spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.162 2007/08/25 02:35:08 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  68         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  69         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  70         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  71         //'ifastnet.com',                               // Server hosting
  72         //'threefortune.ifastnet.com',  // Server hosting
  73
  74         // Yours
  75         //''
  76         //''
  77         //''
  78
  79 );
  80
  81 // --------------------------------------------------
  82 // A: Sample setting of
  83 // Existing URI redirection or masking services
  84
  85 $blocklist['A-1'] = array(
  86
  87         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  88         // web-based proxy, DNS subdomains, etc
  89         // http://en.wikipedia.org/wiki/URL_redirection
  90         //
  91         // as known as cheap URI obscuring services today,
  92         // for spammers and affiliate users dazed by money.
  93         //
  94         //   Messages from forerunners:
  95         //     o-rly.net
  96         //       "A URL REDIRECTION SERVICE GONE BAD"
  97         //       "SORRY, TRULY"
  98         //     smcurl.com
  99         //       "Idiots were using smcURL to shrink URLs and
 100         //        send them out via spam."
 101         //     tinyclick.com
 102         //       "...stop offering it's free services because
 103         //        too many people were taking advantage of it"
 104         //     xjs.org
 105         //       "We have been forced to close this facility
 106         //        due to a minority of knuckle draggers who
 107         //        abused this web site."
 108         //
 109         // Please notify us about this list with reason:
 110         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 111         //
 112         '0nz.org',
 113         '0rz.tw',
 114         '0url.com',
 115         '0zed.info',
 116         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 117         '123.que.jp',
 118         '12url.org',
 119         '*.15h.com',
 120         '*.1dr.biz',
 121         '1K.pl' => array(
 122                 '*.1k.pl',
 123                 '*.5g.pl',
 124                 '*.orq.pl',
 125         ),
 126         '1nk.us',
 127         '1url.org',
 128         '1url.in',
 129         '1webspace.org',
 130         '2Ch.net' => array(
 131                 'ime.nu',
 132                 'ime.st',
 133         ),
 134         '2ch2.net',
 135         '2hop4.com',
 136         '2s.ca',
 137         '2site.com',
 138         '2url.org',
 139         '301url.com',
 140         '32url.com',
 141         '.3dg.de',
 142         '*.4bb.ru',
 143         'big5.51job.com',
 144         '5jp.net',
 145         '.6url.com',
 146         '*.6x.to',
 147         '7ref.com',
 148         '82m.org',
 149         '*.8rf.com',
 150         '98.to',
 151         'abbrv.co.uk',
 152         '*.abwb.org',
 153         'acnw.de',
 154         'Active.ws' => array(
 155                 '*.321.cn',
 156                 '*.4x2.net',
 157                 'active.ws',
 158                 '*.better.ws',
 159                 '*.here.ws',
 160                 '*.mypiece.com',
 161                 '*.official.ws',
 162                 '*.ouch.ws',
 163                 '*.premium.ws',
 164                 '*.such.info',
 165                 '*.true.ws',
 166                 '*.visit.ws',
 167         ),
 168         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 169         'aifam.com',
 170         'All4WebMasters.pl' => array(
 171                 '*.ovp.pl',
 172                 '*.6-6-6.pl',
 173         ),
 174         'amoo.org',
 175         'web.archive.org',              ///web/2
 176         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 177                 'jmp2.net',
 178                 '2me.tw',
 179         ),
 180         'ataja.es',
 181         'ATBHost.com' => array(
 182                 '*.atbhost.com',
 183                 '*.bzhost.net',
 184         ),
 185         'atk.jp',
 186         'clearp.ath.cx',
 187         'athomebiz.com',
 188         'aukcje1.pl',
 189         'beam.to',
 190         'beermapping.com',
 191         'besturl.in',
 192         'bhomiyo.com',          // 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 193         'biglnk.com',
 194         'bingr.com',
 195         'bittyurl.com',
 196         '*.bizz.cc',
 197         '*.blo.pl',
 198         '*.bo.pl',
 199         'briefurl.com',
 200         'brokenscript.com',
 201         'BucksoGen.com' => array(
 202                 '*.bucksogen.com',
 203                 '*.bulochka.org',
 204                 '*.korzhik.org',
 205                 '*.kovrizhka.org',
 206                 '*.pirozhok.org',
 207                 '*.plushka.org',
 208                 '*.pryanik.org',
 209                 '*.sushka.org',
 210         ),
 211         'budgethosts.org',
 212         'budu.com',                             // by peter.eder at imcworld.com
 213         '*.buzznet.com',
 214         '*.bydl.com',
 215         'C-O.IN' => array(
 216                 '*.c-o.cc',
 217                 '*.c-o.in',
 218                 '*.coz.in',
 219                 '*.cq.bz',
 220         ),
 221         'c64.ch',
 222         'c711.com',
 223         '*.cej.pl',
 224         'checkasite.net',
 225         'url.chefhost.com',
 226         '*.chicappa.jp',
 227         'chilicity.com',
 228         'big5.china.com',
 229         'chopurl.com',
 230         'christopherleestreet.com',
 231         'cintcm.com',
 232         '*.cjb.net',
 233         'clipurl.com',
 234         '*.co.nr',
 235         'Comtech Enterprises ' => array(        // comteche.com
 236                 'tinyurl.name',
 237                 'tinyurl.us',
 238         ),
 239         'Cool168.com' => array(
 240                 '*.cool158.com',
 241                 '*.cool168.com',
 242                 '*.ko168.com',
 243                 '*.ko188.com',
 244         ),
 245         'Coolurl.de' => array(
 246                 'coolurl.de',
 247                 'dornenboy.de',
 248                 'eyeqweb.com',
 249                 'hardcore-porn.de',
 250                 'maschinen-bluten-nicht.de',
 251         ),
 252         'cutalink.com',
 253         '*.da.cx',
 254         '*.da.ru',
 255         'dae2.com',
 256         'dephine.org',
 257         'desiurl.com',
 258         'dhurl.com',
 259         'digbig.com',
 260         'Digipills.com' => array(
 261                 '*.digipills.com',
 262                 'minilien.com',
 263                 'tinylink.com',
 264         ),
 265         '*.discutbb.com',
 266         'DL.AM' => array(
 267                 '*.cx.la',
 268                 '*.dl.am',
 269         ),
 270         '*.dl.pl',
 271         '*.dmdns.com',
 272         'doiop.com',
 273         'drlinky.com',
 274         'durl.us',
 275         '*.dvdonly.ru',
 276         '*.dynu.ca',
 277         'dwarf.name',
 278         '*.eadf.com',
 279         '*.easyurl.net',
 280         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 281                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 282                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 283                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 284                 //   "Keep continuing to seek originality and contribute it to local,
 285                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 286                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 287                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 288                 // I'm so much impressed of the situation around this imported one today.
 289         'elfurl.com',
 290         'eny.pl',
 291         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 292                 '.mywiitime.com',
 293                 '.surfindark.com',              // webmaster at etechfocus.com
 294                 '.surfinshade.com',
 295                 '.surfinshadow.com',
 296                 '.surfinwind.com',
 297                 '.topsecretlive.com',
 298         ),
 299         '*.eu.org',
 300         'F2B.be' => array(
 301                 '*.f2b.be',
 302                 '*.freakz.eu',
 303                 '*.n0.be',
 304                 '*.n3t.nl',
 305                 '*.short.be',
 306                 '*.ssr.be',
 307                 '*.tweaker.eu',
 308         ),
 309         '*.fancyurl.com',
 310         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 311                 'blue11.jp',
 312                 'fanznet.com',
 313                 'katou.in',
 314                 'mymap.in',
 315                 'saitou.in',
 316                 'satou.in',
 317                 'susan.in',
 318         ),
 319         '.fe.pl',                       // Redirection and subdomain
 320         'ffwd.to',
 321         'url.fibiger.org',
 322         'FireMe.to' => array(
 323                 'fireme.to',
 324                 'nextdoor.to',
 325                 'ontheway.to',
 326         ),
 327         'flingk.com',
 328         'flog.jp',                      // careless redirector and bbs
 329         'fm7.biz',
 330         'fnbi.jp',
 331         '*.fnbi.jp',
 332         'forgeturl.com',
 333         '*.free.bg',
 334         'Freeservers.com' => array(     // United Online Web Services, Inc.
 335                 '*.4mg.com',
 336                 '*.4t.com',
 337                 '*.8m.com',
 338                 '*.8m.net',
 339                 '*.8k.com',
 340                 '*.faithweb.com',
 341                 '*.freehosting.net',
 342                 '*.freeservers.com',
 343                 '*.gq.nu',
 344                 '*.htmlplanet.com',
 345                 '*.itgo.com',
 346                 '*.iwarp.com',
 347                 '*.s5.com',
 348                 '*.scriptmania.com',
 349                 '*.tvheaven.com',
 350         ),
 351         '*.freewebpages.com',
 352         'FreeWebServices.net' => array( // Host Department LLC
 353                 '*.about.gs',   // Dead?
 354                 '*.about.tc',
 355                 '*.about.vg',
 356                 '*.aboutus.gs',
 357                 '*.aboutus.ms',
 358                 '*.aboutus.tc',
 359                 '*.aboutus.vg',
 360                 '*.biografi.biz',
 361                 '*.biografi.info',
 362                 '*.biografi.org',
 363                 '*.biografi.us',
 364                 '*.datadiri.biz',
 365                 '*.datadiri.cc',
 366                 '*.datadiri.com',
 367                 '*.datadiri.info',
 368                 '*.datadiri.net',
 369                 '*.datadiri.org',
 370                 '*.datadiri.tv',
 371                 '*.datadiri.us',
 372                 '*.ecv.gs',
 373                 '*.ecv.ms',
 374                 '*.ecv.tc',
 375                 '*.ecv.vg',
 376                 '*.eprofile.us',
 377                 '*.go2net.ws',
 378                 '*.hits.io',
 379                 '*.hostingweb.us',
 380                 '*.hub.io',
 381                 '*.indo.bz',
 382                 '*.indo.cc',
 383                 '*.indo.gs',
 384                 '*.indo.ms',
 385                 '*.indo.tc',
 386                 '*.indo.vg',
 387                 '*.infinitehosting.net',
 388                 '*.infinites.net',
 389                 '*.lan.io',
 390                 '*.max.io',
 391                 '*.mycv.bz',
 392                 '*.mycv.nu',
 393                 '*.mycv.tv',
 394                 '*.myweb.io',
 395                 '*.ourprofile.biz',
 396                 '*.ourprofile.info',
 397                 '*.ourprofile.net',     // Dead?
 398                 '*.ourprofile.org',
 399                 '*.ourprofile.us',
 400                 '*.profil.bz',
 401                 '*.profil.cc',
 402                 '*.profil.cn',
 403                 '*.profil.gs',
 404                 '*.profil.in',
 405                 '*.profil.ms',
 406                 '*.profil.tc',
 407                 '*.profil.tv',
 408                 '*.profil.vg',  // ?
 409                 '*.site.io',
 410                 '*.wan.io',
 411                 '*.web-cam.ws',
 412                 '*.webs.io',
 413                 '*.zip.io',
 414         ),
 415         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 416         '*.fx.to',
 417         'fyad.org',
 418         'fype.com',
 419         'gentleurl.net',
 420         'Get2.us' => array(
 421                 '*.get2.us',
 422                 '*.hasballs.com',
 423                 '*.ismyidol.com',
 424                 '*.spotted.us',
 425                 '*.went2.us',
 426                 '*.wentto.us',
 427         ),
 428         'glinki.com',
 429         '*.globalredirect.com',
 430         'gnu.vu',
 431         '*.go.cc',
 432         'goonlink.com',
 433         '.gourl.org',
 434         '.greatitem.com',
 435         'gzurl.com',
 436         'url.grillsportverein.de',
 437         'Harudake.net' => array('*.hyu.jp'),
 438         'Hattinger Linux User Group' => array('short.hatlug.de'),
 439         'Hexten.net' => array('lyxus.net'),
 440         'here.is',
 441         'HispaVista.com' => array(
 442                 '*.blogdiario.com',
 443                 '*.hispavista.com',
 444                 '.galeon.com',
 445         ),
 446         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 447                 '*.8l.pl',
 448                 '*.blg.pl',
 449                 '*.czytajto.pl',
 450                 '*.ryj.pl',
 451                 '*.xit.pl',
 452                 '*.xlc.pl',
 453                 '*.hk.pl',
 454                 '*.home.pl',
 455                 '*.of.pl',
 456         ),
 457         'hort.net',
 458         'free4.hostrocket.com',
 459         '*.hotindex.ru',
 460         'HotRedirect.com' => array(
 461                 '*.coolhere.com',
 462                 '*.homepagehere.com',
 463                 '*.hothere.com',
 464                 '*.mustbehere.com',
 465                 '*.onlyhere.net',
 466                 '*.pagehere.com',
 467                 '*.surfhere.net',
 468                 '*.zonehere.com',
 469         ),
 470         'hotshorturl.com',
 471         'hotwebcomics.com',     ///search_redirect.php
 472         'hurl.to',
 473         '*.hux.de',
 474         '*.i89.us',
 475         'iat.net',                      // 74.208.58.130 by Tony Carter
 476         'ibm.com',                      ///links (Correct it)
 477         '*.iceglow.com',
 478         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 479         'Ideas para Nuevos Mercados SL' => array(
 480                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 481                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 482                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 483                 // by edgar bortolin (oscar at i4nm.com)
 484                 // by Edgar Bortolin  (oscar at i4nm.com)
 485                 // by oscar florez (oscar at i4nm.com)
 486                 // by Oscar Florez (oscar at red-es.com)
 487                 // by covadonga del valle (oscar at i4nm.com)
 488                 '*.ar.gd',
 489                 '*.ar.gs',      // ns *.nora.net
 490                 '*.ar.kz',      // by oscar
 491                 '*.ar.nu',      // by Edgar
 492                 '*.ar.tc',      // by oscar
 493                 '*.ar.vg',      // by oscar
 494                 '*.bo.kz',      // by oscar
 495                 '*.bo.nu',      // by covadonga
 496                 '*.bo.tc',      // by oscar
 497                 '*.bo.tf',      // by Oscar
 498                 '*.bo.vg',      // by oscar
 499                 '*.br.gd',
 500                 '*.br.gs',      // ns *.nora.net
 501                 '*.br.nu',      // by edgar
 502                 '*.br.vg',      // by oscar
 503                 '*.ca.gs',      // by oscar
 504                 '*.ca.kz',      // by oscar
 505                 '*.cl.gd',      // by oscar
 506                 '*.cl.kz',      // by oscar
 507                 '*.cl.nu',      // by edgar
 508                 '*.cl.tc',      // by oscar
 509                 '*.cl.tf',      // by Oscar
 510                 '*.cl.vg',      // by oscar
 511                 '*.col.nu',     // by Edgar
 512                 '*.cr.gs',      // ns *.nora.net
 513                 '*.cr.kz',      // by oscar
 514                 '*.cr.nu',      // by edgar
 515                 '*.cr.tc',      // by oscar
 516                 '*.cu.tc',      // by oscar
 517                 '*.do.kz',      // by oscar
 518                 '*.do.nu',      // by edgar
 519                 '*.ec.kz',      // by edgar
 520                 '*.ec.nu',      // by Edgar
 521                 '*.ec.tf',      // by Oscar
 522                 '*.es.kz',      // by oscar
 523                 '*.eu.kz',      // by oscar
 524                 '*.gt.gs',      // ns *.nora.net
 525                 '*.gt.tc',      // by oscar
 526                 '*.gt.tf',      // by Oscar
 527                 '*.gt.vg',      // by Oscar
 528                 '*.hn.gs',      // ns *.nora.net
 529                 '*.hn.tc',      // by oscar
 530                 '*.hn.tf',      // by Oscar
 531                 '*.hn.vg',      // by oscar
 532                 '*.mx.gd',
 533                 '*.mx.gs',      // ns *.nora.net
 534                 '*.mx.kz',      // by oscar
 535                 '*.mx.vg',      // by oscar
 536                 '*.ni.kz',      // by oscar
 537                 '*.pa.kz',      // by oscar
 538                 '*.pe.kz',      // by oscar
 539                 '*.pe.nu',      // by Edgar
 540                 '*.pr.kz',      // by oscar
 541                 '*.pr.nu',      // by edgar
 542                 '*.pt.gs',      // ns *.nora.net
 543                 '*.pt.kz',      // by edgar
 544                 '*.pt.nu',      // by edgar
 545                 '*.pt.tc',      // by oscar
 546                 '*.pt.tf',      // by Oscar
 547                 '*.py.gs',      // ns *.nora.net
 548                 '*.py.nu',      // by edgar
 549                 '*.py.tc',      // by oscar
 550                 '*.py.tf',      // by Oscar
 551                 '*.py.vg',      // by oscar
 552                 '*.sv.tc',      // by oscar
 553                 '*.usa.gs',     // ns *.nora.net
 554                 '*.uy.gs',      // ns *.nora.net
 555                 '*.uy.kz',      // by oscar
 556                 '*.uy.nu',      // by edgar
 557                 '*.uy.tc',      // by oscar
 558                 '*.uy.tf',      // by Oscar
 559                 '*.uy.vg',      // by oscar
 560                 '*.ve.gs',      // by oscar
 561                 '*.ve.tc',      // by oscar
 562                 '*.ve.tf',      // by Oscar
 563                 '*.ve.vg',      // by oscar
 564                 '*.ven.nu',     // by edgar
 565         ),
 566         'ie.to',
 567         'igoto.co.uk',
 568         'ilook.tw',
 569         'indianpad.com',                ///view/
 570         'iNetwork.co.il' => array(
 571                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 572                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 573                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 574         ),
 575         '*.infogami.com',
 576         'infotop.jp',
 577         'ipoo.org',
 578         'IR.pl' => array(
 579                 '*.aj.pl',
 580                 '*.aliasy.org',
 581                 '*.gu.pl',
 582                 '*.hu.pl',
 583                 '*.ir.pl',
 584                 '*.jo.pl',
 585                 '*.su.pl',
 586                 '*.td.pl',
 587                 '*.uk.pl',
 588                 '*.uy.pl',
 589                 '*.xa.pl',
 590                 '*.zj.pl',
 591         ),
 592         'irotator.com',
 593         '.iwebtool.com',
 594         'j6.bz',
 595         'jeeee.net',
 596         'Jaze Redirect Services' => array(
 597                 '*.arecool.net',
 598                 '*.iscool.net',
 599                 '*.isfun.net',
 600                 '*.tux.nu',
 601         ),
 602         '*.jed.pl',
 603         'JeremyJohnstone.com' => array('url.vg'),
 604         'jemurl.com',
 605         'jggj.net',
 606         'jpan.jp',
 607         'josh.nu',
 608         'kat.cc',
 609         'Kickme.to' => array(
 610                 '.1024bit.at',
 611                 '.128bit.at',
 612                 '.16bit.at',
 613                 '.256bit.at',
 614                 '.32bit.at',
 615                 '.512bit.at',
 616                 '.64bit.at',
 617                 '.8bit.at',
 618                 '.adores.it',
 619                 '.again.at',
 620                 '.allday.at',
 621                 '.alone.at',
 622                 '.altair.at',
 623                 '.american.at',
 624                 '.amiga500.at',
 625                 '.ammo.at',
 626                 '.amplifier.at',
 627                 '.amstrad.at',
 628                 '.anglican.at',
 629                 '.angry.at',
 630                 '.around.at',
 631                 '.arrange.at',
 632                 '.australian.at',
 633                 '.baptist.at',
 634                 '.basque.at',
 635                 '.battle.at',
 636                 '.bazooka.at',
 637                 '.berber.at',
 638                 '.blackhole.at',
 639                 '.booze.at',
 640                 '.bosnian.at',
 641                 '.brainiac.at',
 642                 '.brazilian.at',
 643                 '.bummer.at',
 644                 '.burn.at',
 645                 '.c-64.at',
 646                 '.catalonian.at',
 647                 '.catholic.at',
 648                 '.chapel.at',
 649                 '.chills.it',
 650                 '.christiandemocrats.at',
 651                 '.cname.at',
 652                 '.colors.at',
 653                 '.commodore.at',
 654                 '.commodore64.at',
 655                 '.communists.at',
 656                 '.conservatives.at',
 657                 '.conspiracy.at',
 658                 '.cooldude.at',
 659                 '.craves.it',
 660                 '.croatian.at',
 661                 '.cuteboy.at',
 662                 '.dancemix.at',
 663                 '.danceparty.at',
 664                 '.dances.it',
 665                 '.danish.at',
 666                 '.dealing.at',
 667                 '.deep.at',
 668                 '.democrats.at',
 669                 '.digs.it',
 670                 '.divxlinks.at',
 671                 '.divxmovies.at',
 672                 '.divxstuff.at',
 673                 '.dizzy.at',
 674                 '.does.it',
 675                 '.dork.at',
 676                 '.drives.it',
 677                 '.dutch.at',
 678                 '.dvdlinks.at',
 679                 '.dvdmovies.at',
 680                 '.dvdstuff.at',
 681                 '.emulators.at',
 682                 '.end.at',
 683                 '.english.at',
 684                 '.eniac.at',
 685                 '.error403.at',
 686                 '.error404.at',
 687                 '.evangelism.at',
 688                 '.exhibitionist.at',
 689                 '.faith.at',
 690                 '.fight.at',
 691                 '.finish.at',
 692                 '.finnish.at',
 693                 '.forward.at',
 694                 '.freebie.at',
 695                 '.freemp3.at',
 696                 '.french.at',
 697                 '.graduatejobs.at',
 698                 '.greenparty.at',
 699                 '.grunge.at',
 700                 '.hacked.at',
 701                 '.hang.at',
 702                 '.hangup.at',
 703                 '.has.it',
 704                 '.hide.at',
 705                 '.hindu.at',
 706                 '.htmlpage.at',
 707                 '.hungarian.at',
 708                 '.icelandic.at',
 709                 '.independents.at',
 710                 '.invisible.at',
 711                 '.is-chillin.it',
 712                 '.is-groovin.it',
 713                 '.japanese.at',
 714                 '.jive.at',
 715                 '.kickass.at',
 716                 '.kickme.to',
 717                 '.kindergarden.at',
 718                 '.knows.it',
 719                 '.kurd.at',
 720                 '.labour.at',
 721                 '.leech.at',
 722                 '.liberals.at',
 723                 '.linuxserver.at',
 724                 '.liqour.at',
 725                 '.lovez.it',
 726                 '.makes.it',
 727                 '.maxed.at',
 728                 '.means.it',
 729                 '.meltdown.at',
 730                 '.methodist.at',
 731                 '.microcomputers.at',
 732                 '.mingle.at',
 733                 '.mirror.at',
 734                 '.moan.at',
 735                 '.mormons.at',
 736                 '.musicmix.at',
 737                 '.nationalists.at',
 738                 '.needz.it',
 739                 '.nerds.at',
 740                 '.neuromancer.at',
 741                 '.newbie.at',
 742                 '.nicepage.at',
 743                 '.ninja.at',
 744                 '.norwegian.at',
 745                 '.ntserver.at',
 746                 '.owns.it',
 747                 '.paint.at',
 748                 '.palestinian.at',
 749                 '.phoneme.at',
 750                 '.phreaking.at',
 751                 '.playz.it',
 752                 '.polish.at',
 753                 '.popmusic.at',
 754                 '.portuguese.at',
 755                 '.powermac.at',
 756                 '.processor.at',
 757                 '.prospects.at',
 758                 '.protestant.at',
 759                 '.rapmusic.at',
 760                 '.raveparty.at',
 761                 '.reachme.at',
 762                 '.reads.it',
 763                 '.reboot.at',
 764                 '.relaxed.at',
 765                 '.republicans.at',
 766                 '.researcher.at',
 767                 '.reset.at',
 768                 '.resolve.at',
 769                 '.retrocomputers.at',
 770                 '.rockparty.at',
 771                 '.rocks.it',
 772                 '.rollover.at',
 773                 '.rough.at',
 774                 '.rules.it',
 775                 '.rumble.at',
 776                 '.russian.at',
 777                 '.says.it',
 778                 '.scared.at',
 779                 '.seikh.at',
 780                 '.serbian.at',
 781                 '.short.as',
 782                 '.shows.it',
 783                 '.silence.at',
 784                 '.simpler.at',
 785                 '.sinclair.at',
 786                 '.singz.it',
 787                 '.slowdown.at',
 788                 '.socialists.at',
 789                 '.spanish.at',
 790                 '.split.at',
 791                 '.stand.at',
 792                 '.stoned.at',
 793                 '.stumble.at',
 794                 '.supercomputer.at',
 795                 '.surfs.it',
 796                 '.swedish.at',
 797                 '.swims.it',
 798                 '.synagogue.at',
 799                 '.syntax.at',
 800                 '.syntaxerror.at',
 801                 '.techie.at',
 802                 '.temple.at',
 803                 '.thinkbig.at',
 804                 '.thirsty.at',
 805                 '.throw.at',
 806                 '.toplist.at',
 807                 '.trekkie.at',
 808                 '.trouble.at',
 809                 '.turkish.at',
 810                 '.unexplained.at',
 811                 '.unixserver.at',
 812                 '.vegetarian.at',
 813                 '.venture.at',
 814                 '.verycool.at',
 815                 '.vic-20.at',
 816                 '.viewing.at',
 817                 '.vintagecomputers.at',
 818                 '.virii.at',
 819                 '.vodka.at',
 820                 '.wannabe.at',
 821                 '.webpagedesign.at',
 822                 '.wheels.at',
 823                 '.whisper.at',
 824                 '.whiz.at',
 825                 '.wonderful.at',
 826                 '.zor.org',
 827                 '.zx80.at',
 828                 '.zx81.at',
 829                 '.zxspectrum.at',
 830         ),
 831         'kisaweb.com',
 832         'krotki.pl',
