spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.163 2007/08/25 13:36:28 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  68         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  69         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  70         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  71         //'ifastnet.com',                               // Server hosting
  72         //'threefortune.ifastnet.com',  // Server hosting
  73
  74         // Yours
  75         //''
  76         //''
  77         //''
  78
  79 );
  80
  81 // --------------------------------------------------
  82 // A: Sample setting of
  83 // Existing URI redirection or masking services
  84
  85 $blocklist['A-1'] = array(
  86
  87         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  88         // web-based proxy, DNS subdomains, etc
  89         // http://en.wikipedia.org/wiki/URL_redirection
  90         //
  91         // as known as cheap URI obscuring services today,
  92         // for spammers and affiliate users dazed by money.
  93         //
  94         //   Messages from forerunners:
  95         //     o-rly.net
  96         //       "A URL REDIRECTION SERVICE GONE BAD"
  97         //       "SORRY, TRULY"
  98         //     smcurl.com
  99         //       "Idiots were using smcURL to shrink URLs and
 100         //        send them out via spam."
 101         //     tinyclick.com
 102         //       "...stop offering it's free services because
 103         //        too many people were taking advantage of it"
 104         //     xjs.org
 105         //       "We have been forced to close this facility
 106         //        due to a minority of knuckle draggers who
 107         //        abused this web site."
 108         //
 109         // Please notify us about this list with reason:
 110         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 111         //
 112         '0nz.org',
 113         '0rz.tw',
 114         '0url.com',
 115         '0zed.info',
 116         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 117         '123.que.jp',
 118         '12url.org',
 119         '*.15h.com',
 120         '*.1dr.biz',
 121         '1K.pl' => array(
 122                 '*.1k.pl',
 123                 '*.5g.pl',
 124                 '*.orq.pl',
 125         ),
 126         '1nk.us',
 127         '1url.org',
 128         '1url.in',
 129         '1webspace.org',
 130         '2Ch.net' => array(
 131                 'ime.nu',
 132                 'ime.st',
 133         ),
 134         '2ch2.net',
 135         '2hop4.com',
 136         '2s.ca',
 137         '2site.com',
 138         '2url.org',
 139         '301url.com',
 140         '32url.com',
 141         '.3dg.de',
 142         '*.4bb.ru',
 143         'big5.51job.com',
 144         '5jp.net',
 145         '.6url.com',
 146         '*.6x.to',
 147         '7ref.com',
 148         '82m.org',
 149         '*.8rf.com',
 150         '98.to',
 151         'abbrv.co.uk',
 152         '*.abwb.org',
 153         'acnw.de',
 154         'Active.ws' => array(
 155                 '*.321.cn',
 156                 '*.4x2.net',
 157                 'active.ws',
 158                 '*.better.ws',
 159                 '*.here.ws',
 160                 '*.mypiece.com',
 161                 '*.official.ws',
 162                 '*.ouch.ws',
 163                 '*.premium.ws',
 164                 '*.such.info',
 165                 '*.true.ws',
 166                 '*.visit.ws',
 167         ),
 168         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 169         'aifam.com',
 170         'All4WebMasters.pl' => array(
 171                 '*.ovp.pl',
 172                 '*.6-6-6.pl',
 173         ),
 174         'amoo.org',
 175         'web.archive.org',              ///web/2
 176         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 177                 'jmp2.net',
 178                 '2me.tw',
 179         ),
 180         'ataja.es',
 181         'ATBHost.com' => array(
 182                 '*.atbhost.com',
 183                 '*.bzhost.net',
 184         ),
 185         'atk.jp',
 186         'clearp.ath.cx',
 187         'athomebiz.com',
 188         'aukcje1.pl',
 189         'beam.to',
 190         'beermapping.com',
 191         'besturl.in',
 192         'bhomiyo.com',          // 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 193         'biglnk.com',
 194         'bingr.com',
 195         'bittyurl.com',
 196         '*.bizz.cc',
 197         '*.blo.pl',
 198         '*.bo.pl',
 199         'briefurl.com',
 200         'brokenscript.com',
 201         'BucksoGen.com' => array(
 202                 '*.bucksogen.com',
 203                 '*.bulochka.org',
 204                 '*.korzhik.org',
 205                 '*.kovrizhka.org',
 206                 '*.pirozhok.org',
 207                 '*.plushka.org',
 208                 '*.pryanik.org',
 209                 '*.sushka.org',
 210         ),
 211         'budgethosts.org',
 212         'budu.com',                             // by peter.eder at imcworld.com
 213         '*.buzznet.com',
 214         '*.bydl.com',
 215         'C-O.IN' => array(
 216                 '*.c-o.cc',
 217                 '*.c-o.in',
 218                 '*.coz.in',
 219                 '*.cq.bz',
 220         ),
 221         'c64.ch',
 222         'c711.com',
 223         '*.cej.pl',
 224         'checkasite.net',
 225         'url.chefhost.com',
 226         '*.chicappa.jp',
 227         'chilicity.com',
 228         'big5.china.com',
 229         'chopurl.com',
 230         'christopherleestreet.com',
 231         'cintcm.com',
 232         '*.cjb.net',
 233         'clipurl.com',
 234         '*.co.nr',
 235         'Comtech Enterprises ' => array(        // comteche.com
 236                 'tinyurl.name',
 237                 'tinyurl.us',
 238         ),
 239         'Cool168.com' => array(
 240                 '*.cool158.com',
 241                 '*.cool168.com',
 242                 '*.ko168.com',
 243                 '*.ko188.com',
 244         ),
 245         'Coolurl.de' => array(
 246                 'coolurl.de',
 247                 'dornenboy.de',
 248                 'eyeqweb.com',
 249                 'hardcore-porn.de',
 250                 'maschinen-bluten-nicht.de',
 251         ),
 252         'cutalink.com',
 253         '*.da.cx',
 254         '*.da.ru',
 255         'dae2.com',
 256         'dephine.org',
 257         'desiurl.com',
 258         'dhurl.com',
 259         'digbig.com',
 260         'Digipills.com' => array(
 261                 '*.digipills.com',
 262                 'minilien.com',
 263                 'tinylink.com',
 264         ),
 265         '*.discutbb.com',
 266         'DL.AM' => array(
 267                 '*.cx.la',
 268                 '*.dl.am',
 269         ),
 270         '*.dl.pl',
 271         '*.dmdns.com',
 272         'doiop.com',
 273         'drlinky.com',
 274         'durl.us',
 275         '*.dvdonly.ru',
 276         '*.dynu.ca',
 277         'dwarf.name',
 278         '*.eadf.com',
 279         '*.easyurl.net',
 280         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 281                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 282                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 283                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 284                 //   "Keep continuing to seek originality and contribute it to local,
 285                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 286                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 287                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 288                 // I'm so much impressed of the situation around this imported one today.
 289         'elfurl.com',
 290         'eny.pl',
 291         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 292                 '.mywiitime.com',
 293                 '.surfindark.com',              // webmaster at etechfocus.com
 294                 '.surfinshade.com',
 295                 '.surfinshadow.com',
 296                 '.surfinwind.com',
 297                 '.topsecretlive.com',
 298         ),
 299         '*.eu.org',
 300         'F2B.be' => array(
 301                 '*.f2b.be',
 302                 '*.freakz.eu',
 303                 '*.n0.be',
 304                 '*.n3t.nl',
 305                 '*.short.be',
 306                 '*.ssr.be',
 307                 '*.tweaker.eu',
 308         ),
 309         '*.fancyurl.com',
 310         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 311                 'blue11.jp',
 312                 'fanznet.com',
 313                 'katou.in',
 314                 'mymap.in',
 315                 'saitou.in',
 316                 'satou.in',
 317                 'susan.in',
 318         ),
 319         '.fe.pl',                       // Redirection and subdomain
 320         'ffwd.to',
 321         'url.fibiger.org',
 322         'FireMe.to' => array(
 323                 'fireme.to',
 324                 'nextdoor.to',
 325                 'ontheway.to',
 326         ),
 327         'flingk.com',
 328         'flog.jp',                      // careless redirector and bbs
 329         'fm7.biz',
 330         'fnbi.jp',
 331         '*.fnbi.jp',
 332         'forgeturl.com',
 333         '*.free.bg',
 334         'Freeservers.com' => array(     // United Online Web Services, Inc.
 335                 '*.4mg.com',
 336                 '*.4t.com',
 337                 '*.8m.com',
 338                 '*.8m.net',
 339                 '*.8k.com',
 340                 '*.faithweb.com',
 341                 '*.freehosting.net',
 342                 '*.freeservers.com',
 343                 '*.gq.nu',
 344                 '*.htmlplanet.com',
 345                 '*.itgo.com',
 346                 '*.iwarp.com',
 347                 '*.s5.com',
 348                 '*.scriptmania.com',
 349                 '*.tvheaven.com',
 350         ),
 351         '*.freewebpages.com',
 352         'FreeWebServices.net' => array( // Host Department LLC
 353                 '*.about.gs',   // Dead?
 354                 '*.about.tc',
 355                 '*.about.vg',
 356                 '*.aboutus.gs',
 357                 '*.aboutus.ms',
 358                 '*.aboutus.tc',
 359                 '*.aboutus.vg',
 360                 '*.biografi.biz',
 361                 '*.biografi.info',
 362                 '*.biografi.org',
 363                 '*.biografi.us',
 364                 '*.datadiri.biz',
 365                 '*.datadiri.cc',
 366                 '*.datadiri.com',
 367                 '*.datadiri.info',
 368                 '*.datadiri.net',
 369                 '*.datadiri.org',
 370                 '*.datadiri.tv',
 371                 '*.datadiri.us',
 372                 '*.ecv.gs',
 373                 '*.ecv.ms',
 374                 '*.ecv.tc',
 375                 '*.ecv.vg',
 376                 '*.eprofile.us',
 377                 '*.go2net.ws',
 378                 '*.hits.io',
 379                 '*.hostingweb.us',
 380                 '*.hub.io',
 381                 '*.indo.bz',
 382                 '*.indo.cc',
 383                 '*.indo.gs',
 384                 '*.indo.ms',
 385                 '*.indo.tc',
 386                 '*.indo.vg',
 387                 '*.infinitehosting.net',
 388                 '*.infinites.net',
 389                 '*.lan.io',
 390                 '*.max.io',
 391                 '*.mycv.bz',
 392                 '*.mycv.nu',
 393                 '*.mycv.tv',
 394                 '*.myweb.io',
 395                 '*.ourprofile.biz',
 396                 '*.ourprofile.info',
 397                 '*.ourprofile.net',     // Dead?
 398                 '*.ourprofile.org',
 399                 '*.ourprofile.us',
 400                 '*.profil.bz',
 401                 '*.profil.cc',
 402                 '*.profil.cn',
 403                 '*.profil.gs',
 404                 '*.profil.in',
 405                 '*.profil.ms',
 406                 '*.profil.tc',
 407                 '*.profil.tv',
 408                 '*.profil.vg',  // ?
 409                 '*.site.io',
 410                 '*.wan.io',
 411                 '*.web-cam.ws',
 412                 '*.webs.io',
 413                 '*.zip.io',
 414         ),
 415         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 416         '*.fx.to',
 417         'fyad.org',
 418         'fype.com',
 419         'gentleurl.net',
 420         'Get2.us' => array(
 421                 '*.get2.us',
 422                 '*.hasballs.com',
 423                 '*.ismyidol.com',
 424                 '*.spotted.us',
 425                 '*.went2.us',
 426                 '*.wentto.us',
 427         ),
 428         'glinki.com',
 429         '*.globalredirect.com',
 430         'gnu.vu',
 431         '*.go.cc',
 432         'goonlink.com',
 433         '.gourl.org',
 434         '.greatitem.com',
 435         'gzurl.com',
 436         'url.grillsportverein.de',
 437         'Harudake.net' => array('*.hyu.jp'),
 438         'Hattinger Linux User Group' => array('short.hatlug.de'),
 439         'Hexten.net' => array('lyxus.net'),
 440         'here.is',
 441         'HispaVista.com' => array(
 442                 '*.blogdiario.com',
 443                 '*.hispavista.com',
 444                 '.galeon.com',
 445         ),
 446         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 447                 '*.8l.pl',
 448                 '*.blg.pl',
 449                 '*.czytajto.pl',
 450                 '*.ryj.pl',
 451                 '*.xit.pl',
 452                 '*.xlc.pl',
 453                 '*.hk.pl',
 454                 '*.home.pl',
 455                 '*.of.pl',
 456         ),
 457         'hort.net',
 458         'free4.hostrocket.com',
 459         '*.hotindex.ru',
 460         'HotRedirect.com' => array(
 461                 '*.coolhere.com',
 462                 '*.homepagehere.com',
 463                 '*.hothere.com',
 464                 '*.mustbehere.com',
 465                 '*.onlyhere.net',
 466                 '*.pagehere.com',
 467                 '*.surfhere.net',
 468                 '*.zonehere.com',
 469         ),
 470         'hotshorturl.com',
 471         'hotwebcomics.com',     ///search_redirect.php
 472         'hurl.to',
 473         '*.hux.de',
 474         '*.i89.us',
 475         'iat.net',                      // 74.208.58.130 by Tony Carter
 476         'ibm.com',                      ///links (Correct it)
 477         '*.iceglow.com',
 478         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 479         'Ideas para Nuevos Mercados SL' => array(
 480                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 481                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 482                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 483                 // by edgar bortolin (oscar at i4nm.com)
 484                 // by Edgar Bortolin  (oscar at i4nm.com)
 485                 // by oscar florez (oscar at i4nm.com)
 486                 // by Oscar Florez (oscar at red-es.com)
 487                 // by covadonga del valle (oscar at i4nm.com)
 488                 '*.ar.gd',
 489                 '*.ar.gs',      // ns *.nora.net
 490                 '*.ar.kz',      // by oscar
 491                 '*.ar.nu',      // by Edgar
 492                 '*.ar.tc',      // by oscar
 493                 '*.ar.vg',      // by oscar
 494                 '*.bo.kz',      // by oscar
 495                 '*.bo.nu',      // by covadonga
 496                 '*.bo.tc',      // by oscar
 497                 '*.bo.tf',      // by Oscar
 498                 '*.bo.vg',      // by oscar
 499                 '*.br.gd',
 500                 '*.br.gs',      // ns *.nora.net
 501                 '*.br.nu',      // by edgar
 502                 '*.br.vg',      // by oscar
 503                 '*.ca.gs',      // by oscar
 504                 '*.ca.kz',      // by oscar
 505                 '*.cl.gd',      // by oscar
 506                 '*.cl.kz',      // by oscar
 507                 '*.cl.nu',      // by edgar
 508                 '*.cl.tc',      // by oscar
 509                 '*.cl.tf',      // by Oscar
 510                 '*.cl.vg',      // by oscar
 511                 '*.col.nu',     // by Edgar
 512                 '*.cr.gs',      // ns *.nora.net
 513                 '*.cr.kz',      // by oscar
 514                 '*.cr.nu',      // by edgar
 515                 '*.cr.tc',      // by oscar
 516                 '*.cu.tc',      // by oscar
 517                 '*.do.kz',      // by oscar
 518                 '*.do.nu',      // by edgar
 519                 '*.ec.kz',      // by edgar
 520                 '*.ec.nu',      // by Edgar
 521                 '*.ec.tf',      // by Oscar
 522                 '*.es.kz',      // by oscar
 523                 '*.eu.kz',      // by oscar
 524                 '*.gt.gs',      // ns *.nora.net
 525                 '*.gt.tc',      // by oscar
 526                 '*.gt.tf',      // by Oscar
 527                 '*.gt.vg',      // by Oscar
 528                 '*.hn.gs',      // ns *.nora.net
 529                 '*.hn.tc',      // by oscar
 530                 '*.hn.tf',      // by Oscar
 531                 '*.hn.vg',      // by oscar
 532                 '*.mx.gd',
 533                 '*.mx.gs',      // ns *.nora.net
 534                 '*.mx.kz',      // by oscar
 535                 '*.mx.vg',      // by oscar
 536                 '*.ni.kz',      // by oscar
 537                 '*.pa.kz',      // by oscar
 538                 '*.pe.kz',      // by oscar
 539                 '*.pe.nu',      // by Edgar
 540                 '*.pr.kz',      // by oscar
 541                 '*.pr.nu',      // by edgar
 542                 '*.pt.gs',      // ns *.nora.net
 543                 '*.pt.kz',      // by edgar
 544                 '*.pt.nu',      // by edgar
 545                 '*.pt.tc',      // by oscar
 546                 '*.pt.tf',      // by Oscar
 547                 '*.py.gs',      // ns *.nora.net
 548                 '*.py.nu',      // by edgar
 549                 '*.py.tc',      // by oscar
 550                 '*.py.tf',      // by Oscar
 551                 '*.py.vg',      // by oscar
 552                 '*.sv.tc',      // by oscar
 553                 '*.usa.gs',     // ns *.nora.net
 554                 '*.uy.gs',      // ns *.nora.net
 555                 '*.uy.kz',      // by oscar
 556                 '*.uy.nu',      // by edgar
 557                 '*.uy.tc',      // by oscar
 558                 '*.uy.tf',      // by Oscar
 559                 '*.uy.vg',      // by oscar
 560                 '*.ve.gs',      // by oscar
 561                 '*.ve.tc',      // by oscar
 562                 '*.ve.tf',      // by Oscar
 563                 '*.ve.vg',      // by oscar
 564                 '*.ven.nu',     // by edgar
 565         ),
 566         'ie.to',
 567         'igoto.co.uk',
 568         'ilook.tw',
 569         'indianpad.com',                ///view/
 570         'iNetwork.co.il' => array(
 571                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 572                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 573                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 574         ),
 575         '*.infogami.com',
 576         'infotop.jp',
 577         'ipoo.org',
 578         'IR.pl' => array(
 579                 '*.aj.pl',
 580                 '*.aliasy.org',
 581                 '*.gu.pl',
 582                 '*.hu.pl',
 583                 '*.ir.pl',
 584                 '*.jo.pl',
 585                 '*.su.pl',
 586                 '*.td.pl',
 587                 '*.uk.pl',
 588                 '*.uy.pl',
 589                 '*.xa.pl',
 590                 '*.zj.pl',
 591         ),
 592         'irotator.com',
 593         '.iwebtool.com',
 594         'j6.bz',
 595         'jeeee.net',
 596         'Jaze Redirect Services' => array(
 597                 '*.arecool.net',
 598                 '*.iscool.net',
 599                 '*.isfun.net',
 600                 '*.tux.nu',
 601         ),
 602         '*.jed.pl',
 603         'JeremyJohnstone.com' => array('url.vg'),
 604         'jemurl.com',
 605         'jggj.net',
 606         'jpan.jp',
 607         'josh.nu',
 608         'kat.cc',
 609         'Kickme.to' => array(
 610                 '.1024bit.at',
 611                 '.128bit.at',
 612                 '.16bit.at',
 613                 '.256bit.at',
 614                 '.32bit.at',
 615                 '.512bit.at',
 616                 '.64bit.at',
 617                 '.8bit.at',
 618                 '.adores.it',
 619                 '.again.at',
 620                 '.allday.at',
 621                 '.alone.at',
 622                 '.altair.at',
 623                 '.american.at',
 624                 '.amiga500.at',
 625                 '.ammo.at',
 626                 '.amplifier.at',
 627                 '.amstrad.at',
 628                 '.anglican.at',
 629                 '.angry.at',
 630                 '.around.at',
 631                 '.arrange.at',
 632                 '.australian.at',
 633                 '.baptist.at',
 634                 '.basque.at',
 635                 '.battle.at',
 636                 '.bazooka.at',
 637                 '.berber.at',
 638                 '.blackhole.at',
 639                 '.booze.at',
 640                 '.bosnian.at',
 641                 '.brainiac.at',
 642                 '.brazilian.at',
 643                 '.bummer.at',
 644                 '.burn.at',
 645                 '.c-64.at',
 646                 '.catalonian.at',
 647                 '.catholic.at',
 648                 '.chapel.at',
 649                 '.chills.it',
 650                 '.christiandemocrats.at',
 651                 '.cname.at',
 652                 '.colors.at',
 653                 '.commodore.at',
 654                 '.commodore64.at',
 655                 '.communists.at',
 656                 '.conservatives.at',
 657                 '.conspiracy.at',
 658                 '.cooldude.at',
 659                 '.craves.it',
 660                 '.croatian.at',
 661                 '.cuteboy.at',
 662                 '.dancemix.at',
 663                 '.danceparty.at',
 664                 '.dances.it',
 665                 '.danish.at',
 666                 '.dealing.at',
 667                 '.deep.at',
 668                 '.democrats.at',
 669                 '.digs.it',
 670                 '.divxlinks.at',
 671                 '.divxmovies.at',
 672                 '.divxstuff.at',
 673                 '.dizzy.at',
 674                 '.does.it',
 675                 '.dork.at',
 676                 '.drives.it',
 677                 '.dutch.at',
 678                 '.dvdlinks.at',
 679                 '.dvdmovies.at',
 680                 '.dvdstuff.at',
 681                 '.emulators.at',
 682                 '.end.at',
 683                 '.english.at',
 684                 '.eniac.at',
 685                 '.error403.at',
 686                 '.error404.at',
 687                 '.evangelism.at',
 688                 '.exhibitionist.at',
 689                 '.faith.at',
 690                 '.fight.at',
 691                 '.finish.at',
 692                 '.finnish.at',
 693                 '.forward.at',
 694                 '.freebie.at',
 695                 '.freemp3.at',
 696                 '.french.at',
 697                 '.graduatejobs.at',
 698                 '.greenparty.at',
 699                 '.grunge.at',
 700                 '.hacked.at',
 701                 '.hang.at',
 702                 '.hangup.at',
 703                 '.has.it',
 704                 '.hide.at',
 705                 '.hindu.at',
 706                 '.htmlpage.at',
 707                 '.hungarian.at',
 708                 '.icelandic.at',
 709                 '.independents.at',
 710                 '.invisible.at',
 711                 '.is-chillin.it',
 712                 '.is-groovin.it',
 713                 '.japanese.at',
 714                 '.jive.at',
 715                 '.kickass.at',
 716                 '.kickme.to',
 717                 '.kindergarden.at',
 718                 '.knows.it',
 719                 '.kurd.at',
 720                 '.labour.at',
 721                 '.leech.at',
 722                 '.liberals.at',
 723                 '.linuxserver.at',
 724                 '.liqour.at',
 725                 '.lovez.it',
 726                 '.makes.it',
 727                 '.maxed.at',
 728                 '.means.it',
 729                 '.meltdown.at',
 730                 '.methodist.at',
 731                 '.microcomputers.at',
 732                 '.mingle.at',
 733                 '.mirror.at',
 734                 '.moan.at',
 735                 '.mormons.at',
 736                 '.musicmix.at',
 737                 '.nationalists.at',
 738                 '.needz.it',
 739                 '.nerds.at',
 740                 '.neuromancer.at',
 741                 '.newbie.at',
 742                 '.nicepage.at',
 743                 '.ninja.at',
 744                 '.norwegian.at',
 745                 '.ntserver.at',
 746                 '.owns.it',
 747                 '.paint.at',
 748                 '.palestinian.at',
 749                 '.phoneme.at',
 750                 '.phreaking.at',
 751                 '.playz.it',
 752                 '.polish.at',
 753                 '.popmusic.at',
 754                 '.portuguese.at',
 755                 '.powermac.at',
 756                 '.processor.at',
 757                 '.prospects.at',
 758                 '.protestant.at',
 759                 '.rapmusic.at',
 760                 '.raveparty.at',
 761                 '.reachme.at',
 762                 '.reads.it',
 763                 '.reboot.at',
 764                 '.relaxed.at',
 765                 '.republicans.at',
 766                 '.researcher.at',
 767                 '.reset.at',
 768                 '.resolve.at',
 769                 '.retrocomputers.at',
 770                 '.rockparty.at',
 771                 '.rocks.it',
 772                 '.rollover.at',
 773                 '.rough.at',
 774                 '.rules.it',
 775                 '.rumble.at',
 776                 '.russian.at',
 777                 '.says.it',
 778                 '.scared.at',
 779                 '.seikh.at',
 780                 '.serbian.at',
 781                 '.short.as',
 782                 '.shows.it',
 783                 '.silence.at',
 784                 '.simpler.at',
 785                 '.sinclair.at',
 786                 '.singz.it',
 787                 '.slowdown.at',
 788                 '.socialists.at',
 789                 '.spanish.at',
 790                 '.split.at',
 791                 '.stand.at',
 792                 '.stoned.at',
 793                 '.stumble.at',
 794                 '.supercomputer.at',
 795                 '.surfs.it',
 796                 '.swedish.at',
 797                 '.swims.it',
 798                 '.synagogue.at',
 799                 '.syntax.at',
 800                 '.syntaxerror.at',
 801                 '.techie.at',
 802                 '.temple.at',
 803                 '.thinkbig.at',
 804                 '.thirsty.at',
 805                 '.throw.at',
 806                 '.toplist.at',
 807                 '.trekkie.at',
 808                 '.trouble.at',
 809                 '.turkish.at',
 810                 '.unexplained.at',
 811                 '.unixserver.at',
 812                 '.vegetarian.at',
 813                 '.venture.at',
 814                 '.verycool.at',
 815                 '.vic-20.at',
 816                 '.viewing.at',
 817                 '.vintagecomputers.at',
 818                 '.virii.at',
 819                 '.vodka.at',
 820                 '.wannabe.at',
 821                 '.webpagedesign.at',
 822                 '.wheels.at',
 823                 '.whisper.at',
 824                 '.whiz.at',
 825                 '.wonderful.at',
 826                 '.zor.org',
 827                 '.zx80.at',
 828                 '.zx81.at',
 829                 '.zxspectrum.at',
 830         ),
 831         'kisaweb.com',
 832         'krotki.pl',
 833         'kuerzer.de',
