spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.179 2007/10/28 00:38:08 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //''
  77         //''
  78         //''
  79
  80 );
  81
  82 // --------------------------------------------------
  83 // A: Sample setting of
  84 // Existing URI redirection or masking services
  85
  86 $blocklist['A-1'] = array(
  87
  88         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  89         // web-based proxy, DNS subdomains, etc
  90         // http://en.wikipedia.org/wiki/URL_redirection
  91         //
  92         // as known as cheap URI obscuring services today,
  93         // for spammers and affiliate users dazed by money.
  94         //
  95         //   Messages from forerunners:
  96         //     o-rly.net
  97         //       "A URL REDIRECTION SERVICE GONE BAD"
  98         //       "SORRY, TRULY"
  99         //     smcurl.com
 100         //       "Idiots were using smcURL to shrink URLs and
 101         //        send them out via spam."
 102         //     tinyclick.com
 103         //       "...stop offering it's free services because
 104         //        too many people were taking advantage of it"
 105         //     xjs.org
 106         //       "We have been forced to close this facility
 107         //        due to a minority of knuckle draggers who
 108         //        abused this web site."
 109         //
 110         // Please notify us about this list with reason:
 111         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 112         //
 113         '0nz.org',
 114         '0rz.tw',
 115         '0url.com',
 116         '0zed.info',
 117         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 118         '123.que.jp',
 119         '12url.org',
 120         '*.15h.com',
 121         '*.1dr.biz',
 122         '1K.pl' => array(
 123                 '*.1k.pl',
 124                 '*.5g.pl',
 125                 '*.orq.pl',
 126         ),
 127         '1nk.us',
 128         '1url.org',
 129         '1url.in',
 130         '1webspace.org',
 131         '2Ch.net' => array(
 132                 'ime.nu',
 133                 'ime.st',
 134         ),
 135         '2ch2.net',
 136         '2hop4.com',
 137         '2s.ca',
 138         '2site.com',
 139         '2url.org',
 140         '301url.com',
 141         '32url.com',
 142         '.3dg.de',
 143         '*.4bb.ru',
 144         'big5.51job.com',       ///gate/big5/
 145         '5jp.net',
 146         '.6url.com',
 147         '*.6x.to',
 148         '7ref.com',
 149         '82m.org',
 150         '*.8rf.com',
 151         '98.to',
 152         'abbrv.co.uk',
 153         '*.abwb.org',
 154         'acnw.de',
 155         'Active.ws' => array(
 156                 '*.321.cn',
 157                 '*.4x2.net',
 158                 'active.ws',
 159                 '*.better.ws',
 160                 '*.here.ws',
 161                 '*.mypiece.com',
 162                 '*.official.ws',
 163                 '*.ouch.ws',
 164                 '*.premium.ws',
 165                 '*.such.info',
 166                 '*.true.ws',
 167                 '*.visit.ws',
 168         ),
 169         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 170         'aifam.com',
 171         'All4WebMasters.pl' => array(
 172                 '*.ovp.pl',
 173                 '*.6-6-6.pl',
 174         ),
 175         'amoo.org',
 176         'web.archive.org',              ///web/2
 177         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 178                 'jmp2.net',
 179                 '2me.tw',
 180         ),
 181         'ataja.es',
 182         'ATBHost.com' => array(
 183                 '*.atbhost.com',
 184                 '*.bzhost.net',
 185         ),
 186         'atk.jp',
 187         'clearp.ath.cx',
 188         'athomebiz.com',
 189         'aukcje1.pl',
 190         'beam.to',
 191         'beermapping.com',
 192         'besturl.in',
 193         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 194         'biglnk.com',
 195         'bingr.com',
 196         'bittyurl.com',
 197         '*.bizz.cc',
 198         '*.blo.pl',
 199         '*.bo.pl',
 200         'briefurl.com',
 201         'brokenscript.com',
 202         'BucksoGen.com' => array(
 203                 '*.bucksogen.com',
 204                 '*.bulochka.org',
 205                 '*.korzhik.org',
 206                 '*.kovrizhka.org',
 207                 '*.pirozhok.org',
 208                 '*.plushka.org',
 209                 '*.pryanik.org',
 210                 '*.sushka.org',
 211         ),
 212         'budgethosts.org',
 213         'budu.com',                             // by peter.eder at imcworld.com
 214         '*.buzznet.com',
 215         '*.bydl.com',
 216         'C-O.IN' => array(
 217                 '*.c-o.cc',
 218                 '*.c-o.in',
 219                 '*.coz.in',
 220                 '*.cq.bz',
 221         ),
 222         'c64.ch',
 223         'c711.com',
 224         '*.cej.pl',
 225         'checkasite.net',
 226         'url.chefhost.com',
 227         '*.chicappa.jp',
 228         'chilicity.com',
 229         'big5.china.com',               ///gate/big5/
 230         'chopurl.com',
 231         'christopherleestreet.com',
 232         'cintcm.com',
 233         '*.cjb.net',
 234         'clipurl.com',
 235         '*.co.nr',
 236         'Comtech Enterprises ' => array(        // comteche.com
 237                 'tinyurl.name',
 238                 'tinyurl.us',
 239         ),
 240         'Cool168.com' => array(
 241                 '*.cool158.com',
 242                 '*.cool168.com',
 243                 '*.ko168.com',
 244                 '*.ko188.com',
 245         ),
 246         'Coolurl.de' => array(
 247                 'coolurl.de',
 248                 'dornenboy.de',
 249                 'eyeqweb.com',
 250                 'hardcore-porn.de',
 251                 'maschinen-bluten-nicht.de',
 252         ),
 253         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 254         'cutalink.com',
 255         '*.da.cx',
 256         '*.da.ru',
 257         'dae2.com',
 258         'dephine.org',
 259         'desiurl.com',
 260         'dhurl.com',
 261         'digbig.com',
 262         'Digipills.com' => array(
 263                 '*.digipills.com',
 264                 'minilien.com',
 265                 'tinylink.com',
 266         ),
 267         '*.discutbb.com',
 268         'DL.AM' => array(
 269                 '*.cx.la',
 270                 '*.dl.am',
 271         ),
 272         '*.dl.pl',
 273         '*.dmdns.com',
 274         'doiop.com',
 275         'drlinky.com',
 276         'durl.us',
 277         '*.dvdonly.ru',
 278         '*.dynu.ca',
 279         'dwarf.name',
 280         '*.eadf.com',
 281         'easyURL.net' => array(
 282                 '*.easyurl.net',
 283                 '.goshrink.com',
 284                 'ushrink.com',
 285         ),
 286         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 287                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 288                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 289                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 290                 //   "Keep continuing to seek originality and contribute it to local,
 291                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 292                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 293                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 294                 // I'm so much impressed of the situation around this imported one today.
 295         'elfurl.com',
 296         'eny.pl',
 297         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 298                 '.mywiitime.com',
 299                 '.surfindark.com',              // webmaster at etechfocus.com
 300                 '.surfinshade.com',
 301                 '.surfinshadow.com',
 302                 '.surfinwind.com',
 303                 '.topsecretlive.com',
 304         ),
 305         '*.eu.org',
 306         'F2B.be' => array(
 307                 '*.f2b.be',
 308                 '*.freakz.eu',
 309                 '*.n0.be',
 310                 '*.n3t.nl',
 311                 '*.short.be',
 312                 '*.ssr.be',
 313                 '*.tweaker.eu',
 314         ),
 315         '*.fancyurl.com',
 316         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 317                 'blue11.jp',
 318                 'fanznet.com',
 319                 'katou.in',
 320                 'mymap.in',
 321                 'saitou.in',
 322                 'satou.in',
 323                 'susan.in',
 324         ),
 325         '.fe.pl',                       // Redirection and subdomain
 326         'ffwd.to',
 327         'url.fibiger.org',
 328         'FireMe.to' => array(
 329                 'fireme.to',
 330                 'nextdoor.to',
 331                 'ontheway.to',
 332         ),
 333         'flingk.com',
 334         'flog.jp',                      // careless redirector and bbs
 335         'fm7.biz',
 336         'fnbi.jp',
 337         '*.fnbi.jp',
 338         'forgeturl.com',
 339         '*.free.bg',
 340         'Freeservers.com' => array(     // United Online Web Services, Inc.
 341                 '*.4mg.com',
 342                 '*.4t.com',
 343                 '*.8m.com',
 344                 '*.8m.net',
 345                 '*.8k.com',
 346                 '*.faithweb.com',
 347                 '*.freehosting.net',
 348                 '*.freeservers.com',
 349                 '*.gq.nu',
 350                 '*.htmlplanet.com',
 351                 '*.itgo.com',
 352                 '*.iwarp.com',
 353                 '*.s5.com',
 354                 '*.scriptmania.com',
 355                 '*.tvheaven.com',
 356         ),
 357         '*.freewebpages.com',
 358         'FreeWebServices.net' => array( // Host Department LLC
 359                 '*.about.gs',   // Dead?
 360                 '*.about.tc',
 361                 '*.about.vg',
 362                 '*.aboutus.gs',
 363                 '*.aboutus.ms',
 364                 '*.aboutus.tc',
 365                 '*.aboutus.vg',
 366                 '*.biografi.biz',
 367                 '*.biografi.info',
 368                 '*.biografi.org',
 369                 '*.biografi.us',
 370                 '*.datadiri.biz',
 371                 '*.datadiri.cc',
 372                 '*.datadiri.com',
 373                 '*.datadiri.info',
 374                 '*.datadiri.net',
 375                 '*.datadiri.org',
 376                 '*.datadiri.tv',
 377                 '*.datadiri.us',
 378                 '*.ecv.gs',
 379                 '*.ecv.ms',
 380                 '*.ecv.tc',
 381                 '*.ecv.vg',
 382                 '*.eprofile.us',
 383                 '*.go2net.ws',
 384                 '*.hits.io',
 385                 '*.hostingweb.us',
 386                 '*.hub.io',
 387                 '*.indo.bz',
 388                 '*.indo.cc',
 389                 '*.indo.gs',
 390                 '*.indo.ms',
 391                 '*.indo.tc',
 392                 '*.indo.vg',
 393                 '*.infinitehosting.net',
 394                 '*.infinites.net',
 395                 '*.lan.io',
 396                 '*.max.io',
 397                 '*.mycv.bz',
 398                 '*.mycv.nu',
 399                 '*.mycv.tv',
 400                 '*.myweb.io',
 401                 '*.ourprofile.biz',
 402                 '*.ourprofile.info',
 403                 '*.ourprofile.net',     // Dead?
 404                 '*.ourprofile.org',
 405                 '*.ourprofile.us',
 406                 '*.profil.bz',
 407                 '*.profil.cc',
 408                 '*.profil.cn',
 409                 '*.profil.gs',
 410                 '*.profil.in',
 411                 '*.profil.ms',
 412                 '*.profil.tc',
 413                 '*.profil.tv',
 414                 '*.profil.vg',  // ?
 415                 '*.site.io',
 416                 '*.wan.io',
 417                 '*.web-cam.ws',
 418                 '*.webs.io',
 419                 '*.zip.io',
 420         ),
 421         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 422         '*.fx.to',
 423         'fyad.org',
 424         'fype.com',
 425         'gentleurl.net',
 426         'Get2.us' => array(
 427                 '*.get2.us',
 428                 '*.hasballs.com',
 429                 '*.ismyidol.com',
 430                 '*.spotted.us',
 431                 '*.went2.us',
 432                 '*.wentto.us',
 433         ),
 434         'glinki.com',
 435         '*.globalredirect.com',
 436         'gnu.vu',
 437         '*.go.cc',
 438         //'Google.com' => array(
 439         //              google.com/translate_c\?u=(?:http://)?
 440         //),
 441         'goonlink.com',
 442         '.gourl.org',
 443         '.greatitem.com',
 444         'gzurl.com',
 445         'url.grillsportverein.de',
 446         'Harudake.net' => array('*.hyu.jp'),
 447         'Hattinger Linux User Group' => array('short.hatlug.de'),
 448         'Hexten.net' => array('lyxus.net'),
 449         'here.is',
 450         'HispaVista.com' => array(
 451                 '*.blogdiario.com',
 452                 '*.hispavista.com',
 453                 '.galeon.com',
 454         ),
 455         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 456                 '*.8l.pl',
 457                 '*.blg.pl',
 458                 '*.czytajto.pl',
 459                 '*.ryj.pl',
 460                 '*.xit.pl',
 461                 '*.xlc.pl',
 462                 '*.hk.pl',
 463                 '*.home.pl',
 464                 '*.of.pl',
 465         ),
 466         'hort.net',
 467         'free4.hostrocket.com',
 468         '*.hotindex.ru',
 469         'HotRedirect.com' => array(
 470                 '*.coolhere.com',
 471                 '*.homepagehere.com',
 472                 '*.hothere.com',
 473                 '*.mustbehere.com',
 474                 '*.onlyhere.net',
 475                 '*.pagehere.com',
 476                 '*.surfhere.net',
 477                 '*.zonehere.com',
 478         ),
 479         'hotshorturl.com',
 480         'hotwebcomics.com',     ///search_redirect.php
 481         'hurl.to',
 482         '*.hux.de',
 483         '*.i89.us',
 484         'iat.net',                      // 74.208.58.130 by Tony Carter
 485         'ibm.com',                      ///links (Correct it)
 486         '*.iceglow.com',
 487         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 488         'Ideas para Nuevos Mercados SL' => array(
 489                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 490                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 491                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 492                 // by edgar bortolin (oscar at i4nm.com)
 493                 // by Edgar Bortolin  (oscar at i4nm.com)
 494                 // by oscar florez (oscar at i4nm.com)
 495                 // by Oscar Florez (oscar at red-es.com)
 496                 // by covadonga del valle (oscar at i4nm.com)
 497                 '*.ar.gd',
 498                 '*.ar.gs',      // ns *.nora.net
 499                 '*.ar.kz',      // by oscar
 500                 '*.ar.nu',      // by Edgar
 501                 '*.ar.tc',      // by oscar
 502                 '*.ar.vg',      // by oscar
 503                 '*.bo.kz',      // by oscar
 504                 '*.bo.nu',      // by covadonga
 505                 '*.bo.tc',      // by oscar
 506                 '*.bo.tf',      // by Oscar
 507                 '*.bo.vg',      // by oscar
 508                 '*.br.gd',
 509                 '*.br.gs',      // ns *.nora.net
 510                 '*.br.nu',      // by edgar
 511                 '*.br.vg',      // by oscar
 512                 '*.ca.gs',      // by oscar
 513                 '*.ca.kz',      // by oscar
 514                 '*.cl.gd',      // by oscar
 515                 '*.cl.kz',      // by oscar
 516                 '*.cl.nu',      // by edgar
 517                 '*.cl.tc',      // by oscar
 518                 '*.cl.tf',      // by Oscar
 519                 '*.cl.vg',      // by oscar
 520                 '*.col.nu',     // by Edgar
 521                 '*.cr.gs',      // ns *.nora.net
 522                 '*.cr.kz',      // by oscar
 523                 '*.cr.nu',      // by edgar
 524                 '*.cr.tc',      // by oscar
 525                 '*.cu.tc',      // by oscar
 526                 '*.do.kz',      // by oscar
 527                 '*.do.nu',      // by edgar
 528                 '*.ec.kz',      // by edgar
 529                 '*.ec.nu',      // by Edgar
 530                 '*.ec.tf',      // by Oscar
 531                 '*.es.kz',      // by oscar
 532                 '*.eu.kz',      // by oscar
 533                 '*.gt.gs',      // ns *.nora.net
 534                 '*.gt.tc',      // by oscar
 535                 '*.gt.tf',      // by Oscar
 536                 '*.gt.vg',      // by Oscar
 537                 '*.hn.gs',      // ns *.nora.net
 538                 '*.hn.tc',      // by oscar
 539                 '*.hn.tf',      // by Oscar
 540                 '*.hn.vg',      // by oscar
 541                 '*.mx.gd',
 542                 '*.mx.gs',      // ns *.nora.net
 543                 '*.mx.kz',      // by oscar
 544                 '*.mx.vg',      // by oscar
 545                 '*.ni.kz',      // by oscar
 546                 '*.pa.kz',      // by oscar
 547                 '*.pe.kz',      // by oscar
 548                 '*.pe.nu',      // by Edgar
 549                 '*.pr.kz',      // by oscar
 550                 '*.pr.nu',      // by edgar
 551                 '*.pt.gs',      // ns *.nora.net
 552                 '*.pt.kz',      // by edgar
 553                 '*.pt.nu',      // by edgar
 554                 '*.pt.tc',      // by oscar
 555                 '*.pt.tf',      // by Oscar
 556                 '*.py.gs',      // ns *.nora.net
 557                 '*.py.nu',      // by edgar
 558                 '*.py.tc',      // by oscar
 559                 '*.py.tf',      // by Oscar
 560                 '*.py.vg',      // by oscar
 561                 '*.sv.tc',      // by oscar
 562                 '*.usa.gs',     // ns *.nora.net
 563                 '*.uy.gs',      // ns *.nora.net
 564                 '*.uy.kz',      // by oscar
 565                 '*.uy.nu',      // by edgar
 566                 '*.uy.tc',      // by oscar
 567                 '*.uy.tf',      // by Oscar
 568                 '*.uy.vg',      // by oscar
 569                 '*.ve.gs',      // by oscar
 570                 '*.ve.tc',      // by oscar
 571                 '*.ve.tf',      // by Oscar
 572                 '*.ve.vg',      // by oscar
 573                 '*.ven.nu',     // by edgar
 574         ),
 575         'ie.to',
 576         'igoto.co.uk',
 577         'ilook.tw',
 578         'indianpad.com',                ///view/
 579         'iNetwork.co.il' => array(
 580                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 581                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 582                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 583         ),
 584         '*.infogami.com',
 585         'infotop.jp',
 586         'ipoo.org',
 587         'IR.pl' => array(
 588                 '*.aj.pl',
 589                 '*.aliasy.org',
 590                 '*.gu.pl',
 591                 '*.hu.pl',
 592                 '*.ir.pl',
 593                 '*.jo.pl',
 594                 '*.su.pl',
 595                 '*.td.pl',
 596                 '*.uk.pl',
 597                 '*.uy.pl',
 598                 '*.xa.pl',
 599                 '*.zj.pl',
 600         ),
 601         'irotator.com',
 602         '.iwebtool.com',
 603         'j6.bz',
 604         'jeeee.net',
 605         'Jaze Redirect Services' => array(
 606                 '*.arecool.net',
 607                 '*.iscool.net',
 608                 '*.isfun.net',
 609                 '*.tux.nu',
 610         ),
 611         '*.jed.pl',
 612         'JeremyJohnstone.com' => array('url.vg'),
 613         'jemurl.com',
 614         'jggj.net',
 615         'jpan.jp',
 616         'josh.nu',
 617         'kat.cc',
 618         'Kickme.to' => array(
 619                 '.1024bit.at',
 620                 '.128bit.at',
 621                 '.16bit.at',
 622                 '.256bit.at',
 623                 '.32bit.at',
 624                 '.512bit.at',
 625                 '.64bit.at',
 626                 '.8bit.at',
 627                 '.adores.it',
 628                 '.again.at',
 629                 '.allday.at',
 630                 '.alone.at',
 631                 '.altair.at',
 632                 '.american.at',
 633                 '.amiga500.at',
 634                 '.ammo.at',
 635                 '.amplifier.at',
 636                 '.amstrad.at',
 637                 '.anglican.at',
 638                 '.angry.at',
 639                 '.around.at',
 640                 '.arrange.at',
 641                 '.australian.at',
 642                 '.baptist.at',
 643                 '.basque.at',
 644                 '.battle.at',
 645                 '.bazooka.at',
 646                 '.berber.at',
 647                 '.blackhole.at',
 648                 '.booze.at',
 649                 '.bosnian.at',
 650                 '.brainiac.at',
 651                 '.brazilian.at',
 652                 '.bummer.at',
 653                 '.burn.at',
 654                 '.c-64.at',
 655                 '.catalonian.at',
 656                 '.catholic.at',
 657                 '.chapel.at',
 658                 '.chills.it',
 659                 '.christiandemocrats.at',
 660                 '.cname.at',
 661                 '.colors.at',
 662                 '.commodore.at',
 663                 '.commodore64.at',
 664                 '.communists.at',
 665                 '.conservatives.at',
 666                 '.conspiracy.at',
 667                 '.cooldude.at',
 668                 '.craves.it',
 669                 '.croatian.at',
 670                 '.cuteboy.at',
 671                 '.dancemix.at',
 672                 '.danceparty.at',
 673                 '.dances.it',
 674                 '.danish.at',
 675                 '.dealing.at',
 676                 '.deep.at',
 677                 '.democrats.at',
 678                 '.digs.it',
 679                 '.divxlinks.at',
 680                 '.divxmovies.at',
 681                 '.divxstuff.at',
 682                 '.dizzy.at',
 683                 '.does.it',
 684                 '.dork.at',
 685                 '.drives.it',
 686                 '.dutch.at',
 687                 '.dvdlinks.at',
 688                 '.dvdmovies.at',
 689                 '.dvdstuff.at',
 690                 '.emulators.at',
 691                 '.end.at',
 692                 '.english.at',
 693                 '.eniac.at',
 694                 '.error403.at',
 695                 '.error404.at',
 696                 '.evangelism.at',
 697                 '.exhibitionist.at',
 698                 '.faith.at',
 699                 '.fight.at',
 700                 '.finish.at',
 701                 '.finnish.at',
 702                 '.forward.at',
 703                 '.freebie.at',
 704                 '.freemp3.at',
 705                 '.french.at',
 706                 '.graduatejobs.at',
 707                 '.greenparty.at',
 708                 '.grunge.at',
 709                 '.hacked.at',
 710                 '.hang.at',
 711                 '.hangup.at',
 712                 '.has.it',
 713                 '.hide.at',
 714                 '.hindu.at',
 715                 '.htmlpage.at',
 716                 '.hungarian.at',
 717                 '.icelandic.at',
 718                 '.independents.at',
 719                 '.invisible.at',
 720                 '.is-chillin.it',
 721                 '.is-groovin.it',
 722                 '.japanese.at',
 723                 '.jive.at',
 724                 '.kickass.at',
 725                 '.kickme.to',
 726                 '.kindergarden.at',
 727                 '.knows.it',
 728                 '.kurd.at',
 729                 '.labour.at',
 730                 '.leech.at',
 731                 '.liberals.at',
 732                 '.linuxserver.at',
 733                 '.liqour.at',
 734                 '.lovez.it',
 735                 '.makes.it',
 736                 '.maxed.at',
 737                 '.means.it',
 738                 '.meltdown.at',
 739                 '.methodist.at',
 740                 '.microcomputers.at',
 741                 '.mingle.at',
 742                 '.mirror.at',
 743                 '.moan.at',
 744                 '.mormons.at',
 745                 '.musicmix.at',
 746                 '.nationalists.at',
 747                 '.needz.it',
 748                 '.nerds.at',
 749                 '.neuromancer.at',
 750                 '.newbie.at',
 751                 '.nicepage.at',
 752                 '.ninja.at',
 753                 '.norwegian.at',
 754                 '.ntserver.at',
 755                 '.owns.it',
 756                 '.paint.at',
 757                 '.palestinian.at',
 758                 '.phoneme.at',
 759                 '.phreaking.at',
 760                 '.playz.it',
 761                 '.polish.at',
 762                 '.popmusic.at',
 763                 '.portuguese.at',
 764                 '.powermac.at',
 765                 '.processor.at',
