spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.166 2007/09/02 12:10:41 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  68         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  69         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  70         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  71         //'ifastnet.com',                               // Server hosting
  72         //'threefortune.ifastnet.com',  // Server hosting
  73
  74         // Yours
  75         //''
  76         //''
  77         //''
  78
  79 );
  80
  81 // --------------------------------------------------
  82 // A: Sample setting of
  83 // Existing URI redirection or masking services
  84
  85 $blocklist['A-1'] = array(
  86
  87         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  88         // web-based proxy, DNS subdomains, etc
  89         // http://en.wikipedia.org/wiki/URL_redirection
  90         //
  91         // as known as cheap URI obscuring services today,
  92         // for spammers and affiliate users dazed by money.
  93         //
  94         //   Messages from forerunners:
  95         //     o-rly.net
  96         //       "A URL REDIRECTION SERVICE GONE BAD"
  97         //       "SORRY, TRULY"
  98         //     smcurl.com
  99         //       "Idiots were using smcURL to shrink URLs and
 100         //        send them out via spam."
 101         //     tinyclick.com
 102         //       "...stop offering it's free services because
 103         //        too many people were taking advantage of it"
 104         //     xjs.org
 105         //       "We have been forced to close this facility
 106         //        due to a minority of knuckle draggers who
 107         //        abused this web site."
 108         //
 109         // Please notify us about this list with reason:
 110         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 111         //
 112         '0nz.org',
 113         '0rz.tw',
 114         '0url.com',
 115         '0zed.info',
 116         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 117         '123.que.jp',
 118         '12url.org',
 119         '*.15h.com',
 120         '*.1dr.biz',
 121         '1K.pl' => array(
 122                 '*.1k.pl',
 123                 '*.5g.pl',
 124                 '*.orq.pl',
 125         ),
 126         '1nk.us',
 127         '1url.org',
 128         '1url.in',
 129         '1webspace.org',
 130         '2Ch.net' => array(
 131                 'ime.nu',
 132                 'ime.st',
 133         ),
 134         '2ch2.net',
 135         '2hop4.com',
 136         '2s.ca',
 137         '2site.com',
 138         '2url.org',
 139         '301url.com',
 140         '32url.com',
 141         '.3dg.de',
 142         '*.4bb.ru',
 143         'big5.51job.com',       ///gate/big5/
 144         '5jp.net',
 145         '.6url.com',
 146         '*.6x.to',
 147         '7ref.com',
 148         '82m.org',
 149         '*.8rf.com',
 150         '98.to',
 151         'abbrv.co.uk',
 152         '*.abwb.org',
 153         'acnw.de',
 154         'Active.ws' => array(
 155                 '*.321.cn',
 156                 '*.4x2.net',
 157                 'active.ws',
 158                 '*.better.ws',
 159                 '*.here.ws',
 160                 '*.mypiece.com',
 161                 '*.official.ws',
 162                 '*.ouch.ws',
 163                 '*.premium.ws',
 164                 '*.such.info',
 165                 '*.true.ws',
 166                 '*.visit.ws',
 167         ),
 168         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 169         'aifam.com',
 170         'All4WebMasters.pl' => array(
 171                 '*.ovp.pl',
 172                 '*.6-6-6.pl',
 173         ),
 174         'amoo.org',
 175         'web.archive.org',              ///web/2
 176         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 177                 'jmp2.net',
 178                 '2me.tw',
 179         ),
 180         'ataja.es',
 181         'ATBHost.com' => array(
 182                 '*.atbhost.com',
 183                 '*.bzhost.net',
 184         ),
 185         'atk.jp',
 186         'clearp.ath.cx',
 187         'athomebiz.com',
 188         'aukcje1.pl',
 189         'beam.to',
 190         'beermapping.com',
 191         'besturl.in',
 192         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 193         'biglnk.com',
 194         'bingr.com',
 195         'bittyurl.com',
 196         '*.bizz.cc',
 197         '*.blo.pl',
 198         '*.bo.pl',
 199         'briefurl.com',
 200         'brokenscript.com',
 201         'BucksoGen.com' => array(
 202                 '*.bucksogen.com',
 203                 '*.bulochka.org',
 204                 '*.korzhik.org',
 205                 '*.kovrizhka.org',
 206                 '*.pirozhok.org',
 207                 '*.plushka.org',
 208                 '*.pryanik.org',
 209                 '*.sushka.org',
 210         ),
 211         'budgethosts.org',
 212         'budu.com',                             // by peter.eder at imcworld.com
 213         '*.buzznet.com',
 214         '*.bydl.com',
 215         'C-O.IN' => array(
 216                 '*.c-o.cc',
 217                 '*.c-o.in',
 218                 '*.coz.in',
 219                 '*.cq.bz',
 220         ),
 221         'c64.ch',
 222         'c711.com',
 223         '*.cej.pl',
 224         'checkasite.net',
 225         'url.chefhost.com',
 226         '*.chicappa.jp',
 227         'chilicity.com',
 228         'big5.china.com',               ///gate/big5/
 229         'chopurl.com',
 230         'christopherleestreet.com',
 231         'cintcm.com',
 232         '*.cjb.net',
 233         'clipurl.com',
 234         '*.co.nr',
 235         'Comtech Enterprises ' => array(        // comteche.com
 236                 'tinyurl.name',
 237                 'tinyurl.us',
 238         ),
 239         'Cool168.com' => array(
 240                 '*.cool158.com',
 241                 '*.cool168.com',
 242                 '*.ko168.com',
 243                 '*.ko188.com',
 244         ),
 245         'Coolurl.de' => array(
 246                 'coolurl.de',
 247                 'dornenboy.de',
 248                 'eyeqweb.com',
 249                 'hardcore-porn.de',
 250                 'maschinen-bluten-nicht.de',
 251         ),
 252         'cutalink.com',
 253         '*.da.cx',
 254         '*.da.ru',
 255         'dae2.com',
 256         'dephine.org',
 257         'desiurl.com',
 258         'dhurl.com',
 259         'digbig.com',
 260         'Digipills.com' => array(
 261                 '*.digipills.com',
 262                 'minilien.com',
 263                 'tinylink.com',
 264         ),
 265         '*.discutbb.com',
 266         'DL.AM' => array(
 267                 '*.cx.la',
 268                 '*.dl.am',
 269         ),
 270         '*.dl.pl',
 271         '*.dmdns.com',
 272         'doiop.com',
 273         'drlinky.com',
 274         'durl.us',
 275         '*.dvdonly.ru',
 276         '*.dynu.ca',
 277         'dwarf.name',
 278         '*.eadf.com',
 279         '*.easyurl.net',
 280         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 281                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 282                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 283                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 284                 //   "Keep continuing to seek originality and contribute it to local,
 285                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 286                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 287                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 288                 // I'm so much impressed of the situation around this imported one today.
 289         'elfurl.com',
 290         'eny.pl',
 291         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 292                 '.mywiitime.com',
 293                 '.surfindark.com',              // webmaster at etechfocus.com
 294                 '.surfinshade.com',
 295                 '.surfinshadow.com',
 296                 '.surfinwind.com',
 297                 '.topsecretlive.com',
 298         ),
 299         '*.eu.org',
 300         'F2B.be' => array(
 301                 '*.f2b.be',
 302                 '*.freakz.eu',
 303                 '*.n0.be',
 304                 '*.n3t.nl',
 305                 '*.short.be',
 306                 '*.ssr.be',
 307                 '*.tweaker.eu',
 308         ),
 309         '*.fancyurl.com',
 310         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 311                 'blue11.jp',
 312                 'fanznet.com',
 313                 'katou.in',
 314                 'mymap.in',
 315                 'saitou.in',
 316                 'satou.in',
 317                 'susan.in',
 318         ),
 319         '.fe.pl',                       // Redirection and subdomain
 320         'ffwd.to',
 321         'url.fibiger.org',
 322         'FireMe.to' => array(
 323                 'fireme.to',
 324                 'nextdoor.to',
 325                 'ontheway.to',
 326         ),
 327         'flingk.com',
 328         'flog.jp',                      // careless redirector and bbs
 329         'fm7.biz',
 330         'fnbi.jp',
 331         '*.fnbi.jp',
 332         'forgeturl.com',
 333         '*.free.bg',
 334         'Freeservers.com' => array(     // United Online Web Services, Inc.
 335                 '*.4mg.com',
 336                 '*.4t.com',
 337                 '*.8m.com',
 338                 '*.8m.net',
 339                 '*.8k.com',
 340                 '*.faithweb.com',
 341                 '*.freehosting.net',
 342                 '*.freeservers.com',
 343                 '*.gq.nu',
 344                 '*.htmlplanet.com',
 345                 '*.itgo.com',
 346                 '*.iwarp.com',
 347                 '*.s5.com',
 348                 '*.scriptmania.com',
 349                 '*.tvheaven.com',
 350         ),
 351         '*.freewebpages.com',
 352         'FreeWebServices.net' => array( // Host Department LLC
 353                 '*.about.gs',   // Dead?
 354                 '*.about.tc',
 355                 '*.about.vg',
 356                 '*.aboutus.gs',
 357                 '*.aboutus.ms',
 358                 '*.aboutus.tc',
 359                 '*.aboutus.vg',
 360                 '*.biografi.biz',
 361                 '*.biografi.info',
 362                 '*.biografi.org',
 363                 '*.biografi.us',
 364                 '*.datadiri.biz',
 365                 '*.datadiri.cc',
 366                 '*.datadiri.com',
 367                 '*.datadiri.info',
 368                 '*.datadiri.net',
 369                 '*.datadiri.org',
 370                 '*.datadiri.tv',
 371                 '*.datadiri.us',
 372                 '*.ecv.gs',
 373                 '*.ecv.ms',
 374                 '*.ecv.tc',
 375                 '*.ecv.vg',
 376                 '*.eprofile.us',
 377                 '*.go2net.ws',
 378                 '*.hits.io',
 379                 '*.hostingweb.us',
 380                 '*.hub.io',
 381                 '*.indo.bz',
 382                 '*.indo.cc',
 383                 '*.indo.gs',
 384                 '*.indo.ms',
 385                 '*.indo.tc',
 386                 '*.indo.vg',
 387                 '*.infinitehosting.net',
 388                 '*.infinites.net',
 389                 '*.lan.io',
 390                 '*.max.io',
 391                 '*.mycv.bz',
 392                 '*.mycv.nu',
 393                 '*.mycv.tv',
 394                 '*.myweb.io',
 395                 '*.ourprofile.biz',
 396                 '*.ourprofile.info',
 397                 '*.ourprofile.net',     // Dead?
 398                 '*.ourprofile.org',
 399                 '*.ourprofile.us',
 400                 '*.profil.bz',
 401                 '*.profil.cc',
 402                 '*.profil.cn',
 403                 '*.profil.gs',
 404                 '*.profil.in',
 405                 '*.profil.ms',
 406                 '*.profil.tc',
 407                 '*.profil.tv',
 408                 '*.profil.vg',  // ?
 409                 '*.site.io',
 410                 '*.wan.io',
 411                 '*.web-cam.ws',
 412                 '*.webs.io',
 413                 '*.zip.io',
 414         ),
 415         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 416         '*.fx.to',
 417         'fyad.org',
 418         'fype.com',
 419         'gentleurl.net',
 420         'Get2.us' => array(
 421                 '*.get2.us',
 422                 '*.hasballs.com',
 423                 '*.ismyidol.com',
 424                 '*.spotted.us',
 425                 '*.went2.us',
 426                 '*.wentto.us',
 427         ),
 428         'glinki.com',
 429         '*.globalredirect.com',
 430         'gnu.vu',
 431         '*.go.cc',
 432         //'Google.com' => array(
 433         //              google.com/translate_c\?u=(?:http://)?
 434         //),
 435         'goonlink.com',
 436         '.gourl.org',
 437         '.greatitem.com',
 438         'gzurl.com',
 439         'url.grillsportverein.de',
 440         'Harudake.net' => array('*.hyu.jp'),
 441         'Hattinger Linux User Group' => array('short.hatlug.de'),
 442         'Hexten.net' => array('lyxus.net'),
 443         'here.is',
 444         'HispaVista.com' => array(
 445                 '*.blogdiario.com',
 446                 '*.hispavista.com',
 447                 '.galeon.com',
 448         ),
 449         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 450                 '*.8l.pl',
 451                 '*.blg.pl',
 452                 '*.czytajto.pl',
 453                 '*.ryj.pl',
 454                 '*.xit.pl',
 455                 '*.xlc.pl',
 456                 '*.hk.pl',
 457                 '*.home.pl',
 458                 '*.of.pl',
 459         ),
 460         'hort.net',
 461         'free4.hostrocket.com',
 462         '*.hotindex.ru',
 463         'HotRedirect.com' => array(
 464                 '*.coolhere.com',
 465                 '*.homepagehere.com',
 466                 '*.hothere.com',
 467                 '*.mustbehere.com',
 468                 '*.onlyhere.net',
 469                 '*.pagehere.com',
 470                 '*.surfhere.net',
 471                 '*.zonehere.com',
 472         ),
 473         'hotshorturl.com',
 474         'hotwebcomics.com',     ///search_redirect.php
 475         'hurl.to',
 476         '*.hux.de',
 477         '*.i89.us',
 478         'iat.net',                      // 74.208.58.130 by Tony Carter
 479         'ibm.com',                      ///links (Correct it)
 480         '*.iceglow.com',
 481         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 482         'Ideas para Nuevos Mercados SL' => array(
 483                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 484                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 485                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 486                 // by edgar bortolin (oscar at i4nm.com)
 487                 // by Edgar Bortolin  (oscar at i4nm.com)
 488                 // by oscar florez (oscar at i4nm.com)
 489                 // by Oscar Florez (oscar at red-es.com)
 490                 // by covadonga del valle (oscar at i4nm.com)
 491                 '*.ar.gd',
 492                 '*.ar.gs',      // ns *.nora.net
 493                 '*.ar.kz',      // by oscar
 494                 '*.ar.nu',      // by Edgar
 495                 '*.ar.tc',      // by oscar
 496                 '*.ar.vg',      // by oscar
 497                 '*.bo.kz',      // by oscar
 498                 '*.bo.nu',      // by covadonga
 499                 '*.bo.tc',      // by oscar
 500                 '*.bo.tf',      // by Oscar
 501                 '*.bo.vg',      // by oscar
 502                 '*.br.gd',
 503                 '*.br.gs',      // ns *.nora.net
 504                 '*.br.nu',      // by edgar
 505                 '*.br.vg',      // by oscar
 506                 '*.ca.gs',      // by oscar
 507                 '*.ca.kz',      // by oscar
 508                 '*.cl.gd',      // by oscar
 509                 '*.cl.kz',      // by oscar
 510                 '*.cl.nu',      // by edgar
 511                 '*.cl.tc',      // by oscar
 512                 '*.cl.tf',      // by Oscar
 513                 '*.cl.vg',      // by oscar
 514                 '*.col.nu',     // by Edgar
 515                 '*.cr.gs',      // ns *.nora.net
 516                 '*.cr.kz',      // by oscar
 517                 '*.cr.nu',      // by edgar
 518                 '*.cr.tc',      // by oscar
 519                 '*.cu.tc',      // by oscar
 520                 '*.do.kz',      // by oscar
 521                 '*.do.nu',      // by edgar
 522                 '*.ec.kz',      // by edgar
 523                 '*.ec.nu',      // by Edgar
 524                 '*.ec.tf',      // by Oscar
 525                 '*.es.kz',      // by oscar
 526                 '*.eu.kz',      // by oscar
 527                 '*.gt.gs',      // ns *.nora.net
 528                 '*.gt.tc',      // by oscar
 529                 '*.gt.tf',      // by Oscar
 530                 '*.gt.vg',      // by Oscar
 531                 '*.hn.gs',      // ns *.nora.net
 532                 '*.hn.tc',      // by oscar
 533                 '*.hn.tf',      // by Oscar
 534                 '*.hn.vg',      // by oscar
 535                 '*.mx.gd',
 536                 '*.mx.gs',      // ns *.nora.net
 537                 '*.mx.kz',      // by oscar
 538                 '*.mx.vg',      // by oscar
 539                 '*.ni.kz',      // by oscar
 540                 '*.pa.kz',      // by oscar
 541                 '*.pe.kz',      // by oscar
 542                 '*.pe.nu',      // by Edgar
 543                 '*.pr.kz',      // by oscar
 544                 '*.pr.nu',      // by edgar
 545                 '*.pt.gs',      // ns *.nora.net
 546                 '*.pt.kz',      // by edgar
 547                 '*.pt.nu',      // by edgar
 548                 '*.pt.tc',      // by oscar
 549                 '*.pt.tf',      // by Oscar
 550                 '*.py.gs',      // ns *.nora.net
 551                 '*.py.nu',      // by edgar
 552                 '*.py.tc',      // by oscar
 553                 '*.py.tf',      // by Oscar
 554                 '*.py.vg',      // by oscar
 555                 '*.sv.tc',      // by oscar
 556                 '*.usa.gs',     // ns *.nora.net
 557                 '*.uy.gs',      // ns *.nora.net
 558                 '*.uy.kz',      // by oscar
 559                 '*.uy.nu',      // by edgar
 560                 '*.uy.tc',      // by oscar
 561                 '*.uy.tf',      // by Oscar
 562                 '*.uy.vg',      // by oscar
 563                 '*.ve.gs',      // by oscar
 564                 '*.ve.tc',      // by oscar
 565                 '*.ve.tf',      // by Oscar
 566                 '*.ve.vg',      // by oscar
 567                 '*.ven.nu',     // by edgar
 568         ),
 569         'ie.to',
 570         'igoto.co.uk',
 571         'ilook.tw',
 572         'indianpad.com',                ///view/
 573         'iNetwork.co.il' => array(
 574                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 575                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 576                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 577         ),
 578         '*.infogami.com',
 579         'infotop.jp',
 580         'ipoo.org',
 581         'IR.pl' => array(
 582                 '*.aj.pl',
 583                 '*.aliasy.org',
 584                 '*.gu.pl',
 585                 '*.hu.pl',
 586                 '*.ir.pl',
 587                 '*.jo.pl',
 588                 '*.su.pl',
 589                 '*.td.pl',
 590                 '*.uk.pl',
 591                 '*.uy.pl',
 592                 '*.xa.pl',
 593                 '*.zj.pl',
 594         ),
 595         'irotator.com',
 596         '.iwebtool.com',
 597         'j6.bz',
 598         'jeeee.net',
 599         'Jaze Redirect Services' => array(
 600                 '*.arecool.net',
 601                 '*.iscool.net',
 602                 '*.isfun.net',
 603                 '*.tux.nu',
 604         ),
 605         '*.jed.pl',
 606         'JeremyJohnstone.com' => array('url.vg'),
 607         'jemurl.com',
 608         'jggj.net',
 609         'jpan.jp',
 610         'josh.nu',
 611         'kat.cc',
 612         'Kickme.to' => array(
 613                 '.1024bit.at',
 614                 '.128bit.at',
 615                 '.16bit.at',
 616                 '.256bit.at',
 617                 '.32bit.at',
 618                 '.512bit.at',
 619                 '.64bit.at',
 620                 '.8bit.at',
 621                 '.adores.it',
 622                 '.again.at',
 623                 '.allday.at',
 624                 '.alone.at',
 625                 '.altair.at',
 626                 '.american.at',
 627                 '.amiga500.at',
 628                 '.ammo.at',
 629                 '.amplifier.at',
 630                 '.amstrad.at',
 631                 '.anglican.at',
 632                 '.angry.at',
 633                 '.around.at',
 634                 '.arrange.at',
 635                 '.australian.at',
 636                 '.baptist.at',
 637                 '.basque.at',
 638                 '.battle.at',
 639                 '.bazooka.at',
 640                 '.berber.at',
 641                 '.blackhole.at',
 642                 '.booze.at',
 643                 '.bosnian.at',
 644                 '.brainiac.at',
 645                 '.brazilian.at',
 646                 '.bummer.at',
 647                 '.burn.at',
 648                 '.c-64.at',
 649                 '.catalonian.at',
 650                 '.catholic.at',
 651                 '.chapel.at',
 652                 '.chills.it',
 653                 '.christiandemocrats.at',
 654                 '.cname.at',
 655                 '.colors.at',
 656                 '.commodore.at',
 657                 '.commodore64.at',
 658                 '.communists.at',
 659                 '.conservatives.at',
 660                 '.conspiracy.at',
 661                 '.cooldude.at',
 662                 '.craves.it',
 663                 '.croatian.at',
 664                 '.cuteboy.at',
 665                 '.dancemix.at',
 666                 '.danceparty.at',
 667                 '.dances.it',
 668                 '.danish.at',
 669                 '.dealing.at',
 670                 '.deep.at',
 671                 '.democrats.at',
 672                 '.digs.it',
 673                 '.divxlinks.at',
 674                 '.divxmovies.at',
 675                 '.divxstuff.at',
 676                 '.dizzy.at',
 677                 '.does.it',
 678                 '.dork.at',
 679                 '.drives.it',
 680                 '.dutch.at',
 681                 '.dvdlinks.at',
 682                 '.dvdmovies.at',
 683                 '.dvdstuff.at',
 684                 '.emulators.at',
 685                 '.end.at',
 686                 '.english.at',
 687                 '.eniac.at',
 688                 '.error403.at',
 689                 '.error404.at',
 690                 '.evangelism.at',
 691                 '.exhibitionist.at',
 692                 '.faith.at',
 693                 '.fight.at',
 694                 '.finish.at',
 695                 '.finnish.at',
 696                 '.forward.at',
 697                 '.freebie.at',
 698                 '.freemp3.at',
 699                 '.french.at',
 700                 '.graduatejobs.at',
 701                 '.greenparty.at',
 702                 '.grunge.at',
 703                 '.hacked.at',
 704                 '.hang.at',
 705                 '.hangup.at',
 706                 '.has.it',
 707                 '.hide.at',
 708                 '.hindu.at',
 709                 '.htmlpage.at',
 710                 '.hungarian.at',
 711                 '.icelandic.at',
 712                 '.independents.at',
 713                 '.invisible.at',
 714                 '.is-chillin.it',
 715                 '.is-groovin.it',
 716                 '.japanese.at',
 717                 '.jive.at',
 718                 '.kickass.at',
 719                 '.kickme.to',
 720                 '.kindergarden.at',
 721                 '.knows.it',
 722                 '.kurd.at',
 723                 '.labour.at',
 724                 '.leech.at',
 725                 '.liberals.at',
 726                 '.linuxserver.at',
 727                 '.liqour.at',
 728                 '.lovez.it',
 729                 '.makes.it',
 730                 '.maxed.at',
 731                 '.means.it',
 732                 '.meltdown.at',
 733                 '.methodist.at',
 734                 '.microcomputers.at',
 735                 '.mingle.at',
 736                 '.mirror.at',
 737                 '.moan.at',
 738                 '.mormons.at',
 739                 '.musicmix.at',
 740                 '.nationalists.at',
 741                 '.needz.it',
 742                 '.nerds.at',
 743                 '.neuromancer.at',
 744                 '.newbie.at',
 745                 '.nicepage.at',
 746                 '.ninja.at',
 747                 '.norwegian.at',
 748                 '.ntserver.at',
 749                 '.owns.it',
 750                 '.paint.at',
 751                 '.palestinian.at',
 752                 '.phoneme.at',
 753                 '.phreaking.at',
 754                 '.playz.it',
 755                 '.polish.at',
 756                 '.popmusic.at',
 757                 '.portuguese.at',
 758                 '.powermac.at',
 759                 '.processor.at',
 760                 '.prospects.at',
 761                 '.protestant.at',
 762                 '.rapmusic.at',
 763                 '.raveparty.at',
 764                 '.reachme.at',
 765                 '.reads.it',
 766                 '.reboot.at',
 767                 '.relaxed.at',
 768                 '.republicans.at',
 769                 '.researcher.at',
 770                 '.reset.at',
 771                 '.resolve.at',
 772                 '.retrocomputers.at',
 773                 '.rockparty.at',
 774                 '.rocks.it',
 775                 '.rollover.at',
 776                 '.rough.at',
 777                 '.rules.it',
 778                 '.rumble.at',
 779                 '.russian.at',
 780                 '.says.it',
 781                 '.scared.at',
 782                 '.seikh.at',
 783                 '.serbian.at',
 784                 '.short.as',
 785                 '.shows.it',
 786                 '.silence.at',
 787                 '.simpler.at',
 788                 '.sinclair.at',
 789                 '.singz.it',
 790                 '.slowdown.at',
 791                 '.socialists.at',
 792                 '.spanish.at',
 793                 '.split.at',
 794                 '.stand.at',
 795                 '.stoned.at',
 796                 '.stumble.at',
 797                 '.supercomputer.at',
 798                 '.surfs.it',
 799                 '.swedish.at',
 800                 '.swims.it',
 801                 '.synagogue.at',
 802                 '.syntax.at',
 803                 '.syntaxerror.at',
 804                 '.techie.at',
 805                 '.temple.at',
 806                 '.thinkbig.at',
 807                 '.thirsty.at',
 808                 '.throw.at',
 809                 '.toplist.at',
 810                 '.trekkie.at',
 811                 '.trouble.at',
 812                 '.turkish.at',
 813                 '.unexplained.at',
 814                 '.unixserver.at',
 815                 '.vegetarian.at',
 816                 '.venture.at',
 817                 '.verycool.at',
 818                 '.vic-20.at',
 819                 '.viewing.at',
 820                 '.vintagecomputers.at',
 821                 '.virii.at',
 822                 '.vodka.at',
 823                 '.wannabe.at',
 824                 '.webpagedesign.at',
 825                 '.wheels.at',
 826                 '.whisper.at',
 827                 '.whiz.at',
 828                 '.wonderful.at',
 829                 '.zor.org',
 830                 '.zx80.at',
 831                 '.zx81.at',
 832                 '.zxspectrum.at',
 833         ),
 834         'kisaweb.com',
 835         'krotki.pl',