 834         '*.kupisz.pl',
 835         'kuso.cc',
 836         '*.l8t.com',
 837         'lame.name',
 838         'lediga.st',
 839         'liencourt.com',
 840         'liteurl.com',
 841         'linkachi.com',
 842         'linkezy.com',
 843         'linkfrog.net',
 844         'linkook.com',
 845         'linkzip.net',
 846         'lispurl.com',
 847         'lnk.in',
 848         'makeashorterlink.com',
 849         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 850                 '*.3gp.fr',
 851                 '*.gtx.fr',
 852                 '*.ici.st',
 853                 '*.max.st',
 854                 '*.nn.cx',              // ns *.sivit.org
 855                 '*.site.cx',    // ns *.sivit.org
 856                 '*.user.fr',
 857                 '*.zxr.fr',
 858         ),
 859         'mcturl.com',
 860         'memurl.com',
 861         'Metamark.net' => array('xrl.us'),
 862         'midgeturl.com',
 863         'Minilink.org' => array('lnk.nu'),
 864         'miniurl.org',
 865         'miniurl.pl',
 866         'mixi.bz',
 867         'mo-v.jp',
 868         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 869                 '.com.md',
 870                 '.co.md',
 871                 '.org.md',
 872                 '.info.md',
 873                 '.host.md',
 874         ),
 875         'monster-submit.com',
 876         'mooo.jp',
 877         'murl.net',
 878         'myactivesurf.net',
 879         'mytinylink.com',
 880         'myurl.in',
 881         'myurl.com.tw',
 882         'nanoref.com',
 883         'Ne1.net' => array(
 884                 '*.ne1.net',
 885                 '*.r8.org',
 886         ),
 887         'Nashville Linux Users Group' => array('nlug.org'),
 888         'not2long.net',
 889         '*.notlong.com',
 890         '*.nuv.pl',
 891         'ofzo.be',
 892         '*.ontheinter.net',
 893         'ourl.org',
 894         'ov2.net',                              // frame
 895         '*.ozonez.com',
 896         'pagebang.com',
 897         'palurl.com',
 898         '*.paulding.net',
 899         'phpfaber.org',
 900         'pnope.com',
 901         'prettylink.com',
 902         'PROXID.net' => array(  // also xRelay.net
 903                 '*.asso.ws',
 904                 '*.corp.st',
 905                 '*.euro.tm',
 906                 '*.perso.tc',
 907                 '*.site.tc',
 908                 '*.societe.st',
 909         ),
 910         'qrl.jp',
 911         'qurl.net',
 912         'qwer.org',
 913         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 914         'radiobase.net',
 915         'RedirectFree.com' => array(
 916                 '*.red.tc',
 917                 '*.redirectfree.com',
 918                 '*.sky.tc',
 919                 '*.the.vg',
 920         ),
 921         'redirme.com',
 922         'redirectme.to',
 923         'relic.net',
 924         'rezma.info',
 925         'rio.st',
 926         'rlink.org',
 927         '*.rmcinfo.fr',
 928         'rubyurl.com',
 929         '*.runboard.com',
 930         'runurl.com',
 931         's-url.net',
 932         's1u.net',
 933         'SG5.co.uk' => array(
 934                 '*.sg5.co.uk',
 935                 '*.sg5.info',
 936         ),
 937         'Shim.net' => array(
 938                 '*.0kn.com',
 939                 '*.2cd.net',
 940                 '*.freebiefinders.net',
 941                 '*.freegaming.org',
 942                 '*.op7.net',
 943                 '*.shim.net',
 944                 '*.v9z.com',
 945         ),
 946         'shorl.com',
 947         'shortenurl.com',
 948         'shorterlink.com',
 949         'shortlinks.co.uk',
 950         'shorttext.com',
 951         'shorturl-accessanalyzer.com',
 952         'Shortify.com' => array(
 953                 '74678439.com',
 954                 'shortify.com',
 955         ),
 956         'shortlink.co.uk',
 957         'ShortURL.com' => array(
 958                 '*.1sta.com',
 959                 '*.24ex.com',
 960                 '*.2fear.com',
 961                 '*.2fortune.com',
 962                 '*.2freedom.com',
 963                 '*.2hell.com',
 964                 '*.2savvy.com',
 965                 '*.2truth.com',
 966                 '*.2tunes.com',
 967                 '*.2ya.com',
 968                 '*.alturl.com',
 969                 '*.antiblog.com',
 970                 '*.bigbig.com',
 971                 '*.dealtap.com',
 972                 '*.ebored.com',
 973                 '*.echoz.com',
 974                 '*.filetap.com',
 975                 '*.funurl.com',
 976                 '*.headplug.com',
 977                 '*.hereweb.com',
 978                 '*.hitart.com',
 979                 '*.mirrorz.com',
 980                 '*.shorturl.com',
 981                 '*.spyw.com',
 982                 '*.vze.com',
 983         ),
 984         'shrinkalink.com',
 985         'shrinkthatlink.com',
 986         'shrinkurl.us',
 987         'shrt.org',
 988         'shrunkurl.com',
 989         'shurl.org',
 990         'shurl.net',
 991         'sid.to',
 992         'simurl.com',
 993         'sitefwd.com',
 994         'Sitelutions.com' => array(
 995                 '*.assexy.as',
 996                 '*.athersite.com',
 997                 '*.athissite.com',
 998                 '*.bestdeals.at',
 999                 '*.byinter.net',
1000                 '*.findhere.org',
1001                 '*.fw.nu',
1002                 '*.isgre.at',
1003                 '*.isthebe.st',
1004                 '*.kwik.to',
1005                 '*.lookin.at',
1006                 '*.lowestprices.at',
1007                 '*.onthenet.as',
1008                 '*.ontheweb.nu',
1009                 '*.pass.as',
1010                 '*.passingg.as',
1011                 '*.redirect.hm',
1012                 '*.rr.nu',
1013                 '*.ugly.as',
1014         ),
1015         '*.skracaj.pl',
1016         'skiltechurl.com',
1017         'skocz.pl',
1018         'slimurl.jp',
1019         'slink.in',
1020         'smallurl.eu',
1021         'smurl.name',
1022         'snipurl.com',
1023         'sp-nov.net',
1024         'splashblog.com',
1025         'spod.cx',
1026         '*.spydar.com',
1027         'Subdomain.gr' => array(
1028                 '*.p2p.gr',
1029                 '*.subdomain.gr',
1030         ),
1031         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1032         'surl.se',
1033         'surl.ws',
1034         'symy.jp',
1035         'tdurl.com',
1036         'tighturl.com',
1037         'tiniuri.com',
1038         'tiny.cc',
1039         'tiny.pl',
1040         'tiny2go.com',
1041         'tinylink.eu',
1042         'tinylinkworld.com',
1043         'tinypic.com',
1044         'tinyr.us',
1045         'TinyURL.com' => array(
1046                 'tinyurl.com',
1047                 'preview.tinyurl.com',
1048                 'tinyurl.co.uk',
1049         ),
1050         'titlien.com',
1051         '*.tlg.pl',
1052         'tlurl.com',
1053         'link.toolbot.com',
1054         'tnij.org',
1055         'Tokelau ccTLD' => array('.tk'),
1056         'toila.net',
1057         '*.toolbot.com',
1058         '*.torontonian.com',
1059         'trimurl.com',
1060         'ttu.cc',
1061         'turl.jp',
1062         '*.tz4.com',
1063         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1064                 '*.1.to',
1065                 '*.4.to',
1066                 '*.5.to',
1067                 '*.82.to',
1068                 '*.s.to',
1069                 '*.u.to',
1070                 '*.ce.to',
1071                 '*.cz.to',
1072                 '*.if.to',
1073                 '*.it.to',
1074                 '*.kp.to',
1075                 '*.ne.to',
1076                 '*.ok.to',
1077                 '*.pc.to',
1078                 '*.tv.to',
1079                 '*.dd.to',
1080                 '*.ee.to',
1081                 '*.hh.to',
1082                 '*.kk.to',
1083                 '*.mm.to',
1084                 '*.qq.to',
1085                 '*.xx.to',
1086                 '*.zz.to',
1087                 '*.ivy.to',
1088                 '*.joa.to',
1089                 '*.ever.to',
1090                 '*.mini.to',
1091         ),
1092         'uchinoko.in',
1093         'Ulimit.com' => array(
1094                 '*.be.tf',
1095                 '*.best.cd',
1096                 '*.bsd-fan.com',
1097                 '*.c0m.st',
1098                 '*.ca.tc',
1099                 '*.clan.st',
1100                 '*.com02.com',
1101                 '*.en.st',
1102                 '*.euro.st',
1103                 '*.fr.fm',
1104                 '*.fr.st',
1105                 '*.fr.vu',
1106                 '*.gr.st',
1107                 '*.ht.st',
1108                 '*.int.ms',
1109                 '*.it.st',
1110                 '*.java-fan.com',
1111                 '*.linux-fan.com',
1112                 '*.mac-fan.com',
1113                 '*.mp3.ms',
1114                 '*.qc.tc',
1115                 '*.sp.st',
1116                 '*.suisse.st',
1117                 '*.t2u.com',
1118                 '*.unixlover.com',
1119                 '*.zik.mu',
1120         ),
1121         '*.uni.cc',
1122         'UNONIC.com' => array(
1123                 '*.at.tf',      // AlpenNIC
1124                 '*.bg.tf',
1125                 '*.ca.tf',
1126                 '*.ch.tf',      // AlpenNIC
1127                 '*.cz.tf',
1128                 '*.de.tf',      // AlpenNIC
1129                 '*.edu.tf',
1130                 '*.eu.tf',
1131                 '*.int.tf',
1132                 '*.net.tf',
1133                 '*.pl.tf',
1134                 '*.ru.tf',
1135                 '*.sg.tf',
1136                 '*.us.tf',
1137         ),
1138         'Up.pl' => array(
1139                 '.69.pl',                       // by nsk101869
1140                 '.crack.pl',            // by nsk101869
1141                 '.film.pl',                     // by sibr19002
1142                 '.h2o.pl',                      // by nsk101869
1143                 '.hostessy.pl',         // by nsk101869
1144                 '.komis.pl',            // by nsk101869
1145                 '.laski.pl',            // by nsk101869
1146                 '.modelki.pl',          // by nsk101869
1147                 '.muzyka.pl',           // by sibr19002
1148                 '.nastolatki.pl',       // by nsk101869
1149                 '.obuwie.pl',           // by nsk101869
1150                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1151                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1152                 '.sexchat.pl',          // by nsk101869
1153                 '.sexlive.pl',          // by nsk101869
1154                 '.tv.pl',                       // by nsk101869
1155                 '.up.pl',                       // by nsk101869
1156                 '.video.pl',            // by nsk101869
1157                 '.xp.pl',                       // nsk101869
1158         ),
1159         '*.uploadr.com',
1160         'url.ie',
1161         'url4.net',
1162         'url-c.com',
1163         'urlbee.com',
1164         'urlbounce.com',
1165         'urlcut.com',
1166         'urlcutter.com',
1167         'urlic.com',
1168         'urlin.it',
1169         'urlkick.com',
1170         'URLLogs.com' => array(
1171                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1172                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1173         ),
1174         '*.urlproxy.com',
1175         'urlser.com',
1176         'urlsnip.com',
1177         'urlzip.de',
1178         'urlx.org',
1179         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1180         'utun.jp',
1181         'uxxy.com',
1182         '*.v27.net',
1183         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1184                 '*.all.at',
1185                 '*.back.to',
1186                 '*.beam.at',
1187                 '*.been.at',
1188                 '*.bite.to',
1189                 '*.board.to',
1190                 '*.bounce.to',
1191                 '*.bowl.to',
1192                 '*.break.at',
1193                 '*.browse.to',
1194                 '*.change.to',
1195                 '*.chip.ms',
1196                 '*.connect.to',
1197                 '*.crash.to',
1198                 '*.cut.by',
1199                 '*.direct.at',
1200                 '*.dive.to',
1201                 '*.drink.to',
1202                 '*.drive.to',
1203                 '*.drop.to',
1204                 '*.easy.to',
1205                 '*.everything.at',
1206                 '*.fade.to',
1207                 '*.fanclub.ms',
1208                 '*.firstpage.de',
1209                 '*.fly.to',
1210                 '*.flying.to',
1211                 '*.fortunecity.co.uk',
1212                 '*.fortunecity.com',
1213                 '*.forward.to',
1214                 '*.fullspeed.to',
1215                 '*.fun.ms',
1216                 '*.gameday.de',
1217                 '*.germany.ms',
1218                 '*.get.to',
1219                 '*.getit.at',
1220                 '*.hard-ware.de',
1221                 '*.hello.to',
1222                 '*.hey.to',
1223                 '*.hop.to',
1224                 '*.how.to',
1225                 '*.hp.ms',
1226                 '*.jump.to',
1227                 '*.kiss.to',
1228                 '*.listen.to',
1229                 '*.mediasite.de',
1230                 '*.megapage.de',
1231                 '*.messages.to',
1232                 '*.mine.at',
1233                 '*.more.at',
1234                 '*.more.by',
1235                 '*.move.to',
1236                 '*.musicpage.de',
1237                 '*.mypage.org',
1238                 '*.mysite.de',
1239                 '*.nav.to',
1240                 '*.notrix.at',
1241                 '*.notrix.ch',
1242                 '*.notrix.de',
1243                 '*.notrix.net',
1244                 '*.on.to',
1245                 '*.page.to',
1246                 '*.pagina.de',
1247                 '*.played.by',
1248                 '*.playsite.de',
1249                 '*.privat.ms',
1250                 '*.quickly.to',
1251                 '*.redirect.to',
1252                 '*.rulestheweb.com',
1253                 '*.run.to',
1254                 '*.scroll.to',
1255                 '*.seite.ms',
1256                 '*.shortcut.to',
1257                 '*.skip.to snap.to',
1258                 '*.soft-ware.de',
1259                 '*.start.at',
1260                 '*.stick.by',
1261                 '*.surf.to',
1262                 '*.switch.to',
1263                 '*.talk.to',
1264                 '*.tip.nu',
1265                 '*.top.ms',
1266                 '*.transfer.to',
1267                 '*.travel.to',
1268                 '*.turn.to',
1269                 '*.vacations.to',
1270                 '*.videopage.de',
1271                 '*.virtualpage.de',
1272                 '*.w3.to',
1273                 '*.walk.to',
1274                 '*.warp9.to',
1275                 '*.window.to',
1276                 '*.yours.at',
1277                 '*.zap.to',
1278                 '*.zip.to',
1279         ),
1280         'VDirect.com' => array(
1281                 '*.emailme.net',
1282                 '*.getto.net',
1283                 '*.inetgames.com',
1284                 '*.netbounce.com',
1285                 '*.netbounce.net',
1286                 '*.oneaddress.net',
1287                 '*.snapto.net',
1288                 '*.vdirect.com',
1289                 '*.vdirect.net',
1290                 '*.webrally.net',
1291         ),
1292         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1293         'vgo2.com',
1294         'Voila.fr' => array('r.voila.fr'),      // Fix it
1295         'w3t.org',
1296         'wapurl.co.uk',
1297         'Wb.st' => array(
1298                 '*.team.st',
1299                 '*.wb.st',
1300         ),
1301         'wbkt.net',
1302         'WebAlias.com' => array(
1303                 '*.andmuchmore.com',
1304                 '*.browser.to',
1305                 '*.escape.to',
1306                 '*.fornovices.com',
1307                 '*.fun.to',
1308                 '*.got.to',
1309                 '*.hottestpix.com',
1310                 '*.imegastores.com',
1311                 '*.latest-info.com',
1312                 '*.learn.to',
1313                 '*.moviefever.com',
1314                 '*.mp3-archives.com',
1315                 '*.myprivateidaho.com',
1316                 '*.radpages.com',
1317                 '*.remember.to',
1318                 '*.resourcez.com',
1319                 '*.return.to',
1320                 '*.sail.to',
1321                 '*.sports-reports.com',
1322                 '*.stop.to',
1323                 '*.thrill.to',
1324                 '*.tophonors.com',
1325                 '*.uncutuncensored.com',
1326                 '*.up.to',
1327                 '*.veryweird.com',
1328                 '*.way.to',
1329                 '*.web-freebies.com',
1330                 '.webalias.com',
1331                 '*.webdare.com',
1332                 '*.xxx-posed.com',
1333         ),
1334         'webmasterwise.com',
1335         'witherst at hotmail.com' => array(     // by Tim Withers
1336                 '*.associates-program.com',
1337                 '*.casinogopher.com',
1338                 '*.ezpagez.com',
1339                 '*.vgfaqs.com',
1340         ),
1341         'wittylink.com',
1342         'wiz.sc',                       // tiny.cc related
1343         'X50.us' => array(
1344                 '*.i50.de',
1345                 '*.x50.us',
1346         ),
1347         'big5.xinhuanet.com',
1348         'xhref.com',
1349         'Xn6.net' => array(
1350                 '*.9ax.net',
1351                 '*.xn6.net',
1352         ),
1353         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1354         '.y11.net',
1355         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1356                 '*.yesns.com',
1357                 '*.srv4u.net',
1358                 //blogne.com
1359         ),
1360         'yatuc.com',
1361         'yep.it',
1362         'yumlum.com',
1363         'yurel.com',
1364         'Z.la' => array(
1365                 'z.la',
1366                 't.z.la',
1367         ),
1368         'zaable.com',
1369         'zapurl.com',
1370         'zarr.co.uk',
1371         'zerourl.com',
1372         'ZeroWeb.org' => array(
1373                 '*.80t.com',
1374                 '*.firez.org',
1375                 '*.fizz.nu',
1376                 '*.ingame.org',
1377                 '*.irio.net',
1378                 '*.v33.org',
1379                 '*.zeroweb.org',
1380         ),
1381         'zhukcity.ru',
1382         'zippedurl.com',
1383         'zr5.us',
1384         '*.zs.pl',
1385         '*.zu5.net',
1386         'zuso.tw',
1387         '*.zwap.to',
1388 );
1389
1390 // --------------------------------------------------
1391
1392 $blocklist['A-2'] = array(
1393
1394         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1395         //
1396         //'*.dyndns.*', // Wildcard for dyndns
1397         //
1398         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1399         'ddns.ru' => array('*.bpa.nu'),
1400         'Dhs.org' => array(
1401                 '*.2y.net',
1402                 '*.dhs.org',
1403         ),
1404         '*.dnip.net',
1405         '*.dyndns.co.za',
1406         '*.dyndns.dk',
1407         '*.dyndns.nemox.net',
1408         'DyDNS.com' => array(
1409                 '*.ath.cx',
1410                 '*.dnsalias.org',
1411                 '*.dyndns.org',
1412                 '*.homeip.net',
1413                 '*.homelinux.net',
1414                 '*.mine.nu',
1415                 '*.shacknet.nu',
1416         ),
1417         '*.dtdns.net',                  // by jscott at sceiron.com
1418         '*.dynu.com',
1419         '*.dynup.net',
1420         '*.fdns.net',
1421         'J-Speed.net' => array(
1422                 '*.bne.jp',
1423                 '*.ii2.cc',
1424                 '*.jdyn.cc',
1425                 '*.jspeed.jp',
1426         ),
1427         '*.mydyn.de',
1428         '*.nerdcamp.net',
1429         'No-IP.com' => array(
1430                         '*.bounceme.net',
1431                         '*.hopto.org',
1432                         '*.myftp.biz',
1433                         '*.myftp.org',
1434                         '*.myvnc.com',
1435                         '*.no-ip.biz',
1436                         '*.no-ip.info',
1437                         '*.no-ip.org',
1438                         '*.redirectme.net',
1439                         '*.servebeer.com',
1440                         '*.serveblog.net',
1441                         '*.servecounterstrike.com',
1442                         '*.serveftp.com',
1443                         '*.servegame.com',
1444                         '*.servehalflife.com',
1445                         '*.servehttp.com',
1446                         '*.servemp3.com',
1447                         '*.servepics.com',
1448                         '*.servequake.com',
1449                         '*.sytes.net',
1450                         '*.zapto.org',
1451         ),
1452         '*.opendns.be',
1453         'Yi.org' => array(      // by dns at whyi.org
1454                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1455
1456                 // 72.55.129.46(redirect.yi.org)
1457                 '*.whyi.org',
1458                 '*.weedns.com',
1459         ),
1460         '*.zenno.info',
1461         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1462                         // and all non-recorded domains redirect to 'agoga.com' now
1463                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1464                         // http://agoga.com/aboutus.html
1465 );
1466
1467 // --------------------------------------------------
1468
1469 // B: Sample setting of:
1470 // Jacked (taken advantage of) and cleaning-less sites
1471 //
1472 // Please notify us about this list with reason:
1473 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1474
1475 $blocklist['B-1'] = array(
1476
1477         // B-1: Web spaces
1478         //
1479         //   Messages from forerunners:
1480         //     activefreehost.com
1481         //       "We regret to inform you that ActiveFreeHost
1482         //        free hosting service has is now closed (as of
1483         //        September 18). We have been online for over
1484         //        two and half years, but have recently decided
1485         //        to take time for software improvement to fight
1486         //        with server abuse, Spam advertisement and
1487         //        fraud."
1488         //
1489         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1490         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1491         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1492         '0Catch.com related' => array(
1493                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1494
1495                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1496                 '*.100freemb.com',              // by Danny Ashworth
1497                 '*.exactpages.com',
1498                 '*.fcpages.com',
1499                 '*.wtcsites.com',
1500
1501                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1502                 '*.741.com',
1503                 '*.freecities.com',
1504                 '*.freesite.org',
1505                 '*.freewebpages.org',
1506                 '*.freewebsitehosting.com',
1507                 '*.jvl.com',
1508
1509                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1510                 '*.freespaceusa.com',
1511                 '*.usafreespace.com',
1512
1513                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1514                 '*.dex1.com',
1515                 '*.questh.com',
1516
1517                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1518                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1519                 '*.012webpages.com',    // by support at 0catch.com
1520                 '*.150m.com',
1521                 '*.1sweethost.com',             // by whois at bluehost.com
1522                 '*.250m.com',                   // by jason at fahlman.net
1523                 '*.9cy.com',                    // by paulw0t at gmail.com
1524                 '*.angelcities.com',    // by cliff at eccentrix.com
1525                 '*.arcadepages.com',    // by admin at site-see.com
1526                 '*.e-host.ws',                  // by dns at jomax.net
1527                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1528                 '*.fw.bz',                              // by ben at kuehl.as
1529                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1530                 '*.g0g.net',                    // by domains at seem.co.uk
1531                 '*.galaxy99.net',               // by admin at bagchi.org
1532                 '*.greatnow.com',               // by peo at peakspace.com
1533                 '*.hautlynx.com',               // by hlewis28 at juno.com
1534                 '*.ibnsites.com',               // by cmrojas at mail.com
1535                 '*.just-allen.com',             // by extremehype at msn.com
1536                 '*.kogaryu.com',                // by angelguerra at msn.com
1537                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1538                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1539                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1540                 '*.s-enterprize.com',
1541                 '*.servetown.com',              // by jonahbliss at earthlink.net
1542                 '*.stinkdot.org',               // by bluedot at ziplip.com
1543                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1544                 '*.zomi.net',                   // by sianpu at gmail.com
1545         ),
1546         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1547         '100 Best Inc' => array(
1548                 // by 100 Best Inc (info at 100best.com)
1549
1550                 // 66.235.204.7(h204-007.bluefishhosting.com)
1551                 '*.2-hi.com',
1552                 '*.20fr.com',
1553                 '*.20ii.com',
1554                 '*.20is.com',
1555                 '*.20it.com',
1556                 '*.20m.com',    // by jlee at 100bestinc.com
1557                 '*.20to.com',
1558                 '*.2u-2.com',
1559                 '*.3-st.com',
1560                 '*.fws1.com',
1561                 '*.fw-2.com',
1562                 '*.inc5.com',
1563                 '*.on-4.com',
1564                 '*.st-3.com',
1565                 '*.st20.com',
1566                 '*.up-a.com',
1567
1568                 // 216.40.33.252(www-pd.mdnsservice.com)
1569                 '*.0-st.com',
1570                 '*.20me.com',
1571         ),
1572         '*.100foros.com',
1573         '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl) by tycho at e-lab.nl
1574         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1575         '20six Weblog Services' => array(
1576                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1577                 '.20six.co.uk',
1578                 '.20six.fr',
1579                 'myblog.de',
1580                 'myblog.es',
1581         ),
1582         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1583         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1584         '2Page.de' => array(
1585                 '.dreipage.de',
1586                 '.2page.de',
1587         ),
1588         '*.3-hosting.net',
1589         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1590         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1591         '*.8000web.com',        // 75.126.189.45
1592         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1593         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1594         '*.aimoo.com',
1595         '*.alkablog.com',
1596         '*.alluwant.de',
1597         '.amkbb.com',
1598         'AOL.com' =>    // http://about.aol.com/international_services
1599                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1600                 '(?:aol|americaonline)\.' .