 766                 '.prospects.at',
 767                 '.protestant.at',
 768                 '.rapmusic.at',
 769                 '.raveparty.at',
 770                 '.reachme.at',
 771                 '.reads.it',
 772                 '.reboot.at',
 773                 '.relaxed.at',
 774                 '.republicans.at',
 775                 '.researcher.at',
 776                 '.reset.at',
 777                 '.resolve.at',
 778                 '.retrocomputers.at',
 779                 '.rockparty.at',
 780                 '.rocks.it',
 781                 '.rollover.at',
 782                 '.rough.at',
 783                 '.rules.it',
 784                 '.rumble.at',
 785                 '.russian.at',
 786                 '.says.it',
 787                 '.scared.at',
 788                 '.seikh.at',
 789                 '.serbian.at',
 790                 '.short.as',
 791                 '.shows.it',
 792                 '.silence.at',
 793                 '.simpler.at',
 794                 '.sinclair.at',
 795                 '.singz.it',
 796                 '.slowdown.at',
 797                 '.socialists.at',
 798                 '.spanish.at',
 799                 '.split.at',
 800                 '.stand.at',
 801                 '.stoned.at',
 802                 '.stumble.at',
 803                 '.supercomputer.at',
 804                 '.surfs.it',
 805                 '.swedish.at',
 806                 '.swims.it',
 807                 '.synagogue.at',
 808                 '.syntax.at',
 809                 '.syntaxerror.at',
 810                 '.techie.at',
 811                 '.temple.at',
 812                 '.thinkbig.at',
 813                 '.thirsty.at',
 814                 '.throw.at',
 815                 '.toplist.at',
 816                 '.trekkie.at',
 817                 '.trouble.at',
 818                 '.turkish.at',
 819                 '.unexplained.at',
 820                 '.unixserver.at',
 821                 '.vegetarian.at',
 822                 '.venture.at',
 823                 '.verycool.at',
 824                 '.vic-20.at',
 825                 '.viewing.at',
 826                 '.vintagecomputers.at',
 827                 '.virii.at',
 828                 '.vodka.at',
 829                 '.wannabe.at',
 830                 '.webpagedesign.at',
 831                 '.wheels.at',
 832                 '.whisper.at',
 833                 '.whiz.at',
 834                 '.wonderful.at',
 835                 '.zor.org',
 836                 '.zx80.at',
 837                 '.zx81.at',
 838                 '.zxspectrum.at',
 839         ),
 840         'kisaweb.com',
 841         'krotki.pl',
 842         'kuerzer.de',
 843         '*.kupisz.pl',
 844         'kuso.cc',
 845         '*.l8t.com',
 846         'lame.name',
 847         'lediga.st',
 848         'liencourt.com',
 849         'liteurl.com',
 850         'linkachi.com',
 851         'linkezy.com',
 852         'linkfrog.net',
 853         'linkook.com',
 854         'linkzip.net',
 855         'lispurl.com',
 856         'lnk.in',
 857         'makeashorterlink.com',
 858         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 859                 '*.3gp.fr',
 860                 '*.gtx.fr',
 861                 '*.ici.st',
 862                 '*.max.st',
 863                 '*.nn.cx',              // ns *.sivit.org
 864                 '*.site.cx',    // ns *.sivit.org
 865                 '*.user.fr',
 866                 '*.zxr.fr',
 867         ),
 868         'mcturl.com',
 869         'memurl.com',
 870         'Metamark.net' => array('xrl.us'),
 871         'midgeturl.com',
 872         'Minilink.org' => array('lnk.nu'),
 873         'miniurl.org',
 874         'miniurl.pl',
 875         'mixi.bz',
 876         'mo-v.jp',
 877         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 878                 '.com.md',
 879                 '.co.md',
 880                 '.org.md',
 881                 '.info.md',
 882                 '.host.md',
 883         ),
 884         'monster-submit.com',
 885         'mooo.jp',
 886         'murl.net',
 887         'myactivesurf.net',
 888         'mytinylink.com',
 889         'myurl.in',
 890         'myurl.com.tw',
 891         'nanoref.com',
 892         'Ne1.net' => array(
 893                 '*.ne1.net',
 894                 '*.r8.org',
 895         ),
 896         'Nashville Linux Users Group' => array('nlug.org'),
 897         'not2long.net',
 898         '*.notlong.com',
 899         '*.nuv.pl',
 900         'ofzo.be',
 901         '*.ontheinter.net',
 902         'ourl.org',
 903         'ov2.net',                              // frame
 904         '*.ozonez.com',
 905         'pagebang.com',
 906         'palurl.com',
 907         '*.paulding.net',
 908         'phpfaber.org',
 909         'pnope.com',
 910         'prettylink.com',
 911         'PROXID.net' => array(  // also xRelay.net
 912                 '*.asso.ws',
 913                 '*.corp.st',
 914                 '*.euro.tm',
 915                 '*.perso.tc',
 916                 '*.site.tc',
 917                 '*.societe.st',
 918         ),
 919         'qrl.jp',
 920         'qurl.net',
 921         'qwer.org',
 922         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 923         'radiobase.net',
 924         'Rakuten.co.jp' => array(
 925                 'pt.afl.rakuten.co.jp', ///c/
 926         ),
 927         'RedirectFree.com' => array(
 928                 '*.red.tc',
 929                 '*.redirectfree.com',
 930                 '*.sky.tc',
 931                 '*.the.vg',
 932         ),
 933         'redirme.com',
 934         'redirectme.to',
 935         'relic.net',
 936         'rezma.info',
 937         'rio.st',
 938         'rlink.org',
 939         '*.rmcinfo.fr',
 940         'rubyurl.com',
 941         '*.runboard.com',
 942         'runurl.com',
 943         's-url.net',
 944         's1u.net',
 945         'SG5.co.uk' => array(
 946                 '*.sg5.co.uk',
 947                 '*.sg5.info',
 948         ),
 949         'Shim.net' => array(
 950                 '*.0kn.com',
 951                 '*.2cd.net',
 952                 '*.freebiefinders.net',
 953                 '*.freegaming.org',
 954                 '*.op7.net',
 955                 '*.shim.net',
 956                 '*.v9z.com',
 957         ),
 958         'big5.shippingchina.com',
 959         'shorl.com',
 960         'shortenurl.com',
 961         'shorterlink.com',
 962         'shortlinks.co.uk',
 963         'shorttext.com',
 964         'shorturl-accessanalyzer.com',
 965         'Shortify.com' => array(
 966                 '74678439.com',
 967                 'shortify.com',
 968         ),
 969         'shortlink.co.uk',
 970         'ShortURL.com' => array(
 971                 '*.1sta.com',
 972                 '*.24ex.com',
 973                 '*.2fear.com',
 974                 '*.2fortune.com',
 975                 '*.2freedom.com',
 976                 '*.2hell.com',
 977                 '*.2savvy.com',
 978                 '*.2truth.com',
 979                 '*.2tunes.com',
 980                 '*.2ya.com',
 981                 '*.alturl.com',
 982                 '*.antiblog.com',
 983                 '*.bigbig.com',
 984                 '*.dealtap.com',
 985                 '*.ebored.com',
 986                 '*.echoz.com',
 987                 '*.filetap.com',
 988                 '*.funurl.com',
 989                 '*.headplug.com',
 990                 '*.hereweb.com',
 991                 '*.hitart.com',
 992                 '*.mirrorz.com',
 993                 '*.shorturl.com',
 994                 '*.spyw.com',
 995                 '*.vze.com',
 996         ),
 997         'shrinkalink.com',
 998         'shrinkthatlink.com',
 999         'shrinkurl.us',
1000         'shrt.org',
1001         'shrunkurl.com',
1002         'shurl.org',
1003         'shurl.net',
1004         'sid.to',
1005         'simurl.com',
1006         'sitefwd.com',
1007         'Sitelutions.com' => array(
1008                 '*.assexy.as',
1009                 '*.athersite.com',
1010                 '*.athissite.com',
1011                 '*.bestdeals.at',
1012                 '*.byinter.net',
1013                 '*.findhere.org',
1014                 '*.fw.nu',
1015                 '*.isgre.at',
1016                 '*.isthebe.st',
1017                 '*.kwik.to',
1018                 '*.lookin.at',
1019                 '*.lowestprices.at',
1020                 '*.onthenet.as',
1021                 '*.ontheweb.nu',
1022                 '*.pass.as',
1023                 '*.passingg.as',
1024                 '*.redirect.hm',
1025                 '*.rr.nu',
1026                 '*.ugly.as',
1027         ),
1028         '*.skracaj.pl',
1029         'skiltechurl.com',
1030         'skocz.pl',
1031         'slimurl.jp',
1032         'slink.in',
1033         'smallurl.eu',
1034         'smurl.name',
1035         'snipurl.com',
1036         'sp-nov.net',
1037         'splashblog.com',
1038         'spod.cx',
1039         '*.spydar.com',
1040         'Subdomain.gr' => array(
1041                 '*.p2p.gr',
1042                 '*.subdomain.gr',
1043         ),
1044         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1045         'surl.se',
1046         'surl.ws',
1047         'symy.jp',
1048         'tdurl.com',
1049         'tighturl.com',
1050         'tiniuri.com',
1051         'tiny.cc',
1052         'tiny.pl',
1053         'tiny2go.com',
1054         'tinylink.eu',
1055         'tinylinkworld.com',
1056         'tinypic.com',
1057         'tinyr.us',
1058         'TinyURL.com' => array(
1059                 'tinyurl.com',
1060                 'preview.tinyurl.com',
1061                 'tinyurl.co.uk',
1062         ),
1063         'titlien.com',
1064         '*.tlg.pl',
1065         'tlurl.com',
1066         'link.toolbot.com',
1067         'tnij.org',
1068         'Tokelau ccTLD' => array('.tk'),
1069         'toila.net',
1070         '*.toolbot.com',
1071         '*.torontonian.com',
1072         'trimurl.com',
1073         'ttu.cc',
1074         'turl.jp',
1075         '*.tz4.com',
1076         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1077                 '*.1.to',
1078                 '*.4.to',
1079                 '*.5.to',
1080                 '*.82.to',
1081                 '*.s.to',
1082                 '*.u.to',
1083                 '*.ce.to',
1084                 '*.cz.to',
1085                 '*.if.to',
1086                 '*.it.to',
1087                 '*.kp.to',
1088                 '*.ne.to',
1089                 '*.ok.to',
1090                 '*.pc.to',
1091                 '*.tv.to',
1092                 '*.dd.to',
1093                 '*.ee.to',
1094                 '*.hh.to',
1095                 '*.kk.to',
1096                 '*.mm.to',
1097                 '*.qq.to',
1098                 '*.xx.to',
1099                 '*.zz.to',
1100                 '*.ivy.to',
1101                 '*.joa.to',
1102                 '*.ever.to',
1103                 '*.mini.to',
1104         ),
1105         'uchinoko.in',
1106         'Ulimit.com' => array(
1107                 '*.be.tf',
1108                 '*.best.cd',
1109                 '*.bsd-fan.com',
1110                 '*.c0m.st',
1111                 '*.ca.tc',
1112                 '*.clan.st',
1113                 '*.com02.com',
1114                 '*.en.st',
1115                 '*.euro.st',
1116                 '*.fr.fm',
1117                 '*.fr.st',
1118                 '*.fr.vu',
1119                 '*.gr.st',
1120                 '*.ht.st',
1121                 '*.int.ms',
1122                 '*.it.st',
1123                 '*.java-fan.com',
1124                 '*.linux-fan.com',
1125                 '*.mac-fan.com',
1126                 '*.mp3.ms',
1127                 '*.qc.tc',
1128                 '*.sp.st',
1129                 '*.suisse.st',
1130                 '*.t2u.com',
1131                 '*.unixlover.com',
1132                 '*.zik.mu',
1133         ),
1134         '*.uni.cc',
1135         'UNONIC.com' => array(
1136                 '*.at.tf',      // AlpenNIC
1137                 '*.bg.tf',
1138                 '*.ca.tf',
1139                 '*.ch.tf',      // AlpenNIC
1140                 '*.cz.tf',
1141                 '*.de.tf',      // AlpenNIC
1142                 '*.edu.tf',
1143                 '*.eu.tf',
1144                 '*.int.tf',
1145                 '*.net.tf',
1146                 '*.pl.tf',
1147                 '*.ru.tf',
1148                 '*.sg.tf',
1149                 '*.us.tf',
1150         ),
1151         'Up.pl' => array(
1152                 '.69.pl',                       // by nsk101869
1153                 '.crack.pl',            // by nsk101869
1154                 '.film.pl',                     // by sibr19002
1155                 '.h2o.pl',                      // by nsk101869
1156                 '.hostessy.pl',         // by nsk101869
1157                 '.komis.pl',            // by nsk101869
1158                 '.laski.pl',            // by nsk101869
1159                 '.modelki.pl',          // by nsk101869
1160                 '.muzyka.pl',           // by sibr19002
1161                 '.nastolatki.pl',       // by nsk101869
1162                 '.obuwie.pl',           // by nsk101869
1163                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1164                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1165                 '.sexchat.pl',          // by nsk101869
1166                 '.sexlive.pl',          // by nsk101869
1167                 '.tv.pl',                       // by nsk101869
1168                 '.up.pl',                       // by nsk101869
1169                 '.video.pl',            // by nsk101869
1170                 '.xp.pl',                       // nsk101869
1171         ),
1172         '*.uploadr.com',
1173         'url.ie',
1174         'url4.net',
1175         'url-c.com',
1176         'urlbee.com',
1177         'urlbounce.com',
1178         'urlcut.com',
1179         'urlcutter.com',
1180         'urlic.com',
1181         'urlin.it',
1182         'urlkick.com',
1183         'URLLogs.com' => array(
1184                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1185                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1186         ),
1187         '*.urlproxy.com',
1188         'urlser.com',
1189         'urlsnip.com',
1190         'urlzip.de',
1191         'urlx.org',
1192         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1193         'utun.jp',
1194         'uxxy.com',
1195         '*.v27.net',
1196         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1197                 '*.all.at',
1198                 '*.back.to',
1199                 '*.beam.at',
1200                 '*.been.at',
1201                 '*.bite.to',
1202                 '*.board.to',
1203                 '*.bounce.to',
1204                 '*.bowl.to',
1205                 '*.break.at',
1206                 '*.browse.to',
1207                 '*.change.to',
1208                 '*.chip.ms',
1209                 '*.connect.to',
1210                 '*.crash.to',
1211                 '*.cut.by',
1212                 '*.direct.at',
1213                 '*.dive.to',
1214                 '*.drink.to',
1215                 '*.drive.to',
1216                 '*.drop.to',
1217                 '*.easy.to',
1218                 '*.everything.at',
1219                 '*.fade.to',
1220                 '*.fanclub.ms',
1221                 '*.firstpage.de',
1222                 '*.fly.to',
1223                 '*.flying.to',
1224                 '*.fortunecity.co.uk',
1225                 '*.fortunecity.com',
1226                 '*.forward.to',
1227                 '*.fullspeed.to',
1228                 '*.fun.ms',
1229                 '*.gameday.de',
1230                 '*.germany.ms',
1231                 '*.get.to',
1232                 '*.getit.at',
1233                 '*.hard-ware.de',
1234                 '*.hello.to',
1235                 '*.hey.to',
1236                 '*.hop.to',
1237                 '*.how.to',
1238                 '*.hp.ms',
1239                 '*.jump.to',
1240                 '*.kiss.to',
1241                 '*.listen.to',
1242                 '*.mediasite.de',
1243                 '*.megapage.de',
1244                 '*.messages.to',
1245                 '*.mine.at',
1246                 '*.more.at',
1247                 '*.more.by',
1248                 '*.move.to',
1249                 '*.musicpage.de',
1250                 '*.mypage.org',
1251                 '*.mysite.de',
1252                 '*.nav.to',
1253                 '*.notrix.at',
1254                 '*.notrix.ch',
1255                 '*.notrix.de',
1256                 '*.notrix.net',
1257                 '*.on.to',
1258                 '*.page.to',
1259                 '*.pagina.de',
1260                 '*.played.by',
1261                 '*.playsite.de',
1262                 '*.privat.ms',
1263                 '*.quickly.to',
1264                 '*.redirect.to',
1265                 '*.rulestheweb.com',
1266                 '*.run.to',
1267                 '*.scroll.to',
1268                 '*.seite.ms',
1269                 '*.shortcut.to',
1270                 '*.skip.to snap.to',
1271                 '*.soft-ware.de',
1272                 '*.start.at',
1273                 '*.stick.by',
1274                 '*.surf.to',
1275                 '*.switch.to',
1276                 '*.talk.to',
1277                 '*.tip.nu',
1278                 '*.top.ms',
1279                 '*.transfer.to',
1280                 '*.travel.to',
1281                 '*.turn.to',
1282                 '*.vacations.to',
1283                 '*.videopage.de',
1284                 '*.virtualpage.de',
1285                 '*.w3.to',
1286                 '*.walk.to',
1287                 '*.warp9.to',
1288                 '*.window.to',
1289                 '*.yours.at',
1290                 '*.zap.to',
1291                 '*.zip.to',
1292         ),
1293         'VDirect.com' => array(
1294                 '*.emailme.net',
1295                 '*.getto.net',
1296                 '*.inetgames.com',
1297                 '*.netbounce.com',
1298                 '*.netbounce.net',
1299                 '*.oneaddress.net',
1300                 '*.snapto.net',
1301                 '*.vdirect.com',
1302                 '*.vdirect.net',
1303                 '*.webrally.net',
1304         ),
1305         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1306         'vgo2.com',
1307         'Voila.fr' => array('r.voila.fr'),      // Fix it
1308         'w3t.org',
1309         'wapurl.co.uk',
1310         'Wb.st' => array(
1311                 '*.team.st',
1312                 '*.wb.st',
1313         ),
1314         'wbkt.net',
1315         'WebAlias.com' => array(
1316                 '*.andmuchmore.com',
1317                 '*.browser.to',
1318                 '*.escape.to',
1319                 '*.fornovices.com',
1320                 '*.fun.to',
1321                 '*.got.to',
1322                 '*.hottestpix.com',
1323                 '*.imegastores.com',
1324                 '*.latest-info.com',
1325                 '*.learn.to',
1326                 '*.moviefever.com',
1327                 '*.mp3-archives.com',
1328                 '*.myprivateidaho.com',
1329                 '*.radpages.com',
1330                 '*.remember.to',
1331                 '*.resourcez.com',
1332                 '*.return.to',
1333                 '*.sail.to',
1334                 '*.sports-reports.com',
1335                 '*.stop.to',
1336                 '*.thrill.to',
1337                 '*.tophonors.com',
1338                 '*.uncutuncensored.com',
1339                 '*.up.to',
1340                 '*.veryweird.com',
1341                 '*.way.to',
1342                 '*.web-freebies.com',
1343                 '.webalias.com',
1344                 '*.webdare.com',
1345                 '*.xxx-posed.com',
1346         ),
1347         'webmasterwise.com',
1348         'witherst at hotmail.com' => array(     // by Tim Withers
1349                 '*.associates-program.com',
1350                 '*.casinogopher.com',
1351                 '*.ezpagez.com',
1352                 '*.vgfaqs.com',
1353         ),
1354         'wittylink.com',
1355         'wiz.sc',                       // tiny.cc related
1356         'X50.us' => array(
1357                 '*.i50.de',
1358                 '*.x50.us',
1359         ),
1360         'big5.xinhuanet.com',   ///gate/big5/
1361         'xhref.com',
1362         'Xn6.net' => array(
1363                 '*.9ax.net',
1364                 '*.xn6.net',
1365         ),
1366         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1367         '.y11.net',
1368         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1369                 '*.yesns.com',
1370                 '*.srv4u.net',
1371                 //blogne.com
1372         ),
1373         'yatuc.com',
1374         'yep.it',
1375         'yumlum.com',
1376         'yurel.com',
1377         'Z.la' => array(
1378                 'z.la',
1379                 't.z.la',
1380         ),
1381         'zaable.com',
1382         'zapurl.com',
1383         'zarr.co.uk',
1384         'zerourl.com',
1385         'ZeroWeb.org' => array(
1386                 '*.80t.com',
1387                 '*.firez.org',
1388                 '*.fizz.nu',
1389                 '*.ingame.org',
1390                 '*.irio.net',
1391                 '*.v33.org',
1392                 '*.zeroweb.org',
1393         ),
1394         'zhukcity.ru',
1395         'zippedurl.com',
1396         'zr5.us',
1397         '*.zs.pl',
1398         '*.zu5.net',
1399         'zuso.tw',
1400         '*.zwap.to',
1401 );
1402
1403 // --------------------------------------------------
1404
1405 $blocklist['A-2'] = array(
1406
1407         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1408         //
1409         //'*.dyndns.*', // Wildcard for dyndns
1410         //
1411         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1412         'ddns.ru' => array('*.bpa.nu'),
1413         'Dhs.org' => array(
1414                 '*.2y.net',
1415                 '*.dhs.org',
1416         ),
1417         '*.dnip.net',
1418         '*.dyndns.co.za',
1419         '*.dyndns.dk',
1420         '*.dyndns.nemox.net',
1421         'DyDNS.com' => array(
1422                 '*.ath.cx',
1423                 '*.dnsalias.org',
1424                 '*.dyndns.org',
1425                 '*.homeip.net',
1426                 '*.homelinux.net',
1427                 '*.mine.nu',
1428                 '*.shacknet.nu',
1429         ),
1430         '*.dtdns.net',                  // by jscott at sceiron.com
1431         '*.dynu.com',
1432         '*.dynup.net',
1433         '*.fdns.net',
1434         'J-Speed.net' => array(
1435                 '*.bne.jp',
1436                 '*.ii2.cc',
1437                 '*.jdyn.cc',
1438                 '*.jspeed.jp',
1439         ),
1440         '*.mydyn.de',
1441         '*.nerdcamp.net',
1442         'No-IP.com' => array(
1443                         '*.bounceme.net',
1444                         '*.hopto.org',
1445                         '*.myftp.biz',
1446                         '*.myftp.org',
1447                         '*.myvnc.com',
1448                         '*.no-ip.biz',
1449                         '*.no-ip.info',
1450                         '*.no-ip.org',
1451                         '*.redirectme.net',
1452                         '*.servebeer.com',
1453                         '*.serveblog.net',
1454                         '*.servecounterstrike.com',
1455                         '*.serveftp.com',
1456                         '*.servegame.com',
1457                         '*.servehalflife.com',
1458                         '*.servehttp.com',
1459                         '*.servemp3.com',
1460                         '*.servepics.com',
1461                         '*.servequake.com',
1462                         '*.sytes.net',
1463                         '*.zapto.org',
1464         ),
1465         '*.opendns.be',
1466         'Yi.org' => array(      // by dns at whyi.org
1467                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1468
1469                 // 72.55.129.46(redirect.yi.org)
1470                 '*.whyi.org',
1471                 '*.weedns.com',
1472         ),
1473         '*.zenno.info',
1474         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1475                         // and all non-recorded domains redirect to 'agoga.com' now
1476                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1477                         // http://agoga.com/aboutus.html
1478 );
1479
1480 // --------------------------------------------------
1481
1482 // B: Sample setting of:
1483 // Jacked (taken advantage of) and cleaning-less sites
1484 //
1485 // Please notify us about this list with reason:
1486 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1487
1488 $blocklist['B-1'] = array(
1489
1490         // B-1: Web spaces
1491         //
1492         //   Messages from forerunners:
1493         //     activefreehost.com
1494         //       "We regret to inform you that ActiveFreeHost
1495         //        free hosting service has is now closed (as of
1496         //        September 18). We have been online for over
1497         //        two and half years, but have recently decided
1498         //        to take time for software improvement to fight
1499         //        with server abuse, Spam advertisement and
1500         //        fraud."