 833         'kuerzer.de',
 834         '*.kupisz.pl',
 835         'kuso.cc',
 836         '*.l8t.com',
 837         'lame.name',
 838         'lediga.st',
 839         'liencourt.com',
 840         'liteurl.com',
 841         'linkachi.com',
 842         'linkezy.com',
 843         'linkfrog.net',
 844         'linkook.com',
 845         'linkzip.net',
 846         'lispurl.com',
 847         'lnk.in',
 848         'makeashorterlink.com',
 849         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 850                 '*.3gp.fr',
 851                 '*.gtx.fr',
 852                 '*.ici.st',
 853                 '*.max.st',
 854                 '*.nn.cx',              // ns *.sivit.org
 855                 '*.site.cx',    // ns *.sivit.org
 856                 '*.user.fr',
 857                 '*.zxr.fr',
 858         ),
 859         'mcturl.com',
 860         'memurl.com',
 861         'Metamark.net' => array('xrl.us'),
 862         'midgeturl.com',
 863         'Minilink.org' => array('lnk.nu'),
 864         'miniurl.org',
 865         'miniurl.pl',
 866         'mixi.bz',
 867         'mo-v.jp',
 868         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 869                 '.com.md',
 870                 '.co.md',
 871                 '.org.md',
 872                 '.info.md',
 873                 '.host.md',
 874         ),
 875         'monster-submit.com',
 876         'mooo.jp',
 877         'murl.net',
 878         'myactivesurf.net',
 879         'mytinylink.com',
 880         'myurl.in',
 881         'myurl.com.tw',
 882         'nanoref.com',
 883         'Ne1.net' => array(
 884                 '*.ne1.net',
 885                 '*.r8.org',
 886         ),
 887         'Nashville Linux Users Group' => array('nlug.org'),
 888         'not2long.net',
 889         '*.notlong.com',
 890         '*.nuv.pl',
 891         'ofzo.be',
 892         '*.ontheinter.net',
 893         'ourl.org',
 894         'ov2.net',                              // frame
 895         '*.ozonez.com',
 896         'pagebang.com',
 897         'palurl.com',
 898         '*.paulding.net',
 899         'phpfaber.org',
 900         'pnope.com',
 901         'prettylink.com',
 902         'PROXID.net' => array(  // also xRelay.net
 903                 '*.asso.ws',
 904                 '*.corp.st',
 905                 '*.euro.tm',
 906                 '*.perso.tc',
 907                 '*.site.tc',
 908                 '*.societe.st',
 909         ),
 910         'qrl.jp',
 911         'qurl.net',
 912         'qwer.org',
 913         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 914         'radiobase.net',
 915         'RedirectFree.com' => array(
 916                 '*.red.tc',
 917                 '*.redirectfree.com',
 918                 '*.sky.tc',
 919                 '*.the.vg',
 920         ),
 921         'redirme.com',
 922         'redirectme.to',
 923         'relic.net',
 924         'rezma.info',
 925         'rio.st',
 926         'rlink.org',
 927         '*.rmcinfo.fr',
 928         'rubyurl.com',
 929         '*.runboard.com',
 930         'runurl.com',
 931         's-url.net',
 932         's1u.net',
 933         'SG5.co.uk' => array(
 934                 '*.sg5.co.uk',
 935                 '*.sg5.info',
 936         ),
 937         'Shim.net' => array(
 938                 '*.0kn.com',
 939                 '*.2cd.net',
 940                 '*.freebiefinders.net',
 941                 '*.freegaming.org',
 942                 '*.op7.net',
 943                 '*.shim.net',
 944                 '*.v9z.com',
 945         ),
 946         'shorl.com',
 947         'shortenurl.com',
 948         'shorterlink.com',
 949         'shortlinks.co.uk',
 950         'shorttext.com',
 951         'shorturl-accessanalyzer.com',
 952         'Shortify.com' => array(
 953                 '74678439.com',
 954                 'shortify.com',
 955         ),
 956         'shortlink.co.uk',
 957         'ShortURL.com' => array(
 958                 '*.1sta.com',
 959                 '*.24ex.com',
 960                 '*.2fear.com',
 961                 '*.2fortune.com',
 962                 '*.2freedom.com',
 963                 '*.2hell.com',
 964                 '*.2savvy.com',
 965                 '*.2truth.com',
 966                 '*.2tunes.com',
 967                 '*.2ya.com',
 968                 '*.alturl.com',
 969                 '*.antiblog.com',
 970                 '*.bigbig.com',
 971                 '*.dealtap.com',
 972                 '*.ebored.com',
 973                 '*.echoz.com',
 974                 '*.filetap.com',
 975                 '*.funurl.com',
 976                 '*.headplug.com',
 977                 '*.hereweb.com',
 978                 '*.hitart.com',
 979                 '*.mirrorz.com',
 980                 '*.shorturl.com',
 981                 '*.spyw.com',
 982                 '*.vze.com',
 983         ),
 984         'shrinkalink.com',
 985         'shrinkthatlink.com',
 986         'shrinkurl.us',
 987         'shrt.org',
 988         'shrunkurl.com',
 989         'shurl.org',
 990         'shurl.net',
 991         'sid.to',
 992         'simurl.com',
 993         'sitefwd.com',
 994         'Sitelutions.com' => array(
 995                 '*.assexy.as',
 996                 '*.athersite.com',
 997                 '*.athissite.com',
 998                 '*.bestdeals.at',
 999                 '*.byinter.net',
1000                 '*.findhere.org',
1001                 '*.fw.nu',
1002                 '*.isgre.at',
1003                 '*.isthebe.st',
1004                 '*.kwik.to',
1005                 '*.lookin.at',
1006                 '*.lowestprices.at',
1007                 '*.onthenet.as',
1008                 '*.ontheweb.nu',
1009                 '*.pass.as',
1010                 '*.passingg.as',
1011                 '*.redirect.hm',
1012                 '*.rr.nu',
1013                 '*.ugly.as',
1014         ),
1015         '*.skracaj.pl',
1016         'skiltechurl.com',
1017         'skocz.pl',
1018         'slimurl.jp',
1019         'slink.in',
1020         'smallurl.eu',
1021         'smurl.name',
1022         'snipurl.com',
1023         'sp-nov.net',
1024         'splashblog.com',
1025         'spod.cx',
1026         '*.spydar.com',
1027         'Subdomain.gr' => array(
1028                 '*.p2p.gr',
1029                 '*.subdomain.gr',
1030         ),
1031         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1032         'surl.se',
1033         'surl.ws',
1034         'symy.jp',
1035         'tdurl.com',
1036         'tighturl.com',
1037         'tiniuri.com',
1038         'tiny.cc',
1039         'tiny.pl',
1040         'tiny2go.com',
1041         'tinylink.eu',
1042         'tinylinkworld.com',
1043         'tinypic.com',
1044         'tinyr.us',
1045         'TinyURL.com' => array(
1046                 'tinyurl.com',
1047                 'preview.tinyurl.com',
1048                 'tinyurl.co.uk',
1049         ),
1050         'titlien.com',
1051         '*.tlg.pl',
1052         'tlurl.com',
1053         'link.toolbot.com',
1054         'tnij.org',
1055         'Tokelau ccTLD' => array('.tk'),
1056         'toila.net',
1057         '*.toolbot.com',
1058         '*.torontonian.com',
1059         'trimurl.com',
1060         'ttu.cc',
1061         'turl.jp',
1062         '*.tz4.com',
1063         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1064                 '*.1.to',
1065                 '*.4.to',
1066                 '*.5.to',
1067                 '*.82.to',
1068                 '*.s.to',
1069                 '*.u.to',
1070                 '*.ce.to',
1071                 '*.cz.to',
1072                 '*.if.to',
1073                 '*.it.to',
1074                 '*.kp.to',
1075                 '*.ne.to',
1076                 '*.ok.to',
1077                 '*.pc.to',
1078                 '*.tv.to',
1079                 '*.dd.to',
1080                 '*.ee.to',
1081                 '*.hh.to',
1082                 '*.kk.to',
1083                 '*.mm.to',
1084                 '*.qq.to',
1085                 '*.xx.to',
1086                 '*.zz.to',
1087                 '*.ivy.to',
1088                 '*.joa.to',
1089                 '*.ever.to',
1090                 '*.mini.to',
1091         ),
1092         'uchinoko.in',
1093         'Ulimit.com' => array(
1094                 '*.be.tf',
1095                 '*.best.cd',
1096                 '*.bsd-fan.com',
1097                 '*.c0m.st',
1098                 '*.ca.tc',
1099                 '*.clan.st',
1100                 '*.com02.com',
1101                 '*.en.st',
1102                 '*.euro.st',
1103                 '*.fr.fm',
1104                 '*.fr.st',
1105                 '*.fr.vu',
1106                 '*.gr.st',
1107                 '*.ht.st',
1108                 '*.int.ms',
1109                 '*.it.st',
1110                 '*.java-fan.com',
1111                 '*.linux-fan.com',
1112                 '*.mac-fan.com',
1113                 '*.mp3.ms',
1114                 '*.qc.tc',
1115                 '*.sp.st',
1116                 '*.suisse.st',
1117                 '*.t2u.com',
1118                 '*.unixlover.com',
1119                 '*.zik.mu',
1120         ),
1121         '*.uni.cc',
1122         'UNONIC.com' => array(
1123                 '*.at.tf',      // AlpenNIC
1124                 '*.bg.tf',
1125                 '*.ca.tf',
1126                 '*.ch.tf',      // AlpenNIC
1127                 '*.cz.tf',
1128                 '*.de.tf',      // AlpenNIC
1129                 '*.edu.tf',
1130                 '*.eu.tf',
1131                 '*.int.tf',
1132                 '*.net.tf',
1133                 '*.pl.tf',
1134                 '*.ru.tf',
1135                 '*.sg.tf',
1136                 '*.us.tf',
1137         ),
1138         'Up.pl' => array(
1139                 '.69.pl',                       // by nsk101869
1140                 '.crack.pl',            // by nsk101869
1141                 '.film.pl',                     // by sibr19002
1142                 '.h2o.pl',                      // by nsk101869
1143                 '.hostessy.pl',         // by nsk101869
1144                 '.komis.pl',            // by nsk101869
1145                 '.laski.pl',            // by nsk101869
1146                 '.modelki.pl',          // by nsk101869
1147                 '.muzyka.pl',           // by sibr19002
1148                 '.nastolatki.pl',       // by nsk101869
1149                 '.obuwie.pl',           // by nsk101869
1150                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1151                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1152                 '.sexchat.pl',          // by nsk101869
1153                 '.sexlive.pl',          // by nsk101869
1154                 '.tv.pl',                       // by nsk101869
1155                 '.up.pl',                       // by nsk101869
1156                 '.video.pl',            // by nsk101869
1157                 '.xp.pl',                       // nsk101869
1158         ),
1159         '*.uploadr.com',
1160         'url.ie',
1161         'url4.net',
1162         'url-c.com',
1163         'urlbee.com',
1164         'urlbounce.com',
1165         'urlcut.com',
1166         'urlcutter.com',
1167         'urlic.com',
1168         'urlin.it',
1169         'urlkick.com',
1170         'URLLogs.com' => array(
1171                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1172                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1173         ),
1174         '*.urlproxy.com',
1175         'urlser.com',
1176         'urlsnip.com',
1177         'urlzip.de',
1178         'urlx.org',
1179         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1180         'utun.jp',
1181         'uxxy.com',
1182         '*.v27.net',
1183         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1184                 '*.all.at',
1185                 '*.back.to',
1186                 '*.beam.at',
1187                 '*.been.at',
1188                 '*.bite.to',
1189                 '*.board.to',
1190                 '*.bounce.to',
1191                 '*.bowl.to',
1192                 '*.break.at',
1193                 '*.browse.to',
1194                 '*.change.to',
1195                 '*.chip.ms',
1196                 '*.connect.to',
1197                 '*.crash.to',
1198                 '*.cut.by',
1199                 '*.direct.at',
1200                 '*.dive.to',
1201                 '*.drink.to',
1202                 '*.drive.to',
1203                 '*.drop.to',
1204                 '*.easy.to',
1205                 '*.everything.at',
1206                 '*.fade.to',
1207                 '*.fanclub.ms',
1208                 '*.firstpage.de',
1209                 '*.fly.to',
1210                 '*.flying.to',
1211                 '*.fortunecity.co.uk',
1212                 '*.fortunecity.com',
1213                 '*.forward.to',
1214                 '*.fullspeed.to',
1215                 '*.fun.ms',
1216                 '*.gameday.de',
1217                 '*.germany.ms',
1218                 '*.get.to',
1219                 '*.getit.at',
1220                 '*.hard-ware.de',
1221                 '*.hello.to',
1222                 '*.hey.to',
1223                 '*.hop.to',
1224                 '*.how.to',
1225                 '*.hp.ms',
1226                 '*.jump.to',
1227                 '*.kiss.to',
1228                 '*.listen.to',
1229                 '*.mediasite.de',
1230                 '*.megapage.de',
1231                 '*.messages.to',
1232                 '*.mine.at',
1233                 '*.more.at',
1234                 '*.more.by',
1235                 '*.move.to',
1236                 '*.musicpage.de',
1237                 '*.mypage.org',
1238                 '*.mysite.de',
1239                 '*.nav.to',
1240                 '*.notrix.at',
1241                 '*.notrix.ch',
1242                 '*.notrix.de',
1243                 '*.notrix.net',
1244                 '*.on.to',
1245                 '*.page.to',
1246                 '*.pagina.de',
1247                 '*.played.by',
1248                 '*.playsite.de',
1249                 '*.privat.ms',
1250                 '*.quickly.to',
1251                 '*.redirect.to',
1252                 '*.rulestheweb.com',
1253                 '*.run.to',
1254                 '*.scroll.to',
1255                 '*.seite.ms',
1256                 '*.shortcut.to',
1257                 '*.skip.to snap.to',
1258                 '*.soft-ware.de',
1259                 '*.start.at',
1260                 '*.stick.by',
1261                 '*.surf.to',
1262                 '*.switch.to',
1263                 '*.talk.to',
1264                 '*.tip.nu',
1265                 '*.top.ms',
1266                 '*.transfer.to',
1267                 '*.travel.to',
1268                 '*.turn.to',
1269                 '*.vacations.to',
1270                 '*.videopage.de',
1271                 '*.virtualpage.de',
1272                 '*.w3.to',
1273                 '*.walk.to',
1274                 '*.warp9.to',
1275                 '*.window.to',
1276                 '*.yours.at',
1277                 '*.zap.to',
1278                 '*.zip.to',
1279         ),
1280         'VDirect.com' => array(
1281                 '*.emailme.net',
1282                 '*.getto.net',
1283                 '*.inetgames.com',
1284                 '*.netbounce.com',
1285                 '*.netbounce.net',
1286                 '*.oneaddress.net',
1287                 '*.snapto.net',
1288                 '*.vdirect.com',
1289                 '*.vdirect.net',
1290                 '*.webrally.net',
1291         ),
1292         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1293         'vgo2.com',
1294         'Voila.fr' => array('r.voila.fr'),      // Fix it
1295         'w3t.org',
1296         'wapurl.co.uk',
1297         'Wb.st' => array(
1298                 '*.team.st',
1299                 '*.wb.st',
1300         ),
1301         'wbkt.net',
1302         'WebAlias.com' => array(
1303                 '*.andmuchmore.com',
1304                 '*.browser.to',
1305                 '*.escape.to',
1306                 '*.fornovices.com',
1307                 '*.fun.to',
1308                 '*.got.to',
1309                 '*.hottestpix.com',
1310                 '*.imegastores.com',
1311                 '*.latest-info.com',
1312                 '*.learn.to',
1313                 '*.moviefever.com',
1314                 '*.mp3-archives.com',
1315                 '*.myprivateidaho.com',
1316                 '*.radpages.com',
1317                 '*.remember.to',
1318                 '*.resourcez.com',
1319                 '*.return.to',
1320                 '*.sail.to',
1321                 '*.sports-reports.com',
1322                 '*.stop.to',
1323                 '*.thrill.to',
1324                 '*.tophonors.com',
1325                 '*.uncutuncensored.com',
1326                 '*.up.to',
1327                 '*.veryweird.com',
1328                 '*.way.to',
1329                 '*.web-freebies.com',
1330                 '.webalias.com',
1331                 '*.webdare.com',
1332                 '*.xxx-posed.com',
1333         ),
1334         'webmasterwise.com',
1335         'witherst at hotmail.com' => array(     // by Tim Withers
1336                 '*.associates-program.com',
1337                 '*.casinogopher.com',
1338                 '*.ezpagez.com',
1339                 '*.vgfaqs.com',
1340         ),
1341         'wittylink.com',
1342         'wiz.sc',                       // tiny.cc related
1343         'X50.us' => array(
1344                 '*.i50.de',
1345                 '*.x50.us',
1346         ),
1347         'big5.xinhuanet.com',
1348         'xhref.com',
1349         'Xn6.net' => array(
1350                 '*.9ax.net',
1351                 '*.xn6.net',
1352         ),
1353         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1354         '.y11.net',
1355         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1356                 '*.yesns.com',
1357                 '*.srv4u.net',
1358                 //blogne.com
1359         ),
1360         'yatuc.com',
1361         'yep.it',
1362         'yumlum.com',
1363         'yurel.com',
1364         'Z.la' => array(
1365                 'z.la',
1366                 't.z.la',
1367         ),
1368         'zaable.com',
1369         'zapurl.com',
1370         'zarr.co.uk',
1371         'zerourl.com',
1372         'ZeroWeb.org' => array(
1373                 '*.80t.com',
1374                 '*.firez.org',
1375                 '*.fizz.nu',
1376                 '*.ingame.org',
1377                 '*.irio.net',
1378                 '*.v33.org',
1379                 '*.zeroweb.org',
1380         ),
1381         'zhukcity.ru',
1382         'zippedurl.com',
1383         'zr5.us',
1384         '*.zs.pl',
1385         '*.zu5.net',
1386         'zuso.tw',
1387         '*.zwap.to',
1388 );
1389
1390 // --------------------------------------------------
1391
1392 $blocklist['A-2'] = array(
1393
1394         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1395         //
1396         //'*.dyndns.*', // Wildcard for dyndns
1397         //
1398         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1399         'ddns.ru' => array('*.bpa.nu'),
1400         'Dhs.org' => array(
1401                 '*.2y.net',
1402                 '*.dhs.org',
1403         ),
1404         '*.dnip.net',
1405         '*.dyndns.co.za',
1406         '*.dyndns.dk',
1407         '*.dyndns.nemox.net',
1408         'DyDNS.com' => array(
1409                 '*.ath.cx',
1410                 '*.dnsalias.org',
1411                 '*.dyndns.org',
1412                 '*.homeip.net',
1413                 '*.homelinux.net',
1414                 '*.mine.nu',
1415                 '*.shacknet.nu',
1416         ),
1417         '*.dtdns.net',                  // by jscott at sceiron.com
1418         '*.dynu.com',
1419         '*.dynup.net',
1420         '*.fdns.net',
1421         'J-Speed.net' => array(
1422                 '*.bne.jp',
1423                 '*.ii2.cc',
1424                 '*.jdyn.cc',
1425                 '*.jspeed.jp',
1426         ),
1427         '*.mydyn.de',
1428         '*.nerdcamp.net',
1429         'No-IP.com' => array(
1430                         '*.bounceme.net',
1431                         '*.hopto.org',
1432                         '*.myftp.biz',
1433                         '*.myftp.org',
1434                         '*.myvnc.com',
1435                         '*.no-ip.biz',
1436                         '*.no-ip.info',
1437                         '*.no-ip.org',
1438                         '*.redirectme.net',
1439                         '*.servebeer.com',
1440                         '*.serveblog.net',
1441                         '*.servecounterstrike.com',
1442                         '*.serveftp.com',
1443                         '*.servegame.com',
1444                         '*.servehalflife.com',
1445                         '*.servehttp.com',
1446                         '*.servemp3.com',
1447                         '*.servepics.com',
1448                         '*.servequake.com',
1449                         '*.sytes.net',
1450                         '*.zapto.org',
1451         ),
1452         '*.opendns.be',
1453         'Yi.org' => array(      // by dns at whyi.org
1454                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1455
1456                 // 72.55.129.46(redirect.yi.org)
1457                 '*.whyi.org',
1458                 '*.weedns.com',
1459         ),
1460         '*.zenno.info',
1461         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1462                         // and all non-recorded domains redirect to 'agoga.com' now
1463                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1464                         // http://agoga.com/aboutus.html
1465 );
1466
1467 // --------------------------------------------------
1468
1469 // B: Sample setting of:
1470 // Jacked (taken advantage of) and cleaning-less sites
1471 //
1472 // Please notify us about this list with reason:
1473 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1474
1475 $blocklist['B-1'] = array(
1476
1477         // B-1: Web spaces
1478         //
1479         //   Messages from forerunners:
1480         //     activefreehost.com
1481         //       "We regret to inform you that ActiveFreeHost
1482         //        free hosting service has is now closed (as of
1483         //        September 18). We have been online for over
1484         //        two and half years, but have recently decided
1485         //        to take time for software improvement to fight
1486         //        with server abuse, Spam advertisement and
1487         //        fraud."
1488         //
1489         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1490         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1491         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1492         '0Catch.com related' => array(
1493                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1494
1495                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1496                 '*.100freemb.com',              // by Danny Ashworth
1497                 '*.exactpages.com',
1498                 '*.fcpages.com',
1499                 '*.wtcsites.com',
1500
1501                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1502                 '*.741.com',
1503                 '*.freecities.com',
1504                 '*.freesite.org',
1505                 '*.freewebpages.org',
1506                 '*.freewebsitehosting.com',
1507                 '*.jvl.com',
1508
1509                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1510                 '*.freespaceusa.com',
1511                 '*.usafreespace.com',
1512
1513                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1514                 '*.dex1.com',
1515                 '*.questh.com',
1516
1517                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1518                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1519                 '*.012webpages.com',    // by support at 0catch.com
1520                 '*.150m.com',
1521                 '*.1sweethost.com',             // by whois at bluehost.com
1522                 '*.250m.com',                   // by jason at fahlman.net
1523                 '*.9cy.com',                    // by paulw0t at gmail.com
1524                 '*.angelcities.com',    // by cliff at eccentrix.com
1525                 '*.arcadepages.com',    // by admin at site-see.com
1526                 '*.e-host.ws',                  // by dns at jomax.net
1527                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1528                 '*.fw.bz',                              // by ben at kuehl.as
1529                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1530                 '*.g0g.net',                    // by domains at seem.co.uk
1531                 '*.galaxy99.net',               // by admin at bagchi.org
1532                 '*.greatnow.com',               // by peo at peakspace.com
1533                 '*.hautlynx.com',               // by hlewis28 at juno.com
1534                 '*.ibnsites.com',               // by cmrojas at mail.com
1535                 '*.just-allen.com',             // by extremehype at msn.com
1536                 '*.kogaryu.com',                // by angelguerra at msn.com
1537                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1538                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1539                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1540                 '*.s-enterprize.com',
1541                 '*.servetown.com',              // by jonahbliss at earthlink.net
1542                 '*.stinkdot.org',               // by bluedot at ziplip.com
1543                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1544                 '*.zomi.net',                   // by sianpu at gmail.com
1545         ),
1546         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1547         '100 Best Inc' => array(
1548                 // by 100 Best Inc (info at 100best.com)
1549
1550                 // 66.235.204.7(h204-007.bluefishhosting.com)
1551                 '*.2-hi.com',
1552                 '*.20fr.com',
1553                 '*.20ii.com',
1554                 '*.20is.com',
1555                 '*.20it.com',
1556                 '*.20m.com',    // by jlee at 100bestinc.com
1557                 '*.20to.com',
1558                 '*.2u-2.com',
1559                 '*.3-st.com',
1560                 '*.fws1.com',
1561                 '*.fw-2.com',
1562                 '*.inc5.com',
1563                 '*.on-4.com',
1564                 '*.st-3.com',
1565                 '*.st20.com',
1566                 '*.up-a.com',
1567
1568                 // 216.40.33.252(www-pd.mdnsservice.com)
1569                 '*.0-st.com',
1570                 '*.20me.com',
1571         ),
1572         '*.100foros.com',
1573         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1574         '20six Weblog Services' => array(
1575                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1576                 '.20six.co.uk',
1577                 '.20six.fr',
1578                 'myblog.de',
1579                 'myblog.es',
1580         ),
1581         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1582         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1583         '2Page.de' => array(
1584                 '.dreipage.de',
1585                 '.2page.de',
1586         ),
1587         '*.3-hosting.net',
1588         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1589         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1590         '*.8000web.com',        // 75.126.189.45
1591         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1592         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1593         '*.aimoo.com',
1594         '*.alkablog.com',
1595         '*.alluwant.de',
1596         '.amkbb.com',
1597         'AOL.com' =>    // http://about.aol.com/international_services
1598                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1599                 '(?:aol|americaonline)\.' .
