OSDN Git Service

Added
[pukiwiki/pukiwiki_sandbox.git] / spam / spam.ini.php
1 <?php
2 // $Id: spam.ini.php,v 1.174 2007/10/20 04:41:52 henoheno Exp $
3 // Spam-related setting
4
5 // NOTE FOR ADMINISTRATORS:
6 //
7 // Host selection:
8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
11 //   (Now you know, [1] = [2] + [3])
12 //
13 // How to write multiple hosts as an group:
14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
15 //
16 // How to write regular expression:
17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
18 //
19 // Guideline to keep group names unique:
20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
21 //     that probably be a group.
22 //   - Unique word examples:
23 //     [1] FQDN
24 //     [2] Mail address of the domain-name owner
25 //     [3] IP address, if these hosts have the same ones
26 //     [4] Something unique idea of you
27 //
28 // Reference:
29 //   http://en.wikipedia.org/wiki/Spamdexing
30 //   http://en.wikipedia.org/wiki/Domainers
31 //   http://en.wikipedia.org/wiki/Typosquatting
32
33
34 // --------------------------------------------------
35 // List of the lists
36
37 //  FALSE       = ignore them
38 //  TRUE        = catch them
39 //  Commented out of the line = do nothing about it
40
41 // 'pre': Before the other filters/checkers
42 $blocklist['pre'] = array(
43         'goodhost'      => FALSE,
44 );
45
46 // 'list': Normal list
47 $blocklist['list'] = array(
48         'A-1'           => TRUE,        // General redirection services
49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
50         'B-1'           => TRUE,        // Web spaces
51         'B-2'           => TRUE,        // Jacked contents, something implanted
52         'C'                     => TRUE,        // Exclusive spam domains
53         //'D'           => TRUE,        // "Third party in good faith"s
54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
55         'Z'                     => TRUE,        // Yours
56 );
57
58
59 // --------------------------------------------------
60
61 $blocklist['goodhost'] = array(
62         // Sample setting of ignorance list
63
64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
65
66         // PukiWiki-official/dev specific
67         //'pukiwiki.sourceforge.jp',
68         //'pukiwiki.org',       // Temporary
69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
73         //'ifastnet.com',                               // Server hosting
74         //'threefortune.ifastnet.com',  // Server hosting
75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
76         // Yours
77         //''
78         //''
79         //''
80
81 );
82
83 // --------------------------------------------------
84 // A: Sample setting of
85 // Existing URI redirection or masking services
86
87 $blocklist['A-1'] = array(
88
89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
90         // web-based proxy, DNS subdomains, etc
91         // http://en.wikipedia.org/wiki/URL_redirection
92         //
93         // as known as cheap URI obscuring services today,
94         // for spammers and affiliate users dazed by money.
95         //
96         //   Messages from forerunners:
97         //     o-rly.net
98         //       "A URL REDIRECTION SERVICE GONE BAD"
99         //       "SORRY, TRULY"
100         //     smcurl.com
101         //       "Idiots were using smcURL to shrink URLs and
102         //        send them out via spam."
103         //     tinyclick.com
104         //       "...stop offering it's free services because
105         //        too many people were taking advantage of it"
106         //     xjs.org
107         //       "We have been forced to close this facility
108         //        due to a minority of knuckle draggers who
109         //        abused this web site."
110         //
111         // Please notify us about this list with reason:
112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
113         //
114         '0nz.org',
115         '0rz.tw',
116         '0url.com',
117         '0zed.info',
118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
119         '123.que.jp',
120         '12url.org',
121         '*.15h.com',
122         '*.1dr.biz',
123         '1K.pl' => array(
124                 '*.1k.pl',
125                 '*.5g.pl',
126                 '*.orq.pl',
127         ),
128         '1nk.us',
129         '1url.org',
130         '1url.in',
131         '1webspace.org',
132         '2Ch.net' => array(
133                 'ime.nu',
134                 'ime.st',
135         ),
136         '2ch2.net',
137         '2hop4.com',
138         '2s.ca',
139         '2site.com',
140         '2url.org',
141         '301url.com',
142         '32url.com',
143         '.3dg.de',
144         '*.4bb.ru',
145         'big5.51job.com',       ///gate/big5/
146         '5jp.net',
147         '.6url.com',
148         '*.6x.to',
149         '7ref.com',
150         '82m.org',
151         '*.8rf.com',
152         '98.to',
153         'abbrv.co.uk',
154         '*.abwb.org',
155         'acnw.de',
156         'Active.ws' => array(
157                 '*.321.cn',
158                 '*.4x2.net',
159                 'active.ws',
160                 '*.better.ws',
161                 '*.here.ws',
162                 '*.mypiece.com',
163                 '*.official.ws',
164                 '*.ouch.ws',
165                 '*.premium.ws',
166                 '*.such.info',
167                 '*.true.ws',
168                 '*.visit.ws',
169         ),
170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
171         'aifam.com',
172         'All4WebMasters.pl' => array(
173                 '*.ovp.pl',
174                 '*.6-6-6.pl',
175         ),
176         'amoo.org',
177         'web.archive.org',              ///web/2
178         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
179                 'jmp2.net',
180                 '2me.tw',
181         ),
182         'ataja.es',
183         'ATBHost.com' => array(
184                 '*.atbhost.com',
185                 '*.bzhost.net',
186         ),
187         'atk.jp',
188         'clearp.ath.cx',
189         'athomebiz.com',
190         'aukcje1.pl',
191         'beam.to',
192         'beermapping.com',
193         'besturl.in',
194         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
195         'biglnk.com',
196         'bingr.com',
197         'bittyurl.com',
198         '*.bizz.cc',
199         '*.blo.pl',
200         '*.bo.pl',
201         'briefurl.com',
202         'brokenscript.com',
203         'BucksoGen.com' => array(
204                 '*.bucksogen.com',
205                 '*.bulochka.org',
206                 '*.korzhik.org',
207                 '*.kovrizhka.org',
208                 '*.pirozhok.org',
209                 '*.plushka.org',
210                 '*.pryanik.org',
211                 '*.sushka.org',
212         ),
213         'budgethosts.org',
214         'budu.com',                             // by peter.eder at imcworld.com
215         '*.buzznet.com',
216         '*.bydl.com',
217         'C-O.IN' => array(
218                 '*.c-o.cc',
219                 '*.c-o.in',
220                 '*.coz.in',
221                 '*.cq.bz',
222         ),
223         'c64.ch',
224         'c711.com',
225         '*.cej.pl',
226         'checkasite.net',
227         'url.chefhost.com',
228         '*.chicappa.jp',
229         'chilicity.com',
230         'big5.china.com',               ///gate/big5/
231         'chopurl.com',
232         'christopherleestreet.com',
233         'cintcm.com',
234         '*.cjb.net',
235         'clipurl.com',
236         '*.co.nr',
237         'Comtech Enterprises ' => array(        // comteche.com
238                 'tinyurl.name',
239                 'tinyurl.us',
240         ),
241         'Cool168.com' => array(
242                 '*.cool158.com',
243                 '*.cool168.com',
244                 '*.ko168.com',
245                 '*.ko188.com',
246         ),
247         'Coolurl.de' => array(
248                 'coolurl.de',
249                 'dornenboy.de',
250                 'eyeqweb.com',
251                 'hardcore-porn.de',
252                 'maschinen-bluten-nicht.de',
253         ),
254         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
255         'cutalink.com',
256         '*.da.cx',
257         '*.da.ru',
258         'dae2.com',
259         'dephine.org',
260         'desiurl.com',
261         'dhurl.com',
262         'digbig.com',
263         'Digipills.com' => array(
264                 '*.digipills.com',
265                 'minilien.com',
266                 'tinylink.com',
267         ),
268         '*.discutbb.com',
269         'DL.AM' => array(
270                 '*.cx.la',
271                 '*.dl.am',
272         ),
273         '*.dl.pl',
274         '*.dmdns.com',
275         'doiop.com',
276         'drlinky.com',
277         'durl.us',
278         '*.dvdonly.ru',
279         '*.dynu.ca',
280         'dwarf.name',
281         '*.eadf.com',
282         'easyURL.net' => array(
283                 '*.easyurl.net',
284                 '.goshrink.com',
285                 'ushrink.com',
286         ),
287         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
288                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
289                 // This service seems to be opened at 2007/08/23 with "beta" sign.
290                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
291                 //   "Keep continuing to seek originality and contribute it to local,
292                 //    get/grow niche brands (in local), believe (local) people knows the answer,
293                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
294                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
295                 // I'm so much impressed of the situation around this imported one today.
296         'elfurl.com',
297         'eny.pl',
298         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
299                 '.mywiitime.com',
300                 '.surfindark.com',              // webmaster at etechfocus.com
301                 '.surfinshade.com',
302                 '.surfinshadow.com',
303                 '.surfinwind.com',
304                 '.topsecretlive.com',
305         ),
306         '*.eu.org',
307         'F2B.be' => array(
308                 '*.f2b.be',
309                 '*.freakz.eu',
310                 '*.n0.be',
311                 '*.n3t.nl',
312                 '*.short.be',
313                 '*.ssr.be',
314                 '*.tweaker.eu',
315         ),
316         '*.fancyurl.com',
317         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
318                 'blue11.jp',
319                 'fanznet.com',
320                 'katou.in',
321                 'mymap.in',
322                 'saitou.in',
323                 'satou.in',
324                 'susan.in',
325         ),
326         '.fe.pl',                       // Redirection and subdomain
327         'ffwd.to',
328         'url.fibiger.org',
329         'FireMe.to' => array(
330                 'fireme.to',
331                 'nextdoor.to',
332                 'ontheway.to',
333         ),
334         'flingk.com',
335         'flog.jp',                      // careless redirector and bbs
336         'fm7.biz',
337         'fnbi.jp',
338         '*.fnbi.jp',
339         'forgeturl.com',
340         '*.free.bg',
341         'Freeservers.com' => array(     // United Online Web Services, Inc.
342                 '*.4mg.com',
343                 '*.4t.com',
344                 '*.8m.com',
345                 '*.8m.net',
346                 '*.8k.com',
347                 '*.faithweb.com',
348                 '*.freehosting.net',
349                 '*.freeservers.com',
350                 '*.gq.nu',
351                 '*.htmlplanet.com',
352                 '*.itgo.com',
353                 '*.iwarp.com',
354                 '*.s5.com',
355                 '*.scriptmania.com',
356                 '*.tvheaven.com',
357         ),
358         '*.freewebpages.com',
359         'FreeWebServices.net' => array( // Host Department LLC
360                 '*.about.gs',   // Dead?
361                 '*.about.tc',
362                 '*.about.vg',
363                 '*.aboutus.gs',
364                 '*.aboutus.ms',
365                 '*.aboutus.tc',
366                 '*.aboutus.vg',
367                 '*.biografi.biz',
368                 '*.biografi.info',
369                 '*.biografi.org',
370                 '*.biografi.us',
371                 '*.datadiri.biz',
372                 '*.datadiri.cc',
373                 '*.datadiri.com',
374                 '*.datadiri.info',
375                 '*.datadiri.net',
376                 '*.datadiri.org',
377                 '*.datadiri.tv',
378                 '*.datadiri.us',
379                 '*.ecv.gs',
380                 '*.ecv.ms',
381                 '*.ecv.tc',
382                 '*.ecv.vg',
383                 '*.eprofile.us',
384                 '*.go2net.ws',
385                 '*.hits.io',
386                 '*.hostingweb.us',
387                 '*.hub.io',
388                 '*.indo.bz',
389                 '*.indo.cc',
390                 '*.indo.gs',
391                 '*.indo.ms',
392                 '*.indo.tc',
393                 '*.indo.vg',
394                 '*.infinitehosting.net',
395                 '*.infinites.net',
396                 '*.lan.io',
397                 '*.max.io',
398                 '*.mycv.bz',
399                 '*.mycv.nu',
400                 '*.mycv.tv',
401                 '*.myweb.io',
402                 '*.ourprofile.biz',
403                 '*.ourprofile.info',
404                 '*.ourprofile.net',     // Dead?
405                 '*.ourprofile.org',
406                 '*.ourprofile.us',
407                 '*.profil.bz',
408                 '*.profil.cc',
409                 '*.profil.cn',
410                 '*.profil.gs',
411                 '*.profil.in',
412                 '*.profil.ms',
413                 '*.profil.tc',
414                 '*.profil.tv',
415                 '*.profil.vg',  // ?
416                 '*.site.io',
417                 '*.wan.io',
418                 '*.web-cam.ws',
419                 '*.webs.io',
420                 '*.zip.io',
421         ),
422         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
423         '*.fx.to',
424         'fyad.org',
425         'fype.com',
426         'gentleurl.net',
427         'Get2.us' => array(
428                 '*.get2.us',
429                 '*.hasballs.com',
430                 '*.ismyidol.com',
431                 '*.spotted.us',
432                 '*.went2.us',
433                 '*.wentto.us',
434         ),
435         'glinki.com',
436         '*.globalredirect.com',
437         'gnu.vu',
438         '*.go.cc',
439         //'Google.com' => array(
440         //              google.com/translate_c\?u=(?:http://)?
441         //),
442         'goonlink.com',
443         '.gourl.org',
444         '.greatitem.com',
445         'gzurl.com',
446         'url.grillsportverein.de',
447         'Harudake.net' => array('*.hyu.jp'),
448         'Hattinger Linux User Group' => array('short.hatlug.de'),
449         'Hexten.net' => array('lyxus.net'),
450         'here.is',
451         'HispaVista.com' => array(
452                 '*.blogdiario.com',
453                 '*.hispavista.com',
454                 '.galeon.com',
455         ),
456         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
457                 '*.8l.pl',
458                 '*.blg.pl',
459                 '*.czytajto.pl',
460                 '*.ryj.pl',
461                 '*.xit.pl',
462                 '*.xlc.pl',
463                 '*.hk.pl',
464                 '*.home.pl',
465                 '*.of.pl',
466         ),
467         'hort.net',
468         'free4.hostrocket.com',
469         '*.hotindex.ru',
470         'HotRedirect.com' => array(
471                 '*.coolhere.com',
472                 '*.homepagehere.com',
473                 '*.hothere.com',
474                 '*.mustbehere.com',
475                 '*.onlyhere.net',
476                 '*.pagehere.com',
477                 '*.surfhere.net',
478                 '*.zonehere.com',
479         ),
480         'hotshorturl.com',
481         'hotwebcomics.com',     ///search_redirect.php
482         'hurl.to',
483         '*.hux.de',
484         '*.i89.us',
485         'iat.net',                      // 74.208.58.130 by Tony Carter
486         'ibm.com',                      ///links (Correct it)
487         '*.iceglow.com',
488         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
489         'Ideas para Nuevos Mercados SL' => array(
490                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
491                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
492                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
493                 // by edgar bortolin (oscar at i4nm.com)
494                 // by Edgar Bortolin  (oscar at i4nm.com)
495                 // by oscar florez (oscar at i4nm.com)
496                 // by Oscar Florez (oscar at red-es.com)
497                 // by covadonga del valle (oscar at i4nm.com)
498                 '*.ar.gd',
499                 '*.ar.gs',      // ns *.nora.net
500                 '*.ar.kz',      // by oscar
501                 '*.ar.nu',      // by Edgar
502                 '*.ar.tc',      // by oscar
503                 '*.ar.vg',      // by oscar
504                 '*.bo.kz',      // by oscar
505                 '*.bo.nu',      // by covadonga
506                 '*.bo.tc',      // by oscar
507                 '*.bo.tf',      // by Oscar
508                 '*.bo.vg',      // by oscar
509                 '*.br.gd',
510                 '*.br.gs',      // ns *.nora.net
511                 '*.br.nu',      // by edgar
512                 '*.br.vg',      // by oscar
513                 '*.ca.gs',      // by oscar
514                 '*.ca.kz',      // by oscar
515                 '*.cl.gd',      // by oscar
516                 '*.cl.kz',      // by oscar
517                 '*.cl.nu',      // by edgar
518                 '*.cl.tc',      // by oscar
519                 '*.cl.tf',      // by Oscar
520                 '*.cl.vg',      // by oscar
521                 '*.col.nu',     // by Edgar
522                 '*.cr.gs',      // ns *.nora.net
523                 '*.cr.kz',      // by oscar
524                 '*.cr.nu',      // by edgar
525                 '*.cr.tc',      // by oscar
526                 '*.cu.tc',      // by oscar
527                 '*.do.kz',      // by oscar
528                 '*.do.nu',      // by edgar
529                 '*.ec.kz',      // by edgar
530                 '*.ec.nu',      // by Edgar
531                 '*.ec.tf',      // by Oscar
532                 '*.es.kz',      // by oscar
533                 '*.eu.kz',      // by oscar
534                 '*.gt.gs',      // ns *.nora.net
535                 '*.gt.tc',      // by oscar
536                 '*.gt.tf',      // by Oscar
537                 '*.gt.vg',      // by Oscar
538                 '*.hn.gs',      // ns *.nora.net
539                 '*.hn.tc',      // by oscar
540                 '*.hn.tf',      // by Oscar
541                 '*.hn.vg',      // by oscar
542                 '*.mx.gd',
543                 '*.mx.gs',      // ns *.nora.net
544                 '*.mx.kz',      // by oscar
545                 '*.mx.vg',      // by oscar
546                 '*.ni.kz',      // by oscar
547                 '*.pa.kz',      // by oscar
548                 '*.pe.kz',      // by oscar
549                 '*.pe.nu',      // by Edgar
550                 '*.pr.kz',      // by oscar
551                 '*.pr.nu',      // by edgar
552                 '*.pt.gs',      // ns *.nora.net
553                 '*.pt.kz',      // by edgar
554                 '*.pt.nu',      // by edgar
555                 '*.pt.tc',      // by oscar
556                 '*.pt.tf',      // by Oscar
557                 '*.py.gs',      // ns *.nora.net
558                 '*.py.nu',      // by edgar
559                 '*.py.tc',      // by oscar
560                 '*.py.tf',      // by Oscar
561                 '*.py.vg',      // by oscar
562                 '*.sv.tc',      // by oscar
563                 '*.usa.gs',     // ns *.nora.net
564                 '*.uy.gs',      // ns *.nora.net
565                 '*.uy.kz',      // by oscar
566                 '*.uy.nu',      // by edgar
567                 '*.uy.tc',      // by oscar
568                 '*.uy.tf',      // by Oscar
569                 '*.uy.vg',      // by oscar
570                 '*.ve.gs',      // by oscar
571                 '*.ve.tc',      // by oscar
572                 '*.ve.tf',      // by Oscar
573                 '*.ve.vg',      // by oscar
574                 '*.ven.nu',     // by edgar
575         ),
576         'ie.to',
577         'igoto.co.uk',
578         'ilook.tw',
579         'indianpad.com',                ///view/
580         'iNetwork.co.il' => array(
581                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
582                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
583                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
584         ),
585         '*.infogami.com',
586         'infotop.jp',
587         'ipoo.org',
588         'IR.pl' => array(
589                 '*.aj.pl',
590                 '*.aliasy.org',
591                 '*.gu.pl',
592                 '*.hu.pl',
593                 '*.ir.pl',
594                 '*.jo.pl',
595                 '*.su.pl',
596                 '*.td.pl',
597                 '*.uk.pl',
598                 '*.uy.pl',
599                 '*.xa.pl',
600                 '*.zj.pl',
601         ),
602         'irotator.com',
603         '.iwebtool.com',
604         'j6.bz',
605         'jeeee.net',
606         'Jaze Redirect Services' => array(
607                 '*.arecool.net',
608                 '*.iscool.net',
609                 '*.isfun.net',
610                 '*.tux.nu',
611         ),
612         '*.jed.pl',
613         'JeremyJohnstone.com' => array('url.vg'),
614         'jemurl.com',
615         'jggj.net',
616         'jpan.jp',
617         'josh.nu',
618         'kat.cc',
619         'Kickme.to' => array(
620                 '.1024bit.at',
621                 '.128bit.at',
622                 '.16bit.at',
623                 '.256bit.at',
624                 '.32bit.at',
625                 '.512bit.at',
626                 '.64bit.at',
627                 '.8bit.at',
628                 '.adores.it',
629                 '.again.at',
630                 '.allday.at',
631                 '.alone.at',
632                 '.altair.at',
633                 '.american.at',
634                 '.amiga500.at',
635                 '.ammo.at',
636                 '.amplifier.at',
637                 '.amstrad.at',
638                 '.anglican.at',
639                 '.angry.at',
640                 '.around.at',
641                 '.arrange.at',
642                 '.australian.at',
643                 '.baptist.at',
644                 '.basque.at',
645                 '.battle.at',
646                 '.bazooka.at',
647                 '.berber.at',
648                 '.blackhole.at',
649                 '.booze.at',
650                 '.bosnian.at',
651                 '.brainiac.at',
652                 '.brazilian.at',
653                 '.bummer.at',
654                 '.burn.at',
655                 '.c-64.at',
656                 '.catalonian.at',
657                 '.catholic.at',
658                 '.chapel.at',
659                 '.chills.it',
660                 '.christiandemocrats.at',
661                 '.cname.at',
662                 '.colors.at',
663                 '.commodore.at',
664                 '.commodore64.at',
665                 '.communists.at',
666                 '.conservatives.at',
667                 '.conspiracy.at',
668                 '.cooldude.at',
669                 '.craves.it',
670                 '.croatian.at',
671                 '.cuteboy.at',
672                 '.dancemix.at',
673                 '.danceparty.at',
674                 '.dances.it',
675                 '.danish.at',
676                 '.dealing.at',
677                 '.deep.at',
678                 '.democrats.at',
679                 '.digs.it',
680                 '.divxlinks.at',
681                 '.divxmovies.at',
682                 '.divxstuff.at',
683                 '.dizzy.at',
684                 '.does.it',
685                 '.dork.at',
686                 '.drives.it',
687                 '.dutch.at',
688                 '.dvdlinks.at',
689                 '.dvdmovies.at',
690                 '.dvdstuff.at',
691                 '.emulators.at',
692                 '.end.at',
693                 '.english.at',
694                 '.eniac.at',
695                 '.error403.at',
696                 '.error404.at',
697                 '.evangelism.at',
698                 '.exhibitionist.at',
699                 '.faith.at',
700                 '.fight.at',
701                 '.finish.at',
702                 '.finnish.at',
703                 '.forward.at',
704                 '.freebie.at',
705                 '.freemp3.at',
706                 '.french.at',
707                 '.graduatejobs.at',
708                 '.greenparty.at',
709                 '.grunge.at',
710                 '.hacked.at',
711                 '.hang.at',
712                 '.hangup.at',
713                 '.has.it',
714                 '.hide.at',
715                 '.hindu.at',
716                 '.htmlpage.at',
717                 '.hungarian.at',
718                 '.icelandic.at',
719                 '.independents.at',
720                 '.invisible.at',
721                 '.is-chillin.it',
722                 '.is-groovin.it',
723                 '.japanese.at',
724                 '.jive.at',
725                 '.kickass.at',
726                 '.kickme.to',
727                 '.kindergarden.at',
728                 '.knows.it',
729                 '.kurd.at',
730                 '.labour.at',
731                 '.leech.at',
732                 '.liberals.at',
733                 '.linuxserver.at',
734                 '.liqour.at',
735                 '.lovez.it',
736                 '.makes.it',
737                 '.maxed.at',
738                 '.means.it',
739                 '.meltdown.at',
740                 '.methodist.at',
741                 '.microcomputers.at',
742                 '.mingle.at',
743                 '.mirror.at',
744                 '.moan.at',
745                 '.mormons.at',
746                 '.musicmix.at',
747                 '.nationalists.at',
748                 '.needz.it',
749                 '.nerds.at',
750                 '.neuromancer.at',
751                 '.newbie.at',
752                 '.nicepage.at',
753                 '.ninja.at',
754                 '.norwegian.at',
755                 '.ntserver.at',
756                 '.owns.it',
757                 '.paint.at',
758                 '.palestinian.at',
759                 '.phoneme.at',
760                 '.phreaking.at',
761                 '.playz.it',
762                 '.polish.at',
763                 '.popmusic.at',
764                 '.portuguese.at',
765                 '.powermac.at',
766                 '.processor.at',
767                 '.prospects.at',
768                 '.protestant.at',
769                 '.rapmusic.at',
770                 '.raveparty.at',
771                 '.reachme.at',
772                 '.reads.it',
773                 '.reboot.at',
774                 '.relaxed.at',
775                 '.republicans.at',
776                 '.researcher.at',
777                 '.reset.at',
778                 '.resolve.at',
779                 '.retrocomputers.at',
780                 '.rockparty.at',
781                 '.rocks.it',
782                 '.rollover.at',
783                 '.rough.at',
784                 '.rules.it',
785                 '.rumble.at',
786                 '.russian.at',
787                 '.says.it',
788                 '.scared.at',
789                 '.seikh.at',
790                 '.serbian.at',
791                 '.short.as',
792                 '.shows.it',
793                 '.silence.at',
794                 '.simpler.at',
795                 '.sinclair.at',
796                 '.singz.it',
797                 '.slowdown.at',
798                 '.socialists.at',
799                 '.spanish.at',
800                 '.split.at',
801                 '.stand.at',
802                 '.stoned.at',
803                 '.stumble.at',
804                 '.supercomputer.at',
805                 '.surfs.it',
806                 '.swedish.at',
807                 '.swims.it',
808                 '.synagogue.at',
809                 '.syntax.at',
810                 '.syntaxerror.at',
811                 '.techie.at',
812                 '.temple.at',
813                 '.thinkbig.at',
814                 '.thirsty.at',
815                 '.throw.at',
816                 '.toplist.at',
817                 '.trekkie.at',
818                 '.trouble.at',
819                 '.turkish.at',
820                 '.unexplained.at',
821                 '.unixserver.at',
822                 '.vegetarian.at',
823                 '.venture.at',
824                 '.verycool.at',
825                 '.vic-20.at',
826                 '.viewing.at',
827                 '.vintagecomputers.at',
828                 '.virii.at',
829                 '.vodka.at',
830                 '.wannabe.at',
831                 '.webpagedesign.at',
832                 '.wheels.at',
833                 '.whisper.at',
834                 '.whiz.at',
835                 '.wonderful.at',
836                 '.zor.org',
837                 '.zx80.at',
838                 '.zx81.at',
839                 '.zxspectrum.at',
840         ),
841         'kisaweb.com',
842         'krotki.pl',
843         'kuerzer.de',
844         '*.kupisz.pl',
845         'kuso.cc',
846         '*.l8t.com',
847         'lame.name',
848         'lediga.st',
849         'liencourt.com',
850         'liteurl.com',
851         'linkachi.com',
852         'linkezy.com',
853         'linkfrog.net',
854         'linkook.com',
855         'linkzip.net',
856         'lispurl.com',
857         'lnk.in',
858         'makeashorterlink.com',
859         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
860                 '*.3gp.fr',
861                 '*.gtx.fr',
862                 '*.ici.st',
863                 '*.max.st',
864                 '*.nn.cx',              // ns *.sivit.org
865                 '*.site.cx',    // ns *.sivit.org
866                 '*.user.fr',
867                 '*.zxr.fr',
868         ),
869         'mcturl.com',
870         'memurl.com',
871         'Metamark.net' => array('xrl.us'),
872         'midgeturl.com',
873         'Minilink.org' => array('lnk.nu'),
874         'miniurl.org',
875         'miniurl.pl',
876         'mixi.bz',
877         'mo-v.jp',
