spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.185 2007/12/15 06:32:48 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //'desperadoes.biz',                    // YEAR OF THE CAT, PukiWiki skin designer
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 177         'amoo.org',
 178         'web.archive.org',              ///web/2
 179         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 180                 'jmp2.net',
 181                 '2me.tw',
 182         ),
 183         'ataja.es',
 184         'ATBHost.com' => array(
 185                 '*.atbhost.com',
 186                 '*.bzhost.net',
 187         ),
 188         'atk.jp',
 189         'clearp.ath.cx',
 190         'athomebiz.com',
 191         'aukcje1.pl',
 192         'beam.to',
 193         'beermapping.com',
 194         'besturl.in',
 195         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 196         'biglnk.com',
 197         'bingr.com',
 198         'bittyurl.com',
 199         '*.bizz.cc',
 200         '*.blo.pl',
 201         '*.bo.pl',
 202         'briefurl.com',
 203         'brokenscript.com',
 204         'BucksoGen.com' => array(
 205                 '*.bucksogen.com',
 206                 '*.bulochka.org',
 207                 '*.korzhik.org',
 208                 '*.kovrizhka.org',
 209                 '*.pirozhok.org',
 210                 '*.plushka.org',
 211                 '*.pryanik.org',
 212                 '*.sushka.org',
 213         ),
 214         'budgethosts.org',
 215         'budu.com',                             // by peter.eder at imcworld.com
 216         '*.buzznet.com',
 217         '*.bydl.com',
 218         'C-O.IN' => array(
 219                 '*.c-o.cc',
 220                 '*.c-o.in',
 221                 '*.coz.in',
 222                 '*.cq.bz',
 223         ),
 224         'c64.ch',
 225         'c711.com',
 226         '*.cej.pl',
 227         'checkasite.net',
 228         'url.chefhost.com',
 229         '*.chicappa.jp',
 230         'chilicity.com',
 231         'big5.china.com',               ///gate/big5/
 232         'chopurl.com',
 233         'christopherleestreet.com',
 234         'cintcm.com',
 235         '*.cjb.net',
 236         'clipurl.com',
 237         '*.co.nr',
 238         'Comtech Enterprises ' => array(        // comteche.com
 239                 'tinyurl.name',
 240                 'tinyurl.us',
 241         ),
 242         'Cool168.com' => array(
 243                 '*.cool158.com',
 244                 '*.cool168.com',
 245                 '*.ko168.com',
 246                 '*.ko188.com',
 247         ),
 248         'Coolurl.de' => array(
 249                 'coolurl.de',
 250                 'dornenboy.de',
 251                 'eyeqweb.com',
 252                 'hardcore-porn.de',
 253                 'maschinen-bluten-nicht.de',
 254         ),
 255         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 256         'cutalink.com',
 257         '*.da.cx',
 258         '*.da.ru',
 259         'dae2.com',
 260         'dephine.org',
 261         'desiurl.com',
 262         'dhurl.com',
 263         'digbig.com',
 264         'Digipills.com' => array(
 265                 '*.digipills.com',
 266                 'minilien.com',
 267                 'tinylink.com',
 268         ),
 269         '*.discutbb.com',
 270         'DL.AM' => array(
 271                 '*.cx.la',
 272                 '*.dl.am',
 273         ),
 274         '*.dl.pl',
 275         '*.dmdns.com',
 276         'doiop.com',
 277         'drlinky.com',
 278         'durl.us',
 279         '*.dvdonly.ru',
 280         '*.dynu.ca',
 281         'dwarf.name',
 282         '*.eadf.com',
 283         'easyURL.net' => array(
 284                 '*.easyurl.net',
 285                 '.goshrink.com',
 286                 'ushrink.com',
 287         ),
 288         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 289                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 290                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 291                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 292                 //   "Keep continuing to seek originality and contribute it to local,
 293                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 294                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 295                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 296                 // I'm so much impressed of the situation around this imported one today.
 297         'elfurl.com',
 298         'eny.pl',
 299         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 300                 '.mywiitime.com',
 301                 '.surfindark.com',              // webmaster at etechfocus.com
 302                 '.surfinshade.com',
 303                 '.surfinshadow.com',
 304                 '.surfinwind.com',
 305                 '.topsecretlive.com',
 306         ),
 307         '*.eu.org',
 308         'F2B.be' => array(
 309                 '*.f2b.be',
 310                 '*.freakz.eu',
 311                 '*.n0.be',
 312                 '*.n3t.nl',
 313                 '*.short.be',
 314                 '*.ssr.be',
 315                 '*.tweaker.eu',
 316         ),
 317         '*.fancyurl.com',
 318         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 319                 'blue11.jp',
 320                 'fanznet.com',
 321                 'katou.in',
 322                 'mymap.in',
 323                 'saitou.in',
 324                 'satou.in',
 325                 'susan.in',
 326         ),
 327         '.fe.pl',                       // Redirection and subdomain
 328         'ffwd.to',
 329         'url.fibiger.org',
 330         'FireMe.to' => array(
 331                 'fireme.to',
 332                 'nextdoor.to',
 333                 'ontheway.to',
 334         ),
 335         'flingk.com',
 336         'flog.jp',                      // careless redirector and bbs
 337         'fm7.biz',
 338         'fnbi.jp',
 339         '*.fnbi.jp',
 340         'forgeturl.com',
 341         '*.free.bg',
 342         'Freeservers.com' => array(     // United Online Web Services, Inc.
 343                 '*.4mg.com',
 344                 '*.4t.com',
 345                 '*.8m.com',
 346                 '*.8m.net',
 347                 '*.8k.com',
 348                 '*.faithweb.com',
 349                 '*.freehosting.net',
 350                 '*.freeservers.com',
 351                 '*.gq.nu',
 352                 '*.htmlplanet.com',
 353                 '*.itgo.com',
 354                 '*.iwarp.com',
 355                 '*.s5.com',
 356                 '*.scriptmania.com',
 357                 '*.tvheaven.com',
 358         ),
 359         '*.freewebpages.com',
 360         'FreeWebServices.net' => array( // Host Department LLC
 361                 '*.about.gs',   // Dead?
 362                 '*.about.tc',
 363                 '*.about.vg',
 364                 '*.aboutus.gs',
 365                 '*.aboutus.ms',
 366                 '*.aboutus.tc',
 367                 '*.aboutus.vg',
 368                 '*.biografi.biz',
 369                 '*.biografi.info',
 370                 '*.biografi.org',
 371                 '*.biografi.us',
 372                 '*.datadiri.biz',
 373                 '*.datadiri.cc',
 374                 '*.datadiri.com',
 375                 '*.datadiri.info',
 376                 '*.datadiri.net',
 377                 '*.datadiri.org',
 378                 '*.datadiri.tv',
 379                 '*.datadiri.us',
 380                 '*.ecv.gs',
 381                 '*.ecv.ms',
 382                 '*.ecv.tc',
 383                 '*.ecv.vg',
 384                 '*.eprofile.us',
 385                 '*.go2net.ws',
 386                 '*.hits.io',
 387                 '*.hostingweb.us',
 388                 '*.hub.io',
 389                 '*.indo.bz',
 390                 '*.indo.cc',
 391                 '*.indo.gs',
 392                 '*.indo.ms',
 393                 '*.indo.tc',
 394                 '*.indo.vg',
 395                 '*.infinitehosting.net',
 396                 '*.infinites.net',
 397                 '*.lan.io',
 398                 '*.max.io',
 399                 '*.mycv.bz',
 400                 '*.mycv.nu',
 401                 '*.mycv.tv',
 402                 '*.myweb.io',
 403                 '*.ourprofile.biz',
 404                 '*.ourprofile.info',
 405                 '*.ourprofile.net',     // Dead?
 406                 '*.ourprofile.org',
 407                 '*.ourprofile.us',
 408                 '*.profil.bz',
 409                 '*.profil.cc',
 410                 '*.profil.cn',
 411                 '*.profil.gs',
 412                 '*.profil.in',
 413                 '*.profil.ms',
 414                 '*.profil.tc',
 415                 '*.profil.tv',
 416                 '*.profil.vg',  // ?
 417                 '*.site.io',
 418                 '*.wan.io',
 419                 '*.web-cam.ws',
 420                 '*.webs.io',
 421                 '*.zip.io',
 422         ),
 423         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 424         '*.fx.to',
 425         'fyad.org',
 426         'fype.com',
 427         'gentleurl.net',
 428         'Get2.us' => array(
 429                 '*.get2.us',
 430                 '*.hasballs.com',
 431                 '*.ismyidol.com',
 432                 '*.spotted.us',
 433                 '*.went2.us',
 434                 '*.wentto.us',
 435         ),
 436         'glinki.com',
 437         '*.globalredirect.com',
 438         'gnu.vu',
 439         '*.go.cc',
 440         //'Google.com' => array(
 441         //              google.com/translate_c\?u=(?:http://)?
 442         //),
 443         'goonlink.com',
 444         '.gourl.org',
 445         '.greatitem.com',
 446         'gzurl.com',
 447         'url.grillsportverein.de',
 448         'Harudake.net' => array('*.hyu.jp'),
 449         'Hattinger Linux User Group' => array('short.hatlug.de'),
 450         'Hexten.net' => array('lyxus.net'),
 451         'here.is',
 452         'HispaVista.com' => array(
 453                 '*.blogdiario.com',
 454                 '*.hispavista.com',
 455                 '.galeon.com',
 456         ),
 457         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 458                 '*.8l.pl',
 459                 '*.blg.pl',
 460                 '*.czytajto.pl',
 461                 '*.ryj.pl',
 462                 '*.xit.pl',
 463                 '*.xlc.pl',
 464                 '*.hk.pl',
 465                 '*.home.pl',
 466                 '*.of.pl',
 467         ),
 468         'hort.net',
 469         'free4.hostrocket.com',
 470         '*.hotindex.ru',
 471         'HotRedirect.com' => array(
 472                 '*.coolhere.com',
 473                 '*.homepagehere.com',
 474                 '*.hothere.com',
 475                 '*.mustbehere.com',
 476                 '*.onlyhere.net',
 477                 '*.pagehere.com',
 478                 '*.surfhere.net',
 479                 '*.zonehere.com',
 480         ),
 481         'hotshorturl.com',
 482         'hotwebcomics.com',     ///search_redirect.php
 483         'hurl.to',
 484         '*.hux.de',
 485         '*.i89.us',
 486         'iat.net',                      // 74.208.58.130 by Tony Carter
 487         'ibm.com',                      ///links (Correct it)
 488         '*.iceglow.com',
 489         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 490         'Ideas para Nuevos Mercados SL' => array(
 491                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 492                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 493                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 494                 // by edgar bortolin (oscar at i4nm.com)
 495                 // by Edgar Bortolin  (oscar at i4nm.com)
 496                 // by oscar florez (oscar at i4nm.com)
 497                 // by Oscar Florez (oscar at red-es.com)
 498                 // by covadonga del valle (oscar at i4nm.com)
 499                 '*.ar.gd',
 500                 '*.ar.gs',      // ns *.nora.net
 501                 '*.ar.kz',      // by oscar
 502                 '*.ar.nu',      // by Edgar
 503                 '*.ar.tc',      // by oscar
 504                 '*.ar.vg',      // by oscar
 505                 '*.bo.kz',      // by oscar
 506                 '*.bo.nu',      // by covadonga
 507                 '*.bo.tc',      // by oscar
 508                 '*.bo.tf',      // by Oscar
 509                 '*.bo.vg',      // by oscar
 510                 '*.br.gd',
 511                 '*.br.gs',      // ns *.nora.net
 512                 '*.br.nu',      // by edgar
 513                 '*.br.vg',      // by oscar
 514                 '*.ca.gs',      // by oscar
 515                 '*.ca.kz',      // by oscar
 516                 '*.cl.gd',      // by oscar
 517                 '*.cl.kz',      // by oscar
 518                 '*.cl.nu',      // by edgar
 519                 '*.cl.tc',      // by oscar
 520                 '*.cl.tf',      // by Oscar
 521                 '*.cl.vg',      // by oscar
 522                 '*.col.nu',     // by Edgar
 523                 '*.cr.gs',      // ns *.nora.net
 524                 '*.cr.kz',      // by oscar
 525                 '*.cr.nu',      // by edgar
 526                 '*.cr.tc',      // by oscar
 527                 '*.cu.tc',      // by oscar
 528                 '*.do.kz',      // by oscar
 529                 '*.do.nu',      // by edgar
 530                 '*.ec.kz',      // by edgar
 531                 '*.ec.nu',      // by Edgar
 532                 '*.ec.tf',      // by Oscar
 533                 '*.es.kz',      // by oscar
 534                 '*.eu.kz',      // by oscar
 535                 '*.gt.gs',      // ns *.nora.net
 536                 '*.gt.tc',      // by oscar
 537                 '*.gt.tf',      // by Oscar
 538                 '*.gt.vg',      // by Oscar
 539                 '*.hn.gs',      // ns *.nora.net
 540                 '*.hn.tc',      // by oscar
 541                 '*.hn.tf',      // by Oscar
 542                 '*.hn.vg',      // by oscar
 543                 '*.mx.gd',
 544                 '*.mx.gs',      // ns *.nora.net
 545                 '*.mx.kz',      // by oscar
 546                 '*.mx.vg',      // by oscar
 547                 '*.ni.kz',      // by oscar
 548                 '*.pa.kz',      // by oscar
 549                 '*.pe.kz',      // by oscar
 550                 '*.pe.nu',      // by Edgar
 551                 '*.pr.kz',      // by oscar
 552                 '*.pr.nu',      // by edgar
 553                 '*.pt.gs',      // ns *.nora.net
 554                 '*.pt.kz',      // by edgar
 555                 '*.pt.nu',      // by edgar
 556                 '*.pt.tc',      // by oscar
 557                 '*.pt.tf',      // by Oscar
 558                 '*.py.gs',      // ns *.nora.net
 559                 '*.py.nu',      // by edgar
 560                 '*.py.tc',      // by oscar
 561                 '*.py.tf',      // by Oscar
 562                 '*.py.vg',      // by oscar
 563                 '*.sv.tc',      // by oscar
 564                 '*.usa.gs',     // ns *.nora.net
 565                 '*.uy.gs',      // ns *.nora.net
 566                 '*.uy.kz',      // by oscar
 567                 '*.uy.nu',      // by edgar
 568                 '*.uy.tc',      // by oscar
 569                 '*.uy.tf',      // by Oscar
 570                 '*.uy.vg',      // by oscar
 571                 '*.ve.gs',      // by oscar
 572                 '*.ve.tc',      // by oscar
 573                 '*.ve.tf',      // by Oscar
 574                 '*.ve.vg',      // by oscar
 575                 '*.ven.nu',     // by edgar
 576         ),
 577         'ie.to',
 578         'igoto.co.uk',
 579         'ilook.tw',
 580         'indianpad.com',                ///view/
 581         'iNetwork.co.il' => array(
 582                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 583                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 584                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 585         ),
 586         '*.infogami.com',
 587         'infotop.jp',
 588         'ipoo.org',
 589         'IR.pl' => array(
 590                 '*.aj.pl',
 591                 '*.aliasy.org',
 592                 '*.gu.pl',
 593                 '*.hu.pl',
 594                 '*.ir.pl',
 595                 '*.jo.pl',
 596                 '*.su.pl',
 597                 '*.td.pl',
 598                 '*.uk.pl',
 599                 '*.uy.pl',
 600                 '*.xa.pl',
 601                 '*.zj.pl',
 602         ),
 603         'irotator.com',
 604         '.iwebtool.com',
 605         'j6.bz',
 606         'jeeee.net',
 607         'Jaze Redirect Services' => array(
 608                 '*.arecool.net',
 609                 '*.iscool.net',
 610                 '*.isfun.net',
 611                 '*.tux.nu',
 612         ),
 613         '*.jed.pl',
 614         'JeremyJohnstone.com' => array('url.vg'),
 615         'jemurl.com',
 616         'jggj.net',
 617         'jpan.jp',
 618         'josh.nu',
 619         'kat.cc',
 620         'Kickme.to' => array(
 621                 '.1024bit.at',
 622                 '.128bit.at',
 623                 '.16bit.at',
 624                 '.256bit.at',
 625                 '.32bit.at',
 626                 '.512bit.at',
 627                 '.64bit.at',
 628                 '.8bit.at',
 629                 '.adores.it',
 630                 '.again.at',
 631                 '.allday.at',
 632                 '.alone.at',
 633                 '.altair.at',
 634                 '.american.at',
 635                 '.amiga500.at',
 636                 '.ammo.at',
 637                 '.amplifier.at',
 638                 '.amstrad.at',
 639                 '.anglican.at',
 640                 '.angry.at',
 641                 '.around.at',
 642                 '.arrange.at',
 643                 '.australian.at',
 644                 '.baptist.at',
 645                 '.basque.at',
 646                 '.battle.at',
 647                 '.bazooka.at',
 648                 '.berber.at',
 649                 '.blackhole.at',
 650                 '.booze.at',
 651                 '.bosnian.at',
 652                 '.brainiac.at',
 653                 '.brazilian.at',
 654                 '.bummer.at',
 655                 '.burn.at',
 656                 '.c-64.at',
 657                 '.catalonian.at',
 658                 '.catholic.at',
 659                 '.chapel.at',
 660                 '.chills.it',
 661                 '.christiandemocrats.at',
 662                 '.cname.at',
 663                 '.colors.at',
 664                 '.commodore.at',
 665                 '.commodore64.at',
 666                 '.communists.at',
 667                 '.conservatives.at',
 668                 '.conspiracy.at',
 669                 '.cooldude.at',
 670                 '.craves.it',
 671                 '.croatian.at',
 672                 '.cuteboy.at',
 673                 '.dancemix.at',
 674                 '.danceparty.at',
 675                 '.dances.it',
 676                 '.danish.at',
 677                 '.dealing.at',
 678                 '.deep.at',
 679                 '.democrats.at',
 680                 '.digs.it',
 681                 '.divxlinks.at',
 682                 '.divxmovies.at',
 683                 '.divxstuff.at',
 684                 '.dizzy.at',
 685                 '.does.it',
 686                 '.dork.at',
 687                 '.drives.it',
 688                 '.dutch.at',
 689                 '.dvdlinks.at',
 690                 '.dvdmovies.at',
 691                 '.dvdstuff.at',
 692                 '.emulators.at',
 693                 '.end.at',
 694                 '.english.at',
 695                 '.eniac.at',
 696                 '.error403.at',
 697                 '.error404.at',
 698                 '.evangelism.at',
 699                 '.exhibitionist.at',
 700                 '.faith.at',
 701                 '.fight.at',
 702                 '.finish.at',
 703                 '.finnish.at',
 704                 '.forward.at',
 705                 '.freebie.at',
 706                 '.freemp3.at',
 707                 '.french.at',
 708                 '.graduatejobs.at',
 709                 '.greenparty.at',
 710                 '.grunge.at',
 711                 '.hacked.at',
 712                 '.hang.at',
 713                 '.hangup.at',
 714                 '.has.it',
 715                 '.hide.at',
 716                 '.hindu.at',
 717                 '.htmlpage.at',
 718                 '.hungarian.at',
 719                 '.icelandic.at',
 720                 '.independents.at',
 721                 '.invisible.at',
 722                 '.is-chillin.it',
 723                 '.is-groovin.it',
 724                 '.japanese.at',
 725                 '.jive.at',
 726                 '.kickass.at',
 727                 '.kickme.to',
 728                 '.kindergarden.at',
 729                 '.knows.it',
 730                 '.kurd.at',
 731                 '.labour.at',
 732                 '.leech.at',
 733                 '.liberals.at',
 734                 '.linuxserver.at',
 735                 '.liqour.at',
 736                 '.lovez.it',
 737                 '.makes.it',
 738                 '.maxed.at',
 739                 '.means.it',
 740                 '.meltdown.at',
 741                 '.methodist.at',
 742                 '.microcomputers.at',
 743                 '.mingle.at',
 744                 '.mirror.at',
 745                 '.moan.at',
 746                 '.mormons.at',
 747                 '.musicmix.at',
 748                 '.nationalists.at',
 749                 '.needz.it',
 750                 '.nerds.at',
 751                 '.neuromancer.at',
 752                 '.newbie.at',
 753                 '.nicepage.at',
 754                 '.ninja.at',
 755                 '.norwegian.at',
 756                 '.ntserver.at',
 757                 '.owns.it',
 758                 '.paint.at',
 759                 '.palestinian.at',
 760                 '.phoneme.at',
 761                 '.phreaking.at',
 762                 '.playz.it',
 763                 '.polish.at',
 764                 '.popmusic.at',
 765                 '.portuguese.at',
 766                 '.powermac.at',
 767                 '.processor.at',
 768                 '.prospects.at',
 769                 '.protestant.at',
 770                 '.rapmusic.at',
 771                 '.raveparty.at',
 772                 '.reachme.at',
 773                 '.reads.it',
 774                 '.reboot.at',
 775                 '.relaxed.at',
 776                 '.republicans.at',
 777                 '.researcher.at',
 778                 '.reset.at',
 779                 '.resolve.at',
 780                 '.retrocomputers.at',
 781                 '.rockparty.at',
 782                 '.rocks.it',
 783                 '.rollover.at',
 784                 '.rough.at',
 785                 '.rules.it',
 786                 '.rumble.at',
 787                 '.russian.at',
 788                 '.says.it',
 789                 '.scared.at',
 790                 '.seikh.at',
 791                 '.serbian.at',
 792                 '.short.as',
 793                 '.shows.it',
 794                 '.silence.at',
 795                 '.simpler.at',
 796                 '.sinclair.at',
 797                 '.singz.it',
 798                 '.slowdown.at',
 799                 '.socialists.at',
 800                 '.spanish.at',
 801                 '.split.at',
 802                 '.stand.at',
 803                 '.stoned.at',
 804                 '.stumble.at',
 805                 '.supercomputer.at',
 806                 '.surfs.it',
 807                 '.swedish.at',
 808                 '.swims.it',
 809                 '.synagogue.at',
 810                 '.syntax.at',
 811                 '.syntaxerror.at',
 812                 '.techie.at',
 813                 '.temple.at',
 814                 '.thinkbig.at',
 815                 '.thirsty.at',
 816                 '.throw.at',
 817                 '.toplist.at',
 818                 '.trekkie.at',
 819                 '.trouble.at',
 820                 '.turkish.at',
 821                 '.unexplained.at',
 822                 '.unixserver.at',
 823                 '.vegetarian.at',
 824                 '.venture.at',
 825                 '.verycool.at',
 826                 '.vic-20.at',
 827                 '.viewing.at',
 828                 '.vintagecomputers.at',
 829                 '.virii.at',
 830                 '.vodka.at',
 831                 '.wannabe.at',
 832                 '.webpagedesign.at',
 833                 '.wheels.at',
 834                 '.whisper.at',
 835                 '.whiz.at',
 836                 '.wonderful.at',
 837                 '.zor.org',
 838                 '.zx80.at',
 839                 '.zx81.at',
 840                 '.zxspectrum.at',
 841         ),
 842         'kisaweb.com',
 843         'krotki.pl',
 844         'kuerzer.de',
 845         '*.kupisz.pl',
 846         'kuso.cc',
 847         '*.l8t.com',
 848         'lame.name',
 849         'lediga.st',
 850         'liencourt.com',
 851         'liteurl.com',
 852         'linkachi.com',
 853         'linkezy.com',
 854         'linkfrog.net',
 855         'linkook.com',
 856         'linkyme.com',
 857         'linkzip.net',
 858         'lispurl.com',
 859         'lnk.in',
 860         'makeashorterlink.com',
 861         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 862                 '*.3gp.fr',
 863                 '*.gtx.fr',
 864                 '*.ici.st',
 865                 '*.max.st',
 866                 '*.nn.cx',              // ns *.sivit.org
 867                 '*.site.cx',    // ns *.sivit.org
 868                 '*.user.fr',
 869                 '*.zxr.fr',
 870         ),
 871         'mcturl.com',
 872         'memurl.com',
 873         'Metamark.net' => array('xrl.us'),
 874         'midgeturl.com',
 875         'Minilink.org' => array('lnk.nu'),
 876         'miniurl.org',
 877         'miniurl.pl',
 878         'mixi.bz',
 879         'mo-v.jp',
 880         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 881                 '.com.md',
 882                 '.co.md',
 883                 '.org.md',
 884                 '.info.md',
 885                 '.host.md',
 886         ),
 887         'monster-submit.com',
 888         'mooo.jp',
 889         'murl.net',
 890         'myactivesurf.net',
 891         'mytinylink.com',
 892         'myurl.in',
 893         'myurl.com.tw',
 894         'nanoref.com',
 895         'Ne1.net' => array(
 896                 '*.ne1.net',
 897                 '*.r8.org',
 898         ),
 899         'Nashville Linux Users Group' => array('nlug.org'),
 900         'not2long.net',
 901         '*.notlong.com',
 902         '*.nuv.pl',
 903         'ofzo.be',
 904         '*.ontheinter.net',
 905         'ourl.org',
 906         'ov2.net',                              // frame
 907         '*.ozonez.com',
 908         'pagebang.com',
 909         'palurl.com',
 910         '*.paulding.net',
 911         'phpfaber.org',
 912         'pygmyurl.com',
 913         'pnope.com',
 914         'prettylink.com',
 915         'PROXID.net' => array(  // also xRelay.net
 916                 '*.asso.ws',
 917                 '*.corp.st',
 918                 '*.euro.tm',
 919                 '*.perso.tc',
 920                 '*.site.tc',
 921                 '*.societe.st',
 922         ),
 923         'qrl.jp',
 924         'qurl.net',
 925         'qwer.org',
 926         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 927         'radiobase.net',
 928         'Rakuten.co.jp' => array(
 929                 'pt.afl.rakuten.co.jp', ///c/
 930         ),
 931         'RedirectFree.com' => array(
 932                 '*.red.tc',
 933                 '*.redirectfree.com',
 934                 '*.sky.tc',
 935                 '*.the.vg',
 936         ),
 937         'redirme.com',
 938         'redirectme.to',
 939         'relic.net',
 940         'rezma.info',
 941         'rio.st',
 942         'rlink.org',
 943         '*.rmcinfo.fr',
 944         'rubyurl.com',
 945         '*.runboard.com',
 946         'runurl.com',
 947         's-url.net',
 948         's1u.net',
 949         'SG5.co.uk' => array(
 950                 '*.sg5.co.uk',
 951                 '*.sg5.info',
 952         ),
 953         'Shim.net' => array(
 954                 '*.0kn.com',
 955                 '*.2cd.net',
 956                 '*.freebiefinders.net',
 957                 '*.freegaming.org',
 958                 '*.op7.net',
 959                 '*.shim.net',
 960                 '*.v9z.com',
 961         ),
 962         'big5.shippingchina.com',
 963         'shorl.com',