 836         'kuerzer.de',
 837         '*.kupisz.pl',
 838         'kuso.cc',
 839         '*.l8t.com',
 840         'lame.name',
 841         'lediga.st',
 842         'liencourt.com',
 843         'liteurl.com',
 844         'linkachi.com',
 845         'linkezy.com',
 846         'linkfrog.net',
 847         'linkook.com',
 848         'linkzip.net',
 849         'lispurl.com',
 850         'lnk.in',
 851         'makeashorterlink.com',
 852         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 853                 '*.3gp.fr',
 854                 '*.gtx.fr',
 855                 '*.ici.st',
 856                 '*.max.st',
 857                 '*.nn.cx',              // ns *.sivit.org
 858                 '*.site.cx',    // ns *.sivit.org
 859                 '*.user.fr',
 860                 '*.zxr.fr',
 861         ),
 862         'mcturl.com',
 863         'memurl.com',
 864         'Metamark.net' => array('xrl.us'),
 865         'midgeturl.com',
 866         'Minilink.org' => array('lnk.nu'),
 867         'miniurl.org',
 868         'miniurl.pl',
 869         'mixi.bz',
 870         'mo-v.jp',
 871         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 872                 '.com.md',
 873                 '.co.md',
 874                 '.org.md',
 875                 '.info.md',
 876                 '.host.md',
 877         ),
 878         'monster-submit.com',
 879         'mooo.jp',
 880         'murl.net',
 881         'myactivesurf.net',
 882         'mytinylink.com',
 883         'myurl.in',
 884         'myurl.com.tw',
 885         'nanoref.com',
 886         'Ne1.net' => array(
 887                 '*.ne1.net',
 888                 '*.r8.org',
 889         ),
 890         'Nashville Linux Users Group' => array('nlug.org'),
 891         'not2long.net',
 892         '*.notlong.com',
 893         '*.nuv.pl',
 894         'ofzo.be',
 895         '*.ontheinter.net',
 896         'ourl.org',
 897         'ov2.net',                              // frame
 898         '*.ozonez.com',
 899         'pagebang.com',
 900         'palurl.com',
 901         '*.paulding.net',
 902         'phpfaber.org',
 903         'pnope.com',
 904         'prettylink.com',
 905         'PROXID.net' => array(  // also xRelay.net
 906                 '*.asso.ws',
 907                 '*.corp.st',
 908                 '*.euro.tm',
 909                 '*.perso.tc',
 910                 '*.site.tc',
 911                 '*.societe.st',
 912         ),
 913         'qrl.jp',
 914         'qurl.net',
 915         'qwer.org',
 916         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 917         'radiobase.net',
 918         'Rakuten.co.jp' => array(
 919                 'pt.afl.rakuten.co.jp', ///c/
 920         ),
 921         'RedirectFree.com' => array(
 922                 '*.red.tc',
 923                 '*.redirectfree.com',
 924                 '*.sky.tc',
 925                 '*.the.vg',
 926         ),
 927         'redirme.com',
 928         'redirectme.to',
 929         'relic.net',
 930         'rezma.info',
 931         'rio.st',
 932         'rlink.org',
 933         '*.rmcinfo.fr',
 934         'rubyurl.com',
 935         '*.runboard.com',
 936         'runurl.com',
 937         's-url.net',
 938         's1u.net',
 939         'SG5.co.uk' => array(
 940                 '*.sg5.co.uk',
 941                 '*.sg5.info',
 942         ),
 943         'Shim.net' => array(
 944                 '*.0kn.com',
 945                 '*.2cd.net',
 946                 '*.freebiefinders.net',
 947                 '*.freegaming.org',
 948                 '*.op7.net',
 949                 '*.shim.net',
 950                 '*.v9z.com',
 951         ),
 952         'big5.shippingchina.com',
 953         'shorl.com',
 954         'shortenurl.com',
 955         'shorterlink.com',
 956         'shortlinks.co.uk',
 957         'shorttext.com',
 958         'shorturl-accessanalyzer.com',
 959         'Shortify.com' => array(
 960                 '74678439.com',
 961                 'shortify.com',
 962         ),
 963         'shortlink.co.uk',
 964         'ShortURL.com' => array(
 965                 '*.1sta.com',
 966                 '*.24ex.com',
 967                 '*.2fear.com',
 968                 '*.2fortune.com',
 969                 '*.2freedom.com',
 970                 '*.2hell.com',
 971                 '*.2savvy.com',
 972                 '*.2truth.com',
 973                 '*.2tunes.com',
 974                 '*.2ya.com',
 975                 '*.alturl.com',
 976                 '*.antiblog.com',
 977                 '*.bigbig.com',
 978                 '*.dealtap.com',
 979                 '*.ebored.com',
 980                 '*.echoz.com',
 981                 '*.filetap.com',
 982                 '*.funurl.com',
 983                 '*.headplug.com',
 984                 '*.hereweb.com',
 985                 '*.hitart.com',
 986                 '*.mirrorz.com',
 987                 '*.shorturl.com',
 988                 '*.spyw.com',
 989                 '*.vze.com',
 990         ),
 991         'shrinkalink.com',
 992         'shrinkthatlink.com',
 993         'shrinkurl.us',
 994         'shrt.org',
 995         'shrunkurl.com',
 996         'shurl.org',
 997         'shurl.net',
 998         'sid.to',
 999         'simurl.com',
1000         'sitefwd.com',
1001         'Sitelutions.com' => array(
1002                 '*.assexy.as',
1003                 '*.athersite.com',
1004                 '*.athissite.com',
1005                 '*.bestdeals.at',
1006                 '*.byinter.net',
1007                 '*.findhere.org',
1008                 '*.fw.nu',
1009                 '*.isgre.at',
1010                 '*.isthebe.st',
1011                 '*.kwik.to',
1012                 '*.lookin.at',
1013                 '*.lowestprices.at',
1014                 '*.onthenet.as',
1015                 '*.ontheweb.nu',
1016                 '*.pass.as',
1017                 '*.passingg.as',
1018                 '*.redirect.hm',
1019                 '*.rr.nu',
1020                 '*.ugly.as',
1021         ),
1022         '*.skracaj.pl',
1023         'skiltechurl.com',
1024         'skocz.pl',
1025         'slimurl.jp',
1026         'slink.in',
1027         'smallurl.eu',
1028         'smurl.name',
1029         'snipurl.com',
1030         'sp-nov.net',
1031         'splashblog.com',
1032         'spod.cx',
1033         '*.spydar.com',
1034         'Subdomain.gr' => array(
1035                 '*.p2p.gr',
1036                 '*.subdomain.gr',
1037         ),
1038         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1039         'surl.se',
1040         'surl.ws',
1041         'symy.jp',
1042         'tdurl.com',
1043         'tighturl.com',
1044         'tiniuri.com',
1045         'tiny.cc',
1046         'tiny.pl',
1047         'tiny2go.com',
1048         'tinylink.eu',
1049         'tinylinkworld.com',
1050         'tinypic.com',
1051         'tinyr.us',
1052         'TinyURL.com' => array(
1053                 'tinyurl.com',
1054                 'preview.tinyurl.com',
1055                 'tinyurl.co.uk',
1056         ),
1057         'titlien.com',
1058         '*.tlg.pl',
1059         'tlurl.com',
1060         'link.toolbot.com',
1061         'tnij.org',
1062         'Tokelau ccTLD' => array('.tk'),
1063         'toila.net',
1064         '*.toolbot.com',
1065         '*.torontonian.com',
1066         'trimurl.com',
1067         'ttu.cc',
1068         'turl.jp',
1069         '*.tz4.com',
1070         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1071                 '*.1.to',
1072                 '*.4.to',
1073                 '*.5.to',
1074                 '*.82.to',
1075                 '*.s.to',
1076                 '*.u.to',
1077                 '*.ce.to',
1078                 '*.cz.to',
1079                 '*.if.to',
1080                 '*.it.to',
1081                 '*.kp.to',
1082                 '*.ne.to',
1083                 '*.ok.to',
1084                 '*.pc.to',
1085                 '*.tv.to',
1086                 '*.dd.to',
1087                 '*.ee.to',
1088                 '*.hh.to',
1089                 '*.kk.to',
1090                 '*.mm.to',
1091                 '*.qq.to',
1092                 '*.xx.to',
1093                 '*.zz.to',
1094                 '*.ivy.to',
1095                 '*.joa.to',
1096                 '*.ever.to',
1097                 '*.mini.to',
1098         ),
1099         'uchinoko.in',
1100         'Ulimit.com' => array(
1101                 '*.be.tf',
1102                 '*.best.cd',
1103                 '*.bsd-fan.com',
1104                 '*.c0m.st',
1105                 '*.ca.tc',
1106                 '*.clan.st',
1107                 '*.com02.com',
1108                 '*.en.st',
1109                 '*.euro.st',
1110                 '*.fr.fm',
1111                 '*.fr.st',
1112                 '*.fr.vu',
1113                 '*.gr.st',
1114                 '*.ht.st',
1115                 '*.int.ms',
1116                 '*.it.st',
1117                 '*.java-fan.com',
1118                 '*.linux-fan.com',
1119                 '*.mac-fan.com',
1120                 '*.mp3.ms',
1121                 '*.qc.tc',
1122                 '*.sp.st',
1123                 '*.suisse.st',
1124                 '*.t2u.com',
1125                 '*.unixlover.com',
1126                 '*.zik.mu',
1127         ),
1128         '*.uni.cc',
1129         'UNONIC.com' => array(
1130                 '*.at.tf',      // AlpenNIC
1131                 '*.bg.tf',
1132                 '*.ca.tf',
1133                 '*.ch.tf',      // AlpenNIC
1134                 '*.cz.tf',
1135                 '*.de.tf',      // AlpenNIC
1136                 '*.edu.tf',
1137                 '*.eu.tf',
1138                 '*.int.tf',
1139                 '*.net.tf',
1140                 '*.pl.tf',
1141                 '*.ru.tf',
1142                 '*.sg.tf',
1143                 '*.us.tf',
1144         ),
1145         'Up.pl' => array(
1146                 '.69.pl',                       // by nsk101869
1147                 '.crack.pl',            // by nsk101869
1148                 '.film.pl',                     // by sibr19002
1149                 '.h2o.pl',                      // by nsk101869
1150                 '.hostessy.pl',         // by nsk101869
1151                 '.komis.pl',            // by nsk101869
1152                 '.laski.pl',            // by nsk101869
1153                 '.modelki.pl',          // by nsk101869
1154                 '.muzyka.pl',           // by sibr19002
1155                 '.nastolatki.pl',       // by nsk101869
1156                 '.obuwie.pl',           // by nsk101869
1157                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1158                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1159                 '.sexchat.pl',          // by nsk101869
1160                 '.sexlive.pl',          // by nsk101869
1161                 '.tv.pl',                       // by nsk101869
1162                 '.up.pl',                       // by nsk101869
1163                 '.video.pl',            // by nsk101869
1164                 '.xp.pl',                       // nsk101869
1165         ),
1166         '*.uploadr.com',
1167         'url.ie',
1168         'url4.net',
1169         'url-c.com',
1170         'urlbee.com',
1171         'urlbounce.com',
1172         'urlcut.com',
1173         'urlcutter.com',
1174         'urlic.com',
1175         'urlin.it',
1176         'urlkick.com',
1177         'URLLogs.com' => array(
1178                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1179                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1180         ),
1181         '*.urlproxy.com',
1182         'urlser.com',
1183         'urlsnip.com',
1184         'urlzip.de',
1185         'urlx.org',
1186         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1187         'utun.jp',
1188         'uxxy.com',
1189         '*.v27.net',
1190         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1191                 '*.all.at',
1192                 '*.back.to',
1193                 '*.beam.at',
1194                 '*.been.at',
1195                 '*.bite.to',
1196                 '*.board.to',
1197                 '*.bounce.to',
1198                 '*.bowl.to',
1199                 '*.break.at',
1200                 '*.browse.to',
1201                 '*.change.to',
1202                 '*.chip.ms',
1203                 '*.connect.to',
1204                 '*.crash.to',
1205                 '*.cut.by',
1206                 '*.direct.at',
1207                 '*.dive.to',
1208                 '*.drink.to',
1209                 '*.drive.to',
1210                 '*.drop.to',
1211                 '*.easy.to',
1212                 '*.everything.at',
1213                 '*.fade.to',
1214                 '*.fanclub.ms',
1215                 '*.firstpage.de',
1216                 '*.fly.to',
1217                 '*.flying.to',
1218                 '*.fortunecity.co.uk',
1219                 '*.fortunecity.com',
1220                 '*.forward.to',
1221                 '*.fullspeed.to',
1222                 '*.fun.ms',
1223                 '*.gameday.de',
1224                 '*.germany.ms',
1225                 '*.get.to',
1226                 '*.getit.at',
1227                 '*.hard-ware.de',
1228                 '*.hello.to',
1229                 '*.hey.to',
1230                 '*.hop.to',
1231                 '*.how.to',
1232                 '*.hp.ms',
1233                 '*.jump.to',
1234                 '*.kiss.to',
1235                 '*.listen.to',
1236                 '*.mediasite.de',
1237                 '*.megapage.de',
1238                 '*.messages.to',
1239                 '*.mine.at',
1240                 '*.more.at',
1241                 '*.more.by',
1242                 '*.move.to',
1243                 '*.musicpage.de',
1244                 '*.mypage.org',
1245                 '*.mysite.de',
1246                 '*.nav.to',
1247                 '*.notrix.at',
1248                 '*.notrix.ch',
1249                 '*.notrix.de',
1250                 '*.notrix.net',
1251                 '*.on.to',
1252                 '*.page.to',
1253                 '*.pagina.de',
1254                 '*.played.by',
1255                 '*.playsite.de',
1256                 '*.privat.ms',
1257                 '*.quickly.to',
1258                 '*.redirect.to',
1259                 '*.rulestheweb.com',
1260                 '*.run.to',
1261                 '*.scroll.to',
1262                 '*.seite.ms',
1263                 '*.shortcut.to',
1264                 '*.skip.to snap.to',
1265                 '*.soft-ware.de',
1266                 '*.start.at',
1267                 '*.stick.by',
1268                 '*.surf.to',
1269                 '*.switch.to',
1270                 '*.talk.to',
1271                 '*.tip.nu',
1272                 '*.top.ms',
1273                 '*.transfer.to',
1274                 '*.travel.to',
1275                 '*.turn.to',
1276                 '*.vacations.to',
1277                 '*.videopage.de',
1278                 '*.virtualpage.de',
1279                 '*.w3.to',
1280                 '*.walk.to',
1281                 '*.warp9.to',
1282                 '*.window.to',
1283                 '*.yours.at',
1284                 '*.zap.to',
1285                 '*.zip.to',
1286         ),
1287         'VDirect.com' => array(
1288                 '*.emailme.net',
1289                 '*.getto.net',
1290                 '*.inetgames.com',
1291                 '*.netbounce.com',
1292                 '*.netbounce.net',
1293                 '*.oneaddress.net',
1294                 '*.snapto.net',
1295                 '*.vdirect.com',
1296                 '*.vdirect.net',
1297                 '*.webrally.net',
1298         ),
1299         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1300         'vgo2.com',
1301         'Voila.fr' => array('r.voila.fr'),      // Fix it
1302         'w3t.org',
1303         'wapurl.co.uk',
1304         'Wb.st' => array(
1305                 '*.team.st',
1306                 '*.wb.st',
1307         ),
1308         'wbkt.net',
1309         'WebAlias.com' => array(
1310                 '*.andmuchmore.com',
1311                 '*.browser.to',
1312                 '*.escape.to',
1313                 '*.fornovices.com',
1314                 '*.fun.to',
1315                 '*.got.to',
1316                 '*.hottestpix.com',
1317                 '*.imegastores.com',
1318                 '*.latest-info.com',
1319                 '*.learn.to',
1320                 '*.moviefever.com',
1321                 '*.mp3-archives.com',
1322                 '*.myprivateidaho.com',
1323                 '*.radpages.com',
1324                 '*.remember.to',
1325                 '*.resourcez.com',
1326                 '*.return.to',
1327                 '*.sail.to',
1328                 '*.sports-reports.com',
1329                 '*.stop.to',
1330                 '*.thrill.to',
1331                 '*.tophonors.com',
1332                 '*.uncutuncensored.com',
1333                 '*.up.to',
1334                 '*.veryweird.com',
1335                 '*.way.to',
1336                 '*.web-freebies.com',
1337                 '.webalias.com',
1338                 '*.webdare.com',
1339                 '*.xxx-posed.com',
1340         ),
1341         'webmasterwise.com',
1342         'witherst at hotmail.com' => array(     // by Tim Withers
1343                 '*.associates-program.com',
1344                 '*.casinogopher.com',
1345                 '*.ezpagez.com',
1346                 '*.vgfaqs.com',
1347         ),
1348         'wittylink.com',
1349         'wiz.sc',                       // tiny.cc related
1350         'X50.us' => array(
1351                 '*.i50.de',
1352                 '*.x50.us',
1353         ),
1354         'big5.xinhuanet.com',   ///gate/big5/
1355         'xhref.com',
1356         'Xn6.net' => array(
1357                 '*.9ax.net',
1358                 '*.xn6.net',
1359         ),
1360         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1361         '.y11.net',
1362         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1363                 '*.yesns.com',
1364                 '*.srv4u.net',
1365                 //blogne.com
1366         ),
1367         'yatuc.com',
1368         'yep.it',
1369         'yumlum.com',
1370         'yurel.com',
1371         'Z.la' => array(
1372                 'z.la',
1373                 't.z.la',
1374         ),
1375         'zaable.com',
1376         'zapurl.com',
1377         'zarr.co.uk',
1378         'zerourl.com',
1379         'ZeroWeb.org' => array(
1380                 '*.80t.com',
1381                 '*.firez.org',
1382                 '*.fizz.nu',
1383                 '*.ingame.org',
1384                 '*.irio.net',
1385                 '*.v33.org',
1386                 '*.zeroweb.org',
1387         ),
1388         'zhukcity.ru',
1389         'zippedurl.com',
1390         'zr5.us',
1391         '*.zs.pl',
1392         '*.zu5.net',
1393         'zuso.tw',
1394         '*.zwap.to',
1395 );
1396
1397 // --------------------------------------------------
1398
1399 $blocklist['A-2'] = array(
1400
1401         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1402         //
1403         //'*.dyndns.*', // Wildcard for dyndns
1404         //
1405         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1406         'ddns.ru' => array('*.bpa.nu'),
1407         'Dhs.org' => array(
1408                 '*.2y.net',
1409                 '*.dhs.org',
1410         ),
1411         '*.dnip.net',
1412         '*.dyndns.co.za',
1413         '*.dyndns.dk',
1414         '*.dyndns.nemox.net',
1415         'DyDNS.com' => array(
1416                 '*.ath.cx',
1417                 '*.dnsalias.org',
1418                 '*.dyndns.org',
1419                 '*.homeip.net',
1420                 '*.homelinux.net',
1421                 '*.mine.nu',
1422                 '*.shacknet.nu',
1423         ),
1424         '*.dtdns.net',                  // by jscott at sceiron.com
1425         '*.dynu.com',
1426         '*.dynup.net',
1427         '*.fdns.net',
1428         'J-Speed.net' => array(
1429                 '*.bne.jp',
1430                 '*.ii2.cc',
1431                 '*.jdyn.cc',
1432                 '*.jspeed.jp',
1433         ),
1434         '*.mydyn.de',
1435         '*.nerdcamp.net',
1436         'No-IP.com' => array(
1437                         '*.bounceme.net',
1438                         '*.hopto.org',
1439                         '*.myftp.biz',
1440                         '*.myftp.org',
1441                         '*.myvnc.com',
1442                         '*.no-ip.biz',
1443                         '*.no-ip.info',
1444                         '*.no-ip.org',
1445                         '*.redirectme.net',
1446                         '*.servebeer.com',
1447                         '*.serveblog.net',
1448                         '*.servecounterstrike.com',
1449                         '*.serveftp.com',
1450                         '*.servegame.com',
1451                         '*.servehalflife.com',
1452                         '*.servehttp.com',
1453                         '*.servemp3.com',
1454                         '*.servepics.com',
1455                         '*.servequake.com',
1456                         '*.sytes.net',
1457                         '*.zapto.org',
1458         ),
1459         '*.opendns.be',
1460         'Yi.org' => array(      // by dns at whyi.org
1461                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1462
1463                 // 72.55.129.46(redirect.yi.org)
1464                 '*.whyi.org',
1465                 '*.weedns.com',
1466         ),
1467         '*.zenno.info',
1468         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1469                         // and all non-recorded domains redirect to 'agoga.com' now
1470                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1471                         // http://agoga.com/aboutus.html
1472 );
1473
1474 // --------------------------------------------------
1475
1476 // B: Sample setting of:
1477 // Jacked (taken advantage of) and cleaning-less sites
1478 //
1479 // Please notify us about this list with reason:
1480 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1481
1482 $blocklist['B-1'] = array(
1483
1484         // B-1: Web spaces
1485         //
1486         //   Messages from forerunners:
1487         //     activefreehost.com
1488         //       "We regret to inform you that ActiveFreeHost
1489         //        free hosting service has is now closed (as of
1490         //        September 18). We have been online for over
1491         //        two and half years, but have recently decided
1492         //        to take time for software improvement to fight
1493         //        with server abuse, Spam advertisement and
1494         //        fraud."
1495         //
1496         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1497         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1498         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1499         '0Catch.com related' => array(
1500                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1501
1502                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1503                 '*.100freemb.com',              // by Danny Ashworth
1504                 '*.exactpages.com',
1505                 '*.fcpages.com',
1506                 '*.wtcsites.com',
1507
1508                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1509                 '*.741.com',
1510                 '*.freecities.com',
1511                 '*.freesite.org',
1512                 '*.freewebpages.org',
1513                 '*.freewebsitehosting.com',
1514                 '*.jvl.com',
1515
1516                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1517                 '*.freespaceusa.com',
1518                 '*.usafreespace.com',
1519
1520                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1521                 '*.dex1.com',
1522                 '*.questh.com',
1523
1524                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1525                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1526                 '*.012webpages.com',    // by support at 0catch.com
1527                 '*.150m.com',
1528                 '*.1sweethost.com',             // by whois at bluehost.com
1529                 '*.250m.com',                   // by jason at fahlman.net
1530                 '*.9cy.com',                    // by paulw0t at gmail.com
1531                 '*.angelcities.com',    // by cliff at eccentrix.com
1532                 '*.arcadepages.com',    // by admin at site-see.com
1533                 '*.e-host.ws',                  // by dns at jomax.net
1534                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1535                 '*.fw.bz',                              // by ben at kuehl.as
1536                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1537                 '*.g0g.net',                    // by domains at seem.co.uk
1538                 '*.galaxy99.net',               // by admin at bagchi.org
1539                 '*.greatnow.com',               // by peo at peakspace.com
1540                 '*.hautlynx.com',               // by hlewis28 at juno.com
1541                 '*.ibnsites.com',               // by cmrojas at mail.com
1542                 '*.just-allen.com',             // by extremehype at msn.com
1543                 '*.kogaryu.com',                // by angelguerra at msn.com
1544                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1545                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1546                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1547                 '*.s-enterprize.com',
1548                 '*.servetown.com',              // by jonahbliss at earthlink.net
1549                 '*.stinkdot.org',               // by bluedot at ziplip.com
1550                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1551                 '*.zomi.net',                   // by sianpu at gmail.com
1552         ),
1553         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1554         '100 Best Inc' => array(
1555                 // by 100 Best Inc (info at 100best.com)
1556
1557                 // 66.235.204.7(h204-007.bluefishhosting.com)
1558                 '*.2-hi.com',
1559                 '*.20fr.com',
1560                 '*.20ii.com',
1561                 '*.20is.com',
1562                 '*.20it.com',
1563                 '*.20m.com',    // by jlee at 100bestinc.com
1564                 '*.20to.com',
1565                 '*.2u-2.com',
1566                 '*.3-st.com',
1567                 '*.fws1.com',
1568                 '*.fw-2.com',
1569                 '*.inc5.com',
1570                 '*.on-4.com',
1571                 '*.st-3.com',
1572                 '*.st20.com',
1573                 '*.up-a.com',
1574
1575                 // 216.40.33.252(www-pd.mdnsservice.com)
1576                 '*.0-st.com',
1577                 '*.20me.com',
1578         ),
1579         '*.100foros.com',
1580         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1581         '20six Weblog Services' => array(
1582                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1583                 '.20six.co.uk',
1584                 '.20six.fr',
1585                 'myblog.de',
1586                 'myblog.es',
1587         ),
1588         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1589         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1590         '2Page.de' => array(
1591                 '.dreipage.de',
1592                 '.2page.de',
1593         ),
1594         '*.3-hosting.net',
1595         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1596         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1597         '*.8000web.com',        // 75.126.189.45
1598         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1599         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1600         '*.aimoo.com',
1601         '*.alkablog.com',
1602         '*.alluwant.de',
1603         '.amkbb.com',
1604         'AOL.com' =>    // http://about.aol.com/international_services
1605                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1606                 '(?:aol|americaonline)\.' .