878         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
879                 '.com.md',
880                 '.co.md',
881                 '.org.md',
882                 '.info.md',
883                 '.host.md',
884         ),
885         'monster-submit.com',
886         'mooo.jp',
887         'murl.net',
888         'myactivesurf.net',
889         'mytinylink.com',
890         'myurl.in',
891         'myurl.com.tw',
892         'nanoref.com',
893         'Ne1.net' => array(
894                 '*.ne1.net',
895                 '*.r8.org',
896         ),
897         'Nashville Linux Users Group' => array('nlug.org'),
898         'not2long.net',
899         '*.notlong.com',
900         '*.nuv.pl',
901         'ofzo.be',
902         '*.ontheinter.net',
903         'ourl.org',
904         'ov2.net',                              // frame
905         '*.ozonez.com',
906         'pagebang.com',
907         'palurl.com',
908         '*.paulding.net',
909         'phpfaber.org',
910         'pnope.com',
911         'prettylink.com',
912         'PROXID.net' => array(  // also xRelay.net
913                 '*.asso.ws',
914                 '*.corp.st',
915                 '*.euro.tm',
916                 '*.perso.tc',
917                 '*.site.tc',
918                 '*.societe.st',
919         ),
920         'qrl.jp',
921         'qurl.net',
922         'qwer.org',
923         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
924         'radiobase.net',
925         'Rakuten.co.jp' => array(
926                 'pt.afl.rakuten.co.jp', ///c/
927         ),
928         'RedirectFree.com' => array(
929                 '*.red.tc',
930                 '*.redirectfree.com',
931                 '*.sky.tc',
932                 '*.the.vg',
933         ),
934         'redirme.com',
935         'redirectme.to',
936         'relic.net',
937         'rezma.info',
938         'rio.st',
939         'rlink.org',
940         '*.rmcinfo.fr',
941         'rubyurl.com',
942         '*.runboard.com',
943         'runurl.com',
944         's-url.net',
945         's1u.net',
946         'SG5.co.uk' => array(
947                 '*.sg5.co.uk',
948                 '*.sg5.info',
949         ),
950         'Shim.net' => array(
951                 '*.0kn.com',
952                 '*.2cd.net',
953                 '*.freebiefinders.net',
954                 '*.freegaming.org',
955                 '*.op7.net',
956                 '*.shim.net',
957                 '*.v9z.com',
958         ),
959         'big5.shippingchina.com',
960         'shorl.com',
961         'shortenurl.com',
962         'shorterlink.com',
963         'shortlinks.co.uk',
964         'shorttext.com',
965         'shorturl-accessanalyzer.com',
966         'Shortify.com' => array(
967                 '74678439.com',
968                 'shortify.com',
969         ),
970         'shortlink.co.uk',
971         'ShortURL.com' => array(
972                 '*.1sta.com',
973                 '*.24ex.com',
974                 '*.2fear.com',
975                 '*.2fortune.com',
976                 '*.2freedom.com',
977                 '*.2hell.com',
978                 '*.2savvy.com',
979                 '*.2truth.com',
980                 '*.2tunes.com',
981                 '*.2ya.com',
982                 '*.alturl.com',
983                 '*.antiblog.com',
984                 '*.bigbig.com',
985                 '*.dealtap.com',
986                 '*.ebored.com',
987                 '*.echoz.com',
988                 '*.filetap.com',
989                 '*.funurl.com',
990                 '*.headplug.com',
991                 '*.hereweb.com',
992                 '*.hitart.com',
993                 '*.mirrorz.com',
994                 '*.shorturl.com',
995                 '*.spyw.com',
996                 '*.vze.com',
997         ),
998         'shrinkalink.com',
999         'shrinkthatlink.com',
1000         'shrinkurl.us',
1001         'shrt.org',
1002         'shrunkurl.com',
1003         'shurl.org',
1004         'shurl.net',
1005         'sid.to',
1006         'simurl.com',
1007         'sitefwd.com',
1008         'Sitelutions.com' => array(
1009                 '*.assexy.as',
1010                 '*.athersite.com',
1011                 '*.athissite.com',
1012                 '*.bestdeals.at',
1013                 '*.byinter.net',
1014                 '*.findhere.org',
1015                 '*.fw.nu',
1016                 '*.isgre.at',
1017                 '*.isthebe.st',
1018                 '*.kwik.to',
1019                 '*.lookin.at',
1020                 '*.lowestprices.at',
1021                 '*.onthenet.as',
1022                 '*.ontheweb.nu',
1023                 '*.pass.as',
1024                 '*.passingg.as',
1025                 '*.redirect.hm',
1026                 '*.rr.nu',
1027                 '*.ugly.as',
1028         ),
1029         '*.skracaj.pl',
1030         'skiltechurl.com',
1031         'skocz.pl',
1032         'slimurl.jp',
1033         'slink.in',
1034         'smallurl.eu',
1035         'smurl.name',
1036         'snipurl.com',
1037         'sp-nov.net',
1038         'splashblog.com',
1039         'spod.cx',
1040         '*.spydar.com',
1041         'Subdomain.gr' => array(
1042                 '*.p2p.gr',
1043                 '*.subdomain.gr',
1044         ),
1045         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1046         'surl.se',
1047         'surl.ws',
1048         'symy.jp',
1049         'tdurl.com',
1050         'tighturl.com',
1051         'tiniuri.com',
1052         'tiny.cc',
1053         'tiny.pl',
1054         'tiny2go.com',
1055         'tinylink.eu',
1056         'tinylinkworld.com',
1057         'tinypic.com',
1058         'tinyr.us',
1059         'TinyURL.com' => array(
1060                 'tinyurl.com',
1061                 'preview.tinyurl.com',
1062                 'tinyurl.co.uk',
1063         ),
1064         'titlien.com',
1065         '*.tlg.pl',
1066         'tlurl.com',
1067         'link.toolbot.com',
1068         'tnij.org',
1069         'Tokelau ccTLD' => array('.tk'),
1070         'toila.net',
1071         '*.toolbot.com',
1072         '*.torontonian.com',
1073         'trimurl.com',
1074         'ttu.cc',
1075         'turl.jp',
1076         '*.tz4.com',
1077         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1078                 '*.1.to',
1079                 '*.4.to',
1080                 '*.5.to',
1081                 '*.82.to',
1082                 '*.s.to',
1083                 '*.u.to',
1084                 '*.ce.to',
1085                 '*.cz.to',
1086                 '*.if.to',
1087                 '*.it.to',
1088                 '*.kp.to',
1089                 '*.ne.to',
1090                 '*.ok.to',
1091                 '*.pc.to',
1092                 '*.tv.to',
1093                 '*.dd.to',
1094                 '*.ee.to',
1095                 '*.hh.to',
1096                 '*.kk.to',
1097                 '*.mm.to',
1098                 '*.qq.to',
1099                 '*.xx.to',
1100                 '*.zz.to',
1101                 '*.ivy.to',
1102                 '*.joa.to',
1103                 '*.ever.to',
1104                 '*.mini.to',
1105         ),
1106         'uchinoko.in',
1107         'Ulimit.com' => array(
1108                 '*.be.tf',
1109                 '*.best.cd',
1110                 '*.bsd-fan.com',
1111                 '*.c0m.st',
1112                 '*.ca.tc',
1113                 '*.clan.st',
1114                 '*.com02.com',
1115                 '*.en.st',
1116                 '*.euro.st',
1117                 '*.fr.fm',
1118                 '*.fr.st',
1119                 '*.fr.vu',
1120                 '*.gr.st',
1121                 '*.ht.st',
1122                 '*.int.ms',
1123                 '*.it.st',
1124                 '*.java-fan.com',
1125                 '*.linux-fan.com',
1126                 '*.mac-fan.com',
1127                 '*.mp3.ms',
1128                 '*.qc.tc',
1129                 '*.sp.st',
1130                 '*.suisse.st',
1131                 '*.t2u.com',
1132                 '*.unixlover.com',
1133                 '*.zik.mu',
1134         ),
1135         '*.uni.cc',
1136         'UNONIC.com' => array(
1137                 '*.at.tf',      // AlpenNIC
1138                 '*.bg.tf',
1139                 '*.ca.tf',
1140                 '*.ch.tf',      // AlpenNIC
1141                 '*.cz.tf',
1142                 '*.de.tf',      // AlpenNIC
1143                 '*.edu.tf',
1144                 '*.eu.tf',
1145                 '*.int.tf',
1146                 '*.net.tf',
1147                 '*.pl.tf',
1148                 '*.ru.tf',
1149                 '*.sg.tf',
1150                 '*.us.tf',
1151         ),
1152         'Up.pl' => array(
1153                 '.69.pl',                       // by nsk101869
1154                 '.crack.pl',            // by nsk101869
1155                 '.film.pl',                     // by sibr19002
1156                 '.h2o.pl',                      // by nsk101869
1157                 '.hostessy.pl',         // by nsk101869
1158                 '.komis.pl',            // by nsk101869
1159                 '.laski.pl',            // by nsk101869
1160                 '.modelki.pl',          // by nsk101869
1161                 '.muzyka.pl',           // by sibr19002
1162                 '.nastolatki.pl',       // by nsk101869
1163                 '.obuwie.pl',           // by nsk101869
1164                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1165                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1166                 '.sexchat.pl',          // by nsk101869
1167                 '.sexlive.pl',          // by nsk101869
1168                 '.tv.pl',                       // by nsk101869
1169                 '.up.pl',                       // by nsk101869
1170                 '.video.pl',            // by nsk101869
1171                 '.xp.pl',                       // nsk101869
1172         ),
1173         '*.uploadr.com',
1174         'url.ie',
1175         'url4.net',
1176         'url-c.com',
1177         'urlbee.com',
1178         'urlbounce.com',
1179         'urlcut.com',
1180         'urlcutter.com',
1181         'urlic.com',
1182         'urlin.it',
1183         'urlkick.com',
1184         'URLLogs.com' => array(
1185                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1186                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1187         ),
1188         '*.urlproxy.com',
1189         'urlser.com',
1190         'urlsnip.com',
1191         'urlzip.de',
1192         'urlx.org',
1193         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1194         'utun.jp',
1195         'uxxy.com',
1196         '*.v27.net',
1197         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1198                 '*.all.at',
1199                 '*.back.to',
1200                 '*.beam.at',
1201                 '*.been.at',
1202                 '*.bite.to',
1203                 '*.board.to',
1204                 '*.bounce.to',
1205                 '*.bowl.to',
1206                 '*.break.at',
1207                 '*.browse.to',
1208                 '*.change.to',
1209                 '*.chip.ms',
1210                 '*.connect.to',
1211                 '*.crash.to',
1212                 '*.cut.by',
1213                 '*.direct.at',
1214                 '*.dive.to',
1215                 '*.drink.to',
1216                 '*.drive.to',
1217                 '*.drop.to',
1218                 '*.easy.to',
1219                 '*.everything.at',
1220                 '*.fade.to',
1221                 '*.fanclub.ms',
1222                 '*.firstpage.de',
1223                 '*.fly.to',
1224                 '*.flying.to',
1225                 '*.fortunecity.co.uk',
1226                 '*.fortunecity.com',
1227                 '*.forward.to',
1228                 '*.fullspeed.to',
1229                 '*.fun.ms',
1230                 '*.gameday.de',
1231                 '*.germany.ms',
1232                 '*.get.to',
1233                 '*.getit.at',
1234                 '*.hard-ware.de',
1235                 '*.hello.to',
1236                 '*.hey.to',
1237                 '*.hop.to',
1238                 '*.how.to',
1239                 '*.hp.ms',
1240                 '*.jump.to',
1241                 '*.kiss.to',
1242                 '*.listen.to',
1243                 '*.mediasite.de',
1244                 '*.megapage.de',
1245                 '*.messages.to',
1246                 '*.mine.at',
1247                 '*.more.at',
1248                 '*.more.by',
1249                 '*.move.to',
1250                 '*.musicpage.de',
1251                 '*.mypage.org',
1252                 '*.mysite.de',
1253                 '*.nav.to',
1254                 '*.notrix.at',
1255                 '*.notrix.ch',
1256                 '*.notrix.de',
1257                 '*.notrix.net',
1258                 '*.on.to',
1259                 '*.page.to',
1260                 '*.pagina.de',
1261                 '*.played.by',
1262                 '*.playsite.de',
1263                 '*.privat.ms',
1264                 '*.quickly.to',
1265                 '*.redirect.to',
1266                 '*.rulestheweb.com',
1267                 '*.run.to',
1268                 '*.scroll.to',
1269                 '*.seite.ms',
1270                 '*.shortcut.to',
1271                 '*.skip.to snap.to',
1272                 '*.soft-ware.de',
1273                 '*.start.at',
1274                 '*.stick.by',
1275                 '*.surf.to',
1276                 '*.switch.to',
1277                 '*.talk.to',
1278                 '*.tip.nu',
1279                 '*.top.ms',
1280                 '*.transfer.to',
1281                 '*.travel.to',
1282                 '*.turn.to',
1283                 '*.vacations.to',
1284                 '*.videopage.de',
1285                 '*.virtualpage.de',
1286                 '*.w3.to',
1287                 '*.walk.to',
1288                 '*.warp9.to',
1289                 '*.window.to',
1290                 '*.yours.at',
1291                 '*.zap.to',
1292                 '*.zip.to',
1293         ),
1294         'VDirect.com' => array(
1295                 '*.emailme.net',
1296                 '*.getto.net',
1297                 '*.inetgames.com',
1298                 '*.netbounce.com',
1299                 '*.netbounce.net',
1300                 '*.oneaddress.net',
1301                 '*.snapto.net',
1302                 '*.vdirect.com',
1303                 '*.vdirect.net',
1304                 '*.webrally.net',
1305         ),
1306         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1307         'vgo2.com',
1308         'Voila.fr' => array('r.voila.fr'),      // Fix it
1309         'w3t.org',
1310         'wapurl.co.uk',
1311         'Wb.st' => array(
1312                 '*.team.st',
1313                 '*.wb.st',
1314         ),
1315         'wbkt.net',
1316         'WebAlias.com' => array(
1317                 '*.andmuchmore.com',
1318                 '*.browser.to',
1319                 '*.escape.to',
1320                 '*.fornovices.com',
1321                 '*.fun.to',
1322                 '*.got.to',
1323                 '*.hottestpix.com',
1324                 '*.imegastores.com',
1325                 '*.latest-info.com',
1326                 '*.learn.to',
1327                 '*.moviefever.com',
1328                 '*.mp3-archives.com',
1329                 '*.myprivateidaho.com',
1330                 '*.radpages.com',
1331                 '*.remember.to',
1332                 '*.resourcez.com',
1333                 '*.return.to',
1334                 '*.sail.to',
1335                 '*.sports-reports.com',
1336                 '*.stop.to',
1337                 '*.thrill.to',
1338                 '*.tophonors.com',
1339                 '*.uncutuncensored.com',
1340                 '*.up.to',
1341                 '*.veryweird.com',
1342                 '*.way.to',
1343                 '*.web-freebies.com',
1344                 '.webalias.com',
1345                 '*.webdare.com',
1346                 '*.xxx-posed.com',
1347         ),
1348         'webmasterwise.com',
1349         'witherst at hotmail.com' => array(     // by Tim Withers
1350                 '*.associates-program.com',
1351                 '*.casinogopher.com',
1352                 '*.ezpagez.com',
1353                 '*.vgfaqs.com',
1354         ),
1355         'wittylink.com',
1356         'wiz.sc',                       // tiny.cc related
1357         'X50.us' => array(
1358                 '*.i50.de',
1359                 '*.x50.us',
1360         ),
1361         'big5.xinhuanet.com',   ///gate/big5/
1362         'xhref.com',
1363         'Xn6.net' => array(
1364                 '*.9ax.net',
1365                 '*.xn6.net',
1366         ),
1367         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru) 
1368         '.y11.net',
1369         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1370                 '*.yesns.com',
1371                 '*.srv4u.net',
1372                 //blogne.com
1373         ),
1374         'yatuc.com',
1375         'yep.it',
1376         'yumlum.com',
1377         'yurel.com',
1378         'Z.la' => array(
1379                 'z.la',
1380                 't.z.la',
1381         ),
1382         'zaable.com',
1383         'zapurl.com',
1384         'zarr.co.uk',
1385         'zerourl.com',
1386         'ZeroWeb.org' => array(
1387                 '*.80t.com',
1388                 '*.firez.org',
1389                 '*.fizz.nu',
1390                 '*.ingame.org',
1391                 '*.irio.net',
1392                 '*.v33.org',
1393                 '*.zeroweb.org',
1394         ),
1395         'zhukcity.ru',
1396         'zippedurl.com',
1397         'zr5.us',
1398         '*.zs.pl',
1399         '*.zu5.net',
1400         'zuso.tw',
1401         '*.zwap.to',
1402 );
1403
1404 // --------------------------------------------------
1405
1406 $blocklist['A-2'] = array(
1407
1408         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1409         //
1410         //'*.dyndns.*', // Wildcard for dyndns
1411         //
1412         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1413         'ddns.ru' => array('*.bpa.nu'),
1414         'Dhs.org' => array(
1415                 '*.2y.net',
1416                 '*.dhs.org',
1417         ),
1418         '*.dnip.net',
1419         '*.dyndns.co.za',
1420         '*.dyndns.dk',
1421         '*.dyndns.nemox.net',
1422         'DyDNS.com' => array(
1423                 '*.ath.cx',
1424                 '*.dnsalias.org',
1425                 '*.dyndns.org',
1426                 '*.homeip.net',
1427                 '*.homelinux.net',
1428                 '*.mine.nu',
1429                 '*.shacknet.nu',
1430         ),
1431         '*.dtdns.net',                  // by jscott at sceiron.com
1432         '*.dynu.com',
1433         '*.dynup.net',
1434         '*.fdns.net',
1435         'J-Speed.net' => array(
1436                 '*.bne.jp',
1437                 '*.ii2.cc',
1438                 '*.jdyn.cc',
1439                 '*.jspeed.jp',
1440         ),
1441         '*.mydyn.de',
1442         '*.nerdcamp.net',
1443         'No-IP.com' => array(
1444                         '*.bounceme.net',
1445                         '*.hopto.org',
1446                         '*.myftp.biz',
1447                         '*.myftp.org',
1448                         '*.myvnc.com',
1449                         '*.no-ip.biz',
1450                         '*.no-ip.info',
1451                         '*.no-ip.org',
1452                         '*.redirectme.net',
1453                         '*.servebeer.com',
1454                         '*.serveblog.net',
1455                         '*.servecounterstrike.com',
1456                         '*.serveftp.com',
1457                         '*.servegame.com',
1458                         '*.servehalflife.com',
1459                         '*.servehttp.com',
1460                         '*.servemp3.com',
1461                         '*.servepics.com',
1462                         '*.servequake.com',
1463                         '*.sytes.net',
1464                         '*.zapto.org',
1465         ),
1466         '*.opendns.be',
1467         'Yi.org' => array(      // by dns at whyi.org
1468                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1469
1470                 // 72.55.129.46(redirect.yi.org)
1471                 '*.whyi.org',
1472                 '*.weedns.com',
1473         ),
1474         '*.zenno.info',
1475         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1476                         // and all non-recorded domains redirect to 'agoga.com' now
1477                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1478                         // http://agoga.com/aboutus.html
1479 );
1480
1481 // --------------------------------------------------
1482
1483 // B: Sample setting of:
1484 // Jacked (taken advantage of) and cleaning-less sites
1485 //
1486 // Please notify us about this list with reason:
1487 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1488
1489 $blocklist['B-1'] = array(
1490
1491         // B-1: Web spaces
1492         //
1493         //   Messages from forerunners:
1494         //     activefreehost.com
1495         //       "We regret to inform you that ActiveFreeHost
1496         //        free hosting service has is now closed (as of
1497         //        September 18). We have been online for over
1498         //        two and half years, but have recently decided
1499         //        to take time for software improvement to fight
1500         //        with server abuse, Spam advertisement and
1501         //        fraud."
1502         //
1503         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1504         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1505         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1506         '0Catch.com related' => array(
1507                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1508
1509                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1510                 '*.100freemb.com',              // by Danny Ashworth
1511                 '*.exactpages.com',
1512                 '*.fcpages.com',
1513                 '*.wtcsites.com',
1514
1515                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1516                 '*.741.com',
1517                 '*.freecities.com',
1518                 '*.freesite.org',
1519                 '*.freewebpages.org',
1520                 '*.freewebsitehosting.com',
1521                 '*.jvl.com',
1522
1523                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1524                 '*.freespaceusa.com',
1525                 '*.usafreespace.com',
1526
1527                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1528                 '*.dex1.com',
1529                 '*.questh.com',
1530
1531                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1532                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1533                 '*.012webpages.com',    // by support at 0catch.com
1534                 '*.150m.com',
1535                 '*.1sweethost.com',             // by whois at bluehost.com
1536                 '*.250m.com',                   // by jason at fahlman.net
1537                 '*.9cy.com',                    // by paulw0t at gmail.com
1538                 '*.angelcities.com',    // by cliff at eccentrix.com
1539                 '*.arcadepages.com',    // by admin at site-see.com
1540                 '*.e-host.ws',                  // by dns at jomax.net
1541                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1542                 '*.fw.bz',                              // by ben at kuehl.as
1543                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1544                 '*.g0g.net',                    // by domains at seem.co.uk
1545                 '*.galaxy99.net',               // by admin at bagchi.org
1546                 '*.greatnow.com',               // by peo at peakspace.com
1547                 '*.hautlynx.com',               // by hlewis28 at juno.com
1548                 '*.ibnsites.com',               // by cmrojas at mail.com
1549                 '*.just-allen.com',             // by extremehype at msn.com
1550                 '*.kogaryu.com',                // by angelguerra at msn.com
1551                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1552                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1553                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1554                 '*.s-enterprize.com',
1555                 '*.servetown.com',              // by jonahbliss at earthlink.net
1556                 '*.stinkdot.org',               // by bluedot at ziplip.com
1557                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1558                 '*.zomi.net',                   // by sianpu at gmail.com
1559         ),
1560         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1561         '100 Best Inc' => array(
1562                 // by 100 Best Inc (info at 100best.com)
1563
1564                 // 66.235.204.7(h204-007.bluefishhosting.com)
1565                 '*.2-hi.com',
1566                 '*.20fr.com',
1567                 '*.20ii.com',
1568                 '*.20is.com',
1569                 '*.20it.com',
1570                 '*.20m.com',    // by jlee at 100bestinc.com
1571                 '*.20to.com',
1572                 '*.2u-2.com',
1573                 '*.3-st.com',
1574                 '*.fws1.com',
1575                 '*.fw-2.com',
1576                 '*.inc5.com',
1577                 '*.on-4.com',
1578                 '*.st-3.com',
1579                 '*.st20.com',
1580                 '*.up-a.com',
1581
1582                 // 216.40.33.252(www-pd.mdnsservice.com)
1583                 '*.0-st.com',
1584                 '*.20me.com',
1585         ),
1586         '*.100foros.com',
1587         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1588         '20six Weblog Services' => array(
1589                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1590                 '.20six.co.uk',
1591                 '.20six.fr',
1592                 'myblog.de',
1593                 'myblog.es',
1594         ),
1595         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1596         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1597         '2IP.com' => array(
1598                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1599                 '*.2ip.jp',
1600                 '*.474.jp',
1601                 '*.consensus.jp',
1602                 '*.desyo.jp',
1603                 '*.dif.jp',
1604                 '*.pastels.jp',
1605                 '*.powerblogger.jp',
1606                 '*.vippers.jp',
1607                 '*.webpages.jp',
1608
1609                 // 205.209.97.56(non-existent)
1610                 '*.biografi.biz',
1611                 '*.biografi.info',
1612                 '*.biografi.org',
1613                 '*.biografi.us',
1614                 '*.datadiri.biz',
1615                 '*.datadiri.cc',
1616                 '*.datadiri.com',
1617                 '*.datadiri.info',
1618                 '*.datadiri.net',
1619                 '*.datadiri.org',
1620                 '*.datadiri.tv',
1621                 '*.datadiri.us',
1622                 '*.indo.bz',
1623                 '*.indo.cc',
1624                 '*.profil.bz',
1625                 '*.profil.cc',
1626                 '*.profil.cn',
1627                 '*.profil.in',
1628                 '*.profil.tv',
1629
1630                 // 205.209.101.47(non-existent)
1631                 '*.about.tc',
1632                 '*.about.vg',
1633                 '*.aboutus.gs',
1634                 '*.aboutus.ms',
1635                 '*.aboutus.tc',
1636                 '*.aboutus.vg',
1637                 '*.band.io',
1638                 '*.beijing.am',
1639                 '*.blogs.io',
1640                 '*.boke.am',
1641                 '*.clan.io',
1642                 '*.ecv.gs',
1643                 '*.ecv.ms',
1644                 '*.ecv.vg',
1645                 '*.freekong.cn',
1646                 '*.go2net.ws',
1647                 '*.hello.cn.com',
1648                 '*.hello.io',
1649                 '*.hits.io',
1650                 '*.hostingweb.us',
1651                 '*.hub.io',
1652                 '*.ide.am',
1653                 '*.inc.io',
1654                 '*.incn.in',
1655                 '*.indo.gs',
1656                 '*.indo.ms',
1657                 '*.indo.tc',
1658                 '*.indo.vg',
1659                 '*.infinitehosting.net',
1660                 '*.infinites.net',
1661                 '*.jushige.cn',
1662                 '*.jushige.com',
1663                 '*.kongjian.in',
1664                 '*.lan.io',
1665                 '*.llc.nu',
1666                 '*.maimai.in',
1667                 '*.max.io',
1668                 '*.musician.io',
1669                 '*.mycv.bz',
1670                 '*.mycv.nu',
1671                 '*.mycv.tv',
1672                 '*.myweb.io',
1673                 '*.ourprofile.biz',
1674                 '*.ourprofile.info',
1675                 '*.ourprofile.net',
1676                 '*.ourprofile.org',
1677                 '*.ourprofile.us',
1678                 '*.profil.gs',
1679                 '*.profil.ms',
1680                 '*.profil.tc',
1681                 '*.qiye.in',
1682                 '*.site.io',
1683                 '*.wan.io',
1684                 '*.web-cam.ws',
1685                 '*.webs.io',
1686                 '*.xixu.cc',
1687                 '*.zaici.am',
1688                 '*.zip.io',
1689                 '*.zuzhi.in',
1690
1691                 '*.profil.vg',          // 205.209.101.67(non-existent)
1692                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1693                 //'*.about.gs',         // No record
1694                 //'*.eprofile.us',      // non-existent
1695         ),
1696         '2Page.de' => array(
1697                 '.dreipage.de',
1698                 '.2page.de',
1699         ),
1700         '*.3-hosting.net',
1701         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1702         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1703         '*.8000web.com',        // 75.126.189.45
1704         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1705         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1706         'Ai.NET' => array(
1707                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1708                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1709         ),
1710         '*.aimoo.com',
1711         '*.alkablog.com',
1712         '*.alluwant.de',
1713         '.amkbb.com',
1714         'answerbag.com',        // 8.5.0.128
1715         'anyboard.net',
1716         'AOL.com' =>    // http://about.aol.com/international_services
1717                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1718                 '(?:aol|americaonline)\.' .
