spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.173 2007/10/13 01:25:05 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         // Yours
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'amoo.org',
 177         'web.archive.org',              ///web/2
 178         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 179                 'jmp2.net',
 180                 '2me.tw',
 181         ),
 182         'ataja.es',
 183         'ATBHost.com' => array(
 184                 '*.atbhost.com',
 185                 '*.bzhost.net',
 186         ),
 187         'atk.jp',
 188         'clearp.ath.cx',
 189         'athomebiz.com',
 190         'aukcje1.pl',
 191         'beam.to',
 192         'beermapping.com',
 193         'besturl.in',
 194         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 195         'biglnk.com',
 196         'bingr.com',
 197         'bittyurl.com',
 198         '*.bizz.cc',
 199         '*.blo.pl',
 200         '*.bo.pl',
 201         'briefurl.com',
 202         'brokenscript.com',
 203         'BucksoGen.com' => array(
 204                 '*.bucksogen.com',
 205                 '*.bulochka.org',
 206                 '*.korzhik.org',
 207                 '*.kovrizhka.org',
 208                 '*.pirozhok.org',
 209                 '*.plushka.org',
 210                 '*.pryanik.org',
 211                 '*.sushka.org',
 212         ),
 213         'budgethosts.org',
 214         'budu.com',                             // by peter.eder at imcworld.com
 215         '*.buzznet.com',
 216         '*.bydl.com',
 217         'C-O.IN' => array(
 218                 '*.c-o.cc',
 219                 '*.c-o.in',
 220                 '*.coz.in',
 221                 '*.cq.bz',
 222         ),
 223         'c64.ch',
 224         'c711.com',
 225         '*.cej.pl',
 226         'checkasite.net',
 227         'url.chefhost.com',
 228         '*.chicappa.jp',
 229         'chilicity.com',
 230         'big5.china.com',               ///gate/big5/
 231         'chopurl.com',
 232         'christopherleestreet.com',
 233         'cintcm.com',
 234         '*.cjb.net',
 235         'clipurl.com',
 236         '*.co.nr',
 237         'Comtech Enterprises ' => array(        // comteche.com
 238                 'tinyurl.name',
 239                 'tinyurl.us',
 240         ),
 241         'Cool168.com' => array(
 242                 '*.cool158.com',
 243                 '*.cool168.com',
 244                 '*.ko168.com',
 245                 '*.ko188.com',
 246         ),
 247         'Coolurl.de' => array(
 248                 'coolurl.de',
 249                 'dornenboy.de',
 250                 'eyeqweb.com',
 251                 'hardcore-porn.de',
 252                 'maschinen-bluten-nicht.de',
 253         ),
 254         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 255         'cutalink.com',
 256         '*.da.cx',
 257         '*.da.ru',
 258         'dae2.com',
 259         'dephine.org',
 260         'desiurl.com',
 261         'dhurl.com',
 262         'digbig.com',
 263         'Digipills.com' => array(
 264                 '*.digipills.com',
 265                 'minilien.com',
 266                 'tinylink.com',
 267         ),
 268         '*.discutbb.com',
 269         'DL.AM' => array(
 270                 '*.cx.la',
 271                 '*.dl.am',
 272         ),
 273         '*.dl.pl',
 274         '*.dmdns.com',
 275         'doiop.com',
 276         'drlinky.com',
 277         'durl.us',
 278         '*.dvdonly.ru',
 279         '*.dynu.ca',
 280         'dwarf.name',
 281         '*.eadf.com',
 282         'easyURL.net' => array(
 283                 '*.easyurl.net',
 284                 '.goshrink.com',
 285                 'ushrink.com',
 286         ),
 287         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 288                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 289                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 290                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 291                 //   "Keep continuing to seek originality and contribute it to local,
 292                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 293                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 294                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 295                 // I'm so much impressed of the situation around this imported one today.
 296         'elfurl.com',
 297         'eny.pl',
 298         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 299                 '.mywiitime.com',
 300                 '.surfindark.com',              // webmaster at etechfocus.com
 301                 '.surfinshade.com',
 302                 '.surfinshadow.com',
 303                 '.surfinwind.com',
 304                 '.topsecretlive.com',
 305         ),
 306         '*.eu.org',
 307         'F2B.be' => array(
 308                 '*.f2b.be',
 309                 '*.freakz.eu',
 310                 '*.n0.be',
 311                 '*.n3t.nl',
 312                 '*.short.be',
 313                 '*.ssr.be',
 314                 '*.tweaker.eu',
 315         ),
 316         '*.fancyurl.com',
 317         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 318                 'blue11.jp',
 319                 'fanznet.com',
 320                 'katou.in',
 321                 'mymap.in',
 322                 'saitou.in',
 323                 'satou.in',
 324                 'susan.in',
 325         ),
 326         '.fe.pl',                       // Redirection and subdomain
 327         'ffwd.to',
 328         'url.fibiger.org',
 329         'FireMe.to' => array(
 330                 'fireme.to',
 331                 'nextdoor.to',
 332                 'ontheway.to',
 333         ),
 334         'flingk.com',
 335         'flog.jp',                      // careless redirector and bbs
 336         'fm7.biz',
 337         'fnbi.jp',
 338         '*.fnbi.jp',
 339         'forgeturl.com',
 340         '*.free.bg',
 341         'Freeservers.com' => array(     // United Online Web Services, Inc.
 342                 '*.4mg.com',
 343                 '*.4t.com',
 344                 '*.8m.com',
 345                 '*.8m.net',
 346                 '*.8k.com',
 347                 '*.faithweb.com',
 348                 '*.freehosting.net',
 349                 '*.freeservers.com',
 350                 '*.gq.nu',
 351                 '*.htmlplanet.com',
 352                 '*.itgo.com',
 353                 '*.iwarp.com',
 354                 '*.s5.com',
 355                 '*.scriptmania.com',
 356                 '*.tvheaven.com',
 357         ),
 358         '*.freewebpages.com',
 359         'FreeWebServices.net' => array( // Host Department LLC
 360                 '*.about.gs',   // Dead?
 361                 '*.about.tc',
 362                 '*.about.vg',
 363                 '*.aboutus.gs',
 364                 '*.aboutus.ms',
 365                 '*.aboutus.tc',
 366                 '*.aboutus.vg',
 367                 '*.biografi.biz',
 368                 '*.biografi.info',
 369                 '*.biografi.org',
 370                 '*.biografi.us',
 371                 '*.datadiri.biz',
 372                 '*.datadiri.cc',
 373                 '*.datadiri.com',
 374                 '*.datadiri.info',
 375                 '*.datadiri.net',
 376                 '*.datadiri.org',
 377                 '*.datadiri.tv',
 378                 '*.datadiri.us',
 379                 '*.ecv.gs',
 380                 '*.ecv.ms',
 381                 '*.ecv.tc',
 382                 '*.ecv.vg',
 383                 '*.eprofile.us',
 384                 '*.go2net.ws',
 385                 '*.hits.io',
 386                 '*.hostingweb.us',
 387                 '*.hub.io',
 388                 '*.indo.bz',
 389                 '*.indo.cc',
 390                 '*.indo.gs',
 391                 '*.indo.ms',
 392                 '*.indo.tc',
 393                 '*.indo.vg',
 394                 '*.infinitehosting.net',
 395                 '*.infinites.net',
 396                 '*.lan.io',
 397                 '*.max.io',
 398                 '*.mycv.bz',
 399                 '*.mycv.nu',
 400                 '*.mycv.tv',
 401                 '*.myweb.io',
 402                 '*.ourprofile.biz',
 403                 '*.ourprofile.info',
 404                 '*.ourprofile.net',     // Dead?
 405                 '*.ourprofile.org',
 406                 '*.ourprofile.us',
 407                 '*.profil.bz',
 408                 '*.profil.cc',
 409                 '*.profil.cn',
 410                 '*.profil.gs',
 411                 '*.profil.in',
 412                 '*.profil.ms',
 413                 '*.profil.tc',
 414                 '*.profil.tv',
 415                 '*.profil.vg',  // ?
 416                 '*.site.io',
 417                 '*.wan.io',
 418                 '*.web-cam.ws',
 419                 '*.webs.io',
 420                 '*.zip.io',
 421         ),
 422         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 423         '*.fx.to',
 424         'fyad.org',
 425         'fype.com',
 426         'gentleurl.net',
 427         'Get2.us' => array(
 428                 '*.get2.us',
 429                 '*.hasballs.com',
 430                 '*.ismyidol.com',
 431                 '*.spotted.us',
 432                 '*.went2.us',
 433                 '*.wentto.us',
 434         ),
 435         'glinki.com',
 436         '*.globalredirect.com',
 437         'gnu.vu',
 438         '*.go.cc',
 439         //'Google.com' => array(
 440         //              google.com/translate_c\?u=(?:http://)?
 441         //),
 442         'goonlink.com',
 443         '.gourl.org',
 444         '.greatitem.com',
 445         'gzurl.com',
 446         'url.grillsportverein.de',
 447         'Harudake.net' => array('*.hyu.jp'),
 448         'Hattinger Linux User Group' => array('short.hatlug.de'),
 449         'Hexten.net' => array('lyxus.net'),
 450         'here.is',
 451         'HispaVista.com' => array(
 452                 '*.blogdiario.com',
 453                 '*.hispavista.com',
 454                 '.galeon.com',
 455         ),
 456         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 457                 '*.8l.pl',
 458                 '*.blg.pl',
 459                 '*.czytajto.pl',
 460                 '*.ryj.pl',
 461                 '*.xit.pl',
 462                 '*.xlc.pl',
 463                 '*.hk.pl',
 464                 '*.home.pl',
 465                 '*.of.pl',
 466         ),
 467         'hort.net',
 468         'free4.hostrocket.com',
 469         '*.hotindex.ru',
 470         'HotRedirect.com' => array(
 471                 '*.coolhere.com',
 472                 '*.homepagehere.com',
 473                 '*.hothere.com',
 474                 '*.mustbehere.com',
 475                 '*.onlyhere.net',
 476                 '*.pagehere.com',
 477                 '*.surfhere.net',
 478                 '*.zonehere.com',
 479         ),
 480         'hotshorturl.com',
 481         'hotwebcomics.com',     ///search_redirect.php
 482         'hurl.to',
 483         '*.hux.de',
 484         '*.i89.us',
 485         'iat.net',                      // 74.208.58.130 by Tony Carter
 486         'ibm.com',                      ///links (Correct it)
 487         '*.iceglow.com',
 488         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 489         'Ideas para Nuevos Mercados SL' => array(
 490                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 491                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 492                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 493                 // by edgar bortolin (oscar at i4nm.com)
 494                 // by Edgar Bortolin  (oscar at i4nm.com)
 495                 // by oscar florez (oscar at i4nm.com)
 496                 // by Oscar Florez (oscar at red-es.com)
 497                 // by covadonga del valle (oscar at i4nm.com)
 498                 '*.ar.gd',
 499                 '*.ar.gs',      // ns *.nora.net
 500                 '*.ar.kz',      // by oscar
 501                 '*.ar.nu',      // by Edgar
 502                 '*.ar.tc',      // by oscar
 503                 '*.ar.vg',      // by oscar
 504                 '*.bo.kz',      // by oscar
 505                 '*.bo.nu',      // by covadonga
 506                 '*.bo.tc',      // by oscar
 507                 '*.bo.tf',      // by Oscar
 508                 '*.bo.vg',      // by oscar
 509                 '*.br.gd',
 510                 '*.br.gs',      // ns *.nora.net
 511                 '*.br.nu',      // by edgar
 512                 '*.br.vg',      // by oscar
 513                 '*.ca.gs',      // by oscar
 514                 '*.ca.kz',      // by oscar
 515                 '*.cl.gd',      // by oscar
 516                 '*.cl.kz',      // by oscar
 517                 '*.cl.nu',      // by edgar
 518                 '*.cl.tc',      // by oscar
 519                 '*.cl.tf',      // by Oscar
 520                 '*.cl.vg',      // by oscar
 521                 '*.col.nu',     // by Edgar
 522                 '*.cr.gs',      // ns *.nora.net
 523                 '*.cr.kz',      // by oscar
 524                 '*.cr.nu',      // by edgar
 525                 '*.cr.tc',      // by oscar
 526                 '*.cu.tc',      // by oscar
 527                 '*.do.kz',      // by oscar
 528                 '*.do.nu',      // by edgar
 529                 '*.ec.kz',      // by edgar
 530                 '*.ec.nu',      // by Edgar
 531                 '*.ec.tf',      // by Oscar
 532                 '*.es.kz',      // by oscar
 533                 '*.eu.kz',      // by oscar
 534                 '*.gt.gs',      // ns *.nora.net
 535                 '*.gt.tc',      // by oscar
 536                 '*.gt.tf',      // by Oscar
 537                 '*.gt.vg',      // by Oscar
 538                 '*.hn.gs',      // ns *.nora.net
 539                 '*.hn.tc',      // by oscar
 540                 '*.hn.tf',      // by Oscar
 541                 '*.hn.vg',      // by oscar
 542                 '*.mx.gd',
 543                 '*.mx.gs',      // ns *.nora.net
 544                 '*.mx.kz',      // by oscar
 545                 '*.mx.vg',      // by oscar
 546                 '*.ni.kz',      // by oscar
 547                 '*.pa.kz',      // by oscar
 548                 '*.pe.kz',      // by oscar
 549                 '*.pe.nu',      // by Edgar
 550                 '*.pr.kz',      // by oscar
 551                 '*.pr.nu',      // by edgar
 552                 '*.pt.gs',      // ns *.nora.net
 553                 '*.pt.kz',      // by edgar
 554                 '*.pt.nu',      // by edgar
 555                 '*.pt.tc',      // by oscar
 556                 '*.pt.tf',      // by Oscar
 557                 '*.py.gs',      // ns *.nora.net
 558                 '*.py.nu',      // by edgar
 559                 '*.py.tc',      // by oscar
 560                 '*.py.tf',      // by Oscar
 561                 '*.py.vg',      // by oscar
 562                 '*.sv.tc',      // by oscar
 563                 '*.usa.gs',     // ns *.nora.net
 564                 '*.uy.gs',      // ns *.nora.net
 565                 '*.uy.kz',      // by oscar
 566                 '*.uy.nu',      // by edgar
 567                 '*.uy.tc',      // by oscar
 568                 '*.uy.tf',      // by Oscar
 569                 '*.uy.vg',      // by oscar
 570                 '*.ve.gs',      // by oscar
 571                 '*.ve.tc',      // by oscar
 572                 '*.ve.tf',      // by Oscar
 573                 '*.ve.vg',      // by oscar
 574                 '*.ven.nu',     // by edgar
 575         ),
 576         'ie.to',
 577         'igoto.co.uk',
 578         'ilook.tw',
 579         'indianpad.com',                ///view/
 580         'iNetwork.co.il' => array(
 581                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 582                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 583                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 584         ),
 585         '*.infogami.com',
 586         'infotop.jp',
 587         'ipoo.org',
 588         'IR.pl' => array(
 589                 '*.aj.pl',
 590                 '*.aliasy.org',
 591                 '*.gu.pl',
 592                 '*.hu.pl',
 593                 '*.ir.pl',
 594                 '*.jo.pl',
 595                 '*.su.pl',
 596                 '*.td.pl',
 597                 '*.uk.pl',
 598                 '*.uy.pl',
 599                 '*.xa.pl',
 600                 '*.zj.pl',
 601         ),
 602         'irotator.com',
 603         '.iwebtool.com',
 604         'j6.bz',
 605         'jeeee.net',
 606         'Jaze Redirect Services' => array(
 607                 '*.arecool.net',
 608                 '*.iscool.net',
 609                 '*.isfun.net',
 610                 '*.tux.nu',
 611         ),
 612         '*.jed.pl',
 613         'JeremyJohnstone.com' => array('url.vg'),
 614         'jemurl.com',
 615         'jggj.net',
 616         'jpan.jp',
 617         'josh.nu',
 618         'kat.cc',
 619         'Kickme.to' => array(
 620                 '.1024bit.at',
 621                 '.128bit.at',
 622                 '.16bit.at',
 623                 '.256bit.at',
 624                 '.32bit.at',
 625                 '.512bit.at',
 626                 '.64bit.at',
 627                 '.8bit.at',
 628                 '.adores.it',
 629                 '.again.at',
 630                 '.allday.at',
 631                 '.alone.at',
 632                 '.altair.at',
 633                 '.american.at',
 634                 '.amiga500.at',
 635                 '.ammo.at',
 636                 '.amplifier.at',
 637                 '.amstrad.at',
 638                 '.anglican.at',
 639                 '.angry.at',
 640                 '.around.at',
 641                 '.arrange.at',
 642                 '.australian.at',
 643                 '.baptist.at',
 644                 '.basque.at',
 645                 '.battle.at',
 646                 '.bazooka.at',
 647                 '.berber.at',
 648                 '.blackhole.at',
 649                 '.booze.at',
 650                 '.bosnian.at',
 651                 '.brainiac.at',
 652                 '.brazilian.at',
 653                 '.bummer.at',
 654                 '.burn.at',
 655                 '.c-64.at',
 656                 '.catalonian.at',
 657                 '.catholic.at',
 658                 '.chapel.at',
 659                 '.chills.it',
 660                 '.christiandemocrats.at',
 661                 '.cname.at',
 662                 '.colors.at',
 663                 '.commodore.at',
 664                 '.commodore64.at',
 665                 '.communists.at',
 666                 '.conservatives.at',
 667                 '.conspiracy.at',
 668                 '.cooldude.at',
 669                 '.craves.it',
 670                 '.croatian.at',
 671                 '.cuteboy.at',
 672                 '.dancemix.at',
 673                 '.danceparty.at',
 674                 '.dances.it',
 675                 '.danish.at',
 676                 '.dealing.at',
 677                 '.deep.at',
 678                 '.democrats.at',
 679                 '.digs.it',
 680                 '.divxlinks.at',
 681                 '.divxmovies.at',
 682                 '.divxstuff.at',
 683                 '.dizzy.at',
 684                 '.does.it',
 685                 '.dork.at',
 686                 '.drives.it',
 687                 '.dutch.at',
 688                 '.dvdlinks.at',
 689                 '.dvdmovies.at',
 690                 '.dvdstuff.at',
 691                 '.emulators.at',
 692                 '.end.at',
 693                 '.english.at',
 694                 '.eniac.at',
 695                 '.error403.at',
 696                 '.error404.at',
 697                 '.evangelism.at',
 698                 '.exhibitionist.at',
 699                 '.faith.at',
 700                 '.fight.at',
 701                 '.finish.at',
 702                 '.finnish.at',
 703                 '.forward.at',
 704                 '.freebie.at',
 705                 '.freemp3.at',
 706                 '.french.at',
 707                 '.graduatejobs.at',
 708                 '.greenparty.at',
 709                 '.grunge.at',
 710                 '.hacked.at',
 711                 '.hang.at',
 712                 '.hangup.at',
 713                 '.has.it',
 714                 '.hide.at',
 715                 '.hindu.at',
 716                 '.htmlpage.at',
 717                 '.hungarian.at',
 718                 '.icelandic.at',
 719                 '.independents.at',
 720                 '.invisible.at',
 721                 '.is-chillin.it',
 722                 '.is-groovin.it',
 723                 '.japanese.at',
 724                 '.jive.at',
 725                 '.kickass.at',
 726                 '.kickme.to',
 727                 '.kindergarden.at',
 728                 '.knows.it',
 729                 '.kurd.at',
 730                 '.labour.at',
 731                 '.leech.at',
 732                 '.liberals.at',
 733                 '.linuxserver.at',
 734                 '.liqour.at',
 735                 '.lovez.it',
 736                 '.makes.it',
 737                 '.maxed.at',
 738                 '.means.it',
 739                 '.meltdown.at',
 740                 '.methodist.at',
 741                 '.microcomputers.at',
 742                 '.mingle.at',
 743                 '.mirror.at',
 744                 '.moan.at',
 745                 '.mormons.at',
 746                 '.musicmix.at',
 747                 '.nationalists.at',
 748                 '.needz.it',
 749                 '.nerds.at',
 750                 '.neuromancer.at',
 751                 '.newbie.at',
 752                 '.nicepage.at',
 753                 '.ninja.at',
 754                 '.norwegian.at',
 755                 '.ntserver.at',
 756                 '.owns.it',
 757                 '.paint.at',
 758                 '.palestinian.at',
 759                 '.phoneme.at',
 760                 '.phreaking.at',
 761                 '.playz.it',
 762                 '.polish.at',
 763                 '.popmusic.at',
 764                 '.portuguese.at',
 765                 '.powermac.at',
 766                 '.processor.at',
 767                 '.prospects.at',
 768                 '.protestant.at',
 769                 '.rapmusic.at',
 770                 '.raveparty.at',
 771                 '.reachme.at',
 772                 '.reads.it',
 773                 '.reboot.at',
 774                 '.relaxed.at',
 775                 '.republicans.at',
 776                 '.researcher.at',
 777                 '.reset.at',
 778                 '.resolve.at',
 779                 '.retrocomputers.at',
 780                 '.rockparty.at',
 781                 '.rocks.it',
 782                 '.rollover.at',
 783                 '.rough.at',
 784                 '.rules.it',
 785                 '.rumble.at',
 786                 '.russian.at',
 787                 '.says.it',
 788                 '.scared.at',
 789                 '.seikh.at',
 790                 '.serbian.at',
 791                 '.short.as',
 792                 '.shows.it',
 793                 '.silence.at',
 794                 '.simpler.at',
 795                 '.sinclair.at',
 796                 '.singz.it',
 797                 '.slowdown.at',
 798                 '.socialists.at',
 799                 '.spanish.at',
 800                 '.split.at',
 801                 '.stand.at',
 802                 '.stoned.at',
 803                 '.stumble.at',
 804                 '.supercomputer.at',
 805                 '.surfs.it',
 806                 '.swedish.at',
 807                 '.swims.it',
 808                 '.synagogue.at',
 809                 '.syntax.at',
 810                 '.syntaxerror.at',
 811                 '.techie.at',
 812                 '.temple.at',
 813                 '.thinkbig.at',
 814                 '.thirsty.at',
 815                 '.throw.at',
 816                 '.toplist.at',
 817                 '.trekkie.at',
 818                 '.trouble.at',
 819                 '.turkish.at',
 820                 '.unexplained.at',
 821                 '.unixserver.at',
 822                 '.vegetarian.at',
 823                 '.venture.at',
 824                 '.verycool.at',
 825                 '.vic-20.at',
 826                 '.viewing.at',
 827                 '.vintagecomputers.at',
 828                 '.virii.at',
 829                 '.vodka.at',
 830                 '.wannabe.at',
 831                 '.webpagedesign.at',
 832                 '.wheels.at',
 833                 '.whisper.at',
 834                 '.whiz.at',
 835                 '.wonderful.at',
 836                 '.zor.org',
 837                 '.zx80.at',
 838                 '.zx81.at',
 839                 '.zxspectrum.at',
 840         ),
 841         'kisaweb.com',
 842         'krotki.pl',
 843         'kuerzer.de',
 844         '*.kupisz.pl',
 845         'kuso.cc',
 846         '*.l8t.com',
 847         'lame.name',
 848         'lediga.st',
 849         'liencourt.com',
 850         'liteurl.com',
 851         'linkachi.com',
 852         'linkezy.com',
 853         'linkfrog.net',
 854         'linkook.com',
 855         'linkzip.net',
 856         'lispurl.com',
 857         'lnk.in',
 858         'makeashorterlink.com',
 859         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 860                 '*.3gp.fr',
 861                 '*.gtx.fr',
 862                 '*.ici.st',
 863                 '*.max.st',
 864                 '*.nn.cx',              // ns *.sivit.org
 865                 '*.site.cx',    // ns *.sivit.org
 866                 '*.user.fr',
 867                 '*.zxr.fr',
 868         ),
 869         'mcturl.com',
 870         'memurl.com',
 871         'Metamark.net' => array('xrl.us'),
 872         'midgeturl.com',
 873         'Minilink.org' => array('lnk.nu'),
 874         'miniurl.org',
 875         'miniurl.pl',
 876         'mixi.bz',
 877         'mo-v.jp',
 878         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 879                 '.com.md',
 880                 '.co.md',
 881                 '.org.md',
 882                 '.info.md',
 883                 '.host.md',
 884         ),
 885         'monster-submit.com',
 886         'mooo.jp',
 887         'murl.net',
 888         'myactivesurf.net',
 889         'mytinylink.com',
 890         'myurl.in',
 891         'myurl.com.tw',
 892         'nanoref.com',
 893         'Ne1.net' => array(
 894                 '*.ne1.net',
 895                 '*.r8.org',
 896         ),
 897         'Nashville Linux Users Group' => array('nlug.org'),
 898         'not2long.net',
 899         '*.notlong.com',
 900         '*.nuv.pl',
 901         'ofzo.be',
 902         '*.ontheinter.net',
 903         'ourl.org',
 904         'ov2.net',                              // frame
 905         '*.ozonez.com',
 906         'pagebang.com',
 907         'palurl.com',
 908         '*.paulding.net',
 909         'phpfaber.org',
 910         'pnope.com',
 911         'prettylink.com',
 912         'PROXID.net' => array(  // also xRelay.net
 913                 '*.asso.ws',
 914                 '*.corp.st',
 915                 '*.euro.tm',
 916                 '*.perso.tc',
 917                 '*.site.tc',
 918                 '*.societe.st',
 919         ),
 920         'qrl.jp',
 921         'qurl.net',
 922         'qwer.org',
 923         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 924         'radiobase.net',
 925         'Rakuten.co.jp' => array(
 926                 'pt.afl.rakuten.co.jp', ///c/
 927         ),
 928         'RedirectFree.com' => array(
 929                 '*.red.tc',
 930                 '*.redirectfree.com',
 931                 '*.sky.tc',
 932                 '*.the.vg',
 933         ),
 934         'redirme.com',
 935         'redirectme.to',
 936         'relic.net',
 937         'rezma.info',
 938         'rio.st',
 939         'rlink.org',
 940         '*.rmcinfo.fr',
 941         'rubyurl.com',
 942         '*.runboard.com',
 943         'runurl.com',
 944         's-url.net',
 945         's1u.net',
 946         'SG5.co.uk' => array(
 947                 '*.sg5.co.uk',
 948                 '*.sg5.info',
 949         ),
 950         'Shim.net' => array(
 951                 '*.0kn.com',
 952                 '*.2cd.net',
 953                 '*.freebiefinders.net',
 954                 '*.freegaming.org',
 955                 '*.op7.net',
 956                 '*.shim.net',