1601                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1602                 // Rough but works
1603         'Apple.com' => array('idisk.mac.com'),
1604         '*.askfaq.org',
1605         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1606         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1607         '*.asphost4free.com',
1608         'basenow.com',
1609         'BatCave.net' => array(
1610                 '.batcave.net',                 // 64.22.112.226
1611                 '.freehostpro.com',             // 64.22.112.226
1612         ),
1613         '*.bb-fr.com',
1614         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1615         '*.beeplog.com',
1616         'bestfreeforums.com',
1617         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1618         'Blog.com' => array(
1619                 '*.blog.com',
1620                 '*.blogandorra.com',    // by admin.domains at co.blog.com
1621                 '*.blogangola.com',             // by admin.domains at co.blog.com
1622         ),
1623         '*.blog.com.es',
1624         '*.blog.hr',
1625         '*.blog-fx.com',
1626         '*.blogbeee.com',
1627         'blogas.lt',
1628         'blogbud.com',
1629         '*.blogburkinafaso.com',
1630         '*.blogcu.com',                 // by info at nokta.com
1631         'blogfreely.com',
1632         '*.blogdrive.com',
1633         '*.blogg.de',
1634         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1635         'bloggercrab.com',
1636         'bloggers.nl',
1637         '*.bloggingmylife.com',
1638         '*.bloggles.info',
1639         '*.blogharbor.com',
1640         '*.bloguj.eu',
1641         'bloguitos.com',
1642         'blogosfer.com',
1643         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1644         '*.blogslive.net',
1645         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1646         '*.blogstream.com',
1647         'blogyaz.com',
1648         'board-4you.de',
1649         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1650         '*.boardhost.com',
1651         'Bravenet.com' => array(
1652                 '*.bravenet.com',
1653                 '*.bravehost.com',
1654         ),
1655         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1656         'C2k.jp' => array(
1657                 // by Makoto Okuse (webmaster at 2style.net)
1658                 '.081.in',
1659                 '.2style.in',
1660                 '.bian.in',
1661                 '.curl.in',
1662                 '.ennui.in',
1663                 '.jinx.in',
1664                 '.loose.in',
1665                 '.mist.in',
1666                 '.muu.in',
1667                 '.naive.in',
1668                 '.panic.in',
1669                 '.slum.in',
1670
1671                 // by 2style, ns *.click2k.net, *.2style.net
1672                 '.2st.jp',
1673                 '.betty.jp',
1674                 '.cabin.jp',
1675                 '.cult.jp',
1676                 '.mippi.jp',
1677                 '.purety.jp',
1678                 '.rapa.jp',
1679                 '.side-b.jp',
1680                 '.web-box.jp',
1681                 '.yea.jp',
1682
1683                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1684                 '.2style.net',
1685                 '.click2k.net',
1686                 '.houka5.com',
1687
1688                 // by click2k, ns *.click2k.net, *.2style.net
1689                 '.psyco.jp',
1690                 '.sweety.jp',
1691
1692                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1693                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1694         ),
1695         '*.chueca.com',
1696         'city-forum.com',
1697         'concepts-mall.com',
1698         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1699         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1700         'counterhit.de',
1701         '*.createforum.net',
1702         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1703         '*.createmybb.com',
1704         'CwCity.de' => array(
1705                 '.cwcity.de',
1706                 '.cwsurf.de',
1707         ),
1708         'dakrats.net',
1709         '*.dcswtech.com',
1710         '*.devil.it',
1711         '*.diaryland.com',
1712         'digg.com',
1713         'domains at galaxywave.net' => array(
1714                 'blogstation.net',
1715                 '.phpbb-host.com',
1716         ),
1717         'dotbb.be',
1718         '*.dox.hu',                             // dns at 1b.hu
1719         '*.eadf.com',
1720         '*.eblog.com.au',
1721         '*.ekiwi.de',
1722         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1723         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1724         '*.ebloggy.com',
1725         'enunblog.com',
1726         '*.epinoy.com',
1727         '*.ez-sites.ws',
1728         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1729         '*.fathippohosting.com',        // 208.101.3.192
1730         'FC2.com' => array(
1731                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1732                         // Many traps available:
1733                         //      bqdr.blog98.fc2.com,       iframe
1734                         //      csfir.blog87.fc2.com,      iframe
1735                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1736                         //      sippou2006.blog60.fc2.com, iframe
1737                         // NOTE: 'blog.fc2.com' is not included
1738                 '*.h.fc2.com',  // Adult
1739         ),
1740         '*.fizwig.com',
1741         'forum.ezedia.net',
1742         '*.extra.hu',                   // angelo at jasmin.hu
1743         '*.fanforum.cc',
1744         'fingerprintmedia.com',
1745         '*.filelan.com',
1746         '*.fora.pl',
1747         '*.forka.eu',
1748         '*.foren-city.de',
1749         'foren-gratis.de',
1750         '*.foros.tv',
1751         '*.forospace.com',
1752         'foroswebgratis.com',
1753         '*.forum-on.de',
1754         '*.forum24.se',
1755         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1756         '.forum66.com',
1757         '*.forumcommunity.net',
1758         'forumhosting.org',
1759         '*.forums.com',
1760         'forumbolt.com',
1761         'phpbb.forumgratis.com',
1762         '*.forumlivre.com',
1763         'forumnow.com.br',
1764         '*.forumppl.com',
1765         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
1766         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
1767                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
1768                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
1769                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
1770         '*.fory.pl',
1771         '*.free-25.de',
1772         '*.free-bb.com',
1773         'Free-Blog-Hosting.com' => array(
1774                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
1775                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
1776                 'blog-tonite.com',                      // ns *.phpwebhosting.com
1777                 'blogznow.com',                         // ns *.phpwebhosting.com
1778                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
1779                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
1780         ),
1781         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
1782         'free-guestbook.net',
1783         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
1784         'freebb.nl',
1785         '*.freeclans.de',
1786         '*.freelinuxhost.com',  // by 100webspace.com
1787         '*.nofeehost.com',
1788         '*.freehyperspace.com',
1789         'freeforum.at',                 // by Sandro Wilhelmy
1790         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
1791         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
1792         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
1793         '*.freewebhostingpro.com',
1794         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
1795         'FreeWebHostingArea.com' => array(      // or www.freewha.com
1796                 '*.6te.net',
1797                 '*.ueuo.com',
1798                 '*.orgfree.com',
1799         ),
1800         '*.freewebpage.org',
1801         'Freewebs.com' => array(        // by inquiries at freewebs.com
1802                 'freewebs.com',
1803                 'freewebsfarms.com',
1804         ),
1805         '*.freewebspace.net.au',
1806         '*.freemyforum.com',    // by messahost at gmail.com
1807         'freepowerboards.com',
1808         '*.freepowerboards.com',
1809         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
1810         'Funpic.de' => array(   // by alexander at liemen.net
1811                 '*.funpic.de',
1812                 '*.funpic.org',
1813         ),
1814         'gb-hoster.de',
1815         '*.genblogger.com',
1816         'GetBetterHosting.com' => array(
1817                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
1818                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
1819         ),
1820         '*.goodboard.de',
1821         'gossiping.net',
1822         '*.greatnuke.com',
1823         '*.guestbook.de',
1824         'gwebspace.de',
1825         'Google.com' => array(
1826                 '*.blogspot.com',
1827                 'docs.google.com',
1828                 'groups-beta.google.com',
1829         ),
1830         'guestbook.at',
1831         'club.giovani.it',
1832         '*.gratis-server.de',
1833         'healthcaregroup.com',
1834         '*.heliohost.org',
1835         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
1836                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
1837                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
1838                 '*.front.ru',           // (domain at hc.ru)
1839                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
1840                 '*.hotbox.ru',          // (domain at hc.ru)
1841                 '*.hotmail.ru',         // (hosting at hc.ru)
1842                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
1843                 '*.land.ru',            // (domain at hc.ru)
1844                 '*.mail15.com',         // (hosting at hc.ru)
1845                 '*.mail333.com',        // (hosting at hc.ru)
1846                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
1847                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
1848                 '*.pisem.net',          // (hosting at hc.ru)
1849                 '*.pochta.ru',          // (domain at hc.ru)
1850                 '*.pochtamt.ru',        // (domain at hc.ru)
1851                 '*.pop3.ru',            // (domain at hc.ru)
1852                 '*.rbcmail.ru',         // (domain at hc.ru)
1853                 '*.smtp.ru',            // (domain at hc.ru)
1854         ),
1855         '*.hiblogger.com',              // by chiaokin at gmail.com
1856         '*.hit.bg',                             // by forumup.com ??
1857         '*.host-page.com',
1858         '*.hostingclub.de',
1859         'forums.hspn.com',
1860         '*.httpsuites.com',
1861         '*.hut2.ru',
1862         'ibfree.org',                   // 208.101.45.88
1863         'IC.cz' => array(
1864                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
1865                 '*.hu.cz',                      // internetcentrum at gmail.com
1866                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
1867                 '*.ic.cz',                      // internetcentrum at gmail.com
1868                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
1869                 '*.own.cz',                     // internetcentrum at gmail.com
1870                 '*.phorum.cz',          // internetcentrum at gmail.com
1871                 '*.tym.cz',                     // internetcentrum at gmail.com
1872                 '*.tym.sk',                     // jobot at ignum.cz
1873                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
1874                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
1875                 '*.yw.sk',                      // jobot at ignum.cz
1876         ),
1877         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
1878                 '*.0moola.com',
1879                 '*.3000mb.com',
1880                 '.501megs.com',
1881                 '*.teracities.com',
1882                 '*.xoompages.com',
1883         ),
1884         '*.icspace.net',
1885         'iEUROP.net' => array(
1886                 '*.ibelgique.com',
1887                 '*.iespana.es',
1888                 '*.ifrance.com',
1889                 '*.iitalia.com',
1890                 '*.iquebec.com',
1891                 '*.isuisse.com',
1892         ),
1893         '*.ihateclowns.net',
1894         '*.ii55.com',
1895         '*.ipbfree.com',
1896         '*.iphorum.com',
1897         '*.blog.ijijiji.com',
1898         '*.info.com',
1899         '*.informe.com',
1900         'it168.com',
1901         '.iwannaforum.com',
1902         '*.jconserv.net',
1903         '*.jeeran.com',
1904         '*.jeun.fr',
1905         '*.journalscape.com',
1906         '*.justfree.com',
1907         '*.blog.kataweb.it',
1908         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
1909         '*.kokoom.com',
1910         'koolpages.com',
1911         '*.ksiegagosci.info',
1912         'Lide.cz' => array(
1913                 '*.lide.cz',
1914                 '*.sblog.cz',
1915         ),
1916         'limmon.net',
1917         'Livedoor.com' => array(
1918                 'blog.livedoor.jp',
1919                 '*.blog.livedoor.com',  // redirection
1920         ),
1921         '*.livejournal.com',
1922         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
1923         '*.logme.nl',
1924         'lol.to',
1925         'ltss.luton.ac.uk',
1926         'Lycos.com' => array(
1927                 '.angelfire.com',       // angelfire.lycos.com
1928
1929                 '*.jubii.dk',   // search., medlem.
1930                 '*.jubiiblog.co.uk',
1931                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
1932                 '*.jubiiblog.de',
1933                 '*.jubiiblog.dk',
1934                 '*.jubiiblog.fr',
1935                 '*.jubiiblog.it',
1936                 '*.jubiiblog.nl',
1937
1938                 '*.lycos.at',
1939                 '*.lycos.ch',
1940                 '*.lycos.co.uk',
1941                 'angelfire.lycos.com',
1942                 '*.lycos.de',
1943                 '*.lycos.es',
1944                 '*.lycos.fr',
1945                 '*.lycos.it',           // by Lycos Europe GmbH
1946                 '*.lycos.nl',
1947
1948                 '*.spray.se',
1949                 '*.sprayblog.se',
1950
1951                 '*.tripod.com',
1952         ),
1953         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
1954         '*.memebot.com',
1955         '*.messageboard.nl',
1956         'mokono GmbH' => array(
1957                 '*.blog.com.es',
1958                 '*.blog.de',
1959                 '*.blog.fr',
1960                 '*.blog.co.uk',
1961                 '*.blog.ca',
1962                 '*.blogs.se',
1963                 '*.blogs.fi',
1964                 '*.blogs.no',
1965                 '*.blogs.dk',
1966                 '*.blogs.ro',
1967                 '*.weblogs.pl',
1968                 '*.weblogs.cz',
1969                 '*.weblogs.hu',
1970         ),
1971         'mojklc.com',
1972         'MonForum.com' => array(
1973                 '*.monforum.com',
1974                 '*.monforum.fr',
1975         ),
1976         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
1977         '*.my10gb.com',
1978         'myblog.is',
1979         'myblogma.com',
1980         '*.myblogvoice.com',
1981         'myblogwiki.com',
1982         '*.myforum.ro',
1983         '*.myfreewebs.net',
1984         '*.mysite.com',
1985         '*.myxhost.com',
1986         '*.netfast.org',
1987         'NetGears.com' => array(
1988                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
1989                 '*.9k.com',                             // 64.39.31.55(netgears.com)
1990                 '*.freewebspace.com',   // 64.49.236.72
1991         ),
1992         'Netscape.com' => array('mywebpage.netscape.com'),
1993         'users.newblog.com',
1994         'neweconomics.info',
1995         '*.newsit.es',                          // 75.126.252.108
1996         'Northsky.com' => array(
1997                 // by hostmaster at northsky.com
1998                 // northsky.com redirects to communityarchitect.com
1999
2000                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2001                 '*.00author.com',
2002                 '*.00band.com',
2003                 '*.00books.com',
2004                 '*.00cash.com',
2005                 '*.00cd.com',
2006                 '*.00dvd.com',
2007                 '*.00family.com',
2008                 '*.00game.com',
2009                 '*.00home.com',
2010                 '*.00it.com',
2011                 '*.00me.com',
2012                 '*.00movies.com',
2013                 '*.00page.com',
2014                 '*.00politics.com',
2015                 '*.00sf.com',
2016                 '*.00show.com',
2017                 '*.00song.com',
2018                 '*.00trek.com',
2019                 '*.00video.com',
2020                 '*.0me.com',
2021                 '*.0pi.com',
2022                 '*.happy-couple.com',
2023                 '*.warp0.com',
2024
2025                 '*.50megs.com',         // 64.136.25.170
2026
2027                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2028                 '*.00server.com',
2029                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2030                 '*.fanspace.com',
2031
2032                 // 64.136.25.168 by Mark Bishop
2033                 '*.00go.com',
2034                 '*.00space.com',
2035                 '*.00sports.com',
2036         ),
2037         '*.nm.ru',
2038         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2039         'onlyfree.de',
2040         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2041         '*.ohost.de',
2042         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2043                 '.friko.pl',
2044                 '.jak.pl',
2045                 '.nazwa.pl',
2046                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2047                 '.w8w.pl',
2048                 '.za.pl',
2049                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2050         ),
2051         '*.parlaris.com',
2052         '*.pathfinder.gr',
2053         '*.persianblog.com',
2054         '*.phorum.pl',
2055         'Phpbb24.com' => array( // by Daniel Eriksson
2056                 '*.createforum.us',     // registry at webbland.se
2057                 '*.forumportal.us',     // registry at webbland.se
2058                 '*.freeportal.us',      // registry at network24.se
2059                 '*.phpbb2.us',          // daniel at danielos.com
2060                 '*.phpbb24.com',        // daniel at danielos.com
2061                 '*.myforumportal.com',  // daniel at webbland.se
2062         ),
2063         'phpbb4you.com',
2064         'phpbbcommunity.com',
2065         '*.phpbbx.de',
2066         '*.pochta.ru',
2067         '*.portbb.com',
2068         'powerwebmaster.de',
2069         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2070         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2071         '*.probook.de',
2072         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2073         '*.quickfreehost.com',
2074         'quizilla.com',
2075         '*.quotaless.com',
2076         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2077         'razyboard.com',
2078         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2079         'realhp.de',
2080         'reddit.com',           ///user/
2081         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2082                 '*.juicypornhost.com',
2083                 '*.pornzonehost.com',
2084                 '*.xhostar.com',
2085         ),
2086         'RIN.ru' => array(
2087                 '*.sbn.bz',
2088                 '*.wol.bz',
2089         ),
2090         '*.sayt.ws',
2091         'Seblg.com' => array(
2092                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2093                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2094         ),
2095         '*.seo-blog.org',
2096         '*.shoutpost.com',
2097         '*.siamforum.com',
2098         '*.siteburg.com',
2099         '*.sitehome.ru',
2100         '*.sitesfree.com',              // support at livesearching.com
2101         '*.sitesled.com',
2102         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2103         'SmarTrans.com' => array(
2104                 '.3w.to',
2105                 '.aim.to',
2106                 '.djmp.jp',
2107                 '.nihongourl.nu',
2108                 '.urljp.com',
2109                 '.www1.to',
2110                 '.www2.to',
2111                 '.www3.to',
2112         ),
2113         '*.spazioforum.it',
2114         'members.spboards.com',
2115         'forums.speedguide.net',
2116         '*.spicyblogger.com',
2117         '*.spotbb.com',
2118         '*.squarespace.com',
2119         'stickypond.com',
2120         'stormloader.com',
2121         'strikebang.com',
2122         '*.sultryserver.com',
2123         '*.t35.com',
2124         '*.talks.at',
2125         'tabletpcbuzz.com',
2126         '*.talkthis.com',
2127         'tbns.net',
2128         'telasipforums.com',
2129         'thestudentunderground.org',
2130         'think.ubc.ca',
2131         '*.thumblogger.com',
2132         'Topix.com' => array(
2133                 'topix.com',
2134                 'topix.net',
2135         ),
2136         'forum.tourism-talk.com.au',
2137         'UcoZ Web-Services' => array(
2138                 '*.3dn.ru',
2139                 '*.clan.su',
2140                 '*.moy.su',
2141                 '*.my1.ru',
2142                 '*.p0.ru',
2143                 '*.pp.net.ua',
2144                 '*.ucoz.co.uk',
2145                 '*.ucoz.com',
2146                 '*.ucoz.net',
2147                 '*.ucoz.org',
2148                 '*.ucoz.ru',
2149                 '*.ws.co.ua',
2150         ),
2151         '*.unforo.net',
2152         '*.vdforum.ru',
2153         '*.vtost.com',
2154         '*.vidiac.com',
2155         'Voila.fr' => array('.site.voila.fr'),
2156         'volny.cz',
2157         'voy.com',
2158         '*.welover.org',
2159         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2160                 '*.fasthost.tv',
2161                 '*.hothost.tv',
2162                 '*.isgreat.tv',
2163                 '*.issexy.tv',
2164                 '*.isterrible.tv',
2165                 '*.somegood.tv',
2166                 '*.adultnations.com',
2167                 '*.alladultfemale.com',
2168                 '*.alladultmale.com',
2169                 '*.allbisexual.com',
2170                 '*.allbreast.com',
2171                 '*.allfeminism.com',
2172                 '*.allmanpages.com',
2173                 '*.allmendirect.com',
2174                 '*.allphotoalbum.com',
2175                 '*.allsexpages.com',
2176                 '*.allwomanweb.com',
2177                 '*.attorney-site.com',
2178                 '*.bedclip.com',
2179                 '*.bestfamilysite.com',
2180                 '*.bestmusicpages.com',
2181                 '*.bigmoron.com',
2182                 '*.bourgeoisonline.com',
2183                 '*.candyfrom.us',
2184                 '*.cartoonhit.com',
2185                 '*.cat-on-line.com',
2186                 '*.chokesondick.com',
2187                 '*.closeupsof.us',
2188                 '*.cpa-site.com',
2189                 '*.dampgirl.com',
2190                 '*.dampgirls.com',
2191                 '*.deepestfetish.com',
2192                 '*.docspages.com',
2193                 '*.dog-on-line.com',
2194                 '*.dogcountries.com',
2195                 '*.dognations.com',
2196                 '*.doingitwith.us',
2197                 '*.drenchedface.com',
2198                 '*.drenchedlips.com',
2199                 '*.drspages.com',
2200                 '*.edogden.com',
2201                 '*.eroticountry.com',
2202                 '*.fasthost.tv',
2203                 '*.fineststars.com',
2204                 '*.foronlinegames.com',
2205                 '*.forplanetearth.com',
2206                 '*.freeadultparty.com',
2207                 '*.freespeechsite.com',
2208                 '*.gayadultxxx.com',
2209                 '*.gaytaboo.com',
2210                 '*.greatcookery.com',
2211                 '*.greatrecipepages.com',
2212                 '*.greatstreamingvideo.com',
2213                 '*.hatesit.com',
2214                 '*.hothost.tv',
2215                 '*.iscrappy.com',
2216                 '*.isgreat.tv',
2217                 '*.issexy.tv',
2218                 '*.isterrible.tv',
2219                 '*.itinto.us',
2220                 '*.japannudes.net',
2221                 '*.jesussave.us',
2222                 '*.jesussaveus.com',
2223                 '*.labialand.com',
2224                 '*.lettersfrom.us',
2225                 '*.lookingat.us',
2226                 '*.lunaticsworld.com',
2227                 '*.microphallus.com',
2228                 '*.mycatshow.com',
2229                 '*.mydogshow.com',
2230                 '*.myhardman.com',
2231                 '*.mylawsite.net',
2232                 '*.mylovething.com',
2233                 '*.onasoapbox.com',
2234                 '*.onlinepulpit.com',
2235                 '*.petitionthegovernment.com',
2236                 '*.photosfor.us',
2237                 '*.picturetrades.com',
2238                 '*.pleasekiss.us',
2239                 '*.politicalemergency.com',
2240                 '*.power-emergency.com',
2241                 '*.prayingfor.us',
2242                 '*.realbadidea.com',
2243                 '*.realisticpolitics.com',
2244                 '*.reallybites.com',
2245                 '*.reallypumping.us',
2246                 '*.reallyrules.com',
2247                 '*.reallysuckass.com',
2248                 '*.reallysucksass.com',
2249                 '*.realsweetheart.com',
2250                 '*.rottenass.com',
2251                 '*.schoolreference.com',
2252                 '*.sexheroes.com',
2253                 '*.sharewith.us',
2254                 '*.smutstars.com',
2255                 '*.soakinglips.com',
2256                 '*.somegood.tv',
2257                 '*.songsfrom.us',
2258                 '*.stinkingfart.com',
2259                 '*.stinkyhands.com',
2260                 '*.storiesfrom.us',
2261                 '*.taboocountry.com',
2262                 '*.television-series.com',
2263                 '*.thisbelongsto.us',
2264                 '*.totallyboning.us',
2265                 '*.vaginasisters.com',
2266                 '*.verydirtylaundry.com',
2267                 '*.videosfor.us',
2268                 '*.videosfrom.us',
2269                 '*.videosof.us',
2270                 '*.virtualdogshit.com',
2271                 '*.web1000.com',
2272                 '*.webpicturebook.com',
2273                 '*.wronger.com',
2274                 '*.xxxnations.com',
2275                 '*.yourwaywith.us',
2276         ),
2277         'webblog.ru',
2278         'weblogmaniacs.com',
2279         '.webng.com',                   // www.*, www3.*
2280         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
2281         'websitetoolbox.com',
2282         'Welnet.de' => array(
2283                 'welnet.de',
2284                 'welnet4u.de',
2285         ),
2286         'wh-gb.de',
2287         '*.wikidot.com',
2288         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
2289         '*.wmjblogs.ru',
2290         '*.wordpress.com',
2291         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
2292         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
2293         '*.xforum.se',
2294         'xfreeforum.com',
2295         '*.xoomwebs.com',
2296         '.freeblogs.xp.tl',
2297         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
2298         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
2299         'Yahoo.com' => array(
2300                 'geocities.com',
2301         ),
2302         'YANDEX, LLC.' => array(        // noc at yandex.net
2303                 '*.narod.ru',
2304                 'ya.ru',
2305                 'yandex.ru',
2306         ),
2307         '*.yeahost.com',
2308         'yourfreebb.de',
2309         'Your-Websites.com' => array(
2310                 '*.your-websites.net',
2311                 '*.web-space.ws',
2312         ),
2313 );
2314
2315 // --------------------------------------------------
2316
2317 $blocklist['B-2'] = array(
2318
2319         // B-2: Jacked contents, something implanted
2320         // (e.g. some sort of blog comments, BBSes, forums, wikis)
2321         '*.3dm3.com',
2322         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
2323         '*.1fr1.com',
2324         'a4aid.org',
2325         'aac.com',
2326         '*.aamad.org',
2327         'ad-pecjak.si',
2328         'agnt.org',
2329         'alwanforthearts.org',
2330         '*.anchor.net.au',
2331         'anewme.org',
2332         'internetyfamilia.asturiastelecentros.com',
2333         'Ball State University' => array('web.bsu.edu'),
2334         'btofaq.net',                   ///v3/forum
2335         'blepharospasm.org',
2336         'nyweb.bowlnfun.dk',
2337         '*.buzznet.com',
2338         '*.canberra.net.au',
2339         'castus.com',
2340         'Case Western Reserve University' => array('case.edu'),
2341         'ceval.de',
2342         'codespeak.net',
