spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.183 2007/11/27 16:32:29 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //''
  77         //''
  78         //''
  79
  80 );
  81
  82 // --------------------------------------------------
  83 // A: Sample setting of
  84 // Existing URI redirection or masking services
  85
  86 $blocklist['A-1'] = array(
  87
  88         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  89         // web-based proxy, DNS subdomains, etc
  90         // http://en.wikipedia.org/wiki/URL_redirection
  91         //
  92         // as known as cheap URI obscuring services today,
  93         // for spammers and affiliate users dazed by money.
  94         //
  95         //   Messages from forerunners:
  96         //     o-rly.net
  97         //       "A URL REDIRECTION SERVICE GONE BAD"
  98         //       "SORRY, TRULY"
  99         //     smcurl.com
 100         //       "Idiots were using smcURL to shrink URLs and
 101         //        send them out via spam."
 102         //     tinyclick.com
 103         //       "...stop offering it's free services because
 104         //        too many people were taking advantage of it"
 105         //     xjs.org
 106         //       "We have been forced to close this facility
 107         //        due to a minority of knuckle draggers who
 108         //        abused this web site."
 109         //
 110         // Please notify us about this list with reason:
 111         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 112         //
 113         '0nz.org',
 114         '0rz.tw',
 115         '0url.com',
 116         '0zed.info',
 117         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 118         '123.que.jp',
 119         '12url.org',
 120         '*.15h.com',
 121         '*.1dr.biz',
 122         '1K.pl' => array(
 123                 '*.1k.pl',
 124                 '*.5g.pl',
 125                 '*.orq.pl',
 126         ),
 127         '1nk.us',
 128         '1url.org',
 129         '1url.in',
 130         '1webspace.org',
 131         '2Ch.net' => array(
 132                 'ime.nu',
 133                 'ime.st',
 134         ),
 135         '2ch2.net',
 136         '2hop4.com',
 137         '2s.ca',
 138         '2site.com',
 139         '2url.org',
 140         '301url.com',
 141         '32url.com',
 142         '.3dg.de',
 143         '*.4bb.ru',
 144         'big5.51job.com',       ///gate/big5/
 145         '5jp.net',
 146         '.6url.com',
 147         '*.6x.to',
 148         '7ref.com',
 149         '82m.org',
 150         '*.8rf.com',
 151         '98.to',
 152         'abbrv.co.uk',
 153         '*.abwb.org',
 154         'acnw.de',
 155         'Active.ws' => array(
 156                 '*.321.cn',
 157                 '*.4x2.net',
 158                 'active.ws',
 159                 '*.better.ws',
 160                 '*.here.ws',
 161                 '*.mypiece.com',
 162                 '*.official.ws',
 163                 '*.ouch.ws',
 164                 '*.premium.ws',
 165                 '*.such.info',
 166                 '*.true.ws',
 167                 '*.visit.ws',
 168         ),
 169         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 170         'aifam.com',
 171         'All4WebMasters.pl' => array(
 172                 '*.ovp.pl',
 173                 '*.6-6-6.pl',
 174         ),
 175         'amoo.org',
 176         'web.archive.org',              ///web/2
 177         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 178                 'jmp2.net',
 179                 '2me.tw',
 180         ),
 181         'ataja.es',
 182         'ATBHost.com' => array(
 183                 '*.atbhost.com',
 184                 '*.bzhost.net',
 185         ),
 186         'atk.jp',
 187         'clearp.ath.cx',
 188         'athomebiz.com',
 189         'aukcje1.pl',
 190         'beam.to',
 191         'beermapping.com',
 192         'besturl.in',
 193         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 194         'biglnk.com',
 195         'bingr.com',
 196         'bittyurl.com',
 197         '*.bizz.cc',
 198         '*.blo.pl',
 199         '*.bo.pl',
 200         'briefurl.com',
 201         'brokenscript.com',
 202         'BucksoGen.com' => array(
 203                 '*.bucksogen.com',
 204                 '*.bulochka.org',
 205                 '*.korzhik.org',
 206                 '*.kovrizhka.org',
 207                 '*.pirozhok.org',
 208                 '*.plushka.org',
 209                 '*.pryanik.org',
 210                 '*.sushka.org',
 211         ),
 212         'budgethosts.org',
 213         'budu.com',                             // by peter.eder at imcworld.com
 214         '*.buzznet.com',
 215         '*.bydl.com',
 216         'C-O.IN' => array(
 217                 '*.c-o.cc',
 218                 '*.c-o.in',
 219                 '*.coz.in',
 220                 '*.cq.bz',
 221         ),
 222         'c64.ch',
 223         'c711.com',
 224         '*.cej.pl',
 225         'checkasite.net',
 226         'url.chefhost.com',
 227         '*.chicappa.jp',
 228         'chilicity.com',
 229         'big5.china.com',               ///gate/big5/
 230         'chopurl.com',
 231         'christopherleestreet.com',
 232         'cintcm.com',
 233         '*.cjb.net',
 234         'clipurl.com',
 235         '*.co.nr',
 236         'Comtech Enterprises ' => array(        // comteche.com
 237                 'tinyurl.name',
 238                 'tinyurl.us',
 239         ),
 240         'Cool168.com' => array(
 241                 '*.cool158.com',
 242                 '*.cool168.com',
 243                 '*.ko168.com',
 244                 '*.ko188.com',
 245         ),
 246         'Coolurl.de' => array(
 247                 'coolurl.de',
 248                 'dornenboy.de',
 249                 'eyeqweb.com',
 250                 'hardcore-porn.de',
 251                 'maschinen-bluten-nicht.de',
 252         ),
 253         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 254         'cutalink.com',
 255         '*.da.cx',
 256         '*.da.ru',
 257         'dae2.com',
 258         'dephine.org',
 259         'desiurl.com',
 260         'dhurl.com',
 261         'digbig.com',
 262         'Digipills.com' => array(
 263                 '*.digipills.com',
 264                 'minilien.com',
 265                 'tinylink.com',
 266         ),
 267         '*.discutbb.com',
 268         'DL.AM' => array(
 269                 '*.cx.la',
 270                 '*.dl.am',
 271         ),
 272         '*.dl.pl',
 273         '*.dmdns.com',
 274         'doiop.com',
 275         'drlinky.com',
 276         'durl.us',
 277         '*.dvdonly.ru',
 278         '*.dynu.ca',
 279         'dwarf.name',
 280         '*.eadf.com',
 281         'easyURL.net' => array(
 282                 '*.easyurl.net',
 283                 '.goshrink.com',
 284                 'ushrink.com',
 285         ),
 286         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 287                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 288                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 289                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 290                 //   "Keep continuing to seek originality and contribute it to local,
 291                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 292                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 293                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 294                 // I'm so much impressed of the situation around this imported one today.
 295         'elfurl.com',
 296         'eny.pl',
 297         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 298                 '.mywiitime.com',
 299                 '.surfindark.com',              // webmaster at etechfocus.com
 300                 '.surfinshade.com',
 301                 '.surfinshadow.com',
 302                 '.surfinwind.com',
 303                 '.topsecretlive.com',
 304         ),
 305         '*.eu.org',
 306         'F2B.be' => array(
 307                 '*.f2b.be',
 308                 '*.freakz.eu',
 309                 '*.n0.be',
 310                 '*.n3t.nl',
 311                 '*.short.be',
 312                 '*.ssr.be',
 313                 '*.tweaker.eu',
 314         ),
 315         '*.fancyurl.com',
 316         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 317                 'blue11.jp',
 318                 'fanznet.com',
 319                 'katou.in',
 320                 'mymap.in',
 321                 'saitou.in',
 322                 'satou.in',
 323                 'susan.in',
 324         ),
 325         '.fe.pl',                       // Redirection and subdomain
 326         'ffwd.to',
 327         'url.fibiger.org',
 328         'FireMe.to' => array(
 329                 'fireme.to',
 330                 'nextdoor.to',
 331                 'ontheway.to',
 332         ),
 333         'flingk.com',
 334         'flog.jp',                      // careless redirector and bbs
 335         'fm7.biz',
 336         'fnbi.jp',
 337         '*.fnbi.jp',
 338         'forgeturl.com',
 339         '*.free.bg',
 340         'Freeservers.com' => array(     // United Online Web Services, Inc.
 341                 '*.4mg.com',
 342                 '*.4t.com',
 343                 '*.8m.com',
 344                 '*.8m.net',
 345                 '*.8k.com',
 346                 '*.faithweb.com',
 347                 '*.freehosting.net',
 348                 '*.freeservers.com',
 349                 '*.gq.nu',
 350                 '*.htmlplanet.com',
 351                 '*.itgo.com',
 352                 '*.iwarp.com',
 353                 '*.s5.com',
 354                 '*.scriptmania.com',
 355                 '*.tvheaven.com',
 356         ),
 357         '*.freewebpages.com',
 358         'FreeWebServices.net' => array( // Host Department LLC
 359                 '*.about.gs',   // Dead?
 360                 '*.about.tc',
 361                 '*.about.vg',
 362                 '*.aboutus.gs',
 363                 '*.aboutus.ms',
 364                 '*.aboutus.tc',
 365                 '*.aboutus.vg',
 366                 '*.biografi.biz',
 367                 '*.biografi.info',
 368                 '*.biografi.org',
 369                 '*.biografi.us',
 370                 '*.datadiri.biz',
 371                 '*.datadiri.cc',
 372                 '*.datadiri.com',
 373                 '*.datadiri.info',
 374                 '*.datadiri.net',
 375                 '*.datadiri.org',
 376                 '*.datadiri.tv',
 377                 '*.datadiri.us',
 378                 '*.ecv.gs',
 379                 '*.ecv.ms',
 380                 '*.ecv.tc',
 381                 '*.ecv.vg',
 382                 '*.eprofile.us',
 383                 '*.go2net.ws',
 384                 '*.hits.io',
 385                 '*.hostingweb.us',
 386                 '*.hub.io',
 387                 '*.indo.bz',
 388                 '*.indo.cc',
 389                 '*.indo.gs',
 390                 '*.indo.ms',
 391                 '*.indo.tc',
 392                 '*.indo.vg',
 393                 '*.infinitehosting.net',
 394                 '*.infinites.net',
 395                 '*.lan.io',
 396                 '*.max.io',
 397                 '*.mycv.bz',
 398                 '*.mycv.nu',
 399                 '*.mycv.tv',
 400                 '*.myweb.io',
 401                 '*.ourprofile.biz',
 402                 '*.ourprofile.info',
 403                 '*.ourprofile.net',     // Dead?
 404                 '*.ourprofile.org',
 405                 '*.ourprofile.us',
 406                 '*.profil.bz',
 407                 '*.profil.cc',
 408                 '*.profil.cn',
 409                 '*.profil.gs',
 410                 '*.profil.in',
 411                 '*.profil.ms',
 412                 '*.profil.tc',
 413                 '*.profil.tv',
 414                 '*.profil.vg',  // ?
 415                 '*.site.io',
 416                 '*.wan.io',
 417                 '*.web-cam.ws',
 418                 '*.webs.io',
 419                 '*.zip.io',
 420         ),
 421         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 422         '*.fx.to',
 423         'fyad.org',
 424         'fype.com',
 425         'gentleurl.net',
 426         'Get2.us' => array(
 427                 '*.get2.us',
 428                 '*.hasballs.com',
 429                 '*.ismyidol.com',
 430                 '*.spotted.us',
 431                 '*.went2.us',
 432                 '*.wentto.us',
 433         ),
 434         'glinki.com',
 435         '*.globalredirect.com',
 436         'gnu.vu',
 437         '*.go.cc',
 438         //'Google.com' => array(
 439         //              google.com/translate_c\?u=(?:http://)?
 440         //),
 441         'goonlink.com',
 442         '.gourl.org',
 443         '.greatitem.com',
 444         'gzurl.com',
 445         'url.grillsportverein.de',
 446         'Harudake.net' => array('*.hyu.jp'),
 447         'Hattinger Linux User Group' => array('short.hatlug.de'),
 448         'Hexten.net' => array('lyxus.net'),
 449         'here.is',
 450         'HispaVista.com' => array(
 451                 '*.blogdiario.com',
 452                 '*.hispavista.com',
 453                 '.galeon.com',
 454         ),
 455         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 456                 '*.8l.pl',
 457                 '*.blg.pl',
 458                 '*.czytajto.pl',
 459                 '*.ryj.pl',
 460                 '*.xit.pl',
 461                 '*.xlc.pl',
 462                 '*.hk.pl',
 463                 '*.home.pl',
 464                 '*.of.pl',
 465         ),
 466         'hort.net',
 467         'free4.hostrocket.com',
 468         '*.hotindex.ru',
 469         'HotRedirect.com' => array(
 470                 '*.coolhere.com',
 471                 '*.homepagehere.com',
 472                 '*.hothere.com',
 473                 '*.mustbehere.com',
 474                 '*.onlyhere.net',
 475                 '*.pagehere.com',
 476                 '*.surfhere.net',
 477                 '*.zonehere.com',
 478         ),
 479         'hotshorturl.com',
 480         'hotwebcomics.com',     ///search_redirect.php
 481         'hurl.to',
 482         '*.hux.de',
 483         '*.i89.us',
 484         'iat.net',                      // 74.208.58.130 by Tony Carter
 485         'ibm.com',                      ///links (Correct it)
 486         '*.iceglow.com',
 487         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 488         'Ideas para Nuevos Mercados SL' => array(
 489                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 490                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 491                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 492                 // by edgar bortolin (oscar at i4nm.com)
 493                 // by Edgar Bortolin  (oscar at i4nm.com)
 494                 // by oscar florez (oscar at i4nm.com)
 495                 // by Oscar Florez (oscar at red-es.com)
 496                 // by covadonga del valle (oscar at i4nm.com)
 497                 '*.ar.gd',
 498                 '*.ar.gs',      // ns *.nora.net
 499                 '*.ar.kz',      // by oscar
 500                 '*.ar.nu',      // by Edgar
 501                 '*.ar.tc',      // by oscar
 502                 '*.ar.vg',      // by oscar
 503                 '*.bo.kz',      // by oscar
 504                 '*.bo.nu',      // by covadonga
 505                 '*.bo.tc',      // by oscar
 506                 '*.bo.tf',      // by Oscar
 507                 '*.bo.vg',      // by oscar
 508                 '*.br.gd',
 509                 '*.br.gs',      // ns *.nora.net
 510                 '*.br.nu',      // by edgar
 511                 '*.br.vg',      // by oscar
 512                 '*.ca.gs',      // by oscar
 513                 '*.ca.kz',      // by oscar
 514                 '*.cl.gd',      // by oscar
 515                 '*.cl.kz',      // by oscar
 516                 '*.cl.nu',      // by edgar
 517                 '*.cl.tc',      // by oscar
 518                 '*.cl.tf',      // by Oscar
 519                 '*.cl.vg',      // by oscar
 520                 '*.col.nu',     // by Edgar
 521                 '*.cr.gs',      // ns *.nora.net
 522                 '*.cr.kz',      // by oscar
 523                 '*.cr.nu',      // by edgar
 524                 '*.cr.tc',      // by oscar
 525                 '*.cu.tc',      // by oscar
 526                 '*.do.kz',      // by oscar
 527                 '*.do.nu',      // by edgar
 528                 '*.ec.kz',      // by edgar
 529                 '*.ec.nu',      // by Edgar
 530                 '*.ec.tf',      // by Oscar
 531                 '*.es.kz',      // by oscar
 532                 '*.eu.kz',      // by oscar
 533                 '*.gt.gs',      // ns *.nora.net
 534                 '*.gt.tc',      // by oscar
 535                 '*.gt.tf',      // by Oscar
 536                 '*.gt.vg',      // by Oscar
 537                 '*.hn.gs',      // ns *.nora.net
 538                 '*.hn.tc',      // by oscar
 539                 '*.hn.tf',      // by Oscar
 540                 '*.hn.vg',      // by oscar
 541                 '*.mx.gd',
 542                 '*.mx.gs',      // ns *.nora.net
 543                 '*.mx.kz',      // by oscar
 544                 '*.mx.vg',      // by oscar
 545                 '*.ni.kz',      // by oscar
 546                 '*.pa.kz',      // by oscar
 547                 '*.pe.kz',      // by oscar
 548                 '*.pe.nu',      // by Edgar
 549                 '*.pr.kz',      // by oscar
 550                 '*.pr.nu',      // by edgar
 551                 '*.pt.gs',      // ns *.nora.net
 552                 '*.pt.kz',      // by edgar
 553                 '*.pt.nu',      // by edgar
 554                 '*.pt.tc',      // by oscar
 555                 '*.pt.tf',      // by Oscar
 556                 '*.py.gs',      // ns *.nora.net
 557                 '*.py.nu',      // by edgar
 558                 '*.py.tc',      // by oscar
 559                 '*.py.tf',      // by Oscar
 560                 '*.py.vg',      // by oscar
 561                 '*.sv.tc',      // by oscar
 562                 '*.usa.gs',     // ns *.nora.net
 563                 '*.uy.gs',      // ns *.nora.net
 564                 '*.uy.kz',      // by oscar
 565                 '*.uy.nu',      // by edgar
 566                 '*.uy.tc',      // by oscar
 567                 '*.uy.tf',      // by Oscar
 568                 '*.uy.vg',      // by oscar
 569                 '*.ve.gs',      // by oscar
 570                 '*.ve.tc',      // by oscar
 571                 '*.ve.tf',      // by Oscar
 572                 '*.ve.vg',      // by oscar
 573                 '*.ven.nu',     // by edgar
 574         ),
 575         'ie.to',
 576         'igoto.co.uk',
 577         'ilook.tw',
 578         'indianpad.com',                ///view/
 579         'iNetwork.co.il' => array(
 580                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 581                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 582                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 583         ),
 584         '*.infogami.com',
 585         'infotop.jp',
 586         'ipoo.org',
 587         'IR.pl' => array(
 588                 '*.aj.pl',
 589                 '*.aliasy.org',
 590                 '*.gu.pl',
 591                 '*.hu.pl',
 592                 '*.ir.pl',
 593                 '*.jo.pl',
 594                 '*.su.pl',
 595                 '*.td.pl',
 596                 '*.uk.pl',
 597                 '*.uy.pl',
 598                 '*.xa.pl',
 599                 '*.zj.pl',
 600         ),
 601         'irotator.com',
 602         '.iwebtool.com',
 603         'j6.bz',
 604         'jeeee.net',
 605         'Jaze Redirect Services' => array(
 606                 '*.arecool.net',
 607                 '*.iscool.net',
 608                 '*.isfun.net',
 609                 '*.tux.nu',
 610         ),
 611         '*.jed.pl',
 612         'JeremyJohnstone.com' => array('url.vg'),
 613         'jemurl.com',
 614         'jggj.net',
 615         'jpan.jp',
 616         'josh.nu',
 617         'kat.cc',
 618         'Kickme.to' => array(
 619                 '.1024bit.at',
 620                 '.128bit.at',
 621                 '.16bit.at',
 622                 '.256bit.at',
 623                 '.32bit.at',
 624                 '.512bit.at',
 625                 '.64bit.at',
 626                 '.8bit.at',
 627                 '.adores.it',
 628                 '.again.at',
 629                 '.allday.at',
 630                 '.alone.at',
 631                 '.altair.at',
 632                 '.american.at',
 633                 '.amiga500.at',
 634                 '.ammo.at',
 635                 '.amplifier.at',
 636                 '.amstrad.at',
 637                 '.anglican.at',
 638                 '.angry.at',
 639                 '.around.at',
 640                 '.arrange.at',
 641                 '.australian.at',
 642                 '.baptist.at',
 643                 '.basque.at',
 644                 '.battle.at',
 645                 '.bazooka.at',
 646                 '.berber.at',
 647                 '.blackhole.at',
 648                 '.booze.at',
 649                 '.bosnian.at',
 650                 '.brainiac.at',
 651                 '.brazilian.at',
 652                 '.bummer.at',
 653                 '.burn.at',
 654                 '.c-64.at',
 655                 '.catalonian.at',
 656                 '.catholic.at',
 657                 '.chapel.at',
 658                 '.chills.it',
 659                 '.christiandemocrats.at',
 660                 '.cname.at',
 661                 '.colors.at',
 662                 '.commodore.at',
 663                 '.commodore64.at',
 664                 '.communists.at',
 665                 '.conservatives.at',
 666                 '.conspiracy.at',
 667                 '.cooldude.at',
 668                 '.craves.it',
 669                 '.croatian.at',
 670                 '.cuteboy.at',
 671                 '.dancemix.at',
 672                 '.danceparty.at',
 673                 '.dances.it',
 674                 '.danish.at',
 675                 '.dealing.at',
 676                 '.deep.at',
 677                 '.democrats.at',
 678                 '.digs.it',
 679                 '.divxlinks.at',
 680                 '.divxmovies.at',
 681                 '.divxstuff.at',
 682                 '.dizzy.at',
 683                 '.does.it',
 684                 '.dork.at',
 685                 '.drives.it',
 686                 '.dutch.at',
 687                 '.dvdlinks.at',
 688                 '.dvdmovies.at',
 689                 '.dvdstuff.at',
 690                 '.emulators.at',
 691                 '.end.at',
 692                 '.english.at',
 693                 '.eniac.at',
 694                 '.error403.at',
 695                 '.error404.at',
 696                 '.evangelism.at',
 697                 '.exhibitionist.at',
 698                 '.faith.at',
 699                 '.fight.at',
 700                 '.finish.at',
 701                 '.finnish.at',
 702                 '.forward.at',
 703                 '.freebie.at',
 704                 '.freemp3.at',
 705                 '.french.at',
 706                 '.graduatejobs.at',
 707                 '.greenparty.at',
 708                 '.grunge.at',
 709                 '.hacked.at',
 710                 '.hang.at',
 711                 '.hangup.at',
 712                 '.has.it',
 713                 '.hide.at',
 714                 '.hindu.at',
 715                 '.htmlpage.at',
 716                 '.hungarian.at',
 717                 '.icelandic.at',
 718                 '.independents.at',
 719                 '.invisible.at',
 720                 '.is-chillin.it',
 721                 '.is-groovin.it',
 722                 '.japanese.at',
 723                 '.jive.at',
 724                 '.kickass.at',
 725                 '.kickme.to',
 726                 '.kindergarden.at',
 727                 '.knows.it',
 728                 '.kurd.at',
 729                 '.labour.at',
 730                 '.leech.at',
 731                 '.liberals.at',
 732                 '.linuxserver.at',
 733                 '.liqour.at',
 734                 '.lovez.it',
 735                 '.makes.it',
 736                 '.maxed.at',
 737                 '.means.it',
 738                 '.meltdown.at',
 739                 '.methodist.at',
 740                 '.microcomputers.at',
 741                 '.mingle.at',
 742                 '.mirror.at',
 743                 '.moan.at',
 744                 '.mormons.at',
 745                 '.musicmix.at',
 746                 '.nationalists.at',
 747                 '.needz.it',
 748                 '.nerds.at',
 749                 '.neuromancer.at',
 750                 '.newbie.at',
 751                 '.nicepage.at',
 752                 '.ninja.at',
 753                 '.norwegian.at',
 754                 '.ntserver.at',
 755                 '.owns.it',
 756                 '.paint.at',
 757                 '.palestinian.at',
 758                 '.phoneme.at',
 759                 '.phreaking.at',
 760                 '.playz.it',
 761                 '.polish.at',
 762                 '.popmusic.at',
 763                 '.portuguese.at',
 764                 '.powermac.at',
 765                 '.processor.at',
 766                 '.prospects.at',
 767                 '.protestant.at',
 768                 '.rapmusic.at',
 769                 '.raveparty.at',
 770                 '.reachme.at',
 771                 '.reads.it',
 772                 '.reboot.at',
 773                 '.relaxed.at',
 774                 '.republicans.at',
 775                 '.researcher.at',
 776                 '.reset.at',
 777                 '.resolve.at',
 778                 '.retrocomputers.at',
 779                 '.rockparty.at',
 780                 '.rocks.it',
 781                 '.rollover.at',
 782                 '.rough.at',
 783                 '.rules.it',
 784                 '.rumble.at',
 785                 '.russian.at',
 786                 '.says.it',
 787                 '.scared.at',
 788                 '.seikh.at',
 789                 '.serbian.at',
 790                 '.short.as',
 791                 '.shows.it',
 792                 '.silence.at',
 793                 '.simpler.at',
 794                 '.sinclair.at',
 795                 '.singz.it',
 796                 '.slowdown.at',
 797                 '.socialists.at',
 798                 '.spanish.at',
 799                 '.split.at',
 800                 '.stand.at',
 801                 '.stoned.at',
 802                 '.stumble.at',
 803                 '.supercomputer.at',
 804                 '.surfs.it',
 805                 '.swedish.at',
 806                 '.swims.it',
 807                 '.synagogue.at',
 808                 '.syntax.at',
 809                 '.syntaxerror.at',
 810                 '.techie.at',
 811                 '.temple.at',
 812                 '.thinkbig.at',
 813                 '.thirsty.at',
 814                 '.throw.at',
 815                 '.toplist.at',
 816                 '.trekkie.at',
 817                 '.trouble.at',
 818                 '.turkish.at',
 819                 '.unexplained.at',
 820                 '.unixserver.at',
 821                 '.vegetarian.at',
 822                 '.venture.at',
 823                 '.verycool.at',
 824                 '.vic-20.at',
 825                 '.viewing.at',
 826                 '.vintagecomputers.at',
 827                 '.virii.at',
 828                 '.vodka.at',
 829                 '.wannabe.at',
 830                 '.webpagedesign.at',
 831                 '.wheels.at',
 832                 '.whisper.at',
 833                 '.whiz.at',
 834                 '.wonderful.at',
 835                 '.zor.org',
 836                 '.zx80.at',
 837                 '.zx81.at',
 838                 '.zxspectrum.at',
 839         ),
 840         'kisaweb.com',
 841         'krotki.pl',
 842         'kuerzer.de',
 843         '*.kupisz.pl',
 844         'kuso.cc',
 845         '*.l8t.com',
 846         'lame.name',
 847         'lediga.st',
 848         'liencourt.com',
 849         'liteurl.com',
 850         'linkachi.com',
 851         'linkezy.com',
 852         'linkfrog.net',
 853         'linkook.com',
 854         'linkyme.com',
 855         'linkzip.net',
 856         'lispurl.com',
 857         'lnk.in',
 858         'makeashorterlink.com',
 859         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 860                 '*.3gp.fr',
 861                 '*.gtx.fr',
 862                 '*.ici.st',
 863                 '*.max.st',
 864                 '*.nn.cx',              // ns *.sivit.org
 865                 '*.site.cx',    // ns *.sivit.org
 866                 '*.user.fr',
 867                 '*.zxr.fr',
 868         ),
 869         'mcturl.com',
 870         'memurl.com',
 871         'Metamark.net' => array('xrl.us'),
 872         'midgeturl.com',
 873         'Minilink.org' => array('lnk.nu'),
 874         'miniurl.org',
 875         'miniurl.pl',
 876         'mixi.bz',
 877         'mo-v.jp',
 878         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 879                 '.com.md',
 880                 '.co.md',
 881                 '.org.md',
 882                 '.info.md',
 883                 '.host.md',
 884         ),
 885         'monster-submit.com',
 886         'mooo.jp',
 887         'murl.net',
 888         'myactivesurf.net',
 889         'mytinylink.com',
 890         'myurl.in',
 891         'myurl.com.tw',
 892         'nanoref.com',
 893         'Ne1.net' => array(
 894                 '*.ne1.net',
 895                 '*.r8.org',
 896         ),
 897         'Nashville Linux Users Group' => array('nlug.org'),
 898         'not2long.net',
 899         '*.notlong.com',
 900         '*.nuv.pl',
 901         'ofzo.be',
 902         '*.ontheinter.net',
 903         'ourl.org',
 904         'ov2.net',                              // frame
 905         '*.ozonez.com',
 906         'pagebang.com',
 907         'palurl.com',
 908         '*.paulding.net',
 909         'phpfaber.org',
 910         'pygmyurl.com',
 911         'pnope.com',
 912         'prettylink.com',