1501         //
1502         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1503         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1504         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1505         '0Catch.com related' => array(
1506                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1507
1508                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1509                 '*.100freemb.com',              // by Danny Ashworth
1510                 '*.exactpages.com',
1511                 '*.fcpages.com',
1512                 '*.wtcsites.com',
1513
1514                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1515                 '*.741.com',
1516                 '*.freecities.com',
1517                 '*.freesite.org',
1518                 '*.freewebpages.org',
1519                 '*.freewebsitehosting.com',
1520                 '*.jvl.com',
1521
1522                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1523                 '*.freespaceusa.com',
1524                 '*.usafreespace.com',
1525
1526                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1527                 '*.dex1.com',
1528                 '*.questh.com',
1529
1530                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1531                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1532                 '*.012webpages.com',    // by support at 0catch.com
1533                 '*.150m.com',
1534                 '*.1sweethost.com',             // by whois at bluehost.com
1535                 '*.250m.com',                   // by jason at fahlman.net
1536                 '*.9cy.com',                    // by paulw0t at gmail.com
1537                 '*.angelcities.com',    // by cliff at eccentrix.com
1538                 '*.arcadepages.com',    // by admin at site-see.com
1539                 '*.e-host.ws',                  // by dns at jomax.net
1540                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1541                 '*.fw.bz',                              // by ben at kuehl.as
1542                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1543                 '*.g0g.net',                    // by domains at seem.co.uk
1544                 '*.galaxy99.net',               // by admin at bagchi.org
1545                 '*.greatnow.com',               // by peo at peakspace.com
1546                 '*.hautlynx.com',               // by hlewis28 at juno.com
1547                 '*.ibnsites.com',               // by cmrojas at mail.com
1548                 '*.just-allen.com',             // by extremehype at msn.com
1549                 '*.kogaryu.com',                // by angelguerra at msn.com
1550                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1551                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1552                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1553                 '*.s-enterprize.com',
1554                 '*.servetown.com',              // by jonahbliss at earthlink.net
1555                 '*.stinkdot.org',               // by bluedot at ziplip.com
1556                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1557                 '*.zomi.net',                   // by sianpu at gmail.com
1558         ),
1559         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1560         '100 Best Inc' => array(
1561                 // by 100 Best Inc (info at 100best.com)
1562
1563                 // 66.235.204.7(h204-007.bluefishhosting.com)
1564                 '*.2-hi.com',
1565                 '*.20fr.com',
1566                 '*.20ii.com',
1567                 '*.20is.com',
1568                 '*.20it.com',
1569                 '*.20m.com',    // by jlee at 100bestinc.com
1570                 '*.20to.com',
1571                 '*.2u-2.com',
1572                 '*.3-st.com',
1573                 '*.fws1.com',
1574                 '*.fw-2.com',
1575                 '*.inc5.com',
1576                 '*.on-4.com',
1577                 '*.st-3.com',
1578                 '*.st20.com',
1579                 '*.up-a.com',
1580
1581                 // 216.40.33.252(www-pd.mdnsservice.com)
1582                 '*.0-st.com',
1583                 '*.20me.com',
1584         ),
1585         '*.100foros.com',
1586         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1587         '20six Weblog Services' => array(
1588                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1589                 '.20six.co.uk',
1590                 '.20six.fr',
1591                 'myblog.de',
1592                 'myblog.es',
1593         ),
1594         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1595         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1596         '2IP.com' => array(
1597                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1598                 '*.2ip.jp',
1599                 '*.474.jp',
1600                 '*.consensus.jp',
1601                 '*.desyo.jp',
1602                 '*.dif.jp',
1603                 '*.pastels.jp',
1604                 '*.powerblogger.jp',
1605                 '*.vippers.jp',
1606                 '*.webpages.jp',
1607
1608                 // 205.209.97.56(non-existent)
1609                 '*.biografi.biz',
1610                 '*.biografi.info',
1611                 '*.biografi.org',
1612                 '*.biografi.us',
1613                 '*.datadiri.biz',
1614                 '*.datadiri.cc',
1615                 '*.datadiri.com',
1616                 '*.datadiri.info',
1617                 '*.datadiri.net',
1618                 '*.datadiri.org',
1619                 '*.datadiri.tv',
1620                 '*.datadiri.us',
1621                 '*.indo.bz',
1622                 '*.indo.cc',
1623                 '*.profil.bz',
1624                 '*.profil.cc',
1625                 '*.profil.cn',
1626                 '*.profil.in',
1627                 '*.profil.tv',
1628
1629                 // 205.209.101.47(non-existent)
1630                 '*.about.tc',
1631                 '*.about.vg',
1632                 '*.aboutus.gs',
1633                 '*.aboutus.ms',
1634                 '*.aboutus.tc',
1635                 '*.aboutus.vg',
1636                 '*.band.io',
1637                 '*.beijing.am',
1638                 '*.blogs.io',
1639                 '*.boke.am',
1640                 '*.clan.io',
1641                 '*.ecv.gs',
1642                 '*.ecv.ms',
1643                 '*.ecv.vg',
1644                 '*.freekong.cn',
1645                 '*.go2net.ws',
1646                 '*.hello.cn.com',
1647                 '*.hello.io',
1648                 '*.hits.io',
1649                 '*.hostingweb.us',
1650                 '*.hub.io',
1651                 '*.ide.am',
1652                 '*.inc.io',
1653                 '*.incn.in',
1654                 '*.indo.gs',
1655                 '*.indo.ms',
1656                 '*.indo.tc',
1657                 '*.indo.vg',
1658                 '*.infinitehosting.net',
1659                 '*.infinites.net',
1660                 '*.jushige.cn',
1661                 '*.jushige.com',
1662                 '*.kongjian.in',
1663                 '*.lan.io',
1664                 '*.llc.nu',
1665                 '*.maimai.in',
1666                 '*.max.io',
1667                 '*.musician.io',
1668                 '*.mycv.bz',
1669                 '*.mycv.nu',
1670                 '*.mycv.tv',
1671                 '*.myweb.io',
1672                 '*.ourprofile.biz',
1673                 '*.ourprofile.info',
1674                 '*.ourprofile.net',
1675                 '*.ourprofile.org',
1676                 '*.ourprofile.us',
1677                 '*.profil.gs',
1678                 '*.profil.ms',
1679                 '*.profil.tc',
1680                 '*.qiye.in',
1681                 '*.site.io',
1682                 '*.wan.io',
1683                 '*.web-cam.ws',
1684                 '*.webs.io',
1685                 '*.xixu.cc',
1686                 '*.zaici.am',
1687                 '*.zip.io',
1688                 '*.zuzhi.in',
1689
1690                 '*.profil.vg',          // 205.209.101.67(non-existent)
1691                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1692                 //'*.about.gs',         // No record
1693                 //'*.eprofile.us',      // non-existent
1694         ),
1695         '2Page.de' => array(
1696                 '.dreipage.de',
1697                 '.2page.de',
1698         ),
1699         '*.3-hosting.net',
1700         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1701         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1702         '*.8000web.com',        // 75.126.189.45
1703         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1704         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1705         'Ai.NET' => array(
1706                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1707                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1708         ),
1709         '*.aimoo.com',
1710         '*.alkablog.com',
1711         '*.alluwant.de',
1712         '.amkbb.com',
1713         'answerbag.com',        // 8.5.0.128
1714         'anyboard.net',
1715         'AOL.com' =>    // http://about.aol.com/international_services
1716                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1717                 '(?:aol|americaonline)\.' .
1718                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1719                 // Rough but works
1720         'Apple.com' => array('idisk.mac.com'),
1721         '*.askfaq.org',
1722         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1723         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1724         '*.asphost4free.com',
1725         'basenow.com',
1726         'BatCave.net' => array(
1727                 '.batcave.net',                 // 64.22.112.226
1728                 '.freehostpro.com',             // 64.22.112.226
1729         ),
1730         '*.bb-fr.com',
1731         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1732         '*.beeplog.com',
1733         'beepworld.it',
1734         'bestfreeforums.com',
1735         'bestvotexxx.com',
1736         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1737         'blinklist.com',
1738         'Blog.com' => array(
1739                 // by admin.domains at co.blog.com
1740                 '*.blog.com',
1741                 '*.blogandorra.com',
1742                 '*.blogangola.com',
1743                 '*.blogaruba.com',
1744         ),
1745         '*.blog.com.es',
1746         '*.blog.hr',
1747         '*.blog4ever.com',
1748         '*.blog-fx.com',
1749         '*.blogbeee.com',
1750         'blogas.lt',
1751         'blogbud.com',
1752         '*.blogburkinafaso.com',
1753         '*.blogcu.com',                 // by info at nokta.com
1754         'blogfreely.com',
1755         '*.blogdrive.com',
1756         '*.blogg.de',
1757         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1758         'bloggercrab.com',
1759         'bloggers.nl',
1760         '*.bloggingmylife.com',
1761         '*.bloggles.info',
1762         '*.blogharbor.com',
1763         '*.bloguj.eu',
1764         'bloguitos.com',
1765         'blogosfer.com',
1766         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1767         '*.blogslive.net',
1768         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1769         '*.blogstream.com',
1770         'blogyaz.com',
1771         'bloodee.com',
1772         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1773         'board-4you.de',
1774         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1775         '*.boardhost.com',
1776         'Bravenet.com' => array(
1777                 '*.bravenet.com',
1778                 '*.bravehost.com',
1779         ),
1780         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1781         'C2k.jp' => array(
1782                 // by Makoto Okuse (webmaster at 2style.net)
1783                 '.081.in',
1784                 '.2style.in',
1785                 '.bian.in',
1786                 '.curl.in',
1787                 '.ennui.in',
1788                 '.jinx.in',
1789                 '.loose.in',
1790                 '.mist.in',
1791                 '.muu.in',
1792                 '.naive.in',
1793                 '.panic.in',
1794                 '.slum.in',
1795
1796                 // by 2style, ns *.click2k.net, *.2style.net
1797                 '.2st.jp',
1798                 '.betty.jp',
1799                 '.cabin.jp',
1800                 '.cult.jp',
1801                 '.mippi.jp',
1802                 '.purety.jp',
1803                 '.rapa.jp',
1804                 '.side-b.jp',
1805                 '.web-box.jp',
1806                 '.yea.jp',
1807
1808                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1809                 '.2style.net',
1810                 '.click2k.net',
1811                 '.houka5.com',
1812
1813                 // by click2k, ns *.click2k.net, *.2style.net
1814                 '.psyco.jp',
1815                 '.sweety.jp',
1816
1817                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1818                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1819         ),
1820         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1821         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1822         '*.chueca.com',
1823         'city-forum.com',
1824         '*.craigslist.org',
1825         'concepts-mall.com',
1826         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1827         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1828         'counterhit.de',
1829         '*.createforum.net',
1830         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1831         '*.createmybb.com',
1832         'CwCity.de' => array(
1833                 '.cwcity.de',
1834                 '.cwsurf.de',
1835         ),
1836         'dakrats.net',
1837         '*.dcswtech.com',
1838         'del.icio.us',
1839         '*.devil.it',
1840         '*.diaryland.com',
1841         'diigo.com',                    ///user/
1842         'digg.com',
1843         'digstock.com',
1844         'domains at galaxywave.net' => array(
1845                 'blogstation.net',
1846                 '.phpbb-host.com',
1847         ),
1848         'dotbb.be',
1849         '*.dox.hu',                             // dns at 1b.hu
1850         '*.eadf.com',
1851         '*.eblog.com.au',
1852         '*.ekiwi.de',
1853         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1854         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1855         '*.ebloggy.com',
1856         'enunblog.com',
1857         '*.epinoy.com',
1858         '*.ez-sites.ws',
1859         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1860         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1861         '*.fathippohosting.com',        // 208.101.3.192
1862         'FC2.com' => array(
1863                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1864                         // Many traps available:
1865                         //      bqdr.blog98.fc2.com,       iframe
1866                         //      csfir.blog87.fc2.com,      iframe
1867                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1868                         //      sippou2006.blog60.fc2.com, iframe
1869                         // NOTE: 'blog.fc2.com' is not included
1870                 '*.h.fc2.com',  // Adult
1871         ),
1872         '*.fizwig.com',
1873         'forum.ezedia.net',
1874         '*.extra.hu',                   // angelo at jasmin.hu
1875         '*.fanforum.cc',
1876         'fingerprintmedia.com',
1877         '*.filelan.com',
1878         '*.fora.pl',
1879         '*.forka.eu',
1880         '*.foren-city.de',
1881         'foren-gratis.de',
1882         '*.foros.tv',
1883         '*.forospace.com',
1884         'foroswebgratis.com',
1885         '*.forum-on.de',
1886         '*.forum24.se',
1887         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1888         '.forum66.com',
1889         'Forumotion.com' => array(
1890                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1891                 '*.forumactif.com',     // 91.121.41.79
1892                 '*.editboard.com',      // 75.126.156.15
1893                 '*.sosblog.com',        // 74.86.25.140
1894
1895                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1896                 '*.0forum.biz',
1897                 '*.1forum.biz',
1898                 '*.1fr1.net',
1899                 '*.1talk.net',
1900                 '*.2forum.biz',
1901                 '*.3forum.biz',
1902                 '*.4forum.biz',
1903                 '*.4rumer.com',
1904                 '*.4rumer.net',
1905                 '*.4umer.com',
1906                 '*.4umer.net',
1907                 '*.5forum.biz',
1908                 '*.5forum.info',
1909                 '*.5forum.net',
1910                 '*.6forum.biz',
1911                 '*.6forum.info',
1912                 '*.77forum.com',
1913                 '*.7forum.biz',
1914                 '*.7forum.info',
1915                 '*.7forum.net',
1916                 '*.8forum.biz',
1917                 '*.8forum.info',
1918                 '*.8forum.net',
1919                 '*.9forum.biz',
1920                 '*.9forum.info',
1921                 '*.activebb.net',
1922                 '*.aforumfree.com',
1923                 '*.all-forum.net',
1924                 '*.all-up.com',
1925                 '*.alldiscussion.net',
1926                 '*.allgoo.net',
1927                 '*.allgoo.us',
1928                 '*.american-forum.net',
1929                 '*.americantalk.net',
1930                 '*.annuaire-forums.com',
1931                 '*.asiafreeforum.com',
1932                 '*.asianfreeforum.com',
1933                 '*.azureforum.com',
1934                 '*.azurforum.com',
1935                 '*.bestcheapforum.com',
1936                 '*.bestdiscussion.net',
1937                 '*.bestgoo.com',
1938                 '*.bestofforum.com',
1939                 '*.bestofforum.net',
1940                 '*.bestoforum.net',
1941                 '*.bforum.biz',
1942                 '*.big-forum.net',
1943                 '*.board-poster.com',
1944                 '*.board-realtors.com',
1945                 '*.boardonly.com',
1946                 '*.boardrealtors.net',
1947                 '*.boardsmessage.com',
1948                 '*.briceboard.com',
1949                 '*.bubblelol.com',
1950                 '*.buy-forum.com',
1951                 '*.buy-talk.com',
1952                 '*.buyforum.net',
1953                 '*.buygoo.net',
1954                 '*.buygoo.us',
1955                 '*.camelscrew.com',
1956                 '*.cheap-forum.com',
1957                 '*.cheapforum.net',
1958                 '*.chocoforum.com',
1959                 '*.chocoforum.net',
1960                 '*.clic-topic.com',
1961                 '*.clicboard.com',
1962                 '*.clictopic.com',
1963                 '*.clictopic.net',
1964                 '*.clictopics.com',
1965                 '*.clubdiscussion.net',
1966                 '*.coolbb.net',
1967                 '*.crazy4us.com',
1968                 '*.crazyfruits.net',
1969                 '*.createmyboard.com',
1970                 '*.crewcamel.com',
1971                 '*.cyberfreeforum.com',
1972                 '*.discutforum.com',
1973                 '*.discutfree.com',
1974                 '*.do-forum.com',
1975                 '*.do-goo.com',
1976                 '*.do-goo.net',
1977                 '*.do-talk.com',
1978                 '*.dodiscussion.com',
1979                 '*.dogoo.us',
1980                 '*.easydiscussion.net',
1981                 '*.easyforumlive.com',
1982                 '*.englishboard.net',
1983                 '*.englishboards.com',
1984                 '*.ephpbb.com',
1985                 '*.eraseboard.net',
1986                 '*.eraseboards.net',
1987                 '*.euro-talk.net',
1988                 '*.eurodiscussion.net',
1989                 '*.eurogoo.com',
1990                 '*.exchangesboard.com',
1991                 '*.exprimetoi.net',
1992                 '*.fairtopic.com',
1993                 '*.fforum.biz',
1994                 '*.fforumfree.com',
1995                 '*.first-forum.com',
1996                 '*.firstgoo.com',
1997                 '*.fororama.com',
1998                 '*.forum-2007.com',
1999                 '*.forum-actif.net',
2000                 '*.forum-free.biz',
2001                 '*.forum-free.org',
2002                 '*.forum-motion.com',
2003                 '*.forum0.biz',
2004                 '*.forum0.info',
2005                 '*.forum0.net',
2006                 '*.forum2.biz',
2007                 '*.forum3.biz',
2008                 '*.forum3.info',
2009                 '*.forum5.info',
2010                 '*.forum6.biz',
2011                 '*.forum6.info',
2012                 '*.forum7.biz',
2013                 '*.forum777.com',
2014                 '*.forum8.biz',
2015                 '*.forum9.biz',
2016                 '*.foruma.biz',
2017                 '*.forumactif.biz',
2018                 '*.forumactif.info',
2019                 '*.forumactif.name',
2020                 '*.forumactif.ws',
2021                 '*.forumaction.net',
2022                 '*.forumakers.com',
2023                 '*.forumandco.com',
2024                 '*.forumb.biz',
2025                 '*.forumc.biz',
2026                 '*.forumd.biz',
2027                 '*.forumdediscussions.com',
2028                 '*.forumdediscussions.net',
2029                 '*.forume.biz',
2030                 '*.forumeast.com',
2031                 '*.forumf.biz',
2032                 '*.forumfreek.com',
2033                 '*.forumfreez.com',
2034                 '*.forumg.biz',
2035                 '*.forumh.biz',
2036                 '*.forumh.net',
2037                 '*.forumhope.com',
2038                 '*.forumi.biz',
2039                 '*.forumice.net',
2040                 '*.foruminute.com',
2041                 '*.forumj.biz',
2042                 '*.forumj.net',
2043                 '*.forumjonction.com',
2044                 '*.forumk.biz',
2045                 '*.foruml.biz',
2046                 '*.forumm.biz',
2047                 '*.forummotion.com',
2048                 '*.forummotions.com',
2049                 '*.forumn.biz',
2050                 '*.forumn.net',
2051                 '*.forumo.biz',
2052                 '*.forumonline.biz',
2053                 '*.forumotions.com',
2054                 '*.forump.biz',
2055                 '*.forump.info',
2056                 '*.forumperso.com',
2057                 '*.forumpersos.com',
2058                 '*.forumplatinum.com',
2059                 '*.forumpro.fr',
2060                 '*.forumq.biz',
2061                 '*.forumr.biz',
2062                 '*.forumr.net',
2063                 '*.forumrama.com',
2064                 '*.forums-actifs.com',
2065                 '*.forums-actifs.net',
2066                 '*.forums1.net',
2067                 '*.forumsactifs.com',
2068                 '*.forumsactifs.net',
2069                 '*.forumsfree.org',
2070                 '*.forumsline.com',
2071                 '*.forumsmakers.com',
2072                 '*.forumsmotion.com',
2073                 '*.forumsmotions.com',
2074                 '*.forumt.biz',
2075                 '*.forumv.biz',
2076                 '*.forumvalue.com',
2077                 '*.forumw.biz',
2078                 '*.forumy.biz',
2079                 '*.free-boards.net',
2080                 '*.freediscussion.net',
2081                 '*.freediscussions.net',
2082                 '*.freeforum.me.uk',
2083                 '*.freeforumboard.net',
2084                 '*.freeforumfree.com',
2085                 '*.freevideotalk.com',
2086                 '*.frenchboard.com',
2087                 '*.fruitsandco.com',
2088                 '*.fullboards.com',
2089                 '*.fullsubject.com',
2090                 '*.fullsubject.net',
2091                 '*.get-forum.net',
2092                 '*.getdiscussion.com',
2093                 '*.getgoo.net',
2094                 '*.getgoo.us',
2095                 '*.gettalk.net',
2096                 '*.go-board.com',
2097                 '*.go-board.net',
2098                 '*.go-forum.net',
2099                 '*.go-ogler.com',
2100                 '*.gofreeforum.com',
2101                 '*.gogoo.us',
2102                 '*.goo-board.com',
2103                 '*.goo-boys.com',
2104                 '*.goo-dart.com',
2105                 '*.goo-dole.com',
2106                 '*.goo-done.com',
2107                 '*.gooboards.com',
2108                 '*.goodbb.net',
2109                 '*.goodearths.com',
2110                 '*.goodforum.net',
2111                 '*.goodoles.com',
2112                 '*.goodoolz.com',
2113                 '*.gooforum.com',
2114                 '*.gooforums.com',
2115                 '*.googoolz.com',
2116                 '*.great-forum.com',
2117                 '*.heavenforum.com',
2118                 '*.hforum.biz',
2119                 '*.high-forums.com',
2120                 '*.highbb.com',
2121                 '*.highforum.net',
2122                 '*.hightoxic.com',
2123                 '*.homediscussion.net',
2124                 '*.homegoo.com',
2125                 '*.hooxs.com',
2126                 '*.hot-me.com',
2127                 '*.hot4um.com',
2128                 '*.hotdiscussion.net',
2129                 '*.hotgoo.net',
2130                 '*.in-goo.com',
2131                 '*.in-goo.net',
2132                 '*.infodiscussion.net',
2133                 '*.ingoo.us',
2134                 '*.iowoi.com',
2135                 '*.jforum.biz',
2136                 '*.just-forum.net',
2137                 '*.justboard.net',
2138                 '*.justdiscussion.com',
2139                 '*.justforum.net',
2140                 '*.justgoo.com',
2141                 '*.keuf.net',
2142                 '*.lforum.biz',
2143                 '*.lifediscussion.net',
2144                 '*.lifeme.net',
2145                 '*.lightbb.com',
2146                 '*.logu2.com',
2147                 '*.longdomaine.com',
2148                 '*.lovediscussion.net',
2149                 '*.lowcostforum.com',
2150                 '*.make-free-forum.com',
2151                 '*.makeforumfree.com',
2152                 '*.makefreeforum.com',
2153                 '*.mam9.com',
2154                 '*.manageboard.com',
2155                 '*.max2forum.com',
2156                 '*.meabout.com',
2157                 '*.megabb.com',
2158                 '*.moncontact.com',
2159                 '*.moninter.net',
2160                 '*.motion-forum.net',
2161                 '*.motionforum.net',
2162                 '*.motionsforum.com',
2163                 '*.mrforum.net',
2164                 '*.msnboard.net',
2165                 '*.msnyou.com',
2166                 '*.my-free-board.com',
2167                 '*.my-free-boards.com',
2168                 '*.my-free-forum.com',
2169                 '*.my-free-forums.com',
2170                 '*.my-goo.com',
2171                 '*.my-goo.net',
2172                 '*.mydiscussionboard.com',
2173                 '*.myfreeboard.net',
2174                 '*.mygoo.org',
2175                 '*.myrealboard.com',
2176                 '*.netboarder.com',
2177                 '*.netdiscussion.net',
2178                 '*.netgoo.org',
2179                 '*.new-forum.net',
2180                 '*.newdiscussion.net',
2181                 '*.newgoo.net',
2182                 '*.nforum.biz',
2183                 '*.nice-album.com',
2184                 '*.nice-board.biz',
2185                 '*.nice-board.com',
2186                 '*.nice-board.net',
2187                 '*.nice-boards.com',
2188                 '*.nice-boards.net',
2189                 '*.nice-forum.com',
2190                 '*.nice-forum.net',
2191                 '*.nice-forums.com',
2192                 '*.nice-forums.net',
2193                 '*.nice-gallery.net',
2194                 '*.nice-subject.com',
2195                 '*.nice-subjects.com',
2196                 '*.nice-theme.com',
2197                 '*.nice-topic.com',
2198                 '*.nice-topics.com',
2199                 '*.nicealbums.com',
2200                 '*.niceboard.biz',
2201                 '*.niceboard.net',
2202                 '*.niceboards.net',
2203                 '*.nicegalleries.net',
2204                 '*.nicesubject.com',
2205                 '*.nicesubjects.com',
2206                 '*.nicetopic.net',
2207                 '*.nicetopics.com',
2208                 '*.nightforum.net',
2209                 '*.nocost-forum.com',
2210                 '*.nofeeforum.com',
2211                 '*.one-forum.net',
2212                 '*.onediscussion.net',
2213                 '*.onegoo.us',
2214                 '*.onlinegoo.com',
2215                 '*.onlyquery.com',
2216                 '*.open-board.com',
2217                 '*.openu2.com',
2218                 '*.othersboards.com',
2219                 '*.own0.com',
2220                 '*.pforum.biz',
2221                 '*.phpbb9.com',
2222                 '*.phpbbtest.com',
2223                 '*.positifforum.com',
2224                 '*.postalboard.com',
2225                 '*.prodiscussion.net',
2226                 '*.progoo.us',
2227                 '*.pureforum.net',
2228                 '*.qforum.biz',
2229                 '*.quickbb.net',
2230                 '*.realbb.net',
2231                 '*.realfreeforum.com',
2232                 '*.realmsn.com',
2233                 '*.rforum.biz',
2234                 '*.road2us.com',
2235                 '*.roomforum.com',
2236                 '*.saveboard.com',
2237                 '*.screwcamel.com',
2238                 '*.screwcamels.com',
2239                 '*.sendboard.com',
2240                 '*.sephorum.com',
2241                 '*.sforum.biz',
2242                 '*.shootboard.com',
2243                 '*.shop-forum.net',
2244                 '*.shopsubject.com',
2245                 '*.simpleboard.net',
2246                 '*.site-forums.com',
2247                 '*.smileyforum.net',
2248                 '*.sos-forum.net',
2249                 '*.sos4um.com',
2250                 '*.sos4um.net',
2251                 '*.sosforum.net',
2252                 '*.speedyforum.com',
2253                 '*.stationforum.com',
2254                 '*.subject-expert.com',
2255                 '*.subject-line.com',
2256                 '*.subject-tracer.com',
2257                 '*.subjectchange.com',
2258                 '*.subjectdeals.com',
2259                 '*.subjectdebate.com',