 957                 '*.v9z.com',
 958         ),
 959         'big5.shippingchina.com',
 960         'shorl.com',
 961         'shortenurl.com',
 962         'shorterlink.com',
 963         'shortlinks.co.uk',
 964         'shorttext.com',
 965         'shorturl-accessanalyzer.com',
 966         'Shortify.com' => array(
 967                 '74678439.com',
 968                 'shortify.com',
 969         ),
 970         'shortlink.co.uk',
 971         'ShortURL.com' => array(
 972                 '*.1sta.com',
 973                 '*.24ex.com',
 974                 '*.2fear.com',
 975                 '*.2fortune.com',
 976                 '*.2freedom.com',
 977                 '*.2hell.com',
 978                 '*.2savvy.com',
 979                 '*.2truth.com',
 980                 '*.2tunes.com',
 981                 '*.2ya.com',
 982                 '*.alturl.com',
 983                 '*.antiblog.com',
 984                 '*.bigbig.com',
 985                 '*.dealtap.com',
 986                 '*.ebored.com',
 987                 '*.echoz.com',
 988                 '*.filetap.com',
 989                 '*.funurl.com',
 990                 '*.headplug.com',
 991                 '*.hereweb.com',
 992                 '*.hitart.com',
 993                 '*.mirrorz.com',
 994                 '*.shorturl.com',
 995                 '*.spyw.com',
 996                 '*.vze.com',
 997         ),
 998         'shrinkalink.com',
 999         'shrinkthatlink.com',
1000         'shrinkurl.us',
1001         'shrt.org',
1002         'shrunkurl.com',
1003         'shurl.org',
1004         'shurl.net',
1005         'sid.to',
1006         'simurl.com',
1007         'sitefwd.com',
1008         'Sitelutions.com' => array(
1009                 '*.assexy.as',
1010                 '*.athersite.com',
1011                 '*.athissite.com',
1012                 '*.bestdeals.at',
1013                 '*.byinter.net',
1014                 '*.findhere.org',
1015                 '*.fw.nu',
1016                 '*.isgre.at',
1017                 '*.isthebe.st',
1018                 '*.kwik.to',
1019                 '*.lookin.at',
1020                 '*.lowestprices.at',
1021                 '*.onthenet.as',
1022                 '*.ontheweb.nu',
1023                 '*.pass.as',
1024                 '*.passingg.as',
1025                 '*.redirect.hm',
1026                 '*.rr.nu',
1027                 '*.ugly.as',
1028         ),
1029         '*.skracaj.pl',
1030         'skiltechurl.com',
1031         'skocz.pl',
1032         'slimurl.jp',
1033         'slink.in',
1034         'smallurl.eu',
1035         'smurl.name',
1036         'snipurl.com',
1037         'sp-nov.net',
1038         'splashblog.com',
1039         'spod.cx',
1040         '*.spydar.com',
1041         'Subdomain.gr' => array(
1042                 '*.p2p.gr',
1043                 '*.subdomain.gr',
1044         ),
1045         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1046         'surl.se',
1047         'surl.ws',
1048         'symy.jp',
1049         'tdurl.com',
1050         'tighturl.com',
1051         'tiniuri.com',
1052         'tiny.cc',
1053         'tiny.pl',
1054         'tiny2go.com',
1055         'tinylink.eu',
1056         'tinylinkworld.com',
1057         'tinypic.com',
1058         'tinyr.us',
1059         'TinyURL.com' => array(
1060                 'tinyurl.com',
1061                 'preview.tinyurl.com',
1062                 'tinyurl.co.uk',
1063         ),
1064         'titlien.com',
1065         '*.tlg.pl',
1066         'tlurl.com',
1067         'link.toolbot.com',
1068         'tnij.org',
1069         'Tokelau ccTLD' => array('.tk'),
1070         'toila.net',
1071         '*.toolbot.com',
1072         '*.torontonian.com',
1073         'trimurl.com',
1074         'ttu.cc',
1075         'turl.jp',
1076         '*.tz4.com',
1077         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1078                 '*.1.to',
1079                 '*.4.to',
1080                 '*.5.to',
1081                 '*.82.to',
1082                 '*.s.to',
1083                 '*.u.to',
1084                 '*.ce.to',
1085                 '*.cz.to',
1086                 '*.if.to',
1087                 '*.it.to',
1088                 '*.kp.to',
1089                 '*.ne.to',
1090                 '*.ok.to',
1091                 '*.pc.to',
1092                 '*.tv.to',
1093                 '*.dd.to',
1094                 '*.ee.to',
1095                 '*.hh.to',
1096                 '*.kk.to',
1097                 '*.mm.to',
1098                 '*.qq.to',
1099                 '*.xx.to',
1100                 '*.zz.to',
1101                 '*.ivy.to',
1102                 '*.joa.to',
1103                 '*.ever.to',
1104                 '*.mini.to',
1105         ),
1106         'uchinoko.in',
1107         'Ulimit.com' => array(
1108                 '*.be.tf',
1109                 '*.best.cd',
1110                 '*.bsd-fan.com',
1111                 '*.c0m.st',
1112                 '*.ca.tc',
1113                 '*.clan.st',
1114                 '*.com02.com',
1115                 '*.en.st',
1116                 '*.euro.st',
1117                 '*.fr.fm',
1118                 '*.fr.st',
1119                 '*.fr.vu',
1120                 '*.gr.st',
1121                 '*.ht.st',
1122                 '*.int.ms',
1123                 '*.it.st',
1124                 '*.java-fan.com',
1125                 '*.linux-fan.com',
1126                 '*.mac-fan.com',
1127                 '*.mp3.ms',
1128                 '*.qc.tc',
1129                 '*.sp.st',
1130                 '*.suisse.st',
1131                 '*.t2u.com',
1132                 '*.unixlover.com',
1133                 '*.zik.mu',
1134         ),
1135         '*.uni.cc',
1136         'UNONIC.com' => array(
1137                 '*.at.tf',      // AlpenNIC
1138                 '*.bg.tf',
1139                 '*.ca.tf',
1140                 '*.ch.tf',      // AlpenNIC
1141                 '*.cz.tf',
1142                 '*.de.tf',      // AlpenNIC
1143                 '*.edu.tf',
1144                 '*.eu.tf',
1145                 '*.int.tf',
1146                 '*.net.tf',
1147                 '*.pl.tf',
1148                 '*.ru.tf',
1149                 '*.sg.tf',
1150                 '*.us.tf',
1151         ),
1152         'Up.pl' => array(
1153                 '.69.pl',                       // by nsk101869
1154                 '.crack.pl',            // by nsk101869
1155                 '.film.pl',                     // by sibr19002
1156                 '.h2o.pl',                      // by nsk101869
1157                 '.hostessy.pl',         // by nsk101869
1158                 '.komis.pl',            // by nsk101869
1159                 '.laski.pl',            // by nsk101869
1160                 '.modelki.pl',          // by nsk101869
1161                 '.muzyka.pl',           // by sibr19002
1162                 '.nastolatki.pl',       // by nsk101869
1163                 '.obuwie.pl',           // by nsk101869
1164                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1165                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1166                 '.sexchat.pl',          // by nsk101869
1167                 '.sexlive.pl',          // by nsk101869
1168                 '.tv.pl',                       // by nsk101869
1169                 '.up.pl',                       // by nsk101869
1170                 '.video.pl',            // by nsk101869
1171                 '.xp.pl',                       // nsk101869
1172         ),
1173         '*.uploadr.com',
1174         'url.ie',
1175         'url4.net',
1176         'url-c.com',
1177         'urlbee.com',
1178         'urlbounce.com',
1179         'urlcut.com',
1180         'urlcutter.com',
1181         'urlic.com',
1182         'urlin.it',
1183         'urlkick.com',
1184         'URLLogs.com' => array(
1185                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1186                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1187         ),
1188         '*.urlproxy.com',
1189         'urlser.com',
1190         'urlsnip.com',
1191         'urlzip.de',
1192         'urlx.org',
1193         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1194         'utun.jp',
1195         'uxxy.com',
1196         '*.v27.net',
1197         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1198                 '*.all.at',
1199                 '*.back.to',
1200                 '*.beam.at',
1201                 '*.been.at',
1202                 '*.bite.to',
1203                 '*.board.to',
1204                 '*.bounce.to',
1205                 '*.bowl.to',
1206                 '*.break.at',
1207                 '*.browse.to',
1208                 '*.change.to',
1209                 '*.chip.ms',
1210                 '*.connect.to',
1211                 '*.crash.to',
1212                 '*.cut.by',
1213                 '*.direct.at',
1214                 '*.dive.to',
1215                 '*.drink.to',
1216                 '*.drive.to',
1217                 '*.drop.to',
1218                 '*.easy.to',
1219                 '*.everything.at',
1220                 '*.fade.to',
1221                 '*.fanclub.ms',
1222                 '*.firstpage.de',
1223                 '*.fly.to',
1224                 '*.flying.to',
1225                 '*.fortunecity.co.uk',
1226                 '*.fortunecity.com',
1227                 '*.forward.to',
1228                 '*.fullspeed.to',
1229                 '*.fun.ms',
1230                 '*.gameday.de',
1231                 '*.germany.ms',
1232                 '*.get.to',
1233                 '*.getit.at',
1234                 '*.hard-ware.de',
1235                 '*.hello.to',
1236                 '*.hey.to',
1237                 '*.hop.to',
1238                 '*.how.to',
1239                 '*.hp.ms',
1240                 '*.jump.to',
1241                 '*.kiss.to',
1242                 '*.listen.to',
1243                 '*.mediasite.de',
1244                 '*.megapage.de',
1245                 '*.messages.to',
1246                 '*.mine.at',
1247                 '*.more.at',
1248                 '*.more.by',
1249                 '*.move.to',
1250                 '*.musicpage.de',
1251                 '*.mypage.org',
1252                 '*.mysite.de',
1253                 '*.nav.to',
1254                 '*.notrix.at',
1255                 '*.notrix.ch',
1256                 '*.notrix.de',
1257                 '*.notrix.net',
1258                 '*.on.to',
1259                 '*.page.to',
1260                 '*.pagina.de',
1261                 '*.played.by',
1262                 '*.playsite.de',
1263                 '*.privat.ms',
1264                 '*.quickly.to',
1265                 '*.redirect.to',
1266                 '*.rulestheweb.com',
1267                 '*.run.to',
1268                 '*.scroll.to',
1269                 '*.seite.ms',
1270                 '*.shortcut.to',
1271                 '*.skip.to snap.to',
1272                 '*.soft-ware.de',
1273                 '*.start.at',
1274                 '*.stick.by',
1275                 '*.surf.to',
1276                 '*.switch.to',
1277                 '*.talk.to',
1278                 '*.tip.nu',
1279                 '*.top.ms',
1280                 '*.transfer.to',
1281                 '*.travel.to',
1282                 '*.turn.to',
1283                 '*.vacations.to',
1284                 '*.videopage.de',
1285                 '*.virtualpage.de',
1286                 '*.w3.to',
1287                 '*.walk.to',
1288                 '*.warp9.to',
1289                 '*.window.to',
1290                 '*.yours.at',
1291                 '*.zap.to',
1292                 '*.zip.to',
1293         ),
1294         'VDirect.com' => array(
1295                 '*.emailme.net',
1296                 '*.getto.net',
1297                 '*.inetgames.com',
1298                 '*.netbounce.com',
1299                 '*.netbounce.net',
1300                 '*.oneaddress.net',
1301                 '*.snapto.net',
1302                 '*.vdirect.com',
1303                 '*.vdirect.net',
1304                 '*.webrally.net',
1305         ),
1306         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1307         'vgo2.com',
1308         'Voila.fr' => array('r.voila.fr'),      // Fix it
1309         'w3t.org',
1310         'wapurl.co.uk',
1311         'Wb.st' => array(
1312                 '*.team.st',
1313                 '*.wb.st',
1314         ),
1315         'wbkt.net',
1316         'WebAlias.com' => array(
1317                 '*.andmuchmore.com',
1318                 '*.browser.to',
1319                 '*.escape.to',
1320                 '*.fornovices.com',
1321                 '*.fun.to',
1322                 '*.got.to',
1323                 '*.hottestpix.com',
1324                 '*.imegastores.com',
1325                 '*.latest-info.com',
1326                 '*.learn.to',
1327                 '*.moviefever.com',
1328                 '*.mp3-archives.com',
1329                 '*.myprivateidaho.com',
1330                 '*.radpages.com',
1331                 '*.remember.to',
1332                 '*.resourcez.com',
1333                 '*.return.to',
1334                 '*.sail.to',
1335                 '*.sports-reports.com',
1336                 '*.stop.to',
1337                 '*.thrill.to',
1338                 '*.tophonors.com',
1339                 '*.uncutuncensored.com',
1340                 '*.up.to',
1341                 '*.veryweird.com',
1342                 '*.way.to',
1343                 '*.web-freebies.com',
1344                 '.webalias.com',
1345                 '*.webdare.com',
1346                 '*.xxx-posed.com',
1347         ),
1348         'webmasterwise.com',
1349         'witherst at hotmail.com' => array(     // by Tim Withers
1350                 '*.associates-program.com',
1351                 '*.casinogopher.com',
1352                 '*.ezpagez.com',
1353                 '*.vgfaqs.com',
1354         ),
1355         'wittylink.com',
1356         'wiz.sc',                       // tiny.cc related
1357         'X50.us' => array(
1358                 '*.i50.de',
1359                 '*.x50.us',
1360         ),
1361         'big5.xinhuanet.com',   ///gate/big5/
1362         'xhref.com',
1363         'Xn6.net' => array(
1364                 '*.9ax.net',
1365                 '*.xn6.net',
1366         ),
1367         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1368         '.y11.net',
1369         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1370                 '*.yesns.com',
1371                 '*.srv4u.net',
1372                 //blogne.com
1373         ),
1374         'yatuc.com',
1375         'yep.it',
1376         'yumlum.com',
1377         'yurel.com',
1378         'Z.la' => array(
1379                 'z.la',
1380                 't.z.la',
1381         ),
1382         'zaable.com',
1383         'zapurl.com',
1384         'zarr.co.uk',
1385         'zerourl.com',
1386         'ZeroWeb.org' => array(
1387                 '*.80t.com',
1388                 '*.firez.org',
1389                 '*.fizz.nu',
1390                 '*.ingame.org',
1391                 '*.irio.net',
1392                 '*.v33.org',
1393                 '*.zeroweb.org',
1394         ),
1395         'zhukcity.ru',
1396         'zippedurl.com',
1397         'zr5.us',
1398         '*.zs.pl',
1399         '*.zu5.net',
1400         'zuso.tw',
1401         '*.zwap.to',
1402 );
1403
1404 // --------------------------------------------------
1405
1406 $blocklist['A-2'] = array(
1407
1408         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1409         //
1410         //'*.dyndns.*', // Wildcard for dyndns
1411         //
1412         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1413         'ddns.ru' => array('*.bpa.nu'),
1414         'Dhs.org' => array(
1415                 '*.2y.net',
1416                 '*.dhs.org',
1417         ),
1418         '*.dnip.net',
1419         '*.dyndns.co.za',
1420         '*.dyndns.dk',
1421         '*.dyndns.nemox.net',
1422         'DyDNS.com' => array(
1423                 '*.ath.cx',
1424                 '*.dnsalias.org',
1425                 '*.dyndns.org',
1426                 '*.homeip.net',
1427                 '*.homelinux.net',
1428                 '*.mine.nu',
1429                 '*.shacknet.nu',
1430         ),
1431         '*.dtdns.net',                  // by jscott at sceiron.com
1432         '*.dynu.com',
1433         '*.dynup.net',
1434         '*.fdns.net',
1435         'J-Speed.net' => array(
1436                 '*.bne.jp',
1437                 '*.ii2.cc',
1438                 '*.jdyn.cc',
1439                 '*.jspeed.jp',
1440         ),
1441         '*.mydyn.de',
1442         '*.nerdcamp.net',
1443         'No-IP.com' => array(
1444                         '*.bounceme.net',
1445                         '*.hopto.org',
1446                         '*.myftp.biz',
1447                         '*.myftp.org',
1448                         '*.myvnc.com',
1449                         '*.no-ip.biz',
1450                         '*.no-ip.info',
1451                         '*.no-ip.org',
1452                         '*.redirectme.net',
1453                         '*.servebeer.com',
1454                         '*.serveblog.net',
1455                         '*.servecounterstrike.com',
1456                         '*.serveftp.com',
1457                         '*.servegame.com',
1458                         '*.servehalflife.com',
1459                         '*.servehttp.com',
1460                         '*.servemp3.com',
1461                         '*.servepics.com',
1462                         '*.servequake.com',
1463                         '*.sytes.net',
1464                         '*.zapto.org',
1465         ),
1466         '*.opendns.be',
1467         'Yi.org' => array(      // by dns at whyi.org
1468                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1469
1470                 // 72.55.129.46(redirect.yi.org)
1471                 '*.whyi.org',
1472                 '*.weedns.com',
1473         ),
1474         '*.zenno.info',
1475         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1476                         // and all non-recorded domains redirect to 'agoga.com' now
1477                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1478                         // http://agoga.com/aboutus.html
1479 );
1480
1481 // --------------------------------------------------
1482
1483 // B: Sample setting of:
1484 // Jacked (taken advantage of) and cleaning-less sites
1485 //
1486 // Please notify us about this list with reason:
1487 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1488
1489 $blocklist['B-1'] = array(
1490
1491         // B-1: Web spaces
1492         //
1493         //   Messages from forerunners:
1494         //     activefreehost.com
1495         //       "We regret to inform you that ActiveFreeHost
1496         //        free hosting service has is now closed (as of
1497         //        September 18). We have been online for over
1498         //        two and half years, but have recently decided
1499         //        to take time for software improvement to fight
1500         //        with server abuse, Spam advertisement and
1501         //        fraud."
1502         //
1503         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1504         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1505         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1506         '0Catch.com related' => array(
1507                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1508
1509                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1510                 '*.100freemb.com',              // by Danny Ashworth
1511                 '*.exactpages.com',
1512                 '*.fcpages.com',
1513                 '*.wtcsites.com',
1514
1515                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1516                 '*.741.com',
1517                 '*.freecities.com',
1518                 '*.freesite.org',
1519                 '*.freewebpages.org',
1520                 '*.freewebsitehosting.com',
1521                 '*.jvl.com',
1522
1523                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1524                 '*.freespaceusa.com',
1525                 '*.usafreespace.com',
1526
1527                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1528                 '*.dex1.com',
1529                 '*.questh.com',
1530
1531                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1532                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1533                 '*.012webpages.com',    // by support at 0catch.com
1534                 '*.150m.com',
1535                 '*.1sweethost.com',             // by whois at bluehost.com
1536                 '*.250m.com',                   // by jason at fahlman.net
1537                 '*.9cy.com',                    // by paulw0t at gmail.com
1538                 '*.angelcities.com',    // by cliff at eccentrix.com
1539                 '*.arcadepages.com',    // by admin at site-see.com
1540                 '*.e-host.ws',                  // by dns at jomax.net
1541                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1542                 '*.fw.bz',                              // by ben at kuehl.as
1543                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1544                 '*.g0g.net',                    // by domains at seem.co.uk
1545                 '*.galaxy99.net',               // by admin at bagchi.org
1546                 '*.greatnow.com',               // by peo at peakspace.com
1547                 '*.hautlynx.com',               // by hlewis28 at juno.com
1548                 '*.ibnsites.com',               // by cmrojas at mail.com
1549                 '*.just-allen.com',             // by extremehype at msn.com
1550                 '*.kogaryu.com',                // by angelguerra at msn.com
1551                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1552                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1553                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1554                 '*.s-enterprize.com',
1555                 '*.servetown.com',              // by jonahbliss at earthlink.net
1556                 '*.stinkdot.org',               // by bluedot at ziplip.com
1557                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1558                 '*.zomi.net',                   // by sianpu at gmail.com
1559         ),
1560         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1561         '100 Best Inc' => array(
1562                 // by 100 Best Inc (info at 100best.com)
1563
1564                 // 66.235.204.7(h204-007.bluefishhosting.com)
1565                 '*.2-hi.com',
1566                 '*.20fr.com',
1567                 '*.20ii.com',
1568                 '*.20is.com',
1569                 '*.20it.com',
1570                 '*.20m.com',    // by jlee at 100bestinc.com
1571                 '*.20to.com',
1572                 '*.2u-2.com',
1573                 '*.3-st.com',
1574                 '*.fws1.com',
1575                 '*.fw-2.com',
1576                 '*.inc5.com',
1577                 '*.on-4.com',
1578                 '*.st-3.com',
1579                 '*.st20.com',
1580                 '*.up-a.com',
1581
1582                 // 216.40.33.252(www-pd.mdnsservice.com)
1583                 '*.0-st.com',
1584                 '*.20me.com',
1585         ),
1586         '*.100foros.com',
1587         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1588         '20six Weblog Services' => array(
1589                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1590                 '.20six.co.uk',
1591                 '.20six.fr',
1592                 'myblog.de',
1593                 'myblog.es',
1594         ),
1595         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1596         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1597         '2IP.com' => array(
1598                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1599                 '*.2ip.jp',
1600                 '*.474.jp',
1601                 '*.consensus.jp',
1602                 '*.desyo.jp',
1603                 '*.dif.jp',
1604                 '*.pastels.jp',
1605                 '*.powerblogger.jp',
1606                 '*.vippers.jp',
1607                 '*.webpages.jp',
1608
1609                 // 205.209.97.56(non-existent)
1610                 '*.biografi.biz',
1611                 '*.biografi.info',
1612                 '*.biografi.org',
1613                 '*.biografi.us',
1614                 '*.datadiri.biz',
1615                 '*.datadiri.cc',
1616                 '*.datadiri.com',
1617                 '*.datadiri.info',
1618                 '*.datadiri.net',
1619                 '*.datadiri.org',
1620                 '*.datadiri.tv',
1621                 '*.datadiri.us',
1622                 '*.indo.bz',
1623                 '*.indo.cc',
1624                 '*.profil.bz',
1625                 '*.profil.cc',
1626                 '*.profil.cn',
1627                 '*.profil.in',
1628                 '*.profil.tv',
1629
1630                 // 205.209.101.47(non-existent)
1631                 '*.about.tc',
1632                 '*.about.vg',
1633                 '*.aboutus.gs',
1634                 '*.aboutus.ms',
1635                 '*.aboutus.tc',
1636                 '*.aboutus.vg',
1637                 '*.band.io',
1638                 '*.beijing.am',
1639                 '*.blogs.io',
1640                 '*.boke.am',
1641                 '*.clan.io',
1642                 '*.ecv.gs',
1643                 '*.ecv.ms',
1644                 '*.ecv.vg',
1645                 '*.freekong.cn',
1646                 '*.go2net.ws',
1647                 '*.hello.cn.com',
1648                 '*.hello.io',
1649                 '*.hits.io',
1650                 '*.hostingweb.us',
1651                 '*.hub.io',
1652                 '*.ide.am',
1653                 '*.inc.io',
1654                 '*.incn.in',
1655                 '*.indo.gs',
1656                 '*.indo.ms',
1657                 '*.indo.tc',
1658                 '*.indo.vg',
1659                 '*.infinitehosting.net',
1660                 '*.infinites.net',
1661                 '*.jushige.cn',
1662                 '*.jushige.com',
1663                 '*.kongjian.in',
1664                 '*.lan.io',
1665                 '*.llc.nu',
1666                 '*.maimai.in',
1667                 '*.max.io',
1668                 '*.musician.io',
1669                 '*.mycv.bz',
1670                 '*.mycv.nu',
1671                 '*.mycv.tv',
1672                 '*.myweb.io',
1673                 '*.ourprofile.biz',
1674                 '*.ourprofile.info',
1675                 '*.ourprofile.net',
1676                 '*.ourprofile.org',
1677                 '*.ourprofile.us',
1678                 '*.profil.gs',
1679                 '*.profil.ms',
1680                 '*.profil.tc',
1681                 '*.qiye.in',
1682                 '*.site.io',
1683                 '*.wan.io',
1684                 '*.web-cam.ws',
1685                 '*.webs.io',
1686                 '*.xixu.cc',
1687                 '*.zaici.am',
1688                 '*.zip.io',
1689                 '*.zuzhi.in',
1690
1691                 '*.profil.vg',          // 205.209.101.67(non-existent)
1692                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1693                 //'*.about.gs',         // No record
1694                 //'*.eprofile.us',      // non-existent
1695         ),
1696         '2Page.de' => array(
1697                 '.dreipage.de',
1698                 '.2page.de',
1699         ),
1700         '*.3-hosting.net',
1701         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1702         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1703         '*.8000web.com',        // 75.126.189.45
1704         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1705         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1706         'Ai.NET' => array(
1707                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1708                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1709         ),
1710         '*.aimoo.com',
1711         '*.alkablog.com',
1712         '*.alluwant.de',
1713         '.amkbb.com',
1714         'answerbag.com',        // 8.5.0.128
1715         'anyboard.net',
1716         'AOL.com' =>    // http://about.aol.com/international_services
1717                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1718                 '(?:aol|americaonline)\.' .