 913         'PROXID.net' => array(  // also xRelay.net
 914                 '*.asso.ws',
 915                 '*.corp.st',
 916                 '*.euro.tm',
 917                 '*.perso.tc',
 918                 '*.site.tc',
 919                 '*.societe.st',
 920         ),
 921         'qrl.jp',
 922         'qurl.net',
 923         'qwer.org',
 924         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 925         'radiobase.net',
 926         'Rakuten.co.jp' => array(
 927                 'pt.afl.rakuten.co.jp', ///c/
 928         ),
 929         'RedirectFree.com' => array(
 930                 '*.red.tc',
 931                 '*.redirectfree.com',
 932                 '*.sky.tc',
 933                 '*.the.vg',
 934         ),
 935         'redirme.com',
 936         'redirectme.to',
 937         'relic.net',
 938         'rezma.info',
 939         'rio.st',
 940         'rlink.org',
 941         '*.rmcinfo.fr',
 942         'rubyurl.com',
 943         '*.runboard.com',
 944         'runurl.com',
 945         's-url.net',
 946         's1u.net',
 947         'SG5.co.uk' => array(
 948                 '*.sg5.co.uk',
 949                 '*.sg5.info',
 950         ),
 951         'Shim.net' => array(
 952                 '*.0kn.com',
 953                 '*.2cd.net',
 954                 '*.freebiefinders.net',
 955                 '*.freegaming.org',
 956                 '*.op7.net',
 957                 '*.shim.net',
 958                 '*.v9z.com',
 959         ),
 960         'big5.shippingchina.com',
 961         'shorl.com',
 962         'shortenurl.com',
 963         'shorterlink.com',
 964         'shortlinks.co.uk',
 965         'shorttext.com',
 966         'shorturl-accessanalyzer.com',
 967         'Shortify.com' => array(
 968                 '74678439.com',
 969                 'shortify.com',
 970         ),
 971         'shortlink.co.uk',
 972         'ShortURL.com' => array(
 973                 '*.1sta.com',
 974                 '*.24ex.com',
 975                 '*.2fear.com',
 976                 '*.2fortune.com',
 977                 '*.2freedom.com',
 978                 '*.2hell.com',
 979                 '*.2savvy.com',
 980                 '*.2truth.com',
 981                 '*.2tunes.com',
 982                 '*.2ya.com',
 983                 '*.alturl.com',
 984                 '*.antiblog.com',
 985                 '*.bigbig.com',
 986                 '*.dealtap.com',
 987                 '*.ebored.com',
 988                 '*.echoz.com',
 989                 '*.filetap.com',
 990                 '*.funurl.com',
 991                 '*.headplug.com',
 992                 '*.hereweb.com',
 993                 '*.hitart.com',
 994                 '*.mirrorz.com',
 995                 '*.shorturl.com',
 996                 '*.spyw.com',
 997                 '*.vze.com',
 998         ),
 999         'shrinkalink.com',
1000         'shrinkthatlink.com',
1001         'shrinkurl.us',
1002         'shrt.org',
1003         'shrunkurl.com',
1004         'shurl.org',
1005         'shurl.net',
1006         'sid.to',
1007         'simurl.com',
1008         'sitefwd.com',
1009         'Sitelutions.com' => array(
1010                 '*.assexy.as',
1011                 '*.athersite.com',
1012                 '*.athissite.com',
1013                 '*.bestdeals.at',
1014                 '*.byinter.net',
1015                 '*.findhere.org',
1016                 '*.fw.nu',
1017                 '*.isgre.at',
1018                 '*.isthebe.st',
1019                 '*.kwik.to',
1020                 '*.lookin.at',
1021                 '*.lowestprices.at',
1022                 '*.onthenet.as',
1023                 '*.ontheweb.nu',
1024                 '*.pass.as',
1025                 '*.passingg.as',
1026                 '*.redirect.hm',
1027                 '*.rr.nu',
1028                 '*.ugly.as',
1029         ),
1030         '*.skracaj.pl',
1031         'skiltechurl.com',
1032         'skocz.pl',
1033         'slimurl.jp',
1034         'slink.in',
1035         'smallurl.eu',
1036         'smurl.name',
1037         'snipurl.com',
1038         'sp-nov.net',
1039         'splashblog.com',
1040         'spod.cx',
1041         '*.spydar.com',
1042         'Subdomain.gr' => array(
1043                 '*.p2p.gr',
1044                 '*.subdomain.gr',
1045         ),
1046         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1047         'surl.se',
1048         'surl.ws',
1049         'symy.jp',
1050         'tdurl.com',
1051         'tighturl.com',
1052         'tiniuri.com',
1053         'tiny.cc',
1054         'tiny.pl',
1055         'tiny2go.com',
1056         'tinylink.eu',
1057         'tinylinkworld.com',
1058         'tinypic.com',
1059         'tinyr.us',
1060         'TinyURL.com' => array(
1061                 'tinyurl.com',
1062                 'preview.tinyurl.com',
1063                 'tinyurl.co.uk',
1064         ),
1065         'titlien.com',
1066         '*.tlg.pl',
1067         'tlurl.com',
1068         'link.toolbot.com',
1069         'tnij.org',
1070         'Tokelau ccTLD' => array('.tk'),
1071         'toila.net',
1072         '*.toolbot.com',
1073         '*.torontonian.com',
1074         'trimurl.com',
1075         'ttu.cc',
1076         'turl.jp',
1077         '*.tz4.com',
1078         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1079                 '*.1.to',
1080                 '*.4.to',
1081                 '*.5.to',
1082                 '*.82.to',
1083                 '*.s.to',
1084                 '*.u.to',
1085                 '*.ce.to',
1086                 '*.cz.to',
1087                 '*.if.to',
1088                 '*.it.to',
1089                 '*.kp.to',
1090                 '*.ne.to',
1091                 '*.ok.to',
1092                 '*.pc.to',
1093                 '*.tv.to',
1094                 '*.dd.to',
1095                 '*.ee.to',
1096                 '*.hh.to',
1097                 '*.kk.to',
1098                 '*.mm.to',
1099                 '*.qq.to',
1100                 '*.xx.to',
1101                 '*.zz.to',
1102                 '*.ivy.to',
1103                 '*.joa.to',
1104                 '*.ever.to',
1105                 '*.mini.to',
1106         ),
1107         'uchinoko.in',
1108         'Ulimit.com' => array(
1109                 '*.be.tf',
1110                 '*.best.cd',
1111                 '*.bsd-fan.com',
1112                 '*.c0m.st',
1113                 '*.ca.tc',
1114                 '*.clan.st',
1115                 '*.com02.com',
1116                 '*.en.st',
1117                 '*.euro.st',
1118                 '*.fr.fm',
1119                 '*.fr.st',
1120                 '*.fr.vu',
1121                 '*.gr.st',
1122                 '*.ht.st',
1123                 '*.int.ms',
1124                 '*.it.st',
1125                 '*.java-fan.com',
1126                 '*.linux-fan.com',
1127                 '*.mac-fan.com',
1128                 '*.mp3.ms',
1129                 '*.qc.tc',
1130                 '*.sp.st',
1131                 '*.suisse.st',
1132                 '*.t2u.com',
1133                 '*.unixlover.com',
1134                 '*.zik.mu',
1135         ),
1136         '*.uni.cc',
1137         'UNONIC.com' => array(
1138                 '*.at.tf',      // AlpenNIC
1139                 '*.bg.tf',
1140                 '*.ca.tf',
1141                 '*.ch.tf',      // AlpenNIC
1142                 '*.cz.tf',
1143                 '*.de.tf',      // AlpenNIC
1144                 '*.edu.tf',
1145                 '*.eu.tf',
1146                 '*.int.tf',
1147                 '*.net.tf',
1148                 '*.pl.tf',
1149                 '*.ru.tf',
1150                 '*.sg.tf',
1151                 '*.us.tf',
1152         ),
1153         'Up.pl' => array(
1154                 '.69.pl',                       // by nsk101869
1155                 '.crack.pl',            // by nsk101869
1156                 '.film.pl',                     // by sibr19002
1157                 '.h2o.pl',                      // by nsk101869
1158                 '.hostessy.pl',         // by nsk101869
1159                 '.komis.pl',            // by nsk101869
1160                 '.laski.pl',            // by nsk101869
1161                 '.modelki.pl',          // by nsk101869
1162                 '.muzyka.pl',           // by sibr19002
1163                 '.nastolatki.pl',       // by nsk101869
1164                 '.obuwie.pl',           // by nsk101869
1165                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1166                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1167                 '.sexchat.pl',          // by nsk101869
1168                 '.sexlive.pl',          // by nsk101869
1169                 '.tv.pl',                       // by nsk101869
1170                 '.up.pl',                       // by nsk101869
1171                 '.video.pl',            // by nsk101869
1172                 '.xp.pl',                       // nsk101869
1173         ),
1174         '*.uploadr.com',
1175         'url.ie',
1176         'url4.net',
1177         'url-c.com',
1178         'urlbee.com',
1179         'urlbounce.com',
1180         'urlcut.com',
1181         'urlcutter.com',
1182         'urlic.com',
1183         'urlin.it',
1184         'urlkick.com',
1185         'URLLogs.com' => array(
1186                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1187                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1188         ),
1189         '*.urlproxy.com',
1190         'urlser.com',
1191         'urlsnip.com',
1192         'urlzip.de',
1193         'urlx.org',
1194         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1195         'utun.jp',
1196         'uxxy.com',
1197         '*.v27.net',
1198         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1199                 '*.all.at',
1200                 '*.back.to',
1201                 '*.beam.at',
1202                 '*.been.at',
1203                 '*.bite.to',
1204                 '*.board.to',
1205                 '*.bounce.to',
1206                 '*.bowl.to',
1207                 '*.break.at',
1208                 '*.browse.to',
1209                 '*.change.to',
1210                 '*.chip.ms',
1211                 '*.connect.to',
1212                 '*.crash.to',
1213                 '*.cut.by',
1214                 '*.direct.at',
1215                 '*.dive.to',
1216                 '*.drink.to',
1217                 '*.drive.to',
1218                 '*.drop.to',
1219                 '*.easy.to',
1220                 '*.everything.at',
1221                 '*.fade.to',
1222                 '*.fanclub.ms',
1223                 '*.firstpage.de',
1224                 '*.fly.to',
1225                 '*.flying.to',
1226                 '*.fortunecity.co.uk',
1227                 '*.fortunecity.com',
1228                 '*.forward.to',
1229                 '*.fullspeed.to',
1230                 '*.fun.ms',
1231                 '*.gameday.de',
1232                 '*.germany.ms',
1233                 '*.get.to',
1234                 '*.getit.at',
1235                 '*.hard-ware.de',
1236                 '*.hello.to',
1237                 '*.hey.to',
1238                 '*.hop.to',
1239                 '*.how.to',
1240                 '*.hp.ms',
1241                 '*.jump.to',
1242                 '*.kiss.to',
1243                 '*.listen.to',
1244                 '*.mediasite.de',
1245                 '*.megapage.de',
1246                 '*.messages.to',
1247                 '*.mine.at',
1248                 '*.more.at',
1249                 '*.more.by',
1250                 '*.move.to',
1251                 '*.musicpage.de',
1252                 '*.mypage.org',
1253                 '*.mysite.de',
1254                 '*.nav.to',
1255                 '*.notrix.at',
1256                 '*.notrix.ch',
1257                 '*.notrix.de',
1258                 '*.notrix.net',
1259                 '*.on.to',
1260                 '*.page.to',
1261                 '*.pagina.de',
1262                 '*.played.by',
1263                 '*.playsite.de',
1264                 '*.privat.ms',
1265                 '*.quickly.to',
1266                 '*.redirect.to',
1267                 '*.rulestheweb.com',
1268                 '*.run.to',
1269                 '*.scroll.to',
1270                 '*.seite.ms',
1271                 '*.shortcut.to',
1272                 '*.skip.to snap.to',
1273                 '*.soft-ware.de',
1274                 '*.start.at',
1275                 '*.stick.by',
1276                 '*.surf.to',
1277                 '*.switch.to',
1278                 '*.talk.to',
1279                 '*.tip.nu',
1280                 '*.top.ms',
1281                 '*.transfer.to',
1282                 '*.travel.to',
1283                 '*.turn.to',
1284                 '*.vacations.to',
1285                 '*.videopage.de',
1286                 '*.virtualpage.de',
1287                 '*.w3.to',
1288                 '*.walk.to',
1289                 '*.warp9.to',
1290                 '*.window.to',
1291                 '*.yours.at',
1292                 '*.zap.to',
1293                 '*.zip.to',
1294         ),
1295         'VDirect.com' => array(
1296                 '*.emailme.net',
1297                 '*.getto.net',
1298                 '*.inetgames.com',
1299                 '*.netbounce.com',
1300                 '*.netbounce.net',
1301                 '*.oneaddress.net',
1302                 '*.snapto.net',
1303                 '*.vdirect.com',
1304                 '*.vdirect.net',
1305                 '*.webrally.net',
1306         ),
1307         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1308         'vgo2.com',
1309         'Voila.fr' => array('r.voila.fr'),      // Fix it
1310         'w3t.org',
1311         'wapurl.co.uk',
1312         'Wb.st' => array(
1313                 '*.team.st',
1314                 '*.wb.st',
1315         ),
1316         'wbkt.net',
1317         'WebAlias.com' => array(
1318                 '*.andmuchmore.com',
1319                 '*.browser.to',
1320                 '*.escape.to',
1321                 '*.fornovices.com',
1322                 '*.fun.to',
1323                 '*.got.to',
1324                 '*.hottestpix.com',
1325                 '*.imegastores.com',
1326                 '*.latest-info.com',
1327                 '*.learn.to',
1328                 '*.moviefever.com',
1329                 '*.mp3-archives.com',
1330                 '*.myprivateidaho.com',
1331                 '*.radpages.com',
1332                 '*.remember.to',
1333                 '*.resourcez.com',
1334                 '*.return.to',
1335                 '*.sail.to',
1336                 '*.sports-reports.com',
1337                 '*.stop.to',
1338                 '*.thrill.to',
1339                 '*.tophonors.com',
1340                 '*.uncutuncensored.com',
1341                 '*.up.to',
1342                 '*.veryweird.com',
1343                 '*.way.to',
1344                 '*.web-freebies.com',
1345                 '.webalias.com',
1346                 '*.webdare.com',
1347                 '*.xxx-posed.com',
1348         ),
1349         'webmasterwise.com',
1350         'witherst at hotmail.com' => array(     // by Tim Withers
1351                 '*.associates-program.com',
1352                 '*.casinogopher.com',
1353                 '*.ezpagez.com',
1354                 '*.vgfaqs.com',
1355         ),
1356         'wittylink.com',
1357         'wiz.sc',                       // tiny.cc related
1358         'X50.us' => array(
1359                 '*.i50.de',
1360                 '*.x50.us',
1361         ),
1362         'big5.xinhuanet.com',   ///gate/big5/
1363         'xhref.com',
1364         'Xn6.net' => array(
1365                 '*.9ax.net',
1366                 '*.xn6.net',
1367         ),
1368         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1369         '.y11.net',
1370         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1371                 '*.yesns.com',
1372                 '*.srv4u.net',
1373                 //blogne.com
1374         ),
1375         'yatuc.com',
1376         'yep.it',
1377         'yumlum.com',
1378         'yurel.com',
1379         'Z.la' => array(
1380                 'z.la',
1381                 't.z.la',
1382         ),
1383         'zaable.com',
1384         'zapurl.com',
1385         'zarr.co.uk',
1386         'zerourl.com',
1387         'ZeroWeb.org' => array(
1388                 '*.80t.com',
1389                 '*.firez.org',
1390                 '*.fizz.nu',
1391                 '*.ingame.org',
1392                 '*.irio.net',
1393                 '*.v33.org',
1394                 '*.zeroweb.org',
1395         ),
1396         'zhukcity.ru',
1397         'zippedurl.com',
1398         'zr5.us',
1399         '*.zs.pl',
1400         '*.zu5.net',
1401         'zuso.tw',
1402         '*.zwap.to',
1403 );
1404
1405 // --------------------------------------------------
1406
1407 $blocklist['A-2'] = array(
1408
1409         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1410         //
1411         //'*.dyndns.*', // Wildcard for dyndns
1412         //
1413         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1414         'ddns.ru' => array('*.bpa.nu'),
1415         'Dhs.org' => array(
1416                 '*.2y.net',
1417                 '*.dhs.org',
1418         ),
1419         '*.dnip.net',
1420         '*.dyndns.co.za',
1421         '*.dyndns.dk',
1422         '*.dyndns.nemox.net',
1423         'DyDNS.com' => array(
1424                 '*.ath.cx',
1425                 '*.dnsalias.org',
1426                 '*.dyndns.org',
1427                 '*.homeip.net',
1428                 '*.homelinux.net',
1429                 '*.mine.nu',
1430                 '*.shacknet.nu',
1431         ),
1432         '*.dtdns.net',                  // by jscott at sceiron.com
1433         '*.dynu.com',
1434         '*.dynup.net',
1435         '*.fdns.net',
1436         'J-Speed.net' => array(
1437                 '*.bne.jp',
1438                 '*.ii2.cc',
1439                 '*.jdyn.cc',
1440                 '*.jspeed.jp',
1441         ),
1442         '*.mydyn.de',
1443         '*.nerdcamp.net',
1444         'No-IP.com' => array(
1445                         '*.bounceme.net',
1446                         '*.hopto.org',
1447                         '*.myftp.biz',
1448                         '*.myftp.org',
1449                         '*.myvnc.com',
1450                         '*.no-ip.biz',
1451                         '*.no-ip.info',
1452                         '*.no-ip.org',
1453                         '*.redirectme.net',
1454                         '*.servebeer.com',
1455                         '*.serveblog.net',
1456                         '*.servecounterstrike.com',
1457                         '*.serveftp.com',
1458                         '*.servegame.com',
1459                         '*.servehalflife.com',
1460                         '*.servehttp.com',
1461                         '*.servemp3.com',
1462                         '*.servepics.com',
1463                         '*.servequake.com',
1464                         '*.sytes.net',
1465                         '*.zapto.org',
1466         ),
1467         '*.opendns.be',
1468         'Yi.org' => array(      // by dns at whyi.org
1469                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1470
1471                 // 72.55.129.46(redirect.yi.org)
1472                 '*.whyi.org',
1473                 '*.weedns.com',
1474         ),
1475         '*.zenno.info',
1476         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1477                         // and all non-recorded domains redirect to 'agoga.com' now
1478                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1479                         // http://agoga.com/aboutus.html
1480 );
1481
1482 // --------------------------------------------------
1483
1484 // B: Sample setting of:
1485 // Jacked (taken advantage of) and cleaning-less sites
1486 //
1487 // Please notify us about this list with reason:
1488 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1489
1490 $blocklist['B-1'] = array(
1491
1492         // B-1: Web N.M spaces (N > 0, M > 0)
1493         //
1494         //   Messages from forerunners:
1495         //     activefreehost.com
1496         //       "We regret to inform you that ActiveFreeHost
1497         //        free hosting service has is now closed (as of
1498         //        September 18). We have been online for over
1499         //        two and half years, but have recently decided
1500         //        to take time for software improvement to fight
1501         //        with server abuse, Spam advertisement and
1502         //        fraud."
1503         //
1504         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1505         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1506         '*.007webpro.com',              // by richord at ientry.com
1507         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1508         '*.0buckhost.com',              // by tycho at e-lab.nl
1509         '0Catch.com related' => array(
1510                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1511
1512                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1513                 '*.100megsfree5.com',
1514
1515                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1516                 '*.100freemb.com',              // by Danny Ashworth
1517                 '*.easyfreehosting.com',
1518                 '*.exactpages.com',
1519                 '*.fcpages.com',
1520                 '*.wtcsites.com',
1521
1522                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1523                 '*.741.com',
1524                 '*.freecities.com',
1525                 '*.freesite.org',
1526                 '*.freewebpages.org',
1527                 '*.freewebsitehosting.com',
1528                 '*.jvl.com',
1529
1530                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1531                 '*.freespaceusa.com',
1532                 '*.usafreespace.com',
1533
1534                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1535                 '*.dex1.com',
1536                 '*.questh.com',
1537
1538                 // 209.63.57.10(*snip*), ns *.0catch.com
1539                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1540                 '*.012webpages.com',    // by support at 0catch.com
1541                 '*.150m.com',
1542                 '*.1sweethost.com',             // by whois at bluehost.com
1543                 '*.250m.com',                   // by jason at fahlman.net
1544                 '*.9cy.com',                    // by paulw0t at gmail.com
1545                 '*.angelcities.com',    // by cliff at eccentrix.com
1546                 '*.arcadepages.com',    // by admin at site-see.com
1547                 '*.e-host.ws',                  // by dns at jomax.net
1548                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1549                 '*.fw.bz',                              // by ben at kuehl.as
1550                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1551                 '*.g0g.net',                    // by domains at seem.co.uk
1552                 '*.galaxy99.net',               // by admin at bagchi.org
1553                 '*.greatnow.com',               // by peo at peakspace.com
1554                 '*.hautlynx.com',               // by hlewis28 at juno.com
1555                 '*.ibnsites.com',               // by cmrojas at mail.com
1556                 '*.just-allen.com',             // by extremehype at msn.com
1557                 '*.kogaryu.com',                // by angelguerra at msn.com
1558                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1559                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1560                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1561                 '*.s-enterprize.com',
1562                 '*.servetown.com',              // by jonahbliss at earthlink.net
1563                 '*.stinkdot.org',               // by bluedot at ziplip.com
1564                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1565                 '*.zomi.net',                   // by sianpu at gmail.com
1566         ),
1567         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1568         '100 Best Inc' => array(
1569                 // by 100 Best Inc (info at 100best.com)
1570
1571                 // 66.235.204.7(h204-007.bluefishhosting.com)
1572                 '*.2-hi.com',
1573                 '*.20fr.com',
1574                 '*.20ii.com',
1575                 '*.20is.com',
1576                 '*.20it.com',
1577                 '*.20m.com',    // by jlee at 100bestinc.com
1578                 '*.20to.com',
1579                 '*.2u-2.com',
1580                 '*.3-st.com',
1581                 '*.fws1.com',
1582                 '*.fw-2.com',
1583                 '*.inc5.com',
1584                 '*.on-4.com',
1585                 '*.st-3.com',
1586                 '*.st20.com',
1587                 '*.up-a.com',
1588
1589                 // 216.40.33.252(www-pd.mdnsservice.com)
1590                 '*.0-st.com',
1591                 '*.20me.com',
1592         ),
1593         '*.100foros.com',
1594         '*.101freehost.com',
1595         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1596         '20six Weblog Services' => array(
1597                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1598                 '.20six.co.uk',
1599                 '.20six.fr',
1600                 'myblog.de',
1601                 'myblog.es',
1602         ),
1603         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1604         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1605         '2IP.com' => array(
1606                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1607                 '*.2ip.jp',
1608                 '*.474.jp',
1609                 '*.consensus.jp',
1610                 '*.desyo.jp',
1611                 '*.dif.jp',
1612                 '*.pastels.jp',
1613                 '*.powerblogger.jp',
1614                 '*.vippers.jp',
1615                 '*.webpages.jp',
1616
1617                 // 205.209.97.56(non-existent)
1618                 '*.biografi.biz',
1619                 '*.biografi.info',
1620                 '*.biografi.org',
1621                 '*.biografi.us',
1622                 '*.datadiri.biz',
1623                 '*.datadiri.cc',
1624                 '*.datadiri.com',
1625                 '*.datadiri.info',
1626                 '*.datadiri.net',
1627                 '*.datadiri.org',
1628                 '*.datadiri.tv',
1629                 '*.datadiri.us',
1630                 '*.indo.bz',
1631                 '*.indo.cc',
1632                 '*.profil.bz',
1633                 '*.profil.cc',
1634                 '*.profil.cn',
1635                 '*.profil.in',
1636                 '*.profil.tv',
1637
1638                 // 205.209.101.47(non-existent)
1639                 '*.about.tc',
1640                 '*.about.vg',
1641                 '*.aboutus.gs',
1642                 '*.aboutus.ms',
1643                 '*.aboutus.tc',
1644                 '*.aboutus.vg',
1645                 '*.band.io',
1646                 '*.beijing.am',
1647                 '*.blogs.io',
1648                 '*.boke.am',
1649                 '*.clan.io',
1650                 '*.ecv.gs',
1651                 '*.ecv.ms',
1652                 '*.ecv.vg',
1653                 '*.freekong.cn',
1654                 '*.go2net.ws',
1655                 '*.hello.cn.com',
1656                 '*.hello.io',
1657                 '*.hits.io',
1658                 '*.hostingweb.us',
1659                 '*.hub.io',
1660                 '*.ide.am',
1661                 '*.inc.io',
1662                 '*.incn.in',
1663                 '*.indo.gs',
1664                 '*.indo.ms',
1665                 '*.indo.tc',
1666                 '*.indo.vg',
1667                 '*.infinitehosting.net',
1668                 '*.infinites.net',
1669                 '*.jushige.cn',
1670                 '*.jushige.com',
1671                 '*.kongjian.in',
1672                 '*.lan.io',
1673                 '*.llc.nu',
1674                 '*.maimai.in',
1675                 '*.max.io',
1676                 '*.musician.io',
1677                 '*.mycv.bz',
1678                 '*.mycv.nu',
1679                 '*.mycv.tv',
1680                 '*.myweb.io',
1681                 '*.ourprofile.biz',
1682                 '*.ourprofile.info',
1683                 '*.ourprofile.net',
1684                 '*.ourprofile.org',
1685                 '*.ourprofile.us',
1686                 '*.profil.gs',
1687                 '*.profil.ms',
1688                 '*.profil.tc',
1689                 '*.qiye.in',
1690                 '*.site.io',
1691                 '*.wan.io',
1692                 '*.web-cam.ws',
1693                 '*.webs.io',
1694                 '*.xixu.cc',
1695                 '*.zaici.am',
1696                 '*.zip.io',
1697                 '*.zuzhi.in',
1698
1699                 '*.profil.vg',          // 205.209.101.67(non-existent)
1700                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1701                 //'*.about.gs',         // No record
1702                 //'*.eprofile.us',      // non-existent
1703         ),
1704         '2Page.de' => array(
1705                 '.dreipage.de',
1706                 '.2page.de',
1707         ),
1708         '*.3-hosting.net',
1709         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1710         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1711         '*.8000web.com',        // 75.126.189.45
1712         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1713         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1714         'Ai.NET' => array(
1715                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1716                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1717         ),
1718         '*.aimoo.com',
1719         '*.alkablog.com',
1720         '*.alluwant.de',
1721         '.amkbb.com',
1722         'answerbag.com',        // 8.5.0.128
1723         'anyboard.net',
1724         'AOL.com' =>    // http://about.aol.com/international_services
1725                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1726                 '(?:aol|americaonline)\.' .