 964         'shortenurl.com',
 965         'shorterlink.com',
 966         'shortlinks.co.uk',
 967         'shorttext.com',
 968         'shorturl-accessanalyzer.com',
 969         'Shortify.com' => array(
 970                 '74678439.com',
 971                 'shortify.com',
 972         ),
 973         'shortlink.co.uk',
 974         'ShortURL.com' => array(
 975                 '*.1sta.com',
 976                 '*.24ex.com',
 977                 '*.2fear.com',
 978                 '*.2fortune.com',
 979                 '*.2freedom.com',
 980                 '*.2hell.com',
 981                 '*.2savvy.com',
 982                 '*.2truth.com',
 983                 '*.2tunes.com',
 984                 '*.2ya.com',
 985                 '*.alturl.com',
 986                 '*.antiblog.com',
 987                 '*.bigbig.com',
 988                 '*.dealtap.com',
 989                 '*.ebored.com',
 990                 '*.echoz.com',
 991                 '*.filetap.com',
 992                 '*.funurl.com',
 993                 '*.headplug.com',
 994                 '*.hereweb.com',
 995                 '*.hitart.com',
 996                 '*.mirrorz.com',
 997                 '*.shorturl.com',
 998                 '*.spyw.com',
 999                 '*.vze.com',
1000         ),
1001         'shrinkalink.com',
1002         'shrinkthatlink.com',
1003         'shrinkurl.us',
1004         'shrt.org',
1005         'shrunkurl.com',
1006         'shurl.org',
1007         'shurl.net',
1008         'sid.to',
1009         'simurl.com',
1010         'sitefwd.com',
1011         'Sitelutions.com' => array(
1012                 '*.assexy.as',
1013                 '*.athersite.com',
1014                 '*.athissite.com',
1015                 '*.bestdeals.at',
1016                 '*.byinter.net',
1017                 '*.findhere.org',
1018                 '*.fw.nu',
1019                 '*.isgre.at',
1020                 '*.isthebe.st',
1021                 '*.kwik.to',
1022                 '*.lookin.at',
1023                 '*.lowestprices.at',
1024                 '*.onthenet.as',
1025                 '*.ontheweb.nu',
1026                 '*.pass.as',
1027                 '*.passingg.as',
1028                 '*.redirect.hm',
1029                 '*.rr.nu',
1030                 '*.ugly.as',
1031         ),
1032         '*.skracaj.pl',
1033         'skiltechurl.com',
1034         'skocz.pl',
1035         'slimurl.jp',
1036         'slink.in',
1037         'smallurl.eu',
1038         'smurl.name',
1039         'snipurl.com',
1040         'sp-nov.net',
1041         'splashblog.com',
1042         'spod.cx',
1043         '*.spydar.com',
1044         'Subdomain.gr' => array(
1045                 '*.p2p.gr',
1046                 '*.subdomain.gr',
1047         ),
1048         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1049         'surl.se',
1050         'surl.ws',
1051         'symy.jp',
1052         'tdurl.com',
1053         'tighturl.com',
1054         'tiniuri.com',
1055         'tiny.cc',
1056         'tiny.pl',
1057         'tiny2go.com',
1058         'tinylink.eu',
1059         'tinylinkworld.com',
1060         'tinypic.com',
1061         'tinyr.us',
1062         'TinyURL.com' => array(
1063                 'tinyurl.com',
1064                 'preview.tinyurl.com',
1065                 'tinyurl.co.uk',
1066         ),
1067         'titlien.com',
1068         '*.tlg.pl',
1069         'tlurl.com',
1070         'link.toolbot.com',
1071         'tnij.org',
1072         'Tokelau ccTLD' => array('.tk'),
1073         'toila.net',
1074         '*.toolbot.com',
1075         '*.torontonian.com',
1076         'trimurl.com',
1077         'ttu.cc',
1078         'turl.jp',
1079         '*.tz4.com',
1080         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1081                 '*.1.to',
1082                 '*.4.to',
1083                 '*.5.to',
1084                 '*.82.to',
1085                 '*.s.to',
1086                 '*.u.to',
1087                 '*.ce.to',
1088                 '*.cz.to',
1089                 '*.if.to',
1090                 '*.it.to',
1091                 '*.kp.to',
1092                 '*.ne.to',
1093                 '*.ok.to',
1094                 '*.pc.to',
1095                 '*.tv.to',
1096                 '*.dd.to',
1097                 '*.ee.to',
1098                 '*.hh.to',
1099                 '*.kk.to',
1100                 '*.mm.to',
1101                 '*.qq.to',
1102                 '*.xx.to',
1103                 '*.zz.to',
1104                 '*.ivy.to',
1105                 '*.joa.to',
1106                 '*.ever.to',
1107                 '*.mini.to',
1108         ),
1109         'uchinoko.in',
1110         'Ulimit.com' => array(
1111                 '*.be.tf',
1112                 '*.best.cd',
1113                 '*.bsd-fan.com',
1114                 '*.c0m.st',
1115                 '*.ca.tc',
1116                 '*.clan.st',
1117                 '*.com02.com',
1118                 '*.en.st',
1119                 '*.euro.st',
1120                 '*.fr.fm',
1121                 '*.fr.st',
1122                 '*.fr.vu',
1123                 '*.gr.st',
1124                 '*.ht.st',
1125                 '*.int.ms',
1126                 '*.it.st',
1127                 '*.java-fan.com',
1128                 '*.linux-fan.com',
1129                 '*.mac-fan.com',
1130                 '*.mp3.ms',
1131                 '*.qc.tc',
1132                 '*.sp.st',
1133                 '*.suisse.st',
1134                 '*.t2u.com',
1135                 '*.unixlover.com',
1136                 '*.zik.mu',
1137         ),
1138         '*.uni.cc',
1139         'UNONIC.com' => array(
1140                 '*.at.tf',      // AlpenNIC
1141                 '*.bg.tf',
1142                 '*.ca.tf',
1143                 '*.ch.tf',      // AlpenNIC
1144                 '*.cz.tf',
1145                 '*.de.tf',      // AlpenNIC
1146                 '*.edu.tf',
1147                 '*.eu.tf',
1148                 '*.int.tf',
1149                 '*.net.tf',
1150                 '*.pl.tf',
1151                 '*.ru.tf',
1152                 '*.sg.tf',
1153                 '*.us.tf',
1154         ),
1155         'Up.pl' => array(
1156                 '.69.pl',                       // by nsk101869
1157                 '.crack.pl',            // by nsk101869
1158                 '.film.pl',                     // by sibr19002
1159                 '.h2o.pl',                      // by nsk101869
1160                 '.hostessy.pl',         // by nsk101869
1161                 '.komis.pl',            // by nsk101869
1162                 '.laski.pl',            // by nsk101869
1163                 '.modelki.pl',          // by nsk101869
1164                 '.muzyka.pl',           // by sibr19002
1165                 '.nastolatki.pl',       // by nsk101869
1166                 '.obuwie.pl',           // by nsk101869
1167                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1168                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1169                 '.sexchat.pl',          // by nsk101869
1170                 '.sexlive.pl',          // by nsk101869
1171                 '.tv.pl',                       // by nsk101869
1172                 '.up.pl',                       // by nsk101869
1173                 '.video.pl',            // by nsk101869
1174                 '.xp.pl',                       // nsk101869
1175         ),
1176         '*.uploadr.com',
1177         'url.ie',
1178         'url4.net',
1179         'url-c.com',
1180         'urlbee.com',
1181         'urlbounce.com',
1182         'urlcut.com',
1183         'urlcutter.com',
1184         'urlic.com',
1185         'urlin.it',
1186         'urlkick.com',
1187         'URLLogs.com' => array(
1188                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1189                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1190         ),
1191         '*.urlproxy.com',
1192         'urlser.com',
1193         'urlsnip.com',
1194         'urlzip.de',
1195         'urlx.org',
1196         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1197         'utun.jp',
1198         'uxxy.com',
1199         '*.v27.net',
1200         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1201                 '*.all.at',
1202                 '*.back.to',
1203                 '*.beam.at',
1204                 '*.been.at',
1205                 '*.bite.to',
1206                 '*.board.to',
1207                 '*.bounce.to',
1208                 '*.bowl.to',
1209                 '*.break.at',
1210                 '*.browse.to',
1211                 '*.change.to',
1212                 '*.chip.ms',
1213                 '*.connect.to',
1214                 '*.crash.to',
1215                 '*.cut.by',
1216                 '*.direct.at',
1217                 '*.dive.to',
1218                 '*.drink.to',
1219                 '*.drive.to',
1220                 '*.drop.to',
1221                 '*.easy.to',
1222                 '*.everything.at',
1223                 '*.fade.to',
1224                 '*.fanclub.ms',
1225                 '*.firstpage.de',
1226                 '*.fly.to',
1227                 '*.flying.to',
1228                 '*.fortunecity.co.uk',
1229                 '*.fortunecity.com',
1230                 '*.forward.to',
1231                 '*.fullspeed.to',
1232                 '*.fun.ms',
1233                 '*.gameday.de',
1234                 '*.germany.ms',
1235                 '*.get.to',
1236                 '*.getit.at',
1237                 '*.hard-ware.de',
1238                 '*.hello.to',
1239                 '*.hey.to',
1240                 '*.hop.to',
1241                 '*.how.to',
1242                 '*.hp.ms',
1243                 '*.jump.to',
1244                 '*.kiss.to',
1245                 '*.listen.to',
1246                 '*.mediasite.de',
1247                 '*.megapage.de',
1248                 '*.messages.to',
1249                 '*.mine.at',
1250                 '*.more.at',
1251                 '*.more.by',
1252                 '*.move.to',
1253                 '*.musicpage.de',
1254                 '*.mypage.org',
1255                 '*.mysite.de',
1256                 '*.nav.to',
1257                 '*.notrix.at',
1258                 '*.notrix.ch',
1259                 '*.notrix.de',
1260                 '*.notrix.net',
1261                 '*.on.to',
1262                 '*.page.to',
1263                 '*.pagina.de',
1264                 '*.played.by',
1265                 '*.playsite.de',
1266                 '*.privat.ms',
1267                 '*.quickly.to',
1268                 '*.redirect.to',
1269                 '*.rulestheweb.com',
1270                 '*.run.to',
1271                 '*.scroll.to',
1272                 '*.seite.ms',
1273                 '*.shortcut.to',
1274                 '*.skip.to snap.to',
1275                 '*.soft-ware.de',
1276                 '*.start.at',
1277                 '*.stick.by',
1278                 '*.surf.to',
1279                 '*.switch.to',
1280                 '*.talk.to',
1281                 '*.tip.nu',
1282                 '*.top.ms',
1283                 '*.transfer.to',
1284                 '*.travel.to',
1285                 '*.turn.to',
1286                 '*.vacations.to',
1287                 '*.videopage.de',
1288                 '*.virtualpage.de',
1289                 '*.w3.to',
1290                 '*.walk.to',
1291                 '*.warp9.to',
1292                 '*.window.to',
1293                 '*.yours.at',
1294                 '*.zap.to',
1295                 '*.zip.to',
1296         ),
1297         'VDirect.com' => array(
1298                 '*.emailme.net',
1299                 '*.getto.net',
1300                 '*.inetgames.com',
1301                 '*.netbounce.com',
1302                 '*.netbounce.net',
1303                 '*.oneaddress.net',
1304                 '*.snapto.net',
1305                 '*.vdirect.com',
1306                 '*.vdirect.net',
1307                 '*.webrally.net',
1308         ),
1309         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1310         'vgo2.com',
1311         'Voila.fr' => array('r.voila.fr'),      // Fix it
1312         'w3t.org',
1313         'wapurl.co.uk',
1314         'Wb.st' => array(
1315                 '*.team.st',
1316                 '*.wb.st',
1317         ),
1318         'wbkt.net',
1319         'WebAlias.com' => array(
1320                 '*.andmuchmore.com',
1321                 '*.browser.to',
1322                 '*.escape.to',
1323                 '*.fornovices.com',
1324                 '*.fun.to',
1325                 '*.got.to',
1326                 '*.hottestpix.com',
1327                 '*.imegastores.com',
1328                 '*.latest-info.com',
1329                 '*.learn.to',
1330                 '*.moviefever.com',
1331                 '*.mp3-archives.com',
1332                 '*.myprivateidaho.com',
1333                 '*.radpages.com',
1334                 '*.remember.to',
1335                 '*.resourcez.com',
1336                 '*.return.to',
1337                 '*.sail.to',
1338                 '*.sports-reports.com',
1339                 '*.stop.to',
1340                 '*.thrill.to',
1341                 '*.tophonors.com',
1342                 '*.uncutuncensored.com',
1343                 '*.up.to',
1344                 '*.veryweird.com',
1345                 '*.way.to',
1346                 '*.web-freebies.com',
1347                 '.webalias.com',
1348                 '*.webdare.com',
1349                 '*.xxx-posed.com',
1350         ),
1351         'webmasterwise.com',
1352         'witherst at hotmail.com' => array(     // by Tim Withers
1353                 '*.associates-program.com',
1354                 '*.casinogopher.com',
1355                 '*.ezpagez.com',
1356                 '*.vgfaqs.com',
1357         ),
1358         'wittylink.com',
1359         'wiz.sc',                       // tiny.cc related
1360         'X50.us' => array(
1361                 '*.i50.de',
1362                 '*.x50.us',
1363         ),
1364         'big5.xinhuanet.com',   ///gate/big5/
1365         'xhref.com',
1366         'Xn6.net' => array(
1367                 '*.9ax.net',
1368                 '*.xn6.net',
1369         ),
1370         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1371         '.y11.net',
1372         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1373                 '*.yesns.com',
1374                 '*.srv4u.net',
1375                 //blogne.com
1376         ),
1377         'yatuc.com',
1378         'yep.it',
1379         'yumlum.com',
1380         'yurel.com',
1381         'Z.la' => array(
1382                 'z.la',
1383                 't.z.la',
1384         ),
1385         'zaable.com',
1386         'zapurl.com',
1387         'zarr.co.uk',
1388         'zerourl.com',
1389         'ZeroWeb.org' => array(
1390                 '*.80t.com',
1391                 '*.firez.org',
1392                 '*.fizz.nu',
1393                 '*.ingame.org',
1394                 '*.irio.net',
1395                 '*.v33.org',
1396                 '*.zeroweb.org',
1397         ),
1398         'zhukcity.ru',
1399         'zippedurl.com',
1400         'zr5.us',
1401         '*.zs.pl',
1402         '*.zu5.net',
1403         'zuso.tw',
1404         '*.zwap.to',
1405 );
1406
1407 // --------------------------------------------------
1408
1409 $blocklist['A-2'] = array(
1410
1411         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1412         //
1413         //'*.dyndns.*', // Wildcard for dyndns
1414         //
1415         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1416         'ddns.ru' => array('*.bpa.nu'),
1417         'Dhs.org' => array(
1418                 '*.2y.net',
1419                 '*.dhs.org',
1420         ),
1421         '*.dnip.net',
1422         '*.dyndns.co.za',
1423         '*.dyndns.dk',
1424         '*.dyndns.nemox.net',
1425         'DyDNS.com' => array(
1426                 '*.ath.cx',
1427                 '*.dnsalias.org',
1428                 '*.dyndns.org',
1429                 '*.homeip.net',
1430                 '*.homelinux.net',
1431                 '*.mine.nu',
1432                 '*.shacknet.nu',
1433         ),
1434         '*.dtdns.net',                  // by jscott at sceiron.com
1435         '*.dynu.com',
1436         '*.dynup.net',
1437         '*.fdns.net',
1438         'J-Speed.net' => array(
1439                 '*.bne.jp',
1440                 '*.ii2.cc',
1441                 '*.jdyn.cc',
1442                 '*.jspeed.jp',
1443         ),
1444         '*.mydyn.de',
1445         '*.nerdcamp.net',
1446         'No-IP.com' => array(
1447                         '*.bounceme.net',
1448                         '*.hopto.org',
1449                         '*.myftp.biz',
1450                         '*.myftp.org',
1451                         '*.myvnc.com',
1452                         '*.no-ip.biz',
1453                         '*.no-ip.info',
1454                         '*.no-ip.org',
1455                         '*.redirectme.net',
1456                         '*.servebeer.com',
1457                         '*.serveblog.net',
1458                         '*.servecounterstrike.com',
1459                         '*.serveftp.com',
1460                         '*.servegame.com',
1461                         '*.servehalflife.com',
1462                         '*.servehttp.com',
1463                         '*.servemp3.com',
1464                         '*.servepics.com',
1465                         '*.servequake.com',
1466                         '*.sytes.net',
1467                         '*.zapto.org',
1468         ),
1469         '*.opendns.be',
1470         'Yi.org' => array(      // by dns at whyi.org
1471                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1472
1473                 // 72.55.129.46(redirect.yi.org)
1474                 '*.whyi.org',
1475                 '*.weedns.com',
1476         ),
1477         '*.zenno.info',
1478         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1479                         // and all non-recorded domains redirect to 'agoga.com' now
1480                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1481                         // http://agoga.com/aboutus.html
1482 );
1483
1484 // --------------------------------------------------
1485
1486 // B: Sample setting of:
1487 // Jacked (taken advantage of) and cleaning-less sites
1488 //
1489 // Please notify us about this list with reason:
1490 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1491
1492 $blocklist['B-1'] = array(
1493
1494         // B-1: Web N.M spaces (N > 0, M >= 0)
1495         //
1496         //   Messages from forerunners:
1497         //     activefreehost.com
1498         //       "We regret to inform you that ActiveFreeHost
1499         //        free hosting service has is now closed (as of
1500         //        September 18). We have been online for over
1501         //        two and half years, but have recently decided
1502         //        to take time for software improvement to fight
1503         //        with server abuse, Spam advertisement and
1504         //        fraud."
1505         //
1506         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1507         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1508         '*.007webpro.com',              // by richord at ientry.com
1509         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1510         '*.0buckhost.com',              // by tycho at e-lab.nl
1511         '0Catch.com related' => array(
1512                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1513
1514                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1515                 '*.100megsfree5.com',
1516
1517                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1518                 '*.100freemb.com',              // by Danny Ashworth
1519                 '*.easyfreehosting.com',
1520                 '*.exactpages.com',
1521                 '*.fcpages.com',
1522                 '*.wtcsites.com',
1523
1524                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1525                 '*.741.com',
1526                 '*.freecities.com',
1527                 '*.freesite.org',
1528                 '*.freewebpages.org',
1529                 '*.freewebsitehosting.com',
1530                 '*.jvl.com',
1531
1532                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1533                 '*.freespaceusa.com',
1534                 '*.usafreespace.com',
1535
1536                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1537                 '*.dex1.com',
1538                 '*.questh.com',
1539
1540                 // 209.63.57.10(*snip*), ns *.0catch.com
1541                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1542                 '*.012webpages.com',    // by support at 0catch.com
1543                 '*.150m.com',
1544                 '*.1sweethost.com',             // by whois at bluehost.com
1545                 '*.250m.com',                   // by jason at fahlman.net
1546                 '*.9cy.com',                    // by paulw0t at gmail.com
1547                 '*.angelcities.com',    // by cliff at eccentrix.com
1548                 '*.arcadepages.com',    // by admin at site-see.com
1549                 '*.e-host.ws',                  // by dns at jomax.net
1550                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1551                 '*.fw.bz',                              // by ben at kuehl.as
1552                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1553                 '*.g0g.net',                    // by domains at seem.co.uk
1554                 '*.galaxy99.net',               // by admin at bagchi.org
1555                 '*.greatnow.com',               // by peo at peakspace.com
1556                 '*.hautlynx.com',               // by hlewis28 at juno.com
1557                 '*.ibnsites.com',               // by cmrojas at mail.com
1558                 '*.just-allen.com',             // by extremehype at msn.com
1559                 '*.kogaryu.com',                // by angelguerra at msn.com
1560                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1561                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1562                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1563                 '*.s-enterprize.com',
1564                 '*.servetown.com',              // by jonahbliss at earthlink.net
1565                 '*.stinkdot.org',               // by bluedot at ziplip.com
1566                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1567                 '*.zomi.net',                   // by sianpu at gmail.com
1568         ),
1569         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1570         '100 Best Inc' => array(
1571                 // by 100 Best Inc (info at 100best.com)
1572
1573                 // 66.235.204.7(h204-007.bluefishhosting.com)
1574                 '*.2-hi.com',
1575                 '*.20fr.com',
1576                 '*.20ii.com',
1577                 '*.20is.com',
1578                 '*.20it.com',
1579                 '*.20m.com',    // by jlee at 100bestinc.com
1580                 '*.20to.com',
1581                 '*.2u-2.com',
1582                 '*.3-st.com',
1583                 '*.fws1.com',
1584                 '*.fw-2.com',
1585                 '*.inc5.com',
1586                 '*.on-4.com',
1587                 '*.st-3.com',
1588                 '*.st20.com',
1589                 '*.up-a.com',
1590
1591                 // 216.40.33.252(www-pd.mdnsservice.com)
1592                 '*.0-st.com',
1593                 '*.20me.com',
1594         ),
1595         '*.100foros.com',
1596         '*.101freehost.com',
1597         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1598         '20six Weblog Services' => array(
1599                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1600                 '.20six.co.uk',
1601                 '.20six.fr',
1602                 'myblog.de',
1603                 'myblog.es',
1604         ),
1605         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1606         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1607         '2IP.com' => array(
1608                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1609                 '*.2ip.jp',
1610                 '*.474.jp',
1611                 '*.consensus.jp',
1612                 '*.desyo.jp',
1613                 '*.dif.jp',
1614                 '*.pastels.jp',
1615                 '*.powerblogger.jp',
1616                 '*.vippers.jp',
1617                 '*.webpages.jp',
1618
1619                 // 205.209.97.56(non-existent)
1620                 '*.biografi.biz',
1621                 '*.biografi.info',
1622                 '*.biografi.org',
1623                 '*.biografi.us',
1624                 '*.datadiri.biz',
1625                 '*.datadiri.cc',
1626                 '*.datadiri.com',
1627                 '*.datadiri.info',
1628                 '*.datadiri.net',
1629                 '*.datadiri.org',
1630                 '*.datadiri.tv',
1631                 '*.datadiri.us',
1632                 '*.indo.bz',
1633                 '*.indo.cc',
1634                 '*.profil.bz',
1635                 '*.profil.cc',
1636                 '*.profil.cn',
1637                 '*.profil.in',
1638                 '*.profil.tv',
1639
1640                 // 205.209.101.47(non-existent)
1641                 '*.about.tc',
1642                 '*.about.vg',
1643                 '*.aboutus.gs',
1644                 '*.aboutus.ms',
1645                 '*.aboutus.tc',
1646                 '*.aboutus.vg',
1647                 '*.band.io',
1648                 '*.beijing.am',
1649                 '*.blogs.io',
1650                 '*.boke.am',
1651                 '*.clan.io',
1652                 '*.ecv.gs',
1653                 '*.ecv.ms',
1654                 '*.ecv.vg',
1655                 '*.freekong.cn',
1656                 '*.go2net.ws',
1657                 '*.hello.cn.com',
1658                 '*.hello.io',
1659                 '*.hits.io',
1660                 '*.hostingweb.us',
1661                 '*.hub.io',
1662                 '*.ide.am',
1663                 '*.inc.io',
1664                 '*.incn.in',
1665                 '*.indo.gs',
1666                 '*.indo.ms',
1667                 '*.indo.tc',
1668                 '*.indo.vg',
1669                 '*.infinitehosting.net',
1670                 '*.infinites.net',
1671                 '*.jushige.cn',
1672                 '*.jushige.com',
1673                 '*.kongjian.in',
1674                 '*.lan.io',
1675                 '*.llc.nu',
1676                 '*.maimai.in',
1677                 '*.max.io',
1678                 '*.musician.io',
1679                 '*.mycv.bz',
1680                 '*.mycv.nu',
1681                 '*.mycv.tv',
1682                 '*.myweb.io',
1683                 '*.ourprofile.biz',
1684                 '*.ourprofile.info',
1685                 '*.ourprofile.net',
1686                 '*.ourprofile.org',
1687                 '*.ourprofile.us',
1688                 '*.profil.gs',
1689                 '*.profil.ms',
1690                 '*.profil.tc',
1691                 '*.qiye.in',
1692                 '*.site.io',
1693                 '*.wan.io',
1694                 '*.web-cam.ws',
1695                 '*.webs.io',
1696                 '*.xixu.cc',
1697                 '*.zaici.am',
1698                 '*.zip.io',
1699                 '*.zuzhi.in',
1700
1701                 '*.profil.vg',          // 205.209.101.67(non-existent)
1702                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1703                 //'*.about.gs',         // No record
1704                 //'*.eprofile.us',      // non-existent
1705         ),
1706         '2Page.de' => array(
1707                 '.dreipage.de',
1708                 '.2page.de',
1709         ),
1710         '*.3-hosting.net',
1711         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1712         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1713         '*.8000web.com',        // 75.126.189.45
1714         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1715         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1716         'Ai.NET' => array(
1717                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1718                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1719         ),
1720         '*.aimoo.com',
1721         '*.alkablog.com',
1722         '*.alluwant.de',
1723         '.amkbb.com',
1724         'answerbag.com',        // 8.5.0.128
1725         'anyboard.net',
1726         'AOL.com' =>    // http://about.aol.com/international_services
1727                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1728                 '(?:aol|americaonline)\.' .