1719                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1720                 // Rough but works
1721         'Apple.com' => array('idisk.mac.com'),
1722         '*.askfaq.org',
1723         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1724         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1725         '*.asphost4free.com',
1726         'basenow.com',
1727         'BatCave.net' => array(
1728                 '.batcave.net',                 // 64.22.112.226
1729                 '.freehostpro.com',             // 64.22.112.226
1730         ),
1731         '*.bb-fr.com',
1732         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1733         '*.beeplog.com',
1734         'beepworld.it',
1735         'bestfreeforums.com',
1736         'bestvotexxx.com',
1737         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1738         'blinklist.com',
1739         'Blog.com' => array(
1740                 // by admin.domains at co.blog.com
1741                 '*.blog.com',
1742                 '*.blogandorra.com',
1743                 '*.blogangola.com',
1744                 '*.blogaruba.com',
1745         ),
1746         '*.blog.com.es',
1747         '*.blog.hr',
1748         '*.blog4ever.com',
1749         '*.blog-fx.com',
1750         '*.blogbeee.com',
1751         'blogas.lt',
1752         'blogbud.com',
1753         '*.blogburkinafaso.com',
1754         '*.blogcu.com',                 // by info at nokta.com
1755         'blogfreely.com',
1756         '*.blogdrive.com',
1757         '*.blogg.de',
1758         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1759         'bloggercrab.com',
1760         'bloggers.nl',
1761         '*.bloggingmylife.com',
1762         '*.bloggles.info',
1763         '*.blogharbor.com',
1764         '*.bloguj.eu',
1765         'bloguitos.com',
1766         'blogosfer.com',
1767         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1768         '*.blogslive.net',
1769         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1770         '*.blogstream.com',
1771         'blogyaz.com',
1772         'bloodee.com',
1773         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1774         'board-4you.de',
1775         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1776         '*.boardhost.com',
1777         'Bravenet.com' => array(
1778                 '*.bravenet.com',
1779                 '*.bravehost.com',
1780         ),
1781         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1782         'C2k.jp' => array(
1783                 // by Makoto Okuse (webmaster at 2style.net)
1784                 '.081.in',
1785                 '.2style.in',
1786                 '.bian.in',
1787                 '.curl.in',
1788                 '.ennui.in',
1789                 '.jinx.in',
1790                 '.loose.in',
1791                 '.mist.in',
1792                 '.muu.in',
1793                 '.naive.in',
1794                 '.panic.in',
1795                 '.slum.in',
1796
1797                 // by 2style, ns *.click2k.net, *.2style.net
1798                 '.2st.jp',
1799                 '.betty.jp',
1800                 '.cabin.jp',
1801                 '.cult.jp',
1802                 '.mippi.jp',
1803                 '.purety.jp',
1804                 '.rapa.jp',
1805                 '.side-b.jp',
1806                 '.web-box.jp',
1807                 '.yea.jp',
1808
1809                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1810                 '.2style.net',
1811                 '.click2k.net',
1812                 '.houka5.com',
1813
1814                 // by click2k, ns *.click2k.net, *.2style.net
1815                 '.psyco.jp',
1816                 '.sweety.jp',
1817
1818                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1819                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1820         ),
1821         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1822         '*.chueca.com',
1823         'city-forum.com',
1824         '*.craigslist.org',
1825         'concepts-mall.com',
1826         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1827         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1828         'counterhit.de',
1829         '*.createforum.net',
1830         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1831         '*.createmybb.com',
1832         'CwCity.de' => array(
1833                 '.cwcity.de',
1834                 '.cwsurf.de',
1835         ),
1836         'dakrats.net',
1837         '*.dcswtech.com',
1838         'del.icio.us',
1839         '*.devil.it',
1840         '*.diaryland.com',
1841         'digg.com',
1842         'digstock.com',
1843         'domains at galaxywave.net' => array(
1844                 'blogstation.net',
1845                 '.phpbb-host.com',
1846         ),
1847         'dotbb.be',
1848         '*.dox.hu',                             // dns at 1b.hu
1849         '*.eadf.com',
1850         '*.eblog.com.au',
1851         '*.ekiwi.de',
1852         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1853         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1854         '*.ebloggy.com',
1855         'enunblog.com',
1856         '*.epinoy.com',
1857         '*.ez-sites.ws',
1858         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1859         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1860         '*.fathippohosting.com',        // 208.101.3.192
1861         'FC2.com' => array(
1862                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1863                         // Many traps available:
1864                         //      bqdr.blog98.fc2.com,       iframe
1865                         //      csfir.blog87.fc2.com,      iframe
1866                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1867                         //      sippou2006.blog60.fc2.com, iframe
1868                         // NOTE: 'blog.fc2.com' is not included
1869                 '*.h.fc2.com',  // Adult
1870         ),
1871         '*.fizwig.com',
1872         'forum.ezedia.net',
1873         '*.extra.hu',                   // angelo at jasmin.hu
1874         '*.fanforum.cc',
1875         'fingerprintmedia.com',
1876         '*.filelan.com',
1877         '*.fora.pl',
1878         '*.forka.eu',
1879         '*.foren-city.de',
1880         'foren-gratis.de',
1881         '*.foros.tv',
1882         '*.forospace.com',
1883         'foroswebgratis.com',
1884         '*.forum-on.de',
1885         '*.forum24.se',
1886         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1887         '.forum66.com',
1888         'Forumotion.com' => array(
1889                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1890                 '*.forumactif.com',     // 91.121.41.79
1891                 '*.editboard.com',      // 75.126.156.15
1892                 '*.sosblog.com',        // 74.86.25.140
1893
1894                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1895                 '*.0forum.biz',
1896                 '*.1forum.biz',
1897                 '*.1fr1.net',
1898                 '*.1talk.net',
1899                 '*.2forum.biz',
1900                 '*.3forum.biz',
1901                 '*.4forum.biz',
1902                 '*.4rumer.com',
1903                 '*.4rumer.net',
1904                 '*.4umer.com',
1905                 '*.4umer.net',
1906                 '*.5forum.biz',
1907                 '*.5forum.info',
1908                 '*.5forum.net',
1909                 '*.6forum.biz',
1910                 '*.6forum.info',
1911                 '*.77forum.com',
1912                 '*.7forum.biz',
1913                 '*.7forum.info',
1914                 '*.7forum.net',
1915                 '*.8forum.biz',
1916                 '*.8forum.info',
1917                 '*.8forum.net',
1918                 '*.9forum.biz',
1919                 '*.9forum.info',
1920                 '*.activebb.net',
1921                 '*.aforumfree.com',
1922                 '*.all-forum.net',
1923                 '*.all-up.com',
1924                 '*.alldiscussion.net',
1925                 '*.allgoo.net',
1926                 '*.allgoo.us',
1927                 '*.american-forum.net',
1928                 '*.americantalk.net',
1929                 '*.annuaire-forums.com',
1930                 '*.asiafreeforum.com',
1931                 '*.asianfreeforum.com',
1932                 '*.azureforum.com',
1933                 '*.azurforum.com',
1934                 '*.bestcheapforum.com',
1935                 '*.bestdiscussion.net',
1936                 '*.bestgoo.com',
1937                 '*.bestofforum.com',
1938                 '*.bestofforum.net',
1939                 '*.bestoforum.net',
1940                 '*.bforum.biz',
1941                 '*.big-forum.net',
1942                 '*.board-poster.com',
1943                 '*.board-realtors.com',
1944                 '*.boardonly.com',
1945                 '*.boardrealtors.net',
1946                 '*.boardsmessage.com',
1947                 '*.briceboard.com',
1948                 '*.bubblelol.com',
1949                 '*.buy-forum.com',
1950                 '*.buy-talk.com',
1951                 '*.buyforum.net',
1952                 '*.buygoo.net',
1953                 '*.buygoo.us',
1954                 '*.camelscrew.com',
1955                 '*.cheap-forum.com',
1956                 '*.cheapforum.net',
1957                 '*.chocoforum.com',
1958                 '*.chocoforum.net',
1959                 '*.clic-topic.com',
1960                 '*.clicboard.com',
1961                 '*.clictopic.com',
1962                 '*.clictopic.net',
1963                 '*.clictopics.com',
1964                 '*.clubdiscussion.net',
1965                 '*.coolbb.net',
1966                 '*.crazy4us.com',
1967                 '*.crazyfruits.net',
1968                 '*.createmyboard.com',
1969                 '*.crewcamel.com',
1970                 '*.cyberfreeforum.com',
1971                 '*.discutforum.com',
1972                 '*.discutfree.com',
1973                 '*.do-forum.com',
1974                 '*.do-goo.com',
1975                 '*.do-goo.net',
1976                 '*.do-talk.com',
1977                 '*.dodiscussion.com',
1978                 '*.dogoo.us',
1979                 '*.easydiscussion.net',
1980                 '*.easyforumlive.com',
1981                 '*.englishboard.net',
1982                 '*.englishboards.com',
1983                 '*.ephpbb.com',
1984                 '*.eraseboard.net',
1985                 '*.eraseboards.net',
1986                 '*.euro-talk.net',
1987                 '*.eurodiscussion.net',
1988                 '*.eurogoo.com',
1989                 '*.exchangesboard.com',
1990                 '*.exprimetoi.net',
1991                 '*.fairtopic.com',
1992                 '*.fforum.biz',
1993                 '*.fforumfree.com',
1994                 '*.first-forum.com',
1995                 '*.firstgoo.com',
1996                 '*.fororama.com',
1997                 '*.forum-2007.com',
1998                 '*.forum-actif.net',
1999                 '*.forum-free.biz',
2000                 '*.forum-free.org',
2001                 '*.forum-motion.com',
2002                 '*.forum0.biz',
2003                 '*.forum0.info',
2004                 '*.forum0.net',
2005                 '*.forum2.biz',
2006                 '*.forum3.biz',
2007                 '*.forum3.info',
2008                 '*.forum5.info',
2009                 '*.forum6.biz',
2010                 '*.forum6.info',
2011                 '*.forum7.biz',
2012                 '*.forum777.com',
2013                 '*.forum8.biz',
2014                 '*.forum9.biz',
2015                 '*.foruma.biz',
2016                 '*.forumactif.biz',
2017                 '*.forumactif.info',
2018                 '*.forumactif.name',
2019                 '*.forumactif.ws',
2020                 '*.forumaction.net',
2021                 '*.forumakers.com',
2022                 '*.forumandco.com',
2023                 '*.forumb.biz',
2024                 '*.forumc.biz',
2025                 '*.forumd.biz',
2026                 '*.forumdediscussions.com',
2027                 '*.forumdediscussions.net',
2028                 '*.forume.biz',
2029                 '*.forumeast.com',
2030                 '*.forumf.biz',
2031                 '*.forumfreek.com',
2032                 '*.forumfreez.com',
2033                 '*.forumg.biz',
2034                 '*.forumh.biz',
2035                 '*.forumh.net',
2036                 '*.forumhope.com',
2037                 '*.forumi.biz',
2038                 '*.forumice.net',
2039                 '*.foruminute.com',
2040                 '*.forumj.biz',
2041                 '*.forumj.net',
2042                 '*.forumjonction.com',
2043                 '*.forumk.biz',
2044                 '*.foruml.biz',
2045                 '*.forumm.biz',
2046                 '*.forummotion.com',
2047                 '*.forummotions.com',
2048                 '*.forumn.biz',
2049                 '*.forumn.net',
2050                 '*.forumo.biz',
2051                 '*.forumonline.biz',
2052                 '*.forumotions.com',
2053                 '*.forump.biz',
2054                 '*.forump.info',
2055                 '*.forumperso.com',
2056                 '*.forumpersos.com',
2057                 '*.forumplatinum.com',
2058                 '*.forumpro.fr',
2059                 '*.forumq.biz',
2060                 '*.forumr.biz',
2061                 '*.forumr.net',
2062                 '*.forumrama.com',
2063                 '*.forums-actifs.com',
2064                 '*.forums-actifs.net',
2065                 '*.forums1.net',
2066                 '*.forumsactifs.com',
2067                 '*.forumsactifs.net',
2068                 '*.forumsfree.org',
2069                 '*.forumsline.com',
2070                 '*.forumsmakers.com',
2071                 '*.forumsmotion.com',
2072                 '*.forumsmotions.com',
2073                 '*.forumt.biz',
2074                 '*.forumv.biz',
2075                 '*.forumvalue.com',
2076                 '*.forumw.biz',
2077                 '*.forumy.biz',
2078                 '*.free-boards.net',
2079                 '*.freediscussion.net',
2080                 '*.freediscussions.net',
2081                 '*.freeforum.me.uk',
2082                 '*.freeforumboard.net',
2083                 '*.freeforumfree.com',
2084                 '*.freevideotalk.com',
2085                 '*.frenchboard.com',
2086                 '*.fruitsandco.com',
2087                 '*.fullboards.com',
2088                 '*.fullsubject.com',
2089                 '*.fullsubject.net',
2090                 '*.get-forum.net',
2091                 '*.getdiscussion.com',
2092                 '*.getgoo.net',
2093                 '*.getgoo.us',
2094                 '*.gettalk.net',
2095                 '*.go-board.com',
2096                 '*.go-board.net',
2097                 '*.go-forum.net',
2098                 '*.go-ogler.com',
2099                 '*.gofreeforum.com',
2100                 '*.gogoo.us',
2101                 '*.goo-board.com',
2102                 '*.goo-boys.com',
2103                 '*.goo-dart.com',
2104                 '*.goo-dole.com',
2105                 '*.goo-done.com',
2106                 '*.gooboards.com',
2107                 '*.goodbb.net',
2108                 '*.goodearths.com',
2109                 '*.goodforum.net',
2110                 '*.goodoles.com',
2111                 '*.goodoolz.com',
2112                 '*.gooforum.com',
2113                 '*.gooforums.com',
2114                 '*.googoolz.com',
2115                 '*.great-forum.com',
2116                 '*.heavenforum.com',
2117                 '*.hforum.biz',
2118                 '*.high-forums.com',
2119                 '*.highbb.com',
2120                 '*.highforum.net',
2121                 '*.hightoxic.com',
2122                 '*.homediscussion.net',
2123                 '*.homegoo.com',
2124                 '*.hooxs.com',
2125                 '*.hot-me.com',
2126                 '*.hot4um.com',
2127                 '*.hotdiscussion.net',
2128                 '*.hotgoo.net',
2129                 '*.in-goo.com',
2130                 '*.in-goo.net',
2131                 '*.infodiscussion.net',
2132                 '*.ingoo.us',
2133                 '*.iowoi.com',
2134                 '*.jforum.biz',
2135                 '*.just-forum.net',
2136                 '*.justboard.net',
2137                 '*.justdiscussion.com',
2138                 '*.justforum.net',
2139                 '*.justgoo.com',
2140                 '*.keuf.net',
2141                 '*.lforum.biz',
2142                 '*.lifediscussion.net',
2143                 '*.lifeme.net',
2144                 '*.lightbb.com',
2145                 '*.logu2.com',
2146                 '*.longdomaine.com',
2147                 '*.lovediscussion.net',
2148                 '*.lowcostforum.com',
2149                 '*.make-free-forum.com',
2150                 '*.makeforumfree.com',
2151                 '*.makefreeforum.com',
2152                 '*.mam9.com',
2153                 '*.manageboard.com',
2154                 '*.max2forum.com',
2155                 '*.meabout.com',
2156                 '*.megabb.com',
2157                 '*.moncontact.com',
2158                 '*.moninter.net',
2159                 '*.motion-forum.net',
2160                 '*.motionforum.net',
2161                 '*.motionsforum.com',
2162                 '*.mrforum.net',
2163                 '*.msnboard.net',
2164                 '*.msnyou.com',
2165                 '*.my-free-board.com',
2166                 '*.my-free-boards.com',
2167                 '*.my-free-forum.com',
2168                 '*.my-free-forums.com',
2169                 '*.my-goo.com',
2170                 '*.my-goo.net',
2171                 '*.mydiscussionboard.com',
2172                 '*.myfreeboard.net',
2173                 '*.mygoo.org',
2174                 '*.myrealboard.com',
2175                 '*.netboarder.com',
2176                 '*.netdiscussion.net',
2177                 '*.netgoo.org',
2178                 '*.new-forum.net',
2179                 '*.newdiscussion.net',
2180                 '*.newgoo.net',
2181                 '*.nforum.biz',
2182                 '*.nice-album.com',
2183                 '*.nice-board.biz',
2184                 '*.nice-board.com',
2185                 '*.nice-board.net',
2186                 '*.nice-boards.com',
2187                 '*.nice-boards.net',
2188                 '*.nice-forum.com',
2189                 '*.nice-forum.net',
2190                 '*.nice-forums.com',
2191                 '*.nice-forums.net',
2192                 '*.nice-gallery.net',
2193                 '*.nice-subject.com',
2194                 '*.nice-subjects.com',
2195                 '*.nice-theme.com',
2196                 '*.nice-topic.com',
2197                 '*.nice-topics.com',
2198                 '*.nicealbums.com',
2199                 '*.niceboard.biz',
2200                 '*.niceboard.net',
2201                 '*.niceboards.net',
2202                 '*.nicegalleries.net',
2203                 '*.nicesubject.com',
2204                 '*.nicesubjects.com',
2205                 '*.nicetopic.net',
2206                 '*.nicetopics.com',
2207                 '*.nightforum.net',
2208                 '*.nocost-forum.com',
2209                 '*.nofeeforum.com',
2210                 '*.one-forum.net',
2211                 '*.onediscussion.net',
2212                 '*.onegoo.us',
2213                 '*.onlinegoo.com',
2214                 '*.onlyquery.com',
2215                 '*.open-board.com',
2216                 '*.openu2.com',
2217                 '*.othersboards.com',
2218                 '*.own0.com',
2219                 '*.pforum.biz',
2220                 '*.phpbb9.com',
2221                 '*.phpbbtest.com',
2222                 '*.positifforum.com',
2223                 '*.postalboard.com',
2224                 '*.prodiscussion.net',
2225                 '*.progoo.us',
2226                 '*.pureforum.net',
2227                 '*.qforum.biz',
2228                 '*.quickbb.net',
2229                 '*.realbb.net',
2230                 '*.realfreeforum.com',
2231                 '*.realmsn.com',
2232                 '*.rforum.biz',
2233                 '*.road2us.com',
2234                 '*.roomforum.com',
2235                 '*.saveboard.com',
2236                 '*.screwcamel.com',
2237                 '*.screwcamels.com',
2238                 '*.sendboard.com',
2239                 '*.sephorum.com',
2240                 '*.sforum.biz',
2241                 '*.shootboard.com',
2242                 '*.shop-forum.net',
2243                 '*.shopsubject.com',
2244                 '*.simpleboard.net',
2245                 '*.site-forums.com',
2246                 '*.smileyforum.net',
2247                 '*.sos-forum.net',
2248                 '*.sos4um.com',
2249                 '*.sos4um.net',
2250                 '*.sosforum.net',
2251                 '*.speedyforum.com',
2252                 '*.stationforum.com',
2253                 '*.subject-expert.com',
2254                 '*.subject-line.com',
2255                 '*.subject-tracer.com',
2256                 '*.subjectchange.com',
2257                 '*.subjectdeals.com',
2258                 '*.subjectdebate.com',
2259                 '*.subjectdone.com',
2260                 '*.subjectonline.com',
2261                 '*.subjectschange.com',
2262                 '*.subjectsecrets.com',
2263                 '*.super-forum.net',
2264                 '*.talk-forums.com',
2265                 '*.team-forum.net',
2266                 '*.team-talk.net',
2267                 '*.teamconvention.com',
2268                 '*.teamgoo.net',
2269                 '*.teensboards.com',
2270                 '*.the-talk.net',
2271                 '*.the-up.com',
2272                 '*.thegoo.us',
2273                 '*.thinksubject.com',
2274                 '*.top-board.com',
2275                 '*.top-forum.net',
2276                 '*.top-me.com',
2277                 '*.top-talk.net',
2278                 '*.topdiscussion.com',
2279                 '*.topgoo.net',
2280                 '*.topic-board.com',
2281                 '*.topic-board.net',
2282                 '*.topic-debate.com',
2283                 '*.topic-ideas.com',
2284                 '*.topic-mail.com',
2285                 '*.topic-zone.com',
2286                 '*.topicboard.net',
2287                 '*.topicboards.com',
2288                 '*.topicmanager.com',
2289                 '*.topicsolutions.net',
2290                 '*.toxicfarm.com',
2291                 '*.unlimitboard.com',
2292                 '*.unlimitedboard.com',
2293                 '*.unlimitedforum.com',
2294                 '*.up-with.com',
2295                 '*.up-your.com',
2296                 '*.urealboard.com',
2297                 '*.user-board.net',
2298                 '*.userboard.net',
2299                 '*.users-board.com',
2300                 '*.users-board.net',
2301                 '*.usersboard.com',
2302                 '*.usersboard.net',
2303                 '*.webgoo.us',
2304                 '*.withboards.com',
2305                 '*.withme.us',
2306                 '*.worldgoo.com',
2307                 '*.yahooboard.net',
2308                 '*.yforum.biz',
2309                 '*.yoo7.com',
2310                 '*.youneed.us',
2311                 '*.your-board.com',
2312                 '*.your-talk.com',
2313                 '*.yourme.net',
2314                 '*.zforum.biz',
2315
2316                 // 75.126.156.15 redirect to forumactif.com
2317                 '*.actifforum.com',
2318                 '*.fr-bb.com',
2319                 '*.superforum.fr',
2320
2321                 // 75.126.156.15 redirect to editboard.com
2322                 '*.bbfr.net',
2323                 '*.bbgraf.com',
2324                 '*.cinebb.com',
2325                 '*.darkbb.com',
2326                 '*.dynamicbb.com',
2327                 '*.zikforum.com',
2328
2329                 // 74.86.25.140 Used: sosblog.com
2330                 '*.0-up.com',
2331                 '*.0-yo.com',
2332                 '*.04live.com',
2333                 '*.06fr.com',
2334                 '*.0fra.com',
2335                 '*.0jet.com',
2336                 '*.0yoo.com',
2337                 '*.1toxic.com',
2338                 '*.2k00.com',
2339                 '*.2xik.com',
2340                 '*.blog-2007.com',
2341                 '*.blog-2008.com',
2342                 '*.blog-2009.com',
2343                 '*.blog-2010.com',
2344                 '*.blog-actif.net',
2345                 '*.blog-marley.com',
2346                 '*.blog-talker.com',
2347                 '*.blog2009.com',
2348                 '*.blogactif.net',
2349                 '*.blogalbums.com',
2350                 '*.blogalerie.com',
2351                 '*.blogaleries.com',
2352                 '*.blogallerys.com',
2353                 '*.blogandme.com',
2354                 '*.blogandyou.com',
2355                 '*.blogbubble.net',
2356                 '*.blogdollz.com',
2357                 '*.bloggeuse.net',
2358                 '*.bloggeuses.com',
2359                 '*.bloginstinct.com',
2360                 '*.bloginternet.net',
2361                 '*.blogmakers.net',
2362                 '*.blogmarley.net',
2363                 '*.blogminister.net',
2364                 '*.blogmorane.com',
2365                 '*.blognboard.com',
2366                 '*.blogotek.net',
2367                 '*.blogpas.com',
2368                 '*.blogpublisher.net',
2369                 '*.blogsalbum.com',
2370                 '*.blogsalbums.com',
2371                 '*.blogsfan.net',
2372                 '*.blogsgallerys.com',
2373                 '*.blogsitephp.com',
2374                 '*.blogsland.net',
2375                 '*.blogsmaker.com',
2376                 '*.blogsmakers.com',
2377                 '*.blogspeed.net',
2378                 '*.blogsup.net',
2379                 '*.blogsutil.com',
2380                 '*.blogsutils.com',
2381                 '*.blogsystem.net',
2382                 '*.blogtalker.net',
2383                 '*.blogtheque.net',
2384                 '*.blogutil.com',
2385                 '*.blogvsboard.com',
2386                 '*.briceblog.com',
2387                 '*.cibleblog.com',
2388                 '*.cristalblog.com',
2389                 '*.crystalblog.net',
2390                 '*.dad-blog.com',
2391                 '*.daddy-blog.com',
2392                 '*.defaultblog.com',
2393                 '*.discussionsblog.com',
2394                 '*.dollzblog.com',
2395                 '*.dtoxic.com',
2396                 '*.easiestblog.net',
2397                 '*.espaceblog.net',
2398                 '*.exitblog.net',
2399                 '*.expensiveblog.com',
2400                 '*.extra-blog.net',
2401                 '*.extrablog.net',
2402                 '*.facileblog.com',
2403                 '*.forblogger.com',
2404                 '*.forumsblogs.com',
2405                 '*.freephpblog.com',
2406                 '*.fresh-blog.net',
2407                 '*.galleryblog.net',
2408                 '*.galleryblogs.net',
2409                 '*.gallerysblog.com',
2410                 '*.gallerysblogs.com',
2411                 '*.hyper-blog.net',
2412                 '*.hyper-blogger.com',
2413                 '*.hyper-blogger.net',
2414                 '*.hyperblogger.net',
2415                 '*.instinctblog.com',
2416                 '*.jeunblog.com',
2417                 '*.jeuneblog.com',
2418                 '*.judblog.com',
2419                 '*.makeblog.net',
2420                 '*.man-blog.net',
2421                 '*.man-blogs.com',
2422                 '*.man-blogs.net',
2423                 '*.manblog.net',
2424                 '*.manblog.org',
2425                 '*.manblog.us',
2426                 '*.manblogs.net',
2427                 '*.mansblog.net',
2428                 '*.mansblogs.com',
2429                 '*.mansblogs.net',
2430                 '*.meetingsblogs.com',
2431                 '*.men-blog.net',
2432                 '*.men-blogs.com',
2433                 '*.men-blogs.net',
2434                 '*.menblog.us',
2435                 '*.menblogs.net',
2436                 '*.mensblogs.net',
2437                 '*.messaginblog.com',
2438                 '*.monblogger.com',
2439                 '*.mum-blog.com',
2440                 '*.mummy-blog.com',
2441                 '*.mummyblog.com',
2442                 '*.myareablog.com',
2443                 '*.myblog-online.net',
2444                 '*.mybloginternet.com',
2445                 '*.myblogland.com',
2446                 '*.myblogmag.com',
2447                 '*.myfreshblog.com',
2448                 '*.myinternetblog.net',
2449                 '*.myoverblog.com',
2450                 '*.myoverblog.net',
2451                 '*.mysharedblog.com',
2452                 '*.nice-albums.com',
2453                 '*.nice-galleries.com',
2454                 '*.nicealbum.net',
2455                 '*.nicegallery.net',
2456                 '*.notreblogger.com',
2457                 '*.outilblog.com',
2458                 '*.over-blogger.com',
2459                 '*.overblogger.com',
2460                 '*.pasblog.com',
2461                 '*.pasblog.net',
2462                 '*.perfect-blog.net',
2463                 '*.perfectblog.net',
2464                 '*.phpblogsite.com',
2465                 '*.phpmyblog.net',
2466                 '*.plateformeblog.com',
2467                 '*.playblogger.com',
2468                 '*.publishmyblog.com',
2469                 '*.pulseblog.net',
2470                 '*.pulseblogs.com',
2471                 '*.puretoxic.com',
2472                 '*.reservedblog.com',
2473                 '*.shareblog.net',
2474                 '*.shareblogs.net',
2475                 '*.shared-blogs.com',
2476                 '*.sharedblog.net',
2477                 '*.sharedblogs.net',
2478                 '*.solideblog.com',
2479                 '*.systemeblog.com',
2480                 '*.talkmeblog.com',
2481                 '*.toolsblog.net',
2482                 '*.toxicplace.com',
2483                 '*.ufreeblog.com',
2484                 '*.uliveblog.com',
2485                 '*.ultratoxic.com',
2486                 '*.utilblog.com',
2487                 '*.utilblogs.com',
2488                 '*.utilsblog.com',
2489                 '*.utilsblogs.com',
2490                 '*.various-blog.com',
2491                 '*.various-blog.net',
2492                 '*.various-blogs.com',
2493                 '*.various-blogs.net',
2494                 '*.variusblog.com',
2495                 '*.versusblog.com',
2496                 '*.vieuxblog.com',
2497                 '*.web-day.net',
2498                 '*.whatsblog.net',
2499                 '*.woman-blog.net',
2500                 '*.woman-blogs.com',
2501                 '*.woman-blogs.net',
2502                 '*.womanblog.com',
2503                 '*.womanblog.org',
2504                 '*.womanblog.us',
2505                 '*.womanblogs.net',
2506                 '*.womansblogs.com',
2507                 '*.womansblogs.net',
2508                 '*.women-blog.net',
2509                 '*.women-blogs.com',
2510                 '*.women-blogs.net',
2511                 '*.womenblog.us',
2512                 '*.womenblogs.net',
2513                 '*.womensblog.net',
2514                 '*.womensblogs.net',
2515                 '*.youblog.net',
2516                 '*.yourliveblog.com',
2517                 '*.yourweblog.net',
2518         ),
2519         '*.forumcommunity.net',
2520         '*.forumer.com',
2521         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2522         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2523         'forumhosting.org',
2524         '*.forums.com',
2525         'forumbolt.com',
2526         'phpbb.forumgratis.com',
2527         'forumlari.net',
2528         '*.forumlivre.com',
2529         'forumnow.com.br',
2530         '*.forumppl.com',
2531         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2532         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2533                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2534                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2535                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2536         '*.fory.pl',
2537         'fotolog.com',
2538         '*.fr33webhost.com',
2539         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2540         '*.free-25.de',
2541         '*.free-bb.com',
2542         'Free-Blog-Hosting.com' => array(
2543                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2544                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
2545                 'blog-tonite.com',                      // ns *.phpwebhosting.com
2546                 'blogznow.com',                         // ns *.phpwebhosting.com
2547                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
2548                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
2549         ),
2550         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2551         'free-guestbook.net',
2552         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2553         'freebb.nl',
2554         '*.freeclans.de',
2555         '*.freelinuxhost.com',  // by 100webspace.com
2556         '*.nofeehost.com',
2557         '*.freehyperspace.com',
2558         'freeforum.at',                 // by Sandro Wilhelmy
2559         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2560         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2561         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2562         '*.freewebhostingpro.com',
2563         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2564         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2565                 '*.6te.net',
2566                 '*.ueuo.com',
2567                 '*.orgfree.com',
2568         ),
2569         '*.freewebpage.org',
2570         'Freewebs.com' => array(        // by inquiries at freewebs.com
2571                 'freewebs.com',
2572                 'freewebsfarms.com',
2573         ),
2574         '*.freewebspace.net.au',
2575         '*.freemyforum.com',    // by messahost at gmail.com
2576         'freepowerboards.com',
2577         '*.freepowerboards.com',
2578         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2579         'Funpic.de' => array(   // by alexander at liemen.net
2580                 '*.funpic.de',
2581                 '*.funpic.org',
2582         ),
2583         'gb-hoster.de',
2584         '*.genblogger.com',
2585         'GetBetterHosting.com' => array(
2586                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2587                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2588         ),
2589         '*.goodboard.de',
2590         'gossiping.net',
2591         '*.greatnuke.com',
2592         '*.guestbook.de',
2593         'gwebspace.de',
2594         'Google.com' => array(
2595                 '*.blogspot.com',
2596                 'docs.google.com',
2597                 '*.googlepages.com',
2598                 'groups-beta.google.com',
2599         ),
2600         'guestbook.at',
2601         'club.giovani.it',
2602         '*.gratis-server.de',
2603         'healthcaregroup.com',
2604         '*.heliohost.org',
2605         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2606                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2607                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2608                 '*.front.ru',           // (domain at hc.ru)
2609                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2610                 '*.hotbox.ru',          // (domain at hc.ru)
2611                 '*.hotmail.ru',         // (hosting at hc.ru)
2612                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2613                 '*.land.ru',            // (domain at hc.ru)
2614                 '*.mail15.com',         // (hosting at hc.ru)
2615                 '*.mail333.com',        // (hosting at hc.ru)
2616                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2617                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2618                 '*.pisem.net',          // (hosting at hc.ru)
2619                 '*.pochta.ru',          // (domain at hc.ru)
2620                 '*.pochtamt.ru',        // (domain at hc.ru)
2621                 '*.pop3.ru',            // (domain at hc.ru)
2622                 '*.rbcmail.ru',         // (domain at hc.ru)
2623                 '*.smtp.ru',            // (domain at hc.ru)
2624         ),
2625         '*.hiblogger.com',              // by chiaokin at gmail.com
2626         '*.hit.bg',                             // by forumup.com ??