1607                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1608                 // Rough but works
1609         'Apple.com' => array('idisk.mac.com'),
1610         '*.askfaq.org',
1611         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1612         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1613         '*.asphost4free.com',
1614         'basenow.com',
1615         'BatCave.net' => array(
1616                 '.batcave.net',                 // 64.22.112.226
1617                 '.freehostpro.com',             // 64.22.112.226
1618         ),
1619         '*.bb-fr.com',
1620         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1621         '*.beeplog.com',
1622         'bestfreeforums.com',
1623         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1624         'Blog.com' => array(
1625                 '*.blog.com',
1626                 '*.blogandorra.com',    // by admin.domains at co.blog.com
1627                 '*.blogangola.com',             // by admin.domains at co.blog.com
1628         ),
1629         '*.blog.com.es',
1630         '*.blog.hr',
1631         '*.blog-fx.com',
1632         '*.blogbeee.com',
1633         'blogas.lt',
1634         'blogbud.com',
1635         '*.blogburkinafaso.com',
1636         '*.blogcu.com',                 // by info at nokta.com
1637         'blogfreely.com',
1638         '*.blogdrive.com',
1639         '*.blogg.de',
1640         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1641         'bloggercrab.com',
1642         'bloggers.nl',
1643         '*.bloggingmylife.com',
1644         '*.bloggles.info',
1645         '*.blogharbor.com',
1646         '*.bloguj.eu',
1647         'bloguitos.com',
1648         'blogosfer.com',
1649         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1650         '*.blogslive.net',
1651         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1652         '*.blogstream.com',
1653         'blogyaz.com',
1654         'board-4you.de',
1655         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1656         '*.boardhost.com',
1657         'Bravenet.com' => array(
1658                 '*.bravenet.com',
1659                 '*.bravehost.com',
1660         ),
1661         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1662         'C2k.jp' => array(
1663                 // by Makoto Okuse (webmaster at 2style.net)
1664                 '.081.in',
1665                 '.2style.in',
1666                 '.bian.in',
1667                 '.curl.in',
1668                 '.ennui.in',
1669                 '.jinx.in',
1670                 '.loose.in',
1671                 '.mist.in',
1672                 '.muu.in',
1673                 '.naive.in',
1674                 '.panic.in',
1675                 '.slum.in',
1676
1677                 // by 2style, ns *.click2k.net, *.2style.net
1678                 '.2st.jp',
1679                 '.betty.jp',
1680                 '.cabin.jp',
1681                 '.cult.jp',
1682                 '.mippi.jp',
1683                 '.purety.jp',
1684                 '.rapa.jp',
1685                 '.side-b.jp',
1686                 '.web-box.jp',
1687                 '.yea.jp',
1688
1689                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1690                 '.2style.net',
1691                 '.click2k.net',
1692                 '.houka5.com',
1693
1694                 // by click2k, ns *.click2k.net, *.2style.net
1695                 '.psyco.jp',
1696                 '.sweety.jp',
1697
1698                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1699                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1700         ),
1701         '*.chueca.com',
1702         'city-forum.com',
1703         'concepts-mall.com',
1704         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1705         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1706         'counterhit.de',
1707         '*.createforum.net',
1708         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1709         '*.createmybb.com',
1710         'CwCity.de' => array(
1711                 '.cwcity.de',
1712                 '.cwsurf.de',
1713         ),
1714         'dakrats.net',
1715         '*.dcswtech.com',
1716         '*.devil.it',
1717         '*.diaryland.com',
1718         'digg.com',
1719         'domains at galaxywave.net' => array(
1720                 'blogstation.net',
1721                 '.phpbb-host.com',
1722         ),
1723         'dotbb.be',
1724         '*.dox.hu',                             // dns at 1b.hu
1725         '*.eadf.com',
1726         '*.eblog.com.au',
1727         '*.ekiwi.de',
1728         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1729         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1730         '*.ebloggy.com',
1731         'enunblog.com',
1732         '*.epinoy.com',
1733         '*.ez-sites.ws',
1734         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1735         '*.fathippohosting.com',        // 208.101.3.192
1736         'FC2.com' => array(
1737                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1738                         // Many traps available:
1739                         //      bqdr.blog98.fc2.com,       iframe
1740                         //      csfir.blog87.fc2.com,      iframe
1741                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1742                         //      sippou2006.blog60.fc2.com, iframe
1743                         // NOTE: 'blog.fc2.com' is not included
1744                 '*.h.fc2.com',  // Adult
1745         ),
1746         '*.fizwig.com',
1747         'forum.ezedia.net',
1748         '*.extra.hu',                   // angelo at jasmin.hu
1749         '*.fanforum.cc',
1750         'fingerprintmedia.com',
1751         '*.filelan.com',
1752         '*.fora.pl',
1753         '*.forka.eu',
1754         '*.foren-city.de',
1755         'foren-gratis.de',
1756         '*.foros.tv',
1757         '*.forospace.com',
1758         'foroswebgratis.com',
1759         '*.forum-on.de',
1760         '*.forum24.se',
1761         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1762         '.forum66.com',
1763         '*.forumcommunity.net',
1764         'forumhosting.org',
1765         '*.forums.com',
1766         'forumbolt.com',
1767         'phpbb.forumgratis.com',
1768         '*.forumlivre.com',
1769         'forumnow.com.br',
1770         '*.forumppl.com',
1771         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
1772         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
1773                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
1774                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
1775                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
1776         '*.fory.pl',
1777         '*.free-25.de',
1778         '*.free-bb.com',
1779         'Free-Blog-Hosting.com' => array(
1780                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
1781                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
1782                 'blog-tonite.com',                      // ns *.phpwebhosting.com
1783                 'blogznow.com',                         // ns *.phpwebhosting.com
1784                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
1785                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
1786         ),
1787         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
1788         'free-guestbook.net',
1789         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
1790         'freebb.nl',
1791         '*.freeclans.de',
1792         '*.freelinuxhost.com',  // by 100webspace.com
1793         '*.nofeehost.com',
1794         '*.freehyperspace.com',
1795         'freeforum.at',                 // by Sandro Wilhelmy
1796         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
1797         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
1798         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
1799         '*.freewebhostingpro.com',
1800         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
1801         'FreeWebHostingArea.com' => array(      // or www.freewha.com
1802                 '*.6te.net',
1803                 '*.ueuo.com',
1804                 '*.orgfree.com',
1805         ),
1806         '*.freewebpage.org',
1807         'Freewebs.com' => array(        // by inquiries at freewebs.com
1808                 'freewebs.com',
1809                 'freewebsfarms.com',
1810         ),
1811         '*.freewebspace.net.au',
1812         '*.freemyforum.com',    // by messahost at gmail.com
1813         'freepowerboards.com',
1814         '*.freepowerboards.com',
1815         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
1816         'Funpic.de' => array(   // by alexander at liemen.net
1817                 '*.funpic.de',
1818                 '*.funpic.org',
1819         ),
1820         'gb-hoster.de',
1821         '*.genblogger.com',
1822         'GetBetterHosting.com' => array(
1823                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
1824                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
1825         ),
1826         '*.goodboard.de',
1827         'gossiping.net',
1828         '*.greatnuke.com',
1829         '*.guestbook.de',
1830         'gwebspace.de',
1831         'Google.com' => array(
1832                 '*.blogspot.com',
1833                 'docs.google.com',
1834                 'groups-beta.google.com',
1835         ),
1836         'guestbook.at',
1837         'club.giovani.it',
1838         '*.gratis-server.de',
1839         'healthcaregroup.com',
1840         '*.heliohost.org',
1841         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
1842                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
1843                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
1844                 '*.front.ru',           // (domain at hc.ru)
1845                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
1846                 '*.hotbox.ru',          // (domain at hc.ru)
1847                 '*.hotmail.ru',         // (hosting at hc.ru)
1848                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
1849                 '*.land.ru',            // (domain at hc.ru)
1850                 '*.mail15.com',         // (hosting at hc.ru)
1851                 '*.mail333.com',        // (hosting at hc.ru)
1852                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
1853                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
1854                 '*.pisem.net',          // (hosting at hc.ru)
1855                 '*.pochta.ru',          // (domain at hc.ru)
1856                 '*.pochtamt.ru',        // (domain at hc.ru)
1857                 '*.pop3.ru',            // (domain at hc.ru)
1858                 '*.rbcmail.ru',         // (domain at hc.ru)
1859                 '*.smtp.ru',            // (domain at hc.ru)
1860         ),
1861         '*.hiblogger.com',              // by chiaokin at gmail.com
1862         '*.hit.bg',                             // by forumup.com ??
1863         '*.host-page.com',
1864         '*.hostingclub.de',
1865         'forums.hspn.com',
1866         '*.httpsuites.com',
1867         '*.hut2.ru',
1868         'ibfree.org',                   // 208.101.45.88
1869         'IC.cz' => array(
1870                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
1871                 '*.hu.cz',                      // internetcentrum at gmail.com
1872                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
1873                 '*.ic.cz',                      // internetcentrum at gmail.com
1874                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
1875                 '*.own.cz',                     // internetcentrum at gmail.com
1876                 '*.phorum.cz',          // internetcentrum at gmail.com
1877                 '*.tym.cz',                     // internetcentrum at gmail.com
1878                 '*.tym.sk',                     // jobot at ignum.cz
1879                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
1880                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
1881                 '*.yw.sk',                      // jobot at ignum.cz
1882         ),
1883         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
1884                 '*.0moola.com',
1885                 '*.3000mb.com',
1886                 '.501megs.com',
1887                 '*.teracities.com',
1888                 '*.xoompages.com',
1889         ),
1890         '*.icspace.net',
1891         'iEUROP.net' => array(
1892                 '*.ibelgique.com',
1893                 '*.iespana.es',
1894                 '*.ifrance.com',
1895                 '*.iitalia.com',
1896                 '*.iquebec.com',
1897                 '*.isuisse.com',
1898         ),
1899         '*.ihateclowns.net',
1900         '*.ii55.com',
1901         '*.ipbfree.com',
1902         '*.iphorum.com',
1903         '*.blog.ijijiji.com',
1904         '*.info.com',
1905         '*.informe.com',
1906         'it168.com',
1907         '.iwannaforum.com',
1908         '*.jconserv.net',
1909         '*.jeeran.com',
1910         '*.jeun.fr',
1911         '*.journalscape.com',
1912         '*.justfree.com',
1913         '*.blog.kataweb.it',
1914         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
1915         '*.kokoom.com',
1916         'koolpages.com',
1917         '*.ksiegagosci.info',
1918         'Lide.cz' => array(
1919                 '*.lide.cz',
1920                 '*.sblog.cz',
1921         ),
1922         'limmon.net',
1923         'Livedoor.com' => array(
1924                 'blog.livedoor.jp',
1925                 '*.blog.livedoor.com',  // redirection
1926         ),
1927         '*.livejournal.com',
1928         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
1929         '*.logme.nl',
1930         'lol.to',
1931         'ltss.luton.ac.uk',
1932         'Lycos.com' => array(
1933                 '.angelfire.com',       // angelfire.lycos.com
1934
1935                 '*.jubii.dk',   // search., medlem.
1936                 '*.jubiiblog.co.uk',
1937                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
1938                 '*.jubiiblog.de',
1939                 '*.jubiiblog.dk',
1940                 '*.jubiiblog.fr',
1941                 '*.jubiiblog.it',
1942                 '*.jubiiblog.nl',
1943
1944                 '*.lycos.at',
1945                 '*.lycos.ch',
1946                 '*.lycos.co.uk',
1947                 'angelfire.lycos.com',
1948                 '*.lycos.de',
1949                 '*.lycos.es',
1950                 '*.lycos.fr',
1951                 '*.lycos.it',           // by Lycos Europe GmbH
1952                 '*.lycos.nl',
1953
1954                 '*.spray.se',
1955                 '*.sprayblog.se',
1956
1957                 '*.tripod.com',
1958         ),
1959         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
1960         '*.memebot.com',
1961         '*.messageboard.nl',
1962         'mokono GmbH' => array(
1963                 '*.blog.com.es',
1964                 '*.blog.de',
1965                 '*.blog.fr',
1966                 '*.blog.co.uk',
1967                 '*.blog.ca',
1968                 '*.blogs.se',
1969                 '*.blogs.fi',
1970                 '*.blogs.no',
1971                 '*.blogs.dk',
1972                 '*.blogs.ro',
1973                 '*.weblogs.pl',
1974                 '*.weblogs.cz',
1975                 '*.weblogs.hu',
1976         ),
1977         'mojklc.com',
1978         'MonForum.com' => array(
1979                 '*.monforum.com',
1980                 '*.monforum.fr',
1981         ),
1982         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
1983         '*.my10gb.com',
1984         'myblog.is',
1985         'myblogma.com',
1986         '*.myblogvoice.com',
1987         'myblogwiki.com',
1988         '*.myforum.ro',
1989         '*.myfreewebs.net',
1990         '*.mysite.com',
1991         '*.myxhost.com',
1992         '*.netfast.org',
1993         'NetGears.com' => array(
1994                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
1995                 '*.9k.com',                             // 64.39.31.55(netgears.com)
1996                 '*.freewebspace.com',   // 64.49.236.72
1997         ),
1998         'Netscape.com' => array('mywebpage.netscape.com'),
1999         'users.newblog.com',
2000         'neweconomics.info',
2001         '*.newsit.es',                          // 75.126.252.108
2002         'Northsky.com' => array(
2003                 // by hostmaster at northsky.com
2004                 // northsky.com redirects to communityarchitect.com
2005
2006                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2007                 '*.00author.com',
2008                 '*.00band.com',
2009                 '*.00books.com',
2010                 '*.00cash.com',
2011                 '*.00cd.com',
2012                 '*.00dvd.com',
2013                 '*.00family.com',
2014                 '*.00game.com',
2015                 '*.00home.com',
2016                 '*.00it.com',
2017                 '*.00me.com',
2018                 '*.00movies.com',
2019                 '*.00page.com',
2020                 '*.00politics.com',
2021                 '*.00sf.com',
2022                 '*.00show.com',
2023                 '*.00song.com',
2024                 '*.00trek.com',
2025                 '*.00video.com',
2026                 '*.0me.com',
2027                 '*.0pi.com',
2028                 '*.happy-couple.com',
2029                 '*.warp0.com',
2030
2031                 '*.50megs.com',         // 64.136.25.170
2032
2033                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2034                 '*.00server.com',
2035                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2036                 '*.fanspace.com',
2037
2038                 // 64.136.25.168 by Mark Bishop
2039                 '*.00go.com',
2040                 '*.00space.com',
2041                 '*.00sports.com',
2042         ),
2043         '*.nm.ru',
2044         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2045         'onlyfree.de',
2046         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2047         '*.ohost.de',
2048         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2049                 '.friko.pl',
2050                 '.jak.pl',
2051                 '.nazwa.pl',
2052                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2053                 '.w8w.pl',
2054                 '.za.pl',
2055                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2056         ),
2057         '*.parlaris.com',
2058         '*.pathfinder.gr',
2059         '*.persianblog.com',
2060         '*.phorum.pl',
2061         'Phpbb24.com' => array( // by Daniel Eriksson
2062                 '*.createforum.us',     // registry at webbland.se
2063                 '*.forumportal.us',     // registry at webbland.se
2064                 '*.freeportal.us',      // registry at network24.se
2065                 '*.phpbb2.us',          // daniel at danielos.com
2066                 '*.phpbb24.com',        // daniel at danielos.com
2067                 '*.myforumportal.com',  // daniel at webbland.se
2068         ),
2069         'phpbb4you.com',
2070         'phpbbcommunity.com',
2071         '*.phpbbx.de',
2072         '*.pochta.ru',
2073         '*.portbb.com',
2074         'powerwebmaster.de',
2075         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2076         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2077         '*.probook.de',
2078         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2079         '*.quickfreehost.com',
2080         'quizilla.com',
2081         '*.quotaless.com',
2082         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2083         'razyboard.com',
2084         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2085         'realhp.de',
2086         'reddit.com',           ///user/
2087         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2088                 '*.juicypornhost.com',
2089                 '*.pornzonehost.com',
2090                 '*.xhostar.com',
2091         ),
2092         'RIN.ru' => array(
2093                 '*.sbn.bz',
2094                 '*.wol.bz',
2095         ),
2096         '*.sayt.ws',
2097         'Seblg.com' => array(
2098                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2099                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2100         ),
2101         '*.seo-blog.org',
2102         '*.shoutpost.com',
2103         '*.siamforum.com',
2104         '*.siteburg.com',
2105         '*.sitehome.ru',
2106         '*.sitesfree.com',              // support at livesearching.com
2107         '*.sitesled.com',
2108         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2109         'SmarTrans.com' => array(
2110                 '.3w.to',
2111                 '.aim.to',
2112                 '.djmp.jp',
2113                 '.nihongourl.nu',
2114                 '.urljp.com',
2115                 '.www1.to',
2116                 '.www2.to',
2117                 '.www3.to',
2118         ),
2119         '*.spazioforum.it',
2120         'members.spboards.com',
2121         'forums.speedguide.net',
2122         'Sphosting.com' => array(       // by admin at sphosting.com
2123                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2124                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2125                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2126                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2127                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2128         ),
2129         '*.spicyblogger.com',
2130         '*.spotbb.com',
2131         '*.squarespace.com',
2132         'stickypond.com',
2133         'stormloader.com',
2134         'strikebang.com',
2135         '*.sultryserver.com',
2136         '*.t35.com',
2137         '*.talks.at',
2138         'tabletpcbuzz.com',
2139         '*.talkthis.com',
2140         'tbns.net',
2141         'telasipforums.com',
2142         'thestudentunderground.org',
2143         'think.ubc.ca',
2144         '*.thumblogger.com',
2145         'Topix.com' => array(
2146                 'topix.com',
2147                 'topix.net',
2148         ),
2149         'forum.tourism-talk.com.au',
2150         'tycho at e-lab.nl' => array(
2151                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2152                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2153         ),
2154         'UcoZ Web-Services' => array(
2155                 '*.3dn.ru',
2156                 '*.clan.su',
2157                 '*.moy.su',
2158                 '*.my1.ru',
2159                 '*.p0.ru',
2160                 '*.pp.net.ua',
2161                 '*.ucoz.co.uk',
2162                 '*.ucoz.com',
2163                 '*.ucoz.net',
2164                 '*.ucoz.org',
2165                 '*.ucoz.ru',
2166                 '*.ws.co.ua',
2167         ),
2168         '*.unforo.net',
2169         '*.vdforum.ru',
2170         '*.vtost.com',
2171         '*.vidiac.com',
2172         'Voila.fr' => array('.site.voila.fr'),
2173         'volny.cz',
2174         'voy.com',
2175         '*.welover.org',
2176         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2177                 '*.fasthost.tv',
2178                 '*.hothost.tv',
2179                 '*.isgreat.tv',
2180                 '*.issexy.tv',
2181                 '*.isterrible.tv',
2182                 '*.somegood.tv',
2183                 '*.adultnations.com',
2184                 '*.alladultfemale.com',
2185                 '*.alladultmale.com',
2186                 '*.allbisexual.com',
2187                 '*.allbreast.com',
2188                 '*.allfeminism.com',
2189                 '*.allmanpages.com',
2190                 '*.allmendirect.com',
2191                 '*.allphotoalbum.com',
2192                 '*.allsexpages.com',
2193                 '*.allwomanweb.com',
2194                 '*.attorney-site.com',
2195                 '*.bedclip.com',
2196                 '*.bestfamilysite.com',
2197                 '*.bestmusicpages.com',
2198                 '*.bigmoron.com',
2199                 '*.bourgeoisonline.com',
2200                 '*.candyfrom.us',
2201                 '*.cartoonhit.com',
2202                 '*.cat-on-line.com',
2203                 '*.chokesondick.com',
2204                 '*.closeupsof.us',
2205                 '*.cpa-site.com',
2206                 '*.dampgirl.com',
2207                 '*.dampgirls.com',
2208                 '*.deepestfetish.com',
2209                 '*.docspages.com',
2210                 '*.dog-on-line.com',
2211                 '*.dogcountries.com',
2212                 '*.dognations.com',
2213                 '*.doingitwith.us',
2214                 '*.drenchedface.com',
2215                 '*.drenchedlips.com',
2216                 '*.drspages.com',
2217                 '*.edogden.com',
2218                 '*.eroticountry.com',
2219                 '*.fasthost.tv',
2220                 '*.fineststars.com',
2221                 '*.foronlinegames.com',
2222                 '*.forplanetearth.com',
2223                 '*.freeadultparty.com',
2224                 '*.freespeechsite.com',
2225                 '*.gayadultxxx.com',
2226                 '*.gaytaboo.com',
2227                 '*.greatcookery.com',
2228                 '*.greatrecipepages.com',
2229                 '*.greatstreamingvideo.com',
2230                 '*.hatesit.com',
2231                 '*.hothost.tv',
2232                 '*.iscrappy.com',
2233                 '*.isgreat.tv',
2234                 '*.issexy.tv',
2235                 '*.isterrible.tv',
2236                 '*.itinto.us',
2237                 '*.japannudes.net',
2238                 '*.jesussave.us',
2239                 '*.jesussaveus.com',
2240                 '*.labialand.com',
2241                 '*.lettersfrom.us',
2242                 '*.lookingat.us',
2243                 '*.lunaticsworld.com',
2244                 '*.microphallus.com',
2245                 '*.mycatshow.com',
2246                 '*.mydogshow.com',
2247                 '*.myhardman.com',
2248                 '*.mylawsite.net',
2249                 '*.mylovething.com',
2250                 '*.onasoapbox.com',
2251                 '*.onlinepulpit.com',
2252                 '*.petitionthegovernment.com',
2253                 '*.photosfor.us',
2254                 '*.picturetrades.com',
2255                 '*.pleasekiss.us',
2256                 '*.politicalemergency.com',
2257                 '*.power-emergency.com',
2258                 '*.prayingfor.us',
2259                 '*.realbadidea.com',
2260                 '*.realisticpolitics.com',
2261                 '*.reallybites.com',
2262                 '*.reallypumping.us',
2263                 '*.reallyrules.com',
2264                 '*.reallysuckass.com',
2265                 '*.reallysucksass.com',
2266                 '*.realsweetheart.com',
2267                 '*.rottenass.com',
2268                 '*.schoolreference.com',
2269                 '*.sexheroes.com',
2270                 '*.sharewith.us',
2271                 '*.smutstars.com',
2272                 '*.soakinglips.com',
2273                 '*.somegood.tv',
2274                 '*.songsfrom.us',
2275                 '*.stinkingfart.com',
2276                 '*.stinkyhands.com',
2277                 '*.storiesfrom.us',
2278                 '*.taboocountry.com',
2279                 '*.television-series.com',
2280                 '*.thisbelongsto.us',
2281                 '*.totallyboning.us',
2282                 '*.vaginasisters.com',
2283                 '*.verydirtylaundry.com',
2284                 '*.videosfor.us',
2285                 '*.videosfrom.us',
2286                 '*.videosof.us',
2287                 '*.virtualdogshit.com',
2288                 '*.web1000.com',
2289                 '*.webpicturebook.com',
2290                 '*.wronger.com',
2291                 '*.xxxnations.com',
2292                 '*.yourwaywith.us',
2293         ),
2294         'webblog.ru',
2295         'weblogmaniacs.com',
2296         '.webng.com',                   // www.*, www3.*
2297         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
2298         'websitetoolbox.com',
2299         'Welnet.de' => array(
2300                 'welnet.de',
2301                 'welnet4u.de',
2302         ),
2303         'wh-gb.de',
2304         '*.wikidot.com',
2305         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
2306         '*.wmjblogs.ru',
2307         '*.wordpress.com',
2308         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
2309         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
2310         '*.xforum.se',
2311         'xfreeforum.com',
2312         '*.xoomwebs.com',
2313         '.freeblogs.xp.tl',
2314         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
2315         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
2316         'Yahoo.com' => array(
2317                 'geocities.com',
2318         ),
2319         'YANDEX, LLC.' => array(        // noc at yandex.net
2320                 '*.narod.ru',
2321                 'ya.ru',
2322                 'yandex.ru',
2323         ),
2324         '*.yeahost.com',
2325         'yourfreebb.de',
2326         'Your-Websites.com' => array(
2327                 '*.your-websites.net',
2328                 '*.web-space.ws',
2329         ),
2330 );
2331
2332 // --------------------------------------------------
2333
2334 $blocklist['B-2'] = array(
2335
2336         // B-2: Jacked contents, something implanted
2337         // (e.g. some sort of blog comments, BBSes, forums, wikis)
2338         '*.3dm3.com',
2339         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
2340         '*.1fr1.com',
2341         'a4aid.org',
2342         'aac.com',
2343         '*.aamad.org',
2344         'ad-pecjak.si',
2345         'agnt.org',
2346         'alwanforthearts.org',
2347         '*.anchor.net.au',