1719                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1720                 // Rough but works
1721         'Apple.com' => array('idisk.mac.com'),
1722         '*.askfaq.org',
1723         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1724         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1725         '*.asphost4free.com',
1726         'basenow.com',
1727         'BatCave.net' => array(
1728                 '.batcave.net',                 // 64.22.112.226
1729                 '.freehostpro.com',             // 64.22.112.226
1730         ),
1731         '*.bb-fr.com',
1732         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1733         '*.beeplog.com',
1734         'beepworld.it',
1735         'bestfreeforums.com',
1736         'bestvotexxx.com',
1737         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1738         'blinklist.com',
1739         'Blog.com' => array(
1740                 // by admin.domains at co.blog.com
1741                 '*.blog.com',
1742                 '*.blogandorra.com',
1743                 '*.blogangola.com',
1744                 '*.blogaruba.com',
1745         ),
1746         '*.blog.com.es',
1747         '*.blog.hr',
1748         '*.blog4ever.com',
1749         '*.blog-fx.com',
1750         '*.blogbeee.com',
1751         'blogas.lt',
1752         'blogbud.com',
1753         '*.blogburkinafaso.com',
1754         '*.blogcu.com',                 // by info at nokta.com
1755         'blogfreely.com',
1756         '*.blogdrive.com',
1757         '*.blogg.de',
1758         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1759         'bloggercrab.com',
1760         'bloggers.nl',
1761         '*.bloggingmylife.com',
1762         '*.bloggles.info',
1763         '*.blogharbor.com',
1764         '*.bloguj.eu',
1765         'bloguitos.com',
1766         'blogosfer.com',
1767         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1768         '*.blogslive.net',
1769         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1770         '*.blogstream.com',
1771         'blogyaz.com',
1772         'bloodee.com',
1773         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1774         'board-4you.de',
1775         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1776         '*.boardhost.com',
1777         'Bravenet.com' => array(
1778                 '*.bravenet.com',
1779                 '*.bravehost.com',
1780         ),
1781         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1782         'C2k.jp' => array(
1783                 // by Makoto Okuse (webmaster at 2style.net)
1784                 '.081.in',
1785                 '.2style.in',
1786                 '.bian.in',     
1787                 '.curl.in',     
1788                 '.ennui.in',
1789                 '.jinx.in',     
1790                 '.loose.in',
1791                 '.mist.in',     
1792                 '.muu.in',      
1793                 '.naive.in',
1794                 '.panic.in',
1795                 '.slum.in',     
1796
1797                 // by 2style, ns *.click2k.net, *.2style.net
1798                 '.2st.jp',
1799                 '.betty.jp',
1800                 '.cabin.jp',
1801                 '.cult.jp',     
1802                 '.mippi.jp',
1803                 '.purety.jp',
1804                 '.rapa.jp',     
1805                 '.side-b.jp',
1806                 '.web-box.jp',
1807                 '.yea.jp',
1808
1809                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1810                 '.2style.net',
1811                 '.click2k.net',
1812                 '.houka5.com',
1813
1814                 // by click2k, ns *.click2k.net, *.2style.net
1815                 '.psyco.jp',
1816                 '.sweety.jp',
1817
1818                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1819                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1820         ),
1821         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1822         '*.chueca.com',
1823         'city-forum.com',
1824         '*.craigslist.org',
1825         'concepts-mall.com',
1826         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1827         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1828         'counterhit.de',
1829         '*.createforum.net',
1830         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1831         '*.createmybb.com',
1832         'CwCity.de' => array(
1833                 '.cwcity.de',
1834                 '.cwsurf.de',
1835         ),
1836         'dakrats.net',
1837         '*.dcswtech.com',
1838         'del.icio.us',
1839         '*.devil.it',
1840         '*.diaryland.com',
1841         'diigo.com',                    ///user/
1842         'digg.com',
1843         'digstock.com',
1844         'domains at galaxywave.net' => array(
1845                 'blogstation.net',
1846                 '.phpbb-host.com',
1847         ),
1848         'dotbb.be',
1849         '*.dox.hu',                             // dns at 1b.hu
1850         '*.eadf.com',
1851         '*.eblog.com.au',
1852         '*.ekiwi.de',
1853         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1854         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1855         '*.ebloggy.com',
1856         'enunblog.com',
1857         '*.epinoy.com',
1858         '*.ez-sites.ws',
1859         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1860         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1861         '*.fathippohosting.com',        // 208.101.3.192
1862         'FC2.com' => array(
1863                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1864                         // Many traps available:
1865                         //      bqdr.blog98.fc2.com,       iframe
1866                         //      csfir.blog87.fc2.com,      iframe
1867                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1868                         //      sippou2006.blog60.fc2.com, iframe
1869                         // NOTE: 'blog.fc2.com' is not included
1870                 '*.h.fc2.com',  // Adult
1871         ),
1872         '*.fizwig.com',
1873         'forum.ezedia.net',
1874         '*.extra.hu',                   // angelo at jasmin.hu
1875         '*.fanforum.cc',
1876         'fingerprintmedia.com',
1877         '*.filelan.com',
1878         '*.fora.pl',
1879         '*.forka.eu',
1880         '*.foren-city.de',
1881         'foren-gratis.de',
1882         '*.foros.tv',
1883         '*.forospace.com',
1884         'foroswebgratis.com',
1885         '*.forum-on.de',
1886         '*.forum24.se',
1887         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1888         '.forum66.com',
1889         'Forumotion.com' => array(
1890                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1891                 '*.forumactif.com',     // 91.121.41.79
1892                 '*.editboard.com',      // 75.126.156.15
1893                 '*.sosblog.com',        // 74.86.25.140
1894
1895                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1896                 '*.0forum.biz',
1897                 '*.1forum.biz',
1898                 '*.1fr1.net',
1899                 '*.1talk.net',
1900                 '*.2forum.biz',
1901                 '*.3forum.biz',
1902                 '*.4forum.biz',
1903                 '*.4rumer.com',
1904                 '*.4rumer.net',
1905                 '*.4umer.com',
1906                 '*.4umer.net',
1907                 '*.5forum.biz',
1908                 '*.5forum.info',
1909                 '*.5forum.net',
1910                 '*.6forum.biz',
1911                 '*.6forum.info',
1912                 '*.77forum.com',
1913                 '*.7forum.biz',
1914                 '*.7forum.info',
1915                 '*.7forum.net',
1916                 '*.8forum.biz',
1917                 '*.8forum.info',
1918                 '*.8forum.net',
1919                 '*.9forum.biz',
1920                 '*.9forum.info',
1921                 '*.activebb.net',
1922                 '*.aforumfree.com',
1923                 '*.all-forum.net',
1924                 '*.all-up.com',
1925                 '*.alldiscussion.net',
1926                 '*.allgoo.net',
1927                 '*.allgoo.us',
1928                 '*.american-forum.net',
1929                 '*.americantalk.net',
1930                 '*.annuaire-forums.com',
1931                 '*.asiafreeforum.com',
1932                 '*.asianfreeforum.com',
1933                 '*.azureforum.com',
1934                 '*.azurforum.com',
1935                 '*.bestcheapforum.com',
1936                 '*.bestdiscussion.net',
1937                 '*.bestgoo.com',
1938                 '*.bestofforum.com',
1939                 '*.bestofforum.net',
1940                 '*.bestoforum.net',
1941                 '*.bforum.biz',
1942                 '*.big-forum.net',
1943                 '*.board-poster.com',
1944                 '*.board-realtors.com',
1945                 '*.boardonly.com',
1946                 '*.boardrealtors.net',
1947                 '*.boardsmessage.com',
1948                 '*.briceboard.com',
1949                 '*.bubblelol.com',
1950                 '*.buy-forum.com',
1951                 '*.buy-talk.com',
1952                 '*.buyforum.net',
1953                 '*.buygoo.net',
1954                 '*.buygoo.us',
1955                 '*.camelscrew.com',
1956                 '*.cheap-forum.com',
1957                 '*.cheapforum.net',
1958                 '*.chocoforum.com',
1959                 '*.chocoforum.net',
1960                 '*.clic-topic.com',
1961                 '*.clicboard.com',
1962                 '*.clictopic.com',
1963                 '*.clictopic.net',
1964                 '*.clictopics.com',
1965                 '*.clubdiscussion.net',
1966                 '*.coolbb.net',
1967                 '*.crazy4us.com',
1968                 '*.crazyfruits.net',
1969                 '*.createmyboard.com',
1970                 '*.crewcamel.com',
1971                 '*.cyberfreeforum.com',
1972                 '*.discutforum.com',
1973                 '*.discutfree.com',
1974                 '*.do-forum.com',
1975                 '*.do-goo.com',
1976                 '*.do-goo.net',
1977                 '*.do-talk.com',
1978                 '*.dodiscussion.com',
1979                 '*.dogoo.us',
1980                 '*.easydiscussion.net',
1981                 '*.easyforumlive.com',
1982                 '*.englishboard.net',
1983                 '*.englishboards.com',
1984                 '*.ephpbb.com',
1985                 '*.eraseboard.net',
1986                 '*.eraseboards.net',
1987                 '*.euro-talk.net',
1988                 '*.eurodiscussion.net',
1989                 '*.eurogoo.com',
1990                 '*.exchangesboard.com',
1991                 '*.exprimetoi.net',
1992                 '*.fairtopic.com',
1993                 '*.fforum.biz',
1994                 '*.fforumfree.com',
1995                 '*.first-forum.com',
1996                 '*.firstgoo.com',
1997                 '*.fororama.com',
1998                 '*.forum-2007.com',
1999                 '*.forum-actif.net',
2000                 '*.forum-free.biz',
2001                 '*.forum-free.org',
2002                 '*.forum-motion.com',
2003                 '*.forum0.biz',
2004                 '*.forum0.info',
2005                 '*.forum0.net',
2006                 '*.forum2.biz',
2007                 '*.forum3.biz',
2008                 '*.forum3.info',
2009                 '*.forum5.info',
2010                 '*.forum6.biz',
2011                 '*.forum6.info',
2012                 '*.forum7.biz',
2013                 '*.forum777.com',
2014                 '*.forum8.biz',
2015                 '*.forum9.biz',
2016                 '*.foruma.biz',
2017                 '*.forumactif.biz',
2018                 '*.forumactif.info',
2019                 '*.forumactif.name',
2020                 '*.forumactif.ws',
2021                 '*.forumaction.net',
2022                 '*.forumakers.com',
2023                 '*.forumandco.com',
2024                 '*.forumb.biz',
2025                 '*.forumc.biz',
2026                 '*.forumd.biz',
2027                 '*.forumdediscussions.com',
2028                 '*.forumdediscussions.net',
2029                 '*.forume.biz',
2030                 '*.forumeast.com',
2031                 '*.forumf.biz',
2032                 '*.forumfreek.com',
2033                 '*.forumfreez.com',
2034                 '*.forumg.biz',
2035                 '*.forumh.biz',
2036                 '*.forumh.net',
2037                 '*.forumhope.com',
2038                 '*.forumi.biz',
2039                 '*.forumice.net',
2040                 '*.foruminute.com',
2041                 '*.forumj.biz',
2042                 '*.forumj.net',
2043                 '*.forumjonction.com',
2044                 '*.forumk.biz',
2045                 '*.foruml.biz',
2046                 '*.forumm.biz',
2047                 '*.forummotion.com',
2048                 '*.forummotions.com',
2049                 '*.forumn.biz',
2050                 '*.forumn.net',
2051                 '*.forumo.biz',
2052                 '*.forumonline.biz',
2053                 '*.forumotions.com',
2054                 '*.forump.biz',
2055                 '*.forump.info',
2056                 '*.forumperso.com',
2057                 '*.forumpersos.com',
2058                 '*.forumplatinum.com',
2059                 '*.forumpro.fr',
2060                 '*.forumq.biz',
2061                 '*.forumr.biz',
2062                 '*.forumr.net',
2063                 '*.forumrama.com',
2064                 '*.forums-actifs.com',
2065                 '*.forums-actifs.net',
2066                 '*.forums1.net',
2067                 '*.forumsactifs.com',
2068                 '*.forumsactifs.net',
2069                 '*.forumsfree.org',
2070                 '*.forumsline.com',
2071                 '*.forumsmakers.com',
2072                 '*.forumsmotion.com',
2073                 '*.forumsmotions.com',
2074                 '*.forumt.biz',
2075                 '*.forumv.biz',
2076                 '*.forumvalue.com',
2077                 '*.forumw.biz',
2078                 '*.forumy.biz',
2079                 '*.free-boards.net',
2080                 '*.freediscussion.net',
2081                 '*.freediscussions.net',
2082                 '*.freeforum.me.uk',
2083                 '*.freeforumboard.net',
2084                 '*.freeforumfree.com',
2085                 '*.freevideotalk.com',
2086                 '*.frenchboard.com',
2087                 '*.fruitsandco.com',
2088                 '*.fullboards.com',
2089                 '*.fullsubject.com',
2090                 '*.fullsubject.net',
2091                 '*.get-forum.net',
2092                 '*.getdiscussion.com',
2093                 '*.getgoo.net',
2094                 '*.getgoo.us',
2095                 '*.gettalk.net',
2096                 '*.go-board.com',
2097                 '*.go-board.net',
2098                 '*.go-forum.net',
2099                 '*.go-ogler.com',
2100                 '*.gofreeforum.com',
2101                 '*.gogoo.us',
2102                 '*.goo-board.com',
2103                 '*.goo-boys.com',
2104                 '*.goo-dart.com',
2105                 '*.goo-dole.com',
2106                 '*.goo-done.com',
2107                 '*.gooboards.com',
2108                 '*.goodbb.net',
2109                 '*.goodearths.com',
2110                 '*.goodforum.net',
2111                 '*.goodoles.com',
2112                 '*.goodoolz.com',
2113                 '*.gooforum.com',
2114                 '*.gooforums.com',
2115                 '*.googoolz.com',
2116                 '*.great-forum.com',
2117                 '*.heavenforum.com',
2118                 '*.hforum.biz',
2119                 '*.high-forums.com',
2120                 '*.highbb.com',
2121                 '*.highforum.net',
2122                 '*.hightoxic.com',
2123                 '*.homediscussion.net',
2124                 '*.homegoo.com',
2125                 '*.hooxs.com',
2126                 '*.hot-me.com',
2127                 '*.hot4um.com',
2128                 '*.hotdiscussion.net',
2129                 '*.hotgoo.net',
2130                 '*.in-goo.com',
2131                 '*.in-goo.net',
2132                 '*.infodiscussion.net',
2133                 '*.ingoo.us',
2134                 '*.iowoi.com',
2135                 '*.jforum.biz',
2136                 '*.just-forum.net',
2137                 '*.justboard.net',
2138                 '*.justdiscussion.com',
2139                 '*.justforum.net',
2140                 '*.justgoo.com',
2141                 '*.keuf.net',
2142                 '*.lforum.biz',
2143                 '*.lifediscussion.net',
2144                 '*.lifeme.net',
2145                 '*.lightbb.com',
2146                 '*.logu2.com',
2147                 '*.longdomaine.com',
2148                 '*.lovediscussion.net',
2149                 '*.lowcostforum.com',
2150                 '*.make-free-forum.com',
2151                 '*.makeforumfree.com',
2152                 '*.makefreeforum.com',
2153                 '*.mam9.com',
2154                 '*.manageboard.com',
2155                 '*.max2forum.com',
2156                 '*.meabout.com',
2157                 '*.megabb.com',
2158                 '*.moncontact.com',
2159                 '*.moninter.net',
2160                 '*.motion-forum.net',
2161                 '*.motionforum.net',
2162                 '*.motionsforum.com',
2163                 '*.mrforum.net',
2164                 '*.msnboard.net',
2165                 '*.msnyou.com',
2166                 '*.my-free-board.com',
2167                 '*.my-free-boards.com',
2168                 '*.my-free-forum.com',
2169                 '*.my-free-forums.com',
2170                 '*.my-goo.com',
2171                 '*.my-goo.net',
2172                 '*.mydiscussionboard.com',
2173                 '*.myfreeboard.net',
2174                 '*.mygoo.org',
2175                 '*.myrealboard.com',
2176                 '*.netboarder.com',
2177                 '*.netdiscussion.net',
2178                 '*.netgoo.org',
2179                 '*.new-forum.net',
2180                 '*.newdiscussion.net',
2181                 '*.newgoo.net',
2182                 '*.nforum.biz',
2183                 '*.nice-album.com',
2184                 '*.nice-board.biz',
2185                 '*.nice-board.com',
2186                 '*.nice-board.net',
2187                 '*.nice-boards.com',
2188                 '*.nice-boards.net',
2189                 '*.nice-forum.com',
2190                 '*.nice-forum.net',
2191                 '*.nice-forums.com',
2192                 '*.nice-forums.net',
2193                 '*.nice-gallery.net',
2194                 '*.nice-subject.com',
2195                 '*.nice-subjects.com',
2196                 '*.nice-theme.com',
2197                 '*.nice-topic.com',
2198                 '*.nice-topics.com',
2199                 '*.nicealbums.com',
2200                 '*.niceboard.biz',
2201                 '*.niceboard.net',
2202                 '*.niceboards.net',
2203                 '*.nicegalleries.net',
2204                 '*.nicesubject.com',
2205                 '*.nicesubjects.com',
2206                 '*.nicetopic.net',
2207                 '*.nicetopics.com',
2208                 '*.nightforum.net',
2209                 '*.nocost-forum.com',
2210                 '*.nofeeforum.com',
2211                 '*.one-forum.net',
2212                 '*.onediscussion.net',
2213                 '*.onegoo.us',
2214                 '*.onlinegoo.com',
2215                 '*.onlyquery.com',
2216                 '*.open-board.com',
2217                 '*.openu2.com',
2218                 '*.othersboards.com',
2219                 '*.own0.com',
2220                 '*.pforum.biz',
2221                 '*.phpbb9.com',
2222                 '*.phpbbtest.com',
2223                 '*.positifforum.com',
2224                 '*.postalboard.com',
2225                 '*.prodiscussion.net',
2226                 '*.progoo.us',
2227                 '*.pureforum.net',
2228                 '*.qforum.biz',
2229                 '*.quickbb.net',
2230                 '*.realbb.net',
2231                 '*.realfreeforum.com',
2232                 '*.realmsn.com',
2233                 '*.rforum.biz',
2234                 '*.road2us.com',
2235                 '*.roomforum.com',
2236                 '*.saveboard.com',
2237                 '*.screwcamel.com',
2238                 '*.screwcamels.com',
2239                 '*.sendboard.com',
2240                 '*.sephorum.com',
2241                 '*.sforum.biz',
2242                 '*.shootboard.com',
2243                 '*.shop-forum.net',
2244                 '*.shopsubject.com',
2245                 '*.simpleboard.net',
2246                 '*.site-forums.com',
2247                 '*.smileyforum.net',
2248                 '*.sos-forum.net',
2249                 '*.sos4um.com',
2250                 '*.sos4um.net',
2251                 '*.sosforum.net',
2252                 '*.speedyforum.com',
2253                 '*.stationforum.com',
2254                 '*.subject-expert.com',
2255                 '*.subject-line.com',
2256                 '*.subject-tracer.com',
2257                 '*.subjectchange.com',
2258                 '*.subjectdeals.com',
2259                 '*.subjectdebate.com',
2260                 '*.subjectdone.com',
2261                 '*.subjectonline.com',
2262                 '*.subjectschange.com',
2263                 '*.subjectsecrets.com',
2264                 '*.super-forum.net',
2265                 '*.talk-forums.com',
2266                 '*.team-forum.net',
2267                 '*.team-talk.net',
2268                 '*.teamconvention.com',
2269                 '*.teamgoo.net',
2270                 '*.teensboards.com',
2271                 '*.the-talk.net',
2272                 '*.the-up.com',
2273                 '*.thegoo.us',
2274                 '*.thinksubject.com',
2275                 '*.top-board.com',
2276                 '*.top-forum.net',
2277                 '*.top-me.com',
2278                 '*.top-talk.net',
2279                 '*.topdiscussion.com',
2280                 '*.topgoo.net',
2281                 '*.topic-board.com',
2282                 '*.topic-board.net',
2283                 '*.topic-debate.com',
2284                 '*.topic-ideas.com',
2285                 '*.topic-mail.com',
2286                 '*.topic-zone.com',
2287                 '*.topicboard.net',
2288                 '*.topicboards.com',
2289                 '*.topicmanager.com',
2290                 '*.topicsolutions.net',
2291                 '*.toxicfarm.com',
2292                 '*.unlimitboard.com',
2293                 '*.unlimitedboard.com',
2294                 '*.unlimitedforum.com',
2295                 '*.up-with.com',
2296                 '*.up-your.com',
2297                 '*.urealboard.com',
2298                 '*.user-board.net',
2299                 '*.userboard.net',
2300                 '*.users-board.com',
2301                 '*.users-board.net',
2302                 '*.usersboard.com',
2303                 '*.usersboard.net',
2304                 '*.webgoo.us',
2305                 '*.withboards.com',
2306                 '*.withme.us',
2307                 '*.worldgoo.com',
2308                 '*.yahooboard.net',
2309                 '*.yforum.biz',
2310                 '*.yoo7.com',
2311                 '*.youneed.us',
2312                 '*.your-board.com',
2313                 '*.your-talk.com',
2314                 '*.yourme.net',
2315                 '*.zforum.biz',
2316
2317                 // 75.126.156.15 redirect to forumactif.com
2318                 '*.actifforum.com',
2319                 '*.fr-bb.com',
2320                 '*.superforum.fr',
2321                 
2322                 // 75.126.156.15 redirect to editboard.com
2323                 '*.bbfr.net',
2324                 '*.bbgraf.com',
2325                 '*.cinebb.com',
2326                 '*.darkbb.com',
2327                 '*.dynamicbb.com',
2328                 '*.zikforum.com',
2329
2330                 // 74.86.25.140 Used: sosblog.com
2331                 '*.0-up.com',
2332                 '*.0-yo.com',
2333                 '*.04live.com',
2334                 '*.06fr.com',
2335                 '*.0fra.com',
2336                 '*.0jet.com',
2337                 '*.0yoo.com',
2338                 '*.1toxic.com',
2339                 '*.2k00.com',
2340                 '*.2xik.com',
2341                 '*.blog-2007.com',
2342                 '*.blog-2008.com',
2343                 '*.blog-2009.com',
2344                 '*.blog-2010.com',
2345                 '*.blog-actif.net',
2346                 '*.blog-marley.com',
2347                 '*.blog-talker.com',
2348                 '*.blog2009.com',
2349                 '*.blogactif.net',
2350                 '*.blogalbums.com',
2351                 '*.blogalerie.com',
2352                 '*.blogaleries.com',
2353                 '*.blogallerys.com',
2354                 '*.blogandme.com',
2355                 '*.blogandyou.com',
2356                 '*.blogbubble.net',
2357                 '*.blogdollz.com',
2358                 '*.bloggeuse.net',
2359                 '*.bloggeuses.com',
2360                 '*.bloginstinct.com',
2361                 '*.bloginternet.net',
2362                 '*.blogmakers.net',
2363                 '*.blogmarley.net',
2364                 '*.blogminister.net',
2365                 '*.blogmorane.com',
2366                 '*.blognboard.com',
2367                 '*.blogotek.net',
2368                 '*.blogpas.com',
2369                 '*.blogpublisher.net',
2370                 '*.blogsalbum.com',
2371                 '*.blogsalbums.com',
2372                 '*.blogsfan.net',
2373                 '*.blogsgallerys.com',
2374                 '*.blogsitephp.com',
2375                 '*.blogsland.net',
2376                 '*.blogsmaker.com',
2377                 '*.blogsmakers.com',
2378                 '*.blogspeed.net',
2379                 '*.blogsup.net',
2380                 '*.blogsutil.com',
2381                 '*.blogsutils.com',
2382                 '*.blogsystem.net',
2383                 '*.blogtalker.net',
2384                 '*.blogtheque.net',
2385                 '*.blogutil.com',
2386                 '*.blogvsboard.com',
2387                 '*.briceblog.com',
2388                 '*.cibleblog.com',
2389                 '*.cristalblog.com',
2390                 '*.crystalblog.net',
2391                 '*.dad-blog.com',
2392                 '*.daddy-blog.com',
2393                 '*.defaultblog.com',
2394                 '*.discussionsblog.com',
2395                 '*.dollzblog.com',
2396                 '*.dtoxic.com',
2397                 '*.easiestblog.net',
2398                 '*.espaceblog.net',
2399                 '*.exitblog.net',
2400                 '*.expensiveblog.com',
2401                 '*.extra-blog.net',
2402                 '*.extrablog.net',
2403                 '*.facileblog.com',
2404                 '*.forblogger.com',
2405                 '*.forumsblogs.com',
2406                 '*.freephpblog.com',
2407                 '*.fresh-blog.net',
2408                 '*.galleryblog.net',
2409                 '*.galleryblogs.net',
2410                 '*.gallerysblog.com',
2411                 '*.gallerysblogs.com',
2412                 '*.hyper-blog.net',
2413                 '*.hyper-blogger.com',
2414                 '*.hyper-blogger.net',
2415                 '*.hyperblogger.net',
2416                 '*.instinctblog.com',
2417                 '*.jeunblog.com',
2418                 '*.jeuneblog.com',
2419                 '*.judblog.com',
2420                 '*.makeblog.net',
2421                 '*.man-blog.net',
2422                 '*.man-blogs.com',
2423                 '*.man-blogs.net',
2424                 '*.manblog.net',
2425                 '*.manblog.org',
2426                 '*.manblog.us',
2427                 '*.manblogs.net',
2428                 '*.mansblog.net',
2429                 '*.mansblogs.com',
2430                 '*.mansblogs.net',
2431                 '*.meetingsblogs.com',
2432                 '*.men-blog.net',
2433                 '*.men-blogs.com',
2434                 '*.men-blogs.net',
2435                 '*.menblog.us',
2436                 '*.menblogs.net',
2437                 '*.mensblogs.net',
2438                 '*.messaginblog.com',
2439                 '*.monblogger.com',
2440                 '*.mum-blog.com',
2441                 '*.mummy-blog.com',
2442                 '*.mummyblog.com',
2443                 '*.myareablog.com',
2444                 '*.myblog-online.net',
2445                 '*.mybloginternet.com',
2446                 '*.myblogland.com',
2447                 '*.myblogmag.com',
2448                 '*.myfreshblog.com',
2449                 '*.myinternetblog.net',
2450                 '*.myoverblog.com',
2451                 '*.myoverblog.net',
2452                 '*.mysharedblog.com',
2453                 '*.nice-albums.com',
2454                 '*.nice-galleries.com',
2455                 '*.nicealbum.net',
2456                 '*.nicegallery.net',
2457                 '*.notreblogger.com',
2458                 '*.outilblog.com',
2459                 '*.over-blogger.com',
2460                 '*.overblogger.com',
2461                 '*.pasblog.com',
2462                 '*.pasblog.net',
2463                 '*.perfect-blog.net',
2464                 '*.perfectblog.net',
2465                 '*.phpblogsite.com',
2466                 '*.phpmyblog.net',
2467                 '*.plateformeblog.com',
2468                 '*.playblogger.com',
2469                 '*.publishmyblog.com',
2470                 '*.pulseblog.net',
2471                 '*.pulseblogs.com',
2472                 '*.puretoxic.com',
2473                 '*.reservedblog.com',
2474                 '*.shareblog.net',
2475                 '*.shareblogs.net',
2476                 '*.shared-blogs.com',
2477                 '*.sharedblog.net',
2478                 '*.sharedblogs.net',
2479                 '*.solideblog.com',
2480                 '*.systemeblog.com',
2481                 '*.talkmeblog.com',
2482                 '*.toolsblog.net',
2483                 '*.toxicplace.com',
2484                 '*.ufreeblog.com',
2485                 '*.uliveblog.com',
2486                 '*.ultratoxic.com',
2487                 '*.utilblog.com',
2488                 '*.utilblogs.com',
2489                 '*.utilsblog.com',
2490                 '*.utilsblogs.com',
2491                 '*.various-blog.com',
2492                 '*.various-blog.net',
2493                 '*.various-blogs.com',
2494                 '*.various-blogs.net',
2495                 '*.variusblog.com',
2496                 '*.versusblog.com',
2497                 '*.vieuxblog.com',
2498                 '*.web-day.net',
2499                 '*.whatsblog.net',
2500                 '*.woman-blog.net',
2501                 '*.woman-blogs.com',
2502                 '*.woman-blogs.net',
2503                 '*.womanblog.com',
2504                 '*.womanblog.org',
2505                 '*.womanblog.us',
2506                 '*.womanblogs.net',
2507                 '*.womansblogs.com',
2508                 '*.womansblogs.net',
2509                 '*.women-blog.net',
2510                 '*.women-blogs.com',
2511                 '*.women-blogs.net',
2512                 '*.womenblog.us',
2513                 '*.womenblogs.net',
2514                 '*.womensblog.net',
2515                 '*.womensblogs.net',
2516                 '*.youblog.net',
2517                 '*.yourliveblog.com',
2518                 '*.yourweblog.net',
2519         ),
2520         '*.forumcommunity.net',
2521         '*.forumer.com',
2522         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2523         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2524         'forumhosting.org',
2525         '*.forums.com',
2526         'forumbolt.com',
2527         'phpbb.forumgratis.com',
2528         'forumlari.net',
2529         '*.forumlivre.com',
2530         'forumnow.com.br',
2531         '*.forumppl.com',
2532         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2533         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2534                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2535                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2536                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2537         '*.fory.pl',
2538         'fotolog.com',
2539         '*.fr33webhost.com',
2540         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2541         '*.free-25.de',
2542         '*.free-bb.com',
2543         'Free-Blog-Hosting.com' => array(
2544                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2545                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
2546                 'blog-tonite.com',                      // ns *.phpwebhosting.com
2547                 'blogznow.com',                         // ns *.phpwebhosting.com
2548                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
2549                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
2550         ),
2551         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2552         'free-guestbook.net',
2553         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2554         'freebb.nl',
2555         '*.freeclans.de',
2556         '*.freelinuxhost.com',  // by 100webspace.com
2557         '*.nofeehost.com',
2558         '*.freehyperspace.com',
2559         'freeforum.at',                 // by Sandro Wilhelmy
2560         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2561         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2562         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2563         '*.freewebhostingpro.com',
2564         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2565         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2566                 '*.6te.net',
2567                 '*.ueuo.com',
2568                 '*.orgfree.com',
2569         ),
2570         '*.freewebpage.org',
2571         'Freewebs.com' => array(        // by inquiries at freewebs.com
2572                 'freewebs.com',
2573                 'freewebsfarms.com',
2574         ),
2575         '*.freewebspace.net.au',
2576         '*.freemyforum.com',    // by messahost at gmail.com
2577         'freepowerboards.com',
2578         '*.freepowerboards.com',
2579         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2580         'Funpic.de' => array(   // by alexander at liemen.net
2581                 '*.funpic.de',
2582                 '*.funpic.org',
2583         ),
2584         'gb-hoster.de',
2585         '*.genblogger.com',
2586         'GetBetterHosting.com' => array(
2587                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2588                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2589         ),
2590         '*.goodboard.de',
2591         'gossiping.net',
2592         '*.greatnuke.com',
2593         '*.guestbook.de',
2594         'gwebspace.de',
2595         'Google.com' => array(
2596                 '*.blogspot.com',
2597                 'docs.google.com',
2598                 '*.googlepages.com',
2599                 'groups-beta.google.com',
2600         ),
2601         'guestbook.at',
2602         'club.giovani.it',
2603         '*.gratis-server.de',
2604         'healthcaregroup.com',
2605         '*.heliohost.org',
2606         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2607                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2608                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2609                 '*.front.ru',           // (domain at hc.ru)
2610                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2611                 '*.hotbox.ru',          // (domain at hc.ru)
2612                 '*.hotmail.ru',         // (hosting at hc.ru)
2613                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2614                 '*.land.ru',            // (domain at hc.ru)
2615                 '*.mail15.com',         // (hosting at hc.ru)
2616                 '*.mail333.com',        // (hosting at hc.ru)
2617                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2618                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2619                 '*.pisem.net',          // (hosting at hc.ru)
2620                 '*.pochta.ru',          // (domain at hc.ru)
2621                 '*.pochtamt.ru',        // (domain at hc.ru)
2622                 '*.pop3.ru',            // (domain at hc.ru)
2623                 '*.rbcmail.ru',         // (domain at hc.ru)
2624                 '*.smtp.ru',            // (domain at hc.ru)
2625         ),
2626         '*.hiblogger.com',              // by chiaokin at gmail.com
2627         '*.hit.bg',                             // by forumup.com ??