2627         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2628         '*.host-page.com',
2629         '*.hostingclub.de',
2630         'forums.hspn.com',
2631         '*.httpsuites.com',
2632         '*.hut2.ru',
2633         'ibfree.org',                   // 208.101.45.88
2634         'IC.cz' => array(
2635                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2636                 '*.hu.cz',                      // internetcentrum at gmail.com
2637                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2638                 '*.ic.cz',                      // internetcentrum at gmail.com
2639                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2640                 '*.own.cz',                     // internetcentrum at gmail.com
2641                 '*.phorum.cz',          // internetcentrum at gmail.com
2642                 '*.tym.cz',                     // internetcentrum at gmail.com
2643                 '*.tym.sk',                     // jobot at ignum.cz
2644                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2645                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2646                 '*.yw.sk',                      // jobot at ignum.cz
2647         ),
2648         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2649                 '*.0moola.com',
2650                 '*.3000mb.com',
2651                 '.501megs.com',
2652                 '*.teracities.com',
2653                 '*.xoompages.com',
2654         ),
2655         '*.icspace.net',
2656         'iEUROP.net' => array(
2657                 '*.ibelgique.com',
2658                 '*.iespana.es',
2659                 '*.ifrance.com',
2660                 '*.iitalia.com',
2661                 '*.iquebec.com',
2662                 '*.isuisse.com',
2663         ),
2664         '*.ihateclowns.net',
2665         '*.ii55.com',
2666         '*.ipbfree.com',
2667         '*.iphorum.com',
2668         '*.blog.ijijiji.com',
2669         '*.info.com',
2670         '*.informe.com',
2671         'it168.com',
2672         '.iwannaforum.com',
2673         '*.jconserv.net',
2674         '*.jeeran.com',
2675         '*.jeun.fr',
2676         '*.joolo.com',
2677         '*.journalscape.com',
2678         '*.justfree.com',
2679         '*.blog.kataweb.it',
2680         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2681         '*.kokoom.com',
2682         'koolpages.com',
2683         '*.kostenlose-foren.org',
2684         '*.ksiegagosci.info',
2685         'Lide.cz' => array(
2686                 '*.lide.cz',
2687                 '*.sblog.cz',
2688         ),
2689         'limmon.net',
2690         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2691         'listible.com',                 ///list/
2692         'Livedoor.com' => array(
2693                 'blog.livedoor.jp',
2694                 '*.blog.livedoor.com',  // redirection
2695         ),
2696         '*.livejournal.com',
2697         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2698         '*.logme.nl',
2699         'lol.to',
2700         'ltss.luton.ac.uk',
2701         'Lycos.com' => array(
2702                 '.angelfire.com',       // angelfire.lycos.com
2703
2704                 '*.jubii.dk',   // search., medlem.
2705                 '*.jubiiblog.co.uk',
2706                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2707                 '*.jubiiblog.de',
2708                 '*.jubiiblog.dk',
2709                 '*.jubiiblog.fr',
2710                 '*.jubiiblog.it',
2711                 '*.jubiiblog.nl',
2712
2713                 '*.lycos.at',
2714                 '*.lycos.ch',
2715                 '*.lycos.co.uk',
2716                 'angelfire.lycos.com',
2717                 '*.lycos.de',
2718                 '*.lycos.es',
2719                 '*.lycos.fr',
2720                 '*.lycos.it',           // by Lycos Europe GmbH
2721                 '*.lycos.nl',
2722
2723                 '*.spray.se',
2724                 '*.sprayblog.se',
2725
2726                 '*.tripod.com',
2727         ),
2728         '*.mastertopforum.com',
2729         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2730         'meneame.net',
2731         '*.memebot.com',
2732         '*.messageboard.nl',
2733         'mokono GmbH' => array(
2734                 '*.blog.com.es',
2735                 '*.blog.de',
2736                 '*.blog.fr',
2737                 '*.blog.co.uk',
2738                 '*.blog.ca',
2739                 '*.blogs.se',
2740                 '*.blogs.fi',
2741                 '*.blogs.no',
2742                 '*.blogs.dk',
2743                 '*.blogs.ro',
2744                 '*.weblogs.pl',
2745                 '*.weblogs.cz',
2746                 '*.weblogs.hu',
2747         ),
2748         'mojklc.com',
2749         '*.mundoforo.com',
2750         'MonForum.com' => array(
2751                 '*.monforum.com',
2752                 '*.monforum.fr',
2753         ),
2754         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2755         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2756         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2757         'myblog.is',
2758         'myblogma.com',
2759         '*.myblogvoice.com',
2760         'myblogwiki.com',
2761         '*.myforum.ro',
2762         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2763         '*.myfreewebs.net',
2764         '*.mysite.com',
2765         '*.myxhost.com',
2766         '*.netfast.org',
2767         'NetGears.com' => array(
2768                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2769                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2770                 '*.freewebspace.com',   // 64.49.236.72
2771         ),
2772         'Netscape.com' => array('*.netscape.com'),
2773         'users.newblog.com',
2774         'neweconomics.info',
2775         '*.newsit.es',                          // 75.126.252.108
2776         '*.nm.ru',
2777         '*.nmj.pl',
2778         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2779         'Northsky.com' => array(
2780                 // by hostmaster at northsky.com
2781                 // northsky.com redirects to communityarchitect.com
2782
2783                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2784                 '*.00author.com',
2785                 '*.00band.com',
2786                 '*.00books.com',
2787                 '*.00cash.com',
2788                 '*.00cd.com',
2789                 '*.00dvd.com',
2790                 '*.00family.com',
2791                 '*.00game.com',
2792                 '*.00home.com',
2793                 '*.00it.com',
2794                 '*.00me.com',
2795                 '*.00movies.com',
2796                 '*.00page.com',
2797                 '*.00politics.com',
2798                 '*.00sf.com',
2799                 '*.00show.com',
2800                 '*.00song.com',
2801                 '*.00trek.com',
2802                 '*.00video.com',
2803                 '*.0me.com',
2804                 '*.0pi.com',
2805                 '*.happy-couple.com',
2806                 '*.warp0.com',
2807
2808                 '*.50megs.com',         // 64.136.25.170
2809
2810                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2811                 '*.00server.com',
2812                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2813                 '*.fanspace.com',
2814
2815                 // 64.136.25.168 by Mark Bishop
2816                 '*.00go.com',
2817                 '*.00space.com',
2818                 '*.00sports.com',
2819         ),
2820         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2821         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2822         'onlyfree.de',
2823         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2824         '*.ohost.de',
2825         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2826                 '.friko.pl',
2827                 '.jak.pl',
2828                 '.nazwa.pl',
2829                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2830                 '.w8w.pl',
2831                 '.za.pl',
2832                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2833         ),
2834         'oyax.com',                             ///user_links.php
2835         '*.p2a.pl',
2836         '*.parlaris.com',
2837         '*.pathfinder.gr',
2838         '*.persianblog.com',
2839         '*.phorum.pl',
2840         'Phpbb24.com' => array( // by Daniel Eriksson
2841                 '*.createforum.us',     // registry at webbland.se
2842                 '*.forumportal.us',     // registry at webbland.se
2843                 '*.freeportal.us',      // registry at network24.se
2844                 '*.phpbb2.us',          // daniel at danielos.com
2845                 '*.phpbb24.com',        // daniel at danielos.com
2846                 '*.myforumportal.com',  // daniel at webbland.se
2847         ),
2848         'phpbb4you.com',
2849         'phpbbcommunity.com',
2850         '*.phpbbx.de',
2851         '*.pochta.ru',
2852         '*.portbb.com',
2853         '*.portcms.com',
2854         'powerwebmaster.de',
2855         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2856         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2857         '*.probook.de',
2858         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2859         '*.pun.pl',
2860         'putfile.com',
2861         '*.quickfreehost.com',
2862         'quizilla.com',
2863         '*.quotaless.com',
2864         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2865         'razyboard.com',
2866         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2867         'realhp.de',
2868         'reddit.com',           ///user/
2869         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2870                 '*.juicypornhost.com',
2871                 '*.pornzonehost.com',
2872                 '*.xhostar.com',
2873         ),
2874         'RIN.ru' => array(
2875                 '*.sbn.bz',
2876                 '*.wol.bz',
2877         ),
2878         '*.sayt.ws',
2879         'Seblg.com' => array(
2880                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2881                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2882         ),
2883         '*.seo-blog.org',
2884         '*.shoutpost.com',
2885         '*.siamforum.com',
2886         '*.siteburg.com',
2887         '*.sitehome.ru',
2888         '*.sitesfree.com',              // support at livesearching.com
2889         '*.sitesled.com',
2890         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2891         'SmarTrans.com' => array(
2892                 '.3w.to',
2893                 '.aim.to',
2894                 '.djmp.jp',
2895                 '.nihongourl.nu',
2896                 '.urljp.com',
2897                 '.www1.to',
2898                 '.www2.to',
2899                 '.www3.to',
2900         ),
2901         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2902         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2903         'members.spboards.com',
2904         'forums.speedguide.net',
2905         'Sphosting.com' => array(       // by admin at sphosting.com
2906                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2907                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2908                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2909                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2910                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2911         ),
2912         '*.spicyblogger.com',
2913         '*.spotbb.com',
2914         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2915         '*.squarespace.com',
2916         'stickypond.com',
2917         'stormloader.com',
2918         'strikebang.com',
2919         '*.sultryserver.com',
2920         '*.t35.com',
2921         '*.talks.at',
2922         'tabletpcbuzz.com',
2923         '*.talkthis.com',
2924         'tbns.net',
2925         'telasipforums.com',
2926         'theforumhub.com',
2927         'thestudentunderground.org',
2928         'think.ubc.ca',
2929         '*.thumblogger.com',
2930         'Topix.com' => array(
2931                 'topix.com',
2932                 'topix.net',
2933         ),
2934         'forum.tourism-talk.com.au',
2935         'tycho at e-lab.nl' => array(
2936                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2937                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2938         ),
2939         '*.tumblr.com',
2940         'UcoZ Web-Services' => array(
2941                 '*.3dn.ru',
2942                 '*.clan.su',
2943                 '*.moy.su',
2944                 '*.my1.ru',
2945                 '*.p0.ru',
2946                 '*.pp.net.ua',
2947                 '*.ucoz.co.uk',
2948                 '*.ucoz.com',
2949                 '*.ucoz.net',
2950                 '*.ucoz.org',
2951                 '*.ucoz.ru',
2952                 '*.ws.co.ua',
2953         ),
2954         '*.unforo.net',
2955         'veoh.com',
2956         '*.vdforum.ru',
2957         '*.vtost.com',
2958         '*.vidiac.com',
2959         'Voila.fr' => array('.site.voila.fr'),
2960         'volny.cz',
2961         'voy.com',
2962         '*.welover.org',
2963         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2964                 '*.fasthost.tv',
2965                 '*.hothost.tv',
2966                 '*.isgreat.tv',
2967                 '*.issexy.tv',
2968                 '*.isterrible.tv',
2969                 '*.somegood.tv',
2970                 '*.adultnations.com',
2971                 '*.alladultfemale.com',
2972                 '*.alladultmale.com',
2973                 '*.allbisexual.com',
2974                 '*.allbreast.com',
2975                 '*.allfeminism.com',
2976                 '*.allmanpages.com',
2977                 '*.allmendirect.com',
2978                 '*.allphotoalbum.com',
2979                 '*.allsexpages.com',
2980                 '*.allwomanweb.com',
2981                 '*.attorney-site.com',
2982                 '*.bedclip.com',
2983                 '*.bestfamilysite.com',
2984                 '*.bestmusicpages.com',
2985                 '*.bigmoron.com',
2986                 '*.bourgeoisonline.com',
2987                 '*.candyfrom.us',
2988                 '*.cartoonhit.com',
2989                 '*.cat-on-line.com',
2990                 '*.chokesondick.com',
2991                 '*.closeupsof.us',
2992                 '*.cpa-site.com',
2993                 '*.dampgirl.com',
2994                 '*.dampgirls.com',
2995                 '*.deepestfetish.com',
2996                 '*.docspages.com',
2997                 '*.dog-on-line.com',
2998                 '*.dogcountries.com',
2999                 '*.dognations.com',
3000                 '*.doingitwith.us',
3001                 '*.drenchedface.com',
3002                 '*.drenchedlips.com',
3003                 '*.drspages.com',
3004                 '*.edogden.com',
3005                 '*.eroticountry.com',
3006                 '*.fasthost.tv',
3007                 '*.fineststars.com',
3008                 '*.foronlinegames.com',
3009                 '*.forplanetearth.com',
3010                 '*.freeadultparty.com',
3011                 '*.freespeechsite.com',
3012                 '*.gayadultxxx.com',
3013                 '*.gaytaboo.com',
3014                 '*.greatcookery.com',
3015                 '*.greatrecipepages.com',
3016                 '*.greatstreamingvideo.com',
3017                 '*.hatesit.com',
3018                 '*.hothost.tv',
3019                 '*.iscrappy.com',
3020                 '*.isgreat.tv',
3021                 '*.issexy.tv',
3022                 '*.isterrible.tv',
3023                 '*.itinto.us',
3024                 '*.japannudes.net',
3025                 '*.jesussave.us',
3026                 '*.jesussaveus.com',
3027                 '*.labialand.com',
3028                 '*.lettersfrom.us',
3029                 '*.lookingat.us',
3030                 '*.lunaticsworld.com',
3031                 '*.microphallus.com',
3032                 '*.mycatshow.com',
3033                 '*.mydogshow.com',
3034                 '*.myhardman.com',
3035                 '*.mylawsite.net',
3036                 '*.mylovething.com',
3037                 '*.onasoapbox.com',
3038                 '*.onlinepulpit.com',
3039                 '*.petitionthegovernment.com',
3040                 '*.photosfor.us',
3041                 '*.picturetrades.com',
3042                 '*.pleasekiss.us',
3043                 '*.politicalemergency.com',
3044                 '*.power-emergency.com',
3045                 '*.prayingfor.us',
3046                 '*.realbadidea.com',
3047                 '*.realisticpolitics.com',
3048                 '*.reallybites.com',
3049                 '*.reallypumping.us',
3050                 '*.reallyrules.com',
3051                 '*.reallysuckass.com',
3052                 '*.reallysucksass.com',
3053                 '*.realsweetheart.com',
3054                 '*.rottenass.com',
3055                 '*.schoolreference.com',
3056                 '*.sexheroes.com',
3057                 '*.sharewith.us',
3058                 '*.smutstars.com',
3059                 '*.soakinglips.com',
3060                 '*.somegood.tv',
3061                 '*.songsfrom.us',
3062                 '*.stinkingfart.com',
3063                 '*.stinkyhands.com',
3064                 '*.storiesfrom.us',
3065                 '*.taboocountry.com',
3066                 '*.television-series.com',
3067                 '*.thisbelongsto.us',
3068                 '*.totallyboning.us',
3069                 '*.vaginasisters.com',
3070                 '*.verydirtylaundry.com',
3071                 '*.videosfor.us',
3072                 '*.videosfrom.us',
3073                 '*.videosof.us',
3074                 '*.virtualdogshit.com',
3075                 '*.web1000.com',
3076                 '*.webpicturebook.com',
3077                 '*.wronger.com',
3078                 '*.xxxnations.com',
3079                 '*.yourwaywith.us',
3080         ),
3081         'webblog.ru',
3082         'weblogmaniacs.com',
3083         '.webng.com',                   // www.*, www3.*
3084         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3085         'websitetoolbox.com',
3086         '*.webtropia.com',
3087         'Welnet.de' => array(
3088                 'welnet.de',
3089                 'welnet4u.de',
3090         ),
3091         'wh-gb.de',
3092         '*.wikidot.com',
3093         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3094         '*.wmjblogs.ru',
3095         '*.wordpress.com',
3096         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3097         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3098         '*.xforum.se',
3099         'xfreeforum.com',
3100         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3101         '*.xoomwebs.com',
3102         '.xterm.org',
3103         '.freeblogs.xp.tl',
3104         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3105         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3106         'Yahoo.com' => array(
3107                 'flickr.com',
3108                 'geocities.com',
3109         ),
3110         'YANDEX, LLC.' => array(        // noc at yandex.net
3111                 '*.narod.ru',
3112                 'ya.ru',
3113                 'yandex.ru',
3114         ),
3115         '*.yeahost.com',
3116         'yourfreebb.de',
3117         'Your-Websites.com' => array(
3118                 '*.your-websites.net',
3119                 '*.web-space.ws',
3120         ),
3121 );
3122
3123 // --------------------------------------------------
3124
3125 $blocklist['B-2'] = array(
3126
3127         // B-2: Jacked contents, something implanted
3128         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3129         '*.3dm3.com',
3130         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3131         '*.1fr1.com',
3132         'a4aid.org',
3133         'aac.com',
3134         '*.aamad.org',
3135         'ad-pecjak.si',
3136         'agnt.org',
3137         'alwanforthearts.org',
3138         '*.anchor.net.au',
3139         'anewme.org',
3140         'internetyfamilia.asturiastelecentros.com',
3141         'Ball State University' => array('web.bsu.edu'),
3142         'btofaq.net',                   ///v3/forum
3143         'blepharospasm.org',
3144         'nyweb.bowlnfun.dk',
3145         '*.buzznet.com',
3146         '*.canberra.net.au',
3147         'castus.com',
3148         'Case Western Reserve University' => array('case.edu'),
3149         'ceval.de',
3150         'chaco.gov.ar',
3151         'codespeak.net',
3152         'Colorado School of Mines' => array('ticc.mines.edu'),
3153         '*.colourware.co.uk',
3154         'cpuisp.com',
3155         'International Christian University' => array('icu.edu.ua'),
3156         '*.iphpbb.com',
3157         'board-z.de',
3158         '*.board-z.de',
3159         'California State University Stanislaus' => array('writing.csustan.edu'),
3160         'cannon.co.za',
3161         'columbosgarden.com',
3162         '*.communityhost.de',
3163         'connectionone.org',
3164         'deathwinds.com',
3165         'deforum.org',
3166         'delayedreaction.org',
3167         'deproduction.org',
3168         'dc503.org',
3169         'dre-centro.pt',
3170         'Duke University' => array('devel.linux.duke.edu'),
3171         '*.esen.edu.sv',
3172         'forums.drumcore.com',
3173         'dundeeunited.org',
3174         'energyglass.com.ua',
3175         'exclusivehotels.com',
3176         'info.ems-rfid.com',
3177         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3178         'fbwloc.com',
3179         '.fhmcsa.org.au',
3180         'findyourwave.co.uk',
3181         'frogcafe.net',
3182         'plone4.fnal.gov',
3183         'freeforen.com',
3184         'funkdoc.com',
3185         'funnyclipcentral.com',
3186         'gearseds.com',
3187         'generationrice.com',
3188         'ghettojava.com',
3189         'gnacademy.org',
3190         '*.goodboard.de',
3191         'GreenDayVideo.net' => array(
3192                 'greendayvideo.net',
3193                 'espanol.greendayvideo.net',
3194         ),
3195         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3196         'Harvard Law School' => array('blogs.law.harvard.edu'),
3197         'helpiammoving.com',
3198         'homepage-dienste.com',
3199         'Howard University' => array('networks.howard.edu'),
3200         'hullandhull.com',
3201         'Huntington University' => array('huntington.edu'),
3202         'huskerink.com',
3203         '.hyba.info',
3204         'inda.org',
3205         '*.indymedia.org',      // by abdecom at riseup.net
3206         'instantbulletin.com',
3207         'internetincomeclub.com',
3208         '*.inventforum.com',
3209         'Iowa State University' => array('boole.cs.iastate.edu'),
3210         'ipwso.org',
3211         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3212         'ironmind.com',
3213         'skkustp.itgozone.com', // hidden JavaScript
3214         'jazz2online.com',
3215         '.jloo.org',
3216         'Kazan State University' => array(
3217                 'dir.kzn.ru',
3218                 'sys.kcn.ru',
3219         ),
3220         'test.kernel.org',
3221         'kevindmurray.com',
3222         'kroegjesroutes.nl',
3223         '.legion.org',
3224         'Loyola Marymount University' => array('lmu.edu'),
3225         'forum.lixium.fr',
3226         'macfaq.net',
3227         'me4x4.com',
3228         'microbial-ecology.net',
3229         'minsterscouts.org',
3230         'morallaw.org',
3231         'morerevealed.com',
3232         'macronet.org',
3233         'mamiya.co.uk',
3234         'vcd.mmvcd.com',
3235         'Monmouth College' => array('department.monm.edu'),
3236         'mountainjusticemedia.org',
3237         '*.mybbland.com',
3238         'mydlstore.com',
3239         '*.netboardz.com',
3240         'North Carolina A&T State University' => array(
3241                 'ncat.edu',
3242                 'my.ncat.edu',
3243                 'hlc.ncat.edu',
3244         ),
3245         'placetobe.org',
3246         'users.nethit.pl',
3247         'nightclubvip.net',
3248         'njbodybuilding.com',
3249         'nlen.org',
3250         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3251         'offtextbooks.com',
3252         'ofimatika.com',
3253         'omakase-net',                  // iframe
3254         'omikudzi.ru',
3255         'openchemist.net',
3256         'palungjit.com',
3257         'pataphysics-lab.com',
3258         'paypaldev.org',
3259         'paullima.com',
3260         'perl.org.br',
3261         'pfff.co.uk',
3262         'pimpo.com',                    ///_old_site/
3263         'pix4online.co.uk',
3264         'plone.dk',
3265         'preform.dk',
3266         'privatforum.de',
3267         'publicityhound.net',
3268         'qea.com',
3269         'rbkdesign.com',
3270         'rehoboth.com',
3271         'rodee.org',
3272         'ryanclark.org',
3273         '*.reallifelog.com',
3274         'rkphunt.com',
3275         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3276         'sapphireblue.com',
3277         'saskchamber.com',
3278         'savevoorhees.org',
3279         'selikoff.net',
3280         'serbisyopilipino.org',
3281         'setbb.com',
3282         'sharejesusinternational.com',
3283         'silver-tears.net',
3284         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3285         '.softpress.com',
3286         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3287         'fora.taniemilitaria.pl',       ///phpbb
3288         'tehudar.ru',
3289         'Tennessee Tech University' => array('manila.tntech.edu'),
3290         'thebluebird.ws',
3291         'theosis.org',
3292         '*.thoforum.com',
3293         'troms-slekt.com',
3294         'theedgeblueisland.com',
3295         'toyshop.com.tw',               // /images/sigui/
3296         'torontoplace.com',
3297         'chat.travlang.com',
3298         'trickropingbylassue.com',
3299         'Truman State University' => array('mathbio.truman.edu'),
3300         'tuathadedannan.org',
3301         'txgotg.com',
3302         'tzaneen.co.za',
3303         'forums.ugo.com',
3304         'whole.cs.unibo.it',
3305         'The University of North Dakota' => array(
3306                 'learn.aero.und.edu',
3307                 'ez.asn.und.edu',
3308         ),
3309         'The University of Alabama' => array('bama.ua.edu'),
3310         'unisonscotlandlaw.co.uk',
3311         'University of California' => array('classes.design.ucla.edu'),
3312         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3313         'University of Northern Colorado' => array('unco.edu'),
3314         'University of Toronto' => array(
3315                 'environment.utoronto.ca',
3316                 'grail.oise.utoronto.ca',
3317                 'utsc.utoronto.ca',
3318         ),
3319         'urgentclick.com',
3320         'vacant.org.uk',
3321         'Villa Julie College' => array('www4.vjc.edu'),
3322         'Vail Valley Foundation' => array('.vvf.org'),
3323         'wabson.org',
3324         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3325         'webarch.com',          // by WebArchitects (webarch at insync.net)
3326         'weehob.com',
3327         'West Virginia University Parkersburg' => array('wvup.edu'),
3328         'williamsburgrentals.com',
3329         'wolvas.org.uk',
3330         'wookiewiki.org',
3331         'xsgaming.com',                 // Jacked
3332         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3333         'Yahoo.com' => array(
3334                 'blog.360.yahoo.com',
3335                 '*.groups.yahoo.com'
3336         ),
3337         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3338         'youthpeer.org',
3339         '*.zenburger.com',
3340         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3341 );
3342
3343 // --------------------------------------------------
3344
3345 $blocklist['C'] = array(
3346
3347         // C: Sample setting of:
3348         // Exclusive spam domains
3349         //
3350         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3351         // affiliates, finance, sending viruses, malicious attacks to browsers,
3352         // and/or mixed ones
3353         //
3354         // Please notify us about this list with reason:
3355         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3356
3357         // C-1: Domain sets (seems to be) born to spam you
3358         //
3359         // All buziness-related spam
3360         //'.biz'
3361         //
3362         'admin at seekforweb.com' => array(
3363                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3364                 '.lovestoryx.com',
3365                 '.loveaffairx.com',
3366                 '.onmore.info',
3367                 '.scfind.info',
3368                 '.scinfo.info',
3369                 '.webwork88.info',
3370         ),
3371         'boss at bse-sofia.bg' => array(        // by Boris
3372                 '.htewbop.org',
3373                 '.kimm--d.org',
3374                 '.gtre--h.org',
3375                 '.npou--k.org',
3376                 '.bres--z.org',
3377                 '.berk--p.org',
3378                 '.bplo--s.org',
3379                 '.basdpo.org',
3380                 '.jisu--m.org',
3381                 '.kire--z.org',
3382                 '.mertnop.org',
3383                 '.mooa--c.org',
3384                 '.nake--h.org',
3385                 '.noov--b.org',
3386                 '.suke--y.org',
3387                 '.vasdipv.org',
3388                 '.vase--l.org',
3389                 '.vertinds.org',
3390         ),
3391         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3392                 '.aqq3.info',
3393                 '.axa00.info',
3394                 '.okweb11.org',
3395                 '.okweb12.org',
3396                 '.okweb13.org',
3397                 '.okweb14.org',
3398         ),
3399         'opezdol at gmail.com' => array(
3400                 '.informazionicentro.info',
3401                 '.notiziacentro.info',
3402         ),
3403         'SomethingGen' => array(
3404                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3405                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3406                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3407                 // by Lee Chang (nebucha at model-x.com)
3408                 '.adult-chat-world.info',       // by Lui
3409                 '.adult-chat-world.org',        // by Lui
3410                 '.adult-sex-chat.info',         // by Lui
3411                 '.adult-sex-chat.org',          // by Lui
3412                 '.adult-cam-chat.info',         // by Lui
3413                 '.adult-cam-chat.org',          // by Lui
3414                 '.dildo-chat.org',                      // by Lui
3415                 '.dildo-chat.info',                     // by Lui
3416                 // flirt-online.info is not CamsGen
3417                 '.flirt-online.org',            // by Lui
3418                 '.live-adult-chat.info',        // by Lui
3419                 '.live-adult-chat.org',         // by Lui
3420                 '.sexy-chat-rooms.info',        // by Lui
3421                 '.sexy-chat-rooms.org',         // by Lui
3422                 '.swinger-sex-chat.info',       // by Lui
3423                 '.swinger-sex-chat.org',        // by Lui
3424                 '.nasty-sex-chat.info',         // by Lui
3425                 '.nasty-sex-chat.org',          // by Lui
3426
3427                 '.camshost.info',                       // by Sergey
3428                 '.camdoors.info',                       // by Sergey
3429                 '.chatdoors.info',                      // by Sergey
3430
3431                 '.lebedi.info',                         // by Pronin
3432                 '.loshad.info',                         // by Pronin
3433                 '.porosenok.info',                      // by Pronin
3434                 '.indyushonok.info',            // by Pronin
3435                 '.kotyonok.info',                       // by Pronin
3436                 '.kozlyonok.info',                      // by Pronin
3437                 '.magnoliya.info',                      // by Pronin
3438                 '.svinka.info',                         // by Pronin
3439                 '.svinya.info',                         // by Pronin
3440                 '.zherebyonok.info',            // 89.149.206.225 by Pronin
3441
3442                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3443
3444                 '.adult-cam-chat-sex.info',             // by Lee
3445                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3446                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3447                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3448                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3449                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3450                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3451                 '.sex-chat-porn-cam.info',              // by Lee
3452         ),
3453         'mital at topo20.org' => array( // by Marcello Italianore
3454                 '.trevisos.org',
3455                 '.topo20.org',
3456         ),
3457         'WellCams.com' => array(
3458                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3459                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3460                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3461         ),
3462         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3463                 '.besturgent.org',
3464                 '.googletalknow.org',
3465                 '.montypythonltd.org',
3466                 '.supersettlemet.org',
3467                 '.thepythonfoxy.org',
3468                 '.ukgamesyahoo.org',
3469                 '.youryahoochat.org',
3470         ),
3471         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3472                 '.dbsajax.org',
3473                 '.acgt2005.org',
3474                 '.gopikottoor.com',
3475                 '.koosx.org',
3476                 '.mmgz.org',
3477                 '.zhiyehua.net',
3478         ),
3479         'vdf at lovespb.com' => array(  // by Andrey
3480                 '.02psa.info',
3481                 '.1818u.org',
3482                 '.18ew.info',
3483                 '.43sexx.org',
3484                 '.56porn.org',
3485                 '.6discount.info',
3486                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3487                 '.78rus.info',
3488                 '.92ssex.org',          // "ForumGenerator"
3489                 '.93adult.org',         // "ForumGenerator"
3490                 '.aboutsr.info',
3491                 '.aboutzw.info',
3492                 '.all23.info',
3493                 '.allvdf.info',
3494                 '.buy-dge.info',
3495                 '.buypo.info',
3496                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3497                 '.cv83.info',
3498                 '.cvwifw.info',
3499                 '.dabouts.info',
3500                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3501                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3502                 '.free01sa.info',
3503                 '.frees1.info',
3504                 '.freexz.info',
3505                 '.ifree-search.org',
3506                 '.lovespb.info',
3507                 '.myso2.info',
3508                 '.nb74u.info',
3509                 '.ohhh2.info',
3510                 '.ol43.info',
3511                 '.olala18.info',
3512                 '.oursales.info',
3513                 '.pasian1.info',
3514                 '.pldk.info',
3515                 '.po473.info',
3516                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3517                 '.poz2.info',
3518                 '.qpf8j4d.info',
3519                 '.saleqw.info',
3520                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3521                 '.sexz18.info',
3522                 '.sexy69a.info',
3523                 '.shedikc.info',
3524                 '.spb78.info',
3525                 '.usacanadauk.info',
3526                 '.v782mks.info',
3527                 '.vny0.info',
3528                 '.wifes1.info',
3529                 '.xranvam.info',
3530                 '.zenitcx.info',
3531                 '.zxolala.info',
3532         ),
3533         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3534                 '.care01.info',
3535                 '.care02.info',
3536                 '.care03.info',
3537                 '.care04.info',
3538                 '.care05.info',
3539                 '.care06.info',
3540                 '.care07.info',
3541                 '.care08.info',