2348         'anewme.org',
2349         'internetyfamilia.asturiastelecentros.com',
2350         'Ball State University' => array('web.bsu.edu'),
2351         'btofaq.net',                   ///v3/forum
2352         'blepharospasm.org',
2353         'nyweb.bowlnfun.dk',
2354         '*.buzznet.com',
2355         '*.canberra.net.au',
2356         'castus.com',
2357         'Case Western Reserve University' => array('case.edu'),
2358         'ceval.de',
2359         'codespeak.net',
2360         'Colorado School of Mines' => array('ticc.mines.edu'),
2361         '*.colourware.co.uk',
2362         'cpuisp.com',
2363         'International Christian University' => array('icu.edu.ua'),
2364         '*.iphpbb.com',
2365         'board-z.de',
2366         '*.board-z.de',
2367         'California State University Stanislaus' => array('writing.csustan.edu'),
2368         'cannon.co.za',
2369         'columbosgarden.com',
2370         '*.communityhost.de',
2371         'connectionone.org',
2372         'deathwinds.com',
2373         'deforum.org',
2374         'delayedreaction.org',
2375         'deproduction.org',
2376         'dc503.org',
2377         'dre-centro.pt',
2378         'Duke University' => array('devel.linux.duke.edu'),
2379         '*.esen.edu.sv',
2380         'forums.drumcore.com',
2381         'dundeeunited.org',
2382         'energyglass.com.ua',
2383         'exclusivehotels.com',
2384         'info.ems-rfid.com',
2385         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
2386         'fbwloc.com',
2387         '.fhmcsa.org.au',
2388         'findyourwave.co.uk',
2389         'frogcafe.net',
2390         'plone4.fnal.gov',
2391         'freeforen.com',
2392         'funkdoc.com',
2393         'funnyclipcentral.com',
2394         'gearseds.com',
2395         'generationrice.com',
2396         'ghettojava.com',
2397         'gnacademy.org',
2398         '*.goodboard.de',
2399         'GreenDayVideo.net' => array(
2400                 'greendayvideo.net',
2401                 'espanol.greendayvideo.net',
2402         ),
2403         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
2404         'Harvard Law School' => array('blogs.law.harvard.edu'),
2405         'helpiammoving.com',
2406         'homepage-dienste.com',
2407         'Howard University' => array('networks.howard.edu'),
2408         'hullandhull.com',
2409         'Huntington University' => array('huntington.edu'),
2410         'huskerink.com',
2411         '.hyba.info',
2412         'inda.org',
2413         '*.indymedia.org',      // by abdecom at riseup.net
2414         'instantbulletin.com',
2415         'internetincomeclub.com',
2416         '*.inventforum.com',
2417         'Iowa State University' => array('boole.cs.iastate.edu'),
2418         'ipwso.org',
2419         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
2420         'ironmind.com',
2421         'skkustp.itgozone.com', // hidden JavaScript
2422         'jazz2online.com',
2423         '.jloo.org',
2424         'Kazan State University' => array(
2425                 'dir.kzn.ru',
2426                 'sys.kcn.ru',
2427         ),
2428         'test.kernel.org',
2429         'kevindmurray.com',
2430         'kroegjesroutes.nl',
2431         '.legion.org',
2432         'Loyola Marymount University' => array('lmu.edu'),
2433         'forum.lixium.fr',
2434         'macfaq.net',
2435         'me4x4.com',
2436         'microbial-ecology.net',
2437         'minsterscouts.org',
2438         'morallaw.org',
2439         'morerevealed.com',
2440         'macronet.org',
2441         'mamiya.co.uk',
2442         'vcd.mmvcd.com',
2443         'Monmouth College' => array('department.monm.edu'),
2444         'mountainjusticemedia.org',
2445         '*.mybbland.com',
2446         'mydlstore.com',
2447         '*.netboardz.com',
2448         'North Carolina A&T State University' => array(
2449                 'ncat.edu',
2450                 'my.ncat.edu',
2451                 'hlc.ncat.edu',
2452         ),
2453         'placetobe.org',
2454         'users.nethit.pl',
2455         'nightclubvip.net',
2456         'njbodybuilding.com',
2457         'nlen.org',
2458         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
2459         'offtextbooks.com',
2460         'ofimatika.com',
2461         'omakase-net',                  // iframe
2462         'omikudzi.ru',
2463         'openchemist.net',
2464         'palungjit.com',
2465         'pataphysics-lab.com',
2466         'paullima.com',
2467         'perl.org.br',
2468         'pfff.co.uk',
2469         'pix4online.co.uk',
2470         'plone.dk',
2471         'preform.dk',
2472         'privatforum.de',
2473         'publicityhound.net',
2474         'qea.com',
2475         'rbkdesign.com',
2476         'rehoboth.com',
2477         'rodee.org',
2478         'ryanclark.org',
2479         '*.reallifelog.com',
2480         'rkphunt.com',
2481         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
2482         'sapphireblue.com',
2483         'saskchamber.com',
2484         'savevoorhees.org',
2485         'selikoff.net',
2486         'serbisyopilipino.org',
2487         'setbb.com',
2488         'sharejesusinternational.com',
2489         'silver-tears.net',
2490         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
2491         '.softpress.com',
2492         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
2493         'tehudar.ru',
2494         'Tennessee Tech University' => array('manila.tntech.edu'),
2495         'thebluebird.ws',
2496         'theosis.org',
2497         '*.thoforum.com',
2498         'troms-slekt.com',
2499         'theedgeblueisland.com',
2500         'toyshop.com.tw',               // /images/sigui/
2501         'torontoplace.com',
2502         'chat.travlang.com',
2503         'trickropingbylassue.com',
2504         'Truman State University' => array('mathbio.truman.edu'),
2505         'tuathadedannan.org',
2506         'txgotg.com',
2507         'tzaneen.co.za',
2508         'The University of North Dakota' => array(
2509                 'learn.aero.und.edu',
2510                 'ez.asn.und.edu',
2511         ),
2512         'The University of Alabama' => array('bama.ua.edu'),
2513         'unisonscotlandlaw.co.uk',
2514         'University of California' => array('classes.design.ucla.edu'),
2515         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
2516         'University of Northern Colorado' => array('unco.edu'),
2517         'University of Toronto' => array(
2518                 'environment.utoronto.ca',
2519                 'grail.oise.utoronto.ca',
2520                 'utsc.utoronto.ca',
2521         ),
2522         'urgentclick.com',
2523         'vacant.org.uk',
2524         'Villa Julie College' => array('www4.vjc.edu'),
2525         'Vail Valley Foundation' => array('.vvf.org'),
2526         'wabson.org',
2527         'warping.to',           // Seems (a redirection site, but now) taken advantage of
2528         'webarch.com',          // by WebArchitects (webarch at insync.net)
2529         'weehob.com',
2530         'West Virginia University Parkersburg' => array('wvup.edu'),
2531         'williamsburgrentals.com',
2532         'wolvas.org.uk',
2533         'wookiewiki.org',
2534         'xsgaming.com',                 // Jacked
2535         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
2536         'Yahoo.com' => array(
2537                 'blog.360.yahoo.com',
2538                 '*.groups.yahoo.com'
2539         ),
2540         'yasushi.site.ne.jp',   // One of mixedmedia.net'
2541         'youthpeer.org',
2542         '*.zenburger.com',
2543         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
2544 );
2545
2546 // --------------------------------------------------
2547
2548 $blocklist['C'] = array(
2549
2550         // C: Sample setting of:
2551         // Exclusive spam domains
2552         //
2553         // Seems to have flavor of links, pills, gamble, online-games, erotic,
2554         // affiliates, finance, sending viruses, malicious attacks to browsers,
2555         // and/or mixed ones
2556         //
2557         // Please notify us about this list with reason:
2558         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
2559
2560         // C-1: Domain sets (seems to be) born to spam you
2561         //
2562         // All buziness-related spam
2563         //'.biz'
2564         //
2565         'admin at seekforweb.com' => array(
2566                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
2567                 '.lovestoryx.com',
2568                 '.loveaffairx.com',
2569                 '.onmore.info',
2570                 '.scfind.info',
2571                 '.scinfo.info',
2572                 '.webwork88.info',
2573         ),
2574         'boss at bse-sofia.bg' => array(        // by Boris
2575                 '.htewbop.org',
2576                 '.kimm--d.org',
2577                 '.gtre--h.org',
2578                 '.npou--k.org',
2579                 '.bres--z.org',
2580                 '.berk--p.org',
2581                 '.bplo--s.org',
2582                 '.basdpo.org',
2583                 '.jisu--m.org',
2584                 '.kire--z.org',
2585                 '.mertnop.org',
2586                 '.mooa--c.org',
2587                 '.nake--h.org',
2588                 '.noov--b.org',
2589                 '.suke--y.org',
2590                 '.vasdipv.org',
2591                 '.vase--l.org',
2592                 '.vertinds.org',
2593         ),
2594         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
2595                 '.aqq3.info',
2596                 '.axa00.info',
2597                 '.okweb11.org',
2598                 '.okweb12.org',
2599                 '.okweb13.org',
2600                 '.okweb14.org',
2601         ),
2602         'opezdol at gmail.com' => array(
2603                 '.informazionicentro.info',
2604                 '.notiziacentro.info',
2605         ),
2606         'SomethingGen' => array(
2607                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
2608                 // 'CamsGen' by Sergey (buckster at hotpop.com)
2609                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
2610                 // by Lee Chang (nebucha at model-x.com)
2611                 '.adult-chat-world.info',       // by Lui
2612                 '.adult-chat-world.org',        // by Lui
2613                 '.adult-sex-chat.info',         // by Lui
2614                 '.adult-sex-chat.org',          // by Lui
2615                 '.adult-cam-chat.info',         // by Lui
2616                 '.adult-cam-chat.org',          // by Lui
2617                 '.dildo-chat.org',                      // by Lui
2618                 '.dildo-chat.info',                     // by Lui
2619                 // flirt-online.info is not CamsGen
2620                 '.flirt-online.org',            // by Lui
2621                 '.live-adult-chat.info',        // by Lui
2622                 '.live-adult-chat.org',         // by Lui
2623                 '.sexy-chat-rooms.info',        // by Lui
2624                 '.sexy-chat-rooms.org',         // by Lui
2625                 '.swinger-sex-chat.info',       // by Lui
2626                 '.swinger-sex-chat.org',        // by Lui
2627                 '.nasty-sex-chat.info',         // by Lui
2628                 '.nasty-sex-chat.org',          // by Lui
2629
2630                 '.camshost.info',                       // by Sergey
2631                 '.camdoors.info',                       // by Sergey
2632                 '.chatdoors.info',                      // by Sergey
2633
2634                 '.lebedi.info',                         // by Pronin
2635                 '.loshad.info',                         // by Pronin
2636                 '.porosenok.info',                      // by Pronin
2637                 '.indyushonok.info',            // by Pronin
2638                 '.kotyonok.info',                       // by Pronin
2639                 '.kozlyonok.info',                      // by Pronin
2640                 '.magnoliya.info',                      // by Pronin
2641                 '.svinka.info',                         // by Pronin
2642                 '.svinya.info',                         // by Pronin
2643                 '.zherebyonok.info',            // 89.149.206.225 by Pronin
2644
2645                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
2646
2647                 '.adult-cam-chat-sex.info',             // by Lee
2648                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
2649                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
2650                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
2651                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
2652                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
2653                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
2654                 '.sex-chat-porn-cam.info',              // by Lee
2655         ),
2656         'mital at topo20.org' => array( // by Marcello Italianore
2657                 '.trevisos.org',
2658                 '.topo20.org',
2659         ),
2660         'WellCams.com' => array(
2661                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
2662                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
2663                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
2664         ),
2665         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
2666                 '.besturgent.org',
2667                 '.googletalknow.org',
2668                 '.montypythonltd.org',
2669                 '.supersettlemet.org',
2670                 '.thepythonfoxy.org',
2671                 '.ukgamesyahoo.org',
2672                 '.youryahoochat.org',
2673         ),
2674         'kikimas at mail.net' => array( // Redirect to nb717.com etc
2675                 '.dbsajax.org',
2676                 '.acgt2005.org',
2677                 '.gopikottoor.com',
2678                 '.koosx.org',
2679                 '.mmgz.org',
2680                 '.zhiyehua.net',
2681         ),
2682         'vdf at lovespb.com' => array(  // by Andrey
2683                 '.02psa.info',
2684                 '.1818u.org',
2685                 '.18ew.info',
2686                 '.43sexx.org',
2687                 '.56porn.org',
2688                 '.6discount.info',
2689                 '.78porn.org',          // "UcoZ WEB-SERVICES"
2690                 '.78rus.info',
2691                 '.92ssex.org',          // "ForumGenerator"
2692                 '.93adult.org',         // "ForumGenerator"
2693                 '.aboutsr.info',
2694                 '.aboutzw.info',
2695                 '.all23.info',
2696                 '.allvdf.info',
2697                 '.buy-dge.info',
2698                 '.buypo.info',
2699                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
2700                 '.cv83.info',
2701                 '.cvwifw.info',
2702                 '.dabouts.info',
2703                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
2704                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
2705                 '.free01sa.info',
2706                 '.frees1.info',
2707                 '.freexz.info',
2708                 '.ifree-search.org',
2709                 '.lovespb.info',
2710                 '.myso2.info',
2711                 '.nb74u.info',
2712                 '.ohhh2.info',
2713                 '.ol43.info',
2714                 '.olala18.info',
2715                 '.oursales.info',
2716                 '.pasian1.info',
2717                 '.pldk.info',
2718                 '.po473.info',
2719                 '.pornr.info',          // "UcoZ WEB-SERVICES"
2720                 '.poz2.info',
2721                 '.qpf8j4d.info',
2722                 '.saleqw.info',
2723                 '.sexof.info',          // "UcoZ WEB-SERVICES"
2724                 '.sexz18.info',
2725                 '.sexy69a.info',
2726                 '.shedikc.info',
2727                 '.spb78.info',
2728                 '.usacanadauk.info',
2729                 '.v782mks.info',
2730                 '.vny0.info',
2731                 '.wifes1.info',
2732                 '.xranvam.info',
2733                 '.zenitcx.info',
2734                 '.zxolala.info',
2735         ),
2736         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
2737                 '.care01.info',
2738                 '.care02.info',
2739                 '.care03.info',
2740                 '.care04.info',
2741                 '.care05.info',
2742                 '.care06.info',
2743                 '.care07.info',
2744                 '.care08.info',
2745                 '.care09.info',
2746                 '.care10.info',
2747                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
2748                 '.klastar01.info',
2749                 '.klastar02.info',
2750                 '.klastar03.info',
2751                 '.klastar04.info',
2752                 '.klastar05.info',
2753                 '.klastar06.info',
2754                 '.klastar07.info',
2755                 '.klastar08.info',
2756                 '.klastar09.info',
2757                 '.klastar10.info',
2758                 '.um20ax01.info',
2759                 '.um20ax02.info',
2760                 '.um20ax03.info',
2761                 '.um20ax04.info',
2762                 '.um20ax05.info',
2763                 '.um20ax06.info',
2764                 '.um20ax07.info',
2765                 '.um20ax08.info',
2766                 '.um20ax09.info',
2767                 '.um20ax10.info',
2768         ),
2769         'forrass at gmail.com' => array(        // by Ismail
2770                 '.zmh01.info',
2771                 '.zmh02.info',
2772                 '.zmh03.info',
2773                 '.zmh04.info',
2774                 '.zmh05.info',
2775                 '.zmh06.info',
2776                 '.zmh07.info',
2777                 '.zmh08.info',
2778                 '.zmh09.info',
2779                 '.zmh10.info',
2780         ),
2781         'Varsylenko Vladimir and family' => array(
2782                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
2783                 // by David C. Lack (David.C.Lack at dodgeit.com)
2784                 // by Kuzma V Safonov (admin at irtes.ru)
2785                 // by Petrov Vladimir (vvm_kz at rambler.ru)
2786                 // by LAURI FUNK (vvm_kz at rambler.ru)
2787
2788                 // 64.92.162.210(*.static.reverse.ltdomains.com)
2789                 '.abrek.info',                          // by Petrov
2790                 '.allsexonline.info',           // by Varsylenko
2791                 '.d1rnow.info',                         // by Petrov
2792                 '.doxer.info',                          // Petrov
2793                 '.freeforworld.info',           // Varsylenko
2794                 '.goodworksite.info',           // Varsylenko
2795                 '.onall.info',                          // by Varsylenko
2796                 '.powersiteonline.info',        // by Varsylenko
2797                 '.rentmysite.info',                     // by Varsylenko
2798                 '.sexdrink.info',                       // by Petrov
2799                 '.siteszone.info',                      // by Varsylenko
2800                 '.sfup.info',                           // by Petrov
2801                 '.superfreedownload.info',      // by Varsylenko
2802                 '.superneeded.info',            // by Varsylenko
2803                 '.srup.info',                           // by Petrov
2804
2805                 // 66.235.185.143(*.svabuse.info)
2806                 '.accommodationwiltshire.com',  // by Petrov
2807                 '.levines.info',                        // by Petrov
2808                 '.sernost.info',                        // by Petrov
2809                 '.sexvideosite.info',           // by Petrov
2810                 '.vvsag.info',                          // by Petrov
2811
2812                 // 81.0.195.134
2813                 '.michost.info',                        // by LAURI
2814                 '.parther.info',                        // by LAURI
2815
2816                 // 88.214.202.100
2817                 '.gitsite.info',                        // by Petrov
2818                 '.organiq.info',                        // by Petrov
2819                 '.yoursitedh.info',                     // by Petrov
2820
2821                 // 217.11.233.58 by Petrov
2822                 '.mp3vault.info',
2823
2824                 // DNS time out or failed
2825                 '.bequeous.info',                       // by Davi
2826                 '.sopius.info',                         // by Kuzma
2827                 '.sovidopad.info',                      // by Kuzma
2828                 '.yerap.info',                          // by Kuzma
2829         ),
2830         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
2831                 '.flywebs.com',
2832                 '.hostrim.com',
2833                 '.playbit.com',
2834         ),
2835         'webmaster at dgo3d.info' => array(     // by Son Dittman
2836                 '.bsb3b.info',
2837                 '.dgo3d.info',
2838                 '.dgo5d.info',
2839         ),
2840         'cooler.infomedia at gmail.com' => array(
2841                 '.diabetescarelink.com',
2842                 '.firstdebthelp.com',
2843         ),
2844         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
2845                 '.pokah.lv',
2846                 '.astrons.com',
2847         ),
2848         'seocool at bk.ru' => array(    // by Skar
2849                 '.implex3.com',
2850                 '.implex6.info',
2851                 '.softprof.org',
2852         ),
2853         'Caslim.info' => array(
2854                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
2855                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
2856         ),
2857         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
2858                 '.777-poker.biz',
2859                 '.porn-11.com',
2860         ),
2861         'Conto.pl' => array(
2862                 '.8x.pl',               // domena at az.pl
2863                 '.3x3.pl',              // by biuro at nazwa.pl
2864                 '.conto.pl',    // by biuro at nazwa.pl
2865                 '.guu.pl',              // by conto.pl (domena at az.pl)
2866                 '.xcx.pl',              // domena at az.pl
2867                 '.yo24.pl',             // domena at az.pl
2868         ),
2869         'mail at pcinc.cn' => array(
2870                 // Domains by Lin Zhi Qiang
2871                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
2872
2873                 // 125.65.112.11
2874                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
2875                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
2876                 '.shoopivdoor.com',
2877
2878                 // 125.65.112.12
2879                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
2880                 '.hosetaibei.com',
2881                 '.playsese.com',
2882
2883                 // 125.65.112.13
2884                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
2885                 '.ahatena.com',
2886                 '.asdsdgh-jp.com',
2887                 '.conecojp.net',
2888                 '.game-oekakibbs.com',
2889                 '.geocitygame.com',
2890                 '.gsisdokf.net',
2891                 '.korunowish.com',
2892                 '.netgamelivedoor.com',
2893                 '.soultakerbbs.net',
2894                 '.yahoo-gamebbs.com',
2895                 '.ywdgigkb-jp.com',
2896
2897                 // 125.65.112.14
2898                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
2899                 '.acyberhome.com',
2900                 '.bbs-qrcode.com',
2901                 '.gamesroro.com',
2902                 '.gameyoou.com',
2903                 '.gangnu.com',
2904                 '.goodclup.com',
2905                 '.lineage321.com',
2906                 '.linkcetou.com',
2907                 '.love888888.com',
2908                 '.ragnarok-bbs.com',
2909                 '.ragnarok-game.com',
2910                 '.rmt-navip.com',
2911                 '.watcheimpress.com',
2912
2913                 // 125.65.112.15
2914                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
2915                 '.18girl-av.com',
2916                 '.aurasoul-visjp.com',
2917                 '.gamaniaech.com',
2918                 '.game-mmobbs.com',
2919                 '.gameslin.net',
2920                 '.gemnnammobbs.com',
2921                 '.gogolineage.net',
2922                 '.grandchasse.com',
2923                 '.jpragnarokonline.com',
2924                 '.jprmthome.com',
2925                 '.maplestorfy.com',
2926                 '.netgamero.net',
2927                 '.nothing-wiki.com',
2928                 '.ourafamily.com',
2929                 '.ragnarok-sara.com',
2930                 '.rmt-lineagecanopus.com',
2931                 '.rmt-ranloki.com',
2932                 '.rogamesline.com',
2933                 '.roprice.com',
2934                 '.tuankong.com',
2935                 '.twreatch.com',
2936
2937                 // 125.65.112.22
2938                 // The same IP: web013.cdnhost.cn
2939                 '.lzy88588.com',
2940                 '.ragnaroklink.com',
2941
2942                 // 125.65.112.24
2943                 '.rmtfane.com',
2944                 '.fc2weday.com',
2945                 '.nlftweb.com',
2946
2947                 // 125.65.112.27
2948                 '.i520i.com',
2949                 '.sunwayto.com',
2950
2951                 // 125.65.112.31
2952                 // The same IP: web016.cdnhost.cn
2953                 '.twyaooplay.com',
2954
2955                 // 125.65.112.32
2956                 // The same IP: web037.cdnhost.cn
2957                 '.emeriss.com',
2958                 '.raginfoy.com',
2959                 '.ragnarokgvg.com',
2960                 '.rentalbbs-livedoor.com',
2961                 '.romaker.com',
2962                 '.sagewikoo.com',
2963                 '.samples112xrea.com',
2964                 '.wiki-house.com',
2965
2966                 // 125.65.112.49
2967                 '.chaosx0.com',
2968
2969                 // 125.65.112.88
2970                 // The same IP: web015.cdnhost.cn
2971                 '.a-hatena.com',
2972                 '.biglobe-ne.com',
2973                 '.blogplaync.com',
2974                 '.din-or.com',
2975                 '.dtg-gamania.com',
2976                 '.fcty-net.com',
2977                 '.game-fc2blog.com',
2978                 '.gameurdr.com',
2979                 '.getamped-garm.com',
2980                 '.interzq.com',
2981                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
2982                 '.luobuogood.com',
2983                 '.ragnarok-search.com',
2984                 '.rinku-livedoor.com',
2985
2986                 // 125.65.112.90
2987                 '.gtvxi.com',
2988
2989                 // 125.65.112.91
2990                 // The same IP: web004.cdnhost.cn
2991                 '.6828teacup.com',
2992                 '.blog-livedoor.net',
2993                 '.cityblog-fc2web.com',
2994                 '.deco030-cscblog.com',
2995                 '.imbbs2t4u.com',
2996                 '.k5dionne.com',
2997                 '.lineagejp-game.com',
2998                 '.mbspro6uic.com',
2999                 '.slower-qth.com',
3000                 '.wikiwiki-game.com',
3001
3002                 // 125.65.112.93
3003                 // The same IP: web022.cdnhost.cn
3004                 '.aaa-livedoor.net',
3005                 '.cityhokkai.com',              // web022.cdnhost.cn
3006                 '.fanavier.net',
3007                 '.geocitylinks.com',    // web022.cdnhost.cn
3008                 '.kuronowish.net',              // web022.cdnhost.cn
3009                 '.ro-bot.net',
3010
3011                 // 125.65.112.95
3012                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3013                 '.23styles.com',
3014                 '.aehatena-jp.com',
3015                 '.ameblog-jp.net',
3016                 '.antuclt.com',
3017                 '.blog-ekndesign.com',
3018                 '.d-jamesinfo.com',
3019                 '.editco-jp.com',
3020                 '.ezbbsy.com',
3021                 '.extd-web.com',
3022                 '.fotblong.com',
3023                 '.game62chjp.net',
3024                 '.gamegohi.com',
3025                 '.gamesmusic-realcgi.net',
3026                 '.gamesragnaroklink.net',
3027                 '.homepage-nifty.com',
3028                 '.ie6xp.com',
3029                 '.irisdti-jp.com',
3030                 '.jklomo-jp.com',
3031                 '.jpxpie6-7net.com',
3032                 '.lian-game.com',
3033                 '.lineage-bbs.com',
3034                 '.lineage1bbs.com',
3035                 '.livedoor-game.com',
3036                 '.litcan.com',
3037                 '.lovejpjp.com',
3038                 '.m-phage.com',
3039                 '.muantang.com',
3040                 '.plusd-itmedia.com',
3041                 '.runbal-fc2web.com',
3042                 '.saussrea.com',
3043                 '.tooalt.com',
3044                 '.toriningena.net',
3045                 '.yahoodoor-blog.com',
3046                 '.yy14-kakiko.com',
3047
3048                 // 125.65.112.137
3049                 '.clublineage.com',
3050
3051                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3052                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3053                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3054
3055                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3056                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3057
3058                 '.games-nifty.com',             // 255.255.255.255 now
3059                 '.homepage3-nifty.com', // 255.255.255.255 now
3060         ),