1600                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1601                 // Rough but works
1602         'Apple.com' => array('idisk.mac.com'),
1603         '*.askfaq.org',
1604         '*.atfreeforum.com',
1605         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1606         '*.asphost4free.com',
1607         'basenow.com',
1608         'BatCave.net' => array(
1609                 '.batcave.net',                 // 64.22.112.226
1610                 '.freehostpro.com',             // 64.22.112.226
1611         ),
1612         '*.bb-fr.com',
1613         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1614         '*.beeplog.com',
1615         'bestfreeforums.com',
1616         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1617         'Blog.com' => array(
1618                 '*.blog.com',
1619                 '*.blogandorra.com',    // by admin.domains at co.blog.com
1620                 '*.blogangola.com',             // by admin.domains at co.blog.com
1621         ),
1622         '*.blog.com.es',
1623         '*.blog.hr',
1624         '*.blog-fx.com',
1625         '*.blogbeee.com',
1626         'blogas.lt',
1627         'blogbud.com',
1628         '*.blogburkinafaso.com',
1629         '*.blogcu.com',                 // by info at nokta.com
1630         'blogfreely.com',
1631         '*.blogdrive.com',
1632         '*.blogg.de',
1633         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1634         'bloggercrab.com',
1635         'bloggers.nl',
1636         '*.bloggingmylife.com',
1637         '*.bloggles.info',
1638         '*.blogharbor.com',
1639         '*.bloguj.eu',
1640         'bloguitos.com',
1641         'blogosfer.com',
1642         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1643         '*.blogslive.net',
1644         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1645         '*.blogstream.com',
1646         'blogyaz.com',
1647         'board-4you.de',
1648         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1649         '*.boardhost.com',
1650         'Bravenet.com' => array(
1651                 '*.bravenet.com',
1652                 '*.bravehost.com',
1653         ),
1654         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1655         'C2k.jp' => array(
1656                 // by Makoto Okuse (webmaster at 2style.net)
1657                 '.081.in',
1658                 '.2style.in',
1659                 '.bian.in',
1660                 '.curl.in',
1661                 '.ennui.in',
1662                 '.jinx.in',
1663                 '.loose.in',
1664                 '.mist.in',
1665                 '.muu.in',
1666                 '.naive.in',
1667                 '.panic.in',
1668                 '.slum.in',
1669
1670                 // by 2style, ns *.click2k.net, *.2style.net
1671                 '.2st.jp',
1672                 '.betty.jp',
1673                 '.cabin.jp',
1674                 '.cult.jp',
1675                 '.mippi.jp',
1676                 '.purety.jp',
1677                 '.rapa.jp',
1678                 '.side-b.jp',
1679                 '.web-box.jp',
1680                 '.yea.jp',
1681
1682                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1683                 '.2style.net',
1684                 '.click2k.net',
1685                 '.houka5.com',
1686
1687                 // by click2k, ns *.click2k.net, *.2style.net
1688                 '.psyco.jp',
1689                 '.sweety.jp',
1690
1691                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1692                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1693         ),
1694         '*.chueca.com',
1695         'city-forum.com',
1696         'concepts-mall.com',
1697         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1698         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1699         'counterhit.de',
1700         '*.createforum.net',
1701         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1702         '*.createmybb.com',
1703         'CwCity.de' => array(
1704                 '.cwcity.de',
1705                 '.cwsurf.de',
1706         ),
1707         'dakrats.net',
1708         '*.dcswtech.com',
1709         '*.devil.it',
1710         '*.diaryland.com',
1711         'digg.com',
1712         'domains at galaxywave.net' => array(
1713                 'blogstation.net',
1714                 '.phpbb-host.com',
1715         ),
1716         'dotbb.be',
1717         '*.dox.hu',                             // dns at 1b.hu
1718         '*.eadf.com',
1719         '*.eblog.com.au',
1720         '*.ekiwi.de',
1721         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1722         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1723         '*.ebloggy.com',
1724         'enunblog.com',
1725         '*.epinoy.com',
1726         '*.ez-sites.ws',
1727         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1728         '*.fathippohosting.com',        // 208.101.3.192
1729         'FC2.com' => array(
1730                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1731                         // Many traps available:
1732                         //      bqdr.blog98.fc2.com,       iframe
1733                         //      csfir.blog87.fc2.com,      iframe
1734                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1735                         //      sippou2006.blog60.fc2.com, iframe
1736                         // NOTE: 'blog.fc2.com' is not included
1737                 '*.h.fc2.com',  // Adult
1738         ),
1739         '*.fizwig.com',
1740         'forum.ezedia.net',
1741         '*.extra.hu',                   // angelo at jasmin.hu
1742         '*.fanforum.cc',
1743         'fingerprintmedia.com',
1744         '*.filelan.com',
1745         '*.fora.pl',
1746         '*.forka.eu',
1747         '*.foren-city.de',
1748         'foren-gratis.de',
1749         '*.foros.tv',
1750         '*.forospace.com',
1751         'foroswebgratis.com',
1752         '*.forum-on.de',
1753         '*.forum24.se',
1754         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1755         '.forum66.com',
1756         '*.forumcommunity.net',
1757         'forumhosting.org',
1758         '*.forums.com',
1759         'forumbolt.com',
1760         'phpbb.forumgratis.com',
1761         '*.forumlivre.com',
1762         'forumnow.com.br',
1763         '*.forumppl.com',
1764         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
1765         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
1766                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
1767                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
1768                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
1769         '*.fory.pl',
1770         '*.free-25.de',
1771         '*.free-bb.com',
1772         'Free-Blog-Hosting.com' => array(
1773                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
1774                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
1775                 'blog-tonite.com',                      // ns *.phpwebhosting.com
1776                 'blogznow.com',                         // ns *.phpwebhosting.com
1777                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
1778                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
1779         ),
1780         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
1781         'free-guestbook.net',
1782         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
1783         'freebb.nl',
1784         '*.freeclans.de',
1785         '*.freelinuxhost.com',  // by 100webspace.com
1786         '*.nofeehost.com',
1787         '*.freehyperspace.com',
1788         'freeforum.at',                 // by Sandro Wilhelmy
1789         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
1790         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
1791         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
1792         '*.freewebhostingpro.com',
1793         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
1794         'FreeWebHostingArea.com' => array(      // or www.freewha.com
1795                 '*.6te.net',
1796                 '*.ueuo.com',
1797                 '*.orgfree.com',
1798         ),
1799         '*.freewebpage.org',
1800         'Freewebs.com' => array(        // by inquiries at freewebs.com
1801                 'freewebs.com',
1802                 'freewebsfarms.com',
1803         ),
1804         '*.freewebspace.net.au',
1805         '*.freemyforum.com',    // by messahost at gmail.com
1806         'freepowerboards.com',
1807         '*.freepowerboards.com',
1808         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
1809         'Funpic.de' => array(   // by alexander at liemen.net
1810                 '*.funpic.de',
1811                 '*.funpic.org',
1812         ),
1813         'gb-hoster.de',
1814         '*.genblogger.com',
1815         'GetBetterHosting.com' => array(
1816                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
1817                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
1818         ),
1819         '*.goodboard.de',
1820         'gossiping.net',
1821         '*.greatnuke.com',
1822         '*.guestbook.de',
1823         'gwebspace.de',
1824         'Google.com' => array(
1825                 '*.blogspot.com',
1826                 'docs.google.com',
1827                 'groups-beta.google.com',
1828         ),
1829         'guestbook.at',
1830         'club.giovani.it',
1831         '*.gratis-server.de',
1832         'healthcaregroup.com',
1833         '*.heliohost.org',
1834         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
1835                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
1836                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
1837                 '*.front.ru',           // (domain at hc.ru)
1838                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
1839                 '*.hotbox.ru',          // (domain at hc.ru)
1840                 '*.hotmail.ru',         // (hosting at hc.ru)
1841                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
1842                 '*.land.ru',            // (domain at hc.ru)
1843                 '*.mail15.com',         // (hosting at hc.ru)
1844                 '*.mail333.com',        // (hosting at hc.ru)
1845                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
1846                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
1847                 '*.pisem.net',          // (hosting at hc.ru)
1848                 '*.pochta.ru',          // (domain at hc.ru)
1849                 '*.pochtamt.ru',        // (domain at hc.ru)
1850                 '*.pop3.ru',            // (domain at hc.ru)
1851                 '*.rbcmail.ru',         // (domain at hc.ru)
1852                 '*.smtp.ru',            // (domain at hc.ru)
1853         ),
1854         '*.hiblogger.com',              // by chiaokin at gmail.com
1855         '*.hit.bg',                             // by forumup.com ??
1856         '*.host-page.com',
1857         '*.hostingclub.de',
1858         'forums.hspn.com',
1859         '*.httpsuites.com',
1860         '*.hut2.ru',
1861         'ibfree.org',                   // 208.101.45.88
1862         'IC.cz' => array(
1863                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
1864                 '*.hu.cz',                      // internetcentrum at gmail.com
1865                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
1866                 '*.ic.cz',                      // internetcentrum at gmail.com
1867                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
1868                 '*.own.cz',                     // internetcentrum at gmail.com
1869                 '*.phorum.cz',          // internetcentrum at gmail.com
1870                 '*.tym.cz',                     // internetcentrum at gmail.com
1871                 '*.tym.sk',                     // jobot at ignum.cz
1872                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
1873                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
1874                 '*.yw.sk',                      // jobot at ignum.cz
1875         ),
1876         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
1877                 '*.0moola.com',
1878                 '*.3000mb.com',
1879                 '.501megs.com',
1880                 '*.teracities.com',
1881                 '*.xoompages.com',
1882         ),
1883         '*.icspace.net',
1884         'iEUROP.net' => array(
1885                 '*.ibelgique.com',
1886                 '*.iespana.es',
1887                 '*.ifrance.com',
1888                 '*.iitalia.com',
1889                 '*.iquebec.com',
1890                 '*.isuisse.com',
1891         ),
1892         '*.ihateclowns.net',
1893         '*.ii55.com',
1894         '*.ipbfree.com',
1895         '*.iphorum.com',
1896         '*.blog.ijijiji.com',
1897         '*.info.com',
1898         '*.informe.com',
1899         'it168.com',
1900         '.iwannaforum.com',
1901         '*.jconserv.net',
1902         '*.jeeran.com',
1903         '*.jeun.fr',
1904         '*.journalscape.com',
1905         '*.justfree.com',
1906         '*.blog.kataweb.it',
1907         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
1908         '*.kokoom.com',
1909         'koolpages.com',
1910         '*.ksiegagosci.info',
1911         'Lide.cz' => array(
1912                 '*.lide.cz',
1913                 '*.sblog.cz',
1914         ),
1915         'limmon.net',
1916         'Livedoor.com' => array(
1917                 'blog.livedoor.jp',
1918                 '*.blog.livedoor.com',  // redirection
1919         ),
1920         '*.livejournal.com',
1921         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
1922         '*.logme.nl',
1923         'lol.to',
1924         'ltss.luton.ac.uk',
1925         'Lycos.com' => array(
1926                 '.angelfire.com',       // angelfire.lycos.com
1927
1928                 '*.jubii.dk',   // search., medlem.
1929                 '*.jubiiblog.co.uk',
1930                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
1931                 '*.jubiiblog.de',
1932                 '*.jubiiblog.dk',
1933                 '*.jubiiblog.fr',
1934                 '*.jubiiblog.it',
1935                 '*.jubiiblog.nl',
1936
1937                 '*.lycos.at',
1938                 '*.lycos.ch',
1939                 '*.lycos.co.uk',
1940                 'angelfire.lycos.com',
1941                 '*.lycos.de',
1942                 '*.lycos.es',
1943                 '*.lycos.fr',
1944                 '*.lycos.it',           // by Lycos Europe GmbH
1945                 '*.lycos.nl',
1946
1947                 '*.spray.se',
1948                 '*.sprayblog.se',
1949
1950                 '*.tripod.com',
1951         ),
1952         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
1953         '*.memebot.com',
1954         '*.messageboard.nl',
1955         'mokono GmbH' => array(
1956                 '*.blog.com.es',
1957                 '*.blog.de',
1958                 '*.blog.fr',
1959                 '*.blog.co.uk',
1960                 '*.blog.ca',
1961                 '*.blogs.se',
1962                 '*.blogs.fi',
1963                 '*.blogs.no',
1964                 '*.blogs.dk',
1965                 '*.blogs.ro',
1966                 '*.weblogs.pl',
1967                 '*.weblogs.cz',
1968                 '*.weblogs.hu',
1969         ),
1970         'mojklc.com',
1971         'MonForum.com' => array(
1972                 '*.monforum.com',
1973                 '*.monforum.fr',
1974         ),
1975         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
1976         '*.my10gb.com',
1977         'myblog.is',
1978         'myblogma.com',
1979         '*.myblogvoice.com',
1980         'myblogwiki.com',
1981         '*.myforum.ro',
1982         '*.myfreewebs.net',
1983         '*.mysite.com',
1984         '*.myxhost.com',
1985         '*.netfast.org',
1986         'NetGears.com' => array(
1987                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
1988                 '*.9k.com',                             // 64.39.31.55(netgears.com)
1989                 '*.freewebspace.com',   // 64.49.236.72
1990         ),
1991         'Netscape.com' => array('mywebpage.netscape.com'),
1992         'users.newblog.com',
1993         'neweconomics.info',
1994         '*.newsit.es',                          // 75.126.252.108
1995         'Northsky.com' => array(
1996                 // by hostmaster at northsky.com
1997                 // northsky.com redirects to communityarchitect.com
1998
1999                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2000                 '*.00author.com',
2001                 '*.00band.com',
2002                 '*.00books.com',
2003                 '*.00cash.com',
2004                 '*.00cd.com',
2005                 '*.00dvd.com',
2006                 '*.00family.com',
2007                 '*.00game.com',
2008                 '*.00home.com',
2009                 '*.00it.com',
2010                 '*.00me.com',
2011                 '*.00movies.com',
2012                 '*.00page.com',
2013                 '*.00politics.com',
2014                 '*.00sf.com',
2015                 '*.00show.com',
2016                 '*.00song.com',
2017                 '*.00trek.com',
2018                 '*.00video.com',
2019                 '*.0me.com',
2020                 '*.0pi.com',
2021                 '*.happy-couple.com',
2022                 '*.warp0.com',
2023
2024                 '*.50megs.com',         // 64.136.25.170
2025
2026                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2027                 '*.00server.com',
2028                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2029                 '*.fanspace.com',
2030
2031                 // 64.136.25.168 by Mark Bishop
2032                 '*.00go.com',
2033                 '*.00space.com',
2034                 '*.00sports.com',
2035         ),
2036         '*.nm.ru',
2037         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2038         'onlyfree.de',
2039         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2040         '*.ohost.de',
2041         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2042                 '.friko.pl',
2043                 '.jak.pl',
2044                 '.nazwa.pl',
2045                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2046                 '.w8w.pl',
2047                 '.za.pl',
2048                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2049         ),
2050         '*.parlaris.com',
2051         '*.pathfinder.gr',
2052         '*.persianblog.com',
2053         '*.phorum.pl',
2054         'Phpbb24.com' => array( // by Daniel Eriksson
2055                 '*.createforum.us',     // registry at webbland.se
2056                 '*.forumportal.us',     // registry at webbland.se
2057                 '*.freeportal.us',      // registry at network24.se
2058                 '*.phpbb2.us',          // daniel at danielos.com
2059                 '*.phpbb24.com',        // daniel at danielos.com
2060                 '*.myforumportal.com',  // daniel at webbland.se
2061         ),
2062         'phpbb4you.com',
2063         'phpbbcommunity.com',
2064         '*.phpbbx.de',
2065         '*.pochta.ru',
2066         '*.portbb.com',
2067         'powerwebmaster.de',
2068         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2069         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2070         '*.probook.de',
2071         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2072         '*.quickfreehost.com',
2073         'quizilla.com',
2074         '*.quotaless.com',
2075         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2076         'razyboard.com',
2077         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2078         'realhp.de',
2079         'reddit.com',           ///user/
2080         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2081                 '*.juicypornhost.com',
2082                 '*.pornzonehost.com',
2083                 '*.xhostar.com',
2084         ),
2085         'RIN.ru' => array(
2086                 '*.sbn.bz',
2087                 '*.wol.bz',
2088         ),
2089         '*.sayt.ws',
2090         'Seblg.com' => array(
2091                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2092                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2093         ),
2094         '*.seo-blog.org',
2095         '*.shoutpost.com',
2096         '*.siamforum.com',
2097         '*.siteburg.com',
2098         '*.sitehome.ru',
2099         '*.sitesfree.com',              // support at livesearching.com
2100         '*.sitesled.com',
2101         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2102         'SmarTrans.com' => array(
2103                 '.3w.to',
2104                 '.aim.to',
2105                 '.djmp.jp',
2106                 '.nihongourl.nu',
2107                 '.urljp.com',
2108                 '.www1.to',
2109                 '.www2.to',
2110                 '.www3.to',
2111         ),
2112         '*.spazioforum.it',
2113         'members.spboards.com',
2114         'forums.speedguide.net',
2115         '*.spicyblogger.com',
2116         '*.spotbb.com',
2117         '*.squarespace.com',
2118         'stickypond.com',
2119         'stormloader.com',
2120         'strikebang.com',
2121         '*.sultryserver.com',
2122         '*.t35.com',
2123         '*.talks.at',
2124         'tabletpcbuzz.com',
2125         '*.talkthis.com',
2126         'tbns.net',
2127         'telasipforums.com',
2128         'thestudentunderground.org',
2129         'think.ubc.ca',
2130         '*.thumblogger.com',
2131         'Topix.com' => array(
2132                 'topix.com',
2133                 'topix.net',
2134         ),
2135         'forum.tourism-talk.com.au',
2136         'UcoZ Web-Services' => array(
2137                 '*.3dn.ru',
2138                 '*.clan.su',
2139                 '*.moy.su',
2140                 '*.my1.ru',
2141                 '*.p0.ru',
2142                 '*.pp.net.ua',
2143                 '*.ucoz.co.uk',
2144                 '*.ucoz.com',
2145                 '*.ucoz.net',
2146                 '*.ucoz.org',
2147                 '*.ucoz.ru',
2148                 '*.ws.co.ua',
2149         ),
2150         '*.unforo.net',
2151         '*.vdforum.ru',
2152         '*.vtost.com',
2153         '*.vidiac.com',
2154         'Voila.fr' => array('.site.voila.fr'),
2155         'volny.cz',
2156         'voy.com',
2157         '*.welover.org',
2158         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2159                 '*.fasthost.tv',
2160                 '*.hothost.tv',
2161                 '*.isgreat.tv',
2162                 '*.issexy.tv',
2163                 '*.isterrible.tv',
2164                 '*.somegood.tv',
2165                 '*.adultnations.com',
2166                 '*.alladultfemale.com',
2167                 '*.alladultmale.com',
2168                 '*.allbisexual.com',
2169                 '*.allbreast.com',
2170                 '*.allfeminism.com',
2171                 '*.allmanpages.com',
2172                 '*.allmendirect.com',
2173                 '*.allphotoalbum.com',
2174                 '*.allsexpages.com',
2175                 '*.allwomanweb.com',
2176                 '*.attorney-site.com',
2177                 '*.bedclip.com',
2178                 '*.bestfamilysite.com',
2179                 '*.bestmusicpages.com',
2180                 '*.bigmoron.com',
2181                 '*.bourgeoisonline.com',
2182                 '*.candyfrom.us',
2183                 '*.cartoonhit.com',
2184                 '*.cat-on-line.com',
2185                 '*.chokesondick.com',
2186                 '*.closeupsof.us',
2187                 '*.cpa-site.com',
2188                 '*.dampgirl.com',
2189                 '*.dampgirls.com',
2190                 '*.deepestfetish.com',
2191                 '*.docspages.com',
2192                 '*.dog-on-line.com',
2193                 '*.dogcountries.com',
2194                 '*.dognations.com',
2195                 '*.doingitwith.us',
2196                 '*.drenchedface.com',
2197                 '*.drenchedlips.com',
2198                 '*.drspages.com',
2199                 '*.edogden.com',
2200                 '*.eroticountry.com',
2201                 '*.fasthost.tv',
2202                 '*.fineststars.com',
2203                 '*.foronlinegames.com',
2204                 '*.forplanetearth.com',
2205                 '*.freeadultparty.com',
2206                 '*.freespeechsite.com',
2207                 '*.gayadultxxx.com',
2208                 '*.gaytaboo.com',
2209                 '*.greatcookery.com',
2210                 '*.greatrecipepages.com',
2211                 '*.greatstreamingvideo.com',
2212                 '*.hatesit.com',
2213                 '*.hothost.tv',
2214                 '*.iscrappy.com',
2215                 '*.isgreat.tv',
2216                 '*.issexy.tv',
2217                 '*.isterrible.tv',
2218                 '*.itinto.us',
2219                 '*.japannudes.net',
2220                 '*.jesussave.us',
2221                 '*.jesussaveus.com',
2222                 '*.labialand.com',
2223                 '*.lettersfrom.us',
2224                 '*.lookingat.us',
2225                 '*.lunaticsworld.com',
2226                 '*.microphallus.com',
2227                 '*.mycatshow.com',
2228                 '*.mydogshow.com',
2229                 '*.myhardman.com',
2230                 '*.mylawsite.net',
2231                 '*.mylovething.com',
2232                 '*.onasoapbox.com',
2233                 '*.onlinepulpit.com',
2234                 '*.petitionthegovernment.com',
2235                 '*.photosfor.us',
2236                 '*.picturetrades.com',
2237                 '*.pleasekiss.us',
2238                 '*.politicalemergency.com',
2239                 '*.power-emergency.com',
2240                 '*.prayingfor.us',
2241                 '*.realbadidea.com',
2242                 '*.realisticpolitics.com',
2243                 '*.reallybites.com',
2244                 '*.reallypumping.us',
2245                 '*.reallyrules.com',
2246                 '*.reallysuckass.com',
2247                 '*.reallysucksass.com',
2248                 '*.realsweetheart.com',
2249                 '*.rottenass.com',
2250                 '*.schoolreference.com',
2251                 '*.sexheroes.com',
2252                 '*.sharewith.us',
2253                 '*.smutstars.com',
2254                 '*.soakinglips.com',
2255                 '*.somegood.tv',
2256                 '*.songsfrom.us',
2257                 '*.stinkingfart.com',
2258                 '*.stinkyhands.com',
2259                 '*.storiesfrom.us',
2260                 '*.taboocountry.com',
2261                 '*.television-series.com',
2262                 '*.thisbelongsto.us',
2263                 '*.totallyboning.us',
2264                 '*.vaginasisters.com',
2265                 '*.verydirtylaundry.com',
2266                 '*.videosfor.us',
2267                 '*.videosfrom.us',
2268                 '*.videosof.us',
2269                 '*.virtualdogshit.com',
2270                 '*.web1000.com',
2271                 '*.webpicturebook.com',
2272                 '*.wronger.com',
2273                 '*.xxxnations.com',
2274                 '*.yourwaywith.us',
2275         ),
2276         'webblog.ru',
2277         'weblogmaniacs.com',
2278         '.webng.com',                   // www.*, www3.*
2279         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
2280         'websitetoolbox.com',
2281         'Welnet.de' => array(
2282                 'welnet.de',
2283                 'welnet4u.de',
2284         ),
2285         'wh-gb.de',
2286         '*.wikidot.com',
2287         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
2288         '*.wmjblogs.ru',
2289         '*.wordpress.com',
2290         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
2291         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
2292         '*.xforum.se',
2293         'xfreeforum.com',
2294         '*.xoomwebs.com',
2295         '.freeblogs.xp.tl',
2296         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
2297         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
2298         'Yahoo.com' => array(
2299                 'geocities.com',
2300         ),
2301         'YANDEX, LLC.' => array(        // noc at yandex.net
2302                 '*.narod.ru',
2303                 'ya.ru',
2304                 'yandex.ru',
2305         ),
2306         '*.yeahost.com',
2307         'yourfreebb.de',
2308         'Your-Websites.com' => array(
2309                 '*.your-websites.net',
2310                 '*.web-space.ws',
2311         ),
2312 );
2313
2314 // --------------------------------------------------
2315
2316 $blocklist['B-2'] = array(
2317
2318         // B-2: Jacked contents, something implanted
2319         // (e.g. some sort of blog comments, BBSes, forums, wikis)
2320         '*.3dm3.com',
2321         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
2322         '*.1fr1.com',
2323         'a4aid.org',
2324         'aac.com',
2325         '*.aamad.org',
2326         'ad-pecjak.si',
2327         'agnt.org',
2328         'alwanforthearts.org',
2329         '*.anchor.net.au',
2330         'anewme.org',
2331         'internetyfamilia.asturiastelecentros.com',
2332         'Ball State University' => array('web.bsu.edu'),
2333         'btofaq.net',                   ///v3/forum
2334         'blepharospasm.org',
2335         'nyweb.bowlnfun.dk',
2336         '*.buzznet.com',
2337         '*.canberra.net.au',
2338         'castus.com',
2339         'Case Western Reserve University' => array('case.edu'),
2340         'ceval.de',
2341         'codespeak.net',