1729                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1730                 // Rough but works
1731         'Apple.com' => array('idisk.mac.com'),
1732         '*.askfaq.org',
1733         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1734         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1735         '*.asphost4free.com',
1736         'basenow.com',
1737         'BatCave.net' => array(
1738                 '.batcave.net',                 // 64.22.112.226
1739                 '.freehostpro.com',             // 64.22.112.226
1740         ),
1741         '*.bb-fr.com',
1742         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1743         '*.beeplog.com',
1744         'beepworld.it',
1745         'bestfreeforums.com',
1746         'bestvotexxx.com',
1747         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1748         'blinklist.com',
1749         'Blog.com' => array(
1750                 // by admin.domains at co.blog.com
1751                 '*.blog.com',
1752                 '*.blogandorra.com',
1753                 '*.blogangola.com',
1754                 '*.blogaruba.com',
1755                 '*.blogaustria.at',
1756         ),
1757         '*.blog.com.es',
1758         '*.blog.hr',
1759         '*.blog4ever.com',
1760         '*.blog-fx.com',
1761         '*.blogbeee.com',
1762         'blogas.lt',
1763         'blogbud.com',
1764         '*.blogburkinafaso.com',
1765         '*.blogcu.com',                 // by info at nokta.com
1766         'blogfreely.com',
1767         '*.blogdrive.com',
1768         '*.blogg.de',
1769         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1770         'bloggercrab.com',
1771         'bloggers.nl',
1772         '*.bloggingmylife.com',
1773         '*.bloggles.info',
1774         '*.blogharbor.com',
1775         '*.bloguj.eu',
1776         'bloguitos.com',
1777         'blogosfer.com',
1778         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1779         '*.blogslive.net',
1780         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1781         '*.blogstream.com',
1782         'blogyaz.com',
1783         'bloodee.com',
1784         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1785         'board-4you.de',
1786         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1787         '*.boardhost.com',
1788         'Bravenet.com' => array(
1789                 '*.bravenet.com',
1790                 '*.bravehost.com',
1791         ),
1792         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1793         'C2k.jp' => array(
1794                 // by Makoto Okuse (webmaster at 2style.net)
1795                 '.081.in',
1796                 '.2style.in',
1797                 '.bian.in',
1798                 '.curl.in',
1799                 '.ennui.in',
1800                 '.jinx.in',
1801                 '.loose.in',
1802                 '.mist.in',
1803                 '.muu.in',
1804                 '.naive.in',
1805                 '.panic.in',
1806                 '.slum.in',
1807
1808                 // by 2style, ns *.click2k.net, *.2style.net
1809                 '.2st.jp',
1810                 '.betty.jp',
1811                 '.cabin.jp',
1812                 '.cult.jp',
1813                 '.mippi.jp',
1814                 '.purety.jp',
1815                 '.rapa.jp',
1816                 '.side-b.jp',
1817                 '.web-box.jp',
1818                 '.yea.jp',
1819
1820                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1821                 '.2style.net',
1822                 '.click2k.net',
1823                 '.houka5.com',
1824
1825                 // by click2k, ns *.click2k.net, *.2style.net
1826                 '.psyco.jp',
1827                 '.sweety.jp',
1828
1829                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1830                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1831         ),
1832         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1833         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1834         '*.chueca.com',
1835         'city-forum.com',
1836         '*.clicdev.com',
1837         '*.craigslist.org',
1838         'concepts-mall.com',
1839         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1840         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1841         'counterhit.de',
1842         '*.createblog.com',
1843         '*.createforum.net',
1844         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1845         '*.createmybb.com',
1846         'CwCity.de' => array(
1847                 '.cwcity.de',
1848                 '.cwsurf.de',
1849         ),
1850         'dakrats.net',
1851         '*.dcswtech.com',
1852         'del.icio.us',
1853         '*.devil.it',
1854         '*.diaryland.com',
1855         'diigo.com',                    ///user/
1856         'digg.com',
1857         'digstock.com',
1858         'domains at galaxywave.net' => array(
1859                 'blogstation.net',
1860                 '.phpbb-host.com',
1861         ),
1862         'dotbb.be',
1863         '*.dox.hu',                             // dns at 1b.hu
1864         '*.eadf.com',
1865         '*.eblog.com.au',
1866         '*.ekiwi.de',
1867         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1868         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1869         '*.easyjournal.com',
1870         '*.ebloggy.com',
1871         'enunblog.com',
1872         '*.epinoy.com',
1873         '*.ez-sites.ws',
1874         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1875         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1876         '*.fathippohosting.com',        // 208.101.3.192
1877         'FC2.com' => array(
1878                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1879                         // Many traps available:
1880                         //      bqdr.blog98.fc2.com,       iframe
1881                         //      csfir.blog87.fc2.com,      iframe
1882                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1883                         //      sippou2006.blog60.fc2.com, iframe
1884                         // NOTE: 'blog.fc2.com' is not included
1885                 '*.h.fc2.com',  // Adult
1886         ),
1887         '*.fizwig.com',
1888         'forum.ezedia.net',
1889         '*.extra.hu',                   // angelo at jasmin.hu
1890         '*.fanforum.cc',
1891         'fingerprintmedia.com',
1892         '*.filelan.com',
1893         '*.fora.pl',
1894         '*.forka.eu',
1895         '*.foren-city.de',
1896         'foren-gratis.de',
1897         '*.foros.tv',
1898         '*.forospace.com',
1899         'foroswebgratis.com',
1900         '*.forum-on.de',
1901         '*.forum24.se',
1902         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1903         '.forum66.com',
1904         'Forumotion.com' => array(
1905                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1906                 '*.forumactif.com',     // 91.121.41.79
1907                 '*.editboard.com',      // 75.126.156.15
1908                 '*.sosblog.com',        // 74.86.25.140
1909
1910                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1911                 '*.0forum.biz',
1912                 '*.1forum.biz',
1913                 '*.1fr1.net',
1914                 '*.1talk.net',
1915                 '*.2forum.biz',
1916                 '*.3forum.biz',
1917                 '*.4forum.biz',
1918                 '*.4rumer.com',
1919                 '*.4rumer.net',
1920                 '*.4umer.com',
1921                 '*.4umer.net',
1922                 '*.5forum.biz',
1923                 '*.5forum.info',
1924                 '*.5forum.net',
1925                 '*.6forum.biz',
1926                 '*.6forum.info',
1927                 '*.77forum.com',
1928                 '*.7forum.biz',
1929                 '*.7forum.info',
1930                 '*.7forum.net',
1931                 '*.8forum.biz',
1932                 '*.8forum.info',
1933                 '*.8forum.net',
1934                 '*.9forum.biz',
1935                 '*.9forum.info',
1936                 '*.activebb.net',
1937                 '*.aforumfree.com',
1938                 '*.all-forum.net',
1939                 '*.all-up.com',
1940                 '*.alldiscussion.net',
1941                 '*.allgoo.net',
1942                 '*.allgoo.us',
1943                 '*.american-forum.net',
1944                 '*.americantalk.net',
1945                 '*.annuaire-forums.com',
1946                 '*.asiafreeforum.com',
1947                 '*.asianfreeforum.com',
1948                 '*.azureforum.com',
1949                 '*.azurforum.com',
1950                 '*.bestcheapforum.com',
1951                 '*.bestdiscussion.net',
1952                 '*.bestgoo.com',
1953                 '*.bestofforum.com',
1954                 '*.bestofforum.net',
1955                 '*.bestoforum.net',
1956                 '*.bforum.biz',
1957                 '*.big-forum.net',
1958                 '*.board-poster.com',
1959                 '*.board-realtors.com',
1960                 '*.boardonly.com',
1961                 '*.boardrealtors.net',
1962                 '*.boardsmessage.com',
1963                 '*.briceboard.com',
1964                 '*.bubblelol.com',
1965                 '*.buy-forum.com',
1966                 '*.buy-talk.com',
1967                 '*.buyforum.net',
1968                 '*.buygoo.net',
1969                 '*.buygoo.us',
1970                 '*.camelscrew.com',
1971                 '*.cheap-forum.com',
1972                 '*.cheapforum.net',
1973                 '*.chocoforum.com',
1974                 '*.chocoforum.net',
1975                 '*.clic-topic.com',
1976                 '*.clicboard.com',
1977                 '*.clictopic.com',
1978                 '*.clictopic.net',
1979                 '*.clictopics.com',
1980                 '*.clubdiscussion.net',
1981                 '*.coolbb.net',
1982                 '*.crazy4us.com',
1983                 '*.crazyfruits.net',
1984                 '*.createmyboard.com',
1985                 '*.crewcamel.com',
1986                 '*.cyberfreeforum.com',
1987                 '*.discutforum.com',
1988                 '*.discutfree.com',
1989                 '*.do-forum.com',
1990                 '*.do-goo.com',
1991                 '*.do-goo.net',
1992                 '*.do-talk.com',
1993                 '*.dodiscussion.com',
1994                 '*.dogoo.us',
1995                 '*.easydiscussion.net',
1996                 '*.easyforumlive.com',
1997                 '*.englishboard.net',
1998                 '*.englishboards.com',
1999                 '*.ephpbb.com',
2000                 '*.eraseboard.net',
2001                 '*.eraseboards.net',
2002                 '*.euro-talk.net',
2003                 '*.eurodiscussion.net',
2004                 '*.eurogoo.com',
2005                 '*.exchangesboard.com',
2006                 '*.exprimetoi.net',
2007                 '*.fairtopic.com',
2008                 '*.fforum.biz',
2009                 '*.fforumfree.com',
2010                 '*.first-forum.com',
2011                 '*.firstgoo.com',
2012                 '*.fororama.com',
2013                 '*.forum-2007.com',
2014                 '*.forum-actif.net',
2015                 '*.forum-free.biz',
2016                 '*.forum-free.org',
2017                 '*.forum-motion.com',
2018                 '*.forum0.biz',
2019                 '*.forum0.info',
2020                 '*.forum0.net',
2021                 '*.forum2.biz',
2022                 '*.forum3.biz',
2023                 '*.forum3.info',
2024                 '*.forum5.info',
2025                 '*.forum6.biz',
2026                 '*.forum6.info',
2027                 '*.forum7.biz',
2028                 '*.forum777.com',
2029                 '*.forum8.biz',
2030                 '*.forum9.biz',
2031                 '*.foruma.biz',
2032                 '*.forumactif.biz',
2033                 '*.forumactif.info',
2034                 '*.forumactif.name',
2035                 '*.forumactif.ws',
2036                 '*.forumaction.net',
2037                 '*.forumakers.com',
2038                 '*.forumandco.com',
2039                 '*.forumb.biz',
2040                 '*.forumc.biz',
2041                 '*.forumd.biz',
2042                 '*.forumdediscussions.com',
2043                 '*.forumdediscussions.net',
2044                 '*.forume.biz',
2045                 '*.forumeast.com',
2046                 '*.forumf.biz',
2047                 '*.forumfreek.com',
2048                 '*.forumfreez.com',
2049                 '*.forumg.biz',
2050                 '*.forumh.biz',
2051                 '*.forumh.net',
2052                 '*.forumhope.com',
2053                 '*.forumi.biz',
2054                 '*.forumice.net',
2055                 '*.foruminute.com',
2056                 '*.forumj.biz',
2057                 '*.forumj.net',
2058                 '*.forumjonction.com',
2059                 '*.forumk.biz',
2060                 '*.foruml.biz',
2061                 '*.forumm.biz',
2062                 '*.forummotion.com',
2063                 '*.forummotions.com',
2064                 '*.forumn.biz',
2065                 '*.forumn.net',
2066                 '*.forumo.biz',
2067                 '*.forumonline.biz',
2068                 '*.forumotions.com',
2069                 '*.forump.biz',
2070                 '*.forump.info',
2071                 '*.forumperso.com',
2072                 '*.forumpersos.com',
2073                 '*.forumplatinum.com',
2074                 '*.forumpro.fr',
2075                 '*.forumq.biz',
2076                 '*.forumr.biz',
2077                 '*.forumr.net',
2078                 '*.forumrama.com',
2079                 '*.forums-actifs.com',
2080                 '*.forums-actifs.net',
2081                 '*.forums1.net',
2082                 '*.forumsactifs.com',
2083                 '*.forumsactifs.net',
2084                 '*.forumsfree.org',
2085                 '*.forumsline.com',
2086                 '*.forumsmakers.com',
2087                 '*.forumsmotion.com',
2088                 '*.forumsmotions.com',
2089                 '*.forumt.biz',
2090                 '*.forumv.biz',
2091                 '*.forumvalue.com',
2092                 '*.forumw.biz',
2093                 '*.forumy.biz',
2094                 '*.free-boards.net',
2095                 '*.freediscussion.net',
2096                 '*.freediscussions.net',
2097                 '*.freeforum.me.uk',
2098                 '*.freeforumboard.net',
2099                 '*.freeforumfree.com',
2100                 '*.freevideotalk.com',
2101                 '*.frenchboard.com',
2102                 '*.fruitsandco.com',
2103                 '*.fullboards.com',
2104                 '*.fullsubject.com',
2105                 '*.fullsubject.net',
2106                 '*.get-forum.net',
2107                 '*.getdiscussion.com',
2108                 '*.getgoo.net',
2109                 '*.getgoo.us',
2110                 '*.gettalk.net',
2111                 '*.go-board.com',
2112                 '*.go-board.net',
2113                 '*.go-forum.net',
2114                 '*.go-ogler.com',
2115                 '*.gofreeforum.com',
2116                 '*.gogoo.us',
2117                 '*.goo-board.com',
2118                 '*.goo-boys.com',
2119                 '*.goo-dart.com',
2120                 '*.goo-dole.com',
2121                 '*.goo-done.com',
2122                 '*.gooboards.com',
2123                 '*.goodbb.net',
2124                 '*.goodearths.com',
2125                 '*.goodforum.net',
2126                 '*.goodoles.com',
2127                 '*.goodoolz.com',
2128                 '*.gooforum.com',
2129                 '*.gooforums.com',
2130                 '*.googoolz.com',
2131                 '*.great-forum.com',
2132                 '*.heavenforum.com',
2133                 '*.hforum.biz',
2134                 '*.high-forums.com',
2135                 '*.highbb.com',
2136                 '*.highforum.net',
2137                 '*.hightoxic.com',
2138                 '*.homediscussion.net',
2139                 '*.homegoo.com',
2140                 '*.hooxs.com',
2141                 '*.hot-me.com',
2142                 '*.hot4um.com',
2143                 '*.hotdiscussion.net',
2144                 '*.hotgoo.net',
2145                 '*.in-goo.com',
2146                 '*.in-goo.net',
2147                 '*.infodiscussion.net',
2148                 '*.ingoo.us',
2149                 '*.iowoi.com',
2150                 '*.jforum.biz',
2151                 '*.just-forum.net',
2152                 '*.justboard.net',
2153                 '*.justdiscussion.com',
2154                 '*.justforum.net',
2155                 '*.justgoo.com',
2156                 '*.keuf.net',
2157                 '*.lforum.biz',
2158                 '*.lifediscussion.net',
2159                 '*.lifeme.net',
2160                 '*.lightbb.com',
2161                 '*.logu2.com',
2162                 '*.longdomaine.com',
2163                 '*.lovediscussion.net',
2164                 '*.lowcostforum.com',
2165                 '*.make-free-forum.com',
2166                 '*.makeforumfree.com',
2167                 '*.makefreeforum.com',
2168                 '*.mam9.com',
2169                 '*.manageboard.com',
2170                 '*.max2forum.com',
2171                 '*.meabout.com',
2172                 '*.megabb.com',
2173                 '*.moncontact.com',
2174                 '*.moninter.net',
2175                 '*.motion-forum.net',
2176                 '*.motionforum.net',
2177                 '*.motionsforum.com',
2178                 '*.mrforum.net',
2179                 '*.msnboard.net',
2180                 '*.msnyou.com',
2181                 '*.my-free-board.com',
2182                 '*.my-free-boards.com',
2183                 '*.my-free-forum.com',
2184                 '*.my-free-forums.com',
2185                 '*.my-goo.com',
2186                 '*.my-goo.net',
2187                 '*.mydiscussionboard.com',
2188                 '*.myfreeboard.net',
2189                 '*.mygoo.org',
2190                 '*.myrealboard.com',
2191                 '*.netboarder.com',
2192                 '*.netdiscussion.net',
2193                 '*.netgoo.org',
2194                 '*.new-forum.net',
2195                 '*.newdiscussion.net',
2196                 '*.newgoo.net',
2197                 '*.nforum.biz',
2198                 '*.nice-album.com',
2199                 '*.nice-board.biz',
2200                 '*.nice-board.com',
2201                 '*.nice-board.net',
2202                 '*.nice-boards.com',
2203                 '*.nice-boards.net',
2204                 '*.nice-forum.com',
2205                 '*.nice-forum.net',
2206                 '*.nice-forums.com',
2207                 '*.nice-forums.net',
2208                 '*.nice-gallery.net',
2209                 '*.nice-subject.com',
2210                 '*.nice-subjects.com',
2211                 '*.nice-theme.com',
2212                 '*.nice-topic.com',
2213                 '*.nice-topics.com',
2214                 '*.nicealbums.com',
2215                 '*.niceboard.biz',
2216                 '*.niceboard.net',
2217                 '*.niceboards.net',
2218                 '*.nicegalleries.net',
2219                 '*.nicesubject.com',
2220                 '*.nicesubjects.com',
2221                 '*.nicetopic.net',
2222                 '*.nicetopics.com',
2223                 '*.nightforum.net',
2224                 '*.nocost-forum.com',
2225                 '*.nofeeforum.com',
2226                 '*.one-forum.net',
2227                 '*.onediscussion.net',
2228                 '*.onegoo.us',
2229                 '*.onlinegoo.com',
2230                 '*.onlyquery.com',
2231                 '*.open-board.com',
2232                 '*.openu2.com',
2233                 '*.othersboards.com',
2234                 '*.own0.com',
2235                 '*.pforum.biz',
2236                 '*.phpbb9.com',
2237                 '*.phpbbtest.com',
2238                 '*.positifforum.com',
2239                 '*.postalboard.com',
2240                 '*.prodiscussion.net',
2241                 '*.progoo.us',
2242                 '*.pureforum.net',
2243                 '*.qforum.biz',
2244                 '*.quickbb.net',
2245                 '*.realbb.net',
2246                 '*.realfreeforum.com',
2247                 '*.realmsn.com',
2248                 '*.rforum.biz',
2249                 '*.road2us.com',
2250                 '*.roomforum.com',
2251                 '*.saveboard.com',
2252                 '*.screwcamel.com',
2253                 '*.screwcamels.com',
2254                 '*.sendboard.com',
2255                 '*.sephorum.com',
2256                 '*.sforum.biz',
2257                 '*.shootboard.com',
2258                 '*.shop-forum.net',
2259                 '*.shopsubject.com',
2260                 '*.simpleboard.net',
2261                 '*.site-forums.com',
2262                 '*.smileyforum.net',
2263                 '*.sos-forum.net',
2264                 '*.sos4um.com',
2265                 '*.sos4um.net',
2266                 '*.sosforum.net',
2267                 '*.speedyforum.com',
2268                 '*.stationforum.com',
2269                 '*.subject-expert.com',
2270                 '*.subject-line.com',
2271                 '*.subject-tracer.com',
2272                 '*.subjectchange.com',
2273                 '*.subjectdeals.com',
2274                 '*.subjectdebate.com',
2275                 '*.subjectdone.com',
2276                 '*.subjectonline.com',
2277                 '*.subjectschange.com',
2278                 '*.subjectsecrets.com',
2279                 '*.super-forum.net',
2280                 '*.talk-forums.com',
2281                 '*.team-forum.net',
2282                 '*.team-talk.net',
2283                 '*.teamconvention.com',
2284                 '*.teamgoo.net',
2285                 '*.teensboards.com',
2286                 '*.the-talk.net',
2287                 '*.the-up.com',
2288                 '*.thegoo.us',
2289                 '*.thinksubject.com',
2290                 '*.top-board.com',
2291                 '*.top-forum.net',
2292                 '*.top-me.com',
2293                 '*.top-talk.net',
2294                 '*.topdiscussion.com',
2295                 '*.topgoo.net',
2296                 '*.topic-board.com',
2297                 '*.topic-board.net',
2298                 '*.topic-debate.com',
2299                 '*.topic-ideas.com',
2300                 '*.topic-mail.com',
2301                 '*.topic-zone.com',
2302                 '*.topicboard.net',
2303                 '*.topicboards.com',
2304                 '*.topicmanager.com',
2305                 '*.topicsolutions.net',
2306                 '*.toxicfarm.com',
2307                 '*.unlimitboard.com',
2308                 '*.unlimitedboard.com',
2309                 '*.unlimitedforum.com',
2310                 '*.up-with.com',
2311                 '*.up-your.com',
2312                 '*.urealboard.com',
2313                 '*.user-board.net',
2314                 '*.userboard.net',
2315                 '*.users-board.com',
2316                 '*.users-board.net',
2317                 '*.usersboard.com',
2318                 '*.usersboard.net',
2319                 '*.webgoo.us',
2320                 '*.withboards.com',
2321                 '*.withme.us',
2322                 '*.worldgoo.com',
2323                 '*.yahooboard.net',
2324                 '*.yforum.biz',
2325                 '*.yoo7.com',
2326                 '*.youneed.us',
2327                 '*.your-board.com',
2328                 '*.your-talk.com',
2329                 '*.yourme.net',
2330                 '*.zforum.biz',
2331
2332                 // 75.126.156.15 redirect to forumactif.com
2333                 '*.actifforum.com',
2334                 '*.fr-bb.com',
2335                 '*.superforum.fr',
2336
2337                 // 75.126.156.15 redirect to editboard.com
2338                 '*.bbfr.net',
2339                 '*.bbgraf.com',
2340                 '*.cinebb.com',
2341                 '*.darkbb.com',
2342                 '*.dynamicbb.com',
2343                 '*.zikforum.com',
2344
2345                 // 74.86.25.140 Used: sosblog.com
2346                 '*.0-up.com',
2347                 '*.0-yo.com',
2348                 '*.04live.com',
2349                 '*.06fr.com',
2350                 '*.0fra.com',
2351                 '*.0jet.com',
2352                 '*.0yoo.com',
2353                 '*.1toxic.com',
2354                 '*.2k00.com',
2355                 '*.2xik.com',
2356                 '*.blog-2007.com',
2357                 '*.blog-2008.com',
2358                 '*.blog-2009.com',
2359                 '*.blog-2010.com',
2360                 '*.blog-actif.net',
2361                 '*.blog-marley.com',
2362                 '*.blog-talker.com',
2363                 '*.blog2009.com',
2364                 '*.blogactif.net',
2365                 '*.blogalbums.com',
2366                 '*.blogalerie.com',
2367                 '*.blogaleries.com',
2368                 '*.blogallerys.com',
2369                 '*.blogandme.com',
2370                 '*.blogandyou.com',
2371                 '*.blogbubble.net',
2372                 '*.blogdollz.com',
2373                 '*.bloggeuse.net',
2374                 '*.bloggeuses.com',
2375                 '*.bloginstinct.com',
2376                 '*.bloginternet.net',
2377                 '*.blogmakers.net',
2378                 '*.blogmarley.net',
2379                 '*.blogminister.net',
2380                 '*.blogmorane.com',
2381                 '*.blognboard.com',
2382                 '*.blogotek.net',
2383                 '*.blogpas.com',
2384                 '*.blogpublisher.net',
2385                 '*.blogsalbum.com',
2386                 '*.blogsalbums.com',
2387                 '*.blogsfan.net',
2388                 '*.blogsgallerys.com',
2389                 '*.blogsitephp.com',
2390                 '*.blogsland.net',
2391                 '*.blogsmaker.com',
2392                 '*.blogsmakers.com',
2393                 '*.blogspeed.net',
2394                 '*.blogsup.net',
2395                 '*.blogsutil.com',
2396                 '*.blogsutils.com',
2397                 '*.blogsystem.net',
2398                 '*.blogtalker.net',
2399                 '*.blogtheque.net',
2400                 '*.blogutil.com',
2401                 '*.blogvsboard.com',
2402                 '*.briceblog.com',
2403                 '*.cibleblog.com',
2404                 '*.cristalblog.com',
2405                 '*.crystalblog.net',
2406                 '*.dad-blog.com',
2407                 '*.daddy-blog.com',
2408                 '*.defaultblog.com',
2409                 '*.discussionsblog.com',
2410                 '*.dollzblog.com',
2411                 '*.dtoxic.com',
2412                 '*.easiestblog.net',
2413                 '*.espaceblog.net',
2414                 '*.exitblog.net',
2415                 '*.expensiveblog.com',
2416                 '*.extra-blog.net',
2417                 '*.extrablog.net',
2418                 '*.facileblog.com',
2419                 '*.forblogger.com',
2420                 '*.forumsblogs.com',
2421                 '*.freephpblog.com',
2422                 '*.fresh-blog.net',
2423                 '*.galleryblog.net',
2424                 '*.galleryblogs.net',
2425                 '*.gallerysblog.com',
2426                 '*.gallerysblogs.com',
2427                 '*.hyper-blog.net',
2428                 '*.hyper-blogger.com',
2429                 '*.hyper-blogger.net',
2430                 '*.hyperblogger.net',
2431                 '*.instinctblog.com',
2432                 '*.jeunblog.com',
2433                 '*.jeuneblog.com',
2434                 '*.judblog.com',
2435                 '*.makeblog.net',
2436                 '*.man-blog.net',
2437                 '*.man-blogs.com',
2438                 '*.man-blogs.net',
2439                 '*.manblog.net',
2440                 '*.manblog.org',
2441                 '*.manblog.us',
2442                 '*.manblogs.net',
2443                 '*.mansblog.net',
2444                 '*.mansblogs.com',
2445                 '*.mansblogs.net',
2446                 '*.meetingsblogs.com',
2447                 '*.men-blog.net',
2448                 '*.men-blogs.com',
2449                 '*.men-blogs.net',
2450                 '*.menblog.us',
2451                 '*.menblogs.net',
2452                 '*.mensblogs.net',
2453                 '*.messaginblog.com',
2454                 '*.monblogger.com',
2455                 '*.mum-blog.com',
2456                 '*.mummy-blog.com',
2457                 '*.mummyblog.com',
2458                 '*.myareablog.com',
2459                 '*.myblog-online.net',
2460                 '*.mybloginternet.com',
2461                 '*.myblogland.com',
2462                 '*.myblogmag.com',
2463                 '*.myfreshblog.com',
2464                 '*.myinternetblog.net',
2465                 '*.myoverblog.com',
2466                 '*.myoverblog.net',
2467                 '*.mysharedblog.com',
2468                 '*.nice-albums.com',
2469                 '*.nice-galleries.com',
2470                 '*.nicealbum.net',
2471                 '*.nicegallery.net',
2472                 '*.notreblogger.com',
2473                 '*.outilblog.com',
2474                 '*.over-blogger.com',
2475                 '*.overblogger.com',
2476                 '*.pasblog.com',
2477                 '*.pasblog.net',
2478                 '*.perfect-blog.net',
2479                 '*.perfectblog.net',
2480                 '*.phpblogsite.com',
2481                 '*.phpmyblog.net',
2482                 '*.plateformeblog.com',
2483                 '*.playblogger.com',
2484                 '*.publishmyblog.com',
2485                 '*.pulseblog.net',
2486                 '*.pulseblogs.com',
2487                 '*.puretoxic.com',
2488                 '*.reservedblog.com',
2489                 '*.shareblog.net',
2490                 '*.shareblogs.net',
2491                 '*.shared-blogs.com',
2492                 '*.sharedblog.net',
2493                 '*.sharedblogs.net',
2494                 '*.solideblog.com',
2495                 '*.systemeblog.com',
2496                 '*.talkmeblog.com',
2497                 '*.toolsblog.net',
2498                 '*.toxicplace.com',
2499                 '*.ufreeblog.com',
2500                 '*.uliveblog.com',
2501                 '*.ultratoxic.com',
2502                 '*.utilblog.com',
2503                 '*.utilblogs.com',
2504                 '*.utilsblog.com',
2505                 '*.utilsblogs.com',
2506                 '*.various-blog.com',
2507                 '*.various-blog.net',
2508                 '*.various-blogs.com',
2509                 '*.various-blogs.net',
2510                 '*.variusblog.com',
2511                 '*.versusblog.com',
2512                 '*.vieuxblog.com',
2513                 '*.web-day.net',
2514                 '*.whatsblog.net',
2515                 '*.woman-blog.net',
2516                 '*.woman-blogs.com',
2517                 '*.woman-blogs.net',
2518                 '*.womanblog.com',
2519                 '*.womanblog.org',
2520                 '*.womanblog.us',
2521                 '*.womanblogs.net',
2522                 '*.womansblogs.com',
2523                 '*.womansblogs.net',
2524                 '*.women-blog.net',
2525                 '*.women-blogs.com',
2526                 '*.women-blogs.net',
2527                 '*.womenblog.us',
2528                 '*.womenblogs.net',
2529                 '*.womensblog.net',
2530                 '*.womensblogs.net',
2531                 '*.youblog.net',
2532                 '*.yourliveblog.com',
2533                 '*.yourweblog.net',
2534         ),
2535         '*.forumcommunity.net',
2536         '*.forumer.com',
2537         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2538         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2539         'forumhosting.org',
2540         '*.forums.com',
2541         'forumbolt.com',
2542         'phpbb.forumgratis.com',
2543         'forumlari.net',
2544         '*.forumlivre.com',
2545         'forumnow.com.br',
2546         '*.forumppl.com',
2547         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2548         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2549                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2550                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2551                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2552         '*.fory.pl',
2553         'fotolog.com',
2554         '*.fr33webhost.com',
2555         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2556         '*.free-25.de',
2557         '*.free-bb.com',
2558         'Free-Blog-Hosting.com' => array(
2559                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2560                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2561                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2562                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2563                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2564         ),
2565         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2566         'free-guestbook.net',
2567         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2568         'freebb.nl',
2569         '*.freeclans.de',
2570         '*.freehostplace.com',  // by contact at keepclear.co.uk
2571         '*.freelinuxhost.com',  // by 100webspace.com
2572         '*.nofeehost.com',
2573         '*.freehyperspace.com',
2574         'freeforum.at',                 // by Sandro Wilhelmy
2575         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2576         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2577         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2578         '*.freewebhostingpro.com',
2579         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2580         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2581                 '*.6te.net',
2582                 '*.ueuo.com',
2583                 '*.orgfree.com',
2584         ),
2585         '*.freewebpage.org',
2586         'Freewebs.com' => array(        // by inquiries at freewebs.com
2587                 'freewebs.com',
2588                 'freewebsfarms.com',
2589         ),
2590         '*.freewebspace.net.au',
2591         'freewebtown.com',
2592         '*.freemyforum.com',    // by messahost at gmail.com
2593         'freepowerboards.com',
2594         '*.freepowerboards.com',
2595         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2596         'Funpic.de' => array(   // by alexander at liemen.net
2597                 '*.funpic.de',
2598                 '*.funpic.org',
2599         ),
2600         'gb-hoster.de',
2601         '*.genblogger.com',
2602         'GetBetterHosting.com' => array(
2603                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2604                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2605         ),
2606         '*.gexxe.com',
2607         '*.goodboard.de',
2608         'gossiping.net',
2609         '*.greatnuke.com',
2610         '*.guestbook.de',
2611         'gwebspace.de',
2612         'Google.com' => array(
2613                 '*.blogspot.com',
2614                 'docs.google.com',
2615                 '*.googlegroups.com',           ///web/
2616                 '*.googlepages.com',
2617                 'groups-beta.google.com',
2618                 'groups.google.ca',
2619                 'groups.google.com',
2620                 'groups.google.co.uk',
2621         ),
2622         'guestbook.at',
2623         'club.giovani.it',
2624         '*.gratis-server.de',
2625         'healthcaregroup.com',
2626         '*.heliohost.org',
2627         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2628                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2629                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2630                 '*.front.ru',           // (domain at hc.ru)
2631                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2632                 '*.hotbox.ru',          // (domain at hc.ru)
2633                 '*.hotmail.ru',         // (hosting at hc.ru)
2634                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2635                 '*.land.ru',            // (domain at hc.ru)
2636                 '*.mail15.com',         // (hosting at hc.ru)
2637                 '*.mail333.com',        // (hosting at hc.ru)
2638                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2639                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2640                 '*.pisem.net',          // (hosting at hc.ru)
2641                 '*.pochta.ru',          // (domain at hc.ru)
2642                 '*.pochtamt.ru',        // (domain at hc.ru)
2643                 '*.pop3.ru',            // (domain at hc.ru)
2644                 '*.rbcmail.ru',         // (domain at hc.ru)
2645                 '*.smtp.ru',            // (domain at hc.ru)
2646         ),
2647         '*.hiblogger.com',              // by chiaokin at gmail.com
2648         '*.hit.bg',                             // by forumup.com ??
2649         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2650         '*.host-page.com',
2651         '*.hostingclub.de',
2652         'forums.hspn.com',
2653         '*.httpsuites.com',
2654         '*.hut2.ru',
2655         'ibfree.org',                   // 208.101.45.88
2656         'IC.cz' => array(
2657                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2658                 '*.hu.cz',                      // internetcentrum at gmail.com
2659                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2660                 '*.ic.cz',                      // internetcentrum at gmail.com
2661                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2662                 '*.own.cz',                     // internetcentrum at gmail.com
2663                 '*.phorum.cz',          // internetcentrum at gmail.com
2664                 '*.tym.cz',                     // internetcentrum at gmail.com
2665                 '*.tym.sk',                     // jobot at ignum.cz
2666                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2667                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2668                 '*.yw.sk',                      // jobot at ignum.cz
2669         ),
2670         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2671                 '*.0moola.com',
2672                 '*.3000mb.com',
2673                 '.501megs.com',
2674                 '*.teracities.com',
2675                 '*.xoompages.com',
2676         ),
2677         '*.icspace.net',
2678         'iEUROP.net' => array(
2679                 '*.ibelgique.com',
2680                 '*.iespana.es',
2681                 '*.ifrance.com',
2682                 '*.iitalia.com',
2683                 '*.iquebec.com',
2684                 '*.isuisse.com',
2685         ),
2686         '*.ihateclowns.net',
2687         '*.ii55.com',
2688         '*.ipbfree.com',
2689         '*.iphorum.com',
2690         '*.blog.ijijiji.com',
2691         '*.info.com',
2692         '*.informe.com',
2693         'it168.com',
2694         '.iwannaforum.com',
2695         '*.jconserv.net',
2696         '*.jeeran.com',
2697         '*.jeun.fr',
2698         '*.joolo.com',
2699         '*.journalscape.com',
2700         '*.justfree.com',
2701         '*.blog.kataweb.it',
2702         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2703         '*.kokoom.com',
2704         'koolpages.com',
2705         '*.kostenlose-foren.org',
2706         '*.ksiegagosci.info',
2707         'Lide.cz' => array(
2708                 '*.lide.cz',
2709                 '*.sblog.cz',
2710         ),
2711         '*.lioru.com',
2712         'limmon.net',
2713         'linkinn.com',
2714         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2715         'listible.com',                 ///list/
2716         'Livedoor.com' => array(
2717                 'blog.livedoor.jp',
2718                 '*.blog.livedoor.com',  // redirection
2719         ),
2720         '*.livejournal.com',
2721         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2722         '*.logme.nl',
2723         'lol.to',
2724         'ltss.luton.ac.uk',
2725         'Lycos.com' => array(
2726                 '.angelfire.com',       // angelfire.lycos.com
2727
2728                 '*.jubii.dk',   // search., medlem.