2628         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2629         '*.host-page.com',
2630         '*.hostingclub.de',
2631         'forums.hspn.com',
2632         '*.httpsuites.com',
2633         '*.hut2.ru',
2634         'ibfree.org',                   // 208.101.45.88
2635         'IC.cz' => array(
2636                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2637                 '*.hu.cz',                      // internetcentrum at gmail.com
2638                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2639                 '*.ic.cz',                      // internetcentrum at gmail.com
2640                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2641                 '*.own.cz',                     // internetcentrum at gmail.com
2642                 '*.phorum.cz',          // internetcentrum at gmail.com
2643                 '*.tym.cz',                     // internetcentrum at gmail.com
2644                 '*.tym.sk',                     // jobot at ignum.cz
2645                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2646                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2647                 '*.yw.sk',                      // jobot at ignum.cz
2648         ),
2649         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2650                 '*.0moola.com',
2651                 '*.3000mb.com',
2652                 '.501megs.com',
2653                 '*.teracities.com',
2654                 '*.xoompages.com',
2655         ),
2656         '*.icspace.net',
2657         'iEUROP.net' => array(
2658                 '*.ibelgique.com',
2659                 '*.iespana.es',
2660                 '*.ifrance.com',
2661                 '*.iitalia.com',
2662                 '*.iquebec.com',
2663                 '*.isuisse.com',
2664         ),
2665         '*.ihateclowns.net',
2666         '*.ii55.com',
2667         '*.ipbfree.com',
2668         '*.iphorum.com',
2669         '*.blog.ijijiji.com',
2670         '*.info.com',
2671         '*.informe.com',
2672         'it168.com',
2673         '.iwannaforum.com',
2674         '*.jconserv.net',
2675         '*.jeeran.com',
2676         '*.jeun.fr',
2677         '*.joolo.com',
2678         '*.journalscape.com',
2679         '*.justfree.com',
2680         '*.blog.kataweb.it',
2681         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2682         '*.kokoom.com',
2683         'koolpages.com',
2684         '*.kostenlose-foren.org',
2685         '*.ksiegagosci.info',
2686         'Lide.cz' => array(
2687                 '*.lide.cz',
2688                 '*.sblog.cz',
2689         ),
2690         '*.lioru.com',
2691         'limmon.net',
2692         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2693         'listible.com',                 ///list/
2694         'Livedoor.com' => array(
2695                 'blog.livedoor.jp',
2696                 '*.blog.livedoor.com',  // redirection
2697         ),
2698         '*.livejournal.com',
2699         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2700         '*.logme.nl',
2701         'lol.to',
2702         'ltss.luton.ac.uk',
2703         'Lycos.com' => array(
2704                 '.angelfire.com',       // angelfire.lycos.com
2705
2706                 '*.jubii.dk',   // search., medlem.
2707                 '*.jubiiblog.co.uk',
2708                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2709                 '*.jubiiblog.de',
2710                 '*.jubiiblog.dk',
2711                 '*.jubiiblog.fr',
2712                 '*.jubiiblog.it',
2713                 '*.jubiiblog.nl',
2714
2715                 '*.lycos.at',
2716                 '*.lycos.ch',
2717                 '*.lycos.co.uk',
2718                 'angelfire.lycos.com',
2719                 '*.lycos.de',
2720                 '*.lycos.es',
2721                 '*.lycos.fr',
2722                 '*.lycos.it',           // by Lycos Europe GmbH
2723                 '*.lycos.nl',
2724
2725                 '*.spray.se',
2726                 '*.sprayblog.se',
2727
2728                 '*.tripod.com',
2729         ),
2730         '*.mastertopforum.com',
2731         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2732         'meneame.net',
2733         '*.memebot.com',
2734         '*.messageboard.nl',
2735         'mokono GmbH' => array(
2736                 '*.blog.com.es',
2737                 '*.blog.de',
2738                 '*.blog.fr',
2739                 '*.blog.co.uk',
2740                 '*.blog.ca',
2741                 '*.blogs.se',
2742                 '*.blogs.fi',
2743                 '*.blogs.no',
2744                 '*.blogs.dk',
2745                 '*.blogs.ro',
2746                 '*.weblogs.pl',
2747                 '*.weblogs.cz',
2748                 '*.weblogs.hu',
2749         ),
2750         'mojklc.com',
2751         '*.mundoforo.com',
2752         'MonForum.com' => array(
2753                 '*.monforum.com',
2754                 '*.monforum.fr',
2755         ),
2756         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2757         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2758         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2759         'myblog.is',
2760         'myblogma.com',
2761         '*.myblogvoice.com',
2762         'myblogwiki.com',
2763         '*.myforum.ro',
2764         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2765         '*.myfreewebs.net',
2766         '*.mysite.com',
2767         '*.myxhost.com',
2768         '*.netfast.org',
2769         'NetGears.com' => array(
2770                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2771                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2772                 '*.freewebspace.com',   // 64.49.236.72
2773         ),
2774         'Netscape.com' => array('*.netscape.com'),
2775         'users.newblog.com',
2776         'neweconomics.info',
2777         '*.newsit.es',                          // 75.126.252.108
2778         '*.nm.ru',
2779         '*.nmj.pl',
2780         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2781         'Northsky.com' => array(
2782                 // by hostmaster at northsky.com
2783                 // northsky.com redirects to communityarchitect.com
2784
2785                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2786                 '*.00author.com',
2787                 '*.00band.com',
2788                 '*.00books.com',
2789                 '*.00cash.com',
2790                 '*.00cd.com',
2791                 '*.00dvd.com',
2792                 '*.00family.com',
2793                 '*.00game.com',
2794                 '*.00home.com',
2795                 '*.00it.com',
2796                 '*.00me.com',
2797                 '*.00movies.com',
2798                 '*.00page.com',
2799                 '*.00politics.com',
2800                 '*.00sf.com',
2801                 '*.00show.com',
2802                 '*.00song.com',
2803                 '*.00trek.com',
2804                 '*.00video.com',
2805                 '*.0me.com',
2806                 '*.0pi.com',
2807                 '*.happy-couple.com',
2808                 '*.warp0.com',
2809
2810                 '*.50megs.com',         // 64.136.25.170
2811
2812                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2813                 '*.00server.com',
2814                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2815                 '*.fanspace.com',
2816
2817                 // 64.136.25.168 by Mark Bishop
2818                 '*.00go.com',
2819                 '*.00space.com',
2820                 '*.00sports.com',
2821         ),
2822         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2823         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2824         'onlyfree.de',
2825         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2826         '*.ohost.de',
2827         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2828                 '.friko.pl',
2829                 '.jak.pl',
2830                 '.nazwa.pl',
2831                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2832                 '.w8w.pl',
2833                 '.za.pl',
2834                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2835         ),
2836         'oyax.com',                             ///user_links.php
2837         '*.p2a.pl',
2838         '*.parlaris.com',
2839         '*.pathfinder.gr',
2840         '*.persianblog.com',
2841         '*.phorum.pl',
2842         'Phpbb24.com' => array( // by Daniel Eriksson
2843                 '*.createforum.us',     // registry at webbland.se
2844                 '*.forumportal.us',     // registry at webbland.se
2845                 '*.freeportal.us',      // registry at network24.se
2846                 '*.phpbb2.us',          // daniel at danielos.com
2847                 '*.phpbb24.com',        // daniel at danielos.com
2848                 '*.myforumportal.com',  // daniel at webbland.se
2849         ),
2850         'phpbb4you.com',
2851         'phpbbcommunity.com',
2852         '*.phpbbx.de',
2853         '*.pochta.ru',
2854         '*.portbb.com',
2855         '*.portcms.com',
2856         'powerwebmaster.de',
2857         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2858         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2859         '*.probook.de',
2860         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2861         '*.pun.pl',
2862         'putfile.com',
2863         '*.quickfreehost.com',
2864         'quizilla.com',
2865         '*.quotaless.com',
2866         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2867         'razyboard.com',
2868         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2869         'realhp.de',
2870         'reddit.com',           ///user/
2871         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2872                 '*.juicypornhost.com',
2873                 '*.pornzonehost.com',
2874                 '*.xhostar.com',
2875         ),
2876         'RIN.ru' => array(
2877                 '*.sbn.bz',
2878                 '*.wol.bz',
2879         ),
2880         '*.sayt.ws',
2881         'Seblg.com' => array(
2882                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2883                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2884         ),
2885         '*.seo-blog.org',
2886         '*.shoutpost.com',
2887         '*.siamforum.com',
2888         '*.siteburg.com',
2889         '*.sitehome.ru',
2890         '*.sitesfree.com',              // support at livesearching.com
2891         '*.sitesled.com',
2892         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2893         'SmarTrans.com' => array(
2894                 '.3w.to',
2895                 '.aim.to',
2896                 '.djmp.jp',
2897                 '.nihongourl.nu',
2898                 '.urljp.com',
2899                 '.www1.to',
2900                 '.www2.to',
2901                 '.www3.to',
2902         ),
2903         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2904         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2905         'members.spboards.com',
2906         'forums.speedguide.net',
2907         'Sphosting.com' => array(       // by admin at sphosting.com
2908                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2909                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2910                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2911                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2912                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2913         ),
2914         '*.spicyblogger.com',
2915         '*.spotbb.com',
2916         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2917         '*.squarespace.com',
2918         'stickypond.com',
2919         'stormloader.com',
2920         'strikebang.com',
2921         '*.sultryserver.com',
2922         '*.t35.com',
2923         '*.talks.at',
2924         'tabletpcbuzz.com',
2925         '*.talkthis.com',
2926         'tbns.net',
2927         'telasipforums.com',
2928         'theforumhub.com',
2929         'thestudentunderground.org',
2930         'think.ubc.ca',
2931         '*.thumblogger.com',
2932         'Topix.com' => array(
2933                 'topix.com',
2934                 'topix.net',
2935         ),
2936         'forum.tourism-talk.com.au',
2937         'tycho at e-lab.nl' => array(
2938                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2939                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2940         ),
2941         '*.tumblr.com',
2942         'UcoZ Web-Services' => array(
2943                 '*.3dn.ru',
2944                 '*.clan.su',
2945                 '*.moy.su',
2946                 '*.my1.ru',
2947                 '*.p0.ru',
2948                 '*.pp.net.ua',
2949                 '*.ucoz.co.uk',
2950                 '*.ucoz.com',
2951                 '*.ucoz.net',
2952                 '*.ucoz.org',
2953                 '*.ucoz.ru',
2954                 '*.ws.co.ua',
2955         ),
2956         '*.unforo.net',
2957         'veoh.com',
2958         '*.vdforum.ru',
2959         '*.vtost.com',
2960         '*.vidiac.com',
2961         'Voila.fr' => array('.site.voila.fr'),
2962         'volny.cz',
2963         'voy.com',
2964         '*.welover.org',
2965         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2966                 '*.fasthost.tv',
2967                 '*.hothost.tv',
2968                 '*.isgreat.tv',
2969                 '*.issexy.tv',
2970                 '*.isterrible.tv',
2971                 '*.somegood.tv',
2972                 '*.adultnations.com',
2973                 '*.alladultfemale.com',
2974                 '*.alladultmale.com',
2975                 '*.allbisexual.com',
2976                 '*.allbreast.com',
2977                 '*.allfeminism.com',
2978                 '*.allmanpages.com',
2979                 '*.allmendirect.com',
2980                 '*.allphotoalbum.com',
2981                 '*.allsexpages.com',
2982                 '*.allwomanweb.com',
2983                 '*.attorney-site.com',
2984                 '*.bedclip.com',
2985                 '*.bestfamilysite.com',
2986                 '*.bestmusicpages.com',
2987                 '*.bigmoron.com',
2988                 '*.bourgeoisonline.com',
2989                 '*.candyfrom.us',
2990                 '*.cartoonhit.com',
2991                 '*.cat-on-line.com',
2992                 '*.chokesondick.com',
2993                 '*.closeupsof.us',
2994                 '*.cpa-site.com',
2995                 '*.dampgirl.com',
2996                 '*.dampgirls.com',
2997                 '*.deepestfetish.com',
2998                 '*.docspages.com',
2999                 '*.dog-on-line.com',
3000                 '*.dogcountries.com',
3001                 '*.dognations.com',
3002                 '*.doingitwith.us',
3003                 '*.drenchedface.com',
3004                 '*.drenchedlips.com',
3005                 '*.drspages.com',
3006                 '*.edogden.com',
3007                 '*.eroticountry.com',
3008                 '*.fasthost.tv',
3009                 '*.fineststars.com',
3010                 '*.foronlinegames.com',
3011                 '*.forplanetearth.com',
3012                 '*.freeadultparty.com',
3013                 '*.freespeechsite.com',
3014                 '*.gayadultxxx.com',
3015                 '*.gaytaboo.com',
3016                 '*.greatcookery.com',
3017                 '*.greatrecipepages.com',
3018                 '*.greatstreamingvideo.com',
3019                 '*.hatesit.com',
3020                 '*.hothost.tv',
3021                 '*.iscrappy.com',
3022                 '*.isgreat.tv',
3023                 '*.issexy.tv',
3024                 '*.isterrible.tv',
3025                 '*.itinto.us',
3026                 '*.japannudes.net',
3027                 '*.jesussave.us',
3028                 '*.jesussaveus.com',
3029                 '*.labialand.com',
3030                 '*.lettersfrom.us',
3031                 '*.lookingat.us',
3032                 '*.lunaticsworld.com',
3033                 '*.microphallus.com',
3034                 '*.mycatshow.com',
3035                 '*.mydogshow.com',
3036                 '*.myhardman.com',
3037                 '*.mylawsite.net',
3038                 '*.mylovething.com',
3039                 '*.onasoapbox.com',
3040                 '*.onlinepulpit.com',
3041                 '*.petitionthegovernment.com',
3042                 '*.photosfor.us',
3043                 '*.picturetrades.com',
3044                 '*.pleasekiss.us',
3045                 '*.politicalemergency.com',
3046                 '*.power-emergency.com',
3047                 '*.prayingfor.us',
3048                 '*.realbadidea.com',
3049                 '*.realisticpolitics.com',
3050                 '*.reallybites.com',
3051                 '*.reallypumping.us',
3052                 '*.reallyrules.com',
3053                 '*.reallysuckass.com',
3054                 '*.reallysucksass.com',
3055                 '*.realsweetheart.com',
3056                 '*.rottenass.com',
3057                 '*.schoolreference.com',
3058                 '*.sexheroes.com',
3059                 '*.sharewith.us',
3060                 '*.smutstars.com',
3061                 '*.soakinglips.com',
3062                 '*.somegood.tv',
3063                 '*.songsfrom.us',
3064                 '*.stinkingfart.com',
3065                 '*.stinkyhands.com',
3066                 '*.storiesfrom.us',
3067                 '*.taboocountry.com',
3068                 '*.television-series.com',
3069                 '*.thisbelongsto.us',
3070                 '*.totallyboning.us',
3071                 '*.vaginasisters.com',
3072                 '*.verydirtylaundry.com',
3073                 '*.videosfor.us',
3074                 '*.videosfrom.us',
3075                 '*.videosof.us',
3076                 '*.virtualdogshit.com',
3077                 '*.web1000.com',
3078                 '*.webpicturebook.com',
3079                 '*.wronger.com',
3080                 '*.xxxnations.com',
3081                 '*.yourwaywith.us',
3082         ),
3083         'webblog.ru',
3084         'weblogmaniacs.com',
3085         '.webng.com',                   // www.*, www3.*
3086         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc. 
3087         'websitetoolbox.com',
3088         '*.webtropia.com',
3089         'Welnet.de' => array(
3090                 'welnet.de',
3091                 'welnet4u.de',
3092         ),
3093         'wh-gb.de',
3094         '*.wikidot.com',
3095         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3096         '*.wmjblogs.ru',
3097         '*.wordpress.com',
3098         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3099         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3100         '*.xforum.se',
3101         'xfreeforum.com',
3102         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3103         '*.xoomwebs.com',
3104         '.xterm.org',
3105         '.freeblogs.xp.tl',
3106         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3107         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3108         'Yahoo.com' => array(
3109                 'flickr.com',
3110                 'geocities.com',
3111         ),
3112         'YANDEX, LLC.' => array(        // noc at yandex.net
3113                 '*.narod.ru',
3114                 'ya.ru',
3115                 'yandex.ru',
3116         ),
3117         '*.yeahost.com',
3118         'yourfreebb.de',
3119         'Your-Websites.com' => array(
3120                 '*.your-websites.net',
3121                 '*.web-space.ws',
3122         ),
3123 );
3124
3125 // --------------------------------------------------
3126
3127 $blocklist['B-2'] = array(
3128
3129         // B-2: Jacked contents, something implanted
3130         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3131         '*.3dm3.com',
3132         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3133         '*.1fr1.com',
3134         'a4aid.org',
3135         'aac.com',
3136         '*.aamad.org',
3137         'ad-pecjak.si',
3138         'agnt.org',
3139         'alwanforthearts.org',
3140         '*.anchor.net.au',
3141         'anewme.org',
3142         'arisedesign.net',              //Portfolio/d981/
3143         'internetyfamilia.asturiastelecentros.com',
3144         'Ball State University' => array('web.bsu.edu'),
3145         'btofaq.net',                   ///v3/forum
3146         'blepharospasm.org',
3147         'nyweb.bowlnfun.dk',
3148         '*.buzznet.com',
3149         '*.canberra.net.au',
3150         'castus.com',
3151         'Case Western Reserve University' => array('case.edu'),
3152         'ceval.de',
3153         'chaco.gov.ar',
3154         'codespeak.net',
3155         'Colorado School of Mines' => array('ticc.mines.edu'),
3156         '*.colourware.co.uk',
3157         'cpuisp.com',
3158         'International Christian University' => array('icu.edu.ua'),
3159         '*.iphpbb.com',
3160         'board-z.de',
3161         '*.board-z.de',
3162         'California State University Stanislaus' => array('writing.csustan.edu'),
3163         'cannon.co.za',
3164         'columbosgarden.com',
3165         '*.communityhost.de',
3166         'connectionone.org',
3167         'deathwinds.com',
3168         'deforum.org',
3169         'delayedreaction.org',
3170         'deproduction.org',
3171         'dc503.org',
3172         'dialadeck.com',                ///images/
3173         'dre-centro.pt',
3174         'Duke University' => array('devel.linux.duke.edu'),
3175         '*.esen.edu.sv',
3176         'forums.drumcore.com',
3177         'dundeeunited.org',
3178         'energyglass.com.ua',
3179         'exclusivehotels.com',
3180         'info.ems-rfid.com',
3181         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3182         'fbwloc.com',
3183         '.fhmcsa.org.au',
3184         'findyourwave.co.uk',
3185         'frogcafe.net',
3186         'plone4.fnal.gov',
3187         'freeforen.com',
3188         'funkdoc.com',
3189         'funnyclipcentral.com',
3190         'gearseds.com',
3191         'generationrice.com',
3192         'ghettojava.com',
3193         'gnacademy.org',
3194         '*.goodboard.de',
3195         'GreenDayVideo.net' => array(
3196                 'greendayvideo.net',
3197                 'espanol.greendayvideo.net',
3198         ),
3199         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3200         'Harvard Law School' => array('blogs.law.harvard.edu'),
3201         'helpiammoving.com',
3202         'homepage-dienste.com',
3203         'Howard University' => array('networks.howard.edu'),
3204         'hullandhull.com',
3205         'Huntington University' => array('huntington.edu'),
3206         'huskerink.com',
3207         '.hyba.info',
3208         'inda.org',
3209         '*.indymedia.org',      // by abdecom at riseup.net
3210         'instantbulletin.com',
3211         'internetincomeclub.com',
3212         '*.inventforum.com',
3213         'Iowa State University' => array('boole.cs.iastate.edu'),
3214         'ipwso.org',
3215         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3216         'ironmind.com',
3217         'skkustp.itgozone.com', // hidden JavaScript
3218         'jazz2online.com',
3219         '.jloo.org',
3220         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3221         'kjon.com',
3222         'Kazan State University' => array(
3223                 'dir.kzn.ru',
3224                 'sys.kcn.ru',
3225         ),
3226         'test.kernel.org',
3227         'kevindmurray.com',
3228         'kroegjesroutes.nl',
3229         '.legion.org',
3230         'Loyola Marymount University' => array('lmu.edu'),
3231         'forum.lixium.fr',
3232         'macfaq.net',
3233         'me4x4.com',
3234         'microbial-ecology.net',
3235         'minsterscouts.org',
3236         'morallaw.org',
3237         'morerevealed.com',
3238         'macronet.org',
3239         'mamiya.co.uk',
3240         'vcd.mmvcd.com',
3241         'Monmouth College' => array('department.monm.edu'),
3242         'mountainjusticemedia.org',
3243         '*.mybbland.com',
3244         'mydlstore.com',
3245         '*.netboardz.com',
3246         'North Carolina A&T State University' => array(
3247                 'ncat.edu',
3248                 'my.ncat.edu',
3249                 'hlc.ncat.edu',
3250         ),
3251         'placetobe.org',
3252         'users.nethit.pl',
3253         'nightclubvip.net',
3254         'njbodybuilding.com',
3255         'nlen.org',
3256         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3257         'offtextbooks.com',
3258         'ofimatika.com',
3259         'olympiafoto.com',              ///images/
3260         'omakase-net',                  // iframe
3261         'omikudzi.ru',
3262         'openchemist.net',
3263         'palungjit.com',
3264         'pataphysics-lab.com',
3265         'paypaldev.org',
3266         'paullima.com',
3267         'perl.org.br',
3268         'pfff.co.uk',
3269         'pimpo.com',                    ///_old_site/
3270         'pix4online.co.uk',
3271         'plone.dk',
3272         'preform.dk',
3273         'privatforum.de',
3274         'publicityhound.net',
3275         'qea.com',
3276         'rbkdesign.com',
3277         'rehoboth.com',
3278         'rodee.org',
3279         'ryanclark.org',
3280         '*.reallifelog.com',
3281         'rkphunt.com',
3282         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3283         'sapphireblue.com',
3284         'saskchamber.com',
3285         'savevoorhees.org',
3286         'sdhmalenovice.cz',             //galerie/
3287         'selikoff.net',
3288         'serbisyopilipino.org',
3289         'setbb.com',
3290         'sharejesusinternational.com',
3291         'silver-tears.net',
3292         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3293         '.softpress.com',
3294         'southbound-inc.com',   // There is a <html>.gif (img to it168.com) 
3295         'fora.taniemilitaria.pl',       ///phpbb
3296         'tehudar.ru',
3297         'Tennessee Tech University' => array('manila.tntech.edu'),
3298         'thebluebird.ws',
3299         'theosis.org',
3300         '*.thoforum.com',
3301         'troms-slekt.com',
3302         'theedgeblueisland.com',
3303         'toyshop.com.tw',               // /images/sigui/
3304         'torontoplace.com',
3305         'chat.travlang.com',
3306         'trickropingbylassue.com',
3307         'Truman State University' => array('mathbio.truman.edu'),
3308         'tuathadedannan.org',
3309         'txgotg.com',
3310         'tzaneen.co.za',
3311         'ugeavisen.com',                ///style/
3312         'forums.ugo.com',
3313         'whole.cs.unibo.it',
3314         'The University of North Dakota' => array(
3315                 'learn.aero.und.edu',
3316                 'ez.asn.und.edu',
3317         ),
3318         'The University of Alabama' => array('bama.ua.edu'),
3319         'unisonscotlandlaw.co.uk',
3320         'University of California' => array('classes.design.ucla.edu'),
3321         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3322         'University of Northern Colorado' => array('unco.edu'),
3323         'University of Toronto' => array(
3324                 'environment.utoronto.ca',
3325                 'grail.oise.utoronto.ca',
3326                 'utsc.utoronto.ca',
3327         ),
3328         'urgentclick.com',
3329         'vacant.org.uk',
3330         'Villa Julie College' => array('www4.vjc.edu'),
3331         'Vail Valley Foundation' => array('.vvf.org'),
3332         'wabson.org',
3333         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3334         'webarch.com',          // by WebArchitects (webarch at insync.net)
3335         'weehob.com',
3336         'West Virginia University Parkersburg' => array('wvup.edu'),
3337         'williamsburgrentals.com',
3338         'wolvas.org.uk',
3339         'wookiewiki.org',
3340         'xsgaming.com',                 // Jacked
3341         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3342         'Yahoo.com' => array(
3343                 'blog.360.yahoo.com',
3344                 '*.groups.yahoo.com'
3345         ),
3346         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3347         'youthpeer.org',
3348         '*.zenburger.com',
3349         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3350 );
3351
3352 // --------------------------------------------------
3353
3354 $blocklist['C'] = array(
3355
3356         // C: Sample setting of:
3357         // Exclusive spam domains
3358         //
3359         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3360         // affiliates, finance, sending viruses, malicious attacks to browsers,
3361         // and/or mixed ones
3362         //
3363         // Please notify us about this list with reason:
3364         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3365
3366         // C-1: Domain sets (seems to be) born to spam you
3367         //
3368         // All buziness-related spam
3369         //'.biz'
3370         //
3371         'admin at seekforweb.com' => array(
3372                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3373                 '.lovestoryx.com',
3374                 '.loveaffairx.com',
3375                 '.onmore.info',
3376                 '.scfind.info',
3377                 '.scinfo.info',
3378                 '.webwork88.info',
3379         ),
3380         'boss at bse-sofia.bg' => array(        // by Boris
3381                 '.htewbop.org',
3382                 '.kimm--d.org',
3383                 '.gtre--h.org',
3384                 '.npou--k.org',
3385                 '.bres--z.org',
3386                 '.berk--p.org',
3387                 '.bplo--s.org',
3388                 '.basdpo.org',
3389                 '.jisu--m.org',
3390                 '.kire--z.org',
3391                 '.mertnop.org',
3392                 '.mooa--c.org',
3393                 '.nake--h.org',
3394                 '.noov--b.org',
3395                 '.suke--y.org',
3396                 '.vasdipv.org',
3397                 '.vase--l.org',
3398                 '.vertinds.org',
3399         ),
3400         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3401                 '.aqq3.info',
3402                 '.axa00.info',
3403                 '.okweb11.org',
3404                 '.okweb12.org',
3405                 '.okweb13.org',
3406                 '.okweb14.org',
3407         ),
3408         'opezdol at gmail.com' => array(
3409                 '.informazionicentro.info',
3410                 '.notiziacentro.info',
3411         ),
3412         'SomethingGen' => array(
3413                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3414                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3415                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3416                 // by Lee Chang (nebucha at model-x.com)
3417                 '.adult-chat-world.info',       // by Lui
3418                 '.adult-chat-world.org',        // by Lui
3419                 '.adult-sex-chat.info',         // by Lui
3420                 '.adult-sex-chat.org',          // by Lui
3421                 '.adult-cam-chat.info',         // by Lui
3422                 '.adult-cam-chat.org',          // by Lui
3423                 '.dildo-chat.org',                      // by Lui
3424                 '.dildo-chat.info',                     // by Lui
3425                 // flirt-online.info is not CamsGen
3426                 '.flirt-online.org',            // by Lui
3427                 '.live-adult-chat.info',        // by Lui
3428                 '.live-adult-chat.org',         // by Lui
3429                 '.sexy-chat-rooms.info',        // by Lui
3430                 '.sexy-chat-rooms.org',         // by Lui
3431                 '.swinger-sex-chat.info',       // by Lui
3432                 '.swinger-sex-chat.org',        // by Lui
3433                 '.nasty-sex-chat.info',         // by Lui
3434                 '.nasty-sex-chat.org',          // by Lui
3435
3436                 '.camshost.info',                       // by Sergey
3437                 '.camdoors.info',                       // by Sergey
3438                 '.chatdoors.info',                      // by Sergey
3439
3440                 // 89.149.206.225 by Pronin
3441                 '.dorozhka.info',
3442                 '.kolonochka.info',
3443                 '.knizhechka.info',
3444                 '.krantik.info',
3445                 '.lebedi.info',
3446                 '.loshad.info',
3447                 '.pechenka.info',
3448                 '.porosenok.info',
3449                 '.indyushonok.info',
3450                 '.kotyonok.info',
3451                 '.kozlyonok.info',
3452                 '.magnoliya.info',
3453                 '.svinka.info',
3454                 '.svinya.info',
3455                 '.televizorchik.info',
3456                 '.tumbochka.info',
3457                 '.zherebyonok.info',
3458
3459                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3460
3461                 '.adult-cam-chat-sex.info',             // by Lee
3462                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3463                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3464                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3465                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3466                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3467                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3468                 '.sex-chat-porn-cam.info',              // by Lee
3469         ),
3470         'mital at topo20.org' => array( // by Marcello Italianore
3471                 '.trevisos.org',
3472                 '.topo20.org',
3473         ),
3474         'WellCams.com' => array(
3475                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3476                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3477                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3478         ),
3479         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3480                 '.besturgent.org',
3481                 '.googletalknow.org',
3482                 '.montypythonltd.org',
3483                 '.supersettlemet.org',
3484                 '.thepythonfoxy.org',
3485                 '.ukgamesyahoo.org',
3486                 '.youryahoochat.org',
3487         ),
3488         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3489                 '.dbsajax.org',
3490                 '.acgt2005.org',
3491                 '.gopikottoor.com',
3492                 '.koosx.org',
3493                 '.mmgz.org',
3494                 '.zhiyehua.net',
3495         ),
3496         'vdf at lovespb.com' => array(  // by Andrey
3497                 '.02psa.info',
3498                 '.1818u.org',
3499                 '.18ew.info',
3500                 '.43sexx.org',
3501                 '.56porn.org',
3502                 '.6discount.info',
3503                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3504                 '.78rus.info',
3505                 '.92ssex.org',          // "ForumGenerator"
3506                 '.93adult.org',         // "ForumGenerator"
3507                 '.aboutsr.info',
3508                 '.aboutzw.info',
3509                 '.all23.info',
3510                 '.allvdf.info',
3511                 '.buy-dge.info',
3512                 '.buypo.info',
3513                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3514                 '.cv83.info',
3515                 '.cvwifw.info',
3516                 '.dabouts.info',
3517                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3518                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3519                 '.free01sa.info',
3520                 '.frees1.info',
3521                 '.freexz.info',
3522                 '.ifree-search.org',
3523                 '.lovespb.info',
3524                 '.myso2.info',
3525                 '.nb74u.info',
3526                 '.ohhh2.info',
3527                 '.ol43.info',
3528                 '.olala18.info',
3529                 '.oursales.info',
3530                 '.pasian1.info',
3531                 '.pldk.info',
3532                 '.po473.info',
3533                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3534                 '.poz2.info',
3535                 '.qpf8j4d.info',
3536                 '.saleqw.info',
3537                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3538                 '.sexz18.info',
3539                 '.sexy69a.info',
3540                 '.shedikc.info',
3541                 '.spb78.info',
3542                 '.usacanadauk.info',
3543                 '.v782mks.info',
3544                 '.vny0.info',
3545                 '.wifes1.info',
3546                 '.xranvam.info',
3547                 '.zenitcx.info',
3548                 '.zxolala.info',
3549         ),
3550         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3551                 '.care01.info',
3552                 '.care02.info',
3553                 '.care03.info',