2260                 '*.subjectdone.com',
2261                 '*.subjectonline.com',
2262                 '*.subjectschange.com',
2263                 '*.subjectsecrets.com',
2264                 '*.super-forum.net',
2265                 '*.talk-forums.com',
2266                 '*.team-forum.net',
2267                 '*.team-talk.net',
2268                 '*.teamconvention.com',
2269                 '*.teamgoo.net',
2270                 '*.teensboards.com',
2271                 '*.the-talk.net',
2272                 '*.the-up.com',
2273                 '*.thegoo.us',
2274                 '*.thinksubject.com',
2275                 '*.top-board.com',
2276                 '*.top-forum.net',
2277                 '*.top-me.com',
2278                 '*.top-talk.net',
2279                 '*.topdiscussion.com',
2280                 '*.topgoo.net',
2281                 '*.topic-board.com',
2282                 '*.topic-board.net',
2283                 '*.topic-debate.com',
2284                 '*.topic-ideas.com',
2285                 '*.topic-mail.com',
2286                 '*.topic-zone.com',
2287                 '*.topicboard.net',
2288                 '*.topicboards.com',
2289                 '*.topicmanager.com',
2290                 '*.topicsolutions.net',
2291                 '*.toxicfarm.com',
2292                 '*.unlimitboard.com',
2293                 '*.unlimitedboard.com',
2294                 '*.unlimitedforum.com',
2295                 '*.up-with.com',
2296                 '*.up-your.com',
2297                 '*.urealboard.com',
2298                 '*.user-board.net',
2299                 '*.userboard.net',
2300                 '*.users-board.com',
2301                 '*.users-board.net',
2302                 '*.usersboard.com',
2303                 '*.usersboard.net',
2304                 '*.webgoo.us',
2305                 '*.withboards.com',
2306                 '*.withme.us',
2307                 '*.worldgoo.com',
2308                 '*.yahooboard.net',
2309                 '*.yforum.biz',
2310                 '*.yoo7.com',
2311                 '*.youneed.us',
2312                 '*.your-board.com',
2313                 '*.your-talk.com',
2314                 '*.yourme.net',
2315                 '*.zforum.biz',
2316
2317                 // 75.126.156.15 redirect to forumactif.com
2318                 '*.actifforum.com',
2319                 '*.fr-bb.com',
2320                 '*.superforum.fr',
2321
2322                 // 75.126.156.15 redirect to editboard.com
2323                 '*.bbfr.net',
2324                 '*.bbgraf.com',
2325                 '*.cinebb.com',
2326                 '*.darkbb.com',
2327                 '*.dynamicbb.com',
2328                 '*.zikforum.com',
2329
2330                 // 74.86.25.140 Used: sosblog.com
2331                 '*.0-up.com',
2332                 '*.0-yo.com',
2333                 '*.04live.com',
2334                 '*.06fr.com',
2335                 '*.0fra.com',
2336                 '*.0jet.com',
2337                 '*.0yoo.com',
2338                 '*.1toxic.com',
2339                 '*.2k00.com',
2340                 '*.2xik.com',
2341                 '*.blog-2007.com',
2342                 '*.blog-2008.com',
2343                 '*.blog-2009.com',
2344                 '*.blog-2010.com',
2345                 '*.blog-actif.net',
2346                 '*.blog-marley.com',
2347                 '*.blog-talker.com',
2348                 '*.blog2009.com',
2349                 '*.blogactif.net',
2350                 '*.blogalbums.com',
2351                 '*.blogalerie.com',
2352                 '*.blogaleries.com',
2353                 '*.blogallerys.com',
2354                 '*.blogandme.com',
2355                 '*.blogandyou.com',
2356                 '*.blogbubble.net',
2357                 '*.blogdollz.com',
2358                 '*.bloggeuse.net',
2359                 '*.bloggeuses.com',
2360                 '*.bloginstinct.com',
2361                 '*.bloginternet.net',
2362                 '*.blogmakers.net',
2363                 '*.blogmarley.net',
2364                 '*.blogminister.net',
2365                 '*.blogmorane.com',
2366                 '*.blognboard.com',
2367                 '*.blogotek.net',
2368                 '*.blogpas.com',
2369                 '*.blogpublisher.net',
2370                 '*.blogsalbum.com',
2371                 '*.blogsalbums.com',
2372                 '*.blogsfan.net',
2373                 '*.blogsgallerys.com',
2374                 '*.blogsitephp.com',
2375                 '*.blogsland.net',
2376                 '*.blogsmaker.com',
2377                 '*.blogsmakers.com',
2378                 '*.blogspeed.net',
2379                 '*.blogsup.net',
2380                 '*.blogsutil.com',
2381                 '*.blogsutils.com',
2382                 '*.blogsystem.net',
2383                 '*.blogtalker.net',
2384                 '*.blogtheque.net',
2385                 '*.blogutil.com',
2386                 '*.blogvsboard.com',
2387                 '*.briceblog.com',
2388                 '*.cibleblog.com',
2389                 '*.cristalblog.com',
2390                 '*.crystalblog.net',
2391                 '*.dad-blog.com',
2392                 '*.daddy-blog.com',
2393                 '*.defaultblog.com',
2394                 '*.discussionsblog.com',
2395                 '*.dollzblog.com',
2396                 '*.dtoxic.com',
2397                 '*.easiestblog.net',
2398                 '*.espaceblog.net',
2399                 '*.exitblog.net',
2400                 '*.expensiveblog.com',
2401                 '*.extra-blog.net',
2402                 '*.extrablog.net',
2403                 '*.facileblog.com',
2404                 '*.forblogger.com',
2405                 '*.forumsblogs.com',
2406                 '*.freephpblog.com',
2407                 '*.fresh-blog.net',
2408                 '*.galleryblog.net',
2409                 '*.galleryblogs.net',
2410                 '*.gallerysblog.com',
2411                 '*.gallerysblogs.com',
2412                 '*.hyper-blog.net',
2413                 '*.hyper-blogger.com',
2414                 '*.hyper-blogger.net',
2415                 '*.hyperblogger.net',
2416                 '*.instinctblog.com',
2417                 '*.jeunblog.com',
2418                 '*.jeuneblog.com',
2419                 '*.judblog.com',
2420                 '*.makeblog.net',
2421                 '*.man-blog.net',
2422                 '*.man-blogs.com',
2423                 '*.man-blogs.net',
2424                 '*.manblog.net',
2425                 '*.manblog.org',
2426                 '*.manblog.us',
2427                 '*.manblogs.net',
2428                 '*.mansblog.net',
2429                 '*.mansblogs.com',
2430                 '*.mansblogs.net',
2431                 '*.meetingsblogs.com',
2432                 '*.men-blog.net',
2433                 '*.men-blogs.com',
2434                 '*.men-blogs.net',
2435                 '*.menblog.us',
2436                 '*.menblogs.net',
2437                 '*.mensblogs.net',
2438                 '*.messaginblog.com',
2439                 '*.monblogger.com',
2440                 '*.mum-blog.com',
2441                 '*.mummy-blog.com',
2442                 '*.mummyblog.com',
2443                 '*.myareablog.com',
2444                 '*.myblog-online.net',
2445                 '*.mybloginternet.com',
2446                 '*.myblogland.com',
2447                 '*.myblogmag.com',
2448                 '*.myfreshblog.com',
2449                 '*.myinternetblog.net',
2450                 '*.myoverblog.com',
2451                 '*.myoverblog.net',
2452                 '*.mysharedblog.com',
2453                 '*.nice-albums.com',
2454                 '*.nice-galleries.com',
2455                 '*.nicealbum.net',
2456                 '*.nicegallery.net',
2457                 '*.notreblogger.com',
2458                 '*.outilblog.com',
2459                 '*.over-blogger.com',
2460                 '*.overblogger.com',
2461                 '*.pasblog.com',
2462                 '*.pasblog.net',
2463                 '*.perfect-blog.net',
2464                 '*.perfectblog.net',
2465                 '*.phpblogsite.com',
2466                 '*.phpmyblog.net',
2467                 '*.plateformeblog.com',
2468                 '*.playblogger.com',
2469                 '*.publishmyblog.com',
2470                 '*.pulseblog.net',
2471                 '*.pulseblogs.com',
2472                 '*.puretoxic.com',
2473                 '*.reservedblog.com',
2474                 '*.shareblog.net',
2475                 '*.shareblogs.net',
2476                 '*.shared-blogs.com',
2477                 '*.sharedblog.net',
2478                 '*.sharedblogs.net',
2479                 '*.solideblog.com',
2480                 '*.systemeblog.com',
2481                 '*.talkmeblog.com',
2482                 '*.toolsblog.net',
2483                 '*.toxicplace.com',
2484                 '*.ufreeblog.com',
2485                 '*.uliveblog.com',
2486                 '*.ultratoxic.com',
2487                 '*.utilblog.com',
2488                 '*.utilblogs.com',
2489                 '*.utilsblog.com',
2490                 '*.utilsblogs.com',
2491                 '*.various-blog.com',
2492                 '*.various-blog.net',
2493                 '*.various-blogs.com',
2494                 '*.various-blogs.net',
2495                 '*.variusblog.com',
2496                 '*.versusblog.com',
2497                 '*.vieuxblog.com',
2498                 '*.web-day.net',
2499                 '*.whatsblog.net',
2500                 '*.woman-blog.net',
2501                 '*.woman-blogs.com',
2502                 '*.woman-blogs.net',
2503                 '*.womanblog.com',
2504                 '*.womanblog.org',
2505                 '*.womanblog.us',
2506                 '*.womanblogs.net',
2507                 '*.womansblogs.com',
2508                 '*.womansblogs.net',
2509                 '*.women-blog.net',
2510                 '*.women-blogs.com',
2511                 '*.women-blogs.net',
2512                 '*.womenblog.us',
2513                 '*.womenblogs.net',
2514                 '*.womensblog.net',
2515                 '*.womensblogs.net',
2516                 '*.youblog.net',
2517                 '*.yourliveblog.com',
2518                 '*.yourweblog.net',
2519         ),
2520         '*.forumcommunity.net',
2521         '*.forumer.com',
2522         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2523         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2524         'forumhosting.org',
2525         '*.forums.com',
2526         'forumbolt.com',
2527         'phpbb.forumgratis.com',
2528         'forumlari.net',
2529         '*.forumlivre.com',
2530         'forumnow.com.br',
2531         '*.forumppl.com',
2532         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2533         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2534                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2535                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2536                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2537         '*.fory.pl',
2538         'fotolog.com',
2539         '*.fr33webhost.com',
2540         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2541         '*.free-25.de',
2542         '*.free-bb.com',
2543         'Free-Blog-Hosting.com' => array(
2544                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2545                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
2546                 'blog-tonite.com',                      // ns *.phpwebhosting.com
2547                 'blogznow.com',                         // ns *.phpwebhosting.com
2548                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
2549                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
2550         ),
2551         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2552         'free-guestbook.net',
2553         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2554         'freebb.nl',
2555         '*.freeclans.de',
2556         '*.freelinuxhost.com',  // by 100webspace.com
2557         '*.nofeehost.com',
2558         '*.freehyperspace.com',
2559         'freeforum.at',                 // by Sandro Wilhelmy
2560         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2561         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2562         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2563         '*.freewebhostingpro.com',
2564         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2565         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2566                 '*.6te.net',
2567                 '*.ueuo.com',
2568                 '*.orgfree.com',
2569         ),
2570         '*.freewebpage.org',
2571         'Freewebs.com' => array(        // by inquiries at freewebs.com
2572                 'freewebs.com',
2573                 'freewebsfarms.com',
2574         ),
2575         '*.freewebspace.net.au',
2576         '*.freemyforum.com',    // by messahost at gmail.com
2577         'freepowerboards.com',
2578         '*.freepowerboards.com',
2579         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2580         'Funpic.de' => array(   // by alexander at liemen.net
2581                 '*.funpic.de',
2582                 '*.funpic.org',
2583         ),
2584         'gb-hoster.de',
2585         '*.genblogger.com',
2586         'GetBetterHosting.com' => array(
2587                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2588                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2589         ),
2590         '*.gexxe.com',
2591         '*.goodboard.de',
2592         'gossiping.net',
2593         '*.greatnuke.com',
2594         '*.guestbook.de',
2595         'gwebspace.de',
2596         'Google.com' => array(
2597                 '*.blogspot.com',
2598                 'docs.google.com',
2599                 '*.googlepages.com',
2600                 'groups-beta.google.com',
2601         ),
2602         'guestbook.at',
2603         'club.giovani.it',
2604         '*.gratis-server.de',
2605         'healthcaregroup.com',
2606         '*.heliohost.org',
2607         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2608                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2609                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2610                 '*.front.ru',           // (domain at hc.ru)
2611                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2612                 '*.hotbox.ru',          // (domain at hc.ru)
2613                 '*.hotmail.ru',         // (hosting at hc.ru)
2614                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2615                 '*.land.ru',            // (domain at hc.ru)
2616                 '*.mail15.com',         // (hosting at hc.ru)
2617                 '*.mail333.com',        // (hosting at hc.ru)
2618                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2619                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2620                 '*.pisem.net',          // (hosting at hc.ru)
2621                 '*.pochta.ru',          // (domain at hc.ru)
2622                 '*.pochtamt.ru',        // (domain at hc.ru)
2623                 '*.pop3.ru',            // (domain at hc.ru)
2624                 '*.rbcmail.ru',         // (domain at hc.ru)
2625                 '*.smtp.ru',            // (domain at hc.ru)
2626         ),
2627         '*.hiblogger.com',              // by chiaokin at gmail.com
2628         '*.hit.bg',                             // by forumup.com ??
2629         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2630         '*.host-page.com',
2631         '*.hostingclub.de',
2632         'forums.hspn.com',
2633         '*.httpsuites.com',
2634         '*.hut2.ru',
2635         'ibfree.org',                   // 208.101.45.88
2636         'IC.cz' => array(
2637                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2638                 '*.hu.cz',                      // internetcentrum at gmail.com
2639                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2640                 '*.ic.cz',                      // internetcentrum at gmail.com
2641                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2642                 '*.own.cz',                     // internetcentrum at gmail.com
2643                 '*.phorum.cz',          // internetcentrum at gmail.com
2644                 '*.tym.cz',                     // internetcentrum at gmail.com
2645                 '*.tym.sk',                     // jobot at ignum.cz
2646                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2647                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2648                 '*.yw.sk',                      // jobot at ignum.cz
2649         ),
2650         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2651                 '*.0moola.com',
2652                 '*.3000mb.com',
2653                 '.501megs.com',
2654                 '*.teracities.com',
2655                 '*.xoompages.com',
2656         ),
2657         '*.icspace.net',
2658         'iEUROP.net' => array(
2659                 '*.ibelgique.com',
2660                 '*.iespana.es',
2661                 '*.ifrance.com',
2662                 '*.iitalia.com',
2663                 '*.iquebec.com',
2664                 '*.isuisse.com',
2665         ),
2666         '*.ihateclowns.net',
2667         '*.ii55.com',
2668         '*.ipbfree.com',
2669         '*.iphorum.com',
2670         '*.blog.ijijiji.com',
2671         '*.info.com',
2672         '*.informe.com',
2673         'it168.com',
2674         '.iwannaforum.com',
2675         '*.jconserv.net',
2676         '*.jeeran.com',
2677         '*.jeun.fr',
2678         '*.joolo.com',
2679         '*.journalscape.com',
2680         '*.justfree.com',
2681         '*.blog.kataweb.it',
2682         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2683         '*.kokoom.com',
2684         'koolpages.com',
2685         '*.kostenlose-foren.org',
2686         '*.ksiegagosci.info',
2687         'Lide.cz' => array(
2688                 '*.lide.cz',
2689                 '*.sblog.cz',
2690         ),
2691         '*.lioru.com',
2692         'limmon.net',
2693         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2694         'listible.com',                 ///list/
2695         'Livedoor.com' => array(
2696                 'blog.livedoor.jp',
2697                 '*.blog.livedoor.com',  // redirection
2698         ),
2699         '*.livejournal.com',
2700         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2701         '*.logme.nl',
2702         'lol.to',
2703         'ltss.luton.ac.uk',
2704         'Lycos.com' => array(
2705                 '.angelfire.com',       // angelfire.lycos.com
2706
2707                 '*.jubii.dk',   // search., medlem.
2708                 '*.jubiiblog.co.uk',
2709                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2710                 '*.jubiiblog.de',
2711                 '*.jubiiblog.dk',
2712                 '*.jubiiblog.fr',
2713                 '*.jubiiblog.it',
2714                 '*.jubiiblog.nl',
2715
2716                 '*.lycos.at',
2717                 '*.lycos.ch',
2718                 '*.lycos.co.uk',
2719                 'angelfire.lycos.com',
2720                 '*.lycos.de',
2721                 '*.lycos.es',
2722                 '*.lycos.fr',
2723                 '*.lycos.it',           // by Lycos Europe GmbH
2724                 '*.lycos.nl',
2725
2726                 '*.spray.se',
2727                 '*.sprayblog.se',
2728
2729                 '*.tripod.com',
2730         ),
2731         '*.mastertopforum.com',
2732         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2733         'meneame.net',
2734         '*.memebot.com',
2735         '*.messageboard.nl',
2736         'mokono GmbH' => array(
2737                 '*.blog.com.es',
2738                 '*.blog.de',
2739                 '*.blog.fr',
2740                 '*.blog.co.uk',
2741                 '*.blog.ca',
2742                 '*.blogs.se',
2743                 '*.blogs.fi',
2744                 '*.blogs.no',
2745                 '*.blogs.dk',
2746                 '*.blogs.ro',
2747                 '*.weblogs.pl',
2748                 '*.weblogs.cz',
2749                 '*.weblogs.hu',
2750         ),
2751         'mojklc.com',
2752         '*.mundoforo.com',
2753         'MonForum.com' => array(
2754                 '*.monforum.com',
2755                 '*.monforum.fr',
2756         ),
2757         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2758         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2759         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2760         'myblog.is',
2761         'myblogma.com',
2762         '*.myblogvoice.com',
2763         'myblogwiki.com',
2764         '*.myforum.ro',
2765         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2766         '*.myfreewebs.net',
2767         '*.mysite.com',
2768         '*.myxhost.com',
2769         '*.netfast.org',
2770         'NetGears.com' => array(
2771                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2772                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2773                 '*.freewebspace.com',   // 64.49.236.72
2774         ),
2775         'Netscape.com' => array('*.netscape.com'),
2776         'users.newblog.com',
2777         'neweconomics.info',
2778         '*.newsit.es',                          // 75.126.252.108
2779         '*.nm.ru',
2780         '*.nmj.pl',
2781         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2782         'Northsky.com' => array(
2783                 // by hostmaster at northsky.com
2784                 // northsky.com redirects to communityarchitect.com
2785
2786                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2787                 '*.00author.com',
2788                 '*.00band.com',
2789                 '*.00books.com',
2790                 '*.00cash.com',
2791                 '*.00cd.com',
2792                 '*.00dvd.com',
2793                 '*.00family.com',
2794                 '*.00game.com',
2795                 '*.00home.com',
2796                 '*.00it.com',
2797                 '*.00me.com',
2798                 '*.00movies.com',
2799                 '*.00page.com',
2800                 '*.00politics.com',
2801                 '*.00sf.com',
2802                 '*.00show.com',
2803                 '*.00song.com',
2804                 '*.00trek.com',
2805                 '*.00video.com',
2806                 '*.0me.com',
2807                 '*.0pi.com',
2808                 '*.happy-couple.com',
2809                 '*.warp0.com',
2810
2811                 '*.50megs.com',         // 64.136.25.170
2812
2813                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2814                 '*.00server.com',
2815                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2816                 '*.fanspace.com',
2817
2818                 // 64.136.25.168 by Mark Bishop
2819                 '*.00go.com',
2820                 '*.00space.com',
2821                 '*.00sports.com',
2822         ),
2823         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2824         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2825         'onlyfree.de',
2826         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2827         '*.ohost.de',
2828         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2829                 '.friko.pl',
2830                 '.jak.pl',
2831                 '.nazwa.pl',
2832                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2833                 '.w8w.pl',
2834                 '.za.pl',
2835                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2836         ),
2837         'oyax.com',                             ///user_links.php
2838         '*.p2a.pl',
2839         '*.parlaris.com',
2840         '*.pathfinder.gr',
2841         '*.persianblog.com',
2842         '*.phorum.pl',
2843         'Phpbb24.com' => array( // by Daniel Eriksson
2844                 '*.createforum.us',     // registry at webbland.se
2845                 '*.forumportal.us',     // registry at webbland.se
2846                 '*.freeportal.us',      // registry at network24.se
2847                 '*.phpbb2.us',          // daniel at danielos.com
2848                 '*.phpbb24.com',        // daniel at danielos.com
2849                 '*.myforumportal.com',  // daniel at webbland.se
2850         ),
2851         'phpbb4you.com',
2852         'phpbbcommunity.com',
2853         '*.phpbbx.de',
2854         '*.pochta.ru',
2855         '*.portbb.com',
2856         '*.portcms.com',
2857         'powerwebmaster.de',
2858         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2859         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2860         '*.probook.de',
2861         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2862         '*.pun.pl',
2863         'putfile.com',
2864         '*.quickfreehost.com',
2865         'quizilla.com',
2866         '*.quotaless.com',
2867         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2868         'razyboard.com',
2869         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2870         'realhp.de',
2871         'reddit.com',           ///user/
2872         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2873                 '*.juicypornhost.com',
2874                 '*.pornzonehost.com',
2875                 '*.xhostar.com',
2876         ),
2877         'RIN.ru' => array(
2878                 '*.sbn.bz',
2879                 '*.wol.bz',
2880         ),
2881         '*.sayt.ws',
2882         'Seblg.com' => array(
2883                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2884                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2885         ),
2886         '*.seo-blog.org',
2887         '*.shoutpost.com',
2888         '*.siamforum.com',
2889         '*.siteburg.com',
2890         '*.sitehome.ru',
2891         '*.sitesfree.com',              // support at livesearching.com
2892         '*.sitesled.com',
2893         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2894         'SmarTrans.com' => array(
2895                 '.3w.to',
2896                 '.aim.to',
2897                 '.djmp.jp',
2898                 '.nihongourl.nu',
2899                 '.urljp.com',
2900                 '.www1.to',
2901                 '.www2.to',
2902                 '.www3.to',
2903         ),
2904         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2905         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2906         'members.spboards.com',
2907         'forums.speedguide.net',
2908         'Sphosting.com' => array(       // by admin at sphosting.com
2909                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2910                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2911                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2912                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2913                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2914         ),
2915         '*.spicyblogger.com',
2916         '*.spotbb.com',
2917         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2918         '*.squarespace.com',
2919         'stickypond.com',
2920         'stormloader.com',
2921         'strikebang.com',
2922         '*.sultryserver.com',
2923         '*.t35.com',
2924         '*.talks.at',
2925         'tabletpcbuzz.com',
2926         '*.talkthis.com',
2927         'tbns.net',
2928         'telasipforums.com',
2929         'theforumhub.com',
2930         'thestudentunderground.org',
2931         'think.ubc.ca',
2932         '*.thumblogger.com',
2933         'Topix.com' => array(
2934                 'topix.com',
2935                 'topix.net',
2936         ),
2937         'forum.tourism-talk.com.au',
2938         'tycho at e-lab.nl' => array(
2939                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2940                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2941         ),
2942         '*.tumblr.com',
2943         'UcoZ Web-Services' => array(
2944                 '*.3dn.ru',
2945                 '*.clan.su',
2946                 '*.moy.su',
2947                 '*.my1.ru',
2948                 '*.p0.ru',
2949                 '*.pp.net.ua',
2950                 '*.ucoz.co.uk',
2951                 '*.ucoz.com',
2952                 '*.ucoz.net',
2953                 '*.ucoz.org',
2954                 '*.ucoz.ru',
2955                 '*.ws.co.ua',
2956         ),
2957         '*.unforo.net',
2958         'veoh.com',
2959         '*.vdforum.ru',
2960         '*.vtost.com',
2961         '*.vidiac.com',
2962         'Voila.fr' => array('.site.voila.fr'),
2963         'volny.cz',
2964         'voy.com',
2965         '*.welover.org',
2966         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2967                 '*.fasthost.tv',
2968                 '*.hothost.tv',
2969                 '*.isgreat.tv',
2970                 '*.issexy.tv',
2971                 '*.isterrible.tv',
2972                 '*.somegood.tv',
2973                 '*.adultnations.com',
2974                 '*.alladultfemale.com',
2975                 '*.alladultmale.com',
2976                 '*.allbisexual.com',
2977                 '*.allbreast.com',
2978                 '*.allfeminism.com',
2979                 '*.allmanpages.com',
2980                 '*.allmendirect.com',
2981                 '*.allphotoalbum.com',
2982                 '*.allsexpages.com',
2983                 '*.allwomanweb.com',
2984                 '*.attorney-site.com',
2985                 '*.bedclip.com',
2986                 '*.bestfamilysite.com',
2987                 '*.bestmusicpages.com',
2988                 '*.bigmoron.com',
2989                 '*.bourgeoisonline.com',
2990                 '*.candyfrom.us',
2991                 '*.cartoonhit.com',
2992                 '*.cat-on-line.com',
2993                 '*.chokesondick.com',
2994                 '*.closeupsof.us',
2995                 '*.cpa-site.com',
2996                 '*.dampgirl.com',
2997                 '*.dampgirls.com',
2998                 '*.deepestfetish.com',
2999                 '*.docspages.com',
3000                 '*.dog-on-line.com',
3001                 '*.dogcountries.com',
3002                 '*.dognations.com',
3003                 '*.doingitwith.us',
3004                 '*.drenchedface.com',
3005                 '*.drenchedlips.com',
3006                 '*.drspages.com',
3007                 '*.edogden.com',
3008                 '*.eroticountry.com',
3009                 '*.fasthost.tv',
3010                 '*.fineststars.com',
3011                 '*.foronlinegames.com',
3012                 '*.forplanetearth.com',