2343         'Colorado School of Mines' => array('ticc.mines.edu'),
2344         '*.colourware.co.uk',
2345         'cpuisp.com',
2346         'International Christian University' => array('icu.edu.ua'),
2347         '*.iphpbb.com',
2348         'board-z.de',
2349         '*.board-z.de',
2350         'California State University Stanislaus' => array('writing.csustan.edu'),
2351         'cannon.co.za',
2352         'columbosgarden.com',
2353         '*.communityhost.de',
2354         'connectionone.org',
2355         'deathwinds.com',
2356         'deforum.org',
2357         'delayedreaction.org',
2358         'deproduction.org',
2359         'dc503.org',
2360         'dre-centro.pt',
2361         'Duke University' => array('devel.linux.duke.edu'),
2362         '*.esen.edu.sv',
2363         'forums.drumcore.com',
2364         'dundeeunited.org',
2365         'energyglass.com.ua',
2366         'exclusivehotels.com',
2367         'info.ems-rfid.com',
2368         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
2369         'fbwloc.com',
2370         '.fhmcsa.org.au',
2371         'findyourwave.co.uk',
2372         'frogcafe.net',
2373         'plone4.fnal.gov',
2374         'freeforen.com',
2375         'funkdoc.com',
2376         'funnyclipcentral.com',
2377         'gearseds.com',
2378         'generationrice.com',
2379         'ghettojava.com',
2380         'gnacademy.org',
2381         '*.goodboard.de',
2382         'GreenDayVideo.net' => array(
2383                 'greendayvideo.net',
2384                 'espanol.greendayvideo.net',
2385         ),
2386         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
2387         'Harvard Law School' => array('blogs.law.harvard.edu'),
2388         'helpiammoving.com',
2389         'homepage-dienste.com',
2390         'Howard University' => array('networks.howard.edu'),
2391         'hullandhull.com',
2392         'Huntington University' => array('huntington.edu'),
2393         'huskerink.com',
2394         '.hyba.info',
2395         'inda.org',
2396         '*.indymedia.org',      // by abdecom at riseup.net
2397         'instantbulletin.com',
2398         'internetincomeclub.com',
2399         '*.inventforum.com',
2400         'Iowa State University' => array('boole.cs.iastate.edu'),
2401         'ipwso.org',
2402         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
2403         'ironmind.com',
2404         'skkustp.itgozone.com', // hidden JavaScript
2405         'jazz2online.com',
2406         '.jloo.org',
2407         'Kazan State University' => array(
2408                 'dir.kzn.ru',
2409                 'sys.kcn.ru',
2410         ),
2411         'test.kernel.org',
2412         'kevindmurray.com',
2413         'kroegjesroutes.nl',
2414         '.legion.org',
2415         'Loyola Marymount University' => array('lmu.edu'),
2416         'forum.lixium.fr',
2417         'macfaq.net',
2418         'me4x4.com',
2419         'microbial-ecology.net',
2420         'minsterscouts.org',
2421         'morallaw.org',
2422         'morerevealed.com',
2423         'macronet.org',
2424         'mamiya.co.uk',
2425         'vcd.mmvcd.com',
2426         'Monmouth College' => array('department.monm.edu'),
2427         'mountainjusticemedia.org',
2428         '*.mybbland.com',
2429         'mydlstore.com',
2430         '*.netboardz.com',
2431         'North Carolina A&T State University' => array(
2432                 'ncat.edu',
2433                 'my.ncat.edu',
2434                 'hlc.ncat.edu',
2435         ),
2436         'placetobe.org',
2437         'users.nethit.pl',
2438         'nightclubvip.net',
2439         'njbodybuilding.com',
2440         'nlen.org',
2441         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
2442         'offtextbooks.com',
2443         'ofimatika.com',
2444         'omakase-net',                  // iframe
2445         'omikudzi.ru',
2446         'openchemist.net',
2447         'palungjit.com',
2448         'pataphysics-lab.com',
2449         'paullima.com',
2450         'perl.org.br',
2451         'pfff.co.uk',
2452         'pix4online.co.uk',
2453         'plone.dk',
2454         'preform.dk',
2455         'privatforum.de',
2456         'publicityhound.net',
2457         'qea.com',
2458         'rbkdesign.com',
2459         'rehoboth.com',
2460         'rodee.org',
2461         'ryanclark.org',
2462         '*.reallifelog.com',
2463         'rkphunt.com',
2464         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
2465         'sapphireblue.com',
2466         'saskchamber.com',
2467         'savevoorhees.org',
2468         'selikoff.net',
2469         'serbisyopilipino.org',
2470         'setbb.com',
2471         'sharejesusinternational.com',
2472         'silver-tears.net',
2473         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
2474         '.softpress.com',
2475         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
2476         'tehudar.ru',
2477         'Tennessee Tech University' => array('manila.tntech.edu'),
2478         'thebluebird.ws',
2479         'theosis.org',
2480         '*.thoforum.com',
2481         'troms-slekt.com',
2482         'theedgeblueisland.com',
2483         'toyshop.com.tw',               // /images/sigui/
2484         'torontoplace.com',
2485         'chat.travlang.com',
2486         'trickropingbylassue.com',
2487         'Truman State University' => array('mathbio.truman.edu'),
2488         'tuathadedannan.org',
2489         'txgotg.com',
2490         'tzaneen.co.za',
2491         'The University of North Dakota' => array(
2492                 'learn.aero.und.edu',
2493                 'ez.asn.und.edu',
2494         ),
2495         'The University of Alabama' => array('bama.ua.edu'),
2496         'unisonscotlandlaw.co.uk',
2497         'University of California' => array('classes.design.ucla.edu'),
2498         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
2499         'University of Northern Colorado' => array('unco.edu'),
2500         'University of Toronto' => array(
2501                 'environment.utoronto.ca',
2502                 'grail.oise.utoronto.ca',
2503                 'utsc.utoronto.ca',
2504         ),
2505         'urgentclick.com',
2506         'vacant.org.uk',
2507         'Villa Julie College' => array('www4.vjc.edu'),
2508         'Vail Valley Foundation' => array('.vvf.org'),
2509         'wabson.org',
2510         'warping.to',           // Seems (a redirection site, but now) taken advantage of
2511         'webarch.com',          // by WebArchitects (webarch at insync.net)
2512         'weehob.com',
2513         'West Virginia University Parkersburg' => array('wvup.edu'),
2514         'williamsburgrentals.com',
2515         'wolvas.org.uk',
2516         'wookiewiki.org',
2517         'xsgaming.com',                 // Jacked
2518         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
2519         'Yahoo.com' => array(
2520                 'blog.360.yahoo.com',
2521                 '*.groups.yahoo.com'
2522         ),
2523         'yasushi.site.ne.jp',   // One of mixedmedia.net'
2524         'youthpeer.org',
2525         '*.zenburger.com',
2526         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
2527 );
2528
2529 // --------------------------------------------------
2530
2531 $blocklist['C'] = array(
2532
2533         // C: Sample setting of:
2534         // Exclusive spam domains
2535         //
2536         // Seems to have flavor of links, pills, gamble, online-games, erotic,
2537         // affiliates, finance, sending viruses, malicious attacks to browsers,
2538         // and/or mixed ones
2539         //
2540         // Please notify us about this list with reason:
2541         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
2542
2543         // C-1: Domain sets (seems to be) born to spam you
2544         //
2545         // All buziness-related spam
2546         //'.biz'
2547         //
2548         'admin at seekforweb.com' => array(
2549                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
2550                 '.lovestoryx.com',
2551                 '.loveaffairx.com',
2552                 '.onmore.info',
2553                 '.scfind.info',
2554                 '.scinfo.info',
2555                 '.webwork88.info',
2556         ),
2557         'boss at bse-sofia.bg' => array(        // by Boris
2558                 '.htewbop.org',
2559                 '.kimm--d.org',
2560                 '.gtre--h.org',
2561                 '.npou--k.org',
2562                 '.bres--z.org',
2563                 '.berk--p.org',
2564                 '.bplo--s.org',
2565                 '.basdpo.org',
2566                 '.jisu--m.org',
2567                 '.kire--z.org',
2568                 '.mertnop.org',
2569                 '.mooa--c.org',
2570                 '.nake--h.org',
2571                 '.noov--b.org',
2572                 '.suke--y.org',
2573                 '.vasdipv.org',
2574                 '.vase--l.org',
2575                 '.vertinds.org',
2576         ),
2577         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
2578                 '.aqq3.info',
2579                 '.axa00.info',
2580                 '.okweb11.org',
2581                 '.okweb12.org',
2582                 '.okweb13.org',
2583                 '.okweb14.org',
2584         ),
2585         'opezdol at gmail.com' => array(
2586                 '.informazionicentro.info',
2587                 '.notiziacentro.info',
2588         ),
2589         'SomethingGen' => array(
2590                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
2591                 // 'CamsGen' by Sergey (buckster at hotpop.com)
2592                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
2593                 // by Lee Chang (nebucha at model-x.com)
2594                 '.adult-chat-world.info',       // by Lui
2595                 '.adult-chat-world.org',        // by Lui
2596                 '.adult-sex-chat.info',         // by Lui
2597                 '.adult-sex-chat.org',          // by Lui
2598                 '.adult-cam-chat.info',         // by Lui
2599                 '.adult-cam-chat.org',          // by Lui
2600                 '.dildo-chat.org',                      // by Lui
2601                 '.dildo-chat.info',                     // by Lui
2602                 // flirt-online.info is not CamsGen
2603                 '.flirt-online.org',            // by Lui
2604                 '.live-adult-chat.info',        // by Lui
2605                 '.live-adult-chat.org',         // by Lui
2606                 '.sexy-chat-rooms.info',        // by Lui
2607                 '.sexy-chat-rooms.org',         // by Lui
2608                 '.swinger-sex-chat.info',       // by Lui
2609                 '.swinger-sex-chat.org',        // by Lui
2610                 '.nasty-sex-chat.info',         // by Lui
2611                 '.nasty-sex-chat.org',          // by Lui
2612
2613                 '.camshost.info',                       // by Sergey
2614                 '.camdoors.info',                       // by Sergey
2615                 '.chatdoors.info',                      // by Sergey
2616
2617                 '.lebedi.info',                         // by Pronin
2618                 '.loshad.info',                         // by Pronin
2619                 '.porosenok.info',                      // by Pronin
2620                 '.indyushonok.info',            // by Pronin
2621                 '.kotyonok.info',                       // by Pronin
2622                 '.kozlyonok.info',                      // by Pronin
2623                 '.magnoliya.info',                      // by Pronin
2624                 '.svinka.info',                         // by Pronin
2625                 '.svinya.info',                         // by Pronin
2626                 '.zherebyonok.info',            // 89.149.206.225 by Pronin
2627
2628                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
2629
2630                 '.adult-cam-chat-sex.info',             // by Lee
2631                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
2632                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
2633                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
2634                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
2635                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
2636                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
2637                 '.sex-chat-porn-cam.info',              // by Lee
2638         ),
2639         'mital at topo20.org' => array( // by Marcello Italianore
2640                 '.trevisos.org',
2641                 '.topo20.org',
2642         ),
2643         'WellCams.com' => array(
2644                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
2645                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
2646                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
2647         ),
2648         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
2649                 '.besturgent.org',
2650                 '.googletalknow.org',
2651                 '.montypythonltd.org',
2652                 '.supersettlemet.org',
2653                 '.thepythonfoxy.org',
2654                 '.ukgamesyahoo.org',
2655                 '.youryahoochat.org',
2656         ),
2657         'kikimas at mail.net' => array( // Redirect to nb717.com etc
2658                 '.dbsajax.org',
2659                 '.acgt2005.org',
2660                 '.gopikottoor.com',
2661                 '.koosx.org',
2662                 '.mmgz.org',
2663                 '.zhiyehua.net',
2664         ),
2665         'vdf at lovespb.com' => array(  // by Andrey
2666                 '.02psa.info',
2667                 '.1818u.org',
2668                 '.18ew.info',
2669                 '.43sexx.org',
2670                 '.56porn.org',
2671                 '.6discount.info',
2672                 '.78porn.org',          // "UcoZ WEB-SERVICES"
2673                 '.78rus.info',
2674                 '.92ssex.org',          // "ForumGenerator"
2675                 '.93adult.org',         // "ForumGenerator"
2676                 '.aboutsr.info',
2677                 '.aboutzw.info',
2678                 '.all23.info',
2679                 '.allvdf.info',
2680                 '.buy-dge.info',
2681                 '.buypo.info',
2682                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
2683                 '.cv83.info',
2684                 '.cvwifw.info',
2685                 '.dabouts.info',
2686                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
2687                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
2688                 '.free01sa.info',
2689                 '.frees1.info',
2690                 '.freexz.info',
2691                 '.ifree-search.org',
2692                 '.lovespb.info',
2693                 '.myso2.info',
2694                 '.nb74u.info',
2695                 '.ohhh2.info',
2696                 '.ol43.info',
2697                 '.olala18.info',
2698                 '.oursales.info',
2699                 '.pasian1.info',
2700                 '.pldk.info',
2701                 '.po473.info',
2702                 '.pornr.info',          // "UcoZ WEB-SERVICES"
2703                 '.poz2.info',
2704                 '.qpf8j4d.info',
2705                 '.saleqw.info',
2706                 '.sexof.info',          // "UcoZ WEB-SERVICES"
2707                 '.sexz18.info',
2708                 '.sexy69a.info',
2709                 '.shedikc.info',
2710                 '.spb78.info',
2711                 '.usacanadauk.info',
2712                 '.v782mks.info',
2713                 '.vny0.info',
2714                 '.wifes1.info',
2715                 '.xranvam.info',
2716                 '.zenitcx.info',
2717                 '.zxolala.info',
2718         ),
2719         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
2720                 '.care01.info',
2721                 '.care02.info',
2722                 '.care03.info',
2723                 '.care04.info',
2724                 '.care05.info',
2725                 '.care06.info',
2726                 '.care07.info',
2727                 '.care08.info',
2728                 '.care09.info',
2729                 '.care10.info',
2730                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
2731                 '.klastar01.info',
2732                 '.klastar02.info',
2733                 '.klastar03.info',
2734                 '.klastar04.info',
2735                 '.klastar05.info',
2736                 '.klastar06.info',
2737                 '.klastar07.info',
2738                 '.klastar08.info',
2739                 '.klastar09.info',
2740                 '.klastar10.info',
2741                 '.um20ax01.info',
2742                 '.um20ax02.info',
2743                 '.um20ax03.info',
2744                 '.um20ax04.info',
2745                 '.um20ax05.info',
2746                 '.um20ax06.info',
2747                 '.um20ax07.info',
2748                 '.um20ax08.info',
2749                 '.um20ax09.info',
2750                 '.um20ax10.info',
2751         ),
2752         'forrass at gmail.com' => array(        // by Ismail
2753                 '.zmh01.info',
2754                 '.zmh02.info',
2755                 '.zmh03.info',
2756                 '.zmh04.info',
2757                 '.zmh05.info',
2758                 '.zmh06.info',
2759                 '.zmh07.info',
2760                 '.zmh08.info',
2761                 '.zmh09.info',
2762                 '.zmh10.info',
2763         ),
2764         'Varsylenko Vladimir and family' => array(
2765                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
2766                 // by David C. Lack (David.C.Lack at dodgeit.com)
2767                 // by Kuzma V Safonov (admin at irtes.ru)
2768                 // by Petrov Vladimir (vvm_kz at rambler.ru)
2769                 // by LAURI FUNK (vvm_kz at rambler.ru)
2770
2771                 // 64.92.162.210(*.static.reverse.ltdomains.com)
2772                 '.abrek.info',                          // by Petrov
2773                 '.allsexonline.info',           // by Varsylenko
2774                 '.d1rnow.info',                         // by Petrov
2775                 '.doxer.info',                          // Petrov
2776                 '.freeforworld.info',           // Varsylenko
2777                 '.goodworksite.info',           // Varsylenko
2778                 '.onall.info',                          // by Varsylenko
2779                 '.powersiteonline.info',        // by Varsylenko
2780                 '.rentmysite.info',                     // by Varsylenko
2781                 '.sexdrink.info',                       // by Petrov
2782                 '.siteszone.info',                      // by Varsylenko
2783                 '.sfup.info',                           // by Petrov
2784                 '.superfreedownload.info',      // by Varsylenko
2785                 '.superneeded.info',            // by Varsylenko
2786                 '.srup.info',                           // by Petrov
2787
2788                 // 66.235.185.143(*.svabuse.info)
2789                 '.accommodationwiltshire.com',  // by Petrov
2790                 '.levines.info',                        // by Petrov
2791                 '.sernost.info',                        // by Petrov
2792                 '.sexvideosite.info',           // by Petrov
2793                 '.vvsag.info',                          // by Petrov
2794
2795                 // 81.0.195.134
2796                 '.michost.info',                        // by LAURI
2797                 '.parther.info',                        // by LAURI
2798
2799                 // 88.214.202.100
2800                 '.gitsite.info',                        // by Petrov
2801                 '.organiq.info',                        // by Petrov
2802                 '.yoursitedh.info',                     // by Petrov
2803
2804                 // 217.11.233.58 by Petrov
2805                 '.mp3vault.info',
2806
2807                 // DNS time out or failed
2808                 '.bequeous.info',                       // by Davi
2809                 '.sopius.info',                         // by Kuzma
2810                 '.sovidopad.info',                      // by Kuzma
2811                 '.yerap.info',                          // by Kuzma
2812         ),
2813         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
2814                 '.flywebs.com',
2815                 '.hostrim.com',
2816                 '.playbit.com',
2817         ),
2818         'webmaster at dgo3d.info' => array(     // by Son Dittman
2819                 '.bsb3b.info',
2820                 '.dgo3d.info',
2821                 '.dgo5d.info',
2822         ),
2823         'cooler.infomedia at gmail.com' => array(
2824                 '.diabetescarelink.com',
2825                 '.firstdebthelp.com',
2826         ),
2827         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
2828                 '.pokah.lv',
2829                 '.astrons.com',
2830         ),
2831         'seocool at bk.ru' => array(    // by Skar
2832                 '.implex3.com',
2833                 '.implex6.info',
2834                 '.softprof.org',
2835         ),
2836         'Caslim.info' => array(
2837                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
2838                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
2839         ),
2840         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
2841                 '.777-poker.biz',
2842                 '.porn-11.com',
2843         ),
2844         'Conto.pl' => array(
2845                 '.8x.pl',               // domena at az.pl
2846                 '.3x3.pl',              // by biuro at nazwa.pl
2847                 '.conto.pl',    // by biuro at nazwa.pl
2848                 '.guu.pl',              // by conto.pl (domena at az.pl)
2849                 '.xcx.pl',              // domena at az.pl
2850                 '.yo24.pl',             // domena at az.pl
2851         ),
2852         'mail at pcinc.cn' => array(
2853                 // Domains by Lin Zhi Qiang
2854                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
2855
2856                 // 125.65.112.11
2857                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
2858                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
2859                 '.shoopivdoor.com',
2860
2861                 // 125.65.112.12
2862                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
2863                 '.hosetaibei.com',
2864                 '.playsese.com',
2865
2866                 // 125.65.112.13
2867                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
2868                 '.ahatena.com',
2869                 '.asdsdgh-jp.com',
2870                 '.conecojp.net',
2871                 '.game-oekakibbs.com',
2872                 '.geocitygame.com',
2873                 '.gsisdokf.net',
2874                 '.korunowish.com',
2875                 '.netgamelivedoor.com',
2876                 '.soultakerbbs.net',
2877                 '.yahoo-gamebbs.com',
2878                 '.ywdgigkb-jp.com',
2879
2880                 // 125.65.112.14
2881                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
2882                 '.acyberhome.com',
2883                 '.bbs-qrcode.com',
2884                 '.gamesroro.com',
2885                 '.gameyoou.com',
2886                 '.gangnu.com',
2887                 '.goodclup.com',
2888                 '.lineage321.com',
2889                 '.linkcetou.com',
2890                 '.love888888.com',
2891                 '.ragnarok-bbs.com',
2892                 '.ragnarok-game.com',
2893                 '.rmt-navip.com',
2894                 '.watcheimpress.com',
2895
2896                 // 125.65.112.15
2897                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
2898                 '.18girl-av.com',
2899                 '.aurasoul-visjp.com',
2900                 '.gamaniaech.com',
2901                 '.game-mmobbs.com',
2902                 '.gameslin.net',
2903                 '.gemnnammobbs.com',
2904                 '.gogolineage.net',
2905                 '.grandchasse.com',
2906                 '.jpragnarokonline.com',
2907                 '.jprmthome.com',
2908                 '.maplestorfy.com',
2909                 '.netgamero.net',
2910                 '.nothing-wiki.com',
2911                 '.ourafamily.com',
2912                 '.ragnarok-sara.com',
2913                 '.rmt-lineagecanopus.com',
2914                 '.rmt-ranloki.com',
2915                 '.rogamesline.com',
2916                 '.roprice.com',
2917                 '.tuankong.com',
2918                 '.twreatch.com',
2919
2920                 // 125.65.112.22
2921                 // The same IP: web013.cdnhost.cn
2922                 '.lzy88588.com',
2923                 '.ragnaroklink.com',
2924
2925                 // 125.65.112.24
2926                 '.rmtfane.com',
2927                 '.fc2weday.com',
2928                 '.nlftweb.com',
2929
2930                 // 125.65.112.27
2931                 '.i520i.com',
2932                 '.sunwayto.com',
2933
2934                 // 125.65.112.31
2935                 // The same IP: web016.cdnhost.cn
2936                 '.twyaooplay.com',
2937
2938                 // 125.65.112.32
2939                 // The same IP: web037.cdnhost.cn
2940                 '.emeriss.com',
2941                 '.raginfoy.com',
2942                 '.ragnarokgvg.com',
2943                 '.rentalbbs-livedoor.com',
2944                 '.romaker.com',
2945                 '.sagewikoo.com',
2946                 '.samples112xrea.com',
2947                 '.wiki-house.com',
2948
2949                 // 125.65.112.49
2950                 '.chaosx0.com',
2951
2952                 // 125.65.112.88
2953                 // The same IP: web015.cdnhost.cn
2954                 '.a-hatena.com',
2955                 '.biglobe-ne.com',
2956                 '.blogplaync.com',
2957                 '.din-or.com',
2958                 '.dtg-gamania.com',
2959                 '.fcty-net.com',
2960                 '.game-fc2blog.com',
2961                 '.gameurdr.com',
2962                 '.getamped-garm.com',
2963                 '.interzq.com',
2964                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
2965                 '.luobuogood.com',
2966                 '.ragnarok-search.com',
2967                 '.rinku-livedoor.com',
2968
2969                 // 125.65.112.90
2970                 '.gtvxi.com',
2971
2972                 // 125.65.112.91
2973                 // The same IP: web004.cdnhost.cn
2974                 '.6828teacup.com',
2975                 '.blog-livedoor.net',
2976                 '.cityblog-fc2web.com',
2977                 '.deco030-cscblog.com',
2978                 '.imbbs2t4u.com',
2979                 '.k5dionne.com',
2980                 '.lineagejp-game.com',
2981                 '.mbspro6uic.com',
2982                 '.slower-qth.com',
2983                 '.wikiwiki-game.com',
2984
2985                 // 125.65.112.93
2986                 // The same IP: web022.cdnhost.cn
2987                 '.aaa-livedoor.net',
2988                 '.cityhokkai.com',              // web022.cdnhost.cn
2989                 '.fanavier.net',
2990                 '.geocitylinks.com',    // web022.cdnhost.cn
2991                 '.kuronowish.net',              // web022.cdnhost.cn
2992                 '.ro-bot.net',
2993
2994                 // 125.65.112.95
2995                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
2996                 '.23styles.com',
2997                 '.aehatena-jp.com',
2998                 '.ameblog-jp.net',
2999                 '.antuclt.com',
3000                 '.blog-ekndesign.com',
3001                 '.d-jamesinfo.com',
3002                 '.editco-jp.com',
3003                 '.ezbbsy.com',
3004                 '.extd-web.com',
3005                 '.fotblong.com',
3006                 '.game62chjp.net',
3007                 '.gamegohi.com',
3008                 '.gamesmusic-realcgi.net',
3009                 '.gamesragnaroklink.net',
3010                 '.homepage-nifty.com',
3011                 '.ie6xp.com',
3012                 '.irisdti-jp.com',
3013                 '.jklomo-jp.com',
3014                 '.jpxpie6-7net.com',
3015                 '.lian-game.com',
3016                 '.lineage-bbs.com',
3017                 '.lineage1bbs.com',
3018                 '.livedoor-game.com',
3019                 '.litcan.com',
3020                 '.lovejpjp.com',
3021                 '.m-phage.com',
3022                 '.muantang.com',
3023                 '.plusd-itmedia.com',
3024                 '.runbal-fc2web.com',
3025                 '.saussrea.com',
3026                 '.tooalt.com',
3027                 '.toriningena.net',
3028                 '.yahoodoor-blog.com',
3029                 '.yy14-kakiko.com',
3030
3031                 // 125.65.112.137
3032                 '.clublineage.com',
3033
3034                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3035                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3036                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3037
3038                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3039                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3040
3041                 '.games-nifty.com',             // 255.255.255.255 now
3042                 '.homepage3-nifty.com', // 255.255.255.255 now
3043         ),
3044         'caddd at 126.com' => array(
3045                 '.chengzhibing.com',    // by chen gzhibing
3046                 '.jplinux.com',                 // by lian liang