3554                 '.care04.info',
3555                 '.care05.info',
3556                 '.care06.info',
3557                 '.care07.info',
3558                 '.care08.info',
3559                 '.care09.info',
3560                 '.care10.info',
3561                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3562                 '.klastar01.info',
3563                 '.klastar02.info',
3564                 '.klastar03.info',
3565                 '.klastar04.info',
3566                 '.klastar05.info',
3567                 '.klastar06.info',
3568                 '.klastar07.info',
3569                 '.klastar08.info',
3570                 '.klastar09.info',
3571                 '.klastar10.info',
3572                 '.um20ax01.info',
3573                 '.um20ax02.info',
3574                 '.um20ax03.info',
3575                 '.um20ax04.info',
3576                 '.um20ax05.info',
3577                 '.um20ax06.info',
3578                 '.um20ax07.info',
3579                 '.um20ax08.info',
3580                 '.um20ax09.info',
3581                 '.um20ax10.info',
3582         ),
3583         'forrass at gmail.com' => array(        // by Ismail
3584                 '.zmh01.info',
3585                 '.zmh02.info',
3586                 '.zmh03.info',
3587                 '.zmh04.info',
3588                 '.zmh05.info',
3589                 '.zmh06.info',
3590                 '.zmh07.info',
3591                 '.zmh08.info',
3592                 '.zmh09.info',
3593                 '.zmh10.info',
3594         ),
3595         'Varsylenko Vladimir and family' => array(
3596                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3597                 // by David C. Lack (David.C.Lack at dodgeit.com)
3598                 // by Kuzma V Safonov (admin at irtes.ru)
3599                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3600                 // by LAURI FUNK (vvm_kz at rambler.ru)
3601
3602                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3603                 '.abrek.info',                          // by Petrov
3604                 '.allsexonline.info',           // by Varsylenko
3605                 '.d1rnow.info',                         // by Petrov
3606                 '.doxer.info',                          // Petrov
3607                 '.freeforworld.info',           // Varsylenko
3608                 '.goodworksite.info',           // Varsylenko
3609                 '.onall.info',                          // by Varsylenko
3610                 '.powersiteonline.info',        // by Varsylenko
3611                 '.rentmysite.info',                     // by Varsylenko
3612                 '.sexdrink.info',                       // by Petrov
3613                 '.siteszone.info',                      // by Varsylenko
3614                 '.sfup.info',                           // by Petrov
3615                 '.superfreedownload.info',      // by Varsylenko
3616                 '.superneeded.info',            // by Varsylenko
3617                 '.srup.info',                           // by Petrov
3618
3619                 // 66.235.185.143(*.svabuse.info)
3620                 '.accommodationwiltshire.com',  // by Petrov
3621                 '.levines.info',                        // by Petrov
3622                 '.sernost.info',                        // by Petrov
3623                 '.sexvideosite.info',           // by Petrov
3624                 '.vvsag.info',                          // by Petrov
3625
3626                 // 81.0.195.134
3627                 '.michost.info',                        // by LAURI
3628                 '.parther.info',                        // by LAURI
3629
3630                 // 88.214.202.100
3631                 '.gitsite.info',                        // by Petrov
3632                 '.organiq.info',                        // by Petrov
3633                 '.yoursitedh.info',                     // by Petrov
3634
3635                 // 217.11.233.58 by Petrov
3636                 '.mp3vault.info',
3637
3638                 // DNS time out or failed
3639                 '.bequeous.info',                       // by Davi
3640                 '.sopius.info',                         // by Kuzma
3641                 '.sovidopad.info',                      // by Kuzma
3642                 '.yerap.info',                          // by Kuzma
3643         ),
3644         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3645                 '.flywebs.com',
3646                 '.hostrim.com',
3647                 '.playbit.com',
3648         ),
3649         'webmaster at dgo3d.info' => array(     // by Son Dittman
3650                 '.bsb3b.info',
3651                 '.dgo3d.info',
3652                 '.dgo5d.info',
3653         ),
3654         'cooler.infomedia at gmail.com' => array(
3655                 '.diabetescarelink.com',
3656                 '.firstdebthelp.com',
3657         ),
3658         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3659                 '.pokah.lv',
3660                 '.astrons.com',
3661         ),
3662         'seocool at bk.ru' => array(    // by Skar
3663                 '.implex3.com',
3664                 '.implex6.info',
3665                 '.softprof.org',
3666         ),
3667         'Caslim.info' => array(
3668                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3669                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3670         ),
3671         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3672                 '.777-poker.biz',
3673                 '.porn-11.com',
3674         ),
3675         'Conto.pl' => array(
3676                 '.8x.pl',               // domena at az.pl 
3677                 '.3x3.pl',              // by biuro at nazwa.pl
3678                 '.conto.pl',    // by biuro at nazwa.pl
3679                 '.guu.pl',              // by conto.pl (domena at az.pl)
3680                 '.xcx.pl',              // domena at az.pl
3681                 '.yo24.pl',             // domena at az.pl
3682         ),
3683         'mail at pcinc.cn' => array(
3684                 // Domains by Lin Zhi Qiang
3685                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3686
3687                 // 125.65.112.11
3688                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3689                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3690                 '.shoopivdoor.com',
3691
3692                 // 125.65.112.12
3693                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3694                 '.hosetaibei.com',
3695                 '.playsese.com',
3696
3697                 // 125.65.112.13
3698                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3699                 '.ahatena.com',
3700                 '.asdsdgh-jp.com',
3701                 '.conecojp.net',
3702                 '.game-oekakibbs.com',
3703                 '.geocitygame.com',
3704                 '.gsisdokf.net',
3705                 '.korunowish.com',
3706                 '.netgamelivedoor.com',
3707                 '.soultakerbbs.net',
3708                 '.yahoo-gamebbs.com',
3709                 '.ywdgigkb-jp.com',
3710
3711                 // 125.65.112.14
3712                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3713                 '.acyberhome.com',
3714                 '.bbs-qrcode.com',
3715                 '.gamesroro.com',
3716                 '.gameyoou.com',
3717                 '.gangnu.com',
3718                 '.goodclup.com',
3719                 '.lineage321.com',
3720                 '.linkcetou.com',
3721                 '.love888888.com',
3722                 '.ragnarok-bbs.com',
3723                 '.ragnarok-game.com',
3724                 '.rmt-navip.com',
3725                 '.watcheimpress.com',
3726
3727                 // 125.65.112.15
3728                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3729                 '.18girl-av.com',
3730                 '.aurasoul-visjp.com',
3731                 '.gamaniaech.com',
3732                 '.game-mmobbs.com',
3733                 '.gameslin.net',
3734                 '.gemnnammobbs.com',
3735                 '.gogolineage.net',
3736                 '.grandchasse.com',
3737                 '.jpragnarokonline.com',
3738                 '.jprmthome.com',
3739                 '.maplestorfy.com',
3740                 '.netgamero.net',
3741                 '.nothing-wiki.com',
3742                 '.ourafamily.com',
3743                 '.ragnarok-sara.com',
3744                 '.rmt-lineagecanopus.com',
3745                 '.rmt-ranloki.com',
3746                 '.rogamesline.com',
3747                 '.roprice.com',
3748                 '.tuankong.com',
3749                 '.twreatch.com',
3750
3751                 // 125.65.112.22
3752                 // The same IP: web013.cdnhost.cn
3753                 '.lzy88588.com',
3754                 '.ragnaroklink.com',
3755
3756                 // 125.65.112.24
3757                 '.rmtfane.com',
3758                 '.fc2weday.com',
3759                 '.nlftweb.com',
3760
3761                 // 125.65.112.27
3762                 '.i520i.com',
3763                 '.sunwayto.com',
3764
3765                 // 125.65.112.31
3766                 // The same IP: web016.cdnhost.cn
3767                 '.twyaooplay.com',
3768
3769                 // 125.65.112.32
3770                 // The same IP: web037.cdnhost.cn
3771                 '.emeriss.com',
3772                 '.raginfoy.com',
3773                 '.ragnarokgvg.com',
3774                 '.rentalbbs-livedoor.com',
3775                 '.romaker.com',
3776                 '.sagewikoo.com',
3777                 '.samples112xrea.com',
3778                 '.wiki-house.com',
3779
3780                 // 125.65.112.49
3781                 '.chaosx0.com',
3782
3783                 // 125.65.112.88
3784                 // The same IP: web015.cdnhost.cn
3785                 '.a-hatena.com',
3786                 '.biglobe-ne.com',
3787                 '.blogplaync.com',
3788                 '.din-or.com',
3789                 '.dtg-gamania.com',
3790                 '.fcty-net.com',
3791                 '.game-fc2blog.com',
3792                 '.gameurdr.com',
3793                 '.getamped-garm.com',
3794                 '.interzq.com',
3795                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3796                 '.luobuogood.com',
3797                 '.ragnarok-search.com',
3798                 '.rinku-livedoor.com',
3799
3800                 // 125.65.112.90
3801                 '.gtvxi.com',
3802
3803                 // 125.65.112.91
3804                 // The same IP: web004.cdnhost.cn
3805                 '.6828teacup.com',
3806                 '.blog-livedoor.net',
3807                 '.cityblog-fc2web.com',
3808                 '.deco030-cscblog.com',
3809                 '.imbbs2t4u.com',
3810                 '.k5dionne.com',
3811                 '.lineagejp-game.com',
3812                 '.mbspro6uic.com',
3813                 '.slower-qth.com',
3814                 '.wikiwiki-game.com',
3815
3816                 // 125.65.112.93
3817                 // The same IP: web022.cdnhost.cn
3818                 '.aaa-livedoor.net',
3819                 '.cityhokkai.com',              // web022.cdnhost.cn
3820                 '.fanavier.net',
3821                 '.geocitylinks.com',    // web022.cdnhost.cn
3822                 '.kuronowish.net',              // web022.cdnhost.cn
3823                 '.ro-bot.net',
3824
3825                 // 125.65.112.95
3826                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3827                 '.23styles.com',
3828                 '.aehatena-jp.com',
3829                 '.ameblog-jp.net',
3830                 '.antuclt.com',
3831                 '.blog-ekndesign.com',
3832                 '.d-jamesinfo.com',
3833                 '.editco-jp.com',
3834                 '.ezbbsy.com',
3835                 '.extd-web.com',
3836                 '.fotblong.com',
3837                 '.game62chjp.net',
3838                 '.gamegohi.com',
3839                 '.gamesmusic-realcgi.net',
3840                 '.gamesragnaroklink.net',
3841                 '.homepage-nifty.com',
3842                 '.ie6xp.com',
3843                 '.irisdti-jp.com',
3844                 '.jklomo-jp.com',
3845                 '.jpxpie6-7net.com',
3846                 '.lian-game.com',
3847                 '.lineage-bbs.com',
3848                 '.lineage1bbs.com',
3849                 '.livedoor-game.com',
3850                 '.litcan.com',
3851                 '.lovejpjp.com',
3852                 '.m-phage.com',
3853                 '.muantang.com',
3854                 '.plusd-itmedia.com',
3855                 '.runbal-fc2web.com',
3856                 '.saussrea.com',
3857                 '.tooalt.com',
3858                 '.toriningena.net',
3859                 '.yahoodoor-blog.com',
3860                 '.yy14-kakiko.com',
3861
3862                 // 125.65.112.137
3863                 '.clublineage.com',
3864
3865                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3866                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3867                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3868
3869                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3870                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3871
3872                 '.games-nifty.com',             // 255.255.255.255 now
3873                 '.homepage3-nifty.com', // 255.255.255.255 now
3874         ),
3875         'caddd at 126.com' => array(
3876                 '.chengzhibing.com',    // by chen gzhibing
3877                 '.jplinux.com',                 // by lian liang
3878                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3879                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3880                 '.tooplogui.com',               // by zibing cai
3881                 '.twsunkom.com',                // by guo zhi wei
3882                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3883         ),
3884         'nuigiym2 at 163.com' => array( // by fly bg
3885                 '.linainfo.net',                // Seems IP not allocated now
3886                 '.lineagalink.com',             // 220.247.157.99
3887                 '.lineagecojp.com',             // 61.139.126.10
3888                 '.ragnarokonlina.com',  // 220.247.158.99
3889         ),
3890         'aakin at yandex.ru' => array(
3891                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3892                 '.entirestar.com',
3893                 '.superbuycheap.com',
3894                 '.topdircet.com',
3895         ),
3896         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3897                 '.tianmieccp.com',
3898                 '.xianqiao.net',
3899         ),
3900         'm.frenzy at yahoo.com' => array(       // by Michael
3901                 '.p5v.org',
3902                 '.j111.net',
3903                 '.searchhunter.info',
3904                 '.soft2you.info',
3905                 '.top20health.info',
3906                 '.top20ringtones.info',
3907                 '.top20travels.info',
3908                 '.v09v.info',
3909                 '.x09x.info',
3910                 '.zb-1.com',
3911         ),
3912         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3913                 '.bingogoldenpalace.info',
3914                 '.ccarisoprodol.info',
3915                 '.ezxcv.info',
3916                 '.isuperdrug.com',
3917                 '.pharmacif.info',
3918                 '.pornsexteen.biz',
3919                 '.ugfds.info',
3920                 '.vviagra.info',
3921         ),
3922         'anatolsenator at gmail.com' => array(  // by Anatol
3923                 '.cheapestviagraonline.info',
3924                 '.buyphentermineworld.info'
3925         ),
3926         'webmaster at mederotica.com' => array(
3927                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3928                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3929                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3930                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3931         ),
3932         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3933                 '.auase.info',          // by ilemavyq7461 at techie.com
3934                 '.axeboxew.info',       // by zygeu220 at writeme.com
3935                 '.boluzuhy.info',       // by pikico5419 at post.com
3936                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3937                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3938                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3939                 '.exidiqe.info',        // by kufyca5475 at mail.com
3940                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3941                 '.gubiwu.info',         // by lywunef6532 at iname.com
3942                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3943                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3944                 '.jiuuz.info',          // by meqil6549 at mail.com
3945                 '.nudetar.info',        // by vohepafi3536 at techie.com
3946                 '.nipud.info',          // by bohox9872 at mindless.com
3947                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3948                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3949                 '.olasep.info',         // by lizon8506 at mail.com
3950                 '.oueuidop.info',       // by arytyb6913 at europe.com
3951                 '.oviravy.info',        // by amyuu3883 at london.com
3952                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3953                 '.ragibe.info',         // by ehome4458 at myself.com
3954                 '.ucazib.info',         // by gorare7222 at consultant.com
3955                 '.udaxu.info',          // by gubima4007 at usa.com
3956                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3957                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3958                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3959                 '.yvaxat.info',         // by koqun9660 at mindless.com
3960                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3961         ),
3962         'Carmodelrank.com etc' => array(
3963                 // by Brianna Dunlord (briasmi at yahoo.com)
3964                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3965                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3966                 '.carmodelrank.com',// by Brianna
3967                 '.cutestories.net',     // by Brianna
3968                 '.sturducs.com',
3969                 '.bestother.info',      // by Tim
3970                 '.premiumcasinogames.com',      // by Brianna)
3971                 '.yaahooo.info',        // by Alice
3972         ),
3973         'aliacsandr at yahoo.com' => array(
3974                 '.cubub.info',                          // "Free Web Hosting"
3975         ),
3976         'aliacsandr85 at yahoo.com' => array(
3977                 // by Dr. Portillo or Eva Sabina Lopez Castell
3978                 '.xoomer.alice.it',                     // "Free Web Hosting"
3979                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3980                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3981                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3982                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3983                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3984                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3985                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3986                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3987                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3988                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3989                 '.viagra-price.org',            // by Eva
3990                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3991                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3992         ),
3993         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3994         'Something-Gamble' => array(
3995                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3996                 '.atonlineroulette.com',                        // by Blaise Johns
3997                 '.atroulette.com',                                      // by Gino Sand
3998                 '.betting-123.com',                                     // by Joana Caceres
3999                 '.betting-i.biz',                                       // by Joaquina Angus
4000                 '.casino-challenge.com',                        // by Maren Camara
4001                 '.casino-gambling-i.biz',                       // by Giselle Nations
4002                 '.casino-italian.com',                          // by Holley Yan
4003                 '.casino123.net',                                       // by Ta Baines
4004                 '.casinohammamet.com',                          // by Inger Barhorst
4005                 '.casinoqz.com',                                        // by Berenice Snow
4006                 '.casinos-777.net',                                     // by Iona Ayotte
4007                 '.crapsok.com',                                         // by Devon Adair,
4008                 '.dcasinoa.com',                                        // by August Hawkinson
4009                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4010                 '.free-dvd-player.biz',                         // by Rosario Kidd
4011                 '.florida-lottery-01.com',                      // by Romeo Dillon
4012                 '.gaming-123.com',                                      // by Jennifer Byrne
4013                 '.kenogo.com',                                          // by Adriane Bell
4014                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4015                 '.onbaccarat.com',                                      // by Kassandra Dunn
4016                 '.online-experts.biz',                          // by Liberty Helmick
4017                 '.onlinepoker-123.com',                         // by Andrea Feaster
4018                 '.playpokeronline-123.com',                     // by Don Lenard
4019                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4020                 '.texasholdem123.com',                          // by Savion Lasseter
4021                 '.texasholdem-777.com',                         // by Savanna Lederman
4022                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4023                 '.the-craps-100.us',                            // by Lorrine Ripley
4024                 '.the-free-online-game-913.us',         // by Kanesha Clem
4025                 '.the-free-poker-1798.us',                      // by Elaina Witte
4026                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4027                 '.the-online-game-poker-1185.us',       // by Merna Bey
4028                 '.the-playing-black-jack.com',          // by Kristine Brinker
4029                 '.the-poker-1082.us',                           // by Kristofer Boldt
4030                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4031                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4032                 '.the-video-black-jack.com',            // by Jagger Godin
4033         ),
4034         'Something-Insurance' => array(
4035                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4036         
4037                 // 0-9
4038                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4039                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4040                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4041                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4042                 '.18wkcf.com',                                  // by Lexy Bohannon
4043                 '.2001werm.org',                                // by Raphael Rayburn
4044                 '.2004heeparea1.org',                   // by Dinorah Andrews
4045                 '.21nt.net',                                    // by Jaida Estabrook
4046                 '.3finfo.com',                                  // by Damian Pearsall
4047                 '.3somes.org',                                  // by Mauro Tillett
4048                 '.453531.com',                                  // by Kurt Flannery
4049                 '.4freesay.com',                                // by Eloy Jones
4050                 '.5ssurvey.com',                                // by Annamarie Kowalski
4051                 '.8-f22.com',                                   // by Larraine Evers
4052                 '.9q.org',                                              // by Ami Boynton
4053
4054                 // A
4055                 '.a40infobahn.com',                             // by Amit Nguyen
4056                 '.a4h-squad.com',                               // by Ross Locklear
4057                 '.aac2000.org',                                 // by Randi Turner
4058                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4059                 '.acahost.com',                                 // by Milton Haberman
4060                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4061                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4062                 '.activel-learning-site.com',   // by Mateo Conn
4063                 '.ad-makers.com',                               // by Shemeka Arsenault
4064                 '.ada-information.org',                 // by Josef Osullivan
4065                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4066                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4067                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4068                 '.aerovac-hotpress.com',                // by Trey Marlow
4069                 '.agfbiosensors.com',                   // by Lionel Dempsey
4070                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4071                 '.affordablerealestate.net',    // by Season Otoole
4072                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4073                 '.ahouserefinance.com',                 // by Young Alley
4074                 '.akirasworld.com',                             // by Piper Sullivan
4075                 '.alderik-production.com',              // by Joan Stiles
4076                 '.alltechdata.com',                             // by Dom Laporte
4077                 '.amconllc.com',                                // by Syble Benjamin
4078                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4079                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4080                 '.angelandcrown.net',                   // by Claretta Najera
4081                 '.ankoralina.com',                              // by Eladia Demers
4082                 '.antiquegoldmine.com',                 // by Keena Marlow
4083                 '.aquinosotros.com',                    // by Nanci Prentice
4084                 '.architectionale.com',                 // by Wilbur Cornett
4085                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4086                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4087                 '.arefinancehome.com',                  // by Duane Doran
4088                 '.arefinancinghome.com',                // by Ike Laney
4089                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4090                 '.auction-emall-site.info',             // by Dayle Denman
4091                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4092                 '.auto-buy-rite.com',                   // by Asuncion Buie
4093                 '.axxinet.net',                                 // by Roberta Gasper
4094                 '.azimutservizi.com',                   // by Ethelene Brook
4095                 '.azstudies.org',                               // by Bernardina Walden
4096
4097                 // B
4098                 '.babtrek.com',                                 // by Simonette Mcbrayer
4099                 '.babycujo.com',                                // by Francisco Akers
4100                 '.bakeddelights.com',                   // by Dave Evenson
4101                 '.bbcart.com',                                  // by Lucio Hamlin
4102                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4103                 '.best-digital-phone.us',               // by Meghann Crockett
4104                 '.bjamusements.com',                    // by Lurlene Butz
4105                 '.blursgsu.com',                                // by Weston Killian
4106                 '.bookwide.net',                                // by Tequila Zacharias
4107                 '.boreholes.org',                               // by Flora Reed
4108                 '.breathingassociaiton.org',    // by Alfred Crayton
4109                 '.birdingnh.com',                               // by Donald Healy
4110                 '.bisdragons.org',                              // by Lupe Cassity
4111                 '.blcschools.net',                              // by Alycia Jolly
4112                 '.bronte-foods.com',                    // by Kary Pfeiffer
4113                 '.buckscountyneighbors.org',    // by Maile Gaffney
4114                 '.buffalofudge.com',                    // by Mable Whisenhunt
4115                 '.burlisonforcongress.com',             // by Luann King
4116                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4117                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4118
4119                 // C
4120                 '.cabanes-web.com',                             // by Vaughn Latham
4121                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4122                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4123                 '.checaloya.com',                               // by Susana Coburn
4124                 '.calvarychapelrgvt.org',               // by Karan Kittle
4125                 '.cameras-esite.info',                  // by Karlee Frisch
4126                 '.cancerkidsforum.org',                 // by Samson Constantino
4127                 '.ccchoices.org',                               // by Kenia Cranford
4128                 '.ccupca.org',                                  // by Evonne Serrano
4129                 '.celebratemehome.com',                 // by Soraya Tower
4130                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4131                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4132                 '.choose-shoes.net',                    // by Geoffrey Setser
4133                 '.churla.com',                                  // by Ollie Wolford
4134                 '.circuithorns.co.uk',                  // by Nathanial Halle
4135                 '.clanbov.com',                                 // by Donell Hozier
4136                 '.cnm-ok.org',                                  // by Thalia Moye
4137                 '.coalitioncoalition.org',              // by Ned Macklin
4138                 '.consoleaddicts.com',                  // by Dorla Hoy
4139                 '.counterclockwise.net',                // by Melynda Hartzell
4140                 '.codypub.com',                                 // by Mercedes Coffman
4141                 '.comedystore.net',                             // by Floy Donald
4142                 '.covsys.co.uk',                                // by Abby Jacey
4143                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4144                 '.craftybidders.com',                   // by Dannie Lazo
4145                 '.credit-card-finder.net',              // by Mellie Deherrera
4146                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4147                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4148                 '.ctwine.org',                                  // by Hailey Knox
4149
4150                 // D
4151                 '.dazyation.com',                               // by Louis Strasser
4152                 '.deepfoam.org',                                // by Ethelyn Southard
4153                 '.debt-fixing.com',                             // by Dagny Rickman
4154                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4155                 '.domainadoption.com',                  // by Breann Pappas
4156                 '.diannbomkamp.com',                    // by Russel Croteau
4157                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4158                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4159                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4160                 '.digital-cameras-esite.info',  // by Milan Jolin
4161                 '.dnstechnet.net',                              // by Tamera Oman
4162                 '.drivenbydata.org',                    // by Katherine Noyes
4163                 '.dtmf.net',                                    // by Micki Slayton
4164                 '.domainsfound.com',                    // by Blossom Lively
4165
4166                 // E
4167                 '.ecstacyabuse.net',                    // by Alana Knight
4168                 '.e-digital-camera-esite.info', // by Romaine Cress
4169                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4170                 '.eldorabusecenter.org',                // by Annabella Oneal
4171                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4172                 '.encaponline.com',                             // by Patrick Keel
4173                 '.ez-shopping-online.com',              // by Gail Bartlett
4174
4175                 // F
4176                 '.faithfulwordcf.com',                  // by Bart Weeks
4177                 '.fammedassoc.com',                             // by Joshua Nelson
4178                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4179                 '.f00k.org',                                    // by Leslie Chapman
4180                 '.foreignrealtions.org',                // by Krystal Hawley
4181                 '.fortwebsite.org',                             // by Kristina Motley
4182                 '.fotofirstdigital.com',                // by Tad Whitfield
4183                 '.foundationcommons.org',               // by Caryn Eskew
4184                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4185                 '.freaky-cheats.com',                   // by Al Klein
4186                 '.free--spyware.com',                   // by Nikki Contreras
4187                 '.french-home-finance-consultant.info', // by Santana Melton
4188                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4189
4190                 // G
4191                 '.gaintrafficfast.com',                 // by Lila Meekins
4192                 '.gaygain.org',                                 // by Shell Davila
4193                 '.gcaaa.com',                                   // by Vallie Jaworski
4194                 '.generalsysteme.com',                  // by Cale Vogel
4195                 '.generation4games.co.uk',              // by Sonya Graham
4196                 '.german-dictionary.us',                // by Rex Daniel
4197                 '.gilmerrec.com',                               // by Leighann Guillory
4198                 '.glenthuntly-athletics.com',   // by Julee Hair
4199                 '.glorybaskets.com',                    // by Lynette Lavelle
4200                 '.goconstructionloan.com',              // by Willis Monahan
4201                 '.gohireit.com',                                // by Bertha Metzger
4202                 '.godcenteredpeople.com',               // by Jaycee Coble
4203
4204                 // H
4205                 '.healthinsuranceem.com',               // by Justin Munson
4206                 '.hearthorizon.info',                   // by Kory Session
4207                 '.hegerindustrial.com',                 // by Toni Wesley
4208                 '.herzequip.com',                               // by Princess Dunkle
4209                 '.hglcms.org',                                  // by Gladwin Ng
4210                 '.hipanoempresa.com',                   // by Shannon Staub
4211                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4212                 '.horse-racing-result.com',             // by Rodney Reynolds
4213                 '.hueckerfamily.com',                   // by Hershel Sell
4214
4215                 // I
4216                 '.ilove2win.com',                               // by Lamont Dickerson
4217                 '.ilruralassistgrp.org',                // by Moises Hauser
4218                 '.imageonsolutions.com',                // by Porsche Dubois