1727                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1728                 // Rough but works
1729         'Apple.com' => array('idisk.mac.com'),
1730         '*.askfaq.org',
1731         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1732         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1733         '*.asphost4free.com',
1734         'basenow.com',
1735         'BatCave.net' => array(
1736                 '.batcave.net',                 // 64.22.112.226
1737                 '.freehostpro.com',             // 64.22.112.226
1738         ),
1739         '*.bb-fr.com',
1740         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1741         '*.beeplog.com',
1742         'beepworld.it',
1743         'bestfreeforums.com',
1744         'bestvotexxx.com',
1745         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1746         'blinklist.com',
1747         'Blog.com' => array(
1748                 // by admin.domains at co.blog.com
1749                 '*.blog.com',
1750                 '*.blogandorra.com',
1751                 '*.blogangola.com',
1752                 '*.blogaruba.com',
1753                 '*.blogaustria.at',
1754         ),
1755         '*.blog.com.es',
1756         '*.blog.hr',
1757         '*.blog4ever.com',
1758         '*.blog-fx.com',
1759         '*.blogbeee.com',
1760         'blogas.lt',
1761         'blogbud.com',
1762         '*.blogburkinafaso.com',
1763         '*.blogcu.com',                 // by info at nokta.com
1764         'blogfreely.com',
1765         '*.blogdrive.com',
1766         '*.blogg.de',
1767         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1768         'bloggercrab.com',
1769         'bloggers.nl',
1770         '*.bloggingmylife.com',
1771         '*.bloggles.info',
1772         '*.blogharbor.com',
1773         '*.bloguj.eu',
1774         'bloguitos.com',
1775         'blogosfer.com',
1776         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1777         '*.blogslive.net',
1778         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1779         '*.blogstream.com',
1780         'blogyaz.com',
1781         'bloodee.com',
1782         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1783         'board-4you.de',
1784         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1785         '*.boardhost.com',
1786         'Bravenet.com' => array(
1787                 '*.bravenet.com',
1788                 '*.bravehost.com',
1789         ),
1790         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1791         'C2k.jp' => array(
1792                 // by Makoto Okuse (webmaster at 2style.net)
1793                 '.081.in',
1794                 '.2style.in',
1795                 '.bian.in',
1796                 '.curl.in',
1797                 '.ennui.in',
1798                 '.jinx.in',
1799                 '.loose.in',
1800                 '.mist.in',
1801                 '.muu.in',
1802                 '.naive.in',
1803                 '.panic.in',
1804                 '.slum.in',
1805
1806                 // by 2style, ns *.click2k.net, *.2style.net
1807                 '.2st.jp',
1808                 '.betty.jp',
1809                 '.cabin.jp',
1810                 '.cult.jp',
1811                 '.mippi.jp',
1812                 '.purety.jp',
1813                 '.rapa.jp',
1814                 '.side-b.jp',
1815                 '.web-box.jp',
1816                 '.yea.jp',
1817
1818                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1819                 '.2style.net',
1820                 '.click2k.net',
1821                 '.houka5.com',
1822
1823                 // by click2k, ns *.click2k.net, *.2style.net
1824                 '.psyco.jp',
1825                 '.sweety.jp',
1826
1827                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1828                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1829         ),
1830         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1831         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1832         '*.chueca.com',
1833         'city-forum.com',
1834         '*.clicdev.com',
1835         '*.craigslist.org',
1836         'concepts-mall.com',
1837         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1838         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1839         'counterhit.de',
1840         '*.createblog.com',
1841         '*.createforum.net',
1842         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1843         '*.createmybb.com',
1844         'CwCity.de' => array(
1845                 '.cwcity.de',
1846                 '.cwsurf.de',
1847         ),
1848         'dakrats.net',
1849         '*.dcswtech.com',
1850         'del.icio.us',
1851         '*.devil.it',
1852         '*.diaryland.com',
1853         'diigo.com',                    ///user/
1854         'digg.com',
1855         'digstock.com',
1856         'domains at galaxywave.net' => array(
1857                 'blogstation.net',
1858                 '.phpbb-host.com',
1859         ),
1860         'dotbb.be',
1861         '*.dox.hu',                             // dns at 1b.hu
1862         '*.eadf.com',
1863         '*.eblog.com.au',
1864         '*.ekiwi.de',
1865         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1866         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1867         '*.ebloggy.com',
1868         'enunblog.com',
1869         '*.epinoy.com',
1870         '*.ez-sites.ws',
1871         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1872         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1873         '*.fathippohosting.com',        // 208.101.3.192
1874         'FC2.com' => array(
1875                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1876                         // Many traps available:
1877                         //      bqdr.blog98.fc2.com,       iframe
1878                         //      csfir.blog87.fc2.com,      iframe
1879                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1880                         //      sippou2006.blog60.fc2.com, iframe
1881                         // NOTE: 'blog.fc2.com' is not included
1882                 '*.h.fc2.com',  // Adult
1883         ),
1884         '*.fizwig.com',
1885         'forum.ezedia.net',
1886         '*.extra.hu',                   // angelo at jasmin.hu
1887         '*.fanforum.cc',
1888         'fingerprintmedia.com',
1889         '*.filelan.com',
1890         '*.fora.pl',
1891         '*.forka.eu',
1892         '*.foren-city.de',
1893         'foren-gratis.de',
1894         '*.foros.tv',
1895         '*.forospace.com',
1896         'foroswebgratis.com',
1897         '*.forum-on.de',
1898         '*.forum24.se',
1899         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1900         '.forum66.com',
1901         'Forumotion.com' => array(
1902                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1903                 '*.forumactif.com',     // 91.121.41.79
1904                 '*.editboard.com',      // 75.126.156.15
1905                 '*.sosblog.com',        // 74.86.25.140
1906
1907                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1908                 '*.0forum.biz',
1909                 '*.1forum.biz',
1910                 '*.1fr1.net',
1911                 '*.1talk.net',
1912                 '*.2forum.biz',
1913                 '*.3forum.biz',
1914                 '*.4forum.biz',
1915                 '*.4rumer.com',
1916                 '*.4rumer.net',
1917                 '*.4umer.com',
1918                 '*.4umer.net',
1919                 '*.5forum.biz',
1920                 '*.5forum.info',
1921                 '*.5forum.net',
1922                 '*.6forum.biz',
1923                 '*.6forum.info',
1924                 '*.77forum.com',
1925                 '*.7forum.biz',
1926                 '*.7forum.info',
1927                 '*.7forum.net',
1928                 '*.8forum.biz',
1929                 '*.8forum.info',
1930                 '*.8forum.net',
1931                 '*.9forum.biz',
1932                 '*.9forum.info',
1933                 '*.activebb.net',
1934                 '*.aforumfree.com',
1935                 '*.all-forum.net',
1936                 '*.all-up.com',
1937                 '*.alldiscussion.net',
1938                 '*.allgoo.net',
1939                 '*.allgoo.us',
1940                 '*.american-forum.net',
1941                 '*.americantalk.net',
1942                 '*.annuaire-forums.com',
1943                 '*.asiafreeforum.com',
1944                 '*.asianfreeforum.com',
1945                 '*.azureforum.com',
1946                 '*.azurforum.com',
1947                 '*.bestcheapforum.com',
1948                 '*.bestdiscussion.net',
1949                 '*.bestgoo.com',
1950                 '*.bestofforum.com',
1951                 '*.bestofforum.net',
1952                 '*.bestoforum.net',
1953                 '*.bforum.biz',
1954                 '*.big-forum.net',
1955                 '*.board-poster.com',
1956                 '*.board-realtors.com',
1957                 '*.boardonly.com',
1958                 '*.boardrealtors.net',
1959                 '*.boardsmessage.com',
1960                 '*.briceboard.com',
1961                 '*.bubblelol.com',
1962                 '*.buy-forum.com',
1963                 '*.buy-talk.com',
1964                 '*.buyforum.net',
1965                 '*.buygoo.net',
1966                 '*.buygoo.us',
1967                 '*.camelscrew.com',
1968                 '*.cheap-forum.com',
1969                 '*.cheapforum.net',
1970                 '*.chocoforum.com',
1971                 '*.chocoforum.net',
1972                 '*.clic-topic.com',
1973                 '*.clicboard.com',
1974                 '*.clictopic.com',
1975                 '*.clictopic.net',
1976                 '*.clictopics.com',
1977                 '*.clubdiscussion.net',
1978                 '*.coolbb.net',
1979                 '*.crazy4us.com',
1980                 '*.crazyfruits.net',
1981                 '*.createmyboard.com',
1982                 '*.crewcamel.com',
1983                 '*.cyberfreeforum.com',
1984                 '*.discutforum.com',
1985                 '*.discutfree.com',
1986                 '*.do-forum.com',
1987                 '*.do-goo.com',
1988                 '*.do-goo.net',
1989                 '*.do-talk.com',
1990                 '*.dodiscussion.com',
1991                 '*.dogoo.us',
1992                 '*.easydiscussion.net',
1993                 '*.easyforumlive.com',
1994                 '*.englishboard.net',
1995                 '*.englishboards.com',
1996                 '*.ephpbb.com',
1997                 '*.eraseboard.net',
1998                 '*.eraseboards.net',
1999                 '*.euro-talk.net',
2000                 '*.eurodiscussion.net',
2001                 '*.eurogoo.com',
2002                 '*.exchangesboard.com',
2003                 '*.exprimetoi.net',
2004                 '*.fairtopic.com',
2005                 '*.fforum.biz',
2006                 '*.fforumfree.com',
2007                 '*.first-forum.com',
2008                 '*.firstgoo.com',
2009                 '*.fororama.com',
2010                 '*.forum-2007.com',
2011                 '*.forum-actif.net',
2012                 '*.forum-free.biz',
2013                 '*.forum-free.org',
2014                 '*.forum-motion.com',
2015                 '*.forum0.biz',
2016                 '*.forum0.info',
2017                 '*.forum0.net',
2018                 '*.forum2.biz',
2019                 '*.forum3.biz',
2020                 '*.forum3.info',
2021                 '*.forum5.info',
2022                 '*.forum6.biz',
2023                 '*.forum6.info',
2024                 '*.forum7.biz',
2025                 '*.forum777.com',
2026                 '*.forum8.biz',
2027                 '*.forum9.biz',
2028                 '*.foruma.biz',
2029                 '*.forumactif.biz',
2030                 '*.forumactif.info',
2031                 '*.forumactif.name',
2032                 '*.forumactif.ws',
2033                 '*.forumaction.net',
2034                 '*.forumakers.com',
2035                 '*.forumandco.com',
2036                 '*.forumb.biz',
2037                 '*.forumc.biz',
2038                 '*.forumd.biz',
2039                 '*.forumdediscussions.com',
2040                 '*.forumdediscussions.net',
2041                 '*.forume.biz',
2042                 '*.forumeast.com',
2043                 '*.forumf.biz',
2044                 '*.forumfreek.com',
2045                 '*.forumfreez.com',
2046                 '*.forumg.biz',
2047                 '*.forumh.biz',
2048                 '*.forumh.net',
2049                 '*.forumhope.com',
2050                 '*.forumi.biz',
2051                 '*.forumice.net',
2052                 '*.foruminute.com',
2053                 '*.forumj.biz',
2054                 '*.forumj.net',
2055                 '*.forumjonction.com',
2056                 '*.forumk.biz',
2057                 '*.foruml.biz',
2058                 '*.forumm.biz',
2059                 '*.forummotion.com',
2060                 '*.forummotions.com',
2061                 '*.forumn.biz',
2062                 '*.forumn.net',
2063                 '*.forumo.biz',
2064                 '*.forumonline.biz',
2065                 '*.forumotions.com',
2066                 '*.forump.biz',
2067                 '*.forump.info',
2068                 '*.forumperso.com',
2069                 '*.forumpersos.com',
2070                 '*.forumplatinum.com',
2071                 '*.forumpro.fr',
2072                 '*.forumq.biz',
2073                 '*.forumr.biz',
2074                 '*.forumr.net',
2075                 '*.forumrama.com',
2076                 '*.forums-actifs.com',
2077                 '*.forums-actifs.net',
2078                 '*.forums1.net',
2079                 '*.forumsactifs.com',
2080                 '*.forumsactifs.net',
2081                 '*.forumsfree.org',
2082                 '*.forumsline.com',
2083                 '*.forumsmakers.com',
2084                 '*.forumsmotion.com',
2085                 '*.forumsmotions.com',
2086                 '*.forumt.biz',
2087                 '*.forumv.biz',
2088                 '*.forumvalue.com',
2089                 '*.forumw.biz',
2090                 '*.forumy.biz',
2091                 '*.free-boards.net',
2092                 '*.freediscussion.net',
2093                 '*.freediscussions.net',
2094                 '*.freeforum.me.uk',
2095                 '*.freeforumboard.net',
2096                 '*.freeforumfree.com',
2097                 '*.freevideotalk.com',
2098                 '*.frenchboard.com',
2099                 '*.fruitsandco.com',
2100                 '*.fullboards.com',
2101                 '*.fullsubject.com',
2102                 '*.fullsubject.net',
2103                 '*.get-forum.net',
2104                 '*.getdiscussion.com',
2105                 '*.getgoo.net',
2106                 '*.getgoo.us',
2107                 '*.gettalk.net',
2108                 '*.go-board.com',
2109                 '*.go-board.net',
2110                 '*.go-forum.net',
2111                 '*.go-ogler.com',
2112                 '*.gofreeforum.com',
2113                 '*.gogoo.us',
2114                 '*.goo-board.com',
2115                 '*.goo-boys.com',
2116                 '*.goo-dart.com',
2117                 '*.goo-dole.com',
2118                 '*.goo-done.com',
2119                 '*.gooboards.com',
2120                 '*.goodbb.net',
2121                 '*.goodearths.com',
2122                 '*.goodforum.net',
2123                 '*.goodoles.com',
2124                 '*.goodoolz.com',
2125                 '*.gooforum.com',
2126                 '*.gooforums.com',
2127                 '*.googoolz.com',
2128                 '*.great-forum.com',
2129                 '*.heavenforum.com',
2130                 '*.hforum.biz',
2131                 '*.high-forums.com',
2132                 '*.highbb.com',
2133                 '*.highforum.net',
2134                 '*.hightoxic.com',
2135                 '*.homediscussion.net',
2136                 '*.homegoo.com',
2137                 '*.hooxs.com',
2138                 '*.hot-me.com',
2139                 '*.hot4um.com',
2140                 '*.hotdiscussion.net',
2141                 '*.hotgoo.net',
2142                 '*.in-goo.com',
2143                 '*.in-goo.net',
2144                 '*.infodiscussion.net',
2145                 '*.ingoo.us',
2146                 '*.iowoi.com',
2147                 '*.jforum.biz',
2148                 '*.just-forum.net',
2149                 '*.justboard.net',
2150                 '*.justdiscussion.com',
2151                 '*.justforum.net',
2152                 '*.justgoo.com',
2153                 '*.keuf.net',
2154                 '*.lforum.biz',
2155                 '*.lifediscussion.net',
2156                 '*.lifeme.net',
2157                 '*.lightbb.com',
2158                 '*.logu2.com',
2159                 '*.longdomaine.com',
2160                 '*.lovediscussion.net',
2161                 '*.lowcostforum.com',
2162                 '*.make-free-forum.com',
2163                 '*.makeforumfree.com',
2164                 '*.makefreeforum.com',
2165                 '*.mam9.com',
2166                 '*.manageboard.com',
2167                 '*.max2forum.com',
2168                 '*.meabout.com',
2169                 '*.megabb.com',
2170                 '*.moncontact.com',
2171                 '*.moninter.net',
2172                 '*.motion-forum.net',
2173                 '*.motionforum.net',
2174                 '*.motionsforum.com',
2175                 '*.mrforum.net',
2176                 '*.msnboard.net',
2177                 '*.msnyou.com',
2178                 '*.my-free-board.com',
2179                 '*.my-free-boards.com',
2180                 '*.my-free-forum.com',
2181                 '*.my-free-forums.com',
2182                 '*.my-goo.com',
2183                 '*.my-goo.net',
2184                 '*.mydiscussionboard.com',
2185                 '*.myfreeboard.net',
2186                 '*.mygoo.org',
2187                 '*.myrealboard.com',
2188                 '*.netboarder.com',
2189                 '*.netdiscussion.net',
2190                 '*.netgoo.org',
2191                 '*.new-forum.net',
2192                 '*.newdiscussion.net',
2193                 '*.newgoo.net',
2194                 '*.nforum.biz',
2195                 '*.nice-album.com',
2196                 '*.nice-board.biz',
2197                 '*.nice-board.com',
2198                 '*.nice-board.net',
2199                 '*.nice-boards.com',
2200                 '*.nice-boards.net',
2201                 '*.nice-forum.com',
2202                 '*.nice-forum.net',
2203                 '*.nice-forums.com',
2204                 '*.nice-forums.net',
2205                 '*.nice-gallery.net',
2206                 '*.nice-subject.com',
2207                 '*.nice-subjects.com',
2208                 '*.nice-theme.com',
2209                 '*.nice-topic.com',
2210                 '*.nice-topics.com',
2211                 '*.nicealbums.com',
2212                 '*.niceboard.biz',
2213                 '*.niceboard.net',
2214                 '*.niceboards.net',
2215                 '*.nicegalleries.net',
2216                 '*.nicesubject.com',
2217                 '*.nicesubjects.com',
2218                 '*.nicetopic.net',
2219                 '*.nicetopics.com',
2220                 '*.nightforum.net',
2221                 '*.nocost-forum.com',
2222                 '*.nofeeforum.com',
2223                 '*.one-forum.net',
2224                 '*.onediscussion.net',
2225                 '*.onegoo.us',
2226                 '*.onlinegoo.com',
2227                 '*.onlyquery.com',
2228                 '*.open-board.com',
2229                 '*.openu2.com',
2230                 '*.othersboards.com',
2231                 '*.own0.com',
2232                 '*.pforum.biz',
2233                 '*.phpbb9.com',
2234                 '*.phpbbtest.com',
2235                 '*.positifforum.com',
2236                 '*.postalboard.com',
2237                 '*.prodiscussion.net',
2238                 '*.progoo.us',
2239                 '*.pureforum.net',
2240                 '*.qforum.biz',
2241                 '*.quickbb.net',
2242                 '*.realbb.net',
2243                 '*.realfreeforum.com',
2244                 '*.realmsn.com',
2245                 '*.rforum.biz',
2246                 '*.road2us.com',
2247                 '*.roomforum.com',
2248                 '*.saveboard.com',
2249                 '*.screwcamel.com',
2250                 '*.screwcamels.com',
2251                 '*.sendboard.com',
2252                 '*.sephorum.com',
2253                 '*.sforum.biz',
2254                 '*.shootboard.com',
2255                 '*.shop-forum.net',
2256                 '*.shopsubject.com',
2257                 '*.simpleboard.net',
2258                 '*.site-forums.com',
2259                 '*.smileyforum.net',
2260                 '*.sos-forum.net',
2261                 '*.sos4um.com',
2262                 '*.sos4um.net',
2263                 '*.sosforum.net',
2264                 '*.speedyforum.com',
2265                 '*.stationforum.com',
2266                 '*.subject-expert.com',
2267                 '*.subject-line.com',
2268                 '*.subject-tracer.com',
2269                 '*.subjectchange.com',
2270                 '*.subjectdeals.com',
2271                 '*.subjectdebate.com',
2272                 '*.subjectdone.com',
2273                 '*.subjectonline.com',
2274                 '*.subjectschange.com',
2275                 '*.subjectsecrets.com',
2276                 '*.super-forum.net',
2277                 '*.talk-forums.com',
2278                 '*.team-forum.net',
2279                 '*.team-talk.net',
2280                 '*.teamconvention.com',
2281                 '*.teamgoo.net',
2282                 '*.teensboards.com',
2283                 '*.the-talk.net',
2284                 '*.the-up.com',
2285                 '*.thegoo.us',
2286                 '*.thinksubject.com',
2287                 '*.top-board.com',
2288                 '*.top-forum.net',
2289                 '*.top-me.com',
2290                 '*.top-talk.net',
2291                 '*.topdiscussion.com',
2292                 '*.topgoo.net',
2293                 '*.topic-board.com',
2294                 '*.topic-board.net',
2295                 '*.topic-debate.com',
2296                 '*.topic-ideas.com',
2297                 '*.topic-mail.com',
2298                 '*.topic-zone.com',
2299                 '*.topicboard.net',
2300                 '*.topicboards.com',
2301                 '*.topicmanager.com',
2302                 '*.topicsolutions.net',
2303                 '*.toxicfarm.com',
2304                 '*.unlimitboard.com',
2305                 '*.unlimitedboard.com',
2306                 '*.unlimitedforum.com',
2307                 '*.up-with.com',
2308                 '*.up-your.com',
2309                 '*.urealboard.com',
2310                 '*.user-board.net',
2311                 '*.userboard.net',
2312                 '*.users-board.com',
2313                 '*.users-board.net',
2314                 '*.usersboard.com',
2315                 '*.usersboard.net',
2316                 '*.webgoo.us',
2317                 '*.withboards.com',
2318                 '*.withme.us',
2319                 '*.worldgoo.com',
2320                 '*.yahooboard.net',
2321                 '*.yforum.biz',
2322                 '*.yoo7.com',
2323                 '*.youneed.us',
2324                 '*.your-board.com',
2325                 '*.your-talk.com',
2326                 '*.yourme.net',
2327                 '*.zforum.biz',
2328
2329                 // 75.126.156.15 redirect to forumactif.com
2330                 '*.actifforum.com',
2331                 '*.fr-bb.com',
2332                 '*.superforum.fr',
2333
2334                 // 75.126.156.15 redirect to editboard.com
2335                 '*.bbfr.net',
2336                 '*.bbgraf.com',
2337                 '*.cinebb.com',
2338                 '*.darkbb.com',
2339                 '*.dynamicbb.com',
2340                 '*.zikforum.com',
2341
2342                 // 74.86.25.140 Used: sosblog.com
2343                 '*.0-up.com',
2344                 '*.0-yo.com',
2345                 '*.04live.com',
2346                 '*.06fr.com',
2347                 '*.0fra.com',
2348                 '*.0jet.com',
2349                 '*.0yoo.com',
2350                 '*.1toxic.com',
2351                 '*.2k00.com',
2352                 '*.2xik.com',
2353                 '*.blog-2007.com',
2354                 '*.blog-2008.com',
2355                 '*.blog-2009.com',
2356                 '*.blog-2010.com',
2357                 '*.blog-actif.net',
2358                 '*.blog-marley.com',
2359                 '*.blog-talker.com',
2360                 '*.blog2009.com',
2361                 '*.blogactif.net',
2362                 '*.blogalbums.com',
2363                 '*.blogalerie.com',
2364                 '*.blogaleries.com',
2365                 '*.blogallerys.com',
2366                 '*.blogandme.com',
2367                 '*.blogandyou.com',
2368                 '*.blogbubble.net',
2369                 '*.blogdollz.com',
2370                 '*.bloggeuse.net',
2371                 '*.bloggeuses.com',
2372                 '*.bloginstinct.com',
2373                 '*.bloginternet.net',
2374                 '*.blogmakers.net',
2375                 '*.blogmarley.net',
2376                 '*.blogminister.net',
2377                 '*.blogmorane.com',
2378                 '*.blognboard.com',
2379                 '*.blogotek.net',
2380                 '*.blogpas.com',
2381                 '*.blogpublisher.net',
2382                 '*.blogsalbum.com',
2383                 '*.blogsalbums.com',
2384                 '*.blogsfan.net',
2385                 '*.blogsgallerys.com',
2386                 '*.blogsitephp.com',
2387                 '*.blogsland.net',
2388                 '*.blogsmaker.com',
2389                 '*.blogsmakers.com',
2390                 '*.blogspeed.net',
2391                 '*.blogsup.net',
2392                 '*.blogsutil.com',
2393                 '*.blogsutils.com',
2394                 '*.blogsystem.net',
2395                 '*.blogtalker.net',
2396                 '*.blogtheque.net',
2397                 '*.blogutil.com',
2398                 '*.blogvsboard.com',
2399                 '*.briceblog.com',
2400                 '*.cibleblog.com',
2401                 '*.cristalblog.com',
2402                 '*.crystalblog.net',
2403                 '*.dad-blog.com',
2404                 '*.daddy-blog.com',
2405                 '*.defaultblog.com',
2406                 '*.discussionsblog.com',
2407                 '*.dollzblog.com',
2408                 '*.dtoxic.com',
2409                 '*.easiestblog.net',
2410                 '*.espaceblog.net',
2411                 '*.exitblog.net',
2412                 '*.expensiveblog.com',
2413                 '*.extra-blog.net',
2414                 '*.extrablog.net',
2415                 '*.facileblog.com',
2416                 '*.forblogger.com',
2417                 '*.forumsblogs.com',
2418                 '*.freephpblog.com',
2419                 '*.fresh-blog.net',
2420                 '*.galleryblog.net',
2421                 '*.galleryblogs.net',
2422                 '*.gallerysblog.com',
2423                 '*.gallerysblogs.com',
2424                 '*.hyper-blog.net',
2425                 '*.hyper-blogger.com',
2426                 '*.hyper-blogger.net',
2427                 '*.hyperblogger.net',
2428                 '*.instinctblog.com',
2429                 '*.jeunblog.com',
2430                 '*.jeuneblog.com',
2431                 '*.judblog.com',
2432                 '*.makeblog.net',
2433                 '*.man-blog.net',
2434                 '*.man-blogs.com',
2435                 '*.man-blogs.net',
2436                 '*.manblog.net',
2437                 '*.manblog.org',
2438                 '*.manblog.us',
2439                 '*.manblogs.net',
2440                 '*.mansblog.net',
2441                 '*.mansblogs.com',
2442                 '*.mansblogs.net',
2443                 '*.meetingsblogs.com',
2444                 '*.men-blog.net',
2445                 '*.men-blogs.com',
2446                 '*.men-blogs.net',
2447                 '*.menblog.us',
2448                 '*.menblogs.net',
2449                 '*.mensblogs.net',
2450                 '*.messaginblog.com',
2451                 '*.monblogger.com',
2452                 '*.mum-blog.com',
2453                 '*.mummy-blog.com',
2454                 '*.mummyblog.com',
2455                 '*.myareablog.com',
2456                 '*.myblog-online.net',
2457                 '*.mybloginternet.com',
2458                 '*.myblogland.com',
2459                 '*.myblogmag.com',
2460                 '*.myfreshblog.com',
2461                 '*.myinternetblog.net',
2462                 '*.myoverblog.com',
2463                 '*.myoverblog.net',
2464                 '*.mysharedblog.com',
2465                 '*.nice-albums.com',
2466                 '*.nice-galleries.com',
2467                 '*.nicealbum.net',
2468                 '*.nicegallery.net',
2469                 '*.notreblogger.com',
2470                 '*.outilblog.com',
2471                 '*.over-blogger.com',
2472                 '*.overblogger.com',
2473                 '*.pasblog.com',
2474                 '*.pasblog.net',
2475                 '*.perfect-blog.net',
2476                 '*.perfectblog.net',
2477                 '*.phpblogsite.com',
2478                 '*.phpmyblog.net',
2479                 '*.plateformeblog.com',
2480                 '*.playblogger.com',
2481                 '*.publishmyblog.com',
2482                 '*.pulseblog.net',
2483                 '*.pulseblogs.com',
2484                 '*.puretoxic.com',
2485                 '*.reservedblog.com',
2486                 '*.shareblog.net',
2487                 '*.shareblogs.net',
2488                 '*.shared-blogs.com',
2489                 '*.sharedblog.net',
2490                 '*.sharedblogs.net',
2491                 '*.solideblog.com',
2492                 '*.systemeblog.com',
2493                 '*.talkmeblog.com',
2494                 '*.toolsblog.net',
2495                 '*.toxicplace.com',
2496                 '*.ufreeblog.com',
2497                 '*.uliveblog.com',
2498                 '*.ultratoxic.com',
2499                 '*.utilblog.com',
2500                 '*.utilblogs.com',
2501                 '*.utilsblog.com',
2502                 '*.utilsblogs.com',
2503                 '*.various-blog.com',
2504                 '*.various-blog.net',
2505                 '*.various-blogs.com',
2506                 '*.various-blogs.net',
2507                 '*.variusblog.com',
2508                 '*.versusblog.com',
2509                 '*.vieuxblog.com',
2510                 '*.web-day.net',
2511                 '*.whatsblog.net',
2512                 '*.woman-blog.net',
2513                 '*.woman-blogs.com',
2514                 '*.woman-blogs.net',
2515                 '*.womanblog.com',
2516                 '*.womanblog.org',
2517                 '*.womanblog.us',
2518                 '*.womanblogs.net',
2519                 '*.womansblogs.com',
2520                 '*.womansblogs.net',
2521                 '*.women-blog.net',
2522                 '*.women-blogs.com',
2523                 '*.women-blogs.net',
2524                 '*.womenblog.us',
2525                 '*.womenblogs.net',
2526                 '*.womensblog.net',
2527                 '*.womensblogs.net',
2528                 '*.youblog.net',
2529                 '*.yourliveblog.com',
2530                 '*.yourweblog.net',
2531         ),
2532         '*.forumcommunity.net',
2533         '*.forumer.com',
2534         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2535         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2536         'forumhosting.org',
2537         '*.forums.com',
2538         'forumbolt.com',
2539         'phpbb.forumgratis.com',
2540         'forumlari.net',
2541         '*.forumlivre.com',
2542         'forumnow.com.br',
2543         '*.forumppl.com',
2544         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2545         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2546                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2547                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2548                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2549         '*.fory.pl',
2550         'fotolog.com',
2551         '*.fr33webhost.com',
2552         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2553         '*.free-25.de',
2554         '*.free-bb.com',
2555         'Free-Blog-Hosting.com' => array(
2556                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2557                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2558                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2559                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2560                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2561         ),
2562         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2563         'free-guestbook.net',
2564         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2565         'freebb.nl',
2566         '*.freeclans.de',
2567         '*.freehostplace.com',  // by contact at keepclear.co.uk
2568         '*.freelinuxhost.com',  // by 100webspace.com
2569         '*.nofeehost.com',
2570         '*.freehyperspace.com',
2571         'freeforum.at',                 // by Sandro Wilhelmy
2572         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2573         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2574         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2575         '*.freewebhostingpro.com',
2576         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2577         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2578                 '*.6te.net',
2579                 '*.ueuo.com',
2580                 '*.orgfree.com',
2581         ),
2582         '*.freewebpage.org',
2583         'Freewebs.com' => array(        // by inquiries at freewebs.com
2584                 'freewebs.com',
2585                 'freewebsfarms.com',
2586         ),
2587         '*.freewebspace.net.au',
2588         'freewebtown.com',
2589         '*.freemyforum.com',    // by messahost at gmail.com
2590         'freepowerboards.com',
2591         '*.freepowerboards.com',
2592         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2593         'Funpic.de' => array(   // by alexander at liemen.net
2594                 '*.funpic.de',
2595                 '*.funpic.org',
2596         ),
2597         'gb-hoster.de',
2598         '*.genblogger.com',
2599         'GetBetterHosting.com' => array(
2600                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2601                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2602         ),
2603         '*.gexxe.com',
2604         '*.goodboard.de',
2605         'gossiping.net',
2606         '*.greatnuke.com',
2607         '*.guestbook.de',
2608         'gwebspace.de',
2609         'Google.com' => array(
2610                 '*.blogspot.com',
2611                 'docs.google.com',
2612                 '*.googlegroups.com',           ///web/
2613                 '*.googlepages.com',
2614                 'groups-beta.google.com',
2615         ),
2616         'guestbook.at',
2617         'club.giovani.it',
2618         '*.gratis-server.de',
2619         'healthcaregroup.com',
2620         '*.heliohost.org',
2621         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2622                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2623                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2624                 '*.front.ru',           // (domain at hc.ru)
2625                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2626                 '*.hotbox.ru',          // (domain at hc.ru)
2627                 '*.hotmail.ru',         // (hosting at hc.ru)
2628                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2629                 '*.land.ru',            // (domain at hc.ru)
2630                 '*.mail15.com',         // (hosting at hc.ru)
2631                 '*.mail333.com',        // (hosting at hc.ru)
2632                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2633                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2634                 '*.pisem.net',          // (hosting at hc.ru)
2635                 '*.pochta.ru',          // (domain at hc.ru)
2636                 '*.pochtamt.ru',        // (domain at hc.ru)
2637                 '*.pop3.ru',            // (domain at hc.ru)
2638                 '*.rbcmail.ru',         // (domain at hc.ru)
2639                 '*.smtp.ru',            // (domain at hc.ru)
2640         ),
2641         '*.hiblogger.com',              // by chiaokin at gmail.com
2642         '*.hit.bg',                             // by forumup.com ??