2342         'Colorado School of Mines' => array('ticc.mines.edu'),
2343         '*.colourware.co.uk',
2344         'cpuisp.com',
2345         'International Christian University' => array('icu.edu.ua'),
2346         '*.iphpbb.com',
2347         'board-z.de',
2348         '*.board-z.de',
2349         'California State University Stanislaus' => array('writing.csustan.edu'),
2350         'cannon.co.za',
2351         'columbosgarden.com',
2352         '*.communityhost.de',
2353         'connectionone.org',
2354         'deathwinds.com',
2355         'deforum.org',
2356         'delayedreaction.org',
2357         'deproduction.org',
2358         'dc503.org',
2359         'dre-centro.pt',
2360         'Duke University' => array('devel.linux.duke.edu'),
2361         '*.esen.edu.sv',
2362         'forums.drumcore.com',
2363         'dundeeunited.org',
2364         'energyglass.com.ua',
2365         'exclusivehotels.com',
2366         'info.ems-rfid.com',
2367         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
2368         'fbwloc.com',
2369         '.fhmcsa.org.au',
2370         'findyourwave.co.uk',
2371         'frogcafe.net',
2372         'plone4.fnal.gov',
2373         'freeforen.com',
2374         'funkdoc.com',
2375         'funnyclipcentral.com',
2376         'gearseds.com',
2377         'generationrice.com',
2378         'ghettojava.com',
2379         'gnacademy.org',
2380         '*.goodboard.de',
2381         'GreenDayVideo.net' => array(
2382                 'greendayvideo.net',
2383                 'espanol.greendayvideo.net',
2384         ),
2385         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
2386         'Harvard Law School' => array('blogs.law.harvard.edu'),
2387         'helpiammoving.com',
2388         'homepage-dienste.com',
2389         'Howard University' => array('networks.howard.edu'),
2390         'hullandhull.com',
2391         'Huntington University' => array('huntington.edu'),
2392         'huskerink.com',
2393         '.hyba.info',
2394         'inda.org',
2395         '*.indymedia.org',      // by abdecom at riseup.net
2396         'instantbulletin.com',
2397         'internetincomeclub.com',
2398         '*.inventforum.com',
2399         'Iowa State University' => array('boole.cs.iastate.edu'),
2400         'ipwso.org',
2401         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
2402         'ironmind.com',
2403         'skkustp.itgozone.com', // hidden JavaScript
2404         'jazz2online.com',
2405         '.jloo.org',
2406         'Kazan State University' => array(
2407                 'dir.kzn.ru',
2408                 'sys.kcn.ru',
2409         ),
2410         'test.kernel.org',
2411         'kevindmurray.com',
2412         'kroegjesroutes.nl',
2413         '.legion.org',
2414         'Loyola Marymount University' => array('lmu.edu'),
2415         'forum.lixium.fr',
2416         'macfaq.net',
2417         'me4x4.com',
2418         'microbial-ecology.net',
2419         'minsterscouts.org',
2420         'morallaw.org',
2421         'morerevealed.com',
2422         'macronet.org',
2423         'mamiya.co.uk',
2424         'vcd.mmvcd.com',
2425         'Monmouth College' => array('department.monm.edu'),
2426         'mountainjusticemedia.org',
2427         '*.mybbland.com',
2428         'mydlstore.com',
2429         '*.netboardz.com',
2430         'North Carolina A&T State University' => array(
2431                 'ncat.edu',
2432                 'my.ncat.edu',
2433                 'hlc.ncat.edu',
2434         ),
2435         'placetobe.org',
2436         'users.nethit.pl',
2437         'nightclubvip.net',
2438         'njbodybuilding.com',
2439         'nlen.org',
2440         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
2441         'offtextbooks.com',
2442         'ofimatika.com',
2443         'omakase-net',                  // iframe
2444         'omikudzi.ru',
2445         'openchemist.net',
2446         'palungjit.com',
2447         'pataphysics-lab.com',
2448         'paullima.com',
2449         'perl.org.br',
2450         'pfff.co.uk',
2451         'pix4online.co.uk',
2452         'plone.dk',
2453         'preform.dk',
2454         'privatforum.de',
2455         'publicityhound.net',
2456         'qea.com',
2457         'rbkdesign.com',
2458         'rehoboth.com',
2459         'rodee.org',
2460         'ryanclark.org',
2461         '*.reallifelog.com',
2462         'rkphunt.com',
2463         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
2464         'sapphireblue.com',
2465         'saskchamber.com',
2466         'savevoorhees.org',
2467         'selikoff.net',
2468         'serbisyopilipino.org',
2469         'setbb.com',
2470         'sharejesusinternational.com',
2471         'silver-tears.net',
2472         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
2473         '.softpress.com',
2474         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
2475         'tehudar.ru',
2476         'Tennessee Tech University' => array('manila.tntech.edu'),
2477         'thebluebird.ws',
2478         'theosis.org',
2479         '*.thoforum.com',
2480         'troms-slekt.com',
2481         'theedgeblueisland.com',
2482         'toyshop.com.tw',               // /images/sigui/
2483         'torontoplace.com',
2484         'chat.travlang.com',
2485         'trickropingbylassue.com',
2486         'Truman State University' => array('mathbio.truman.edu'),
2487         'tuathadedannan.org',
2488         'txgotg.com',
2489         'tzaneen.co.za',
2490         'The University of North Dakota' => array(
2491                 'learn.aero.und.edu',
2492                 'ez.asn.und.edu',
2493         ),
2494         'The University of Alabama' => array('bama.ua.edu'),
2495         'unisonscotlandlaw.co.uk',
2496         'University of California' => array('classes.design.ucla.edu'),
2497         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
2498         'University of Northern Colorado' => array('unco.edu'),
2499         'University of Toronto' => array(
2500                 'environment.utoronto.ca',
2501                 'grail.oise.utoronto.ca',
2502                 'utsc.utoronto.ca',
2503         ),
2504         'urgentclick.com',
2505         'vacant.org.uk',
2506         'Villa Julie College' => array('www4.vjc.edu'),
2507         'Vail Valley Foundation' => array('.vvf.org'),
2508         'wabson.org',
2509         'warping.to',           // Seems (a redirection site, but now) taken advantage of
2510         'webarch.com',          // by WebArchitects (webarch at insync.net)
2511         'weehob.com',
2512         'West Virginia University Parkersburg' => array('wvup.edu'),
2513         'williamsburgrentals.com',
2514         'wolvas.org.uk',
2515         'wookiewiki.org',
2516         'xsgaming.com',                 // Jacked
2517         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
2518         'Yahoo.com' => array(
2519                 'blog.360.yahoo.com',
2520                 '*.groups.yahoo.com'
2521         ),
2522         'yasushi.site.ne.jp',   // One of mixedmedia.net'
2523         'youthpeer.org',
2524         '*.zenburger.com',
2525         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
2526 );
2527
2528 // --------------------------------------------------
2529
2530 $blocklist['C'] = array(
2531
2532         // C: Sample setting of:
2533         // Exclusive spam domains
2534         //
2535         // Seems to have flavor of links, pills, gamble, online-games, erotic,
2536         // affiliates, finance, sending viruses, malicious attacks to browsers,
2537         // and/or mixed ones
2538         //
2539         // Please notify us about this list with reason:
2540         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
2541
2542         // C-1: Domain sets (seems to be) born to spam you
2543         //
2544         // All buziness-related spam
2545         //'.biz'
2546         //
2547         'admin at seekforweb.com' => array(
2548                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
2549                 '.lovestoryx.com',
2550                 '.loveaffairx.com',
2551                 '.onmore.info',
2552                 '.scfind.info',
2553                 '.scinfo.info',
2554                 '.webwork88.info',
2555         ),
2556         'boss at bse-sofia.bg' => array(        // by Boris
2557                 '.htewbop.org',
2558                 '.kimm--d.org',
2559                 '.gtre--h.org',
2560                 '.npou--k.org',
2561                 '.bres--z.org',
2562                 '.berk--p.org',
2563                 '.bplo--s.org',
2564                 '.basdpo.org',
2565                 '.jisu--m.org',
2566                 '.kire--z.org',
2567                 '.mertnop.org',
2568                 '.mooa--c.org',
2569                 '.nake--h.org',
2570                 '.noov--b.org',
2571                 '.suke--y.org',
2572                 '.vasdipv.org',
2573                 '.vase--l.org',
2574                 '.vertinds.org',
2575         ),
2576         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
2577                 '.aqq3.info',
2578                 '.axa00.info',
2579                 '.okweb11.org',
2580                 '.okweb12.org',
2581                 '.okweb13.org',
2582                 '.okweb14.org',
2583         ),
2584         'opezdol at gmail.com' => array(
2585                 '.informazionicentro.info',
2586                 '.notiziacentro.info',
2587         ),
2588         'SomethingGen' => array(
2589                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
2590                 // 'CamsGen' by Sergey (buckster at hotpop.com)
2591                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
2592                 // by Lee Chang (nebucha at model-x.com)
2593                 '.adult-chat-world.info',       // by Lui
2594                 '.adult-chat-world.org',        // by Lui
2595                 '.adult-sex-chat.info',         // by Lui
2596                 '.adult-sex-chat.org',          // by Lui
2597                 '.adult-cam-chat.info',         // by Lui
2598                 '.adult-cam-chat.org',          // by Lui
2599                 '.dildo-chat.org',                      // by Lui
2600                 '.dildo-chat.info',                     // by Lui
2601                 // flirt-online.info is not CamsGen
2602                 '.flirt-online.org',            // by Lui
2603                 '.live-adult-chat.info',        // by Lui
2604                 '.live-adult-chat.org',         // by Lui
2605                 '.sexy-chat-rooms.info',        // by Lui
2606                 '.sexy-chat-rooms.org',         // by Lui
2607                 '.swinger-sex-chat.info',       // by Lui
2608                 '.swinger-sex-chat.org',        // by Lui
2609                 '.nasty-sex-chat.info',         // by Lui
2610                 '.nasty-sex-chat.org',          // by Lui
2611
2612                 '.camshost.info',                       // by Sergey
2613                 '.camdoors.info',                       // by Sergey
2614                 '.chatdoors.info',                      // by Sergey
2615
2616                 '.lebedi.info',                         // by Pronin
2617                 '.loshad.info',                         // by Pronin
2618                 '.porosenok.info',                      // by Pronin
2619                 '.indyushonok.info',            // by Pronin
2620                 '.kotyonok.info',                       // by Pronin
2621                 '.kozlyonok.info',                      // by Pronin
2622                 '.magnoliya.info',                      // by Pronin
2623                 '.svinka.info',                         // by Pronin
2624                 '.svinya.info',                         // by Pronin
2625                 '.zherebyonok.info',            // 89.149.206.225 by Pronin
2626
2627                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
2628
2629                 '.adult-cam-chat-sex.info',             // by Lee
2630                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
2631                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
2632                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
2633                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
2634                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
2635                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
2636                 '.sex-chat-porn-cam.info',              // by Lee
2637         ),
2638         'mital at topo20.org' => array( // by Marcello Italianore
2639                 '.trevisos.org',
2640                 '.topo20.org',
2641         ),
2642         'WellCams.com' => array(
2643                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
2644                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
2645                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
2646         ),
2647         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
2648                 '.besturgent.org',
2649                 '.googletalknow.org',
2650                 '.montypythonltd.org',
2651                 '.supersettlemet.org',
2652                 '.thepythonfoxy.org',
2653                 '.ukgamesyahoo.org',
2654                 '.youryahoochat.org',
2655         ),
2656         'kikimas at mail.net' => array( // Redirect to nb717.com etc
2657                 '.dbsajax.org',
2658                 '.acgt2005.org',
2659                 '.gopikottoor.com',
2660                 '.koosx.org',
2661                 '.mmgz.org',
2662                 '.zhiyehua.net',
2663         ),
2664         'vdf at lovespb.com' => array(  // by Andrey
2665                 '.02psa.info',
2666                 '.1818u.org',
2667                 '.18ew.info',
2668                 '.43sexx.org',
2669                 '.56porn.org',
2670                 '.6discount.info',
2671                 '.78porn.org',          // "UcoZ WEB-SERVICES"
2672                 '.78rus.info',
2673                 '.92ssex.org',          // "ForumGenerator"
2674                 '.93adult.org',         // "ForumGenerator"
2675                 '.aboutsr.info',
2676                 '.aboutzw.info',
2677                 '.all23.info',
2678                 '.allvdf.info',
2679                 '.buy-dge.info',
2680                 '.buypo.info',
2681                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
2682                 '.cv83.info',
2683                 '.cvwifw.info',
2684                 '.dabouts.info',
2685                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
2686                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
2687                 '.free01sa.info',
2688                 '.frees1.info',
2689                 '.freexz.info',
2690                 '.ifree-search.org',
2691                 '.lovespb.info',
2692                 '.myso2.info',
2693                 '.nb74u.info',
2694                 '.ohhh2.info',
2695                 '.ol43.info',
2696                 '.olala18.info',
2697                 '.oursales.info',
2698                 '.pasian1.info',
2699                 '.pldk.info',
2700                 '.po473.info',
2701                 '.pornr.info',          // "UcoZ WEB-SERVICES"
2702                 '.poz2.info',
2703                 '.qpf8j4d.info',
2704                 '.saleqw.info',
2705                 '.sexof.info',          // "UcoZ WEB-SERVICES"
2706                 '.sexz18.info',
2707                 '.sexy69a.info',
2708                 '.shedikc.info',
2709                 '.spb78.info',
2710                 '.usacanadauk.info',
2711                 '.v782mks.info',
2712                 '.vny0.info',
2713                 '.wifes1.info',
2714                 '.xranvam.info',
2715                 '.zenitcx.info',
2716                 '.zxolala.info',
2717         ),
2718         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
2719                 '.care01.info',
2720                 '.care02.info',
2721                 '.care03.info',
2722                 '.care04.info',
2723                 '.care05.info',
2724                 '.care06.info',
2725                 '.care07.info',
2726                 '.care08.info',
2727                 '.care09.info',
2728                 '.care10.info',
2729                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
2730                 '.klastar01.info',
2731                 '.klastar02.info',
2732                 '.klastar03.info',
2733                 '.klastar04.info',
2734                 '.klastar05.info',
2735                 '.klastar06.info',
2736                 '.klastar07.info',
2737                 '.klastar08.info',
2738                 '.klastar09.info',
2739                 '.klastar10.info',
2740                 '.um20ax01.info',
2741                 '.um20ax02.info',
2742                 '.um20ax03.info',
2743                 '.um20ax04.info',
2744                 '.um20ax05.info',
2745                 '.um20ax06.info',
2746                 '.um20ax07.info',
2747                 '.um20ax08.info',
2748                 '.um20ax09.info',
2749                 '.um20ax10.info',
2750         ),
2751         'forrass at gmail.com' => array(        // by Ismail
2752                 '.zmh01.info',
2753                 '.zmh02.info',
2754                 '.zmh03.info',
2755                 '.zmh04.info',
2756                 '.zmh05.info',
2757                 '.zmh06.info',
2758                 '.zmh07.info',
2759                 '.zmh08.info',
2760                 '.zmh09.info',
2761                 '.zmh10.info',
2762         ),
2763         'Varsylenko Vladimir and family' => array(
2764                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
2765                 // by David C. Lack (David.C.Lack at dodgeit.com)
2766                 // by Kuzma V Safonov (admin at irtes.ru)
2767                 // by Petrov Vladimir (vvm_kz at rambler.ru)
2768                 // by LAURI FUNK (vvm_kz at rambler.ru)
2769
2770                 // 64.92.162.210(*.static.reverse.ltdomains.com)
2771                 '.abrek.info',                          // by Petrov
2772                 '.allsexonline.info',           // by Varsylenko
2773                 '.d1rnow.info',                         // by Petrov
2774                 '.doxer.info',                          // Petrov
2775                 '.freeforworld.info',           // Varsylenko
2776                 '.goodworksite.info',           // Varsylenko
2777                 '.onall.info',                          // by Varsylenko
2778                 '.powersiteonline.info',        // by Varsylenko
2779                 '.rentmysite.info',                     // by Varsylenko
2780                 '.sexdrink.info',                       // by Petrov
2781                 '.siteszone.info',                      // by Varsylenko
2782                 '.sfup.info',                           // by Petrov
2783                 '.superfreedownload.info',      // by Varsylenko
2784                 '.superneeded.info',            // by Varsylenko
2785                 '.srup.info',                           // by Petrov
2786
2787                 // 66.235.185.143(*.svabuse.info)
2788                 '.accommodationwiltshire.com',  // by Petrov
2789                 '.levines.info',                        // by Petrov
2790                 '.sernost.info',                        // by Petrov
2791                 '.sexvideosite.info',           // by Petrov
2792                 '.vvsag.info',                          // by Petrov
2793
2794                 // 81.0.195.134
2795                 '.michost.info',                        // by LAURI
2796                 '.parther.info',                        // by LAURI
2797
2798                 // 88.214.202.100
2799                 '.gitsite.info',                        // by Petrov
2800                 '.organiq.info',                        // by Petrov
2801                 '.yoursitedh.info',                     // by Petrov
2802
2803                 // 217.11.233.58 by Petrov
2804                 '.mp3vault.info',
2805
2806                 // DNS time out or failed
2807                 '.bequeous.info',                       // by Davi
2808                 '.sopius.info',                         // by Kuzma
2809                 '.sovidopad.info',                      // by Kuzma
2810                 '.yerap.info',                          // by Kuzma
2811         ),
2812         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
2813                 '.flywebs.com',
2814                 '.hostrim.com',
2815                 '.playbit.com',
2816         ),
2817         'webmaster at dgo3d.info' => array(     // by Son Dittman
2818                 '.bsb3b.info',
2819                 '.dgo3d.info',
2820                 '.dgo5d.info',
2821         ),
2822         'cooler.infomedia at gmail.com' => array(
2823                 '.diabetescarelink.com',
2824                 '.firstdebthelp.com',
2825         ),
2826         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
2827                 '.pokah.lv',
2828                 '.astrons.com',
2829         ),
2830         'seocool at bk.ru' => array(    // by Skar
2831                 '.implex3.com',
2832                 '.implex6.info',
2833                 '.softprof.org',
2834         ),
2835         'Caslim.info' => array(
2836                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
2837                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
2838         ),
2839         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
2840                 '.777-poker.biz',
2841                 '.porn-11.com',
2842         ),
2843         'Conto.pl' => array(
2844                 '.8x.pl',               // domena at az.pl
2845                 '.3x3.pl',              // by biuro at nazwa.pl
2846                 '.conto.pl',    // by biuro at nazwa.pl
2847                 '.guu.pl',              // by conto.pl (domena at az.pl)
2848                 '.xcx.pl',              // domena at az.pl
2849                 '.yo24.pl',             // domena at az.pl
2850         ),
2851         'mail at pcinc.cn' => array(
2852                 // Domains by Lin Zhi Qiang
2853                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
2854
2855                 // 125.65.112.11
2856                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
2857                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
2858                 '.shoopivdoor.com',
2859
2860                 // 125.65.112.12
2861                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
2862                 '.hosetaibei.com',
2863                 '.playsese.com',
2864
2865                 // 125.65.112.13
2866                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
2867                 '.ahatena.com',
2868                 '.asdsdgh-jp.com',
2869                 '.conecojp.net',
2870                 '.game-oekakibbs.com',
2871                 '.geocitygame.com',
2872                 '.gsisdokf.net',
2873                 '.korunowish.com',
2874                 '.netgamelivedoor.com',
2875                 '.soultakerbbs.net',
2876                 '.yahoo-gamebbs.com',
2877                 '.ywdgigkb-jp.com',
2878
2879                 // 125.65.112.14
2880                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
2881                 '.acyberhome.com',
2882                 '.bbs-qrcode.com',
2883                 '.gamesroro.com',
2884                 '.gameyoou.com',
2885                 '.gangnu.com',
2886                 '.goodclup.com',
2887                 '.lineage321.com',
2888                 '.linkcetou.com',
2889                 '.love888888.com',
2890                 '.ragnarok-bbs.com',
2891                 '.ragnarok-game.com',
2892                 '.rmt-navip.com',
2893                 '.watcheimpress.com',
2894
2895                 // 125.65.112.15
2896                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
2897                 '.18girl-av.com',
2898                 '.aurasoul-visjp.com',
2899                 '.gamaniaech.com',
2900                 '.game-mmobbs.com',
2901                 '.gameslin.net',
2902                 '.gemnnammobbs.com',
2903                 '.gogolineage.net',
2904                 '.grandchasse.com',
2905                 '.jpragnarokonline.com',
2906                 '.jprmthome.com',
2907                 '.maplestorfy.com',
2908                 '.netgamero.net',
2909                 '.nothing-wiki.com',
2910                 '.ourafamily.com',
2911                 '.ragnarok-sara.com',
2912                 '.rmt-lineagecanopus.com',
2913                 '.rmt-ranloki.com',
2914                 '.rogamesline.com',
2915                 '.roprice.com',
2916                 '.tuankong.com',
2917                 '.twreatch.com',
2918
2919                 // 125.65.112.22
2920                 // The same IP: web013.cdnhost.cn
2921                 '.lzy88588.com',
2922                 '.ragnaroklink.com',
2923
2924                 // 125.65.112.24
2925                 '.rmtfane.com',
2926                 '.fc2weday.com',
2927                 '.nlftweb.com',
2928
2929                 // 125.65.112.27
2930                 '.i520i.com',
2931                 '.sunwayto.com',
2932
2933                 // 125.65.112.31
2934                 // The same IP: web016.cdnhost.cn
2935                 '.twyaooplay.com',
2936
2937                 // 125.65.112.32
2938                 // The same IP: web037.cdnhost.cn
2939                 '.emeriss.com',
2940                 '.raginfoy.com',
2941                 '.ragnarokgvg.com',
2942                 '.rentalbbs-livedoor.com',
2943                 '.romaker.com',
2944                 '.sagewikoo.com',
2945                 '.samples112xrea.com',
2946                 '.wiki-house.com',
2947
2948                 // 125.65.112.49
2949                 '.chaosx0.com',
2950
2951                 // 125.65.112.88
2952                 // The same IP: web015.cdnhost.cn
2953                 '.a-hatena.com',
2954                 '.biglobe-ne.com',
2955                 '.blogplaync.com',
2956                 '.din-or.com',
2957                 '.dtg-gamania.com',
2958                 '.fcty-net.com',
2959                 '.game-fc2blog.com',
2960                 '.gameurdr.com',
2961                 '.getamped-garm.com',
2962                 '.interzq.com',
2963                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
2964                 '.luobuogood.com',
2965                 '.ragnarok-search.com',
2966                 '.rinku-livedoor.com',
2967
2968                 // 125.65.112.90
2969                 '.gtvxi.com',
2970
2971                 // 125.65.112.91
2972                 // The same IP: web004.cdnhost.cn
2973                 '.6828teacup.com',
2974                 '.blog-livedoor.net',
2975                 '.cityblog-fc2web.com',
2976                 '.deco030-cscblog.com',
2977                 '.imbbs2t4u.com',
2978                 '.k5dionne.com',
2979                 '.lineagejp-game.com',
2980                 '.mbspro6uic.com',
2981                 '.slower-qth.com',
2982                 '.wikiwiki-game.com',
2983
2984                 // 125.65.112.93
2985                 // The same IP: web022.cdnhost.cn
2986                 '.aaa-livedoor.net',
2987                 '.cityhokkai.com',              // web022.cdnhost.cn
2988                 '.fanavier.net',
2989                 '.geocitylinks.com',    // web022.cdnhost.cn
2990                 '.kuronowish.net',              // web022.cdnhost.cn
2991                 '.ro-bot.net',
2992
2993                 // 125.65.112.95
2994                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
2995                 '.23styles.com',
2996                 '.aehatena-jp.com',
2997                 '.ameblog-jp.net',
2998                 '.antuclt.com',
2999                 '.blog-ekndesign.com',
3000                 '.d-jamesinfo.com',
3001                 '.editco-jp.com',
3002                 '.ezbbsy.com',
3003                 '.extd-web.com',
3004                 '.fotblong.com',
3005                 '.game62chjp.net',
3006                 '.gamegohi.com',
3007                 '.gamesmusic-realcgi.net',
3008                 '.gamesragnaroklink.net',
3009                 '.homepage-nifty.com',
3010                 '.ie6xp.com',
3011                 '.irisdti-jp.com',
3012                 '.jklomo-jp.com',
3013                 '.jpxpie6-7net.com',
3014                 '.lian-game.com',
3015                 '.lineage-bbs.com',
3016                 '.lineage1bbs.com',
3017                 '.livedoor-game.com',
3018                 '.litcan.com',
3019                 '.lovejpjp.com',
3020                 '.m-phage.com',
3021                 '.muantang.com',
3022                 '.plusd-itmedia.com',
3023                 '.runbal-fc2web.com',
3024                 '.saussrea.com',
3025                 '.tooalt.com',
3026                 '.toriningena.net',
3027                 '.yahoodoor-blog.com',
3028                 '.yy14-kakiko.com',
3029
3030                 // 125.65.112.137
3031                 '.clublineage.com',
3032
3033                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3034                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3035                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3036
3037                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3038                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3039
3040                 '.games-nifty.com',             // 255.255.255.255 now
3041                 '.homepage3-nifty.com', // 255.255.255.255 now
3042         ),
3043         'caddd at 126.com' => array(
3044                 '.chengzhibing.com',    // by chen gzhibing
3045                 '.jplinux.com',                 // by lian liang
3046                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3047                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3048                 '.tooplogui.com',               // by zibing cai