3047                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3048                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3049                 '.tooplogui.com',               // by zibing cai
3050                 '.twsunkom.com',                // by guo zhi wei
3051                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3052         ),
3053         'nuigiym2 at 163.com' => array( // by fly bg
3054                 '.linainfo.net',                // Seems IP not allocated now
3055                 '.lineagalink.com',             // 220.247.157.99
3056                 '.lineagecojp.com',             // 61.139.126.10
3057                 '.ragnarokonlina.com',  // 220.247.158.99
3058         ),
3059         'aakin at yandex.ru' => array(  // by Baer
3060                 '.entirestar.com',
3061                 '.superbuycheap.com',
3062                 '.topdircet.com',
3063         ),
3064         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3065                 '.tianmieccp.com',
3066                 '.xianqiao.net',
3067         ),
3068         'm.frenzy at yahoo.com' => array(       // by Michael
3069                 '.p5v.org',
3070                 '.j111.net',
3071                 '.searchhunter.info',
3072                 '.soft2you.info',
3073                 '.top20health.info',
3074                 '.top20ringtones.info',
3075                 '.top20travels.info',
3076                 '.v09v.info',
3077                 '.x09x.info',
3078                 '.zb-1.com',
3079         ),
3080         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3081                 '.bingogoldenpalace.info',
3082                 '.ccarisoprodol.info',
3083                 '.ezxcv.info',
3084                 '.isuperdrug.com',
3085                 '.pharmacif.info',
3086                 '.pornsexteen.biz',
3087                 '.ugfds.info',
3088                 '.vviagra.info',
3089         ),
3090         'anatolsenator at gmail.com' => array(  // by Anatol
3091                 '.cheapestviagraonline.info',
3092                 '.buyphentermineworld.info'
3093         ),
3094         'webmaster at mederotica.com' => array(
3095                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3096                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3097                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3098                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3099         ),
3100         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3101                 '.auase.info',          // by ilemavyq7461 at techie.com
3102                 '.axeboxew.info',       // by zygeu220 at writeme.com
3103                 '.boluzuhy.info',       // by pikico5419 at post.com
3104                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3105                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3106                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3107                 '.exidiqe.info',        // by kufyca5475 at mail.com
3108                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3109                 '.gubiwu.info',         // by lywunef6532 at iname.com
3110                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3111                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3112                 '.jiuuz.info',          // by meqil6549 at mail.com
3113                 '.nudetar.info',        // by vohepafi3536 at techie.com
3114                 '.nipud.info',          // by bohox9872 at mindless.com
3115                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3116                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3117                 '.olasep.info',         // by lizon8506 at mail.com
3118                 '.oueuidop.info',       // by arytyb6913 at europe.com
3119                 '.oviravy.info',        // by amyuu3883 at london.com
3120                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3121                 '.ragibe.info',         // by ehome4458 at myself.com
3122                 '.ucazib.info',         // by gorare7222 at consultant.com
3123                 '.udaxu.info',          // by gubima4007 at usa.com
3124                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3125                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3126                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3127                 '.yvaxat.info',         // by koqun9660 at mindless.com
3128                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3129         ),
3130         'Carmodelrank.com etc' => array(
3131                 // by Brianna Dunlord (briasmi at yahoo.com)
3132                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3133                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3134                 '.carmodelrank.com',// by Brianna
3135                 '.cutestories.net',     // by Brianna
3136                 '.sturducs.com',
3137                 '.bestother.info',      // by Tim
3138                 '.premiumcasinogames.com',      // by Brianna)
3139                 '.yaahooo.info',        // by Alice
3140         ),
3141         'aliacsandr at yahoo.com' => array(
3142                 '.cubub.info',                          // "Free Web Hosting"
3143         ),
3144         'aliacsandr85 at yahoo.com' => array(
3145                 // by Dr. Portillo or Eva Sabina Lopez Castell
3146                 '.xoomer.alice.it',                     // "Free Web Hosting"
3147                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3148                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3149                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3150                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3151                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3152                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3153                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3154                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3155                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3156                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3157                 '.viagra-price.org',            // by Eva
3158                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3159                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3160         ),
3161         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3162         'Something-Gamble' => array(
3163                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3164                 '.atonlineroulette.com',                        // by Blaise Johns
3165                 '.atroulette.com',                                      // by Gino Sand
3166                 '.betting-123.com',                                     // by Joana Caceres
3167                 '.betting-i.biz',                                       // by Joaquina Angus
3168                 '.casino-challenge.com',                        // by Maren Camara
3169                 '.casino-gambling-i.biz',                       // by Giselle Nations
3170                 '.casino-italian.com',                          // by Holley Yan
3171                 '.casino123.net',                                       // by Ta Baines
3172                 '.casinohammamet.com',                          // by Inger Barhorst
3173                 '.casinoqz.com',                                        // by Berenice Snow
3174                 '.casinos-777.net',                                     // by Iona Ayotte
3175                 '.crapsok.com',                                         // by Devon Adair,
3176                 '.dcasinoa.com',                                        // by August Hawkinson
3177                 '.e-poker-4u.com',                                      // by Issac Leibowitz
3178                 '.free-dvd-player.biz',                         // by Rosario Kidd
3179                 '.florida-lottery-01.com',                      // by Romeo Dillon
3180                 '.gaming-123.com',                                      // by Jennifer Byrne
3181                 '.kenogo.com',                                          // by Adriane Bell
3182                 '.mycaribbeanpoker.com',                        // by Andy Mullis
3183                 '.onbaccarat.com',                                      // by Kassandra Dunn
3184                 '.online-experts.biz',                          // by Liberty Helmick
3185                 '.onlinepoker-123.com',                         // by Andrea Feaster
3186                 '.playpokeronline-123.com',                     // by Don Lenard
3187                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
3188                 '.texasholdem123.com',                          // by Savion Lasseter
3189                 '.texasholdem-777.com',                         // by Savanna Lederman
3190                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
3191                 '.the-craps-100.us',                            // by Lorrine Ripley
3192                 '.the-free-online-game-913.us',         // by Kanesha Clem
3193                 '.the-free-poker-1798.us',                      // by Elaina Witte
3194                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
3195                 '.the-online-game-poker-1185.us',       // by Merna Bey
3196                 '.the-playing-black-jack.com',          // by Kristine Brinker
3197                 '.the-poker-1082.us',                           // by Kristofer Boldt
3198                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
3199                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
3200                 '.the-video-black-jack.com',            // by Jagger Godin
3201         ),
3202         'Something-Insurance' => array(
3203                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
3204
3205                 // 0-9
3206                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
3207                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
3208                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
3209                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
3210                 '.18wkcf.com',                                  // by Lexy Bohannon
3211                 '.2001werm.org',                                // by Raphael Rayburn
3212                 '.2004heeparea1.org',                   // by Dinorah Andrews
3213                 '.21nt.net',                                    // by Jaida Estabrook
3214                 '.3finfo.com',                                  // by Damian Pearsall
3215                 '.3somes.org',                                  // by Mauro Tillett
3216                 '.453531.com',                                  // by Kurt Flannery
3217                 '.4freesay.com',                                // by Eloy Jones
3218                 '.5ssurvey.com',                                // by Annamarie Kowalski
3219                 '.8-f22.com',                                   // by Larraine Evers
3220                 '.9q.org',                                              // by Ami Boynton
3221
3222                 // A
3223                 '.a40infobahn.com',                             // by Amit Nguyen
3224                 '.a4h-squad.com',                               // by Ross Locklear
3225                 '.aac2000.org',                                 // by Randi Turner
3226                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
3227                 '.acahost.com',                                 // by Milton Haberman
3228                 '.aconspiracyofmountains.com',  // by Lovell Gaines
3229                 '.acornwebdesign.co.uk',                // by Uriel Dorian
3230                 '.activel-learning-site.com',   // by Mateo Conn
3231                 '.ad-makers.com',                               // by Shemeka Arsenault
3232                 '.ada-information.org',                 // by Josef Osullivan
3233                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
3234                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
3235                 '.aequityrefinance.com',                // by Jadwiga Duckworth
3236                 '.aerovac-hotpress.com',                // by Trey Marlow
3237                 '.agfbiosensors.com',                   // by Lionel Dempsey
3238                 '.ahomeloanrefinance.com',              // by Leslie Kinser
3239                 '.affordablerealestate.net',    // by Season Otoole
3240                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
3241                 '.ahouserefinance.com',                 // by Young Alley
3242                 '.akirasworld.com',                             // by Piper Sullivan
3243                 '.alderik-production.com',              // by Joan Stiles
3244                 '.alltechdata.com',                             // by Dom Laporte
3245                 '.amconllc.com',                                // by Syble Benjamin
3246                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
3247                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
3248                 '.angelandcrown.net',                   // by Claretta Najera
3249                 '.ankoralina.com',                              // by Eladia Demers
3250                 '.antiquegoldmine.com',                 // by Keena Marlow
3251                 '.aquinosotros.com',                    // by Nanci Prentice
3252                 '.architectionale.com',                 // by Wilbur Cornett
3253                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
3254                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
3255                 '.arefinancehome.com',                  // by Duane Doran
3256                 '.arefinancinghome.com',                // by Ike Laney
3257                 '.athletic-shoes-e-shop.info',  // by Romelia Money
3258                 '.auction-emall-site.info',             // by Dayle Denman
3259                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
3260                 '.auto-buy-rite.com',                   // by Asuncion Buie
3261                 '.axxinet.net',                                 // by Roberta Gasper
3262                 '.azimutservizi.com',                   // by Ethelene Brook
3263                 '.azstudies.org',                               // by Bernardina Walden
3264
3265                 // B
3266                 '.babtrek.com',                                 // by Simonette Mcbrayer
3267                 '.babycujo.com',                                // by Francisco Akers
3268                 '.bakeddelights.com',                   // by Dave Evenson
3269                 '.bbcart.com',                                  // by Lucio Hamlin
3270                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
3271                 '.best-digital-phone.us',               // by Meghann Crockett
3272                 '.bjamusements.com',                    // by Lurlene Butz
3273                 '.blursgsu.com',                                // by Weston Killian
3274                 '.bookwide.net',                                // by Tequila Zacharias
3275                 '.boreholes.org',                               // by Flora Reed
3276                 '.breathingassociaiton.org',    // by Alfred Crayton
3277                 '.birdingnh.com',                               // by Donald Healy
3278                 '.bisdragons.org',                              // by Lupe Cassity
3279                 '.blcschools.net',                              // by Alycia Jolly
3280                 '.bronte-foods.com',                    // by Kary Pfeiffer
3281                 '.buckscountyneighbors.org',    // by Maile Gaffney
3282                 '.buffalofudge.com',                    // by Mable Whisenhunt
3283                 '.burlisonforcongress.com',             // by Luann King
3284                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
3285                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
3286
3287                 // C
3288                 '.cabanes-web.com',                             // by Vaughn Latham
3289                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
3290                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
3291                 '.checaloya.com',                               // by Susana Coburn
3292                 '.calvarychapelrgvt.org',               // by Karan Kittle
3293                 '.cameras-esite.info',                  // by Karlee Frisch
3294                 '.cancerkidsforum.org',                 // by Samson Constantino
3295                 '.ccchoices.org',                               // by Kenia Cranford
3296                 '.ccupca.org',                                  // by Evonne Serrano
3297                 '.celebratemehome.com',                 // by Soraya Tower
3298                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
3299                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
3300                 '.choose-shoes.net',                    // by Geoffrey Setser
3301                 '.churla.com',                                  // by Ollie Wolford
3302                 '.circuithorns.co.uk',                  // by Nathanial Halle
3303                 '.clanbov.com',                                 // by Donell Hozier
3304                 '.cnm-ok.org',                                  // by Thalia Moye
3305                 '.coalitioncoalition.org',              // by Ned Macklin
3306                 '.consoleaddicts.com',                  // by Dorla Hoy
3307                 '.counterclockwise.net',                // by Melynda Hartzell
3308                 '.codypub.com',                                 // by Mercedes Coffman
3309                 '.comedystore.net',                             // by Floy Donald
3310                 '.covsys.co.uk',                                // by Abby Jacey
3311                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
3312                 '.craftybidders.com',                   // by Dannie Lazo
3313                 '.credit-card-finder.net',              // by Mellie Deherrera
3314                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
3315                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
3316                 '.ctwine.org',                                  // by Hailey Knox
3317
3318                 // D
3319                 '.dazyation.com',                               // by Louis Strasser
3320                 '.deepfoam.org',                                // by Ethelyn Southard
3321                 '.debt-fixing.com',                             // by Dagny Rickman
3322                 '.dgmarketingwebdesign.com',    // by Nubia Lea
3323                 '.domainadoption.com',                  // by Breann Pappas
3324                 '.diannbomkamp.com',                    // by Russel Croteau
3325                 '.dictionary-spanish.us',               // by Jacki Gilbreath
3326                 '.dictionary-yahoo.us',                 // by Lili Mitchem
3327                 '.digital-camera-review-esite.info',    // by Milagros Jowers
3328                 '.digital-cameras-esite.info',  // by Milan Jolin
3329                 '.dnstechnet.net',                              // by Tamera Oman
3330                 '.drivenbydata.org',                    // by Katherine Noyes
3331                 '.dtmf.net',                                    // by Micki Slayton
3332                 '.domainsfound.com',                    // by Blossom Lively
3333
3334                 // E
3335                 '.ecstacyabuse.net',                    // by Alana Knight
3336                 '.e-digital-camera-esite.info', // by Romaine Cress
3337                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
3338                 '.eldorabusecenter.org',                // by Annabella Oneal
3339                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
3340                 '.encaponline.com',                             // by Patrick Keel
3341                 '.ez-shopping-online.com',              // by Gail Bartlett
3342
3343                 // F
3344                 '.faithfulwordcf.com',                  // by Bart Weeks
3345                 '.fammedassoc.com',                             // by Joshua Nelson
3346                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
3347                 '.f00k.org',                                    // by Leslie Chapman
3348                 '.foreignrealtions.org',                // by Krystal Hawley
3349                 '.fortwebsite.org',                             // by Kristina Motley
3350                 '.fotofirstdigital.com',                // by Tad Whitfield
3351                 '.foundationcommons.org',               // by Caryn Eskew
3352                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
3353                 '.freaky-cheats.com',                   // by Al Klein
3354                 '.free--spyware.com',                   // by Nikki Contreras
3355                 '.french-home-finance-consultant.info', // by Santana Melton
3356                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
3357
3358                 // G
3359                 '.gaintrafficfast.com',                 // by Lila Meekins
3360                 '.gaygain.org',                                 // by Shell Davila
3361                 '.gcaaa.com',                                   // by Vallie Jaworski
3362                 '.generalsysteme.com',                  // by Cale Vogel
3363                 '.generation4games.co.uk',              // by Sonya Graham
3364                 '.german-dictionary.us',                // by Rex Daniel
3365                 '.gilmerrec.com',                               // by Leighann Guillory
3366                 '.glenthuntly-athletics.com',   // by Julee Hair
3367                 '.glorybaskets.com',                    // by Lynette Lavelle
3368                 '.goconstructionloan.com',              // by Willis Monahan
3369                 '.gohireit.com',                                // by Bertha Metzger
3370                 '.godcenteredpeople.com',               // by Jaycee Coble
3371
3372                 // H
3373                 '.healthinsuranceem.com',               // by Justin Munson
3374                 '.hearthorizon.info',                   // by Kory Session
3375                 '.hegerindustrial.com',                 // by Toni Wesley
3376                 '.herzequip.com',                               // by Princess Dunkle
3377                 '.hglcms.org',                                  // by Gladwin Ng
3378                 '.hipanoempresa.com',                   // by Shannon Staub
3379                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
3380                 '.horse-racing-result.com',             // by Rodney Reynolds
3381                 '.hueckerfamily.com',                   // by Hershel Sell
3382
3383                 // I
3384                 '.ilove2win.com',                               // by Lamont Dickerson
3385                 '.ilruralassistgrp.org',                // by Moises Hauser
3386                 '.imageonsolutions.com',                // by Porsche Dubois
3387                 '.infoanddatacenter.com',               // by Eva Okelley
3388                 '.islamfakta.org',                              // by Goldie Boykin
3389                 '.ithomemortgage.com',                  // by Adelaide Towers
3390                 '.iyoerg.com',                                  // by Madyson Gagliano
3391
3392                 // J
3393                 '.jeffaxelsen.com',                             // by Daphne William
3394                 '.jeffreyf.net',                                // by Vito Platt
3395                 '.johnmartinsreality.com',              // by Pamela Larry
3396                 '.johnsilvers.net',                             // by Silver Battaglia
3397
3398                 // K
3399                 '.kcgerbil.org',                                // by Marisa Thayer
3400                 '.kdc-phoenix.com',                             // by Salma Shoulders
3401                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
3402                 '.kosove.org',                                  // by Darwin Schneider
3403
3404                 // L
3405                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
3406                 '.letsgokayaking.net',                  // by Winnie Adair
3407                 '.libertycabs.com',                             // by Adela Bonds
3408                 '.liquor-store-cellar.info',    // by Hugh Pearson
3409                 '.locomojo.net',                                // by Marco Harmon
3410                 '.lodatissimo.com',                             // by Adrian Greeson
3411                 '.lsawc.org',                                   // by Lara Han
3412                 '.lycos-test.net',                              // by Rigoberto Oakley
3413
3414                 // M
3415                 '.macro-society.com',                   // by Venessa Hodgson
3416                 '.marthasflavorfest.com',               // by Ahmad Lau
3417                 '.martin-rank.com',                             // by Cathleen Crist
3418                 '.maryandfrank.org',                    // by Theodore Apodaca
3419                 '.masterkwonhapkido.com',               // by Misty Graham
3420                 '.maxrpm-demo.com',                             // by Cristal Cho
3421                 '.mechanomorphic.com',                  // by Stanford Crow
3422                 '.mepublishing.net',                    // by Karly Fleenor
3423                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
3424                 '.metwahairports.com',                  // by Nan Kitchen
3425                 '.middle-eastnews.com',                 // by Tybalt Altmann
3426                 '.mikepelchy.com',                              // by Sherly Pearson
3427                 '.milpa.org',                                   // by Nelly Aguilera
3428                 '.modayun.com',                                 // by Camilla Velasco
3429                 '.moonstoneerp.com',                    // by Garret Salmon
3430                 '.morosozinho.com',                             // by Lenore Tovar
3431                 '.morphadox.com',                               // by Hung Zielinski
3432                 '.moscasenlared.com',                   // by Tera Gant
3433                 '.sdjavasig.com',                               // by Gia Swisher
3434                 '.mpeg-radio.com',                              // by Sincere Beebe
3435                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
3436                 '.mtseniorcenter.org',                  // by Frederic Ortega
3437                 '.mysteryclips.com',                    // by Edward Ashford
3438
3439                 // N
3440                 '.naavs.org',                                   // by Yuridia Gandy
3441                 '.naval-aviation.org',                  // by Roselle Campo
3442                 '.navigare-ischia.com',                 // by Arielle Coons
3443                 '.ncredc.org',                                  // by Brenda Nye
3444                 '.neonmotorsports.com',                 // by Giovanna Vue
3445                 '.nf-ny.com',                                   // by Yadira Hibbard
3446                 '.ngfdyqva.com',                                // by Emiliano Samples
3447                 '.nicozone.com',                                // by Blaine Shell
3448                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
3449                 '.npawny.org',                                  // by Willard Murphy
3450                 '.nysdoed.org',                                 // by Elric Delgadillo
3451                 '.nyswasteless.org',                    // by Shaylee Moskowitz
3452                 '.nytech-ir.com',                               // by Adrien Beals
3453
3454                 // O
3455                 '.oadmidwest.com',                              // by Gavin Kaplan
3456                 '.oarauto.com',                                 // by Susann Merriman
3457                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
3458                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
3459                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
3460                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
3461                 '.online-pills-24x7.biz',               // by Aide Hallock
3462                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
3463                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
3464                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
3465                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
3466                 '.otterbayweb.com',                             // by Maxwell Irizarry
3467
3468                 // P
3469                 '.painting-technique.us',               // by Bryanna Tooley
3470                 '.pakamrcongress.com',                  // by Bryce Summerville
3471                 '.patabney.com',                                // by Kailyn Slone
3472                 '.parde.org',                                   // by Ellie Yates
3473                 '.participatingprofiles.com',   // by Jaelynn Meacham
3474                 '.partnershipconference.org',   // by Alla Floyd
3475                 '.pet-stars.com',                               // by Carmon Luevano
3476                 '.planning-law.org',                    // by Trista Holcombe