3013                 '*.freeadultparty.com',
3014                 '*.freespeechsite.com',
3015                 '*.gayadultxxx.com',
3016                 '*.gaytaboo.com',
3017                 '*.greatcookery.com',
3018                 '*.greatrecipepages.com',
3019                 '*.greatstreamingvideo.com',
3020                 '*.hatesit.com',
3021                 '*.hothost.tv',
3022                 '*.iscrappy.com',
3023                 '*.isgreat.tv',
3024                 '*.issexy.tv',
3025                 '*.isterrible.tv',
3026                 '*.itinto.us',
3027                 '*.japannudes.net',
3028                 '*.jesussave.us',
3029                 '*.jesussaveus.com',
3030                 '*.labialand.com',
3031                 '*.lettersfrom.us',
3032                 '*.lookingat.us',
3033                 '*.lunaticsworld.com',
3034                 '*.microphallus.com',
3035                 '*.mycatshow.com',
3036                 '*.mydogshow.com',
3037                 '*.myhardman.com',
3038                 '*.mylawsite.net',
3039                 '*.mylovething.com',
3040                 '*.onasoapbox.com',
3041                 '*.onlinepulpit.com',
3042                 '*.petitionthegovernment.com',
3043                 '*.photosfor.us',
3044                 '*.picturetrades.com',
3045                 '*.pleasekiss.us',
3046                 '*.politicalemergency.com',
3047                 '*.power-emergency.com',
3048                 '*.prayingfor.us',
3049                 '*.realbadidea.com',
3050                 '*.realisticpolitics.com',
3051                 '*.reallybites.com',
3052                 '*.reallypumping.us',
3053                 '*.reallyrules.com',
3054                 '*.reallysuckass.com',
3055                 '*.reallysucksass.com',
3056                 '*.realsweetheart.com',
3057                 '*.rottenass.com',
3058                 '*.schoolreference.com',
3059                 '*.sexheroes.com',
3060                 '*.sharewith.us',
3061                 '*.smutstars.com',
3062                 '*.soakinglips.com',
3063                 '*.somegood.tv',
3064                 '*.songsfrom.us',
3065                 '*.stinkingfart.com',
3066                 '*.stinkyhands.com',
3067                 '*.storiesfrom.us',
3068                 '*.taboocountry.com',
3069                 '*.television-series.com',
3070                 '*.thisbelongsto.us',
3071                 '*.totallyboning.us',
3072                 '*.vaginasisters.com',
3073                 '*.verydirtylaundry.com',
3074                 '*.videosfor.us',
3075                 '*.videosfrom.us',
3076                 '*.videosof.us',
3077                 '*.virtualdogshit.com',
3078                 '*.web1000.com',
3079                 '*.webpicturebook.com',
3080                 '*.wronger.com',
3081                 '*.xxxnations.com',
3082                 '*.yourwaywith.us',
3083         ),
3084         'webblog.ru',
3085         'weblogmaniacs.com',
3086         '.webng.com',                   // www.*, www3.*
3087         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3088         'websitetoolbox.com',
3089         '*.webtropia.com',
3090         'Welnet.de' => array(
3091                 'welnet.de',
3092                 'welnet4u.de',
3093         ),
3094         'wh-gb.de',
3095         '*.wikidot.com',
3096         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3097         '*.wmjblogs.ru',
3098         '*.wordpress.com',
3099         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3100         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3101         '*.xforum.se',
3102         'xfreeforum.com',
3103         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3104         '*.xoomwebs.com',
3105         '.xterm.org',
3106         '.freeblogs.xp.tl',
3107         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3108         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3109         'Yahoo.com' => array(
3110                 'flickr.com',
3111                 'geocities.com',
3112         ),
3113         'YANDEX, LLC.' => array(        // noc at yandex.net
3114                 '*.narod.ru',
3115                 'ya.ru',
3116                 'yandex.ru',
3117         ),
3118         '*.yeahost.com',
3119         'yourfreebb.de',
3120         'Your-Websites.com' => array(
3121                 '*.your-websites.net',
3122                 '*.web-space.ws',
3123         ),
3124 );
3125
3126 // --------------------------------------------------
3127
3128 $blocklist['B-2'] = array(
3129
3130         // B-2: Jacked contents, something implanted
3131         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3132         '*.3dm3.com',
3133         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3134         '*.1fr1.com',
3135         'a4aid.org',
3136         'aac.com',
3137         '*.aamad.org',
3138         'ad-pecjak.si',
3139         'agnt.org',
3140         'alwanforthearts.org',
3141         '*.anchor.net.au',
3142         'anewme.org',
3143         'arisedesign.net',              //Portfolio/d981/
3144         'internetyfamilia.asturiastelecentros.com',
3145         'Ball State University' => array('web.bsu.edu'),
3146         'btofaq.net',                   ///v3/forum
3147         'blepharospasm.org',
3148         'nyweb.bowlnfun.dk',
3149         '*.buzznet.com',
3150         'Carroll College' => array(
3151                 'carroll.edu',          ///boards/
3152         ),
3153         '*.canberra.net.au',
3154         'castus.com',
3155         'Case Western Reserve University' => array('case.edu'),
3156         'ceval.de',
3157         'chaco.gov.ar',
3158         'codespeak.net',
3159         'Colorado School of Mines' => array('ticc.mines.edu'),
3160         '*.colourware.co.uk',
3161         'cpuisp.com',
3162         'International Christian University' => array('icu.edu.ua'),
3163         '*.iphpbb.com',
3164         'board-z.de',
3165         '*.board-z.de',
3166         'California State University Stanislaus' => array('writing.csustan.edu'),
3167         'cannon.co.za',
3168         'columbosgarden.com',
3169         '*.communityhost.de',
3170         'connectionone.org',
3171         'deathwinds.com',
3172         'deforum.org',
3173         'delayedreaction.org',
3174         'deproduction.org',
3175         'dc503.org',
3176         'dialadeck.com',                ///images/
3177         'dre-centro.pt',
3178         'Duke University' => array('devel.linux.duke.edu'),
3179         '*.esen.edu.sv',
3180         'forums.drumcore.com',
3181         'dundeeunited.org',
3182         'energyglass.com.ua',
3183         'exclusivehotels.com',
3184         'info.ems-rfid.com',
3185         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3186         'fbwloc.com',
3187         '.fhmcsa.org.au',
3188         'findyourwave.co.uk',
3189         'frogcafe.net',
3190         'plone4.fnal.gov',
3191         'freeforen.com',
3192         'funkdoc.com',
3193         'funnyclipcentral.com',
3194         'gearseds.com',
3195         'generationrice.com',
3196         'ghettojava.com',
3197         'gnacademy.org',
3198         '*.goodboard.de',
3199         'GreenDayVideo.net' => array(
3200                 'greendayvideo.net',
3201                 'espanol.greendayvideo.net',
3202         ),
3203         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3204         'Harvard Law School' => array('blogs.law.harvard.edu'),
3205         'helpiammoving.com',
3206         'homepage-dienste.com',
3207         'Howard University' => array('networks.howard.edu'),
3208         'hullandhull.com',
3209         'Huntington University' => array('huntington.edu'),
3210         'huskerink.com',
3211         '.hyba.info',
3212         'ideas4you.com',        ///photos/
3213         'inda.org',
3214         '*.indymedia.org',      // by abdecom at riseup.net
3215         'instantbulletin.com',
3216         'internetincomeclub.com',
3217         '*.inventforum.com',
3218         'Iowa State University' => array('boole.cs.iastate.edu'),
3219         'ipwso.org',
3220         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3221         'ironmind.com',
3222         'skkustp.itgozone.com', // hidden JavaScript
3223         'jazz2online.com',
3224         '.jloo.org',
3225         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3226         'kjon.com',
3227         'Kazan State University' => array(
3228                 'dir.kzn.ru',
3229                 'sys.kcn.ru',
3230         ),
3231         'test.kernel.org',
3232         'kevindmurray.com',
3233         'kroegjesroutes.nl',
3234         '.legion.org',
3235         'Loyola Marymount University' => array('lmu.edu'),
3236         'forum.lixium.fr',
3237         'macfaq.net',
3238         'me4x4.com',
3239         'microbial-ecology.net',
3240         'minsterscouts.org',
3241         'morallaw.org',
3242         'morerevealed.com',
3243         'macronet.org',
3244         'mamiya.co.uk',
3245         'vcd.mmvcd.com',
3246         'Monmouth College' => array('department.monm.edu'),
3247         'mountainjusticemedia.org',
3248         '*.mybbland.com',
3249         'mydlstore.com',
3250         '*.netboardz.com',
3251         'North Carolina A&T State University' => array(
3252                 'ncat.edu',
3253                 'my.ncat.edu',
3254                 'hlc.ncat.edu',
3255         ),
3256         'placetobe.org',
3257         'users.nethit.pl',
3258         'nightclubvip.net',
3259         'njbodybuilding.com',
3260         'nlen.org',
3261         'North Carolina School of Science and Mathematics' => array(
3262                 'neverland.ncssm.edu',  ///include/web/forum/
3263                 'grid.ncssm.edu',               ///ncssm_grid/
3264         ),
3265         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3266         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3267         'offtextbooks.com',
3268         'ofimatika.com',
3269         'olympiafoto.com',              ///images/
3270         'omakase-net',                  // iframe
3271         'omikudzi.ru',
3272         'openchemist.net',
3273         'palungjit.com',
3274         'pataphysics-lab.com',
3275         'paypaldev.org',
3276         'paullima.com',
3277         'perl.org.br',
3278         'pfff.co.uk',
3279         'pimpo.com',                    ///_old_site/
3280         'pix4online.co.uk',
3281         'plone.dk',
3282         'preform.dk',
3283         'privatforum.de',
3284         'publicityhound.net',
3285         'puppylinux.net',               ///news/content/counter/pages/
3286         'qea.com',
3287         'rbkdesign.com',
3288         'rehoboth.com',
3289         'rodee.org',
3290         'ryanclark.org',
3291         '*.reallifelog.com',
3292         'rkphunt.com',
3293         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3294         'sapphireblue.com',
3295         'saskchamber.com',
3296         'savevoorhees.org',
3297         'sdhmalenovice.cz',             //galerie/
3298         'selikoff.net',
3299         'serbisyopilipino.org',
3300         'setbb.com',
3301         'sharejesusinternational.com',
3302         'silver-tears.net',
3303         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3304         '.softpress.com',
3305         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3306         'fora.taniemilitaria.pl',       ///phpbb
3307         'tehudar.ru',
3308         'Tennessee Tech University' => array('manila.tntech.edu'),
3309         'thebluebird.ws',
3310         'theosis.org',
3311         '*.thoforum.com',
3312         'troms-slekt.com',
3313         'theedgeblueisland.com',
3314         'toyshop.com.tw',               // /images/sigui/
3315         'torontoplace.com',
3316         'chat.travlang.com',
3317         'trickropingbylassue.com',
3318         'Truman State University' => array('mathbio.truman.edu'),
3319         'tuathadedannan.org',
3320         'txgotg.com',
3321         'tzaneen.co.za',
3322         'ugeavisen.com',                ///style/
3323         'forums.ugo.com',
3324         'whole.cs.unibo.it',
3325         'The University of North Dakota' => array(
3326                 'learn.aero.und.edu',
3327                 'ez.asn.und.edu',
3328         ),
3329         'The University of Alabama' => array('bama.ua.edu'),
3330         'unisonscotlandlaw.co.uk',
3331         'University of California' => array('classes.design.ucla.edu'),
3332         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3333         'University of Northern Colorado' => array('unco.edu'),
3334         'University of North Carolina' => array(
3335                 'elm.cis.uncw.edu'      ///testBoinc/
3336         ),
3337         'University of Toronto' => array(
3338                 'environment.utoronto.ca',
3339                 'grail.oise.utoronto.ca',
3340                 'utsc.utoronto.ca',
3341         ),
3342         'University of Wisconsin' => array(
3343                 'einstein.phys.uwm.edu'
3344         ),
3345         'urgentclick.com',
3346         'vacant.org.uk',
3347         'Villa Julie College' => array('www4.vjc.edu'),
3348         'Vail Valley Foundation' => array('.vvf.org'),
3349         'wabson.org',
3350         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3351         'webarch.com',          // by WebArchitects (webarch at insync.net)
3352         'weehob.com',
3353         'West Virginia University Parkersburg' => array('wvup.edu'),
3354         'williamsburgrentals.com',
3355         'wolvas.org.uk',
3356         'wookiewiki.org',
3357         'xsgaming.com',                 // Jacked
3358         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3359         'Yahoo.com' => array(
3360                 'blog.360.yahoo.com',
3361                 '*.groups.yahoo.com'
3362         ),
3363         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3364         'youthpeer.org',
3365         '*.zenburger.com',
3366         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3367 );
3368
3369 // --------------------------------------------------
3370
3371 $blocklist['C'] = array(
3372
3373         // C: Sample setting of:
3374         // Exclusive spam domains
3375         //
3376         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3377         // affiliates, finance, sending viruses, malicious attacks to browsers,
3378         // and/or mixed ones
3379         //
3380         // Please notify us about this list with reason:
3381         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3382
3383         // C-1: Domain sets (seems to be) born to spam you
3384         //
3385         // All buziness-related spam
3386         //'.biz'
3387         //
3388         'admin at seekforweb.com' => array(
3389                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3390                 '.lovestoryx.com',
3391                 '.loveaffairx.com',
3392                 '.onmore.info',
3393                 '.scfind.info',
3394                 '.scinfo.info',
3395                 '.webwork88.info',
3396         ),
3397         'boss at bse-sofia.bg' => array(        // by Boris
3398                 '.htewbop.org',
3399                 '.kimm--d.org',
3400                 '.gtre--h.org',
3401                 '.npou--k.org',
3402                 '.bres--z.org',
3403                 '.berk--p.org',
3404                 '.bplo--s.org',
3405                 '.basdpo.org',
3406                 '.jisu--m.org',
3407                 '.kire--z.org',
3408                 '.mertnop.org',
3409                 '.mooa--c.org',
3410                 '.nake--h.org',
3411                 '.noov--b.org',
3412                 '.suke--y.org',
3413                 '.vasdipv.org',
3414                 '.vase--l.org',
3415                 '.vertinds.org',
3416         ),
3417         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3418                 '.aqq3.info',
3419                 '.axa00.info',
3420                 '.okweb11.org',
3421                 '.okweb12.org',
3422                 '.okweb13.org',
3423                 '.okweb14.org',
3424         ),
3425         'opezdol at gmail.com' => array(
3426                 '.informazionicentro.info',
3427                 '.notiziacentro.info',
3428         ),
3429         'SomethingGen' => array(
3430                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3431                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3432                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3433                 // by Lee Chang (nebucha at model-x.com)
3434                 '.adult-chat-world.info',       // by Lui
3435                 '.adult-chat-world.org',        // by Lui
3436                 '.adult-sex-chat.info',         // by Lui
3437                 '.adult-sex-chat.org',          // by Lui
3438                 '.adult-cam-chat.info',         // by Lui
3439                 '.adult-cam-chat.org',          // by Lui
3440                 '.dildo-chat.org',                      // by Lui
3441                 '.dildo-chat.info',                     // by Lui
3442                 // flirt-online.info is not CamsGen
3443                 '.flirt-online.org',            // by Lui
3444                 '.live-adult-chat.info',        // by Lui
3445                 '.live-adult-chat.org',         // by Lui
3446                 '.sexy-chat-rooms.info',        // by Lui
3447                 '.sexy-chat-rooms.org',         // by Lui
3448                 '.swinger-sex-chat.info',       // by Lui
3449                 '.swinger-sex-chat.org',        // by Lui
3450                 '.nasty-sex-chat.info',         // by Lui
3451                 '.nasty-sex-chat.org',          // by Lui
3452
3453                 '.camshost.info',                       // by Sergey
3454                 '.camdoors.info',                       // by Sergey
3455                 '.chatdoors.info',                      // by Sergey
3456
3457                 // 89.149.206.225 by Pronin
3458                 '.dorozhka.info',
3459                 '.kolonochka.info',
3460                 '.knizhechka.info',
3461                 '.krantik.info',
3462                 '.lebedi.info',
3463                 '.loshad.info',
3464                 '.pechenka.info',
3465                 '.porosenok.info',
3466                 '.indyushonok.info',
3467                 '.kotyonok.info',
3468                 '.kozlyonok.info',
3469                 '.magnoliya.info',
3470                 '.svinka.info',
3471                 '.svinya.info',
3472                 '.televizorchik.info',
3473                 '.tumbochka.info',
3474                 '.zherebyonok.info',
3475
3476                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3477
3478                 '.adult-cam-chat-sex.info',             // by Lee
3479                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3480                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3481                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3482                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3483                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3484                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3485                 '.sex-chat-porn-cam.info',              // by Lee
3486         ),
3487         'mital at topo20.org' => array( // by Marcello Italianore
3488                 '.trevisos.org',
3489                 '.topo20.org',
3490         ),
3491         'WellCams.com' => array(
3492                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3493                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3494                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3495         ),
3496         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3497                 '.besturgent.org',
3498                 '.googletalknow.org',
3499                 '.montypythonltd.org',
3500                 '.supersettlemet.org',
3501                 '.thepythonfoxy.org',
3502                 '.ukgamesyahoo.org',
3503                 '.youryahoochat.org',
3504         ),
3505         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3506                 '.dbsajax.org',
3507                 '.acgt2005.org',
3508                 '.gopikottoor.com',
3509                 '.koosx.org',
3510                 '.mmgz.org',
3511                 '.zhiyehua.net',
3512         ),
3513         'vdf at lovespb.com' => array(  // by Andrey
3514                 '.02psa.info',
3515                 '.1818u.org',
3516                 '.18ew.info',
3517                 '.43sexx.org',
3518                 '.56porn.org',
3519                 '.6discount.info',
3520                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3521                 '.78rus.info',
3522                 '.92ssex.org',          // "ForumGenerator"
3523                 '.93adult.org',         // "ForumGenerator"
3524                 '.aboutsr.info',
3525                 '.aboutzw.info',
3526                 '.all23.info',
3527                 '.allvdf.info',
3528                 '.buy-dge.info',
3529                 '.buypo.info',
3530                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3531                 '.cv83.info',
3532                 '.cvwifw.info',
3533                 '.dabouts.info',
3534                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3535                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3536                 '.free01sa.info',
3537                 '.frees1.info',
3538                 '.freexz.info',
3539                 '.ifree-search.org',
3540                 '.lovespb.info',
3541                 '.myso2.info',
3542                 '.nb74u.info',
3543                 '.ohhh2.info',
3544                 '.ol43.info',
3545                 '.olala18.info',
3546                 '.oursales.info',
3547                 '.pasian1.info',
3548                 '.pldk.info',
3549                 '.po473.info',
3550                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3551                 '.poz2.info',
3552                 '.qpf8j4d.info',
3553                 '.saleqw.info',
3554                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3555                 '.sexz18.info',
3556                 '.sexy69a.info',
3557                 '.shedikc.info',
3558                 '.spb78.info',
3559                 '.usacanadauk.info',
3560                 '.v782mks.info',
3561                 '.vny0.info',
3562                 '.wifes1.info',
3563                 '.xranvam.info',
3564                 '.zenitcx.info',
3565                 '.zxolala.info',
3566         ),
3567         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3568                 '.care01.info',
3569                 '.care02.info',
3570                 '.care03.info',
3571                 '.care04.info',
3572                 '.care05.info',
3573                 '.care06.info',
3574                 '.care07.info',
3575                 '.care08.info',
3576                 '.care09.info',
3577                 '.care10.info',
3578                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3579                 '.klastar01.info',
3580                 '.klastar02.info',
3581                 '.klastar03.info',
3582                 '.klastar04.info',
3583                 '.klastar05.info',
3584                 '.klastar06.info',
3585                 '.klastar07.info',
3586                 '.klastar08.info',
3587                 '.klastar09.info',
3588                 '.klastar10.info',
3589                 '.um20ax01.info',
3590                 '.um20ax02.info',
3591                 '.um20ax03.info',
3592                 '.um20ax04.info',
3593                 '.um20ax05.info',
3594                 '.um20ax06.info',
3595                 '.um20ax07.info',
3596                 '.um20ax08.info',
3597                 '.um20ax09.info',
3598                 '.um20ax10.info',
3599         ),
3600         'forrass at gmail.com' => array(        // by Ismail
3601                 '.zmh01.info',
3602                 '.zmh02.info',
3603                 '.zmh03.info',
3604                 '.zmh04.info',
3605                 '.zmh05.info',
3606                 '.zmh06.info',
3607                 '.zmh07.info',
3608                 '.zmh08.info',
3609                 '.zmh09.info',
3610                 '.zmh10.info',
3611         ),
3612         'Varsylenko Vladimir and family' => array(
3613                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3614                 // by David C. Lack (David.C.Lack at dodgeit.com)
3615                 // by Kuzma V Safonov (admin at irtes.ru)
3616                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3617                 // by LAURI FUNK (vvm_kz at rambler.ru)
3618
3619                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3620                 '.abrek.info',                          // by Petrov
3621                 '.allsexonline.info',           // by Varsylenko
3622                 '.d1rnow.info',                         // by Petrov
3623                 '.doxer.info',                          // Petrov
3624                 '.freeforworld.info',           // Varsylenko
3625                 '.goodworksite.info',           // Varsylenko
3626                 '.onall.info',                          // by Varsylenko
3627                 '.powersiteonline.info',        // by Varsylenko
3628                 '.rentmysite.info',                     // by Varsylenko
3629                 '.sexdrink.info',                       // by Petrov
3630                 '.siteszone.info',                      // by Varsylenko
3631                 '.sfup.info',                           // by Petrov
3632                 '.superfreedownload.info',      // by Varsylenko
3633                 '.superneeded.info',            // by Varsylenko
3634                 '.srup.info',                           // by Petrov
3635
3636                 // 66.235.185.143(*.svabuse.info)
3637                 '.accommodationwiltshire.com',  // by Petrov
3638                 '.levines.info',                        // by Petrov
3639                 '.sernost.info',                        // by Petrov
3640                 '.sexvideosite.info',           // by Petrov
3641                 '.vvsag.info',                          // by Petrov
3642
3643                 // 81.0.195.134
3644                 '.michost.info',                        // by LAURI
3645                 '.parther.info',                        // by LAURI
3646
3647                 // 88.214.202.100
3648                 '.gitsite.info',                        // by Petrov
3649                 '.organiq.info',                        // by Petrov
3650                 '.yoursitedh.info',                     // by Petrov
3651
3652                 // 217.11.233.58 by Petrov
3653                 '.mp3vault.info',
3654
3655                 // DNS time out or failed
3656                 '.bequeous.info',                       // by Davi
3657                 '.sopius.info',                         // by Kuzma
3658                 '.sovidopad.info',                      // by Kuzma
3659                 '.yerap.info',                          // by Kuzma
3660         ),
3661         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3662                 '.flywebs.com',
3663                 '.hostrim.com',
3664                 '.playbit.com',
3665         ),
3666         'webmaster at dgo3d.info' => array(     // by Son Dittman
3667                 '.bsb3b.info',
3668                 '.dgo3d.info',
3669                 '.dgo5d.info',
3670         ),
3671         'cooler.infomedia at gmail.com' => array(
3672                 '.diabetescarelink.com',
3673                 '.firstdebthelp.com',
3674         ),
3675         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3676                 '.pokah.lv',
3677                 '.astrons.com',
3678         ),
3679         'seocool at bk.ru' => array(    // by Skar
3680                 '.implex3.com',
3681                 '.implex6.info',
3682                 '.softprof.org',
3683         ),
3684         'Caslim.info' => array(
3685                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3686                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3687         ),
3688         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3689                 '.777-poker.biz',
3690                 '.porn-11.com',
3691         ),
3692         'Conto.pl' => array(
3693                 '.8x.pl',               // domena at az.pl
3694                 '.3x3.pl',              // by biuro at nazwa.pl
3695                 '.conto.pl',    // by biuro at nazwa.pl
3696                 '.guu.pl',              // by conto.pl (domena at az.pl)
3697                 '.xcx.pl',              // domena at az.pl
3698                 '.yo24.pl',             // domena at az.pl
3699         ),
3700         'mail at pcinc.cn' => array(
3701                 // Domains by Lin Zhi Qiang
3702                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3703
3704                 // 125.65.112.11
3705                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3706                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3707                 '.shoopivdoor.com',
3708
3709                 // 125.65.112.12
3710                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3711                 '.hosetaibei.com',
3712                 '.playsese.com',
3713
3714                 // 125.65.112.13
3715                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3716                 '.ahatena.com',
3717                 '.asdsdgh-jp.com',
3718                 '.conecojp.net',
3719                 '.game-oekakibbs.com',
3720                 '.geocitygame.com',
3721                 '.gsisdokf.net',
3722                 '.korunowish.com',
3723                 '.netgamelivedoor.com',
3724                 '.soultakerbbs.net',
3725                 '.yahoo-gamebbs.com',
3726                 '.ywdgigkb-jp.com',
3727
3728                 // 125.65.112.14
3729                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3730                 '.acyberhome.com',
3731                 '.bbs-qrcode.com',
3732                 '.gamesroro.com',
3733                 '.gameyoou.com',
3734                 '.gangnu.com',
3735                 '.goodclup.com',
3736                 '.lineage321.com',
3737                 '.linkcetou.com',
3738                 '.love888888.com',
3739                 '.ragnarok-bbs.com',
3740                 '.ragnarok-game.com',
3741                 '.rmt-navip.com',
3742                 '.watcheimpress.com',
3743
3744                 // 125.65.112.15
3745                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3746                 '.18girl-av.com',
3747                 '.aurasoul-visjp.com',
3748                 '.gamaniaech.com',
3749                 '.game-mmobbs.com',
3750                 '.gameslin.net',
3751                 '.gemnnammobbs.com',