3061         'caddd at 126.com' => array(
3062                 '.chengzhibing.com',    // by chen gzhibing
3063                 '.jplinux.com',                 // by lian liang
3064                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3065                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3066                 '.tooplogui.com',               // by zibing cai
3067                 '.twsunkom.com',                // by guo zhi wei
3068                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3069         ),
3070         'nuigiym2 at 163.com' => array( // by fly bg
3071                 '.linainfo.net',                // Seems IP not allocated now
3072                 '.lineagalink.com',             // 220.247.157.99
3073                 '.lineagecojp.com',             // 61.139.126.10
3074                 '.ragnarokonlina.com',  // 220.247.158.99
3075         ),
3076         'aakin at yandex.ru' => array(  // by Baer
3077                 '.entirestar.com',
3078                 '.superbuycheap.com',
3079                 '.topdircet.com',
3080         ),
3081         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3082                 '.tianmieccp.com',
3083                 '.xianqiao.net',
3084         ),
3085         'm.frenzy at yahoo.com' => array(       // by Michael
3086                 '.p5v.org',
3087                 '.j111.net',
3088                 '.searchhunter.info',
3089                 '.soft2you.info',
3090                 '.top20health.info',
3091                 '.top20ringtones.info',
3092                 '.top20travels.info',
3093                 '.v09v.info',
3094                 '.x09x.info',
3095                 '.zb-1.com',
3096         ),
3097         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3098                 '.bingogoldenpalace.info',
3099                 '.ccarisoprodol.info',
3100                 '.ezxcv.info',
3101                 '.isuperdrug.com',
3102                 '.pharmacif.info',
3103                 '.pornsexteen.biz',
3104                 '.ugfds.info',
3105                 '.vviagra.info',
3106         ),
3107         'anatolsenator at gmail.com' => array(  // by Anatol
3108                 '.cheapestviagraonline.info',
3109                 '.buyphentermineworld.info'
3110         ),
3111         'webmaster at mederotica.com' => array(
3112                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3113                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3114                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3115                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3116         ),
3117         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3118                 '.auase.info',          // by ilemavyq7461 at techie.com
3119                 '.axeboxew.info',       // by zygeu220 at writeme.com
3120                 '.boluzuhy.info',       // by pikico5419 at post.com
3121                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3122                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3123                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3124                 '.exidiqe.info',        // by kufyca5475 at mail.com
3125                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3126                 '.gubiwu.info',         // by lywunef6532 at iname.com
3127                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3128                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3129                 '.jiuuz.info',          // by meqil6549 at mail.com
3130                 '.nudetar.info',        // by vohepafi3536 at techie.com
3131                 '.nipud.info',          // by bohox9872 at mindless.com
3132                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3133                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3134                 '.olasep.info',         // by lizon8506 at mail.com
3135                 '.oueuidop.info',       // by arytyb6913 at europe.com
3136                 '.oviravy.info',        // by amyuu3883 at london.com
3137                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3138                 '.ragibe.info',         // by ehome4458 at myself.com
3139                 '.ucazib.info',         // by gorare7222 at consultant.com
3140                 '.udaxu.info',          // by gubima4007 at usa.com
3141                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3142                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3143                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3144                 '.yvaxat.info',         // by koqun9660 at mindless.com
3145                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3146         ),
3147         'Carmodelrank.com etc' => array(
3148                 // by Brianna Dunlord (briasmi at yahoo.com)
3149                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3150                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3151                 '.carmodelrank.com',// by Brianna
3152                 '.cutestories.net',     // by Brianna
3153                 '.sturducs.com',
3154                 '.bestother.info',      // by Tim
3155                 '.premiumcasinogames.com',      // by Brianna)
3156                 '.yaahooo.info',        // by Alice
3157         ),
3158         'aliacsandr at yahoo.com' => array(
3159                 '.cubub.info',                          // "Free Web Hosting"
3160         ),
3161         'aliacsandr85 at yahoo.com' => array(
3162                 // by Dr. Portillo or Eva Sabina Lopez Castell
3163                 '.xoomer.alice.it',                     // "Free Web Hosting"
3164                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3165                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3166                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3167                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3168                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3169                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3170                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3171                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3172                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3173                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3174                 '.viagra-price.org',            // by Eva
3175                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3176                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3177         ),
3178         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3179         'Something-Gamble' => array(
3180                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3181                 '.atonlineroulette.com',                        // by Blaise Johns
3182                 '.atroulette.com',                                      // by Gino Sand
3183                 '.betting-123.com',                                     // by Joana Caceres
3184                 '.betting-i.biz',                                       // by Joaquina Angus
3185                 '.casino-challenge.com',                        // by Maren Camara
3186                 '.casino-gambling-i.biz',                       // by Giselle Nations
3187                 '.casino-italian.com',                          // by Holley Yan
3188                 '.casino123.net',                                       // by Ta Baines
3189                 '.casinohammamet.com',                          // by Inger Barhorst
3190                 '.casinoqz.com',                                        // by Berenice Snow
3191                 '.casinos-777.net',                                     // by Iona Ayotte
3192                 '.crapsok.com',                                         // by Devon Adair,
3193                 '.dcasinoa.com',                                        // by August Hawkinson
3194                 '.e-poker-4u.com',                                      // by Issac Leibowitz
3195                 '.free-dvd-player.biz',                         // by Rosario Kidd
3196                 '.florida-lottery-01.com',                      // by Romeo Dillon
3197                 '.gaming-123.com',                                      // by Jennifer Byrne
3198                 '.kenogo.com',                                          // by Adriane Bell
3199                 '.mycaribbeanpoker.com',                        // by Andy Mullis
3200                 '.onbaccarat.com',                                      // by Kassandra Dunn
3201                 '.online-experts.biz',                          // by Liberty Helmick
3202                 '.onlinepoker-123.com',                         // by Andrea Feaster
3203                 '.playpokeronline-123.com',                     // by Don Lenard
3204                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
3205                 '.texasholdem123.com',                          // by Savion Lasseter
3206                 '.texasholdem-777.com',                         // by Savanna Lederman
3207                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
3208                 '.the-craps-100.us',                            // by Lorrine Ripley
3209                 '.the-free-online-game-913.us',         // by Kanesha Clem
3210                 '.the-free-poker-1798.us',                      // by Elaina Witte
3211                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
3212                 '.the-online-game-poker-1185.us',       // by Merna Bey
3213                 '.the-playing-black-jack.com',          // by Kristine Brinker
3214                 '.the-poker-1082.us',                           // by Kristofer Boldt
3215                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
3216                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
3217                 '.the-video-black-jack.com',            // by Jagger Godin
3218         ),
3219         'Something-Insurance' => array(
3220                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
3221
3222                 // 0-9
3223                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
3224                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
3225                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
3226                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
3227                 '.18wkcf.com',                                  // by Lexy Bohannon
3228                 '.2001werm.org',                                // by Raphael Rayburn
3229                 '.2004heeparea1.org',                   // by Dinorah Andrews
3230                 '.21nt.net',                                    // by Jaida Estabrook
3231                 '.3finfo.com',                                  // by Damian Pearsall
3232                 '.3somes.org',                                  // by Mauro Tillett
3233                 '.453531.com',                                  // by Kurt Flannery
3234                 '.4freesay.com',                                // by Eloy Jones
3235                 '.5ssurvey.com',                                // by Annamarie Kowalski
3236                 '.8-f22.com',                                   // by Larraine Evers
3237                 '.9q.org',                                              // by Ami Boynton
3238
3239                 // A
3240                 '.a40infobahn.com',                             // by Amit Nguyen
3241                 '.a4h-squad.com',                               // by Ross Locklear
3242                 '.aac2000.org',                                 // by Randi Turner
3243                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
3244                 '.acahost.com',                                 // by Milton Haberman
3245                 '.aconspiracyofmountains.com',  // by Lovell Gaines
3246                 '.acornwebdesign.co.uk',                // by Uriel Dorian
3247                 '.activel-learning-site.com',   // by Mateo Conn
3248                 '.ad-makers.com',                               // by Shemeka Arsenault
3249                 '.ada-information.org',                 // by Josef Osullivan
3250                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
3251                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
3252                 '.aequityrefinance.com',                // by Jadwiga Duckworth
3253                 '.aerovac-hotpress.com',                // by Trey Marlow
3254                 '.agfbiosensors.com',                   // by Lionel Dempsey
3255                 '.ahomeloanrefinance.com',              // by Leslie Kinser
3256                 '.affordablerealestate.net',    // by Season Otoole
3257                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
3258                 '.ahouserefinance.com',                 // by Young Alley
3259                 '.akirasworld.com',                             // by Piper Sullivan
3260                 '.alderik-production.com',              // by Joan Stiles
3261                 '.alltechdata.com',                             // by Dom Laporte
3262                 '.amconllc.com',                                // by Syble Benjamin
3263                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
3264                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
3265                 '.angelandcrown.net',                   // by Claretta Najera
3266                 '.ankoralina.com',                              // by Eladia Demers
3267                 '.antiquegoldmine.com',                 // by Keena Marlow
3268                 '.aquinosotros.com',                    // by Nanci Prentice
3269                 '.architectionale.com',                 // by Wilbur Cornett
3270                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
3271                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
3272                 '.arefinancehome.com',                  // by Duane Doran
3273                 '.arefinancinghome.com',                // by Ike Laney
3274                 '.athletic-shoes-e-shop.info',  // by Romelia Money
3275                 '.auction-emall-site.info',             // by Dayle Denman
3276                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
3277                 '.auto-buy-rite.com',                   // by Asuncion Buie
3278                 '.axxinet.net',                                 // by Roberta Gasper
3279                 '.azimutservizi.com',                   // by Ethelene Brook
3280                 '.azstudies.org',                               // by Bernardina Walden
3281
3282                 // B
3283                 '.babtrek.com',                                 // by Simonette Mcbrayer
3284                 '.babycujo.com',                                // by Francisco Akers
3285                 '.bakeddelights.com',                   // by Dave Evenson
3286                 '.bbcart.com',                                  // by Lucio Hamlin
3287                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
3288                 '.best-digital-phone.us',               // by Meghann Crockett
3289                 '.bjamusements.com',                    // by Lurlene Butz
3290                 '.blursgsu.com',                                // by Weston Killian
3291                 '.bookwide.net',                                // by Tequila Zacharias
3292                 '.boreholes.org',                               // by Flora Reed
3293                 '.breathingassociaiton.org',    // by Alfred Crayton
3294                 '.birdingnh.com',                               // by Donald Healy
3295                 '.bisdragons.org',                              // by Lupe Cassity
3296                 '.blcschools.net',                              // by Alycia Jolly
3297                 '.bronte-foods.com',                    // by Kary Pfeiffer
3298                 '.buckscountyneighbors.org',    // by Maile Gaffney
3299                 '.buffalofudge.com',                    // by Mable Whisenhunt
3300                 '.burlisonforcongress.com',             // by Luann King
3301                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
3302                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
3303
3304                 // C
3305                 '.cabanes-web.com',                             // by Vaughn Latham
3306                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
3307                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
3308                 '.checaloya.com',                               // by Susana Coburn
3309                 '.calvarychapelrgvt.org',               // by Karan Kittle
3310                 '.cameras-esite.info',                  // by Karlee Frisch
3311                 '.cancerkidsforum.org',                 // by Samson Constantino
3312                 '.ccchoices.org',                               // by Kenia Cranford
3313                 '.ccupca.org',                                  // by Evonne Serrano
3314                 '.celebratemehome.com',                 // by Soraya Tower
3315                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
3316                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
3317                 '.choose-shoes.net',                    // by Geoffrey Setser
3318                 '.churla.com',                                  // by Ollie Wolford
3319                 '.circuithorns.co.uk',                  // by Nathanial Halle
3320                 '.clanbov.com',                                 // by Donell Hozier
3321                 '.cnm-ok.org',                                  // by Thalia Moye
3322                 '.coalitioncoalition.org',              // by Ned Macklin
3323                 '.consoleaddicts.com',                  // by Dorla Hoy
3324                 '.counterclockwise.net',                // by Melynda Hartzell
3325                 '.codypub.com',                                 // by Mercedes Coffman
3326                 '.comedystore.net',                             // by Floy Donald
3327                 '.covsys.co.uk',                                // by Abby Jacey
3328                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
3329                 '.craftybidders.com',                   // by Dannie Lazo
3330                 '.credit-card-finder.net',              // by Mellie Deherrera
3331                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
3332                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
3333                 '.ctwine.org',                                  // by Hailey Knox
3334
3335                 // D
3336                 '.dazyation.com',                               // by Louis Strasser
3337                 '.deepfoam.org',                                // by Ethelyn Southard
3338                 '.debt-fixing.com',                             // by Dagny Rickman
3339                 '.dgmarketingwebdesign.com',    // by Nubia Lea
3340                 '.domainadoption.com',                  // by Breann Pappas
3341                 '.diannbomkamp.com',                    // by Russel Croteau
3342                 '.dictionary-spanish.us',               // by Jacki Gilbreath
3343                 '.dictionary-yahoo.us',                 // by Lili Mitchem
3344                 '.digital-camera-review-esite.info',    // by Milagros Jowers
3345                 '.digital-cameras-esite.info',  // by Milan Jolin
3346                 '.dnstechnet.net',                              // by Tamera Oman
3347                 '.drivenbydata.org',                    // by Katherine Noyes
3348                 '.dtmf.net',                                    // by Micki Slayton
3349                 '.domainsfound.com',                    // by Blossom Lively
3350
3351                 // E
3352                 '.ecstacyabuse.net',                    // by Alana Knight
3353                 '.e-digital-camera-esite.info', // by Romaine Cress
3354                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
3355                 '.eldorabusecenter.org',                // by Annabella Oneal
3356                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
3357                 '.encaponline.com',                             // by Patrick Keel
3358                 '.ez-shopping-online.com',              // by Gail Bartlett
3359
3360                 // F
3361                 '.faithfulwordcf.com',                  // by Bart Weeks
3362                 '.fammedassoc.com',                             // by Joshua Nelson
3363                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
3364                 '.f00k.org',                                    // by Leslie Chapman
3365                 '.foreignrealtions.org',                // by Krystal Hawley
3366                 '.fortwebsite.org',                             // by Kristina Motley
3367                 '.fotofirstdigital.com',                // by Tad Whitfield
3368                 '.foundationcommons.org',               // by Caryn Eskew
3369                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
3370                 '.freaky-cheats.com',                   // by Al Klein
3371                 '.free--spyware.com',                   // by Nikki Contreras
3372                 '.french-home-finance-consultant.info', // by Santana Melton
3373                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
3374
3375                 // G
3376                 '.gaintrafficfast.com',                 // by Lila Meekins
3377                 '.gaygain.org',                                 // by Shell Davila
3378                 '.gcaaa.com',                                   // by Vallie Jaworski
3379                 '.generalsysteme.com',                  // by Cale Vogel
3380                 '.generation4games.co.uk',              // by Sonya Graham
3381                 '.german-dictionary.us',                // by Rex Daniel
3382                 '.gilmerrec.com',                               // by Leighann Guillory
3383                 '.glenthuntly-athletics.com',   // by Julee Hair
3384                 '.glorybaskets.com',                    // by Lynette Lavelle
3385                 '.goconstructionloan.com',              // by Willis Monahan
3386                 '.gohireit.com',                                // by Bertha Metzger
3387                 '.godcenteredpeople.com',               // by Jaycee Coble
3388
3389                 // H
3390                 '.healthinsuranceem.com',               // by Justin Munson
3391                 '.hearthorizon.info',                   // by Kory Session
3392                 '.hegerindustrial.com',                 // by Toni Wesley
3393                 '.herzequip.com',                               // by Princess Dunkle
3394                 '.hglcms.org',                                  // by Gladwin Ng
3395                 '.hipanoempresa.com',                   // by Shannon Staub
3396                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
3397                 '.horse-racing-result.com',             // by Rodney Reynolds
3398                 '.hueckerfamily.com',                   // by Hershel Sell
3399
3400                 // I
3401                 '.ilove2win.com',                               // by Lamont Dickerson
3402                 '.ilruralassistgrp.org',                // by Moises Hauser
3403                 '.imageonsolutions.com',                // by Porsche Dubois
3404                 '.infoanddatacenter.com',               // by Eva Okelley
3405                 '.islamfakta.org',                              // by Goldie Boykin
3406                 '.ithomemortgage.com',                  // by Adelaide Towers
3407                 '.iyoerg.com',                                  // by Madyson Gagliano
3408
3409                 // J
3410                 '.jeffaxelsen.com',                             // by Daphne William
3411                 '.jeffreyf.net',                                // by Vito Platt
3412                 '.johnmartinsreality.com',              // by Pamela Larry
3413                 '.johnsilvers.net',                             // by Silver Battaglia
3414
3415                 // K
3416                 '.kcgerbil.org',                                // by Marisa Thayer
3417                 '.kdc-phoenix.com',                             // by Salma Shoulders
3418                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
3419                 '.kosove.org',                                  // by Darwin Schneider
3420
3421                 // L
3422                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
3423                 '.letsgokayaking.net',                  // by Winnie Adair
3424                 '.libertycabs.com',                             // by Adela Bonds
3425                 '.liquor-store-cellar.info',    // by Hugh Pearson
3426                 '.locomojo.net',                                // by Marco Harmon
3427                 '.lodatissimo.com',                             // by Adrian Greeson
3428                 '.lsawc.org',                                   // by Lara Han
3429                 '.lycos-test.net',                              // by Rigoberto Oakley
3430
3431                 // M
3432                 '.macro-society.com',                   // by Venessa Hodgson
3433                 '.marthasflavorfest.com',               // by Ahmad Lau
3434                 '.martin-rank.com',                             // by Cathleen Crist
3435                 '.maryandfrank.org',                    // by Theodore Apodaca
3436                 '.masterkwonhapkido.com',               // by Misty Graham
3437                 '.maxrpm-demo.com',                             // by Cristal Cho
3438                 '.mechanomorphic.com',                  // by Stanford Crow
3439                 '.mepublishing.net',                    // by Karly Fleenor
3440                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
3441                 '.metwahairports.com',                  // by Nan Kitchen
3442                 '.middle-eastnews.com',                 // by Tybalt Altmann
3443                 '.mikepelchy.com',                              // by Sherly Pearson
3444                 '.milpa.org',                                   // by Nelly Aguilera
3445                 '.modayun.com',                                 // by Camilla Velasco
3446                 '.moonstoneerp.com',                    // by Garret Salmon
3447                 '.morosozinho.com',                             // by Lenore Tovar
3448                 '.morphadox.com',                               // by Hung Zielinski
3449                 '.moscasenlared.com',                   // by Tera Gant
3450                 '.sdjavasig.com',                               // by Gia Swisher
3451                 '.mpeg-radio.com',                              // by Sincere Beebe
3452                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
3453                 '.mtseniorcenter.org',                  // by Frederic Ortega
3454                 '.mysteryclips.com',                    // by Edward Ashford
3455
3456                 // N
3457                 '.naavs.org',                                   // by Yuridia Gandy
3458                 '.naval-aviation.org',                  // by Roselle Campo
3459                 '.navigare-ischia.com',                 // by Arielle Coons
3460                 '.ncredc.org',                                  // by Brenda Nye
3461                 '.neonmotorsports.com',                 // by Giovanna Vue
3462                 '.nf-ny.com',                                   // by Yadira Hibbard
3463                 '.ngfdyqva.com',                                // by Emiliano Samples
3464                 '.nicozone.com',                                // by Blaine Shell
3465                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
3466                 '.npawny.org',                                  // by Willard Murphy
3467                 '.nysdoed.org',                                 // by Elric Delgadillo
3468                 '.nyswasteless.org',                    // by Shaylee Moskowitz
3469                 '.nytech-ir.com',                               // by Adrien Beals
3470
3471                 // O
3472                 '.oadmidwest.com',                              // by Gavin Kaplan
3473                 '.oarauto.com',                                 // by Susann Merriman
3474                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
3475                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
3476                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
3477                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
3478                 '.online-pills-24x7.biz',               // by Aide Hallock
3479                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
3480                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
3481                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
3482                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
3483                 '.otterbayweb.com',                             // by Maxwell Irizarry
3484
3485                 // P
3486                 '.painting-technique.us',               // by Bryanna Tooley
3487                 '.pakamrcongress.com',                  // by Bryce Summerville
3488                 '.patabney.com',                                // by Kailyn Slone
3489                 '.parde.org',                                   // by Ellie Yates
3490                 '.participatingprofiles.com',   // by Jaelynn Meacham
3491                 '.partnershipconference.org',   // by Alla Floyd
3492                 '.pet-stars.com',                               // by Carmon Luevano