2643         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2644         '*.host-page.com',
2645         '*.hostingclub.de',
2646         'forums.hspn.com',
2647         '*.httpsuites.com',
2648         '*.hut2.ru',
2649         'ibfree.org',                   // 208.101.45.88
2650         'IC.cz' => array(
2651                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2652                 '*.hu.cz',                      // internetcentrum at gmail.com
2653                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2654                 '*.ic.cz',                      // internetcentrum at gmail.com
2655                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2656                 '*.own.cz',                     // internetcentrum at gmail.com
2657                 '*.phorum.cz',          // internetcentrum at gmail.com
2658                 '*.tym.cz',                     // internetcentrum at gmail.com
2659                 '*.tym.sk',                     // jobot at ignum.cz
2660                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2661                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2662                 '*.yw.sk',                      // jobot at ignum.cz
2663         ),
2664         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2665                 '*.0moola.com',
2666                 '*.3000mb.com',
2667                 '.501megs.com',
2668                 '*.teracities.com',
2669                 '*.xoompages.com',
2670         ),
2671         '*.icspace.net',
2672         'iEUROP.net' => array(
2673                 '*.ibelgique.com',
2674                 '*.iespana.es',
2675                 '*.ifrance.com',
2676                 '*.iitalia.com',
2677                 '*.iquebec.com',
2678                 '*.isuisse.com',
2679         ),
2680         '*.ihateclowns.net',
2681         '*.ii55.com',
2682         '*.ipbfree.com',
2683         '*.iphorum.com',
2684         '*.blog.ijijiji.com',
2685         '*.info.com',
2686         '*.informe.com',
2687         'it168.com',
2688         '.iwannaforum.com',
2689         '*.jconserv.net',
2690         '*.jeeran.com',
2691         '*.jeun.fr',
2692         '*.joolo.com',
2693         '*.journalscape.com',
2694         '*.justfree.com',
2695         '*.blog.kataweb.it',
2696         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2697         '*.kokoom.com',
2698         'koolpages.com',
2699         '*.kostenlose-foren.org',
2700         '*.ksiegagosci.info',
2701         'Lide.cz' => array(
2702                 '*.lide.cz',
2703                 '*.sblog.cz',
2704         ),
2705         '*.lioru.com',
2706         'limmon.net',
2707         'linkinn.com',
2708         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2709         'listible.com',                 ///list/
2710         'Livedoor.com' => array(
2711                 'blog.livedoor.jp',
2712                 '*.blog.livedoor.com',  // redirection
2713         ),
2714         '*.livejournal.com',
2715         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2716         '*.logme.nl',
2717         'lol.to',
2718         'ltss.luton.ac.uk',
2719         'Lycos.com' => array(
2720                 '.angelfire.com',       // angelfire.lycos.com
2721
2722                 '*.jubii.dk',   // search., medlem.
2723                 '*.jubiiblog.co.uk',
2724                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2725                 '*.jubiiblog.de',
2726                 '*.jubiiblog.dk',
2727                 '*.jubiiblog.fr',
2728                 '*.jubiiblog.it',
2729                 '*.jubiiblog.nl',
2730
2731                 '*.lycos.at',
2732                 '*.lycos.ch',
2733                 '*.lycos.co.uk',
2734                 'angelfire.lycos.com',
2735                 '*.lycos.de',
2736                 '*.lycos.es',
2737                 '*.lycos.fr',
2738                 '*.lycos.it',           // by Lycos Europe GmbH
2739                 '*.lycos.nl',
2740
2741                 '*.spray.se',
2742                 '*.sprayblog.se',
2743
2744                 '*.tripod.com',
2745         ),
2746         '*.mastertopforum.com',
2747         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2748         'meneame.net',
2749         '*.memebot.com',
2750         '*.messageboard.nl',
2751         'mokono GmbH' => array(
2752                 '*.blog.com.es',
2753                 '*.blog.de',
2754                 '*.blog.fr',
2755                 '*.blog.co.uk',
2756                 '*.blog.ca',
2757                 '*.blogs.se',
2758                 '*.blogs.fi',
2759                 '*.blogs.no',
2760                 '*.blogs.dk',
2761                 '*.blogs.ro',
2762                 '*.weblogs.pl',
2763                 '*.weblogs.cz',
2764                 '*.weblogs.hu',
2765         ),
2766         'mojklc.com',
2767         '*.mundoforo.com',
2768         '*.money-host.com',
2769         'MonForum.com' => array(
2770                 '*.monforum.com',
2771                 '*.monforum.fr',
2772         ),
2773         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2774         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2775         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2776         'myblog.is',
2777         'myblogma.com',
2778         '*.myblogvoice.com',
2779         'myblogwiki.com',
2780         '*.myforum.ro',
2781         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2782         '*.myfreewebs.net',
2783         '*.mysite.com',
2784         '*.myxhost.com',
2785         '*.netfast.org',
2786         'NetGears.com' => array(
2787                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2788                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2789                 '*.freewebspace.com',   // 64.49.236.72
2790         ),
2791         'Netscape.com' => array('*.netscape.com'),
2792         'users.newblog.com',
2793         'neweconomics.info',
2794         '*.newsit.es',                          // 75.126.252.108
2795         '*.nm.ru',
2796         '*.nmj.pl',
2797         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2798         'Northsky.com' => array(
2799                 // by hostmaster at northsky.com
2800                 // northsky.com redirects to communityarchitect.com
2801
2802                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2803                 '*.00author.com',
2804                 '*.00band.com',
2805                 '*.00books.com',
2806                 '*.00cash.com',
2807                 '*.00cd.com',
2808                 '*.00dvd.com',
2809                 '*.00family.com',
2810                 '*.00game.com',
2811                 '*.00home.com',
2812                 '*.00it.com',
2813                 '*.00me.com',
2814                 '*.00movies.com',
2815                 '*.00page.com',
2816                 '*.00politics.com',
2817                 '*.00sf.com',
2818                 '*.00show.com',
2819                 '*.00song.com',
2820                 '*.00trek.com',
2821                 '*.00video.com',
2822                 '*.0me.com',
2823                 '*.0pi.com',
2824                 '*.happy-couple.com',
2825                 '*.warp0.com',
2826
2827                 '*.50megs.com',         // 64.136.25.170
2828
2829                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2830                 '*.00server.com',
2831                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2832                 '*.fanspace.com',
2833
2834                 // 64.136.25.168 by Mark Bishop
2835                 '*.00go.com',
2836                 '*.00space.com',
2837                 '*.00sports.com',
2838         ),
2839         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2840         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2841         'onlyfree.de',
2842         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2843         '*.ohost.de',
2844         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2845                 '.friko.pl',
2846                 '.jak.pl',
2847                 '.nazwa.pl',
2848                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2849                 '.w8w.pl',
2850                 '.za.pl',
2851                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2852         ),
2853         'oyax.com',                             ///user_links.php
2854         '*.p2a.pl',
2855         '*.parlaris.com',
2856         '*.pathfinder.gr',
2857         '*.persianblog.com',
2858         '*.phorum.pl',
2859         'Phpbb24.com' => array( // by Daniel Eriksson
2860                 '*.createforum.us',     // registry at webbland.se
2861                 '*.forumportal.us',     // registry at webbland.se
2862                 '*.freeportal.us',      // registry at network24.se
2863                 '*.phpbb2.us',          // daniel at danielos.com
2864                 '*.phpbb24.com',        // daniel at danielos.com
2865                 '*.myforumportal.com',  // daniel at webbland.se
2866         ),
2867         'phpbb4you.com',
2868         'phpbbcommunity.com',
2869         '*.phpbbx.de',
2870         '*.pochta.ru',
2871         '*.portbb.com',
2872         '*.portcms.com',
2873         'powerwebmaster.de',
2874         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2875         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2876         '*.probook.de',
2877         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2878         '*.pun.pl',
2879         'putfile.com',
2880         '*.quickfreehost.com',
2881         'quizilla.com',
2882         '*.quotaless.com',
2883         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2884         'razyboard.com',
2885         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2886         'realhp.de',
2887         'reddit.com',           ///user/
2888         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2889                 '*.juicypornhost.com',
2890                 '*.pornzonehost.com',
2891                 '*.xhostar.com',
2892         ),
2893         'RIN.ru' => array(
2894                 '*.sbn.bz',
2895                 '*.wol.bz',
2896         ),
2897         '*.sayt.ws',
2898         'Seblg.com' => array(
2899                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2900                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2901         ),
2902         '*.seo-blog.org',
2903         '*.shoutpost.com',
2904         '*.siamforum.com',
2905         '*.siteburg.com',
2906         '*.sitehome.ru',
2907         '*.sitesfree.com',              // support at livesearching.com
2908         '*.sitesled.com',
2909         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2910         'SmarTrans.com' => array(
2911                 '.3w.to',
2912                 '.aim.to',
2913                 '.djmp.jp',
2914                 '.nihongourl.nu',
2915                 '.urljp.com',
2916                 '.www1.to',
2917                 '.www2.to',
2918                 '.www3.to',
2919         ),
2920         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2921         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2922         'members.spboards.com',
2923         'forums.speedguide.net',
2924         'Sphosting.com' => array(       // by admin at sphosting.com
2925                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2926                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2927                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2928                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2929                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2930         ),
2931         '*.spicyblogger.com',
2932         '*.spotbb.com',
2933         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2934         '*.squarespace.com',
2935         'stickypond.com',
2936         'stormloader.com',
2937         'strikebang.com',
2938         '*.sultryserver.com',
2939         '*.t35.com',
2940         '*.talks.at',
2941         'tabletpcbuzz.com',
2942         '*.talkthis.com',
2943         'tbns.net',
2944         'telasipforums.com',
2945         'theforumhub.com',
2946         'thestudentunderground.org',
2947         'think.ubc.ca',
2948         '*.thumblogger.com',
2949         'Topix.com' => array(
2950                 'topix.com',
2951                 'topix.net',
2952         ),
2953         'forum.tourism-talk.com.au',
2954         'tycho at e-lab.nl' => array(
2955                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2956                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2957         ),
2958         '*.tumblr.com',
2959         'UcoZ Web-Services' => array(
2960                 '*.3dn.ru',
2961                 '*.clan.su',
2962                 '*.moy.su',
2963                 '*.my1.ru',
2964                 '*.p0.ru',
2965                 '*.pp.net.ua',
2966                 '*.ucoz.co.uk',
2967                 '*.ucoz.com',
2968                 '*.ucoz.net',
2969                 '*.ucoz.org',
2970                 '*.ucoz.ru',
2971                 '*.ws.co.ua',
2972         ),
2973         '*.unforo.net',
2974         'veoh.com',
2975         '*.vdforum.ru',
2976         '*.vtost.com',
2977         '*.vidiac.com',
2978         'Voila.fr' => array('.site.voila.fr'),
2979         'volny.cz',
2980         'voy.com',
2981         '*.welover.org',
2982         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2983                 '*.fasthost.tv',
2984                 '*.hothost.tv',
2985                 '*.isgreat.tv',
2986                 '*.issexy.tv',
2987                 '*.isterrible.tv',
2988                 '*.somegood.tv',
2989                 '*.adultnations.com',
2990                 '*.alladultfemale.com',
2991                 '*.alladultmale.com',
2992                 '*.allbisexual.com',
2993                 '*.allbreast.com',
2994                 '*.allfeminism.com',
2995                 '*.allmanpages.com',
2996                 '*.allmendirect.com',
2997                 '*.allphotoalbum.com',
2998                 '*.allsexpages.com',
2999                 '*.allwomanweb.com',
3000                 '*.attorney-site.com',
3001                 '*.bedclip.com',
3002                 '*.bestfamilysite.com',
3003                 '*.bestmusicpages.com',
3004                 '*.bigmoron.com',
3005                 '*.bourgeoisonline.com',
3006                 '*.candyfrom.us',
3007                 '*.cartoonhit.com',
3008                 '*.cat-on-line.com',
3009                 '*.chokesondick.com',
3010                 '*.closeupsof.us',
3011                 '*.cpa-site.com',
3012                 '*.dampgirl.com',
3013                 '*.dampgirls.com',
3014                 '*.deepestfetish.com',
3015                 '*.docspages.com',
3016                 '*.dog-on-line.com',
3017                 '*.dogcountries.com',
3018                 '*.dognations.com',
3019                 '*.doingitwith.us',
3020                 '*.drenchedface.com',
3021                 '*.drenchedlips.com',
3022                 '*.drspages.com',
3023                 '*.edogden.com',
3024                 '*.eroticountry.com',
3025                 '*.fasthost.tv',
3026                 '*.fineststars.com',
3027                 '*.foronlinegames.com',
3028                 '*.forplanetearth.com',
3029                 '*.freeadultparty.com',
3030                 '*.freespeechsite.com',
3031                 '*.gayadultxxx.com',
3032                 '*.gaytaboo.com',
3033                 '*.greatcookery.com',
3034                 '*.greatrecipepages.com',
3035                 '*.greatstreamingvideo.com',
3036                 '*.hatesit.com',
3037                 '*.hothost.tv',
3038                 '*.iscrappy.com',
3039                 '*.isgreat.tv',
3040                 '*.issexy.tv',
3041                 '*.isterrible.tv',
3042                 '*.itinto.us',
3043                 '*.japannudes.net',
3044                 '*.jesussave.us',
3045                 '*.jesussaveus.com',
3046                 '*.labialand.com',
3047                 '*.lettersfrom.us',
3048                 '*.lookingat.us',
3049                 '*.lunaticsworld.com',
3050                 '*.microphallus.com',
3051                 '*.mycatshow.com',
3052                 '*.mydogshow.com',
3053                 '*.myhardman.com',
3054                 '*.mylawsite.net',
3055                 '*.mylovething.com',
3056                 '*.onasoapbox.com',
3057                 '*.onlinepulpit.com',
3058                 '*.petitionthegovernment.com',
3059                 '*.photosfor.us',
3060                 '*.picturetrades.com',
3061                 '*.pleasekiss.us',
3062                 '*.politicalemergency.com',
3063                 '*.power-emergency.com',
3064                 '*.prayingfor.us',
3065                 '*.realbadidea.com',
3066                 '*.realisticpolitics.com',
3067                 '*.reallybites.com',
3068                 '*.reallypumping.us',
3069                 '*.reallyrules.com',
3070                 '*.reallysuckass.com',
3071                 '*.reallysucksass.com',
3072                 '*.realsweetheart.com',
3073                 '*.rottenass.com',
3074                 '*.schoolreference.com',
3075                 '*.sexheroes.com',
3076                 '*.sharewith.us',
3077                 '*.smutstars.com',
3078                 '*.soakinglips.com',
3079                 '*.somegood.tv',
3080                 '*.songsfrom.us',
3081                 '*.stinkingfart.com',
3082                 '*.stinkyhands.com',
3083                 '*.storiesfrom.us',
3084                 '*.taboocountry.com',
3085                 '*.television-series.com',
3086                 '*.thisbelongsto.us',
3087                 '*.totallyboning.us',
3088                 '*.vaginasisters.com',
3089                 '*.verydirtylaundry.com',
3090                 '*.videosfor.us',
3091                 '*.videosfrom.us',
3092                 '*.videosof.us',
3093                 '*.virtualdogshit.com',
3094                 '*.web1000.com',
3095                 '*.webpicturebook.com',
3096                 '*.wronger.com',
3097                 '*.xxxnations.com',
3098                 '*.yourwaywith.us',
3099         ),
3100         'webblog.ru',
3101         'weblogmaniacs.com',
3102         '.webng.com',                   // www.*, www3.*
3103         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3104         'websitetoolbox.com',
3105         '*.webtropia.com',
3106         'Welnet.de' => array(
3107                 'welnet.de',
3108                 'welnet4u.de',
3109         ),
3110         'wh-gb.de',
3111         '*.wikidot.com',
3112         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3113         '*.wmjblogs.ru',
3114         '*.wordpress.com',
3115         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3116         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3117         '*.xforum.se',
3118         'xfreeforum.com',
3119         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3120         '*.xoomwebs.com',
3121         '.xterm.org',
3122         '.freeblogs.xp.tl',
3123         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3124         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3125         'Yahoo.com' => array(
3126                 'flickr.com',
3127                 'geocities.com',
3128         ),
3129         'YANDEX, LLC.' => array(        // noc at yandex.net
3130                 '*.narod.ru',
3131                 'ya.ru',
3132                 'yandex.ru',
3133         ),
3134         '*.yeahost.com',
3135         'yourfreebb.de',
3136         'Your-Websites.com' => array(
3137                 '*.your-websites.net',
3138                 '*.web-space.ws',
3139         ),
3140
3141
3142         '*.heliohost.org',      // by ashoat at gmail.com
3143         'X10Hosting.com' => array(
3144                 // by support at clockworkcomputers.com
3145                 '*.x10hosting.com',
3146                 '*.elementfx.com',
3147                 '*.exofire.net',
3148                 '*.pcriot.com',
3149         ),
3150         '.zendurl.com',         // by ajcar1992 at gmail.com
3151 );
3152
3153 // --------------------------------------------------
3154
3155 $blocklist['B-2'] = array(
3156
3157         // B-2: Jacked contents, something implanted
3158         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3159         '*.3dm3.com',
3160         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3161         '*.1fr1.com',
3162         'a4aid.org',
3163         'aac.com',
3164         '*.aamad.org',
3165         'ad-pecjak.si',
3166         'agnt.org',
3167         'alwanforthearts.org',
3168         '*.anchor.net.au',
3169         'anewme.org',
3170         'arisedesign.net',              //Portfolio/d981/
3171         'internetyfamilia.asturiastelecentros.com',
3172         'Ball State University' => array('web.bsu.edu'),
3173         'btofaq.net',                   ///v3/forum
3174         'blepharospasm.org',
3175         'nyweb.bowlnfun.dk',
3176         '*.buzznet.com',
3177         'Carroll College' => array(
3178                 'carroll.edu',          ///boards/
3179         ),
3180         '*.canberra.net.au',
3181         'castus.com',
3182         'Case Western Reserve University' => array('case.edu'),
3183         'ceval.de',
3184         'chaco.gov.ar',
3185         'codespeak.net',
3186         'Colorado School of Mines' => array('ticc.mines.edu'),
3187         '*.colourware.co.uk',
3188         'cpuisp.com',
3189         'International Christian University' => array('icu.edu.ua'),
3190         '*.iphpbb.com',
3191         'board-z.de',
3192         '*.board-z.de',
3193         'California State University Stanislaus' => array('writing.csustan.edu'),
3194         'cannon.co.za',
3195         'columbosgarden.com',
3196         '*.communityhost.de',
3197         'connectionone.org',
3198         'deathwinds.com',
3199         'deforum.org',
3200         'delayedreaction.org',
3201         'deproduction.org',
3202         'dc503.org',
3203         'dialadeck.com',                ///images/
3204         'dre-centro.pt',
3205         'Duke University' => array('devel.linux.duke.edu'),
3206         '*.esen.edu.sv',
3207         'forums.drumcore.com',
3208         'dundeeunited.org',
3209         'energyglass.com.ua',
3210         'exclusivehotels.com',
3211         'info.ems-rfid.com',
3212         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3213         'fbwloc.com',
3214         '.fhmcsa.org.au',
3215         'findyourwave.co.uk',
3216         'frogcafe.net',
3217         'plone4.fnal.gov',
3218         'freeforen.com',
3219         'funkdoc.com',
3220         'funnyclipcentral.com',
3221         'gearseds.com',
3222         'generationrice.com',
3223         'ghettojava.com',
3224         'gnacademy.org',
3225         '*.goodboard.de',
3226         'GreenDayVideo.net' => array(
3227                 'greendayvideo.net',
3228                 'espanol.greendayvideo.net',
3229         ),
3230         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3231         'Harvard Law School' => array('blogs.law.harvard.edu'),
3232         'helpiammoving.com',
3233         'homepage-dienste.com',
3234         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3235         'Howard University' => array('networks.howard.edu'),
3236         'hullandhull.com',
3237         'Huntington University' => array('huntington.edu'),
3238         'huskerink.com',
3239         '.hyba.info',
3240         'ideas4you.com',        ///photos/
3241         'inda.org',
3242         '*.indymedia.org',      // by abdecom at riseup.net
3243         'instantbulletin.com',
3244         'internetincomeclub.com',
3245         '*.inventforum.com',
3246         'Iowa State University' => array('boole.cs.iastate.edu'),
3247         'ipwso.org',
3248         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3249         'ironmind.com',
3250         'skkustp.itgozone.com', // hidden JavaScript
3251         'jazz2online.com',
3252         '.jloo.org',
3253         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3254         'kjon.com',
3255         'Kazan State University' => array(
3256                 'dir.kzn.ru',
3257                 'sys.kcn.ru',
3258         ),
3259         'test.kernel.org',
3260         'kevindmurray.com',
3261         'kroegjesroutes.nl',
3262         '.legion.org',
3263         'Loyola Marymount University' => array('lmu.edu'),
3264         'forum.lixium.fr',
3265         'macfaq.net',
3266         'macvirus.org',         ///board/
3267         'me4x4.com',
3268         'microbial-ecology.net',
3269         'minsterscouts.org',
3270         'morallaw.org',
3271         'morerevealed.com',
3272         'macronet.org',
3273         'mamiya.co.uk',
3274         'vcd.mmvcd.com',
3275         'Monmouth College' => array('department.monm.edu'),
3276         'mountainjusticemedia.org',
3277         '*.mybbland.com',
3278         'mydlstore.com',
3279         '*.netboardz.com',
3280         'North Carolina A&T State University' => array(
3281                 'ncat.edu',
3282                 'my.ncat.edu',
3283                 'hlc.ncat.edu',
3284         ),
3285         'placetobe.org',
3286         'Naropa University' => array(
3287                 'naropa.edu',                   ///forum/
3288         ),
3289         'users.nethit.pl',
3290         'nightclubvip.net',
3291         'njbodybuilding.com',
3292         'nlen.org',
3293         'North Carolina School of Science and Mathematics' => array(
3294                 'neverland.ncssm.edu',  ///include/web/forum/
3295                 'grid.ncssm.edu',               ///ncssm_grid/
3296         ),
3297         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3298         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3299         'offtextbooks.com',
3300         'ofimatika.com',
3301         'olympiafoto.com',              ///images/
3302         'omakase-net',                  // iframe
3303         'omikudzi.ru',
3304         'openchemist.net',
3305         'palungjit.com',
3306         'pataphysics-lab.com',
3307         'paypaldev.org',
3308         'paullima.com',
3309         'perl.org.br',
3310         'pfff.co.uk',
3311         'pimpo.com',                    ///_old_site/
3312         'pix4online.co.uk',
3313         'plone.dk',
3314         'preform.dk',
3315         'privatforum.de',
3316         'publicityhound.net',
3317         'puppylinux.net',               ///news/content/counter/pages/
3318         'qea.com',
3319         'rbkdesign.com',
3320         'rehoboth.com',
3321         'rodee.org',
3322         'ryanclark.org',
3323         '*.reallifelog.com',
3324         'rkphunt.com',
3325         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3326         'sapphireblue.com',
3327         'saskchamber.com',
3328         'savevoorhees.org',
3329         'sdhmalenovice.cz',             //galerie/
3330         'selikoff.net',
3331         'serbisyopilipino.org',
3332         'setbb.com',
3333         'sharejesusinternational.com',
3334         'silver-tears.net',
3335         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3336         '.softpress.com',
3337         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3338         'fora.taniemilitaria.pl',       ///phpbb
3339         'tehudar.ru',
3340         'Tennessee Tech University' => array('manila.tntech.edu'),
3341         'thebluebird.ws',
3342         'theosis.org',
3343         '*.thoforum.com',
3344         'troms-slekt.com',
3345         'theedgeblueisland.com',
3346         'toyshop.com.tw',               // /images/sigui/
3347         'torontoplace.com',
3348         'chat.travlang.com',
3349         'trickropingbylassue.com',
3350         'Truman State University' => array('mathbio.truman.edu'),
3351         'tuathadedannan.org',
3352         'txgotg.com',
3353         'tzaneen.co.za',
3354         'ugeavisen.com',                ///style/
3355         'forums.ugo.com',
3356         'whole.cs.unibo.it',
3357         'The University of North Dakota' => array(
3358                 'learn.aero.und.edu',
3359                 'ez.asn.und.edu',
3360         ),
3361         'The University of Alabama' => array('bama.ua.edu'),
3362         'unisonscotlandlaw.co.uk',
3363         'University of California' => array('classes.design.ucla.edu'),
3364         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3365         'University of Northern Colorado' => array('unco.edu'),
3366         'University of North Carolina' => array(
3367                 'elm.cis.uncw.edu'      ///testBoinc/
3368         ),
3369         'University of Toronto' => array(
3370                 'environment.utoronto.ca',
3371                 'grail.oise.utoronto.ca',
3372                 'utsc.utoronto.ca',
3373         ),
3374         'University of Wisconsin' => array(
3375                 'einstein.phys.uwm.edu'
3376         ),
3377         'urgentclick.com',
3378         'vacant.org.uk',
3379         'Villa Julie College' => array('www4.vjc.edu'),
3380         'Vail Valley Foundation' => array('.vvf.org'),
3381         'wabson.org',
3382         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3383         'webarch.com',          // by WebArchitects (webarch at insync.net)
3384         'weehob.com',
3385         'West Virginia University Parkersburg' => array('wvup.edu'),
3386         'williamsburgrentals.com',
3387         'wolvas.org.uk',
3388         'wookiewiki.org',
3389         'xsgaming.com',                 // Jacked
3390         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3391         'Yahoo.com' => array(
3392                 'blog.360.yahoo.com',
3393                 '*.groups.yahoo.com'
3394         ),
3395         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3396         'youthpeer.org',
3397         '*.zenburger.com',
3398         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3399 );
3400
3401 // --------------------------------------------------
3402
3403 $blocklist['C'] = array(
3404
3405         // C: Sample setting of:
3406         // Exclusive spam domains
3407         //
3408         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3409         // affiliates, finance, sending viruses, malicious attacks to browsers,
3410         // and/or mixed ones
3411         //
3412         // Please notify us about this list with reason:
3413         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3414
3415         // C-1: Domain sets (seems to be) born to spam you
3416         //
3417         // All buziness-related spam
3418         //'.biz'
3419         //
3420         'admin at seekforweb.com' => array(
3421                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3422                 '.lovestoryx.com',
3423                 '.loveaffairx.com',
3424                 '.onmore.info',
3425                 '.scfind.info',
3426                 '.scinfo.info',
3427                 '.webwork88.info',
3428         ),
3429         'boss at bse-sofia.bg' => array(        // by Boris
3430                 '.htewbop.org',
3431                 '.kimm--d.org',
3432                 '.gtre--h.org',
3433                 '.npou--k.org',
3434                 '.bres--z.org',
3435                 '.berk--p.org',
3436                 '.bplo--s.org',
3437                 '.basdpo.org',
3438                 '.jisu--m.org',
3439                 '.kire--z.org',
3440                 '.mertnop.org',
3441                 '.mooa--c.org',
3442                 '.nake--h.org',
3443                 '.noov--b.org',
3444                 '.suke--y.org',
3445                 '.vasdipv.org',
3446                 '.vase--l.org',
3447                 '.vertinds.org',
3448         ),
3449         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3450                 '.aqq3.info',
3451                 '.axa00.info',
3452                 '.okweb11.org',
3453                 '.okweb12.org',
3454                 '.okweb13.org',
3455                 '.okweb14.org',
3456         ),
3457         'opezdol at gmail.com' => array(
3458                 '.informazionicentro.info',
3459                 '.notiziacentro.info',
3460         ),
3461         'SomethingGen' => array(
3462                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3463                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3464                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3465                 // by Lee Chang (nebucha at model-x.com)
3466                 '.adult-chat-world.info',       // by Lui
3467                 '.adult-chat-world.org',        // by Lui
3468                 '.adult-sex-chat.info',         // by Lui
3469                 '.adult-sex-chat.org',          // by Lui
3470                 '.adult-cam-chat.info',         // by Lui
3471                 '.adult-cam-chat.org',          // by Lui
3472                 '.dildo-chat.org',                      // by Lui
3473                 '.dildo-chat.info',                     // by Lui
3474                 // flirt-online.info is not CamsGen
3475                 '.flirt-online.org',            // by Lui
3476                 '.live-adult-chat.info',        // by Lui
3477                 '.live-adult-chat.org',         // by Lui
3478                 '.sexy-chat-rooms.info',        // by Lui
3479                 '.sexy-chat-rooms.org',         // by Lui
3480                 '.swinger-sex-chat.info',       // by Lui
3481                 '.swinger-sex-chat.org',        // by Lui
3482                 '.nasty-sex-chat.info',         // by Lui
3483                 '.nasty-sex-chat.org',          // by Lui
3484
3485                 '.camshost.info',                       // by Sergey
3486                 '.camdoors.info',                       // by Sergey
3487                 '.chatdoors.info',                      // by Sergey
3488
3489                 // 89.149.206.225 by Pronin
3490                 '.dorozhka.info',
3491                 '.kolonochka.info',
3492                 '.knizhechka.info',
3493                 '.krantik.info',
3494                 '.lebedi.info',
3495                 '.loshad.info',
3496                 '.pechenka.info',
3497                 '.porosenok.info',
3498                 '.indyushonok.info',
3499                 '.kotyonok.info',
3500                 '.kozlyonok.info',
3501                 '.magnoliya.info',
3502                 '.svinka.info',
3503                 '.svinya.info',
3504                 '.televizorchik.info',
3505                 '.tumbochka.info',
3506                 '.zherebyonok.info',
3507
3508                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3509
3510                 '.adult-cam-chat-sex.info',             // by Lee
3511                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3512                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3513                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3514                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3515                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3516                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3517                 '.sex-chat-porn-cam.info',              // by Lee
3518         ),
3519         'mital at topo20.org' => array( // by Marcello Italianore
3520                 '.trevisos.org',
3521                 '.topo20.org',
3522         ),
3523         'WellCams.com' => array(
3524                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3525                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3526                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3527         ),
3528         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3529                 '.besturgent.org',
3530                 '.googletalknow.org',
3531                 '.montypythonltd.org',
3532                 '.supersettlemet.org',
3533                 '.thepythonfoxy.org',
3534                 '.ukgamesyahoo.org',
3535                 '.youryahoochat.org',
3536         ),
3537         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3538                 '.dbsajax.org',
3539                 '.acgt2005.org',
3540                 '.gopikottoor.com',
3541                 '.koosx.org',
3542                 '.mmgz.org',
3543                 '.zhiyehua.net',
3544         ),
3545         'vdf at lovespb.com' => array(  // by Andrey
3546                 '.02psa.info',
3547                 '.1818u.org',
3548                 '.18ew.info',
3549                 '.43sexx.org',
3550                 '.56porn.org',
3551                 '.6discount.info',
3552                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3553                 '.78rus.info',
3554                 '.92ssex.org',          // "ForumGenerator"
3555                 '.93adult.org',         // "ForumGenerator"
3556                 '.aboutsr.info',
3557                 '.aboutzw.info',
3558                 '.all23.info',
3559                 '.allvdf.info',
3560                 '.buy-dge.info',
3561                 '.buypo.info',
3562                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3563                 '.cv83.info',
3564                 '.cvwifw.info',
3565                 '.dabouts.info',
3566                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3567                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3568                 '.free01sa.info',
3569                 '.frees1.info',
3570                 '.freexz.info',
3571                 '.ifree-search.org',
3572                 '.lovespb.info',
3573                 '.myso2.info',
3574                 '.nb74u.info',
3575                 '.ohhh2.info',
3576                 '.ol43.info',
3577                 '.olala18.info',
3578                 '.oursales.info',
3579                 '.pasian1.info',
3580                 '.pldk.info',
3581                 '.po473.info',
3582                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3583                 '.poz2.info',
3584                 '.qpf8j4d.info',
3585                 '.saleqw.info',
3586                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3587                 '.sexz18.info',
3588                 '.sexy69a.info',
3589                 '.shedikc.info',
3590                 '.spb78.info',
3591                 '.usacanadauk.info',
3592                 '.v782mks.info',
3593                 '.vny0.info',
3594                 '.wifes1.info',
3595                 '.xranvam.info',
3596                 '.zenitcx.info',
3597                 '.zxolala.info',
3598         ),
3599         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3600                 '.care01.info',
3601                 '.care02.info',
3602                 '.care03.info',
3603                 '.care04.info',
3604                 '.care05.info',
3605                 '.care06.info',
3606                 '.care07.info',
3607                 '.care08.info',
3608                 '.care09.info',
3609                 '.care10.info',
3610                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3611                 '.klastar01.info',
3612                 '.klastar02.info',
3613                 '.klastar03.info',
3614                 '.klastar04.info',
3615                 '.klastar05.info',
3616                 '.klastar06.info',
3617                 '.klastar07.info',
3618                 '.klastar08.info',
3619                 '.klastar09.info',
3620                 '.klastar10.info',
3621                 '.um20ax01.info',
3622                 '.um20ax02.info',
3623                 '.um20ax03.info',
3624                 '.um20ax04.info',
3625                 '.um20ax05.info',
3626                 '.um20ax06.info',
3627                 '.um20ax07.info',
3628                 '.um20ax08.info',
3629                 '.um20ax09.info',
3630                 '.um20ax10.info',
3631         ),
3632         'forrass at gmail.com' => array(        // by Ismail
3633                 '.zmh01.info',
3634                 '.zmh02.info',
3635                 '.zmh03.info',
3636                 '.zmh04.info',
3637                 '.zmh05.info',
3638                 '.zmh06.info',
3639                 '.zmh07.info',
3640                 '.zmh08.info',
3641                 '.zmh09.info',
3642                 '.zmh10.info',
3643         ),
3644         'Varsylenko Vladimir and family' => array(
3645                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3646                 // by David C. Lack (David.C.Lack at dodgeit.com)
3647                 // by Kuzma V Safonov (admin at irtes.ru)
3648                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3649                 // by LAURI FUNK (vvm_kz at rambler.ru)
3650
3651                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3652                 '.abrek.info',                          // by Petrov
3653                 '.allsexonline.info',           // by Varsylenko
3654                 '.d1rnow.info',                         // by Petrov
3655                 '.doxer.info',                          // Petrov
3656                 '.freeforworld.info',           // Varsylenko
3657                 '.goodworksite.info',           // Varsylenko
3658                 '.onall.info',                          // by Varsylenko
3659                 '.powersiteonline.info',        // by Varsylenko
3660                 '.rentmysite.info',                     // by Varsylenko
3661                 '.sexdrink.info',                       // by Petrov
3662                 '.siteszone.info',                      // by Varsylenko
3663                 '.sfup.info',                           // by Petrov
3664                 '.superfreedownload.info',      // by Varsylenko
3665                 '.superneeded.info',            // by Varsylenko
3666                 '.srup.info',                           // by Petrov
3667
3668                 // 66.235.185.143(*.svabuse.info)
3669                 '.accommodationwiltshire.com',  // by Petrov
3670                 '.levines.info',                        // by Petrov