2729                 '*.jubiiblog.co.uk',
2730                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2731                 '*.jubiiblog.de',
2732                 '*.jubiiblog.dk',
2733                 '*.jubiiblog.fr',
2734                 '*.jubiiblog.it',
2735                 '*.jubiiblog.nl',
2736
2737                 '*.lycos.at',
2738                 '*.lycos.ch',
2739                 '*.lycos.co.uk',
2740                 'angelfire.lycos.com',
2741                 '*.lycos.de',
2742                 '*.lycos.es',
2743                 '*.lycos.fr',
2744                 '*.lycos.it',           // by Lycos Europe GmbH
2745                 '*.lycos.nl',
2746
2747                 '*.spray.se',
2748                 '*.sprayblog.se',
2749
2750                 '*.tripod.com',
2751         ),
2752         '*.mastertopforum.com',
2753         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2754         'meneame.net',
2755         '*.memebot.com',
2756         '*.messageboard.nl',
2757         'mokono GmbH' => array(
2758                 '*.blog.com.es',
2759                 '*.blog.de',
2760                 '*.blog.fr',
2761                 '*.blog.co.uk',
2762                 '*.blog.ca',
2763                 '*.blogs.se',
2764                 '*.blogs.fi',
2765                 '*.blogs.no',
2766                 '*.blogs.dk',
2767                 '*.blogs.ro',
2768                 '*.weblogs.pl',
2769                 '*.weblogs.cz',
2770                 '*.weblogs.hu',
2771         ),
2772         'mojklc.com',
2773         '*.mundoforo.com',
2774         '*.money-host.com',
2775         'MonForum.com' => array(
2776                 '*.monforum.com',
2777                 '*.monforum.fr',
2778         ),
2779         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2780         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2781         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2782         'myblog.is',
2783         'myblogma.com',
2784         '*.myblogvoice.com',
2785         'myblogwiki.com',
2786         '*.myforum.ro',
2787         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2788         '*.myfreewebs.net',
2789         '*.mysite.com',
2790         '*.myxhost.com',
2791         '*.netfast.org',
2792         'NetGears.com' => array(
2793                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2794                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2795                 '*.freewebspace.com',   // 64.49.236.72
2796         ),
2797         'Netscape.com' => array('*.netscape.com'),
2798         'users.newblog.com',
2799         'neweconomics.info',
2800         '*.newsit.es',                          // 75.126.252.108
2801         '*.nm.ru',
2802         '*.nmj.pl',
2803         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2804         'Northsky.com' => array(
2805                 // by hostmaster at northsky.com
2806                 // northsky.com redirects to communityarchitect.com
2807
2808                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2809                 '*.00author.com',
2810                 '*.00band.com',
2811                 '*.00books.com',
2812                 '*.00cash.com',
2813                 '*.00cd.com',
2814                 '*.00dvd.com',
2815                 '*.00family.com',
2816                 '*.00game.com',
2817                 '*.00home.com',
2818                 '*.00it.com',
2819                 '*.00me.com',
2820                 '*.00movies.com',
2821                 '*.00page.com',
2822                 '*.00politics.com',
2823                 '*.00sf.com',
2824                 '*.00show.com',
2825                 '*.00song.com',
2826                 '*.00trek.com',
2827                 '*.00video.com',
2828                 '*.0me.com',
2829                 '*.0pi.com',
2830                 '*.happy-couple.com',
2831                 '*.warp0.com',
2832
2833                 '*.50megs.com',         // 64.136.25.170
2834
2835                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2836                 '*.00server.com',
2837                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2838                 '*.fanspace.com',
2839
2840                 // 64.136.25.168 by Mark Bishop
2841                 '*.00go.com',
2842                 '*.00space.com',
2843                 '*.00sports.com',
2844         ),
2845         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2846         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2847         'onlyfree.de',
2848         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2849         '*.ohost.de',
2850         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2851                 '.friko.pl',
2852                 '.jak.pl',
2853                 '.nazwa.pl',
2854                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2855                 '.w8w.pl',
2856                 '.za.pl',
2857                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2858         ),
2859         'oyax.com',                             ///user_links.php
2860         '*.p2a.pl',
2861         '*.parlaris.com',
2862         '*.pathfinder.gr',
2863         '*.persianblog.com',
2864         '*.phorum.pl',
2865         'Phpbb24.com' => array( // by Daniel Eriksson
2866                 '*.createforum.us',     // registry at webbland.se
2867                 '*.forumportal.us',     // registry at webbland.se
2868                 '*.freeportal.us',      // registry at network24.se
2869                 '*.phpbb2.us',          // daniel at danielos.com
2870                 '*.phpbb24.com',        // daniel at danielos.com
2871                 '*.myforumportal.com',  // daniel at webbland.se
2872         ),
2873         'phpbb4you.com',
2874         'phpbbcommunity.com',
2875         '*.phpbbx.de',
2876         '*.pochta.ru',
2877         '*.portbb.com',
2878         '*.portcms.com',
2879         'powerwebmaster.de',
2880         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2881         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2882         '*.probook.de',
2883         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2884         '*.pun.pl',
2885         'putfile.com',
2886         '*.quickfreehost.com',
2887         'quizilla.com',
2888         '*.quotaless.com',
2889         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2890         'razyboard.com',
2891         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2892         'realhp.de',
2893         'reddit.com',           ///user/
2894         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2895                 '*.juicypornhost.com',
2896                 '*.pornzonehost.com',
2897                 '*.xhostar.com',
2898         ),
2899         'RIN.ru' => array(
2900                 '*.sbn.bz',
2901                 '*.wol.bz',
2902         ),
2903         '*.sayt.ws',
2904         'Seblg.com' => array(
2905                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2906                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2907         ),
2908         '*.seo-blog.org',
2909         '*.shoutpost.com',
2910         '*.siamforum.com',
2911         '*.siteburg.com',
2912         '*.sitehome.ru',
2913         '*.sitesfree.com',              // support at livesearching.com
2914         '*.sitesled.com',
2915         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2916         'SmarTrans.com' => array(
2917                 '.3w.to',
2918                 '.aim.to',
2919                 '.djmp.jp',
2920                 '.nihongourl.nu',
2921                 '.urljp.com',
2922                 '.www1.to',
2923                 '.www2.to',
2924                 '.www3.to',
2925         ),
2926         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2927         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2928         'members.spboards.com',
2929         'forums.speedguide.net',
2930         'Sphosting.com' => array(       // by admin at sphosting.com
2931                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2932                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2933                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2934                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2935                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2936         ),
2937         '*.spicyblogger.com',
2938         '*.spotbb.com',
2939         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2940         '*.squarespace.com',
2941         'stickypond.com',
2942         'stormloader.com',
2943         'strikebang.com',
2944         '*.sultryserver.com',
2945         '*.t35.com',
2946         '*.talks.at',
2947         'tabletpcbuzz.com',
2948         '*.talkthis.com',
2949         'tbns.net',
2950         'telasipforums.com',
2951         'theforumhub.com',
2952         'thestudentunderground.org',
2953         'think.ubc.ca',
2954         '*.thumblogger.com',
2955         'Topix.com' => array(
2956                 'topix.com',
2957                 'topix.net',
2958         ),
2959         'forum.tourism-talk.com.au',
2960         'tycho at e-lab.nl' => array(
2961                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2962                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2963         ),
2964         '*.tumblr.com',
2965         'UcoZ Web-Services' => array(
2966                 '*.3dn.ru',
2967                 '*.clan.su',
2968                 '*.moy.su',
2969                 '*.my1.ru',
2970                 '*.p0.ru',
2971                 '*.pp.net.ua',
2972                 '*.ucoz.co.uk',
2973                 '*.ucoz.com',
2974                 '*.ucoz.net',
2975                 '*.ucoz.org',
2976                 '*.ucoz.ru',
2977                 '*.ws.co.ua',
2978         ),
2979         '*.unforo.net',
2980         'veoh.com',
2981         '*.vdforum.ru',
2982         '*.vtost.com',
2983         '*.vidiac.com',
2984         'Voila.fr' => array('.site.voila.fr'),
2985         'volny.cz',
2986         'voy.com',
2987         '*.welover.org',
2988         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2989                 '*.fasthost.tv',
2990                 '*.hothost.tv',
2991                 '*.isgreat.tv',
2992                 '*.issexy.tv',
2993                 '*.isterrible.tv',
2994                 '*.somegood.tv',
2995                 '*.adultnations.com',
2996                 '*.alladultfemale.com',
2997                 '*.alladultmale.com',
2998                 '*.allbisexual.com',
2999                 '*.allbreast.com',
3000                 '*.allfeminism.com',
3001                 '*.allmanpages.com',
3002                 '*.allmendirect.com',
3003                 '*.allphotoalbum.com',
3004                 '*.allsexpages.com',
3005                 '*.allwomanweb.com',
3006                 '*.attorney-site.com',
3007                 '*.bedclip.com',
3008                 '*.bestfamilysite.com',
3009                 '*.bestmusicpages.com',
3010                 '*.bigmoron.com',
3011                 '*.bourgeoisonline.com',
3012                 '*.candyfrom.us',
3013                 '*.cartoonhit.com',
3014                 '*.cat-on-line.com',
3015                 '*.chokesondick.com',
3016                 '*.closeupsof.us',
3017                 '*.cpa-site.com',
3018                 '*.dampgirl.com',
3019                 '*.dampgirls.com',
3020                 '*.deepestfetish.com',
3021                 '*.docspages.com',
3022                 '*.dog-on-line.com',
3023                 '*.dogcountries.com',
3024                 '*.dognations.com',
3025                 '*.doingitwith.us',
3026                 '*.drenchedface.com',
3027                 '*.drenchedlips.com',
3028                 '*.drspages.com',
3029                 '*.edogden.com',
3030                 '*.eroticountry.com',
3031                 '*.fasthost.tv',
3032                 '*.fineststars.com',
3033                 '*.foronlinegames.com',
3034                 '*.forplanetearth.com',
3035                 '*.freeadultparty.com',
3036                 '*.freespeechsite.com',
3037                 '*.gayadultxxx.com',
3038                 '*.gaytaboo.com',
3039                 '*.greatcookery.com',
3040                 '*.greatrecipepages.com',
3041                 '*.greatstreamingvideo.com',
3042                 '*.hatesit.com',
3043                 '*.hothost.tv',
3044                 '*.iscrappy.com',
3045                 '*.isgreat.tv',
3046                 '*.issexy.tv',
3047                 '*.isterrible.tv',
3048                 '*.itinto.us',
3049                 '*.japannudes.net',
3050                 '*.jesussave.us',
3051                 '*.jesussaveus.com',
3052                 '*.labialand.com',
3053                 '*.lettersfrom.us',
3054                 '*.lookingat.us',
3055                 '*.lunaticsworld.com',
3056                 '*.microphallus.com',
3057                 '*.mycatshow.com',
3058                 '*.mydogshow.com',
3059                 '*.myhardman.com',
3060                 '*.mylawsite.net',
3061                 '*.mylovething.com',
3062                 '*.onasoapbox.com',
3063                 '*.onlinepulpit.com',
3064                 '*.petitionthegovernment.com',
3065                 '*.photosfor.us',
3066                 '*.picturetrades.com',
3067                 '*.pleasekiss.us',
3068                 '*.politicalemergency.com',
3069                 '*.power-emergency.com',
3070                 '*.prayingfor.us',
3071                 '*.realbadidea.com',
3072                 '*.realisticpolitics.com',
3073                 '*.reallybites.com',
3074                 '*.reallypumping.us',
3075                 '*.reallyrules.com',
3076                 '*.reallysuckass.com',
3077                 '*.reallysucksass.com',
3078                 '*.realsweetheart.com',
3079                 '*.rottenass.com',
3080                 '*.schoolreference.com',
3081                 '*.sexheroes.com',
3082                 '*.sharewith.us',
3083                 '*.smutstars.com',
3084                 '*.soakinglips.com',
3085                 '*.somegood.tv',
3086                 '*.songsfrom.us',
3087                 '*.stinkingfart.com',
3088                 '*.stinkyhands.com',
3089                 '*.storiesfrom.us',
3090                 '*.taboocountry.com',
3091                 '*.television-series.com',
3092                 '*.thisbelongsto.us',
3093                 '*.totallyboning.us',
3094                 '*.vaginasisters.com',
3095                 '*.verydirtylaundry.com',
3096                 '*.videosfor.us',
3097                 '*.videosfrom.us',
3098                 '*.videosof.us',
3099                 '*.virtualdogshit.com',
3100                 '*.web1000.com',
3101                 '*.webpicturebook.com',
3102                 '*.wronger.com',
3103                 '*.xxxnations.com',
3104                 '*.yourwaywith.us',
3105         ),
3106         'webblog.ru',
3107         'weblogmaniacs.com',
3108         '.webng.com',                   // www.*, www3.*
3109         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3110         'websitetoolbox.com',
3111         '*.webtropia.com',
3112         'Welnet.de' => array(
3113                 'welnet.de',
3114                 'welnet4u.de',
3115         ),
3116         'wh-gb.de',
3117         '*.wikidot.com',
3118         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3119         '*.wmjblogs.ru',
3120         '*.wordpress.com',
3121         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3122         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3123         '*.xforum.se',
3124         'xfreeforum.com',
3125         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3126         '*.xoomwebs.com',
3127         '.xterm.org',
3128         '.freeblogs.xp.tl',
3129         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3130         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3131         'Yahoo.com' => array(
3132                 'flickr.com',
3133                 'geocities.com',
3134         ),
3135         'YANDEX, LLC.' => array(        // noc at yandex.net
3136                 '*.narod.ru',
3137                 'ya.ru',
3138                 'yandex.ru',
3139         ),
3140         '*.yeahost.com',
3141         'yourfreebb.de',
3142         'Your-Websites.com' => array(
3143                 '*.your-websites.net',
3144                 '*.web-space.ws',
3145         ),
3146
3147
3148         '*.heliohost.org',      // by ashoat at gmail.com
3149         'X10Hosting.com' => array(
3150                 // by support at clockworkcomputers.com
3151                 '*.x10hosting.com',
3152                 '*.elementfx.com',
3153                 '*.exofire.net',
3154                 '*.pcriot.com',
3155         ),
3156         '.zendurl.com',         // by ajcar1992 at gmail.com
3157 );
3158
3159 // --------------------------------------------------
3160
3161 $blocklist['B-2'] = array(
3162
3163         // B-2: Jacked contents, something implanted
3164         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3165         '*.3dm3.com',
3166         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3167         '*.1fr1.com',
3168         'a4aid.org',
3169         'aac.com',
3170         '*.aamad.org',
3171         'ad-pecjak.si',
3172         'agnt.org',
3173         'alwanforthearts.org',
3174         '*.anchor.net.au',
3175         'anewme.org',
3176         'arcrockett.com',               ///golf/excel/
3177         'arisedesign.net',              //Portfolio/d981/
3178         'internetyfamilia.asturiastelecentros.com',
3179         'ballblair.com',                ///images/thumbs/
3180         'Ball State University' => array('web.bsu.edu'),
3181         'btofaq.net',                   ///v3/forum
3182         'blepharospasm.org',
3183         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3184         'nyweb.bowlnfun.dk',
3185         '*.buzznet.com',
3186         'Carroll College' => array(
3187                 'carroll.edu',          ///boards/
3188         ),
3189         '*.canberra.net.au',
3190         'castus.com',
3191         'Case Western Reserve University' => array('case.edu'),
3192         'ceval.de',
3193         'chaco.gov.ar',
3194         'chasingrainbowsaustralia.com', ///geometry/
3195         'codespeak.net',
3196         'Colorado School of Mines' => array('ticc.mines.edu'),
3197         '*.colourware.co.uk',
3198         'cpuisp.com',
3199         'International Christian University' => array('icu.edu.ua'),
3200         '*.iphpbb.com',
3201         'board-z.de',
3202         '*.board-z.de',
3203         'California State University Stanislaus' => array('writing.csustan.edu'),
3204         'cannon.co.za',
3205         'columbosgarden.com',
3206         '*.communityhost.de',
3207         'connectionone.org',
3208         'deathwinds.com',
3209         'deforum.org',
3210         'delayedreaction.org',
3211         'deproduction.org',
3212         'dc503.org',
3213         'dialadeck.com',                ///images/
3214         'dre-centro.pt',
3215         'Duke University' => array('devel.linux.duke.edu'),
3216         '*.esen.edu.sv',
3217         'forums.drumcore.com',
3218         'dundeeunited.org',
3219         'energyglass.com.ua',
3220         'equitas.com.au',               ///images/mim3/, no index.html
3221         'exclusivehotels.com',
3222         'info.ems-rfid.com',
3223         'fairyfunkyard.com',    ///images_files/files/
3224         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3225         'fbwloc.com',
3226         '.fhmcsa.org.au',
3227         'findyourwave.co.uk',
3228         'frogcafe.net',
3229         'plone4.fnal.gov',
3230         'freeforen.com',
3231         'funkdoc.com',
3232         'funnyclipcentral.com',
3233         'gearseds.com',
3234         'generationrice.com',
3235         'ghettojava.com',
3236         'gnacademy.org',
3237         '*.goodboard.de',
3238         'GreenDayVideo.net' => array(
3239                 'greendayvideo.net',
3240                 'espanol.greendayvideo.net',
3241         ),
3242         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3243         'Harvard Law School' => array('blogs.law.harvard.edu'),
3244         'helpiammoving.com',
3245         'homepage-dienste.com',
3246         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3247         'Howard University' => array('networks.howard.edu'),
3248         'hullandhull.com',
3249         'Huntington University' => array('huntington.edu'),
3250         'huskerink.com',
3251         '.hyba.info',
3252         'ideas4you.com',        ///photos/
3253         'inda.org',
3254         '*.indymedia.org',      // by abdecom at riseup.net
3255         'instantbulletin.com',
3256         'internetincomeclub.com',
3257         '*.inventforum.com',
3258         'Iowa State University' => array('boole.cs.iastate.edu'),
3259         'ipwso.org',
3260         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3261         'ironmind.com',
3262         'skkustp.itgozone.com', // hidden JavaScript
3263         'jazz2online.com',
3264         '.jloo.org',
3265         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3266         'kjon.com',
3267         'Kazan State University' => array(
3268                 'dir.kzn.ru',
3269                 'sys.kcn.ru',
3270         ),
3271         'test.kernel.org',
3272         'kevindmurray.com',
3273         'kroegjesroutes.nl',
3274         '.legion.org',
3275         'Loyola Marymount University' => array('lmu.edu'),
3276         'forum.lixium.fr',
3277         'macfaq.net',
3278         'macvirus.org',         ///board/
3279         'me4x4.com',
3280         'microbial-ecology.net',
3281         'minsterscouts.org',
3282         'morallaw.org',
3283         'morerevealed.com',
3284         'macronet.org',
3285         'mamiya.co.uk',
3286         'vcd.mmvcd.com',
3287         'Monmouth College' => array('department.monm.edu'),
3288         'mountainjusticemedia.org',
3289         '*.mybbland.com',
3290         'mydlstore.com',
3291         '*.netboardz.com',
3292         'North Carolina A&T State University' => array(
3293                 'ncat.edu',
3294                 'my.ncat.edu',
3295                 'hlc.ncat.edu',
3296         ),
3297         'placetobe.org',
3298         'Naropa University' => array(
3299                 'naropa.edu',                   ///forum/
3300         ),
3301         'users.nethit.pl',
3302         'nightclubvip.net',
3303         'njbodybuilding.com',
3304         'nlen.org',
3305         'North Carolina School of Science and Mathematics' => array(
3306                 'neverland.ncssm.edu',  ///include/web/forum/
3307                 'grid.ncssm.edu',               ///ncssm_grid/
3308         ),
3309         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3310         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3311         'offtextbooks.com',
3312         'ofimatika.com',
3313         'olympiafoto.com',              ///images/
3314         'omakase-net',                  // iframe
3315         'omikudzi.ru',
3316         'openchemist.net',
3317         'palungjit.com',
3318         'pataphysics-lab.com',
3319         'paypaldev.org',
3320         'paullima.com',
3321         'perl.org.br',
3322         'pfff.co.uk',
3323         'pimpo.com',                    ///_old_site/
3324         'pix4online.co.uk',
3325         'plone.dk',
3326         'preform.dk',
3327         'privatforum.de',
3328         'publicityhound.net',
3329         'puppylinux.net',               ///news/content/counter/pages/
3330         'qea.com',
3331         'rbkdesign.com',
3332         'rehoboth.com',
3333         'rodee.org',
3334         'ryanclark.org',
3335         '*.reallifelog.com',
3336         'rkphunt.com',
3337         'rso-csp.org',                  ///bulletins/
3338         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3339         'sapphireblue.com',
3340         'saskchamber.com',
3341         'savevoorhees.org',
3342         'sdhmalenovice.cz',             //galerie/
3343         'selikoff.net',
3344         'serbisyopilipino.org',
3345         'setbb.com',
3346         'sharejesusinternational.com',
3347         'silver-tears.net',
3348         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3349         '.softpress.com',
3350         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3351         'fora.taniemilitaria.pl',       ///phpbb
3352         'tehudar.ru',
3353         'Tennessee Tech University' => array('manila.tntech.edu'),
3354         'thebluebird.ws',
3355         'theosis.org',
3356         '*.thoforum.com',
3357         'troms-slekt.com',
3358         'theedgeblueisland.com',
3359         'toyshop.com.tw',               // /images/sigui/
3360         'torontoplace.com',
3361         'chat.travlang.com',
3362         'trickropingbylassue.com',
3363         'Truman State University' => array('mathbio.truman.edu'),
3364         'tuathadedannan.org',
3365         'txgotg.com',
3366         'tzaneen.co.za',
3367         'ugeavisen.com',                ///style/
3368         'forums.ugo.com',
3369         'whole.cs.unibo.it',
3370         'The University of North Dakota' => array(
3371                 'learn.aero.und.edu',
3372                 'ez.asn.und.edu',
3373         ),
3374         'The University of Alabama' => array('bama.ua.edu'),
3375         'unisonscotlandlaw.co.uk',
3376         'University of California' => array('classes.design.ucla.edu'),
3377         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3378         'University of Northern Colorado' => array('unco.edu'),
3379         'University of North Carolina' => array(
3380                 'elm.cis.uncw.edu'      ///testBoinc/
3381         ),
3382         'University of Toronto' => array(
3383                 'environment.utoronto.ca',
3384                 'grail.oise.utoronto.ca',
3385                 'utsc.utoronto.ca',
3386         ),
3387         'University of Wisconsin' => array(
3388                 'einstein.phys.uwm.edu'
3389         ),
3390         'urgentclick.com',
3391         'vacant.org.uk',
3392         'Villa Julie College' => array('www4.vjc.edu'),
3393         'Vail Valley Foundation' => array('.vvf.org'),
3394         'wabson.org',
3395         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3396         'webarch.com',          // by WebArchitects (webarch at insync.net)
3397         'weehob.com',
3398         'West Virginia University Parkersburg' => array('wvup.edu'),
3399         'williamsburgrentals.com',
3400         'wolvas.org.uk',
3401         'wookiewiki.org',
3402         'xsgaming.com',                 // Jacked
3403         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3404         'Yahoo.com' => array(
3405                 'blog.360.yahoo.com',
3406                 '*.groups.yahoo.com'
3407         ),
3408         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3409         'youthpeer.org',
3410         '*.zenburger.com',
3411         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3412 );
3413
3414 // --------------------------------------------------
3415
3416 $blocklist['C'] = array(
3417
3418         // C: Sample setting of:
3419         // Exclusive spam domains
3420         //
3421         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3422         // affiliates, finance, sending viruses, malicious attacks to browsers,
3423         // and/or mixed ones
3424         //
3425         // Please notify us about this list with reason:
3426         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3427
3428         // C-1: Domain sets (seems to be) born to spam you
3429         //
3430         // All buziness-related spam
3431         //'.biz'
3432         //
3433         'admin at seekforweb.com' => array(
3434                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3435                 '.lovestoryx.com',
3436                 '.loveaffairx.com',
3437                 '.onmore.info',
3438                 '.scfind.info',
3439                 '.scinfo.info',
3440                 '.webwork88.info',
3441         ),
3442         'boss at bse-sofia.bg' => array(        // by Boris
3443                 '.htewbop.org',
3444                 '.kimm--d.org',
3445                 '.gtre--h.org',
3446                 '.npou--k.org',
3447                 '.bres--z.org',
3448                 '.berk--p.org',
3449                 '.bplo--s.org',
3450                 '.basdpo.org',
3451                 '.jisu--m.org',
3452                 '.kire--z.org',
3453                 '.mertnop.org',
3454                 '.mooa--c.org',
3455                 '.nake--h.org',
3456                 '.noov--b.org',
3457                 '.suke--y.org',
3458                 '.vasdipv.org',
3459                 '.vase--l.org',
3460                 '.vertinds.org',
3461         ),
3462         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3463                 '.aqq3.info',
3464                 '.axa00.info',
3465                 '.okweb11.org',
3466                 '.okweb12.org',
3467                 '.okweb13.org',
3468                 '.okweb14.org',
3469         ),
3470         'opezdol at gmail.com' => array(
3471                 '.informazionicentro.info',
3472                 '.notiziacentro.info',
3473         ),
3474         'SomethingGen' => array(
3475                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3476                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3477                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3478                 // by Lee Chang (nebucha at model-x.com)
3479                 '.adult-chat-world.info',       // by Lui
3480                 '.adult-chat-world.org',        // by Lui
3481                 '.adult-sex-chat.info',         // by Lui
3482                 '.adult-sex-chat.org',          // by Lui
3483                 '.adult-cam-chat.info',         // by Lui
3484                 '.adult-cam-chat.org',          // by Lui
3485                 '.dildo-chat.org',                      // by Lui
3486                 '.dildo-chat.info',                     // by Lui
3487                 // flirt-online.info is not CamsGen
3488                 '.flirt-online.org',            // by Lui
3489                 '.live-adult-chat.info',        // by Lui
3490                 '.live-adult-chat.org',         // by Lui
3491                 '.sexy-chat-rooms.info',        // by Lui
3492                 '.sexy-chat-rooms.org',         // by Lui
3493                 '.swinger-sex-chat.info',       // by Lui
3494                 '.swinger-sex-chat.org',        // by Lui
3495                 '.nasty-sex-chat.info',         // by Lui
3496                 '.nasty-sex-chat.org',          // by Lui
3497
3498                 '.camshost.info',                       // by Sergey
3499                 '.camdoors.info',                       // by Sergey
3500                 '.chatdoors.info',                      // by Sergey
3501
3502                 // 89.149.206.225 by Pronin
3503                 '.dorozhka.info',
3504                 '.kolonochka.info',
3505                 '.knizhechka.info',
3506                 '.krantik.info',
3507                 '.lebedi.info',
3508                 '.loshad.info',
3509                 '.pechenka.info',
3510                 '.porosenok.info',
3511                 '.indyushonok.info',
3512                 '.kotyonok.info',
3513                 '.kozlyonok.info',
3514                 '.magnoliya.info',
3515                 '.svinka.info',
3516                 '.svinya.info',
3517                 '.televizorchik.info',
3518                 '.tumbochka.info',
3519                 '.zherebyonok.info',
3520
3521                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3522
3523                 '.adult-cam-chat-sex.info',             // by Lee
3524                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3525                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3526                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3527                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3528                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3529                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3530                 '.sex-chat-porn-cam.info',              // by Lee
3531         ),
3532         'mital at topo20.org' => array( // by Marcello Italianore
3533                 '.trevisos.org',
3534                 '.topo20.org',
3535         ),
3536         'WellCams.com' => array(
3537                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3538                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3539                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3540         ),
3541         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3542                 '.besturgent.org',
3543                 '.googletalknow.org',
3544                 '.montypythonltd.org',
3545                 '.supersettlemet.org',
3546                 '.thepythonfoxy.org',
3547                 '.ukgamesyahoo.org',
3548                 '.youryahoochat.org',
3549         ),
3550         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3551                 '.dbsajax.org',
3552                 '.acgt2005.org',
3553                 '.gopikottoor.com',
3554                 '.koosx.org',
3555                 '.mmgz.org',
3556                 '.zhiyehua.net',
3557         ),
3558         'vdf at lovespb.com' => array(  // by Andrey
3559                 '.02psa.info',
3560                 '.1818u.org',
3561                 '.18ew.info',
3562                 '.43sexx.org',
3563                 '.56porn.org',
3564                 '.6discount.info',
3565                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3566                 '.78rus.info',
3567                 '.92ssex.org',          // "ForumGenerator"
3568                 '.93adult.org',         // "ForumGenerator"
3569                 '.aboutsr.info',
3570                 '.aboutzw.info',
3571                 '.all23.info',
3572                 '.allvdf.info',
3573                 '.buy-dge.info',
3574                 '.buypo.info',
3575                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3576                 '.cv83.info',
3577                 '.cvwifw.info',
3578                 '.dabouts.info',
3579                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3580                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3581                 '.free01sa.info',
3582                 '.frees1.info',
3583                 '.freexz.info',
3584                 '.ifree-search.org',
3585                 '.lovespb.info',
3586                 '.myso2.info',
3587                 '.nb74u.info',
3588                 '.ohhh2.info',
3589                 '.ol43.info',
3590                 '.olala18.info',
3591                 '.oursales.info',
3592                 '.pasian1.info',
3593                 '.pldk.info',
3594                 '.po473.info',
3595                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3596                 '.poz2.info',
3597                 '.qpf8j4d.info',
3598                 '.saleqw.info',
3599                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3600                 '.sexz18.info',
3601                 '.sexy69a.info',
3602                 '.shedikc.info',
3603                 '.spb78.info',
3604                 '.usacanadauk.info',
3605                 '.v782mks.info',
3606                 '.vny0.info',
3607                 '.wifes1.info',
3608                 '.xranvam.info',
3609                 '.zenitcx.info',
3610                 '.zxolala.info',
3611         ),
3612         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3613                 '.care01.info',
3614                 '.care02.info',
3615                 '.care03.info',
3616                 '.care04.info',
3617                 '.care05.info',
3618                 '.care06.info',
3619                 '.care07.info',
3620                 '.care08.info',
3621                 '.care09.info',
3622                 '.care10.info',
3623                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3624                 '.klastar01.info',
3625                 '.klastar02.info',
3626                 '.klastar03.info',
3627                 '.klastar04.info',
3628                 '.klastar05.info',
3629                 '.klastar06.info',
3630                 '.klastar07.info',
3631                 '.klastar08.info',
3632                 '.klastar09.info',
3633                 '.klastar10.info',
3634                 '.um20ax01.info',
3635                 '.um20ax02.info',
3636                 '.um20ax03.info',
3637                 '.um20ax04.info',
3638                 '.um20ax05.info',
3639                 '.um20ax06.info',
3640                 '.um20ax07.info',
3641                 '.um20ax08.info',
3642                 '.um20ax09.info',
3643                 '.um20ax10.info',
3644         ),
3645         'forrass at gmail.com' => array(        // by Ismail
3646                 '.zmh01.info',
3647                 '.zmh02.info',
3648                 '.zmh03.info',
3649                 '.zmh04.info',
3650                 '.zmh05.info',
3651                 '.zmh06.info',
3652                 '.zmh07.info',
3653                 '.zmh08.info',
3654                 '.zmh09.info',
3655                 '.zmh10.info',
3656         ),
3657         'Varsylenko Vladimir and family' => array(
3658                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3659                 // by David C. Lack (David.C.Lack at dodgeit.com)
3660                 // by Kuzma V Safonov (admin at irtes.ru)
3661                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3662                 // by LAURI FUNK (vvm_kz at rambler.ru)
3663
3664                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3665                 '.abrek.info',                          // by Petrov
3666                 '.allsexonline.info',           // by Varsylenko
3667                 '.d1rnow.info',                         // by Petrov
3668                 '.doxer.info',                          // Petrov
3669                 '.freeforworld.info',           // Varsylenko
3670                 '.goodworksite.info',           // Varsylenko
3671                 '.onall.info',                          // by Varsylenko
3672                 '.powersiteonline.info',        // by Varsylenko
3673                 '.rentmysite.info',                     // by Varsylenko
3674                 '.sexdrink.info',                       // by Petrov
3675                 '.siteszone.info',                      // by Varsylenko
3676                 '.sfup.info',                           // by Petrov
3677                 '.superfreedownload.info',      // by Varsylenko
3678                 '.superneeded.info',            // by Varsylenko
3679                 '.srup.info',                           // by Petrov
3680
3681                 // 66.235.185.143(*.svabuse.info)
3682                 '.accommodationwiltshire.com',  // by Petrov
3683                 '.levines.info',                        // by Petrov
3684                 '.sernost.info',                        // by Petrov
3685                 '.sexvideosite.info',           // by Petrov
3686                 '.vvsag.info',                          // by Petrov
3687
3688                 // 81.0.195.134
3689                 '.michost.info',                        // by LAURI
3690                 '.parther.info',                        // by LAURI
3691
3692                 // 88.214.202.100
3693                 '.gitsite.info',                        // by Petrov
3694                 '.organiq.info',                        // by Petrov
3695                 '.yoursitedh.info',                     // by Petrov
3696
3697                 // 217.11.233.58 by Petrov
3698                 '.mp3vault.info',
3699
3700                 // DNS time out or failed
3701                 '.bequeous.info',                       // by Davi
3702                 '.sopius.info',                         // by Kuzma
3703                 '.sovidopad.info',                      // by Kuzma
3704                 '.yerap.info',                          // by Kuzma
3705         ),
3706         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3707                 '.flywebs.com',
3708                 '.hostrim.com',
3709                 '.playbit.com',
3710         ),
3711         'webmaster at dgo3d.info' => array(     // by Son Dittman
3712                 '.bsb3b.info',
3713                 '.dgo3d.info',
3714                 '.dgo5d.info',
3715         ),
3716         'cooler.infomedia at gmail.com' => array(
3717                 '.diabetescarelink.com',
3718                 '.firstdebthelp.com',
3719         ),
3720         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3721                 '.pokah.lv',
3722                 '.astrons.com',
3723         ),
3724         'seocool at bk.ru' => array(    // by Skar
3725                 '.implex3.com',
3726                 '.implex6.info',
