ruralbusinessonline.org',             // by Lynsey Watters
4463                 '.ruwomenscenter.org',                  // by Vince Mclemore
4464                 '.ryanjowens.com',                              // by Janine Smythe
4465
4466                 // S
4467                 '.sagarmathatv.org',                    // by Liam Funke
4468                 '.sakyathubtenling.org',                // by Liane Falgout
4469                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4470                 '.sandishaven.com',                             // by Lino Soloman
4471                 '.scienkeen.com',                               // by Liza Navarra
4472                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4473                 '.severios.com',                                // by Isa Steffen
4474                 '.sexual-hot-girls.com',                // by Viviana Bolton
4475                 '.shakespearelrc.com',                  // by Luciana Weaver
4476                 '.shashran.org',                                // by Adriel Humphries
4477                 '.shoes-shop.us',                               // by Austen Higginbotham
4478                 '.skagitvalleybassanglers.com', // by Necole Thiele
4479                 '.skinsciencesalon.com',                // by Nena Rook
4480                 '.smartalternative.net',                // by Nicki Lariviere
4481                 '.sml338.org',                                  // by Nickole Krol
4482                 '.smogfee.com',                                 // by Sienna Kimble
4483                 '.sneakers-e-shop.info',                // by Nikki Fye
4484                 '.spacewavemedia.com',                  // by Thanh Gast
4485                 '.softkernel.com',                              // by Nicol Hummer
4486                 '.stjoanmerrillville.com',              // by Hunter Beckham
4487                 '.strelinger.com',                              // by Arron Highsmith
4488                 '.striking-viking.com',                 // by Kylie Endsley
4489                 '.sunnydeception.org',                  // by Amaya Llora
4490                 '.sunzmicro.com',                               // by Goddard Arreola
4491                 '.sv-iabc.org',                                 // by Braden Buck
4492                 '.sykotick.com',                                // by Pierce Knecht
4493
4494                 // T
4495                 '.tbody.net',                                   // by Ormond Roman
4496                 '.the-pizzaman.com',                    // by Mario Ramsey
4497                 '.the-shoes.us',                                // by Alejandro Gaffney
4498                 '.theborneocompany.com',                // by Bryanna Tooley
4499                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4500                 '.thehomeschool.net',                   // by September Concepcio
4501                 '.thenewlywed.com',                             // by Allegra Marra
4502                 '.tigerspice.com',                              // by Denis Mosser
4503                 '.tnaa.net',                                    // by Jasmine Andress
4504                 '.top-finance-sites.com',               // by Maryann Doud
4505                 '.tradereport.org',                             // by Bettie Sisk
4506                 '.transmodeling.com',                   // by Martine Button
4507                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4508                 '.tsaoc.com',                                   // by Heriberto Mcfall
4509                 '.tsunamidinner.com',                   // by Nannie Richey
4510
4511                 // U
4512                 '.uhsaaa.com',                                  // by Risa Herbert
4513                 '.ultradeepfield.org',                  // by Bobby Ragland
4514                 '.umkclaw.info',                                // by Cammy Kern
4515                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4516                 '.usa-wolf.com',                                // by Jacklyn Morrill
4517                 '.usjobfair.com',                               // by Lorina Burchette
4518
4519                 // V
4520                 '.vacancesalouer.com',                  // by Loris Bergquist
4521                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4522                 '.valleylibertarians.org',              // by Lena Massengale
4523                 '.vanderbiltevents.com',                // by Gannon Krueger
4524                 '.vanwallree.com',                              // by Michelina Donahue
4525                 '.vcertificates.com',                   // by Hyun Lamp
4526                 '.vonormytexas.us',                             // by Suzette Waymire
4527
4528                 // W
4529                 '.washingtondc-areahomes.net',  // by Ailene Broome
4530                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4531                 '.wolsaoh.org',                                 // by Daniela English
4532                 '.worldpropertycatalog.com',    // by Aray Baxter
4533
4534                 // Y
4535                 '.yankee-merchants.com',                // by Jackson Hinojosa
4536                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4537                 '.yourdomainsource.com',                // by Deems Weingarten
4538
4539                 // Z
4540                 '.zkashan.com',                                 // by Evan Light
4541                 '.zockclock.com',                               // by Dorothea Guthrie
4542         ),
4543         'Something-Drugs' => array(
4544                 // Drugs / Pills / Diet
4545                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4546                 '.abdelghani-shady.com',                // by Elly Alton
4547                 '.bangbangfilm.com',                    // by Davin Chou
4548                 '.centroantequera.com',                 // by Keon Kwiatkowski
4549                 '.champagne-cellar.info',               // by Kandis Rizzo
4550                 '.chix0r.org',                                  // by Christoper Baird
4551                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4552                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4553                 '.fast-cash-01.com',                    // by Edgar Oliver
4554                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4555                 '.fn-nato.com',                                 // by Donny Dunlap
4556                 '.gqyinran.com',                                // by Alejandro Parks
4557                 '.juris-net.com',                               // by Rachelle Bravo
4558                 '.leftpencey.com',                              // by Aileen Ashby
4559                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4560                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4561                 '.palaceroyale.net',                    // by Brycen Stebbins
4562                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4563                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4564                 '.yukissushi.com',                              // by Donell Hozier
4565         ),
4566         'Something-Others' => array(
4567                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4568                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4569         ),
4570         'Something-NoApp' => array(
4571                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4572                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4573                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4574                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4575                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4576         ),
4577         'Cortez and family' => array(
4578                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4579                 '.dronadaarsujf.info',  // by Cortez
4580                 '.fromnananaref.info',  // by Cortez
4581                 '.goorkkjsaka.info',    // by Cortez
4582                 '.jkdfjjkkdfe.info',    // by Rico
4583                 '.jkllloldkjsa.info',   // by Cortez
4584                 '.nnjdksfornms.info',   // by Rico
4585                 '.mcmdkkksaoka.info',   // by Cortez
4586                 '.srattaragfon.info',   // by Cortez
4587                 '.yreifnnonoom.info',   // by Rico
4588                 '.zjajjsvgeuds.info',   // by Cortez
4589         ),
4590         'admin at ematuranza.com' => array(
4591                 '.ancorlontano.com',
4592                 '.dentroallago.com',
4593                 '.digiovinezza.com',
4594                 '.ematuranza.com',
4595                 '.ilfango.com',
4596                 '.nullarimane.com',
4597                 '.questaimmensa.com',
4598                 '.tentailvolo.com',
4599                 '.unatenerezza.com',
4600                 '.volgondilettose.com',
4601         ),
4602         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4603                 '.bid99df.info',
4604                 '.bj498uf.info',
4605                 '.edeuj84.info',
4606                 '.f4mfid.info',
4607                 '.g4vf03a.info',
4608                 '.j09j4r.info',
4609                 '.jv4r8hv.info',
4610                 '.k43sd3.info',
4611                 '.k4r84d.info',
4612                 '.k4rvda.info',
4613                 '.k4v0df.info',
4614                 '.k903os.info',
4615                 '.k9df93d.info',
4616                 '.kv94fd.info',
4617                 '.ksjs93.info',
4618                 '.l0ks03.info',
4619                 '.l9u3jc.info',
4620                 '.lv043a.info',
4621                 '.nh94h9.info',
4622                 '.m94r9d.info',
4623                 '.s87fvd.info',
4624                 '.v3k0d.info',
4625                 '.v4r8j4.info',
4626                 '.vf044s.info',
4627                 '.vj49rs.info',
4628                 '.vk498j.info',
4629                 '.u03jow.info',
4630         ),
4631         'Nikhil and Brian' => array(
4632                 // by Brian Dieckman (info at iudndjsdhgas.info)
4633                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4634                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4635                 '.ihfjeswouigf.info',   // by Brian, / was not found
4636                 '.iudndjsdhgas.info',   // by Brian, / was not found
4637                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4638                 '.jiatdbdisut.info',    // by Brian, / was not found
4639                 '.jkfierwoundhw.info',  // by Brian, / was not found
4640                 '.kfjeoutweh.info',             // by Brian, / was not found
4641                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4642                 '.oudjskdwibfm.info',   // by Brian, / was not found
4643                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4644                 '.itxbsjacun.info',             // by Nikhil, / was not found
4645                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4646                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4647                 '.najedncdcounrd.info', // by Nikhil, / was not found
4648                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4649                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4650                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4651                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4652                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4653                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4654                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4655                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4656                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4657         ),
4658         'wealth777 at gmail.com' => array(      // by Henry Ford
4659                 '.brutal-forced.com',
4660                 '.library-bdsm.com',
4661                 '.rape-fantasy.us',
4662         ),
4663         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4664                 '.purerotica.com',
4665                 '.richsex.com',
4666                 '.servik.net',
4667                 '.withsex.com',
4668         ),
4669         'dreamteammoney.com' => array(
4670                 '.dreamteammoney.com',  // dtmurl.com related
4671                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4672         ),
4673         'KLIK VIP Search and family' => array(
4674                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4675                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4676                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4677                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4678                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4679                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4680                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4681         ),
4682         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4683                 '.antivirs.info',
4684                 '.antivirus1.info',
4685                 '.antivirus2.info',
4686         ),
4687         'wasam at vangers.net and family' => array(
4688
4689                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4690                 '.bahatoca.org',
4691                 '.digestlycos.org',
4692                 '.educativaanale.info',
4693                 '.guildstuscan.org',
4694                 '.isaakrobbins.info',
4695                 '.isfelons.org',
4696                 '.lvwelevated.org',
4697                 '.macphersonaca.org',
4698                 '.markyaustrian.org',
4699                 '.michelepug.org',
4700                 '.opalbusy.info',
4701                 '.quijotebachata.info',
4702                 '.salthjc.info',
4703                 '.shogunnerd.info',
4704                 '.solarissean.org',
4705                 '.sparkgsx.info',
4706                 '.tarzanyearly.org',
4707                 '.tulabnsf.org',