3542                 '.care09.info',
3543                 '.care10.info',
3544                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3545                 '.klastar01.info',
3546                 '.klastar02.info',
3547                 '.klastar03.info',
3548                 '.klastar04.info',
3549                 '.klastar05.info',
3550                 '.klastar06.info',
3551                 '.klastar07.info',
3552                 '.klastar08.info',
3553                 '.klastar09.info',
3554                 '.klastar10.info',
3555                 '.um20ax01.info',
3556                 '.um20ax02.info',
3557                 '.um20ax03.info',
3558                 '.um20ax04.info',
3559                 '.um20ax05.info',
3560                 '.um20ax06.info',
3561                 '.um20ax07.info',
3562                 '.um20ax08.info',
3563                 '.um20ax09.info',
3564                 '.um20ax10.info',
3565         ),
3566         'forrass at gmail.com' => array(        // by Ismail
3567                 '.zmh01.info',
3568                 '.zmh02.info',
3569                 '.zmh03.info',
3570                 '.zmh04.info',
3571                 '.zmh05.info',
3572                 '.zmh06.info',
3573                 '.zmh07.info',
3574                 '.zmh08.info',
3575                 '.zmh09.info',
3576                 '.zmh10.info',
3577         ),
3578         'Varsylenko Vladimir and family' => array(
3579                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3580                 // by David C. Lack (David.C.Lack at dodgeit.com)
3581                 // by Kuzma V Safonov (admin at irtes.ru)
3582                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3583                 // by LAURI FUNK (vvm_kz at rambler.ru)
3584
3585                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3586                 '.abrek.info',                          // by Petrov
3587                 '.allsexonline.info',           // by Varsylenko
3588                 '.d1rnow.info',                         // by Petrov
3589                 '.doxer.info',                          // Petrov
3590                 '.freeforworld.info',           // Varsylenko
3591                 '.goodworksite.info',           // Varsylenko
3592                 '.onall.info',                          // by Varsylenko
3593                 '.powersiteonline.info',        // by Varsylenko
3594                 '.rentmysite.info',                     // by Varsylenko
3595                 '.sexdrink.info',                       // by Petrov
3596                 '.siteszone.info',                      // by Varsylenko
3597                 '.sfup.info',                           // by Petrov
3598                 '.superfreedownload.info',      // by Varsylenko
3599                 '.superneeded.info',            // by Varsylenko
3600                 '.srup.info',                           // by Petrov
3601
3602                 // 66.235.185.143(*.svabuse.info)
3603                 '.accommodationwiltshire.com',  // by Petrov
3604                 '.levines.info',                        // by Petrov
3605                 '.sernost.info',                        // by Petrov
3606                 '.sexvideosite.info',           // by Petrov
3607                 '.vvsag.info',                          // by Petrov
3608
3609                 // 81.0.195.134
3610                 '.michost.info',                        // by LAURI
3611                 '.parther.info',                        // by LAURI
3612
3613                 // 88.214.202.100
3614                 '.gitsite.info',                        // by Petrov
3615                 '.organiq.info',                        // by Petrov
3616                 '.yoursitedh.info',                     // by Petrov
3617
3618                 // 217.11.233.58 by Petrov
3619                 '.mp3vault.info',
3620
3621                 // DNS time out or failed
3622                 '.bequeous.info',                       // by Davi
3623                 '.sopius.info',                         // by Kuzma
3624                 '.sovidopad.info',                      // by Kuzma
3625                 '.yerap.info',                          // by Kuzma
3626         ),
3627         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3628                 '.flywebs.com',
3629                 '.hostrim.com',
3630                 '.playbit.com',
3631         ),
3632         'webmaster at dgo3d.info' => array(     // by Son Dittman
3633                 '.bsb3b.info',
3634                 '.dgo3d.info',
3635                 '.dgo5d.info',
3636         ),
3637         'cooler.infomedia at gmail.com' => array(
3638                 '.diabetescarelink.com',
3639                 '.firstdebthelp.com',
3640         ),
3641         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3642                 '.pokah.lv',
3643                 '.astrons.com',
3644         ),
3645         'seocool at bk.ru' => array(    // by Skar
3646                 '.implex3.com',
3647                 '.implex6.info',
3648                 '.softprof.org',
3649         ),
3650         'Caslim.info' => array(
3651                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3652                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3653         ),
3654         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3655                 '.777-poker.biz',
3656                 '.porn-11.com',
3657         ),
3658         'Conto.pl' => array(
3659                 '.8x.pl',               // domena at az.pl
3660                 '.3x3.pl',              // by biuro at nazwa.pl
3661                 '.conto.pl',    // by biuro at nazwa.pl
3662                 '.guu.pl',              // by conto.pl (domena at az.pl)
3663                 '.xcx.pl',              // domena at az.pl
3664                 '.yo24.pl',             // domena at az.pl
3665         ),
3666         'mail at pcinc.cn' => array(
3667                 // Domains by Lin Zhi Qiang
3668                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3669
3670                 // 125.65.112.11
3671                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3672                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3673                 '.shoopivdoor.com',
3674
3675                 // 125.65.112.12
3676                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3677                 '.hosetaibei.com',
3678                 '.playsese.com',
3679
3680                 // 125.65.112.13
3681                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3682                 '.ahatena.com',
3683                 '.asdsdgh-jp.com',
3684                 '.conecojp.net',
3685                 '.game-oekakibbs.com',
3686                 '.geocitygame.com',
3687                 '.gsisdokf.net',
3688                 '.korunowish.com',
3689                 '.netgamelivedoor.com',
3690                 '.soultakerbbs.net',
3691                 '.yahoo-gamebbs.com',
3692                 '.ywdgigkb-jp.com',
3693
3694                 // 125.65.112.14
3695                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3696                 '.acyberhome.com',
3697                 '.bbs-qrcode.com',
3698                 '.gamesroro.com',
3699                 '.gameyoou.com',
3700                 '.gangnu.com',
3701                 '.goodclup.com',
3702                 '.lineage321.com',
3703                 '.linkcetou.com',
3704                 '.love888888.com',
3705                 '.ragnarok-bbs.com',
3706                 '.ragnarok-game.com',
3707                 '.rmt-navip.com',
3708                 '.watcheimpress.com',
3709
3710                 // 125.65.112.15
3711                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3712                 '.18girl-av.com',
3713                 '.aurasoul-visjp.com',
3714                 '.gamaniaech.com',
3715                 '.game-mmobbs.com',
3716                 '.gameslin.net',
3717                 '.gemnnammobbs.com',
3718                 '.gogolineage.net',
3719                 '.grandchasse.com',
3720                 '.jpragnarokonline.com',
3721                 '.jprmthome.com',
3722                 '.maplestorfy.com',
3723                 '.netgamero.net',
3724                 '.nothing-wiki.com',
3725                 '.ourafamily.com',
3726                 '.ragnarok-sara.com',
3727                 '.rmt-lineagecanopus.com',
3728                 '.rmt-ranloki.com',
3729                 '.rogamesline.com',
3730                 '.roprice.com',
3731                 '.tuankong.com',
3732                 '.twreatch.com',
3733
3734                 // 125.65.112.22
3735                 // The same IP: web013.cdnhost.cn
3736                 '.lzy88588.com',
3737                 '.ragnaroklink.com',
3738
3739                 // 125.65.112.24
3740                 '.rmtfane.com',
3741                 '.fc2weday.com',
3742                 '.nlftweb.com',
3743
3744                 // 125.65.112.27
3745                 '.i520i.com',
3746                 '.sunwayto.com',
3747
3748                 // 125.65.112.31
3749                 // The same IP: web016.cdnhost.cn
3750                 '.twyaooplay.com',
3751
3752                 // 125.65.112.32
3753                 // The same IP: web037.cdnhost.cn
3754                 '.emeriss.com',
3755                 '.raginfoy.com',
3756                 '.ragnarokgvg.com',
3757                 '.rentalbbs-livedoor.com',
3758                 '.romaker.com',
3759                 '.sagewikoo.com',
3760                 '.samples112xrea.com',
3761                 '.wiki-house.com',
3762
3763                 // 125.65.112.49
3764                 '.chaosx0.com',
3765
3766                 // 125.65.112.88
3767                 // The same IP: web015.cdnhost.cn
3768                 '.a-hatena.com',
3769                 '.biglobe-ne.com',
3770                 '.blogplaync.com',
3771                 '.din-or.com',
3772                 '.dtg-gamania.com',
3773                 '.fcty-net.com',
3774                 '.game-fc2blog.com',
3775                 '.gameurdr.com',
3776                 '.getamped-garm.com',
3777                 '.interzq.com',
3778                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3779                 '.luobuogood.com',
3780                 '.ragnarok-search.com',
3781                 '.rinku-livedoor.com',
3782
3783                 // 125.65.112.90
3784                 '.gtvxi.com',
3785
3786                 // 125.65.112.91
3787                 // The same IP: web004.cdnhost.cn
3788                 '.6828teacup.com',
3789                 '.blog-livedoor.net',
3790                 '.cityblog-fc2web.com',
3791                 '.deco030-cscblog.com',
3792                 '.imbbs2t4u.com',
3793                 '.k5dionne.com',
3794                 '.lineagejp-game.com',
3795                 '.mbspro6uic.com',
3796                 '.slower-qth.com',
3797                 '.wikiwiki-game.com',
3798
3799                 // 125.65.112.93
3800                 // The same IP: web022.cdnhost.cn
3801                 '.aaa-livedoor.net',
3802                 '.cityhokkai.com',              // web022.cdnhost.cn
3803                 '.fanavier.net',
3804                 '.geocitylinks.com',    // web022.cdnhost.cn
3805                 '.kuronowish.net',              // web022.cdnhost.cn
3806                 '.ro-bot.net',
3807
3808                 // 125.65.112.95
3809                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3810                 '.23styles.com',
3811                 '.aehatena-jp.com',
3812                 '.ameblog-jp.net',
3813                 '.antuclt.com',
3814                 '.blog-ekndesign.com',
3815                 '.d-jamesinfo.com',
3816                 '.editco-jp.com',
3817                 '.ezbbsy.com',
3818                 '.extd-web.com',
3819                 '.fotblong.com',
3820                 '.game62chjp.net',
3821                 '.gamegohi.com',
3822                 '.gamesmusic-realcgi.net',
3823                 '.gamesragnaroklink.net',
3824                 '.homepage-nifty.com',
3825                 '.ie6xp.com',
3826                 '.irisdti-jp.com',
3827                 '.jklomo-jp.com',
3828                 '.jpxpie6-7net.com',
3829                 '.lian-game.com',
3830                 '.lineage-bbs.com',
3831                 '.lineage1bbs.com',
3832                 '.livedoor-game.com',
3833                 '.litcan.com',
3834                 '.lovejpjp.com',
3835                 '.m-phage.com',
3836                 '.muantang.com',
3837                 '.plusd-itmedia.com',
3838                 '.runbal-fc2web.com',
3839                 '.saussrea.com',
3840                 '.tooalt.com',
3841                 '.toriningena.net',
3842                 '.yahoodoor-blog.com',
3843                 '.yy14-kakiko.com',
3844
3845                 // 125.65.112.137
3846                 '.clublineage.com',
3847
3848                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3849                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3850                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3851
3852                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3853                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3854
3855                 '.games-nifty.com',             // 255.255.255.255 now
3856                 '.homepage3-nifty.com', // 255.255.255.255 now
3857         ),
3858         'caddd at 126.com' => array(
3859                 '.chengzhibing.com',    // by chen gzhibing
3860                 '.jplinux.com',                 // by lian liang
3861                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3862                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3863                 '.tooplogui.com',               // by zibing cai
3864                 '.twsunkom.com',                // by guo zhi wei
3865                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3866         ),
3867         'nuigiym2 at 163.com' => array( // by fly bg
3868                 '.linainfo.net',                // Seems IP not allocated now
3869                 '.lineagalink.com',             // 220.247.157.99
3870                 '.lineagecojp.com',             // 61.139.126.10
3871                 '.ragnarokonlina.com',  // 220.247.158.99
3872         ),
3873         'aakin at yandex.ru' => array(
3874                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3875                 '.entirestar.com',
3876                 '.superbuycheap.com',
3877                 '.topdircet.com',
3878         ),
3879         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3880                 '.tianmieccp.com',
3881                 '.xianqiao.net',
3882         ),
3883         'm.frenzy at yahoo.com' => array(       // by Michael
3884                 '.p5v.org',
3885                 '.j111.net',
3886                 '.searchhunter.info',
3887                 '.soft2you.info',
3888                 '.top20health.info',
3889                 '.top20ringtones.info',
3890                 '.top20travels.info',
3891                 '.v09v.info',
3892                 '.x09x.info',
3893                 '.zb-1.com',
3894         ),
3895         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3896                 '.bingogoldenpalace.info',
3897                 '.ccarisoprodol.info',
3898                 '.ezxcv.info',
3899                 '.isuperdrug.com',
3900                 '.pharmacif.info',
3901                 '.pornsexteen.biz',
3902                 '.ugfds.info',
3903                 '.vviagra.info',
3904         ),
3905         'anatolsenator at gmail.com' => array(  // by Anatol
3906                 '.cheapestviagraonline.info',
3907                 '.buyphentermineworld.info'
3908         ),
3909         'webmaster at mederotica.com' => array(
3910                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3911                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3912                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3913                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3914         ),
3915         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3916                 '.auase.info',          // by ilemavyq7461 at techie.com
3917                 '.axeboxew.info',       // by zygeu220 at writeme.com
3918                 '.boluzuhy.info',       // by pikico5419 at post.com
3919                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3920                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3921                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3922                 '.exidiqe.info',        // by kufyca5475 at mail.com
3923                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3924                 '.gubiwu.info',         // by lywunef6532 at iname.com
3925                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3926                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3927                 '.jiuuz.info',          // by meqil6549 at mail.com
3928                 '.nudetar.info',        // by vohepafi3536 at techie.com
3929                 '.nipud.info',          // by bohox9872 at mindless.com
3930                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3931                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3932                 '.olasep.info',         // by lizon8506 at mail.com
3933                 '.oueuidop.info',       // by arytyb6913 at europe.com
3934                 '.oviravy.info',        // by amyuu3883 at london.com
3935                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3936                 '.ragibe.info',         // by ehome4458 at myself.com
3937                 '.ucazib.info',         // by gorare7222 at consultant.com
3938                 '.udaxu.info',          // by gubima4007 at usa.com
3939                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3940                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3941                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3942                 '.yvaxat.info',         // by koqun9660 at mindless.com
3943                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3944         ),
3945         'Carmodelrank.com etc' => array(
3946                 // by Brianna Dunlord (briasmi at yahoo.com)
3947                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3948                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3949                 '.carmodelrank.com',// by Brianna
3950                 '.cutestories.net',     // by Brianna
3951                 '.sturducs.com',
3952                 '.bestother.info',      // by Tim
3953                 '.premiumcasinogames.com',      // by Brianna)
3954                 '.yaahooo.info',        // by Alice
3955         ),
3956         'aliacsandr at yahoo.com' => array(
3957                 '.cubub.info',                          // "Free Web Hosting"
3958         ),
3959         'aliacsandr85 at yahoo.com' => array(
3960                 // by Dr. Portillo or Eva Sabina Lopez Castell
3961                 '.xoomer.alice.it',                     // "Free Web Hosting"
3962                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3963                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3964                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3965                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3966                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3967                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3968                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3969                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3970                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3971                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3972                 '.viagra-price.org',            // by Eva
3973                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3974                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3975         ),
3976         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3977         'Something-Gamble' => array(
3978                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3979                 '.atonlineroulette.com',                        // by Blaise Johns
3980                 '.atroulette.com',                                      // by Gino Sand
3981                 '.betting-123.com',                                     // by Joana Caceres
3982                 '.betting-i.biz',                                       // by Joaquina Angus
3983                 '.casino-challenge.com',                        // by Maren Camara
3984                 '.casino-gambling-i.biz',                       // by Giselle Nations
3985                 '.casino-italian.com',                          // by Holley Yan
3986                 '.casino123.net',                                       // by Ta Baines
3987                 '.casinohammamet.com',                          // by Inger Barhorst
3988                 '.casinoqz.com',                                        // by Berenice Snow
3989                 '.casinos-777.net',                                     // by Iona Ayotte
3990                 '.crapsok.com',                                         // by Devon Adair,
3991                 '.dcasinoa.com',                                        // by August Hawkinson
3992                 '.e-poker-4u.com',                                      // by Issac Leibowitz
3993                 '.free-dvd-player.biz',                         // by Rosario Kidd
3994                 '.florida-lottery-01.com',                      // by Romeo Dillon
3995                 '.gaming-123.com',                                      // by Jennifer Byrne
3996                 '.kenogo.com',                                          // by Adriane Bell
3997                 '.mycaribbeanpoker.com',                        // by Andy Mullis
3998                 '.onbaccarat.com',                                      // by Kassandra Dunn
3999                 '.online-experts.biz',                          // by Liberty Helmick
4000                 '.onlinepoker-123.com',                         // by Andrea Feaster
4001                 '.playpokeronline-123.com',                     // by Don Lenard
4002                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4003                 '.texasholdem123.com',                          // by Savion Lasseter
4004                 '.texasholdem-777.com',                         // by Savanna Lederman
4005                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4006                 '.the-craps-100.us',                            // by Lorrine Ripley
4007                 '.the-free-online-game-913.us',         // by Kanesha Clem
4008                 '.the-free-poker-1798.us',                      // by Elaina Witte
4009                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4010                 '.the-online-game-poker-1185.us',       // by Merna Bey
4011                 '.the-playing-black-jack.com',          // by Kristine Brinker
4012                 '.the-poker-1082.us',                           // by Kristofer Boldt
4013                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4014                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4015                 '.the-video-black-jack.com',            // by Jagger Godin
4016         ),
4017         'Something-Insurance' => array(
4018                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4019
4020                 // 0-9
4021                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4022                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4023                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4024                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4025                 '.18wkcf.com',                                  // by Lexy Bohannon
4026                 '.2001werm.org',                                // by Raphael Rayburn
4027                 '.2004heeparea1.org',                   // by Dinorah Andrews
4028                 '.21nt.net',                                    // by Jaida Estabrook
4029                 '.3finfo.com',                                  // by Damian Pearsall
4030                 '.3somes.org',                                  // by Mauro Tillett
4031                 '.453531.com',                                  // by Kurt Flannery
4032                 '.4freesay.com',                                // by Eloy Jones
4033                 '.5ssurvey.com',                                // by Annamarie Kowalski
4034                 '.8-f22.com',                                   // by Larraine Evers
4035                 '.9q.org',                                              // by Ami Boynton
4036
4037                 // A
4038                 '.a40infobahn.com',                             // by Amit Nguyen
4039                 '.a4h-squad.com',                               // by Ross Locklear
4040                 '.aac2000.org',                                 // by Randi Turner
4041                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4042                 '.acahost.com',                                 // by Milton Haberman
4043                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4044                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4045                 '.activel-learning-site.com',   // by Mateo Conn
4046                 '.ad-makers.com',                               // by Shemeka Arsenault
4047                 '.ada-information.org',                 // by Josef Osullivan
4048                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4049                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4050                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4051                 '.aerovac-hotpress.com',                // by Trey Marlow
4052                 '.agfbiosensors.com',                   // by Lionel Dempsey
4053                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4054                 '.affordablerealestate.net',    // by Season Otoole
4055                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4056                 '.ahouserefinance.com',                 // by Young Alley
4057                 '.akirasworld.com',                             // by Piper Sullivan
4058                 '.alderik-production.com',              // by Joan Stiles
4059                 '.alltechdata.com',                             // by Dom Laporte
4060                 '.amconllc.com',                                // by Syble Benjamin
4061                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4062                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4063                 '.angelandcrown.net',                   // by Claretta Najera
4064                 '.ankoralina.com',                              // by Eladia Demers
4065                 '.antiquegoldmine.com',                 // by Keena Marlow
4066                 '.aquinosotros.com',                    // by Nanci Prentice
4067                 '.architectionale.com',                 // by Wilbur Cornett
4068                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4069                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4070                 '.arefinancehome.com',                  // by Duane Doran
4071                 '.arefinancinghome.com',                // by Ike Laney
4072                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4073                 '.auction-emall-site.info',             // by Dayle Denman
4074                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4075                 '.auto-buy-rite.com',                   // by Asuncion Buie
4076                 '.axxinet.net',                                 // by Roberta Gasper
4077                 '.azimutservizi.com',                   // by Ethelene Brook
4078                 '.azstudies.org',                               // by Bernardina Walden
4079
4080                 // B
4081                 '.babtrek.com',                                 // by Simonette Mcbrayer
4082                 '.babycujo.com',                                // by Francisco Akers
4083                 '.bakeddelights.com',                   // by Dave Evenson
4084                 '.bbcart.com',                                  // by Lucio Hamlin
4085                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4086                 '.best-digital-phone.us',               // by Meghann Crockett
4087                 '.bjamusements.com',                    // by Lurlene Butz
4088                 '.blursgsu.com',                                // by Weston Killian
4089                 '.bookwide.net',                                // by Tequila Zacharias
4090                 '.boreholes.org',                               // by Flora Reed
4091                 '.breathingassociaiton.org',    // by Alfred Crayton
4092                 '.birdingnh.com',                               // by Donald Healy
4093                 '.bisdragons.org',                              // by Lupe Cassity
4094                 '.blcschools.net',                              // by Alycia Jolly
4095                 '.bronte-foods.com',                    // by Kary Pfeiffer
4096                 '.buckscountyneighbors.org',    // by Maile Gaffney
4097                 '.buffalofudge.com',                    // by Mable Whisenhunt
4098                 '.burlisonforcongress.com',             // by Luann King
4099                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4100                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4101
4102                 // C
4103                 '.cabanes-web.com',                             // by Vaughn Latham
4104                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4105                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4106                 '.checaloya.com',                               // by Susana Coburn
4107                 '.calvarychapelrgvt.org',               // by Karan Kittle
4108                 '.cameras-esite.info',                  // by Karlee Frisch
4109                 '.cancerkidsforum.org',                 // by Samson Constantino
4110                 '.ccchoices.org',                               // by Kenia Cranford
4111                 '.ccupca.org',                                  // by Evonne Serrano
4112                 '.celebratemehome.com',                 // by Soraya Tower
4113                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4114                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4115                 '.choose-shoes.net',                    // by Geoffrey Setser
4116                 '.churla.com',                                  // by Ollie Wolford
4117                 '.circuithorns.co.uk',                  // by Nathanial Halle
4118                 '.clanbov.com',                                 // by Donell Hozier
4119                 '.cnm-ok.org',                                  // by Thalia Moye
4120                 '.coalitioncoalition.org',              // by Ned Macklin
4121                 '.consoleaddicts.com',                  // by Dorla Hoy
4122                 '.counterclockwise.net',                // by Melynda Hartzell
4123                 '.codypub.com',                                 // by Mercedes Coffman
4124                 '.comedystore.net',                             // by Floy Donald
4125                 '.covsys.co.uk',                                // by Abby Jacey
4126                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4127                 '.craftybidders.com',                   // by Dannie Lazo
4128                 '.credit-card-finder.net',              // by Mellie Deherrera
4129                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4130                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4131                 '.ctwine.org',                                  // by Hailey Knox
4132
4133                 // D
4134                 '.dazyation.com',                               // by Louis Strasser
4135                 '.deepfoam.org',                                // by Ethelyn Southard
4136                 '.debt-fixing.com',                             // by Dagny Rickman
4137                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4138                 '.domainadoption.com',                  // by Breann Pappas
4139                 '.diannbomkamp.com',                    // by Russel Croteau
4140                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4141                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4142                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4143                 '.digital-cameras-esite.info',  // by Milan Jolin
4144                 '.dnstechnet.net',                              // by Tamera Oman
4145                 '.drivenbydata.org',                    // by Katherine Noyes
4146                 '.dtmf.net',                                    // by Micki Slayton
4147                 '.domainsfound.com',                    // by Blossom Lively
4148
4149                 // E
4150                 '.ecstacyabuse.net',                    // by Alana Knight
4151                 '.e-digital-camera-esite.info', // by Romaine Cress
4152                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4153                 '.eldorabusecenter.org',                // by Annabella Oneal
4154                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4155                 '.encaponline.com',                             // by Patrick Keel
4156                 '.ez-shopping-online.com',              // by Gail Bartlett
4157
4158                 // F
4159                 '.faithfulwordcf.com',                  // by Bart Weeks
4160                 '.fammedassoc.com',                             // by Joshua Nelson
4161                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4162                 '.f00k.org',                                    // by Leslie Chapman
4163                 '.foreignrealtions.org',                // by Krystal Hawley
4164                 '.fortwebsite.org',                             // by Kristina Motley
4165                 '.fotofirstdigital.com',                // by Tad Whitfield
4166                 '.foundationcommons.org',               // by Caryn Eskew
4167                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4168                 '.freaky-cheats.com',                   // by Al Klein
4169                 '.free--spyware.com',                   // by Nikki Contreras
4170                 '.french-home-finance-consultant.info', // by Santana Melton
4171                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4172
4173                 // G
4174                 '.gaintrafficfast.com',                 // by Lila Meekins
4175                 '.gaygain.org',                                 // by Shell Davila
4176                 '.gcaaa.com',                                   // by Vallie Jaworski
4177                 '.generalsysteme.com',                  // by Cale Vogel
4178                 '.generation4games.co.uk',              // by Sonya Graham
4179                 '.german-dictionary.us',                // by Rex Daniel
4180                 '.gilmerrec.com',                               // by Leighann Guillory
4181                 '.glenthuntly-athletics.com',   // by Julee Hair
4182                 '.glorybaskets.com',                    // by Lynette Lavelle
4183                 '.goconstructionloan.com',              // by Willis Monahan
4184                 '.gohireit.com',                                // by Bertha Metzger
4185                 '.godcenteredpeople.com',               // by Jaycee Coble
4186
4187                 // H
4188                 '.healthinsuranceem.com',               // by Justin Munson
4189                 '.hearthorizon.info',                   // by Kory Session
4190                 '.hegerindustrial.com',                 // by Toni Wesley
4191                 '.herzequip.com',                               // by Princess Dunkle
4192                 '.hglcms.org',                                  // by Gladwin Ng
4193                 '.hipanoempresa.com',                   // by Shannon Staub
4194                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4195                 '.horse-racing-result.com',             // by Rodney Reynolds
4196                 '.hueckerfamily.com',                   // by Hershel Sell
4197
4198                 // I
4199                 '.ilove2win.com',                               // by Lamont Dickerson
4200                 '.ilruralassistgrp.org',                // by Moises Hauser