4219                 '.infoanddatacenter.com',               // by Eva Okelley
4220                 '.islamfakta.org',                              // by Goldie Boykin
4221                 '.ithomemortgage.com',                  // by Adelaide Towers
4222                 '.iyoerg.com',                                  // by Madyson Gagliano
4223
4224                 // J
4225                 '.jeffaxelsen.com',                             // by Daphne William
4226                 '.jeffreyf.net',                                // by Vito Platt
4227                 '.johnmartinsreality.com',              // by Pamela Larry
4228                 '.johnsilvers.net',                             // by Silver Battaglia
4229
4230                 // K
4231                 '.kcgerbil.org',                                // by Marisa Thayer
4232                 '.kdc-phoenix.com',                             // by Salma Shoulders
4233                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4234                 '.kosove.org',                                  // by Darwin Schneider
4235
4236                 // L
4237                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4238                 '.letsgokayaking.net',                  // by Winnie Adair
4239                 '.libertycabs.com',                             // by Adela Bonds
4240                 '.liquor-store-cellar.info',    // by Hugh Pearson
4241                 '.locomojo.net',                                // by Marco Harmon
4242                 '.lodatissimo.com',                             // by Adrian Greeson
4243                 '.lsawc.org',                                   // by Lara Han
4244                 '.lycos-test.net',                              // by Rigoberto Oakley
4245
4246                 // M
4247                 '.macro-society.com',                   // by Venessa Hodgson
4248                 '.marthasflavorfest.com',               // by Ahmad Lau
4249                 '.martin-rank.com',                             // by Cathleen Crist
4250                 '.maryandfrank.org',                    // by Theodore Apodaca
4251                 '.masterkwonhapkido.com',               // by Misty Graham
4252                 '.maxrpm-demo.com',                             // by Cristal Cho
4253                 '.mechanomorphic.com',                  // by Stanford Crow
4254                 '.mepublishing.net',                    // by Karly Fleenor
4255                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4256                 '.metwahairports.com',                  // by Nan Kitchen
4257                 '.middle-eastnews.com',                 // by Tybalt Altmann
4258                 '.mikepelchy.com',                              // by Sherly Pearson
4259                 '.milpa.org',                                   // by Nelly Aguilera
4260                 '.modayun.com',                                 // by Camilla Velasco
4261                 '.moonstoneerp.com',                    // by Garret Salmon
4262                 '.morosozinho.com',                             // by Lenore Tovar
4263                 '.morphadox.com',                               // by Hung Zielinski
4264                 '.moscasenlared.com',                   // by Tera Gant
4265                 '.sdjavasig.com',                               // by Gia Swisher
4266                 '.mpeg-radio.com',                              // by Sincere Beebe
4267                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4268                 '.mtseniorcenter.org',                  // by Frederic Ortega
4269                 '.mysteryclips.com',                    // by Edward Ashford
4270
4271                 // N
4272                 '.naavs.org',                                   // by Yuridia Gandy
4273                 '.naval-aviation.org',                  // by Roselle Campo
4274                 '.navigare-ischia.com',                 // by Arielle Coons
4275                 '.ncredc.org',                                  // by Brenda Nye
4276                 '.neonmotorsports.com',                 // by Giovanna Vue
4277                 '.nf-ny.com',                                   // by Yadira Hibbard
4278                 '.ngfdyqva.com',                                // by Emiliano Samples
4279                 '.nicozone.com',                                // by Blaine Shell
4280                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4281                 '.npawny.org',                                  // by Willard Murphy
4282                 '.nysdoed.org',                                 // by Elric Delgadillo
4283                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4284                 '.nytech-ir.com',                               // by Adrien Beals
4285
4286                 // O
4287                 '.oadmidwest.com',                              // by Gavin Kaplan
4288                 '.oarauto.com',                                 // by Susann Merriman
4289                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4290                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4291                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4292                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4293                 '.online-pills-24x7.biz',               // by Aide Hallock
4294                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4295                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4296                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4297                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4298                 '.otterbayweb.com',                             // by Maxwell Irizarry
4299
4300                 // P
4301                 '.painting-technique.us',               // by Bryanna Tooley
4302                 '.pakamrcongress.com',                  // by Bryce Summerville
4303                 '.patabney.com',                                // by Kailyn Slone
4304                 '.parde.org',                                   // by Ellie Yates
4305                 '.participatingprofiles.com',   // by Jaelynn Meacham
4306                 '.partnershipconference.org',   // by Alla Floyd
4307                 '.pet-stars.com',                               // by Carmon Luevano
4308                 '.planning-law.org',                    // by Trista Holcombe
4309                 '.ppawa.com',                                   // by Evonne Scarlett
4310                 '.precisionfilters.net',                // by Faustina Fell
4311
4312                 // Q
4313                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4314                 '.quick-debt-consolidation.net',        // by Lala Marte
4315                 '.quicktvr.com',                                // by Vernell Crenshaw
4316
4317                 // R
4318                 '.radicalsolutions.org',                // by Reece Medlin
4319                 '.randallburgos.com',                   // by Bradly Villa
4320                 '.rcassel.com',                                 // by Janiah Gallant
4321                 '.rearchitect.org',                             // by Marcus Gaudet
4322                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4323                 '.reprisenashville.com',                // by Hester Khan
4324                 '.reptilemedia.com',                    // by Alicia Patel
4325                 '.resellers2000.com',                   // by Dedra Kennedy
4326                 '.reverse-billing.com',                 // by Lazaro Gluck
4327                 '.richcapaldi.com',                             // by Kya Haggard
4328                 '.richformissouri.com',                 // by Alanna Elston
4329                 '.robstraley.com',                              // by Leida Bartell
4330                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4331                 '.rpgbbs.com',                                  // by Leonel Peart
4332                 '.ruralbusinessonline.org',             // by Lynsey Watters
4333                 '.ruwomenscenter.org',                  // by Vince Mclemore
4334                 '.ryanjowens.com',                              // by Janine Smythe
4335
4336                 // S
4337                 '.sagarmathatv.org',                    // by Liam Funke
4338                 '.sakyathubtenling.org',                // by Liane Falgout
4339                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4340                 '.sandishaven.com',                             // by Lino Soloman
4341                 '.scienkeen.com',                               // by Liza Navarra
4342                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4343                 '.severios.com',                                // by Isa Steffen
4344                 '.sexual-hot-girls.com',                // by Viviana Bolton
4345                 '.shakespearelrc.com',                  // by Luciana Weaver
4346                 '.shashran.org',                                // by Adriel Humphries
4347                 '.shoes-shop.us',                               // by Austen Higginbotham
4348                 '.skagitvalleybassanglers.com', // by Necole Thiele
4349                 '.skinsciencesalon.com',                // by Nena Rook
4350                 '.smartalternative.net',                // by Nicki Lariviere
4351                 '.sml338.org',                                  // by Nickole Krol
4352                 '.smogfee.com',                                 // by Sienna Kimble
4353                 '.sneakers-e-shop.info',                // by Nikki Fye
4354                 '.spacewavemedia.com',                  // by Thanh Gast
4355                 '.softkernel.com',                              // by Nicol Hummer
4356                 '.stjoanmerrillville.com',              // by Hunter Beckham
4357                 '.strelinger.com',                              // by Arron Highsmith
4358                 '.striking-viking.com',                 // by Kylie Endsley
4359                 '.sunnydeception.org',                  // by Amaya Llora
4360                 '.sunzmicro.com',                               // by Goddard Arreola
4361                 '.sv-iabc.org',                                 // by Braden Buck
4362                 '.sykotick.com',                                // by Pierce Knecht
4363
4364                 // T
4365                 '.tbody.net',                                   // by Ormond Roman
4366                 '.the-pizzaman.com',                    // by Mario Ramsey
4367                 '.the-shoes.us',                                // by Alejandro Gaffney
4368                 '.theborneocompany.com',                // by Bryanna Tooley
4369                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4370                 '.thehomeschool.net',                   // by September Concepcio
4371                 '.thenewlywed.com',                             // by Allegra Marra
4372                 '.tigerspice.com',                              // by Denis Mosser
4373                 '.tnaa.net',                                    // by Jasmine Andress
4374                 '.top-finance-sites.com',               // by Maryann Doud
4375                 '.tradereport.org',                             // by Bettie Sisk
4376                 '.transmodeling.com',                   // by Martine Button
4377                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4378                 '.tsaoc.com',                                   // by Heriberto Mcfall
4379                 '.tsunamidinner.com',                   // by Nannie Richey
4380
4381                 // U
4382                 '.uhsaaa.com',                                  // by Risa Herbert
4383                 '.ultradeepfield.org',                  // by Bobby Ragland
4384                 '.umkclaw.info',                                // by Cammy Kern
4385                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4386                 '.usa-wolf.com',                                // by Jacklyn Morrill
4387                 '.usjobfair.com',                               // by Lorina Burchette
4388
4389                 // V
4390                 '.vacancesalouer.com',                  // by Loris Bergquist
4391                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4392                 '.valleylibertarians.org',              // by Lena Massengale
4393                 '.vanderbiltevents.com',                // by Gannon Krueger
4394                 '.vanwallree.com',                              // by Michelina Donahue
4395                 '.vcertificates.com',                   // by Hyun Lamp
4396                 '.vonormytexas.us',                             // by Suzette Waymire
4397
4398                 // W
4399                 '.washingtondc-areahomes.net',  // by Ailene Broome
4400                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4401                 '.wolsaoh.org',                                 // by Daniela English
4402                 '.worldpropertycatalog.com',    // by Aray Baxter
4403
4404                 // Y
4405                 '.yankee-merchants.com',                // by Jackson Hinojosa
4406                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4407                 '.yourdomainsource.com',                // by Deems Weingarten
4408
4409                 // Z
4410                 '.zkashan.com',                                 // by Evan Light
4411                 '.zockclock.com',                               // by Dorothea Guthrie
4412         ),
4413         'Something-Drugs' => array(
4414                 // Drugs / Pills / Diet
4415                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4416                 '.abdelghani-shady.com',                // by Elly Alton
4417                 '.bangbangfilm.com',                    // by Davin Chou
4418                 '.centroantequera.com',                 // by Keon Kwiatkowski
4419                 '.champagne-cellar.info',               // by Kandis Rizzo
4420                 '.chix0r.org',                                  // by Christoper Baird
4421                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4422                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4423                 '.fast-cash-01.com',                    // by Edgar Oliver
4424                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4425                 '.fn-nato.com',                                 // by Donny Dunlap
4426                 '.gqyinran.com',                                // by Alejandro Parks
4427                 '.juris-net.com',                               // by Rachelle Bravo
4428                 '.leftpencey.com',                              // by Aileen Ashby
4429                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4430                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4431                 '.palaceroyale.net',                    // by Brycen Stebbins
4432                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4433                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4434                 '.yukissushi.com',                              // by Donell Hozier
4435         ),
4436         'Something-Others' => array(
4437                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4438                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4439         ),
4440         'Something-NoApp' => array(
4441                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4442                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4443                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4444                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4445                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4446         ),
4447         'Cortez and family' => array(
4448                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4449                 '.dronadaarsujf.info',  // by Cortez
4450                 '.fromnananaref.info',  // by Cortez
4451                 '.goorkkjsaka.info',    // by Cortez
4452                 '.jkdfjjkkdfe.info',    // by Rico
4453                 '.jkllloldkjsa.info',   // by Cortez
4454                 '.nnjdksfornms.info',   // by Rico
4455                 '.mcmdkkksaoka.info',   // by Cortez
4456                 '.srattaragfon.info',   // by Cortez
4457                 '.yreifnnonoom.info',   // by Rico
4458                 '.zjajjsvgeuds.info',   // by Cortez
4459         ),
4460         'admin at ematuranza.com' => array(
4461                 '.ancorlontano.com',
4462                 '.dentroallago.com',
4463                 '.digiovinezza.com',
4464                 '.ematuranza.com',
4465                 '.ilfango.com',
4466                 '.nullarimane.com',
4467                 '.questaimmensa.com',
4468                 '.tentailvolo.com',
4469                 '.unatenerezza.com',
4470                 '.volgondilettose.com',
4471         ),
4472         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4473                 '.bid99df.info',
4474                 '.bj498uf.info',
4475                 '.edeuj84.info',
4476                 '.f4mfid.info',
4477                 '.g4vf03a.info',
4478                 '.j09j4r.info',
4479                 '.jv4r8hv.info',
4480                 '.k43sd3.info',
4481                 '.k4r84d.info',
4482                 '.k4rvda.info',
4483                 '.k4v0df.info',
4484                 '.k903os.info',
4485                 '.k9df93d.info',
4486                 '.kv94fd.info',
4487                 '.ksjs93.info',
4488                 '.l0ks03.info',
4489                 '.l9u3jc.info',
4490                 '.lv043a.info',
4491                 '.nh94h9.info',
4492                 '.m94r9d.info',
4493                 '.s87fvd.info',
4494                 '.v3k0d.info',
4495                 '.v4r8j4.info',
4496                 '.vf044s.info',
4497                 '.vj49rs.info',
4498                 '.vk498j.info',
4499                 '.u03jow.info',
4500         ),
4501         'Nikhil and Brian' => array(
4502                 // by Brian Dieckman (info at iudndjsdhgas.info)
4503                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4504                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4505                 '.ihfjeswouigf.info',   // by Brian, / was not found
4506                 '.iudndjsdhgas.info',   // by Brian, / was not found
4507                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4508                 '.jiatdbdisut.info',    // by Brian, / was not found
4509                 '.jkfierwoundhw.info',  // by Brian, / was not found
4510                 '.kfjeoutweh.info',             // by Brian, / was not found
4511                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4512                 '.oudjskdwibfm.info',   // by Brian, / was not found
4513                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4514                 '.itxbsjacun.info',             // by Nikhil, / was not found
4515                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4516                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4517                 '.najedncdcounrd.info', // by Nikhil, / was not found
4518                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4519                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4520                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4521                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4522                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4523                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4524                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4525                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4526                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4527         ),
4528         'wealth777 at gmail.com' => array(      // by Henry Ford
4529                 '.brutal-forced.com',
4530                 '.library-bdsm.com',
4531                 '.rape-fantasy.us',
4532         ),
4533         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4534                 '.purerotica.com',
4535                 '.richsex.com',
4536                 '.servik.net',
4537                 '.withsex.com',
4538         ),
4539         'dreamteammoney.com' => array(
4540                 '.dreamteammoney.com',  // dtmurl.com related
4541                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4542         ),
4543         'KLIK VIP Search and family' => array(
4544                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4545                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4546                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4547                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4548                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4549                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4550                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4551         ),
4552         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4553                 '.antivirs.info',
4554                 '.antivirus1.info',
4555                 '.antivirus2.info',
4556         ),
4557         'wasam at vangers.net and family' => array(
4558         
4559                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4560                 '.bahatoca.org',
4561                 '.digestlycos.org',
4562                 '.educativaanale.info',
4563                 '.guildstuscan.org',
4564                 '.isaakrobbins.info',
4565                 '.isfelons.org',
4566                 '.lvwelevated.org',
4567                 '.macphersonaca.org',
4568                 '.markyaustrian.org',
4569                 '.michelepug.org',
4570                 '.opalbusy.info',
4571                 '.quijotebachata.info',
4572                 '.salthjc.info',
4573                 '.shogunnerd.info',
4574                 '.solarissean.org',
4575                 '.sparkgsx.info',
4576                 '.tarzanyearly.org',
4577                 '.tulabnsf.org',
4578                 '.vaccarinos.org',
4579
4580                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4581                 '.e2007.info',
4582                 '.cmoss.info',
4583
4584                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4585                 '.finddesk.org',
4586                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4587                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4588                 '.rcatalog.org',
4589                 '.sbitzone.org',
4590
4591                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4592                 '.cheapns.org',
4593                 '.my-top.net',
4594                 '.sfind.net',
4595                 '.sspot.net',
4596                 '.suvfind.info',
4597
4598                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4599                 '.trumber.com',
4600
4601                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4602                 '.blogduet.org',
4603                 '.carelf.info',
4604                 '.cmagic.org',  
4605                 '.cspell.org',
4606                 '.dspark.org',
4607                 '.dtonic.org',
4608                 '.mcharm.info',
4609                 '.mslook.info',
4610                 '.phpdinnerware.info',
4611                 '.rnation.org',
4612                 '.uzing.org',
4613
4614                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4615                 '.allbar.info',
4616                 '.allersearch.org',
4617                 '.allzoom.org',
4618                 '.dynall.org',
4619                 '.fastopia.org',
4620                 '.offasfast.info',
4621                 '.rblast.org',
4622                 '.rchistes.info',
4623                 '.rette.org',
4624                 '.shufflequince.org',
4625                 '.suvlook.org',
4626
4627                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4628                 '.290cabeza.org',
4629                 '.bossierpainted.org',
4630                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4631                 '.definekonica.info',   // Admin: tvaals at vangers.net
4632                 '.gradetelemundo.info',
4633                 '.hydraulickin.info',
4634                 '.indicadorestmj.info',
4635                 '.keeleykincaid.org',
4636                 '.kleenbowser.info',
4637                 '.pipnickname.info',
4638                 '.pacolily.org',
4639                 '.redeemtrabalho.info',
4640                 '.scanmakerchua.info',
4641                 '.titanmessina.info',
4642                 '.tragratuit.org',
4643                 '.yeareola.info',
4644         ),
4645         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4646                 '.canadianmedsworld.info',      // 84.252.133.112
4647                 '.tabsdrugstore.info',          // 84.252.133.114
4648                 '.tabsstore.info',                      // 84.252.133.114
4649                 '.topcholesterol.info',         // 84.252.133.132
4650         ),
4651         'be.cx' => array(
4652                 '.be.cx',
4653                 '.ca.cx',
4654         ),
4655         'john780321 at yahoo.com' => array(     // by John  Brown
4656                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4657                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4658                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4659         ),
4660         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4661                 '.bertela.info',
4662                 '.forblis.info',
4663                 '.frenallo.info',
4664                 '.goyahoo.info',
4665                 '.herbak.info',
4666                 '.kiokast.info',
4667                 '.nerenok.info',
4668                 '.pestgets.info',
4669                 '.snukker.info',
4670                 '.thegetspons.info',
4671         ),
4672         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4673                 '.bobop.info',
4674                 '.kwwwe.info',
4675                 '.piikz.info',
4676                 '.moosm.info',
4677                 '.vvvw.info',
4678         ),
4679         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4680                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4681                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4682                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4683                 '.jplingood.com',       // 125.65.112.15
4684                 '.linenew.com',         // 203.191.148.96
4685                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4686                 '.yzlin.com',           // 220.162.244.36
4687         ),
4688         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4689                 '.1111mb.com',
4690                 '.2sex18.com',
4691                 '.69porn1.com',
4692         ),
4693         'ECTechnology' => array(
4694                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4695                 '.auto-mouse.com',              // "Copyright Ã’$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4696                 '.automouse.jp',
4697         ),
4698         'lyqz at 21cn.com' => array(
4699                 '.japangame1.com',
4700                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4701                 '.livedoor1.com',
4702                 '.ragnarokonline1.com',
4703                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4704         ),
4705         'kingrou at hotmail.com' => array(      // by yangjianhe
4706                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4707                 '.453787.com',
4708         ),
4709         'anpaul541000 at 163.com' => array(     // by su qiuqing
4710                 '.cetname.com',                 // 222.77.185.87
4711                 '.jpgamer.net',                 // 220.247.157.106
4712                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4713                 '.lovejptt.com',                // 222.77.185.87
4714                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4715                 '.playncsoft.net',              // 220.247.157.106
4716         ),
4717         'abc00613 at 163.com' => array( // by guo yong
4718                 '.avtw1068.com',                // 64.74.223.11
4719                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4720                 '.djkkk66990.com',              // 68.178.232.99
4721                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4722         ),
4723         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4724                 '.cmonfofo.com',
4725                 '.discutbb.com',
4726         ),
4727         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4728                 '.preca.info',
4729                 '.skiaggi.info',
4730                 '.scrianal.info',
4731                 '.tageom.info',
4732         ),
4733         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4734                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4735                 '.inpros.net',                  // 202.181.98.79
4736                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4737         ),
4738         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4739                 '.ec51.com',
4740                 '.ec51.net',
4741         ),
4742         'abbevillelaties at yahoo.fr etc' => array(
4743                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4744                 '.ringtones-rate.com',  
4745                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4746                 '.special-ringtones.net',
4747         ),
4748         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4749                 '.1sgsc.info',
4750                 '.3h4r89h.info',
4751                 '.3v44dd.info',
4752                 '.6rfuh6.info',
4753                 '.84hd8.info',
4754                 '.94bui89.info',
4755                 '.agysb3.info',
4756                 '.asdjhs.info',
4757                 '.bcvnrth.info',
4758                 '.bheb4r.info',
4759                 '.bhiuno.info',
4760                 '.biug7g.info',
4761                 '.bjb5f4.info',
4762                 '.bob8g7g.info',
4763                 '.br89bdd.info',
4764                 '.bsa3h.info',
4765                 '.bsieb8.info',
4766                 '.basbiubf.info',
4767                 '.bobwwfs2.info',
4768                 '.ciuv9t.info',
4769                 '.dbmdx4.info',
4770                 '.dbrjms.info',
4771                 '.dbtcm.info',
4772                 '.dff9ghu.info',
4773                 '.dfshbb.info',
4774                 '.dgd4ffdh.info',
4775                 '.dh3ge.info',
4776                 '.duc86jh.info',
4777                 '.ergth45.info',
4778                 '.f78bf7ffb.info',
4779                 '.gbdfbo4.info',
4780                 '.ger45.info',
4781                 '.gnvnrrg.info',
4782                 '.h47he7.info',
4783                 '.h488hbd4.info',
4784                 '.hd72b94.info',
4785                 '.he74b7.info',
4786                 '.hfujfnr.info',
4787                 '.husdhd42.info',
4788                 '.hbwje.info',
4789                 '.itg87gji.info',
4790                 '.iugiougiuh.info',
4791                 '.jhd4f4aa.info',
4792                 '.jshd73.info',
4793                 '.krhpgd.info',
4794                 '.lyihjn.info',
4795                 '.nfyjnfj.info',
4796                 '.oihbv.info',
4797                 '.os44fvs.info',
4798                 '.sdfsd3.info',
4799                 '.sdiug4.info',
4800                 '.sdkufhh.info',
4801                 '.sdugb4f.info',
4802                 '.skdbf.info',
4803                 '.sipiv78.info',
4804                 '.sudbfb.info',
4805                 '.tymbbmy.info',
4806                 '.uilhjk.info',
4807                 '.vi87vub.info',
4808                 '.vfuyf87f.info',
4809                 '.viyvvj877.info',
4810                 '.w7fc8eu.info',
4811                 '.wefg43g.info',
4812                 '.xbrch78e.info',
4813                 '.ywsfu.info',
4814                 '.zxcbiv.info',
4815         ),
4816         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4817                 '.abofios.info',
4818                 '.amlekfn.info',
4819                 '.amlkdoie.info',
4820                 '.amkslewq.info',
4821                 '.alemfu.info',
4822                 '.aloweks1.info',
4823                 '.alposd3.info',
4824                 '.bamhpb.info',
4825                 '.bhjkb.info',
4826                 '.bjqnj.info',
4827                 '.cvcxcbhpr.info',
4828                 '.czoypaiat.info',
4829                 '.dbpmgc.info',
4830                 '.dgvogrxs.info',
4831                 '.dldksf.info',
4832                 '.dlor6za.com',
4833                 '.dmkoiew.info',
4834                 '.eewrefr.info',
4835                 '.eladne.info',
4836                 '.elksem.info',
4837                 '.elwpod.info',
4838                 '.emlwkdnr.info',
4839                 '.esgmyqk.info',
4840                 '.fauqv.info',
4841                 '.fgxkgy.info',
4842                 '.fhryns.info',
4843                 '.fj38n4g.info',
4844                 '.fjnesal.info',
4845                 '.fmkfoe.info',
4846                 '.fqkcfldtr.info',
4847                 '.fwcigpdwz.info',
4848                 '.fyhik.info',
4849                 '.glrkje.info',
4850                 '.gwkslfq.info',
4851                 '.gwjracvh.info',
4852                 '.hihopepe.info',
4853                 '.hwlyggbkw.info',
4854                 '.hmwbfw.info',
4855                 '.hthyeb.info',
4856                 '.iaofkyaw.info',
4857                 '.uldkxuiw.info',
4858                 '.is7c6w4.info',
4859                 '.ivuddhdk.info',
4860                 '.jgfndjem.info',
4861                 '.jgmdlek.info',
4862                 '.jkrnvmpad.info',
4863                 '.jqujn.info',
4864                 '.jvgmmba.info',
4865                 '.kbaur.info',
4866                 '.kgjindptv.info',
4867                 '.kleo7s9.info',
4868                 '.lezfgam.info',
4869                 '.lfaasy.info',
4870                 '.ljpdjki.info',
4871                 '.lmnpis.info',
4872                 '.lpzcu2f.info',
4873                 '.lrptn.info',
4874                 '.lursqt.info',
4875                 '.mgkabviil.info',
4876                 '.mhtknjyt.info',
4877                 '.mksuuku.info',
4878                 '.mkyky.info',
4879                 '.mloaisn.com',
4880                 '.mlsiknd.info',
4881                 '.mthqz.info',
4882                 '.nnooq.info',
4883                 '.nohhylvc.info',
4884                 '.nuprndsye.info',
4885                 '.nsoelam.info',
4886                 '.nykobczv.info',
4887                 '.nzuhli.info',
4888                 '.odyqzgylr.info',
4889                 '.oidiau.info',
4890                 '.oitzkw.info',
4891                 '.okdmrpz.info',
4892                 '.ooinziti.info',
4893                 '.ortqr.info',
4894                 '.osmkpnekv.info',
4895                 '.ozkzfih.info',
4896                 '.p3ix8wc.com',
4897                 '.piwyt.info',
4898                 '.pfkijrm.info',
4899                 '.pjktcragi.info',
4900                 '.pleoz.info',
4901                 '.plvqm73.info',
4902                 '.pqyrem.info',
4903                 '.qipgqd.info',
4904                 '.qlewixu.com',
4905                 '.qmlskme.info',
4906                 '.qtuff.info',
4907                 '.quoga.info',
4908                 '.quqz.info',
4909                 '.qzxuw.info',
4910                 '.rcaidegp.info',
4911                 '.rlkmdi.info',
4912                 '.rnsoiov.info',
4913                 '.rnwlams.info',
4914                 '.rprgkgqld.info',
4915                 '.rubqvxrn.info',
4916                 '.spqxstl.info',
4917                 '.syckoqjql.info',
4918                 '.tbirb.info',
4919                 '.thalc34.info',
4920                 '.tiabq.info',
4921                 '.tszzpjr.info',
4922                 '.tyjdyn.info',
4923                 '.twgugpns.info',
4924                 '.uaezrqp.info',
4925                 '.udlkasu.info',
4926                 '.uejncyf.info',
4927                 '.ukvflb.info',
4928                 '.ugsuv.info',
4929                 '.ukhgpcp.info',
4930                 '.urprzn.info',
4931                 '.uuhememkw.info',
4932                 '.yalc7en.info',
4933                 '.ybuid.info',
4934                 '.yhdkgfob.info',
4935                 '.ymenq.info',
4936                 '.ynlyb.info',
4937                 '.vieatlubk.info',
4938                 '.vltcaho.info',
4939                 '.wlamsiek.info',