4708                 '.vaccarinos.org',
4709
4710                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4711                 '.e2007.info',
4712                 '.cmoss.info',
4713
4714                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4715                 '.finddesk.org',
4716                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4717                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4718                 '.rcatalog.org',
4719                 '.sbitzone.org',
4720
4721                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4722                 '.cheapns.org',
4723                 '.my-top.net',
4724                 '.sfind.net',
4725                 '.sspot.net',
4726                 '.suvfind.info',
4727
4728                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4729                 '.trumber.com',
4730
4731                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4732                 '.blogduet.org',
4733                 '.carelf.info',
4734                 '.cmagic.org',
4735                 '.cspell.org',
4736                 '.dspark.org',
4737                 '.dtonic.org',
4738                 '.mcharm.info',
4739                 '.mslook.info',
4740                 '.phpdinnerware.info',
4741                 '.rnation.org',
4742                 '.uzing.org',
4743
4744                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4745                 '.allbar.info',
4746                 '.allersearch.org',
4747                 '.allzoom.org',
4748                 '.dynall.org',
4749                 '.fastopia.org',
4750                 '.offasfast.info',
4751                 '.rblast.org',
4752                 '.rchistes.info',
4753                 '.rette.org',
4754                 '.shufflequince.org',
4755                 '.suvlook.org',
4756
4757                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4758                 '.290cabeza.org',
4759                 '.bossierpainted.org',
4760                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4761                 '.definekonica.info',   // Admin: tvaals at vangers.net
4762                 '.gradetelemundo.info',
4763                 '.hydraulickin.info',
4764                 '.indicadorestmj.info',
4765                 '.keeleykincaid.org',
4766                 '.kleenbowser.info',
4767                 '.pipnickname.info',
4768                 '.pacolily.org',
4769                 '.redeemtrabalho.info',
4770                 '.scanmakerchua.info',
4771                 '.titanmessina.info',
4772                 '.tragratuit.org',
4773                 '.yeareola.info',
4774         ),
4775         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4776                 '.canadianmedsworld.info',      // 84.252.133.112
4777                 '.tabsdrugstore.info',          // 84.252.133.114
4778                 '.tabsstore.info',                      // 84.252.133.114
4779                 '.topcholesterol.info',         // 84.252.133.132
4780         ),
4781         'be.cx' => array(
4782                 '.be.cx',
4783                 '.ca.cx',
4784         ),
4785         'john780321 at yahoo.com' => array(     // by John  Brown
4786                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4787                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4788                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4789         ),
4790         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4791                 '.bertela.info',
4792                 '.forblis.info',
4793                 '.frenallo.info',
4794                 '.goyahoo.info',
4795                 '.herbak.info',
4796                 '.kiokast.info',
4797                 '.nerenok.info',
4798                 '.pestgets.info',
4799                 '.snukker.info',
4800                 '.thegetspons.info',
4801         ),
4802         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4803                 '.bobop.info',
4804                 '.kwwwe.info',
4805                 '.piikz.info',
4806                 '.moosm.info',
4807                 '.vvvw.info',
4808         ),
4809         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4810                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4811                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4812                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4813                 '.jplingood.com',       // 125.65.112.15
4814                 '.linenew.com',         // 203.191.148.96
4815                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4816                 '.yzlin.com',           // 220.162.244.36
4817         ),
4818         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4819                 '.1111mb.com',
4820                 '.2sex18.com',
4821                 '.69porn1.com',
4822         ),
4823         'ECTechnology' => array(
4824                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4825                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4826                 '.automouse.jp',
4827         ),
4828         'lyqz at 21cn.com' => array(
4829                 '.japangame1.com',
4830                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4831                 '.livedoor1.com',
4832                 '.ragnarokonline1.com',
4833                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4834         ),
4835         'kingrou at hotmail.com' => array(      // by yangjianhe
4836                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4837                 '.453787.com',
4838         ),
4839         'anpaul541000 at 163.com' => array(     // by su qiuqing
4840                 '.cetname.com',                 // 222.77.185.87
4841                 '.jpgamer.net',                 // 220.247.157.106
4842                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4843                 '.lovejptt.com',                // 222.77.185.87
4844                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4845                 '.playncsoft.net',              // 220.247.157.106
4846         ),
4847         'abc00613 at 163.com' => array( // by guo yong
4848                 '.avtw1068.com',                // 64.74.223.11
4849                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4850                 '.djkkk66990.com',              // 68.178.232.99
4851                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4852         ),
4853         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4854                 '.cmonfofo.com',
4855                 '.discutbb.com',
4856         ),
4857         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4858                 '.preca.info',
4859                 '.skiaggi.info',
4860                 '.scrianal.info',
4861                 '.tageom.info',
4862         ),
4863         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4864                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4865                 '.inpros.net',                  // 202.181.98.79
4866                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4867         ),
4868         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4869                 '.ec51.com',
4870                 '.ec51.net',
4871         ),
4872         'abbevillelaties at yahoo.fr etc' => array(
4873                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4874                 '.ringtones-rate.com',
4875                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4876                 '.special-ringtones.net',
4877         ),
4878         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4879                 '.1sgsc.info',
4880                 '.3h4r89h.info',
4881                 '.3v44dd.info',
4882                 '.6rfuh6.info',
4883                 '.84hd8.info',
4884                 '.94bui89.info',
4885                 '.agysb3.info',
4886                 '.asdjhs.info',
4887                 '.bcvnrth.info',
4888                 '.bheb4r.info',
4889                 '.bhiuno.info',
4890                 '.biug7g.info',
4891                 '.bjb5f4.info',
4892                 '.bob8g7g.info',
4893                 '.br89bdd.info',
4894                 '.bsa3h.info',
4895                 '.bsieb8.info',
4896                 '.basbiubf.info',
4897                 '.bobwwfs2.info',
4898                 '.ciuv9t.info',
4899                 '.dbmdx4.info',
4900                 '.dbrjms.info',
4901                 '.dbtcm.info',
4902                 '.dff9ghu.info',
4903                 '.dfshbb.info',
4904                 '.dgd4ffdh.info',
4905                 '.dh3ge.info',
4906                 '.duc86jh.info',
4907                 '.ergth45.info',
4908                 '.f78bf7ffb.info',
4909                 '.gbdfbo4.info',
4910                 '.ger45.info',
4911                 '.gnvnrrg.info',
4912                 '.h47he7.info',
4913                 '.h488hbd4.info',
4914                 '.hd72b94.info',
4915                 '.he74b7.info',
4916                 '.hfujfnr.info',
4917                 '.husdhd42.info',
4918                 '.hbwje.info',
4919                 '.itg87gji.info',
4920                 '.iugiougiuh.info',
4921                 '.jhd4f4aa.info',
4922                 '.jshd73.info',
4923                 '.krhpgd.info',
4924                 '.lyihjn.info',
4925                 '.nfyjnfj.info',
4926                 '.oihbv.info',
4927                 '.os44fvs.info',
4928                 '.sdfsd3.info',
4929                 '.sdiug4.info',
4930                 '.sdkufhh.info',
4931                 '.sdugb4f.info',
4932                 '.skdbf.info',
4933                 '.sipiv78.info',
4934                 '.sudbfb.info',
4935                 '.tymbbmy.info',
4936                 '.uilhjk.info',
4937                 '.vi87vub.info',
4938                 '.vfuyf87f.info',
4939                 '.viyvvj877.info',
4940                 '.w7fc8eu.info',
4941                 '.wefg43g.info',
4942                 '.xbrch78e.info',
4943                 '.ywsfu.info',
4944                 '.zxcbiv.info',
4945         ),
4946         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4947                 '.abofios.info',
4948                 '.amlekfn.info',
4949                 '.amlkdoie.info',
4950                 '.amkslewq.info',
4951                 '.alemfu.info',
4952                 '.aloweks1.info',
4953                 '.alposd3.info',
4954                 '.bamhpb.info',
4955                 '.bhjkb.info',
4956                 '.bjqnj.info',
4957                 '.cvcxcbhpr.info',
4958                 '.czoypaiat.info',
4959                 '.dbpmgc.info',
4960                 '.dgvogrxs.info',
4961                 '.dldksf.info',
4962                 '.dlor6za.com',
4963                 '.dmkoiew.info',
4964                 '.eewrefr.info',
4965                 '.eladne.info',
4966                 '.elksem.info',
4967                 '.elwpod.info',
4968                 '.emlwkdnr.info',
4969                 '.esgmyqk.info',
4970                 '.fauqv.info',
4971                 '.fgxkgy.info',
4972                 '.fhryns.info',
4973                 '.fj38n4g.info',
4974                 '.fjnesal.info',
4975                 '.fmkfoe.info',
4976                 '.fqkcfldtr.info',
4977                 '.fwcigpdwz.info',
4978                 '.fyhik.info',
4979                 '.glrkje.info',
4980                 '.gwkslfq.info',
4981                 '.gwjracvh.info',
4982                 '.hihopepe.info',
4983                 '.hwlyggbkw.info',
4984                 '.hmwbfw.info',
4985                 '.hthyeb.info',
4986                 '.iaofkyaw.info',
4987                 '.uldkxuiw.info',
4988                 '.is7c6w4.info',
4989                 '.ivuddhdk.info',
4990                 '.jgfndjem.info',
4991                 '.jgmdlek.info',
4992                 '.jkrnvmpad.info',
4993                 '.jqujn.info',
4994                 '.jvgmmba.info',
4995                 '.kbaur.info',
4996                 '.kgjindptv.info',
4997                 '.kleo7s9.info',
4998                 '.lezfgam.info',
4999                 '.lfaasy.info',
5000                 '.ljpdjki.info',
5001                 '.lmnpis.info',
5002                 '.lpzcu2f.info',
5003                 '.lrptn.info',
5004                 '.lursqt.info',
5005                 '.mgkabviil.info',
5006                 '.mhtknjyt.info',
5007                 '.mksuuku.info',
5008                 '.mkyky.info',
5009                 '.mloaisn.com',
5010                 '.mlsiknd.info',
5011                 '.mthqz.info',
5012                 '.nnooq.info',
5013                 '.nohhylvc.info',
5014                 '.nuprndsye.info',
5015                 '.nsoelam.info',
5016                 '.nykobczv.info',
5017                 '.nzuhli.info',
5018                 '.odyqzgylr.info',
5019                 '.oidiau.info',
5020                 '.oitzkw.info',
5021                 '.okdmrpz.info',
5022                 '.ooinziti.info',
5023                 '.ortqr.info',
5024                 '.osmkpnekv.info',
5025                 '.ozkzfih.info',
5026                 '.p3ix8wc.com',
5027                 '.piwyt.info',
5028                 '.pfkijrm.info',
5029                 '.pjktcragi.info',
5030                 '.pleoz.info',
5031                 '.plvqm73.info',
5032                 '.pqyrem.info',
5033                 '.qipgqd.info',
5034                 '.qlewixu.com',
5035                 '.qmlskme.info',
5036                 '.qtuff.info',
5037                 '.quoga.info',
5038                 '.quqz.info',
5039                 '.qzxuw.info',
5040                 '.rcaidegp.info',
5041                 '.rlkmdi.info',
5042                 '.rnsoiov.info',
5043                 '.rnwlams.info',
5044                 '.rprgkgqld.info',
5045                 '.rubqvxrn.info',
5046                 '.spqxstl.info',
5047                 '.syckoqjql.info',
5048                 '.tbirb.info',
5049                 '.thalc34.info',
5050                 '.tiabq.info',
5051                 '.tszzpjr.info',
5052                 '.tyjdyn.info',
5053                 '.twgugpns.info',
5054                 '.uaezrqp.info',
5055                 '.udlkasu.info',
5056                 '.uejncyf.info',