3493                 '.planning-law.org',                    // by Trista Holcombe
3494                 '.ppawa.com',                                   // by Evonne Scarlett
3495                 '.precisionfilters.net',                // by Faustina Fell
3496
3497                 // Q
3498                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
3499                 '.quick-debt-consolidation.net',        // by Lala Marte
3500                 '.quicktvr.com',                                // by Vernell Crenshaw
3501
3502                 // R
3503                 '.radicalsolutions.org',                // by Reece Medlin
3504                 '.randallburgos.com',                   // by Bradly Villa
3505                 '.rcassel.com',                                 // by Janiah Gallant
3506                 '.rearchitect.org',                             // by Marcus Gaudet
3507                 '.rent-an-mba.com',                             // by Valentina Mcdermott
3508                 '.reprisenashville.com',                // by Hester Khan
3509                 '.reptilemedia.com',                    // by Alicia Patel
3510                 '.resellers2000.com',                   // by Dedra Kennedy
3511                 '.reverse-billing.com',                 // by Lazaro Gluck
3512                 '.richcapaldi.com',                             // by Kya Haggard
3513                 '.richformissouri.com',                 // by Alanna Elston
3514                 '.robstraley.com',                              // by Leida Bartell
3515                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
3516                 '.rpgbbs.com',                                  // by Leonel Peart
3517                 '.ruralbusinessonline.org',             // by Lynsey Watters
3518                 '.ruwomenscenter.org',                  // by Vince Mclemore
3519                 '.ryanjowens.com',                              // by Janine Smythe
3520
3521                 // S
3522                 '.sagarmathatv.org',                    // by Liam Funke
3523                 '.sakyathubtenling.org',                // by Liane Falgout
3524                 '.sandiegolawyer.net',                  // by Linnie Sommervill
3525                 '.sandishaven.com',                             // by Lino Soloman
3526                 '.scienkeen.com',                               // by Liza Navarra
3527                 '.seimenswestinghouse.com',             // by Teresa Benedetto
3528                 '.severios.com',                                // by Isa Steffen
3529                 '.sexual-hot-girls.com',                // by Viviana Bolton
3530                 '.shakespearelrc.com',                  // by Luciana Weaver
3531                 '.shashran.org',                                // by Adriel Humphries
3532                 '.shoes-shop.us',                               // by Austen Higginbotham
3533                 '.skagitvalleybassanglers.com', // by Necole Thiele
3534                 '.skinsciencesalon.com',                // by Nena Rook
3535                 '.smartalternative.net',                // by Nicki Lariviere
3536                 '.sml338.org',                                  // by Nickole Krol
3537                 '.smogfee.com',                                 // by Sienna Kimble
3538                 '.sneakers-e-shop.info',                // by Nikki Fye
3539                 '.spacewavemedia.com',                  // by Thanh Gast
3540                 '.softkernel.com',                              // by Nicol Hummer
3541                 '.stjoanmerrillville.com',              // by Hunter Beckham
3542                 '.strelinger.com',                              // by Arron Highsmith
3543                 '.striking-viking.com',                 // by Kylie Endsley
3544                 '.sunnydeception.org',                  // by Amaya Llora
3545                 '.sunzmicro.com',                               // by Goddard Arreola
3546                 '.sv-iabc.org',                                 // by Braden Buck
3547                 '.sykotick.com',                                // by Pierce Knecht
3548
3549                 // T
3550                 '.tbody.net',                                   // by Ormond Roman
3551                 '.the-pizzaman.com',                    // by Mario Ramsey
3552                 '.the-shoes.us',                                // by Alejandro Gaffney
3553                 '.theborneocompany.com',                // by Bryanna Tooley
3554                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
3555                 '.thehomeschool.net',                   // by September Concepcio
3556                 '.thenewlywed.com',                             // by Allegra Marra
3557                 '.tigerspice.com',                              // by Denis Mosser
3558                 '.tnaa.net',                                    // by Jasmine Andress
3559                 '.top-finance-sites.com',               // by Maryann Doud
3560                 '.tradereport.org',                             // by Bettie Sisk
3561                 '.transmodeling.com',                   // by Martine Button
3562                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
3563                 '.tsaoc.com',                                   // by Heriberto Mcfall
3564                 '.tsunamidinner.com',                   // by Nannie Richey
3565
3566                 // U
3567                 '.uhsaaa.com',                                  // by Risa Herbert
3568                 '.ultradeepfield.org',                  // by Bobby Ragland
3569                 '.umkclaw.info',                                // by Cammy Kern
3570                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
3571                 '.usa-wolf.com',                                // by Jacklyn Morrill
3572                 '.usjobfair.com',                               // by Lorina Burchette
3573
3574                 // V
3575                 '.vacancesalouer.com',                  // by Loris Bergquist
3576                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
3577                 '.valleylibertarians.org',              // by Lena Massengale
3578                 '.vanderbiltevents.com',                // by Gannon Krueger
3579                 '.vanwallree.com',                              // by Michelina Donahue
3580                 '.vcertificates.com',                   // by Hyun Lamp
3581                 '.vonormytexas.us',                             // by Suzette Waymire
3582
3583                 // W
3584                 '.washingtondc-areahomes.net',  // by Ailene Broome
3585                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
3586                 '.wolsaoh.org',                                 // by Daniela English
3587                 '.worldpropertycatalog.com',    // by Aray Baxter
3588
3589                 // Y
3590                 '.yankee-merchants.com',                // by Jackson Hinojosa
3591                 '.yourbeachhouse.com',                  // by Dedrian Ryals
3592                 '.yourdomainsource.com',                // by Deems Weingarten
3593
3594                 // Z
3595                 '.zkashan.com',                                 // by Evan Light
3596                 '.zockclock.com',                               // by Dorothea Guthrie
3597         ),
3598         'Something-Drugs' => array(
3599                 // Drugs / Pills / Diet
3600                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
3601                 '.abdelghani-shady.com',                // by Elly Alton
3602                 '.bangbangfilm.com',                    // by Davin Chou
3603                 '.centroantequera.com',                 // by Keon Kwiatkowski
3604                 '.champagne-cellar.info',               // by Kandis Rizzo
3605                 '.chix0r.org',                                  // by Christoper Baird
3606                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
3607                 '.fantasticbooks-shop.com',             // by Kermit Ashley
3608                 '.fast-cash-01.com',                    // by Edgar Oliver
3609                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
3610                 '.fn-nato.com',                                 // by Donny Dunlap
3611                 '.gqyinran.com',                                // by Alejandro Parks
3612                 '.juris-net.com',                               // by Rachelle Bravo
3613                 '.leftpencey.com',                              // by Aileen Ashby
3614                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
3615                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
3616                 '.palaceroyale.net',                    // by Brycen Stebbins
3617                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
3618                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
3619                 '.yukissushi.com',                              // by Donell Hozier
3620         ),
3621         'Something-Others' => array(
3622                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
3623                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
3624         ),
3625         'Something-NoApp' => array(
3626                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
3627                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
3628                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3629                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3630                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
3631         ),
3632         'Cortez and family' => array(
3633                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
3634                 '.dronadaarsujf.info',  // by Cortez
3635                 '.fromnananaref.info',  // by Cortez
3636                 '.goorkkjsaka.info',    // by Cortez
3637                 '.jkdfjjkkdfe.info',    // by Rico
3638                 '.jkllloldkjsa.info',   // by Cortez
3639                 '.nnjdksfornms.info',   // by Rico
3640                 '.mcmdkkksaoka.info',   // by Cortez
3641                 '.srattaragfon.info',   // by Cortez
3642                 '.yreifnnonoom.info',   // by Rico
3643                 '.zjajjsvgeuds.info',   // by Cortez
3644         ),
3645         'admin at ematuranza.com' => array(
3646                 '.ancorlontano.com',
3647                 '.dentroallago.com',
3648                 '.digiovinezza.com',
3649                 '.ematuranza.com',
3650                 '.ilfango.com',
3651                 '.nullarimane.com',
3652                 '.questaimmensa.com',
3653                 '.tentailvolo.com',
3654                 '.unatenerezza.com',
3655                 '.volgondilettose.com',
3656         ),
3657         'admin at edeuj84.info' => array(       // by Cornelius Boyers
3658                 '.bid99df.info',
3659                 '.bj498uf.info',
3660                 '.edeuj84.info',
3661                 '.f4mfid.info',
3662                 '.g4vf03a.info',
3663                 '.j09j4r.info',
3664                 '.jv4r8hv.info',
3665                 '.k43sd3.info',
3666                 '.k4r84d.info',
3667                 '.k4rvda.info',
3668                 '.k4v0df.info',
3669                 '.k903os.info',
3670                 '.k9df93d.info',
3671                 '.kv94fd.info',
3672                 '.ksjs93.info',
3673                 '.l0ks03.info',
3674                 '.l9u3jc.info',
3675                 '.lv043a.info',
3676                 '.nh94h9.info',
3677                 '.m94r9d.info',
3678                 '.s87fvd.info',
3679                 '.v3k0d.info',
3680                 '.v4r8j4.info',
3681                 '.vf044s.info',
3682                 '.vj49rs.info',
3683                 '.vk498j.info',
3684                 '.u03jow.info',
3685         ),
3686         'Nikhil and Brian' => array(
3687                 // by Brian Dieckman (info at iudndjsdhgas.info)
3688                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
3689                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
3690                 '.ihfjeswouigf.info',   // by Brian, / was not found
3691                 '.iudndjsdhgas.info',   // by Brian, / was not found
3692                 '.iufbsehxrtcd.info',   // by Brian, / was not found
3693                 '.jiatdbdisut.info',    // by Brian, / was not found
3694                 '.jkfierwoundhw.info',  // by Brian, / was not found
3695                 '.kfjeoutweh.info',             // by Brian, / was not found
3696                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
3697                 '.oudjskdwibfm.info',   // by Brian, / was not found
3698                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
3699                 '.itxbsjacun.info',             // by Nikhil, / was not found
3700                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
3701                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
3702                 '.najedncdcounrd.info', // by Nikhil, / was not found
3703                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
3704                 '.oujvjfdndl.info',             // by Nikhil, / was not found
3705                 '.uodncnewnncds.info',  // by Nikhil, / was not found
3706                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
3707                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
3708                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
3709                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
3710                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
3711                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
3712         ),
3713         'wealth777 at gmail.com' => array(      // by Henry Ford
3714                 '.brutal-forced.com',
3715                 '.library-bdsm.com',
3716                 '.rape-fantasy.us',
3717         ),
3718         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
3719                 '.purerotica.com',
3720                 '.richsex.com',
3721                 '.servik.net',
3722                 '.withsex.com',
3723         ),
3724         'dreamteammoney.com' => array(
3725                 '.dreamteammoney.com',  // dtmurl.com related
3726                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
3727         ),
3728         'KLIK VIP Search and family' => array(
3729                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
3730                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
3731                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
3732                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
3733                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
3734                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
3735                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
3736         ),
3737         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
3738                 '.antivirs.info',
3739                 '.antivirus1.info',
3740                 '.antivirus2.info',
3741         ),
3742         'wasam at vangers.net and family' => array(
3743
3744                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3745                 '.bahatoca.org',
3746                 '.digestlycos.org',
3747                 '.educativaanale.info',
3748                 '.guildstuscan.org',
3749                 '.isaakrobbins.info',
3750                 '.isfelons.org',
3751                 '.lvwelevated.org',
3752                 '.macphersonaca.org',
3753                 '.markyaustrian.org',
3754                 '.michelepug.org',
3755                 '.opalbusy.info',
3756                 '.quijotebachata.info',
3757                 '.salthjc.info',
3758                 '.shogunnerd.info',
3759                 '.solarissean.org',
3760                 '.sparkgsx.info',
3761                 '.tarzanyearly.org',
3762                 '.tulabnsf.org',
3763                 '.vaccarinos.org',
3764
3765                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
3766                 '.e2007.info',
3767                 '.cmoss.info',
3768
3769                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
3770                 '.finddesk.org',
3771                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
3772                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
3773                 '.rcatalog.org',
3774                 '.sbitzone.org',
3775
3776                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
3777                 '.cheapns.org',
3778                 '.my-top.net',
3779                 '.sfind.net',
3780                 '.sspot.net',
3781                 '.suvfind.info',
3782
3783                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
3784                 '.trumber.com',
3785
3786                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3787                 '.blogduet.org',
3788                 '.carelf.info',
3789                 '.cmagic.org',
3790                 '.cspell.org',
3791                 '.dspark.org',
3792                 '.dtonic.org',
3793                 '.mcharm.info',
3794                 '.mslook.info',
3795                 '.phpdinnerware.info',
3796                 '.rnation.org',
3797                 '.uzing.org',
3798
3799                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3800                 '.allbar.info',
3801                 '.allersearch.org',
3802                 '.allzoom.org',
3803                 '.dynall.org',
3804                 '.fastopia.org',
3805                 '.offasfast.info',
3806                 '.rblast.org',
3807                 '.rchistes.info',
3808                 '.rette.org',
3809                 '.shufflequince.org',
3810                 '.suvlook.org',
3811
3812                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3813                 '.290cabeza.org',
3814                 '.bossierpainted.org',
3815                 '.connickkarel.info',   // Admin: tvaals at vangers.net
3816                 '.definekonica.info',   // Admin: tvaals at vangers.net
3817                 '.gradetelemundo.info',
3818                 '.hydraulickin.info',
3819                 '.indicadorestmj.info',
3820                 '.keeleykincaid.org',
3821                 '.kleenbowser.info',
3822                 '.pipnickname.info',
3823                 '.pacolily.org',
3824                 '.redeemtrabalho.info',
3825                 '.scanmakerchua.info',
3826                 '.titanmessina.info',
3827                 '.tragratuit.org',
3828                 '.yeareola.info',
3829         ),
3830         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
3831                 '.canadianmedsworld.info',      // 84.252.133.112
3832                 '.tabsdrugstore.info',          // 84.252.133.114
3833                 '.tabsstore.info',                      // 84.252.133.114
3834                 '.topcholesterol.info',         // 84.252.133.132
3835         ),
3836         'be.cx' => array(
3837                 '.be.cx',
3838                 '.ca.cx',
3839         ),
3840         'john780321 at yahoo.com' => array(     // by John  Brown
3841                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
3842                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
3843                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
3844         ),
3845         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
3846                 '.bertela.info',
3847                 '.forblis.info',
3848                 '.frenallo.info',
3849                 '.goyahoo.info',
3850                 '.herbak.info',
3851                 '.kiokast.info',
3852                 '.nerenok.info',
3853                 '.pestgets.info',
3854                 '.snukker.info',
3855                 '.thegetspons.info',
3856         ),
3857         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
3858                 '.bobop.info',
3859                 '.kwwwe.info',
3860                 '.piikz.info',
3861                 '.moosm.info',
3862                 '.vvvw.info',
3863         ),
3864         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
3865                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
3866                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
3867                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
3868                 '.jplingood.com',       // 125.65.112.15
3869                 '.linenew.com',         // 203.191.148.96
3870                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
3871                 '.yzlin.com',           // 220.162.244.36
3872         ),
3873         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
3874                 '.1111mb.com',
3875                 '.2sex18.com',
3876                 '.69porn1.com',
3877         ),
3878         'ECTechnology' => array(
3879                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
3880                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
3881                 '.automouse.jp',
3882         ),
3883         'lyqz at 21cn.com' => array(
3884                 '.japangame1.com',
3885                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
3886                 '.livedoor1.com',
3887                 '.ragnarokonline1.com',
3888                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
3889         ),
3890         'kingrou at hotmail.com' => array(      // by yangjianhe
3891                 '.youshini.com',                // Two iframe to 453787.com's *.exe
3892                 '.453787.com',
3893         ),
3894         'anpaul541000 at 163.com' => array(     // by su qiuqing
3895                 '.cetname.com',                 // 222.77.185.87
3896                 '.jpgamer.net',                 // 220.247.157.106
3897                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
3898                 '.lovejptt.com',                // 222.77.185.87
3899                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
3900                 '.playncsoft.net',              // 220.247.157.106
3901         ),
3902         'abc00613 at 163.com' => array( // by guo yong
3903                 '.avtw1068.com',                // 64.74.223.11
3904                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
3905                 '.djkkk66990.com',              // 68.178.232.99
3906                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
3907         ),
3908         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
3909                 '.cmonfofo.com',
3910                 '.discutbb.com',
3911         ),
3912         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
3913                 '.preca.info',
3914                 '.skiaggi.info',
3915                 '.scrianal.info',
3916                 '.tageom.info',
3917         ),
3918         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
3919                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
3920                 '.inpros.net',                  // 202.181.98.79
3921                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
3922         ),
3923         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
3924                 '.ec51.com',
3925                 '.ec51.net',
3926         ),
3927         'abbevillelaties at yahoo.fr etc' => array(
3928                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
3929                 '.ringtones-rate.com',
3930                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
3931                 '.special-ringtones.net',
3932         ),
3933         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
3934                 '.1sgsc.info',
3935                 '.3h4r89h.info',
3936                 '.3v44dd.info',
3937                 '.6rfuh6.info',
3938                 '.84hd8.info',
3939                 '.94bui89.info',
3940                 '.agysb3.info',
3941                 '.asdjhs.info',
3942                 '.bcvnrth.info',
3943                 '.bheb4r.info',
3944                 '.bhiuno.info',
3945                 '.biug7g.info',
3946                 '.bjb5f4.info',
3947                 '.bob8g7g.info',
3948                 '.br89bdd.info',
3949                 '.bsa3h.info',
3950                 '.bsieb8.info',
3951                 '.basbiubf.info',
3952                 '.bobwwfs2.info',
3953                 '.ciuv9t.info',
3954                 '.dbmdx4.info',
3955                 '.dbrjms.info',
3956                 '.dbtcm.info',
3957                 '.dff9ghu.info',
3958                 '.dfshbb.info',
3959                 '.dgd4ffdh.info',
3960                 '.dh3ge.info',
3961                 '.duc86jh.info',
3962                 '.ergth45.info',
3963                 '.f78bf7ffb.info',
3964                 '.gbdfbo4.info',
3965                 '.ger45.info',
3966                 '.gnvnrrg.info',
3967                 '.h47he7.info',
3968                 '.h488hbd4.info',
3969                 '.hd72b94.info',
3970                 '.he74b7.info',
3971                 '.hfujfnr.info',
3972                 '.husdhd42.info',
3973                 '.hbwje.info',
3974                 '.itg87gji.info',
3975                 '.iugiougiuh.info',
3976                 '.jhd4f4aa.info',
3977                 '.jshd73.info',
3978                 '.krhpgd.info',
3979                 '.lyihjn.info',
3980                 '.nfyjnfj.info',
3981                 '.oihbv.info',
3982                 '.os44fvs.info',
3983                 '.sdfsd3.info',
3984                 '.sdiug4.info',
3985                 '.sdkufhh.info',
3986                 '.sdugb4f.info',
3987                 '.skdbf.info',
3988                 '.sipiv78.info',
3989                 '.sudbfb.info',
3990                 '.tymbbmy.info',
3991                 '.uilhjk.info',
3992                 '.vi87vub.info',
3993                 '.vfuyf87f.info',
3994                 '.viyvvj877.info',
3995                 '.w7fc8eu.info',
3996                 '.wefg43g.info',
3997                 '.xbrch78e.info',
3998                 '.ywsfu.info',
3999                 '.zxcbiv.info',
4000         ),
4001         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4002                 '.abofios.info',
4003                 '.amlekfn.info',
4004                 '.amlkdoie.info',
4005                 '.amkslewq.info',
4006                 '.alemfu.info',
4007                 '.aloweks1.info',
4008                 '.alposd3.info',
4009                 '.bamhpb.info',
4010                 '.bhjkb.info',
4011                 '.bjqnj.info',
4012                 '.cvcxcbhpr.info',
4013                 '.czoypaiat.info',
4014                 '.dbpmgc.info',
4015                 '.dgvogrxs.info',
4016                 '.dldksf.info',
4017                 '.dlor6za.com',
4018                 '.dmkoiew.info',
4019                 '.eewrefr.info',
4020                 '.eladne.info',
4021                 '.elksem.info',
4022                 '.elwpod.info',
4023                 '.emlwkdnr.info',
4024                 '.esgmyqk.info',
4025                 '.fauqv.info',
4026                 '.fgxkgy.info',
4027                 '.fhryns.info',
4028                 '.fj38n4g.info',
4029                 '.fjnesal.info',
4030                 '.fmkfoe.info',
4031                 '.fqkcfldtr.info',
4032                 '.fwcigpdwz.info',
4033                 '.fyhik.info',
4034                 '.glrkje.info',
4035                 '.gwkslfq.info',
4036                 '.gwjracvh.info',
4037                 '.hihopepe.info',
4038                 '.hwlyggbkw.info',
4039                 '.hmwbfw.info',
4040                 '.hthyeb.info',
4041                 '.iaofkyaw.info',
4042                 '.uldkxuiw.info',
4043                 '.is7c6w4.info',
4044                 '.ivuddhdk.info',
4045                 '.jgfndjem.info',
4046                 '.jgmdlek.info',
4047                 '.jkrnvmpad.info',
4048                 '.jqujn.info',
4049                 '.jvgmmba.info',
4050                 '.kbaur.info',
4051                 '.kgjindptv.info',
4052                 '.kleo7s9.info',
4053                 '.lezfgam.info',
4054                 '.lfaasy.info',
4055                 '.ljpdjki.info',
4056                 '.lmnpis.info',
4057                 '.lpzcu2f.info',
4058                 '.lrptn.info',
4059                 '.lursqt.info',
4060                 '.mgkabviil.info',
4061                 '.mhtknjyt.info',
4062                 '.mksuuku.info',
4063                 '.mkyky.info',
4064                 '.mloaisn.com',
4065                 '.mlsiknd.info',
4066                 '.mthqz.info',
4067                 '.nnooq.info',
4068                 '.nohhylvc.info',
4069                 '.nuprndsye.info',
4070                 '.nsoelam.info',
4071                 '.nykobczv.info',
4072                 '.nzuhli.info',
4073                 '.odyqzgylr.info',
4074                 '.oidiau.info',
4075                 '.oitzkw.info',
4076                 '.okdmrpz.info',
4077                 '.ooinziti.info',
4078                 '.ortqr.info',
4079                 '.osmkpnekv.info',
4080                 '.ozkzfih.info',
4081                 '.p3ix8wc.com',
4082                 '.piwyt.info',
4083                 '.pfkijrm.info',
4084                 '.pjktcragi.info',
4085                 '.pleoz.info',
4086                 '.plvqm73.info',
4087                 '.pqyrem.info',
4088                 '.qipgqd.info',
4089                 '.qlewixu.com',
4090                 '.qmlskme.info',
4091                 '.qtuff.info',
4092                 '.quoga.info',
4093                 '.quqz.info',
4094                 '.qzxuw.info',
4095                 '.rcaidegp.info',
4096                 '.rlkmdi.info',
4097                 '.rnsoiov.info',
4098                 '.rnwlams.info',
4099                 '.rprgkgqld.info',