4201                 '.imageonsolutions.com',                // by Porsche Dubois
4202                 '.infoanddatacenter.com',               // by Eva Okelley
4203                 '.islamfakta.org',                              // by Goldie Boykin
4204                 '.ithomemortgage.com',                  // by Adelaide Towers
4205                 '.iyoerg.com',                                  // by Madyson Gagliano
4206
4207                 // J
4208                 '.jeffaxelsen.com',                             // by Daphne William
4209                 '.jeffreyf.net',                                // by Vito Platt
4210                 '.johnmartinsreality.com',              // by Pamela Larry
4211                 '.johnsilvers.net',                             // by Silver Battaglia
4212
4213                 // K
4214                 '.kcgerbil.org',                                // by Marisa Thayer
4215                 '.kdc-phoenix.com',                             // by Salma Shoulders
4216                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4217                 '.kosove.org',                                  // by Darwin Schneider
4218
4219                 // L
4220                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4221                 '.letsgokayaking.net',                  // by Winnie Adair
4222                 '.libertycabs.com',                             // by Adela Bonds
4223                 '.liquor-store-cellar.info',    // by Hugh Pearson
4224                 '.locomojo.net',                                // by Marco Harmon
4225                 '.lodatissimo.com',                             // by Adrian Greeson
4226                 '.lsawc.org',                                   // by Lara Han
4227                 '.lycos-test.net',                              // by Rigoberto Oakley
4228
4229                 // M
4230                 '.macro-society.com',                   // by Venessa Hodgson
4231                 '.marthasflavorfest.com',               // by Ahmad Lau
4232                 '.martin-rank.com',                             // by Cathleen Crist
4233                 '.maryandfrank.org',                    // by Theodore Apodaca
4234                 '.masterkwonhapkido.com',               // by Misty Graham
4235                 '.maxrpm-demo.com',                             // by Cristal Cho
4236                 '.mechanomorphic.com',                  // by Stanford Crow
4237                 '.mepublishing.net',                    // by Karly Fleenor
4238                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4239                 '.metwahairports.com',                  // by Nan Kitchen
4240                 '.middle-eastnews.com',                 // by Tybalt Altmann
4241                 '.mikepelchy.com',                              // by Sherly Pearson
4242                 '.milpa.org',                                   // by Nelly Aguilera
4243                 '.modayun.com',                                 // by Camilla Velasco
4244                 '.moonstoneerp.com',                    // by Garret Salmon
4245                 '.morosozinho.com',                             // by Lenore Tovar
4246                 '.morphadox.com',                               // by Hung Zielinski
4247                 '.moscasenlared.com',                   // by Tera Gant
4248                 '.sdjavasig.com',                               // by Gia Swisher
4249                 '.mpeg-radio.com',                              // by Sincere Beebe
4250                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4251                 '.mtseniorcenter.org',                  // by Frederic Ortega
4252                 '.mysteryclips.com',                    // by Edward Ashford
4253
4254                 // N
4255                 '.naavs.org',                                   // by Yuridia Gandy
4256                 '.naval-aviation.org',                  // by Roselle Campo
4257                 '.navigare-ischia.com',                 // by Arielle Coons
4258                 '.ncredc.org',                                  // by Brenda Nye
4259                 '.neonmotorsports.com',                 // by Giovanna Vue
4260                 '.nf-ny.com',                                   // by Yadira Hibbard
4261                 '.ngfdyqva.com',                                // by Emiliano Samples
4262                 '.nicozone.com',                                // by Blaine Shell
4263                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4264                 '.npawny.org',                                  // by Willard Murphy
4265                 '.nysdoed.org',                                 // by Elric Delgadillo
4266                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4267                 '.nytech-ir.com',                               // by Adrien Beals
4268
4269                 // O
4270                 '.oadmidwest.com',                              // by Gavin Kaplan
4271                 '.oarauto.com',                                 // by Susann Merriman
4272                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4273                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4274                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4275                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4276                 '.online-pills-24x7.biz',               // by Aide Hallock
4277                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4278                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4279                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4280                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4281                 '.otterbayweb.com',                             // by Maxwell Irizarry
4282
4283                 // P
4284                 '.painting-technique.us',               // by Bryanna Tooley
4285                 '.pakamrcongress.com',                  // by Bryce Summerville
4286                 '.patabney.com',                                // by Kailyn Slone
4287                 '.parde.org',                                   // by Ellie Yates
4288                 '.participatingprofiles.com',   // by Jaelynn Meacham
4289                 '.partnershipconference.org',   // by Alla Floyd
4290                 '.pet-stars.com',                               // by Carmon Luevano
4291                 '.planning-law.org',                    // by Trista Holcombe
4292                 '.ppawa.com',                                   // by Evonne Scarlett
4293                 '.precisionfilters.net',                // by Faustina Fell
4294
4295                 // Q
4296                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4297                 '.quick-debt-consolidation.net',        // by Lala Marte
4298                 '.quicktvr.com',                                // by Vernell Crenshaw
4299
4300                 // R
4301                 '.radicalsolutions.org',                // by Reece Medlin
4302                 '.randallburgos.com',                   // by Bradly Villa
4303                 '.rcassel.com',                                 // by Janiah Gallant
4304                 '.rearchitect.org',                             // by Marcus Gaudet
4305                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4306                 '.reprisenashville.com',                // by Hester Khan
4307                 '.reptilemedia.com',                    // by Alicia Patel
4308                 '.resellers2000.com',                   // by Dedra Kennedy
4309                 '.reverse-billing.com',                 // by Lazaro Gluck
4310                 '.richcapaldi.com',                             // by Kya Haggard
4311                 '.richformissouri.com',                 // by Alanna Elston
4312                 '.robstraley.com',                              // by Leida Bartell
4313                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4314                 '.rpgbbs.com',                                  // by Leonel Peart
4315                 '.ruralbusinessonline.org',             // by Lynsey Watters
4316                 '.ruwomenscenter.org',                  // by Vince Mclemore
4317                 '.ryanjowens.com',                              // by Janine Smythe
4318
4319                 // S
4320                 '.sagarmathatv.org',                    // by Liam Funke
4321                 '.sakyathubtenling.org',                // by Liane Falgout
4322                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4323                 '.sandishaven.com',                             // by Lino Soloman
4324                 '.scienkeen.com',                               // by Liza Navarra
4325                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4326                 '.severios.com',                                // by Isa Steffen
4327                 '.sexual-hot-girls.com',                // by Viviana Bolton
4328                 '.shakespearelrc.com',                  // by Luciana Weaver
4329                 '.shashran.org',                                // by Adriel Humphries
4330                 '.shoes-shop.us',                               // by Austen Higginbotham
4331                 '.skagitvalleybassanglers.com', // by Necole Thiele
4332                 '.skinsciencesalon.com',                // by Nena Rook
4333                 '.smartalternative.net',                // by Nicki Lariviere
4334                 '.sml338.org',                                  // by Nickole Krol
4335                 '.smogfee.com',                                 // by Sienna Kimble
4336                 '.sneakers-e-shop.info',                // by Nikki Fye
4337                 '.spacewavemedia.com',                  // by Thanh Gast
4338                 '.softkernel.com',                              // by Nicol Hummer
4339                 '.stjoanmerrillville.com',              // by Hunter Beckham
4340                 '.strelinger.com',                              // by Arron Highsmith
4341                 '.striking-viking.com',                 // by Kylie Endsley
4342                 '.sunnydeception.org',                  // by Amaya Llora
4343                 '.sunzmicro.com',                               // by Goddard Arreola
4344                 '.sv-iabc.org',                                 // by Braden Buck
4345                 '.sykotick.com',                                // by Pierce Knecht
4346
4347                 // T
4348                 '.tbody.net',                                   // by Ormond Roman
4349                 '.the-pizzaman.com',                    // by Mario Ramsey
4350                 '.the-shoes.us',                                // by Alejandro Gaffney
4351                 '.theborneocompany.com',                // by Bryanna Tooley
4352                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4353                 '.thehomeschool.net',                   // by September Concepcio
4354                 '.thenewlywed.com',                             // by Allegra Marra
4355                 '.tigerspice.com',                              // by Denis Mosser
4356                 '.tnaa.net',                                    // by Jasmine Andress
4357                 '.top-finance-sites.com',               // by Maryann Doud
4358                 '.tradereport.org',                             // by Bettie Sisk
4359                 '.transmodeling.com',                   // by Martine Button
4360                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4361                 '.tsaoc.com',                                   // by Heriberto Mcfall
4362                 '.tsunamidinner.com',                   // by Nannie Richey
4363
4364                 // U
4365                 '.uhsaaa.com',                                  // by Risa Herbert
4366                 '.ultradeepfield.org',                  // by Bobby Ragland
4367                 '.umkclaw.info',                                // by Cammy Kern
4368                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4369                 '.usa-wolf.com',                                // by Jacklyn Morrill
4370                 '.usjobfair.com',                               // by Lorina Burchette
4371
4372                 // V
4373                 '.vacancesalouer.com',                  // by Loris Bergquist
4374                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4375                 '.valleylibertarians.org',              // by Lena Massengale
4376                 '.vanderbiltevents.com',                // by Gannon Krueger
4377                 '.vanwallree.com',                              // by Michelina Donahue
4378                 '.vcertificates.com',                   // by Hyun Lamp
4379                 '.vonormytexas.us',                             // by Suzette Waymire
4380
4381                 // W
4382                 '.washingtondc-areahomes.net',  // by Ailene Broome
4383                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4384                 '.wolsaoh.org',                                 // by Daniela English
4385                 '.worldpropertycatalog.com',    // by Aray Baxter
4386
4387                 // Y
4388                 '.yankee-merchants.com',                // by Jackson Hinojosa
4389                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4390                 '.yourdomainsource.com',                // by Deems Weingarten
4391
4392                 // Z
4393                 '.zkashan.com',                                 // by Evan Light
4394                 '.zockclock.com',                               // by Dorothea Guthrie
4395         ),
4396         'Something-Drugs' => array(
4397                 // Drugs / Pills / Diet
4398                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4399                 '.abdelghani-shady.com',                // by Elly Alton
4400                 '.bangbangfilm.com',                    // by Davin Chou
4401                 '.centroantequera.com',                 // by Keon Kwiatkowski
4402                 '.champagne-cellar.info',               // by Kandis Rizzo
4403                 '.chix0r.org',                                  // by Christoper Baird
4404                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4405                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4406                 '.fast-cash-01.com',                    // by Edgar Oliver
4407                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4408                 '.fn-nato.com',                                 // by Donny Dunlap
4409                 '.gqyinran.com',                                // by Alejandro Parks
4410                 '.juris-net.com',                               // by Rachelle Bravo
4411                 '.leftpencey.com',                              // by Aileen Ashby
4412                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4413                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4414                 '.palaceroyale.net',                    // by Brycen Stebbins
4415                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4416                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4417                 '.yukissushi.com',                              // by Donell Hozier
4418         ),
4419         'Something-Others' => array(
4420                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4421                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4422         ),
4423         'Something-NoApp' => array(
4424                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4425                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4426                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4427                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4428                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4429         ),
4430         'Cortez and family' => array(
4431                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4432                 '.dronadaarsujf.info',  // by Cortez
4433                 '.fromnananaref.info',  // by Cortez
4434                 '.goorkkjsaka.info',    // by Cortez
4435                 '.jkdfjjkkdfe.info',    // by Rico
4436                 '.jkllloldkjsa.info',   // by Cortez
4437                 '.nnjdksfornms.info',   // by Rico
4438                 '.mcmdkkksaoka.info',   // by Cortez
4439                 '.srattaragfon.info',   // by Cortez
4440                 '.yreifnnonoom.info',   // by Rico
4441                 '.zjajjsvgeuds.info',   // by Cortez
4442         ),
4443         'admin at ematuranza.com' => array(
4444                 '.ancorlontano.com',
4445                 '.dentroallago.com',
4446                 '.digiovinezza.com',
4447                 '.ematuranza.com',
4448                 '.ilfango.com',
4449                 '.nullarimane.com',
4450                 '.questaimmensa.com',
4451                 '.tentailvolo.com',
4452                 '.unatenerezza.com',
4453                 '.volgondilettose.com',
4454         ),
4455         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4456                 '.bid99df.info',
4457                 '.bj498uf.info',
4458                 '.edeuj84.info',
4459                 '.f4mfid.info',
4460                 '.g4vf03a.info',
4461                 '.j09j4r.info',
4462                 '.jv4r8hv.info',
4463                 '.k43sd3.info',
4464                 '.k4r84d.info',
4465                 '.k4rvda.info',
4466                 '.k4v0df.info',
4467                 '.k903os.info',
4468                 '.k9df93d.info',
4469                 '.kv94fd.info',
4470                 '.ksjs93.info',
4471                 '.l0ks03.info',
4472                 '.l9u3jc.info',
4473                 '.lv043a.info',
4474                 '.nh94h9.info',
4475                 '.m94r9d.info',
4476                 '.s87fvd.info',
4477                 '.v3k0d.info',
4478                 '.v4r8j4.info',
4479                 '.vf044s.info',
4480                 '.vj49rs.info',
4481                 '.vk498j.info',
4482                 '.u03jow.info',
4483         ),
4484         'Nikhil and Brian' => array(
4485                 // by Brian Dieckman (info at iudndjsdhgas.info)
4486                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4487                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4488                 '.ihfjeswouigf.info',   // by Brian, / was not found
4489                 '.iudndjsdhgas.info',   // by Brian, / was not found
4490                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4491                 '.jiatdbdisut.info',    // by Brian, / was not found
4492                 '.jkfierwoundhw.info',  // by Brian, / was not found
4493                 '.kfjeoutweh.info',             // by Brian, / was not found
4494                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4495                 '.oudjskdwibfm.info',   // by Brian, / was not found
4496                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4497                 '.itxbsjacun.info',             // by Nikhil, / was not found
4498                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4499                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4500                 '.najedncdcounrd.info', // by Nikhil, / was not found
4501                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4502                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4503                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4504                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4505                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4506                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4507                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4508                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4509                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4510         ),
4511         'wealth777 at gmail.com' => array(      // by Henry Ford
4512                 '.brutal-forced.com',
4513                 '.library-bdsm.com',
4514                 '.rape-fantasy.us',
4515         ),
4516         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4517                 '.purerotica.com',
4518                 '.richsex.com',
4519                 '.servik.net',
4520                 '.withsex.com',
4521         ),
4522         'dreamteammoney.com' => array(
4523                 '.dreamteammoney.com',  // dtmurl.com related
4524                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4525         ),
4526         'KLIK VIP Search and family' => array(
4527                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4528                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4529                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4530                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4531                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4532                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4533                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4534         ),
4535         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4536                 '.antivirs.info',
4537                 '.antivirus1.info',
4538                 '.antivirus2.info',
4539         ),
4540         'wasam at vangers.net and family' => array(
4541
4542                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4543                 '.bahatoca.org',
4544                 '.digestlycos.org',
4545                 '.educativaanale.info',
4546                 '.guildstuscan.org',
4547                 '.isaakrobbins.info',
4548                 '.isfelons.org',
4549                 '.lvwelevated.org',
4550                 '.macphersonaca.org',
4551                 '.markyaustrian.org',
4552                 '.michelepug.org',
4553                 '.opalbusy.info',
4554                 '.quijotebachata.info',
4555                 '.salthjc.info',
4556                 '.shogunnerd.info',
4557                 '.solarissean.org',
4558                 '.sparkgsx.info',
4559                 '.tarzanyearly.org',
4560                 '.tulabnsf.org',
4561                 '.vaccarinos.org',
4562
4563                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4564                 '.e2007.info',
4565                 '.cmoss.info',
4566
4567                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4568                 '.finddesk.org',
4569                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4570                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4571                 '.rcatalog.org',
4572                 '.sbitzone.org',
4573
4574                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4575                 '.cheapns.org',
4576                 '.my-top.net',
4577                 '.sfind.net',
4578                 '.sspot.net',
4579                 '.suvfind.info',
4580
4581                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4582                 '.trumber.com',
4583
4584                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4585                 '.blogduet.org',
4586                 '.carelf.info',
4587                 '.cmagic.org',
4588                 '.cspell.org',
4589                 '.dspark.org',
4590                 '.dtonic.org',
4591                 '.mcharm.info',
4592                 '.mslook.info',
4593                 '.phpdinnerware.info',
4594                 '.rnation.org',
4595                 '.uzing.org',
4596
4597                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4598                 '.allbar.info',
4599                 '.allersearch.org',
4600                 '.allzoom.org',
4601                 '.dynall.org',
4602                 '.fastopia.org',
4603                 '.offasfast.info',
4604                 '.rblast.org',
4605                 '.rchistes.info',
4606                 '.rette.org',
4607                 '.shufflequince.org',
4608                 '.suvlook.org',
4609
4610                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4611                 '.290cabeza.org',
4612                 '.bossierpainted.org',
4613                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4614                 '.definekonica.info',   // Admin: tvaals at vangers.net
4615                 '.gradetelemundo.info',
4616                 '.hydraulickin.info',
4617                 '.indicadorestmj.info',
4618                 '.keeleykincaid.org',
4619                 '.kleenbowser.info',
4620                 '.pipnickname.info',
4621                 '.pacolily.org',
4622                 '.redeemtrabalho.info',
4623                 '.scanmakerchua.info',
4624                 '.titanmessina.info',
4625                 '.tragratuit.org',
4626                 '.yeareola.info',
4627         ),
4628         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4629                 '.canadianmedsworld.info',      // 84.252.133.112
4630                 '.tabsdrugstore.info',          // 84.252.133.114
4631                 '.tabsstore.info',                      // 84.252.133.114
4632                 '.topcholesterol.info',         // 84.252.133.132
4633         ),
4634         'be.cx' => array(
4635                 '.be.cx',
4636                 '.ca.cx',
4637         ),
4638         'john780321 at yahoo.com' => array(     // by John  Brown
4639                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4640                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4641                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4642         ),
4643         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4644                 '.bertela.info',
4645                 '.forblis.info',
4646                 '.frenallo.info',
4647                 '.goyahoo.info',
4648                 '.herbak.info',
4649                 '.kiokast.info',
4650                 '.nerenok.info',
4651                 '.pestgets.info',
4652                 '.snukker.info',
4653                 '.thegetspons.info',
4654         ),
4655         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4656                 '.bobop.info',
4657                 '.kwwwe.info',
4658                 '.piikz.info',
4659                 '.moosm.info',
4660                 '.vvvw.info',
4661         ),
4662         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4663                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4664                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4665                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4666                 '.jplingood.com',       // 125.65.112.15
4667                 '.linenew.com',         // 203.191.148.96
4668                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4669                 '.yzlin.com',           // 220.162.244.36
4670         ),
4671         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4672                 '.1111mb.com',
4673                 '.2sex18.com',
4674                 '.69porn1.com',
4675         ),
4676         'ECTechnology' => array(
4677                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4678                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4679                 '.automouse.jp',
4680         ),
4681         'lyqz at 21cn.com' => array(
4682                 '.japangame1.com',
4683                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4684                 '.livedoor1.com',
4685                 '.ragnarokonline1.com',
4686                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4687         ),
4688         'kingrou at hotmail.com' => array(      // by yangjianhe
4689                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4690                 '.453787.com',
4691         ),
4692         'anpaul541000 at 163.com' => array(     // by su qiuqing
4693                 '.cetname.com',                 // 222.77.185.87
4694                 '.jpgamer.net',                 // 220.247.157.106
4695                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4696                 '.lovejptt.com',                // 222.77.185.87
4697                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4698                 '.playncsoft.net',              // 220.247.157.106
4699         ),
4700         'abc00613 at 163.com' => array( // by guo yong
4701                 '.avtw1068.com',                // 64.74.223.11
4702                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4703                 '.djkkk66990.com',              // 68.178.232.99
4704                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4705         ),
4706         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4707                 '.cmonfofo.com',
4708                 '.discutbb.com',
4709         ),
4710         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4711                 '.preca.info',
4712                 '.skiaggi.info',
4713                 '.scrianal.info',
4714                 '.tageom.info',
4715         ),
4716         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4717                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4718                 '.inpros.net',                  // 202.181.98.79
4719                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4720         ),
4721         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4722                 '.ec51.com',
4723                 '.ec51.net',
4724         ),
4725         'abbevillelaties at yahoo.fr etc' => array(
4726                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4727                 '.ringtones-rate.com',
4728                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4729                 '.special-ringtones.net',
4730         ),
4731         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4732                 '.1sgsc.info',
4733                 '.3h4r89h.info',
4734                 '.3v44dd.info',
4735                 '.6rfuh6.info',
4736                 '.84hd8.info',
4737                 '.94bui89.info',
4738                 '.agysb3.info',
4739                 '.asdjhs.info',
4740                 '.bcvnrth.info',
4741                 '.bheb4r.info',
4742                 '.bhiuno.info',
4743                 '.biug7g.info',
4744                 '.bjb5f4.info',
4745                 '.bob8g7g.info',
4746                 '.br89bdd.info',
4747                 '.bsa3h.info',
4748                 '.bsieb8.info',
4749                 '.basbiubf.info',
4750                 '.bobwwfs2.info',
4751                 '.ciuv9t.info',
4752                 '.dbmdx4.info',
4753                 '.dbrjms.info',
4754                 '.dbtcm.info',
4755                 '.dff9ghu.info',
4756                 '.dfshbb.info',
4757                 '.dgd4ffdh.info',
4758                 '.dh3ge.info',
4759                 '.duc86jh.info',
4760                 '.ergth45.info',
4761                 '.f78bf7ffb.info',
4762                 '.gbdfbo4.info',
4763                 '.ger45.info',
4764                 '.gnvnrrg.info',
4765                 '.h47he7.info',
4766                 '.h488hbd4.info',
4767                 '.hd72b94.info',
4768                 '.he74b7.info',
4769                 '.hfujfnr.info',
4770                 '.husdhd42.info',
4771                 '.hbwje.info',
4772                 '.itg87gji.info',
4773                 '.iugiougiuh.info',
4774                 '.jhd4f4aa.info',
4775                 '.jshd73.info',
4776                 '.krhpgd.info',
4777                 '.lyihjn.info',
4778                 '.nfyjnfj.info',
4779                 '.oihbv.info',
4780                 '.os44fvs.info',
4781                 '.sdfsd3.info',
4782                 '.sdiug4.info',
4783                 '.sdkufhh.info',
4784                 '.sdugb4f.info',
4785                 '.skdbf.info',
4786                 '.sipiv78.info',
4787                 '.sudbfb.info',
4788                 '.tymbbmy.info',
4789                 '.uilhjk.info',
4790                 '.vi87vub.info',
4791                 '.vfuyf87f.info',
4792                 '.viyvvj877.info',
4793                 '.w7fc8eu.info',
4794                 '.wefg43g.info',
4795                 '.xbrch78e.info',
4796                 '.ywsfu.info',
4797                 '.zxcbiv.info',
4798         ),
4799         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4800                 '.abofios.info',
4801                 '.amlekfn.info',
4802                 '.amlkdoie.info',
4803                 '.amkslewq.info',
4804                 '.alemfu.info',
4805                 '.aloweks1.info',
4806                 '.alposd3.info',
4807                 '.bamhpb.info',
4808                 '.bhjkb.info',
4809                 '.bjqnj.info',
4810                 '.cvcxcbhpr.info',
4811                 '.czoypaiat.info',
4812                 '.dbpmgc.info',
4813                 '.dgvogrxs.info',
4814                 '.dldksf.info',
4815                 '.dlor6za.com',
4816                 '.dmkoiew.info',
4817                 '.eewrefr.info',
4818                 '.eladne.info',
4819                 '.elksem.info',
4820                 '.elwpod.info',
4821                 '.emlwkdnr.info',
4822                 '.esgmyqk.info',
4823                 '.fauqv.info',
4824                 '.fgxkgy.info',
4825                 '.fhryns.info',
4826                 '.fj38n4g.info',
4827                 '.fjnesal.info',
4828                 '.fmkfoe.info',
4829                 '.fqkcfldtr.info',
4830                 '.fwcigpdwz.info',
4831                 '.fyhik.info',
4832                 '.glrkje.info',
4833                 '.gwkslfq.info',
4834                 '.gwjracvh.info',
4835                 '.hihopepe.info',
4836                 '.hwlyggbkw.info',
4837                 '.hmwbfw.info',
4838                 '.hthyeb.info',
4839                 '.iaofkyaw.info',
4840                 '.uldkxuiw.info',
4841                 '.is7c6w4.info',
4842                 '.ivuddhdk.info',
4843                 '.jgfndjem.info',
4844                 '.jgmdlek.info',
4845                 '.jkrnvmpad.info',
4846                 '.jqujn.info',
4847                 '.jvgmmba.info',
4848                 '.kbaur.info',
4849                 '.kgjindptv.info',
4850                 '.kleo7s9.info',
4851                 '.lezfgam.info',
4852                 '.lfaasy.info',
4853                 '.ljpdjki.info',
4854                 '.lmnpis.info',
4855                 '.lpzcu2f.info',
4856                 '.lrptn.info',
4857                 '.lursqt.info',
4858                 '.mgkabviil.info',
4859                 '.mhtknjyt.info',
4860                 '.mksuuku.info',
4861                 '.mkyky.info',
4862                 '.mloaisn.com',
4863                 '.mlsiknd.info',
4864                 '.mthqz.info',
4865                 '.nnooq.info',
4866                 '.nohhylvc.info',
4867                 '.nuprndsye.info',
4868                 '.nsoelam.info',
4869                 '.nykobczv.info',
4870                 '.nzuhli.info',
4871                 '.odyqzgylr.info',
4872                 '.oidiau.info',
4873                 '.oitzkw.info',
4874                 '.okdmrpz.info',
4875                 '.ooinziti.info',
4876                 '.ortqr.info',
4877                 '.osmkpnekv.info',
4878                 '.ozkzfih.info',
4879                 '.p3ix8wc.com',
4880                 '.piwyt.info',
4881                 '.pfkijrm.info',
4882                 '.pjktcragi.info',
4883                 '.pleoz.info',
4884                 '.plvqm73.info',
4885                 '.pqyrem.info',
4886                 '.qipgqd.info',
4887                 '.qlewixu.com',
4888                 '.qmlskme.info',
4889                 '.qtuff.info',
4890                 '.quoga.info',
4891                 '.quqz.info',
4892                 '.qzxuw.info',
4893                 '.rcaidegp.info',
4894                 '.rlkmdi.info',
4895                 '.rnsoiov.info',
4896                 '.rnwlams.info',
4897                 '.rprgkgqld.info',
4898                 '.rubqvxrn.info',
4899                 '.spqxstl.info',
4900                 '.syckoqjql.info',
4901                 '.tbirb.info',
4902                 '.thalc34.info',
4903                 '.tiabq.info',
4904                 '.tszzpjr.info',
4905                 '.tyjdyn.info',
4906                 '.twgugpns.info',
4907                 '.uaezrqp.info',
4908                 '.udlkasu.info',
4909                 '.uejncyf.info',
4910                 '.ukvflb.info',
4911                 '.ugsuv.info',
4912                 '.ukhgpcp.info',
4913                 '.urprzn.info',
4914                 '.uuhememkw.info',
4915                 '.yalc7en.info',
4916                 '.ybuid.info',