3049                 '.twsunkom.com',                // by guo zhi wei
3050                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3051         ),
3052         'nuigiym2 at 163.com' => array( // by fly bg
3053                 '.linainfo.net',                // Seems IP not allocated now
3054                 '.lineagalink.com',             // 220.247.157.99
3055                 '.lineagecojp.com',             // 61.139.126.10
3056                 '.ragnarokonlina.com',  // 220.247.158.99
3057         ),
3058         'aakin at yandex.ru' => array(  // by Baer
3059                 '.entirestar.com',
3060                 '.superbuycheap.com',
3061                 '.topdircet.com',
3062         ),
3063         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3064                 '.tianmieccp.com',
3065                 '.xianqiao.net',
3066         ),
3067         'm.frenzy at yahoo.com' => array(       // by Michael
3068                 '.p5v.org',
3069                 '.j111.net',
3070                 '.searchhunter.info',
3071                 '.soft2you.info',
3072                 '.top20health.info',
3073                 '.top20ringtones.info',
3074                 '.top20travels.info',
3075                 '.v09v.info',
3076                 '.x09x.info',
3077                 '.zb-1.com',
3078         ),
3079         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3080                 '.bingogoldenpalace.info',
3081                 '.ccarisoprodol.info',
3082                 '.ezxcv.info',
3083                 '.isuperdrug.com',
3084                 '.pharmacif.info',
3085                 '.pornsexteen.biz',
3086                 '.ugfds.info',
3087                 '.vviagra.info',
3088         ),
3089         'anatolsenator at gmail.com' => array(  // by Anatol
3090                 '.cheapestviagraonline.info',
3091                 '.buyphentermineworld.info'
3092         ),
3093         'webmaster at mederotica.com' => array(
3094                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3095                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3096                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3097                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3098         ),
3099         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3100                 '.auase.info',          // by ilemavyq7461 at techie.com
3101                 '.axeboxew.info',       // by zygeu220 at writeme.com
3102                 '.boluzuhy.info',       // by pikico5419 at post.com
3103                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3104                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3105                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3106                 '.exidiqe.info',        // by kufyca5475 at mail.com
3107                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3108                 '.gubiwu.info',         // by lywunef6532 at iname.com
3109                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3110                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3111                 '.jiuuz.info',          // by meqil6549 at mail.com
3112                 '.nudetar.info',        // by vohepafi3536 at techie.com
3113                 '.nipud.info',          // by bohox9872 at mindless.com
3114                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3115                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3116                 '.olasep.info',         // by lizon8506 at mail.com
3117                 '.oueuidop.info',       // by arytyb6913 at europe.com
3118                 '.oviravy.info',        // by amyuu3883 at london.com
3119                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3120                 '.ragibe.info',         // by ehome4458 at myself.com
3121                 '.ucazib.info',         // by gorare7222 at consultant.com
3122                 '.udaxu.info',          // by gubima4007 at usa.com
3123                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3124                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3125                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3126                 '.yvaxat.info',         // by koqun9660 at mindless.com
3127                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3128         ),
3129         'Carmodelrank.com etc' => array(
3130                 // by Brianna Dunlord (briasmi at yahoo.com)
3131                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3132                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3133                 '.carmodelrank.com',// by Brianna
3134                 '.cutestories.net',     // by Brianna
3135                 '.sturducs.com',
3136                 '.bestother.info',      // by Tim
3137                 '.premiumcasinogames.com',      // by Brianna)
3138                 '.yaahooo.info',        // by Alice
3139         ),
3140         'aliacsandr at yahoo.com' => array(
3141                 '.cubub.info',                          // "Free Web Hosting"
3142         ),
3143         'aliacsandr85 at yahoo.com' => array(
3144                 // by Dr. Portillo or Eva Sabina Lopez Castell
3145                 '.xoomer.alice.it',                     // "Free Web Hosting"
3146                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3147                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3148                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3149                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3150                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3151                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3152                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3153                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3154                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3155                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3156                 '.viagra-price.org',            // by Eva
3157                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3158                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3159         ),
3160         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3161         'Something-Gamble' => array(
3162                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3163                 '.atonlineroulette.com',                        // by Blaise Johns
3164                 '.atroulette.com',                                      // by Gino Sand
3165                 '.betting-123.com',                                     // by Joana Caceres
3166                 '.betting-i.biz',                                       // by Joaquina Angus
3167                 '.casino-challenge.com',                        // by Maren Camara
3168                 '.casino-gambling-i.biz',                       // by Giselle Nations
3169                 '.casino-italian.com',                          // by Holley Yan
3170                 '.casino123.net',                                       // by Ta Baines
3171                 '.casinohammamet.com',                          // by Inger Barhorst
3172                 '.casinoqz.com',                                        // by Berenice Snow
3173                 '.casinos-777.net',                                     // by Iona Ayotte
3174                 '.crapsok.com',                                         // by Devon Adair,
3175                 '.dcasinoa.com',                                        // by August Hawkinson
3176                 '.e-poker-4u.com',                                      // by Issac Leibowitz
3177                 '.free-dvd-player.biz',                         // by Rosario Kidd
3178                 '.florida-lottery-01.com',                      // by Romeo Dillon
3179                 '.gaming-123.com',                                      // by Jennifer Byrne
3180                 '.kenogo.com',                                          // by Adriane Bell
3181                 '.mycaribbeanpoker.com',                        // by Andy Mullis
3182                 '.onbaccarat.com',                                      // by Kassandra Dunn
3183                 '.online-experts.biz',                          // by Liberty Helmick
3184                 '.onlinepoker-123.com',                         // by Andrea Feaster
3185                 '.playpokeronline-123.com',                     // by Don Lenard
3186                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
3187                 '.texasholdem123.com',                          // by Savion Lasseter
3188                 '.texasholdem-777.com',                         // by Savanna Lederman
3189                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
3190                 '.the-craps-100.us',                            // by Lorrine Ripley
3191                 '.the-free-online-game-913.us',         // by Kanesha Clem
3192                 '.the-free-poker-1798.us',                      // by Elaina Witte
3193                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
3194                 '.the-online-game-poker-1185.us',       // by Merna Bey
3195                 '.the-playing-black-jack.com',          // by Kristine Brinker
3196                 '.the-poker-1082.us',                           // by Kristofer Boldt
3197                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
3198                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
3199                 '.the-video-black-jack.com',            // by Jagger Godin
3200         ),
3201         'Something-Insurance' => array(
3202                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
3203
3204                 // 0-9
3205                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
3206                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
3207                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
3208                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
3209                 '.18wkcf.com',                                  // by Lexy Bohannon
3210                 '.2001werm.org',                                // by Raphael Rayburn
3211                 '.2004heeparea1.org',                   // by Dinorah Andrews
3212                 '.21nt.net',                                    // by Jaida Estabrook
3213                 '.3finfo.com',                                  // by Damian Pearsall
3214                 '.3somes.org',                                  // by Mauro Tillett
3215                 '.453531.com',                                  // by Kurt Flannery
3216                 '.4freesay.com',                                // by Eloy Jones
3217                 '.5ssurvey.com',                                // by Annamarie Kowalski
3218                 '.8-f22.com',                                   // by Larraine Evers
3219                 '.9q.org',                                              // by Ami Boynton
3220
3221                 // A
3222                 '.a40infobahn.com',                             // by Amit Nguyen
3223                 '.a4h-squad.com',                               // by Ross Locklear
3224                 '.aac2000.org',                                 // by Randi Turner
3225                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
3226                 '.acahost.com',                                 // by Milton Haberman
3227                 '.aconspiracyofmountains.com',  // by Lovell Gaines
3228                 '.acornwebdesign.co.uk',                // by Uriel Dorian
3229                 '.activel-learning-site.com',   // by Mateo Conn
3230                 '.ad-makers.com',                               // by Shemeka Arsenault
3231                 '.ada-information.org',                 // by Josef Osullivan
3232                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
3233                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
3234                 '.aequityrefinance.com',                // by Jadwiga Duckworth
3235                 '.aerovac-hotpress.com',                // by Trey Marlow
3236                 '.agfbiosensors.com',                   // by Lionel Dempsey
3237                 '.ahomeloanrefinance.com',              // by Leslie Kinser
3238                 '.affordablerealestate.net',    // by Season Otoole
3239                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
3240                 '.ahouserefinance.com',                 // by Young Alley
3241                 '.akirasworld.com',                             // by Piper Sullivan
3242                 '.alderik-production.com',              // by Joan Stiles
3243                 '.alltechdata.com',                             // by Dom Laporte
3244                 '.amconllc.com',                                // by Syble Benjamin
3245                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
3246                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
3247                 '.angelandcrown.net',                   // by Claretta Najera
3248                 '.ankoralina.com',                              // by Eladia Demers
3249                 '.antiquegoldmine.com',                 // by Keena Marlow
3250                 '.aquinosotros.com',                    // by Nanci Prentice
3251                 '.architectionale.com',                 // by Wilbur Cornett
3252                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
3253                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
3254                 '.arefinancehome.com',                  // by Duane Doran
3255                 '.arefinancinghome.com',                // by Ike Laney
3256                 '.athletic-shoes-e-shop.info',  // by Romelia Money
3257                 '.auction-emall-site.info',             // by Dayle Denman
3258                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
3259                 '.auto-buy-rite.com',                   // by Asuncion Buie
3260                 '.axxinet.net',                                 // by Roberta Gasper
3261                 '.azimutservizi.com',                   // by Ethelene Brook
3262                 '.azstudies.org',                               // by Bernardina Walden
3263
3264                 // B
3265                 '.babtrek.com',                                 // by Simonette Mcbrayer
3266                 '.babycujo.com',                                // by Francisco Akers
3267                 '.bakeddelights.com',                   // by Dave Evenson
3268                 '.bbcart.com',                                  // by Lucio Hamlin
3269                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
3270                 '.best-digital-phone.us',               // by Meghann Crockett
3271                 '.bjamusements.com',                    // by Lurlene Butz
3272                 '.blursgsu.com',                                // by Weston Killian
3273                 '.bookwide.net',                                // by Tequila Zacharias
3274                 '.boreholes.org',                               // by Flora Reed
3275                 '.breathingassociaiton.org',    // by Alfred Crayton
3276                 '.birdingnh.com',                               // by Donald Healy
3277                 '.bisdragons.org',                              // by Lupe Cassity
3278                 '.blcschools.net',                              // by Alycia Jolly
3279                 '.bronte-foods.com',                    // by Kary Pfeiffer
3280                 '.buckscountyneighbors.org',    // by Maile Gaffney
3281                 '.buffalofudge.com',                    // by Mable Whisenhunt
3282                 '.burlisonforcongress.com',             // by Luann King
3283                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
3284                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
3285
3286                 // C
3287                 '.cabanes-web.com',                             // by Vaughn Latham
3288                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
3289                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
3290                 '.checaloya.com',                               // by Susana Coburn
3291                 '.calvarychapelrgvt.org',               // by Karan Kittle
3292                 '.cameras-esite.info',                  // by Karlee Frisch
3293                 '.cancerkidsforum.org',                 // by Samson Constantino
3294                 '.ccchoices.org',                               // by Kenia Cranford
3295                 '.ccupca.org',                                  // by Evonne Serrano
3296                 '.celebratemehome.com',                 // by Soraya Tower
3297                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
3298                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
3299                 '.choose-shoes.net',                    // by Geoffrey Setser
3300                 '.churla.com',                                  // by Ollie Wolford
3301                 '.circuithorns.co.uk',                  // by Nathanial Halle
3302                 '.clanbov.com',                                 // by Donell Hozier
3303                 '.cnm-ok.org',                                  // by Thalia Moye
3304                 '.coalitioncoalition.org',              // by Ned Macklin
3305                 '.consoleaddicts.com',                  // by Dorla Hoy
3306                 '.counterclockwise.net',                // by Melynda Hartzell
3307                 '.codypub.com',                                 // by Mercedes Coffman
3308                 '.comedystore.net',                             // by Floy Donald
3309                 '.covsys.co.uk',                                // by Abby Jacey
3310                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
3311                 '.craftybidders.com',                   // by Dannie Lazo
3312                 '.credit-card-finder.net',              // by Mellie Deherrera
3313                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
3314                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
3315                 '.ctwine.org',                                  // by Hailey Knox
3316
3317                 // D
3318                 '.dazyation.com',                               // by Louis Strasser
3319                 '.deepfoam.org',                                // by Ethelyn Southard
3320                 '.debt-fixing.com',                             // by Dagny Rickman
3321                 '.dgmarketingwebdesign.com',    // by Nubia Lea
3322                 '.domainadoption.com',                  // by Breann Pappas
3323                 '.diannbomkamp.com',                    // by Russel Croteau
3324                 '.dictionary-spanish.us',               // by Jacki Gilbreath
3325                 '.dictionary-yahoo.us',                 // by Lili Mitchem
3326                 '.digital-camera-review-esite.info',    // by Milagros Jowers
3327                 '.digital-cameras-esite.info',  // by Milan Jolin
3328                 '.dnstechnet.net',                              // by Tamera Oman
3329                 '.drivenbydata.org',                    // by Katherine Noyes
3330                 '.dtmf.net',                                    // by Micki Slayton
3331                 '.domainsfound.com',                    // by Blossom Lively
3332
3333                 // E
3334                 '.ecstacyabuse.net',                    // by Alana Knight
3335                 '.e-digital-camera-esite.info', // by Romaine Cress
3336                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
3337                 '.eldorabusecenter.org',                // by Annabella Oneal
3338                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
3339                 '.encaponline.com',                             // by Patrick Keel
3340                 '.ez-shopping-online.com',              // by Gail Bartlett
3341
3342                 // F
3343                 '.faithfulwordcf.com',                  // by Bart Weeks
3344                 '.fammedassoc.com',                             // by Joshua Nelson
3345                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
3346                 '.f00k.org',                                    // by Leslie Chapman
3347                 '.foreignrealtions.org',                // by Krystal Hawley
3348                 '.fortwebsite.org',                             // by Kristina Motley
3349                 '.fotofirstdigital.com',                // by Tad Whitfield
3350                 '.foundationcommons.org',               // by Caryn Eskew
3351                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
3352                 '.freaky-cheats.com',                   // by Al Klein
3353                 '.free--spyware.com',                   // by Nikki Contreras
3354                 '.french-home-finance-consultant.info', // by Santana Melton
3355                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
3356
3357                 // G
3358                 '.gaintrafficfast.com',                 // by Lila Meekins
3359                 '.gaygain.org',                                 // by Shell Davila
3360                 '.gcaaa.com',                                   // by Vallie Jaworski
3361                 '.generalsysteme.com',                  // by Cale Vogel
3362                 '.generation4games.co.uk',              // by Sonya Graham
3363                 '.german-dictionary.us',                // by Rex Daniel
3364                 '.gilmerrec.com',                               // by Leighann Guillory
3365                 '.glenthuntly-athletics.com',   // by Julee Hair
3366                 '.glorybaskets.com',                    // by Lynette Lavelle
3367                 '.goconstructionloan.com',              // by Willis Monahan
3368                 '.gohireit.com',                                // by Bertha Metzger
3369                 '.godcenteredpeople.com',               // by Jaycee Coble
3370
3371                 // H
3372                 '.healthinsuranceem.com',               // by Justin Munson
3373                 '.hearthorizon.info',                   // by Kory Session
3374                 '.hegerindustrial.com',                 // by Toni Wesley
3375                 '.herzequip.com',                               // by Princess Dunkle
3376                 '.hglcms.org',                                  // by Gladwin Ng
3377                 '.hipanoempresa.com',                   // by Shannon Staub
3378                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
3379                 '.horse-racing-result.com',             // by Rodney Reynolds
3380                 '.hueckerfamily.com',                   // by Hershel Sell
3381
3382                 // I
3383                 '.ilove2win.com',                               // by Lamont Dickerson
3384                 '.ilruralassistgrp.org',                // by Moises Hauser
3385                 '.imageonsolutions.com',                // by Porsche Dubois
3386                 '.infoanddatacenter.com',               // by Eva Okelley
3387                 '.islamfakta.org',                              // by Goldie Boykin
3388                 '.ithomemortgage.com',                  // by Adelaide Towers
3389                 '.iyoerg.com',                                  // by Madyson Gagliano
3390
3391                 // J
3392                 '.jeffaxelsen.com',                             // by Daphne William
3393                 '.jeffreyf.net',                                // by Vito Platt
3394                 '.johnmartinsreality.com',              // by Pamela Larry
3395                 '.johnsilvers.net',                             // by Silver Battaglia
3396
3397                 // K
3398                 '.kcgerbil.org',                                // by Marisa Thayer
3399                 '.kdc-phoenix.com',                             // by Salma Shoulders
3400                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
3401                 '.kosove.org',                                  // by Darwin Schneider
3402
3403                 // L
3404                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
3405                 '.letsgokayaking.net',                  // by Winnie Adair
3406                 '.libertycabs.com',                             // by Adela Bonds
3407                 '.liquor-store-cellar.info',    // by Hugh Pearson
3408                 '.locomojo.net',                                // by Marco Harmon
3409                 '.lodatissimo.com',                             // by Adrian Greeson
3410                 '.lsawc.org',                                   // by Lara Han
3411                 '.lycos-test.net',                              // by Rigoberto Oakley
3412
3413                 // M
3414                 '.macro-society.com',                   // by Venessa Hodgson
3415                 '.marthasflavorfest.com',               // by Ahmad Lau
3416                 '.martin-rank.com',                             // by Cathleen Crist
3417                 '.maryandfrank.org',                    // by Theodore Apodaca
3418                 '.masterkwonhapkido.com',               // by Misty Graham
3419                 '.maxrpm-demo.com',                             // by Cristal Cho
3420                 '.mechanomorphic.com',                  // by Stanford Crow
3421                 '.mepublishing.net',                    // by Karly Fleenor
3422                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
3423                 '.metwahairports.com',                  // by Nan Kitchen
3424                 '.middle-eastnews.com',                 // by Tybalt Altmann
3425                 '.mikepelchy.com',                              // by Sherly Pearson
3426                 '.milpa.org',                                   // by Nelly Aguilera
3427                 '.modayun.com',                                 // by Camilla Velasco
3428                 '.moonstoneerp.com',                    // by Garret Salmon
3429                 '.morosozinho.com',                             // by Lenore Tovar
3430                 '.morphadox.com',                               // by Hung Zielinski
3431                 '.moscasenlared.com',                   // by Tera Gant
3432                 '.sdjavasig.com',                               // by Gia Swisher
3433                 '.mpeg-radio.com',                              // by Sincere Beebe
3434                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
3435                 '.mtseniorcenter.org',                  // by Frederic Ortega
3436                 '.mysteryclips.com',                    // by Edward Ashford
3437
3438                 // N
3439                 '.naavs.org',                                   // by Yuridia Gandy
3440                 '.naval-aviation.org',                  // by Roselle Campo
3441                 '.navigare-ischia.com',                 // by Arielle Coons
3442                 '.ncredc.org',                                  // by Brenda Nye
3443                 '.neonmotorsports.com',                 // by Giovanna Vue
3444                 '.nf-ny.com',                                   // by Yadira Hibbard
3445                 '.ngfdyqva.com',                                // by Emiliano Samples
3446                 '.nicozone.com',                                // by Blaine Shell
3447                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
3448                 '.npawny.org',                                  // by Willard Murphy
3449                 '.nysdoed.org',                                 // by Elric Delgadillo
3450                 '.nyswasteless.org',                    // by Shaylee Moskowitz
3451                 '.nytech-ir.com',                               // by Adrien Beals
3452
3453                 // O
3454                 '.oadmidwest.com',                              // by Gavin Kaplan
3455                 '.oarauto.com',                                 // by Susann Merriman
3456                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
3457                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
3458                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
3459                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
3460                 '.online-pills-24x7.biz',               // by Aide Hallock
3461                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
3462                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
3463                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
3464                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
3465                 '.otterbayweb.com',                             // by Maxwell Irizarry
3466
3467                 // P
3468                 '.painting-technique.us',               // by Bryanna Tooley
3469                 '.pakamrcongress.com',                  // by Bryce Summerville
3470                 '.patabney.com',                                // by Kailyn Slone
3471                 '.parde.org',                                   // by Ellie Yates
3472                 '.participatingprofiles.com',   // by Jaelynn Meacham
3473                 '.partnershipconference.org',   // by Alla Floyd
3474                 '.pet-stars.com',                               // by Carmon Luevano
3475                 '.planning-law.org',                    // by Trista Holcombe