3752                 '.gogolineage.net',
3753                 '.grandchasse.com',
3754                 '.jpragnarokonline.com',
3755                 '.jprmthome.com',
3756                 '.maplestorfy.com',
3757                 '.netgamero.net',
3758                 '.nothing-wiki.com',
3759                 '.ourafamily.com',
3760                 '.ragnarok-sara.com',
3761                 '.rmt-lineagecanopus.com',
3762                 '.rmt-ranloki.com',
3763                 '.rogamesline.com',
3764                 '.roprice.com',
3765                 '.tuankong.com',
3766                 '.twreatch.com',
3767
3768                 // 125.65.112.22
3769                 // The same IP: web013.cdnhost.cn
3770                 '.lzy88588.com',
3771                 '.ragnaroklink.com',
3772
3773                 // 125.65.112.24
3774                 '.rmtfane.com',
3775                 '.fc2weday.com',
3776                 '.nlftweb.com',
3777
3778                 // 125.65.112.27
3779                 '.i520i.com',
3780                 '.sunwayto.com',
3781
3782                 // 125.65.112.31
3783                 // The same IP: web016.cdnhost.cn
3784                 '.twyaooplay.com',
3785
3786                 // 125.65.112.32
3787                 // The same IP: web037.cdnhost.cn
3788                 '.emeriss.com',
3789                 '.raginfoy.com',
3790                 '.ragnarokgvg.com',
3791                 '.rentalbbs-livedoor.com',
3792                 '.romaker.com',
3793                 '.sagewikoo.com',
3794                 '.samples112xrea.com',
3795                 '.wiki-house.com',
3796
3797                 // 125.65.112.49
3798                 '.chaosx0.com',
3799
3800                 // 125.65.112.88
3801                 // The same IP: web015.cdnhost.cn
3802                 '.a-hatena.com',
3803                 '.biglobe-ne.com',
3804                 '.blogplaync.com',
3805                 '.din-or.com',
3806                 '.dtg-gamania.com',
3807                 '.fcty-net.com',
3808                 '.game-fc2blog.com',
3809                 '.gameurdr.com',
3810                 '.getamped-garm.com',
3811                 '.interzq.com',
3812                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3813                 '.luobuogood.com',
3814                 '.ragnarok-search.com',
3815                 '.rinku-livedoor.com',
3816
3817                 // 125.65.112.90
3818                 '.gtvxi.com',
3819
3820                 // 125.65.112.91
3821                 // The same IP: web004.cdnhost.cn
3822                 '.6828teacup.com',
3823                 '.blog-livedoor.net',
3824                 '.cityblog-fc2web.com',
3825                 '.deco030-cscblog.com',
3826                 '.imbbs2t4u.com',
3827                 '.k5dionne.com',
3828                 '.lineagejp-game.com',
3829                 '.mbspro6uic.com',
3830                 '.slower-qth.com',
3831                 '.wikiwiki-game.com',
3832
3833                 // 125.65.112.93
3834                 // The same IP: web022.cdnhost.cn
3835                 '.aaa-livedoor.net',
3836                 '.cityhokkai.com',              // web022.cdnhost.cn
3837                 '.fanavier.net',
3838                 '.geocitylinks.com',    // web022.cdnhost.cn
3839                 '.kuronowish.net',              // web022.cdnhost.cn
3840                 '.ro-bot.net',
3841
3842                 // 125.65.112.95
3843                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3844                 '.23styles.com',
3845                 '.aehatena-jp.com',
3846                 '.ameblog-jp.net',
3847                 '.antuclt.com',
3848                 '.blog-ekndesign.com',
3849                 '.d-jamesinfo.com',
3850                 '.editco-jp.com',
3851                 '.ezbbsy.com',
3852                 '.extd-web.com',
3853                 '.fotblong.com',
3854                 '.game62chjp.net',
3855                 '.gamegohi.com',
3856                 '.gamesmusic-realcgi.net',
3857                 '.gamesragnaroklink.net',
3858                 '.homepage-nifty.com',
3859                 '.ie6xp.com',
3860                 '.irisdti-jp.com',
3861                 '.jklomo-jp.com',
3862                 '.jpxpie6-7net.com',
3863                 '.lian-game.com',
3864                 '.lineage-bbs.com',
3865                 '.lineage1bbs.com',
3866                 '.livedoor-game.com',
3867                 '.litcan.com',
3868                 '.lovejpjp.com',
3869                 '.m-phage.com',
3870                 '.muantang.com',
3871                 '.plusd-itmedia.com',
3872                 '.runbal-fc2web.com',
3873                 '.saussrea.com',
3874                 '.tooalt.com',
3875                 '.toriningena.net',
3876                 '.yahoodoor-blog.com',
3877                 '.yy14-kakiko.com',
3878
3879                 // 125.65.112.137
3880                 '.clublineage.com',
3881
3882                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3883                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3884                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3885
3886                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3887                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3888
3889                 '.games-nifty.com',             // 255.255.255.255 now
3890                 '.homepage3-nifty.com', // 255.255.255.255 now
3891         ),
3892         'caddd at 126.com' => array(
3893                 '.chengzhibing.com',    // by chen gzhibing
3894                 '.jplinux.com',                 // by lian liang
3895                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3896                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3897                 '.tooplogui.com',               // by zibing cai
3898                 '.twsunkom.com',                // by guo zhi wei
3899                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3900         ),
3901         'nuigiym2 at 163.com' => array( // by fly bg
3902                 '.linainfo.net',                // Seems IP not allocated now
3903                 '.lineagalink.com',             // 220.247.157.99
3904                 '.lineagecojp.com',             // 61.139.126.10
3905                 '.ragnarokonlina.com',  // 220.247.158.99
3906         ),
3907         'aakin at yandex.ru' => array(
3908                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3909                 '.entirestar.com',
3910                 '.superbuycheap.com',
3911                 '.topdircet.com',
3912         ),
3913         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3914                 '.tianmieccp.com',
3915                 '.xianqiao.net',
3916         ),
3917         'm.frenzy at yahoo.com' => array(       // by Michael
3918                 '.p5v.org',
3919                 '.j111.net',
3920                 '.searchhunter.info',
3921                 '.soft2you.info',
3922                 '.top20health.info',
3923                 '.top20ringtones.info',
3924                 '.top20travels.info',
3925                 '.v09v.info',
3926                 '.x09x.info',
3927                 '.zb-1.com',
3928         ),
3929         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3930                 '.bingogoldenpalace.info',
3931                 '.ccarisoprodol.info',
3932                 '.ezxcv.info',
3933                 '.isuperdrug.com',
3934                 '.pharmacif.info',
3935                 '.pornsexteen.biz',
3936                 '.ugfds.info',
3937                 '.vviagra.info',
3938         ),
3939         'anatolsenator at gmail.com' => array(  // by Anatol
3940                 '.cheapestviagraonline.info',
3941                 '.buyphentermineworld.info'
3942         ),
3943         'webmaster at mederotica.com' => array(
3944                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3945                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3946                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3947                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3948         ),
3949         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3950                 '.auase.info',          // by ilemavyq7461 at techie.com
3951                 '.axeboxew.info',       // by zygeu220 at writeme.com
3952                 '.boluzuhy.info',       // by pikico5419 at post.com
3953                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3954                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3955                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3956                 '.exidiqe.info',        // by kufyca5475 at mail.com
3957                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3958                 '.gubiwu.info',         // by lywunef6532 at iname.com
3959                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3960                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3961                 '.jiuuz.info',          // by meqil6549 at mail.com
3962                 '.nudetar.info',        // by vohepafi3536 at techie.com
3963                 '.nipud.info',          // by bohox9872 at mindless.com
3964                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3965                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3966                 '.olasep.info',         // by lizon8506 at mail.com
3967                 '.oueuidop.info',       // by arytyb6913 at europe.com
3968                 '.oviravy.info',        // by amyuu3883 at london.com
3969                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3970                 '.ragibe.info',         // by ehome4458 at myself.com
3971                 '.ucazib.info',         // by gorare7222 at consultant.com
3972                 '.udaxu.info',          // by gubima4007 at usa.com
3973                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3974                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3975                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3976                 '.yvaxat.info',         // by koqun9660 at mindless.com
3977                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3978         ),
3979         'Carmodelrank.com etc' => array(
3980                 // by Brianna Dunlord (briasmi at yahoo.com)
3981                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3982                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3983                 '.carmodelrank.com',// by Brianna
3984                 '.cutestories.net',     // by Brianna
3985                 '.sturducs.com',
3986                 '.bestother.info',      // by Tim
3987                 '.premiumcasinogames.com',      // by Brianna)
3988                 '.yaahooo.info',        // by Alice
3989         ),
3990         'aliacsandr at yahoo.com' => array(
3991                 '.cubub.info',                          // "Free Web Hosting"
3992         ),
3993         'aliacsandr85 at yahoo.com' => array(
3994                 // by Dr. Portillo or Eva Sabina Lopez Castell
3995                 '.xoomer.alice.it',                     // "Free Web Hosting"
3996                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3997                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3998                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3999                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4000                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4001                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4002                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4003                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4004                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4005                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4006                 '.viagra-price.org',            // by Eva
4007                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4008                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4009         ),
4010         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4011         'Something-Gamble' => array(
4012                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4013                 '.atonlineroulette.com',                        // by Blaise Johns
4014                 '.atroulette.com',                                      // by Gino Sand
4015                 '.betting-123.com',                                     // by Joana Caceres
4016                 '.betting-i.biz',                                       // by Joaquina Angus
4017                 '.casino-challenge.com',                        // by Maren Camara
4018                 '.casino-gambling-i.biz',                       // by Giselle Nations
4019                 '.casino-italian.com',                          // by Holley Yan
4020                 '.casino123.net',                                       // by Ta Baines
4021                 '.casinohammamet.com',                          // by Inger Barhorst
4022                 '.casinoqz.com',                                        // by Berenice Snow
4023                 '.casinos-777.net',                                     // by Iona Ayotte
4024                 '.crapsok.com',                                         // by Devon Adair,
4025                 '.dcasinoa.com',                                        // by August Hawkinson
4026                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4027                 '.free-dvd-player.biz',                         // by Rosario Kidd
4028                 '.florida-lottery-01.com',                      // by Romeo Dillon
4029                 '.gaming-123.com',                                      // by Jennifer Byrne
4030                 '.kenogo.com',                                          // by Adriane Bell
4031                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4032                 '.onbaccarat.com',                                      // by Kassandra Dunn
4033                 '.online-experts.biz',                          // by Liberty Helmick
4034                 '.onlinepoker-123.com',                         // by Andrea Feaster
4035                 '.playpokeronline-123.com',                     // by Don Lenard
4036                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4037                 '.texasholdem123.com',                          // by Savion Lasseter
4038                 '.texasholdem-777.com',                         // by Savanna Lederman
4039                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4040                 '.the-craps-100.us',                            // by Lorrine Ripley
4041                 '.the-free-online-game-913.us',         // by Kanesha Clem
4042                 '.the-free-poker-1798.us',                      // by Elaina Witte
4043                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4044                 '.the-online-game-poker-1185.us',       // by Merna Bey
4045                 '.the-playing-black-jack.com',          // by Kristine Brinker
4046                 '.the-poker-1082.us',                           // by Kristofer Boldt
4047                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4048                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4049                 '.the-video-black-jack.com',            // by Jagger Godin
4050         ),
4051         'Something-Insurance' => array(
4052                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4053
4054                 // 0-9
4055                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4056                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4057                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4058                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4059                 '.18wkcf.com',                                  // by Lexy Bohannon
4060                 '.2001werm.org',                                // by Raphael Rayburn
4061                 '.2004heeparea1.org',                   // by Dinorah Andrews
4062                 '.21nt.net',                                    // by Jaida Estabrook
4063                 '.3finfo.com',                                  // by Damian Pearsall
4064                 '.3somes.org',                                  // by Mauro Tillett
4065                 '.453531.com',                                  // by Kurt Flannery
4066                 '.4freesay.com',                                // by Eloy Jones
4067                 '.5ssurvey.com',                                // by Annamarie Kowalski
4068                 '.8-f22.com',                                   // by Larraine Evers
4069                 '.9q.org',                                              // by Ami Boynton
4070
4071                 // A
4072                 '.a40infobahn.com',                             // by Amit Nguyen
4073                 '.a4h-squad.com',                               // by Ross Locklear
4074                 '.aac2000.org',                                 // by Randi Turner
4075                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4076                 '.acahost.com',                                 // by Milton Haberman
4077                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4078                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4079                 '.activel-learning-site.com',   // by Mateo Conn
4080                 '.ad-makers.com',                               // by Shemeka Arsenault
4081                 '.ada-information.org',                 // by Josef Osullivan
4082                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4083                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4084                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4085                 '.aerovac-hotpress.com',                // by Trey Marlow
4086                 '.agfbiosensors.com',                   // by Lionel Dempsey
4087                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4088                 '.affordablerealestate.net',    // by Season Otoole
4089                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4090                 '.ahouserefinance.com',                 // by Young Alley
4091                 '.akirasworld.com',                             // by Piper Sullivan
4092                 '.alderik-production.com',              // by Joan Stiles
4093                 '.alltechdata.com',                             // by Dom Laporte
4094                 '.amconllc.com',                                // by Syble Benjamin
4095                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4096                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4097                 '.angelandcrown.net',                   // by Claretta Najera
4098                 '.ankoralina.com',                              // by Eladia Demers
4099                 '.antiquegoldmine.com',                 // by Keena Marlow
4100                 '.aquinosotros.com',                    // by Nanci Prentice
4101                 '.architectionale.com',                 // by Wilbur Cornett
4102                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4103                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4104                 '.arefinancehome.com',                  // by Duane Doran
4105                 '.arefinancinghome.com',                // by Ike Laney
4106                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4107                 '.auction-emall-site.info',             // by Dayle Denman
4108                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4109                 '.auto-buy-rite.com',                   // by Asuncion Buie
4110                 '.axxinet.net',                                 // by Roberta Gasper
4111                 '.azimutservizi.com',                   // by Ethelene Brook
4112                 '.azstudies.org',                               // by Bernardina Walden
4113
4114                 // B
4115                 '.babtrek.com',                                 // by Simonette Mcbrayer
4116                 '.babycujo.com',                                // by Francisco Akers
4117                 '.bakeddelights.com',                   // by Dave Evenson
4118                 '.bbcart.com',                                  // by Lucio Hamlin
4119                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4120                 '.best-digital-phone.us',               // by Meghann Crockett
4121                 '.bjamusements.com',                    // by Lurlene Butz
4122                 '.blursgsu.com',                                // by Weston Killian
4123                 '.bookwide.net',                                // by Tequila Zacharias
4124                 '.boreholes.org',                               // by Flora Reed
4125                 '.breathingassociaiton.org',    // by Alfred Crayton
4126                 '.birdingnh.com',                               // by Donald Healy
4127                 '.bisdragons.org',                              // by Lupe Cassity
4128                 '.blcschools.net',                              // by Alycia Jolly
4129                 '.bronte-foods.com',                    // by Kary Pfeiffer
4130                 '.buckscountyneighbors.org',    // by Maile Gaffney
4131                 '.buffalofudge.com',                    // by Mable Whisenhunt
4132                 '.burlisonforcongress.com',             // by Luann King
4133                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4134                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4135
4136                 // C
4137                 '.cabanes-web.com',                             // by Vaughn Latham
4138                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4139                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4140                 '.checaloya.com',                               // by Susana Coburn
4141                 '.calvarychapelrgvt.org',               // by Karan Kittle
4142                 '.cameras-esite.info',                  // by Karlee Frisch
4143                 '.cancerkidsforum.org',                 // by Samson Constantino
4144                 '.ccchoices.org',                               // by Kenia Cranford
4145                 '.ccupca.org',                                  // by Evonne Serrano
4146                 '.celebratemehome.com',                 // by Soraya Tower
4147                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4148                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4149                 '.choose-shoes.net',                    // by Geoffrey Setser
4150                 '.churla.com',                                  // by Ollie Wolford
4151                 '.circuithorns.co.uk',                  // by Nathanial Halle
4152                 '.clanbov.com',                                 // by Donell Hozier
4153                 '.cnm-ok.org',                                  // by Thalia Moye
4154                 '.coalitioncoalition.org',              // by Ned Macklin
4155                 '.consoleaddicts.com',                  // by Dorla Hoy
4156                 '.counterclockwise.net',                // by Melynda Hartzell
4157                 '.codypub.com',                                 // by Mercedes Coffman
4158                 '.comedystore.net',                             // by Floy Donald
4159                 '.covsys.co.uk',                                // by Abby Jacey
4160                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4161                 '.craftybidders.com',                   // by Dannie Lazo
4162                 '.credit-card-finder.net',              // by Mellie Deherrera
4163                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4164                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4165                 '.ctwine.org',                                  // by Hailey Knox
4166
4167                 // D
4168                 '.dazyation.com',                               // by Louis Strasser
4169                 '.deepfoam.org',                                // by Ethelyn Southard
4170                 '.debt-fixing.com',                             // by Dagny Rickman
4171                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4172                 '.domainadoption.com',                  // by Breann Pappas
4173                 '.diannbomkamp.com',                    // by Russel Croteau
4174                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4175                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4176                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4177                 '.digital-cameras-esite.info',  // by Milan Jolin
4178                 '.dnstechnet.net',                              // by Tamera Oman
4179                 '.drivenbydata.org',                    // by Katherine Noyes
4180                 '.dtmf.net',                                    // by Micki Slayton
4181                 '.domainsfound.com',                    // by Blossom Lively
4182
4183                 // E
4184                 '.ecstacyabuse.net',                    // by Alana Knight
4185                 '.e-digital-camera-esite.info', // by Romaine Cress
4186                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4187                 '.eldorabusecenter.org',                // by Annabella Oneal
4188                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4189                 '.encaponline.com',                             // by Patrick Keel
4190                 '.ez-shopping-online.com',              // by Gail Bartlett
4191
4192                 // F
4193                 '.faithfulwordcf.com',                  // by Bart Weeks
4194                 '.fammedassoc.com',                             // by Joshua Nelson
4195                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4196                 '.f00k.org',                                    // by Leslie Chapman
4197                 '.foreignrealtions.org',                // by Krystal Hawley
4198                 '.fortwebsite.org',                             // by Kristina Motley
4199                 '.fotofirstdigital.com',                // by Tad Whitfield
4200                 '.foundationcommons.org',               // by Caryn Eskew
4201                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4202                 '.freaky-cheats.com',                   // by Al Klein
4203                 '.free--spyware.com',                   // by Nikki Contreras
4204                 '.french-home-finance-consultant.info', // by Santana Melton
4205                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4206
4207                 // G
4208                 '.gaintrafficfast.com',                 // by Lila Meekins
4209                 '.gaygain.org',                                 // by Shell Davila
4210                 '.gcaaa.com',                                   // by Vallie Jaworski
4211                 '.generalsysteme.com',                  // by Cale Vogel
4212                 '.generation4games.co.uk',              // by Sonya Graham
4213                 '.german-dictionary.us',                // by Rex Daniel
4214                 '.gilmerrec.com',                               // by Leighann Guillory
4215                 '.glenthuntly-athletics.com',   // by Julee Hair
4216                 '.glorybaskets.com',                    // by Lynette Lavelle
4217                 '.goconstructionloan.com',              // by Willis Monahan
4218                 '.gohireit.com',                                // by Bertha Metzger
4219                 '.godcenteredpeople.com',               // by Jaycee Coble
4220
4221                 // H
4222                 '.healthinsuranceem.com',               // by Justin Munson
4223                 '.hearthorizon.info',                   // by Kory Session
4224                 '.hegerindustrial.com',                 // by Toni Wesley
4225                 '.herzequip.com',                               // by Princess Dunkle
4226                 '.hglcms.org',                                  // by Gladwin Ng
4227                 '.hipanoempresa.com',                   // by Shannon Staub
4228                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4229                 '.horse-racing-result.com',             // by Rodney Reynolds
4230                 '.hueckerfamily.com',                   // by Hershel Sell
4231
4232                 // I
4233                 '.ilove2win.com',                               // by Lamont Dickerson
4234                 '.ilruralassistgrp.org',                // by Moises Hauser
4235                 '.imageonsolutions.com',                // by Porsche Dubois
4236                 '.infoanddatacenter.com',               // by Eva Okelley
4237                 '.islamfakta.org',                              // by Goldie Boykin
4238                 '.ithomemortgage.com',                  // by Adelaide Towers
4239                 '.iyoerg.com',                                  // by Madyson Gagliano
4240
4241                 // J
4242                 '.jeffaxelsen.com',                             // by Daphne William
4243                 '.jeffreyf.net',                                // by Vito Platt
4244                 '.johnmartinsreality.com',              // by Pamela Larry
4245                 '.johnsilvers.net',                             // by Silver Battaglia
4246
4247                 // K
4248                 '.kcgerbil.org',                                // by Marisa Thayer
4249                 '.kdc-phoenix.com',                             // by Salma Shoulders
4250                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4251                 '.kosove.org',                                  // by Darwin Schneider
4252
4253                 // L
4254                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4255                 '.letsgokayaking.net',                  // by Winnie Adair
4256                 '.libertycabs.com',                             // by Adela Bonds
4257                 '.liquor-store-cellar.info',    // by Hugh Pearson
4258                 '.locomojo.net',                                // by Marco Harmon
4259                 '.lodatissimo.com',                             // by Adrian Greeson
4260                 '.lsawc.org',                                   // by Lara Han
4261                 '.lycos-test.net',                              // by Rigoberto Oakley
4262