5057                 '.ukvflb.info',
5058                 '.ugsuv.info',
5059                 '.ukhgpcp.info',
5060                 '.urprzn.info',
5061                 '.uuhememkw.info',
5062                 '.yalc7en.info',
5063                 '.ybuid.info',
5064                 '.yhdkgfob.info',
5065                 '.ymenq.info',
5066                 '.ynlyb.info',
5067                 '.vieatlubk.info',
5068                 '.vltcaho.info',
5069                 '.wlamsiek.info',
5070                 '.wlerp.info',
5071                 '.wlmtshzi.info',
5072                 '.wmlkams.info',
5073                 '.wprqd.info',
5074                 '.wpyspszi.info',
5075                 '.xdscc.info',
5076                 '.xdvy.info',
5077                 '.xeypku.info',
5078                 '.xsrxh.info',
5079                 '.xwjyrpfe.info',
5080                 '.yxcqw.info',
5081                 '.zhbktrh.info',
5082                 '.zspepn.info',
5083                 '.zsxtz.info',
5084         ),
5085         'survi at poczta.fm and smiley' => array(
5086                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5087                 '.ppert.info',
5088                 '.pperta.info',
5089                 '.pperts.info',
5090                 '.pprtuis.info',
5091                 '.13iuey.info',         // ":>"
5092                 '.13jkhs.info',
5093                 '.13lksa.info',
5094                 '.13rxtx.info',
5095                 '.13slkd.info',
5096                 '.13zaer.info',
5097         ),
5098         'admin at esemeski.com' => array(       // by Jan Kalka
5099                 '.kxils.info',
5100                 '.kuaph.info',
5101                 '.lncdc.info',
5102                 '.lsqpd.info',
5103                 '.mczed.info',
5104                 '.npous.info',
5105                 '.obgju.info',
5106         ),
5107         'LiquidNetLimited.com' => array(
5108                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5109
5110                 // FateBack.com related
5111                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5112                 '.bebto.com',
5113                 '.fateback.com',
5114                 '.undonet.com',
5115                 '.yoll.net',
5116                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5117
5118                 // 50webs.com                   // 64.72.112.10
5119                 // dns2.50webs.com              // 64.72.112.11
5120                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5121                 // dns2.freehostia.com  // 64.72.112.13
5122                 // serv3.freehostia.com // 64.72.112.14
5123                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5124                 // mail.50webs.com              // 64.72.112.26
5125                 // supremecenter41.com  // 64.72.112.52
5126                 // 50webs2.50webs.com   // 64.72.112.89
5127                 // supremecenter39.com  // 64.72.112.103
5128
5129                 // by LiquidNet Ltd. (support at propersupport.com)
5130                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5131                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5132                         'duoservers.com',               // 216.65.1.130
5133
5134                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5135         ),
5136         'domains at agava.com' => array(
5137                 '.h18.ru',
5138                 '.hut1.ru',
5139         ),
5140         'wlmx009 at hotmail.com' => array(
5141                 '.123lineage.com',
5142                 '.ff11-info.com',
5143                 '.lastlineage.com',
5144                 '.lineage2-ol.com',
5145                 '.lineage2006.com',
5146                 '.lineagefirst.com',
5147         ),
5148         'Zettahost.com' => array(
5149                 '.atspace.biz',         // sales at zettahost.com
5150                 '.atspace.com',         // abuse at zettahost.com
5151                 '.atspace.name',        // NS atspace.com
5152                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5153                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5154         ),
5155         'hlq9814 at 163.com' => array(
5156                 '.kotonohax.com',               // by ling bao
5157                 '.ragnarox.mobi',               // by lin bao, *.exe download
5158                 '.rokonline-jp.com',    // by hang long
5159         ),
5160         '77ch.jp' => array(
5161                 '.77ch.jp',
5162                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5163         ),
5164         'serchportal at mail.ru' => array(      // by Namu Adin
5165                 '.43fert.info',
5166                 '.belis.info',
5167                 '.bonu.info',
5168                 '.chelsite.info',
5169                 '.chparael.info',
5170                 '.cool9f.info',
5171                 '.dada2.info',
5172                 '.dorplanete.info',
5173                 '.dormonde.info',
5174                 '.dorprojet.info',
5175                 '.faciledor.info',
5176                 '.fastsearchgroup.info',
5177                 '.gerta0.info',
5178                 '.getse.info',
5179                 '.gopvl.info',
5180                 '.knopki.info',
5181                 '.propidor.info',
5182                 '.quicksearchnet.info',
5183                 '.ret5.info',
5184                 '.slimfastsearch.info',
5185                 '.virtualpvl.info',
5186                 '.vpvla.info',
5187                 '.xjdor.info',
5188                 '.zhopki.info',
5189         ),
5190         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5191                 '*.444mb.com',          // Free hosting
5192                 'urlnip.com',           // Redirection
5193         ),
5194         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5195                 '.1fasttimesatnau.info',
5196                 '.1freecybersex.info',
5197                 '.1freexxxcomics.info',
5198                 '.1fuckingmywife.info',
5199                 '.1pornpreview.info',
5200                 'www.ru',                                       // by (service at demos.ru), redirection
5201         ),
5202         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5203                 '.adultschat.info',
5204                 '.livecamonline.info',
5205                 '.webcam4u.info',
5206                 '.younghot.info',
5207         ),
5208         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5209                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5210
5211                 // 209.51.196.242
5212                 '.22web.net',
5213                 '.2kool4u.net',
5214                 '.9skul.com',
5215                 '.alojalo.info',
5216                 '.byet.net',
5217                 '.byethost2.com',
5218                 '.byethost3.com',
5219                 '.byethost4.com',
5220                 '.byethost5.com',
5221                 '.byethost6.com',
5222                 '.byethost7.com',
5223                 '.byethost8.com',
5224                 '.byethost9.com',
5225                 '.byethost10.com',
5226                 '.byethost11.com',
5227                 '.byethost12.com',
5228                 '.byethost13.com',
5229                 '.byethost14.com',
5230                 '.byethost15.com',
5231                 '.byethost16.com',
5232                 '.byethost17.com',
5233                 '.byethost18.com',
5234                 '.headshothost.net',
5235                 '.hostwq.net',
5236                 '.mega-file.net',
5237                 '.truefreehost.com',
5238
5239                 '.ifastnet.com',        // 209.51.196.243
5240
5241                 // 209.190.16.82(mx1.byet.org)
5242                 '.1sthost.org',
5243                 '.4sql.net',
5244                 '.byet.org',
5245                 '.hyperphp.com',
5246                 '.kwikphp.com',
5247                 '.my-php.net',
5248                 '.my-place.us',
5249                 '.my-webs.org',
5250                 '.netfast.org',
5251                 '.php0h.com',
5252                 '.php1h.com',
5253                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5254                 '.phpnet.us',
5255                 '.prohosts.org',
5256                 '.pro-php.org',
5257                 '.prophp.org',
5258                 '.sprinterweb.net',
5259                 '.swiftphp.com',
5260                 '.xlphp.net',
5261
5262                 // 209.190.16.83(mx2.byet.org)
5263                 '.instant-wiki.net',
5264
5265                 // 209.190.16.84(mx3.byet.org)
5266
5267                 // 209.190.16.85(mx4.byet.org)
5268                 '.instant-blog.net',
5269                 '.instant-forum.net',
5270
5271                 '.byethost.com',                        // 209.190.18.138
5272         ),
5273         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5274                 '.analmoviesite.info',
5275                 '.bestgirlssex.info',
5276                 '.boxvagina.info',
5277                 '.cyberlivegirls.info',
5278                 '.hotredgirls.info',
5279                 '.forsexlove.info',
5280                 '.hotnudezone.info',
5281                 '.hotredpussy.info',
5282                 '.lesbians-live.info',
5283                 '.lesbians-on-cam.info',
5284                 '.onlinegirlssite.info',
5285                 '.sexloveonline.info',
5286                 '.teensexcard.info',
5287                 '.teensexdirect.info',
5288                 '.topnudesite.info',
5289                 '.vaginafree.info',
5290                 '.webcam-show.info',
5291                 '.webcamshow.info',
5292                 '.youngsexchat.info',
5293                 '.yourcumshot.info',
5294         ),
5295         'stocking.club at gmail.com' => array(
5296                 '.adulthotmodels.com',          // by David Zajwzran
5297                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5298                 '.cash-call.info',                      // by David Theissen
5299                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5300                 '.cheap-online-viagra.info',    // by David Theissen
5301                 '.drugcleansing.net',           // by David Zajwzran
5302                 '.men-health-zone.com',         // by David Theissen
5303                 '.purchase-viagra.info',        // by David Theissen
5304                 '.realdrunkengirls.biz',        // by David Theissen
5305                 '.sextoyslife.com',                     // by David Zajwzran
5306                 '.sexysubjects.info',           // by David Zajwzran
5307                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5308                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5309                 '.travelcardsite.info',         // by David Theissen
5310         ),
5311         'lustiq at p5com.com' => array(
5312                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5313                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5314         ),
5315         'web at 6jy.com' => array(
5316                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5317                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5318         ),
5319         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5320                 '.auto-fgen.info',
5321                 '.fast-marketing.info',
5322                 '.from-usa.info',
5323                 '.generic-pharm.info',
5324                 '.pharm-directory.info',
5325                 '.popular-people.info',
5326                 '.safe-health.info',
5327                 '.star-celebrities.info',
5328                 '.super-home-biz.info',
5329                 '.top5-auto.info',
5330                 '.top5-cars.info',
5331                 '.vip-furniture.info',
5332                 '.vip-pc.info',
5333                 '.vip-pets.info',
5334         ),
5335         'abuse at search-store.org' => array(
5336                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5337         ),
5338         'Leading Edge Marketing Inc.' => array(
5339                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5340                 '.abemedical.com',
5341                 '.attractwomennow.com',
5342                 '.bettersexmall.com',
5343                 '.buymaxoderm.com',
5344                 '.buyvprx.com',
5345                 '.genf20.com',
5346                 '.infinityhealthnews.com',
5347                 '.istnewsletter.com',
5348                 '.leadingedgecash.com',
5349                 '.leadingedgeherbals.com',
5350                 '.leadingedgevipsonly.com',
5351                 '.lecash.com',
5352                 '.leminfo.com',
5353                 '.proextendersystem.com',
5354                 '.provestra.com',
5355                 '.semenax.com',
5356                 '.shavenomore.com',
5357                 '.theedgenewsletter.com',
5358                 '.vigorelle.com',
5359                 '.vigrx.com',
5360                 '.vigrxplus.com',
5361                 '.wbstnewsletter.com',
5362         ),
5363         'clickx at bk.ru' => array(     // by Alexey Enrertov
5364                 '.coolget*.info' =>
5365                         '#^(?:.*\.)?' . 'coolget' .
5366                         '(?:bus|find|news|php|place|post|srch)' .
5367                         '\.info$#',
5368                 '.coolgirl*.info' =>
5369                         '#^(?:.*\.)?' . 'coolgirl' .
5370                         '(?:apple|fish|search)' .
5371                         '\.info$#',
5372                 '.coolmeet*.info' =>
5373                         '#^(?:.*\.)?' . 'coolmeet' .
5374                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5375                         '\.info$#',
5376                 '.cool**.info' =>
5377                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5378                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5379                         '\.info$#',
5380                 '.freseasy*.info' =>
5381                         '#^(?:.*\.)?' . 'freseasy' .
5382                         '(?:apple|click|find|fish|post|search)' .
5383                         '\.info$#',
5384                 '.fres**.info' =>
5385                         '#^(?:.*\.)?' .