3727                 '.softprof.org',
3728         ),
3729         'Caslim.info' => array(
3730                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3731                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3732         ),
3733         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3734                 '.777-poker.biz',
3735                 '.porn-11.com',
3736         ),
3737         'Conto.pl' => array(
3738                 '.8x.pl',               // domena at az.pl
3739                 '.3x3.pl',              // by biuro at nazwa.pl
3740                 '.conto.pl',    // by biuro at nazwa.pl
3741                 '.guu.pl',              // by conto.pl (domena at az.pl)
3742                 '.xcx.pl',              // domena at az.pl
3743                 '.yo24.pl',             // domena at az.pl
3744         ),
3745         'mail at pcinc.cn' => array(
3746                 // Domains by Lin Zhi Qiang
3747                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3748
3749                 // 125.65.112.11
3750                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3751                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3752                 '.shoopivdoor.com',
3753
3754                 // 125.65.112.12
3755                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3756                 '.hosetaibei.com',
3757                 '.playsese.com',
3758
3759                 // 125.65.112.13
3760                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3761                 '.ahatena.com',
3762                 '.asdsdgh-jp.com',
3763                 '.conecojp.net',
3764                 '.game-oekakibbs.com',
3765                 '.geocitygame.com',
3766                 '.gsisdokf.net',
3767                 '.korunowish.com',
3768                 '.netgamelivedoor.com',
3769                 '.soultakerbbs.net',
3770                 '.yahoo-gamebbs.com',
3771                 '.ywdgigkb-jp.com',
3772
3773                 // 125.65.112.14
3774                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3775                 '.acyberhome.com',
3776                 '.bbs-qrcode.com',
3777                 '.gamesroro.com',
3778                 '.gameyoou.com',
3779                 '.gangnu.com',
3780                 '.goodclup.com',
3781                 '.lineage321.com',
3782                 '.linkcetou.com',
3783                 '.love888888.com',
3784                 '.ragnarok-bbs.com',
3785                 '.ragnarok-game.com',
3786                 '.rmt-navip.com',
3787                 '.watcheimpress.com',
3788
3789                 // 125.65.112.15
3790                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3791                 '.18girl-av.com',
3792                 '.aurasoul-visjp.com',
3793                 '.gamaniaech.com',
3794                 '.game-mmobbs.com',
3795                 '.gameslin.net',
3796                 '.gemnnammobbs.com',
3797                 '.gogolineage.net',
3798                 '.grandchasse.com',
3799                 '.jpragnarokonline.com',
3800                 '.jprmthome.com',
3801                 '.maplestorfy.com',
3802                 '.netgamero.net',
3803                 '.nothing-wiki.com',
3804                 '.ourafamily.com',
3805                 '.ragnarok-sara.com',
3806                 '.rmt-lineagecanopus.com',
3807                 '.rmt-ranloki.com',
3808                 '.rogamesline.com',
3809                 '.roprice.com',
3810                 '.tuankong.com',
3811                 '.twreatch.com',
3812
3813                 // 125.65.112.22
3814                 // The same IP: web013.cdnhost.cn
3815                 '.lzy88588.com',
3816                 '.ragnaroklink.com',
3817
3818                 // 125.65.112.24
3819                 '.rmtfane.com',
3820                 '.fc2weday.com',
3821                 '.nlftweb.com',
3822
3823                 // 125.65.112.27
3824                 '.i520i.com',
3825                 '.sunwayto.com',
3826
3827                 // 125.65.112.31
3828                 // The same IP: web016.cdnhost.cn
3829                 '.twyaooplay.com',
3830
3831                 // 125.65.112.32
3832                 // The same IP: web037.cdnhost.cn
3833                 '.emeriss.com',
3834                 '.raginfoy.com',
3835                 '.ragnarokgvg.com',
3836                 '.rentalbbs-livedoor.com',
3837                 '.romaker.com',
3838                 '.sagewikoo.com',
3839                 '.samples112xrea.com',
3840                 '.wiki-house.com',
3841
3842                 // 125.65.112.49
3843                 '.chaosx0.com',
3844
3845                 // 125.65.112.88
3846                 // The same IP: web015.cdnhost.cn
3847                 '.a-hatena.com',
3848                 '.biglobe-ne.com',
3849                 '.blogplaync.com',
3850                 '.din-or.com',
3851                 '.dtg-gamania.com',
3852                 '.fcty-net.com',
3853                 '.game-fc2blog.com',
3854                 '.gameurdr.com',
3855                 '.getamped-garm.com',
3856                 '.interzq.com',
3857                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3858                 '.luobuogood.com',
3859                 '.ragnarok-search.com',
3860                 '.rinku-livedoor.com',
3861
3862                 // 125.65.112.90
3863                 '.gtvxi.com',
3864
3865                 // 125.65.112.91
3866                 // The same IP: web004.cdnhost.cn
3867                 '.6828teacup.com',
3868                 '.blog-livedoor.net',
3869                 '.cityblog-fc2web.com',
3870                 '.deco030-cscblog.com',
3871                 '.imbbs2t4u.com',
3872                 '.k5dionne.com',
3873                 '.lineagejp-game.com',
3874                 '.mbspro6uic.com',
3875                 '.slower-qth.com',
3876                 '.wikiwiki-game.com',
3877
3878                 // 125.65.112.93
3879                 // The same IP: web022.cdnhost.cn
3880                 '.aaa-livedoor.net',
3881                 '.cityhokkai.com',              // web022.cdnhost.cn
3882                 '.fanavier.net',
3883                 '.geocitylinks.com',    // web022.cdnhost.cn
3884                 '.kuronowish.net',              // web022.cdnhost.cn
3885                 '.ro-bot.net',
3886
3887                 // 125.65.112.95
3888                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3889                 '.23styles.com',
3890                 '.aehatena-jp.com',
3891                 '.ameblog-jp.net',
3892                 '.antuclt.com',
3893                 '.blog-ekndesign.com',
3894                 '.d-jamesinfo.com',
3895                 '.editco-jp.com',
3896                 '.ezbbsy.com',
3897                 '.extd-web.com',
3898                 '.fotblong.com',
3899                 '.game62chjp.net',
3900                 '.gamegohi.com',
3901                 '.gamesmusic-realcgi.net',
3902                 '.gamesragnaroklink.net',
3903                 '.homepage-nifty.com',
3904                 '.ie6xp.com',
3905                 '.irisdti-jp.com',
3906                 '.jklomo-jp.com',
3907                 '.jpxpie6-7net.com',
3908                 '.lian-game.com',
3909                 '.lineage-bbs.com',
3910                 '.lineage1bbs.com',
3911                 '.livedoor-game.com',
3912                 '.litcan.com',
3913                 '.lovejpjp.com',
3914                 '.m-phage.com',
3915                 '.muantang.com',
3916                 '.plusd-itmedia.com',
3917                 '.runbal-fc2web.com',
3918                 '.saussrea.com',
3919                 '.tooalt.com',
3920                 '.toriningena.net',
3921                 '.yahoodoor-blog.com',
3922                 '.yy14-kakiko.com',
3923
3924                 // 125.65.112.137
3925                 '.clublineage.com',
3926
3927                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3928                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3929                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3930
3931                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3932                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3933
3934                 '.games-nifty.com',             // 255.255.255.255 now
3935                 '.homepage3-nifty.com', // 255.255.255.255 now
3936         ),
3937         'caddd at 126.com' => array(
3938                 '.chengzhibing.com',    // by chen gzhibing
3939                 '.jplinux.com',                 // by lian liang
3940                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3941                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3942                 '.tooplogui.com',               // by zibing cai
3943                 '.twsunkom.com',                // by guo zhi wei
3944                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3945         ),
3946         'nuigiym2 at 163.com' => array( // by fly bg
3947                 '.linainfo.net',                // Seems IP not allocated now
3948                 '.lineagalink.com',             // 220.247.157.99
3949                 '.lineagecojp.com',             // 61.139.126.10
3950                 '.ragnarokonlina.com',  // 220.247.158.99
3951         ),
3952         'aakin at yandex.ru' => array(
3953                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3954                 '.entirestar.com',
3955                 '.superbuycheap.com',
3956                 '.topdircet.com',
3957         ),
3958         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3959                 '.tianmieccp.com',
3960                 '.xianqiao.net',
3961         ),
3962         'm.frenzy at yahoo.com' => array(       // by Michael
3963                 '.p5v.org',
3964                 '.j111.net',
3965                 '.searchhunter.info',
3966                 '.soft2you.info',
3967                 '.top20health.info',
3968                 '.top20ringtones.info',
3969                 '.top20travels.info',
3970                 '.v09v.info',
3971                 '.x09x.info',
3972                 '.zb-1.com',
3973         ),
3974         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3975                 '.bingogoldenpalace.info',
3976                 '.ccarisoprodol.info',
3977                 '.ezxcv.info',
3978                 '.isuperdrug.com',
3979                 '.pharmacif.info',
3980                 '.pornsexteen.biz',
3981                 '.ugfds.info',
3982                 '.vviagra.info',
3983         ),
3984         'anatolsenator at gmail.com' => array(  // by Anatol
3985                 '.cheapestviagraonline.info',
3986                 '.buyphentermineworld.info'
3987         ),
3988         'webmaster at mederotica.com' => array(
3989                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3990                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3991                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3992                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3993         ),
3994         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3995                 '.auase.info',          // by ilemavyq7461 at techie.com
3996                 '.axeboxew.info',       // by zygeu220 at writeme.com
3997                 '.boluzuhy.info',       // by pikico5419 at post.com
3998                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3999                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4000                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4001                 '.exidiqe.info',        // by kufyca5475 at mail.com
4002                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4003                 '.gubiwu.info',         // by lywunef6532 at iname.com
4004                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4005                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4006                 '.jiuuz.info',          // by meqil6549 at mail.com
4007                 '.nudetar.info',        // by vohepafi3536 at techie.com
4008                 '.nipud.info',          // by bohox9872 at mindless.com
4009                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4010                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4011                 '.olasep.info',         // by lizon8506 at mail.com
4012                 '.oueuidop.info',       // by arytyb6913 at europe.com
4013                 '.oviravy.info',        // by amyuu3883 at london.com
4014                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4015                 '.ragibe.info',         // by ehome4458 at myself.com
4016                 '.ucazib.info',         // by gorare7222 at consultant.com
4017                 '.udaxu.info',          // by gubima4007 at usa.com
4018                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4019                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4020                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4021                 '.yvaxat.info',         // by koqun9660 at mindless.com
4022                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4023         ),
4024         'Carmodelrank.com etc' => array(
4025                 // by Brianna Dunlord (briasmi at yahoo.com)
4026                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4027                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4028                 '.carmodelrank.com',// by Brianna
4029                 '.cutestories.net',     // by Brianna
4030                 '.sturducs.com',
4031                 '.bestother.info',      // by Tim
4032                 '.premiumcasinogames.com',      // by Brianna)
4033                 '.yaahooo.info',        // by Alice
4034         ),
4035         'aliacsandr at yahoo.com' => array(
4036                 '.cubub.info',                          // "Free Web Hosting"
4037         ),
4038         'aliacsandr85 at yahoo.com' => array(
4039                 // by Dr. Portillo or Eva Sabina Lopez Castell
4040                 '.xoomer.alice.it',                     // "Free Web Hosting"
4041                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4042                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4043                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4044                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4045                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4046                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4047                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4048                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4049                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4050                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4051                 '.viagra-price.org',            // by Eva
4052                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4053                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4054         ),
4055         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4056         'Something-Gamble' => array(
4057                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4058                 '.atonlineroulette.com',                        // by Blaise Johns
4059                 '.atroulette.com',                                      // by Gino Sand
4060                 '.betting-123.com',                                     // by Joana Caceres
4061                 '.betting-i.biz',                                       // by Joaquina Angus
4062                 '.casino-challenge.com',                        // by Maren Camara
4063                 '.casino-gambling-i.biz',                       // by Giselle Nations
4064                 '.casino-italian.com',                          // by Holley Yan
4065                 '.casino123.net',                                       // by Ta Baines
4066                 '.casinohammamet.com',                          // by Inger Barhorst
4067                 '.casinoqz.com',                                        // by Berenice Snow
4068                 '.casinos-777.net',                                     // by Iona Ayotte
4069                 '.crapsok.com',                                         // by Devon Adair,
4070                 '.dcasinoa.com',                                        // by August Hawkinson
4071                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4072                 '.free-dvd-player.biz',                         // by Rosario Kidd
4073                 '.florida-lottery-01.com',                      // by Romeo Dillon
4074                 '.gaming-123.com',                                      // by Jennifer Byrne
4075                 '.kenogo.com',                                          // by Adriane Bell
4076                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4077                 '.onbaccarat.com',                                      // by Kassandra Dunn
4078                 '.online-experts.biz',                          // by Liberty Helmick
4079                 '.onlinepoker-123.com',                         // by Andrea Feaster
4080                 '.playpokeronline-123.com',                     // by Don Lenard
4081                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4082                 '.texasholdem123.com',                          // by Savion Lasseter
4083                 '.texasholdem-777.com',                         // by Savanna Lederman
4084                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4085                 '.the-craps-100.us',                            // by Lorrine Ripley
4086                 '.the-free-online-game-913.us',         // by Kanesha Clem
4087                 '.the-free-poker-1798.us',                      // by Elaina Witte
4088                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4089                 '.the-online-game-poker-1185.us',       // by Merna Bey
4090                 '.the-playing-black-jack.com',          // by Kristine Brinker
4091                 '.the-poker-1082.us',                           // by Kristofer Boldt
4092                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4093                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4094                 '.the-video-black-jack.com',            // by Jagger Godin
4095         ),
4096         'Something-Insurance' => array(
4097                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4098
4099                 // 0-9
4100                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4101                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4102                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4103                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4104                 '.18wkcf.com',                                  // by Lexy Bohannon
4105                 '.2001werm.org',                                // by Raphael Rayburn
4106                 '.2004heeparea1.org',                   // by Dinorah Andrews
4107                 '.21nt.net',                                    // by Jaida Estabrook
4108                 '.3finfo.com',                                  // by Damian Pearsall
4109                 '.3somes.org',                                  // by Mauro Tillett
4110                 '.453531.com',                                  // by Kurt Flannery
4111                 '.4freesay.com',                                // by Eloy Jones
4112                 '.5ssurvey.com',                                // by Annamarie Kowalski
4113                 '.8-f22.com',                                   // by Larraine Evers
4114                 '.9q.org',                                              // by Ami Boynton
4115
4116                 // A
4117                 '.a40infobahn.com',                             // by Amit Nguyen
4118                 '.a4h-squad.com',                               // by Ross Locklear
4119                 '.aac2000.org',                                 // by Randi Turner
4120                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4121                 '.acahost.com',                                 // by Milton Haberman
4122                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4123                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4124                 '.activel-learning-site.com',   // by Mateo Conn
4125                 '.ad-makers.com',                               // by Shemeka Arsenault
4126                 '.ada-information.org',                 // by Josef Osullivan
4127                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4128                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4129                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4130                 '.aerovac-hotpress.com',                // by Trey Marlow
4131                 '.agfbiosensors.com',                   // by Lionel Dempsey
4132                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4133                 '.affordablerealestate.net',    // by Season Otoole
4134                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4135                 '.ahouserefinance.com',                 // by Young Alley
4136                 '.akirasworld.com',                             // by Piper Sullivan
4137                 '.alderik-production.com',              // by Joan Stiles
4138                 '.alltechdata.com',                             // by Dom Laporte
4139                 '.amconllc.com',                                // by Syble Benjamin
4140                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4141                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4142                 '.angelandcrown.net',                   // by Claretta Najera
4143                 '.ankoralina.com',                              // by Eladia Demers
4144                 '.antiquegoldmine.com',                 // by Keena Marlow
4145                 '.aquinosotros.com',                    // by Nanci Prentice
4146                 '.architectionale.com',                 // by Wilbur Cornett
4147                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4148                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4149                 '.arefinancehome.com',                  // by Duane Doran
4150                 '.arefinancinghome.com',                // by Ike Laney
4151                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4152                 '.auction-emall-site.info',             // by Dayle Denman
4153                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4154                 '.auto-buy-rite.com',                   // by Asuncion Buie
4155                 '.axxinet.net',                                 // by Roberta Gasper
4156                 '.azimutservizi.com',                   // by Ethelene Brook
4157                 '.azstudies.org',                               // by Bernardina Walden
4158
4159                 // B
4160                 '.babtrek.com',                                 // by Simonette Mcbrayer
4161                 '.babycujo.com',                                // by Francisco Akers
4162                 '.bakeddelights.com',                   // by Dave Evenson
4163                 '.bbcart.com',                                  // by Lucio Hamlin
4164                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4165                 '.best-digital-phone.us',               // by Meghann Crockett
4166                 '.bjamusements.com',                    // by Lurlene Butz
4167                 '.blursgsu.com',                                // by Weston Killian
4168                 '.bookwide.net',                                // by Tequila Zacharias
4169                 '.boreholes.org',                               // by Flora Reed
4170                 '.breathingassociaiton.org',    // by Alfred Crayton
4171                 '.birdingnh.com',                               // by Donald Healy
4172                 '.bisdragons.org',                              // by Lupe Cassity
4173                 '.blcschools.net',                              // by Alycia Jolly
4174                 '.bronte-foods.com',                    // by Kary Pfeiffer
4175                 '.buckscountyneighbors.org',    // by Maile Gaffney
4176                 '.buffalofudge.com',                    // by Mable Whisenhunt
4177                 '.burlisonforcongress.com',             // by Luann King
4178                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4179                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4180
4181                 // C
4182                 '.cabanes-web.com',                             // by Vaughn Latham
4183                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4184                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4185                 '.checaloya.com',                               // by Susana Coburn
4186                 '.calvarychapelrgvt.org',               // by Karan Kittle
4187                 '.cameras-esite.info',                  // by Karlee Frisch
4188                 '.cancerkidsforum.org',                 // by Samson Constantino
4189                 '.ccchoices.org',                               // by Kenia Cranford
4190                 '.ccupca.org',                                  // by Evonne Serrano
4191                 '.celebratemehome.com',                 // by Soraya Tower
4192                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4193                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4194                 '.choose-shoes.net',                    // by Geoffrey Setser
4195                 '.churla.com',                                  // by Ollie Wolford
4196                 '.circuithorns.co.uk',                  // by Nathanial Halle
4197                 '.clanbov.com',                                 // by Donell Hozier
4198                 '.cnm-ok.org',                                  // by Thalia Moye
4199                 '.coalitioncoalition.org',              // by Ned Macklin
4200                 '.consoleaddicts.com',                  // by Dorla Hoy
4201                 '.counterclockwise.net',                // by Melynda Hartzell
4202                 '.codypub.com',                                 // by Mercedes Coffman
4203                 '.comedystore.net',                             // by Floy Donald
4204                 '.covsys.co.uk',                                // by Abby Jacey
4205                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4206                 '.craftybidders.com',                   // by Dannie Lazo
4207                 '.credit-card-finder.net',              // by Mellie Deherrera
4208                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4209                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4210                 '.ctwine.org',                                  // by Hailey Knox
4211
4212                 // D
4213                 '.dazyation.com',                               // by Louis Strasser
4214                 '.deepfoam.org',                                // by Ethelyn Southard
4215                 '.debt-fixing.com',                             // by Dagny Rickman
4216                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4217                 '.domainadoption.com',                  // by Breann Pappas
4218                 '.diannbomkamp.com',                    // by Russel Croteau
4219                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4220                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4221                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4222                 '.digital-cameras-esite.info',  // by Milan Jolin
4223                 '.dnstechnet.net',                              // by Tamera Oman
4224                 '.drivenbydata.org',                    // by Katherine Noyes
4225                 '.dtmf.net',                                    // by Micki Slayton
4226                 '.domainsfound.com',                    // by Blossom Lively
4227
4228                 // E
4229                 '.ecstacyabuse.net',                    // by Alana Knight
4230                 '.e-digital-camera-esite.info', // by Romaine Cress
4231                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4232                 '.eldorabusecenter.org',                // by Annabella Oneal
4233                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4234                 '.encaponline.com',                             // by Patrick Keel
4235                 '.ez-shopping-online.com',              // by Gail Bartlett
4236
4237                 // F
4238                 '.faithfulwordcf.com',                  // by Bart Weeks
4239                 '.fammedassoc.com',                             // by Joshua Nelson
4240                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4241                 '.f00k.org',                                    // by Leslie Chapman
4242                 '.foreignrealtions.org',                // by Krystal Hawley
4243                 '.fortwebsite.org',                             // by Kristina Motley
4244                 '.fotofirstdigital.com',                // by Tad Whitfield
4245                 '.foundationcommons.org',               // by Caryn Eskew
4246                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4247                 '.freaky-cheats.com',                   // by Al Klein
4248                 '.free--spyware.com',                   // by Nikki Contreras
4249                 '.french-home-finance-consultant.info', // by Santana Melton
4250                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4251
4252                 // G
4253                 '.gaintrafficfast.com',                 // by Lila Meekins
4254                 '.gaygain.org',                                 // by Shell Davila
4255                 '.gcaaa.com',                                   // by Vallie Jaworski
4256                 '.generalsysteme.com',                  // by Cale Vogel
4257                 '.generation4games.co.uk',              // by Sonya Graham
4258                 '.german-dictionary.us',                // by Rex Daniel
4259                 '.gilmerrec.com',                               // by Leighann Guillory
4260                 '.glenthuntly-athletics.com',   // by Julee Hair
4261                 '.glorybaskets.com',                    // by Lynette Lavelle
4262                 '.goconstructionloan.com',              // by Willis Monahan
4263                 '.gohireit.com',                                // by Bertha Metzger
4264                 '.godcenteredpeople.com',               // by Jaycee Coble
4265
4266                 // H
4267                 '.healthinsuranceem.com',               // by Justin Munson
4268                 '.hearthorizon.info',                   // by Kory Session
4269                 '.hegerindustrial.com',                 // by Toni Wesley
4270                 '.herzequip.com',                               // by Princess Dunkle
4271                 '.hglcms.org',                                  // by Gladwin Ng
4272                 '.hipanoempresa.com',                   // by Shannon Staub
4273                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4274                 '.horse-racing-result.com',             // by Rodney Reynolds
4275                 '.hueckerfamily.com',                   // by Hershel Sell
4276
4277                 // I
4278                 '.ilove2win.com',                               // by Lamont Dickerson
4279                 '.ilruralassistgrp.org',                // by Moises Hauser
4280                 '.imageonsolutions.com',                // by Porsche Dubois
4281                 '.infoanddatacenter.com',               // by Eva Okelley
4282                 '.islamfakta.org',                              // by Goldie Boykin
4283                 '.ithomemortgage.com',                  // by Adelaide Towers
4284                 '.iyoerg.com',                                  // by Madyson Gagliano
4285
4286                 // J
4287                 '.jeffaxelsen.com',                             // by Daphne William
4288                 '.jeffreyf.net',                                // by Vito Platt
4289                 '.johnmartinsreality.com',              // by Pamela Larry
4290                 '.johnsilvers.net',                             // by Silver Battaglia
4291
4292                 // K
4293                 '.kcgerbil.org',                                // by Marisa Thayer
4294                 '.kdc-phoenix.com',                             // by Salma Shoulders
4295                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4296                 '.kosove.org',                                  // by Darwin Schneider
4297
4298                 // L
4299                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4300                 '.letsgokayaking.net',                  // by Winnie Adair
4301                 '.libertycabs.com',                             // by Adela Bonds
4302                 '.liquor-store-cellar.info',    // by Hugh Pearson
4303                 '.locomojo.net',                                // by Marco Harmon
4304                 '.lodatissimo.com',                             // by Adrian Greeson
4305                 '.lsawc.org',                                   // by Lara Han
4306                 '.lycos-test.net',                              // by Rigoberto Oakley
4307
4308                 // M
4309                 '.macro-society.com',                   // by Venessa Hodgson
4310                 '.marthasflavorfest.com',               // by Ahmad Lau
4311                 '.martin-rank.com',                             // by Cathleen Crist
4312                 '.maryandfrank.org',                    // by Theodore Apodaca
4313                 '.masterkwonhapkido.com',               // by Misty Graham
4314                 '.maxrpm-demo.com',                             // by Cristal Cho
4315                 '.mechanomorphic.com',                  // by Stanford Crow
4316                 '.mepublishing.net',                    // by Karly Fleenor
4317                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4318                 '.metwahairports.com',                  // by Nan Kitchen
4319                 '.middle-eastnews.com',                 // by Tybalt Altmann
4320                 '.mikepelchy.com',                              // by Sherly Pearson
4321                 '.milpa.org',                                   // by Nelly Aguilera
4322                 '.modayun.com',                                 // by Camilla Velasco
4323                 '.moonstoneerp.com',                    // by Garret Salmon
4324                 '.morosozinho.com',                             // by Lenore Tovar
4325                 '.morphadox.com',                               // by Hung Zielinski
4326                 '.moscasenlared.com',                   // by Tera Gant
4327                 '.sdjavasig.com',                               // by Gia Swisher
4328                 '.mpeg-radio.com',                              // by Sincere Beebe
4329                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4330                 '.mtseniorcenter.org',                  // by Frederic Ortega
4331                 '.mysteryclips.com',                    // by Edward Ashford
4332
4333                 // N
4334                 '.naavs.org',                                   // by Yuridia Gandy
4335                 '.naval-aviation.org',                  // by Roselle Campo
4336                 '.navigare-ischia.com',                 // by Arielle Coons
4337                 '.ncredc.org',                                  // by Brenda Nye
4338                 '.neonmotorsports.com',                 // by Giovanna Vue
4339                 '.nf-ny.com',                                   // by Yadira Hibbard
4340                 '.ngfdyqva.com',                                // by Emiliano Samples
4341                 '.nicozone.com',                                // by Blaine Shell
4342                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4343                 '.npawny.org',                                  // by Willard Murphy
4344                 '.nysdoed.org',                                 // by Elric Delgadillo
4345                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4346                 '.nytech-ir.com',                               // by Adrien Beals
4347
4348                 // O
4349                 '.oadmidwest.com',                              // by Gavin Kaplan
4350                 '.oarauto.com',                                 // by Susann Merriman
4351                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4352                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4353                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4354                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4355                 '.online-pills-24x7.biz',               // by Aide Hallock
4356                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4357                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4358                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4359                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4360                 '.otterbayweb.com',                             // by Maxwell Irizarry
4361
4362                 // P
4363                 '.painting-technique.us',               // by Bryanna Tooley
4364                 '.pakamrcongress.com',                  // by Bryce Summerville
4365                 '.patabney.com',                                // by Kailyn Slone
4366                 '.parde.org',                                   // by Ellie Yates
4367                 '.participatingprofiles.com',   // by Jaelynn Meacham
4368                 '.partnershipconference.org',   // by Alla Floyd
4369                 '.pet-stars.com',                               // by Carmon Luevano
4370                 '.planning-law.org',                    // by Trista Holcombe
4371                 '.ppawa.com',                                   // by Evonne Scarlett
4372                 '.precisionfilters.net',                // by Faustina Fell
4373
4374                 // Q
4375                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4376                 '.quick-debt-consolidation.net',        // by Lala Marte
4377                 '.quicktvr.com',                                // by Vernell Crenshaw
4378
4379                 // R
4380                 '.radicalsolutions.org',                // by Reece Medlin
4381                 '.randallburgos.com',                   // by Bradly Villa
4382                 '.rcassel.com',                                 // by Janiah Gallant
4383                 '.rearchitect.org',                             // by Marcus Gaudet
4384                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4385                 '.reprisenashville.com',                // by Hester Khan
4386                 '.reptilemedia.com',                    // by Alicia Patel
4387                 '.resellers2000.com',                   // by Dedra Kennedy
4388                 '.reverse-billing.com',                 // by Lazaro Gluck
4389                 '.richcapaldi.com',                             // by Kya Haggard
4390                 '.richformissouri.com',                 // by Alanna Elston
4391                 '.robstraley.com',                              // by Leida Bartell
4392                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4393                 '.rpgbbs.com',                                  // by Leonel Peart
4394                 '.ruralbusinessonline.org',             // by Lynsey Watters
4395                 '.ruwomenscenter.org',                  // by Vince Mclemore
4396                 '.ryanjowens.com',                              // by Janine Smythe
4397
4398                 // S
4399                 '.sagarmathatv.org',                    // by Liam Funke
4400                 '.sakyathubtenling.org',                // by Liane Falgout
4401                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4402                 '.sandishaven.com',                             // by Lino Soloman
4403                 '.scienkeen.com',                               // by Liza Navarra
4404                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4405                 '.severios.com',                                // by Isa Steffen
4406                 '.sexual-hot-girls.com',                // by Viviana Bolton