4263                 // M
4264                 '.macro-society.com',                   // by Venessa Hodgson
4265                 '.marthasflavorfest.com',               // by Ahmad Lau
4266                 '.martin-rank.com',                             // by Cathleen Crist
4267                 '.maryandfrank.org',                    // by Theodore Apodaca
4268                 '.masterkwonhapkido.com',               // by Misty Graham
4269                 '.maxrpm-demo.com',                             // by Cristal Cho
4270                 '.mechanomorphic.com',                  // by Stanford Crow
4271                 '.mepublishing.net',                    // by Karly Fleenor
4272                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4273                 '.metwahairports.com',                  // by Nan Kitchen
4274                 '.middle-eastnews.com',                 // by Tybalt Altmann
4275                 '.mikepelchy.com',                              // by Sherly Pearson
4276                 '.milpa.org',                                   // by Nelly Aguilera
4277                 '.modayun.com',                                 // by Camilla Velasco
4278                 '.moonstoneerp.com',                    // by Garret Salmon
4279                 '.morosozinho.com',                             // by Lenore Tovar
4280                 '.morphadox.com',                               // by Hung Zielinski
4281                 '.moscasenlared.com',                   // by Tera Gant
4282                 '.sdjavasig.com',                               // by Gia Swisher
4283                 '.mpeg-radio.com',                              // by Sincere Beebe
4284                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4285                 '.mtseniorcenter.org',                  // by Frederic Ortega
4286                 '.mysteryclips.com',                    // by Edward Ashford
4287
4288                 // N
4289                 '.naavs.org',                                   // by Yuridia Gandy
4290                 '.naval-aviation.org',                  // by Roselle Campo
4291                 '.navigare-ischia.com',                 // by Arielle Coons
4292                 '.ncredc.org',                                  // by Brenda Nye
4293                 '.neonmotorsports.com',                 // by Giovanna Vue
4294                 '.nf-ny.com',                                   // by Yadira Hibbard
4295                 '.ngfdyqva.com',                                // by Emiliano Samples
4296                 '.nicozone.com',                                // by Blaine Shell
4297                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4298                 '.npawny.org',                                  // by Willard Murphy
4299                 '.nysdoed.org',                                 // by Elric Delgadillo
4300                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4301                 '.nytech-ir.com',                               // by Adrien Beals
4302
4303                 // O
4304                 '.oadmidwest.com',                              // by Gavin Kaplan
4305                 '.oarauto.com',                                 // by Susann Merriman
4306                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4307                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4308                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4309                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4310                 '.online-pills-24x7.biz',               // by Aide Hallock
4311                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4312                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4313                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4314                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4315                 '.otterbayweb.com',                             // by Maxwell Irizarry
4316
4317                 // P
4318                 '.painting-technique.us',               // by Bryanna Tooley
4319                 '.pakamrcongress.com',                  // by Bryce Summerville
4320                 '.patabney.com',                                // by Kailyn Slone
4321                 '.parde.org',                                   // by Ellie Yates
4322                 '.participatingprofiles.com',   // by Jaelynn Meacham
4323                 '.partnershipconference.org',   // by Alla Floyd
4324                 '.pet-stars.com',                               // by Carmon Luevano
4325                 '.planning-law.org',                    // by Trista Holcombe
4326                 '.ppawa.com',                                   // by Evonne Scarlett
4327                 '.precisionfilters.net',                // by Faustina Fell
4328
4329                 // Q
4330                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4331                 '.quick-debt-consolidation.net',        // by Lala Marte
4332                 '.quicktvr.com',                                // by Vernell Crenshaw
4333
4334                 // R
4335                 '.radicalsolutions.org',                // by Reece Medlin
4336                 '.randallburgos.com',                   // by Bradly Villa
4337                 '.rcassel.com',                                 // by Janiah Gallant
4338                 '.rearchitect.org',                             // by Marcus Gaudet
4339                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4340                 '.reprisenashville.com',                // by Hester Khan
4341                 '.reptilemedia.com',                    // by Alicia Patel
4342                 '.resellers2000.com',                   // by Dedra Kennedy
4343                 '.reverse-billing.com',                 // by Lazaro Gluck
4344                 '.richcapaldi.com',                             // by Kya Haggard
4345                 '.richformissouri.com',                 // by Alanna Elston
4346                 '.robstraley.com',                              // by Leida Bartell
4347                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4348                 '.rpgbbs.com',                                  // by Leonel Peart
4349                 '.ruralbusinessonline.org',             // by Lynsey Watters
4350                 '.ruwomenscenter.org',                  // by Vince Mclemore
4351                 '.ryanjowens.com',                              // by Janine Smythe
4352
4353                 // S
4354                 '.sagarmathatv.org',                    // by Liam Funke
4355                 '.sakyathubtenling.org',                // by Liane Falgout
4356                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4357                 '.sandishaven.com',                             // by Lino Soloman
4358                 '.scienkeen.com',                               // by Liza Navarra
4359                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4360                 '.severios.com',                                // by Isa Steffen
4361                 '.sexual-hot-girls.com',                // by Viviana Bolton
4362                 '.shakespearelrc.com',                  // by Luciana Weaver
4363                 '.shashran.org',                                // by Adriel Humphries
4364                 '.shoes-shop.us',                               // by Austen Higginbotham
4365                 '.skagitvalleybassanglers.com', // by Necole Thiele
4366                 '.skinsciencesalon.com',                // by Nena Rook
4367                 '.smartalternative.net',                // by Nicki Lariviere
4368                 '.sml338.org',                                  // by Nickole Krol
4369                 '.smogfee.com',                                 // by Sienna Kimble
4370                 '.sneakers-e-shop.info',                // by Nikki Fye
4371                 '.spacewavemedia.com',                  // by Thanh Gast
4372                 '.softkernel.com',                              // by Nicol Hummer
4373                 '.stjoanmerrillville.com',              // by Hunter Beckham
4374                 '.strelinger.com',                              // by Arron Highsmith
4375                 '.striking-viking.com',                 // by Kylie Endsley
4376                 '.sunnydeception.org',                  // by Amaya Llora
4377                 '.sunzmicro.com',                               // by Goddard Arreola
4378                 '.sv-iabc.org',                                 // by Braden Buck
4379                 '.sykotick.com',                                // by Pierce Knecht
4380
4381                 // T
4382                 '.tbody.net',                                   // by Ormond Roman
4383                 '.the-pizzaman.com',                    // by Mario Ramsey
4384                 '.the-shoes.us',                                // by Alejandro Gaffney
4385                 '.theborneocompany.com',                // by Bryanna Tooley
4386                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4387                 '.thehomeschool.net',                   // by September Concepcio
4388                 '.thenewlywed.com',                             // by Allegra Marra
4389                 '.tigerspice.com',                              // by Denis Mosser
4390                 '.tnaa.net',                                    // by Jasmine Andress
4391                 '.top-finance-sites.com',               // by Maryann Doud
4392                 '.tradereport.org',                             // by Bettie Sisk
4393                 '.transmodeling.com',                   // by Martine Button
4394                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4395                 '.tsaoc.com',                                   // by Heriberto Mcfall
4396                 '.tsunamidinner.com',                   // by Nannie Richey
4397
4398                 // U
4399                 '.uhsaaa.com',                                  // by Risa Herbert
4400                 '.ultradeepfield.org',                  // by Bobby Ragland
4401                 '.umkclaw.info',                                // by Cammy Kern
4402                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4403                 '.usa-wolf.com',                                // by Jacklyn Morrill
4404                 '.usjobfair.com',                               // by Lorina Burchette
4405
4406                 // V
4407                 '.vacancesalouer.com',                  // by Loris Bergquist
4408                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4409                 '.valleylibertarians.org',              // by Lena Massengale
4410                 '.vanderbiltevents.com',                // by Gannon Krueger
4411                 '.vanwallree.com',                              // by Michelina Donahue
4412                 '.vcertificates.com',                   // by Hyun Lamp
4413                 '.vonormytexas.us',                             // by Suzette Waymire
4414
4415                 // W
4416                 '.washingtondc-areahomes.net',  // by Ailene Broome
4417                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4418                 '.wolsaoh.org',                                 // by Daniela English
4419                 '.worldpropertycatalog.com',    // by Aray Baxter
4420
4421                 // Y
4422                 '.yankee-merchants.com',                // by Jackson Hinojosa
4423                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4424                 '.yourdomainsource.com',                // by Deems Weingarten
4425
4426                 // Z
4427                 '.zkashan.com',                                 // by Evan Light
4428                 '.zockclock.com',                               // by Dorothea Guthrie
4429         ),
4430         'Something-Drugs' => array(
4431                 // Drugs / Pills / Diet
4432                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4433                 '.abdelghani-shady.com',                // by Elly Alton
4434                 '.bangbangfilm.com',                    // by Davin Chou
4435                 '.centroantequera.com',                 // by Keon Kwiatkowski
4436                 '.champagne-cellar.info',               // by Kandis Rizzo
4437                 '.chix0r.org',                                  // by Christoper Baird
4438                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4439                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4440                 '.fast-cash-01.com',                    // by Edgar Oliver
4441                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4442                 '.fn-nato.com',                                 // by Donny Dunlap
4443                 '.gqyinran.com',                                // by Alejandro Parks
4444                 '.juris-net.com',                               // by Rachelle Bravo
4445                 '.leftpencey.com',                              // by Aileen Ashby
4446                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4447                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4448                 '.palaceroyale.net',                    // by Brycen Stebbins
4449                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4450                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4451                 '.yukissushi.com',                              // by Donell Hozier
4452         ),
4453         'Something-Others' => array(
4454                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4455                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4456         ),
4457         'Something-NoApp' => array(
4458                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4459                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4460                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4461                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4462                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4463         ),
4464         'Cortez and family' => array(
4465                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4466                 '.dronadaarsujf.info',  // by Cortez
4467                 '.fromnananaref.info',  // by Cortez
4468                 '.goorkkjsaka.info',    // by Cortez
4469                 '.jkdfjjkkdfe.info',    // by Rico
4470                 '.jkllloldkjsa.info',   // by Cortez
4471                 '.nnjdksfornms.info',   // by Rico
4472                 '.mcmdkkksaoka.info',   // by Cortez
4473                 '.srattaragfon.info',   // by Cortez
4474                 '.yreifnnonoom.info',   // by Rico
4475                 '.zjajjsvgeuds.info',   // by Cortez
4476         ),
4477         'admin at ematuranza.com' => array(
4478                 '.ancorlontano.com',
4479                 '.dentroallago.com',
4480                 '.digiovinezza.com',
4481                 '.ematuranza.com',
4482                 '.ilfango.com',
4483                 '.nullarimane.com',
4484                 '.questaimmensa.com',
4485                 '.tentailvolo.com',
4486                 '.unatenerezza.com',
4487                 '.volgondilettose.com',
4488         ),
4489         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4490                 '.bid99df.info',
4491                 '.bj498uf.info',
4492                 '.edeuj84.info',
4493                 '.f4mfid.info',
4494                 '.g4vf03a.info',
4495                 '.j09j4r.info',
4496                 '.jv4r8hv.info',
4497                 '.k43sd3.info',
4498                 '.k4r84d.info',
4499                 '.k4rvda.info',
4500                 '.k4v0df.info',
4501                 '.k903os.info',
4502                 '.k9df93d.info',
4503                 '.kv94fd.info',
4504                 '.ksjs93.info',
4505                 '.l0ks03.info',
4506                 '.l9u3jc.info',
4507                 '.lv043a.info',
4508                 '.nh94h9.info',
4509                 '.m94r9d.info',
4510                 '.s87fvd.info',
4511                 '.v3k0d.info',
4512                 '.v4r8j4.info',
4513                 '.vf044s.info',
4514                 '.vj49rs.info',
4515                 '.vk498j.info',
4516                 '.u03jow.info',
4517         ),
4518         'Nikhil and Brian' => array(
4519                 // by Brian Dieckman (info at iudndjsdhgas.info)
4520                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4521                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4522                 '.ihfjeswouigf.info',   // by Brian, / was not found
4523                 '.iudndjsdhgas.info',   // by Brian, / was not found
4524                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4525                 '.jiatdbdisut.info',    // by Brian, / was not found
4526                 '.jkfierwoundhw.info',  // by Brian, / was not found
4527                 '.kfjeoutweh.info',             // by Brian, / was not found
4528                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4529                 '.oudjskdwibfm.info',   // by Brian, / was not found
4530                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4531                 '.itxbsjacun.info',             // by Nikhil, / was not found
4532                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4533                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4534                 '.najedncdcounrd.info', // by Nikhil, / was not found
4535                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4536                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4537                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4538                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4539                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4540                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4541                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4542                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4543                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4544         ),
4545         'wealth777 at gmail.com' => array(      // by Henry Ford
4546                 '.brutal-forced.com',
4547                 '.library-bdsm.com',
4548                 '.rape-fantasy.us',
4549         ),
4550         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4551                 '.purerotica.com',
4552                 '.richsex.com',
4553                 '.servik.net',
4554                 '.withsex.com',
4555         ),
4556         'dreamteammoney.com' => array(
4557                 '.dreamteammoney.com',  // dtmurl.com related
4558                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4559         ),
4560         'KLIK VIP Search and family' => array(
4561                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4562                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4563                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4564                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4565                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4566                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4567                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4568         ),
4569         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4570                 '.antivirs.info',
4571                 '.antivirus1.info',
4572                 '.antivirus2.info',
4573         ),
4574         'wasam at vangers.net and family' => array(
4575
4576                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4577                 '.bahatoca.org',
4578                 '.digestlycos.org',
4579                 '.educativaanale.info',
4580                 '.guildstuscan.org',
4581                 '.isaakrobbins.info',
4582                 '.isfelons.org',
4583                 '.lvwelevated.org',
4584                 '.macphersonaca.org',
4585                 '.markyaustrian.org',
4586                 '.michelepug.org',
4587                 '.opalbusy.info',
4588                 '.quijotebachata.info',
4589                 '.salthjc.info',
4590                 '.shogunnerd.info',
4591                 '.solarissean.org',
4592                 '.sparkgsx.info',
4593                 '.tarzanyearly.org',
4594                 '.tulabnsf.org',
4595                 '.vaccarinos.org',
4596
4597                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4598                 '.e2007.info',
4599                 '.cmoss.info',
4600
4601                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4602                 '.finddesk.org',
4603                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4604                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4605                 '.rcatalog.org',
4606                 '.sbitzone.org',
4607
4608                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4609                 '.cheapns.org',
4610                 '.my-top.net',
4611                 '.sfind.net',
4612                 '.sspot.net',
4613                 '.suvfind.info',
4614
4615                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4616                 '.trumber.com',
4617
4618                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4619                 '.blogduet.org',
4620                 '.carelf.info',
4621                 '.cmagic.org',
4622                 '.cspell.org',
4623                 '.dspark.org',
4624                 '.dtonic.org',
4625                 '.mcharm.info',
4626                 '.mslook.info',
4627                 '.phpdinnerware.info',
4628                 '.rnation.org',
4629                 '.uzing.org',
4630
4631                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4632                 '.allbar.info',
4633                 '.allersearch.org',
4634                 '.allzoom.org',
4635                 '.dynall.org',
4636                 '.fastopia.org',
4637                 '.offasfast.info',
4638                 '.rblast.org',
4639                 '.rchistes.info',
4640                 '.rette.org',
4641                 '.shufflequince.org',
4642                 '.suvlook.org',
4643
4644                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4645                 '.290cabeza.org',
4646                 '.bossierpainted.org',
4647                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4648                 '.definekonica.info',   // Admin: tvaals at vangers.net
4649                 '.gradetelemundo.info',
4650                 '.hydraulickin.info',
4651                 '.indicadorestmj.info',
4652                 '.keeleykincaid.org',
4653                 '.kleenbowser.info',
4654                 '.pipnickname.info',
4655                 '.pacolily.org',
4656                 '.redeemtrabalho.info',
4657                 '.scanmakerchua.info',
4658                 '.titanmessina.info',
4659                 '.tragratuit.org',
4660                 '.yeareola.info',
4661         ),
4662         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4663                 '.canadianmedsworld.info',      // 84.252.133.112
4664                 '.tabsdrugstore.info',          // 84.252.133.114
4665                 '.tabsstore.info',                      // 84.252.133.114
4666                 '.topcholesterol.info',         // 84.252.133.132
4667         ),
4668         'be.cx' => array(
4669                 '.be.cx',
4670                 '.ca.cx',
4671         ),
4672         'john780321 at yahoo.com' => array(     // by John  Brown
4673                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4674                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4675                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4676         ),
4677         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4678                 '.bertela.info',
4679                 '.forblis.info',
4680                 '.frenallo.info',
4681                 '.goyahoo.info',
4682                 '.herbak.info',
4683                 '.kiokast.info',
4684                 '.nerenok.info',
4685                 '.pestgets.info',
4686                 '.snukker.info',
4687                 '.thegetspons.info',
4688         ),
4689         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4690                 '.bobop.info',
4691                 '.kwwwe.info',
4692                 '.piikz.info',
4693                 '.moosm.info',
4694                 '.vvvw.info',
4695         ),
4696         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4697                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4698                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4699                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4700                 '.jplingood.com',       // 125.65.112.15
4701                 '.linenew.com',         // 203.191.148.96
4702                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4703                 '.yzlin.com',           // 220.162.244.36
4704         ),
4705         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4706                 '.1111mb.com',
4707                 '.2sex18.com',
4708                 '.69porn1.com',
4709         ),
4710         'ECTechnology' => array(
4711                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4712                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4713                 '.automouse.jp',
4714         ),
4715         'lyqz at 21cn.com' => array(
4716                 '.japangame1.com',
4717                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4718                 '.livedoor1.com',
4719                 '.ragnarokonline1.com',
4720                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4721         ),
4722         'kingrou at hotmail.com' => array(      // by yangjianhe
4723                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4724                 '.453787.com',
4725         ),
4726         'anpaul541000 at 163.com' => array(     // by su qiuqing
4727                 '.cetname.com',                 // 222.77.185.87
4728                 '.jpgamer.net',                 // 220.247.157.106
4729                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4730                 '.lovejptt.com',                // 222.77.185.87
4731                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4732                 '.playncsoft.net',              // 220.247.157.106
4733         ),
4734         'abc00613 at 163.com' => array( // by guo yong
4735                 '.avtw1068.com',                // 64.74.223.11
4736                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4737                 '.djkkk66990.com',              // 68.178.232.99
4738                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4739         ),
4740         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4741                 '.cmonfofo.com',
4742                 '.discutbb.com',
4743         ),
4744         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4745                 '.preca.info',
4746                 '.skiaggi.info',
4747                 '.scrianal.info',
4748                 '.tageom.info',
4749         ),
4750         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4751                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4752                 '.inpros.net',                  // 202.181.98.79
4753                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4754         ),
4755         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4756                 '.ec51.com',
4757                 '.ec51.net',
4758         ),
4759         'abbevillelaties at yahoo.fr etc' => array(
4760                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4761                 '.ringtones-rate.com',
4762                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4763                 '.special-ringtones.net',
4764         ),
4765         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4766                 '.1sgsc.info',
4767                 '.3h4r89h.info',
4768                 '.3v44dd.info',
4769                 '.6rfuh6.info',
4770                 '.84hd8.info',
4771                 '.94bui89.info',
4772                 '.agysb3.info',
4773                 '.asdjhs.info',
4774                 '.bcvnrth.info',
4775                 '.bheb4r.info',
4776                 '.bhiuno.info',
4777                 '.biug7g.info',
4778                 '.bjb5f4.info',
4779                 '.bob8g7g.info',
4780                 '.br89bdd.info',
4781                 '.bsa3h.info',
4782                 '.bsieb8.info',
4783                 '.basbiubf.info',
4784                 '.bobwwfs2.info',
4785                 '.ciuv9t.info',
4786                 '.dbmdx4.info',
4787                 '.dbrjms.info',
4788                 '.dbtcm.info',
4789                 '.dff9ghu.info',
4790                 '.dfshbb.info',
4791                 '.dgd4ffdh.info',
4792                 '.dh3ge.info',
4793                 '.duc86jh.info',
4794                 '.ergth45.info',
4795                 '.f78bf7ffb.info',
4796                 '.gbdfbo4.info',
4797                 '.ger45.info',
4798                 '.gnvnrrg.info',
4799                 '.h47he7.info',
4800                 '.h488hbd4.info',
4801                 '.hd72b94.info',
4802                 '.he74b7.info',
4803                 '.hfujfnr.info',
4804                 '.husdhd42.info',
4805                 '.hbwje.info',
4806                 '.itg87gji.info',
4807                 '.iugiougiuh.info',
4808                 '.jhd4f4aa.info',
4809                 '.jshd73.info',
4810                 '.krhpgd.info',
4811                 '.lyihjn.info',
4812                 '.nfyjnfj.info',
4813                 '.oihbv.info',
4814                 '.os44fvs.info',
4815                 '.sdfsd3.info',
4816                 '.sdiug4.info',
4817                 '.sdkufhh.info',
4818                 '.sdugb4f.info',
4819                 '.skdbf.info',
4820                 '.sipiv78.info',
4821                 '.sudbfb.info',
4822                 '.tymbbmy.info',
4823                 '.uilhjk.info',
4824                 '.vi87vub.info',
4825                 '.vfuyf87f.info',
4826                 '.viyvvj877.info',
4827                 '.w7fc8eu.info',
4828                 '.wefg43g.info',
4829                 '.xbrch78e.info',
4830                 '.ywsfu.info',
4831                 '.zxcbiv.info',
4832         ),
4833         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4834                 '.abofios.info',