5386                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5387                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5388                         '\.info$#',
5389                         // These are not found yet:
5390                         // fresgirlsrch.info
5391                         // fresadultapple.info
5392                         // fresadultclick.info
5393                         // frestheplace.info
5394
5395                 // 66.232.113.44
5396                 '.nuhost.info',
5397                 '.susearch.info',
5398
5399                 // 66.232.126.74(hv94.steephost.com)
5400                 '.dilej.com',
5401                 '.fyvij.com',
5402                 '.howus.com',
5403                 '.jisyn.com',
5404                 '.kaxem.com',
5405                 '.mihug.com',
5406                 '.mobyb.com',
5407                 '.qidat.com',
5408                 '.qihek.com',
5409                 '.ryzic.com',
5410                 '.sasuv.com',
5411                 '.tuquh.com',
5412                 '.vehyq.com',
5413                 '.wezid.com',
5414                 '.wifuj.com',
5415                 '.xijyt.com',
5416                 '.zuqyn.com',
5417
5418                 '.mosugy.com',
5419         ),
5420         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5421                 '.hitsearching.info',
5422                 '.hugeamountdata.info',
5423                 '.megafasthost.info',
5424                 '.real-big-host.info',
5425                 '.search4freez.info',
5426                 '.yasech.info',
5427
5428                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5429                 '.bymire.com',
5430
5431                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5432                 '.ligiwa.com',
5433
5434                 '.mubeho.com',
5435         ),
5436         'ice--man at mail.ru related' => array(
5437                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5438                 '.bestcreola.com',
5439                 '.crekatierra.com',
5440                 '.creolafire.com',
5441                 '.crolik.com',
5442                 '.croller.cn',
5443                 '.ecrmx.com',
5444                 '.eflashpoint.com',
5445                 '.exoticmed.com',
5446                 '.feelview.com',
5447                 '.greatexotic.com',
5448                 '.icrtx.com',
5449                 '.icyhip.com',
5450                 '.icyiceman.com',
5451                 '.icypopular.com',
5452                 '.iflashpoint.com',
5453                 '.justmdx.com',
5454                 '.kiliusgroup.com',
5455                 '.klickerr.com',
5456                 '.klickerrworld.com',
5457                 '.kreolic.com',
5458                 '.margansitio.com',
5459                 '.margantierra.com',
5460                 '.mimargan.com',
5461                 '.oilkeys.com',
5462                 '.planetmdx.com',
5463                 '.thekeyse.com',
5464                 '.viewgreat.com',
5465                 '.yourcreola.com',
5466
5467                 // 69.46.23.48
5468                 '.bestkilius.com',
5469                 '.crekadirecto.com',
5470                 '.getflashsite.com',
5471                 '.sucreka.com',
5472                 '.superkilius.com',
5473
5474                 // 69.46.23.48 by bing-16 at ftunez.org
5475                 '.bovorup.cn',
5476                 '.litotar.cn',
5477                 '.nihydec.cn',
5478
5479                 // 66.232.112.175 by bing-32 at ftunez.org
5480                 '.lasyxy.cn',
5481
5482                 // by bing-65 at ftunez.org
5483                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5484                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5485                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5486                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5487                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5488                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5489                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5490                 '.saralar.cn',          // 66.232.120.113(non-existent)
5491                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5492
5493                 // 69.46.23.48 by clarkson-34 at ftunez.org
5494                 '.bumora.cn',
5495                 '.byxite.cn',
5496                 '.byxuqu.cn',
5497                 '.jadama.cn',
5498                 '.kybope.cn',
5499                 '.mefeki.cn',
5500                 '.mokiso.cn',
5501                 '.niqeme.cn',
5502                 '.pukafo.cn',
5503                 '.qesaxa.cn',
5504                 '.toxezi.cn',
5505                 '.tujudy.cn',
5506                 '.tutike.cn',
5507
5508                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5509                 '.cabino.cn',
5510                 '.cuwace.cn',
5511                 '.ferazi.cn',
5512                 '.gigywy.cn',
5513                 '.lapype.cn',
5514                 '.mewabe.cn',
5515                 '.pezegy.cn',
5516                 '.pyzuza.cn',
5517                 '.qypony.cn',
5518                 '.ropesy.cn',
5519                 '.wadyfe.cn',
5520
5521                 // 69.46.23.48 clarkson-58 at ftunez.org
5522                 '.becabe.cn',
5523                 '.biciqy.cn',
5524                 '.bezymu.cn',
5525                 '.cifori.cn',
5526                 '.ciwyxi.cn',
5527                 '.dobari.cn',
5528                 '.dusofe.cn',
5529                 '.dutyda.cn',
5530                 '.dykanu.cn',
5531                 '.fakexu.cn',
5532                 '.fylema.cn',
5533                 '.godymo.cn',
5534                 '.hyhaxy.cn',
5535                 '.ganosi.cn',
5536                 '.kuxyju.cn',
5537                 '.lacezy.cn',
5538                 '.lonyru.cn',
5539                 '.lycato.cn',
5540                 '.nykyby.cn',
5541                 '.qyhuko.cn',
5542                 '.redere.cn',
5543                 '.riwimu.cn',
5544                 '.wopary.cn',
5545                 '.xizity.cn',
5546                 '.xuxusa.cn',
5547
5548                 // by entretov-28 at ftunez.org
5549                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5550                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5551
5552                 // 69.46.23.48 by entretov-32 at ftunez.org
5553                 '.cihuji.cn',
5554                 '.deqyve.cn',
5555                 '.genefa.cn',
5556                 '.gujyju.cn',
5557                 '.hasadu.cn',
5558                 '.hedomi.cn',
5559                 '.kecicy.cn',
5560                 '.kipabo.cn',
5561                 '.manunu.cn',
5562                 '.musoru.cn',
5563                 '.myvuna.cn',
5564                 '.pikybe.cn',
5565                 '.riqawo.cn',
5566                 '.rufuxy.cn',
5567                 '.vyfilu.cn',
5568                 '.xadule.cn',
5569                 '.zolaxe.cn',
5570                 '.zerixu.cn',
5571
5572                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5573                 '.dozoda.cn',
5574                 '.nemipu.cn',
5575
5576                 // entretov-84 at ftunez.org
5577                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5578                 '.favulol.cn',          // 66.232.120.115(*snip*)
5579                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5580
5581                 // 69.46.23.48 by jeremy-57 at ftunez.org
5582                 '.duzele.cn',
5583                 '.figede.cn',
5584                 '.fiwany.cn',
5585                 '.gyfalu.cn',
5586                 '.jepylo.cn',
5587                 '.nuqumy.cn',
5588
5589                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5590                 '.burahu.cn',
5591                 '.jydijy.cn',
5592                 '.komyby.cn',
5593                 '.najepa.cn',
5594                 '.pylobu.cn',
5595                 '.qofoly.cn',
5596                 '.sybuvi.cn',
5597                 '.vycexu.cn',
5598                 '.wotyqo.cn',
5599                 '.xudoli.cn',
5600
5601                 // by entretov-28 at ftunez.org
5602                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5603
5604                 // by entretov-37 at ftunez.org
5605                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5606                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5607
5608                 // 66.232.112.175 by entretov-86 at ftunez.org
5609                 '.faweji.cn',
5610                 '.jypaci.cn',
5611                 '.xozuso.cn',
5612
5613                 // 69.46.23.48 by miles-37 at ftunez.org
5614                 '.beqymo.cn',
5615                 '.ceqibi.cn',
5616                 '.dyraqo.cn',
5617                 '.qenedo.cn',
5618                 '.qurypa.cn',
5619                 '.siluvo.cn',
5620                 '.tujala.cn',
5621                 '.wukuwi.cn',
5622                 '.xenibo.cn',
5623                 '.xiculo.cn',
5624                 '.zabemu.cn',
5625
5626                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5627                 '.bevaka.cn',
5628                 '.fysyte.cn',
5629                 '.guxixu.cn',
5630                 '.hatoli.cn',
5631                 '.jitobu.cn',
5632                 '.juxeca.cn',
5633                 '.kifuhy.cn',
5634                 '.licila.cn',
5635                 '.mecomy.cn',
5636                 '.niryko.cn',
5637                 '.noxoco.cn',
5638                 '.qiwysu.cn',
5639                 '.tutysy.cn',
5640
5641                 // by oker-74 at ftunez.org
5642                 '.navufol.cn',
5643
5644                 // by oker-97 at ftunez.org
5645                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5646                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5647                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5648                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5649                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5650                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5651                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5652
5653                 // by polet-20 at ftunez.org
5654                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5655
5656                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5657                 '.gywiqe.cn',
5658                 '.jotapo.cn',
5659                 '.jywixa.cn',
5660
5661                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5662                 '.bawegap.cn',
5663                 '.buremyl.cn',
5664                 '.cilybut.cn',
5665                 '.cutufek.cn',
5666                 '.defypyr.cn',
5667                 '.femaxij.cn',
5668                 '.gelejo.cn',
5669                 '.gocylyv.cn',
5670                 '.kehiqaq.cn',
5671                 '.ninyjit.cn',
5672                 '.ruroruw.cn',
5673                 '.vetehow.cn',
5674
5675                 // 69.46.23.48 sabrosky-85 at ftunez.org
5676                 '.banyla.cn',
5677                 '.bubaqu.cn',
5678                 '.bygage.cn',
5679                 '.dafozy.cn',
5680                 '.kaxyjo.cn',
5681                 '.makyle.cn',
5682                 '.naleto.cn',
5683                 '.pidele.cn',
5684                 '.poqexa.cn',
5685                 '.pymaqo.cn',
5686                 '.qupiqy.cn',
5687                 '.reqefy.cn',
5688                 '.sopocy.cn',
5689                 '.vuhexo.cn',
5690                 '.weryso.cn',
5691                 '.wubula.cn',
5692                 '.xufuxy.cn',
5693                 '.zuhyxu.cn',
5694
5695                 // 69.46.23.48 by tribiani-97 at ftunez.org
5696                 '.dyxorod.cn',
5697                 '.firywoz.cn',
5698                 '.jixezyx.cn',
5699                 '.joveraw.cn',
5700                 '.jowaxup.cn',
5701                 '.nodarej.cn',
5702                 '.pimijom.cn',
5703                 '.tugupeg.cn',
5704
5705                 // 66.232.112.175 by abuse-here at inbox.ru
5706                 '.catybe.cn',
5707                 '.jytame.cn',
5708                 '.wygete.cn',
5709         ),
5710         '74.50.97.*' => array(
5711                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5712                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5713                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5714                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5715                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5716                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5717                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5718                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5719                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5720                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5721                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5722                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5723                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5724                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5725                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5726                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5727
5728                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5729                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5730                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5731                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5732                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5733                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5734                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5735                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5736                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5737                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5738                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5739                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5740                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5741                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5742                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5743                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5744                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5745                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5746                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5747
5748                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5749                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5750                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5751                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5752                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5753         ),
5754         'nijeoi at hotmai.com' => array(
5755                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5756                 '.bowij.com',
5757                 '.bozib.com',
5758                 '.cavux.com',
5759                 '.dipov.com',
5760                 '.gumoz.com',
5761                 '.hakyb.com',
5762                 '.hehyv.com',
5763                 '.hepyt.com',
5764                 '.howoj.com',
5765                 '.jywaz.com',
5766                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5767                 '.kyheq.com',
5768                 '.kyzad.com',
5769                 '.qicad.com',
5770                 '.qubyd.com',
5771                 '.mocyq.com',
5772                 '.muloq.com',
5773                 '.myxim.com',
5774                 '.nufyp.com',
5775                 '.waqog.com',
5776                 '.wyduc.com',
5777                 '.xefyv.com',
5778                 '.xomej.com',
5779                 '.xomip.com',
5780                 '.xykyl.com',
5781                 '.zakuw.com',
5782                 '.zeliw.com',
5783                 '.zimev.com',
5784                 '.zipif.com',
5785
5786                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5787                 '.tycoco.com',
5788
5789                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5790                 '.pufeqa.com',
5791
5792                 '.xehymi.com',
5793         ),
5794         'niichka at hotmail.com' => array(
5795                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5796                 '.aerosearch.info',
5797                 '.freader.info',
5798                 '.info4searchz.info',
5799                 '.nice-host.info',
5800                 '.realyfast.info',
5801                 '.resuts.info',
5802
5803                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5804                 '.bepoh.com',
5805                 '.gufiq.com',
5806                 '.kedyh.com',
5807                 '.pofyb.com',
5808                 '.rurid.com',
5809                 '.vucaj.com',
5810                 '.vuwir.com',
5811
5812                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5813                 '.bejefe.com',
5814
5815                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5816                 '.tidawu.com',
5817
5818                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5819                 '.rofuqa.com',
5820         ),
5821         'porychik at hot.ee' => array(  // by Igor
5822                 '.tedstate.info',       // "Free Web Hosting"
5823                 '.giftsee.com',
5824         ),
5825         'admin at pertol.info' => array(
5826                 // 81.0.195.189 "Free Web Hosting"
5827                 '.laparka.cn',
5828                 '.mirlos.cn',
5829                 '.oldmoms.cn',
5830
5831                 // 217.11.233.64(timed-out)
5832                 '.ejmpep.cn',   // by admin at pertol.info
5833                 '.ytere.cn',    // by admin at x2t.com
5834
5835                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5836                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5837
5838                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5839                 '.new-greece-travel.com',
5840                 '.peraonline.info',
5841
5842                 '.barkman.cn',
5843         ),
5844
5845         'aofa at vip.163.com' => array(
5846                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5847                 '.5944.net',
5848         ),
5849         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5850                 '.maxrentcar.info',
5851                 '.newsonyericsson.info',
5852                 '.pornositeworld.biz',
5853                 '.rentcarweb.info',
5854                 '.xxxdomainsex.biz',
5855         ),
5856         'kopper1970 at gmail.com' => array(
5857                 '.cardealerall.info',           // by Green
5858                 '.donatecarsales.info',         // by Sipil
5859                 '.ringtonewilly.info',          // by Sipil
5860                 '.travelstraveling.info',       // by Chinik
5861                 '.viagrabuyonline.org',         // by Sipil
5862                 '.viagraorderbuy.com',          // by Anatol
5863                 '.worldcuptourism.info',        // by Sipil
5864         ),
5865         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5866                 '.globalinfoland.info',
5867                 '.goodlifesearch.info',
5868                 '.hotnetinfo.info',
5869                 '.hotpornmovies.org',
5870                 '.infopilot.info',
5871         ),
5872         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5873                 '.bang-bro.org',
5874                 '.datinghost.info',
5875                 '.hello-craulers.info',
5876                 '.free-blog-host.info',
5877                 '.sucking-boobs.info',
5878         ),
5879         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5880                 '.allcamsguide.info',
5881                 '.camerascams.info',
5882                 '.camerasera.info',
5883                 '.girlcamsworld.info',
5884                 '.hiddenlimocams.info',
5885                 '.redlivecams.info',
5886                 '.spycamsgear.info',