4100                 '.rubqvxrn.info',
4101                 '.spqxstl.info',
4102                 '.syckoqjql.info',
4103                 '.tbirb.info',
4104                 '.thalc34.info',
4105                 '.tiabq.info',
4106                 '.tszzpjr.info',
4107                 '.tyjdyn.info',
4108                 '.twgugpns.info',
4109                 '.uaezrqp.info',
4110                 '.udlkasu.info',
4111                 '.uejncyf.info',
4112                 '.ukvflb.info',
4113                 '.ugsuv.info',
4114                 '.ukhgpcp.info',
4115                 '.urprzn.info',
4116                 '.uuhememkw.info',
4117                 '.yalc7en.info',
4118                 '.ybuid.info',
4119                 '.yhdkgfob.info',
4120                 '.ymenq.info',
4121                 '.ynlyb.info',
4122                 '.vieatlubk.info',
4123                 '.vltcaho.info',
4124                 '.wlamsiek.info',
4125                 '.wlerp.info',
4126                 '.wlmtshzi.info',
4127                 '.wmlkams.info',
4128                 '.wprqd.info',
4129                 '.wpyspszi.info',
4130                 '.xdscc.info',
4131                 '.xdvy.info',
4132                 '.xeypku.info',
4133                 '.xsrxh.info',
4134                 '.xwjyrpfe.info',
4135                 '.yxcqw.info',
4136                 '.zhbktrh.info',
4137                 '.zspepn.info',
4138                 '.zsxtz.info',
4139         ),
4140         'survi at poczta.fm and smiley' => array(
4141                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4142                 '.ppert.info',
4143                 '.pperta.info',
4144                 '.pperts.info',
4145                 '.pprtuis.info',
4146                 '.13iuey.info',         // ":>"
4147                 '.13jkhs.info',
4148                 '.13lksa.info',
4149                 '.13rxtx.info',
4150                 '.13slkd.info',
4151                 '.13zaer.info',
4152         ),
4153         'admin at esemeski.com' => array(       // by Jan Kalka
4154                 '.kxils.info',
4155                 '.kuaph.info',
4156                 '.lncdc.info',
4157                 '.lsqpd.info',
4158                 '.mczed.info',
4159                 '.npous.info',
4160                 '.obgju.info',
4161         ),
4162         'LiquidNetLimited.com' => array(
4163                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4164
4165                 // FateBack.com related
4166                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4167                 '.bebto.com',
4168                 '.fateback.com',
4169                 '.undonet.com',
4170                 '.yoll.net',
4171
4172                 // 50webs.com                   // 64.72.112.10
4173                 // dns2.50webs.com              // 64.72.112.11
4174                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4175                 // dns2.freehostia.com  // 64.72.112.13
4176                 // serv3.freehostia.com // 64.72.112.14
4177                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4178                 // mail.50webs.com              // 64.72.112.26
4179                 // supremecenter41.com  // 64.72.112.52
4180                 // 50webs2.50webs.com   // 64.72.112.89
4181                 // supremecenter39.com  // 64.72.112.103
4182
4183                 // by LiquidNet Ltd. (support at propersupport.com)
4184                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
4185                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
4186                         'duoservers.com',               // 216.65.1.130
4187
4188                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
4189         ),
4190         'domains at agava.com' => array(
4191                 '.h18.ru',
4192                 '.hut1.ru',
4193         ),
4194         'wlmx009 at hotmail.com' => array(
4195                 '.123lineage.com',
4196                 '.ff11-info.com',
4197                 '.lastlineage.com',
4198                 '.lineage2-ol.com',
4199                 '.lineage2006.com',
4200                 '.lineagefirst.com',
4201         ),
4202         'Zettahost.com' => array(
4203                 '.atspace.biz',         // sales at zettahost.com
4204                 '.atspace.com',         // abuse at zettahost.com
4205                 '.atspace.name',        // NS atspace.com
4206                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
4207                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
4208         ),
4209         'hlq9814 at 163.com' => array(
4210                 '.kotonohax.com',               // by ling bao
4211                 '.ragnarox.mobi',               // by lin bao, *.exe download
4212                 '.rokonline-jp.com',    // by hang long
4213         ),
4214         '77ch.jp' => array(
4215                 '.77ch.jp',
4216                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
4217         ),
4218         'serchportal at mail.ru' => array(      // by Namu Adin
4219                 '.43fert.info',
4220                 '.belis.info',
4221                 '.bonu.info',
4222                 '.chelsite.info',
4223                 '.chparael.info',
4224                 '.cool9f.info',
4225                 '.dada2.info',
4226                 '.dorplanete.info',
4227                 '.dormonde.info',
4228                 '.dorprojet.info',
4229                 '.faciledor.info',
4230                 '.fastsearchgroup.info',
4231                 '.gerta0.info',
4232                 '.getse.info',
4233                 '.gopvl.info',
4234                 '.knopki.info',
4235                 '.propidor.info',
4236                 '.quicksearchnet.info',
4237                 '.ret5.info',
4238                 '.slimfastsearch.info',
4239                 '.virtualpvl.info',
4240                 '.vpvla.info',
4241                 '.xjdor.info',
4242                 '.zhopki.info',
4243         ),
4244         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
4245                 '*.444mb.com',          // Free hosting
4246                 'urlnip.com',           // Redirection
4247         ),
4248         'WWW.RU' => array(              // by Angela (abuse at www.ru)
4249                 '.1fasttimesatnau.info',
4250                 '.1freecybersex.info',
4251                 '.1freexxxcomics.info',
4252                 '.1fuckingmywife.info',
4253                 '.1pornpreview.info',
4254                 'www.ru',                                       // by (service at demos.ru), redirection
4255         ),
4256         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
4257                 '.adultschat.info',
4258                 '.livecamonline.info',
4259                 '.webcam4u.info',
4260                 '.younghot.info',
4261         ),
4262         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
4263                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
4264
4265                 // 209.51.196.242
4266                 '.22web.net',
4267                 '.2kool4u.net',
4268                 '.9skul.com',
4269                 '.alojalo.info',
4270                 '.byet.net',
4271                 '.byethost2.com',
4272                 '.byethost3.com',
4273                 '.byethost4.com',
4274                 '.byethost5.com',
4275                 '.byethost6.com',
4276                 '.byethost7.com',
4277                 '.byethost8.com',
4278                 '.byethost9.com',
4279                 '.byethost10.com',
4280                 '.byethost11.com',
4281                 '.byethost12.com',
4282                 '.byethost13.com',
4283                 '.byethost14.com',
4284                 '.byethost15.com',
4285                 '.byethost16.com',
4286                 '.byethost17.com',
4287                 '.byethost18.com',
4288                 '.headshothost.net',
4289                 '.hostwq.net',
4290                 '.mega-file.net',
4291                 '.truefreehost.com',
4292
4293                 '.ifastnet.com',        // 209.51.196.243
4294
4295                 // 209.190.16.82(mx1.byet.org)
4296                 '.1sthost.org',
4297                 '.4sql.net',
4298                 '.byet.org',
4299                 '.hyperphp.com',
4300                 '.kwikphp.com',
4301                 '.my-php.net',
4302                 '.my-place.us',
4303                 '.my-webs.org',
4304                 '.netfast.org',
4305                 '.php0h.com',
4306                 '.php1h.com',
4307                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
4308                 '.phpnet.us',
4309                 '.prohosts.org',
4310                 '.pro-php.org',
4311                 '.prophp.org',
4312                 '.sprinterweb.net',
4313                 '.swiftphp.com',
4314                 '.xlphp.net',
4315
4316                 // 209.190.16.83(mx2.byet.org)
4317                 '.instant-wiki.net',
4318
4319                 // 209.190.16.84(mx3.byet.org)
4320
4321                 // 209.190.16.85(mx4.byet.org)
4322                 '.instant-blog.net',
4323                 '.instant-forum.net',
4324
4325                 '.byethost.com',                        // 209.190.18.138
4326         ),
4327         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
4328                 '.analmoviesite.info',
4329                 '.bestgirlssex.info',
4330                 '.boxvagina.info',
4331                 '.cyberlivegirls.info',
4332                 '.hotredgirls.info',
4333                 '.forsexlove.info',
4334                 '.hotnudezone.info',
4335                 '.hotredpussy.info',
4336                 '.lesbians-live.info',
4337                 '.lesbians-on-cam.info',
4338                 '.onlinegirlssite.info',
4339                 '.sexloveonline.info',
4340                 '.teensexcard.info',
4341                 '.teensexdirect.info',
4342                 '.topnudesite.info',
4343                 '.vaginafree.info',
4344                 '.webcam-show.info',
4345                 '.webcamshow.info',
4346                 '.youngsexchat.info',
4347                 '.yourcumshot.info',
4348         ),
4349         'stocking.club at gmail.com' => array(
4350                 '.adulthotmodels.com',          // by David Zajwzran
4351                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
4352                 '.cash-call.info',                      // by David Theissen
4353                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
4354                 '.cheap-online-viagra.info',    // by David Theissen
4355                 '.drugcleansing.net',           // by David Zajwzran
4356                 '.men-health-zone.com',         // by David Theissen
4357                 '.purchase-viagra.info',        // by David Theissen
4358                 '.realdrunkengirls.biz',        // by David Theissen
4359                 '.sextoyslife.com',                     // by David Zajwzran
4360                 '.sexysubjects.info',           // by David Zajwzran
4361                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
4362                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
4363                 '.travelcardsite.info',         // by David Theissen
4364         ),
4365         'lustiq at p5com.com' => array(
4366                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
4367                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
4368         ),
4369         'web at 6jy.com' => array(
4370                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
4371                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
4372         ),
4373         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
4374                 '.auto-fgen.info',
4375                 '.fast-marketing.info',
4376                 '.from-usa.info',
4377                 '.generic-pharm.info',
4378                 '.pharm-directory.info',
4379                 '.popular-people.info',
4380                 '.safe-health.info',
4381                 '.star-celebrities.info',
4382                 '.super-home-biz.info',
4383                 '.top5-auto.info',
4384                 '.top5-cars.info',
4385                 '.vip-furniture.info',
4386                 '.vip-pc.info',
4387                 '.vip-pets.info',
4388         ),
4389         'abuse at search-store.org' => array(
4390                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
4391         ),
4392         'Leading Edge Marketing Inc.' => array(
4393                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
4394                 '.abemedical.com',
4395                 '.attractwomennow.com',
4396                 '.bettersexmall.com',
4397                 '.buymaxoderm.com',
4398                 '.buyvprx.com',
4399                 '.genf20.com',
4400                 '.infinityhealthnews.com',
4401                 '.istnewsletter.com',
4402                 '.leadingedgecash.com',
4403                 '.leadingedgeherbals.com',
4404                 '.leadingedgevipsonly.com',
4405                 '.lecash.com',
4406                 '.leminfo.com',
4407                 '.proextendersystem.com',
4408                 '.provestra.com',
4409                 '.semenax.com',
4410                 '.shavenomore.com',
4411                 '.theedgenewsletter.com',
4412                 '.vigorelle.com',
4413                 '.vigrx.com',
4414                 '.vigrxplus.com',
4415                 '.wbstnewsletter.com',
4416         ),
4417         'clickx at bk.ru' => array(     // by Alexey Enrertov
4418                 '.coolget*.info' =>
4419                         '#^(?:.*\.)?' . 'coolget' .
4420                         '(?:bus|find|news|php|place|post|srch)' .
4421                         '\.info$#',
4422                 '.coolgirl*.info' =>
4423                         '#^(?:.*\.)?' . 'coolgirl' .
4424                         '(?:apple|fish|search)' .
4425                         '\.info$#',
4426                 '.coolmeet*.info' =>
4427                         '#^(?:.*\.)?' . 'coolmeet' .
4428                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
4429                         '\.info$#',
4430                 '.cool**.info' =>
4431                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
4432                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4433                         '\.info$#',
4434                 '.freseasy*.info' =>
4435                         '#^(?:.*\.)?' . 'freseasy' .
4436                         '(?:apple|click|find|fish|post|search)' .
4437                         '\.info$#',
4438                 '.fres**.info' =>
4439                         '#^(?:.*\.)?' .
4440                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
4441                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4442                         '\.info$#',
4443                         // These are not found yet:
4444                         // fresgirlsrch.info
4445                         // fresadultapple.info
4446                         // fresadultclick.info
4447                         // frestheplace.info
4448
4449                 // 66.232.113.44
4450                 '.nuhost.info',
4451                 '.susearch.info',
4452
4453                 // 66.232.126.74(hv94.steephost.com)
4454                 '.dilej.com',
4455                 '.fyvij.com',
4456                 '.howus.com',
4457                 '.jisyn.com',
4458                 '.kaxem.com',
4459                 '.mihug.com',
4460                 '.mobyb.com',
4461                 '.qidat.com',
4462                 '.qihek.com',
4463                 '.ryzic.com',
4464                 '.sasuv.com',
4465                 '.tuquh.com',
4466                 '.vehyq.com',
4467                 '.wezid.com',
4468                 '.wifuj.com',
4469                 '.xijyt.com',
4470                 '.zuqyn.com',
4471         ),
4472         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
4473                 '.hitsearching.info',
4474                 '.hugeamountdata.info',
4475                 '.megafasthost.info',
4476                 '.real-big-host.info',
4477                 '.search4freez.info',
4478                 '.yasech.info',
4479         ),
4480         'ice--man at mail.ru' => array(
4481                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
4482                 '.bestcreola.com',
4483                 '.crekatierra.com',
4484                 '.creolafire.com',
4485                 '.crolik.com',
4486                 '.croller.cn',
4487                 '.ecrmx.com',
4488                 '.eflashpoint.com',
4489                 '.exoticmed.com',
4490                 '.feelview.com',
4491                 '.greatexotic.com',
4492                 '.icrtx.com',
4493                 '.icyhip.com',
4494                 '.icyiceman.com',
4495                 '.icypopular.com',
4496                 '.iflashpoint.com',
4497                 '.justmdx.com',
4498                 '.kiliusgroup.com',
4499                 '.klickerr.com',
4500                 '.klickerrworld.com',
4501                 '.kreolic.com',
4502                 '.margansitio.com',
4503                 '.margantierra.com',
4504                 '.mimargan.com',
4505                 '.oilkeys.com',
4506                 '.planetmdx.com',
4507                 '.thekeyse.com',
4508                 '.viewgreat.com',
4509                 '.yourcreola.com',
4510
4511                 // 69.46.23.48
4512                 '.bestkilius.com',
4513                 '.crekadirecto.com',
4514                 '.getflashsite.com',
4515                 '.sucreka.com',
4516                 '.superkilius.com',
4517         ),
4518         'nijeoi at hotmai.com' => array(
4519                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
4520                 '.bowij.com',
4521                 '.bozib.com',
4522                 '.cavux.com',
4523                 '.dipov.com',
4524                 '.gumoz.com',
4525                 '.hakyb.com',
4526                 '.hehyv.com',
4527                 '.hepyt.com',
4528                 '.howoj.com',
4529                 '.jywaz.com',
4530                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
4531                 '.kyheq.com',
4532                 '.kyzad.com',
4533                 '.qicad.com',
4534                 '.qubyd.com',
4535                 '.mocyq.com',
4536                 '.muloq.com',
4537                 '.myxim.com',
4538                 '.nufyp.com',
4539                 '.waqog.com',
4540                 '.wyduc.com',
4541                 '.xefyv.com',
4542                 '.xomej.com',
4543                 '.xomip.com',
4544                 '.xykyl.com',
4545                 '.zakuw.com',
4546                 '.zeliw.com',
4547                 '.zimev.com',
4548                 '.zipif.com',
4549         ),
4550         'niichka at hotmail.com' => array(
4551                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
4552                 '.aerosearch.info',
4553                 '.freader.info',
4554                 '.info4searchz.info',
4555                 '.nice-host.info',
4556                 '.realyfast.info',
4557                 '.resuts.info',
4558
4559                 '.rurid.com',   // 66.232.126.74, the same approach and IP of clickx at bk.ru
4560         ),
4561         'porychik at hot.ee' => array(  // by Igor
4562                 '.tedstate.info',       // "Free Web Hosting"
4563                 '.giftsee.com',
4564         ),
4565         'aofa at vip.163.com' => array(
4566                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
4567                 '.5944.net',
4568         ),
4569         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
4570                 '.maxrentcar.info',
4571                 '.newsonyericsson.info',
4572                 '.pornositeworld.biz',
4573                 '.rentcarweb.info',
4574                 '.xxxdomainsex.biz',
4575         ),
4576         'kopper1970 at gmail.com' => array(
4577                 '.cardealerall.info',           // by Green
4578                 '.donatecarsales.info',         // by Sipil
4579                 '.ringtonewilly.info',          // by Sipil
4580                 '.travelstraveling.info',       // by Chinik
4581                 '.viagrabuyonline.org',         // by Sipil
4582                 '.viagraorderbuy.com',          // by Anatol
4583                 '.worldcuptourism.info',        // by Sipil
4584         ),
4585         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
4586                 '.globalinfoland.info',
4587                 '.goodlifesearch.info',
4588                 '.hotnetinfo.info',
4589                 '.hotpornmovies.org',
4590                 '.infopilot.info',
4591         ),
4592         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
4593                 '.bang-bro.org',
4594                 '.datinghost.info',
4595                 '.hello-craulers.info',
4596                 '.free-blog-host.info',
4597                 '.sucking-boobs.info',
4598         ),
4599         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
4600                 '.allcamsguide.info',
4601                 '.camerascams.info',
4602                 '.camerasera.info',
4603                 '.girlcamsworld.info',
4604                 '.hiddenlimocams.info',
4605                 '.redlivecams.info',
4606                 '.spycamsgear.info',
4607                 '.spycamssite.info',
4608                 '.supercamsusa.info',
4609                 '.thecamsnow.info',
4610         ),
4611         '87.242.116.81' => array(
4612                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
4613                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
4614                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
4615                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
4616                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
4617         ),
4618         '208.70.75.153' => array(
4619                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
4620                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
4621                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
4622                 '.cerc-on.info',
4623                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
4624                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4625                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
4626                 '.cerc-tr.info',
4627                 '.cerc-tw.info',
4628                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
4629                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
4630                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
4631                 '.cerc-on.org',         // by cerca-one at ya.ru
4632                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
4633                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4634                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
4635                 '.cerc-tr.org',         // by cerca-one at ya.ru
4636                 '.cerc-tw.org',         // by cerca-one at ya.ru
4637                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
4638                 '.cerca-fo.info',
4639                 '.cerca-no.info',
4640                 '.cerca-on.info',
4641                 '.cerca-sv.info',
4642                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
4643                 '.cerca-te.info',
4644                 '.cerca-tr.info',
4645                 '.cerca-sx.org',
4646                 '.cerca-tr.org',        // orgitaly1 at ya.ru
4647                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
4648                 '.ricerca-fo.info',
4649                 '.ricerca-one.org',
4650                 '.ricerca-sv.org',
4651                 '.ricerca-sx.org',
4652                 '.ricerca-te.org',
4653                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
4654                 '.subit01.org',
4655                 '.subit02.org',
4656                 '.subit03.org',
4657                 '.subit04.org',
4658                 '.subit05.org',
4659                 '.subit06.org',
4660                 '.subit01.info',
4661                 '.subit02.info',
4662                 '.subit03.info',
4663                 '.subit04.info',
4664                 '.subit05.info',
4665                 '.subit06.info',
4666         ),
4667         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
4668                 '.5-base.com',
4669                 '.pharmacy-style.com',
4670         ),
4671         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
4672                 '.ista-2006.ru',
4673                 '.wefas.ru',
4674         ),
4675         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
4676                 '.tourismworldsite.info',
4677                 '.yourtourismtravel.info',
4678         ),
4679         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
4680                 '.easyfindcar.info',
4681                 '.siteinfosystems.info',
4682         ),
4683         'smesh1155 at gmail.com' => array(
4684                 '.hospitalforyou.info',                 // by Gimmi
4685                 '.thephentermineonline.info',   // by Kipola
4686         ),
4687         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
4688                 '.kiski.net.in',
4689                 '.pipki.org.in',
4690                 '.popki.ind.in',
4691                 '.siski.co.in',
4692         ),
4693         'tiptronikmike at mail.com' => array(
4694                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
4695                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
4696                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
4697                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
4698                 //'.i0sex.info',                // Michael
4699                 //'.i1sex.info',                // Michael
4700                 //'.i2sex.info',                // Martin
4701                 //'.i3sex.info',                // Martin
4702                 //'.i4sex.info',                // Adulterra
4703                 //'.i5sex.info',                // Adulterra
4704                 //[irvyz]6sex.info not found
4705                 '.i8sex.info',                  // by Martin
4706         ),
4707         'skuarlytronald at mail.com' => array(
4708                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
4709                 '.girlsgoingmad.info',          // 64.27.13.120
4710                 '.girlsgonewildside.info',      // 64.27.13.120
4711         ),
4712         '66.232.109.250' => array(
4713                 '.1626pornporno.info',
4714                 '.1851pornporno.info',
4715                 '.1876pornporno.info',
4716                 '.476pornporno.info',
4717         ),
4718         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
4719                 '.compactxxx.com',
4720                 '.eadulthost.com',
4721                 '.eadultview.com',
4722                 '.eroticpool.net',
4723                 '.ipornservice.com',
4724                 '.liveadulthost.com',
4725                 '.nudepal.com',
4726                 '.sweetservers.com',
4727         ),
4728         'support at orgija.org' => array(
4729                 '.assfuckporn.org',
4730                 '.dosugmos.org',
4731                 '.fuckporn.org',
4732                 '.girlsdosug.org',
4733                 '.girlsporno.org',
4734                 '.moscowintim.org',
4735                 '.pornass.org',
4736                 '.pornopussy.org',
4737                 '.progirlsporn.org',
4738                 '.pussypornogirls.org',
4739         ),
4740         '125.65.112.93' => array(
4741                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
4742                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
4743         ),
4744         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
4745                 '.beta-google.com',
4746                 '.tv-reklama.info',
4747                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
4748                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
4749         ),
4750         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
4751                 '.abobrinha.org',
4752                 '.aneurysmic.com',              // / not found
4753                 '.physcomp.org',                // / not found
4754                 '.seriedelcaribe2006.org',
4755                 '.refugeeyouthinamerica.com',
4756         ),
4757         'skip_20022 at yahoo.com' => array(
4758                 // 203.174.83.55
4759                 '.a28hosting.info',             // by Bill Jones
4760                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
4761                 '.besthentai06.org',    // by yakon
4762         ),
4763         'USFINE.com' => array(
4764                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
4765                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
4766         ),
4767         '68.178.211.57' => array(
4768                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
4769                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
4770         ),
4771         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
4772                 '.google-yahoo-msn.org',
4773                 '.expedia-travel.org',
4774         ),
4775         'admin at newestsearch.com' => array(   // by Gibrel Sitce
4776                 '.emr5ce.org',
4777                 '.wfe7nv.org',
4778                 '.xyr99yx.org',
4779         ),
4780         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
4781                 '.playonlinenc.com',
4782                 '.playboss-jp.com',
4783         ),
4784         'Digi-Rock.com' => array(
4785                 '.rom776.com',
4786                 // owner-organization: DIGIROCK, INC.