4917                 '.yhdkgfob.info',
4918                 '.ymenq.info',
4919                 '.ynlyb.info',
4920                 '.vieatlubk.info',
4921                 '.vltcaho.info',
4922                 '.wlamsiek.info',
4923                 '.wlerp.info',
4924                 '.wlmtshzi.info',
4925                 '.wmlkams.info',
4926                 '.wprqd.info',
4927                 '.wpyspszi.info',
4928                 '.xdscc.info',
4929                 '.xdvy.info',
4930                 '.xeypku.info',
4931                 '.xsrxh.info',
4932                 '.xwjyrpfe.info',
4933                 '.yxcqw.info',
4934                 '.zhbktrh.info',
4935                 '.zspepn.info',
4936                 '.zsxtz.info',
4937         ),
4938         'survi at poczta.fm and smiley' => array(
4939                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4940                 '.ppert.info',
4941                 '.pperta.info',
4942                 '.pperts.info',
4943                 '.pprtuis.info',
4944                 '.13iuey.info',         // ":>"
4945                 '.13jkhs.info',
4946                 '.13lksa.info',
4947                 '.13rxtx.info',
4948                 '.13slkd.info',
4949                 '.13zaer.info',
4950         ),
4951         'admin at esemeski.com' => array(       // by Jan Kalka
4952                 '.kxils.info',
4953                 '.kuaph.info',
4954                 '.lncdc.info',
4955                 '.lsqpd.info',
4956                 '.mczed.info',
4957                 '.npous.info',
4958                 '.obgju.info',
4959         ),
4960         'LiquidNetLimited.com' => array(
4961                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4962
4963                 // FateBack.com related
4964                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4965                 '.bebto.com',
4966                 '.fateback.com',
4967                 '.undonet.com',
4968                 '.yoll.net',
4969
4970                 // 50webs.com                   // 64.72.112.10
4971                 // dns2.50webs.com              // 64.72.112.11
4972                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4973                 // dns2.freehostia.com  // 64.72.112.13
4974                 // serv3.freehostia.com // 64.72.112.14
4975                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4976                 // mail.50webs.com              // 64.72.112.26
4977                 // supremecenter41.com  // 64.72.112.52
4978                 // 50webs2.50webs.com   // 64.72.112.89
4979                 // supremecenter39.com  // 64.72.112.103
4980
4981                 // by LiquidNet Ltd. (support at propersupport.com)
4982                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
4983                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
4984                         'duoservers.com',               // 216.65.1.130
4985
4986                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
4987         ),
4988         'domains at agava.com' => array(
4989                 '.h18.ru',
4990                 '.hut1.ru',
4991         ),
4992         'wlmx009 at hotmail.com' => array(
4993                 '.123lineage.com',
4994                 '.ff11-info.com',
4995                 '.lastlineage.com',
4996                 '.lineage2-ol.com',
4997                 '.lineage2006.com',
4998                 '.lineagefirst.com',
4999         ),
5000         'Zettahost.com' => array(
5001                 '.atspace.biz',         // sales at zettahost.com
5002                 '.atspace.com',         // abuse at zettahost.com
5003                 '.atspace.name',        // NS atspace.com
5004                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5005                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5006         ),
5007         'hlq9814 at 163.com' => array(
5008                 '.kotonohax.com',               // by ling bao
5009                 '.ragnarox.mobi',               // by lin bao, *.exe download
5010                 '.rokonline-jp.com',    // by hang long
5011         ),
5012         '77ch.jp' => array(
5013                 '.77ch.jp',
5014                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5015         ),
5016         'serchportal at mail.ru' => array(      // by Namu Adin
5017                 '.43fert.info',
5018                 '.belis.info',
5019                 '.bonu.info',
5020                 '.chelsite.info',
5021                 '.chparael.info',
5022                 '.cool9f.info',
5023                 '.dada2.info',
5024                 '.dorplanete.info',
5025                 '.dormonde.info',
5026                 '.dorprojet.info',
5027                 '.faciledor.info',
5028                 '.fastsearchgroup.info',
5029                 '.gerta0.info',
5030                 '.getse.info',
5031                 '.gopvl.info',
5032                 '.knopki.info',
5033                 '.propidor.info',
5034                 '.quicksearchnet.info',
5035                 '.ret5.info',
5036                 '.slimfastsearch.info',
5037                 '.virtualpvl.info',
5038                 '.vpvla.info',
5039                 '.xjdor.info',
5040                 '.zhopki.info',
5041         ),
5042         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5043                 '*.444mb.com',          // Free hosting
5044                 'urlnip.com',           // Redirection
5045         ),
5046         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5047                 '.1fasttimesatnau.info',
5048                 '.1freecybersex.info',
5049                 '.1freexxxcomics.info',
5050                 '.1fuckingmywife.info',
5051                 '.1pornpreview.info',
5052                 'www.ru',                                       // by (service at demos.ru), redirection
5053         ),
5054         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5055                 '.adultschat.info',
5056                 '.livecamonline.info',
5057                 '.webcam4u.info',
5058                 '.younghot.info',
5059         ),
5060         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5061                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5062
5063                 // 209.51.196.242
5064                 '.22web.net',
5065                 '.2kool4u.net',
5066                 '.9skul.com',
5067                 '.alojalo.info',
5068                 '.byet.net',
5069                 '.byethost2.com',
5070                 '.byethost3.com',
5071                 '.byethost4.com',
5072                 '.byethost5.com',
5073                 '.byethost6.com',
5074                 '.byethost7.com',
5075                 '.byethost8.com',
5076                 '.byethost9.com',
5077                 '.byethost10.com',
5078                 '.byethost11.com',
5079                 '.byethost12.com',
5080                 '.byethost13.com',
5081                 '.byethost14.com',
5082                 '.byethost15.com',
5083                 '.byethost16.com',
5084                 '.byethost17.com',
5085                 '.byethost18.com',
5086                 '.headshothost.net',
5087                 '.hostwq.net',
5088                 '.mega-file.net',
5089                 '.truefreehost.com',
5090
5091                 '.ifastnet.com',        // 209.51.196.243
5092
5093                 // 209.190.16.82(mx1.byet.org)
5094                 '.1sthost.org',
5095                 '.4sql.net',
5096                 '.byet.org',
5097                 '.hyperphp.com',
5098                 '.kwikphp.com',
5099                 '.my-php.net',
5100                 '.my-place.us',
5101                 '.my-webs.org',
5102                 '.netfast.org',
5103                 '.php0h.com',
5104                 '.php1h.com',
5105                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5106                 '.phpnet.us',
5107                 '.prohosts.org',
5108                 '.pro-php.org',
5109                 '.prophp.org',
5110                 '.sprinterweb.net',
5111                 '.swiftphp.com',
5112                 '.xlphp.net',
5113
5114                 // 209.190.16.83(mx2.byet.org)
5115                 '.instant-wiki.net',
5116
5117                 // 209.190.16.84(mx3.byet.org)
5118
5119                 // 209.190.16.85(mx4.byet.org)
5120                 '.instant-blog.net',
5121                 '.instant-forum.net',
5122
5123                 '.byethost.com',                        // 209.190.18.138
5124         ),
5125         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5126                 '.analmoviesite.info',
5127                 '.bestgirlssex.info',
5128                 '.boxvagina.info',
5129                 '.cyberlivegirls.info',
5130                 '.hotredgirls.info',
5131                 '.forsexlove.info',
5132                 '.hotnudezone.info',
5133                 '.hotredpussy.info',
5134                 '.lesbians-live.info',
5135                 '.lesbians-on-cam.info',
5136                 '.onlinegirlssite.info',
5137                 '.sexloveonline.info',
5138                 '.teensexcard.info',
5139                 '.teensexdirect.info',
5140                 '.topnudesite.info',
5141                 '.vaginafree.info',
5142                 '.webcam-show.info',
5143                 '.webcamshow.info',
5144                 '.youngsexchat.info',
5145                 '.yourcumshot.info',
5146         ),
5147         'stocking.club at gmail.com' => array(
5148                 '.adulthotmodels.com',          // by David Zajwzran
5149                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5150                 '.cash-call.info',                      // by David Theissen
5151                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5152                 '.cheap-online-viagra.info',    // by David Theissen
5153                 '.drugcleansing.net',           // by David Zajwzran
5154                 '.men-health-zone.com',         // by David Theissen
5155                 '.purchase-viagra.info',        // by David Theissen
5156                 '.realdrunkengirls.biz',        // by David Theissen
5157                 '.sextoyslife.com',                     // by David Zajwzran
5158                 '.sexysubjects.info',           // by David Zajwzran
5159                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5160                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5161                 '.travelcardsite.info',         // by David Theissen
5162         ),
5163         'lustiq at p5com.com' => array(
5164                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5165                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5166         ),
5167         'web at 6jy.com' => array(
5168                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5169                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5170         ),
5171         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5172                 '.auto-fgen.info',
5173                 '.fast-marketing.info',
5174                 '.from-usa.info',
5175                 '.generic-pharm.info',
5176                 '.pharm-directory.info',
5177                 '.popular-people.info',
5178                 '.safe-health.info',
5179                 '.star-celebrities.info',
5180                 '.super-home-biz.info',
5181                 '.top5-auto.info',
5182                 '.top5-cars.info',
5183                 '.vip-furniture.info',
5184                 '.vip-pc.info',
5185                 '.vip-pets.info',
5186         ),
5187         'abuse at search-store.org' => array(
5188                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5189         ),
5190         'Leading Edge Marketing Inc.' => array(
5191                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5192                 '.abemedical.com',
5193                 '.attractwomennow.com',
5194                 '.bettersexmall.com',
5195                 '.buymaxoderm.com',
5196                 '.buyvprx.com',
5197                 '.genf20.com',
5198                 '.infinityhealthnews.com',
5199                 '.istnewsletter.com',
5200                 '.leadingedgecash.com',
5201                 '.leadingedgeherbals.com',
5202                 '.leadingedgevipsonly.com',
5203                 '.lecash.com',
5204                 '.leminfo.com',
5205                 '.proextendersystem.com',
5206                 '.provestra.com',
5207                 '.semenax.com',
5208                 '.shavenomore.com',
5209                 '.theedgenewsletter.com',
5210                 '.vigorelle.com',
5211                 '.vigrx.com',
5212                 '.vigrxplus.com',
5213                 '.wbstnewsletter.com',
5214         ),
5215         'clickx at bk.ru' => array(     // by Alexey Enrertov
5216                 '.coolget*.info' =>
5217                         '#^(?:.*\.)?' . 'coolget' .
5218                         '(?:bus|find|news|php|place|post|srch)' .
5219                         '\.info$#',
5220                 '.coolgirl*.info' =>
5221                         '#^(?:.*\.)?' . 'coolgirl' .
5222                         '(?:apple|fish|search)' .
5223                         '\.info$#',
5224                 '.coolmeet*.info' =>
5225                         '#^(?:.*\.)?' . 'coolmeet' .
5226                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5227                         '\.info$#',
5228                 '.cool**.info' =>
5229                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5230                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5231                         '\.info$#',
5232                 '.freseasy*.info' =>
5233                         '#^(?:.*\.)?' . 'freseasy' .
5234                         '(?:apple|click|find|fish|post|search)' .
5235                         '\.info$#',
5236                 '.fres**.info' =>
5237                         '#^(?:.*\.)?' .
5238                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5239                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5240                         '\.info$#',
5241                         // These are not found yet:
5242                         // fresgirlsrch.info
5243                         // fresadultapple.info
5244                         // fresadultclick.info
5245                         // frestheplace.info
5246
5247                 // 66.232.113.44
5248                 '.nuhost.info',
5249                 '.susearch.info',
5250
5251                 // 66.232.126.74(hv94.steephost.com)
5252                 '.dilej.com',
5253                 '.fyvij.com',
5254                 '.howus.com',
5255                 '.jisyn.com',
5256                 '.kaxem.com',
5257                 '.mihug.com',
5258                 '.mobyb.com',
5259                 '.qidat.com',
5260                 '.qihek.com',
5261                 '.ryzic.com',
5262                 '.sasuv.com',
5263                 '.tuquh.com',
5264                 '.vehyq.com',
5265                 '.wezid.com',
5266                 '.wifuj.com',
5267                 '.xijyt.com',
5268                 '.zuqyn.com',
5269         ),
5270         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5271                 '.hitsearching.info',
5272                 '.hugeamountdata.info',
5273                 '.megafasthost.info',
5274                 '.real-big-host.info',
5275                 '.search4freez.info',
5276                 '.yasech.info',
5277
5278                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5279                 '.bymire.com',
5280
5281                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5282                 '.ligiwa.com',
5283         ),
5284         'ice--man at mail.ru related' => array(
5285                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5286                 '.bestcreola.com',
5287                 '.crekatierra.com',
5288                 '.creolafire.com',
5289                 '.crolik.com',
5290                 '.croller.cn',
5291                 '.ecrmx.com',
5292                 '.eflashpoint.com',
5293                 '.exoticmed.com',
5294                 '.feelview.com',
5295                 '.greatexotic.com',
5296                 '.icrtx.com',
5297                 '.icyhip.com',
5298                 '.icyiceman.com',
5299                 '.icypopular.com',
5300                 '.iflashpoint.com',
5301                 '.justmdx.com',
5302                 '.kiliusgroup.com',
5303                 '.klickerr.com',
5304                 '.klickerrworld.com',
5305                 '.kreolic.com',
5306                 '.margansitio.com',
5307                 '.margantierra.com',
5308                 '.mimargan.com',
5309                 '.oilkeys.com',
5310                 '.planetmdx.com',
5311                 '.thekeyse.com',
5312                 '.viewgreat.com',
5313                 '.yourcreola.com',
5314
5315                 // 69.46.23.48
5316                 '.bestkilius.com',
5317                 '.crekadirecto.com',
5318                 '.getflashsite.com',
5319                 '.sucreka.com',
5320                 '.superkilius.com',
5321
5322                 // 69.46.23.48 by bing-16 at ftunez.org
5323                 '.bovorup.cn',
5324                 '.litotar.cn',
5325                 '.nihydec.cn',
5326
5327                 // 66.232.112.175 by bing-32 at ftunez.org
5328                 '.lasyxy.cn',
5329
5330                 // 69.46.23.48 by clarkson-34 at ftunez.org
5331                 '.bumora.cn',
5332                 '.byxite.cn',
5333                 '.byxuqu.cn',
5334                 '.jadama.cn',
5335                 '.kybope.cn',
5336                 '.mefeki.cn',
5337                 '.mokiso.cn',
5338                 '.niqeme.cn',
5339                 '.pukafo.cn',
5340                 '.qesaxa.cn',
5341                 '.toxezi.cn',
5342                 '.tujudy.cn',
5343                 '.tutike.cn',
5344
5345                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5346                 '.cabino.cn',
5347                 '.cuwace.cn',
5348                 '.ferazi.cn',
5349                 '.gigywy.cn',
5350                 '.lapype.cn',
5351                 '.mewabe.cn',
5352                 '.pezegy.cn',
5353                 '.pyzuza.cn',
5354                 '.qypony.cn',
5355                 '.ropesy.cn',
5356                 '.wadyfe.cn',
5357
5358                 // 69.46.23.48 clarkson-58 at ftunez.org
5359                 '.becabe.cn',
5360                 '.biciqy.cn',
5361                 '.bezymu.cn',
5362                 '.cifori.cn',
5363                 '.ciwyxi.cn',
5364                 '.dobari.cn',
5365                 '.dusofe.cn',
5366                 '.dutyda.cn',
5367                 '.dykanu.cn',
5368                 '.fakexu.cn',
5369                 '.fylema.cn',
5370                 '.godymo.cn',
5371                 '.hyhaxy.cn',
5372                 '.ganosi.cn',
5373                 '.kuxyju.cn',
5374                 '.lacezy.cn',
5375                 '.lonyru.cn',
5376                 '.lycato.cn',
5377                 '.nykyby.cn',
5378                 '.qyhuko.cn',
5379                 '.redere.cn',
5380                 '.riwimu.cn',
5381                 '.wopary.cn',
5382                 '.xizity.cn',
5383                 '.xuxusa.cn',
5384
5385                 // 69.46.23.48 by entretov-32 at ftunez.org
5386                 '.cihuji.cn',
5387                 '.deqyve.cn',
5388                 '.genefa.cn',
5389                 '.gujyju.cn',
5390                 '.hasadu.cn',
5391                 '.hedomi.cn',
5392                 '.kecicy.cn',
5393                 '.kipabo.cn',
5394                 '.manunu.cn',
5395                 '.musoru.cn',
5396                 '.myvuna.cn',
5397                 '.pikybe.cn',
5398                 '.riqawo.cn',
5399                 '.rufuxy.cn',
5400                 '.vyfilu.cn',
5401                 '.xadule.cn',
5402                 '.zolaxe.cn',
5403                 '.zerixu.cn',
5404
5405                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5406                 '.dozoda.cn',
5407                 '.nemipu.cn',
5408
5409                 // 69.46.23.48 by jeremy-57 at ftunez.org
5410                 '.duzele.cn',
5411                 '.figede.cn',
5412                 '.fiwany.cn',
5413                 '.gyfalu.cn',
5414                 '.jepylo.cn',
5415                 '.nuqumy.cn',
5416
5417                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5418                 '.burahu.cn',
5419                 '.jydijy.cn',
5420                 '.komyby.cn',
5421                 '.najepa.cn',
5422                 '.pylobu.cn',
5423                 '.qofoly.cn',
5424                 '.sybuvi.cn',
5425                 '.vycexu.cn',
5426                 '.wotyqo.cn',
5427                 '.xudoli.cn',
5428
5429                 // 66.232.112.175 by entretov-86 at ftunez.org
5430                 '.faweji.cn',
5431                 '.jypaci.cn',
5432                 '.xozuso.cn',
5433
5434                 // 69.46.23.48 by miles-37 at ftunez.org
5435                 '.beqymo.cn',
5436                 '.ceqibi.cn',
5437                 '.dyraqo.cn',
5438                 '.qenedo.cn',
5439                 '.qurypa.cn',
5440                 '.siluvo.cn',
5441                 '.tujala.cn',
5442                 '.wukuwi.cn',
5443                 '.xenibo.cn',
5444                 '.xiculo.cn',
5445                 '.zabemu.cn',
5446
5447                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5448                 '.bevaka.cn',
5449                 '.fysyte.cn',
5450                 '.guxixu.cn',
5451                 '.hatoli.cn',
5452                 '.jitobu.cn',
5453                 '.juxeca.cn',
5454                 '.kifuhy.cn',
5455                 '.licila.cn',
5456                 '.mecomy.cn',
5457                 '.niryko.cn',
5458                 '.noxoco.cn',
5459                 '.qiwysu.cn',
5460                 '.tutysy.cn',
5461
5462                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5463                 '.gywiqe.cn',
5464                 '.jotapo.cn',
5465                 '.jywixa.cn',
5466
5467                 // '69.46.23.48 by sabrosky-60 at ftunez.org
5468                 '.bawegap.cn',
5469                 '.buremyl.cn',
5470                 '.cilybut.cn',
5471                 '.cutufek.cn',
5472                 '.defypyr.cn',
5473                 '.femaxij.cn',
5474                 '.gelejo.cn',
5475                 '.gocylyv.cn',
5476                 '.kehiqaq.cn',
5477                 '.ninyjit.cn',
5478                 '.ruroruw.cn',
5479                 '.vetehow.cn',
5480
5481                 // 69.46.23.48 sabrosky-85 at ftunez.org
5482                 '.banyla.cn',
5483                 '.bubaqu.cn',
5484                 '.bygage.cn',
5485                 '.dafozy.cn',
5486                 '.kaxyjo.cn',
5487                 '.makyle.cn',
5488                 '.naleto.cn',
5489                 '.pidele.cn',
5490                 '.poqexa.cn',
5491                 '.pymaqo.cn',
5492                 '.qupiqy.cn',
5493                 '.reqefy.cn',
5494                 '.sopocy.cn',
5495                 '.vuhexo.cn',
5496                 '.weryso.cn',
5497                 '.wubula.cn',
5498                 '.xufuxy.cn',
5499                 '.zuhyxu.cn',
5500
5501                 // 69.46.23.48 by tribiani-97 at ftunez.org
5502                 '.dyxorod.cn',
5503                 '.firywoz.cn',
5504                 '.jixezyx.cn',
5505                 '.joveraw.cn',
5506                 '.jowaxup.cn',
5507                 '.nodarej.cn',
5508                 '.pimijom.cn',
5509                 '.tugupeg.cn',
5510
5511                 // 66.232.112.175 by abuse-here at inbox.ru
5512                 '.catybe.cn',
5513                 '.jytame.cn',
5514                 '.wygete.cn',
5515         ),
5516         'nijeoi at hotmai.com' => array(
5517                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5518                 '.bowij.com',
5519                 '.bozib.com',
5520                 '.cavux.com',
5521                 '.dipov.com',
5522                 '.gumoz.com',
5523                 '.hakyb.com',
5524                 '.hehyv.com',
5525                 '.hepyt.com',
5526                 '.howoj.com',
5527                 '.jywaz.com',
5528                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5529                 '.kyheq.com',
5530                 '.kyzad.com',
5531                 '.qicad.com',
5532                 '.qubyd.com',
5533                 '.mocyq.com',
5534                 '.muloq.com',
5535                 '.myxim.com',
5536                 '.nufyp.com',
5537                 '.waqog.com',
5538                 '.wyduc.com',
5539                 '.xefyv.com',
5540                 '.xomej.com',
5541                 '.xomip.com',
5542                 '.xykyl.com',
5543                 '.zakuw.com',
5544                 '.zeliw.com',
5545                 '.zimev.com',
5546                 '.zipif.com',
5547
5548                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5549                 '.tycoco.com',
5550
5551                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5552                 '.pufeqa.com',
5553         ),
5554         'niichka at hotmail.com' => array(
5555                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5556                 '.aerosearch.info',
5557                 '.freader.info',
5558                 '.info4searchz.info',
5559                 '.nice-host.info',
5560                 '.realyfast.info',
5561                 '.resuts.info',
5562
5563                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5564                 '.bepoh.com',
5565                 '.gufiq.com',
5566                 '.kedyh.com',
5567                 '.pofyb.com',
5568                 '.rurid.com',
5569                 '.vucaj.com',
5570                 '.vuwir.com',
5571
5572                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5573                 '.bejefe.com',
5574
5575                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5576                 '.tidawu.com',
5577
5578                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5579                 '.rofuqa.com',
5580         ),
5581         'porychik at hot.ee' => array(  // by Igor
5582                 '.tedstate.info',       // "Free Web Hosting"
5583                 '.giftsee.com',
5584         ),
5585         'aofa at vip.163.com' => array(
5586                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5587                 '.5944.net',
5588         ),
5589         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5590                 '.maxrentcar.info',
5591                 '.newsonyericsson.info',
5592                 '.pornositeworld.biz',
5593                 '.rentcarweb.info',
5594                 '.xxxdomainsex.biz',
5595         ),
5596         'kopper1970 at gmail.com' => array(
5597                 '.cardealerall.info',           // by Green
5598                 '.donatecarsales.info',         // by Sipil
5599                 '.ringtonewilly.info',          // by Sipil
5600                 '.travelstraveling.info',       // by Chinik
5601                 '.viagrabuyonline.org',         // by Sipil
5602                 '.viagraorderbuy.com',          // by Anatol
5603                 '.worldcuptourism.info',        // by Sipil
5604         ),
5605         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5606                 '.globalinfoland.info',
5607                 '.goodlifesearch.info',
5608                 '.hotnetinfo.info',
5609                 '.hotpornmovies.org',
5610                 '.infopilot.info',
5611         ),
5612         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5613                 '.bang-bro.org',
5614                 '.datinghost.info',
5615                 '.hello-craulers.info',
5616                 '.free-blog-host.info',
5617                 '.sucking-boobs.info',
5618         ),
5619         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5620                 '.allcamsguide.info',
5621                 '.camerascams.info',
5622                 '.camerasera.info',
5623                 '.girlcamsworld.info',
5624                 '.hiddenlimocams.info',
5625                 '.redlivecams.info',
5626                 '.spycamsgear.info',
5627                 '.spycamssite.info',
5628                 '.supercamsusa.info',
5629                 '.thecamsnow.info',
5630         ),
5631         '87.242.116.81' => array(
5632                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5633                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5634                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5635                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5636                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5637         ),
5638         '208.70.75.153' => array(
5639                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5640                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5641                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5642                 '.cerc-on.info',
5643                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5644                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5645                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5646                 '.cerc-tr.info',
5647                 '.cerc-tw.info',
5648                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5649                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5650                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5651                 '.cerc-on.org',         // by cerca-one at ya.ru
5652                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5653                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5654                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5655                 '.cerc-tr.org',         // by cerca-one at ya.ru
5656                 '.cerc-tw.org',         // by cerca-one at ya.ru
5657                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5658                 '.cerca-fo.info',
5659                 '.cerca-no.info',
5660                 '.cerca-on.info',
5661                 '.cerca-sv.info',
5662                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5663                 '.cerca-te.info',
5664                 '.cerca-tr.info',
5665                 '.cerca-sx.org',
5666                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5667                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5668                 '.ricerca-fo.info',
5669                 '.ricerca-one.org',
5670                 '.ricerca-sv.org',
5671                 '.ricerca-sx.org',
5672                 '.ricerca-te.org',
5673                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5674                 '.subit01.org',
5675                 '.subit02.org',
5676                 '.subit03.org',
5677                 '.subit04.org',
5678                 '.subit05.org',
5679                 '.subit06.org',
5680                 '.subit01.info',
5681                 '.subit02.info',
5682                 '.subit03.info',
5683                 '.subit04.info',
5684                 '.subit05.info',
5685                 '.subit06.info',
5686         ),
5687         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5688                 '.5-base.com',
5689                 '.pharmacy-style.com',
5690         ),
5691         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5692                 '.ista-2006.ru',
5693                 '.wefas.ru',
5694         ),
5695         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5696                 '.tourismworldsite.info',
5697                 '.yourtourismtravel.info',
5698         ),
5699         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5700                 '.easyfindcar.info',
5701                 '.siteinfosystems.info',
5702         ),
5703         'smesh1155 at gmail.com' => array(
5704                 '.hospitalforyou.info',                 // by Gimmi
5705                 '.thephentermineonline.info',   // by Kipola
5706         ),
5707         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5708                 '.kiski.net.in',
5709                 '.pipki.org.in',
5710                 '.popki.ind.in',
5711                 '.siski.co.in',
5712         ),
5713         'tiptronikmike at mail.com' => array(
5714                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5715                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5716                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5717                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5718                 //'.i0sex.info',                // Michael
5719                 //'.i1sex.info',                // Michael
5720                 //'.i2sex.info',                // Martin
5721                 //'.i3sex.info',                // Martin
5722                 //'.i4sex.info',                // Adulterra
5723                 //'.i5sex.info',                // Adulterra
5724                 //[irvyz]6sex.info not found
5725                 '.i8sex.info',                  // by Martin
5726         ),
5727         'skuarlytronald at mail.com' => array(
5728                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5729                 '.girlsgoingmad.info',          // 64.27.13.120
5730                 '.girlsgonewildside.info',      // 64.27.13.120
5731         ),
5732         '66.232.109.250' => array(
5733                 '.1626pornporno.info',
5734                 '.1851pornporno.info',
5735                 '.1876pornporno.info',
5736                 '.476pornporno.info',
5737         ),
5738         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5739                 '.compactxxx.com',
5740                 '.eadulthost.com',
5741                 '.eadultview.com',
5742                 '.eroticpool.net',
5743                 '.ipornservice.com',
5744                 '.liveadulthost.com',
5745                 '.nudepal.com',
5746                 '.sweetservers.com',
5747         ),
5748         'support at orgija.org' => array(
5749                 '.assfuckporn.org',
5750                 '.dosugmos.org',
5751                 '.fuckporn.org',
5752                 '.girlsdosug.org',
5753                 '.girlsporno.org',
5754                 '.moscowintim.org',
5755                 '.pornass.org',
5756                 '.pornopussy.org',
5757                 '.progirlsporn.org',
5758                 '.pussypornogirls.org',
5759         ),
5760         '125.65.112.93' => array(
5761                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5762                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5763         ),
5764         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5765                 '.beta-google.com',
5766                 '.tv-reklama.info',
5767                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5768                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5769         ),
5770         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5771                 '.abobrinha.org',
5772                 '.aneurysmic.com',              // / not found
5773                 '.physcomp.org',                // / not found
5774                 '.seriedelcaribe2006.org',
5775                 '.refugeeyouthinamerica.com',
5776         ),
5777         'skip_20022 at yahoo.com' => array(
5778                 // 203.174.83.55
5779                 '.a28hosting.info',             // by Bill Jones
5780                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5781                 '.besthentai06.org',    // by yakon
5782         ),
5783         'USFINE.com' => array(
5784                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5785                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5786         ),
5787         '68.178.211.57' => array(
5788                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5789                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5790         ),
5791         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5792                 '.google-yahoo-msn.org',
5793                 '.expedia-travel.org',
5794         ),
5795         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5796                 '.emr5ce.org',
5797                 '.wfe7nv.org',
5798                 '.xyr99yx.org',
5799         ),
5800         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
5801                 '.playonlinenc.com',
5802                 '.playboss-jp.com',
5803         ),
5804         'Digi-Rock.com' => array(
5805                 '.rom776.com',
5806                 // owner-organization: DIGIROCK, INC.