5887                 '.spycamssite.info',
5888                 '.supercamsusa.info',
5889                 '.thecamsnow.info',
5890         ),
5891         '87.242.116.81' => array(
5892                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5893                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5894                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5895                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5896                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5897         ),
5898         '208.70.75.153' => array(
5899                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5900                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5901                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5902                 '.cerc-on.info',
5903                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5904                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5905                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5906                 '.cerc-tr.info',
5907                 '.cerc-tw.info',
5908                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5909                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5910                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5911                 '.cerc-on.org',         // by cerca-one at ya.ru
5912                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5913                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5914                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5915                 '.cerc-tr.org',         // by cerca-one at ya.ru
5916                 '.cerc-tw.org',         // by cerca-one at ya.ru
5917                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5918                 '.cerca-fo.info',
5919                 '.cerca-no.info',
5920                 '.cerca-on.info',
5921                 '.cerca-sv.info',
5922                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5923                 '.cerca-te.info',
5924                 '.cerca-tr.info',
5925                 '.cerca-sx.org',
5926                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5927                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5928                 '.ricerca-fo.info',
5929                 '.ricerca-one.org',
5930                 '.ricerca-sv.org',
5931                 '.ricerca-sx.org',
5932                 '.ricerca-te.org',
5933                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5934                 '.subit01.org',
5935                 '.subit02.org',
5936                 '.subit03.org',
5937                 '.subit04.org',
5938                 '.subit05.org',
5939                 '.subit06.org',
5940                 '.subit01.info',
5941                 '.subit02.info',
5942                 '.subit03.info',
5943                 '.subit04.info',
5944                 '.subit05.info',
5945                 '.subit06.info',
5946         ),
5947         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5948                 '.5-base.com',
5949                 '.pharmacy-style.com',
5950         ),
5951         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5952                 '.ista-2006.ru',
5953                 '.wefas.ru',
5954         ),
5955         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5956                 '.tourismworldsite.info',
5957                 '.yourtourismtravel.info',
5958         ),
5959         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5960                 '.easyfindcar.info',
5961                 '.siteinfosystems.info',
5962         ),
5963         'smesh1155 at gmail.com' => array(
5964                 '.hospitalforyou.info',                 // by Gimmi
5965                 '.thephentermineonline.info',   // by Kipola
5966         ),
5967         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5968                 '.kiski.net.in',
5969                 '.pipki.org.in',
5970                 '.popki.ind.in',
5971                 '.siski.co.in',
5972         ),
5973         'tiptronikmike at mail.com' => array(
5974                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5975                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5976                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5977                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5978                 //'.i0sex.info',                // Michael
5979                 //'.i1sex.info',                // Michael
5980                 //'.i2sex.info',                // Martin
5981                 //'.i3sex.info',                // Martin
5982                 //'.i4sex.info',                // Adulterra
5983                 //'.i5sex.info',                // Adulterra
5984                 //[irvyz]6sex.info not found
5985                 '.i8sex.info',                  // by Martin
5986         ),
5987         'skuarlytronald at mail.com' => array(
5988                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5989                 '.girlsgoingmad.info',          // 64.27.13.120
5990                 '.girlsgonewildside.info',      // 64.27.13.120
5991         ),
5992         '66.232.109.250' => array(
5993                 '.1626pornporno.info',
5994                 '.1851pornporno.info',
5995                 '.1876pornporno.info',
5996                 '.476pornporno.info',
5997         ),
5998         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5999                 '.compactxxx.com',
6000                 '.eadulthost.com',
6001                 '.eadultview.com',
6002                 '.eroticpool.net',
6003                 '.ipornservice.com',
6004                 '.liveadulthost.com',
6005                 '.nudepal.com',
6006                 '.sweetservers.com',
6007         ),
6008         'support at orgija.org' => array(
6009                 '.assfuckporn.org',
6010                 '.dosugmos.org',
6011                 '.fuckporn.org',
6012                 '.girlsdosug.org',
6013                 '.girlsporno.org',
6014                 '.moscowintim.org',
6015                 '.pornass.org',
6016                 '.pornopussy.org',
6017                 '.progirlsporn.org',
6018                 '.pussypornogirls.org',
6019         ),
6020         '125.65.112.93' => array(
6021                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
6022                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
6023         ),
6024         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
6025                 '.beta-google.com',
6026                 '.tv-reklama.info',
6027                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
6028                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
6029         ),
6030         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
6031                 '.abobrinha.org',
6032                 '.aneurysmic.com',              // / not found
6033                 '.physcomp.org',                // / not found
6034                 '.seriedelcaribe2006.org',
6035                 '.refugeeyouthinamerica.com',
6036         ),
6037         'skip_20022 at yahoo.com' => array(
6038                 // 203.174.83.55
6039                 '.a28hosting.info',             // by Bill Jones
6040                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
6041                 '.besthentai06.org',    // by yakon
6042         ),
6043         'USFINE.com' => array(
6044                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
6045                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
6046         ),
6047         '68.178.211.57' => array(
6048                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
6049                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
6050         ),
6051         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
6052                 '.google-yahoo-msn.org',
6053                 '.expedia-travel.org',
6054         ),
6055         'admin at newestsearch.com' => array(   // by Gibrel Sitce
6056                 '.emr5ce.org',
6057                 '.wfe7nv.org',
6058                 '.xyr99yx.org',
6059         ),
6060         '203.171.230.39' => array(
6061                 // by 51shell at 163.com
6062                 '.amatou-fc2.com',
6063
6064                 // registrar bizcn.com, iframe + cursor
6065                 '.playonlinenc.com',
6066                 '.playboss-jp.com',
6067         ),
6068         'Digi-Rock.com' => array(
6069                 '.rom776.com',
6070                 // owner-organization: DIGIROCK, INC.
6071                 // owner-email: domain-contact at digi-rock.com
6072                 // with an external ad-and-JavaScript,
6073                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6074                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6075         ),
6076         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6077                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6078                 '.getrun.cn',                           // 208.73.34.48
6079                 '.ipod-application.info',       // NO IP
6080                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6081                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6082         ),
6083         'germerts at yandex.ru' => array(
6084                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6085                 '.andatra.info',
6086                 '.banchitos.info',
6087                 '.batareya.info',
6088                 '.blevota.info',
6089                 '.broneslon.info',
6090                 '.gamadril.info',
6091                 '.gipotenuza.info',
6092                 '.govnosaklo.info',
6093                 '.muflon.info',
6094                 '.termitnik.info',
6095                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6096         ),
6097         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6098                 '.acronis-true-image.info',
6099                 '.calcio-xp.info',
6100                 '.cosanova.info',
6101                 '.cose-rx.info',
6102                 '.dictip.info',
6103                 '.findig.info',
6104                 '.fotonow.info',
6105                 '.lavoro-tip.info',
6106                 '.loan-homes.info',
6107                 '.mionovita.info',
6108                 '.mustv.info',
6109                 '.newsnaked.info',
6110                 '.online-tod.info',
6111                 '.opakit.info',
6112                 '.opanow.info',
6113                 '.opriton.info',
6114                 '.porta-bl.info',
6115                 '.refdif.info',
6116                 '.xzmovie.info',
6117         ),
6118         '84.252.148.120 etc' => array(
6119                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6120                 '.planetavilton.info',  // 84.252.148.120
6121                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6122         ),
6123         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6124                 '.99jk.com',
6125                 '.99jk.com.cn',
6126                 '.99jk.cn',
6127         ),
6128         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6129                 '.kliktop.biz',
6130                 '.kliktop.org',
6131                 '.pharmatop.us',
6132                 '.supertop.us',
6133                 '.supervaizer.info',
6134         ),
6135         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6136                 '.freeamateursexx.info',        // 81.0.195.228
6137                 '.freeanalsexx.info',           // 217.11.233.97
6138                 '.freegaysexx.info',            // 81.0.195.228
6139         ),
6140         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6141                 '.abbhi.info',
6142                 '.gayblogguide.biz',
6143                 '.huope.info',
6144                 '.thebdsmday.info',
6145                 '.zioprt.info',                 // 89.149.228.237
6146         ),
6147         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6148                 '.boblisk.info',
6149                 '.factyri.info',
6150                 '.jorge1.info',
6151         ),
6152         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6153                 '.bestmindstorm.org',
6154                 '.redstoreonline.org',
6155         ),
6156         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6157                 '.8e8ae.net',
6158                 '.c-cock.com',
6159                 '.fa59eaf.com',
6160                 '.set-place.net',
6161                 '.sex-beauty.net',
6162         ),
6163         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6164                 '.tomdir.info',
6165                 '.tomdirdirect.info',
6166                 '.tomdirworld.info',
6167                 '.treton.info',
6168                 '.trefas.info',
6169                 '.tretonmondo.info',
6170                 '.unefout.info',
6171                 '.unefoutprojet.info',
6172                 '.unitfree.info',
6173                 '.vilret.info',
6174                 '.vilttown.info',
6175                 '.votrefout.info',
6176                 '.warmfind.info',
6177                 '.warptop.info',
6178                 '.wildtram.info',
6179                 '.xofind.info',
6180                 '.xopdiscover.info',
6181                 '.xopfind.info',
6182                 '.xoplocate.info',
6183                 '.xopseek.info',
6184                 '.xpfirst.info',
6185                 '.xphighest.info',
6186                 '.xptop.info',
6187         ),
6188         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6189                 '.myviagrasite.com',    // 80.74.153.2
6190                 '.thecanadianmeds.com', // 80.74.153.17
6191         ),
6192         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6193                 '.bigemot.com',                         // 217.11.233.34, / not found
6194                 '.espharmacy.com',                      // 217.11.233.34
6195                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6196                 '.ringtonecooler.com',          // 217.11.233.34
6197         ),
6198         'dfym at dfym.cn' => array(
6199                 // ANI, JavaScript, iframe
6200
6201                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6202                 '.okwit.com',
6203                 '.sakerver.com',
6204                 '.motewiki.net',
6205
6206                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6207
6208                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6209
6210                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6211                 '.bbtv-chat.com',
6212                 '.ketubatle.com',
6213                 '.playonlanei.com',
6214                 '.rmtfcne.com',
6215
6216         ),
6217         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6218                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6219                 '.lookmedicine.info',           // 206.161.205.22
6220                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6221                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6222                 '.worldsitesearch.info',        // 209.8.40.59
6223         ),
6224         'lee.seery at gmail.com' => array(
6225                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6226                 '.lingvol.com',         // 64.21.34.55
6227                 '.micevol.com',         // 64.21.34.55
6228                 '.heyhey.info',         // 64.21.34.55  by anonymous
6229         ),
6230         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6231                 // 69-64-64-71.dedicated.abac.net
6232                 '.520-ard.info',
6233                 '.550bcards.info',
6234                 '.559-cads.info',
6235                 '.559caard.info',
6236                 '.565-caaard.info',
6237                 '.575cadr.info',
6238                 '.577cadrs.info',
6239                 '.590-acrds.info',
6240                 '.596-cadrs.info',
6241                 '.596caards.info',
6242                 '.596caaard.info',
6243                 '.asstablishingcads.info',
6244                 '.astablish-ard.info',
6245                 '.astablishcacrds.info',
6246                 '.begginers-acards.info',
6247                 '.begginersacrds.info',
6248                 '.beggingcaaard.info',
6249                 '.beginercacrds.info',
6250                 '.cacrdscreating.info',
6251                 '.caditbegging.info',
6252                 '.cadr-buildup.info',
6253                 '.cadr-establilsh.info',
6254                 '.cadrs-buildercredit.info',
6255                 '.cadrs570.info',
6256                 '.cads-565.info',
6257
6258                 // 69-64-64-113.dedicated.abac.net
6259                 '.interistacards.info',
6260                 '.intrust-ards.info',
6261                 '.intrustacrds.info',
6262                 '.lfixed-ard.info',
6263                 '.lowerate-ard.info',
6264                 '.lowpercentage-ard.info',
6265                 '.lowpercentageacrd.info',
6266         ),
6267         'acua at mail.ru' => array(
6268
6269                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6270
6271                         // by adventurer at allmyns.info
6272                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6273
6274                         // by webmaster at allmyns.info
6275                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6276                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6277                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6278                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6279                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6280                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6281                         '.riumh.cn',    // 84.16.226.28(*snip*)
6282                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6283                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6284                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6285
6286                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6287                 '.dns4babka.info',      // by acua at mail.ru
6288
6289                         // by golubcov at dns4babka.info
6290                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6291
6292                         // by webmaster at dns4babka.info
6293                         '.credh.cn',
6294                         '.fucfv.cn',
6295                         '.gdxnk.cn',
6296                         '.sqrrt.cn',
6297                         '.ywtmd.cn',
6298                         '.kncqy.cn',    // by webmaster at allmyns.info
6299
6300                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6301                 '.dedka2ns.info',       // by acua at mail.ru
6302
6303                         // by chasik at dedka2ns.info
6304                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6305
6306                         // by rochel at dedka2ns.info
6307                         '.fudhxjjqh.cn',
6308
6309                         // by webmaster at dedka2ns.info
6310                         '.ascpo.cn',
6311                         '.jgycr.cn',
6312                         '.nqdtt.cn',
6313                         '.oswde.cn',
6314                         '.qeyig.cn',
6315                         '.soqsx.cn',
6316                         '.ukncd.cn',
6317                         '.zijgb.cn',
6318
6319                 // 84.16.255.253(*snip*), / says 'noy found'
6320                 '.dns4dedka.info',      // by acua at mail.ru
6321
6322                         // by aleon at dns4dedka.info
6323                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6324
6325                         // by dig at dns4dedka.info
6326                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6327                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6328                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6329                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6330                         '.heulw.cn',    // 84.16.226.217(*snip*)
6331                         '.hissw.cn',    // 84.16.249.240(*snip*)
6332                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6333                         '.obwew.cn',    // 84.16.251.218(*snip*)