4407                 '.shakespearelrc.com',                  // by Luciana Weaver
4408                 '.shashran.org',                                // by Adriel Humphries
4409                 '.shoes-shop.us',                               // by Austen Higginbotham
4410                 '.skagitvalleybassanglers.com', // by Necole Thiele
4411                 '.skinsciencesalon.com',                // by Nena Rook
4412                 '.smartalternative.net',                // by Nicki Lariviere
4413                 '.sml338.org',                                  // by Nickole Krol
4414                 '.smogfee.com',                                 // by Sienna Kimble
4415                 '.sneakers-e-shop.info',                // by Nikki Fye
4416                 '.spacewavemedia.com',                  // by Thanh Gast
4417                 '.softkernel.com',                              // by Nicol Hummer
4418                 '.stjoanmerrillville.com',              // by Hunter Beckham
4419                 '.strelinger.com',                              // by Arron Highsmith
4420                 '.striking-viking.com',                 // by Kylie Endsley
4421                 '.sunnydeception.org',                  // by Amaya Llora
4422                 '.sunzmicro.com',                               // by Goddard Arreola
4423                 '.sv-iabc.org',                                 // by Braden Buck
4424                 '.sykotick.com',                                // by Pierce Knecht
4425
4426                 // T
4427                 '.tbody.net',                                   // by Ormond Roman
4428                 '.the-pizzaman.com',                    // by Mario Ramsey
4429                 '.the-shoes.us',                                // by Alejandro Gaffney
4430                 '.theborneocompany.com',                // by Bryanna Tooley
4431                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4432                 '.thehomeschool.net',                   // by September Concepcio
4433                 '.thenewlywed.com',                             // by Allegra Marra
4434                 '.tigerspice.com',                              // by Denis Mosser
4435                 '.tnaa.net',                                    // by Jasmine Andress
4436                 '.top-finance-sites.com',               // by Maryann Doud
4437                 '.tradereport.org',                             // by Bettie Sisk
4438                 '.transmodeling.com',                   // by Martine Button
4439                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4440                 '.tsaoc.com',                                   // by Heriberto Mcfall
4441                 '.tsunamidinner.com',                   // by Nannie Richey
4442
4443                 // U
4444                 '.uhsaaa.com',                                  // by Risa Herbert
4445                 '.ultradeepfield.org',                  // by Bobby Ragland
4446                 '.umkclaw.info',                                // by Cammy Kern
4447                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4448                 '.usa-wolf.com',                                // by Jacklyn Morrill
4449                 '.usjobfair.com',                               // by Lorina Burchette
4450
4451                 // V
4452                 '.vacancesalouer.com',                  // by Loris Bergquist
4453                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4454                 '.valleylibertarians.org',              // by Lena Massengale
4455                 '.vanderbiltevents.com',                // by Gannon Krueger
4456                 '.vanwallree.com',                              // by Michelina Donahue
4457                 '.vcertificates.com',                   // by Hyun Lamp
4458                 '.vonormytexas.us',                             // by Suzette Waymire
4459
4460                 // W
4461                 '.washingtondc-areahomes.net',  // by Ailene Broome
4462                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4463                 '.wolsaoh.org',                                 // by Daniela English
4464                 '.worldpropertycatalog.com',    // by Aray Baxter
4465
4466                 // Y
4467                 '.yankee-merchants.com',                // by Jackson Hinojosa
4468                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4469                 '.yourdomainsource.com',                // by Deems Weingarten
4470
4471                 // Z
4472                 '.zkashan.com',                                 // by Evan Light
4473                 '.zockclock.com',                               // by Dorothea Guthrie
4474         ),
4475         'Something-Drugs' => array(
4476                 // Drugs / Pills / Diet
4477                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4478                 '.abdelghani-shady.com',                // by Elly Alton
4479                 '.bangbangfilm.com',                    // by Davin Chou
4480                 '.centroantequera.com',                 // by Keon Kwiatkowski
4481                 '.champagne-cellar.info',               // by Kandis Rizzo
4482                 '.chix0r.org',                                  // by Christoper Baird
4483                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4484                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4485                 '.fast-cash-01.com',                    // by Edgar Oliver
4486                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4487                 '.fn-nato.com',                                 // by Donny Dunlap
4488                 '.gqyinran.com',                                // by Alejandro Parks
4489                 '.juris-net.com',                               // by Rachelle Bravo
4490                 '.leftpencey.com',                              // by Aileen Ashby
4491                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4492                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4493                 '.palaceroyale.net',                    // by Brycen Stebbins
4494                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4495                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4496                 '.yukissushi.com',                              // by Donell Hozier
4497         ),
4498         'Something-Others' => array(
4499                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4500                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4501         ),
4502         'Something-NoApp' => array(
4503                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4504                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4505                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4506                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4507                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4508         ),
4509         'Cortez and family' => array(
4510                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4511                 '.dronadaarsujf.info',  // by Cortez
4512                 '.fromnananaref.info',  // by Cortez
4513                 '.goorkkjsaka.info',    // by Cortez
4514                 '.jkdfjjkkdfe.info',    // by Rico
4515                 '.jkllloldkjsa.info',   // by Cortez
4516                 '.nnjdksfornms.info',   // by Rico
4517                 '.mcmdkkksaoka.info',   // by Cortez
4518                 '.srattaragfon.info',   // by Cortez
4519                 '.yreifnnonoom.info',   // by Rico
4520                 '.zjajjsvgeuds.info',   // by Cortez
4521         ),
4522         'admin at ematuranza.com' => array(
4523                 '.ancorlontano.com',
4524                 '.dentroallago.com',
4525                 '.digiovinezza.com',
4526                 '.ematuranza.com',
4527                 '.ilfango.com',
4528                 '.nullarimane.com',
4529                 '.questaimmensa.com',
4530                 '.tentailvolo.com',
4531                 '.unatenerezza.com',
4532                 '.volgondilettose.com',
4533         ),
4534         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4535                 '.bid99df.info',
4536                 '.bj498uf.info',
4537                 '.edeuj84.info',
4538                 '.f4mfid.info',
4539                 '.g4vf03a.info',
4540                 '.j09j4r.info',
4541                 '.jv4r8hv.info',
4542                 '.k43sd3.info',
4543                 '.k4r84d.info',
4544                 '.k4rvda.info',
4545                 '.k4v0df.info',
4546                 '.k903os.info',
4547                 '.k9df93d.info',
4548                 '.kv94fd.info',
4549                 '.ksjs93.info',
4550                 '.l0ks03.info',
4551                 '.l9u3jc.info',
4552                 '.lv043a.info',
4553                 '.nh94h9.info',
4554                 '.m94r9d.info',
4555                 '.s87fvd.info',
4556                 '.v3k0d.info',
4557                 '.v4r8j4.info',
4558                 '.vf044s.info',
4559                 '.vj49rs.info',
4560                 '.vk498j.info',
4561                 '.u03jow.info',
4562         ),
4563         'Nikhil and Brian' => array(
4564                 // by Brian Dieckman (info at iudndjsdhgas.info)
4565                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4566                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4567                 '.ihfjeswouigf.info',   // by Brian, / was not found
4568                 '.iudndjsdhgas.info',   // by Brian, / was not found
4569                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4570                 '.jiatdbdisut.info',    // by Brian, / was not found
4571                 '.jkfierwoundhw.info',  // by Brian, / was not found
4572                 '.kfjeoutweh.info',             // by Brian, / was not found
4573                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4574                 '.oudjskdwibfm.info',   // by Brian, / was not found
4575                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4576                 '.itxbsjacun.info',             // by Nikhil, / was not found
4577                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4578                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4579                 '.najedncdcounrd.info', // by Nikhil, / was not found
4580                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4581                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4582                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4583                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4584                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4585                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4586                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4587                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4588                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4589         ),
4590         'wealth777 at gmail.com' => array(      // by Henry Ford
4591                 '.brutal-forced.com',
4592                 '.library-bdsm.com',
4593                 '.rape-fantasy.us',
4594         ),
4595         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4596                 '.purerotica.com',
4597                 '.richsex.com',
4598                 '.servik.net',
4599                 '.withsex.com',
4600         ),
4601         'dreamteammoney.com' => array(
4602                 '.dreamteammoney.com',  // dtmurl.com related
4603                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4604         ),
4605         'KLIK VIP Search and family' => array(
4606                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4607                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4608                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4609                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4610                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4611                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4612                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4613         ),
4614         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4615                 '.antivirs.info',
4616                 '.antivirus1.info',
4617                 '.antivirus2.info',
4618         ),
4619         'wasam at vangers.net and family' => array(
4620
4621                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4622                 '.bahatoca.org',
4623                 '.digestlycos.org',
4624                 '.educativaanale.info',
4625                 '.guildstuscan.org',
4626                 '.isaakrobbins.info',
4627                 '.isfelons.org',
4628                 '.lvwelevated.org',
4629                 '.macphersonaca.org',
4630                 '.markyaustrian.org',
4631                 '.michelepug.org',
4632                 '.opalbusy.info',
4633                 '.quijotebachata.info',
4634                 '.salthjc.info',
4635                 '.shogunnerd.info',
4636                 '.solarissean.org',
4637                 '.sparkgsx.info',
4638                 '.tarzanyearly.org',
4639                 '.tulabnsf.org',
4640                 '.vaccarinos.org',
4641
4642                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4643                 '.e2007.info',
4644                 '.cmoss.info',
4645
4646                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4647                 '.finddesk.org',
4648                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4649                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4650                 '.rcatalog.org',
4651                 '.sbitzone.org',
4652
4653                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4654                 '.cheapns.org',
4655                 '.my-top.net',
4656                 '.sfind.net',
4657                 '.sspot.net',
4658                 '.suvfind.info',
4659
4660                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4661                 '.trumber.com',
4662
4663                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4664                 '.blogduet.org',
4665                 '.carelf.info',
4666                 '.cmagic.org',
4667                 '.cspell.org',
4668                 '.dspark.org',
4669                 '.dtonic.org',
4670                 '.mcharm.info',
4671                 '.mslook.info',
4672                 '.phpdinnerware.info',
4673                 '.rnation.org',
4674                 '.uzing.org',
4675
4676                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4677                 '.allbar.info',
4678                 '.allersearch.org',
4679                 '.allzoom.org',
4680                 '.dynall.org',
4681                 '.fastopia.org',
4682                 '.offasfast.info',
4683                 '.rblast.org',
4684                 '.rchistes.info',
4685                 '.rette.org',
4686                 '.shufflequince.org',
4687                 '.suvlook.org',
4688
4689                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4690                 '.290cabeza.org',
4691                 '.bossierpainted.org',
4692                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4693                 '.definekonica.info',   // Admin: tvaals at vangers.net
4694                 '.gradetelemundo.info',
4695                 '.hydraulickin.info',
4696                 '.indicadorestmj.info',
4697                 '.keeleykincaid.org',
4698                 '.kleenbowser.info',
4699                 '.pipnickname.info',
4700                 '.pacolily.org',
4701                 '.redeemtrabalho.info',
4702                 '.scanmakerchua.info',
4703                 '.titanmessina.info',
4704                 '.tragratuit.org',
4705                 '.yeareola.info',
4706         ),
4707         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4708                 '.canadianmedsworld.info',      // 84.252.133.112
4709                 '.tabsdrugstore.info',          // 84.252.133.114
4710                 '.tabsstore.info',                      // 84.252.133.114
4711                 '.topcholesterol.info',         // 84.252.133.132
4712         ),
4713         'be.cx' => array(
4714                 '.be.cx',
4715                 '.ca.cx',
4716         ),
4717         'john780321 at yahoo.com' => array(     // by John  Brown
4718                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4719                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4720                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4721         ),
4722         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4723                 '.bertela.info',
4724                 '.forblis.info',
4725                 '.frenallo.info',
4726                 '.goyahoo.info',
4727                 '.herbak.info',
4728                 '.kiokast.info',
4729                 '.nerenok.info',
4730                 '.pestgets.info',
4731                 '.snukker.info',
4732                 '.thegetspons.info',
4733         ),
4734         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4735                 '.bobop.info',
4736                 '.kwwwe.info',
4737                 '.piikz.info',
4738                 '.moosm.info',
4739                 '.vvvw.info',
4740         ),
4741         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4742                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4743                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4744                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4745                 '.jplingood.com',       // 125.65.112.15
4746                 '.linenew.com',         // 203.191.148.96
4747                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4748                 '.yzlin.com',           // 220.162.244.36
4749         ),
4750         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4751                 '.1111mb.com',
4752                 '.2sex18.com',
4753                 '.69porn1.com',
4754         ),
4755         'ECTechnology' => array(
4756                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4757                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4758                 '.automouse.jp',
4759         ),
4760         'lyqz at 21cn.com' => array(
4761                 '.japangame1.com',
4762                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4763                 '.livedoor1.com',
4764                 '.ragnarokonline1.com',
4765                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4766         ),
4767         'kingrou at hotmail.com' => array(      // by yangjianhe
4768                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4769                 '.453787.com',
4770         ),
4771         'anpaul541000 at 163.com' => array(     // by su qiuqing
4772                 '.cetname.com',                 // 222.77.185.87
4773                 '.jpgamer.net',                 // 220.247.157.106
4774                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4775                 '.lovejptt.com',                // 222.77.185.87
4776                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4777                 '.playncsoft.net',              // 220.247.157.106
4778         ),
4779         'abc00613 at 163.com' => array( // by guo yong
4780                 '.avtw1068.com',                // 64.74.223.11
4781                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4782                 '.djkkk66990.com',              // 68.178.232.99
4783                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4784         ),
4785         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4786                 '.cmonfofo.com',
4787                 '.discutbb.com',
4788         ),
4789         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4790                 '.preca.info',
4791                 '.skiaggi.info',
4792                 '.scrianal.info',
4793                 '.tageom.info',
4794         ),
4795         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4796                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4797                 '.inpros.net',                  // 202.181.98.79
4798                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4799         ),
4800         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4801                 '.ec51.com',
4802                 '.ec51.net',
4803         ),
4804         'abbevillelaties at yahoo.fr etc' => array(
4805                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4806                 '.ringtones-rate.com',
4807                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4808                 '.special-ringtones.net',
4809         ),
4810         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4811                 '.1sgsc.info',
4812                 '.3h4r89h.info',
4813                 '.3v44dd.info',
4814                 '.6rfuh6.info',
4815                 '.84hd8.info',
4816                 '.94bui89.info',
4817                 '.agysb3.info',
4818                 '.asdjhs.info',
4819                 '.bcvnrth.info',
4820                 '.bheb4r.info',
4821                 '.bhiuno.info',
4822                 '.biug7g.info',
4823                 '.bjb5f4.info',
4824                 '.bob8g7g.info',
4825                 '.br89bdd.info',
4826                 '.bsa3h.info',
4827                 '.bsieb8.info',
4828                 '.basbiubf.info',
4829                 '.bobwwfs2.info',
4830                 '.ciuv9t.info',
4831                 '.dbmdx4.info',
4832                 '.dbrjms.info',
4833                 '.dbtcm.info',
4834                 '.dff9ghu.info',
4835                 '.dfshbb.info',
4836                 '.dgd4ffdh.info',
4837                 '.dh3ge.info',
4838                 '.duc86jh.info',
4839                 '.ergth45.info',
4840                 '.f78bf7ffb.info',
4841                 '.gbdfbo4.info',
4842                 '.ger45.info',
4843                 '.gnvnrrg.info',
4844                 '.h47he7.info',
4845                 '.h488hbd4.info',
4846                 '.hd72b94.info',
4847                 '.he74b7.info',
4848                 '.hfujfnr.info',
4849                 '.husdhd42.info',
4850                 '.hbwje.info',
4851                 '.itg87gji.info',
4852                 '.iugiougiuh.info',
4853                 '.jhd4f4aa.info',
4854                 '.jshd73.info',
4855                 '.krhpgd.info',
4856                 '.lyihjn.info',
4857                 '.nfyjnfj.info',
4858                 '.oihbv.info',
4859                 '.os44fvs.info',
4860                 '.sdfsd3.info',
4861                 '.sdiug4.info',
4862                 '.sdkufhh.info',
4863                 '.sdugb4f.info',
4864                 '.skdbf.info',
4865                 '.sipiv78.info',
4866                 '.sudbfb.info',
4867                 '.tymbbmy.info',
4868                 '.uilhjk.info',
4869                 '.vi87vub.info',
4870                 '.vfuyf87f.info',
4871                 '.viyvvj877.info',
4872                 '.w7fc8eu.info',
4873                 '.wefg43g.info',
4874                 '.xbrch78e.info',
4875                 '.ywsfu.info',
4876                 '.zxcbiv.info',
4877         ),
4878         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4879                 '.abofios.info',
4880                 '.amlekfn.info',
4881                 '.amlkdoie.info',
4882                 '.amkslewq.info',
4883                 '.alemfu.info',
4884                 '.aloweks1.info',
4885                 '.alposd3.info',
4886                 '.bamhpb.info',
4887                 '.bhjkb.info',
4888                 '.bjqnj.info',
4889                 '.cvcxcbhpr.info',
4890                 '.czoypaiat.info',
4891                 '.dbpmgc.info',
4892                 '.dgvogrxs.info',
4893                 '.dldksf.info',
4894                 '.dlor6za.com',
4895                 '.dmkoiew.info',
4896                 '.eewrefr.info',
4897                 '.eladne.info',
4898                 '.elksem.info',
4899                 '.elwpod.info',
4900                 '.emlwkdnr.info',
4901                 '.esgmyqk.info',
4902                 '.fauqv.info',
4903                 '.fgxkgy.info',
4904                 '.fhryns.info',
4905                 '.fj38n4g.info',
4906                 '.fjnesal.info',
4907                 '.fmkfoe.info',
4908                 '.fqkcfldtr.info',
4909                 '.fwcigpdwz.info',
4910                 '.fyhik.info',
4911                 '.glrkje.info',
4912                 '.gwkslfq.info',
4913                 '.gwjracvh.info',
4914                 '.hihopepe.info',
4915                 '.hwlyggbkw.info',
4916                 '.hmwbfw.info',
4917                 '.hthyeb.info',
4918                 '.iaofkyaw.info',
4919                 '.uldkxuiw.info',
4920                 '.is7c6w4.info',
4921                 '.ivuddhdk.info',
4922                 '.jgfndjem.info',
4923                 '.jgmdlek.info',
4924                 '.jkrnvmpad.info',
4925                 '.jqujn.info',
4926                 '.jvgmmba.info',
4927                 '.kbaur.info',
4928                 '.kgjindptv.info',
4929                 '.kleo7s9.info',
4930                 '.lezfgam.info',
4931                 '.lfaasy.info',
4932                 '.ljpdjki.info',
4933                 '.lmnpis.info',
4934                 '.lpzcu2f.info',
4935                 '.lrptn.info',
4936                 '.lursqt.info',
4937                 '.mgkabviil.info',
4938                 '.mhtknjyt.info',
4939                 '.mksuuku.info',
4940                 '.mkyky.info',
4941                 '.mloaisn.com',
4942                 '.mlsiknd.info',
4943                 '.mthqz.info',
4944                 '.nnooq.info',
4945                 '.nohhylvc.info',
4946                 '.nuprndsye.info',
4947                 '.nsoelam.info',
4948                 '.nykobczv.info',
4949                 '.nzuhli.info',
4950                 '.odyqzgylr.info',
4951                 '.oidiau.info',
4952                 '.oitzkw.info',
4953                 '.okdmrpz.info',
4954                 '.ooinziti.info',
4955                 '.ortqr.info',
4956                 '.osmkpnekv.info',
4957                 '.ozkzfih.info',
4958                 '.p3ix8wc.com',
4959                 '.piwyt.info',
4960                 '.pfkijrm.info',
4961                 '.pjktcragi.info',
4962                 '.pleoz.info',
4963                 '.plvqm73.info',
4964                 '.pqyrem.info',
4965                 '.qipgqd.info',
4966                 '.qlewixu.com',
4967                 '.qmlskme.info',
4968                 '.qtuff.info',
4969                 '.quoga.info',
4970                 '.quqz.info',
4971                 '.qzxuw.info',
4972                 '.rcaidegp.info',
4973                 '.rlkmdi.info',
4974                 '.rnsoiov.info',
4975                 '.rnwlams.info',
4976                 '.rprgkgqld.info',
4977                 '.rubqvxrn.info',
4978                 '.spqxstl.info',
4979                 '.syckoqjql.info',
4980                 '.tbirb.info',
4981                 '.thalc34.info',
4982                 '.tiabq.info',
4983                 '.tszzpjr.info',
4984                 '.tyjdyn.info',
4985                 '.twgugpns.info',
4986                 '.uaezrqp.info',
4987                 '.udlkasu.info',
4988                 '.uejncyf.info',
4989                 '.ukvflb.info',
4990                 '.ugsuv.info',
4991                 '.ukhgpcp.info',
4992                 '.urprzn.info',
4993                 '.uuhememkw.info',
4994                 '.yalc7en.info',
4995                 '.ybuid.info',
4996                 '.yhdkgfob.info',
4997                 '.ymenq.info',
4998                 '.ynlyb.info',
4999                 '.vieatlubk.info',
5000                 '.vltcaho.info',
5001                 '.wlamsiek.info',
5002                 '.wlerp.info',
5003                 '.wlmtshzi.info',
5004                 '.wmlkams.info',
5005                 '.wprqd.info',
5006                 '.wpyspszi.info',
5007                 '.xdscc.info',
5008                 '.xdvy.info',
5009                 '.xeypku.info',
5010                 '.xsrxh.info',
5011                 '.xwjyrpfe.info',
5012                 '.yxcqw.info',
5013                 '.zhbktrh.info',
5014                 '.zspepn.info',
5015                 '.zsxtz.info',
5016         ),
5017         'survi at poczta.fm and smiley' => array(
5018                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5019                 '.ppert.info',
5020                 '.pperta.info',
5021                 '.pperts.info',
5022                 '.pprtuis.info',
5023                 '.13iuey.info',         // ":>"
5024                 '.13jkhs.info',
5025                 '.13lksa.info',
5026                 '.13rxtx.info',
5027                 '.13slkd.info',
5028                 '.13zaer.info',
5029         ),
5030         'admin at esemeski.com' => array(       // by Jan Kalka
5031                 '.kxils.info',
5032                 '.kuaph.info',
5033                 '.lncdc.info',
5034                 '.lsqpd.info',
5035                 '.mczed.info',
5036                 '.npous.info',
5037                 '.obgju.info',
5038         ),
5039         'LiquidNetLimited.com' => array(
5040                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5041
5042                 // FateBack.com related
5043                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5044                 '.bebto.com',
5045                 '.fateback.com',
5046                 '.undonet.com',
5047                 '.yoll.net',
5048                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5049
5050                 // 50webs.com                   // 64.72.112.10
5051                 // dns2.50webs.com              // 64.72.112.11
5052                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5053                 // dns2.freehostia.com  // 64.72.112.13
5054                 // serv3.freehostia.com // 64.72.112.14
5055                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5056                 // mail.50webs.com              // 64.72.112.26
5057                 // supremecenter41.com  // 64.72.112.52
5058                 // 50webs2.50webs.com   // 64.72.112.89
5059                 // supremecenter39.com  // 64.72.112.103
5060
5061                 // by LiquidNet Ltd. (support at propersupport.com)
5062                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5063                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5064                         'duoservers.com',               // 216.65.1.130
5065
5066                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5067         ),
5068         'domains at agava.com' => array(
5069                 '.h18.ru',
5070                 '.hut1.ru',
5071         ),
5072         'wlmx009 at hotmail.com' => array(
5073                 '.123lineage.com',
5074                 '.ff11-info.com',
5075                 '.lastlineage.com',
5076                 '.lineage2-ol.com',
5077                 '.lineage2006.com',
5078                 '.lineagefirst.com',
5079         ),
5080         'Zettahost.com' => array(
5081                 '.atspace.biz',         // sales at zettahost.com
5082                 '.atspace.com',         // abuse at zettahost.com
5083                 '.atspace.name',        // NS atspace.com
5084                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5085                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5086         ),
5087         'hlq9814 at 163.com' => array(
5088                 '.kotonohax.com',               // by ling bao
5089                 '.ragnarox.mobi',               // by lin bao, *.exe download
5090                 '.rokonline-jp.com',    // by hang long
5091         ),
5092         '77ch.jp' => array(
5093                 '.77ch.jp',
5094                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5095         ),
5096         'serchportal at mail.ru' => array(      // by Namu Adin
5097                 '.43fert.info',
5098                 '.belis.info',
5099                 '.bonu.info',
5100                 '.chelsite.info',
5101                 '.chparael.info',
5102                 '.cool9f.info',
5103                 '.dada2.info',
5104                 '.dorplanete.info',
5105                 '.dormonde.info',
5106                 '.dorprojet.info',
5107                 '.faciledor.info',
5108                 '.fastsearchgroup.info',
5109                 '.gerta0.info',
5110                 '.getse.info',
5111                 '.gopvl.info',
5112                 '.knopki.info',
5113                 '.propidor.info',
5114                 '.quicksearchnet.info',
5115                 '.ret5.info',
5116                 '.slimfastsearch.info',
5117                 '.virtualpvl.info',
5118                 '.vpvla.info',
5119                 '.xjdor.info',
5120                 '.zhopki.info',
5121         ),
5122         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5123                 '*.444mb.com',          // Free hosting
5124                 'urlnip.com',           // Redirection
5125         ),
5126         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5127                 '.1fasttimesatnau.info',
5128                 '.1freecybersex.info',
5129                 '.1freexxxcomics.info',
5130                 '.1fuckingmywife.info',
5131                 '.1pornpreview.info',
5132                 'www.ru',                                       // by (service at demos.ru), redirection
5133         ),
5134         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5135                 '.adultschat.info',
5136                 '.livecamonline.info',
5137                 '.webcam4u.info',
5138                 '.younghot.info',
5139         ),
5140         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5141                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5142
5143                 // 209.51.196.242
5144                 '.22web.net',
5145                 '.2kool4u.net',
5146                 '.9skul.com',
5147                 '.alojalo.info',
5148                 '.byet.net',
5149                 '.byethost2.com',
5150                 '.byethost3.com',
5151                 '.byethost4.com',
5152                 '.byethost5.com',
5153                 '.byethost6.com',
5154                 '.byethost7.com',
5155                 '.byethost8.com',
5156                 '.byethost9.com',
5157                 '.byethost10.com',
5158                 '.byethost11.com',
5159                 '.byethost12.com',
5160                 '.byethost13.com',
5161                 '.byethost14.com',
5162                 '.byethost15.com',
5163                 '.byethost16.com',
5164                 '.byethost17.com',
5165                 '.byethost18.com',
5166                 '.headshothost.net',
5167                 '.hostwq.net',
5168                 '.mega-file.net',
5169                 '.truefreehost.com',
5170
5171                 '.ifastnet.com',        // 209.51.196.243
5172
5173                 // 209.190.16.82(mx1.byet.org)
5174                 '.1sthost.org',
5175                 '.4sql.net',
5176                 '.byet.org',
5177                 '.hyperphp.com',
5178                 '.kwikphp.com',
5179                 '.my-php.net',
5180                 '.my-place.us',
5181                 '.my-webs.org',
5182                 '.netfast.org',
5183                 '.php0h.com',
5184                 '.php1h.com',
5185                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5186                 '.phpnet.us',
5187                 '.prohosts.org',
5188                 '.pro-php.org',
5189                 '.prophp.org',
5190                 '.sprinterweb.net',
5191                 '.swiftphp.com',
5192                 '.xlphp.net',
5193
5194                 // 209.190.16.83(mx2.byet.org)
5195                 '.instant-wiki.net',
5196
5197                 // 209.190.16.84(mx3.byet.org)
5198
5199                 // 209.190.16.85(mx4.byet.org)
5200                 '.instant-blog.net',
5201                 '.instant-forum.net',
5202
5203                 '.byethost.com',                        // 209.190.18.138
5204         ),
5205         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5206                 '.analmoviesite.info',
5207                 '.bestgirlssex.info',
5208                 '.boxvagina.info',
5209                 '.cyberlivegirls.info',
5210                 '.hotredgirls.info',
5211                 '.forsexlove.info',
5212                 '.hotnudezone.info',
5213                 '.hotredpussy.info',
5214                 '.lesbians-live.info',
5215                 '.lesbians-on-cam.info',
5216                 '.onlinegirlssite.info',
5217                 '.sexloveonline.info',
5218                 '.teensexcard.info',
5219                 '.teensexdirect.info',
5220                 '.topnudesite.info',
5221                 '.vaginafree.info',
5222                 '.webcam-show.info',
5223                 '.webcamshow.info',
5224                 '.youngsexchat.info',
5225                 '.yourcumshot.info',
5226         ),
5227         'stocking.club at gmail.com' => array(
5228                 '.adulthotmodels.com',          // by David Zajwzran
5229                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5230                 '.cash-call.info',                      // by David Theissen
5231                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5232                 '.cheap-online-viagra.info',    // by David Theissen
5233                 '.drugcleansing.net',           // by David Zajwzran
5234                 '.men-health-zone.com',         // by David Theissen
5235                 '.purchase-viagra.info',        // by David Theissen
5236                 '.realdrunkengirls.biz',        // by David Theissen
5237                 '.sextoyslife.com',                     // by David Zajwzran
5238                 '.sexysubjects.info',           // by David Zajwzran
5239                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5240                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5241                 '.travelcardsite.info',         // by David Theissen
5242         ),
5243         'lustiq at p5com.com' => array(
5244                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5245                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5246         ),
5247         'web at 6jy.com' => array(
5248                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5249                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5250         ),
5251         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5252                 '.auto-fgen.info',
5253                 '.fast-marketing.info',
5254                 '.from-usa.info',
5255                 '.generic-pharm.info',
5256                 '.pharm-directory.info',
5257                 '.popular-people.info',
5258                 '.safe-health.info',
5259                 '.star-celebrities.info',
5260                 '.super-home-biz.info',
5261                 '.top5-auto.info',
5262                 '.top5-cars.info',
5263                 '.vip-furniture.info',
5264                 '.vip-pc.info',
5265                 '.vip-pets.info',
5266         ),
5267         'abuse at search-store.org' => array(
5268                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5269         ),
5270         'Leading Edge Marketing Inc.' => array(
5271                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5272                 '.abemedical.com',
5273                 '.attractwomennow.com',
5274                 '.bettersexmall.com',
5275                 '.buymaxoderm.com',
5276                 '.buyvprx.com',
5277                 '.genf20.com',
5278                 '.infinityhealthnews.com',
5279                 '.istnewsletter.com',
5280                 '.leadingedgecash.com',
5281                 '.leadingedgeherbals.com',
5282                 '.leadingedgevipsonly.com',
5283                 '.lecash.com',
5284                 '.leminfo.com',
5285                 '.proextendersystem.com',
5286                 '.provestra.com',
5287                 '.semenax.com',
5288                 '.shavenomore.com',
5289                 '.theedgenewsletter.com',
5290                 '.vigorelle.com',
5291                 '.vigrx.com',
5292                 '.vigrxplus.com',
5293                 '.wbstnewsletter.com',
5294         ),
5295         'clickx at bk.ru' => array(     // by Alexey Enrertov
5296                 '.coolget*.info' =>
5297                         '#^(?:.*\.)?' . 'coolget' .