3476                 '.ppawa.com',                                   // by Evonne Scarlett
3477                 '.precisionfilters.net',                // by Faustina Fell
3478
3479                 // Q
3480                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
3481                 '.quick-debt-consolidation.net',        // by Lala Marte
3482                 '.quicktvr.com',                                // by Vernell Crenshaw
3483
3484                 // R
3485                 '.radicalsolutions.org',                // by Reece Medlin
3486                 '.randallburgos.com',                   // by Bradly Villa
3487                 '.rcassel.com',                                 // by Janiah Gallant
3488                 '.rearchitect.org',                             // by Marcus Gaudet
3489                 '.rent-an-mba.com',                             // by Valentina Mcdermott
3490                 '.reprisenashville.com',                // by Hester Khan
3491                 '.reptilemedia.com',                    // by Alicia Patel
3492                 '.resellers2000.com',                   // by Dedra Kennedy
3493                 '.reverse-billing.com',                 // by Lazaro Gluck
3494                 '.richcapaldi.com',                             // by Kya Haggard
3495                 '.richformissouri.com',                 // by Alanna Elston
3496                 '.robstraley.com',                              // by Leida Bartell
3497                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
3498                 '.rpgbbs.com',                                  // by Leonel Peart
3499                 '.ruralbusinessonline.org',             // by Lynsey Watters
3500                 '.ruwomenscenter.org',                  // by Vince Mclemore
3501                 '.ryanjowens.com',                              // by Janine Smythe
3502
3503                 // S
3504                 '.sagarmathatv.org',                    // by Liam Funke
3505                 '.sakyathubtenling.org',                // by Liane Falgout
3506                 '.sandiegolawyer.net',                  // by Linnie Sommervill
3507                 '.sandishaven.com',                             // by Lino Soloman
3508                 '.scienkeen.com',                               // by Liza Navarra
3509                 '.seimenswestinghouse.com',             // by Teresa Benedetto
3510                 '.severios.com',                                // by Isa Steffen
3511                 '.sexual-hot-girls.com',                // by Viviana Bolton
3512                 '.shakespearelrc.com',                  // by Luciana Weaver
3513                 '.shashran.org',                                // by Adriel Humphries
3514                 '.shoes-shop.us',                               // by Austen Higginbotham
3515                 '.skagitvalleybassanglers.com', // by Necole Thiele
3516                 '.skinsciencesalon.com',                // by Nena Rook
3517                 '.smartalternative.net',                // by Nicki Lariviere
3518                 '.sml338.org',                                  // by Nickole Krol
3519                 '.smogfee.com',                                 // by Sienna Kimble
3520                 '.sneakers-e-shop.info',                // by Nikki Fye
3521                 '.spacewavemedia.com',                  // by Thanh Gast
3522                 '.softkernel.com',                              // by Nicol Hummer
3523                 '.stjoanmerrillville.com',              // by Hunter Beckham
3524                 '.strelinger.com',                              // by Arron Highsmith
3525                 '.striking-viking.com',                 // by Kylie Endsley
3526                 '.sunnydeception.org',                  // by Amaya Llora
3527                 '.sunzmicro.com',                               // by Goddard Arreola
3528                 '.sv-iabc.org',                                 // by Braden Buck
3529                 '.sykotick.com',                                // by Pierce Knecht
3530
3531                 // T
3532                 '.tbody.net',                                   // by Ormond Roman
3533                 '.the-pizzaman.com',                    // by Mario Ramsey
3534                 '.the-shoes.us',                                // by Alejandro Gaffney
3535                 '.theborneocompany.com',                // by Bryanna Tooley
3536                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
3537                 '.thehomeschool.net',                   // by September Concepcio
3538                 '.thenewlywed.com',                             // by Allegra Marra
3539                 '.tigerspice.com',                              // by Denis Mosser
3540                 '.tnaa.net',                                    // by Jasmine Andress
3541                 '.top-finance-sites.com',               // by Maryann Doud
3542                 '.tradereport.org',                             // by Bettie Sisk
3543                 '.transmodeling.com',                   // by Martine Button
3544                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
3545                 '.tsaoc.com',                                   // by Heriberto Mcfall
3546                 '.tsunamidinner.com',                   // by Nannie Richey
3547
3548                 // U
3549                 '.uhsaaa.com',                                  // by Risa Herbert
3550                 '.ultradeepfield.org',                  // by Bobby Ragland
3551                 '.umkclaw.info',                                // by Cammy Kern
3552                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
3553                 '.usa-wolf.com',                                // by Jacklyn Morrill
3554                 '.usjobfair.com',                               // by Lorina Burchette
3555
3556                 // V
3557                 '.vacancesalouer.com',                  // by Loris Bergquist
3558                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
3559                 '.valleylibertarians.org',              // by Lena Massengale
3560                 '.vanderbiltevents.com',                // by Gannon Krueger
3561                 '.vanwallree.com',                              // by Michelina Donahue
3562                 '.vcertificates.com',                   // by Hyun Lamp
3563                 '.vonormytexas.us',                             // by Suzette Waymire
3564
3565                 // W
3566                 '.washingtondc-areahomes.net',  // by Ailene Broome
3567                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
3568                 '.wolsaoh.org',                                 // by Daniela English
3569                 '.worldpropertycatalog.com',    // by Aray Baxter
3570
3571                 // Y
3572                 '.yankee-merchants.com',                // by Jackson Hinojosa
3573                 '.yourbeachhouse.com',                  // by Dedrian Ryals
3574                 '.yourdomainsource.com',                // by Deems Weingarten
3575
3576                 // Z
3577                 '.zkashan.com',                                 // by Evan Light
3578                 '.zockclock.com',                               // by Dorothea Guthrie
3579         ),
3580         'Something-Drugs' => array(
3581                 // Drugs / Pills / Diet
3582                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
3583                 '.abdelghani-shady.com',                // by Elly Alton
3584                 '.bangbangfilm.com',                    // by Davin Chou
3585                 '.centroantequera.com',                 // by Keon Kwiatkowski
3586                 '.champagne-cellar.info',               // by Kandis Rizzo
3587                 '.chix0r.org',                                  // by Christoper Baird
3588                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
3589                 '.fantasticbooks-shop.com',             // by Kermit Ashley
3590                 '.fast-cash-01.com',                    // by Edgar Oliver
3591                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
3592                 '.fn-nato.com',                                 // by Donny Dunlap
3593                 '.gqyinran.com',                                // by Alejandro Parks
3594                 '.juris-net.com',                               // by Rachelle Bravo
3595                 '.leftpencey.com',                              // by Aileen Ashby
3596                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
3597                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
3598                 '.palaceroyale.net',                    // by Brycen Stebbins
3599                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
3600                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
3601                 '.yukissushi.com',                              // by Donell Hozier
3602         ),
3603         'Something-Others' => array(
3604                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
3605                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
3606         ),
3607         'Something-NoApp' => array(
3608                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
3609                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
3610                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3611                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3612                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
3613         ),
3614         'Cortez and family' => array(
3615                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
3616                 '.dronadaarsujf.info',  // by Cortez
3617                 '.fromnananaref.info',  // by Cortez
3618                 '.goorkkjsaka.info',    // by Cortez
3619                 '.jkdfjjkkdfe.info',    // by Rico
3620                 '.jkllloldkjsa.info',   // by Cortez
3621                 '.nnjdksfornms.info',   // by Rico
3622                 '.mcmdkkksaoka.info',   // by Cortez
3623                 '.srattaragfon.info',   // by Cortez
3624                 '.yreifnnonoom.info',   // by Rico
3625                 '.zjajjsvgeuds.info',   // by Cortez
3626         ),
3627         'admin at ematuranza.com' => array(
3628                 '.ancorlontano.com',
3629                 '.dentroallago.com',
3630                 '.digiovinezza.com',
3631                 '.ematuranza.com',
3632                 '.ilfango.com',
3633                 '.nullarimane.com',
3634                 '.questaimmensa.com',
3635                 '.tentailvolo.com',
3636                 '.unatenerezza.com',
3637                 '.volgondilettose.com',
3638         ),
3639         'admin at edeuj84.info' => array(       // by Cornelius Boyers
3640                 '.bid99df.info',
3641                 '.bj498uf.info',
3642                 '.edeuj84.info',
3643                 '.f4mfid.info',
3644                 '.g4vf03a.info',
3645                 '.j09j4r.info',
3646                 '.jv4r8hv.info',
3647                 '.k43sd3.info',
3648                 '.k4r84d.info',
3649                 '.k4rvda.info',
3650                 '.k4v0df.info',
3651                 '.k903os.info',
3652                 '.k9df93d.info',
3653                 '.kv94fd.info',
3654                 '.ksjs93.info',
3655                 '.l0ks03.info',
3656                 '.l9u3jc.info',
3657                 '.lv043a.info',
3658                 '.nh94h9.info',
3659                 '.m94r9d.info',
3660                 '.s87fvd.info',
3661                 '.v3k0d.info',
3662                 '.v4r8j4.info',
3663                 '.vf044s.info',
3664                 '.vj49rs.info',
3665                 '.vk498j.info',
3666                 '.u03jow.info',
3667         ),
3668         'Nikhil and Brian' => array(
3669                 // by Brian Dieckman (info at iudndjsdhgas.info)
3670                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
3671                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
3672                 '.ihfjeswouigf.info',   // by Brian, / was not found
3673                 '.iudndjsdhgas.info',   // by Brian, / was not found
3674                 '.iufbsehxrtcd.info',   // by Brian, / was not found
3675                 '.jiatdbdisut.info',    // by Brian, / was not found
3676                 '.jkfierwoundhw.info',  // by Brian, / was not found
3677                 '.kfjeoutweh.info',             // by Brian, / was not found
3678                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
3679                 '.oudjskdwibfm.info',   // by Brian, / was not found
3680                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
3681                 '.itxbsjacun.info',             // by Nikhil, / was not found
3682                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
3683                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
3684                 '.najedncdcounrd.info', // by Nikhil, / was not found
3685                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
3686                 '.oujvjfdndl.info',             // by Nikhil, / was not found
3687                 '.uodncnewnncds.info',  // by Nikhil, / was not found
3688                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
3689                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
3690                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
3691                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
3692                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
3693                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
3694         ),
3695         'wealth777 at gmail.com' => array(      // by Henry Ford
3696                 '.brutal-forced.com',
3697                 '.library-bdsm.com',
3698                 '.rape-fantasy.us',
3699         ),
3700         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
3701                 '.purerotica.com',
3702                 '.richsex.com',
3703                 '.servik.net',
3704                 '.withsex.com',
3705         ),
3706         'dreamteammoney.com' => array(
3707                 '.dreamteammoney.com',  // dtmurl.com related
3708                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
3709         ),
3710         'KLIK VIP Search and family' => array(
3711                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
3712                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
3713                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
3714                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
3715                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
3716                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
3717                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
3718         ),
3719         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
3720                 '.antivirs.info',
3721                 '.antivirus1.info',
3722                 '.antivirus2.info',
3723         ),
3724         'wasam at vangers.net and family' => array(
3725
3726                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3727                 '.bahatoca.org',
3728                 '.digestlycos.org',
3729                 '.educativaanale.info',
3730                 '.guildstuscan.org',
3731                 '.isaakrobbins.info',
3732                 '.isfelons.org',
3733                 '.lvwelevated.org',
3734                 '.macphersonaca.org',
3735                 '.markyaustrian.org',
3736                 '.michelepug.org',
3737                 '.opalbusy.info',
3738                 '.quijotebachata.info',
3739                 '.salthjc.info',
3740                 '.shogunnerd.info',
3741                 '.solarissean.org',
3742                 '.sparkgsx.info',
3743                 '.tarzanyearly.org',
3744                 '.tulabnsf.org',
3745                 '.vaccarinos.org',
3746
3747                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
3748                 '.e2007.info',
3749                 '.cmoss.info',
3750
3751                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
3752                 '.finddesk.org',
3753                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
3754                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
3755                 '.rcatalog.org',
3756                 '.sbitzone.org',
3757
3758                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
3759                 '.cheapns.org',
3760                 '.my-top.net',
3761                 '.sfind.net',
3762                 '.sspot.net',
3763                 '.suvfind.info',
3764
3765                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
3766                 '.trumber.com',
3767
3768                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3769                 '.blogduet.org',
3770                 '.carelf.info',
3771                 '.cmagic.org',
3772                 '.cspell.org',
3773                 '.dspark.org',
3774                 '.dtonic.org',
3775                 '.mcharm.info',
3776                 '.mslook.info',
3777                 '.phpdinnerware.info',
3778                 '.rnation.org',
3779                 '.uzing.org',
3780
3781                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3782                 '.allbar.info',
3783                 '.allersearch.org',
3784                 '.allzoom.org',
3785                 '.dynall.org',
3786                 '.fastopia.org',
3787                 '.offasfast.info',
3788                 '.rblast.org',
3789                 '.rchistes.info',
3790                 '.rette.org',
3791                 '.shufflequince.org',
3792                 '.suvlook.org',
3793
3794                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3795                 '.290cabeza.org',
3796                 '.bossierpainted.org',
3797                 '.connickkarel.info',   // Admin: tvaals at vangers.net
3798                 '.definekonica.info',   // Admin: tvaals at vangers.net
3799                 '.gradetelemundo.info',
3800                 '.hydraulickin.info',
3801                 '.indicadorestmj.info',
3802                 '.keeleykincaid.org',
3803                 '.kleenbowser.info',
3804                 '.pipnickname.info',
3805                 '.pacolily.org',
3806                 '.redeemtrabalho.info',
3807                 '.scanmakerchua.info',
3808                 '.titanmessina.info',
3809                 '.tragratuit.org',
3810                 '.yeareola.info',
3811         ),
3812         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
3813                 '.canadianmedsworld.info',      // 84.252.133.112
3814                 '.tabsdrugstore.info',          // 84.252.133.114
3815                 '.tabsstore.info',                      // 84.252.133.114
3816                 '.topcholesterol.info',         // 84.252.133.132
3817         ),
3818         'be.cx' => array(
3819                 '.be.cx',
3820                 '.ca.cx',
3821         ),
3822         'john780321 at yahoo.com' => array(     // by John  Brown
3823                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
3824                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
3825                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
3826         ),
3827         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
3828                 '.bertela.info',
3829                 '.forblis.info',
3830                 '.frenallo.info',
3831                 '.goyahoo.info',
3832                 '.herbak.info',
3833                 '.kiokast.info',
3834                 '.nerenok.info',
3835                 '.pestgets.info',
3836                 '.snukker.info',
3837                 '.thegetspons.info',
3838         ),
3839         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
3840                 '.bobop.info',
3841                 '.kwwwe.info',
3842                 '.piikz.info',
3843                 '.moosm.info',
3844                 '.vvvw.info',
3845         ),
3846         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
3847                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
3848                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
3849                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
3850                 '.jplingood.com',       // 125.65.112.15
3851                 '.linenew.com',         // 203.191.148.96
3852                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
3853                 '.yzlin.com',           // 220.162.244.36
3854         ),
3855         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
3856                 '.1111mb.com',
3857                 '.2sex18.com',
3858                 '.69porn1.com',
3859         ),
3860         'ECTechnology' => array(
3861                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
3862                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
3863                 '.automouse.jp',
3864         ),
3865         'lyqz at 21cn.com' => array(
3866                 '.japangame1.com',
3867                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
3868                 '.livedoor1.com',
3869                 '.ragnarokonline1.com',
3870                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
3871         ),
3872         'kingrou at hotmail.com' => array(      // by yangjianhe
3873                 '.youshini.com',                // Two iframe to 453787.com's *.exe
3874                 '.453787.com',
3875         ),
3876         'anpaul541000 at 163.com' => array(     // by su qiuqing
3877                 '.cetname.com',                 // 222.77.185.87
3878                 '.jpgamer.net',                 // 220.247.157.106
3879                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
3880                 '.lovejptt.com',                // 222.77.185.87
3881                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
3882                 '.playncsoft.net',              // 220.247.157.106
3883         ),
3884         'abc00613 at 163.com' => array( // by guo yong
3885                 '.avtw1068.com',                // 64.74.223.11
3886                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
3887                 '.djkkk66990.com',              // 68.178.232.99
3888                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
3889         ),
3890         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
3891                 '.cmonfofo.com',
3892                 '.discutbb.com',
3893         ),
3894         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
3895                 '.preca.info',
3896                 '.skiaggi.info',
3897                 '.scrianal.info',
3898                 '.tageom.info',
3899         ),
3900         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
3901                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
3902                 '.inpros.net',                  // 202.181.98.79
3903                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
3904         ),
3905         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
3906                 '.ec51.com',
3907                 '.ec51.net',
3908         ),
3909         'abbevillelaties at yahoo.fr etc' => array(
3910                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
3911                 '.ringtones-rate.com',
3912                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
3913                 '.special-ringtones.net',
3914         ),
3915         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
3916                 '.1sgsc.info',
3917                 '.3h4r89h.info',
3918                 '.3v44dd.info',
3919                 '.6rfuh6.info',
3920                 '.84hd8.info',
3921                 '.94bui89.info',
3922                 '.agysb3.info',
3923                 '.asdjhs.info',
3924                 '.bcvnrth.info',
3925                 '.bheb4r.info',
3926                 '.bhiuno.info',
3927                 '.biug7g.info',
3928                 '.bjb5f4.info',
3929                 '.bob8g7g.info',
3930                 '.br89bdd.info',
3931                 '.bsa3h.info',
3932                 '.bsieb8.info',
3933                 '.basbiubf.info',
3934                 '.bobwwfs2.info',
3935                 '.ciuv9t.info',
3936                 '.dbmdx4.info',
3937                 '.dbrjms.info',
3938                 '.dbtcm.info',
3939                 '.dff9ghu.info',
3940                 '.dfshbb.info',
3941                 '.dgd4ffdh.info',
3942                 '.dh3ge.info',
3943                 '.duc86jh.info',
3944                 '.ergth45.info',
3945                 '.f78bf7ffb.info',
3946                 '.gbdfbo4.info',
3947                 '.ger45.info',
3948                 '.gnvnrrg.info',
3949                 '.h47he7.info',
3950                 '.h488hbd4.info',
3951                 '.hd72b94.info',
3952                 '.he74b7.info',
3953                 '.hfujfnr.info',
3954                 '.husdhd42.info',
3955                 '.hbwje.info',
3956                 '.itg87gji.info',
3957                 '.iugiougiuh.info',
3958                 '.jhd4f4aa.info',
3959                 '.jshd73.info',
3960                 '.krhpgd.info',
3961                 '.lyihjn.info',
3962                 '.nfyjnfj.info',
3963                 '.oihbv.info',
3964                 '.os44fvs.info',
3965                 '.sdfsd3.info',
3966                 '.sdiug4.info',
3967                 '.sdkufhh.info',
3968                 '.sdugb4f.info',
3969                 '.skdbf.info',
3970                 '.sipiv78.info',
3971                 '.sudbfb.info',
3972                 '.tymbbmy.info',
3973                 '.uilhjk.info',
3974                 '.vi87vub.info',
3975                 '.vfuyf87f.info',
3976                 '.viyvvj877.info',
3977                 '.w7fc8eu.info',
3978                 '.wefg43g.info',
3979                 '.xbrch78e.info',
3980                 '.ywsfu.info',
3981                 '.zxcbiv.info',
3982         ),
3983         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
3984                 '.abofios.info',
3985                 '.amlekfn.info',
3986                 '.amlkdoie.info',
3987                 '.amkslewq.info',
3988                 '.alemfu.info',
3989                 '.aloweks1.info',
3990                 '.alposd3.info',
3991                 '.bamhpb.info',
3992                 '.bhjkb.info',
3993                 '.bjqnj.info',
3994                 '.cvcxcbhpr.info',
3995                 '.czoypaiat.info',
3996                 '.dbpmgc.info',
3997                 '.dgvogrxs.info',
3998                 '.dldksf.info',
3999                 '.dlor6za.com',
4000                 '.dmkoiew.info',
4001                 '.eewrefr.info',
4002                 '.eladne.info',
4003                 '.elksem.info',
4004                 '.elwpod.info',
4005                 '.emlwkdnr.info',
4006                 '.esgmyqk.info',
4007                 '.fauqv.info',
4008                 '.fgxkgy.info',
4009                 '.fhryns.info',
4010                 '.fj38n4g.info',
4011                 '.fjnesal.info',
4012                 '.fmkfoe.info',
4013                 '.fqkcfldtr.info',
4014                 '.fwcigpdwz.info',
4015                 '.fyhik.info',
4016                 '.glrkje.info',
4017                 '.gwkslfq.info',
4018                 '.gwjracvh.info',
4019                 '.hihopepe.info',
4020                 '.hwlyggbkw.info',
4021                 '.hmwbfw.info',
4022                 '.hthyeb.info',
4023                 '.iaofkyaw.info',
4024                 '.uldkxuiw.info',
4025                 '.is7c6w4.info',
4026                 '.ivuddhdk.info',
4027                 '.jgfndjem.info',
4028                 '.jgmdlek.info',
4029                 '.jkrnvmpad.info',
4030                 '.jqujn.info',
4031                 '.jvgmmba.info',
4032                 '.kbaur.info',
4033                 '.kgjindptv.info',
4034                 '.kleo7s9.info',
4035                 '.lezfgam.info',
4036                 '.lfaasy.info',
4037                 '.ljpdjki.info',
4038                 '.lmnpis.info',
4039                 '.lpzcu2f.info',
4040                 '.lrptn.info',
4041                 '.lursqt.info',
4042                 '.mgkabviil.info',
4043                 '.mhtknjyt.info',
4044                 '.mksuuku.info',
4045                 '.mkyky.info',
4046                 '.mloaisn.com',
4047                 '.mlsiknd.info',
4048                 '.mthqz.info',
4049                 '.nnooq.info',
4050                 '.nohhylvc.info',
4051                 '.nuprndsye.info',
4052                 '.nsoelam.info',
4053                 '.nykobczv.info',
4054                 '.nzuhli.info',
4055                 '.odyqzgylr.info',
4056                 '.oidiau.info',
4057                 '.oitzkw.info',
4058                 '.okdmrpz.info',
4059                 '.ooinziti.info',
4060                 '.ortqr.info',
4061                 '.osmkpnekv.info',
4062                 '.ozkzfih.info',
4063                 '.p3ix8wc.com',
4064                 '.piwyt.info',
4065                 '.pfkijrm.info',
4066                 '.pjktcragi.info',
4067                 '.pleoz.info',
4068                 '.plvqm73.info',
4069                 '.pqyrem.info',
4070                 '.qipgqd.info',
4071                 '.qlewixu.com',
4072                 '.qmlskme.info',
4073                 '.qtuff.info',
4074                 '.quoga.info',
4075                 '.quqz.info',
4076                 '.qzxuw.info',
4077                 '.rcaidegp.info',
4078                 '.rlkmdi.info',