6334                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6335                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6336                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6337                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6338                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6339                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6340                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6341                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6342                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6343                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6344                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6345                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6346
6347                         // by la at dns4dedka.info
6348                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6349                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6350                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6351                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6352                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6353                         '.eothy.cn',    // 84.16.249.241(*snip*)
6354                         '.epocy.cn',    // 84.16.251.220(*snip*)
6355                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6356                         '.faacz.cn',    // 84.16.251.222(*snip*)
6357                         '.filun.cn',    // 89.149.196.72(*snip*)
6358                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6359                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6360                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6361                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6362                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6363                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6364                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6365                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6366                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6367                         '.krumo.cn',    // 84.16.226.217(*snip*)
6368                         '.lbava.cn',    // 217.20.112.102(*snip*)
6369                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6370                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6371                         '.npovm.cn',    // 84.16.226.28(*snip*)
6372                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6373                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6374                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6375                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6376                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6377                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6378                         '.qydph.cn',    // 89.149.228.163(*snip*)
6379                         '.rxens.cn',    // 89.149.196.72(*snip*)
6380                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6381                         '.srths.cn',    // 84.16.251.222(*snip*)
6382                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6383                         '.unquz.cn',    // 84.16.251.223(*snip*)
6384                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6385                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6386                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6387                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6388                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6389                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6390
6391                         // by le at dns4dedka.info
6392                         '.goslw.cn',    // 84.16.251.220(*snip*)
6393                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6394                         '.iewik.cn',    // 84.16.255.254(*snip*)
6395                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6396                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6397                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6398                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6399                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6400                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6401                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6402                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6403                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6404                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6405                         '.qniww.cn',    // 84.16.251.218(*snip*)
6406                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6407                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6408
6409                         // by skspb at dns4dedka.info
6410                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6411
6412                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6413                         '.bcpnb.cn',
6414                         '.cfbpr.cn',
6415                         '.dnndb.cn',
6416                         '.ekwme.cn',
6417                         '.iutps.cn',
6418                         '.ryftj.cn',
6419                         '.vxqcb.cn',
6420
6421                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6422                         // by apple at ns2best.info
6423                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6424                         // by paulwolf at ns2best.info
6425                         '.ifytzq.cn',
6426
6427                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6428                         // by pigato at sedns.info
6429                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6430                         // by roschem at sedns.info
6431                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6432                         // by op at sedns.info
6433                         '.bumfn.cn',
6434                         '.csmlu.cn',
6435                         '.epcwi.cn',
6436                         '.krwzn.cn',
6437                         '.lkvcp.cn',
6438                         '.mvmkh.cn',
6439                         '.nwpeg.cn',
6440                         '.rnqol.cn',
6441                         '.tyuaf.cn',
6442                         '.ucysa.cn',
6443                         '.vhyom.cn',
6444                         '.wtstu.cn',
6445                         '.zslxr.cn',
6446         ),
6447         'gilvcta sy jilbertsbram.com' => array(
6448                 // 206.53.51.126
6449                 '.dsfljkeilm1.cn',
6450                 '.dsfljkeilm2.cn',
6451                 '.dsfljkeilm3.cn',
6452                 '.dsfljkeilm4.cn',
6453                 '.dsfljkeilm5.cn',
6454                 '.dsfljkeilm6.cn',
6455                 '.dsfljkeilm7.cn',
6456                 '.dsfljkeilm8.cn',
6457                 '.dsfljkeilm9.cn',
6458                 '.dsfljkeilm10.cn',
6459         ),
6460         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6461
6462                 // 69.64.82.76(*.dedicated.abac.net)
6463                 '.bruised-criedit.info',
6464                 '.bruised-crtedit.info',
6465                 '.bruised-czrd.info',
6466                 '.bruisedcreditcars.info',
6467                 '.bruisedcreitcard.info',
6468                 '.bruisedcreitd.info',
6469                 '.buliderscreadet.info',
6470                 '.cleaningup-cdit.info',
6471                 '.cleaningup-cedict.info',
6472                 '.cleaningup-cerdic.info',
6473                 '.cleanup-crrd.info',
6474
6475                 // 69.64.82.77(*.dedicated.abac.net)
6476                 '.bruised-crediot.info',
6477                 '.bruised-credtid.info',
6478                 '.bruisedcriet.info',
6479                 '.bruisedredit.info',
6480                 '.buliders-crdt.info',
6481                 '.buliders-cre4dit.info',
6482                 '.buliders-creadt.info',
6483                 '.buliders-credcards.info',
6484                 '.buliders-credictcard.info',
6485                 '.cleaningupccreditcards.info',
6486                 '.cleaningupcdedit.info',
6487                 '.cleaningupcedirt.info',
6488                 '.cleaningupceidt.info',
6489                 '.cleaningupcrasd.info',
6490                 '.cleaningupcreait.info',
6491
6492                 // 69.64.82.78(*.dedicated.abac.net)
6493                 '.bruised-cridet.info',
6494                 '.bruised-drecit.info',
6495                 '.bruised-reditcards.info',
6496                 '.bruisedcredikt.info',
6497                 '.bruisedcredith.info',
6498                 '.bruisedcredtid.info',
6499                 '.cleanup-criet.info',
6500                 '.cleanup-csrds.info',
6501                 '.cleanup-dards.info',
6502
6503                 // 69.64.82.79(*.dedicated.abac.net)
6504                 '.bruised-crediotcards.info',
6505                 '.bruised-creditcar.info',
6506                 '.bruised-creid.info',
6507                 '.bruised-creidtcard.info',
6508                 '.buliders-crdit.info',
6509                 '.buliders-creadet.info',
6510                 '.cleaningup-ceridt.info',
6511                 '.cleaningupcrecit.info',
6512                 '.cleaningupccritcard.info',
6513                 '.cleanupdredit.info',
6514                 '.cleanupredit.info',
6515         ),
6516         '.malwarealarm.com',
6517                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6518                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6519                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6520         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6521         'Inet-Traffic.com' => array(
6522                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6523                 //'.dcomm.com',         // by D Communications Inc. S.A.
6524
6525                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6526                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6527                 // ...
6528                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6529                 // ...
6530                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6531                 // ...
6532                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6533                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6534                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6535                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6536                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6537                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6538                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6539                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6540                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6541                 // ...
6542                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6543                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6544                 // ...
6545                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6546                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6547                 // ...
6548                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6549                 // ...
6550                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6551                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6552                 // ...
6553                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6554         ),
6555         'andreyletov at yahoo.com related' => array(
6556                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6557                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6558                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6559
6560                 // 89.248.99.118 by anonymous
6561                 '.lpgpharmacy.com',
6562                 '.onlybestgalleries.com',
6563                 '.viagrabest.info',
6564                 '.viagrabestprice.info',
6565                 '.viagratop.info',
6566
6567                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6568                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6569                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6570         ),
6571         'alrusnac at hotmail.com' => array(
6572                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6573                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6574         ),
6575         '203.116.63.123' => array(
6576                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6577                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6578         ),
6579         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6580                 '.autotowncar.cn',              // 69.73.146.184
6581                 '.badgirlhome.cn',              // 69.73.146.186
6582         ),
6583         'Wmp.co.jp' => array(
6584                 // 219.94.134.208, ns *.dns.ne.jp, adult
6585                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6586                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6587                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6588         ),
6589         'Macherie.tv' => array(
6590                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6591                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6592                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6593         ),
6594         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6595                 '.yemine.info',
6596                 '.fr4f3ds.info',
6597         ),
6598         '75.126.129.222' => array(
6599                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6600                 '.viagrabuycheap.info', // ns *.advernsserver.com
6601                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6602         ),
6603         'sqr at bk.ru' => array(
6604                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6605                 '.masserch.info',               // "Free Web Hosting", spam
6606                 '.miserch.info',
6607         ),
6608         'gangstadra at hotmail.com' => array(
6609                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6610                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6611                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6612                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6613         ),
6614         'hosan by front.ru' => array(
6615                 '.salihome.info',                               // 206.53.51.155(non-existent)
6616                 '.online-freesearch.com',               // 206.53.51.155
6617                 '.choosefinest.com',                    // 206.53.51.157
6618                 '.carsprojects.com',                    // 206.53.51.159
6619                 '.sport-brands.com',                    // 206.53.51.167
6620                 '.online-pharmaceutics.com',    // 206.53.51.168
6621         ),
6622         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6623                 '.canadians-health.com',        // by andreyletov at yahoo.com
6624                 '.cialischeap.info',
6625                 '.superrv.info',
6626         ),
6627         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6628                 '.hatbi.com',
6629                 '.justrty.com',
6630                 '.kol2you.com',
6631                 '.kolplanet.com',
6632                 '.myrty.com',
6633                 '.officialrty.com',
6634                 '.pbaol.com',
6635                 '.planetkol.com',
6636         ),
6637         'Abra1.com' => array(
6638                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6639                 '.abra1.com',           // by info at maisontropicale.com
6640                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6641
6642                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6643                 '.abra2.com',           // by domain at anondns.org
6644                 '.abra3.com',           // by domain at anondns.org
6645         ),
6646         'topdomainz at gmail.com' => array(
6647                 // 217.73.201.237 , ns *.parked.ru
6648                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6649                 '.aboutgooglegroup.info',
6650                 '.aboutgoogleimage.info',
6651                 '.aboutgooglemail.info',
6652                 '.aboutgooglemap.info',
6653                 '.aboutgooglenews.info',
6654                 '.aboutgooglevideo.info',
6655                 '.bestgoogleearth.info',
6656                 '.magicgoogleearth.info',
6657                 '.magicgooglemap.info',
6658                 '.magicgooglevideo.info',
6659
6660                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6661                 '.slajzer.info',
6662                 '.tonoscelular.info',
6663                 '.tonosmotorola.info',
6664         ),
6665         'Anderson at extra.by' => array(
6666                 // Encoded JavaScript
6667
6668                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6669                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6670                 '.6dir.info',
6671                 '.8dir.info',
6672                 '.9dir.info',
6673                 '.2pro.info',
6674                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6675                 '.6pro.info',
6676                 '.7pro.info',
6677                 '.8pro.info',
6678                 '.9pro.info',
6679                 '.5sms.info',
6680                 '.6sms.info',
6681                 '.8sms.info',
6682                 '.9sms.info',
6683                 '.1upp.info',
6684                 '.2upp.info',
6685                 '.3upp.info',
6686                 '.4upp.info',
6687                 '.5upp.info',
6688                 '.6upp.info',
6689                 '.7upp.info',
6690                 '.8upp.info',
6691                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6692                 '.2vip.info',   // by Anderson at extra.by
6693                 '.4vip.info',
6694                 '.5vip.info',
6695                 '.6vip.info',
6696                 '.7vip.info',
6697                 '.8vip.info',   // ns *.9upp.info
6698                 '.9vip.info',
6699
6700                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6701                 '.w3rar.info',
6702                 '.w3sex.info',
6703                 '.w3zip.info',
6704                 '.w3in.info',
6705                 '.w3out.info',
6706         ),
6707         'zorkin87 at mail.ru' => array(
6708                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6709                 '.ruqore.com',
6710                 '.goxama.com',
6711                 '.cazebi.com',
6712                 '.fukeqa.com',
6713                 '.fydoge.com',
6714                 '.jukaly.com',
6715                 '.jumoga.com',
6716                 '.jumuxo.com',
6717                 '.tyriva.com',
6718                 '.vudyho.com'
6719         ),
6720         'jessicaeagloff at yahoo.co.uk' => array(
6721                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6722                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6723                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6724                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6725         ),
6726         'qbbs at xinoffice.com' => array(
6727                 // ns *.name-services.com
6728                 '.lingage.com',         // 8.15.231.118
6729                 '.puksins.com',         // IP not allocated now
6730         ),
6731         'advertolog at gmail.com' =>
6732                 // 81.0.250.86(network.upl.cz => non-existent) or
6733                 // 217.11.233.27
6734                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6735         'contact at aboutdomain.com' => array(