4787                 // owner-email: domain-contact at digi-rock.com
4788                 // with an external ad-and-JavaScript,
4789                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
4790                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
4791         ),
4792         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
4793                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
4794                 '.ipod-application.info',       // NO IP
4795                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
4796                 '.stonesex.info',                       // NO IP, was 74.50.97.136
4797         ),
4798         'germerts at yandex.ru' => array(       // by Sergey Marchenko (germerts at yandex.ru)
4799                 '.andatra.info',
4800                 '.banchitos.info',
4801                 '.batareya.info',
4802                 '.blevota.info',
4803                 '.broneslon.info',
4804                 '.gamadril.info',
4805                 '.gipotenuza.info',
4806                 '.govnosaklo.info',
4807         ),
4808         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
4809                 '.acronis-true-image.info',
4810                 '.calcio-xp.info',
4811                 '.cosanova.info',
4812                 '.cose-rx.info',
4813                 '.dictip.info',
4814                 '.findig.info',
4815                 '.fotonow.info',
4816                 '.lavoro-tip.info',
4817                 '.loan-homes.info',
4818                 '.mionovita.info',
4819                 '.mustv.info',
4820                 '.newsnaked.info',
4821                 '.online-tod.info',
4822                 '.opakit.info',
4823                 '.opanow.info',
4824                 '.opriton.info',
4825                 '.porta-bl.info',
4826                 '.refdif.info',
4827                 '.xzmovie.info',
4828         ),
4829         '84.252.148.120 etc' => array(
4830                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
4831                 '.planetavilton.info',  // 84.252.148.120
4832                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
4833         ),
4834         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
4835                 '.99jk.com',
4836                 '.99jk.com.cn',
4837                 '.99jk.cn',
4838         ),
4839         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
4840                 '.kliktop.biz',
4841                 '.kliktop.org',
4842                 '.pharmatop.us',
4843                 '.supertop.us',
4844                 '.supervaizer.info',
4845         ),
4846         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
4847                 '.freeamateursexx.info',        // 81.0.195.228
4848                 '.freeanalsexx.info',           // 217.11.233.97
4849                 '.freegaysexx.info',            // 81.0.195.228
4850         ),
4851         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
4852                 '.abbhi.info',
4853                 '.gayblogguide.biz',
4854                 '.huope.info',
4855                 '.thebdsmday.info',
4856                 '.zioprt.info',                 // 89.149.228.237
4857         ),
4858         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
4859                 '.boblisk.info',
4860                 '.factyri.info',
4861                 '.jorge1.info',
4862         ),
4863         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
4864                 '.bestmindstorm.org',
4865                 '.redstoreonline.org',
4866         ),
4867         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
4868                 '.8e8ae.net',
4869                 '.c-cock.com',
4870                 '.fa59eaf.com',
4871                 '.set-place.net',
4872                 '.sex-beauty.net',
4873         ),
4874         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
4875                 '.tomdir.info',
4876                 '.tomdirdirect.info',
4877                 '.tomdirworld.info',
4878                 '.treton.info',
4879                 '.trefas.info',
4880                 '.tretonmondo.info',
4881                 '.unefout.info',
4882                 '.unefoutprojet.info',
4883                 '.unitfree.info',
4884                 '.vilret.info',
4885                 '.vilttown.info',
4886                 '.votrefout.info',
4887                 '.warmfind.info',
4888                 '.warptop.info',
4889                 '.wildtram.info',
4890                 '.xofind.info',
4891                 '.xopdiscover.info',
4892                 '.xopfind.info',
4893                 '.xoplocate.info',
4894                 '.xopseek.info',
4895                 '.xpfirst.info',
4896                 '.xphighest.info',
4897                 '.xptop.info',
4898         ),
4899         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
4900                 '.myviagrasite.com',    // 80.74.153.2
4901                 '.thecanadianmeds.com', // 80.74.153.17
4902         ),
4903         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
4904                 '.bigemot.com',                         // 217.11.233.34, / not found
4905                 '.espharmacy.com',                      // 217.11.233.34
4906                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
4907                 '.ringtonecooler.com',          // 217.11.233.34
4908         ),
4909         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
4910                 '.okwit.com',           // 220.166.64.44
4911                 '.sakerver.com',        // 220.166.64.194
4912                 '.motewiki.net',        // 220.166.64.194
4913         ),
4914         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
4915                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
4916                 '.lookmedicine.info',           // 206.161.205.22
4917                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
4918                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
4919                 '.worldsitesearch.info',        // 209.8.40.59
4920         ),
4921         'lee.seery at gmail.com' => array(
4922                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
4923                 '.lingvol.com',         // 64.21.34.55
4924                 '.micevol.com',         // 64.21.34.55
4925                 '.heyhey.info',         // 64.21.34.55  by anonymous
4926         ),
4927         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
4928                 // 69-64-64-71.dedicated.abac.net
4929                 '.520-ard.info',
4930                 '.550bcards.info',
4931                 '.559-cads.info',
4932                 '.559caard.info',
4933                 '.565-caaard.info',
4934                 '.575cadr.info',
4935                 '.577cadrs.info',
4936                 '.590-acrds.info',
4937                 '.596-cadrs.info',
4938                 '.596caards.info',
4939                 '.596caaard.info',
4940                 '.asstablishingcads.info',
4941                 '.astablish-ard.info',
4942                 '.astablishcacrds.info',
4943                 '.begginers-acards.info',
4944                 '.begginersacrds.info',
4945                 '.beggingcaaard.info',
4946                 '.beginercacrds.info',
4947                 '.cacrdscreating.info',
4948                 '.caditbegging.info',
4949                 '.cadr-buildup.info',
4950                 '.cadr-establilsh.info',
4951                 '.cadrs-buildercredit.info',
4952                 '.cadrs570.info',
4953                 '.cads-565.info',
4954
4955                 // 69-64-64-113.dedicated.abac.net
4956                 '.interistacards.info',
4957                 '.intrust-ards.info',
4958                 '.intrustacrds.info',
4959                 '.lfixed-ard.info',
4960                 '.lowerate-ard.info',
4961                 '.lowpercentage-ard.info',
4962                 '.lowpercentageacrd.info',
4963         ),
4964         'acua at mail.ru' => array(
4965
4966                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
4967                 '.dns4babka.info',      // by acua at mail.ru
4968                         // by webmaster at dns4babka.info
4969                         '.credh.cn',
4970                         '.fucfv.cn',
4971                         '.gdxnk.cn',
4972                         '.sqrrt.cn',
4973                         '.ywtmd.cn',
4974                         '.kncqy.cn',    // by webmaster at allmyns.info
4975
4976                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
4977                 '.dedka2ns.info',       // by acua at mail.ru
4978                         // by webmaster at dedka2ns.info
4979                         '.ascpo.cn',
4980                         '.jgycr.cn',
4981                         '.nqdtt.cn',
4982                         '.oswde.cn',
4983                         '.qeyig.cn',
4984                         '.soqsx.cn',
4985                         '.ukncd.cn',
4986                         '.zijgb.cn',
4987
4988                 // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
4989                 '.dns4dedka.info',      // by acua at mail.ru
4990                         // by webmaster at dns4dedka.info
4991                         '.bcpnb.cn',
4992                         '.cfbpr.cn',
4993                         '.dnndb.cn',
4994                         '.ekwme.cn',
4995                         '.iutps.cn',
4996                         '.ryftj.cn',
4997                         '.vxqcb.cn',
4998                         '.zxvlr.cn',    // by webmaster at allmyns.info
4999
5000                 // by dig at dns4dedka.info
5001                 '.bdnge.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
5002                 '.dcdsu.cn',    // 217.20.112.102(*.internetserviceteam.com)
5003                 '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
5004                 '.frvdv.cn',    // 84.16.226.28(*snip*)
5005                 '.heulw.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
5006                 '.hissw.cn',    // 84.16.249.240(*snip*)
5007                 '.lwqjr.cn',    // 84.16.255.253(*snip*)
5008                 '.obwew.cn',    // 84.16.251.218(*.internetserviceteam.com)
5009                 '.otkiu.cn',    // 84.16.255.254(*.internetserviceteam.com)
5010                 '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
5011                 '.rgjcs.cn',    // 84.16.251.219(*.internetserviceteam.com)
5012                 '.rjskp.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
5013                 '.sokrp.cn',    // 84.16.226.217(*snip*)
5014                 '.ubtnp.cn',    // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de)
5015                 '.vdecc.cn',    // 84.16.226.29(*snip*)
5016                 '.vgkkc.cn',    // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
5017                 '.vqsmy.cn',    // 84.16.249.239(*snip*)
5018                 '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
5019                 '.xiuky.cn',    // 84.16.251.222(*snip*)
5020                 '.xrqcd.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
5021
5022                 // by la at dns4dedka.info
5023                 '.aeyzf.cn',    // 84.16.251.218(*snip*)
5024                 '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
5025                 '.bgslu.cn',    // 89.149.228.163(*snip*)
5026                 '.dxouw.cn',    // 84.16.255.253(*snip*)
5027                 '.ecsbe.cn',    // 84.16.251.218(*snip*)
5028                 '.eothy.cn',    // 84.16.249.241(*snip*)
5029                 '.epocy.cn',    // 84.16.251.220(*.internetserviceteam.com)
5030                 '.ewvjw.cn',    // 89.149.196.72(*snip*)
5031                 '.faacz.cn',    // 84.16.251.222(*snip*)
5032                 '.filun.cn',    // 89.149.196.72(*snip*)
5033                 '.fzdpk.cn',    // 84.16.249.239(*snip*)
5034                 '.hatyg.cn',    // 84.16.251.223(*snip*)
5035                 '.hmtqn.cn',    // 84.16.249.240(*snip*)
5036                 '.ibfte.cn',    // 89.149.196.19(*snip*)
5037                 '.jcaym.cn',    // 84.16.249.240(*snip*)
5038                 '.iqzaw.cn',    // 84.16.255.254(*snip*)
5039                 '.jclsf.cn',    // 84.16.249.240(*snip*)
5040                 '.jefdh.cn',    // 84.16.249.240(*snip*)
5041                 '.kchjh.cn',    // 84.16.251.219(*snip*)
5042                 '.krumo.cn',    // 84.16.226.217(*snip*)
5043                 '.lbava.cn',    // 217.20.112.102(*snip*)
5044                 '.mqrtw.cn',    // 84.16.226.29(*snip*)
5045                 '.njpgv.cn',    // 84.16.251.219(*snip*)
5046                 '.npovm.cn',    // 84.16.226.28(*snip*)
5047                 '.nyobt.cn',    // 89.149.196.19(*snip*)
5048                 '.ovxxt.cn',    // 84.16.251.223(*snip*)
5049                 '.owhwz.cn',    // 89.149.228.163(*snip*)
5050                 '.ozjyi.cn',    // 84.16.249.241(*snip*)
5051                 '.pfnzj.cn',    // 84.16.226.217(*snip*)
5052                 '.pixvf.cn',    // 84.16.255.254(*snip*)
5053                 '.qydph.cn',    // 89.149.228.163(*snip*)
5054                 '.rxens.cn',    // 89.149.196.72(*snip*)
5055                 '.sojbp.cn',    // 84.16.249.239(*snip*)
5056                 '.srths.cn',    // 84.16.251.222(*snip*)
5057                 '.tdytc.cn',    // 84.16.255.254(*snip*)
5058                 '.unquz.cn',    // 84.16.251.223(*snip*)
5059                 '.uwcns.cn',    // 89.149.196.19(*snip*)
5060                 '.vcbdm.cn',    // 84.16.251.220(*snip*)
5061                 '.wnmat.cn',    // 84.16.255.253(*snip*)
5062                 '.wttmr.cn',    // 84.16.226.29(*snip*)
5063                 '.xpwib.cn',    // 84.16.251.220(*snip*)
5064                 '.yrogt.cn',    // 84.16.249.239(*snip*)
5065
5066                 // by le at dns4dedka.info
5067                 '.goslw.cn',    // 84.16.251.220(*snip*)
5068                 '.hqbmh.cn',    // 84.16.251.223(*snip*)
5069                 '.iewik.cn',    // 84.16.255.254(*snip*)
5070                 '.jnkeh.cn',    // 89.149.228.163(*snip*)
5071                 '.pifyp.cn',    // 89.149.228.163(*snip*)
5072                 '.nohyl.cn',    // 89.149.196.72(*snip*)
5073                 '.nvzvx.cn',    // 84.16.255.254(*snip*)
5074                 '.uchoe.cn',    // 84.16.249.239(*snip*)
5075                 '.ujoyf.cn',    // 84.16.251.218(*snip*)
5076                 '.ulfqh.cn',    // 89.149.196.19(*snip*)
5077                 '.vxugv.cn',    // 84.16.251.223(*snip*)
5078
5079                 '.dbgti.cn',    // 84.16.249.240(*snip*)
5080                 '.oelmv.cn',    // 84.16.226.28(*snip*)
5081                 '.qniww.cn',    // 84.16.251.218(*snip*)
5082                 '.vtvyq.cn',    // 84.16.251.219(*snip*)
5083                 '.zqonm.cn',    // 84.16.249.241(*snip*)
5084
5085                 '.allmyns.info',        // 84.16.226.29 by acua at mail.ru, / forbidden
5086                         // by webmaster at allmyns.info
5087                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
5088                         '.ihpvy.cn',    // 84.16.226.28(*snip*)
5089                         '.lbtuo.cn',    // 84.16.255.254(*snip*)
5090                         '.liunc.cn',    // 84.16.249.241(*snip*)
5091                         '.rcyqr.cn',    // 84.16.226.217(*snip*)
5092                         '.rekth.cn',    // 89.149.196.19(*snip*)
5093                         '.riumh.cn',    // 84.16.226.28(*snip*)
5094                         '.zbtym.cn',    // 84.16.251.219(*snip*)
5095                         '.zjcgx.cn',    // 217.20.112.102(*snip*)
5096         ),
5097         'gilvcta sy jilbertsbram.com' => array(
5098                 '.dsfljkeilm1.cn',      //  206.53.51.126
5099                 '.dsfljkeilm2.cn',      //  206.53.51.126
5100                 '.dsfljkeilm3.cn',      // IP not allocated now
5101                 '.dsfljkeilm4.cn',      // IP not allocated now
5102                 '.dsfljkeilm5.cn',      // IP not allocated now
5103                 '.dsfljkeilm6.cn',      // IP not allocated now
5104                 '.dsfljkeilm7.cn',      // IP not allocated now
5105                 '.dsfljkeilm8.cn',      // IP not allocated now
5106                 '.dsfljkeilm9.cn',      // IP not allocated now
5107                 '.dsfljkeilm10.cn',     // IP not allocated now
5108         ),
5109         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
5110
5111                 // 69.64.82.76(*.dedicated.abac.net)
5112                 '.bruised-criedit.info',
5113                 '.bruised-crtedit.info',
5114                 '.bruised-czrd.info',
5115                 '.bruisedcreditcars.info',
5116                 '.bruisedcreitcard.info',
5117                 '.bruisedcreitd.info',
5118                 '.buliderscreadet.info',
5119                 '.cleaningup-cdit.info',
5120                 '.cleaningup-cedict.info',
5121                 '.cleaningup-cerdic.info',
5122                 '.cleanup-crrd.info',
5123
5124                 // 69.64.82.77(*.dedicated.abac.net)
5125                 '.bruised-crediot.info',
5126                 '.bruised-credtid.info',
5127                 '.bruisedcriet.info',
5128                 '.bruisedredit.info',
5129                 '.buliders-crdt.info',
5130                 '.buliders-cre4dit.info',
5131                 '.buliders-creadt.info',
5132                 '.buliders-credcards.info',
5133                 '.buliders-credictcard.info',
5134                 '.cleaningupccreditcards.info',
5135                 '.cleaningupcdedit.info',
5136                 '.cleaningupcedirt.info',
5137                 '.cleaningupceidt.info',
5138                 '.cleaningupcrasd.info',
5139                 '.cleaningupcreait.info',
5140
5141                 // 69.64.82.78(*.dedicated.abac.net)
5142                 '.bruised-cridet.info',
5143                 '.bruised-drecit.info',
5144                 '.bruised-reditcards.info',
5145                 '.bruisedcredikt.info',
5146                 '.bruisedcredith.info',
5147                 '.bruisedcredtid.info',
5148                 '.cleanup-criet.info',
5149                 '.cleanup-csrds.info',
5150                 '.cleanup-dards.info',
5151
5152                 // 69.64.82.79(*.dedicated.abac.net)
5153                 '.bruised-crediotcards.info',
5154                 '.bruised-creditcar.info',
5155                 '.bruised-creid.info',
5156                 '.bruised-creidtcard.info',
5157                 '.buliders-crdit.info',
5158                 '.buliders-creadet.info',
5159                 '.cleaningup-ceridt.info',
5160                 '.cleaningupcrecit.info',
5161                 '.cleaningupccritcard.info',
5162                 '.cleanupdredit.info',
5163                 '.cleanupredit.info',
5164         ),
5165         '.malwarealarm.com',
5166                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
5167                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
5168                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
5169         '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated)
5170         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated)
5171         'Inet-Traffic.com' => array(
5172                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
5173                 //'.dcomm.com',         // by D Communications Inc. S.A.
5174
5175                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
5176                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5177                 // ...
5178                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
5179                 // ...
5180                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
5181                 // ...
5182                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
5183                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
5184                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
5185                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
5186                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
5187                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
5188                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
5189                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
5190                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
5191                 // ...
5192                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
5193                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
5194                 // ...
5195                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
5196                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
5197                 // ...
5198                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
5199                 // ...
5200                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5201                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
5202                 // ...
5203                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
5204         ),
5205         'andreyletov at yahoo.com' => array(
5206                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
5207                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
5208                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
5209         ),
5210         'alrusnac at hotmail.com' => array(
5211                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
5212                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
5213         ),
5214         '203.116.63.123' => array(
5215                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
5216                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
5217         ),
5218         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
5219                 '.autotowncar.cn',              // 69.73.146.184
5220                 '.badgirlhome.cn',              // 69.73.146.186
5221         ),
5222         'Wmp.co.jp' => array(
5223                 // 219.94.134.208, ns *.dns.ne.jp, adult
5224                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
5225                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
5226                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
5227         ),
5228         'Macherie.tv' => array(
5229                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
5230                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
5231                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
5232         ),
5233         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
5234                 '.yemine.info',
5235                 '.fr4f3ds.info',
5236         ),
5237         '66.232.112.175' => array(
5238                 // by abuse-here at inbox.ru
5239                 '.catybe.cn',
5240                 '.jytame.cn',
5241                 '.wygete.cn',
5242
5243                 // by bing-32 at ftunez.org
5244                 '.lasyxy.cn',
5245
5246                 // by entretov-86 at ftunez.org
5247                 '.faweji.cn',
5248                 '.xozuso.cn',
5249
5250                 // by sabrosky-49 at ftunez.org
5251                 '.gywiqe.cn',
5252                 '.jotapo.cn',
5253                 '.jywixa.cn',
5254         ),
5255
5256         // C-2: Lonely domains (buddies not found yet)
5257         '.0721-4404.com',
5258         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
5259         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
5260         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
5261         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
5262         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
5263         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
5264         '.0annie.info',
5265         '.6i6.de',
5266         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
5267         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
5268         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
5269         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
5270         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
5271         '.allworlddirect.info', // Forbidden
5272         '.amoreitsex.com',
5273         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
5274         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
5275         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
5276         '.auto-car-cheap.org',
5277         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
5278         '.baurish.info',
5279         '.bestop.name',
5280         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
5281         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
5282         '.bestshopfinder.info',
5283         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
5284         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
5285         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
5286         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
5287         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
5288         '.catkittenmagazines.org',              // 87.118.97.117
5289         '.covertarena.co.uk',   // by Wayne Huxtable
5290         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
5291         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
5292         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
5293         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
5294         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
5295         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
5296         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
5297         '.easyshopusa.com',             // by riter (riter at nm.ru)
5298         '.edu.ph',                              // "philippine network foundation inc"
5299         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
5300         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
5301         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
5302         '.fastppc.info',                // by peter conor (fastppc at msn.com)
5303         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
5304         '*.filthserver.com',    // sales at onlinemarketingservices.biz
5305         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
5306         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
5307         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
5308         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
5309         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
5310         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
5311         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
5312         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
5313         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
5314         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
5315         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
5316         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
5317
5318         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
5319
5320         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
5321         '.gm-exchange.jp',              // 210.188.216.49 RMT
5322         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
5323         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
5324         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
5325         '.greatbestwestern.org',// by gao.wungao at gmail.com
5326         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
5327         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
5328         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
5329         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
5330         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
5331         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
5332         '.hostuju.cz',                  // ns banan.cz, banan.it
5333         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
5334         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
5335         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
5336         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
5337         '.infradoc.com',
5338         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
5339         '.ismarket.com',                // Google-hiding. intercage.com related IP
5340         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
5341         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
5342         '.itsexosit.net',
5343         '.itxxxit.net',
5344         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
5345         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
5346         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
5347         '.kingtools.de',
5348         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
5349         '.leucainfo.com',
5350         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
5351         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
5352         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
5353         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
5354         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
5355         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
5356         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
5357         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
5358         '.megvideochatlive.info',       // Bad seo
5359         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
5360         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
5361         '.myfgj.info',                  // by Filus (softscript at gmail.com)
5362         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
5363         '.mxsupportmailer.com',
5364         '.next-moneylife.com',  // RMT
5365         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
5366         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
5367         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
5368         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
5369         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
5370         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
5371         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
5372         '.onlineviagra.de',
5373         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
5374         '.ozomw.info',
5375         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
5376         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
5377         '.perevozka777.ru',             // by witalik at gmail.com
5378         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
5379         '.pills-storage.com',   // by
5380         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
5381         '.porkyhost.com',               // 79965 at whois.gkg.net
5382         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
5383         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
5384         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
5385         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
5386         '.prama.info',                  // by Juan.Kang at mytrashmail.com
5387         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
5388         '.qoclick.net',                 // by DMITRIY SOLDATENKO
5389         '.quality-teen-porn-photo.com', // by info at densa.info
5390         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
5391         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
5392         '.rigame.info',                 // by debra_jordan07 at yahoo.com
5393         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
5394         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
5395         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
5396         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
5397         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
5398         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
5399         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
5400         '.sexamoreit.com',
5401         '.sexforit.com',
5402         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
5403         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
5404         '.sirlook.com',
5405         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
5406         '.sepcn.info',                  // / not found
5407         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
5408         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
5409         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
5410         '.superverizonringtones.com',   // by joshua at list.ru
5411         '.thehostcity.com',             // Domains by Proxy
5412         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
5413         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
5414         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
5415         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
5416         '.topmeds10.com',
5417         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
5418         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
5419         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
5420         '.unctad.net',                  // by gfdogfd at lovespb.com
5421         '.vacant.org.uk',
5422         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
5423         '.virtualsystem.de',
5424         '.vdxhost.com',
5425         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
5426         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
5427         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
5428         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
5429         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
5430         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
5431         '.whoop.to',                    // RMT
5432         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
5433         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
5434         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
5435         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
5436         '.wwwna.info',                  // / 404 Not Found
5437         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
5438         '.xamorexxx.net',
5439         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
5440         '.xsessox.com',
5441         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
5442         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
5443         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
5444         '.zyguo.info',                  // ns globoxhost.net
5445         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
5446
5447         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
5448         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
5449         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
5450
5451         '.masserch.info',               // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com) "Free Web Hosting" by sqr at bk.ru, spam
5452         '.viagrabuycheap.info', // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...), ns *.advernsserver.com
5453
5454         '.chatwalker.com',              // 124.32.230.65
5455         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
5456         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
5457
5458         '.mncxvsm.info',                // 217.11.233.105, / blank
5459         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
5460
5461         // C-3: Not classifiable (information wanted)
5462         //
5463         // Something incoming to pukiwiki related sites
5464         'nana.co.il related' => array(
5465                 '.planetnana.co.il',
5466                 '.nana.co.il',
5467         ),
5468 );
5469
5470 // --------------------------------------------------
5471
5472 $blocklist['D'] = array(
5473         // D: Sample setting of
5474         // "Third party in good faith"s
5475         //
5476         // Hosts shown inside of the implanted contents,
5477         // not used via spam, but maybe useful to detect these contents
5478         //
5479         // 'RESERVED',
5480 );
5481
5482 // --------------------------------------------------
5483
5484 $blocklist['E'] = array(
5485         // E: Sample setting of
5486         // Promoters
5487         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
5488         //  Ads, Business promotions)
5489         //
5490         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
5491         // Sometimes they may promote each other
5492
5493         '15-Mail.com related' => array(
5494                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
5495                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5496                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5497                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
5498                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
5499         ),
5500         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
5501         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
5502         'E-brainers.com related' => array(
5503                 // 202.212.14.101
5504                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
5505                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
5506                 '.my-tune.jp',                                  // by brainers Inc.
5507                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
5508                 '.weekle.jp',                                   // by brainers Inc.
5509
5510                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
5511                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
5512                 '.3minutes-marketing-club.com', // by Fujio
5513                 '.affiliate-vampire.com',               // by Masatoshi
5514                 '.article-site-power-package.com',      // by Masatoshi
5515                 '.audio-marketing-club.com',    // by Fujio
5516                 '.brainers-task-manager.com',   // by Masatoshi
5517                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
5518                 '.brainersbuzz.com',                    // by Masatoshi
5519                 '.den4renz-marketing-club.com', // by Fujio
5520                 '.english-contents-club.com',   // by Masatoshi
5521                 '.fly-in-ads-japan.com',                // by Fujio
5522                 '.free-resalerights-giveaway.com',      // by Fujio
5523                 '.freegiveawaysecret.com',              // by Masatoshi
5524                 '.guaranteedvisitorpro.com',    // by Masatoshi
5525                 '.havads-japan.com',                    // by Masatoshi
5526                 '.info-business123.com',                // by Fujio
5527                 '.instant-marketing-club.com',  // by Fujio
5528                 '.internetmarketinggorinjyu.com',       // by Masatoshi
5529                 '.marketing-force-japan.com',   // by Fujio
5530                 '.masatoshikobayashi.com',              // by Fujio
5531                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
5532                 '.replytomatt.com',                             // by Fujio
5533                 '.santa-deal.com',                              // by Fujio
5534                 '.santa-deal-summer.com',               // by Fujio
5535                 '.scratch-card-factory.com',    // by Masatoshi
5536                 '.script4you-japan.com',                // by Fujio
5537                 '.sell1000000dollarinjapan.com',// by Fujio
5538                 '.squeeze-page-secret.com',             // by Masatoshi
5539                 '.viral-blog-square.com',               // by Fujio
5540                 '.viralarticle.com',                    // by Fujio
5541                 '.wowhoken.com',                                // by Fujio
5542
5543                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
5544                 '.brainerstelevision.com',
5545                 '.demosite4you.com',
5546                 '.keywordcatcherpro.com',
5547                 '.script-marketing-club.com',
5548
5549                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
5550                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
5551                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
5552                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
5553                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
5554                 '.brainerscode.com',    // by akada
5555                 '.brainerslive.com',    // by domain
5556                 '.brainersreview.com',  // by domain
5557                 '.brainerstest.com',    // by akada
5558                 '.otosecret.com',               // by domain
5559                 '.ultimate-marketing-weapon.com',       // by akada
5560                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
5561                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
5562
5563                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
5564                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
5565         ),
5566         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
5567         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
5568         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
5569         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
5570         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
5571                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
5572                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
5573                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
5574
5575                 // Redirects and affiliates:
5576                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
5577                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
5578                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
5579                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
5580                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
5581                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
5582                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
5583                 //   ...
5584
5585                 // Other suggestions:
5586                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
5587
5588                 // Blog posting at the same time
5589                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
5590                 //   2007/06/13 e123.info/archives/76
5591                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
5592                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
5593                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
5594         ),
5595         'info at kobeweb.jp' => array(
5596                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
5597                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
5598                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
5599         ),
5600         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
5601         'Infocart.jp' => array(         // by wai at infocart.jp
5602                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
5603                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
5604                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
5605
5606                 //inetnum:      60.32.154.176 - 60.32.154.183
5607                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
5608                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
5609         ),
5610         'Info-sniper.com' => array(
5611                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
5612                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
5613                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
5614         ),
5615         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
5616         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
5617         'JunSuzuki.com' => array(       // e-brainers.com related
5618                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
5619                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
5620         ),
5621         'Natsukih.net' => array(
5622                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
5623                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
5624                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
5625                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
5626
5627                 // by info at natsukih.net
5628                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
5629                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
5630                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
5631                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
5632                 '.5muryoureport.com',   // 210.251.253.230
5633                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
5634                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
5635                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
5636         ),
5637         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
5638                 '.11kanji.com',         // 211.10.131.88
5639                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
5640                 '.point-park.com',      // 211.10.131.88
5641                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
5642         ),
5643         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
5644         'Rakuten.co.jp' => array(
5645                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
5646                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
5647         ),
5648         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
5649         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
5650         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
5651                 '.e123.info',
5652                 '.ialchemist.net',
5653                 '.j012.net',
5654                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
5655         ),
5656         'Viscose.jp' => array(
5657                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
5658                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
5659         ),
5660         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
5661 );
5662
5663 // --------------------------------------------------
5664
5665 $blocklist['Z'] = array(
5666         // Z: Yours
5667         //
5668         //'',
5669         //'',
5670         //'',
5671 );
5672
5673 ?>