4079                 '.rnsoiov.info',
4080                 '.rnwlams.info',
4081                 '.rprgkgqld.info',
4082                 '.rubqvxrn.info',
4083                 '.spqxstl.info',
4084                 '.syckoqjql.info',
4085                 '.tbirb.info',
4086                 '.thalc34.info',
4087                 '.tiabq.info',
4088                 '.tszzpjr.info',
4089                 '.tyjdyn.info',
4090                 '.twgugpns.info',
4091                 '.uaezrqp.info',
4092                 '.udlkasu.info',
4093                 '.uejncyf.info',
4094                 '.ukvflb.info',
4095                 '.ugsuv.info',
4096                 '.ukhgpcp.info',
4097                 '.urprzn.info',
4098                 '.uuhememkw.info',
4099                 '.yalc7en.info',
4100                 '.ybuid.info',
4101                 '.yhdkgfob.info',
4102                 '.ymenq.info',
4103                 '.ynlyb.info',
4104                 '.vieatlubk.info',
4105                 '.vltcaho.info',
4106                 '.wlamsiek.info',
4107                 '.wlerp.info',
4108                 '.wlmtshzi.info',
4109                 '.wmlkams.info',
4110                 '.wprqd.info',
4111                 '.wpyspszi.info',
4112                 '.xdscc.info',
4113                 '.xdvy.info',
4114                 '.xeypku.info',
4115                 '.xsrxh.info',
4116                 '.xwjyrpfe.info',
4117                 '.yxcqw.info',
4118                 '.zhbktrh.info',
4119                 '.zspepn.info',
4120                 '.zsxtz.info',
4121         ),
4122         'survi at poczta.fm and smiley' => array(
4123                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4124                 '.ppert.info',
4125                 '.pperta.info',
4126                 '.pperts.info',
4127                 '.pprtuis.info',
4128                 '.13iuey.info',         // ":>"
4129                 '.13jkhs.info',
4130                 '.13lksa.info',
4131                 '.13rxtx.info',
4132                 '.13slkd.info',
4133                 '.13zaer.info',
4134         ),
4135         'admin at esemeski.com' => array(       // by Jan Kalka
4136                 '.kxils.info',
4137                 '.kuaph.info',
4138                 '.lncdc.info',
4139                 '.lsqpd.info',
4140                 '.mczed.info',
4141                 '.npous.info',
4142                 '.obgju.info',
4143         ),
4144         'LiquidNetLimited.com' => array(
4145                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4146
4147                 // FateBack.com related
4148                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4149                 '.bebto.com',
4150                 '.fateback.com',
4151                 '.undonet.com',
4152                 '.yoll.net',
4153
4154                 // 50webs.com                   // 64.72.112.10
4155                 // dns2.50webs.com              // 64.72.112.11
4156                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4157                 // dns2.freehostia.com  // 64.72.112.13
4158                 // serv3.freehostia.com // 64.72.112.14
4159                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4160                 // mail.50webs.com              // 64.72.112.26
4161                 // supremecenter41.com  // 64.72.112.52
4162                 // 50webs2.50webs.com   // 64.72.112.89
4163                 // supremecenter39.com  // 64.72.112.103
4164
4165                 // by LiquidNet Ltd. (support at propersupport.com)
4166                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
4167                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
4168                         'duoservers.com',               // 216.65.1.130
4169
4170                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
4171         ),
4172         'domains at agava.com' => array(
4173                 '.h18.ru',
4174                 '.hut1.ru',
4175         ),
4176         'wlmx009 at hotmail.com' => array(
4177                 '.123lineage.com',
4178                 '.ff11-info.com',
4179                 '.lastlineage.com',
4180                 '.lineage2-ol.com',
4181                 '.lineage2006.com',
4182                 '.lineagefirst.com',
4183         ),
4184         'Zettahost.com' => array(
4185                 '.atspace.biz',         // sales at zettahost.com
4186                 '.atspace.com',         // abuse at zettahost.com
4187                 '.atspace.name',        // NS atspace.com
4188                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
4189                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
4190         ),
4191         'hlq9814 at 163.com' => array(
4192                 '.kotonohax.com',               // by ling bao
4193                 '.ragnarox.mobi',               // by lin bao, *.exe download
4194                 '.rokonline-jp.com',    // by hang long
4195         ),
4196         '77ch.jp' => array(
4197                 '.77ch.jp',
4198                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
4199         ),
4200         'serchportal at mail.ru' => array(      // by Namu Adin
4201                 '.43fert.info',
4202                 '.belis.info',
4203                 '.bonu.info',
4204                 '.chelsite.info',
4205                 '.chparael.info',
4206                 '.cool9f.info',
4207                 '.dada2.info',
4208                 '.dorplanete.info',
4209                 '.dormonde.info',
4210                 '.dorprojet.info',
4211                 '.faciledor.info',
4212                 '.fastsearchgroup.info',
4213                 '.gerta0.info',
4214                 '.getse.info',
4215                 '.gopvl.info',
4216                 '.knopki.info',
4217                 '.propidor.info',
4218                 '.quicksearchnet.info',
4219                 '.ret5.info',
4220                 '.slimfastsearch.info',
4221                 '.virtualpvl.info',
4222                 '.vpvla.info',
4223                 '.xjdor.info',
4224                 '.zhopki.info',
4225         ),
4226         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
4227                 '*.444mb.com',          // Free hosting
4228                 'urlnip.com',           // Redirection
4229         ),
4230         'WWW.RU' => array(              // by Angela (abuse at www.ru)
4231                 '.1fasttimesatnau.info',
4232                 '.1freecybersex.info',
4233                 '.1freexxxcomics.info',
4234                 '.1fuckingmywife.info',
4235                 '.1pornpreview.info',
4236                 'www.ru',                                       // by (service at demos.ru), redirection
4237         ),
4238         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
4239                 '.adultschat.info',
4240                 '.livecamonline.info',
4241                 '.webcam4u.info',
4242                 '.younghot.info',
4243         ),
4244         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
4245                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
4246
4247                 // 209.51.196.242
4248                 '.22web.net',
4249                 '.2kool4u.net',
4250                 '.9skul.com',
4251                 '.alojalo.info',
4252                 '.byet.net',
4253                 '.byethost2.com',
4254                 '.byethost3.com',
4255                 '.byethost4.com',
4256                 '.byethost5.com',
4257                 '.byethost6.com',
4258                 '.byethost7.com',
4259                 '.byethost8.com',
4260                 '.byethost9.com',
4261                 '.byethost10.com',
4262                 '.byethost11.com',
4263                 '.byethost12.com',
4264                 '.byethost13.com',
4265                 '.byethost14.com',
4266                 '.byethost15.com',
4267                 '.byethost16.com',
4268                 '.byethost17.com',
4269                 '.byethost18.com',
4270                 '.headshothost.net',
4271                 '.hostwq.net',
4272                 '.mega-file.net',
4273                 '.truefreehost.com',
4274
4275                 '.ifastnet.com',        // 209.51.196.243
4276
4277                 // 209.190.16.82(mx1.byet.org)
4278                 '.1sthost.org',
4279                 '.4sql.net',
4280                 '.byet.org',
4281                 '.hyperphp.com',
4282                 '.kwikphp.com',
4283                 '.my-php.net',
4284                 '.my-place.us',
4285                 '.my-webs.org',
4286                 '.netfast.org',
4287                 '.php0h.com',
4288                 '.php1h.com',
4289                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
4290                 '.phpnet.us',
4291                 '.prohosts.org',
4292                 '.pro-php.org',
4293                 '.prophp.org',
4294                 '.sprinterweb.net',
4295                 '.swiftphp.com',
4296                 '.xlphp.net',
4297
4298                 // 209.190.16.83(mx2.byet.org)
4299                 '.instant-wiki.net',
4300
4301                 // 209.190.16.84(mx3.byet.org)
4302
4303                 // 209.190.16.85(mx4.byet.org)
4304                 '.instant-blog.net',
4305                 '.instant-forum.net',
4306
4307                 '.byethost.com',                        // 209.190.18.138
4308         ),
4309         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
4310                 '.analmoviesite.info',
4311                 '.bestgirlssex.info',
4312                 '.boxvagina.info',
4313                 '.cyberlivegirls.info',
4314                 '.hotredgirls.info',
4315                 '.forsexlove.info',
4316                 '.hotnudezone.info',
4317                 '.hotredpussy.info',
4318                 '.lesbians-live.info',
4319                 '.lesbians-on-cam.info',
4320                 '.onlinegirlssite.info',
4321                 '.sexloveonline.info',
4322                 '.teensexcard.info',
4323                 '.teensexdirect.info',
4324                 '.topnudesite.info',
4325                 '.vaginafree.info',
4326                 '.webcam-show.info',
4327                 '.webcamshow.info',
4328                 '.youngsexchat.info',
4329                 '.yourcumshot.info',
4330         ),
4331         'stocking.club at gmail.com' => array(
4332                 '.adulthotmodels.com',          // by David Zajwzran
4333                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
4334                 '.cash-call.info',                      // by David Theissen
4335                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
4336                 '.cheap-online-viagra.info',    // by David Theissen
4337                 '.drugcleansing.net',           // by David Zajwzran
4338                 '.men-health-zone.com',         // by David Theissen
4339                 '.purchase-viagra.info',        // by David Theissen
4340                 '.realdrunkengirls.biz',        // by David Theissen
4341                 '.sextoyslife.com',                     // by David Zajwzran
4342                 '.sexysubjects.info',           // by David Zajwzran
4343                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
4344                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
4345                 '.travelcardsite.info',         // by David Theissen
4346         ),
4347         'lustiq at p5com.com' => array(
4348                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
4349                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
4350         ),
4351         'web at 6jy.com' => array(
4352                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
4353                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
4354         ),
4355         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
4356                 '.auto-fgen.info',
4357                 '.fast-marketing.info',
4358                 '.from-usa.info',
4359                 '.generic-pharm.info',
4360                 '.pharm-directory.info',
4361                 '.popular-people.info',
4362                 '.safe-health.info',
4363                 '.star-celebrities.info',
4364                 '.super-home-biz.info',
4365                 '.top5-auto.info',
4366                 '.top5-cars.info',
4367                 '.vip-furniture.info',
4368                 '.vip-pc.info',
4369                 '.vip-pets.info',
4370         ),
4371         'abuse at search-store.org' => array(
4372                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
4373         ),
4374         'Leading Edge Marketing Inc.' => array(
4375                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
4376                 '.abemedical.com',
4377                 '.attractwomennow.com',
4378                 '.bettersexmall.com',
4379                 '.buymaxoderm.com',
4380                 '.buyvprx.com',
4381                 '.genf20.com',
4382                 '.infinityhealthnews.com',
4383                 '.istnewsletter.com',
4384                 '.leadingedgecash.com',
4385                 '.leadingedgeherbals.com',
4386                 '.leadingedgevipsonly.com',
4387                 '.lecash.com',
4388                 '.leminfo.com',
4389                 '.proextendersystem.com',
4390                 '.provestra.com',
4391                 '.semenax.com',
4392                 '.shavenomore.com',
4393                 '.theedgenewsletter.com',
4394                 '.vigorelle.com',
4395                 '.vigrx.com',
4396                 '.vigrxplus.com',
4397                 '.wbstnewsletter.com',
4398         ),
4399         'clickx at bk.ru' => array(     // by Alexey Enrertov
4400                 '.coolget*.info' =>
4401                         '#^(?:.*\.)?' . 'coolget' .
4402                         '(?:bus|find|news|php|place|post|srch)' .
4403                         '\.info$#',
4404                 '.coolgirl*.info' =>
4405                         '#^(?:.*\.)?' . 'coolgirl' .
4406                         '(?:apple|fish|search)' .
4407                         '\.info$#',
4408                 '.coolmeet*.info' =>
4409                         '#^(?:.*\.)?' . 'coolmeet' .
4410                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
4411                         '\.info$#',
4412                 '.cool**.info' =>
4413                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
4414                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4415                         '\.info$#',
4416                 '.freseasy*.info' =>
4417                         '#^(?:.*\.)?' . 'freseasy' .
4418                         '(?:apple|click|find|fish|post|search)' .
4419                         '\.info$#',
4420                 '.fres**.info' =>
4421                         '#^(?:.*\.)?' .
4422                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
4423                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4424                         '\.info$#',
4425                         // These are not found yet:
4426                         // fresgirlsrch.info
4427                         // fresadultapple.info
4428                         // fresadultclick.info
4429                         // frestheplace.info
4430
4431                 // 66.232.113.44
4432                 '.nuhost.info',
4433                 '.susearch.info',
4434
4435                 // 66.232.126.74(hv94.steephost.com)
4436                 '.dilej.com',
4437                 '.fyvij.com',
4438                 '.howus.com',
4439                 '.jisyn.com',
4440                 '.kaxem.com',
4441                 '.mihug.com',
4442                 '.mobyb.com',
4443                 '.qidat.com',
4444                 '.qihek.com',
4445                 '.ryzic.com',
4446                 '.sasuv.com',
4447                 '.tuquh.com',
4448                 '.vehyq.com',
4449                 '.wezid.com',
4450                 '.wifuj.com',
4451                 '.xijyt.com',
4452                 '.zuqyn.com',
4453         ),
4454         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
4455                 '.hitsearching.info',
4456                 '.hugeamountdata.info',
4457                 '.megafasthost.info',
4458                 '.real-big-host.info',
4459                 '.search4freez.info',
4460                 '.yasech.info',
4461         ),
4462         'ice--man at mail.ru' => array(
4463                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
4464                 '.bestcreola.com',
4465                 '.crekatierra.com',
4466                 '.creolafire.com',
4467                 '.crolik.com',
4468                 '.croller.cn',
4469                 '.ecrmx.com',
4470                 '.eflashpoint.com',
4471                 '.exoticmed.com',
4472                 '.feelview.com',
4473                 '.greatexotic.com',
4474                 '.icrtx.com',
4475                 '.icyhip.com',
4476                 '.icyiceman.com',
4477                 '.icypopular.com',
4478                 '.iflashpoint.com',
4479                 '.justmdx.com',
4480                 '.klickerr.com',
4481                 '.klickerrworld.com',
4482                 '.kreolic.com',
4483                 '.margansitio.com',
4484                 '.margantierra.com',
4485                 '.mimargan.com',
4486                 '.oilkeys.com',
4487                 '.planetmdx.com',
4488                 '.thekeyse.com',
4489                 '.viewgreat.com',
4490                 '.yourcreola.com',
4491
4492                 // 69.46.23.48
4493                 '.crekadirecto.com',
4494                 '.getflashsite.com',
4495                 '.sucreka.com',
4496         ),
4497         'nijeoi at hotmai.com' => array(
4498                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
4499                 '.bowij.com',
4500                 '.bozib.com',
4501                 '.cavux.com',
4502                 '.dipov.com',
4503                 '.gumoz.com',
4504                 '.hakyb.com',
4505                 '.hehyv.com',
4506                 '.hepyt.com',
4507                 '.howoj.com',
4508                 '.jywaz.com',
4509                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
4510                 '.kyheq.com',
4511                 '.kyzad.com',
4512                 '.qicad.com',
4513                 '.qubyd.com',
4514                 '.mocyq.com',
4515                 '.muloq.com',
4516                 '.myxim.com',
4517                 '.nufyp.com',
4518                 '.waqog.com',
4519                 '.wyduc.com',
4520                 '.xefyv.com',
4521                 '.xomej.com',
4522                 '.xomip.com',
4523                 '.xykyl.com',
4524                 '.zakuw.com',
4525                 '.zeliw.com',
4526                 '.zimev.com',
4527                 '.zipif.com',
4528         ),
4529         'niichka at hotmail.com' => array(
4530                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
4531                 '.aerosearch.info',
4532                 '.freader.info',
4533                 '.info4searchz.info',
4534                 '.nice-host.info',
4535                 '.realyfast.info',
4536                 '.resuts.info',
4537         ),
4538         'porychik at hot.ee' => array(  // by Igor
4539                 '.tedstate.info',       // "Free Web Hosting"
4540                 '.giftsee.com',
4541         ),
4542         'aofa at vip.163.com' => array(
4543                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
4544                 '.5944.net',
4545         ),
4546         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
4547                 '.maxrentcar.info',
4548                 '.newsonyericsson.info',
4549                 '.pornositeworld.biz',
4550                 '.rentcarweb.info',
4551         ),
4552         'kopper1970 at gmail.com' => array(
4553                 '.cardealerall.info',           // by Green
4554                 '.donatecarsales.info',         // by Sipil
4555                 '.ringtonewilly.info',          // by Sipil
4556                 '.travelstraveling.info',       // by Chinik
4557                 '.viagrabuyonline.org',         // by Sipil
4558                 '.viagraorderbuy.com',          // by Anatol
4559                 '.worldcuptourism.info',        // by Sipil
4560         ),
4561         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
4562                 '.globalinfoland.info',
4563                 '.goodlifesearch.info',
4564                 '.hotnetinfo.info',
4565                 '.hotpornmovies.org',
4566                 '.infopilot.info',
4567         ),
4568         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
4569                 '.bang-bro.org',
4570                 '.datinghost.info',
4571                 '.hello-craulers.info',
4572                 '.free-blog-host.info',
4573                 '.sucking-boobs.info',
4574         ),
4575         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
4576                 '.allcamsguide.info',
4577                 '.camerascams.info',
4578                 '.camerasera.info',
4579                 '.girlcamsworld.info',
4580                 '.hiddenlimocams.info',
4581                 '.redlivecams.info',
4582                 '.spycamsgear.info',
4583                 '.spycamssite.info',
4584                 '.supercamsusa.info',
4585                 '.thecamsnow.info',
4586         ),
4587         '87.242.116.81' => array(
4588                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
4589                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
4590                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
4591                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
4592                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
4593         ),
4594         '208.70.75.153' => array(
4595                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
4596                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
4597                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
4598                 '.cerc-on.info',
4599                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
4600                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4601                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
4602                 '.cerc-tr.info',
4603                 '.cerc-tw.info',
4604                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
4605                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
4606                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
4607                 '.cerc-on.org',         // by cerca-one at ya.ru
4608                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
4609                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4610                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
4611                 '.cerc-tr.org',         // by cerca-one at ya.ru
4612                 '.cerc-tw.org',         // by cerca-one at ya.ru
4613                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
4614                 '.cerca-fo.info',
4615                 '.cerca-no.info',
4616                 '.cerca-on.info',
4617                 '.cerca-sv.info',
4618                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
4619                 '.cerca-te.info',
4620                 '.cerca-tr.info',
4621                 '.cerca-sx.org',
4622                 '.cerca-tr.org',        // orgitaly1 at ya.ru
4623                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
4624                 '.ricerca-fo.info',
4625                 '.ricerca-one.org',
4626                 '.ricerca-sv.org',
4627                 '.ricerca-sx.org',
4628                 '.ricerca-te.org',
4629                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
4630                 '.subit01.org',
4631                 '.subit02.org',
4632                 '.subit03.org',
4633                 '.subit04.org',
4634                 '.subit05.org',
4635                 '.subit06.org',
4636                 '.subit01.info',
4637                 '.subit02.info',
4638                 '.subit03.info',
4639                 '.subit04.info',
4640                 '.subit05.info',
4641                 '.subit06.info',
4642         ),
4643         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
4644                 '.5-base.com',
4645                 '.pharmacy-style.com',
4646         ),
4647         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
4648                 '.ista-2006.ru',
4649                 '.wefas.ru',
4650         ),
4651         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
4652                 '.tourismworldsite.info',
4653                 '.yourtourismtravel.info',
4654         ),
4655         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
4656                 '.easyfindcar.info',
4657                 '.siteinfosystems.info',
4658         ),
4659         'smesh1155 at gmail.com' => array(
4660                 '.hospitalforyou.info',                 // by Gimmi
4661                 '.thephentermineonline.info',   // by Kipola
4662         ),
4663         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
4664                 '.kiski.net.in',
4665                 '.pipki.org.in',
4666                 '.siski.co.in',
4667         ),
4668         'tiptronikmike at mail.com' => array(
4669                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
4670                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
4671                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
4672                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
4673                 //'.i0sex.info',                // Michael
4674                 //'.i1sex.info',                // Michael
4675                 //'.i2sex.info',                // Martin
4676                 //'.i3sex.info',                // Martin
4677                 //'.i4sex.info',                // Adulterra
4678                 //'.i5sex.info',                // Adulterra
4679                 //[irvyz]6sex.info not found
4680                 '.i8sex.info',                  // by Martin
4681         ),
4682         'skuarlytronald at mail.com' => array(
4683                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
4684                 '.girlsgoingmad.info',          // 64.27.13.120
4685                 '.girlsgonewildside.info',      // 64.27.13.120
4686         ),
4687         '66.232.109.250' => array(
4688                 '.1626pornporno.info',
4689                 '.1851pornporno.info',
4690                 '.1876pornporno.info',
4691                 '.476pornporno.info',
4692         ),
4693         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
4694                 '.compactxxx.com',
4695                 '.eadulthost.com',
4696                 '.eadultview.com',
4697                 '.eroticpool.net',
4698                 '.ipornservice.com',
4699                 '.liveadulthost.com',
4700                 '.nudepal.com',
4701                 '.sweetservers.com',
4702         ),
4703         'support at orgija.org' => array(
4704                 '.assfuckporn.org',
4705                 '.dosugmos.org',
4706                 '.fuckporn.org',
4707                 '.girlsdosug.org',
4708                 '.girlsporno.org',
4709                 '.moscowintim.org',
4710                 '.pornass.org',
4711                 '.pornopussy.org',
4712                 '.progirlsporn.org',
4713                 '.pussypornogirls.org',
4714         ),
4715         '125.65.112.93' => array(
4716                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
4717                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
4718         ),
4719         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
4720                 '.beta-google.com',
4721                 '.tv-reklama.info',
4722                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
4723                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
4724         ),
4725         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
4726                 '.abobrinha.org',
4727                 '.aneurysmic.com',              // / not found
4728                 '.physcomp.org',                // / not found
4729                 '.seriedelcaribe2006.org',
4730                 '.refugeeyouthinamerica.com',
4731         ),
4732         'skip_20022 at yahoo.com' => array(
4733                 // 203.174.83.55
4734                 '.a28hosting.info',             // by Bill Jones
4735                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
4736                 '.besthentai06.org',    // by yakon
4737         ),
4738         'USFINE.com' => array(
4739                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
4740                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
4741         ),
4742         '68.178.211.57' => array(
4743                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
4744                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
4745         ),
4746         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
4747                 '.google-yahoo-msn.org',
4748                 '.expedia-travel.org',
4749         ),
4750         'admin at newestsearch.com' => array(   // by Gibrel Sitce
4751                 '.emr5ce.org',
4752                 '.wfe7nv.org',
4753                 '.xyr99yx.org',
4754         ),
4755         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
4756                 '.playonlinenc.com',
4757                 '.playboss-jp.com',
4758         ),
4759         'Digi-Rock.com' => array(
4760                 '.rom776.com',
4761                 // owner-organization: DIGIROCK, INC.