6736                 '.lopieur0.com',        // Not match but used
6737                 '.lopieur1.com',        // Not match but used
6738                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6739         ),
6740         'info at cash4wm.biz related' => array(
6741                 // 84.16.233.12(*.internetserviceteam.com)
6742                 '.newsblogforu.com',
6743
6744                 // 84.16.235.141()
6745                 '.informator4you.com',
6746
6747                 // 84.16.240.68(*.internetserviceteam.com)
6748                 '.absolute-best-site.com',
6749                 '.new-blog-for-you.com',
6750
6751                 // 84.16.240.69(*.internetserviceteam.com)
6752                 '.best-sport-blog.com',
6753                 '.big-internet-site.com',
6754                 '.brendsite.com',
6755                 '.my-news-blog.com',
6756
6757                 // 84.16.242.123(*.internetserviceteam.com)
6758                 '.best-news-blog.com',
6759                 '.site-with-content.com',
6760
6761                 // The same method with info at cash4wm.biz
6762                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6763                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6764                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6765                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6766                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6767                 '.bloginfo4u.info',             // 89.149.247.25
6768         ),
6769         'kerjy at yahoo.com' => array(
6770                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6771                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6772                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6773                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6774                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6775         ),
6776         'vme at hotmail.ru' => array(
6777                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6778                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6779         ),
6780         'john at hellomyns.info' => array(
6781                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6782                 '.byouz.cn',            // 89.149.247.24, / nothing
6783                 '.idghc.cn',
6784                 '.inxrj.cn',
6785                 '.jqzdf.cn',
6786                 '.vsxej.cn',
6787                 '.wkgnr.cn',
6788         ),
6789         '.CN spam payload' => array(
6790                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6791                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6792                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6793                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6794                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6795                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6796                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6797                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6798                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6799                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6800         ),
6801         'Time2ns.info' => array(
6802                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6803                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6804                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6805                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6806                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6807         ),
6808         'Ilovemyns.info' => array(
6809                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6810                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6811         ),
6812         'Freehostdns.info' => array(
6813                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6814                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6815                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6816         ),
6817         'Newns4me.info' => array(
6818                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6819                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6820         ),
6821
6822         // C-2: Lonely domains (buddies not found yet)
6823         '.0721-4404.com',
6824         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6825         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6826         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6827         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6828         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6829         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6830         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6831         '.0annie.info',
6832         '.6i6.de',
6833         '.77toperrwuter1.info', // by Roman
6834         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6835         '.angioco.com',                 // 62.37.112.100, gamble
6836         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6837         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6838         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6839         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6840         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6841         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6842         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6843         '.allworlddirect.info', // Forbidden
6844         '.amoreitsex.com',
6845         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6846         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6847         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6848         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6849         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6850         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6851         '.auto-car-cheap.org',
6852         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6853         '.baurish.info',
6854         '.bernardtomic21.info', // by filboj at hotmail.com
6855         '.bestop.name',
6856         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6857         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6858         '.bestshopfinder.info',
6859         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6860         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6861         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6862         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6863         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6864         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6865         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6866         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6867         '.catkittenmagazines.org',              // 87.118.97.117
6868         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6869         '.chatwalker.com',              // 124.32.230.65
6870         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6871         '.covertarena.co.uk',   // by Wayne Huxtable
6872         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6873         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6874         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6875         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6876         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6877         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6878         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6879         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6880         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6881         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6882         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6883         '.easyshopusa.com',             // by riter (riter at nm.ru)
6884         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6885         '.edu.ph',                              // "philippine network foundation inc"
6886         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6887         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6888         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6889         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6890         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6891         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6892         '.filthserver.com',             // sales at onlinemarketingservices.biz
6893         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6894         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6895         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6896         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6897         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6898         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6899         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6900         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6901         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6902         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6903         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6904         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6905         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6906         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6907         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6908         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6909         '.gm-exchange.jp',              // 210.188.216.49 RMT
6910         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6911         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6912         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6913         '.greatbestwestern.org',// by gao.wungao at gmail.com
6914         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6915         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6916         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6917         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6918         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6919         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6920         '.hostuju.cz',                  // ns banan.cz, banan.it
6921         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6922         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6923         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6924         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6925         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6926         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6927         '.infradoc.com',
6928         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6929         '.ismarket.com',                // Google-hiding. intercage.com related IP
6930         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6931         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6932         '.itsexosit.net',
6933         '.itxxxit.net',
6934         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6935         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6936         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6937         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6938         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6939         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6940         '.kingtools.de',
6941         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6942         '.leucainfo.com',
6943         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6944         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6945         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6946         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6947         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6948         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6949         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6950         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6951         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6952         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6953         '.megvideochatlive.info',       // Bad seo
6954         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6955         '.mncxvsm.info',                // 217.11.233.105, / blank
6956         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6957         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6958         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6959         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6960         '.mxsupportmailer.com',
6961         '.next-moneylife.com',  // RMT
6962         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6963         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6964         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6965         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6966         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6967         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6968         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6969         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6970         '.onlineviagra.de',
6971         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6972         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6973         '.ozomw.info',
6974         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6975         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6976         '.perevozka777.ru',             // by witalik at gmail.com
6977         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6978         '.pills-storage.com',   // by
6979         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6980         '.porkyhost.com',               // 79965 at whois.gkg.net
6981         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6982         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6983         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6984         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6985         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6986         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6987         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6988         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6989         '.quality-teen-porn-photo.com', // by info at densa.info
6990         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6991         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6992         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6993         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6994         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6995         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6996         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6997         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6998         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6999         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
7000         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
7001         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
7002         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
7003         '.sexamoreit.com',
7004         '.sexforit.com',
7005         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
7006         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
7007         '.sirlook.com',
7008         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
7009         '.sepcn.info',                  // / not found
7010         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
7011         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
7012         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
7013         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
7014         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
7015         '.superverizonringtones.com',   // by joshua at list.ru
7016         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
7017         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
7018         '.thehostcity.com',             // Domains by Proxy
7019         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
7020         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
7021         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
7022         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
7023         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
7024         '.topmeds10.com',
7025         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
7026         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
7027         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
7028         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
7029         '.unctad.net',                  // by gfdogfd at lovespb.com
7030         '.vacant.org.uk',
7031         '.viagrausaonline.com', // 85.17.52.139(non-existent)
7032         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
7033         '.virtualsystem.de',
7034         '.vdxhost.com',
7035         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
7036         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
7037         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
7038         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
7039         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
7040         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
7041         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
7042         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
7043         '.whoop.to',                    // RMT
7044         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
7045         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
7046         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
7047         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
7048         '.wwwna.info',                  // / 404 Not Found
7049         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
7050         '.xamorexxx.net',
7051         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
7052         '.xsessox.com',
7053         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
7054         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
7055         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
7056         '.zyguo.info',                  // ns globoxhost.net
7057         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
7058
7059
7060         '.canada-grants.ca',    // 173.193.6.128 link to grantsmoney.com
7061         '.grantsmoney.com',             // 72.26.207.6
7062
7063         'admin at thumbset.net' => array(       // 2010/08 207.7.82.170, Don Wilson (admin at thumbset.net)
7064                 // link to licensedrxpharm.com
7065                 '.avelocitoyens.com',
7066                 '.lzbps.com',
7067                 '.bittermonkeycomic.com',
7068                 '.estadiodeportivocali.com',
7069                 '.fb1177.com',
7070                 '.ghanabookpublishers.com',
7071                 '.greensagepage.com',
7072                 '.inlakech.com',
7073                 '.leungwingkei.net',
7074                 '.liberadea.org',
7075                 '.rocknrollgypsy.com',
7076                 '.su-om.com',
7077                 '.ymouk.org',   // 2010/08 207.7.82.170, by (ymouk.org at contactprivacy.com)
7078
7079                 // link to oainternetservices.com
7080                 '.elpadraic.com',
7081                 '.fptpromo.com',
7082                 '.insidetheaf2.com',
7083
7084                 // link to pro-pay.net
7085                 '.movie-train.com',
7086
7087                 // link to vigrxplus.com
7088                 '.panatrog.org',
7089
7090                 // link to megarxsale.com
7091                 '.haberiniz.net',
7092                 '.obusilis.net',
7093         ),
7094         '.onlinecasinoinformation.com', // 2010/08 66.96.147.105
7095         '.onlinecasinoresources.com',   // 2010/08 74.220.215.62
7096
7097         'moshenhm at gmail.com' => array(       // by Nahum, Moshe (moshenhm at gmail.com)
7098