3671                 '.sernost.info',                        // by Petrov
3672                 '.sexvideosite.info',           // by Petrov
3673                 '.vvsag.info',                          // by Petrov
3674
3675                 // 81.0.195.134
3676                 '.michost.info',                        // by LAURI
3677                 '.parther.info',                        // by LAURI
3678
3679                 // 88.214.202.100
3680                 '.gitsite.info',                        // by Petrov
3681                 '.organiq.info',                        // by Petrov
3682                 '.yoursitedh.info',                     // by Petrov
3683
3684                 // 217.11.233.58 by Petrov
3685                 '.mp3vault.info',
3686
3687                 // DNS time out or failed
3688                 '.bequeous.info',                       // by Davi
3689                 '.sopius.info',                         // by Kuzma
3690                 '.sovidopad.info',                      // by Kuzma
3691                 '.yerap.info',                          // by Kuzma
3692         ),
3693         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3694                 '.flywebs.com',
3695                 '.hostrim.com',
3696                 '.playbit.com',
3697         ),
3698         'webmaster at dgo3d.info' => array(     // by Son Dittman
3699                 '.bsb3b.info',
3700                 '.dgo3d.info',
3701                 '.dgo5d.info',
3702         ),
3703         'cooler.infomedia at gmail.com' => array(
3704                 '.diabetescarelink.com',
3705                 '.firstdebthelp.com',
3706         ),
3707         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3708                 '.pokah.lv',
3709                 '.astrons.com',
3710         ),
3711         'seocool at bk.ru' => array(    // by Skar
3712                 '.implex3.com',
3713                 '.implex6.info',
3714                 '.softprof.org',
3715         ),
3716         'Caslim.info' => array(
3717                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3718                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3719         ),
3720         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3721                 '.777-poker.biz',
3722                 '.porn-11.com',
3723         ),
3724         'Conto.pl' => array(
3725                 '.8x.pl',               // domena at az.pl
3726                 '.3x3.pl',              // by biuro at nazwa.pl
3727                 '.conto.pl',    // by biuro at nazwa.pl
3728                 '.guu.pl',              // by conto.pl (domena at az.pl)
3729                 '.xcx.pl',              // domena at az.pl
3730                 '.yo24.pl',             // domena at az.pl
3731         ),
3732         'mail at pcinc.cn' => array(
3733                 // Domains by Lin Zhi Qiang
3734                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3735
3736                 // 125.65.112.11
3737                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3738                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3739                 '.shoopivdoor.com',
3740
3741                 // 125.65.112.12
3742                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3743                 '.hosetaibei.com',
3744                 '.playsese.com',
3745
3746                 // 125.65.112.13
3747                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3748                 '.ahatena.com',
3749                 '.asdsdgh-jp.com',
3750                 '.conecojp.net',
3751                 '.game-oekakibbs.com',
3752                 '.geocitygame.com',
3753                 '.gsisdokf.net',
3754                 '.korunowish.com',
3755                 '.netgamelivedoor.com',
3756                 '.soultakerbbs.net',
3757                 '.yahoo-gamebbs.com',
3758                 '.ywdgigkb-jp.com',
3759
3760                 // 125.65.112.14
3761                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3762                 '.acyberhome.com',
3763                 '.bbs-qrcode.com',
3764                 '.gamesroro.com',
3765                 '.gameyoou.com',
3766                 '.gangnu.com',
3767                 '.goodclup.com',
3768                 '.lineage321.com',
3769                 '.linkcetou.com',
3770                 '.love888888.com',
3771                 '.ragnarok-bbs.com',
3772                 '.ragnarok-game.com',
3773                 '.rmt-navip.com',
3774                 '.watcheimpress.com',
3775
3776                 // 125.65.112.15
3777                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3778                 '.18girl-av.com',
3779                 '.aurasoul-visjp.com',
3780                 '.gamaniaech.com',
3781                 '.game-mmobbs.com',
3782                 '.gameslin.net',
3783                 '.gemnnammobbs.com',
3784                 '.gogolineage.net',
3785                 '.grandchasse.com',
3786                 '.jpragnarokonline.com',
3787                 '.jprmthome.com',
3788                 '.maplestorfy.com',
3789                 '.netgamero.net',
3790                 '.nothing-wiki.com',
3791                 '.ourafamily.com',
3792                 '.ragnarok-sara.com',
3793                 '.rmt-lineagecanopus.com',
3794                 '.rmt-ranloki.com',
3795                 '.rogamesline.com',
3796                 '.roprice.com',
3797                 '.tuankong.com',
3798                 '.twreatch.com',
3799
3800                 // 125.65.112.22
3801                 // The same IP: web013.cdnhost.cn
3802                 '.lzy88588.com',
3803                 '.ragnaroklink.com',
3804
3805                 // 125.65.112.24
3806                 '.rmtfane.com',
3807                 '.fc2weday.com',
3808                 '.nlftweb.com',
3809
3810                 // 125.65.112.27
3811                 '.i520i.com',
3812                 '.sunwayto.com',
3813
3814                 // 125.65.112.31
3815                 // The same IP: web016.cdnhost.cn
3816                 '.twyaooplay.com',
3817
3818                 // 125.65.112.32
3819                 // The same IP: web037.cdnhost.cn
3820                 '.emeriss.com',
3821                 '.raginfoy.com',
3822                 '.ragnarokgvg.com',
3823                 '.rentalbbs-livedoor.com',
3824                 '.romaker.com',
3825                 '.sagewikoo.com',
3826                 '.samples112xrea.com',
3827                 '.wiki-house.com',
3828
3829                 // 125.65.112.49
3830                 '.chaosx0.com',
3831
3832                 // 125.65.112.88
3833                 // The same IP: web015.cdnhost.cn
3834                 '.a-hatena.com',
3835                 '.biglobe-ne.com',
3836                 '.blogplaync.com',
3837                 '.din-or.com',
3838                 '.dtg-gamania.com',
3839                 '.fcty-net.com',
3840                 '.game-fc2blog.com',
3841                 '.gameurdr.com',
3842                 '.getamped-garm.com',
3843                 '.interzq.com',
3844                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3845                 '.luobuogood.com',
3846                 '.ragnarok-search.com',
3847                 '.rinku-livedoor.com',
3848
3849                 // 125.65.112.90
3850                 '.gtvxi.com',
3851
3852                 // 125.65.112.91
3853                 // The same IP: web004.cdnhost.cn
3854                 '.6828teacup.com',
3855                 '.blog-livedoor.net',
3856                 '.cityblog-fc2web.com',
3857                 '.deco030-cscblog.com',
3858                 '.imbbs2t4u.com',
3859                 '.k5dionne.com',
3860                 '.lineagejp-game.com',
3861                 '.mbspro6uic.com',
3862                 '.slower-qth.com',
3863                 '.wikiwiki-game.com',
3864
3865                 // 125.65.112.93
3866                 // The same IP: web022.cdnhost.cn
3867                 '.aaa-livedoor.net',
3868                 '.cityhokkai.com',              // web022.cdnhost.cn
3869                 '.fanavier.net',
3870                 '.geocitylinks.com',    // web022.cdnhost.cn
3871                 '.kuronowish.net',              // web022.cdnhost.cn
3872                 '.ro-bot.net',
3873
3874                 // 125.65.112.95
3875                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3876                 '.23styles.com',
3877                 '.aehatena-jp.com',
3878                 '.ameblog-jp.net',
3879                 '.antuclt.com',
3880                 '.blog-ekndesign.com',
3881                 '.d-jamesinfo.com',
3882                 '.editco-jp.com',
3883                 '.ezbbsy.com',
3884                 '.extd-web.com',
3885                 '.fotblong.com',
3886                 '.game62chjp.net',
3887                 '.gamegohi.com',
3888                 '.gamesmusic-realcgi.net',
3889                 '.gamesragnaroklink.net',
3890                 '.homepage-nifty.com',
3891                 '.ie6xp.com',
3892                 '.irisdti-jp.com',
3893                 '.jklomo-jp.com',
3894                 '.jpxpie6-7net.com',
3895                 '.lian-game.com',
3896                 '.lineage-bbs.com',
3897                 '.lineage1bbs.com',
3898                 '.livedoor-game.com',
3899                 '.litcan.com',
3900                 '.lovejpjp.com',
3901                 '.m-phage.com',
3902                 '.muantang.com',
3903                 '.plusd-itmedia.com',
3904                 '.runbal-fc2web.com',
3905                 '.saussrea.com',
3906                 '.tooalt.com',
3907                 '.toriningena.net',
3908                 '.yahoodoor-blog.com',
3909                 '.yy14-kakiko.com',
3910
3911                 // 125.65.112.137
3912                 '.clublineage.com',
3913
3914                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3915                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3916                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3917
3918                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3919                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3920
3921                 '.games-nifty.com',             // 255.255.255.255 now
3922                 '.homepage3-nifty.com', // 255.255.255.255 now
3923         ),
3924         'caddd at 126.com' => array(
3925                 '.chengzhibing.com',    // by chen gzhibing
3926                 '.jplinux.com',                 // by lian liang
3927                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3928                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3929                 '.tooplogui.com',               // by zibing cai
3930                 '.twsunkom.com',                // by guo zhi wei
3931                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3932         ),
3933         'nuigiym2 at 163.com' => array( // by fly bg
3934                 '.linainfo.net',                // Seems IP not allocated now
3935                 '.lineagalink.com',             // 220.247.157.99
3936                 '.lineagecojp.com',             // 61.139.126.10
3937                 '.ragnarokonlina.com',  // 220.247.158.99
3938         ),
3939         'aakin at yandex.ru' => array(
3940                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3941                 '.entirestar.com',
3942                 '.superbuycheap.com',
3943                 '.topdircet.com',
3944         ),
3945         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3946                 '.tianmieccp.com',
3947                 '.xianqiao.net',
3948         ),
3949         'm.frenzy at yahoo.com' => array(       // by Michael
3950                 '.p5v.org',
3951                 '.j111.net',
3952                 '.searchhunter.info',
3953                 '.soft2you.info',
3954                 '.top20health.info',
3955                 '.top20ringtones.info',
3956                 '.top20travels.info',
3957                 '.v09v.info',
3958                 '.x09x.info',
3959                 '.zb-1.com',
3960         ),
3961         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3962                 '.bingogoldenpalace.info',
3963                 '.ccarisoprodol.info',
3964                 '.ezxcv.info',
3965                 '.isuperdrug.com',
3966                 '.pharmacif.info',
3967                 '.pornsexteen.biz',
3968                 '.ugfds.info',
3969                 '.vviagra.info',
3970         ),
3971         'anatolsenator at gmail.com' => array(  // by Anatol
3972                 '.cheapestviagraonline.info',
3973                 '.buyphentermineworld.info'
3974         ),
3975         'webmaster at mederotica.com' => array(
3976                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3977                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3978                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3979                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3980         ),
3981         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3982                 '.auase.info',          // by ilemavyq7461 at techie.com
3983                 '.axeboxew.info',       // by zygeu220 at writeme.com
3984                 '.boluzuhy.info',       // by pikico5419 at post.com
3985                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3986                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3987                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3988                 '.exidiqe.info',        // by kufyca5475 at mail.com
3989                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3990                 '.gubiwu.info',         // by lywunef6532 at iname.com
3991                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3992                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3993                 '.jiuuz.info',          // by meqil6549 at mail.com
3994                 '.nudetar.info',        // by vohepafi3536 at techie.com
3995                 '.nipud.info',          // by bohox9872 at mindless.com
3996                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3997                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3998                 '.olasep.info',         // by lizon8506 at mail.com
3999                 '.oueuidop.info',       // by arytyb6913 at europe.com
4000                 '.oviravy.info',        // by amyuu3883 at london.com
4001                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4002                 '.ragibe.info',         // by ehome4458 at myself.com
4003                 '.ucazib.info',         // by gorare7222 at consultant.com
4004                 '.udaxu.info',          // by gubima4007 at usa.com
4005                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4006                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4007                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4008                 '.yvaxat.info',         // by koqun9660 at mindless.com
4009                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4010         ),
4011         'Carmodelrank.com etc' => array(
4012                 // by Brianna Dunlord (briasmi at yahoo.com)
4013                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4014                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4015                 '.carmodelrank.com',// by Brianna
4016                 '.cutestories.net',     // by Brianna
4017                 '.sturducs.com',
4018                 '.bestother.info',      // by Tim
4019                 '.premiumcasinogames.com',      // by Brianna)
4020                 '.yaahooo.info',        // by Alice
4021         ),
4022         'aliacsandr at yahoo.com' => array(
4023                 '.cubub.info',                          // "Free Web Hosting"
4024         ),
4025         'aliacsandr85 at yahoo.com' => array(
4026                 // by Dr. Portillo or Eva Sabina Lopez Castell
4027                 '.xoomer.alice.it',                     // "Free Web Hosting"
4028                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4029                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4030                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4031                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4032                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4033                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4034                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4035                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4036                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4037                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4038                 '.viagra-price.org',            // by Eva
4039                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4040                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4041         ),
4042         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4043         'Something-Gamble' => array(
4044                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4045                 '.atonlineroulette.com',                        // by Blaise Johns
4046                 '.atroulette.com',                                      // by Gino Sand
4047                 '.betting-123.com',                                     // by Joana Caceres
4048                 '.betting-i.biz',                                       // by Joaquina Angus
4049                 '.casino-challenge.com',                        // by Maren Camara
4050                 '.casino-gambling-i.biz',                       // by Giselle Nations
4051                 '.casino-italian.com',                          // by Holley Yan
4052                 '.casino123.net',                                       // by Ta Baines
4053                 '.casinohammamet.com',                          // by Inger Barhorst
4054                 '.casinoqz.com',                                        // by Berenice Snow
4055                 '.casinos-777.net',                                     // by Iona Ayotte
4056                 '.crapsok.com',                                         // by Devon Adair,
4057                 '.dcasinoa.com',                                        // by August Hawkinson
4058                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4059                 '.free-dvd-player.biz',                         // by Rosario Kidd
4060                 '.florida-lottery-01.com',                      // by Romeo Dillon
4061                 '.gaming-123.com',                                      // by Jennifer Byrne
4062                 '.kenogo.com',                                          // by Adriane Bell
4063                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4064                 '.onbaccarat.com',                                      // by Kassandra Dunn
4065                 '.online-experts.biz',                          // by Liberty Helmick
4066                 '.onlinepoker-123.com',                         // by Andrea Feaster
4067                 '.playpokeronline-123.com',                     // by Don Lenard
4068                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4069                 '.texasholdem123.com',                          // by Savion Lasseter
4070                 '.texasholdem-777.com',                         // by Savanna Lederman
4071                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4072                 '.the-craps-100.us',                            // by Lorrine Ripley
4073                 '.the-free-online-game-913.us',         // by Kanesha Clem
4074                 '.the-free-poker-1798.us',                      // by Elaina Witte
4075                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4076                 '.the-online-game-poker-1185.us',       // by Merna Bey
4077                 '.the-playing-black-jack.com',          // by Kristine Brinker
4078                 '.the-poker-1082.us',                           // by Kristofer Boldt
4079                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4080                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4081                 '.the-video-black-jack.com',            // by Jagger Godin
4082         ),
4083         'Something-Insurance' => array(
4084                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4085
4086                 // 0-9
4087                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4088                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4089                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4090                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4091                 '.18wkcf.com',                                  // by Lexy Bohannon
4092                 '.2001werm.org',                                // by Raphael Rayburn
4093                 '.2004heeparea1.org',                   // by Dinorah Andrews
4094                 '.21nt.net',                                    // by Jaida Estabrook
4095                 '.3finfo.com',                                  // by Damian Pearsall
4096                 '.3somes.org',                                  // by Mauro Tillett
4097                 '.453531.com',                                  // by Kurt Flannery
4098                 '.4freesay.com',                                // by Eloy Jones
4099                 '.5ssurvey.com',                                // by Annamarie Kowalski
4100                 '.8-f22.com',                                   // by Larraine Evers
4101                 '.9q.org',                                              // by Ami Boynton
4102
4103                 // A
4104                 '.a40infobahn.com',                             // by Amit Nguyen
4105                 '.a4h-squad.com',                               // by Ross Locklear
4106                 '.aac2000.org',                                 // by Randi Turner
4107                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4108                 '.acahost.com',                                 // by Milton Haberman
4109                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4110                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4111                 '.activel-learning-site.com',   // by Mateo Conn
4112                 '.ad-makers.com',                               // by Shemeka Arsenault
4113                 '.ada-information.org',                 // by Josef Osullivan
4114                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4115                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4116                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4117                 '.aerovac-hotpress.com',                // by Trey Marlow
4118                 '.agfbiosensors.com',                   // by Lionel Dempsey
4119                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4120                 '.affordablerealestate.net',    // by Season Otoole
4121                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4122                 '.ahouserefinance.com',                 // by Young Alley
4123                 '.akirasworld.com',                             // by Piper Sullivan
4124                 '.alderik-production.com',              // by Joan Stiles
4125                 '.alltechdata.com',                             // by Dom Laporte
4126                 '.amconllc.com',                                // by Syble Benjamin
4127                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4128                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4129                 '.angelandcrown.net',                   // by Claretta Najera
4130                 '.ankoralina.com',                              // by Eladia Demers
4131                 '.antiquegoldmine.com',                 // by Keena Marlow
4132                 '.aquinosotros.com',                    // by Nanci Prentice
4133                 '.architectionale.com',                 // by Wilbur Cornett
4134                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4135                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4136                 '.arefinancehome.com',                  // by Duane Doran
4137                 '.arefinancinghome.com',                // by Ike Laney
4138                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4139                 '.auction-emall-site.info',             // by Dayle Denman
4140                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4141                 '.auto-buy-rite.com',                   // by Asuncion Buie
4142                 '.axxinet.net',                                 // by Roberta Gasper
4143                 '.azimutservizi.com',                   // by Ethelene Brook
4144                 '.azstudies.org',                               // by Bernardina Walden
4145
4146                 // B
4147                 '.babtrek.com',                                 // by Simonette Mcbrayer
4148                 '.babycujo.com',                                // by Francisco Akers
4149                 '.bakeddelights.com',                   // by Dave Evenson
4150                 '.bbcart.com',                                  // by Lucio Hamlin
4151                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4152                 '.best-digital-phone.us',               // by Meghann Crockett
4153                 '.bjamusements.com',                    // by Lurlene Butz
4154                 '.blursgsu.com',                                // by Weston Killian
4155                 '.bookwide.net',                                // by Tequila Zacharias
4156                 '.boreholes.org',                               // by Flora Reed
4157                 '.breathingassociaiton.org',    // by Alfred Crayton
4158                 '.birdingnh.com',                               // by Donald Healy
4159                 '.bisdragons.org',                              // by Lupe Cassity
4160                 '.blcschools.net',                              // by Alycia Jolly
4161                 '.bronte-foods.com',                    // by Kary Pfeiffer
4162                 '.buckscountyneighbors.org',    // by Maile Gaffney
4163                 '.buffalofudge.com',                    // by Mable Whisenhunt
4164                 '.burlisonforcongress.com',             // by Luann King
4165                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4166                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4167
4168                 // C
4169                 '.cabanes-web.com',                             // by Vaughn Latham
4170                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4171                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4172                 '.checaloya.com',                               // by Susana Coburn
4173                 '.calvarychapelrgvt.org',               // by Karan Kittle
4174                 '.cameras-esite.info',                  // by Karlee Frisch
4175                 '.cancerkidsforum.org',                 // by Samson Constantino
4176                 '.ccchoices.org',                               // by Kenia Cranford
4177                 '.ccupca.org',                                  // by Evonne Serrano
4178                 '.celebratemehome.com',                 // by Soraya Tower
4179                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4180                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4181                 '.choose-shoes.net',                    // by Geoffrey Setser
4182                 '.churla.com',                                  // by Ollie Wolford
4183                 '.circuithorns.co.uk',                  // by Nathanial Halle
4184                 '.clanbov.com',                                 // by Donell Hozier
4185                 '.cnm-ok.org',                                  // by Thalia Moye
4186                 '.coalitioncoalition.org',              // by Ned Macklin
4187                 '.consoleaddicts.com',                  // by Dorla Hoy
4188                 '.counterclockwise.net',                // by Melynda Hartzell
4189                 '.codypub.com',                                 // by Mercedes Coffman
4190                 '.comedystore.net',                             // by Floy Donald
4191                 '.covsys.co.uk',                                // by Abby Jacey
4192                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4193                 '.craftybidders.com',                   // by Dannie Lazo
4194                 '.credit-card-finder.net',              // by Mellie Deherrera
4195                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4196                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4197                 '.ctwine.org',                                  // by Hailey Knox
4198
4199                 // D
4200                 '.dazyation.com',                               // by Louis Strasser
4201                 '.deepfoam.org',                                // by Ethelyn Southard
4202                 '.debt-fixing.com',                             // by Dagny Rickman
4203                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4204                 '.domainadoption.com',                  // by Breann Pappas
4205                 '.diannbomkamp.com',                    // by Russel Croteau
4206                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4207                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4208                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4209                 '.digital-cameras-esite.info',  // by Milan Jolin
4210                 '.dnstechnet.net',                              // by Tamera Oman
4211                 '.drivenbydata.org',                    // by Katherine Noyes
4212                 '.dtmf.net',                                    // by Micki Slayton
4213                 '.domainsfound.com',                    // by Blossom Lively
4214
4215                 // E
4216                 '.ecstacyabuse.net',                    // by Alana Knight
4217                 '.e-digital-camera-esite.info', // by Romaine Cress
4218                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4219                 '.eldorabusecenter.org',                // by Annabella Oneal
4220                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4221                 '.encaponline.com',                             // by Patrick Keel
4222                 '.ez-shopping-online.com',              // by Gail Bartlett
4223
4224                 // F
4225                 '.faithfulwordcf.com',                  // by Bart Weeks
4226                 '.fammedassoc.com',                             // by Joshua Nelson
4227                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4228                 '.f00k.org',                                    // by Leslie Chapman
4229                 '.foreignrealtions.org',                // by Krystal Hawley
4230                 '.fortwebsite.org',                             // by Kristina Motley
4231                 '.fotofirstdigital.com',                // by Tad Whitfield
4232                 '.foundationcommons.org',               // by Caryn Eskew
4233                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4234                 '.freaky-cheats.com',                   // by Al Klein
4235                 '.free--spyware.com',                   // by Nikki Contreras
4236                 '.french-home-finance-consultant.info', // by Santana Melton
4237                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4238
4239                 // G
4240                 '.gaintrafficfast.com',                 // by Lila Meekins
4241                 '.gaygain.org',                                 // by Shell Davila
4242                 '.gcaaa.com',                                   // by Vallie Jaworski
4243                 '.generalsysteme.com',                  // by Cale Vogel
4244                 '.generation4games.co.uk',              // by Sonya Graham
4245                 '.german-dictionary.us',                // by Rex Daniel
4246                 '.gilmerrec.com',                               // by Leighann Guillory
4247                 '.glenthuntly-athletics.com',   // by Julee Hair
4248                 '.glorybaskets.com',                    // by Lynette Lavelle
4249                 '.goconstructionloan.com',              // by Willis Monahan
4250                 '.gohireit.com',                                // by Bertha Metzger
4251                 '.godcenteredpeople.com',               // by Jaycee Coble
4252
4253                 // H
4254                 '.healthinsuranceem.com',               // by Justin Munson
4255                 '.hearthorizon.info',                   // by Kory Session
4256                 '.hegerindustrial.com',                 // by Toni Wesley
4257                 '.herzequip.com',                               // by Princess Dunkle
4258                 '.hglcms.org',                                  // by Gladwin Ng
4259                 '.hipanoempresa.com',                   // by Shannon Staub
4260                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4261                 '.horse-racing-result.com',             // by Rodney Reynolds
4262                 '.hueckerfamily.com',                   // by Hershel Sell
4263
4264                 // I
4265                 '.ilove2win.com',                               // by Lamont Dickerson
4266                 '.ilruralassistgrp.org',                // by Moises Hauser
4267                 '.imageonsolutions.com',                // by Porsche Dubois
4268                 '.infoanddatacenter.com',               // by Eva Okelley
4269                 '.islamfakta.org',                              // by Goldie Boykin
4270                 '.ithomemortgage.com',                  // by Adelaide Towers
4271                 '.iyoerg.com',                                  // by Madyson Gagliano
4272
4273                 // J
4274                 '.jeffaxelsen.com',                             // by Daphne William
4275                 '.jeffreyf.net',                                // by Vito Platt
4276                 '.johnmartinsreality.com',              // by Pamela Larry
4277                 '.johnsilvers.net',                             // by Silver Battaglia
4278
4279                 // K
4280                 '.kcgerbil.org',                                // by Marisa Thayer
4281                 '.kdc-phoenix.com',                             // by Salma Shoulders
4282                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4283                 '.kosove.org',                                  // by Darwin Schneider
4284
4285                 // L
4286                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4287                 '.letsgokayaking.net',                  // by Winnie Adair
4288                 '.libertycabs.com',                             // by Adela Bonds
4289                 '.liquor-store-cellar.info',    // by Hugh Pearson
4290                 '.locomojo.net',                                // by Marco Harmon
4291                 '.lodatissimo.com',                             // by Adrian Greeson
4292                 '.lsawc.org',                                   // by Lara Han
4293                 '.lycos-test.net',                              // by Rigoberto Oakley
4294
4295                 // M
4296                 '.macro-society.com',                   // by Venessa Hodgson
4297                 '.marthasflavorfest.com',               // by Ahmad Lau
4298                 '.martin-rank.com',                             // by Cathleen Crist
4299                 '.maryandfrank.org',                    // by Theodore Apodaca
4300                 '.masterkwonhapkido.com',               // by Misty Graham
4301                 '.maxrpm-demo.com',                             // by Cristal Cho
4302                 '.mechanomorphic.com',                  // by Stanford Crow
4303                 '.mepublishing.net',                    // by Karly Fleenor
4304                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4305                 '.metwahairports.com',                  // by Nan Kitchen
4306                 '.middle-eastnews.com',                 // by Tybalt Altmann
4307                 '.mikepelchy.com',                              // by Sherly Pearson
4308                 '.milpa.org',                                   // by Nelly Aguilera
4309                 '.modayun.com',                                 // by Camilla Velasco
4310                 '.moonstoneerp.com',                    // by Garret Salmon
4311                 '.morosozinho.com',                             // by Lenore Tovar
4312                 '.morphadox.com',                               // by Hung Zielinski
4313                 '.moscasenlared.com',                   // by Tera Gant
4314                 '.sdjavasig.com',                               // by Gia Swisher
4315                 '.mpeg-radio.com',                              // by Sincere Beebe
4316                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4317                 '.mtseniorcenter.org',                  // by Frederic Ortega
4318                 '.mysteryclips.com',                    // by Edward Ashford
4319
4320                 // N
4321                 '.naavs.org',                                   // by Yuridia Gandy
4322                 '.naval-aviation.org',                  // by Roselle Campo
4323                 '.navigare-ischia.com',                 // by Arielle Coons
4324                 '.ncredc.org',                                  // by Brenda Nye
4325                 '.neonmotorsports.com',                 // by Giovanna Vue
4326                 '.nf-ny.com',                                   // by Yadira Hibbard
4327                 '.ngfdyqva.com',                                // by Emiliano Samples
4328                 '.nicozone.com',                                // by Blaine Shell
4329                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4330                 '.npawny.org',                                  // by Willard Murphy
4331                 '.nysdoed.org',                                 // by Elric Delgadillo
4332                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4333                 '.nytech-ir.com',                               // by Adrien Beals
4334
4335                 // O
4336                 '.oadmidwest.com',                              // by Gavin Kaplan
4337                 '.oarauto.com',                                 // by Susann Merriman
4338                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4339                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4340                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4341                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4342                 '.online-pills-24x7.biz',               // by Aide Hallock
4343                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4344                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4345                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4346                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4347                 '.otterbayweb.com',                             // by Maxwell Irizarry
4348
4349                 // P
4350                 '.painting-technique.us',               // by Bryanna Tooley
4351                 '.pakamrcongress.com',                  // by Bryce Summerville
4352                 '.patabney.com',                                // by Kailyn Slone
4353                 '.parde.org',                                   // by Ellie Yates
4354                 '.participatingprofiles.com',   // by Jaelynn Meacham
4355                 '.partnershipconference.org',   // by Alla Floyd
4356                 '.pet-stars.com',                               // by Carmon Luevano
4357                 '.planning-law.org',                    // by Trista Holcombe
4358                 '.ppawa.com',                                   // by Evonne Scarlett
4359                 '.precisionfilters.net',                // by Faustina Fell
4360
4361                 // Q
4362                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4363                 '.quick-debt-consolidation.net',        // by Lala Marte
4364                 '.quicktvr.com',                                // by Vernell Crenshaw
4365
4366                 // R
4367                 '.radicalsolutions.org',                // by Reece Medlin
4368                 '.randallburgos.com',                   // by Bradly Villa
4369                 '.rcassel.com',                                 // by Janiah Gallant
4370                 '.rearchitect.org',                             // by Marcus Gaudet
4371                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4372                 '.reprisenashville.com',                // by Hester Khan
4373                 '.reptilemedia.com',                    // by Alicia Patel
4374                 '.resellers2000.com',                   // by Dedra Kennedy
4375                 '.reverse-billing.com',                 // by Lazaro Gluck
4376                 '.richcapaldi.com',                             // by Kya Haggard
4377                 '.richformissouri.com',                 // by Alanna Elston
4378                 '.robstraley.com',                              // by Leida Bartell
4379                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4380                 '.rpgbbs.com',                                  // by Leonel Peart