3477                 '.ppawa.com',                                   // by Evonne Scarlett
3478                 '.precisionfilters.net',                // by Faustina Fell
3479
3480                 // Q
3481                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
3482                 '.quick-debt-consolidation.net',        // by Lala Marte
3483                 '.quicktvr.com',                                // by Vernell Crenshaw
3484
3485                 // R
3486                 '.radicalsolutions.org',                // by Reece Medlin
3487                 '.randallburgos.com',                   // by Bradly Villa
3488                 '.rcassel.com',                                 // by Janiah Gallant
3489                 '.rearchitect.org',                             // by Marcus Gaudet
3490                 '.rent-an-mba.com',                             // by Valentina Mcdermott
3491                 '.reprisenashville.com',                // by Hester Khan
3492                 '.reptilemedia.com',                    // by Alicia Patel
3493                 '.resellers2000.com',                   // by Dedra Kennedy
3494                 '.reverse-billing.com',                 // by Lazaro Gluck
3495                 '.richcapaldi.com',                             // by Kya Haggard
3496                 '.richformissouri.com',                 // by Alanna Elston
3497                 '.robstraley.com',                              // by Leida Bartell
3498                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
3499                 '.rpgbbs.com',                                  // by Leonel Peart
3500                 '.ruralbusinessonline.org',             // by Lynsey Watters
3501                 '.ruwomenscenter.org',                  // by Vince Mclemore
3502                 '.ryanjowens.com',                              // by Janine Smythe
3503
3504                 // S
3505                 '.sagarmathatv.org',                    // by Liam Funke
3506                 '.sakyathubtenling.org',                // by Liane Falgout
3507                 '.sandiegolawyer.net',                  // by Linnie Sommervill
3508                 '.sandishaven.com',                             // by Lino Soloman
3509                 '.scienkeen.com',                               // by Liza Navarra
3510                 '.seimenswestinghouse.com',             // by Teresa Benedetto
3511                 '.severios.com',                                // by Isa Steffen
3512                 '.sexual-hot-girls.com',                // by Viviana Bolton
3513                 '.shakespearelrc.com',                  // by Luciana Weaver
3514                 '.shashran.org',                                // by Adriel Humphries
3515                 '.shoes-shop.us',                               // by Austen Higginbotham
3516                 '.skagitvalleybassanglers.com', // by Necole Thiele
3517                 '.skinsciencesalon.com',                // by Nena Rook
3518                 '.smartalternative.net',                // by Nicki Lariviere
3519                 '.sml338.org',                                  // by Nickole Krol
3520                 '.smogfee.com',                                 // by Sienna Kimble
3521                 '.sneakers-e-shop.info',                // by Nikki Fye
3522                 '.spacewavemedia.com',                  // by Thanh Gast
3523                 '.softkernel.com',                              // by Nicol Hummer
3524                 '.stjoanmerrillville.com',              // by Hunter Beckham
3525                 '.strelinger.com',                              // by Arron Highsmith
3526                 '.striking-viking.com',                 // by Kylie Endsley
3527                 '.sunnydeception.org',                  // by Amaya Llora
3528                 '.sunzmicro.com',                               // by Goddard Arreola
3529                 '.sv-iabc.org',                                 // by Braden Buck
3530                 '.sykotick.com',                                // by Pierce Knecht
3531
3532                 // T
3533                 '.tbody.net',                                   // by Ormond Roman
3534                 '.the-pizzaman.com',                    // by Mario Ramsey
3535                 '.the-shoes.us',                                // by Alejandro Gaffney
3536                 '.theborneocompany.com',                // by Bryanna Tooley
3537                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
3538                 '.thehomeschool.net',                   // by September Concepcio
3539                 '.thenewlywed.com',                             // by Allegra Marra
3540                 '.tigerspice.com',                              // by Denis Mosser
3541                 '.tnaa.net',                                    // by Jasmine Andress
3542                 '.top-finance-sites.com',               // by Maryann Doud
3543                 '.tradereport.org',                             // by Bettie Sisk
3544                 '.transmodeling.com',                   // by Martine Button
3545                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
3546                 '.tsaoc.com',                                   // by Heriberto Mcfall
3547                 '.tsunamidinner.com',                   // by Nannie Richey
3548
3549                 // U
3550                 '.uhsaaa.com',                                  // by Risa Herbert
3551                 '.ultradeepfield.org',                  // by Bobby Ragland
3552                 '.umkclaw.info',                                // by Cammy Kern
3553                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
3554                 '.usa-wolf.com',                                // by Jacklyn Morrill
3555                 '.usjobfair.com',                               // by Lorina Burchette
3556
3557                 // V
3558                 '.vacancesalouer.com',                  // by Loris Bergquist
3559                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
3560                 '.valleylibertarians.org',              // by Lena Massengale
3561                 '.vanderbiltevents.com',                // by Gannon Krueger
3562                 '.vanwallree.com',                              // by Michelina Donahue
3563                 '.vcertificates.com',                   // by Hyun Lamp
3564                 '.vonormytexas.us',                             // by Suzette Waymire
3565
3566                 // W
3567                 '.washingtondc-areahomes.net',  // by Ailene Broome
3568                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
3569                 '.wolsaoh.org',                                 // by Daniela English
3570                 '.worldpropertycatalog.com',    // by Aray Baxter
3571
3572                 // Y
3573                 '.yankee-merchants.com',                // by Jackson Hinojosa
3574                 '.yourbeachhouse.com',                  // by Dedrian Ryals
3575                 '.yourdomainsource.com',                // by Deems Weingarten
3576
3577                 // Z
3578                 '.zkashan.com',                                 // by Evan Light
3579                 '.zockclock.com',                               // by Dorothea Guthrie
3580         ),
3581         'Something-Drugs' => array(
3582                 // Drugs / Pills / Diet
3583                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
3584                 '.abdelghani-shady.com',                // by Elly Alton
3585                 '.bangbangfilm.com',                    // by Davin Chou
3586                 '.centroantequera.com',                 // by Keon Kwiatkowski
3587                 '.champagne-cellar.info',               // by Kandis Rizzo
3588                 '.chix0r.org',                                  // by Christoper Baird
3589                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
3590                 '.fantasticbooks-shop.com',             // by Kermit Ashley
3591                 '.fast-cash-01.com',                    // by Edgar Oliver
3592                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
3593                 '.fn-nato.com',                                 // by Donny Dunlap
3594                 '.gqyinran.com',                                // by Alejandro Parks
3595                 '.juris-net.com',                               // by Rachelle Bravo
3596                 '.leftpencey.com',                              // by Aileen Ashby
3597                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
3598                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
3599                 '.palaceroyale.net',                    // by Brycen Stebbins
3600                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
3601                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
3602                 '.yukissushi.com',                              // by Donell Hozier
3603         ),
3604         'Something-Others' => array(
3605                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
3606                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
3607         ),
3608         'Something-NoApp' => array(
3609                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
3610                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
3611                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3612                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3613                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
3614         ),
3615         'Cortez and family' => array(
3616                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
3617                 '.dronadaarsujf.info',  // by Cortez
3618                 '.fromnananaref.info',  // by Cortez
3619                 '.goorkkjsaka.info',    // by Cortez
3620                 '.jkdfjjkkdfe.info',    // by Rico
3621                 '.jkllloldkjsa.info',   // by Cortez
3622                 '.nnjdksfornms.info',   // by Rico
3623                 '.mcmdkkksaoka.info',   // by Cortez
3624                 '.srattaragfon.info',   // by Cortez
3625                 '.yreifnnonoom.info',   // by Rico
3626                 '.zjajjsvgeuds.info',   // by Cortez
3627         ),
3628         'admin at ematuranza.com' => array(
3629                 '.ancorlontano.com',
3630                 '.dentroallago.com',
3631                 '.digiovinezza.com',
3632                 '.ematuranza.com',
3633                 '.ilfango.com',
3634                 '.nullarimane.com',
3635                 '.questaimmensa.com',
3636                 '.tentailvolo.com',
3637                 '.unatenerezza.com',
3638                 '.volgondilettose.com',
3639         ),
3640         'admin at edeuj84.info' => array(       // by Cornelius Boyers
3641                 '.bid99df.info',
3642                 '.bj498uf.info',
3643                 '.edeuj84.info',
3644                 '.f4mfid.info',
3645                 '.g4vf03a.info',
3646                 '.j09j4r.info',
3647                 '.jv4r8hv.info',
3648                 '.k43sd3.info',
3649                 '.k4r84d.info',
3650                 '.k4rvda.info',
3651                 '.k4v0df.info',
3652                 '.k903os.info',
3653                 '.k9df93d.info',
3654                 '.kv94fd.info',
3655                 '.ksjs93.info',
3656                 '.l0ks03.info',
3657                 '.l9u3jc.info',
3658                 '.lv043a.info',
3659                 '.nh94h9.info',
3660                 '.m94r9d.info',
3661                 '.s87fvd.info',
3662                 '.v3k0d.info',
3663                 '.v4r8j4.info',
3664                 '.vf044s.info',
3665                 '.vj49rs.info',
3666                 '.vk498j.info',
3667                 '.u03jow.info',
3668         ),
3669         'Nikhil and Brian' => array(
3670                 // by Brian Dieckman (info at iudndjsdhgas.info)
3671                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
3672                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
3673                 '.ihfjeswouigf.info',   // by Brian, / was not found
3674                 '.iudndjsdhgas.info',   // by Brian, / was not found
3675                 '.iufbsehxrtcd.info',   // by Brian, / was not found
3676                 '.jiatdbdisut.info',    // by Brian, / was not found
3677                 '.jkfierwoundhw.info',  // by Brian, / was not found
3678                 '.kfjeoutweh.info',             // by Brian, / was not found
3679                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
3680                 '.oudjskdwibfm.info',   // by Brian, / was not found
3681                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
3682                 '.itxbsjacun.info',             // by Nikhil, / was not found
3683                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
3684                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
3685                 '.najedncdcounrd.info', // by Nikhil, / was not found
3686                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
3687                 '.oujvjfdndl.info',             // by Nikhil, / was not found
3688                 '.uodncnewnncds.info',  // by Nikhil, / was not found
3689                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
3690                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
3691                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
3692                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
3693                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
3694                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
3695         ),
3696         'wealth777 at gmail.com' => array(      // by Henry Ford
3697                 '.brutal-forced.com',
3698                 '.library-bdsm.com',
3699                 '.rape-fantasy.us',
3700         ),
3701         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
3702                 '.purerotica.com',
3703                 '.richsex.com',
3704                 '.servik.net',
3705                 '.withsex.com',
3706         ),
3707         'dreamteammoney.com' => array(
3708                 '.dreamteammoney.com',  // dtmurl.com related
3709                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
3710         ),
3711         'KLIK VIP Search and family' => array(
3712                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
3713                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
3714                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
3715                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
3716                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
3717                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
3718                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
3719         ),
3720         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
3721                 '.antivirs.info',
3722                 '.antivirus1.info',
3723                 '.antivirus2.info',
3724         ),
3725         'wasam at vangers.net and family' => array(
3726
3727                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3728                 '.bahatoca.org',
3729                 '.digestlycos.org',
3730                 '.educativaanale.info',
3731                 '.guildstuscan.org',
3732                 '.isaakrobbins.info',
3733                 '.isfelons.org',
3734                 '.lvwelevated.org',
3735                 '.macphersonaca.org',
3736                 '.markyaustrian.org',
3737                 '.michelepug.org',
3738                 '.opalbusy.info',
3739                 '.quijotebachata.info',
3740                 '.salthjc.info',
3741                 '.shogunnerd.info',
3742                 '.solarissean.org',
3743                 '.sparkgsx.info',
3744                 '.tarzanyearly.org',
3745                 '.tulabnsf.org',
3746                 '.vaccarinos.org',
3747
3748                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
3749                 '.e2007.info',
3750                 '.cmoss.info',
3751
3752                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
3753                 '.finddesk.org',
3754                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
3755                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
3756                 '.rcatalog.org',
3757                 '.sbitzone.org',
3758
3759                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
3760                 '.cheapns.org',
3761                 '.my-top.net',
3762                 '.sfind.net',
3763                 '.sspot.net',
3764                 '.suvfind.info',
3765
3766                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
3767                 '.trumber.com',
3768
3769                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3770                 '.blogduet.org',
3771                 '.carelf.info',
3772                 '.cmagic.org',
3773                 '.cspell.org',
3774                 '.dspark.org',
3775                 '.dtonic.org',
3776                 '.mcharm.info',
3777                 '.mslook.info',
3778                 '.phpdinnerware.info',
3779                 '.rnation.org',
3780                 '.uzing.org',
3781
3782                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3783                 '.allbar.info',
3784                 '.allersearch.org',
3785                 '.allzoom.org',
3786                 '.dynall.org',
3787                 '.fastopia.org',
3788                 '.offasfast.info',
3789                 '.rblast.org',
3790                 '.rchistes.info',
3791                 '.rette.org',
3792                 '.shufflequince.org',
3793                 '.suvlook.org',
3794
3795                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3796                 '.290cabeza.org',
3797                 '.bossierpainted.org',
3798                 '.connickkarel.info',   // Admin: tvaals at vangers.net
3799                 '.definekonica.info',   // Admin: tvaals at vangers.net
3800                 '.gradetelemundo.info',
3801                 '.hydraulickin.info',
3802                 '.indicadorestmj.info',
3803                 '.keeleykincaid.org',
3804                 '.kleenbowser.info',
3805                 '.pipnickname.info',
3806                 '.pacolily.org',
3807                 '.redeemtrabalho.info',
3808                 '.scanmakerchua.info',
3809                 '.titanmessina.info',
3810                 '.tragratuit.org',
3811                 '.yeareola.info',
3812         ),
3813         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
3814                 '.canadianmedsworld.info',      // 84.252.133.112
3815                 '.tabsdrugstore.info',          // 84.252.133.114
3816                 '.tabsstore.info',                      // 84.252.133.114
3817                 '.topcholesterol.info',         // 84.252.133.132
3818         ),
3819         'be.cx' => array(
3820                 '.be.cx',
3821                 '.ca.cx',
3822         ),
3823         'john780321 at yahoo.com' => array(     // by John  Brown
3824                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
3825                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
3826                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
3827         ),
3828         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
3829                 '.bertela.info',
3830                 '.forblis.info',
3831                 '.frenallo.info',
3832                 '.goyahoo.info',
3833                 '.herbak.info',
3834                 '.kiokast.info',
3835                 '.nerenok.info',
3836                 '.pestgets.info',
3837                 '.snukker.info',
3838                 '.thegetspons.info',
3839         ),
3840         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
3841                 '.bobop.info',
3842                 '.kwwwe.info',
3843                 '.piikz.info',
3844                 '.moosm.info',
3845                 '.vvvw.info',
3846         ),
3847         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
3848                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
3849                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
3850                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
3851                 '.jplingood.com',       // 125.65.112.15
3852                 '.linenew.com',         // 203.191.148.96
3853                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
3854                 '.yzlin.com',           // 220.162.244.36
3855         ),
3856         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
3857                 '.1111mb.com',
3858                 '.2sex18.com',
3859                 '.69porn1.com',
3860         ),
3861         'ECTechnology' => array(
3862                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
3863                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
3864                 '.automouse.jp',
3865         ),
3866         'lyqz at 21cn.com' => array(
3867                 '.japangame1.com',
3868                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
3869                 '.livedoor1.com',
3870                 '.ragnarokonline1.com',
3871                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
3872         ),
3873         'kingrou at hotmail.com' => array(      // by yangjianhe
3874                 '.youshini.com',                // Two iframe to 453787.com's *.exe
3875                 '.453787.com',
3876         ),
3877         'anpaul541000 at 163.com' => array(     // by su qiuqing
3878                 '.cetname.com',                 // 222.77.185.87
3879                 '.jpgamer.net',                 // 220.247.157.106
3880                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
3881                 '.lovejptt.com',                // 222.77.185.87
3882                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
3883                 '.playncsoft.net',              // 220.247.157.106
3884         ),
3885         'abc00613 at 163.com' => array( // by guo yong
3886                 '.avtw1068.com',                // 64.74.223.11
3887                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
3888                 '.djkkk66990.com',              // 68.178.232.99
3889                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
3890         ),
3891         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
3892                 '.cmonfofo.com',
3893                 '.discutbb.com',
3894         ),
3895         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
3896                 '.preca.info',
3897                 '.skiaggi.info',
3898                 '.scrianal.info',
3899                 '.tageom.info',
3900         ),
3901         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
3902                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
3903                 '.inpros.net',                  // 202.181.98.79
3904                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
3905         ),
3906         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
3907                 '.ec51.com',
3908                 '.ec51.net',
3909         ),
3910         'abbevillelaties at yahoo.fr etc' => array(
3911                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
3912                 '.ringtones-rate.com',
3913                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
3914                 '.special-ringtones.net',
3915         ),
3916         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
3917                 '.1sgsc.info',
3918                 '.3h4r89h.info',
3919                 '.3v44dd.info',
3920                 '.6rfuh6.info',
3921                 '.84hd8.info',
3922                 '.94bui89.info',
3923                 '.agysb3.info',
3924                 '.asdjhs.info',
3925                 '.bcvnrth.info',
3926                 '.bheb4r.info',
3927                 '.bhiuno.info',
3928                 '.biug7g.info',
3929                 '.bjb5f4.info',
3930                 '.bob8g7g.info',
3931                 '.br89bdd.info',
3932                 '.bsa3h.info',
3933                 '.bsieb8.info',
3934                 '.basbiubf.info',
3935                 '.bobwwfs2.info',
3936                 '.ciuv9t.info',
3937                 '.dbmdx4.info',
3938                 '.dbrjms.info',
3939                 '.dbtcm.info',
3940                 '.dff9ghu.info',
3941                 '.dfshbb.info',
3942                 '.dgd4ffdh.info',
3943                 '.dh3ge.info',
3944                 '.duc86jh.info',
3945                 '.ergth45.info',
3946                 '.f78bf7ffb.info',
3947                 '.gbdfbo4.info',
3948                 '.ger45.info',
3949                 '.gnvnrrg.info',
3950                 '.h47he7.info',
3951                 '.h488hbd4.info',
3952                 '.hd72b94.info',
3953                 '.he74b7.info',
3954                 '.hfujfnr.info',
3955                 '.husdhd42.info',
3956                 '.hbwje.info',
3957                 '.itg87gji.info',
3958                 '.iugiougiuh.info',
3959                 '.jhd4f4aa.info',
3960                 '.jshd73.info',
3961                 '.krhpgd.info',
3962                 '.lyihjn.info',
3963                 '.nfyjnfj.info',
3964                 '.oihbv.info',
3965                 '.os44fvs.info',
3966                 '.sdfsd3.info',
3967                 '.sdiug4.info',
3968                 '.sdkufhh.info',
3969                 '.sdugb4f.info',
3970                 '.skdbf.info',
3971                 '.sipiv78.info',
3972                 '.sudbfb.info',
3973                 '.tymbbmy.info',
3974                 '.uilhjk.info',
3975                 '.vi87vub.info',
3976                 '.vfuyf87f.info',
3977                 '.viyvvj877.info',
3978                 '.w7fc8eu.info',
3979                 '.wefg43g.info',
3980                 '.xbrch78e.info',
3981                 '.ywsfu.info',
3982                 '.zxcbiv.info',
3983         ),
3984         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
3985                 '.abofios.info',
3986                 '.amlekfn.info',
3987                 '.amlkdoie.info',
3988                 '.amkslewq.info',
3989                 '.alemfu.info',
3990                 '.aloweks1.info',
3991                 '.alposd3.info',
3992                 '.bamhpb.info',
3993                 '.bhjkb.info',
3994                 '.bjqnj.info',
3995                 '.cvcxcbhpr.info',
3996                 '.czoypaiat.info',
3997                 '.dbpmgc.info',
3998                 '.dgvogrxs.info',
3999                 '.dldksf.info',
4000                 '.dlor6za.com',
4001                 '.dmkoiew.info',
4002                 '.eewrefr.info',
4003                 '.eladne.info',
4004                 '.elksem.info',
4005                 '.elwpod.info',
4006                 '.emlwkdnr.info',
4007                 '.esgmyqk.info',
4008                 '.fauqv.info',
4009                 '.fgxkgy.info',
4010                 '.fhryns.info',
4011                 '.fj38n4g.info',
4012                 '.fjnesal.info',
4013                 '.fmkfoe.info',
4014                 '.fqkcfldtr.info',
4015                 '.fwcigpdwz.info',
4016                 '.fyhik.info',
4017                 '.glrkje.info',
4018                 '.gwkslfq.info',
4019                 '.gwjracvh.info',
4020                 '.hihopepe.info',
4021                 '.hwlyggbkw.info',
4022                 '.hmwbfw.info',
4023                 '.hthyeb.info',
4024                 '.iaofkyaw.info',
4025                 '.uldkxuiw.info',
4026                 '.is7c6w4.info',
4027                 '.ivuddhdk.info',
4028                 '.jgfndjem.info',
4029                 '.jgmdlek.info',
4030                 '.jkrnvmpad.info',
4031                 '.jqujn.info',
4032                 '.jvgmmba.info',
4033                 '.kbaur.info',
4034                 '.kgjindptv.info',
4035                 '.kleo7s9.info',
4036                 '.lezfgam.info',
4037                 '.lfaasy.info',
4038                 '.ljpdjki.info',
4039                 '.lmnpis.info',
4040                 '.lpzcu2f.info',
4041                 '.lrptn.info',
4042                 '.lursqt.info',
4043                 '.mgkabviil.info',
4044                 '.mhtknjyt.info',
4045                 '.mksuuku.info',
4046                 '.mkyky.info',
4047                 '.mloaisn.com',
4048                 '.mlsiknd.info',
4049                 '.mthqz.info',
4050                 '.nnooq.info',
4051                 '.nohhylvc.info',
4052                 '.nuprndsye.info',
4053                 '.nsoelam.info',
4054                 '.nykobczv.info',
4055                 '.nzuhli.info',
4056                 '.odyqzgylr.info',
4057                 '.oidiau.info',
4058                 '.oitzkw.info',
4059                 '.okdmrpz.info',
4060                 '.ooinziti.info',
4061                 '.ortqr.info',
4062                 '.osmkpnekv.info',
4063                 '.ozkzfih.info',
4064                 '.p3ix8wc.com',
4065                 '.piwyt.info',
4066                 '.pfkijrm.info',
4067                 '.pjktcragi.info',
4068                 '.pleoz.info',
4069                 '.plvqm73.info',
4070                 '.pqyrem.info',
4071                 '.qipgqd.info',
4072                 '.qlewixu.com',
4073                 '.qmlskme.info',
4074                 '.qtuff.info',
4075                 '.quoga.info',
4076                 '.quqz.info',
4077                 '.qzxuw.info',
4078                 '.rcaidegp.info',
4079                 '.rlkmdi.info',