7099                 // 2010/08 65.254.248.143
7100                 '.odinhosting.com',                     // seems no link today
7101                 '.nycdivers.com',                       // link to mainalpha.com
7102                 '.robertlhines.com',            // link to mainalpha.com, etc
7103                 '.shadowsonmyshift.com',        // link to mainalpha.com, etc
7104
7105                 // 2010/08 69.89.31.187
7106                 '.bcsliding.com',                       //
7107                 '.msthirteen.com',                      // link to mainalpha.com
7108                 // 2010/08 74.53.239.27
7109                 '.thetravelerscafe.com',        // cheap tickets
7110
7111                 //  2010/08 74.81.92.55
7112                 '.sonicparthenon.com',          // link to mainalpha.com
7113                 '.staroftheevening.com',        // link to mainalpha.com
7114                 '.sanjosecosmeticdental.com',
7115
7116                 // 2010/08 173.45.103.74
7117                 '.digitalexperts.com',
7118
7119                 // 2010/08 173.236.48.82
7120                 '.sunshinetesting.com',                 // link to mainalpha.com
7121                 '.sports-and-concert-tickets.com',      //  seems no link today
7122
7123                 // 2010/08 174.120.82.124
7124                 '.blueysretreat.com',                   // seems no link today
7125                 '.lamborghinidenveronline.com', // seems no link today
7126                 '.buckandbb.net',                               // link to kqzyfj.com
7127
7128                 // 2010/08 174.132.149.98
7129                 '.2008-national-n-scale-convention.com',        // link to mainalpha.com
7130                 '.creativejuicecompetition.com',        // seems no link today
7131
7132                 // 2010/08 216.119.132.2
7133                 '.kennybrown.net',
7134
7135                 // 2010/08 no address today
7136                 '.bestblackdatingonline.com',
7137         ),
7138
7139         'info at dvishnu.com' => array( // by Vishnu Prasath (info at dvishnu.com)
7140
7141                 // 2010/08 69.89.31.187
7142                 '.dinuzzollc.com',                      // link to mainalpha.com etc
7143                 '.laruesbackdoor.com',          // link to mainalpha.com etc
7144                 '.okrenters.com',                       // link to mainalpha.co
7145                 '.pandaitaid.com',                      // link to mainalpha.com, etc
7146                 '.vicariouscollection.com',     // by Vishnu Prasath (info at dvishnu.com)
7147                 '.middlefingerproductions.net', // link to mainalpha.com
7148
7149                 //  2010/08 74.81.92.55
7150                 '.ecoxfinancial.com',           // link to mainalpha.com etc
7151                 '.fightingspirit-comics.com',   // link to mainalpha.com etc
7152                 '.learntoplaythedobro.com',     // link to mainalpha.com etc
7153                 '.montcalm4hfair.com',          // link to mainalpha.com etc
7154                 '.oaads.com',                           // link to mainalpha.com etc
7155                 '.pabloblum.com',                       // link to mainalpha.com
7156                 '.renaissancequartet.com',      // link to mainalpha.com
7157                 '.sbi-limited.com',                     // link to mainalpha.com
7158                 '.showeroffire.com',            // link to mainalpha.com
7159                 '.soccerfestcolumbus.com',      // link to mainalpha.com
7160
7161                 // 2010/08 173.236.48.82
7162                 '.anniedguesthouse.com',                // link to mainalpha.com
7163                 '.finnfest2009.com',                    // link to mainalpha.com
7164                 '.hietalasoldworldmeats.com',   // link to mainalpha.com etc
7165                 '.splendoreimport.com',                 // link to mainalpha.com
7166
7167                 // 2010/08 174.120.82.124
7168                 '.jenurbanandthebox.com',               // link to mainalpha.com
7169
7170                 // 2010/08 174.132.149.98
7171                 '.segwaybykar.com',                             // link to mainalpha.com
7172         ),
7173
7174         'mainalpha.com related' => array(
7175
7176                 // 2010/08 65.254.248.143
7177                 '.archivecdbooksus.com',        // by (offpista at gmail.com), "sports betting"
7178                 '.highrollersonlinecasinos.com',        // casios
7179                 '.onlinecasinocenter.com',                      // casios
7180
7181
7182                 //  2010/08 74.81.92.55
7183                 '.2ndrose.com',                         // by Victor Zrovanov (victor3239 at gmail.com), link to mainalpha.com
7184                 '.edgewatertowers.com',         // by Victor Frankl (victor3239 at gmail.com), link to mainalpha.com
7185
7186                 // 2010/08 173.236.48.82
7187                 '.ciprogram.com',                               // link to mainalpha.com
7188
7189                 // 2010/08 174.132.149.98
7190                 '.msgulfcoastbnbs.com',         // by Michael John (cpajourney at yahoo.com), link to mainalpha.com etc
7191         ),
7192
7193         'kouvald at gmail.com' => array(        // by Vlad Kouvaldin (kouvald at gmail.com)
7194
7195                 // 2010/08 91.205.156.73
7196                 '.newvibesmedia.com',
7197                 '.pacarts.org',
7198                 '.peruanosenbarcelona.com',
7199                 '.ronnievon.com',
7200                 '.savewilson.org',
7201                 '.sawanmall.com',
7202                 '.sickpowder.com',
7203                 '.theblogproject.com',
7204                 '.thenewswalk.com',
7205                 '.wilsonhillstables.com',
7206
7207                 // 2010/08 91.205.156.77
7208                 '.chaironwheels.com',
7209                 '.countrylegends943.com',
7210                 '.daytonapridefest.com',
7211                 '.funposal.org',
7212                 '.mfshou.com',
7213                 '.mtskrilla.com',
7214
7215                 // 2010/08 173.45.96.176
7216                 '.prematuretreatments.com',
7217
7218                 // 2010/09 173.83.127.79
7219                 '.bluebirdsdownunder.com',
7220
7221                 // 2010/09 173.83.127.80
7222                 '.briancallphoto.com',
7223         ),
7224
7225         'freelanceblogger at gmail.com' => array(
7226                 '.geniusroulette.com',          // 2010/08 216.86.146.16 by Raj Dash (freelanceblogger at gmail.com)
7227                 '.geniussportsbetting.com',     // 2010/08 66.40.52.146  by Raj Dash (freelanceblogger at gmail.com)
7228         ),
7229
7230         '.ramapowatershed.com',         //
7231         'purplefarm at gmail.com' => array(
7232                 // 2010/08 208.71.128.6
7233                 '.123dollie.com',                       // by marc jones      (purplefarm at gmail.com)
7234                 '.451jokes.com',                        // by Joshua gardiner (purplefarm at gmail.com)
7235                 '.skidsteersonsale.com',        // by Joshua gardiner (purplefarm at gmail.com)
7236         ),
7237
7238         '.freelivemodels.com',  // 2010/08 207.246.153.228, 207.246.153.229
7239         '173.236.25.210 related' => array(
7240                 // 2010/08 173.236.25.210
7241                 '.ibd-treatment-blog.com',
7242                 '.my247weightlossblog.com',
7243                 '.yoursexualhealthblog.com',
7244
7245                 // 2010/08 174.120.171.94
7246                 '.adhdbesttreatments.com',
7247                 '.bipolardisordertreatmentsblog.com',
7248                 '.diabetestype2answers.com',
7249         ),
7250         '68.232.186.54 related' => array(
7251                 '.amateurxxxtube247.com',       // 2010/08 68.232.186.54
7252                 '.asiansextube247.com',         // 2010/08 68.232.186.54
7253                 '.analsextube247.com',          // 2010/08 99.192.176.58
7254                 '.eroticandy.com',                      // 2010/08 99.192.176.54
7255         ),
7256         'nikiforov501 at mail.ru' => array(
7257                 // 2010/09 91.205.156.74
7258                 '.211park.com',
7259                 '.atlantajuniorthrashers.com',
7260                 '.jensenwoods.com',
7261
7262                 // 2010/09 91.205.156.75
7263                 '.ltaadventure.com',
7264                 '.oshareo.com',
7265                 '.pillthrillow.com',
7266                 '.redaphrodite.com',
7267                 '.marching-season.net',
7268         ),
7269
7270         // C-3: Not classifiable (information wanted)
7271         //
7272         // Something incoming to pukiwiki related sites
7273         'nana.co.il related' => array(
7274                 '.planetnana.co.il',
7275                 '.nana.co.il',
7276         ),
7277 );
7278
7279 // --------------------------------------------------
7280
7281 $blocklist['D'] = array(
7282         // D: Sample setting of
7283         // "Third party in good faith"s
7284         //
7285         // Hosts shown inside of the implanted contents,
7286         // not used via spam, but maybe useful to detect these contents
7287         //
7288         // 'RESERVED',
7289 );
7290
7291 // --------------------------------------------------
7292
7293 $blocklist['E'] = array(
7294         // E: Sample setting of
7295         // Promotions
7296         // (Phenomenons with Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7297         //  Ads, Business promotions, SEO, etc)
7298         //
7299         // Promotions near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7300         // Sometimes they may promote each other
7301         //
7302         // Please notify us about this list with reason:
7303         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/342
7304
7305         '15-Mail.com related' => array(
7306                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7307                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7308                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7309                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7310                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7311         ),
7312         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7313         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7314         'E-brainers.com related' => array(
7315                 // 202.212.14.101
7316                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7317                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7318                 '.my-tune.jp',                                  // by brainers Inc.
7319                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7320                 '.weekle.jp',                                   // by brainers Inc.
7321
7322                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7323                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7324                 '.3minutes-marketing-club.com', // by Fujio
7325                 '.affiliate-vampire.com',               // by Masatoshi
7326                 '.article-site-power-package.com',      // by Masatoshi
7327                 '.audio-marketing-club.com',    // by Fujio
7328                 '.brainers-task-manager.com',   // by Masatoshi
7329                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7330                 '.brainersbuzz.com',                    // by Masatoshi
7331                 '.den4renz-marketing-club.com', // by Fujio
7332                 '.english-contents-club.com',   // by Masatoshi
7333                 '.fly-in-ads-japan.com',                // by Fujio
7334                 '.free-resalerights-giveaway.com',      // by Fujio
7335                 '.freegiveawaysecret.com',              // by Masatoshi
7336                 '.guaranteedvisitorpro.com',    // by Masatoshi
7337                 '.havads-japan.com',                    // by Masatoshi
7338                 '.info-business123.com',                // by Fujio
7339                 '.instant-marketing-club.com',  // by Fujio
7340                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7341                 '.marketing-force-japan.com',   // by Fujio
7342                 '.masatoshikobayashi.com',              // by Fujio
7343                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7344                 '.replytomatt.com',                             // by Fujio
7345                 '.santa-deal.com',                              // by Fujio
7346                 '.santa-deal-summer.com',               // by Fujio
7347                 '.scratch-card-factory.com',    // by Masatoshi
7348                 '.script4you-japan.com',                // by Fujio
7349                 '.sell1000000dollarinjapan.com',// by Fujio
7350                 '.squeeze-page-secret.com',             // by Masatoshi
7351                 '.viral-blog-square.com',               // by Fujio
7352                 '.viralarticle.com',                    // by Fujio
7353                 '.wowhoken.com',                                // by Fujio
7354
7355                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7356                 '.brainerstelevision.com',
7357                 '.demosite4you.com',
7358                 '.keywordcatcherpro.com',
7359                 '.script-marketing-club.com',
7360
7361                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7362                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7363                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7364                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7365                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7366                 '.brainerscode.com',    // by akada
7367                 '.brainerslive.com',    // by domain
7368                 '.brainersreview.com',  // by domain
7369                 '.brainerstest.com',    // by akada
7370                 '.otosecret.com',               // by domain
7371                 '.ultimate-marketing-weapon.com',       // by akada
7372                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7373                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7374
7375                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7376                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7377         ),
7378         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7379         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7380         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7381         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7382         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7383                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7384                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7385                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7386
7387                 // Redirects and affiliates:
7388                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7389                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7390                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7391                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7392                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7393                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7394                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7395                 //   ...
7396
7397                 // Other suggestions:
7398                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7399
7400                 // Blog posting at the same time
7401                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7402                 //   2007/06/13 e123.info/archives/76
7403                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7404                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7405                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7406         ),
7407         'info at kobeweb.jp' => array(
7408                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7409                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7410                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7411         ),
7412         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7413         'Infocart.jp' => array(         // by wai at infocart.jp
7414                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7415                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7416                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7417
7418                 //inetnum:      60.32.154.176 - 60.32.154.183
7419                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7420                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7421         ),
7422         'Info-sniper.com' => array(
7423                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7424                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7425                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7426         ),
7427         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7428         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7429         'JunSuzuki.com' => array(       // e-brainers.com related
7430                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7431                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7432         ),
7433         'Natsukih.net' => array(
7434                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7435                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7436                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7437                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7438
7439                 // by info at natsukih.net
7440                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7441                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7442                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7443                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7444                 '.5muryoureport.com',   // 210.251.253.230
7445                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7446                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7447                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7448         ),
7449         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7450                 '.11kanji.com',         // 211.10.131.88
7451                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7452                 '.point-park.com',      // 211.10.131.88
7453                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7454         ),
7455         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7456         'PRJAPAN.co.jp' => array(
7457                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7458                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7459                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7460                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7461                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7462                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7463         ),
7464         'Rakuten.co.jp' => array(
7465                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7466                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7467         ),
7468         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7469         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7470         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7471         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7472                 '.e123.info',
7473                 '.ialchemist.net',
7474                 '.j012.net',
7475                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7476         ),
7477         'Viscose.jp' => array(
7478                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7479                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7480         ),
7481         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7482 );
7483
7484 // --------------------------------------------------
7485
7486 $blocklist['Z'] = array(
7487         // Z: Yours
7488         //
7489         //'',
7490         //'',
7491         //'',
7492 );
7493
7494 ?>