5298                         '(?:bus|find|news|php|place|post|srch)' .
5299                         '\.info$#',
5300                 '.coolgirl*.info' =>
5301                         '#^(?:.*\.)?' . 'coolgirl' .
5302                         '(?:apple|fish|search)' .
5303                         '\.info$#',
5304                 '.coolmeet*.info' =>
5305                         '#^(?:.*\.)?' . 'coolmeet' .
5306                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5307                         '\.info$#',
5308                 '.cool**.info' =>
5309                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5310                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5311                         '\.info$#',
5312                 '.freseasy*.info' =>
5313                         '#^(?:.*\.)?' . 'freseasy' .
5314                         '(?:apple|click|find|fish|post|search)' .
5315                         '\.info$#',
5316                 '.fres**.info' =>
5317                         '#^(?:.*\.)?' .
5318                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5319                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5320                         '\.info$#',
5321                         // These are not found yet:
5322                         // fresgirlsrch.info
5323                         // fresadultapple.info
5324                         // fresadultclick.info
5325                         // frestheplace.info
5326
5327                 // 66.232.113.44
5328                 '.nuhost.info',
5329                 '.susearch.info',
5330
5331                 // 66.232.126.74(hv94.steephost.com)
5332                 '.dilej.com',
5333                 '.fyvij.com',
5334                 '.howus.com',
5335                 '.jisyn.com',
5336                 '.kaxem.com',
5337                 '.mihug.com',
5338                 '.mobyb.com',
5339                 '.qidat.com',
5340                 '.qihek.com',
5341                 '.ryzic.com',
5342                 '.sasuv.com',
5343                 '.tuquh.com',
5344                 '.vehyq.com',
5345                 '.wezid.com',
5346                 '.wifuj.com',
5347                 '.xijyt.com',
5348                 '.zuqyn.com',
5349
5350                 '.mosugy.com',
5351         ),
5352         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5353                 '.hitsearching.info',
5354                 '.hugeamountdata.info',
5355                 '.megafasthost.info',
5356                 '.real-big-host.info',
5357                 '.search4freez.info',
5358                 '.yasech.info',
5359
5360                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5361                 '.bymire.com',
5362
5363                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5364                 '.ligiwa.com',
5365
5366                 '.mubeho.com',
5367         ),
5368         'ice--man at mail.ru related' => array(
5369                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5370                 '.bestcreola.com',
5371                 '.crekatierra.com',
5372                 '.creolafire.com',
5373                 '.crolik.com',
5374                 '.croller.cn',
5375                 '.ecrmx.com',
5376                 '.eflashpoint.com',
5377                 '.exoticmed.com',
5378                 '.feelview.com',
5379                 '.greatexotic.com',
5380                 '.icrtx.com',
5381                 '.icyhip.com',
5382                 '.icyiceman.com',
5383                 '.icypopular.com',
5384                 '.iflashpoint.com',
5385                 '.justmdx.com',
5386                 '.kiliusgroup.com',
5387                 '.klickerr.com',
5388                 '.klickerrworld.com',
5389                 '.kreolic.com',
5390                 '.margansitio.com',
5391                 '.margantierra.com',
5392                 '.mimargan.com',
5393                 '.oilkeys.com',
5394                 '.planetmdx.com',
5395                 '.thekeyse.com',
5396                 '.viewgreat.com',
5397                 '.yourcreola.com',
5398
5399                 // 69.46.23.48
5400                 '.bestkilius.com',
5401                 '.crekadirecto.com',
5402                 '.getflashsite.com',
5403                 '.sucreka.com',
5404                 '.superkilius.com',
5405
5406                 // 69.46.23.48 by bing-16 at ftunez.org
5407                 '.bovorup.cn',
5408                 '.litotar.cn',
5409                 '.nihydec.cn',
5410
5411                 // 66.232.112.175 by bing-32 at ftunez.org
5412                 '.lasyxy.cn',
5413
5414                 // by bing-65 at ftunez.org
5415                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5416                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5417                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5418                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5419                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5420                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5421                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5422                 '.saralar.cn',          // 66.232.120.113(non-existent)
5423                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5424
5425                 // 69.46.23.48 by clarkson-34 at ftunez.org
5426                 '.bumora.cn',
5427                 '.byxite.cn',
5428                 '.byxuqu.cn',
5429                 '.jadama.cn',
5430                 '.kybope.cn',
5431                 '.mefeki.cn',
5432                 '.mokiso.cn',
5433                 '.niqeme.cn',
5434                 '.pukafo.cn',
5435                 '.qesaxa.cn',
5436                 '.toxezi.cn',
5437                 '.tujudy.cn',
5438                 '.tutike.cn',
5439
5440                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5441                 '.cabino.cn',
5442                 '.cuwace.cn',
5443                 '.ferazi.cn',
5444                 '.gigywy.cn',
5445                 '.lapype.cn',
5446                 '.mewabe.cn',
5447                 '.pezegy.cn',
5448                 '.pyzuza.cn',
5449                 '.qypony.cn',
5450                 '.ropesy.cn',
5451                 '.wadyfe.cn',
5452
5453                 // 69.46.23.48 clarkson-58 at ftunez.org
5454                 '.becabe.cn',
5455                 '.biciqy.cn',
5456                 '.bezymu.cn',
5457                 '.cifori.cn',
5458                 '.ciwyxi.cn',
5459                 '.dobari.cn',
5460                 '.dusofe.cn',
5461                 '.dutyda.cn',
5462                 '.dykanu.cn',
5463                 '.fakexu.cn',
5464                 '.fylema.cn',
5465                 '.godymo.cn',
5466                 '.hyhaxy.cn',
5467                 '.ganosi.cn',
5468                 '.kuxyju.cn',
5469                 '.lacezy.cn',
5470                 '.lonyru.cn',
5471                 '.lycato.cn',
5472                 '.nykyby.cn',
5473                 '.qyhuko.cn',
5474                 '.redere.cn',
5475                 '.riwimu.cn',
5476                 '.wopary.cn',
5477                 '.xizity.cn',
5478                 '.xuxusa.cn',
5479
5480                 // by entretov-28 at ftunez.org
5481                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5482                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5483
5484                 // 69.46.23.48 by entretov-32 at ftunez.org
5485                 '.cihuji.cn',
5486                 '.deqyve.cn',
5487                 '.genefa.cn',
5488                 '.gujyju.cn',
5489                 '.hasadu.cn',
5490                 '.hedomi.cn',
5491                 '.kecicy.cn',
5492                 '.kipabo.cn',
5493                 '.manunu.cn',
5494                 '.musoru.cn',
5495                 '.myvuna.cn',
5496                 '.pikybe.cn',
5497                 '.riqawo.cn',
5498                 '.rufuxy.cn',
5499                 '.vyfilu.cn',
5500                 '.xadule.cn',
5501                 '.zolaxe.cn',
5502                 '.zerixu.cn',
5503
5504                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5505                 '.dozoda.cn',
5506                 '.nemipu.cn',
5507
5508                 // entretov-84 at ftunez.org
5509                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5510                 '.favulol.cn',          // 66.232.120.115(*snip*)
5511                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5512
5513                 // 69.46.23.48 by jeremy-57 at ftunez.org
5514                 '.duzele.cn',
5515                 '.figede.cn',
5516                 '.fiwany.cn',
5517                 '.gyfalu.cn',
5518                 '.jepylo.cn',
5519                 '.nuqumy.cn',
5520
5521                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5522                 '.burahu.cn',
5523                 '.jydijy.cn',
5524                 '.komyby.cn',
5525                 '.najepa.cn',
5526                 '.pylobu.cn',
5527                 '.qofoly.cn',
5528                 '.sybuvi.cn',
5529                 '.vycexu.cn',
5530                 '.wotyqo.cn',
5531                 '.xudoli.cn',
5532
5533                 // by entretov-28 at ftunez.org
5534                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5535
5536                 // by entretov-37 at ftunez.org
5537                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5538                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5539
5540                 // 66.232.112.175 by entretov-86 at ftunez.org
5541                 '.faweji.cn',
5542                 '.jypaci.cn',
5543                 '.xozuso.cn',
5544
5545                 // 69.46.23.48 by miles-37 at ftunez.org
5546                 '.beqymo.cn',
5547                 '.ceqibi.cn',
5548                 '.dyraqo.cn',
5549                 '.qenedo.cn',
5550                 '.qurypa.cn',
5551                 '.siluvo.cn',
5552                 '.tujala.cn',
5553                 '.wukuwi.cn',
5554                 '.xenibo.cn',
5555                 '.xiculo.cn',
5556                 '.zabemu.cn',
5557
5558                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5559                 '.bevaka.cn',
5560                 '.fysyte.cn',
5561                 '.guxixu.cn',
5562                 '.hatoli.cn',
5563                 '.jitobu.cn',
5564                 '.juxeca.cn',
5565                 '.kifuhy.cn',
5566                 '.licila.cn',
5567                 '.mecomy.cn',
5568                 '.niryko.cn',
5569                 '.noxoco.cn',
5570                 '.qiwysu.cn',
5571                 '.tutysy.cn',
5572
5573                 // by oker-74 at ftunez.org
5574                 '.navufol.cn',
5575
5576                 // by oker-97 at ftunez.org
5577                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5578                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5579                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5580                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5581                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5582                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5583                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5584
5585                 // by polet-20 at ftunez.org
5586                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5587
5588                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5589                 '.gywiqe.cn',
5590                 '.jotapo.cn',
5591                 '.jywixa.cn',
5592
5593                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5594                 '.bawegap.cn',
5595                 '.buremyl.cn',
5596                 '.cilybut.cn',
5597                 '.cutufek.cn',
5598                 '.defypyr.cn',
5599                 '.femaxij.cn',
5600                 '.gelejo.cn',
5601                 '.gocylyv.cn',
5602                 '.kehiqaq.cn',
5603                 '.ninyjit.cn',
5604                 '.ruroruw.cn',
5605                 '.vetehow.cn',
5606
5607                 // 69.46.23.48 sabrosky-85 at ftunez.org
5608                 '.banyla.cn',
5609                 '.bubaqu.cn',
5610                 '.bygage.cn',
5611                 '.dafozy.cn',
5612                 '.kaxyjo.cn',
5613                 '.makyle.cn',
5614                 '.naleto.cn',
5615                 '.pidele.cn',
5616                 '.poqexa.cn',
5617                 '.pymaqo.cn',
5618                 '.qupiqy.cn',
5619                 '.reqefy.cn',
5620                 '.sopocy.cn',
5621                 '.vuhexo.cn',
5622                 '.weryso.cn',
5623                 '.wubula.cn',
5624                 '.xufuxy.cn',
5625                 '.zuhyxu.cn',
5626
5627                 // 69.46.23.48 by tribiani-97 at ftunez.org
5628                 '.dyxorod.cn',
5629                 '.firywoz.cn',
5630                 '.jixezyx.cn',
5631                 '.joveraw.cn',
5632                 '.jowaxup.cn',
5633                 '.nodarej.cn',
5634                 '.pimijom.cn',
5635                 '.tugupeg.cn',
5636
5637                 // 66.232.112.175 by abuse-here at inbox.ru
5638                 '.catybe.cn',
5639                 '.jytame.cn',
5640                 '.wygete.cn',
5641         ),
5642         '74.50.97.*' => array(
5643                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5644                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5645                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5646                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5647                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5648                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5649                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5650                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5651                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5652                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5653                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5654                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5655                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5656                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5657                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5658                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5659
5660                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5661                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5662                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5663                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5664                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5665                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5666                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5667                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5668                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5669                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5670                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5671                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5672                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5673                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5674                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5675                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5676                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5677                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5678                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5679
5680                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5681                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5682                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5683                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5684                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5685         ),
5686         'nijeoi at hotmai.com' => array(
5687                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5688                 '.bowij.com',
5689                 '.bozib.com',
5690                 '.cavux.com',
5691                 '.dipov.com',
5692                 '.gumoz.com',
5693                 '.hakyb.com',
5694                 '.hehyv.com',
5695                 '.hepyt.com',
5696                 '.howoj.com',
5697                 '.jywaz.com',
5698                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5699                 '.kyheq.com',
5700                 '.kyzad.com',
5701                 '.qicad.com',
5702                 '.qubyd.com',
5703                 '.mocyq.com',
5704                 '.muloq.com',
5705                 '.myxim.com',
5706                 '.nufyp.com',
5707                 '.waqog.com',
5708                 '.wyduc.com',
5709                 '.xefyv.com',
5710                 '.xomej.com',
5711                 '.xomip.com',
5712                 '.xykyl.com',
5713                 '.zakuw.com',
5714                 '.zeliw.com',
5715                 '.zimev.com',
5716                 '.zipif.com',
5717
5718                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5719                 '.tycoco.com',
5720
5721                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5722                 '.pufeqa.com',
5723
5724                 '.xehymi.com',
5725         ),
5726         'niichka at hotmail.com' => array(
5727                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5728                 '.aerosearch.info',
5729                 '.freader.info',
5730                 '.info4searchz.info',
5731                 '.nice-host.info',
5732                 '.realyfast.info',
5733                 '.resuts.info',
5734
5735                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5736                 '.bepoh.com',
5737                 '.gufiq.com',
5738                 '.kedyh.com',
5739                 '.pofyb.com',
5740                 '.rurid.com',
5741                 '.vucaj.com',
5742                 '.vuwir.com',
5743
5744                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5745                 '.bejefe.com',
5746
5747                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5748                 '.tidawu.com',
5749
5750                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5751                 '.rofuqa.com',
5752         ),
5753         'porychik at hot.ee' => array(  // by Igor
5754                 '.tedstate.info',       // "Free Web Hosting"
5755                 '.giftsee.com',
5756         ),
5757         'admin at pertol.info' => array(
5758                 // 81.0.195.189 "Free Web Hosting"
5759                 '.laparka.cn',
5760                 '.mirlos.cn',
5761                 '.oldmoms.cn',
5762
5763                 // 217.11.233.64(timed-out)
5764                 '.ejmpep.cn',   // by admin at pertol.info
5765                 '.ytere.cn',    // by admin at x2t.com
5766
5767                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5768                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5769
5770                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5771                 '.new-greece-travel.com',
5772                 '.peraonline.info',
5773
5774                 '.barkman.cn',
5775         ),
5776
5777         'aofa at vip.163.com' => array(
5778                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5779                 '.5944.net',
5780         ),
5781         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5782                 '.maxrentcar.info',
5783                 '.newsonyericsson.info',
5784                 '.pornositeworld.biz',
5785                 '.rentcarweb.info',
5786                 '.xxxdomainsex.biz',
5787         ),
5788         'kopper1970 at gmail.com' => array(
5789                 '.cardealerall.info',           // by Green
5790                 '.donatecarsales.info',         // by Sipil
5791                 '.ringtonewilly.info',          // by Sipil
5792                 '.travelstraveling.info',       // by Chinik
5793                 '.viagrabuyonline.org',         // by Sipil
5794                 '.viagraorderbuy.com',          // by Anatol
5795                 '.worldcuptourism.info',        // by Sipil
5796         ),
5797         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5798                 '.globalinfoland.info',
5799                 '.goodlifesearch.info',
5800                 '.hotnetinfo.info',
5801                 '.hotpornmovies.org',
5802                 '.infopilot.info',
5803         ),
5804         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5805                 '.bang-bro.org',
5806                 '.datinghost.info',
5807                 '.hello-craulers.info',
5808                 '.free-blog-host.info',
5809                 '.sucking-boobs.info',
5810         ),
5811         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5812                 '.allcamsguide.info',
5813                 '.camerascams.info',
5814                 '.camerasera.info',
5815                 '.girlcamsworld.info',
5816                 '.hiddenlimocams.info',
5817                 '.redlivecams.info',
5818                 '.spycamsgear.info',
5819                 '.spycamssite.info',
5820                 '.supercamsusa.info',
5821                 '.thecamsnow.info',
5822         ),
5823         '87.242.116.81' => array(
5824                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5825                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5826                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5827                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5828                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5829         ),
5830         '208.70.75.153' => array(
5831                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5832                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5833                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5834                 '.cerc-on.info',
5835                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5836                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5837                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5838                 '.cerc-tr.info',
5839                 '.cerc-tw.info',
5840                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5841                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5842                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5843                 '.cerc-on.org',         // by cerca-one at ya.ru
5844                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5845                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5846                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5847                 '.cerc-tr.org',         // by cerca-one at ya.ru
5848                 '.cerc-tw.org',         // by cerca-one at ya.ru
5849                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5850                 '.cerca-fo.info',
5851                 '.cerca-no.info',
5852                 '.cerca-on.info',
5853                 '.cerca-sv.info',
5854                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5855                 '.cerca-te.info',
5856                 '.cerca-tr.info',
5857                 '.cerca-sx.org',
5858                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5859                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5860                 '.ricerca-fo.info',
5861                 '.ricerca-one.org',
5862                 '.ricerca-sv.org',
5863                 '.ricerca-sx.org',
5864                 '.ricerca-te.org',
5865                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5866                 '.subit01.org',
5867                 '.subit02.org',
5868                 '.subit03.org',
5869                 '.subit04.org',
5870                 '.subit05.org',
5871                 '.subit06.org',
5872                 '.subit01.info',
5873                 '.subit02.info',
5874                 '.subit03.info',
5875                 '.subit04.info',
5876                 '.subit05.info',
5877                 '.subit06.info',
5878         ),
5879         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5880                 '.5-base.com',
5881                 '.pharmacy-style.com',
5882         ),
5883         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5884                 '.ista-2006.ru',
5885                 '.wefas.ru',
5886         ),
5887         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5888                 '.tourismworldsite.info',
5889                 '.yourtourismtravel.info',
5890         ),
5891         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5892                 '.easyfindcar.info',
5893                 '.siteinfosystems.info',
5894         ),
5895         'smesh1155 at gmail.com' => array(
5896                 '.hospitalforyou.info',                 // by Gimmi
5897                 '.thephentermineonline.info',   // by Kipola
5898         ),
5899         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5900                 '.kiski.net.in',
5901                 '.pipki.org.in',
5902                 '.popki.ind.in',
5903                 '.siski.co.in',
5904         ),
5905         'tiptronikmike at mail.com' => array(
5906                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5907                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5908                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5909                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5910                 //'.i0sex.info',                // Michael
5911                 //'.i1sex.info',                // Michael
5912                 //'.i2sex.info',                // Martin
5913                 //'.i3sex.info',                // Martin
5914                 //'.i4sex.info',                // Adulterra
5915                 //'.i5sex.info',                // Adulterra
5916                 //[irvyz]6sex.info not found
5917                 '.i8sex.info',                  // by Martin
5918         ),
5919         'skuarlytronald at mail.com' => array(
5920                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5921                 '.girlsgoingmad.info',          // 64.27.13.120
5922                 '.girlsgonewildside.info',      // 64.27.13.120
5923         ),
5924         '66.232.109.250' => array(
5925                 '.1626pornporno.info',
5926                 '.1851pornporno.info',
5927                 '.1876pornporno.info',
5928                 '.476pornporno.info',
5929         ),
5930         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5931                 '.compactxxx.com',
5932                 '.eadulthost.com',
5933                 '.eadultview.com',
5934                 '.eroticpool.net',
5935                 '.ipornservice.com',
5936                 '.liveadulthost.com',
5937                 '.nudepal.com',
5938                 '.sweetservers.com',
5939         ),
5940         'support at orgija.org' => array(
5941                 '.assfuckporn.org',
5942                 '.dosugmos.org',
5943                 '.fuckporn.org',
5944                 '.girlsdosug.org',
5945                 '.girlsporno.org',
5946                 '.moscowintim.org',
5947                 '.pornass.org',
5948                 '.pornopussy.org',
5949                 '.progirlsporn.org',
5950                 '.pussypornogirls.org',
5951         ),
5952         '125.65.112.93' => array(
5953                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5954                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5955         ),
5956         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5957                 '.beta-google.com',
5958                 '.tv-reklama.info',
5959                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5960                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5961         ),
5962         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5963                 '.abobrinha.org',
5964                 '.aneurysmic.com',              // / not found
5965                 '.physcomp.org',                // / not found
5966                 '.seriedelcaribe2006.org',
5967                 '.refugeeyouthinamerica.com',
5968         ),
5969         'skip_20022 at yahoo.com' => array(
5970                 // 203.174.83.55
5971                 '.a28hosting.info',             // by Bill Jones
5972                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5973                 '.besthentai06.org',    // by yakon
5974         ),
5975         'USFINE.com' => array(
5976                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5977                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5978         ),
5979         '68.178.211.57' => array(
5980                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5981                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5982         ),
5983         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5984                 '.google-yahoo-msn.org',
5985                 '.expedia-travel.org',
5986         ),
5987         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5988                 '.emr5ce.org',
5989                 '.wfe7nv.org',
5990                 '.xyr99yx.org',
5991         ),
5992         '203.171.230.39' => array(
5993                 // by 51shell at 163.com
5994                 '.amatou-fc2.com',
5995
5996                 // registrar bizcn.com, iframe + cursor
5997                 '.playonlinenc.com',
5998                 '.playboss-jp.com',
5999         ),
6000         'Digi-Rock.com' => array(
6001                 '.rom776.com',
6002                 // owner-organization: DIGIROCK, INC.