4940                 '.wlerp.info',
4941                 '.wlmtshzi.info',
4942                 '.wmlkams.info',
4943                 '.wprqd.info',
4944                 '.wpyspszi.info',
4945                 '.xdscc.info',
4946                 '.xdvy.info',
4947                 '.xeypku.info',
4948                 '.xsrxh.info',
4949                 '.xwjyrpfe.info',
4950                 '.yxcqw.info',
4951                 '.zhbktrh.info',
4952                 '.zspepn.info',
4953                 '.zsxtz.info',
4954         ),
4955         'survi at poczta.fm and smiley' => array(
4956                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4957                 '.ppert.info',
4958                 '.pperta.info',
4959                 '.pperts.info',
4960                 '.pprtuis.info',
4961                 '.13iuey.info',         // ":>"
4962                 '.13jkhs.info',
4963                 '.13lksa.info',
4964                 '.13rxtx.info',
4965                 '.13slkd.info',
4966                 '.13zaer.info',
4967         ),
4968         'admin at esemeski.com' => array(       // by Jan Kalka
4969                 '.kxils.info',
4970                 '.kuaph.info',
4971                 '.lncdc.info',
4972                 '.lsqpd.info',
4973                 '.mczed.info',
4974                 '.npous.info',
4975                 '.obgju.info',
4976         ),
4977         'LiquidNetLimited.com' => array(
4978                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4979
4980                 // FateBack.com related
4981                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4982                 '.bebto.com',
4983                 '.fateback.com',
4984                 '.undonet.com',
4985                 '.yoll.net',
4986                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
4987
4988                 // 50webs.com                   // 64.72.112.10
4989                 // dns2.50webs.com              // 64.72.112.11
4990                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4991                 // dns2.freehostia.com  // 64.72.112.13
4992                 // serv3.freehostia.com // 64.72.112.14
4993                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4994                 // mail.50webs.com              // 64.72.112.26
4995                 // supremecenter41.com  // 64.72.112.52
4996                 // 50webs2.50webs.com   // 64.72.112.89
4997                 // supremecenter39.com  // 64.72.112.103
4998
4999                 // by LiquidNet Ltd. (support at propersupport.com)
5000                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5001                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5002                         'duoservers.com',               // 216.65.1.130
5003
5004                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5005         ),
5006         'domains at agava.com' => array(
5007                 '.h18.ru',
5008                 '.hut1.ru',
5009         ),
5010         'wlmx009 at hotmail.com' => array(
5011                 '.123lineage.com',
5012                 '.ff11-info.com',
5013                 '.lastlineage.com',
5014                 '.lineage2-ol.com',
5015                 '.lineage2006.com',
5016                 '.lineagefirst.com',
5017         ),
5018         'Zettahost.com' => array(
5019                 '.atspace.biz',         // sales at zettahost.com
5020                 '.atspace.com',         // abuse at zettahost.com
5021                 '.atspace.name',        // NS atspace.com
5022                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5023                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5024         ),
5025         'hlq9814 at 163.com' => array(
5026                 '.kotonohax.com',               // by ling bao
5027                 '.ragnarox.mobi',               // by lin bao, *.exe download
5028                 '.rokonline-jp.com',    // by hang long
5029         ),
5030         '77ch.jp' => array(
5031                 '.77ch.jp',
5032                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5033         ),
5034         'serchportal at mail.ru' => array(      // by Namu Adin
5035                 '.43fert.info',
5036                 '.belis.info',
5037                 '.bonu.info',
5038                 '.chelsite.info',
5039                 '.chparael.info',
5040                 '.cool9f.info',
5041                 '.dada2.info',
5042                 '.dorplanete.info',
5043                 '.dormonde.info',
5044                 '.dorprojet.info',
5045                 '.faciledor.info',
5046                 '.fastsearchgroup.info',
5047                 '.gerta0.info',
5048                 '.getse.info',
5049                 '.gopvl.info',
5050                 '.knopki.info',
5051                 '.propidor.info',
5052                 '.quicksearchnet.info',
5053                 '.ret5.info',
5054                 '.slimfastsearch.info',
5055                 '.virtualpvl.info',
5056                 '.vpvla.info',
5057                 '.xjdor.info',
5058                 '.zhopki.info',
5059         ),
5060         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5061                 '*.444mb.com',          // Free hosting
5062                 'urlnip.com',           // Redirection
5063         ),
5064         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5065                 '.1fasttimesatnau.info',
5066                 '.1freecybersex.info',
5067                 '.1freexxxcomics.info',
5068                 '.1fuckingmywife.info',
5069                 '.1pornpreview.info',
5070                 'www.ru',                                       // by (service at demos.ru), redirection
5071         ),
5072         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5073                 '.adultschat.info',
5074                 '.livecamonline.info',
5075                 '.webcam4u.info',
5076                 '.younghot.info',
5077         ),
5078         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5079                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5080
5081                 // 209.51.196.242
5082                 '.22web.net',
5083                 '.2kool4u.net',
5084                 '.9skul.com',
5085                 '.alojalo.info',
5086                 '.byet.net',
5087                 '.byethost2.com',
5088                 '.byethost3.com',
5089                 '.byethost4.com',
5090                 '.byethost5.com',
5091                 '.byethost6.com',
5092                 '.byethost7.com',
5093                 '.byethost8.com',
5094                 '.byethost9.com',
5095                 '.byethost10.com',
5096                 '.byethost11.com',
5097                 '.byethost12.com',
5098                 '.byethost13.com',
5099                 '.byethost14.com',
5100                 '.byethost15.com',
5101                 '.byethost16.com',
5102                 '.byethost17.com',
5103                 '.byethost18.com',
5104                 '.headshothost.net',
5105                 '.hostwq.net',
5106                 '.mega-file.net',
5107                 '.truefreehost.com',
5108
5109                 '.ifastnet.com',        // 209.51.196.243
5110
5111                 // 209.190.16.82(mx1.byet.org)
5112                 '.1sthost.org',
5113                 '.4sql.net',
5114                 '.byet.org',
5115                 '.hyperphp.com',
5116                 '.kwikphp.com',
5117                 '.my-php.net',
5118                 '.my-place.us',
5119                 '.my-webs.org',
5120                 '.netfast.org',
5121                 '.php0h.com',
5122                 '.php1h.com',
5123                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5124                 '.phpnet.us',
5125                 '.prohosts.org',
5126                 '.pro-php.org', 
5127                 '.prophp.org',
5128                 '.sprinterweb.net',
5129                 '.swiftphp.com',
5130                 '.xlphp.net',
5131
5132                 // 209.190.16.83(mx2.byet.org)
5133                 '.instant-wiki.net',
5134
5135                 // 209.190.16.84(mx3.byet.org)
5136
5137                 // 209.190.16.85(mx4.byet.org)
5138                 '.instant-blog.net',
5139                 '.instant-forum.net',
5140
5141                 '.byethost.com',                        // 209.190.18.138
5142         ),
5143         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5144                 '.analmoviesite.info',
5145                 '.bestgirlssex.info',
5146                 '.boxvagina.info',
5147                 '.cyberlivegirls.info',
5148                 '.hotredgirls.info',
5149                 '.forsexlove.info',
5150                 '.hotnudezone.info',
5151                 '.hotredpussy.info',
5152                 '.lesbians-live.info',
5153                 '.lesbians-on-cam.info',
5154                 '.onlinegirlssite.info',
5155                 '.sexloveonline.info',
5156                 '.teensexcard.info',
5157                 '.teensexdirect.info',
5158                 '.topnudesite.info',
5159                 '.vaginafree.info',     
5160                 '.webcam-show.info',
5161                 '.webcamshow.info',
5162                 '.youngsexchat.info',
5163                 '.yourcumshot.info',    
5164         ),
5165         'stocking.club at gmail.com' => array(
5166                 '.adulthotmodels.com',          // by David Zajwzran
5167                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5168                 '.cash-call.info',                      // by David Theissen
5169                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5170                 '.cheap-online-viagra.info',    // by David Theissen
5171                 '.drugcleansing.net',           // by David Zajwzran
5172                 '.men-health-zone.com',         // by David Theissen
5173                 '.purchase-viagra.info',        // by David Theissen
5174                 '.realdrunkengirls.biz',        // by David Theissen
5175                 '.sextoyslife.com',                     // by David Zajwzran
5176                 '.sexysubjects.info',           // by David Zajwzran
5177                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5178                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5179                 '.travelcardsite.info',         // by David Theissen
5180         ),
5181         'lustiq at p5com.com' => array(
5182                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5183                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5184         ),
5185         'web at 6jy.com' => array(
5186                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5187                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5188         ),
5189         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5190                 '.auto-fgen.info',
5191                 '.fast-marketing.info',
5192                 '.from-usa.info',
5193                 '.generic-pharm.info',
5194                 '.pharm-directory.info',
5195                 '.popular-people.info',
5196                 '.safe-health.info',
5197                 '.star-celebrities.info',
5198                 '.super-home-biz.info',
5199                 '.top5-auto.info',
5200                 '.top5-cars.info',
5201                 '.vip-furniture.info',
5202                 '.vip-pc.info',
5203                 '.vip-pets.info',
5204         ),
5205         'abuse at search-store.org' => array(
5206                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5207         ),
5208         'Leading Edge Marketing Inc.' => array(
5209                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5210                 '.abemedical.com',
5211                 '.attractwomennow.com',
5212                 '.bettersexmall.com',
5213                 '.buymaxoderm.com',
5214                 '.buyvprx.com',
5215                 '.genf20.com',
5216                 '.infinityhealthnews.com',
5217                 '.istnewsletter.com',
5218                 '.leadingedgecash.com',
5219                 '.leadingedgeherbals.com',
5220                 '.leadingedgevipsonly.com',
5221                 '.lecash.com',
5222                 '.leminfo.com',
5223                 '.proextendersystem.com',
5224                 '.provestra.com',
5225                 '.semenax.com',
5226                 '.shavenomore.com',
5227                 '.theedgenewsletter.com',
5228                 '.vigorelle.com',
5229                 '.vigrx.com',
5230                 '.vigrxplus.com',
5231                 '.wbstnewsletter.com',
5232         ),
5233         'clickx at bk.ru' => array(     // by Alexey Enrertov
5234                 '.coolget*.info' =>
5235                         '#^(?:.*\.)?' . 'coolget' .
5236                         '(?:bus|find|news|php|place|post|srch)' .
5237                         '\.info$#',
5238                 '.coolgirl*.info' =>
5239                         '#^(?:.*\.)?' . 'coolgirl' .
5240                         '(?:apple|fish|search)' .
5241                         '\.info$#',
5242                 '.coolmeet*.info' =>
5243                         '#^(?:.*\.)?' . 'coolmeet' .
5244                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5245                         '\.info$#',
5246                 '.cool**.info' =>
5247                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5248                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5249                         '\.info$#',
5250                 '.freseasy*.info' =>
5251                         '#^(?:.*\.)?' . 'freseasy' .
5252                         '(?:apple|click|find|fish|post|search)' .
5253                         '\.info$#',
5254                 '.fres**.info' =>
5255                         '#^(?:.*\.)?' .
5256                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5257                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5258                         '\.info$#',
5259                         // These are not found yet:
5260                         // fresgirlsrch.info
5261                         // fresadultapple.info
5262                         // fresadultclick.info
5263                         // frestheplace.info
5264
5265                 // 66.232.113.44
5266                 '.nuhost.info',
5267                 '.susearch.info',
5268
5269                 // 66.232.126.74(hv94.steephost.com)
5270                 '.dilej.com',
5271                 '.fyvij.com',
5272                 '.howus.com',
5273                 '.jisyn.com',
5274                 '.kaxem.com',
5275                 '.mihug.com',
5276                 '.mobyb.com',
5277                 '.qidat.com',
5278                 '.qihek.com',
5279                 '.ryzic.com',
5280                 '.sasuv.com',
5281                 '.tuquh.com',
5282                 '.vehyq.com',
5283                 '.wezid.com',
5284                 '.wifuj.com',
5285                 '.xijyt.com',
5286                 '.zuqyn.com',
5287         ),
5288         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5289                 '.hitsearching.info',
5290                 '.hugeamountdata.info',
5291                 '.megafasthost.info',
5292                 '.real-big-host.info',
5293                 '.search4freez.info',
5294                 '.yasech.info',
5295
5296                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5297                 '.bymire.com',
5298
5299                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5300                 '.ligiwa.com',
5301         ),
5302         'ice--man at mail.ru related' => array(
5303                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5304                 '.bestcreola.com',
5305                 '.crekatierra.com',
5306                 '.creolafire.com',
5307                 '.crolik.com',
5308                 '.croller.cn',
5309                 '.ecrmx.com',
5310                 '.eflashpoint.com',
5311                 '.exoticmed.com',
5312                 '.feelview.com',
5313                 '.greatexotic.com',
5314                 '.icrtx.com',
5315                 '.icyhip.com',
5316                 '.icyiceman.com',
5317                 '.icypopular.com',
5318                 '.iflashpoint.com',
5319                 '.justmdx.com',
5320                 '.kiliusgroup.com',
5321                 '.klickerr.com',
5322                 '.klickerrworld.com',
5323                 '.kreolic.com',
5324                 '.margansitio.com',
5325                 '.margantierra.com',
5326                 '.mimargan.com',
5327                 '.oilkeys.com',
5328                 '.planetmdx.com',
5329                 '.thekeyse.com',
5330                 '.viewgreat.com',
5331                 '.yourcreola.com',
5332                 
5333                 // 69.46.23.48
5334                 '.bestkilius.com',
5335                 '.crekadirecto.com',
5336                 '.getflashsite.com',
5337                 '.sucreka.com',
5338                 '.superkilius.com',
5339
5340                 // 69.46.23.48 by bing-16 at ftunez.org
5341                 '.bovorup.cn',
5342                 '.litotar.cn',
5343                 '.nihydec.cn',
5344                 
5345                 // 66.232.112.175 by bing-32 at ftunez.org
5346                 '.lasyxy.cn',
5347
5348                 // 69.46.23.48 by clarkson-34 at ftunez.org
5349                 '.bumora.cn',
5350                 '.byxite.cn',
5351                 '.byxuqu.cn',
5352                 '.jadama.cn',
5353                 '.kybope.cn',
5354                 '.mefeki.cn',
5355                 '.mokiso.cn',
5356                 '.niqeme.cn',
5357                 '.pukafo.cn',
5358                 '.qesaxa.cn',
5359                 '.toxezi.cn',
5360                 '.tujudy.cn',
5361                 '.tutike.cn',
5362
5363                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5364                 '.cabino.cn',
5365                 '.cuwace.cn',
5366                 '.ferazi.cn',
5367                 '.gigywy.cn',
5368                 '.lapype.cn',
5369                 '.mewabe.cn',
5370                 '.pezegy.cn',
5371                 '.pyzuza.cn',
5372                 '.qypony.cn',
5373                 '.ropesy.cn',
5374                 '.wadyfe.cn',
5375
5376                 // 69.46.23.48 clarkson-58 at ftunez.org
5377                 '.becabe.cn',
5378                 '.biciqy.cn',
5379                 '.bezymu.cn',
5380                 '.cifori.cn',
5381                 '.ciwyxi.cn',
5382                 '.dobari.cn',
5383                 '.dusofe.cn',
5384                 '.dutyda.cn',
5385                 '.dykanu.cn',
5386                 '.fakexu.cn',
5387                 '.fylema.cn',
5388                 '.godymo.cn',
5389                 '.hyhaxy.cn',
5390                 '.ganosi.cn',
5391                 '.kuxyju.cn',
5392                 '.lacezy.cn',
5393                 '.lonyru.cn',
5394                 '.lycato.cn',
5395                 '.nykyby.cn',
5396                 '.qyhuko.cn',
5397                 '.redere.cn',
5398                 '.riwimu.cn',
5399                 '.wopary.cn',
5400                 '.xizity.cn',
5401                 '.xuxusa.cn',
5402
5403                 // 69.46.23.48 by entretov-32 at ftunez.org
5404                 '.cihuji.cn',
5405                 '.deqyve.cn',
5406                 '.genefa.cn',
5407                 '.gujyju.cn',
5408                 '.hasadu.cn',
5409                 '.hedomi.cn',
5410                 '.kecicy.cn',
5411                 '.kipabo.cn',
5412                 '.manunu.cn',
5413                 '.musoru.cn',
5414                 '.myvuna.cn',
5415                 '.pikybe.cn',
5416                 '.riqawo.cn',
5417                 '.rufuxy.cn',
5418                 '.vyfilu.cn',
5419                 '.xadule.cn',
5420                 '.zolaxe.cn',
5421                 '.zerixu.cn',
5422
5423                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5424                 '.dozoda.cn',
5425                 '.nemipu.cn',
5426
5427                 // 69.46.23.48 by jeremy-57 at ftunez.org
5428                 '.duzele.cn',
5429                 '.figede.cn',
5430                 '.fiwany.cn',
5431                 '.gyfalu.cn',
5432                 '.jepylo.cn',
5433                 '.nuqumy.cn',
5434
5435                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5436                 '.burahu.cn',
5437                 '.jydijy.cn',
5438                 '.komyby.cn',
5439                 '.najepa.cn',
5440                 '.pylobu.cn',
5441                 '.qofoly.cn',
5442                 '.sybuvi.cn',
5443                 '.vycexu.cn',
5444                 '.wotyqo.cn',
5445                 '.xudoli.cn',
5446
5447                 // 66.232.112.175 by entretov-86 at ftunez.org
5448                 '.faweji.cn',
5449                 '.jypaci.cn',
5450                 '.xozuso.cn',
5451
5452                 // 69.46.23.48 by miles-37 at ftunez.org
5453                 '.beqymo.cn',
5454                 '.ceqibi.cn',
5455                 '.dyraqo.cn',
5456                 '.qenedo.cn',
5457                 '.qurypa.cn',
5458                 '.siluvo.cn',
5459                 '.tujala.cn',
5460                 '.wukuwi.cn',
5461                 '.xenibo.cn',
5462                 '.xiculo.cn',
5463                 '.zabemu.cn',
5464
5465                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5466                 '.bevaka.cn',
5467                 '.fysyte.cn',
5468                 '.guxixu.cn',
5469                 '.hatoli.cn',
5470                 '.jitobu.cn',
5471                 '.juxeca.cn',
5472                 '.kifuhy.cn',
5473                 '.licila.cn',
5474                 '.mecomy.cn',
5475                 '.niryko.cn',
5476                 '.noxoco.cn',
5477                 '.qiwysu.cn',
5478                 '.tutysy.cn',
5479
5480                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5481                 '.gywiqe.cn',
5482                 '.jotapo.cn',
5483                 '.jywixa.cn',
5484
5485                 // '69.46.23.48 by sabrosky-60 at ftunez.org
5486                 '.bawegap.cn',
5487                 '.buremyl.cn',
5488                 '.cilybut.cn',
5489                 '.cutufek.cn',
5490                 '.defypyr.cn',
5491                 '.femaxij.cn',
5492                 '.gelejo.cn',
5493                 '.gocylyv.cn',
5494                 '.kehiqaq.cn',
5495                 '.ninyjit.cn',
5496                 '.ruroruw.cn',
5497                 '.vetehow.cn',
5498
5499                 // 69.46.23.48 sabrosky-85 at ftunez.org
5500                 '.banyla.cn',
5501                 '.bubaqu.cn',
5502                 '.bygage.cn',
5503                 '.dafozy.cn',
5504                 '.kaxyjo.cn',
5505                 '.makyle.cn',
5506                 '.naleto.cn',
5507                 '.pidele.cn',
5508                 '.poqexa.cn',
5509                 '.pymaqo.cn',
5510                 '.qupiqy.cn',
5511                 '.reqefy.cn',
5512                 '.sopocy.cn',
5513                 '.vuhexo.cn',
5514                 '.weryso.cn',
5515                 '.wubula.cn',
5516                 '.xufuxy.cn',
5517                 '.zuhyxu.cn',
5518
5519                 // 69.46.23.48 by tribiani-97 at ftunez.org
5520                 '.dyxorod.cn',
5521                 '.firywoz.cn',
5522                 '.jixezyx.cn',
5523                 '.joveraw.cn',
5524                 '.jowaxup.cn',
5525                 '.nodarej.cn',
5526                 '.pimijom.cn',
5527                 '.tugupeg.cn',
5528
5529                 // 66.232.112.175 by abuse-here at inbox.ru
5530                 '.catybe.cn',
5531                 '.jytame.cn',
5532                 '.wygete.cn',
5533         ),
5534         'nijeoi at hotmai.com' => array(
5535                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5536                 '.bowij.com',
5537                 '.bozib.com',
5538                 '.cavux.com',
5539                 '.dipov.com',
5540                 '.gumoz.com',
5541                 '.hakyb.com',
5542                 '.hehyv.com',
5543                 '.hepyt.com',
5544                 '.howoj.com',
5545                 '.jywaz.com',
5546                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5547                 '.kyheq.com',
5548                 '.kyzad.com',
5549                 '.qicad.com',
5550                 '.qubyd.com',
5551                 '.mocyq.com',
5552                 '.muloq.com',
5553                 '.myxim.com',
5554                 '.nufyp.com',
5555                 '.waqog.com',
5556                 '.wyduc.com',
5557                 '.xefyv.com',
5558                 '.xomej.com',
5559                 '.xomip.com',
5560                 '.xykyl.com',
5561                 '.zakuw.com',
5562                 '.zeliw.com',
5563                 '.zimev.com',
5564                 '.zipif.com',
5565
5566                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5567                 '.tycoco.com',
5568
5569                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5570                 '.pufeqa.com',
5571         ),
5572         'niichka at hotmail.com' => array(
5573                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5574                 '.aerosearch.info',
5575                 '.freader.info',
5576                 '.info4searchz.info',
5577                 '.nice-host.info',
5578                 '.realyfast.info',
5579                 '.resuts.info',
5580
5581                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5582                 '.bepoh.com',
5583                 '.gufiq.com',
5584                 '.kedyh.com',
5585                 '.pofyb.com',
5586                 '.rurid.com',
5587                 '.vucaj.com',
5588                 '.vuwir.com',
5589
5590                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5591                 '.bejefe.com',
5592
5593                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5594                 '.tidawu.com',
5595
5596                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5597                 '.rofuqa.com',
5598         ),
5599         'porychik at hot.ee' => array(  // by Igor
5600                 '.tedstate.info',       // "Free Web Hosting"
5601                 '.giftsee.com',
5602         ),
5603         'admin at pertol.info' => array(
5604                 '.laparka.cn',          // 81.0.195.189 "Free Web Hosting"
5605                 '.mirlos.cn',           // 81.0.195.189 "Free Web Hosting"
5606                 '.pornography-world.com',               // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5607         ),
5608
5609         'aofa at vip.163.com' => array(
5610                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5611                 '.5944.net',
5612         ),
5613         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5614                 '.maxrentcar.info',
5615                 '.newsonyericsson.info',
5616                 '.pornositeworld.biz',
5617                 '.rentcarweb.info',
5618                 '.xxxdomainsex.biz',
5619         ),
5620         'kopper1970 at gmail.com' => array(
5621                 '.cardealerall.info',           // by Green
5622                 '.donatecarsales.info',         // by Sipil
5623                 '.ringtonewilly.info',          // by Sipil
5624                 '.travelstraveling.info',       // by Chinik
5625                 '.viagrabuyonline.org',         // by Sipil
5626                 '.viagraorderbuy.com',          // by Anatol
5627                 '.worldcuptourism.info',        // by Sipil
5628         ),
5629         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5630                 '.globalinfoland.info',
5631                 '.goodlifesearch.info',
5632                 '.hotnetinfo.info',
5633                 '.hotpornmovies.org',
5634                 '.infopilot.info',
5635         ),
5636         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5637                 '.bang-bro.org',
5638                 '.datinghost.info',
5639                 '.hello-craulers.info',
5640                 '.free-blog-host.info',
5641                 '.sucking-boobs.info',
5642         ),
5643         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5644                 '.allcamsguide.info',
5645                 '.camerascams.info',
5646                 '.camerasera.info',
5647                 '.girlcamsworld.info',
5648                 '.hiddenlimocams.info',
5649                 '.redlivecams.info',
5650                 '.spycamsgear.info',
5651                 '.spycamssite.info',
5652                 '.supercamsusa.info',
5653                 '.thecamsnow.info',
5654         ),
5655         '87.242.116.81' => array(
5656                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5657                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5658                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5659                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5660                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5661         ),
5662         '208.70.75.153' => array(
5663                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5664                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5665                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5666                 '.cerc-on.info',
5667                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5668                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5669                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5670                 '.cerc-tr.info',
5671                 '.cerc-tw.info',
5672                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5673                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5674                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5675                 '.cerc-on.org',         // by cerca-one at ya.ru
5676                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5677                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5678                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5679                 '.cerc-tr.org',         // by cerca-one at ya.ru
5680                 '.cerc-tw.org',         // by cerca-one at ya.ru
5681                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5682                 '.cerca-fo.info',
5683                 '.cerca-no.info',
5684                 '.cerca-on.info',
5685                 '.cerca-sv.info',
5686                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5687                 '.cerca-te.info',
5688                 '.cerca-tr.info',
5689                 '.cerca-sx.org',
5690                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5691                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5692                 '.ricerca-fo.info',
5693                 '.ricerca-one.org',
5694                 '.ricerca-sv.org',
5695                 '.ricerca-sx.org',
5696                 '.ricerca-te.org',
5697                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5698                 '.subit01.org',
5699                 '.subit02.org',
5700                 '.subit03.org',
5701                 '.subit04.org',
5702                 '.subit05.org',
5703                 '.subit06.org',
5704                 '.subit01.info',
5705                 '.subit02.info',
5706                 '.subit03.info',
5707                 '.subit04.info',
5708                 '.subit05.info',
5709                 '.subit06.info',
5710         ),
5711         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5712                 '.5-base.com',
5713                 '.pharmacy-style.com',
5714         ),
5715         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5716                 '.ista-2006.ru',
5717                 '.wefas.ru',
5718         ),
5719         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5720                 '.tourismworldsite.info',
5721                 '.yourtourismtravel.info',
5722         ),
5723         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5724                 '.easyfindcar.info',
5725                 '.siteinfosystems.info',
5726         ),
5727         'smesh1155 at gmail.com' => array(
5728                 '.hospitalforyou.info',                 // by Gimmi
5729                 '.thephentermineonline.info',   // by Kipola
5730         ),
5731         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5732                 '.kiski.net.in',
5733                 '.pipki.org.in',
5734                 '.popki.ind.in',
5735                 '.siski.co.in',
5736         ),
5737         'tiptronikmike at mail.com' => array(
5738                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5739                 // by Michael Tronik (tiptronikmike at mail.com), e.g. 
5740                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5741                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5742                 //'.i0sex.info',                // Michael
5743                 //'.i1sex.info',                // Michael
5744                 //'.i2sex.info',                // Martin
5745                 //'.i3sex.info',                // Martin
5746                 //'.i4sex.info',                // Adulterra
5747                 //'.i5sex.info',                // Adulterra
5748                 //[irvyz]6sex.info not found
5749                 '.i8sex.info',                  // by Martin
5750         ),
5751         'skuarlytronald at mail.com' => array(
5752                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5753                 '.girlsgoingmad.info',          // 64.27.13.120
5754                 '.girlsgonewildside.info',      // 64.27.13.120
5755         ),
5756         '66.232.109.250' => array(
5757                 '.1626pornporno.info',
5758                 '.1851pornporno.info',
5759                 '.1876pornporno.info',
5760                 '.476pornporno.info',
5761         ),
5762         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5763                 '.compactxxx.com',
5764                 '.eadulthost.com',
5765                 '.eadultview.com',
5766                 '.eroticpool.net',
5767                 '.ipornservice.com',
5768                 '.liveadulthost.com',
5769                 '.nudepal.com',
5770                 '.sweetservers.com',
5771         ),
5772         'support at orgija.org' => array(
5773                 '.assfuckporn.org',
5774                 '.dosugmos.org',
5775                 '.fuckporn.org',
5776                 '.girlsdosug.org',
5777                 '.girlsporno.org',
5778                 '.moscowintim.org',
5779                 '.pornass.org',
5780                 '.pornopussy.org',
5781                 '.progirlsporn.org',
5782                 '.pussypornogirls.org',
5783         ),
5784         '125.65.112.93' => array(
5785                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5786                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5787         ),
5788         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5789                 '.beta-google.com',
5790                 '.tv-reklama.info',
5791                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5792                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5793         ),
5794         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5795                 '.abobrinha.org',
5796                 '.aneurysmic.com',              // / not found
5797                 '.physcomp.org',                // / not found
5798                 '.seriedelcaribe2006.org',
5799                 '.refugeeyouthinamerica.com',
5800         ),
5801         'skip_20022 at yahoo.com' => array(
5802                 // 203.174.83.55
5803                 '.a28hosting.info',             // by Bill Jones
5804                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5805                 '.besthentai06.org',    // by yakon
5806         ),
5807         'USFINE.com' => array(
5808                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5809                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5810         ),
5811         '68.178.211.57' => array(
5812                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5813                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5814         ),
5815         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5816                 '.google-yahoo-msn.org',
5817                 '.expedia-travel.org',
5818         ),
5819         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5820                 '.emr5ce.org',
5821                 '.wfe7nv.org',
5822                 '.xyr99yx.org',
5823         ),
5824         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
5825                 '.playonlinenc.com',
5826                 '.playboss-jp.com',
5827         ),
5828         'Digi-Rock.com' => array(
5829                 '.rom776.com',
5830                 // owner-organization: DIGIROCK, INC.