4080                 '.rnsoiov.info',
4081                 '.rnwlams.info',
4082                 '.rprgkgqld.info',
4083                 '.rubqvxrn.info',
4084                 '.spqxstl.info',
4085                 '.syckoqjql.info',
4086                 '.tbirb.info',
4087                 '.thalc34.info',
4088                 '.tiabq.info',
4089                 '.tszzpjr.info',
4090                 '.tyjdyn.info',
4091                 '.twgugpns.info',
4092                 '.uaezrqp.info',
4093                 '.udlkasu.info',
4094                 '.uejncyf.info',
4095                 '.ukvflb.info',
4096                 '.ugsuv.info',
4097                 '.ukhgpcp.info',
4098                 '.urprzn.info',
4099                 '.uuhememkw.info',
4100                 '.yalc7en.info',
4101                 '.ybuid.info',
4102                 '.yhdkgfob.info',
4103                 '.ymenq.info',
4104                 '.ynlyb.info',
4105                 '.vieatlubk.info',
4106                 '.vltcaho.info',
4107                 '.wlamsiek.info',
4108                 '.wlerp.info',
4109                 '.wlmtshzi.info',
4110                 '.wmlkams.info',
4111                 '.wprqd.info',
4112                 '.wpyspszi.info',
4113                 '.xdscc.info',
4114                 '.xdvy.info',
4115                 '.xeypku.info',
4116                 '.xsrxh.info',
4117                 '.xwjyrpfe.info',
4118                 '.yxcqw.info',
4119                 '.zhbktrh.info',
4120                 '.zspepn.info',
4121                 '.zsxtz.info',
4122         ),
4123         'survi at poczta.fm and smiley' => array(
4124                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4125                 '.ppert.info',
4126                 '.pperta.info',
4127                 '.pperts.info',
4128                 '.pprtuis.info',
4129                 '.13iuey.info',         // ":>"
4130                 '.13jkhs.info',
4131                 '.13lksa.info',
4132                 '.13rxtx.info',
4133                 '.13slkd.info',
4134                 '.13zaer.info',
4135         ),
4136         'admin at esemeski.com' => array(       // by Jan Kalka
4137                 '.kxils.info',
4138                 '.kuaph.info',
4139                 '.lncdc.info',
4140                 '.lsqpd.info',
4141                 '.mczed.info',
4142                 '.npous.info',
4143                 '.obgju.info',
4144         ),
4145         'LiquidNetLimited.com' => array(
4146                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4147
4148                 // FateBack.com related
4149                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4150                 '.bebto.com',
4151                 '.fateback.com',
4152                 '.undonet.com',
4153                 '.yoll.net',
4154
4155                 // 50webs.com                   // 64.72.112.10
4156                 // dns2.50webs.com              // 64.72.112.11
4157                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4158                 // dns2.freehostia.com  // 64.72.112.13
4159                 // serv3.freehostia.com // 64.72.112.14
4160                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4161                 // mail.50webs.com              // 64.72.112.26
4162                 // supremecenter41.com  // 64.72.112.52
4163                 // 50webs2.50webs.com   // 64.72.112.89
4164                 // supremecenter39.com  // 64.72.112.103
4165
4166                 // by LiquidNet Ltd. (support at propersupport.com)
4167                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
4168                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
4169                         'duoservers.com',               // 216.65.1.130
4170
4171                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
4172         ),
4173         'domains at agava.com' => array(
4174                 '.h18.ru',
4175                 '.hut1.ru',
4176         ),
4177         'wlmx009 at hotmail.com' => array(
4178                 '.123lineage.com',
4179                 '.ff11-info.com',
4180                 '.lastlineage.com',
4181                 '.lineage2-ol.com',
4182                 '.lineage2006.com',
4183                 '.lineagefirst.com',
4184         ),
4185         'Zettahost.com' => array(
4186                 '.atspace.biz',         // sales at zettahost.com
4187                 '.atspace.com',         // abuse at zettahost.com
4188                 '.atspace.name',        // NS atspace.com
4189                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
4190                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
4191         ),
4192         'hlq9814 at 163.com' => array(
4193                 '.kotonohax.com',               // by ling bao
4194                 '.ragnarox.mobi',               // by lin bao, *.exe download
4195                 '.rokonline-jp.com',    // by hang long
4196         ),
4197         '77ch.jp' => array(
4198                 '.77ch.jp',
4199                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
4200         ),
4201         'serchportal at mail.ru' => array(      // by Namu Adin
4202                 '.43fert.info',
4203                 '.belis.info',
4204                 '.bonu.info',
4205                 '.chelsite.info',
4206                 '.chparael.info',
4207                 '.cool9f.info',
4208                 '.dada2.info',
4209                 '.dorplanete.info',
4210                 '.dormonde.info',
4211                 '.dorprojet.info',
4212                 '.faciledor.info',
4213                 '.fastsearchgroup.info',
4214                 '.gerta0.info',
4215                 '.getse.info',
4216                 '.gopvl.info',
4217                 '.knopki.info',
4218                 '.propidor.info',
4219                 '.quicksearchnet.info',
4220                 '.ret5.info',
4221                 '.slimfastsearch.info',
4222                 '.virtualpvl.info',
4223                 '.vpvla.info',
4224                 '.xjdor.info',
4225                 '.zhopki.info',
4226         ),
4227         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
4228                 '*.444mb.com',          // Free hosting
4229                 'urlnip.com',           // Redirection
4230         ),
4231         'WWW.RU' => array(              // by Angela (abuse at www.ru)
4232                 '.1fasttimesatnau.info',
4233                 '.1freecybersex.info',
4234                 '.1freexxxcomics.info',
4235                 '.1fuckingmywife.info',
4236                 '.1pornpreview.info',
4237                 'www.ru',                                       // by (service at demos.ru), redirection
4238         ),
4239         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
4240                 '.adultschat.info',
4241                 '.livecamonline.info',
4242                 '.webcam4u.info',
4243                 '.younghot.info',
4244         ),
4245         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
4246                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
4247
4248                 // 209.51.196.242
4249                 '.22web.net',
4250                 '.2kool4u.net',
4251                 '.9skul.com',
4252                 '.alojalo.info',
4253                 '.byet.net',
4254                 '.byethost2.com',
4255                 '.byethost3.com',
4256                 '.byethost4.com',
4257                 '.byethost5.com',
4258                 '.byethost6.com',
4259                 '.byethost7.com',
4260                 '.byethost8.com',
4261                 '.byethost9.com',
4262                 '.byethost10.com',
4263                 '.byethost11.com',
4264                 '.byethost12.com',
4265                 '.byethost13.com',
4266                 '.byethost14.com',
4267                 '.byethost15.com',
4268                 '.byethost16.com',
4269                 '.byethost17.com',
4270                 '.byethost18.com',
4271                 '.headshothost.net',
4272                 '.hostwq.net',
4273                 '.mega-file.net',
4274                 '.truefreehost.com',
4275
4276                 '.ifastnet.com',        // 209.51.196.243
4277
4278                 // 209.190.16.82(mx1.byet.org)
4279                 '.1sthost.org',
4280                 '.4sql.net',
4281                 '.byet.org',
4282                 '.hyperphp.com',
4283                 '.kwikphp.com',
4284                 '.my-php.net',
4285                 '.my-place.us',
4286                 '.my-webs.org',
4287                 '.netfast.org',
4288                 '.php0h.com',
4289                 '.php1h.com',
4290                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
4291                 '.phpnet.us',
4292                 '.prohosts.org',
4293                 '.pro-php.org',
4294                 '.prophp.org',
4295                 '.sprinterweb.net',
4296                 '.swiftphp.com',
4297                 '.xlphp.net',
4298
4299                 // 209.190.16.83(mx2.byet.org)
4300                 '.instant-wiki.net',
4301
4302                 // 209.190.16.84(mx3.byet.org)
4303
4304                 // 209.190.16.85(mx4.byet.org)
4305                 '.instant-blog.net',
4306                 '.instant-forum.net',
4307
4308                 '.byethost.com',                        // 209.190.18.138
4309         ),
4310         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
4311                 '.analmoviesite.info',
4312                 '.bestgirlssex.info',
4313                 '.boxvagina.info',
4314                 '.cyberlivegirls.info',
4315                 '.hotredgirls.info',
4316                 '.forsexlove.info',
4317                 '.hotnudezone.info',
4318                 '.hotredpussy.info',
4319                 '.lesbians-live.info',
4320                 '.lesbians-on-cam.info',
4321                 '.onlinegirlssite.info',
4322                 '.sexloveonline.info',
4323                 '.teensexcard.info',
4324                 '.teensexdirect.info',
4325                 '.topnudesite.info',
4326                 '.vaginafree.info',
4327                 '.webcam-show.info',
4328                 '.webcamshow.info',
4329                 '.youngsexchat.info',
4330                 '.yourcumshot.info',
4331         ),
4332         'stocking.club at gmail.com' => array(
4333                 '.adulthotmodels.com',          // by David Zajwzran
4334                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
4335                 '.cash-call.info',                      // by David Theissen
4336                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
4337                 '.cheap-online-viagra.info',    // by David Theissen
4338                 '.drugcleansing.net',           // by David Zajwzran
4339                 '.men-health-zone.com',         // by David Theissen
4340                 '.purchase-viagra.info',        // by David Theissen
4341                 '.realdrunkengirls.biz',        // by David Theissen
4342                 '.sextoyslife.com',                     // by David Zajwzran
4343                 '.sexysubjects.info',           // by David Zajwzran
4344                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
4345                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
4346                 '.travelcardsite.info',         // by David Theissen
4347         ),
4348         'lustiq at p5com.com' => array(
4349                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
4350                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
4351         ),
4352         'web at 6jy.com' => array(
4353                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
4354                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
4355         ),
4356         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
4357                 '.auto-fgen.info',
4358                 '.fast-marketing.info',
4359                 '.from-usa.info',
4360                 '.generic-pharm.info',
4361                 '.pharm-directory.info',
4362                 '.popular-people.info',
4363                 '.safe-health.info',
4364                 '.star-celebrities.info',
4365                 '.super-home-biz.info',
4366                 '.top5-auto.info',
4367                 '.top5-cars.info',
4368                 '.vip-furniture.info',
4369                 '.vip-pc.info',
4370                 '.vip-pets.info',
4371         ),
4372         'abuse at search-store.org' => array(
4373                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
4374         ),
4375         'Leading Edge Marketing Inc.' => array(
4376                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
4377                 '.abemedical.com',
4378                 '.attractwomennow.com',
4379                 '.bettersexmall.com',
4380                 '.buymaxoderm.com',
4381                 '.buyvprx.com',
4382                 '.genf20.com',
4383                 '.infinityhealthnews.com',
4384                 '.istnewsletter.com',
4385                 '.leadingedgecash.com',
4386                 '.leadingedgeherbals.com',
4387                 '.leadingedgevipsonly.com',
4388                 '.lecash.com',
4389                 '.leminfo.com',
4390                 '.proextendersystem.com',
4391                 '.provestra.com',
4392                 '.semenax.com',
4393                 '.shavenomore.com',
4394                 '.theedgenewsletter.com',
4395                 '.vigorelle.com',
4396                 '.vigrx.com',
4397                 '.vigrxplus.com',
4398                 '.wbstnewsletter.com',
4399         ),
4400         'clickx at bk.ru' => array(     // by Alexey Enrertov
4401                 '.coolget*.info' =>
4402                         '#^(?:.*\.)?' . 'coolget' .
4403                         '(?:bus|find|news|php|place|post|srch)' .
4404                         '\.info$#',
4405                 '.coolgirl*.info' =>
4406                         '#^(?:.*\.)?' . 'coolgirl' .
4407                         '(?:apple|fish|search)' .
4408                         '\.info$#',
4409                 '.coolmeet*.info' =>
4410                         '#^(?:.*\.)?' . 'coolmeet' .
4411                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
4412                         '\.info$#',
4413                 '.cool**.info' =>
4414                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
4415                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4416                         '\.info$#',
4417                 '.freseasy*.info' =>
4418                         '#^(?:.*\.)?' . 'freseasy' .
4419                         '(?:apple|click|find|fish|post|search)' .
4420                         '\.info$#',
4421                 '.fres**.info' =>
4422                         '#^(?:.*\.)?' .
4423                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
4424                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4425                         '\.info$#',
4426                         // These are not found yet:
4427                         // fresgirlsrch.info
4428                         // fresadultapple.info
4429                         // fresadultclick.info
4430                         // frestheplace.info
4431
4432                 // 66.232.113.44
4433                 '.nuhost.info',
4434                 '.susearch.info',
4435
4436                 // 66.232.126.74(hv94.steephost.com)
4437                 '.dilej.com',
4438                 '.fyvij.com',
4439                 '.howus.com',
4440                 '.jisyn.com',
4441                 '.kaxem.com',
4442                 '.mihug.com',
4443                 '.mobyb.com',
4444                 '.qidat.com',
4445                 '.qihek.com',
4446                 '.ryzic.com',
4447                 '.sasuv.com',
4448                 '.tuquh.com',
4449                 '.vehyq.com',
4450                 '.wezid.com',
4451                 '.wifuj.com',
4452                 '.xijyt.com',
4453                 '.zuqyn.com',
4454         ),
4455         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
4456                 '.hitsearching.info',
4457                 '.hugeamountdata.info',
4458                 '.megafasthost.info',
4459                 '.real-big-host.info',
4460                 '.search4freez.info',
4461                 '.yasech.info',
4462         ),
4463         'ice--man at mail.ru' => array(
4464                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
4465                 '.bestcreola.com',
4466                 '.crekatierra.com',
4467                 '.creolafire.com',
4468                 '.crolik.com',
4469                 '.croller.cn',
4470                 '.ecrmx.com',
4471                 '.eflashpoint.com',
4472                 '.exoticmed.com',
4473                 '.feelview.com',
4474                 '.greatexotic.com',
4475                 '.icrtx.com',
4476                 '.icyhip.com',
4477                 '.icyiceman.com',
4478                 '.icypopular.com',
4479                 '.iflashpoint.com',
4480                 '.justmdx.com',
4481                 '.klickerr.com',
4482                 '.klickerrworld.com',
4483                 '.kreolic.com',
4484                 '.margansitio.com',
4485                 '.margantierra.com',
4486                 '.mimargan.com',
4487                 '.oilkeys.com',
4488                 '.planetmdx.com',
4489                 '.thekeyse.com',
4490                 '.viewgreat.com',
4491                 '.yourcreola.com',
4492
4493                 // 69.46.23.48
4494                 '.crekadirecto.com',
4495                 '.getflashsite.com',
4496                 '.sucreka.com',
4497         ),
4498         'nijeoi at hotmai.com' => array(
4499                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
4500                 '.bowij.com',
4501                 '.bozib.com',
4502                 '.cavux.com',
4503                 '.dipov.com',
4504                 '.gumoz.com',
4505                 '.hakyb.com',
4506                 '.hehyv.com',
4507                 '.hepyt.com',
4508                 '.howoj.com',
4509                 '.jywaz.com',
4510                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
4511                 '.kyheq.com',
4512                 '.kyzad.com',
4513                 '.qicad.com',
4514                 '.qubyd.com',
4515                 '.mocyq.com',
4516                 '.muloq.com',
4517                 '.myxim.com',
4518                 '.nufyp.com',
4519                 '.waqog.com',
4520                 '.wyduc.com',
4521                 '.xefyv.com',
4522                 '.xomej.com',
4523                 '.xomip.com',
4524                 '.xykyl.com',
4525                 '.zakuw.com',
4526                 '.zeliw.com',
4527                 '.zimev.com',
4528                 '.zipif.com',
4529         ),
4530         'niichka at hotmail.com' => array(
4531                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
4532                 '.aerosearch.info',
4533                 '.freader.info',
4534                 '.info4searchz.info',
4535                 '.nice-host.info',
4536                 '.realyfast.info',
4537                 '.resuts.info',
4538         ),
4539         'porychik at hot.ee' => array(  // by Igor
4540                 '.tedstate.info',       // "Free Web Hosting"
4541                 '.giftsee.com',
4542         ),
4543         'aofa at vip.163.com' => array(
4544                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
4545                 '.5944.net',
4546         ),
4547         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
4548                 '.maxrentcar.info',
4549                 '.newsonyericsson.info',
4550                 '.pornositeworld.biz',
4551                 '.rentcarweb.info',
4552         ),
4553         'kopper1970 at gmail.com' => array(
4554                 '.cardealerall.info',           // by Green
4555                 '.donatecarsales.info',         // by Sipil
4556                 '.ringtonewilly.info',          // by Sipil
4557                 '.travelstraveling.info',       // by Chinik
4558                 '.viagrabuyonline.org',         // by Sipil
4559                 '.viagraorderbuy.com',          // by Anatol
4560                 '.worldcuptourism.info',        // by Sipil
4561         ),
4562         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
4563                 '.globalinfoland.info',
4564                 '.goodlifesearch.info',
4565                 '.hotnetinfo.info',
4566                 '.hotpornmovies.org',
4567                 '.infopilot.info',
4568         ),
4569         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
4570                 '.bang-bro.org',
4571                 '.datinghost.info',
4572                 '.hello-craulers.info',
4573                 '.free-blog-host.info',
4574                 '.sucking-boobs.info',
4575         ),
4576         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
4577                 '.allcamsguide.info',
4578                 '.camerascams.info',
4579                 '.camerasera.info',
4580                 '.girlcamsworld.info',
4581                 '.hiddenlimocams.info',
4582                 '.redlivecams.info',
4583                 '.spycamsgear.info',
4584                 '.spycamssite.info',
4585                 '.supercamsusa.info',
4586                 '.thecamsnow.info',
4587         ),
4588         '87.242.116.81' => array(
4589                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
4590                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
4591                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
4592                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
4593                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
4594         ),
4595         '208.70.75.153' => array(
4596                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
4597                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
4598                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
4599                 '.cerc-on.info',
4600                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
4601                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4602                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
4603                 '.cerc-tr.info',
4604                 '.cerc-tw.info',
4605                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
4606                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
4607                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
4608                 '.cerc-on.org',         // by cerca-one at ya.ru
4609                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
4610                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4611                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
4612                 '.cerc-tr.org',         // by cerca-one at ya.ru
4613                 '.cerc-tw.org',         // by cerca-one at ya.ru
4614                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
4615                 '.cerca-fo.info',
4616                 '.cerca-no.info',
4617                 '.cerca-on.info',
4618                 '.cerca-sv.info',
4619                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
4620                 '.cerca-te.info',
4621                 '.cerca-tr.info',
4622                 '.cerca-sx.org',
4623                 '.cerca-tr.org',        // orgitaly1 at ya.ru
4624                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
4625                 '.ricerca-fo.info',
4626                 '.ricerca-one.org',
4627                 '.ricerca-sv.org',
4628                 '.ricerca-sx.org',
4629                 '.ricerca-te.org',
4630                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
4631                 '.subit01.org',
4632                 '.subit02.org',
4633                 '.subit03.org',
4634                 '.subit04.org',
4635                 '.subit05.org',
4636                 '.subit06.org',
4637                 '.subit01.info',
4638                 '.subit02.info',
4639                 '.subit03.info',
4640                 '.subit04.info',
4641                 '.subit05.info',
4642                 '.subit06.info',
4643         ),
4644         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
4645                 '.5-base.com',
4646                 '.pharmacy-style.com',
4647         ),
4648         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
4649                 '.ista-2006.ru',
4650                 '.wefas.ru',
4651         ),
4652         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
4653                 '.tourismworldsite.info',
4654                 '.yourtourismtravel.info',
4655         ),
4656         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
4657                 '.easyfindcar.info',
4658                 '.siteinfosystems.info',
4659         ),
4660         'smesh1155 at gmail.com' => array(
4661                 '.hospitalforyou.info',                 // by Gimmi
4662                 '.thephentermineonline.info',   // by Kipola
4663         ),
4664         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
4665                 '.kiski.net.in',
4666                 '.pipki.org.in',
4667                 '.siski.co.in',
4668         ),
4669         'tiptronikmike at mail.com' => array(
4670                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
4671                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
4672                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
4673                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
4674                 //'.i0sex.info',                // Michael
4675                 //'.i1sex.info',                // Michael
4676                 //'.i2sex.info',                // Martin
4677                 //'.i3sex.info',                // Martin
4678                 //'.i4sex.info',                // Adulterra
4679                 //'.i5sex.info',                // Adulterra
4680                 //[irvyz]6sex.info not found
4681                 '.i8sex.info',                  // by Martin
4682         ),
4683         'skuarlytronald at mail.com' => array(
4684                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
4685                 '.girlsgoingmad.info',          // 64.27.13.120
4686                 '.girlsgonewildside.info',      // 64.27.13.120
4687         ),
4688         '66.232.109.250' => array(
4689                 '.1626pornporno.info',
4690                 '.1851pornporno.info',
4691                 '.1876pornporno.info',
4692                 '.476pornporno.info',
4693         ),
4694         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
4695                 '.compactxxx.com',
4696                 '.eadulthost.com',
4697                 '.eadultview.com',
4698                 '.eroticpool.net',
4699                 '.ipornservice.com',
4700                 '.liveadulthost.com',
4701                 '.nudepal.com',
4702                 '.sweetservers.com',
4703         ),
4704         'support at orgija.org' => array(
4705                 '.assfuckporn.org',
4706                 '.dosugmos.org',
4707                 '.fuckporn.org',
4708                 '.girlsdosug.org',
4709                 '.girlsporno.org',
4710                 '.moscowintim.org',
4711                 '.pornass.org',
4712                 '.pornopussy.org',
4713                 '.progirlsporn.org',
4714                 '.pussypornogirls.org',
4715         ),
4716         '125.65.112.93' => array(
4717                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
4718                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
4719         ),
4720         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
4721                 '.beta-google.com',
4722                 '.tv-reklama.info',
4723                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
4724                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
4725         ),
4726         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
4727                 '.abobrinha.org',
4728                 '.aneurysmic.com',              // / not found
4729                 '.physcomp.org',                // / not found
4730                 '.seriedelcaribe2006.org',
4731                 '.refugeeyouthinamerica.com',
4732         ),
4733         'skip_20022 at yahoo.com' => array(
4734                 // 203.174.83.55
4735                 '.a28hosting.info',             // by Bill Jones
4736                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
4737                 '.besthentai06.org',    // by yakon
4738         ),
4739         'USFINE.com' => array(
4740                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
4741                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
4742         ),
4743         '68.178.211.57' => array(
4744                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
4745                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
4746         ),
4747         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
4748                 '.google-yahoo-msn.org',
4749                 '.expedia-travel.org',
4750         ),
4751         'admin at newestsearch.com' => array(   // by Gibrel Sitce
4752                 '.emr5ce.org',
4753                 '.wfe7nv.org',
4754                 '.xyr99yx.org',
4755         ),
4756         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
4757                 '.playonlinenc.com',
4758                 '.playboss-jp.com',
4759         ),
4760         'Digi-Rock.com' => array(
4761                 '.rom776.com',
4762                 // owner-organization: DIGIROCK, INC.