6003                 // owner-email: domain-contact at digi-rock.com
6004                 // with an external ad-and-JavaScript,
6005                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6006                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6007         ),
6008         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6009                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6010                 '.getrun.cn',                           // 208.73.34.48
6011                 '.ipod-application.info',       // NO IP
6012                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6013                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6014         ),
6015         'germerts at yandex.ru' => array(
6016                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6017                 '.andatra.info',
6018                 '.banchitos.info',
6019                 '.batareya.info',
6020                 '.blevota.info',
6021                 '.broneslon.info',
6022                 '.gamadril.info',
6023                 '.gipotenuza.info',
6024                 '.govnosaklo.info',
6025                 '.muflon.info',
6026                 '.termitnik.info',
6027                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6028         ),
6029         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6030                 '.acronis-true-image.info',
6031                 '.calcio-xp.info',
6032                 '.cosanova.info',
6033                 '.cose-rx.info',
6034                 '.dictip.info',
6035                 '.findig.info',
6036                 '.fotonow.info',
6037                 '.lavoro-tip.info',
6038                 '.loan-homes.info',
6039                 '.mionovita.info',
6040                 '.mustv.info',
6041                 '.newsnaked.info',
6042                 '.online-tod.info',
6043                 '.opakit.info',
6044                 '.opanow.info',
6045                 '.opriton.info',
6046                 '.porta-bl.info',
6047                 '.refdif.info',
6048                 '.xzmovie.info',
6049         ),
6050         '84.252.148.120 etc' => array(
6051                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6052                 '.planetavilton.info',  // 84.252.148.120
6053                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6054         ),
6055         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6056                 '.99jk.com',
6057                 '.99jk.com.cn',
6058                 '.99jk.cn',
6059         ),
6060         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6061                 '.kliktop.biz',
6062                 '.kliktop.org',
6063                 '.pharmatop.us',
6064                 '.supertop.us',
6065                 '.supervaizer.info',
6066         ),
6067         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6068                 '.freeamateursexx.info',        // 81.0.195.228
6069                 '.freeanalsexx.info',           // 217.11.233.97
6070                 '.freegaysexx.info',            // 81.0.195.228
6071         ),
6072         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6073                 '.abbhi.info',
6074                 '.gayblogguide.biz',
6075                 '.huope.info',
6076                 '.thebdsmday.info',
6077                 '.zioprt.info',                 // 89.149.228.237
6078         ),
6079         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6080                 '.boblisk.info',
6081                 '.factyri.info',
6082                 '.jorge1.info',
6083         ),
6084         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6085                 '.bestmindstorm.org',
6086                 '.redstoreonline.org',
6087         ),
6088         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6089                 '.8e8ae.net',
6090                 '.c-cock.com',
6091                 '.fa59eaf.com',
6092                 '.set-place.net',
6093                 '.sex-beauty.net',
6094         ),
6095         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6096                 '.tomdir.info',
6097                 '.tomdirdirect.info',
6098                 '.tomdirworld.info',
6099                 '.treton.info',
6100                 '.trefas.info',
6101                 '.tretonmondo.info',
6102                 '.unefout.info',
6103                 '.unefoutprojet.info',
6104                 '.unitfree.info',
6105                 '.vilret.info',
6106                 '.vilttown.info',
6107                 '.votrefout.info',
6108                 '.warmfind.info',
6109                 '.warptop.info',
6110                 '.wildtram.info',
6111                 '.xofind.info',
6112                 '.xopdiscover.info',
6113                 '.xopfind.info',
6114                 '.xoplocate.info',
6115                 '.xopseek.info',
6116                 '.xpfirst.info',
6117                 '.xphighest.info',
6118                 '.xptop.info',
6119         ),
6120         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6121                 '.myviagrasite.com',    // 80.74.153.2
6122                 '.thecanadianmeds.com', // 80.74.153.17
6123         ),
6124         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6125                 '.bigemot.com',                         // 217.11.233.34, / not found
6126                 '.espharmacy.com',                      // 217.11.233.34
6127                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6128                 '.ringtonecooler.com',          // 217.11.233.34
6129         ),
6130         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
6131                 // 220.166.64.44
6132                 '.okwit.com',
6133                 '.sakerver.com',
6134                 '.motewiki.net',
6135
6136                 '.8568985.com',         // 61.139.126.10 ns *.myhostadmin.net
6137
6138                 // 61.139.126.47, ns *.myhostadmin.net
6139                 '.playonlanei.com',
6140                 '.rmtfcne.com',
6141         ),
6142         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6143                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6144                 '.lookmedicine.info',           // 206.161.205.22
6145                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6146                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6147                 '.worldsitesearch.info',        // 209.8.40.59
6148         ),
6149         'lee.seery at gmail.com' => array(
6150                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6151                 '.lingvol.com',         // 64.21.34.55
6152                 '.micevol.com',         // 64.21.34.55
6153                 '.heyhey.info',         // 64.21.34.55  by anonymous
6154         ),
6155         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6156                 // 69-64-64-71.dedicated.abac.net
6157                 '.520-ard.info',
6158                 '.550bcards.info',
6159                 '.559-cads.info',
6160                 '.559caard.info',
6161                 '.565-caaard.info',
6162                 '.575cadr.info',
6163                 '.577cadrs.info',
6164                 '.590-acrds.info',
6165                 '.596-cadrs.info',
6166                 '.596caards.info',
6167                 '.596caaard.info',
6168                 '.asstablishingcads.info',
6169                 '.astablish-ard.info',
6170                 '.astablishcacrds.info',
6171                 '.begginers-acards.info',
6172                 '.begginersacrds.info',
6173                 '.beggingcaaard.info',
6174                 '.beginercacrds.info',
6175                 '.cacrdscreating.info',
6176                 '.caditbegging.info',
6177                 '.cadr-buildup.info',
6178                 '.cadr-establilsh.info',
6179                 '.cadrs-buildercredit.info',
6180                 '.cadrs570.info',
6181                 '.cads-565.info',
6182
6183                 // 69-64-64-113.dedicated.abac.net
6184                 '.interistacards.info',
6185                 '.intrust-ards.info',
6186                 '.intrustacrds.info',
6187                 '.lfixed-ard.info',
6188                 '.lowerate-ard.info',
6189                 '.lowpercentage-ard.info',
6190                 '.lowpercentageacrd.info',
6191         ),
6192         'acua at mail.ru' => array(
6193
6194                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6195
6196                         // by adventurer at allmyns.info
6197                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6198
6199                         // by webmaster at allmyns.info
6200                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6201                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6202                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6203                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6204                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6205                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6206                         '.riumh.cn',    // 84.16.226.28(*snip*)
6207                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6208                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6209                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6210
6211                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6212                 '.dns4babka.info',      // by acua at mail.ru
6213
6214                         // by golubcov at dns4babka.info
6215                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6216
6217                         // by webmaster at dns4babka.info
6218                         '.credh.cn',
6219                         '.fucfv.cn',
6220                         '.gdxnk.cn',
6221                         '.sqrrt.cn',
6222                         '.ywtmd.cn',
6223                         '.kncqy.cn',    // by webmaster at allmyns.info
6224
6225                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6226                 '.dedka2ns.info',       // by acua at mail.ru
6227
6228                         // by chasik at dedka2ns.info
6229                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6230
6231                         // by rochel at dedka2ns.info
6232                         '.fudhxjjqh.cn',
6233
6234                         // by webmaster at dedka2ns.info
6235                         '.ascpo.cn',
6236                         '.jgycr.cn',
6237                         '.nqdtt.cn',
6238                         '.oswde.cn',
6239                         '.qeyig.cn',
6240                         '.soqsx.cn',
6241                         '.ukncd.cn',
6242                         '.zijgb.cn',
6243
6244                 // 84.16.255.253(*snip*), / says 'noy found'
6245                 '.dns4dedka.info',      // by acua at mail.ru
6246
6247                         // by aleon at dns4dedka.info
6248                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6249
6250                         // by dig at dns4dedka.info
6251                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6252                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6253                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6254                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6255                         '.heulw.cn',    // 84.16.226.217(*snip*)
6256                         '.hissw.cn',    // 84.16.249.240(*snip*)
6257                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6258                         '.obwew.cn',    // 84.16.251.218(*snip*)
6259                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6260                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6261                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6262                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6263                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6264                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6265                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6266                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6267                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6268                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6269                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6270                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6271
6272                         // by la at dns4dedka.info
6273                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6274                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6275                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6276                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6277                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6278                         '.eothy.cn',    // 84.16.249.241(*snip*)
6279                         '.epocy.cn',    // 84.16.251.220(*snip*)
6280                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6281                         '.faacz.cn',    // 84.16.251.222(*snip*)
6282                         '.filun.cn',    // 89.149.196.72(*snip*)
6283                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6284                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6285                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6286                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6287                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6288                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6289                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6290                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6291                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6292                         '.krumo.cn',    // 84.16.226.217(*snip*)
6293                         '.lbava.cn',    // 217.20.112.102(*snip*)
6294                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6295                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6296                         '.npovm.cn',    // 84.16.226.28(*snip*)
6297                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6298                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6299                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6300                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6301                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6302                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6303                         '.qydph.cn',    // 89.149.228.163(*snip*)
6304                         '.rxens.cn',    // 89.149.196.72(*snip*)
6305                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6306                         '.srths.cn',    // 84.16.251.222(*snip*)
6307                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6308                         '.unquz.cn',    // 84.16.251.223(*snip*)
6309                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6310                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6311                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6312                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6313                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6314                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6315
6316                         // by le at dns4dedka.info
6317                         '.goslw.cn',    // 84.16.251.220(*snip*)
6318                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6319                         '.iewik.cn',    // 84.16.255.254(*snip*)
6320                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6321                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6322                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6323                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6324                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6325                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6326                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6327                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6328                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6329                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6330                         '.qniww.cn',    // 84.16.251.218(*snip*)
6331                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6332                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6333
6334                         // by skspb at dns4dedka.info
6335                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6336
6337                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6338                         '.bcpnb.cn',
6339                         '.cfbpr.cn',
6340                         '.dnndb.cn',
6341                         '.ekwme.cn',
6342                         '.iutps.cn',
6343                         '.ryftj.cn',
6344                         '.vxqcb.cn',
6345
6346                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6347                         // by apple at ns2best.info
6348                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6349                         // by paulwolf at ns2best.info
6350                         '.ifytzq.cn',
6351
6352                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6353                         // by pigato at sedns.info
6354                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6355                         // by roschem at sedns.info
6356                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6357                         // by op at sedns.info
6358                         '.bumfn.cn',
6359                         '.csmlu.cn',
6360                         '.epcwi.cn',
6361                         '.krwzn.cn',
6362                         '.lkvcp.cn',
6363                         '.mvmkh.cn',
6364                         '.nwpeg.cn',
6365                         '.rnqol.cn',
6366                         '.tyuaf.cn',
6367                         '.ucysa.cn',
6368                         '.vhyom.cn',
6369                         '.wtstu.cn',
6370                         '.zslxr.cn',
6371         ),
6372         'gilvcta sy jilbertsbram.com' => array(
6373                 // 206.53.51.126
6374                 '.dsfljkeilm1.cn',
6375                 '.dsfljkeilm2.cn',
6376                 '.dsfljkeilm3.cn',
6377                 '.dsfljkeilm4.cn',
6378                 '.dsfljkeilm5.cn',
6379                 '.dsfljkeilm6.cn',
6380                 '.dsfljkeilm7.cn',
6381                 '.dsfljkeilm8.cn',
6382                 '.dsfljkeilm9.cn',
6383                 '.dsfljkeilm10.cn',
6384         ),
6385         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6386
6387                 // 69.64.82.76(*.dedicated.abac.net)
6388                 '.bruised-criedit.info',
6389                 '.bruised-crtedit.info',
6390                 '.bruised-czrd.info',
6391                 '.bruisedcreditcars.info',
6392                 '.bruisedcreitcard.info',
6393                 '.bruisedcreitd.info',
6394                 '.buliderscreadet.info',
6395                 '.cleaningup-cdit.info',
6396                 '.cleaningup-cedict.info',
6397                 '.cleaningup-cerdic.info',
6398                 '.cleanup-crrd.info',
6399
6400                 // 69.64.82.77(*.dedicated.abac.net)
6401                 '.bruised-crediot.info',
6402                 '.bruised-credtid.info',
6403                 '.bruisedcriet.info',
6404                 '.bruisedredit.info',
6405                 '.buliders-crdt.info',
6406                 '.buliders-cre4dit.info',
6407                 '.buliders-creadt.info',
6408                 '.buliders-credcards.info',
6409                 '.buliders-credictcard.info',
6410                 '.cleaningupccreditcards.info',
6411                 '.cleaningupcdedit.info',
6412                 '.cleaningupcedirt.info',
6413                 '.cleaningupceidt.info',
6414                 '.cleaningupcrasd.info',
6415                 '.cleaningupcreait.info',
6416
6417                 // 69.64.82.78(*.dedicated.abac.net)
6418                 '.bruised-cridet.info',
6419                 '.bruised-drecit.info',
6420                 '.bruised-reditcards.info',
6421                 '.bruisedcredikt.info',
6422                 '.bruisedcredith.info',
6423                 '.bruisedcredtid.info',
6424                 '.cleanup-criet.info',
6425                 '.cleanup-csrds.info',
6426                 '.cleanup-dards.info',
6427
6428                 // 69.64.82.79(*.dedicated.abac.net)
6429                 '.bruised-crediotcards.info',
6430                 '.bruised-creditcar.info',
6431                 '.bruised-creid.info',
6432                 '.bruised-creidtcard.info',
6433                 '.buliders-crdit.info',
6434                 '.buliders-creadet.info',
6435                 '.cleaningup-ceridt.info',
6436                 '.cleaningupcrecit.info',
6437                 '.cleaningupccritcard.info',
6438                 '.cleanupdredit.info',
6439                 '.cleanupredit.info',
6440         ),
6441         '.malwarealarm.com',
6442                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6443                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6444                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6445         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6446         'Inet-Traffic.com' => array(
6447                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6448                 //'.dcomm.com',         // by D Communications Inc. S.A.
6449
6450                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6451                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6452                 // ...
6453                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6454                 // ...
6455                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6456                 // ...
6457                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6458                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6459                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6460                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6461                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6462                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6463                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6464                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6465                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6466                 // ...
6467                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6468                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6469                 // ...
6470                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6471                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6472                 // ...
6473                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6474                 // ...
6475                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6476                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6477                 // ...
6478                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6479         ),
6480         'andreyletov at yahoo.com related' => array(
6481                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6482                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6483                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6484
6485                 // 89.248.99.118 by anonymous
6486                 '.lpgpharmacy.com',
6487                 '.onlybestgalleries.com',
6488                 '.viagrabest.info',
6489                 '.viagrabestprice.info',
6490                 '.viagratop.info',
6491
6492                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6493                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6494                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6495         ),
6496         'alrusnac at hotmail.com' => array(
6497                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6498                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6499         ),
6500         '203.116.63.123' => array(
6501                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6502                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6503         ),
6504         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6505                 '.autotowncar.cn',              // 69.73.146.184
6506                 '.badgirlhome.cn',              // 69.73.146.186
6507         ),
6508         'Wmp.co.jp' => array(
6509                 // 219.94.134.208, ns *.dns.ne.jp, adult
6510                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6511                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6512                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6513         ),
6514         'Macherie.tv' => array(
6515                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6516                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6517                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6518         ),
6519         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6520                 '.yemine.info',
6521                 '.fr4f3ds.info',
6522         ),
6523         '75.126.129.222' => array(
6524                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6525                 '.viagrabuycheap.info', // ns *.advernsserver.com
6526                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6527         ),
6528         'sqr at bk.ru' => array(
6529                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6530                 '.masserch.info',               // "Free Web Hosting", spam
6531                 '.miserch.info',
6532         ),
6533         'gangstadra at hotmail.com' => array(
6534                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6535                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6536                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6537                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6538         ),
6539         'hosan by front.ru' => array(
6540                 '.salihome.info',                               // 206.53.51.155(non-existent)
6541                 '.online-freesearch.com',               // 206.53.51.155
6542                 '.choosefinest.com',                    // 206.53.51.157
6543                 '.carsprojects.com',                    // 206.53.51.159
6544                 '.sport-brands.com',                    // 206.53.51.167
6545                 '.online-pharmaceutics.com',    // 206.53.51.168
6546         ),
6547         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6548                 '.canadians-health.com',        // by andreyletov at yahoo.com
6549                 '.cialischeap.info',
6550                 '.superrv.info',
6551         ),
6552         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6553                 '.hatbi.com',
6554                 '.justrty.com',
6555                 '.kol2you.com',
6556                 '.kolplanet.com',
6557                 '.myrty.com',
6558                 '.officialrty.com',
6559                 '.pbaol.com',
6560                 '.planetkol.com',
6561         ),
6562         'Abra1.com' => array(
6563                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6564                 '.abra1.com',           // by info at maisontropicale.com
6565                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6566
6567                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6568                 '.abra2.com',           // by domain at anondns.org
6569                 '.abra3.com',           // by domain at anondns.org
6570         ),
6571         'topdomainz at gmail.com' => array(
6572                 // 217.73.201.237 , ns *.parked.ru
6573                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6574                 '.aboutgooglegroup.info',
6575                 '.aboutgoogleimage.info',
6576                 '.aboutgooglemail.info',
6577                 '.aboutgooglemap.info',
6578                 '.aboutgooglenews.info',
6579                 '.aboutgooglevideo.info',
6580                 '.bestgoogleearth.info',
6581                 '.magicgoogleearth.info',
6582                 '.magicgooglemap.info',
6583                 '.magicgooglevideo.info',
6584
6585                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6586                 '.slajzer.info',
6587                 '.tonoscelular.info',
6588                 '.tonosmotorola.info',
6589         ),
6590         '89.149.208.23' => array(
6591                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6592                 '.w3rar.info',
6593                 '.w3sex.info',
6594                 '.w3zip.info',
6595                 '.w3in.info',
6596                 '.w3out.info',
6597
6598                 // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript
6599                 '.2vip.info',
6600                 '.4cat.info',
6601                 '.8vip.info',
6602                 '.9upp.info',
6603         ),
6604         'zorkin87 at mail.ru' => array(
6605                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6606                 '.ruqore.com',
6607                 '.goxama.com',
6608                 '.cazebi.com',
6609                 '.fukeqa.com',
6610                 '.fydoge.com',
6611                 '.jukaly.com',
6612                 '.jumoga.com',
6613                 '.jumuxo.com',
6614                 '.tyriva.com',
6615                 '.vudyho.com'
6616         ),
6617         'jessicaeagloff at yahoo.co.uk' => array(
6618                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6619                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6620                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6621                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6622         ),
6623         'qbbs at xinoffice.com' => array(
6624                 // ns *.name-services.com
6625                 '.lingage.com',         // 8.15.231.118
6626                 '.puksins.com',         // IP not allocated now
6627         ),
6628         'advertolog at gmail.com' =>
6629                 // 81.0.250.86(network.upl.cz => non-existent) or
6630                 // 217.11.233.27
6631                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6632         'contact at aboutdomain.com' => array(
6633                 '.lopieur0.com',        // Not match but used
6634                 '.lopieur1.com',        // Not match but used
6635                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6636         ),
6637         'info at cash4wm.biz related' => array(
6638                 // 84.16.233.12(*.internetserviceteam.com)
6639                 '.newsblogforu.com',
6640
6641                 // 84.16.235.141()
6642                 '.informator4you.com',
6643
6644                 // 84.16.240.68(*.internetserviceteam.com)
6645                 '.absolute-best-site.com',
6646                 '.new-blog-for-you.com',
6647
6648                 // 84.16.240.69(*.internetserviceteam.com)
6649                 '.best-sport-blog.com',
6650                 '.big-internet-site.com',
6651                 '.brendsite.com',
6652                 '.my-news-blog.com',
6653
6654                 // 84.16.242.123(*.internetserviceteam.com)
6655                 '.best-news-blog.com',
6656                 '.site-with-content.com',
6657
6658                 // The same method with info at cash4wm.biz
6659                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6660                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6661                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6662                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6663                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6664                 '.bloginfo4u.info',             // 89.149.247.25
6665         ),
6666         'kerjy at yahoo.com' => array(
6667                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6668                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6669                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6670                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6671                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6672         ),
6673         'vme at hotmail.ru' => array(
6674                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6675                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6676         ),
6677         '84.16.235.84' => array(
6678                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6679                 '.5sms.info',
6680                 '.6sms.info',
6681                 '.8sms.info',
6682                 '.9sms.info',
6683         ),
6684         'john at hellomyns.info' => array(
6685                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6686                 '.byouz.cn',            // 89.149.247.24, / nothing
6687                 '.idghc.cn',
6688                 '.inxrj.cn',
6689                 '.jqzdf.cn',
6690                 '.vsxej.cn',
6691                 '.wkgnr.cn',
6692         ),
6693         '.CN spam payload' => array(
6694                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6695                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6696                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6697                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6698                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6699                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6700                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6701                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6702                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6703                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6704         ),
6705         'Time2ns.info' => array(
6706                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6707                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6708                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6709                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6710                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6711         ),
6712         'Ilovemyns.info' => array(
6713                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6714                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6715         ),
6716         'Freehostdns.info' => array(
6717                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6718                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6719                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6720         ),
6721         'Newns4me.info' => array(
6722                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6723                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6724         ),
6725
6726         // C-2: Lonely domains (buddies not found yet)
6727         '.0721-4404.com',
6728         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6729         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6730         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6731         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6732         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6733         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6734         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6735         '.0annie.info',
6736         '.6i6.de',
6737         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6738         '.angioco.com',                 // 62.37.112.100, gamble
6739         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6740         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6741         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6742         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6743         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6744         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6745         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6746         '.allworlddirect.info', // Forbidden
6747         '.amoreitsex.com',
6748         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6749         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6750         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6751         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6752         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6753         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6754         '.auto-car-cheap.org',
6755         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6756         '.baurish.info',
6757         '.bernardtomic21.info', // by filboj at hotmail.com
6758         '.bestop.name',
6759         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6760         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6761         '.bestshopfinder.info',
6762         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6763         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6764         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6765         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6766         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6767         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6768         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6769         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6770         '.catkittenmagazines.org',              // 87.118.97.117
6771         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6772         '.chatwalker.com',              // 124.32.230.65
6773         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6774         '.covertarena.co.uk',   // by Wayne Huxtable
6775         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6776         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6777         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6778         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6779         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6780         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6781         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6782         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6783         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6784         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6785         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6786         '.easyshopusa.com',             // by riter (riter at nm.ru)
6787         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6788         '.edu.ph',                              // "philippine network foundation inc"
6789         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6790         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6791         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6792         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6793         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6794         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6795         '.filthserver.com',             // sales at onlinemarketingservices.biz
6796         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6797         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6798         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6799         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6800         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6801         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6802         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6803         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6804         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6805         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6806         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6807         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6808         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6809         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6810         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6811         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6812         '.gm-exchange.jp',              // 210.188.216.49 RMT
6813         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6814         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6815         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6816         '.greatbestwestern.org',// by gao.wungao at gmail.com
6817         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6818         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6819         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6820         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6821         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6822         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6823         '.hostuju.cz',                  // ns banan.cz, banan.it
6824         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6825         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6826         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6827         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6828         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6829         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6830         '.infradoc.com',
6831         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6832         '.ismarket.com',                // Google-hiding. intercage.com related IP
6833         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6834         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6835         '.itsexosit.net',
6836         '.itxxxit.net',
6837         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6838         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6839         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6840         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6841         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6842         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6843         '.kingtools.de',
6844         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6845         '.leucainfo.com',
6846         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6847         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6848         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6849         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6850         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6851         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6852         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6853         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6854         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6855         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6856         '.megvideochatlive.info',       // Bad seo
6857         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6858         '.mncxvsm.info',                // 217.11.233.105, / blank
6859         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6860         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6861         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6862         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6863         '.mxsupportmailer.com',
6864         '.next-moneylife.com',  // RMT
6865         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6866         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6867         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6868         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6869         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6870         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6871         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6872         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6873         '.onlineviagra.de',
6874         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6875         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6876         '.ozomw.info',
6877         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6878         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6879         '.perevozka777.ru',             // by witalik at gmail.com
6880         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6881         '.pills-storage.com',   // by
6882         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6883         '.porkyhost.com',               // 79965 at whois.gkg.net
6884         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6885         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6886         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6887         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6888         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6889         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6890         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6891         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6892         '.quality-teen-porn-photo.com', // by info at densa.info
6893         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6894         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6895         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6896         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6897         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6898         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6899         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6900         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6901         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6902         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6903         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6904         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6905         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6906         '.sexamoreit.com',
6907         '.sexforit.com',
6908         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6909         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6910         '.sirlook.com',
6911         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6912         '.sepcn.info',                  // / not found
6913         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6914         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6915         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6916         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6917         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6918         '.superverizonringtones.com',   // by joshua at list.ru
6919         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6920         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6921         '.thehostcity.com',             // Domains by Proxy
6922         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6923         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6924         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6925         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6926         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6927         '.topmeds10.com',
6928         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6929         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6930         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6931         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6932         '.unctad.net',                  // by gfdogfd at lovespb.com
6933         '.vacant.org.uk',
6934         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6935         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6936         '.virtualsystem.de',
6937         '.vdxhost.com',
6938         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6939         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6940         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6941         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6942         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6943         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6944         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6945         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6946         '.whoop.to',                    // RMT
6947         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6948         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6949         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6950         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6951         '.wwwna.info',                  // / 404 Not Found
6952         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6953         '.xamorexxx.net',
6954         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6955         '.xsessox.com',
6956         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6957         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6958         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6959         '.zyguo.info',                  // ns globoxhost.net
6960         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6961
6962
6963         // C-3: Not classifiable (information wanted)
6964         //
6965         // Something incoming to pukiwiki related sites
6966         'nana.co.il related' => array(
6967                 '.planetnana.co.il',
6968                 '.nana.co.il',
6969         ),
6970 );
6971
6972 // --------------------------------------------------
6973
6974 $blocklist['D'] = array(
6975         // D: Sample setting of
6976         // "Third party in good faith"s
6977         //
6978         // Hosts shown inside of the implanted contents,
6979         // not used via spam, but maybe useful to detect these contents
6980         //
6981         // 'RESERVED',
6982 );
6983
6984 // --------------------------------------------------
6985
6986 $blocklist['E'] = array(
6987         // E: Sample setting of
6988         // Promoters
6989         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6990         //  Ads, Business promotions, SEO, etc)
6991         //
6992         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6993         // Sometimes they may promote each other
6994
6995         '15-Mail.com related' => array(
6996                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6997                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6998                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6999                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7000                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7001         ),
7002         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7003         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7004         'E-brainers.com related' => array(
7005                 // 202.212.14.101
7006                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7007                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7008                 '.my-tune.jp',                                  // by brainers Inc.
7009                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7010                 '.weekle.jp',                                   // by brainers Inc.
7011
7012                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7013                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7014                 '.3minutes-marketing-club.com', // by Fujio
7015                 '.affiliate-vampire.com',               // by Masatoshi
7016                 '.article-site-power-package.com',      // by Masatoshi
7017                 '.audio-marketing-club.com',    // by Fujio
7018                 '.brainers-task-manager.com',   // by Masatoshi
7019                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7020                 '.brainersbuzz.com',                    // by Masatoshi
7021                 '.den4renz-marketing-club.com', // by Fujio
7022                 '.english-contents-club.com',   // by Masatoshi
7023                 '.fly-in-ads-japan.com',                // by Fujio
7024                 '.free-resalerights-giveaway.com',      // by Fujio
7025                 '.freegiveawaysecret.com',              // by Masatoshi
7026                 '.guaranteedvisitorpro.com',    // by Masatoshi
7027                 '.havads-japan.com',                    // by Masatoshi
7028                 '.info-business123.com',                // by Fujio
7029                 '.instant-marketing-club.com',  // by Fujio
7030                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7031                 '.marketing-force-japan.com',   // by Fujio
7032                 '.masatoshikobayashi.com',              // by Fujio
7033                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7034                 '.replytomatt.com',                             // by Fujio
7035                 '.santa-deal.com',                              // by Fujio
7036                 '.santa-deal-summer.com',               // by Fujio
7037                 '.scratch-card-factory.com',    // by Masatoshi
7038                 '.script4you-japan.com',                // by Fujio
7039                 '.sell1000000dollarinjapan.com',// by Fujio
7040                 '.squeeze-page-secret.com',             // by Masatoshi
7041                 '.viral-blog-square.com',               // by Fujio
7042                 '.viralarticle.com',                    // by Fujio
7043                 '.wowhoken.com',                                // by Fujio
7044
7045                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7046                 '.brainerstelevision.com',
7047                 '.demosite4you.com',
7048                 '.keywordcatcherpro.com',
7049                 '.script-marketing-club.com',
7050
7051                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7052                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7053                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7054                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7055                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7056                 '.brainerscode.com',    // by akada
7057                 '.brainerslive.com',    // by domain
7058                 '.brainersreview.com',  // by domain
7059                 '.brainerstest.com',    // by akada
7060                 '.otosecret.com',               // by domain
7061                 '.ultimate-marketing-weapon.com',       // by akada
7062                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7063                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7064
7065                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7066                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7067         ),
7068         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7069         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7070         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7071         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7072         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7073                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7074                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7075                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7076
7077                 // Redirects and affiliates:
7078                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7079                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7080                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7081                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7082                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7083                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7084                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7085                 //   ...
7086
7087                 // Other suggestions:
7088                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7089
7090                 // Blog posting at the same time
7091                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7092                 //   2007/06/13 e123.info/archives/76
7093                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7094                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7095                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7096         ),
7097         'info at kobeweb.jp' => array(
7098                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7099                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7100                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7101         ),
7102         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7103         'Infocart.jp' => array(         // by wai at infocart.jp
7104                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7105                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7106                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7107
7108                 //inetnum:      60.32.154.176 - 60.32.154.183
7109                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7110                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7111         ),
7112         'Info-sniper.com' => array(
7113                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7114                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7115                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7116         ),
7117         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7118         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7119         'JunSuzuki.com' => array(       // e-brainers.com related
7120                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7121                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7122         ),
7123         'Natsukih.net' => array(
7124                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7125                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7126                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7127                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7128
7129                 // by info at natsukih.net
7130                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7131                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7132                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7133                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7134                 '.5muryoureport.com',   // 210.251.253.230
7135                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7136                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7137                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7138         ),
7139         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7140                 '.11kanji.com',         // 211.10.131.88
7141                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7142                 '.point-park.com',      // 211.10.131.88
7143                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7144         ),
7145         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7146         'PRJAPAN.co.jp' => array(
7147                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7148                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7149                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7150                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7151                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7152                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7153         ),
7154         'Rakuten.co.jp' => array(
7155                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7156                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7157         ),
7158         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7159         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7160         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7161         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7162                 '.e123.info',
7163                 '.ialchemist.net',
7164                 '.j012.net',
7165                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7166         ),
7167         'Viscose.jp' => array(
7168                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7169                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7170         ),
7171         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7172 );
7173
7174 // --------------------------------------------------
7175
7176 $blocklist['Z'] = array(
7177         // Z: Yours
7178         //
7179         //'',
7180         //'',
7181         //'',
7182 );
7183
7184 ?>