4381                 '.ruralbusinessonline.org',             // by Lynsey Watters
4382                 '.ruwomenscenter.org',                  // by Vince Mclemore
4383                 '.ryanjowens.com',                              // by Janine Smythe
4384
4385                 // S
4386                 '.sagarmathatv.org',                    // by Liam Funke
4387                 '.sakyathubtenling.org',                // by Liane Falgout
4388                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4389                 '.sandishaven.com',                             // by Lino Soloman
4390                 '.scienkeen.com',                               // by Liza Navarra
4391                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4392                 '.severios.com',                                // by Isa Steffen
4393                 '.sexual-hot-girls.com',                // by Viviana Bolton
4394                 '.shakespearelrc.com',                  // by Luciana Weaver
4395                 '.shashran.org',                                // by Adriel Humphries
4396                 '.shoes-shop.us',                               // by Austen Higginbotham
4397                 '.skagitvalleybassanglers.com', // by Necole Thiele
4398                 '.skinsciencesalon.com',                // by Nena Rook
4399                 '.smartalternative.net',                // by Nicki Lariviere
4400                 '.sml338.org',                                  // by Nickole Krol
4401                 '.smogfee.com',                                 // by Sienna Kimble
4402                 '.sneakers-e-shop.info',                // by Nikki Fye
4403                 '.spacewavemedia.com',                  // by Thanh Gast
4404                 '.softkernel.com',                              // by Nicol Hummer
4405                 '.stjoanmerrillville.com',              // by Hunter Beckham
4406                 '.strelinger.com',                              // by Arron Highsmith
4407                 '.striking-viking.com',                 // by Kylie Endsley
4408                 '.sunnydeception.org',                  // by Amaya Llora
4409                 '.sunzmicro.com',                               // by Goddard Arreola
4410                 '.sv-iabc.org',                                 // by Braden Buck
4411                 '.sykotick.com',                                // by Pierce Knecht
4412
4413                 // T
4414                 '.tbody.net',                                   // by Ormond Roman
4415                 '.the-pizzaman.com',                    // by Mario Ramsey
4416                 '.the-shoes.us',                                // by Alejandro Gaffney
4417                 '.theborneocompany.com',                // by Bryanna Tooley
4418                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4419                 '.thehomeschool.net',                   // by September Concepcio
4420                 '.thenewlywed.com',                             // by Allegra Marra
4421                 '.tigerspice.com',                              // by Denis Mosser
4422                 '.tnaa.net',                                    // by Jasmine Andress
4423                 '.top-finance-sites.com',               // by Maryann Doud
4424                 '.tradereport.org',                             // by Bettie Sisk
4425                 '.transmodeling.com',                   // by Martine Button
4426                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4427                 '.tsaoc.com',                                   // by Heriberto Mcfall
4428                 '.tsunamidinner.com',                   // by Nannie Richey
4429
4430                 // U
4431                 '.uhsaaa.com',                                  // by Risa Herbert
4432                 '.ultradeepfield.org',                  // by Bobby Ragland
4433                 '.umkclaw.info',                                // by Cammy Kern
4434                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4435                 '.usa-wolf.com',                                // by Jacklyn Morrill
4436                 '.usjobfair.com',                               // by Lorina Burchette
4437
4438                 // V
4439                 '.vacancesalouer.com',                  // by Loris Bergquist
4440                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4441                 '.valleylibertarians.org',              // by Lena Massengale
4442                 '.vanderbiltevents.com',                // by Gannon Krueger
4443                 '.vanwallree.com',                              // by Michelina Donahue
4444                 '.vcertificates.com',                   // by Hyun Lamp
4445                 '.vonormytexas.us',                             // by Suzette Waymire
4446
4447                 // W
4448                 '.washingtondc-areahomes.net',  // by Ailene Broome
4449                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4450                 '.wolsaoh.org',                                 // by Daniela English
4451                 '.worldpropertycatalog.com',    // by Aray Baxter
4452
4453                 // Y
4454                 '.yankee-merchants.com',                // by Jackson Hinojosa
4455                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4456                 '.yourdomainsource.com',                // by Deems Weingarten
4457
4458                 // Z
4459                 '.zkashan.com',                                 // by Evan Light
4460                 '.zockclock.com',                               // by Dorothea Guthrie
4461         ),
4462         'Something-Drugs' => array(
4463                 // Drugs / Pills / Diet
4464                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4465                 '.abdelghani-shady.com',                // by Elly Alton
4466                 '.bangbangfilm.com',                    // by Davin Chou
4467                 '.centroantequera.com',                 // by Keon Kwiatkowski
4468                 '.champagne-cellar.info',               // by Kandis Rizzo
4469                 '.chix0r.org',                                  // by Christoper Baird
4470                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4471                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4472                 '.fast-cash-01.com',                    // by Edgar Oliver
4473                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4474                 '.fn-nato.com',                                 // by Donny Dunlap
4475                 '.gqyinran.com',                                // by Alejandro Parks
4476                 '.juris-net.com',                               // by Rachelle Bravo
4477                 '.leftpencey.com',                              // by Aileen Ashby
4478                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4479                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4480                 '.palaceroyale.net',                    // by Brycen Stebbins
4481                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4482                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4483                 '.yukissushi.com',                              // by Donell Hozier
4484         ),
4485         'Something-Others' => array(
4486                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4487                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4488         ),
4489         'Something-NoApp' => array(
4490                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4491                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4492                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4493                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4494                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4495         ),
4496         'Cortez and family' => array(
4497                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4498                 '.dronadaarsujf.info',  // by Cortez
4499                 '.fromnananaref.info',  // by Cortez
4500                 '.goorkkjsaka.info',    // by Cortez
4501                 '.jkdfjjkkdfe.info',    // by Rico
4502                 '.jkllloldkjsa.info',   // by Cortez
4503                 '.nnjdksfornms.info',   // by Rico
4504                 '.mcmdkkksaoka.info',   // by Cortez
4505                 '.srattaragfon.info',   // by Cortez
4506                 '.yreifnnonoom.info',   // by Rico
4507                 '.zjajjsvgeuds.info',   // by Cortez
4508         ),
4509         'admin at ematuranza.com' => array(
4510                 '.ancorlontano.com',
4511                 '.dentroallago.com',
4512                 '.digiovinezza.com',
4513                 '.ematuranza.com',
4514                 '.ilfango.com',
4515                 '.nullarimane.com',
4516                 '.questaimmensa.com',
4517                 '.tentailvolo.com',
4518                 '.unatenerezza.com',
4519                 '.volgondilettose.com',
4520         ),
4521         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4522                 '.bid99df.info',
4523                 '.bj498uf.info',
4524                 '.edeuj84.info',
4525                 '.f4mfid.info',
4526                 '.g4vf03a.info',
4527                 '.j09j4r.info',
4528                 '.jv4r8hv.info',
4529                 '.k43sd3.info',
4530                 '.k4r84d.info',
4531                 '.k4rvda.info',
4532                 '.k4v0df.info',
4533                 '.k903os.info',
4534                 '.k9df93d.info',
4535                 '.kv94fd.info',
4536                 '.ksjs93.info',
4537                 '.l0ks03.info',
4538                 '.l9u3jc.info',
4539                 '.lv043a.info',
4540                 '.nh94h9.info',
4541                 '.m94r9d.info',
4542                 '.s87fvd.info',
4543                 '.v3k0d.info',
4544                 '.v4r8j4.info',
4545                 '.vf044s.info',
4546                 '.vj49rs.info',
4547                 '.vk498j.info',
4548                 '.u03jow.info',
4549         ),
4550         'Nikhil and Brian' => array(
4551                 // by Brian Dieckman (info at iudndjsdhgas.info)
4552                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4553                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4554                 '.ihfjeswouigf.info',   // by Brian, / was not found
4555                 '.iudndjsdhgas.info',   // by Brian, / was not found
4556                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4557                 '.jiatdbdisut.info',    // by Brian, / was not found
4558                 '.jkfierwoundhw.info',  // by Brian, / was not found
4559                 '.kfjeoutweh.info',             // by Brian, / was not found
4560                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4561                 '.oudjskdwibfm.info',   // by Brian, / was not found
4562                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4563                 '.itxbsjacun.info',             // by Nikhil, / was not found
4564                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4565                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4566                 '.najedncdcounrd.info', // by Nikhil, / was not found
4567                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4568                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4569                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4570                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4571                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4572                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4573                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4574                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4575                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4576         ),
4577         'wealth777 at gmail.com' => array(      // by Henry Ford
4578                 '.brutal-forced.com',
4579                 '.library-bdsm.com',
4580                 '.rape-fantasy.us',
4581         ),
4582         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4583                 '.purerotica.com',
4584                 '.richsex.com',
4585                 '.servik.net',
4586                 '.withsex.com',
4587         ),
4588         'dreamteammoney.com' => array(
4589                 '.dreamteammoney.com',  // dtmurl.com related
4590                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4591         ),
4592         'KLIK VIP Search and family' => array(
4593                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4594                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4595                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4596                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4597                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4598                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4599                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4600         ),
4601         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4602                 '.antivirs.info',
4603                 '.antivirus1.info',
4604                 '.antivirus2.info',
4605         ),
4606         'wasam at vangers.net and family' => array(
4607
4608                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4609                 '.bahatoca.org',
4610                 '.digestlycos.org',
4611                 '.educativaanale.info',
4612                 '.guildstuscan.org',
4613                 '.isaakrobbins.info',
4614                 '.isfelons.org',
4615                 '.lvwelevated.org',
4616                 '.macphersonaca.org',
4617                 '.markyaustrian.org',
4618                 '.michelepug.org',
4619                 '.opalbusy.info',
4620                 '.quijotebachata.info',
4621                 '.salthjc.info',
4622                 '.shogunnerd.info',
4623                 '.solarissean.org',
4624                 '.sparkgsx.info',
4625                 '.tarzanyearly.org',
4626                 '.tulabnsf.org',
4627                 '.vaccarinos.org',
4628
4629                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4630                 '.e2007.info',
4631                 '.cmoss.info',
4632
4633                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4634                 '.finddesk.org',
4635                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4636                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4637                 '.rcatalog.org',
4638                 '.sbitzone.org',
4639
4640                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4641                 '.cheapns.org',
4642                 '.my-top.net',
4643                 '.sfind.net',
4644                 '.sspot.net',
4645                 '.suvfind.info',
4646
4647                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4648                 '.trumber.com',
4649
4650                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4651                 '.blogduet.org',
4652                 '.carelf.info',
4653                 '.cmagic.org',
4654                 '.cspell.org',
4655                 '.dspark.org',
4656                 '.dtonic.org',
4657                 '.mcharm.info',
4658                 '.mslook.info',
4659                 '.phpdinnerware.info',
4660                 '.rnation.org',
4661                 '.uzing.org',
4662
4663                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4664                 '.allbar.info',
4665                 '.allersearch.org',
4666                 '.allzoom.org',
4667                 '.dynall.org',
4668                 '.fastopia.org',
4669                 '.offasfast.info',
4670                 '.rblast.org',
4671                 '.rchistes.info',
4672                 '.rette.org',
4673                 '.shufflequince.org',
4674                 '.suvlook.org',
4675
4676                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4677                 '.290cabeza.org',
4678                 '.bossierpainted.org',
4679                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4680                 '.definekonica.info',   // Admin: tvaals at vangers.net
4681                 '.gradetelemundo.info',
4682                 '.hydraulickin.info',
4683                 '.indicadorestmj.info',
4684                 '.keeleykincaid.org',
4685                 '.kleenbowser.info',
4686                 '.pipnickname.info',
4687                 '.pacolily.org',
4688                 '.redeemtrabalho.info',
4689                 '.scanmakerchua.info',
4690                 '.titanmessina.info',
4691                 '.tragratuit.org',
4692                 '.yeareola.info',
4693         ),
4694         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4695                 '.canadianmedsworld.info',      // 84.252.133.112
4696                 '.tabsdrugstore.info',          // 84.252.133.114
4697                 '.tabsstore.info',                      // 84.252.133.114
4698                 '.topcholesterol.info',         // 84.252.133.132
4699         ),
4700         'be.cx' => array(
4701                 '.be.cx',
4702                 '.ca.cx',
4703         ),
4704         'john780321 at yahoo.com' => array(     // by John  Brown
4705                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4706                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4707                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4708         ),
4709         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4710                 '.bertela.info',
4711                 '.forblis.info',
4712                 '.frenallo.info',
4713                 '.goyahoo.info',
4714                 '.herbak.info',
4715                 '.kiokast.info',
4716                 '.nerenok.info',
4717                 '.pestgets.info',
4718                 '.snukker.info',
4719                 '.thegetspons.info',
4720         ),
4721         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4722                 '.bobop.info',
4723                 '.kwwwe.info',
4724                 '.piikz.info',
4725                 '.moosm.info',
4726                 '.vvvw.info',
4727         ),
4728         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4729                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4730                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4731                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4732                 '.jplingood.com',       // 125.65.112.15
4733                 '.linenew.com',         // 203.191.148.96
4734                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4735                 '.yzlin.com',           // 220.162.244.36
4736         ),
4737         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4738                 '.1111mb.com',
4739                 '.2sex18.com',
4740                 '.69porn1.com',
4741         ),
4742         'ECTechnology' => array(
4743                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4744                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4745                 '.automouse.jp',
4746         ),
4747         'lyqz at 21cn.com' => array(
4748                 '.japangame1.com',
4749                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4750                 '.livedoor1.com',
4751                 '.ragnarokonline1.com',
4752                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4753         ),
4754         'kingrou at hotmail.com' => array(      // by yangjianhe
4755                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4756                 '.453787.com',
4757         ),
4758         'anpaul541000 at 163.com' => array(     // by su qiuqing
4759                 '.cetname.com',                 // 222.77.185.87
4760                 '.jpgamer.net',                 // 220.247.157.106
4761                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4762                 '.lovejptt.com',                // 222.77.185.87
4763                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4764                 '.playncsoft.net',              // 220.247.157.106
4765         ),
4766         'abc00613 at 163.com' => array( // by guo yong
4767                 '.avtw1068.com',                // 64.74.223.11
4768                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4769                 '.djkkk66990.com',              // 68.178.232.99
4770                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4771         ),
4772         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4773                 '.cmonfofo.com',
4774                 '.discutbb.com',
4775         ),
4776         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4777                 '.preca.info',
4778                 '.skiaggi.info',
4779                 '.scrianal.info',
4780                 '.tageom.info',
4781         ),
4782         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4783                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4784                 '.inpros.net',                  // 202.181.98.79
4785                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4786         ),
4787         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4788                 '.ec51.com',
4789                 '.ec51.net',
4790         ),
4791         'abbevillelaties at yahoo.fr etc' => array(
4792                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4793                 '.ringtones-rate.com',
4794                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4795                 '.special-ringtones.net',
4796         ),
4797         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4798                 '.1sgsc.info',
4799                 '.3h4r89h.info',
4800                 '.3v44dd.info',
4801                 '.6rfuh6.info',
4802                 '.84hd8.info',
4803                 '.94bui89.info',
4804                 '.agysb3.info',
4805                 '.asdjhs.info',
4806                 '.bcvnrth.info',
4807                 '.bheb4r.info',
4808                 '.bhiuno.info',
4809                 '.biug7g.info',
4810                 '.bjb5f4.info',
4811                 '.bob8g7g.info',
4812                 '.br89bdd.info',
4813                 '.bsa3h.info',
4814                 '.bsieb8.info',
4815                 '.basbiubf.info',
4816                 '.bobwwfs2.info',
4817                 '.ciuv9t.info',
4818                 '.dbmdx4.info',
4819                 '.dbrjms.info',
4820                 '.dbtcm.info',
4821                 '.dff9ghu.info',
4822                 '.dfshbb.info',
4823                 '.dgd4ffdh.info',
4824                 '.dh3ge.info',
4825                 '.duc86jh.info',
4826                 '.ergth45.info',
4827                 '.f78bf7ffb.info',
4828                 '.gbdfbo4.info',
4829                 '.ger45.info',
4830                 '.gnvnrrg.info',
4831                 '.h47he7.info',
4832                 '.h488hbd4.info',
4833                 '.hd72b94.info',
4834                 '.he74b7.info',
4835                 '.hfujfnr.info',
4836                 '.husdhd42.info',
4837                 '.hbwje.info',
4838                 '.itg87gji.info',
4839                 '.iugiougiuh.info',
4840                 '.jhd4f4aa.info',
4841                 '.jshd73.info',
4842                 '.krhpgd.info',
4843                 '.lyihjn.info',
4844                 '.nfyjnfj.info',
4845                 '.oihbv.info',
4846                 '.os44fvs.info',
4847                 '.sdfsd3.info',
4848                 '.sdiug4.info',
4849                 '.sdkufhh.info',
4850                 '.sdugb4f.info',
4851                 '.skdbf.info',
4852                 '.sipiv78.info',
4853                 '.sudbfb.info',
4854                 '.tymbbmy.info',
4855                 '.uilhjk.info',
4856                 '.vi87vub.info',
4857                 '.vfuyf87f.info',
4858                 '.viyvvj877.info',
4859                 '.w7fc8eu.info',
4860                 '.wefg43g.info',
4861                 '.xbrch78e.info',
4862                 '.ywsfu.info',
4863                 '.zxcbiv.info',
4864         ),
4865         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4866                 '.abofios.info',
4867                 '.amlekfn.info',
4868                 '.amlkdoie.info',
4869                 '.amkslewq.info',
4870                 '.alemfu.info',
4871                 '.aloweks1.info',
4872                 '.alposd3.info',
4873                 '.bamhpb.info',
4874                 '.bhjkb.info',
4875                 '.bjqnj.info',
4876                 '.cvcxcbhpr.info',
4877                 '.czoypaiat.info',
4878                 '.dbpmgc.info',
4879                 '.dgvogrxs.info',
4880                 '.dldksf.info',
4881                 '.dlor6za.com',
4882                 '.dmkoiew.info',
4883                 '.eewrefr.info',
4884                 '.eladne.info',
4885                 '.elksem.info',
4886                 '.elwpod.info',
4887                 '.emlwkdnr.info',
4888                 '.esgmyqk.info',
4889                 '.fauqv.info',
4890                 '.fgxkgy.info',
4891                 '.fhryns.info',
4892                 '.fj38n4g.info',
4893                 '.fjnesal.info',
4894                 '.fmkfoe.info',
4895                 '.fqkcfldtr.info',
4896                 '.fwcigpdwz.info',
4897                 '.fyhik.info',
4898                 '.glrkje.info',
4899                 '.gwkslfq.info',
4900                 '.gwjracvh.info',
4901                 '.hihopepe.info',
4902                 '.hwlyggbkw.info',
4903                 '.hmwbfw.info',
4904                 '.hthyeb.info',
4905                 '.iaofkyaw.info',
4906                 '.uldkxuiw.info',
4907                 '.is7c6w4.info',
4908                 '.ivuddhdk.info',
4909                 '.jgfndjem.info',
4910                 '.jgmdlek.info',
4911                 '.jkrnvmpad.info',
4912                 '.jqujn.info',
4913                 '.jvgmmba.info',
4914                 '.kbaur.info',
4915                 '.kgjindptv.info',
4916                 '.kleo7s9.info',
4917                 '.lezfgam.info',
4918                 '.lfaasy.info',
4919                 '.ljpdjki.info',
4920                 '.lmnpis.info',
4921                 '.lpzcu2f.info',
4922                 '.lrptn.info',
4923                 '.lursqt.info',
4924                 '.mgkabviil.info',
4925                 '.mhtknjyt.info',
4926                 '.mksuuku.info',
4927                 '.mkyky.info',
4928                 '.mloaisn.com',
4929                 '.mlsiknd.info',
4930                 '.mthqz.info',
4931                 '.nnooq.info',
4932                 '.nohhylvc.info',
4933                 '.nuprndsye.info',
4934                 '.nsoelam.info',
4935                 '.nykobczv.info',
4936                 '.nzuhli.info',
4937                 '.odyqzgylr.info',
4938                 '.oidiau.info',
4939                 '.oitzkw.info',
4940                 '.okdmrpz.info',
4941                 '.ooinziti.info',
4942                 '.ortqr.info',
4943                 '.osmkpnekv.info',
4944                 '.ozkzfih.info',
4945                 '.p3ix8wc.com',
4946                 '.piwyt.info',
4947                 '.pfkijrm.info',
4948                 '.pjktcragi.info',
4949                 '.pleoz.info',
4950                 '.plvqm73.info',
4951                 '.pqyrem.info',
4952                 '.qipgqd.info',
4953                 '.qlewixu.com',
4954                 '.qmlskme.info',
4955                 '.qtuff.info',
4956                 '.quoga.info',
4957                 '.quqz.info',
4958                 '.qzxuw.info',
4959                 '.rcaidegp.info',
4960                 '.rlkmdi.info',
4961                 '.rnsoiov.info',
4962                 '.rnwlams.info',
4963                 '.rprgkgqld.info',
4964                 '.rubqvxrn.info',
4965                 '.spqxstl.info',
4966                 '.syckoqjql.info',
4967                 '.tbirb.info',
4968                 '.thalc34.info',
4969                 '.tiabq.info',
4970                 '.tszzpjr.info',
4971                 '.tyjdyn.info',
4972                 '.twgugpns.info',
4973                 '.uaezrqp.info',
4974                 '.udlkasu.info',
4975                 '.uejncyf.info',
4976                 '.ukvflb.info',
4977                 '.ugsuv.info',
4978                 '.ukhgpcp.info',
4979                 '.urprzn.info',
4980                 '.uuhememkw.info',
4981                 '.yalc7en.info',
4982                 '.ybuid.info',
4983                 '.yhdkgfob.info',
4984                 '.ymenq.info',
4985                 '.ynlyb.info',
4986                 '.vieatlubk.info',
4987                 '.vltcaho.info',
4988                 '.wlamsiek.info',
4989                 '.wlerp.info',
4990                 '.wlmtshzi.info',
4991                 '.wmlkams.info',
4992                 '.wprqd.info',
4993                 '.wpyspszi.info',
4994                 '.xdscc.info',
4995                 '.xdvy.info',
4996                 '.xeypku.info',
4997                 '.xsrxh.info',
4998                 '.xwjyrpfe.info',
4999                 '.yxcqw.info',
5000                 '.zhbktrh.info',
5001                 '.zspepn.info',
5002                 '.zsxtz.info',
5003         ),
5004         'survi at poczta.fm and smiley' => array(
5005                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5006                 '.ppert.info',
5007                 '.pperta.info',
5008                 '.pperts.info',
5009                 '.pprtuis.info',
5010                 '.13iuey.info',         // ":>"
5011                 '.13jkhs.info',
5012                 '.13lksa.info',
5013                 '.13rxtx.info',
5014                 '.13slkd.info',
5015                 '.13zaer.info',
5016         ),
5017         'admin at esemeski.com' => array(       // by Jan Kalka
5018                 '.kxils.info',
5019                 '.kuaph.info',
5020                 '.lncdc.info',
5021                 '.lsqpd.info',
5022                 '.mczed.info',
5023                 '.npous.info',
5024                 '.obgju.info',
5025         ),
5026         'LiquidNetLimited.com' => array(
5027                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5028
5029                 // FateBack.com related
5030                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5031                 '.bebto.com',
5032                 '.fateback.com',
5033                 '.undonet.com',
5034                 '.yoll.net',
5035                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5036
5037                 // 50webs.com                   // 64.72.112.10
5038                 // dns2.50webs.com              // 64.72.112.11
5039                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5040                 // dns2.freehostia.com  // 64.72.112.13
5041                 // serv3.freehostia.com // 64.72.112.14
5042                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5043                 // mail.50webs.com              // 64.72.112.26
5044                 // supremecenter41.com  // 64.72.112.52
5045                 // 50webs2.50webs.com   // 64.72.112.89
5046                 // supremecenter39.com  // 64.72.112.103
5047
5048                 // by LiquidNet Ltd. (support at propersupport.com)
5049                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5050                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5051                         'duoservers.com',               // 216.65.1.130
5052
5053                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5054         ),
5055         'domains at agava.com' => array(
5056                 '.h18.ru',
5057                 '.hut1.ru',
5058         ),
5059         'wlmx009 at hotmail.com' => array(
5060                 '.123lineage.com',
5061                 '.ff11-info.com',
5062                 '.lastlineage.com',
5063                 '.lineage2-ol.com',
5064                 '.lineage2006.com',
5065                 '.lineagefirst.com',
5066         ),
5067         'Zettahost.com' => array(
5068                 '.atspace.biz',         // sales at zettahost.com
5069                 '.atspace.com',         // abuse at zettahost.com
5070                 '.atspace.name',        // NS atspace.com
5071                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5072                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5073         ),
5074         'hlq9814 at 163.com' => array(
5075                 '.kotonohax.com',               // by ling bao
5076                 '.ragnarox.mobi',               // by lin bao, *.exe download
5077                 '.rokonline-jp.com',    // by hang long
5078         ),
5079         '77ch.jp' => array(
5080                 '.77ch.jp',
5081                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5082         ),
5083         'serchportal at mail.ru' => array(      // by Namu Adin
5084                 '.43fert.info',
5085                 '.belis.info',
5086                 '.bonu.info',
5087                 '.chelsite.info',
5088                 '.chparael.info',
5089                 '.cool9f.info',
5090                 '.dada2.info',
5091                 '.dorplanete.info',
5092                 '.dormonde.info',
5093                 '.dorprojet.info',
5094                 '.faciledor.info',
5095                 '.fastsearchgroup.info',
5096                 '.gerta0.info',
5097                 '.getse.info',
5098                 '.gopvl.info',
5099                 '.knopki.info',
5100                 '.propidor.info',
5101                 '.quicksearchnet.info',
5102                 '.ret5.info',
5103                 '.slimfastsearch.info',
5104                 '.virtualpvl.info',
5105                 '.vpvla.info',
5106                 '.xjdor.info',
5107                 '.zhopki.info',
5108         ),
5109         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5110                 '*.444mb.com',          // Free hosting
5111                 'urlnip.com',           // Redirection
5112         ),
5113         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5114                 '.1fasttimesatnau.info',
5115                 '.1freecybersex.info',
5116                 '.1freexxxcomics.info',
5117                 '.1fuckingmywife.info',
5118                 '.1pornpreview.info',
5119                 'www.ru',                                       // by (service at demos.ru), redirection
5120         ),
5121         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5122                 '.adultschat.info',
5123                 '.livecamonline.info',
5124                 '.webcam4u.info',
5125                 '.younghot.info',
5126         ),
5127         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5128                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5129
5130                 // 209.51.196.242
5131                 '.22web.net',
5132                 '.2kool4u.net',
5133                 '.9skul.com',
5134                 '.alojalo.info',
5135                 '.byet.net',
5136                 '.byethost2.com',
5137                 '.byethost3.com',
5138                 '.byethost4.com',
5139                 '.byethost5.com',
5140                 '.byethost6.com',
5141                 '.byethost7.com',
5142                 '.byethost8.com',
5143                 '.byethost9.com',
5144                 '.byethost10.com',
5145                 '.byethost11.com',
5146                 '.byethost12.com',
5147                 '.byethost13.com',
5148                 '.byethost14.com',
5149                 '.byethost15.com',
5150                 '.byethost16.com',
5151                 '.byethost17.com',
5152                 '.byethost18.com',
5153                 '.headshothost.net',
5154                 '.hostwq.net',
5155                 '.mega-file.net',
5156                 '.truefreehost.com',
5157
5158                 '.ifastnet.com',        // 209.51.196.243
5159
5160                 // 209.190.16.82(mx1.byet.org)
5161                 '.1sthost.org',
5162                 '.4sql.net',
5163                 '.byet.org',
5164                 '.hyperphp.com',
5165                 '.kwikphp.com',
5166                 '.my-php.net',
5167                 '.my-place.us',
5168                 '.my-webs.org',
5169                 '.netfast.org',
5170                 '.php0h.com',
5171                 '.php1h.com',
5172                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5173                 '.phpnet.us',
5174                 '.prohosts.org',
5175                 '.pro-php.org',
5176                 '.prophp.org',
5177                 '.sprinterweb.net',
5178                 '.swiftphp.com',
5179                 '.xlphp.net',
5180
5181                 // 209.190.16.83(mx2.byet.org)
5182                 '.instant-wiki.net',
5183
5184                 // 209.190.16.84(mx3.byet.org)
5185
5186                 // 209.190.16.85(mx4.byet.org)
5187                 '.instant-blog.net',
5188                 '.instant-forum.net',
5189
5190                 '.byethost.com',                        // 209.190.18.138
5191         ),
5192         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5193                 '.analmoviesite.info',
5194                 '.bestgirlssex.info',
5195                 '.boxvagina.info',
5196                 '.cyberlivegirls.info',
5197                 '.hotredgirls.info',
5198                 '.forsexlove.info',
5199                 '.hotnudezone.info',
5200                 '.hotredpussy.info',
5201                 '.lesbians-live.info',
5202                 '.lesbians-on-cam.info',
5203                 '.onlinegirlssite.info',
5204                 '.sexloveonline.info',
5205                 '.teensexcard.info',
5206                 '.teensexdirect.info',
5207                 '.topnudesite.info',
5208                 '.vaginafree.info',
5209                 '.webcam-show.info',
5210                 '.webcamshow.info',
5211                 '.youngsexchat.info',
5212                 '.yourcumshot.info',
5213         ),
5214         'stocking.club at gmail.com' => array(
5215                 '.adulthotmodels.com',          // by David Zajwzran
5216                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5217                 '.cash-call.info',                      // by David Theissen
5218                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5219                 '.cheap-online-viagra.info',    // by David Theissen
5220                 '.drugcleansing.net',           // by David Zajwzran
5221                 '.men-health-zone.com',         // by David Theissen
5222                 '.purchase-viagra.info',        // by David Theissen
5223                 '.realdrunkengirls.biz',        // by David Theissen
5224                 '.sextoyslife.com',                     // by David Zajwzran
5225                 '.sexysubjects.info',           // by David Zajwzran
5226                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5227                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5228                 '.travelcardsite.info',         // by David Theissen
5229         ),
5230         'lustiq at p5com.com' => array(
5231                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5232                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5233         ),
5234         'web at 6jy.com' => array(
5235                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5236                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5237         ),
5238         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5239                 '.auto-fgen.info',
5240                 '.fast-marketing.info',
5241                 '.from-usa.info',
5242                 '.generic-pharm.info',
5243                 '.pharm-directory.info',
5244                 '.popular-people.info',
5245                 '.safe-health.info',
5246                 '.star-celebrities.info',
5247                 '.super-home-biz.info',
5248                 '.top5-auto.info',
5249                 '.top5-cars.info',
5250                 '.vip-furniture.info',
5251                 '.vip-pc.info',
5252                 '.vip-pets.info',
5253         ),
5254         'abuse at search-store.org' => array(
5255                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5256         ),
5257         'Leading Edge Marketing Inc.' => array(
5258                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5259                 '.abemedical.com',
5260                 '.attractwomennow.com',
5261                 '.bettersexmall.com',
5262                 '.buymaxoderm.com',
5263                 '.buyvprx.com',
5264                 '.genf20.com',
5265                 '.infinityhealthnews.com',
5266                 '.istnewsletter.com',
5267                 '.leadingedgecash.com',
5268                 '.leadingedgeherbals.com',
5269                 '.leadingedgevipsonly.com',
5270                 '.lecash.com',
5271                 '.leminfo.com',
5272                 '.proextendersystem.com',
5273                 '.provestra.com',
5274                 '.semenax.com',
5275                 '.shavenomore.com',
5276                 '.theedgenewsletter.com',
5277                 '.vigorelle.com',
5278                 '.vigrx.com',
5279                 '.vigrxplus.com',
5280                 '.wbstnewsletter.com',
5281         ),
5282         'clickx at bk.ru' => array(     // by Alexey Enrertov
5283                 '.coolget*.info' =>
5284                         '#^(?:.*\.)?' . 'coolget' .