4762                 // owner-email: domain-contact at digi-rock.com
4763                 // with an external ad-and-JavaScript,
4764                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
4765                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
4766         ),
4767         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
4768                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
4769                 '.ipod-application.info',       // NO IP
4770                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
4771                 '.stonesex.info',                       // NO IP, was 74.50.97.136
4772         ),
4773         'germerts at yandex.ru' => array(       // by Sergey Marchenko (germerts at yandex.ru)
4774                 '.andatra.info',
4775                 '.banchitos.info',
4776                 '.batareya.info',
4777                 '.blevota.info',
4778                 '.broneslon.info',
4779                 '.gamadril.info',
4780                 '.gipotenuza.info',
4781                 '.govnosaklo.info',
4782         ),
4783         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
4784                 '.acronis-true-image.info',
4785                 '.calcio-xp.info',
4786                 '.cosanova.info',
4787                 '.cose-rx.info',
4788                 '.dictip.info',
4789                 '.findig.info',
4790                 '.fotonow.info',
4791                 '.lavoro-tip.info',
4792                 '.loan-homes.info',
4793                 '.mionovita.info',
4794                 '.mustv.info',
4795                 '.newsnaked.info',
4796                 '.online-tod.info',
4797                 '.opakit.info',
4798                 '.opanow.info',
4799                 '.opriton.info',
4800                 '.porta-bl.info',
4801                 '.refdif.info',
4802                 '.xzmovie.info',
4803         ),
4804         '84.252.148.120 etc' => array(
4805                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
4806                 '.planetavilton.info',  // 84.252.148.120
4807                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
4808         ),
4809         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
4810                 '.99jk.com',
4811                 '.99jk.com.cn',
4812                 '.99jk.cn',
4813         ),
4814         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
4815                 '.kliktop.biz',
4816                 '.kliktop.org',
4817                 '.pharmatop.us',
4818                 '.supertop.us',
4819                 '.supervaizer.info',
4820         ),
4821         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
4822                 '.freeamateursexx.info',        // 81.0.195.228
4823                 '.freeanalsexx.info',           // 217.11.233.97
4824                 '.freegaysexx.info',            // 81.0.195.228
4825         ),
4826         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
4827                 '.abbhi.info',
4828                 '.gayblogguide.biz',
4829                 '.huope.info',
4830                 '.thebdsmday.info',
4831                 '.zioprt.info',                 // 89.149.228.237
4832         ),
4833         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
4834                 '.boblisk.info',
4835                 '.factyri.info',
4836                 '.jorge1.info',
4837         ),
4838         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
4839                 '.bestmindstorm.org',
4840                 '.redstoreonline.org',
4841         ),
4842         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
4843                 '.8e8ae.net',
4844                 '.c-cock.com',
4845                 '.fa59eaf.com',
4846                 '.set-place.net',
4847                 '.sex-beauty.net',
4848         ),
4849         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
4850                 '.tomdir.info',
4851                 '.tomdirdirect.info',
4852                 '.tomdirworld.info',
4853                 '.treton.info',
4854                 '.trefas.info',
4855                 '.tretonmondo.info',
4856                 '.unefout.info',
4857                 '.unefoutprojet.info',
4858                 '.unitfree.info',
4859                 '.vilret.info',
4860                 '.vilttown.info',
4861                 '.votrefout.info',
4862                 '.warmfind.info',
4863                 '.warptop.info',
4864                 '.wildtram.info',
4865                 '.xofind.info',
4866                 '.xopdiscover.info',
4867                 '.xopfind.info',
4868                 '.xoplocate.info',
4869                 '.xopseek.info',
4870                 '.xpfirst.info',
4871                 '.xphighest.info',
4872                 '.xptop.info',
4873         ),
4874         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
4875                 '.myviagrasite.com',    // 80.74.153.2
4876                 '.thecanadianmeds.com', // 80.74.153.17
4877         ),
4878         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
4879                 '.bigemot.com',                         // 217.11.233.34, / not found
4880                 '.espharmacy.com',                      // 217.11.233.34
4881                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
4882                 '.ringtonecooler.com',          // 217.11.233.34
4883         ),
4884         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
4885                 '.okwit.com',           // 220.166.64.44
4886                 '.sakerver.com',        // 220.166.64.194
4887                 '.motewiki.net',        // 220.166.64.194
4888         ),
4889         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
4890                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
4891                 '.lookmedicine.info',           // 206.161.205.22
4892                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
4893                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
4894                 '.worldsitesearch.info',        // 209.8.40.59
4895         ),
4896         'lee.seery at gmail.com' => array(
4897                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
4898                 '.lingvol.com',         // 64.21.34.55
4899                 '.micevol.com',         // 64.21.34.55
4900                 '.heyhey.info',         // 64.21.34.55  by anonymous
4901         ),
4902         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
4903                 // 69-64-64-71.dedicated.abac.net
4904                 '.520-ard.info',
4905                 '.550bcards.info',
4906                 '.559-cads.info',
4907                 '.559caard.info',
4908                 '.565-caaard.info',
4909                 '.575cadr.info',
4910                 '.577cadrs.info',
4911                 '.590-acrds.info',
4912                 '.596-cadrs.info',
4913                 '.596caards.info',
4914                 '.596caaard.info',
4915                 '.asstablishingcads.info',
4916                 '.astablish-ard.info',
4917                 '.astablishcacrds.info',
4918                 '.begginers-acards.info',
4919                 '.begginersacrds.info',
4920                 '.beggingcaaard.info',
4921                 '.beginercacrds.info',
4922                 '.cacrdscreating.info',
4923                 '.caditbegging.info',
4924                 '.cadr-buildup.info',
4925                 '.cadr-establilsh.info',
4926                 '.cadrs-buildercredit.info',
4927                 '.cadrs570.info',
4928                 '.cads-565.info',
4929
4930                 // 69-64-64-113.dedicated.abac.net
4931                 '.interistacards.info',
4932                 '.intrust-ards.info',
4933                 '.intrustacrds.info',
4934                 '.lfixed-ard.info',
4935                 '.lowerate-ard.info',
4936                 '.lowpercentage-ard.info',
4937                 '.lowpercentageacrd.info',
4938         ),
4939         'acua at mail.ru' => array(
4940
4941                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
4942                 '.dns4babka.info',      // by acua at mail.ru
4943                         // by webmaster at dns4babka.info
4944                         '.credh.cn',
4945                         '.fucfv.cn',
4946                         '.gdxnk.cn',
4947                         '.sqrrt.cn',
4948                         '.ywtmd.cn',
4949                         '.kncqy.cn',    // by webmaster at allmyns.info
4950
4951                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
4952                 '.dedka2ns.info',       // by acua at mail.ru
4953                         // by webmaster at dedka2ns.info
4954                         '.ascpo.cn',
4955                         '.jgycr.cn',
4956                         '.nqdtt.cn',
4957                         '.oswde.cn',
4958                         '.qeyig.cn',
4959                         '.soqsx.cn',
4960                         '.ukncd.cn',
4961                         '.zijgb.cn',
4962
4963                 // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
4964                 '.dns4dedka.info',      // by acua at mail.ru
4965                         // by webmaster at dns4dedka.info
4966                         '.bcpnb.cn',
4967                         '.cfbpr.cn',
4968                         '.dnndb.cn',
4969                         '.ekwme.cn',
4970                         '.iutps.cn',
4971                         '.ryftj.cn',
4972                         '.vxqcb.cn',
4973                         '.zxvlr.cn',    // by webmaster at allmyns.info
4974
4975                 // by dig at dns4dedka.info
4976                 '.bdnge.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
4977                 '.dcdsu.cn',    // 217.20.112.102(*.internetserviceteam.com)
4978                 '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
4979                 '.frvdv.cn',    // 84.16.226.28(*snip*)
4980                 '.heulw.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
4981                 '.hissw.cn',    // 84.16.249.240(*snip*)
4982                 '.lwqjr.cn',    // 84.16.255.253(*snip*)
4983                 '.obwew.cn',    // 84.16.251.218(*.internetserviceteam.com)
4984                 '.otkiu.cn',    // 84.16.255.254(*.internetserviceteam.com)
4985                 '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
4986                 '.rgjcs.cn',    // 84.16.251.219(*.internetserviceteam.com)
4987                 '.rjskp.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
4988                 '.sokrp.cn',    // 84.16.226.217(*snip*)
4989                 '.ubtnp.cn',    // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de)
4990                 '.vdecc.cn',    // 84.16.226.29(*snip*)
4991                 '.vgkkc.cn',    // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
4992                 '.vqsmy.cn',    // 84.16.249.239(*snip*)
4993                 '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
4994                 '.xiuky.cn',    // 84.16.251.222(*snip*)
4995                 '.xrqcd.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
4996
4997                 // by la at dns4dedka.info
4998                 '.aeyzf.cn',    // 84.16.251.218(*snip*)
4999                 '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
5000                 '.bgslu.cn',    // 89.149.228.163(*snip*)
5001                 '.dxouw.cn',    // 84.16.255.253(*snip*)
5002                 '.ecsbe.cn',    // 84.16.251.218(*snip*)
5003                 '.eothy.cn',    // 84.16.249.241(*snip*)
5004                 '.epocy.cn',    // 84.16.251.220(*.internetserviceteam.com)
5005                 '.ewvjw.cn',    // 89.149.196.72(*snip*)
5006                 '.faacz.cn',    // 84.16.251.222(*snip*)
5007                 '.filun.cn',    // 89.149.196.72(*snip*)
5008                 '.fzdpk.cn',    // 84.16.249.239(*snip*)
5009                 '.hatyg.cn',    // 84.16.251.223(*snip*)
5010                 '.hmtqn.cn',    // 84.16.249.240(*snip*)
5011                 '.ibfte.cn',    // 89.149.196.19(*snip*)
5012                 '.jcaym.cn',    // 84.16.249.240(*snip*)
5013                 '.iqzaw.cn',    // 84.16.255.254(*snip*)
5014                 '.jclsf.cn',    // 84.16.249.240(*snip*)
5015                 '.jefdh.cn',    // 84.16.249.240(*snip*)
5016                 '.kchjh.cn',    // 84.16.251.219(*snip*)
5017                 '.krumo.cn',    // 84.16.226.217(*snip*)
5018                 '.lbava.cn',    // 217.20.112.102(*snip*)
5019                 '.mqrtw.cn',    // 84.16.226.29(*snip*)
5020                 '.njpgv.cn',    // 84.16.251.219(*snip*)
5021                 '.npovm.cn',    // 84.16.226.28(*snip*)
5022                 '.nyobt.cn',    // 89.149.196.19(*snip*)
5023                 '.ovxxt.cn',    // 84.16.251.223(*snip*)
5024                 '.owhwz.cn',    // 89.149.228.163(*snip*)
5025                 '.ozjyi.cn',    // 84.16.249.241(*snip*)
5026                 '.pfnzj.cn',    // 84.16.226.217(*snip*)
5027                 '.pixvf.cn',    // 84.16.255.254(*snip*)
5028                 '.qydph.cn',    // 89.149.228.163(*snip*)
5029                 '.rxens.cn',    // 89.149.196.72(*snip*)
5030                 '.sojbp.cn',    // 84.16.249.239(*snip*)
5031                 '.srths.cn',    // 84.16.251.222(*snip*)
5032                 '.tdytc.cn',    // 84.16.255.254(*snip*)
5033                 '.unquz.cn',    // 84.16.251.223(*snip*)
5034                 '.uwcns.cn',    // 89.149.196.19(*snip*)
5035                 '.vcbdm.cn',    // 84.16.251.220(*snip*)
5036                 '.wnmat.cn',    // 84.16.255.253(*snip*)
5037                 '.wttmr.cn',    // 84.16.226.29(*snip*)
5038                 '.xpwib.cn',    // 84.16.251.220(*snip*)
5039                 '.yrogt.cn',    // 84.16.249.239(*snip*)
5040
5041                 // by le at dns4dedka.info
5042                 '.goslw.cn',    // 84.16.251.220(*snip*)
5043                 '.hqbmh.cn',    // 84.16.251.223(*snip*)
5044                 '.iewik.cn',    // 84.16.255.254(*snip*)
5045                 '.jnkeh.cn',    // 89.149.228.163(*snip*)
5046                 '.pifyp.cn',    // 89.149.228.163(*snip*)
5047                 '.nohyl.cn',    // 89.149.196.72(*snip*)
5048                 '.nvzvx.cn',    // 84.16.255.254(*snip*)
5049                 '.uchoe.cn',    // 84.16.249.239(*snip*)
5050                 '.ujoyf.cn',    // 84.16.251.218(*snip*)
5051                 '.ulfqh.cn',    // 89.149.196.19(*snip*)
5052                 '.vxugv.cn',    // 84.16.251.223(*snip*)
5053
5054                 '.dbgti.cn',    // 84.16.249.240(*snip*)
5055                 '.oelmv.cn',    // 84.16.226.28(*snip*)
5056                 '.qniww.cn',    // 84.16.251.218(*snip*)
5057                 '.vtvyq.cn',    // 84.16.251.219(*snip*)
5058                 '.zqonm.cn',    // 84.16.249.241(*snip*)
5059
5060                 '.allmyns.info',        // 84.16.226.29 by acua at mail.ru, / forbidden
5061                         // by webmaster at allmyns.info
5062                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
5063                         '.ihpvy.cn',    // 84.16.226.28(*snip*)
5064                         '.lbtuo.cn',    // 84.16.255.254(*snip*)
5065                         '.liunc.cn',    // 84.16.249.241(*snip*)
5066                         '.rcyqr.cn',    // 84.16.226.217(*snip*)
5067                         '.rekth.cn',    // 89.149.196.19(*snip*)
5068                         '.riumh.cn',    // 84.16.226.28(*snip*)
5069                         '.zbtym.cn',    // 84.16.251.219(*snip*)
5070                         '.zjcgx.cn',    // 217.20.112.102(*snip*)
5071         ),
5072         'gilvcta sy jilbertsbram.com' => array(
5073                 '.dsfljkeilm1.cn',      //  206.53.51.126
5074                 '.dsfljkeilm2.cn',      //  206.53.51.126
5075                 '.dsfljkeilm3.cn',      // IP not allocated now
5076                 '.dsfljkeilm4.cn',      // IP not allocated now
5077                 '.dsfljkeilm5.cn',      // IP not allocated now
5078                 '.dsfljkeilm6.cn',      // IP not allocated now
5079                 '.dsfljkeilm7.cn',      // IP not allocated now
5080                 '.dsfljkeilm8.cn',      // IP not allocated now
5081                 '.dsfljkeilm9.cn',      // IP not allocated now
5082                 '.dsfljkeilm10.cn',     // IP not allocated now
5083         ),
5084         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
5085
5086                 // 69.64.82.76(*.dedicated.abac.net)
5087                 '.bruised-criedit.info',
5088                 '.bruised-crtedit.info',
5089                 '.bruised-czrd.info',
5090                 '.bruisedcreditcars.info',
5091                 '.bruisedcreitcard.info',
5092                 '.bruisedcreitd.info',
5093                 '.buliderscreadet.info',
5094                 '.cleaningup-cdit.info',
5095                 '.cleaningup-cedict.info',
5096                 '.cleaningup-cerdic.info',
5097                 '.cleanup-crrd.info',
5098
5099                 // 69.64.82.77(*.dedicated.abac.net)
5100                 '.bruised-crediot.info',
5101                 '.bruised-credtid.info',
5102                 '.bruisedcriet.info',
5103                 '.bruisedredit.info',
5104                 '.buliders-crdt.info',
5105                 '.buliders-cre4dit.info',
5106                 '.buliders-creadt.info',
5107                 '.buliders-credcards.info',
5108                 '.buliders-credictcard.info',
5109                 '.cleaningupccreditcards.info',
5110                 '.cleaningupcdedit.info',
5111                 '.cleaningupcedirt.info',
5112                 '.cleaningupceidt.info',
5113                 '.cleaningupcrasd.info',
5114                 '.cleaningupcreait.info',
5115
5116                 // 69.64.82.78(*.dedicated.abac.net)
5117                 '.bruised-cridet.info',
5118                 '.bruised-drecit.info',
5119                 '.bruised-reditcards.info',
5120                 '.bruisedcredikt.info',
5121                 '.bruisedcredith.info',
5122                 '.bruisedcredtid.info',
5123                 '.cleanup-criet.info',
5124                 '.cleanup-csrds.info',
5125                 '.cleanup-dards.info',
5126
5127                 // 69.64.82.79(*.dedicated.abac.net)
5128                 '.bruised-crediotcards.info',
5129                 '.bruised-creditcar.info',
5130                 '.bruised-creid.info',
5131                 '.bruised-creidtcard.info',
5132                 '.buliders-crdit.info',
5133                 '.buliders-creadet.info',
5134                 '.cleaningup-ceridt.info',
5135                 '.cleaningupcrecit.info',
5136                 '.cleaningupccritcard.info',
5137                 '.cleanupdredit.info',
5138                 '.cleanupredit.info',
5139         ),
5140         '.malwarealarm.com',
5141                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
5142                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
5143                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
5144         '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated)
5145         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated)
5146         'Inet-Traffic.com' => array(
5147                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
5148                 //'.dcomm.com',         // by D Communications Inc. S.A.
5149
5150                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
5151                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5152                 // ...
5153                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
5154                 // ...
5155                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
5156                 // ...
5157                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
5158                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
5159                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
5160                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
5161                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
5162                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
5163                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
5164                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
5165                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
5166                 // ...
5167                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
5168                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
5169                 // ...
5170                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
5171                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
5172                 // ...
5173                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
5174                 // ...
5175                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5176                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
5177                 // ...
5178                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
5179         ),
5180         'andreyletov at yahoo.com' => array(
5181                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
5182                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
5183                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
5184         ),
5185         'alrusnac at hotmail.com' => array(
5186                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
5187                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
5188         ),
5189         '203.116.63.123' => array(
5190                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
5191                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
5192         ),
5193         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
5194                 '.autotowncar.cn',              // 69.73.146.184
5195                 '.badgirlhome.cn',              // 69.73.146.186
5196         ),
5197         'Wmp.co.jp' => array(
5198                 // 219.94.134.208, ns *.dns.ne.jp, adult
5199                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
5200                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
5201                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
5202         ),
5203         'Macherie.tv' => array(
5204                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
5205                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
5206                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
5207         ),
5208         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
5209                 '.yemine.info',
5210                 '.fr4f3ds.info',
5211         ),
5212         '66.232.112.175' => array(
5213                 '.catybe.cn',           // by abuse-here at inbox.ru
5214                 '.faweji.cn',           // by entretov-86 at ftunez.org
5215                 '.jytame.cn',           // by abuse-here at inbox.ru
5216                 '.wygete.cn',           // by abuse-here at inbox.ru
5217         ),
5218
5219         // C-2: Lonely domains (buddies not found yet)
5220         '.0721-4404.com',
5221         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
5222         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
5223         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
5224         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
5225         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
5226         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
5227         '.0annie.info',
5228         '.6i6.de',
5229         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
5230         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
5231         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
5232         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
5233         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
5234         '.allworlddirect.info', // Forbidden
5235         '.amoreitsex.com',
5236         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
5237         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
5238         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
5239         '.auto-car-cheap.org',
5240         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
5241         '.baurish.info',
5242         '.bestop.name',
5243         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
5244         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
5245         '.bestshopfinder.info',
5246         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
5247         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
5248         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
5249         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
5250         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
5251         '.catkittenmagazines.org',              // 87.118.97.117
5252         '.covertarena.co.uk',   // by Wayne Huxtable
5253         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
5254         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
5255         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
5256         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
5257         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
5258         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
5259         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
5260         '.easyshopusa.com',             // by riter (riter at nm.ru)
5261         '.edu.ph',                              // "philippine network foundation inc"
5262         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
5263         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
5264         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
5265         '.fastppc.info',                // by peter conor (fastppc at msn.com)
5266         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
5267         '*.filthserver.com',    // sales at onlinemarketingservices.biz
5268         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
5269         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
5270         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
5271         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
5272         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
5273         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
5274         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
5275         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
5276         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
5277         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
5278         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
5279         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
5280
5281         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
5282
5283         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
5284         '.gm-exchange.jp',              // 210.188.216.49 RMT
5285         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
5286         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
5287         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
5288         '.greatbestwestern.org',// by gao.wungao at gmail.com
5289         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
5290         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
5291         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
5292         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
5293         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
5294         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
5295         '.hostuju.cz',                  // ns banan.cz, banan.it
5296         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
5297         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
5298         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
5299         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
5300         '.infocart.jp',                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
5301         '.infradoc.com',
5302         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
5303         '.ismarket.com',                // Google-hiding. intercage.com related IP
5304         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
5305         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
5306         '.itsexosit.net',
5307         '.itxxxit.net',
5308         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
5309         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
5310         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
5311         '.kingtools.de',
5312         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
5313         '.leucainfo.com',
5314         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
5315         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
5316         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
5317         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
5318         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
5319         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
5320         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
5321         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
5322         '.megvideochatlive.info',       // Bad seo
5323         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
5324         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
5325         '.myfgj.info',                  // by Filus (softscript at gmail.com)
5326         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
5327         '.mxsupportmailer.com',
5328         '.next-moneylife.com',  // RMT
5329         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
5330         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
5331         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
5332         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
5333         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
5334         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
5335         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
5336         '.onlineviagra.de',
5337         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
5338         '.ozomw.info',
5339         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
5340         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
5341         '.perevozka777.ru',             // by witalik at gmail.com
5342         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
5343         '.pills-storage.com',   // by
5344         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
5345         '.popki.ind.in',                        // by Aleksandr Krasnik (supermaster at pisem.net)
5346         '.porkyhost.com',               // 79965 at whois.gkg.net
5347         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
5348         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
5349         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
5350         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
5351         '.prama.info',                  // by Juan.Kang at mytrashmail.com
5352         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
5353         '.qoclick.net',                 // by DMITRIY SOLDATENKO
5354         '.quality-teen-porn-photo.com', // by info at densa.info
5355         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
5356         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
5357         '.rigame.info',                 // by debra_jordan07 at yahoo.com
5358         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
5359         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
5360         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
5361         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
5362         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
5363         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
5364         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
5365         '.sexamoreit.com',
5366         '.sexforit.com',
5367         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
5368         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
5369         '.sirlook.com',
5370         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
5371         '.sepcn.info',                  // / not found
5372         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
5373         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
5374         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
5375         '.superverizonringtones.com',   // by joshua at list.ru
5376         '.thehostcity.com',             // Domains by Proxy
5377         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
5378         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
5379         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
5380         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
5381         '.topmeds10.com',
5382         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
5383         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
5384         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
5385         '.unctad.net',                  // by gfdogfd at lovespb.com
5386         '.vacant.org.uk',
5387         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
5388         '.virtualsystem.de',
5389         '.vdxhost.com',
5390         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
5391         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
5392         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
5393         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
5394         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
5395         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
5396         '.whoop.to',                    // RMT
5397         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
5398         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
5399         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
5400         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
5401         '.wwwna.info',                  // / 404 Not Found
5402         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
5403         '.xamorexxx.net',
5404         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
5405         '.xsessox.com',
5406         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
5407         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
5408         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
5409         '.zyguo.info',                  // ns globoxhost.net
5410         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
5411
5412         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
5413         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
5414         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
5415
5416         '.masserch.info',               // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com) "Free Web Hosting" by sqr at bk.ru, spam
5417         '.viagrabuycheap.info', // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...), ns *.advernsserver.com
5418
5419         '.chatwalker.com',              // 124.32.230.65
5420         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
5421         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
5422
5423         '.mncxvsm.info',                // 217.11.233.105, / blank
5424
5425         // C-3: Not classifiable (information wanted)
5426         //
5427         // Something incoming to pukiwiki related sites
5428         'nana.co.il related' => array(
5429                 '.planetnana.co.il',
5430                 '.nana.co.il',
5431         ),
5432 );
5433
5434 // --------------------------------------------------
5435
5436 $blocklist['D'] = array(
5437         // D: Sample setting of
5438         // "Third party in good faith"s
5439         //
5440         // Hosts shown inside of the implanted contents,
5441         // not used via spam, but maybe useful to detect these contents
5442         //
5443         // 'RESERVED',
5444 );
5445
5446 // --------------------------------------------------
5447
5448 $blocklist['E'] = array(
5449         // E: Sample setting of
5450         // Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers, Ads
5451
5452         '15-Mail.com related' => array(
5453                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
5454                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5455                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5456                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
5457                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
5458         ),
5459         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
5460         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
5461         'E-brainers.com related' => array(
5462                 // 202.212.14.101
5463                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
5464                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
5465                 '.my-tune.jp',                                  // by brainers Inc.
5466                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
5467                 '.weekle.jp',                                   // by brainers Inc.
5468
5469                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
5470                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
5471                 '.3minutes-marketing-club.com', // by Fujio
5472                 '.affiliate-vampire.com',               // by Masatoshi
5473                 '.article-site-power-package.com',      // by Masatoshi
5474                 '.audio-marketing-club.com',    // by Fujio
5475                 '.brainers-task-manager.com',   // by Masatoshi
5476                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
5477                 '.brainersbuzz.com',                    // by Masatoshi
5478                 '.den4renz-marketing-club.com', // by Fujio
5479                 '.english-contents-club.com',   // by Masatoshi
5480                 '.fly-in-ads-japan.com',                // by Fujio
5481                 '.free-resalerights-giveaway.com',      // by Fujio
5482                 '.freegiveawaysecret.com',              // by Masatoshi
5483                 '.guaranteedvisitorpro.com',    // by Masatoshi
5484                 '.havads-japan.com',                    // by Masatoshi
5485                 '.info-business123.com',                // by Fujio
5486                 '.instant-marketing-club.com',  // by Fujio
5487                 '.internetmarketinggorinjyu.com',       // by Masatoshi
5488                 '.marketing-force-japan.com',   // by Fujio
5489                 '.masatoshikobayashi.com',              // by Fujio
5490                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
5491                 '.replytomatt.com',                             // by Fujio
5492                 '.santa-deal.com',                              // by Fujio
5493                 '.santa-deal-summer.com',               // by Fujio
5494                 '.scratch-card-factory.com',    // by Masatoshi
5495                 '.script4you-japan.com',                // by Fujio
5496                 '.sell1000000dollarinjapan.com',// by Fujio
5497                 '.squeeze-page-secret.com',             // by Masatoshi
5498                 '.viral-blog-square.com',               // by Fujio
5499                 '.viralarticle.com',                    // by Fujio
5500                 '.wowhoken.com',                                // by Fujio
5501
5502                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
5503                 '.brainerstelevision.com',
5504                 '.demosite4you.com',
5505                 '.keywordcatcherpro.com',
5506                 '.script-marketing-club.com',
5507
5508                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
5509                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
5510                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
5511                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
5512                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
5513                 '.brainerscode.com',    // by akada
5514                 '.brainerslive.com',    // by domain
5515                 '.brainersreview.com',  // by domain
5516                 '.brainerstest.com',    // by akada
5517                 '.otosecret.com',               // by domain
5518                 '.ultimate-marketing-weapon.com',       // by akada
5519                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
5520                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
5521
5522                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
5523                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
5524         ),
5525         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
5526         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
5527         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
5528         'info at kobeweb.jp' => array(
5529                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
5530                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
5531                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
5532         ),
5533         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
5534         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
5535         'JunSuzuki.com' => array(       // e-brainers.com related
5536                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
5537                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
5538         ),
5539         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
5540                 '.11kanji.com',         // 211.10.131.88
5541                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
5542                 '.point-park.com',      // 211.10.131.88
5543                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
5544         ),
5545         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
5546         '.sedori-data.com',             //
5547         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
5548         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
5549                 '.e123.info',
5550                 '.ialchemist.net',
5551                 '.j012.net',
5552                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
5553         ),
5554         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
5555 );
5556
5557 // --------------------------------------------------
5558
5559 $blocklist['Z'] = array(
5560         // Z: Yours
5561         //
5562         //'',
5563         //'',
5564         //'',
5565 );
5566
5567 ?>