5807                 // owner-email: domain-contact at digi-rock.com
5808                 // with an external ad-and-JavaScript,
5809                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
5810                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
5811         ),
5812         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
5813                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
5814                 '.getrun.cn',                           // 208.73.34.48
5815                 '.ipod-application.info',       // NO IP
5816                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
5817                 '.stonesex.info',                       // NO IP, was 74.50.97.136
5818         ),
5819         'germerts at yandex.ru' => array(
5820                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
5821                 '.andatra.info',
5822                 '.banchitos.info',
5823                 '.batareya.info',
5824                 '.blevota.info',
5825                 '.broneslon.info',
5826                 '.gamadril.info',
5827                 '.gipotenuza.info',
5828                 '.govnosaklo.info',
5829                 '.muflon.info',
5830                 '.termitnik.info',
5831         ),
5832         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
5833                 '.acronis-true-image.info',
5834                 '.calcio-xp.info',
5835                 '.cosanova.info',
5836                 '.cose-rx.info',
5837                 '.dictip.info',
5838                 '.findig.info',
5839                 '.fotonow.info',
5840                 '.lavoro-tip.info',
5841                 '.loan-homes.info',
5842                 '.mionovita.info',
5843                 '.mustv.info',
5844                 '.newsnaked.info',
5845                 '.online-tod.info',
5846                 '.opakit.info',
5847                 '.opanow.info',
5848                 '.opriton.info',
5849                 '.porta-bl.info',
5850                 '.refdif.info',
5851                 '.xzmovie.info',
5852         ),
5853         '84.252.148.120 etc' => array(
5854                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
5855                 '.planetavilton.info',  // 84.252.148.120
5856                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
5857         ),
5858         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
5859                 '.99jk.com',
5860                 '.99jk.com.cn',
5861                 '.99jk.cn',
5862         ),
5863         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
5864                 '.kliktop.biz',
5865                 '.kliktop.org',
5866                 '.pharmatop.us',
5867                 '.supertop.us',
5868                 '.supervaizer.info',
5869         ),
5870         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
5871                 '.freeamateursexx.info',        // 81.0.195.228
5872                 '.freeanalsexx.info',           // 217.11.233.97
5873                 '.freegaysexx.info',            // 81.0.195.228
5874         ),
5875         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
5876                 '.abbhi.info',
5877                 '.gayblogguide.biz',
5878                 '.huope.info',
5879                 '.thebdsmday.info',
5880                 '.zioprt.info',                 // 89.149.228.237
5881         ),
5882         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
5883                 '.boblisk.info',
5884                 '.factyri.info',
5885                 '.jorge1.info',
5886         ),
5887         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
5888                 '.bestmindstorm.org',
5889                 '.redstoreonline.org',
5890         ),
5891         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
5892                 '.8e8ae.net',
5893                 '.c-cock.com',
5894                 '.fa59eaf.com',
5895                 '.set-place.net',
5896                 '.sex-beauty.net',
5897         ),
5898         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
5899                 '.tomdir.info',
5900                 '.tomdirdirect.info',
5901                 '.tomdirworld.info',
5902                 '.treton.info',
5903                 '.trefas.info',
5904                 '.tretonmondo.info',
5905                 '.unefout.info',
5906                 '.unefoutprojet.info',
5907                 '.unitfree.info',
5908                 '.vilret.info',
5909                 '.vilttown.info',
5910                 '.votrefout.info',
5911                 '.warmfind.info',
5912                 '.warptop.info',
5913                 '.wildtram.info',
5914                 '.xofind.info',
5915                 '.xopdiscover.info',
5916                 '.xopfind.info',
5917                 '.xoplocate.info',
5918                 '.xopseek.info',
5919                 '.xpfirst.info',
5920                 '.xphighest.info',
5921                 '.xptop.info',
5922         ),
5923         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
5924                 '.myviagrasite.com',    // 80.74.153.2
5925                 '.thecanadianmeds.com', // 80.74.153.17
5926         ),
5927         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
5928                 '.bigemot.com',                         // 217.11.233.34, / not found
5929                 '.espharmacy.com',                      // 217.11.233.34
5930                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
5931                 '.ringtonecooler.com',          // 217.11.233.34
5932         ),
5933         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
5934                 '.okwit.com',           // 220.166.64.44
5935                 '.sakerver.com',        // 220.166.64.194
5936                 '.motewiki.net',        // 220.166.64.194
5937         ),
5938         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
5939                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
5940                 '.lookmedicine.info',           // 206.161.205.22
5941                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
5942                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
5943                 '.worldsitesearch.info',        // 209.8.40.59
5944         ),
5945         'lee.seery at gmail.com' => array(
5946                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
5947                 '.lingvol.com',         // 64.21.34.55
5948                 '.micevol.com',         // 64.21.34.55
5949                 '.heyhey.info',         // 64.21.34.55  by anonymous
5950         ),
5951         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
5952                 // 69-64-64-71.dedicated.abac.net
5953                 '.520-ard.info',
5954                 '.550bcards.info',
5955                 '.559-cads.info',
5956                 '.559caard.info',
5957                 '.565-caaard.info',
5958                 '.575cadr.info',
5959                 '.577cadrs.info',
5960                 '.590-acrds.info',
5961                 '.596-cadrs.info',
5962                 '.596caards.info',
5963                 '.596caaard.info',
5964                 '.asstablishingcads.info',
5965                 '.astablish-ard.info',
5966                 '.astablishcacrds.info',
5967                 '.begginers-acards.info',
5968                 '.begginersacrds.info',
5969                 '.beggingcaaard.info',
5970                 '.beginercacrds.info',
5971                 '.cacrdscreating.info',
5972                 '.caditbegging.info',
5973                 '.cadr-buildup.info',
5974                 '.cadr-establilsh.info',
5975                 '.cadrs-buildercredit.info',
5976                 '.cadrs570.info',
5977                 '.cads-565.info',
5978
5979                 // 69-64-64-113.dedicated.abac.net
5980                 '.interistacards.info',
5981                 '.intrust-ards.info',
5982                 '.intrustacrds.info',
5983                 '.lfixed-ard.info',
5984                 '.lowerate-ard.info',
5985                 '.lowpercentage-ard.info',
5986                 '.lowpercentageacrd.info',
5987         ),
5988         'acua at mail.ru' => array(
5989
5990                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
5991
5992                         // by adventurer at allmyns.info
5993                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
5994
5995                         // by webmaster at allmyns.info
5996                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
5997                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
5998                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
5999                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6000                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6001                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6002                         '.riumh.cn',    // 84.16.226.28(*snip*)
6003                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6004                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6005                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6006
6007                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6008                 '.dns4babka.info',      // by acua at mail.ru
6009
6010                         // by golubcov at dns4babka.info
6011                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6012
6013                         // by webmaster at dns4babka.info
6014                         '.credh.cn',
6015                         '.fucfv.cn',
6016                         '.gdxnk.cn',
6017                         '.sqrrt.cn',
6018                         '.ywtmd.cn',
6019                         '.kncqy.cn',    // by webmaster at allmyns.info
6020
6021                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6022                 '.dedka2ns.info',       // by acua at mail.ru
6023
6024                         // by chasik at dedka2ns.info
6025                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6026
6027                         // by rochel at dedka2ns.info
6028                         '.fudhxjjqh.cn',
6029
6030                         // by webmaster at dedka2ns.info
6031                         '.ascpo.cn',
6032                         '.jgycr.cn',
6033                         '.nqdtt.cn',
6034                         '.oswde.cn',
6035                         '.qeyig.cn',
6036                         '.soqsx.cn',
6037                         '.ukncd.cn',
6038                         '.zijgb.cn',
6039
6040                 // 84.16.255.253(*snip*), / says 'noy found'
6041                 '.dns4dedka.info',      // by acua at mail.ru
6042
6043                         // by aleon at dns4dedka.info
6044                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6045
6046                         // by dig at dns4dedka.info
6047                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6048                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6049                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6050                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6051                         '.heulw.cn',    // 84.16.226.217(*snip*)
6052                         '.hissw.cn',    // 84.16.249.240(*snip*)
6053                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6054                         '.obwew.cn',    // 84.16.251.218(*snip*)
6055                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6056                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6057                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6058                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6059                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6060                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6061                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6062                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6063                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6064                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6065                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6066                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6067
6068                         // by la at dns4dedka.info
6069                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6070                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6071                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6072                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6073                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6074                         '.eothy.cn',    // 84.16.249.241(*snip*)
6075                         '.epocy.cn',    // 84.16.251.220(*snip*)
6076                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6077                         '.faacz.cn',    // 84.16.251.222(*snip*)
6078                         '.filun.cn',    // 89.149.196.72(*snip*)
6079                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6080                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6081                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6082                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6083                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6084                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6085                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6086                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6087                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6088                         '.krumo.cn',    // 84.16.226.217(*snip*)
6089                         '.lbava.cn',    // 217.20.112.102(*snip*)
6090                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6091                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6092                         '.npovm.cn',    // 84.16.226.28(*snip*)
6093                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6094                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6095                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6096                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6097                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6098                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6099                         '.qydph.cn',    // 89.149.228.163(*snip*)
6100                         '.rxens.cn',    // 89.149.196.72(*snip*)
6101                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6102                         '.srths.cn',    // 84.16.251.222(*snip*)
6103                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6104                         '.unquz.cn',    // 84.16.251.223(*snip*)
6105                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6106                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6107                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6108                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6109                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6110                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6111
6112                         // by le at dns4dedka.info
6113                         '.goslw.cn',    // 84.16.251.220(*snip*)
6114                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6115                         '.iewik.cn',    // 84.16.255.254(*snip*)
6116                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6117                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6118                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6119                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6120                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6121                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6122                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6123                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6124                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6125                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6126                         '.qniww.cn',    // 84.16.251.218(*snip*)
6127                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6128                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6129
6130                         // by skspb at dns4dedka.info
6131                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6132
6133                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6134                         '.bcpnb.cn',
6135                         '.cfbpr.cn',
6136                         '.dnndb.cn',
6137                         '.ekwme.cn',
6138                         '.iutps.cn',
6139                         '.ryftj.cn',
6140                         '.vxqcb.cn',
6141
6142                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6143                         // by apple at ns2best.info
6144                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6145                         // by paulwolf at ns2best.info
6146                         '.ifytzq.cn',
6147
6148                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6149                         // by pigato at sedns.info
6150                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6151                         // by roschem at sedns.info
6152                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6153         ),
6154         'gilvcta sy jilbertsbram.com' => array(
6155                 // 206.53.51.126
6156                 '.dsfljkeilm1.cn',
6157                 '.dsfljkeilm2.cn',
6158                 '.dsfljkeilm3.cn',
6159                 '.dsfljkeilm4.cn',
6160                 '.dsfljkeilm5.cn',
6161                 '.dsfljkeilm6.cn',
6162                 '.dsfljkeilm7.cn',
6163                 '.dsfljkeilm8.cn',
6164                 '.dsfljkeilm9.cn',
6165                 '.dsfljkeilm10.cn',
6166         ),
6167         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6168
6169                 // 69.64.82.76(*.dedicated.abac.net)
6170                 '.bruised-criedit.info',
6171                 '.bruised-crtedit.info',
6172                 '.bruised-czrd.info',
6173                 '.bruisedcreditcars.info',
6174                 '.bruisedcreitcard.info',
6175                 '.bruisedcreitd.info',
6176                 '.buliderscreadet.info',
6177                 '.cleaningup-cdit.info',
6178                 '.cleaningup-cedict.info',
6179                 '.cleaningup-cerdic.info',
6180                 '.cleanup-crrd.info',
6181
6182                 // 69.64.82.77(*.dedicated.abac.net)
6183                 '.bruised-crediot.info',
6184                 '.bruised-credtid.info',
6185                 '.bruisedcriet.info',
6186                 '.bruisedredit.info',
6187                 '.buliders-crdt.info',
6188                 '.buliders-cre4dit.info',
6189                 '.buliders-creadt.info',
6190                 '.buliders-credcards.info',
6191                 '.buliders-credictcard.info',
6192                 '.cleaningupccreditcards.info',
6193                 '.cleaningupcdedit.info',
6194                 '.cleaningupcedirt.info',
6195                 '.cleaningupceidt.info',
6196                 '.cleaningupcrasd.info',
6197                 '.cleaningupcreait.info',
6198
6199                 // 69.64.82.78(*.dedicated.abac.net)
6200                 '.bruised-cridet.info',
6201                 '.bruised-drecit.info',
6202                 '.bruised-reditcards.info',
6203                 '.bruisedcredikt.info',
6204                 '.bruisedcredith.info',
6205                 '.bruisedcredtid.info',
6206                 '.cleanup-criet.info',
6207                 '.cleanup-csrds.info',
6208                 '.cleanup-dards.info',
6209
6210                 // 69.64.82.79(*.dedicated.abac.net)
6211                 '.bruised-crediotcards.info',
6212                 '.bruised-creditcar.info',
6213                 '.bruised-creid.info',
6214                 '.bruised-creidtcard.info',
6215                 '.buliders-crdit.info',
6216                 '.buliders-creadet.info',
6217                 '.cleaningup-ceridt.info',
6218                 '.cleaningupcrecit.info',
6219                 '.cleaningupccritcard.info',
6220                 '.cleanupdredit.info',
6221                 '.cleanupredit.info',
6222         ),
6223         '.malwarealarm.com',
6224                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6225                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6226                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6227         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6228         'Inet-Traffic.com' => array(
6229                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6230                 //'.dcomm.com',         // by D Communications Inc. S.A.
6231
6232                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6233                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6234                 // ...
6235                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6236                 // ...
6237                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6238                 // ...
6239                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6240                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6241                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6242                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6243                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6244                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6245                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6246                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6247                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6248                 // ...
6249                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6250                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6251                 // ...
6252                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6253                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6254                 // ...
6255                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6256                 // ...
6257                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6258                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6259                 // ...
6260                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6261         ),
6262         'andreyletov at yahoo.com related' => array(
6263                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6264                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6265                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6266
6267                 // 89.248.99.118 by anonymous
6268                 '.lpgpharmacy.com',
6269                 '.onlybestgalleries.com',
6270                 '.viagrabest.info',
6271                 '.viagrabestprice.info',
6272                 '.viagratop.info',
6273
6274                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6275                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6276                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6277         ),
6278         'alrusnac at hotmail.com' => array(
6279                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6280                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6281         ),
6282         '203.116.63.123' => array(
6283                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6284                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6285         ),
6286         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6287                 '.autotowncar.cn',              // 69.73.146.184
6288                 '.badgirlhome.cn',              // 69.73.146.186
6289         ),
6290         'Wmp.co.jp' => array(
6291                 // 219.94.134.208, ns *.dns.ne.jp, adult
6292                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6293                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6294                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6295         ),
6296         'Macherie.tv' => array(
6297                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6298                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6299                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6300         ),
6301         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6302                 '.yemine.info',
6303                 '.fr4f3ds.info',
6304         ),
6305         '75.126.129.222' => array(
6306                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6307                 '.viagrabuycheap.info', // ns *.advernsserver.com
6308                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6309         ),
6310         'sqr at bk.ru' => array(
6311                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6312                 '.masserch.info',               // "Free Web Hosting", spam
6313                 '.miserch.info',
6314         ),
6315         'gangstadra at hotmail.com' => array(
6316                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6317                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6318                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6319                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6320         ),
6321         'hosan by front.ru' => array(
6322                 '.online-freesearch.com',       // 206.53.51.155
6323                 '.carsprojects.com',            // 206.53.51.159
6324                 '.sport-brands.com',            // 206.53.51.167
6325                 '.choosefinest.com',            // 206.53.51.157
6326                 '.online-pharmaceutics.com',    // 206.53.51.168
6327         ),
6328         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6329                 '.cialischeap.info',
6330                 '.superrv.info',
6331         ),
6332         '74.50.97.*' => array(
6333                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
6334                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
6335                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6336                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6337                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
6338                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6339                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
6340                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
6341                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6342                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6343                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6344                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
6345                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
6346                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
6347                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6348                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6349
6350                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
6351                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
6352                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
6353                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
6354                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
6355                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
6356                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
6357                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
6358                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
6359                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
6360                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
6361                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
6362                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
6363                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
6364                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
6365                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
6366                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
6367                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
6368                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
6369
6370                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
6371                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
6372                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
6373                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
6374                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
6375         ),
6376         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6377                 '.kol2you.com',
6378                 '.kolplanet.com',
6379                 '.pbaol.com',
6380                 '.planetkol.com',
6381         ),
6382         'Abra1.com' => array(
6383                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6384                 '.abra1.com',           // by info at maisontropicale.com
6385                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6386
6387                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6388                 '.abra2.com',           // by domain at anondns.org
6389                 '.abra3.com',           // by domain at anondns.org
6390         ),
6391
6392         // C-2: Lonely domains (buddies not found yet)
6393         '.0721-4404.com',
6394         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6395         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6396         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6397         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6398         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6399         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6400         '.0annie.info',
6401         '.6i6.de',
6402         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6403         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6404         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6405         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6406         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6407         '.allworlddirect.info', // Forbidden
6408         '.amoreitsex.com',
6409         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6410         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6411         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6412         '.auto-car-cheap.org',
6413         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6414         '.baurish.info',
6415         '.bestop.name',
6416         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6417         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6418         '.bestshopfinder.info',
6419         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6420         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6421         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6422         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6423         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6424         '.catkittenmagazines.org',              // 87.118.97.117
6425         '.covertarena.co.uk',   // by Wayne Huxtable
6426         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6427         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6428         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6429         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6430         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6431         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6432         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6433         '.easyshopusa.com',             // by riter (riter at nm.ru)
6434         '.edu.ph',                              // "philippine network foundation inc"
6435         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6436         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6437         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6438         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6439         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6440         '*.filthserver.com',    // sales at onlinemarketingservices.biz
6441         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6442         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6443         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6444         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6445         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6446         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6447         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6448         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6449         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6450         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6451         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6452         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6453         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6454         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6455         '.gm-exchange.jp',              // 210.188.216.49 RMT
6456         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6457         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6458         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6459         '.greatbestwestern.org',// by gao.wungao at gmail.com
6460         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6461         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6462         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6463         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6464         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6465         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6466         '.hostuju.cz',                  // ns banan.cz, banan.it
6467         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6468         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6469         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6470         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6471         '.infradoc.com',
6472         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6473         '.ismarket.com',                // Google-hiding. intercage.com related IP
6474         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6475         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6476         '.itsexosit.net',
6477         '.itxxxit.net',
6478         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6479         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6480         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6481         '.kingtools.de',
6482         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6483         '.leucainfo.com',
6484         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6485         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
6486         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6487         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6488         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6489         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6490         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6491         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6492         '.megvideochatlive.info',       // Bad seo
6493         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6494         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6495         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6496         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6497         '.mxsupportmailer.com',
6498         '.next-moneylife.com',  // RMT
6499         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6500         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6501         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6502         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6503         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6504         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6505         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6506         '.onlineviagra.de',
6507         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6508         '.ozomw.info',
6509         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6510         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6511         '.perevozka777.ru',             // by witalik at gmail.com
6512         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6513         '.pills-storage.com',   // by
6514         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6515         '.porkyhost.com',               // 79965 at whois.gkg.net
6516         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6517         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6518         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6519         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6520         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6521         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6522         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6523         '.quality-teen-porn-photo.com', // by info at densa.info
6524         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6525         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6526         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6527         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6528         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6529         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6530         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6531         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6532         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6533         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6534         '.sexamoreit.com',
6535         '.sexforit.com',
6536         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6537         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6538         '.sirlook.com',
6539         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6540         '.sepcn.info',                  // / not found
6541         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6542         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6543         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6544         '.superverizonringtones.com',   // by joshua at list.ru
6545         '.thehostcity.com',             // Domains by Proxy
6546         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6547         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6548         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6549         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6550         '.topmeds10.com',
6551         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6552         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6553         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6554         '.unctad.net',                  // by gfdogfd at lovespb.com
6555         '.vacant.org.uk',
6556         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6557         '.virtualsystem.de',
6558         '.vdxhost.com',
6559         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6560         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6561         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6562         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6563         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6564         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6565         '.whoop.to',                    // RMT
6566         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6567         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6568         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6569         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6570         '.wwwna.info',                  // / 404 Not Found
6571         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6572         '.xamorexxx.net',
6573         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6574         '.xsessox.com',
6575         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6576         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6577         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6578         '.zyguo.info',                  // ns globoxhost.net
6579         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6580
6581         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6582         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6583         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6584
6585         '.chatwalker.com',              // 124.32.230.65
6586         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6587         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6588
6589         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6590         '.mncxvsm.info',                // 217.11.233.105, / blank
6591         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6592         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6593         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6594         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6595         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6596         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6597         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6598
6599         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6600         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6601
6602         // The same approach of 'acua at mail.ru'
6603         '.iblcqms.cn',                  // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
6604         '.aasghwf.cn',                  // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
6605         '.fwjjjtmrlr.cn',               // TODO:
6606         '.klmnei.cn',                   // TODO:
6607         '.lumyjugmn.cn',                // TODO:
6608         '.lxwxjzpiy.cn',                // TODO:
6609         '.qyxswynd.cn',                 // TODO:
6610         '.ugivorm.cn',                  // TODO:
6611         '.uxmrscgdi.cn',                // TODO:
6612
6613         // C-3: Not classifiable (information wanted)
6614         //
6615         // Something incoming to pukiwiki related sites
6616         'nana.co.il related' => array(
6617                 '.planetnana.co.il',
6618                 '.nana.co.il',
6619         ),
6620 );
6621
6622 // --------------------------------------------------
6623
6624 $blocklist['D'] = array(
6625         // D: Sample setting of
6626         // "Third party in good faith"s
6627         //
6628         // Hosts shown inside of the implanted contents,
6629         // not used via spam, but maybe useful to detect these contents
6630         //
6631         // 'RESERVED',
6632 );
6633
6634 // --------------------------------------------------
6635
6636 $blocklist['E'] = array(
6637         // E: Sample setting of
6638         // Promoters
6639         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6640         //  Ads, Business promotions)
6641         //
6642         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6643         // Sometimes they may promote each other
6644
6645         '15-Mail.com related' => array(
6646                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6647                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6648                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6649                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
6650                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
6651         ),
6652         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
6653         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
6654         'E-brainers.com related' => array(
6655                 // 202.212.14.101
6656                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
6657                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
6658                 '.my-tune.jp',                                  // by brainers Inc.
6659                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
6660                 '.weekle.jp',                                   // by brainers Inc.
6661
6662                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
6663                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
6664                 '.3minutes-marketing-club.com', // by Fujio
6665                 '.affiliate-vampire.com',               // by Masatoshi
6666                 '.article-site-power-package.com',      // by Masatoshi
6667                 '.audio-marketing-club.com',    // by Fujio
6668                 '.brainers-task-manager.com',   // by Masatoshi
6669                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
6670                 '.brainersbuzz.com',                    // by Masatoshi
6671                 '.den4renz-marketing-club.com', // by Fujio
6672                 '.english-contents-club.com',   // by Masatoshi
6673                 '.fly-in-ads-japan.com',                // by Fujio
6674                 '.free-resalerights-giveaway.com',      // by Fujio
6675                 '.freegiveawaysecret.com',              // by Masatoshi
6676                 '.guaranteedvisitorpro.com',    // by Masatoshi
6677                 '.havads-japan.com',                    // by Masatoshi
6678                 '.info-business123.com',                // by Fujio
6679                 '.instant-marketing-club.com',  // by Fujio
6680                 '.internetmarketinggorinjyu.com',       // by Masatoshi
6681                 '.marketing-force-japan.com',   // by Fujio
6682                 '.masatoshikobayashi.com',              // by Fujio
6683                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
6684                 '.replytomatt.com',                             // by Fujio
6685                 '.santa-deal.com',                              // by Fujio
6686                 '.santa-deal-summer.com',               // by Fujio
6687                 '.scratch-card-factory.com',    // by Masatoshi
6688                 '.script4you-japan.com',                // by Fujio
6689                 '.sell1000000dollarinjapan.com',// by Fujio
6690                 '.squeeze-page-secret.com',             // by Masatoshi
6691                 '.viral-blog-square.com',               // by Fujio
6692                 '.viralarticle.com',                    // by Fujio
6693                 '.wowhoken.com',                                // by Fujio
6694
6695                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
6696                 '.brainerstelevision.com',
6697                 '.demosite4you.com',
6698                 '.keywordcatcherpro.com',
6699                 '.script-marketing-club.com',
6700
6701                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
6702                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
6703                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
6704                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
6705                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
6706                 '.brainerscode.com',    // by akada
6707                 '.brainerslive.com',    // by domain
6708                 '.brainersreview.com',  // by domain
6709                 '.brainerstest.com',    // by akada
6710                 '.otosecret.com',               // by domain
6711                 '.ultimate-marketing-weapon.com',       // by akada
6712                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
6713                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
6714
6715                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
6716                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
6717         ),
6718         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
6719         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
6720         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
6721         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
6722         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
6723                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
6724                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
6725                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
6726
6727                 // Redirects and affiliates:
6728                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
6729                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
6730                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
6731                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
6732                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
6733                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
6734                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
6735                 //   ...
6736
6737                 // Other suggestions:
6738                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
6739
6740                 // Blog posting at the same time
6741                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
6742                 //   2007/06/13 e123.info/archives/76
6743                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
6744                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
6745                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
6746         ),
6747         'info at kobeweb.jp' => array(
6748                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
6749                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
6750                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
6751         ),
6752         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
6753         'Infocart.jp' => array(         // by wai at infocart.jp
6754                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
6755                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
6756                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
6757
6758                 //inetnum:      60.32.154.176 - 60.32.154.183
6759                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
6760                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
6761         ),
6762         'Info-sniper.com' => array(
6763                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
6764                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
6765                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
6766         ),
6767         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
6768         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
6769         'JunSuzuki.com' => array(       // e-brainers.com related
6770                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
6771                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
6772         ),
6773         'Natsukih.net' => array(
6774                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
6775                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
6776                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
6777                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
6778
6779                 // by info at natsukih.net
6780                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
6781                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
6782                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
6783                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
6784                 '.5muryoureport.com',   // 210.251.253.230
6785                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
6786                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
6787                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
6788         ),
6789         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
6790                 '.11kanji.com',         // 211.10.131.88
6791                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
6792                 '.point-park.com',      // 211.10.131.88
6793                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
6794         ),
6795         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
6796         'PRJAPAN.co.jp' => array(
6797                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
6798                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
6799                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
6800                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
6801                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
6802                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
6803         ),
6804         'Rakuten.co.jp' => array(
6805                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
6806                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
6807         ),
6808         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
6809         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
6810         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
6811                 '.e123.info',
6812                 '.ialchemist.net',
6813                 '.j012.net',
6814                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
6815         ),
6816         'Viscose.jp' => array(
6817                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
6818                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
6819         ),
6820         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
6821 );
6822
6823 // --------------------------------------------------
6824
6825 $blocklist['Z'] = array(
6826         // Z: Yours
6827         //
6828         //'',
6829         //'',
6830         //'',
6831 );
6832
6833 ?>