5285                         '(?:bus|find|news|php|place|post|srch)' .
5286                         '\.info$#',
5287                 '.coolgirl*.info' =>
5288                         '#^(?:.*\.)?' . 'coolgirl' .
5289                         '(?:apple|fish|search)' .
5290                         '\.info$#',
5291                 '.coolmeet*.info' =>
5292                         '#^(?:.*\.)?' . 'coolmeet' .
5293                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5294                         '\.info$#',
5295                 '.cool**.info' =>
5296                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5297                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5298                         '\.info$#',
5299                 '.freseasy*.info' =>
5300                         '#^(?:.*\.)?' . 'freseasy' .
5301                         '(?:apple|click|find|fish|post|search)' .
5302                         '\.info$#',
5303                 '.fres**.info' =>
5304                         '#^(?:.*\.)?' .
5305                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5306                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5307                         '\.info$#',
5308                         // These are not found yet:
5309                         // fresgirlsrch.info
5310                         // fresadultapple.info
5311                         // fresadultclick.info
5312                         // frestheplace.info
5313
5314                 // 66.232.113.44
5315                 '.nuhost.info',
5316                 '.susearch.info',
5317
5318                 // 66.232.126.74(hv94.steephost.com)
5319                 '.dilej.com',
5320                 '.fyvij.com',
5321                 '.howus.com',
5322                 '.jisyn.com',
5323                 '.kaxem.com',
5324                 '.mihug.com',
5325                 '.mobyb.com',
5326                 '.qidat.com',
5327                 '.qihek.com',
5328                 '.ryzic.com',
5329                 '.sasuv.com',
5330                 '.tuquh.com',
5331                 '.vehyq.com',
5332                 '.wezid.com',
5333                 '.wifuj.com',
5334                 '.xijyt.com',
5335                 '.zuqyn.com',
5336
5337                 '.mosugy.com',
5338         ),
5339         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5340                 '.hitsearching.info',
5341                 '.hugeamountdata.info',
5342                 '.megafasthost.info',
5343                 '.real-big-host.info',
5344                 '.search4freez.info',
5345                 '.yasech.info',
5346
5347                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5348                 '.bymire.com',
5349
5350                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5351                 '.ligiwa.com',
5352
5353                 '.mubeho.com',
5354         ),
5355         'ice--man at mail.ru related' => array(
5356                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5357                 '.bestcreola.com',
5358                 '.crekatierra.com',
5359                 '.creolafire.com',
5360                 '.crolik.com',
5361                 '.croller.cn',
5362                 '.ecrmx.com',
5363                 '.eflashpoint.com',
5364                 '.exoticmed.com',
5365                 '.feelview.com',
5366                 '.greatexotic.com',
5367                 '.icrtx.com',
5368                 '.icyhip.com',
5369                 '.icyiceman.com',
5370                 '.icypopular.com',
5371                 '.iflashpoint.com',
5372                 '.justmdx.com',
5373                 '.kiliusgroup.com',
5374                 '.klickerr.com',
5375                 '.klickerrworld.com',
5376                 '.kreolic.com',
5377                 '.margansitio.com',
5378                 '.margantierra.com',
5379                 '.mimargan.com',
5380                 '.oilkeys.com',
5381                 '.planetmdx.com',
5382                 '.thekeyse.com',
5383                 '.viewgreat.com',
5384                 '.yourcreola.com',
5385
5386                 // 69.46.23.48
5387                 '.bestkilius.com',
5388                 '.crekadirecto.com',
5389                 '.getflashsite.com',
5390                 '.sucreka.com',
5391                 '.superkilius.com',
5392
5393                 // 69.46.23.48 by bing-16 at ftunez.org
5394                 '.bovorup.cn',
5395                 '.litotar.cn',
5396                 '.nihydec.cn',
5397
5398                 // 66.232.112.175 by bing-32 at ftunez.org
5399                 '.lasyxy.cn',
5400
5401                 // by bing-65 at ftunez.org
5402                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5403                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5404                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5405                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5406                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5407                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5408                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5409                 '.saralar.cn',          // 66.232.120.113(non-existent)
5410                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5411
5412                 // 69.46.23.48 by clarkson-34 at ftunez.org
5413                 '.bumora.cn',
5414                 '.byxite.cn',
5415                 '.byxuqu.cn',
5416                 '.jadama.cn',
5417                 '.kybope.cn',
5418                 '.mefeki.cn',
5419                 '.mokiso.cn',
5420                 '.niqeme.cn',
5421                 '.pukafo.cn',
5422                 '.qesaxa.cn',
5423                 '.toxezi.cn',
5424                 '.tujudy.cn',
5425                 '.tutike.cn',
5426
5427                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5428                 '.cabino.cn',
5429                 '.cuwace.cn',
5430                 '.ferazi.cn',
5431                 '.gigywy.cn',
5432                 '.lapype.cn',
5433                 '.mewabe.cn',
5434                 '.pezegy.cn',
5435                 '.pyzuza.cn',
5436                 '.qypony.cn',
5437                 '.ropesy.cn',
5438                 '.wadyfe.cn',
5439
5440                 // 69.46.23.48 clarkson-58 at ftunez.org
5441                 '.becabe.cn',
5442                 '.biciqy.cn',
5443                 '.bezymu.cn',
5444                 '.cifori.cn',
5445                 '.ciwyxi.cn',
5446                 '.dobari.cn',
5447                 '.dusofe.cn',
5448                 '.dutyda.cn',
5449                 '.dykanu.cn',
5450                 '.fakexu.cn',
5451                 '.fylema.cn',
5452                 '.godymo.cn',
5453                 '.hyhaxy.cn',
5454                 '.ganosi.cn',
5455                 '.kuxyju.cn',
5456                 '.lacezy.cn',
5457                 '.lonyru.cn',
5458                 '.lycato.cn',
5459                 '.nykyby.cn',
5460                 '.qyhuko.cn',
5461                 '.redere.cn',
5462                 '.riwimu.cn',
5463                 '.wopary.cn',
5464                 '.xizity.cn',
5465                 '.xuxusa.cn',
5466
5467                 // by entretov-28 at ftunez.org
5468                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5469                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5470
5471                 // 69.46.23.48 by entretov-32 at ftunez.org
5472                 '.cihuji.cn',
5473                 '.deqyve.cn',
5474                 '.genefa.cn',
5475                 '.gujyju.cn',
5476                 '.hasadu.cn',
5477                 '.hedomi.cn',
5478                 '.kecicy.cn',
5479                 '.kipabo.cn',
5480                 '.manunu.cn',
5481                 '.musoru.cn',
5482                 '.myvuna.cn',
5483                 '.pikybe.cn',
5484                 '.riqawo.cn',
5485                 '.rufuxy.cn',
5486                 '.vyfilu.cn',
5487                 '.xadule.cn',
5488                 '.zolaxe.cn',
5489                 '.zerixu.cn',
5490
5491                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5492                 '.dozoda.cn',
5493                 '.nemipu.cn',
5494
5495                 // entretov-84 at ftunez.org
5496                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5497                 '.favulol.cn',          // 66.232.120.115(*snip*)
5498                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5499
5500                 // 69.46.23.48 by jeremy-57 at ftunez.org
5501                 '.duzele.cn',
5502                 '.figede.cn',
5503                 '.fiwany.cn',
5504                 '.gyfalu.cn',
5505                 '.jepylo.cn',
5506                 '.nuqumy.cn',
5507
5508                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5509                 '.burahu.cn',
5510                 '.jydijy.cn',
5511                 '.komyby.cn',
5512                 '.najepa.cn',
5513                 '.pylobu.cn',
5514                 '.qofoly.cn',
5515                 '.sybuvi.cn',
5516                 '.vycexu.cn',
5517                 '.wotyqo.cn',
5518                 '.xudoli.cn',
5519
5520                 // by entretov-28 at ftunez.org
5521                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5522
5523                 // by entretov-37 at ftunez.org
5524                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5525                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5526
5527                 // 66.232.112.175 by entretov-86 at ftunez.org
5528                 '.faweji.cn',
5529                 '.jypaci.cn',
5530                 '.xozuso.cn',
5531
5532                 // 69.46.23.48 by miles-37 at ftunez.org
5533                 '.beqymo.cn',
5534                 '.ceqibi.cn',
5535                 '.dyraqo.cn',
5536                 '.qenedo.cn',
5537                 '.qurypa.cn',
5538                 '.siluvo.cn',
5539                 '.tujala.cn',
5540                 '.wukuwi.cn',
5541                 '.xenibo.cn',
5542                 '.xiculo.cn',
5543                 '.zabemu.cn',
5544
5545                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5546                 '.bevaka.cn',
5547                 '.fysyte.cn',
5548                 '.guxixu.cn',
5549                 '.hatoli.cn',
5550                 '.jitobu.cn',
5551                 '.juxeca.cn',
5552                 '.kifuhy.cn',
5553                 '.licila.cn',
5554                 '.mecomy.cn',
5555                 '.niryko.cn',
5556                 '.noxoco.cn',
5557                 '.qiwysu.cn',
5558                 '.tutysy.cn',
5559
5560                 // by oker-74 at ftunez.org
5561                 '.navufol.cn',
5562
5563                 // by oker-97 at ftunez.org
5564                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5565                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5566                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5567                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5568                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5569                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5570                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5571
5572                 // by polet-20 at ftunez.org
5573                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5574
5575                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5576                 '.gywiqe.cn',
5577                 '.jotapo.cn',
5578                 '.jywixa.cn',
5579
5580                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5581                 '.bawegap.cn',
5582                 '.buremyl.cn',
5583                 '.cilybut.cn',
5584                 '.cutufek.cn',
5585                 '.defypyr.cn',
5586                 '.femaxij.cn',
5587                 '.gelejo.cn',
5588                 '.gocylyv.cn',
5589                 '.kehiqaq.cn',
5590                 '.ninyjit.cn',
5591                 '.ruroruw.cn',
5592                 '.vetehow.cn',
5593
5594                 // 69.46.23.48 sabrosky-85 at ftunez.org
5595                 '.banyla.cn',
5596                 '.bubaqu.cn',
5597                 '.bygage.cn',
5598                 '.dafozy.cn',
5599                 '.kaxyjo.cn',
5600                 '.makyle.cn',
5601                 '.naleto.cn',
5602                 '.pidele.cn',
5603                 '.poqexa.cn',
5604                 '.pymaqo.cn',
5605                 '.qupiqy.cn',
5606                 '.reqefy.cn',
5607                 '.sopocy.cn',
5608                 '.vuhexo.cn',
5609                 '.weryso.cn',
5610                 '.wubula.cn',
5611                 '.xufuxy.cn',
5612                 '.zuhyxu.cn',
5613
5614                 // 69.46.23.48 by tribiani-97 at ftunez.org
5615                 '.dyxorod.cn',
5616                 '.firywoz.cn',
5617                 '.jixezyx.cn',
5618                 '.joveraw.cn',
5619                 '.jowaxup.cn',
5620                 '.nodarej.cn',
5621                 '.pimijom.cn',
5622                 '.tugupeg.cn',
5623
5624                 // 66.232.112.175 by abuse-here at inbox.ru
5625                 '.catybe.cn',
5626                 '.jytame.cn',
5627                 '.wygete.cn',
5628         ),
5629         '74.50.97.*' => array(
5630                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5631                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5632                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5633                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5634                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5635                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5636                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5637                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5638                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5639                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5640                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5641                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5642                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5643                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5644                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5645                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5646
5647                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5648                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5649                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5650                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5651                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5652                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5653                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5654                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5655                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5656                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5657                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5658                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5659                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5660                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5661                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5662                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5663                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5664                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5665                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5666
5667                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5668                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5669                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5670                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5671                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5672         ),
5673         'nijeoi at hotmai.com' => array(
5674                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5675                 '.bowij.com',
5676                 '.bozib.com',
5677                 '.cavux.com',
5678                 '.dipov.com',
5679                 '.gumoz.com',
5680                 '.hakyb.com',
5681                 '.hehyv.com',
5682                 '.hepyt.com',
5683                 '.howoj.com',
5684                 '.jywaz.com',
5685                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5686                 '.kyheq.com',
5687                 '.kyzad.com',
5688                 '.qicad.com',
5689                 '.qubyd.com',
5690                 '.mocyq.com',
5691                 '.muloq.com',
5692                 '.myxim.com',
5693                 '.nufyp.com',
5694                 '.waqog.com',
5695                 '.wyduc.com',
5696                 '.xefyv.com',
5697                 '.xomej.com',
5698                 '.xomip.com',
5699                 '.xykyl.com',
5700                 '.zakuw.com',
5701                 '.zeliw.com',
5702                 '.zimev.com',
5703                 '.zipif.com',
5704
5705                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5706                 '.tycoco.com',
5707
5708                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5709                 '.pufeqa.com',
5710
5711                 '.xehymi.com',
5712         ),
5713         'niichka at hotmail.com' => array(
5714                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5715                 '.aerosearch.info',
5716                 '.freader.info',
5717                 '.info4searchz.info',
5718                 '.nice-host.info',
5719                 '.realyfast.info',
5720                 '.resuts.info',
5721
5722                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5723                 '.bepoh.com',
5724                 '.gufiq.com',
5725                 '.kedyh.com',
5726                 '.pofyb.com',
5727                 '.rurid.com',
5728                 '.vucaj.com',
5729                 '.vuwir.com',
5730
5731                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5732                 '.bejefe.com',
5733
5734                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5735                 '.tidawu.com',
5736
5737                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5738                 '.rofuqa.com',
5739         ),
5740         'porychik at hot.ee' => array(  // by Igor
5741                 '.tedstate.info',       // "Free Web Hosting"
5742                 '.giftsee.com',
5743         ),
5744         'admin at pertol.info' => array(
5745                 // 81.0.195.189 "Free Web Hosting"
5746                 '.laparka.cn',
5747                 '.mirlos.cn',
5748                 '.oldmoms.cn',
5749
5750                 // 217.11.233.64(timed-out)
5751                 '.ejmpep.cn',   // by admin at pertol.info
5752                 '.ytere.cn',    // by admin at x2t.com
5753
5754                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5755                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5756
5757                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5758                 '.new-greece-travel.com',
5759                 '.peraonline.info',
5760         ),
5761
5762         'aofa at vip.163.com' => array(
5763                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5764                 '.5944.net',
5765         ),
5766         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5767                 '.maxrentcar.info',
5768                 '.newsonyericsson.info',
5769                 '.pornositeworld.biz',
5770                 '.rentcarweb.info',
5771                 '.xxxdomainsex.biz',
5772         ),
5773         'kopper1970 at gmail.com' => array(
5774                 '.cardealerall.info',           // by Green
5775                 '.donatecarsales.info',         // by Sipil
5776                 '.ringtonewilly.info',          // by Sipil
5777                 '.travelstraveling.info',       // by Chinik
5778                 '.viagrabuyonline.org',         // by Sipil
5779                 '.viagraorderbuy.com',          // by Anatol
5780                 '.worldcuptourism.info',        // by Sipil
5781         ),
5782         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5783                 '.globalinfoland.info',
5784                 '.goodlifesearch.info',
5785                 '.hotnetinfo.info',
5786                 '.hotpornmovies.org',
5787                 '.infopilot.info',
5788         ),
5789         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5790                 '.bang-bro.org',
5791                 '.datinghost.info',
5792                 '.hello-craulers.info',
5793                 '.free-blog-host.info',
5794                 '.sucking-boobs.info',
5795         ),
5796         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5797                 '.allcamsguide.info',
5798                 '.camerascams.info',
5799                 '.camerasera.info',
5800                 '.girlcamsworld.info',
5801                 '.hiddenlimocams.info',
5802                 '.redlivecams.info',
5803                 '.spycamsgear.info',
5804                 '.spycamssite.info',
5805                 '.supercamsusa.info',
5806                 '.thecamsnow.info',
5807         ),
5808         '87.242.116.81' => array(
5809                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5810                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5811                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5812                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5813                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5814         ),
5815         '208.70.75.153' => array(
5816                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5817                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5818                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5819                 '.cerc-on.info',
5820                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5821                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5822                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5823                 '.cerc-tr.info',
5824                 '.cerc-tw.info',
5825                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5826                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5827                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5828                 '.cerc-on.org',         // by cerca-one at ya.ru
5829                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5830                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5831                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5832                 '.cerc-tr.org',         // by cerca-one at ya.ru
5833                 '.cerc-tw.org',         // by cerca-one at ya.ru
5834                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5835                 '.cerca-fo.info',
5836                 '.cerca-no.info',
5837                 '.cerca-on.info',
5838                 '.cerca-sv.info',
5839                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5840                 '.cerca-te.info',
5841                 '.cerca-tr.info',
5842                 '.cerca-sx.org',
5843                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5844                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5845                 '.ricerca-fo.info',
5846                 '.ricerca-one.org',
5847                 '.ricerca-sv.org',
5848                 '.ricerca-sx.org',
5849                 '.ricerca-te.org',
5850                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5851                 '.subit01.org',
5852                 '.subit02.org',
5853                 '.subit03.org',
5854                 '.subit04.org',
5855                 '.subit05.org',
5856                 '.subit06.org',
5857                 '.subit01.info',
5858                 '.subit02.info',
5859                 '.subit03.info',
5860                 '.subit04.info',
5861                 '.subit05.info',
5862                 '.subit06.info',
5863         ),
5864         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5865                 '.5-base.com',
5866                 '.pharmacy-style.com',
5867         ),
5868         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5869                 '.ista-2006.ru',
5870                 '.wefas.ru',
5871         ),
5872         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5873                 '.tourismworldsite.info',
5874                 '.yourtourismtravel.info',
5875         ),
5876         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5877                 '.easyfindcar.info',
5878                 '.siteinfosystems.info',
5879         ),
5880         'smesh1155 at gmail.com' => array(
5881                 '.hospitalforyou.info',                 // by Gimmi
5882                 '.thephentermineonline.info',   // by Kipola
5883         ),
5884         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5885                 '.kiski.net.in',
5886                 '.pipki.org.in',
5887                 '.popki.ind.in',
5888                 '.siski.co.in',
5889         ),
5890         'tiptronikmike at mail.com' => array(
5891                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5892                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5893                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5894                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5895                 //'.i0sex.info',                // Michael
5896                 //'.i1sex.info',                // Michael
5897                 //'.i2sex.info',                // Martin
5898                 //'.i3sex.info',                // Martin
5899                 //'.i4sex.info',                // Adulterra
5900                 //'.i5sex.info',                // Adulterra
5901                 //[irvyz]6sex.info not found
5902                 '.i8sex.info',                  // by Martin
5903         ),
5904         'skuarlytronald at mail.com' => array(
5905                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5906                 '.girlsgoingmad.info',          // 64.27.13.120
5907                 '.girlsgonewildside.info',      // 64.27.13.120
5908         ),
5909         '66.232.109.250' => array(
5910                 '.1626pornporno.info',
5911                 '.1851pornporno.info',
5912                 '.1876pornporno.info',
5913                 '.476pornporno.info',
5914         ),
5915         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5916                 '.compactxxx.com',
5917                 '.eadulthost.com',
5918                 '.eadultview.com',
5919                 '.eroticpool.net',
5920                 '.ipornservice.com',
5921                 '.liveadulthost.com',
5922                 '.nudepal.com',
5923                 '.sweetservers.com',
5924         ),
5925         'support at orgija.org' => array(
5926                 '.assfuckporn.org',
5927                 '.dosugmos.org',
5928                 '.fuckporn.org',
5929                 '.girlsdosug.org',
5930                 '.girlsporno.org',
5931                 '.moscowintim.org',
5932                 '.pornass.org',
5933                 '.pornopussy.org',
5934                 '.progirlsporn.org',
5935                 '.pussypornogirls.org',
5936         ),
5937         '125.65.112.93' => array(
5938                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5939                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5940         ),
5941         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5942                 '.beta-google.com',
5943                 '.tv-reklama.info',
5944                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5945                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5946         ),
5947         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5948                 '.abobrinha.org',
5949                 '.aneurysmic.com',              // / not found
5950                 '.physcomp.org',                // / not found
5951                 '.seriedelcaribe2006.org',
5952                 '.refugeeyouthinamerica.com',
5953         ),
5954         'skip_20022 at yahoo.com' => array(
5955                 // 203.174.83.55
5956                 '.a28hosting.info',             // by Bill Jones
5957                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5958                 '.besthentai06.org',    // by yakon
5959         ),
5960         'USFINE.com' => array(
5961                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5962                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5963         ),
5964         '68.178.211.57' => array(
5965                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5966                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5967         ),
5968         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5969                 '.google-yahoo-msn.org',
5970                 '.expedia-travel.org',
5971         ),
5972         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5973                 '.emr5ce.org',
5974                 '.wfe7nv.org',
5975                 '.xyr99yx.org',
5976         ),
5977         '203.171.230.39' => array(
5978                 // by 51shell at 163.com
5979                 '.amatou-fc2.com',
5980
5981                 // registrar bizcn.com, iframe + cursor
5982                 '.playonlinenc.com',
5983                 '.playboss-jp.com',
5984         ),
5985         'Digi-Rock.com' => array(
5986                 '.rom776.com',
5987                 // owner-organization: DIGIROCK, INC.