5831                 // owner-email: domain-contact at digi-rock.com
5832                 // with an external ad-and-JavaScript,
5833                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
5834                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
5835         ),
5836         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
5837                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
5838                 '.getrun.cn',                           // 208.73.34.48
5839                 '.ipod-application.info',       // NO IP
5840                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
5841                 '.stonesex.info',                       // NO IP, was 74.50.97.136
5842         ),
5843         'germerts at yandex.ru' => array(
5844                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
5845                 '.andatra.info',
5846                 '.banchitos.info',
5847                 '.batareya.info',
5848                 '.blevota.info',
5849                 '.broneslon.info',
5850                 '.gamadril.info',
5851                 '.gipotenuza.info',
5852                 '.govnosaklo.info',
5853                 '.muflon.info',
5854                 '.termitnik.info',
5855         ),
5856         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
5857                 '.acronis-true-image.info',
5858                 '.calcio-xp.info',
5859                 '.cosanova.info',
5860                 '.cose-rx.info',
5861                 '.dictip.info',
5862                 '.findig.info',
5863                 '.fotonow.info',
5864                 '.lavoro-tip.info',
5865                 '.loan-homes.info',
5866                 '.mionovita.info',
5867                 '.mustv.info',
5868                 '.newsnaked.info',
5869                 '.online-tod.info',
5870                 '.opakit.info',
5871                 '.opanow.info',
5872                 '.opriton.info',
5873                 '.porta-bl.info',
5874                 '.refdif.info',
5875                 '.xzmovie.info',
5876         ),
5877         '84.252.148.120 etc' => array(
5878                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
5879                 '.planetavilton.info',  // 84.252.148.120
5880                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
5881         ),
5882         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
5883                 '.99jk.com',
5884                 '.99jk.com.cn',
5885                 '.99jk.cn',
5886         ),
5887         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
5888                 '.kliktop.biz',
5889                 '.kliktop.org',
5890                 '.pharmatop.us',
5891                 '.supertop.us',
5892                 '.supervaizer.info',
5893         ),
5894         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
5895                 '.freeamateursexx.info',        // 81.0.195.228
5896                 '.freeanalsexx.info',           // 217.11.233.97
5897                 '.freegaysexx.info',            // 81.0.195.228
5898         ),
5899         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
5900                 '.abbhi.info',
5901                 '.gayblogguide.biz',
5902                 '.huope.info',
5903                 '.thebdsmday.info',
5904                 '.zioprt.info',                 // 89.149.228.237
5905         ),
5906         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
5907                 '.boblisk.info',
5908                 '.factyri.info',
5909                 '.jorge1.info',
5910         ),
5911         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
5912                 '.bestmindstorm.org',
5913                 '.redstoreonline.org',
5914         ),
5915         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
5916                 '.8e8ae.net',
5917                 '.c-cock.com',
5918                 '.fa59eaf.com',
5919                 '.set-place.net',
5920                 '.sex-beauty.net',
5921         ),
5922         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
5923                 '.tomdir.info',
5924                 '.tomdirdirect.info',
5925                 '.tomdirworld.info',
5926                 '.treton.info',
5927                 '.trefas.info',
5928                 '.tretonmondo.info',
5929                 '.unefout.info',
5930                 '.unefoutprojet.info',
5931                 '.unitfree.info',
5932                 '.vilret.info',
5933                 '.vilttown.info',
5934                 '.votrefout.info',
5935                 '.warmfind.info',
5936                 '.warptop.info',
5937                 '.wildtram.info',
5938                 '.xofind.info',
5939                 '.xopdiscover.info',
5940                 '.xopfind.info',
5941                 '.xoplocate.info',
5942                 '.xopseek.info',
5943                 '.xpfirst.info',
5944                 '.xphighest.info',
5945                 '.xptop.info',
5946         ),
5947         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
5948                 '.myviagrasite.com',    // 80.74.153.2
5949                 '.thecanadianmeds.com', // 80.74.153.17
5950         ),
5951         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
5952                 '.bigemot.com',                         // 217.11.233.34, / not found
5953                 '.espharmacy.com',                      // 217.11.233.34
5954                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
5955                 '.ringtonecooler.com',          // 217.11.233.34
5956         ),
5957         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
5958                 '.okwit.com',           // 220.166.64.44
5959                 '.sakerver.com',        // 220.166.64.194
5960                 '.motewiki.net',        // 220.166.64.194
5961         ),
5962         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
5963                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
5964                 '.lookmedicine.info',           // 206.161.205.22
5965                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
5966                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
5967                 '.worldsitesearch.info',        // 209.8.40.59
5968         ),
5969         'lee.seery at gmail.com' => array(
5970                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
5971                 '.lingvol.com',         // 64.21.34.55
5972                 '.micevol.com',         // 64.21.34.55
5973                 '.heyhey.info',         // 64.21.34.55  by anonymous
5974         ),
5975         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
5976                 // 69-64-64-71.dedicated.abac.net
5977                 '.520-ard.info',
5978                 '.550bcards.info',
5979                 '.559-cads.info',
5980                 '.559caard.info',
5981                 '.565-caaard.info',
5982                 '.575cadr.info',
5983                 '.577cadrs.info',
5984                 '.590-acrds.info',
5985                 '.596-cadrs.info',
5986                 '.596caards.info',
5987                 '.596caaard.info',
5988                 '.asstablishingcads.info',
5989                 '.astablish-ard.info',
5990                 '.astablishcacrds.info',
5991                 '.begginers-acards.info',
5992                 '.begginersacrds.info',
5993                 '.beggingcaaard.info',
5994                 '.beginercacrds.info',
5995                 '.cacrdscreating.info',
5996                 '.caditbegging.info',
5997                 '.cadr-buildup.info',
5998                 '.cadr-establilsh.info',
5999                 '.cadrs-buildercredit.info',
6000                 '.cadrs570.info',
6001                 '.cads-565.info',
6002
6003                 // 69-64-64-113.dedicated.abac.net
6004                 '.interistacards.info',
6005                 '.intrust-ards.info',
6006                 '.intrustacrds.info',
6007                 '.lfixed-ard.info',
6008                 '.lowerate-ard.info',
6009                 '.lowpercentage-ard.info',
6010                 '.lowpercentageacrd.info',
6011         ),
6012         'acua at mail.ru' => array(
6013
6014                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6015
6016                         // by adventurer at allmyns.info
6017                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6018
6019                         // by webmaster at allmyns.info
6020                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6021                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6022                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6023                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6024                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6025                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6026                         '.riumh.cn',    // 84.16.226.28(*snip*)
6027                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6028                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6029                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6030
6031                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6032                 '.dns4babka.info',      // by acua at mail.ru
6033
6034                         // by golubcov at dns4babka.info
6035                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6036
6037                         // by webmaster at dns4babka.info
6038                         '.credh.cn',
6039                         '.fucfv.cn',
6040                         '.gdxnk.cn',
6041                         '.sqrrt.cn',
6042                         '.ywtmd.cn',
6043                         '.kncqy.cn',    // by webmaster at allmyns.info
6044
6045                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6046                 '.dedka2ns.info',       // by acua at mail.ru
6047
6048                         // by chasik at dedka2ns.info
6049                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6050
6051                         // by rochel at dedka2ns.info
6052                         '.fudhxjjqh.cn',
6053
6054                         // by webmaster at dedka2ns.info
6055                         '.ascpo.cn',
6056                         '.jgycr.cn',
6057                         '.nqdtt.cn',
6058                         '.oswde.cn',
6059                         '.qeyig.cn',
6060                         '.soqsx.cn',
6061                         '.ukncd.cn',
6062                         '.zijgb.cn',
6063
6064                 // 84.16.255.253(*snip*), / says 'noy found'
6065                 '.dns4dedka.info',      // by acua at mail.ru
6066
6067                         // by aleon at dns4dedka.info
6068                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6069
6070                         // by dig at dns4dedka.info
6071                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6072                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6073                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6074                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6075                         '.heulw.cn',    // 84.16.226.217(*snip*)
6076                         '.hissw.cn',    // 84.16.249.240(*snip*)
6077                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6078                         '.obwew.cn',    // 84.16.251.218(*snip*)
6079                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6080                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6081                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6082                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6083                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6084                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6085                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6086                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6087                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6088                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6089                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6090                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6091
6092                         // by la at dns4dedka.info
6093                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6094                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6095                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6096                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6097                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6098                         '.eothy.cn',    // 84.16.249.241(*snip*)
6099                         '.epocy.cn',    // 84.16.251.220(*snip*)
6100                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6101                         '.faacz.cn',    // 84.16.251.222(*snip*)
6102                         '.filun.cn',    // 89.149.196.72(*snip*)
6103                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6104                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6105                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6106                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6107                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6108                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6109                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6110                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6111                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6112                         '.krumo.cn',    // 84.16.226.217(*snip*)
6113                         '.lbava.cn',    // 217.20.112.102(*snip*)
6114                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6115                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6116                         '.npovm.cn',    // 84.16.226.28(*snip*)
6117                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6118                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6119                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6120                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6121                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6122                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6123                         '.qydph.cn',    // 89.149.228.163(*snip*)
6124                         '.rxens.cn',    // 89.149.196.72(*snip*)
6125                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6126                         '.srths.cn',    // 84.16.251.222(*snip*)
6127                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6128                         '.unquz.cn',    // 84.16.251.223(*snip*)
6129                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6130                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6131                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6132                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6133                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6134                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6135
6136                         // by le at dns4dedka.info
6137                         '.goslw.cn',    // 84.16.251.220(*snip*)
6138                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6139                         '.iewik.cn',    // 84.16.255.254(*snip*)
6140                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6141                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6142                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6143                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6144                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6145                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6146                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6147                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6148                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6149                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6150                         '.qniww.cn',    // 84.16.251.218(*snip*)
6151                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6152                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6153
6154                         // by skspb at dns4dedka.info
6155                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6156
6157                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6158                         '.bcpnb.cn',
6159                         '.cfbpr.cn',
6160                         '.dnndb.cn',
6161                         '.ekwme.cn',
6162                         '.iutps.cn',
6163                         '.ryftj.cn',
6164                         '.vxqcb.cn',
6165
6166                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6167                         // by apple at ns2best.info
6168                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6169                         // by paulwolf at ns2best.info
6170                         '.ifytzq.cn',
6171                 
6172                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6173                         // by pigato at sedns.info
6174                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6175                         // by roschem at sedns.info
6176                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6177         ),
6178         'gilvcta sy jilbertsbram.com' => array(
6179                 // 206.53.51.126
6180                 '.dsfljkeilm1.cn',
6181                 '.dsfljkeilm2.cn',
6182                 '.dsfljkeilm3.cn',
6183                 '.dsfljkeilm4.cn',
6184                 '.dsfljkeilm5.cn',
6185                 '.dsfljkeilm6.cn',
6186                 '.dsfljkeilm7.cn',
6187                 '.dsfljkeilm8.cn',
6188                 '.dsfljkeilm9.cn',
6189                 '.dsfljkeilm10.cn',
6190         ),
6191         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6192
6193                 // 69.64.82.76(*.dedicated.abac.net)
6194                 '.bruised-criedit.info',
6195                 '.bruised-crtedit.info',
6196                 '.bruised-czrd.info',
6197                 '.bruisedcreditcars.info',
6198                 '.bruisedcreitcard.info',
6199                 '.bruisedcreitd.info',
6200                 '.buliderscreadet.info',
6201                 '.cleaningup-cdit.info',
6202                 '.cleaningup-cedict.info',
6203                 '.cleaningup-cerdic.info',
6204                 '.cleanup-crrd.info',
6205
6206                 // 69.64.82.77(*.dedicated.abac.net)
6207                 '.bruised-crediot.info',
6208                 '.bruised-credtid.info',
6209                 '.bruisedcriet.info',
6210                 '.bruisedredit.info',
6211                 '.buliders-crdt.info',
6212                 '.buliders-cre4dit.info',
6213                 '.buliders-creadt.info',
6214                 '.buliders-credcards.info',
6215                 '.buliders-credictcard.info',
6216                 '.cleaningupccreditcards.info',
6217                 '.cleaningupcdedit.info',
6218                 '.cleaningupcedirt.info',
6219                 '.cleaningupceidt.info',
6220                 '.cleaningupcrasd.info',
6221                 '.cleaningupcreait.info',
6222
6223                 // 69.64.82.78(*.dedicated.abac.net)
6224                 '.bruised-cridet.info',
6225                 '.bruised-drecit.info',
6226                 '.bruised-reditcards.info',
6227                 '.bruisedcredikt.info',
6228                 '.bruisedcredith.info',
6229                 '.bruisedcredtid.info',
6230                 '.cleanup-criet.info',
6231                 '.cleanup-csrds.info',
6232                 '.cleanup-dards.info',
6233
6234                 // 69.64.82.79(*.dedicated.abac.net)
6235                 '.bruised-crediotcards.info',
6236                 '.bruised-creditcar.info',
6237                 '.bruised-creid.info',
6238                 '.bruised-creidtcard.info',
6239                 '.buliders-crdit.info',
6240                 '.buliders-creadet.info',
6241                 '.cleaningup-ceridt.info',
6242                 '.cleaningupcrecit.info',
6243                 '.cleaningupccritcard.info',
6244                 '.cleanupdredit.info',
6245                 '.cleanupredit.info',
6246         ),
6247         '.malwarealarm.com',
6248                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6249                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6250                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6251         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6252         'Inet-Traffic.com' => array(
6253                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6254                 //'.dcomm.com',         // by D Communications Inc. S.A.
6255
6256                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6257                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6258                 // ...
6259                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6260                 // ...
6261                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6262                 // ...
6263                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6264                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6265                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6266                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6267                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6268                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6269                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6270                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6271                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6272                 // ...
6273                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6274                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6275                 // ...
6276                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6277                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6278                 // ...
6279                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6280                 // ...
6281                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6282                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6283                 // ...
6284                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6285         ),
6286         'andreyletov at yahoo.com related' => array(
6287                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6288                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6289                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6290
6291                 // 89.248.99.118 by anonymous
6292                 '.lpgpharmacy.com',
6293                 '.onlybestgalleries.com',
6294                 '.viagrabest.info',
6295                 '.viagrabestprice.info',
6296                 '.viagratop.info',
6297
6298                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6299                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6300                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6301         ),
6302         'alrusnac at hotmail.com' => array(
6303                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6304                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6305         ),
6306         '203.116.63.123' => array(
6307                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6308                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6309         ),
6310         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6311                 '.autotowncar.cn',              // 69.73.146.184
6312                 '.badgirlhome.cn',              // 69.73.146.186
6313         ),
6314         'Wmp.co.jp' => array(
6315                 // 219.94.134.208, ns *.dns.ne.jp, adult
6316                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6317                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6318                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6319         ),
6320         'Macherie.tv' => array(
6321                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6322                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6323                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6324         ),
6325         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6326                 '.yemine.info',
6327                 '.fr4f3ds.info',
6328         ),
6329         '75.126.129.222' => array(
6330                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6331                 '.viagrabuycheap.info', // ns *.advernsserver.com
6332                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6333         ),
6334         'sqr at bk.ru' => array(
6335                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6336                 '.masserch.info',               // "Free Web Hosting", spam
6337                 '.miserch.info',
6338         ),
6339         'gangstadra at hotmail.com' => array(
6340                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6341                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6342                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6343                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6344         ),
6345         'hosan by front.ru' => array(
6346                 '.salihome.info',                               // 206.53.51.155(non-existent)
6347                 '.online-freesearch.com',               // 206.53.51.155
6348                 '.choosefinest.com',                    // 206.53.51.157
6349                 '.carsprojects.com',                    // 206.53.51.159
6350                 '.sport-brands.com',                    // 206.53.51.167
6351                 '.online-pharmaceutics.com',    // 206.53.51.168
6352         ),
6353         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6354                 '.cialischeap.info',
6355                 '.superrv.info',
6356         ),
6357         '74.50.97.*' => array(
6358                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
6359                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
6360                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6361                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6362                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
6363                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6364                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
6365                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
6366                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6367                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6368                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6369                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
6370                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
6371                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
6372                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6373                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6374
6375                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
6376                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
6377                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
6378                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
6379                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
6380                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
6381                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
6382                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
6383                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
6384                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
6385                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
6386                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
6387                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
6388                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
6389                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
6390                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
6391                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
6392                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
6393                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
6394
6395                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
6396                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
6397                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
6398                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
6399                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
6400         ),
6401         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6402                 '.hatbi.com',
6403                 '.kol2you.com',
6404                 '.kolplanet.com',
6405                 '.pbaol.com',
6406                 '.planetkol.com',
6407         ),
6408         'Abra1.com' => array(
6409                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6410                 '.abra1.com',           // by info at maisontropicale.com
6411                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6412
6413                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6414                 '.abra2.com',           // by domain at anondns.org
6415                 '.abra3.com',           // by domain at anondns.org
6416         ),
6417         'topdomainz at gmail.com' => array(
6418                 // 217.73.201.237 , ns *.parked.ru
6419                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6420                 '.aboutgooglegroup.info',
6421                 '.aboutgoogleimage.info',
6422                 '.aboutgooglemail.info',
6423                 '.aboutgooglemap.info',
6424                 '.aboutgooglenews.info',
6425                 '.aboutgooglevideo.info',
6426                 '.bestgoogleearth.info',
6427                 '.magicgoogleearth.info',
6428                 '.magicgooglemap.info',
6429                 '.magicgooglevideo.info',
6430         ),
6431         'evdesign at gmail.com' => array(
6432                 // 89.149.208.23(*.internetserviceteam.com)
6433                 '.w3rar.info',
6434                 '.w3sex.info',
6435                 '.w3zip.info',
6436         ),
6437
6438         // C-2: Lonely domains (buddies not found yet)
6439         '.0721-4404.com',
6440         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6441         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6442         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6443         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6444         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6445         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6446         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6447         '.0annie.info',
6448         '.6i6.de',
6449         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6450         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6451         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6452         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6453         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6454         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6455         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6456         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6457         '.allworlddirect.info', // Forbidden
6458         '.amoreitsex.com',
6459         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6460         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6461         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6462         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6463         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6464         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6465         '.auto-car-cheap.org',
6466         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6467         '.baurish.info',
6468         '.bestop.name',
6469         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6470         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6471         '.bestshopfinder.info',
6472         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6473         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6474         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6475         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6476         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6477         '.catkittenmagazines.org',              // 87.118.97.117
6478         '.chatwalker.com',              // 124.32.230.65
6479         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6480         '.covertarena.co.uk',   // by Wayne Huxtable
6481         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6482         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6483         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6484         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6485         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6486         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6487         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6488         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6489         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6490         '.easyshopusa.com',             // by riter (riter at nm.ru)
6491         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6492         '.edu.ph',                              // "philippine network foundation inc"
6493         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6494         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6495         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6496         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6497         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6498         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6499         '*.filthserver.com',    // sales at onlinemarketingservices.biz
6500         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6501         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6502         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6503         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6504         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6505         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6506         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6507         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6508         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6509         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6510         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6511         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6512         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6513         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6514         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6515         '.gm-exchange.jp',              // 210.188.216.49 RMT
6516         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6517         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6518         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6519         '.greatbestwestern.org',// by gao.wungao at gmail.com
6520         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6521         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6522         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6523         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6524         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6525         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6526         '.hostuju.cz',                  // ns banan.cz, banan.it
6527         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6528         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6529         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6530         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6531         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6532         '.infradoc.com',
6533         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6534         '.ismarket.com',                // Google-hiding. intercage.com related IP
6535         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6536         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6537         '.itsexosit.net',
6538         '.itxxxit.net',
6539         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6540         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6541         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6542         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6543         '.kingtools.de',
6544         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6545         '.leucainfo.com',
6546         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6547         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6548         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
6549         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6550         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6551         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6552         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6553         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6554         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6555         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6556         '.megvideochatlive.info',       // Bad seo
6557         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6558         '.mncxvsm.info',                // 217.11.233.105, / blank
6559         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6560         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6561         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6562         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6563         '.mxsupportmailer.com',
6564         '.next-moneylife.com',  // RMT
6565         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6566         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6567         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6568         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6569         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6570         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6571         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6572         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6573         '.onlineviagra.de',
6574         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6575         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6576         '.ozomw.info',
6577         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6578         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6579         '.perevozka777.ru',             // by witalik at gmail.com
6580         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6581         '.pills-storage.com',   // by 
6582         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6583         '.porkyhost.com',               // 79965 at whois.gkg.net
6584         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6585         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6586         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6587         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6588         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6589         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6590         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6591         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6592         '.quality-teen-porn-photo.com', // by info at densa.info
6593         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6594         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6595         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6596         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6597         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6598         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6599         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6600         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6601         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6602         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6603         '.sexamoreit.com',
6604         '.sexforit.com',
6605         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6606         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6607         '.sirlook.com',
6608         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6609         '.sepcn.info',                  // / not found
6610         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6611         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6612         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6613         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6614         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6615         '.superverizonringtones.com',   // by joshua at list.ru
6616         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6617         '.thehostcity.com',             // Domains by Proxy
6618         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6619         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6620         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6621         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6622         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6623         '.topmeds10.com',
6624         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6625         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6626         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6627         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6628         '.unctad.net',                  // by gfdogfd at lovespb.com
6629         '.vacant.org.uk',
6630         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6631         '.virtualsystem.de',
6632         '.vdxhost.com',
6633         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6634         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6635         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6636         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6637         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6638         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6639         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6640         '.whoop.to',                    // RMT
6641         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6642         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6643         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6644         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6645         '.wwwna.info',                  // / 404 Not Found
6646         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6647         '.xamorexxx.net',
6648         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6649         '.xsessox.com',
6650         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6651         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6652         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6653         '.zyguo.info',                  // ns globoxhost.net
6654         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6655
6656
6657
6658         // The same approach of 'acua at mail.ru'
6659         '.iblcqms.cn',                  // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
6660         '.aasghwf.cn',                  // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
6661         '.fwjjjtmrlr.cn',               // TODO:
6662         '.klmnei.cn',                   // TODO:
6663         '.lumyjugmn.cn',                // TODO:
6664         '.lxwxjzpiy.cn',                // TODO:
6665         '.qyxswynd.cn',                 // TODO:
6666         '.ugivorm.cn',                  // TODO:
6667         '.uxmrscgdi.cn',                // TODO:
6668
6669         // C-3: Not classifiable (information wanted)
6670         //
6671         // Something incoming to pukiwiki related sites
6672         'nana.co.il related' => array(
6673                 '.planetnana.co.il',
6674                 '.nana.co.il',
6675         ),
6676 );
6677
6678 // --------------------------------------------------
6679
6680 $blocklist['D'] = array(
6681         // D: Sample setting of
6682         // "Third party in good faith"s
6683         //
6684         // Hosts shown inside of the implanted contents,
6685         // not used via spam, but maybe useful to detect these contents
6686         //
6687         // 'RESERVED',
6688 );
6689
6690 // --------------------------------------------------
6691
6692 $blocklist['E'] = array(
6693         // E: Sample setting of
6694         // Promoters
6695         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6696         //  Ads, Business promotions)
6697         //
6698         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6699         // Sometimes they may promote each other
6700
6701         '15-Mail.com related' => array(
6702                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6703                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6704                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6705                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
6706                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
6707         ),
6708         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
6709         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
6710         'E-brainers.com related' => array(
6711                 // 202.212.14.101
6712                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
6713                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
6714                 '.my-tune.jp',                                  // by brainers Inc.
6715                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
6716                 '.weekle.jp',                                   // by brainers Inc.
6717
6718                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
6719                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
6720                 '.3minutes-marketing-club.com', // by Fujio
6721                 '.affiliate-vampire.com',               // by Masatoshi
6722                 '.article-site-power-package.com',      // by Masatoshi
6723                 '.audio-marketing-club.com',    // by Fujio
6724                 '.brainers-task-manager.com',   // by Masatoshi
6725                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
6726                 '.brainersbuzz.com',                    // by Masatoshi
6727                 '.den4renz-marketing-club.com', // by Fujio
6728                 '.english-contents-club.com',   // by Masatoshi
6729                 '.fly-in-ads-japan.com',                // by Fujio
6730                 '.free-resalerights-giveaway.com',      // by Fujio
6731                 '.freegiveawaysecret.com',              // by Masatoshi
6732                 '.guaranteedvisitorpro.com',    // by Masatoshi
6733                 '.havads-japan.com',                    // by Masatoshi
6734                 '.info-business123.com',                // by Fujio
6735                 '.instant-marketing-club.com',  // by Fujio
6736                 '.internetmarketinggorinjyu.com',       // by Masatoshi
6737                 '.marketing-force-japan.com',   // by Fujio
6738                 '.masatoshikobayashi.com',              // by Fujio
6739                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
6740                 '.replytomatt.com',                             // by Fujio
6741                 '.santa-deal.com',                              // by Fujio
6742                 '.santa-deal-summer.com',               // by Fujio
6743                 '.scratch-card-factory.com',    // by Masatoshi
6744                 '.script4you-japan.com',                // by Fujio
6745                 '.sell1000000dollarinjapan.com',// by Fujio
6746                 '.squeeze-page-secret.com',             // by Masatoshi
6747                 '.viral-blog-square.com',               // by Fujio
6748                 '.viralarticle.com',                    // by Fujio
6749                 '.wowhoken.com',                                // by Fujio
6750
6751                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
6752                 '.brainerstelevision.com',
6753                 '.demosite4you.com',
6754                 '.keywordcatcherpro.com',
6755                 '.script-marketing-club.com',
6756
6757                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
6758                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
6759                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
6760                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
6761                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
6762                 '.brainerscode.com',    // by akada
6763                 '.brainerslive.com',    // by domain
6764                 '.brainersreview.com',  // by domain
6765                 '.brainerstest.com',    // by akada
6766                 '.otosecret.com',               // by domain
6767                 '.ultimate-marketing-weapon.com',       // by akada
6768                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
6769                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
6770
6771                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
6772                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
6773         ),
6774         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
6775         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
6776         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
6777         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
6778         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
6779                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
6780                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
6781                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
6782
6783                 // Redirects and affiliates:
6784                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
6785                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
6786                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
6787                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
6788                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
6789                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
6790                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
6791                 //   ...
6792
6793                 // Other suggestions:
6794                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
6795
6796                 // Blog posting at the same time
6797                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
6798                 //   2007/06/13 e123.info/archives/76
6799                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
6800                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
6801                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
6802         ),
6803         'info at kobeweb.jp' => array(
6804                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
6805                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
6806                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
6807         ),
6808         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
6809         'Infocart.jp' => array(         // by wai at infocart.jp
6810                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
6811                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
6812                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
6813
6814                 //inetnum:      60.32.154.176 - 60.32.154.183
6815                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
6816                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
6817         ),
6818         'Info-sniper.com' => array(
6819                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
6820                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
6821                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
6822         ),
6823         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
6824         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
6825         'JunSuzuki.com' => array(       // e-brainers.com related
6826                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
6827                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
6828         ),
6829         'Natsukih.net' => array(
6830                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
6831                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
6832                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
6833                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
6834
6835                 // by info at natsukih.net
6836                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
6837                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
6838                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
6839                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
6840                 '.5muryoureport.com',   // 210.251.253.230
6841                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
6842                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
6843                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
6844         ),
6845         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
6846                 '.11kanji.com',         // 211.10.131.88
6847                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
6848                 '.point-park.com',      // 211.10.131.88
6849                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
6850         ),
6851         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
6852         'PRJAPAN.co.jp' => array(
6853                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
6854                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
6855                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
6856                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
6857                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net, 
6858                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
6859         ),
6860         'Rakuten.co.jp' => array(
6861                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
6862                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
6863         ),
6864         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
6865         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
6866         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
6867                 '.e123.info',
6868                 '.ialchemist.net',
6869                 '.j012.net',
6870                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
6871         ),
6872         'Viscose.jp' => array(
6873                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
6874                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
6875         ),
6876         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
6877 );
6878
6879 // --------------------------------------------------
6880
6881 $blocklist['Z'] = array(
6882         // Z: Yours
6883         //
6884         //'',
6885         //'',
6886         //'',
6887 );
6888
6889 ?>