4763                 // owner-email: domain-contact at digi-rock.com
4764                 // with an external ad-and-JavaScript,
4765                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
4766                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
4767         ),
4768         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
4769                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
4770                 '.ipod-application.info',       // NO IP
4771                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
4772                 '.stonesex.info',                       // NO IP, was 74.50.97.136
4773         ),
4774         'germerts at yandex.ru' => array(       // by Sergey Marchenko (germerts at yandex.ru)
4775                 '.andatra.info',
4776                 '.banchitos.info',
4777                 '.batareya.info',
4778                 '.blevota.info',
4779                 '.broneslon.info',
4780                 '.gamadril.info',
4781                 '.gipotenuza.info',
4782                 '.govnosaklo.info',
4783         ),
4784         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
4785                 '.acronis-true-image.info',
4786                 '.calcio-xp.info',
4787                 '.cosanova.info',
4788                 '.cose-rx.info',
4789                 '.dictip.info',
4790                 '.findig.info',
4791                 '.fotonow.info',
4792                 '.lavoro-tip.info',
4793                 '.loan-homes.info',
4794                 '.mionovita.info',
4795                 '.mustv.info',
4796                 '.newsnaked.info',
4797                 '.online-tod.info',
4798                 '.opakit.info',
4799                 '.opanow.info',
4800                 '.opriton.info',
4801                 '.porta-bl.info',
4802                 '.refdif.info',
4803                 '.xzmovie.info',
4804         ),
4805         '84.252.148.120 etc' => array(
4806                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
4807                 '.planetavilton.info',  // 84.252.148.120
4808                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
4809         ),
4810         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
4811                 '.99jk.com',
4812                 '.99jk.com.cn',
4813                 '.99jk.cn',
4814         ),
4815         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
4816                 '.kliktop.biz',
4817                 '.kliktop.org',
4818                 '.pharmatop.us',
4819                 '.supertop.us',
4820                 '.supervaizer.info',
4821         ),
4822         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
4823                 '.freeamateursexx.info',        // 81.0.195.228
4824                 '.freeanalsexx.info',           // 217.11.233.97
4825                 '.freegaysexx.info',            // 81.0.195.228
4826         ),
4827         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
4828                 '.abbhi.info',
4829                 '.gayblogguide.biz',
4830                 '.huope.info',
4831                 '.thebdsmday.info',
4832                 '.zioprt.info',                 // 89.149.228.237
4833         ),
4834         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
4835                 '.boblisk.info',
4836                 '.factyri.info',
4837                 '.jorge1.info',
4838         ),
4839         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
4840                 '.bestmindstorm.org',
4841                 '.redstoreonline.org',
4842         ),
4843         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
4844                 '.8e8ae.net',
4845                 '.c-cock.com',
4846                 '.fa59eaf.com',
4847                 '.set-place.net',
4848                 '.sex-beauty.net',
4849         ),
4850         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
4851                 '.tomdir.info',
4852                 '.tomdirdirect.info',
4853                 '.tomdirworld.info',
4854                 '.treton.info',
4855                 '.trefas.info',
4856                 '.tretonmondo.info',
4857                 '.unefout.info',
4858                 '.unefoutprojet.info',
4859                 '.unitfree.info',
4860                 '.vilret.info',
4861                 '.vilttown.info',
4862                 '.votrefout.info',
4863                 '.warmfind.info',
4864                 '.warptop.info',
4865                 '.wildtram.info',
4866                 '.xofind.info',
4867                 '.xopdiscover.info',
4868                 '.xopfind.info',
4869                 '.xoplocate.info',
4870                 '.xopseek.info',
4871                 '.xpfirst.info',
4872                 '.xphighest.info',
4873                 '.xptop.info',
4874         ),
4875         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
4876                 '.myviagrasite.com',    // 80.74.153.2
4877                 '.thecanadianmeds.com', // 80.74.153.17
4878         ),
4879         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
4880                 '.bigemot.com',                         // 217.11.233.34, / not found
4881                 '.espharmacy.com',                      // 217.11.233.34
4882                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
4883                 '.ringtonecooler.com',          // 217.11.233.34
4884         ),
4885         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
4886                 '.okwit.com',           // 220.166.64.44
4887                 '.sakerver.com',        // 220.166.64.194
4888                 '.motewiki.net',        // 220.166.64.194
4889         ),
4890         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
4891                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
4892                 '.lookmedicine.info',           // 206.161.205.22
4893                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
4894                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
4895                 '.worldsitesearch.info',        // 209.8.40.59
4896         ),
4897         'lee.seery at gmail.com' => array(
4898                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
4899                 '.lingvol.com',         // 64.21.34.55
4900                 '.micevol.com',         // 64.21.34.55
4901                 '.heyhey.info',         // 64.21.34.55  by anonymous
4902         ),
4903         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
4904                 // 69-64-64-71.dedicated.abac.net
4905                 '.520-ard.info',
4906                 '.550bcards.info',
4907                 '.559-cads.info',
4908                 '.559caard.info',
4909                 '.565-caaard.info',
4910                 '.575cadr.info',
4911                 '.577cadrs.info',
4912                 '.590-acrds.info',
4913                 '.596-cadrs.info',
4914                 '.596caards.info',
4915                 '.596caaard.info',
4916                 '.asstablishingcads.info',
4917                 '.astablish-ard.info',
4918                 '.astablishcacrds.info',
4919                 '.begginers-acards.info',
4920                 '.begginersacrds.info',
4921                 '.beggingcaaard.info',
4922                 '.beginercacrds.info',
4923                 '.cacrdscreating.info',
4924                 '.caditbegging.info',
4925                 '.cadr-buildup.info',
4926                 '.cadr-establilsh.info',
4927                 '.cadrs-buildercredit.info',
4928                 '.cadrs570.info',
4929                 '.cads-565.info',
4930
4931                 // 69-64-64-113.dedicated.abac.net
4932                 '.interistacards.info',
4933                 '.intrust-ards.info',
4934                 '.intrustacrds.info',
4935                 '.lfixed-ard.info',
4936                 '.lowerate-ard.info',
4937                 '.lowpercentage-ard.info',
4938                 '.lowpercentageacrd.info',
4939         ),
4940         'acua at mail.ru' => array(
4941
4942                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
4943                 '.dns4babka.info',      // by acua at mail.ru
4944                         // by webmaster at dns4babka.info
4945                         '.credh.cn',
4946                         '.fucfv.cn',
4947                         '.gdxnk.cn',
4948                         '.sqrrt.cn',
4949                         '.ywtmd.cn',
4950                         '.kncqy.cn',    // by webmaster at allmyns.info
4951
4952                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
4953                 '.dedka2ns.info',       // by acua at mail.ru
4954                         // by webmaster at dedka2ns.info
4955                         '.ascpo.cn',
4956                         '.jgycr.cn',
4957                         '.nqdtt.cn',
4958                         '.oswde.cn',
4959                         '.qeyig.cn',
4960                         '.soqsx.cn',
4961                         '.ukncd.cn',
4962                         '.zijgb.cn',
4963
4964                 // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
4965                 '.dns4dedka.info',      // by acua at mail.ru
4966                         // by webmaster at dns4dedka.info
4967                         '.bcpnb.cn',
4968                         '.cfbpr.cn',
4969                         '.dnndb.cn',
4970                         '.ekwme.cn',
4971                         '.iutps.cn',
4972                         '.ryftj.cn',
4973                         '.vxqcb.cn',
4974                         '.zxvlr.cn',    // by webmaster at allmyns.info
4975
4976                 // by dig at dns4dedka.info
4977                 '.bdnge.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
4978                 '.dcdsu.cn',    // 217.20.112.102(*.internetserviceteam.com)
4979                 '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
4980                 '.frvdv.cn',    // 84.16.226.28(*snip*)
4981                 '.heulw.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
4982                 '.hissw.cn',    // 84.16.249.240(*snip*)
4983                 '.lwqjr.cn',    // 84.16.255.253(*snip*)
4984                 '.obwew.cn',    // 84.16.251.218(*.internetserviceteam.com)
4985                 '.otkiu.cn',    // 84.16.255.254(*.internetserviceteam.com)
4986                 '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
4987                 '.rgjcs.cn',    // 84.16.251.219(*.internetserviceteam.com)
4988                 '.rjskp.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
4989                 '.sokrp.cn',    // 84.16.226.217(*snip*)
4990                 '.ubtnp.cn',    // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de)
4991                 '.vdecc.cn',    // 84.16.226.29(*snip*)
4992                 '.vgkkc.cn',    // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
4993                 '.vqsmy.cn',    // 84.16.249.239(*snip*)
4994                 '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
4995                 '.xiuky.cn',    // 84.16.251.222(*snip*)
4996                 '.xrqcd.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
4997
4998                 // by la at dns4dedka.info
4999                 '.aeyzf.cn',    // 84.16.251.218(*snip*)
5000                 '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
5001                 '.bgslu.cn',    // 89.149.228.163(*snip*)
5002                 '.dxouw.cn',    // 84.16.255.253(*snip*)
5003                 '.ecsbe.cn',    // 84.16.251.218(*snip*)
5004                 '.eothy.cn',    // 84.16.249.241(*snip*)
5005                 '.epocy.cn',    // 84.16.251.220(*.internetserviceteam.com)
5006                 '.ewvjw.cn',    // 89.149.196.72(*snip*)
5007                 '.faacz.cn',    // 84.16.251.222(*snip*)
5008                 '.filun.cn',    // 89.149.196.72(*snip*)
5009                 '.fzdpk.cn',    // 84.16.249.239(*snip*)
5010                 '.hatyg.cn',    // 84.16.251.223(*snip*)
5011                 '.hmtqn.cn',    // 84.16.249.240(*snip*)
5012                 '.ibfte.cn',    // 89.149.196.19(*snip*)
5013                 '.jcaym.cn',    // 84.16.249.240(*snip*)
5014                 '.iqzaw.cn',    // 84.16.255.254(*snip*)
5015                 '.jclsf.cn',    // 84.16.249.240(*snip*)
5016                 '.jefdh.cn',    // 84.16.249.240(*snip*)
5017                 '.kchjh.cn',    // 84.16.251.219(*snip*)
5018                 '.krumo.cn',    // 84.16.226.217(*snip*)
5019                 '.lbava.cn',    // 217.20.112.102(*snip*)
5020                 '.mqrtw.cn',    // 84.16.226.29(*snip*)
5021                 '.njpgv.cn',    // 84.16.251.219(*snip*)
5022                 '.npovm.cn',    // 84.16.226.28(*snip*)
5023                 '.nyobt.cn',    // 89.149.196.19(*snip*)
5024                 '.ovxxt.cn',    // 84.16.251.223(*snip*)
5025                 '.owhwz.cn',    // 89.149.228.163(*snip*)
5026                 '.ozjyi.cn',    // 84.16.249.241(*snip*)
5027                 '.pfnzj.cn',    // 84.16.226.217(*snip*)
5028                 '.pixvf.cn',    // 84.16.255.254(*snip*)
5029                 '.qydph.cn',    // 89.149.228.163(*snip*)
5030                 '.rxens.cn',    // 89.149.196.72(*snip*)
5031                 '.sojbp.cn',    // 84.16.249.239(*snip*)
5032                 '.srths.cn',    // 84.16.251.222(*snip*)
5033                 '.tdytc.cn',    // 84.16.255.254(*snip*)
5034                 '.unquz.cn',    // 84.16.251.223(*snip*)
5035                 '.uwcns.cn',    // 89.149.196.19(*snip*)
5036                 '.vcbdm.cn',    // 84.16.251.220(*snip*)
5037                 '.wnmat.cn',    // 84.16.255.253(*snip*)
5038                 '.wttmr.cn',    // 84.16.226.29(*snip*)
5039                 '.xpwib.cn',    // 84.16.251.220(*snip*)
5040                 '.yrogt.cn',    // 84.16.249.239(*snip*)
5041
5042                 // by le at dns4dedka.info
5043                 '.goslw.cn',    // 84.16.251.220(*snip*)
5044                 '.hqbmh.cn',    // 84.16.251.223(*snip*)
5045                 '.iewik.cn',    // 84.16.255.254(*snip*)
5046                 '.jnkeh.cn',    // 89.149.228.163(*snip*)
5047                 '.pifyp.cn',    // 89.149.228.163(*snip*)
5048                 '.nohyl.cn',    // 89.149.196.72(*snip*)
5049                 '.nvzvx.cn',    // 84.16.255.254(*snip*)
5050                 '.uchoe.cn',    // 84.16.249.239(*snip*)
5051                 '.ujoyf.cn',    // 84.16.251.218(*snip*)
5052                 '.ulfqh.cn',    // 89.149.196.19(*snip*)
5053                 '.vxugv.cn',    // 84.16.251.223(*snip*)
5054
5055                 '.dbgti.cn',    // 84.16.249.240(*snip*)
5056                 '.oelmv.cn',    // 84.16.226.28(*snip*)
5057                 '.qniww.cn',    // 84.16.251.218(*snip*)
5058                 '.vtvyq.cn',    // 84.16.251.219(*snip*)
5059                 '.zqonm.cn',    // 84.16.249.241(*snip*)
5060
5061                 '.allmyns.info',        // 84.16.226.29 by acua at mail.ru, / forbidden
5062                         // by webmaster at allmyns.info
5063                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
5064                         '.ihpvy.cn',    // 84.16.226.28(*snip*)
5065                         '.lbtuo.cn',    // 84.16.255.254(*snip*)
5066                         '.liunc.cn',    // 84.16.249.241(*snip*)
5067                         '.rcyqr.cn',    // 84.16.226.217(*snip*)
5068                         '.rekth.cn',    // 89.149.196.19(*snip*)
5069                         '.riumh.cn',    // 84.16.226.28(*snip*)
5070                         '.zbtym.cn',    // 84.16.251.219(*snip*)
5071                         '.zjcgx.cn',    // 217.20.112.102(*snip*)
5072         ),
5073         'gilvcta sy jilbertsbram.com' => array(
5074                 '.dsfljkeilm1.cn',      //  206.53.51.126
5075                 '.dsfljkeilm2.cn',      //  206.53.51.126
5076                 '.dsfljkeilm3.cn',      // IP not allocated now
5077                 '.dsfljkeilm4.cn',      // IP not allocated now
5078                 '.dsfljkeilm5.cn',      // IP not allocated now
5079                 '.dsfljkeilm6.cn',      // IP not allocated now
5080                 '.dsfljkeilm7.cn',      // IP not allocated now
5081                 '.dsfljkeilm8.cn',      // IP not allocated now
5082                 '.dsfljkeilm9.cn',      // IP not allocated now
5083                 '.dsfljkeilm10.cn',     // IP not allocated now
5084         ),
5085         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
5086
5087                 // 69.64.82.76(*.dedicated.abac.net)
5088                 '.bruised-criedit.info',
5089                 '.bruised-crtedit.info',
5090                 '.bruised-czrd.info',
5091                 '.bruisedcreditcars.info',
5092                 '.bruisedcreitcard.info',
5093                 '.bruisedcreitd.info',
5094                 '.buliderscreadet.info',
5095                 '.cleaningup-cdit.info',
5096                 '.cleaningup-cedict.info',
5097                 '.cleaningup-cerdic.info',
5098                 '.cleanup-crrd.info',
5099
5100                 // 69.64.82.77(*.dedicated.abac.net)
5101                 '.bruised-crediot.info',
5102                 '.bruised-credtid.info',
5103                 '.bruisedcriet.info',
5104                 '.bruisedredit.info',
5105                 '.buliders-crdt.info',
5106                 '.buliders-cre4dit.info',
5107                 '.buliders-creadt.info',
5108                 '.buliders-credcards.info',
5109                 '.buliders-credictcard.info',
5110                 '.cleaningupccreditcards.info',
5111                 '.cleaningupcdedit.info',
5112                 '.cleaningupcedirt.info',
5113                 '.cleaningupceidt.info',
5114                 '.cleaningupcrasd.info',
5115                 '.cleaningupcreait.info',
5116
5117                 // 69.64.82.78(*.dedicated.abac.net)
5118                 '.bruised-cridet.info',
5119                 '.bruised-drecit.info',
5120                 '.bruised-reditcards.info',
5121                 '.bruisedcredikt.info',
5122                 '.bruisedcredith.info',
5123                 '.bruisedcredtid.info',
5124                 '.cleanup-criet.info',
5125                 '.cleanup-csrds.info',
5126                 '.cleanup-dards.info',
5127
5128                 // 69.64.82.79(*.dedicated.abac.net)
5129                 '.bruised-crediotcards.info',
5130                 '.bruised-creditcar.info',
5131                 '.bruised-creid.info',
5132                 '.bruised-creidtcard.info',
5133                 '.buliders-crdit.info',
5134                 '.buliders-creadet.info',
5135                 '.cleaningup-ceridt.info',
5136                 '.cleaningupcrecit.info',
5137                 '.cleaningupccritcard.info',
5138                 '.cleanupdredit.info',
5139                 '.cleanupredit.info',
5140         ),
5141         '.malwarealarm.com',
5142                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
5143                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
5144                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
5145         '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated)
5146         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated)
5147         'Inet-Traffic.com' => array(
5148                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
5149                 //'.dcomm.com',         // by D Communications Inc. S.A.
5150
5151                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
5152                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5153                 // ...
5154                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
5155                 // ...
5156                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
5157                 // ...
5158                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
5159                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
5160                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
5161                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
5162                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
5163                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
5164                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
5165                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
5166                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
5167                 // ...
5168                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
5169                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
5170                 // ...
5171                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
5172                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
5173                 // ...
5174                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
5175                 // ...
5176                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5177                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
5178                 // ...
5179                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
5180         ),
5181         'andreyletov at yahoo.com' => array(
5182                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
5183                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
5184                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
5185         ),
5186         'alrusnac at hotmail.com' => array(
5187                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
5188                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
5189         ),
5190         '203.116.63.123' => array(
5191                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
5192                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
5193         ),
5194         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
5195                 '.autotowncar.cn',              // 69.73.146.184
5196                 '.badgirlhome.cn',              // 69.73.146.186
5197         ),
5198         'Wmp.co.jp' => array(
5199                 // 219.94.134.208, ns *.dns.ne.jp, adult
5200                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
5201                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
5202                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
5203         ),
5204         'Macherie.tv' => array(
5205                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
5206                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
5207                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
5208         ),
5209         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
5210                 '.yemine.info',
5211                 '.fr4f3ds.info',
5212         ),
5213         '66.232.112.175' => array(
5214                 '.catybe.cn',           // by abuse-here at inbox.ru
5215                 '.faweji.cn',           // by entretov-86 at ftunez.org
5216                 '.jytame.cn',           // by abuse-here at inbox.ru
5217                 '.wygete.cn',           // by abuse-here at inbox.ru
5218         ),
5219
5220         // C-2: Lonely domains (buddies not found yet)
5221         '.0721-4404.com',
5222         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
5223         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
5224         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
5225         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
5226         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
5227         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
5228         '.0annie.info',
5229         '.6i6.de',
5230         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
5231         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
5232         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
5233         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
5234         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
5235         '.allworlddirect.info', // Forbidden
5236         '.amoreitsex.com',
5237         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
5238         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
5239         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
5240         '.auto-car-cheap.org',
5241         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
5242         '.baurish.info',
5243         '.bestop.name',
5244         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
5245         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
5246         '.bestshopfinder.info',
5247         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
5248         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
5249         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
5250         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
5251         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
5252         '.catkittenmagazines.org',              // 87.118.97.117
5253         '.covertarena.co.uk',   // by Wayne Huxtable
5254         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
5255         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
5256         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
5257         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
5258         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
5259         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
5260         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
5261         '.easyshopusa.com',             // by riter (riter at nm.ru)
5262         '.edu.ph',                              // "philippine network foundation inc"
5263         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
5264         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
5265         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
5266         '.fastppc.info',                // by peter conor (fastppc at msn.com)
5267         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
5268         '*.filthserver.com',    // sales at onlinemarketingservices.biz
5269         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
5270         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
5271         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
5272         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
5273         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
5274         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
5275         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
5276         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
5277         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
5278         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
5279         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
5280         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
5281
5282         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
5283
5284         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
5285         '.gm-exchange.jp',              // 210.188.216.49 RMT
5286         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
5287         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
5288         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
5289         '.greatbestwestern.org',// by gao.wungao at gmail.com
5290         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
5291         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
5292         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
5293         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
5294         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
5295         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
5296         '.hostuju.cz',                  // ns banan.cz, banan.it
5297         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
5298         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
5299         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
5300         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
5301         '.infocart.jp',                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
5302         '.infradoc.com',
5303         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
5304         '.ismarket.com',                // Google-hiding. intercage.com related IP
5305         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
5306         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
5307         '.itsexosit.net',
5308         '.itxxxit.net',
5309         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
5310         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
5311         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
5312         '.kingtools.de',
5313         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
5314         '.leucainfo.com',
5315         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
5316         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
5317         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
5318         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
5319         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
5320         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
5321         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
5322         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
5323         '.megvideochatlive.info',       // Bad seo
5324         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
5325         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
5326         '.myfgj.info',                  // by Filus (softscript at gmail.com)
5327         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
5328         '.mxsupportmailer.com',
5329         '.next-moneylife.com',  // RMT
5330         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
5331         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
5332         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
5333         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
5334         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
5335         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
5336         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
5337         '.onlineviagra.de',
5338         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
5339         '.ozomw.info',
5340         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
5341         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
5342         '.perevozka777.ru',             // by witalik at gmail.com
5343         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
5344         '.pills-storage.com',   // by
5345         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
5346         '.popki.ind.in',                        // by Aleksandr Krasnik (supermaster at pisem.net)
5347         '.porkyhost.com',               // 79965 at whois.gkg.net
5348         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
5349         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
5350         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
5351         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
5352         '.prama.info',                  // by Juan.Kang at mytrashmail.com
5353         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
5354         '.qoclick.net',                 // by DMITRIY SOLDATENKO
5355         '.quality-teen-porn-photo.com', // by info at densa.info
5356         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
5357         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
5358         '.rigame.info',                 // by debra_jordan07 at yahoo.com
5359         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
5360         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
5361         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
5362         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
5363         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
5364         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
5365         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
5366         '.sexamoreit.com',
5367         '.sexforit.com',
5368         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
5369         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
5370         '.sirlook.com',
5371         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
5372         '.sepcn.info',                  // / not found
5373         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
5374         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
5375         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
5376         '.superverizonringtones.com',   // by joshua at list.ru
5377         '.thehostcity.com',             // Domains by Proxy
5378         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
5379         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
5380         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
5381         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
5382         '.topmeds10.com',
5383         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
5384         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
5385         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
5386         '.unctad.net',                  // by gfdogfd at lovespb.com
5387         '.vacant.org.uk',
5388         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
5389         '.virtualsystem.de',
5390         '.vdxhost.com',
5391         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
5392         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
5393         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
5394         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
5395         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
5396         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
5397         '.whoop.to',                    // RMT
5398         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
5399         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
5400         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
5401         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
5402         '.wwwna.info',                  // / 404 Not Found
5403         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
5404         '.xamorexxx.net',
5405         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
5406         '.xsessox.com',
5407         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
5408         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
5409         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
5410         '.zyguo.info',                  // ns globoxhost.net
5411         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
5412
5413         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
5414         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
5415         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
5416
5417         '.masserch.info',               // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com) "Free Web Hosting" by sqr at bk.ru, spam
5418         '.viagrabuycheap.info', // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...), ns *.advernsserver.com
5419
5420         '.chatwalker.com',              // 124.32.230.65
5421         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
5422         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
5423
5424         '.mncxvsm.info',                // 217.11.233.105, / blank
5425
5426         // C-3: Not classifiable (information wanted)
5427         //
5428         // Something incoming to pukiwiki related sites
5429         'nana.co.il related' => array(
5430                 '.planetnana.co.il',
5431                 '.nana.co.il',
5432         ),
5433 );
5434
5435 // --------------------------------------------------
5436
5437 $blocklist['D'] = array(
5438         // D: Sample setting of
5439         // "Third party in good faith"s
5440         //
5441         // Hosts shown inside of the implanted contents,
5442         // not used via spam, but maybe useful to detect these contents
5443         //
5444         // 'RESERVED',
5445 );
5446
5447 // --------------------------------------------------
5448
5449 $blocklist['E'] = array(
5450         // E: Sample setting of
5451         // Promoters
5452         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
5453         //  Ads, Business promotions)
5454         //
5455         // They often promotes near you. They may promote each other by articles, links, tools
5456
5457         '15-Mail.com related' => array(
5458                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
5459                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5460                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5461                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
5462                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
5463         ),
5464         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
5465         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
5466         'E-brainers.com related' => array(
5467                 // 202.212.14.101
5468                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
5469                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
5470                 '.my-tune.jp',                                  // by brainers Inc.
5471                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
5472                 '.weekle.jp',                                   // by brainers Inc.
5473
5474                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
5475                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
5476                 '.3minutes-marketing-club.com', // by Fujio
5477                 '.affiliate-vampire.com',               // by Masatoshi
5478                 '.article-site-power-package.com',      // by Masatoshi
5479                 '.audio-marketing-club.com',    // by Fujio
5480                 '.brainers-task-manager.com',   // by Masatoshi
5481                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
5482                 '.brainersbuzz.com',                    // by Masatoshi
5483                 '.den4renz-marketing-club.com', // by Fujio
5484                 '.english-contents-club.com',   // by Masatoshi
5485                 '.fly-in-ads-japan.com',                // by Fujio
5486                 '.free-resalerights-giveaway.com',      // by Fujio
5487                 '.freegiveawaysecret.com',              // by Masatoshi
5488                 '.guaranteedvisitorpro.com',    // by Masatoshi
5489                 '.havads-japan.com',                    // by Masatoshi
5490                 '.info-business123.com',                // by Fujio
5491                 '.instant-marketing-club.com',  // by Fujio
5492                 '.internetmarketinggorinjyu.com',       // by Masatoshi
5493                 '.marketing-force-japan.com',   // by Fujio
5494                 '.masatoshikobayashi.com',              // by Fujio
5495                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
5496                 '.replytomatt.com',                             // by Fujio
5497                 '.santa-deal.com',                              // by Fujio
5498                 '.santa-deal-summer.com',               // by Fujio
5499                 '.scratch-card-factory.com',    // by Masatoshi
5500                 '.script4you-japan.com',                // by Fujio
5501                 '.sell1000000dollarinjapan.com',// by Fujio
5502                 '.squeeze-page-secret.com',             // by Masatoshi
5503                 '.viral-blog-square.com',               // by Fujio
5504                 '.viralarticle.com',                    // by Fujio
5505                 '.wowhoken.com',                                // by Fujio
5506
5507                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
5508                 '.brainerstelevision.com',
5509                 '.demosite4you.com',
5510                 '.keywordcatcherpro.com',
5511                 '.script-marketing-club.com',
5512
5513                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
5514                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
5515                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
5516                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
5517                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
5518                 '.brainerscode.com',    // by akada
5519                 '.brainerslive.com',    // by domain
5520                 '.brainersreview.com',  // by domain
5521                 '.brainerstest.com',    // by akada
5522                 '.otosecret.com',               // by domain
5523                 '.ultimate-marketing-weapon.com',       // by akada
5524                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
5525                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
5526
5527                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
5528                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
5529         ),
5530         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
5531         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
5532         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
5533         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
5534                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
5535                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
5536                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
5537
5538                 // Redirects and affiliates:
5539                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
5540                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
5541                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
5542                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
5543                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
5544                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
5545                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
5546                 //   ...
5547
5548                 // Other suggestions:
5549                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
5550
5551                 // Blog posting at the same time
5552                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
5553                 //   2007/06/13 e123.info/archives/76
5554                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
5555                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
5556                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
5557         ),
5558         'info at kobeweb.jp' => array(
5559                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
5560                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
5561                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
5562         ),
5563         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
5564         'Infocart.jp' => array(         // by wai at infocart.jp
5565                 //inetnum:      60.32.154.168 - 60.32.154.175
5566                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
5567                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
5568
5569                 //inetnum:      60.32.154.176 - 60.32.154.183
5570                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
5571                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
5572         ),
5573         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
5574         'JunSuzuki.com' => array(       // e-brainers.com related
5575                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
5576                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
5577         ),
5578         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
5579                 '.11kanji.com',         // 211.10.131.88
5580                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
5581                 '.point-park.com',      // 211.10.131.88
5582                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
5583         ),
5584         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
5585         '.sedori-data.com',             //
5586         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
5587         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
5588                 '.e123.info',
5589                 '.ialchemist.net',
5590                 '.j012.net',
5591                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
5592         ),
5593         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
5594 );
5595
5596 // --------------------------------------------------
5597
5598 $blocklist['Z'] = array(
5599         // Z: Yours
5600         //
5601         //'',
5602         //'',
5603         //'',
5604 );
5605
5606 ?>