5988                 // owner-email: domain-contact at digi-rock.com
5989                 // with an external ad-and-JavaScript,
5990                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
5991                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
5992         ),
5993         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
5994                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
5995                 '.getrun.cn',                           // 208.73.34.48
5996                 '.ipod-application.info',       // NO IP
5997                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
5998                 '.stonesex.info',                       // NO IP, was 74.50.97.136
5999         ),
6000         'germerts at yandex.ru' => array(
6001                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6002                 '.andatra.info',
6003                 '.banchitos.info',
6004                 '.batareya.info',
6005                 '.blevota.info',
6006                 '.broneslon.info',
6007                 '.gamadril.info',
6008                 '.gipotenuza.info',
6009                 '.govnosaklo.info',
6010                 '.muflon.info',
6011                 '.termitnik.info',
6012                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6013         ),
6014         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6015                 '.acronis-true-image.info',
6016                 '.calcio-xp.info',
6017                 '.cosanova.info',
6018                 '.cose-rx.info',
6019                 '.dictip.info',
6020                 '.findig.info',
6021                 '.fotonow.info',
6022                 '.lavoro-tip.info',
6023                 '.loan-homes.info',
6024                 '.mionovita.info',
6025                 '.mustv.info',
6026                 '.newsnaked.info',
6027                 '.online-tod.info',
6028                 '.opakit.info',
6029                 '.opanow.info',
6030                 '.opriton.info',
6031                 '.porta-bl.info',
6032                 '.refdif.info',
6033                 '.xzmovie.info',
6034         ),
6035         '84.252.148.120 etc' => array(
6036                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6037                 '.planetavilton.info',  // 84.252.148.120
6038                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6039         ),
6040         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6041                 '.99jk.com',
6042                 '.99jk.com.cn',
6043                 '.99jk.cn',
6044         ),
6045         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6046                 '.kliktop.biz',
6047                 '.kliktop.org',
6048                 '.pharmatop.us',
6049                 '.supertop.us',
6050                 '.supervaizer.info',
6051         ),
6052         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6053                 '.freeamateursexx.info',        // 81.0.195.228
6054                 '.freeanalsexx.info',           // 217.11.233.97
6055                 '.freegaysexx.info',            // 81.0.195.228
6056         ),
6057         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6058                 '.abbhi.info',
6059                 '.gayblogguide.biz',
6060                 '.huope.info',
6061                 '.thebdsmday.info',
6062                 '.zioprt.info',                 // 89.149.228.237
6063         ),
6064         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6065                 '.boblisk.info',
6066                 '.factyri.info',
6067                 '.jorge1.info',
6068         ),
6069         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6070                 '.bestmindstorm.org',
6071                 '.redstoreonline.org',
6072         ),
6073         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6074                 '.8e8ae.net',
6075                 '.c-cock.com',
6076                 '.fa59eaf.com',
6077                 '.set-place.net',
6078                 '.sex-beauty.net',
6079         ),
6080         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6081                 '.tomdir.info',
6082                 '.tomdirdirect.info',
6083                 '.tomdirworld.info',
6084                 '.treton.info',
6085                 '.trefas.info',
6086                 '.tretonmondo.info',
6087                 '.unefout.info',
6088                 '.unefoutprojet.info',
6089                 '.unitfree.info',
6090                 '.vilret.info',
6091                 '.vilttown.info',
6092                 '.votrefout.info',
6093                 '.warmfind.info',
6094                 '.warptop.info',
6095                 '.wildtram.info',
6096                 '.xofind.info',
6097                 '.xopdiscover.info',
6098                 '.xopfind.info',
6099                 '.xoplocate.info',
6100                 '.xopseek.info',
6101                 '.xpfirst.info',
6102                 '.xphighest.info',
6103                 '.xptop.info',
6104         ),
6105         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6106                 '.myviagrasite.com',    // 80.74.153.2
6107                 '.thecanadianmeds.com', // 80.74.153.17
6108         ),
6109         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6110                 '.bigemot.com',                         // 217.11.233.34, / not found
6111                 '.espharmacy.com',                      // 217.11.233.34
6112                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6113                 '.ringtonecooler.com',          // 217.11.233.34
6114         ),
6115         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
6116                 // 220.166.64.44
6117                 '.okwit.com',
6118                 '.sakerver.com',
6119                 '.motewiki.net',
6120
6121                 '.8568985.com',         // 61.139.126.10 ns *.myhostadmin.net
6122
6123                 // 61.139.126.47, ns *.myhostadmin.net
6124                 '.playonlanei.com',
6125                 '.rmtfcne.com',
6126         ),
6127         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6128                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6129                 '.lookmedicine.info',           // 206.161.205.22
6130                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6131                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6132                 '.worldsitesearch.info',        // 209.8.40.59
6133         ),
6134         'lee.seery at gmail.com' => array(
6135                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6136                 '.lingvol.com',         // 64.21.34.55
6137                 '.micevol.com',         // 64.21.34.55
6138                 '.heyhey.info',         // 64.21.34.55  by anonymous
6139         ),
6140         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6141                 // 69-64-64-71.dedicated.abac.net
6142                 '.520-ard.info',
6143                 '.550bcards.info',
6144                 '.559-cads.info',
6145                 '.559caard.info',
6146                 '.565-caaard.info',
6147                 '.575cadr.info',
6148                 '.577cadrs.info',
6149                 '.590-acrds.info',
6150                 '.596-cadrs.info',
6151                 '.596caards.info',
6152                 '.596caaard.info',
6153                 '.asstablishingcads.info',
6154                 '.astablish-ard.info',
6155                 '.astablishcacrds.info',
6156                 '.begginers-acards.info',
6157                 '.begginersacrds.info',
6158                 '.beggingcaaard.info',
6159                 '.beginercacrds.info',
6160                 '.cacrdscreating.info',
6161                 '.caditbegging.info',
6162                 '.cadr-buildup.info',
6163                 '.cadr-establilsh.info',
6164                 '.cadrs-buildercredit.info',
6165                 '.cadrs570.info',
6166                 '.cads-565.info',
6167
6168                 // 69-64-64-113.dedicated.abac.net
6169                 '.interistacards.info',
6170                 '.intrust-ards.info',
6171                 '.intrustacrds.info',
6172                 '.lfixed-ard.info',
6173                 '.lowerate-ard.info',
6174                 '.lowpercentage-ard.info',
6175                 '.lowpercentageacrd.info',
6176         ),
6177         'acua at mail.ru' => array(
6178
6179                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6180
6181                         // by adventurer at allmyns.info
6182                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6183
6184                         // by webmaster at allmyns.info
6185                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6186                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6187                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6188                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6189                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6190                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6191                         '.riumh.cn',    // 84.16.226.28(*snip*)
6192                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6193                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6194                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6195
6196                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6197                 '.dns4babka.info',      // by acua at mail.ru
6198
6199                         // by golubcov at dns4babka.info
6200                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6201
6202                         // by webmaster at dns4babka.info
6203                         '.credh.cn',
6204                         '.fucfv.cn',
6205                         '.gdxnk.cn',
6206                         '.sqrrt.cn',
6207                         '.ywtmd.cn',
6208                         '.kncqy.cn',    // by webmaster at allmyns.info
6209
6210                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6211                 '.dedka2ns.info',       // by acua at mail.ru
6212
6213                         // by chasik at dedka2ns.info
6214                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6215
6216                         // by rochel at dedka2ns.info
6217                         '.fudhxjjqh.cn',
6218
6219                         // by webmaster at dedka2ns.info
6220                         '.ascpo.cn',
6221                         '.jgycr.cn',
6222                         '.nqdtt.cn',
6223                         '.oswde.cn',
6224                         '.qeyig.cn',
6225                         '.soqsx.cn',
6226                         '.ukncd.cn',
6227                         '.zijgb.cn',
6228
6229                 // 84.16.255.253(*snip*), / says 'noy found'
6230                 '.dns4dedka.info',      // by acua at mail.ru
6231
6232                         // by aleon at dns4dedka.info
6233                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6234
6235                         // by dig at dns4dedka.info
6236                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6237                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6238                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6239                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6240                         '.heulw.cn',    // 84.16.226.217(*snip*)
6241                         '.hissw.cn',    // 84.16.249.240(*snip*)
6242                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6243                         '.obwew.cn',    // 84.16.251.218(*snip*)
6244                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6245                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6246                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6247                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6248                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6249                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6250                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6251                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6252                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6253                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6254                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6255                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6256
6257                         // by la at dns4dedka.info
6258                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6259                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6260                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6261                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6262                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6263                         '.eothy.cn',    // 84.16.249.241(*snip*)
6264                         '.epocy.cn',    // 84.16.251.220(*snip*)
6265                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6266                         '.faacz.cn',    // 84.16.251.222(*snip*)
6267                         '.filun.cn',    // 89.149.196.72(*snip*)
6268                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6269                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6270                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6271                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6272                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6273                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6274                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6275                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6276                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6277                         '.krumo.cn',    // 84.16.226.217(*snip*)
6278                         '.lbava.cn',    // 217.20.112.102(*snip*)
6279                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6280                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6281                         '.npovm.cn',    // 84.16.226.28(*snip*)
6282                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6283                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6284                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6285                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6286                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6287                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6288                         '.qydph.cn',    // 89.149.228.163(*snip*)
6289                         '.rxens.cn',    // 89.149.196.72(*snip*)
6290                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6291                         '.srths.cn',    // 84.16.251.222(*snip*)
6292                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6293                         '.unquz.cn',    // 84.16.251.223(*snip*)
6294                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6295                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6296                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6297                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6298                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6299                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6300
6301                         // by le at dns4dedka.info
6302                         '.goslw.cn',    // 84.16.251.220(*snip*)
6303                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6304                         '.iewik.cn',    // 84.16.255.254(*snip*)
6305                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6306                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6307                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6308                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6309                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6310                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6311                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6312                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6313                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6314                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6315                         '.qniww.cn',    // 84.16.251.218(*snip*)
6316                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6317                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6318
6319                         // by skspb at dns4dedka.info
6320                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6321
6322                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6323                         '.bcpnb.cn',
6324                         '.cfbpr.cn',
6325                         '.dnndb.cn',
6326                         '.ekwme.cn',
6327                         '.iutps.cn',
6328                         '.ryftj.cn',
6329                         '.vxqcb.cn',
6330
6331                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6332                         // by apple at ns2best.info
6333                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6334                         // by paulwolf at ns2best.info
6335                         '.ifytzq.cn',
6336
6337                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6338                         // by pigato at sedns.info
6339                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6340                         // by roschem at sedns.info
6341                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6342                         // by op at sedns.info
6343                         '.bumfn.cn',
6344                         '.csmlu.cn',
6345                         '.epcwi.cn',
6346                         '.krwzn.cn',
6347                         '.lkvcp.cn',
6348                         '.mvmkh.cn',
6349                         '.nwpeg.cn',
6350                         '.rnqol.cn',
6351                         '.tyuaf.cn',
6352                         '.ucysa.cn',
6353                         '.vhyom.cn',
6354                         '.wtstu.cn',
6355                         '.zslxr.cn',
6356         ),
6357         'gilvcta sy jilbertsbram.com' => array(
6358                 // 206.53.51.126
6359                 '.dsfljkeilm1.cn',
6360                 '.dsfljkeilm2.cn',
6361                 '.dsfljkeilm3.cn',
6362                 '.dsfljkeilm4.cn',
6363                 '.dsfljkeilm5.cn',
6364                 '.dsfljkeilm6.cn',
6365                 '.dsfljkeilm7.cn',
6366                 '.dsfljkeilm8.cn',
6367                 '.dsfljkeilm9.cn',
6368                 '.dsfljkeilm10.cn',
6369         ),
6370         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6371
6372                 // 69.64.82.76(*.dedicated.abac.net)
6373                 '.bruised-criedit.info',
6374                 '.bruised-crtedit.info',
6375                 '.bruised-czrd.info',
6376                 '.bruisedcreditcars.info',
6377                 '.bruisedcreitcard.info',
6378                 '.bruisedcreitd.info',
6379                 '.buliderscreadet.info',
6380                 '.cleaningup-cdit.info',
6381                 '.cleaningup-cedict.info',
6382                 '.cleaningup-cerdic.info',
6383                 '.cleanup-crrd.info',
6384
6385                 // 69.64.82.77(*.dedicated.abac.net)
6386                 '.bruised-crediot.info',
6387                 '.bruised-credtid.info',
6388                 '.bruisedcriet.info',
6389                 '.bruisedredit.info',
6390                 '.buliders-crdt.info',
6391                 '.buliders-cre4dit.info',
6392                 '.buliders-creadt.info',
6393                 '.buliders-credcards.info',
6394                 '.buliders-credictcard.info',
6395                 '.cleaningupccreditcards.info',
6396                 '.cleaningupcdedit.info',
6397                 '.cleaningupcedirt.info',
6398                 '.cleaningupceidt.info',
6399                 '.cleaningupcrasd.info',
6400                 '.cleaningupcreait.info',
6401
6402                 // 69.64.82.78(*.dedicated.abac.net)
6403                 '.bruised-cridet.info',
6404                 '.bruised-drecit.info',
6405                 '.bruised-reditcards.info',
6406                 '.bruisedcredikt.info',
6407                 '.bruisedcredith.info',
6408                 '.bruisedcredtid.info',
6409                 '.cleanup-criet.info',
6410                 '.cleanup-csrds.info',
6411                 '.cleanup-dards.info',
6412
6413                 // 69.64.82.79(*.dedicated.abac.net)
6414                 '.bruised-crediotcards.info',
6415                 '.bruised-creditcar.info',
6416                 '.bruised-creid.info',
6417                 '.bruised-creidtcard.info',
6418                 '.buliders-crdit.info',
6419                 '.buliders-creadet.info',
6420                 '.cleaningup-ceridt.info',
6421                 '.cleaningupcrecit.info',
6422                 '.cleaningupccritcard.info',
6423                 '.cleanupdredit.info',
6424                 '.cleanupredit.info',
6425         ),
6426         '.malwarealarm.com',
6427                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6428                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6429                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6430         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6431         'Inet-Traffic.com' => array(
6432                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6433                 //'.dcomm.com',         // by D Communications Inc. S.A.
6434
6435                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6436                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6437                 // ...
6438                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6439                 // ...
6440                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6441                 // ...
6442                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6443                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6444                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6445                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6446                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6447                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6448                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6449                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6450                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6451                 // ...
6452                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6453                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6454                 // ...
6455                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6456                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6457                 // ...
6458                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6459                 // ...
6460                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6461                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6462                 // ...
6463                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6464         ),
6465         'andreyletov at yahoo.com related' => array(
6466                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6467                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6468                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6469
6470                 // 89.248.99.118 by anonymous
6471                 '.lpgpharmacy.com',
6472                 '.onlybestgalleries.com',
6473                 '.viagrabest.info',
6474                 '.viagrabestprice.info',
6475                 '.viagratop.info',
6476
6477                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6478                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6479                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6480         ),
6481         'alrusnac at hotmail.com' => array(
6482                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6483                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6484         ),
6485         '203.116.63.123' => array(
6486                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6487                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6488         ),
6489         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6490                 '.autotowncar.cn',              // 69.73.146.184
6491                 '.badgirlhome.cn',              // 69.73.146.186
6492         ),
6493         'Wmp.co.jp' => array(
6494                 // 219.94.134.208, ns *.dns.ne.jp, adult
6495                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6496                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6497                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6498         ),
6499         'Macherie.tv' => array(
6500                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6501                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6502                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6503         ),
6504         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6505                 '.yemine.info',
6506                 '.fr4f3ds.info',
6507         ),
6508         '75.126.129.222' => array(
6509                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6510                 '.viagrabuycheap.info', // ns *.advernsserver.com
6511                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6512         ),
6513         'sqr at bk.ru' => array(
6514                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6515                 '.masserch.info',               // "Free Web Hosting", spam
6516                 '.miserch.info',
6517         ),
6518         'gangstadra at hotmail.com' => array(
6519                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6520                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6521                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6522                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6523         ),
6524         'hosan by front.ru' => array(
6525                 '.salihome.info',                               // 206.53.51.155(non-existent)
6526                 '.online-freesearch.com',               // 206.53.51.155
6527                 '.choosefinest.com',                    // 206.53.51.157
6528                 '.carsprojects.com',                    // 206.53.51.159
6529                 '.sport-brands.com',                    // 206.53.51.167
6530                 '.online-pharmaceutics.com',    // 206.53.51.168
6531         ),
6532         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6533                 '.canadians-health.com',        // by andreyletov at yahoo.com
6534                 '.cialischeap.info',
6535                 '.superrv.info',
6536         ),
6537         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6538                 '.hatbi.com',
6539                 '.justrty.com',
6540                 '.kol2you.com',
6541                 '.kolplanet.com',
6542                 '.myrty.com',
6543                 '.officialrty.com',
6544                 '.pbaol.com',
6545                 '.planetkol.com',
6546         ),
6547         'Abra1.com' => array(
6548                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6549                 '.abra1.com',           // by info at maisontropicale.com
6550                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6551
6552                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6553                 '.abra2.com',           // by domain at anondns.org
6554                 '.abra3.com',           // by domain at anondns.org
6555         ),
6556         'topdomainz at gmail.com' => array(
6557                 // 217.73.201.237 , ns *.parked.ru
6558                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6559                 '.aboutgooglegroup.info',
6560                 '.aboutgoogleimage.info',
6561                 '.aboutgooglemail.info',
6562                 '.aboutgooglemap.info',
6563                 '.aboutgooglenews.info',
6564                 '.aboutgooglevideo.info',
6565                 '.bestgoogleearth.info',
6566                 '.magicgoogleearth.info',
6567                 '.magicgooglemap.info',
6568                 '.magicgooglevideo.info',
6569
6570                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6571                 '.slajzer.info',
6572                 '.tonoscelular.info',
6573                 '.tonosmotorola.info',
6574         ),
6575         '89.149.208.23' => array(
6576                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6577                 '.w3rar.info',
6578                 '.w3sex.info',
6579                 '.w3zip.info',
6580                 '.w3in.info',
6581                 '.w3out.info',
6582
6583                 // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript
6584                 '.2vip.info',
6585                 '.4cat.info',
6586                 '.8vip.info',
6587                 '.9upp.info',
6588         ),
6589         'zorkin87 at mail.ru' => array(
6590                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6591                 '.ruqore.com',
6592                 '.goxama.com',
6593                 '.cazebi.com',
6594                 '.fukeqa.com',
6595                 '.fydoge.com',
6596                 '.jukaly.com',
6597                 '.jumoga.com',
6598                 '.jumuxo.com',
6599                 '.tyriva.com',
6600                 '.vudyho.com'
6601         ),
6602         'jessicaeagloff at yahoo.co.uk' => array(
6603                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6604                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6605                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6606                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6607         ),
6608         'qbbs at xinoffice.com' => array(
6609                 // ns *.name-services.com
6610                 '.lingage.com',         // 8.15.231.118
6611                 '.puksins.com',         // IP not allocated now
6612         ),
6613         'advertolog at gmail.com' =>
6614                 // 81.0.250.86(network.upl.cz => non-existent) or
6615                 // 217.11.233.27
6616                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6617         'contact at aboutdomain.com' => array(
6618                 '.lopieur0.com',        // Not match but used
6619                 '.lopieur1.com',        // Not match but used
6620                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6621         ),
6622         'info at cash4wm.biz related' => array(
6623                 // 84.16.233.12(*.internetserviceteam.com)
6624                 '.newsblogforu.com',
6625
6626                 // 84.16.235.141()
6627                 '.informator4you.com',
6628
6629                 // 84.16.240.68(*.internetserviceteam.com)
6630                 '.absolute-best-site.com',
6631                 '.new-blog-for-you.com',
6632
6633                 // 84.16.240.69(*.internetserviceteam.com)
6634                 '.best-sport-blog.com',
6635                 '.big-internet-site.com',
6636                 '.brendsite.com',
6637                 '.my-news-blog.com',
6638
6639                 // 84.16.242.123(*.internetserviceteam.com)
6640                 '.best-news-blog.com',
6641                 '.site-with-content.com',
6642
6643                 // The same method with info at cash4wm.biz
6644                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6645                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6646                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6647                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6648                 '.bloginfo4u.info',             // 89.149.247.25
6649         ),
6650         'kerjy at yahoo.com' => array(
6651                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6652                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6653                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6654                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6655                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6656         ),
6657         'vme at hotmail.ru' => array(
6658                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6659                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6660         ),
6661
6662         // C-2: Lonely domains (buddies not found yet)
6663         '.0721-4404.com',
6664         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6665         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6666         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6667         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6668         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6669         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6670         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6671         '.0annie.info',
6672         '.6i6.de',
6673         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6674         '.angioco.com',                 // 62.37.112.100, gamble
6675         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6676         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6677         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6678         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6679         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6680         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6681         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6682         '.allworlddirect.info', // Forbidden
6683         '.amoreitsex.com',
6684         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6685         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6686         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6687         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6688         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6689         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6690         '.auto-car-cheap.org',
6691         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6692         '.baurish.info',
6693         '.bestop.name',
6694         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6695         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6696         '.bestshopfinder.info',
6697         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6698         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6699         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6700         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6701         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6702         '.catkittenmagazines.org',              // 87.118.97.117
6703         '.chatwalker.com',              // 124.32.230.65
6704         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6705         '.covertarena.co.uk',   // by Wayne Huxtable
6706         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6707         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6708         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6709         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6710         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6711         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6712         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6713         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6714         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6715         '.easyshopusa.com',             // by riter (riter at nm.ru)
6716         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6717         '.edu.ph',                              // "philippine network foundation inc"
6718         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6719         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6720         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6721         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6722         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6723         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6724         '.filthserver.com',             // sales at onlinemarketingservices.biz
6725         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6726         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6727         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6728         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6729         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6730         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6731         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6732         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6733         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6734         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6735         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6736         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6737         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6738         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6739         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6740         '.gm-exchange.jp',              // 210.188.216.49 RMT
6741         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6742         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6743         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6744         '.greatbestwestern.org',// by gao.wungao at gmail.com
6745         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6746         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6747         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6748         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6749         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6750         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6751         '.hostuju.cz',                  // ns banan.cz, banan.it
6752         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6753         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6754         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6755         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6756         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6757         '.infradoc.com',
6758         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6759         '.ismarket.com',                // Google-hiding. intercage.com related IP
6760         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6761         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6762         '.itsexosit.net',
6763         '.itxxxit.net',
6764         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6765         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6766         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6767         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6768         '.kingtools.de',
6769         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6770         '.leucainfo.com',
6771         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6772         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6773         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6774         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6775         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6776         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6777         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6778         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6779         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6780         '.megvideochatlive.info',       // Bad seo
6781         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6782         '.mncxvsm.info',                // 217.11.233.105, / blank
6783         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6784         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6785         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6786         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6787         '.mxsupportmailer.com',
6788         '.next-moneylife.com',  // RMT
6789         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6790         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6791         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6792         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6793         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6794         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6795         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6796         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6797         '.onlineviagra.de',
6798         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6799         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6800         '.ozomw.info',
6801         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6802         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6803         '.perevozka777.ru',             // by witalik at gmail.com
6804         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6805         '.pills-storage.com',   // by
6806         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6807         '.porkyhost.com',               // 79965 at whois.gkg.net
6808         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6809         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6810         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6811         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6812         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6813         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6814         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6815         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6816         '.quality-teen-porn-photo.com', // by info at densa.info
6817         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6818         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6819         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6820         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6821         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6822         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6823         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6824         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6825         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6826         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6827         '.sexamoreit.com',
6828         '.sexforit.com',
6829         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6830         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6831         '.sirlook.com',
6832         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6833         '.sepcn.info',                  // / not found
6834         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6835         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6836         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6837         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6838         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6839         '.superverizonringtones.com',   // by joshua at list.ru
6840         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6841         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6842         '.thehostcity.com',             // Domains by Proxy
6843         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6844         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6845         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6846         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6847         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6848         '.topmeds10.com',
6849         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6850         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6851         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6852         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6853         '.unctad.net',                  // by gfdogfd at lovespb.com
6854         '.vacant.org.uk',
6855         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6856         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6857         '.virtualsystem.de',
6858         '.vdxhost.com',
6859         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6860         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6861         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6862         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6863         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6864         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6865         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6866         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6867         '.whoop.to',                    // RMT
6868         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6869         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6870         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6871         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6872         '.wwwna.info',                  // / 404 Not Found
6873         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6874         '.xamorexxx.net',
6875         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6876         '.xsessox.com',
6877         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6878         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6879         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6880         '.zyguo.info',                  // ns globoxhost.net
6881         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6882
6883
6884         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6885         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6886         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6887         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6888         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6889
6890         // The same approach of 'acua at mail.ru'
6891         '.iblcqms.cn',                  // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
6892         '.aasghwf.cn',                  // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
6893         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info
6894         '.klmnei.cn',                   // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info
6895         '.lumyjugmn.cn',                // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6896         '.lxwxjzpiy.cn',                // TODO:
6897         '.qyxswynd.cn',                 // TODO:
6898         '.ugivorm.cn',                  // TODO:
6899         '.uxmrscgdi.cn',                // TODO:
6900
6901         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6902
6903         // C-3: Not classifiable (information wanted)
6904         //
6905         // Something incoming to pukiwiki related sites
6906         'nana.co.il related' => array(
6907                 '.planetnana.co.il',
6908                 '.nana.co.il',
6909         ),
6910 );
6911
6912 // --------------------------------------------------
6913
6914 $blocklist['D'] = array(
6915         // D: Sample setting of
6916         // "Third party in good faith"s
6917         //
6918         // Hosts shown inside of the implanted contents,
6919         // not used via spam, but maybe useful to detect these contents
6920         //
6921         // 'RESERVED',
6922 );
6923
6924 // --------------------------------------------------
6925
6926 $blocklist['E'] = array(
6927         // E: Sample setting of
6928         // Promoters
6929         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6930         //  Ads, Business promotions, SEO, etc)
6931         //
6932         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6933         // Sometimes they may promote each other
6934
6935         '15-Mail.com related' => array(
6936                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6937                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6938                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6939                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
6940                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
6941         ),
6942         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
6943         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
6944         'E-brainers.com related' => array(
6945                 // 202.212.14.101
6946                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
6947                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
6948                 '.my-tune.jp',                                  // by brainers Inc.
6949                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
6950                 '.weekle.jp',                                   // by brainers Inc.
6951
6952                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
6953                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
6954                 '.3minutes-marketing-club.com', // by Fujio
6955                 '.affiliate-vampire.com',               // by Masatoshi
6956                 '.article-site-power-package.com',      // by Masatoshi
6957                 '.audio-marketing-club.com',    // by Fujio
6958                 '.brainers-task-manager.com',   // by Masatoshi
6959                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
6960                 '.brainersbuzz.com',                    // by Masatoshi
6961                 '.den4renz-marketing-club.com', // by Fujio
6962                 '.english-contents-club.com',   // by Masatoshi
6963                 '.fly-in-ads-japan.com',                // by Fujio
6964                 '.free-resalerights-giveaway.com',      // by Fujio
6965                 '.freegiveawaysecret.com',              // by Masatoshi
6966                 '.guaranteedvisitorpro.com',    // by Masatoshi
6967                 '.havads-japan.com',                    // by Masatoshi
6968                 '.info-business123.com',                // by Fujio
6969                 '.instant-marketing-club.com',  // by Fujio
6970                 '.internetmarketinggorinjyu.com',       // by Masatoshi
6971                 '.marketing-force-japan.com',   // by Fujio
6972                 '.masatoshikobayashi.com',              // by Fujio
6973                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
6974                 '.replytomatt.com',                             // by Fujio
6975                 '.santa-deal.com',                              // by Fujio
6976                 '.santa-deal-summer.com',               // by Fujio
6977                 '.scratch-card-factory.com',    // by Masatoshi
6978                 '.script4you-japan.com',                // by Fujio
6979                 '.sell1000000dollarinjapan.com',// by Fujio
6980                 '.squeeze-page-secret.com',             // by Masatoshi
6981                 '.viral-blog-square.com',               // by Fujio
6982                 '.viralarticle.com',                    // by Fujio
6983                 '.wowhoken.com',                                // by Fujio
6984
6985                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
6986                 '.brainerstelevision.com',
6987                 '.demosite4you.com',
6988                 '.keywordcatcherpro.com',
6989                 '.script-marketing-club.com',
6990
6991                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
6992                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
6993                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
6994                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
6995                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
6996                 '.brainerscode.com',    // by akada
6997                 '.brainerslive.com',    // by domain
6998                 '.brainersreview.com',  // by domain
6999                 '.brainerstest.com',    // by akada
7000                 '.otosecret.com',               // by domain
7001                 '.ultimate-marketing-weapon.com',       // by akada
7002                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7003                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7004
7005                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7006                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7007         ),
7008         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7009         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7010         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7011         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7012         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7013                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7014                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7015                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7016
7017                 // Redirects and affiliates:
7018                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7019                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7020                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7021                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7022                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7023                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7024                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7025                 //   ...
7026
7027                 // Other suggestions:
7028                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7029
7030                 // Blog posting at the same time
7031                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7032                 //   2007/06/13 e123.info/archives/76
7033                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7034                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7035                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7036         ),
7037         'info at kobeweb.jp' => array(
7038                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7039                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7040                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7041         ),
7042         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7043         'Infocart.jp' => array(         // by wai at infocart.jp
7044                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7045                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7046                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7047
7048                 //inetnum:      60.32.154.176 - 60.32.154.183
7049                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7050                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7051         ),
7052         'Info-sniper.com' => array(
7053                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7054                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7055                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7056         ),
7057         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7058         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7059         'JunSuzuki.com' => array(       // e-brainers.com related
7060                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7061                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7062         ),
7063         'Natsukih.net' => array(
7064                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7065                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7066                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7067                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7068
7069                 // by info at natsukih.net
7070                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7071                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7072                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7073                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7074                 '.5muryoureport.com',   // 210.251.253.230
7075                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7076                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7077                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7078         ),
7079         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7080                 '.11kanji.com',         // 211.10.131.88
7081                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7082                 '.point-park.com',      // 211.10.131.88
7083                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7084         ),
7085         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7086         'PRJAPAN.co.jp' => array(
7087                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7088                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7089                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7090                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7091                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7092                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7093         ),
7094         'Rakuten.co.jp' => array(
7095                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7096                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7097         ),
7098         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7099         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7100         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7101         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7102                 '.e123.info',
7103                 '.ialchemist.net',
7104                 '.j012.net',
7105                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7106         ),
7107         'Viscose.jp' => array(
7108                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7109                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7110         ),
7111         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7112 );
7113
7114 // --------------------------------------------------
7115
7116 $blocklist['Z'] = array(
7117         // Z: Yours
7118         //
7119         //'',
7120         //'',
7121         //'',
7122 );
7123
7124 ?>