4835                 '.amlekfn.info',
4836                 '.amlkdoie.info',
4837                 '.amkslewq.info',
4838                 '.alemfu.info',
4839                 '.aloweks1.info',
4840                 '.alposd3.info',
4841                 '.bamhpb.info',
4842                 '.bhjkb.info',
4843                 '.bjqnj.info',
4844                 '.cvcxcbhpr.info',
4845                 '.czoypaiat.info',
4846                 '.dbpmgc.info',
4847                 '.dgvogrxs.info',
4848                 '.dldksf.info',
4849                 '.dlor6za.com',
4850                 '.dmkoiew.info',
4851                 '.eewrefr.info',
4852                 '.eladne.info',
4853                 '.elksem.info',
4854                 '.elwpod.info',
4855                 '.emlwkdnr.info',
4856                 '.esgmyqk.info',
4857                 '.fauqv.info',
4858                 '.fgxkgy.info',
4859                 '.fhryns.info',
4860                 '.fj38n4g.info',
4861                 '.fjnesal.info',
4862                 '.fmkfoe.info',
4863                 '.fqkcfldtr.info',
4864                 '.fwcigpdwz.info',
4865                 '.fyhik.info',
4866                 '.glrkje.info',
4867                 '.gwkslfq.info',
4868                 '.gwjracvh.info',
4869                 '.hihopepe.info',
4870                 '.hwlyggbkw.info',
4871                 '.hmwbfw.info',
4872                 '.hthyeb.info',
4873                 '.iaofkyaw.info',
4874                 '.uldkxuiw.info',
4875                 '.is7c6w4.info',
4876                 '.ivuddhdk.info',
4877                 '.jgfndjem.info',
4878                 '.jgmdlek.info',
4879                 '.jkrnvmpad.info',
4880                 '.jqujn.info',
4881                 '.jvgmmba.info',
4882                 '.kbaur.info',
4883                 '.kgjindptv.info',
4884                 '.kleo7s9.info',
4885                 '.lezfgam.info',
4886                 '.lfaasy.info',
4887                 '.ljpdjki.info',
4888                 '.lmnpis.info',
4889                 '.lpzcu2f.info',
4890                 '.lrptn.info',
4891                 '.lursqt.info',
4892                 '.mgkabviil.info',
4893                 '.mhtknjyt.info',
4894                 '.mksuuku.info',
4895                 '.mkyky.info',
4896                 '.mloaisn.com',
4897                 '.mlsiknd.info',
4898                 '.mthqz.info',
4899                 '.nnooq.info',
4900                 '.nohhylvc.info',
4901                 '.nuprndsye.info',
4902                 '.nsoelam.info',
4903                 '.nykobczv.info',
4904                 '.nzuhli.info',
4905                 '.odyqzgylr.info',
4906                 '.oidiau.info',
4907                 '.oitzkw.info',
4908                 '.okdmrpz.info',
4909                 '.ooinziti.info',
4910                 '.ortqr.info',
4911                 '.osmkpnekv.info',
4912                 '.ozkzfih.info',
4913                 '.p3ix8wc.com',
4914                 '.piwyt.info',
4915                 '.pfkijrm.info',
4916                 '.pjktcragi.info',
4917                 '.pleoz.info',
4918                 '.plvqm73.info',
4919                 '.pqyrem.info',
4920                 '.qipgqd.info',
4921                 '.qlewixu.com',
4922                 '.qmlskme.info',
4923                 '.qtuff.info',
4924                 '.quoga.info',
4925                 '.quqz.info',
4926                 '.qzxuw.info',
4927                 '.rcaidegp.info',
4928                 '.rlkmdi.info',
4929                 '.rnsoiov.info',
4930                 '.rnwlams.info',
4931                 '.rprgkgqld.info',
4932                 '.rubqvxrn.info',
4933                 '.spqxstl.info',
4934                 '.syckoqjql.info',
4935                 '.tbirb.info',
4936                 '.thalc34.info',
4937                 '.tiabq.info',
4938                 '.tszzpjr.info',
4939                 '.tyjdyn.info',
4940                 '.twgugpns.info',
4941                 '.uaezrqp.info',
4942                 '.udlkasu.info',
4943                 '.uejncyf.info',
4944                 '.ukvflb.info',
4945                 '.ugsuv.info',
4946                 '.ukhgpcp.info',
4947                 '.urprzn.info',
4948                 '.uuhememkw.info',
4949                 '.yalc7en.info',
4950                 '.ybuid.info',
4951                 '.yhdkgfob.info',
4952                 '.ymenq.info',
4953                 '.ynlyb.info',
4954                 '.vieatlubk.info',
4955                 '.vltcaho.info',
4956                 '.wlamsiek.info',
4957                 '.wlerp.info',
4958                 '.wlmtshzi.info',
4959                 '.wmlkams.info',
4960                 '.wprqd.info',
4961                 '.wpyspszi.info',
4962                 '.xdscc.info',
4963                 '.xdvy.info',
4964                 '.xeypku.info',
4965                 '.xsrxh.info',
4966                 '.xwjyrpfe.info',
4967                 '.yxcqw.info',
4968                 '.zhbktrh.info',
4969                 '.zspepn.info',
4970                 '.zsxtz.info',
4971         ),
4972         'survi at poczta.fm and smiley' => array(
4973                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4974                 '.ppert.info',
4975                 '.pperta.info',
4976                 '.pperts.info',
4977                 '.pprtuis.info',
4978                 '.13iuey.info',         // ":>"
4979                 '.13jkhs.info',
4980                 '.13lksa.info',
4981                 '.13rxtx.info',
4982                 '.13slkd.info',
4983                 '.13zaer.info',
4984         ),
4985         'admin at esemeski.com' => array(       // by Jan Kalka
4986                 '.kxils.info',
4987                 '.kuaph.info',
4988                 '.lncdc.info',
4989                 '.lsqpd.info',
4990                 '.mczed.info',
4991                 '.npous.info',
4992                 '.obgju.info',
4993         ),
4994         'LiquidNetLimited.com' => array(
4995                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4996
4997                 // FateBack.com related
4998                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4999                 '.bebto.com',
5000                 '.fateback.com',
5001                 '.undonet.com',
5002                 '.yoll.net',
5003                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5004
5005                 // 50webs.com                   // 64.72.112.10
5006                 // dns2.50webs.com              // 64.72.112.11
5007                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5008                 // dns2.freehostia.com  // 64.72.112.13
5009                 // serv3.freehostia.com // 64.72.112.14
5010                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5011                 // mail.50webs.com              // 64.72.112.26
5012                 // supremecenter41.com  // 64.72.112.52
5013                 // 50webs2.50webs.com   // 64.72.112.89
5014                 // supremecenter39.com  // 64.72.112.103
5015
5016                 // by LiquidNet Ltd. (support at propersupport.com)
5017                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5018                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5019                         'duoservers.com',               // 216.65.1.130
5020
5021                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5022         ),
5023         'domains at agava.com' => array(
5024                 '.h18.ru',
5025                 '.hut1.ru',
5026         ),
5027         'wlmx009 at hotmail.com' => array(
5028                 '.123lineage.com',
5029                 '.ff11-info.com',
5030                 '.lastlineage.com',
5031                 '.lineage2-ol.com',
5032                 '.lineage2006.com',
5033                 '.lineagefirst.com',
5034         ),
5035         'Zettahost.com' => array(
5036                 '.atspace.biz',         // sales at zettahost.com
5037                 '.atspace.com',         // abuse at zettahost.com
5038                 '.atspace.name',        // NS atspace.com
5039                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5040                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5041         ),
5042         'hlq9814 at 163.com' => array(
5043                 '.kotonohax.com',               // by ling bao
5044                 '.ragnarox.mobi',               // by lin bao, *.exe download
5045                 '.rokonline-jp.com',    // by hang long
5046         ),
5047         '77ch.jp' => array(
5048                 '.77ch.jp',
5049                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5050         ),
5051         'serchportal at mail.ru' => array(      // by Namu Adin
5052                 '.43fert.info',
5053                 '.belis.info',
5054                 '.bonu.info',
5055                 '.chelsite.info',
5056                 '.chparael.info',
5057                 '.cool9f.info',
5058                 '.dada2.info',
5059                 '.dorplanete.info',
5060                 '.dormonde.info',
5061                 '.dorprojet.info',
5062                 '.faciledor.info',
5063                 '.fastsearchgroup.info',
5064                 '.gerta0.info',
5065                 '.getse.info',
5066                 '.gopvl.info',
5067                 '.knopki.info',
5068                 '.propidor.info',
5069                 '.quicksearchnet.info',
5070                 '.ret5.info',
5071                 '.slimfastsearch.info',
5072                 '.virtualpvl.info',
5073                 '.vpvla.info',
5074                 '.xjdor.info',
5075                 '.zhopki.info',
5076         ),
5077         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5078                 '*.444mb.com',          // Free hosting
5079                 'urlnip.com',           // Redirection
5080         ),
5081         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5082                 '.1fasttimesatnau.info',
5083                 '.1freecybersex.info',
5084                 '.1freexxxcomics.info',
5085                 '.1fuckingmywife.info',
5086                 '.1pornpreview.info',
5087                 'www.ru',                                       // by (service at demos.ru), redirection
5088         ),
5089         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5090                 '.adultschat.info',
5091                 '.livecamonline.info',
5092                 '.webcam4u.info',
5093                 '.younghot.info',
5094         ),
5095         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5096                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5097
5098                 // 209.51.196.242
5099                 '.22web.net',
5100                 '.2kool4u.net',
5101                 '.9skul.com',
5102                 '.alojalo.info',
5103                 '.byet.net',
5104                 '.byethost2.com',
5105                 '.byethost3.com',
5106                 '.byethost4.com',
5107                 '.byethost5.com',
5108                 '.byethost6.com',
5109                 '.byethost7.com',
5110                 '.byethost8.com',
5111                 '.byethost9.com',
5112                 '.byethost10.com',
5113                 '.byethost11.com',
5114                 '.byethost12.com',
5115                 '.byethost13.com',
5116                 '.byethost14.com',
5117                 '.byethost15.com',
5118                 '.byethost16.com',
5119                 '.byethost17.com',
5120                 '.byethost18.com',
5121                 '.headshothost.net',
5122                 '.hostwq.net',
5123                 '.mega-file.net',
5124                 '.truefreehost.com',
5125
5126                 '.ifastnet.com',        // 209.51.196.243
5127
5128                 // 209.190.16.82(mx1.byet.org)
5129                 '.1sthost.org',
5130                 '.4sql.net',
5131                 '.byet.org',
5132                 '.hyperphp.com',
5133                 '.kwikphp.com',
5134                 '.my-php.net',
5135                 '.my-place.us',
5136                 '.my-webs.org',
5137                 '.netfast.org',
5138                 '.php0h.com',
5139                 '.php1h.com',
5140                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5141                 '.phpnet.us',
5142                 '.prohosts.org',
5143                 '.pro-php.org',
5144                 '.prophp.org',
5145                 '.sprinterweb.net',
5146                 '.swiftphp.com',
5147                 '.xlphp.net',
5148
5149                 // 209.190.16.83(mx2.byet.org)
5150                 '.instant-wiki.net',
5151
5152                 // 209.190.16.84(mx3.byet.org)
5153
5154                 // 209.190.16.85(mx4.byet.org)
5155                 '.instant-blog.net',
5156                 '.instant-forum.net',
5157
5158                 '.byethost.com',                        // 209.190.18.138
5159         ),
5160         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5161                 '.analmoviesite.info',
5162                 '.bestgirlssex.info',
5163                 '.boxvagina.info',
5164                 '.cyberlivegirls.info',
5165                 '.hotredgirls.info',
5166                 '.forsexlove.info',
5167                 '.hotnudezone.info',
5168                 '.hotredpussy.info',
5169                 '.lesbians-live.info',
5170                 '.lesbians-on-cam.info',
5171                 '.onlinegirlssite.info',
5172                 '.sexloveonline.info',
5173                 '.teensexcard.info',
5174                 '.teensexdirect.info',
5175                 '.topnudesite.info',
5176                 '.vaginafree.info',
5177                 '.webcam-show.info',
5178                 '.webcamshow.info',
5179                 '.youngsexchat.info',
5180                 '.yourcumshot.info',
5181         ),
5182         'stocking.club at gmail.com' => array(
5183                 '.adulthotmodels.com',          // by David Zajwzran
5184                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5185                 '.cash-call.info',                      // by David Theissen
5186                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5187                 '.cheap-online-viagra.info',    // by David Theissen
5188                 '.drugcleansing.net',           // by David Zajwzran
5189                 '.men-health-zone.com',         // by David Theissen
5190                 '.purchase-viagra.info',        // by David Theissen
5191                 '.realdrunkengirls.biz',        // by David Theissen
5192                 '.sextoyslife.com',                     // by David Zajwzran
5193                 '.sexysubjects.info',           // by David Zajwzran
5194                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5195                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5196                 '.travelcardsite.info',         // by David Theissen
5197         ),
5198         'lustiq at p5com.com' => array(
5199                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5200                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5201         ),
5202         'web at 6jy.com' => array(
5203                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5204                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5205         ),
5206         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5207                 '.auto-fgen.info',
5208                 '.fast-marketing.info',
5209                 '.from-usa.info',
5210                 '.generic-pharm.info',
5211                 '.pharm-directory.info',
5212                 '.popular-people.info',
5213                 '.safe-health.info',
5214                 '.star-celebrities.info',
5215                 '.super-home-biz.info',
5216                 '.top5-auto.info',
5217                 '.top5-cars.info',
5218                 '.vip-furniture.info',
5219                 '.vip-pc.info',
5220                 '.vip-pets.info',
5221         ),
5222         'abuse at search-store.org' => array(
5223                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5224         ),
5225         'Leading Edge Marketing Inc.' => array(
5226                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5227                 '.abemedical.com',
5228                 '.attractwomennow.com',
5229                 '.bettersexmall.com',
5230                 '.buymaxoderm.com',
5231                 '.buyvprx.com',
5232                 '.genf20.com',
5233                 '.infinityhealthnews.com',
5234                 '.istnewsletter.com',
5235                 '.leadingedgecash.com',
5236                 '.leadingedgeherbals.com',
5237                 '.leadingedgevipsonly.com',
5238                 '.lecash.com',
5239                 '.leminfo.com',
5240                 '.proextendersystem.com',
5241                 '.provestra.com',
5242                 '.semenax.com',
5243                 '.shavenomore.com',
5244                 '.theedgenewsletter.com',
5245                 '.vigorelle.com',
5246                 '.vigrx.com',
5247                 '.vigrxplus.com',
5248                 '.wbstnewsletter.com',
5249         ),
5250         'clickx at bk.ru' => array(     // by Alexey Enrertov
5251                 '.coolget*.info' =>
5252                         '#^(?:.*\.)?' . 'coolget' .
5253                         '(?:bus|find|news|php|place|post|srch)' .
5254                         '\.info$#',
5255                 '.coolgirl*.info' =>
5256                         '#^(?:.*\.)?' . 'coolgirl' .
5257                         '(?:apple|fish|search)' .
5258                         '\.info$#',
5259                 '.coolmeet*.info' =>
5260                         '#^(?:.*\.)?' . 'coolmeet' .
5261                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5262                         '\.info$#',
5263                 '.cool**.info' =>
5264                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5265                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5266                         '\.info$#',
5267                 '.freseasy*.info' =>
5268                         '#^(?:.*\.)?' . 'freseasy' .
5269                         '(?:apple|click|find|fish|post|search)' .
5270                         '\.info$#',
5271                 '.fres**.info' =>
5272                         '#^(?:.*\.)?' .
5273                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5274                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5275                         '\.info$#',
5276                         // These are not found yet:
5277                         // fresgirlsrch.info
5278                         // fresadultapple.info
5279                         // fresadultclick.info
5280                         // frestheplace.info
5281
5282                 // 66.232.113.44
5283                 '.nuhost.info',
5284                 '.susearch.info',
5285
5286                 // 66.232.126.74(hv94.steephost.com)
5287                 '.dilej.com',
5288                 '.fyvij.com',
5289                 '.howus.com',
5290                 '.jisyn.com',
5291                 '.kaxem.com',
5292                 '.mihug.com',
5293                 '.mobyb.com',
5294                 '.qidat.com',
5295                 '.qihek.com',
5296                 '.ryzic.com',
5297                 '.sasuv.com',
5298                 '.tuquh.com',
5299                 '.vehyq.com',
5300                 '.wezid.com',
5301                 '.wifuj.com',
5302                 '.xijyt.com',
5303                 '.zuqyn.com',
5304         ),
5305         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5306                 '.hitsearching.info',
5307                 '.hugeamountdata.info',
5308                 '.megafasthost.info',
5309                 '.real-big-host.info',
5310                 '.search4freez.info',
5311                 '.yasech.info',
5312
5313                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5314                 '.bymire.com',
5315
5316                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5317                 '.ligiwa.com',
5318         ),
5319         'ice--man at mail.ru related' => array(
5320                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5321                 '.bestcreola.com',
5322                 '.crekatierra.com',
5323                 '.creolafire.com',
5324                 '.crolik.com',
5325                 '.croller.cn',
5326                 '.ecrmx.com',
5327                 '.eflashpoint.com',
5328                 '.exoticmed.com',
5329                 '.feelview.com',
5330                 '.greatexotic.com',
5331                 '.icrtx.com',
5332                 '.icyhip.com',
5333                 '.icyiceman.com',
5334                 '.icypopular.com',
5335                 '.iflashpoint.com',
5336                 '.justmdx.com',
5337                 '.kiliusgroup.com',
5338                 '.klickerr.com',
5339                 '.klickerrworld.com',
5340                 '.kreolic.com',
5341                 '.margansitio.com',
5342                 '.margantierra.com',
5343                 '.mimargan.com',
5344                 '.oilkeys.com',
5345                 '.planetmdx.com',
5346                 '.thekeyse.com',
5347                 '.viewgreat.com',
5348                 '.yourcreola.com',
5349
5350                 // 69.46.23.48
5351                 '.bestkilius.com',
5352                 '.crekadirecto.com',
5353                 '.getflashsite.com',
5354                 '.sucreka.com',
5355                 '.superkilius.com',
5356
5357                 // 69.46.23.48 by bing-16 at ftunez.org
5358                 '.bovorup.cn',
5359                 '.litotar.cn',
5360                 '.nihydec.cn',
5361
5362                 // 66.232.112.175 by bing-32 at ftunez.org
5363                 '.lasyxy.cn',
5364
5365                 // 69.46.23.48 by clarkson-34 at ftunez.org
5366                 '.bumora.cn',
5367                 '.byxite.cn',
5368                 '.byxuqu.cn',
5369                 '.jadama.cn',
5370                 '.kybope.cn',
5371                 '.mefeki.cn',
5372                 '.mokiso.cn',
5373                 '.niqeme.cn',
5374                 '.pukafo.cn',
5375                 '.qesaxa.cn',
5376                 '.toxezi.cn',
5377                 '.tujudy.cn',
5378                 '.tutike.cn',
5379
5380                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5381                 '.cabino.cn',
5382                 '.cuwace.cn',
5383                 '.ferazi.cn',
5384                 '.gigywy.cn',
5385                 '.lapype.cn',
5386                 '.mewabe.cn',
5387                 '.pezegy.cn',
5388                 '.pyzuza.cn',
5389                 '.qypony.cn',
5390                 '.ropesy.cn',
5391                 '.wadyfe.cn',
5392
5393                 // 69.46.23.48 clarkson-58 at ftunez.org
5394                 '.becabe.cn',
5395                 '.biciqy.cn',
5396                 '.bezymu.cn',
5397                 '.cifori.cn',
5398                 '.ciwyxi.cn',
5399                 '.dobari.cn',
5400                 '.dusofe.cn',
5401                 '.dutyda.cn',
5402                 '.dykanu.cn',
5403                 '.fakexu.cn',
5404                 '.fylema.cn',
5405                 '.godymo.cn',
5406                 '.hyhaxy.cn',
5407                 '.ganosi.cn',
5408                 '.kuxyju.cn',
5409                 '.lacezy.cn',
5410                 '.lonyru.cn',
5411                 '.lycato.cn',
5412                 '.nykyby.cn',
5413                 '.qyhuko.cn',
5414                 '.redere.cn',
5415                 '.riwimu.cn',
5416                 '.wopary.cn',
5417                 '.xizity.cn',
5418                 '.xuxusa.cn',
5419
5420                 // 69.46.23.48 by entretov-32 at ftunez.org
5421                 '.cihuji.cn',
5422                 '.deqyve.cn',
5423                 '.genefa.cn',
5424                 '.gujyju.cn',
5425                 '.hasadu.cn',
5426                 '.hedomi.cn',
5427                 '.kecicy.cn',
5428                 '.kipabo.cn',
5429                 '.manunu.cn',
5430                 '.musoru.cn',
5431                 '.myvuna.cn',
5432                 '.pikybe.cn',
5433                 '.riqawo.cn',
5434                 '.rufuxy.cn',
5435                 '.vyfilu.cn',
5436                 '.xadule.cn',
5437                 '.zolaxe.cn',
5438                 '.zerixu.cn',
5439
5440                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5441                 '.dozoda.cn',
5442                 '.nemipu.cn',
5443
5444                 // 69.46.23.48 by jeremy-57 at ftunez.org
5445                 '.duzele.cn',
5446                 '.figede.cn',
5447                 '.fiwany.cn',
5448                 '.gyfalu.cn',
5449                 '.jepylo.cn',
5450                 '.nuqumy.cn',
5451
5452                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5453                 '.burahu.cn',
5454                 '.jydijy.cn',
5455                 '.komyby.cn',
5456                 '.najepa.cn',
5457                 '.pylobu.cn',
5458                 '.qofoly.cn',
5459                 '.sybuvi.cn',
5460                 '.vycexu.cn',
5461                 '.wotyqo.cn',
5462                 '.xudoli.cn',
5463
5464                 // 66.232.112.175 by entretov-86 at ftunez.org
5465                 '.faweji.cn',
5466                 '.jypaci.cn',
5467                 '.xozuso.cn',
5468
5469                 // 69.46.23.48 by miles-37 at ftunez.org
5470                 '.beqymo.cn',
5471                 '.ceqibi.cn',
5472                 '.dyraqo.cn',
5473                 '.qenedo.cn',
5474                 '.qurypa.cn',
5475                 '.siluvo.cn',
5476                 '.tujala.cn',
5477                 '.wukuwi.cn',
5478                 '.xenibo.cn',
5479                 '.xiculo.cn',
5480                 '.zabemu.cn',
5481
5482                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5483                 '.bevaka.cn',
5484                 '.fysyte.cn',
5485                 '.guxixu.cn',
5486                 '.hatoli.cn',
5487                 '.jitobu.cn',
5488                 '.juxeca.cn',
5489                 '.kifuhy.cn',
5490                 '.licila.cn',
5491                 '.mecomy.cn',
5492                 '.niryko.cn',
5493                 '.noxoco.cn',
5494                 '.qiwysu.cn',
5495                 '.tutysy.cn',
5496
5497                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5498                 '.gywiqe.cn',
5499                 '.jotapo.cn',
5500                 '.jywixa.cn',
5501
5502                 // '69.46.23.48 by sabrosky-60 at ftunez.org
5503                 '.bawegap.cn',
5504                 '.buremyl.cn',
5505                 '.cilybut.cn',
5506                 '.cutufek.cn',
5507                 '.defypyr.cn',
5508                 '.femaxij.cn',
5509                 '.gelejo.cn',
5510                 '.gocylyv.cn',
5511                 '.kehiqaq.cn',
5512                 '.ninyjit.cn',
5513                 '.ruroruw.cn',
5514                 '.vetehow.cn',
5515
5516                 // 69.46.23.48 sabrosky-85 at ftunez.org
5517                 '.banyla.cn',
5518                 '.bubaqu.cn',
5519                 '.bygage.cn',
5520                 '.dafozy.cn',
5521                 '.kaxyjo.cn',
5522                 '.makyle.cn',
5523                 '.naleto.cn',
5524                 '.pidele.cn',
5525                 '.poqexa.cn',
5526                 '.pymaqo.cn',
5527                 '.qupiqy.cn',
5528                 '.reqefy.cn',
5529                 '.sopocy.cn',
5530                 '.vuhexo.cn',
5531                 '.weryso.cn',
5532                 '.wubula.cn',
5533                 '.xufuxy.cn',
5534                 '.zuhyxu.cn',
5535
5536                 // 69.46.23.48 by tribiani-97 at ftunez.org
5537                 '.dyxorod.cn',
5538                 '.firywoz.cn',
5539                 '.jixezyx.cn',
5540                 '.joveraw.cn',
5541                 '.jowaxup.cn',
5542                 '.nodarej.cn',
5543                 '.pimijom.cn',
5544                 '.tugupeg.cn',
5545
5546                 // 66.232.112.175 by abuse-here at inbox.ru
5547                 '.catybe.cn',
5548                 '.jytame.cn',
5549                 '.wygete.cn',
5550         ),
5551         'nijeoi at hotmai.com' => array(
5552                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5553                 '.bowij.com',
5554                 '.bozib.com',
5555                 '.cavux.com',
5556                 '.dipov.com',
5557                 '.gumoz.com',
5558                 '.hakyb.com',
5559                 '.hehyv.com',
5560                 '.hepyt.com',
5561                 '.howoj.com',
5562                 '.jywaz.com',
5563                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5564                 '.kyheq.com',
5565                 '.kyzad.com',
5566                 '.qicad.com',
5567                 '.qubyd.com',
5568                 '.mocyq.com',
5569                 '.muloq.com',
5570                 '.myxim.com',
5571                 '.nufyp.com',
5572                 '.waqog.com',
5573                 '.wyduc.com',
5574                 '.xefyv.com',
5575                 '.xomej.com',
5576                 '.xomip.com',
5577                 '.xykyl.com',
5578                 '.zakuw.com',
5579                 '.zeliw.com',
5580                 '.zimev.com',
5581                 '.zipif.com',
5582
5583                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5584                 '.tycoco.com',
5585
5586                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5587                 '.pufeqa.com',
5588         ),
5589         'niichka at hotmail.com' => array(
5590                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5591                 '.aerosearch.info',
5592                 '.freader.info',
5593                 '.info4searchz.info',
5594                 '.nice-host.info',
5595                 '.realyfast.info',
5596                 '.resuts.info',
5597
5598                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5599                 '.bepoh.com',
5600                 '.gufiq.com',
5601                 '.kedyh.com',
5602                 '.pofyb.com',
5603                 '.rurid.com',
5604                 '.vucaj.com',
5605                 '.vuwir.com',
5606
5607                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5608                 '.bejefe.com',
5609
5610                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5611                 '.tidawu.com',
5612
5613                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5614                 '.rofuqa.com',
5615         ),
5616         'porychik at hot.ee' => array(  // by Igor
5617                 '.tedstate.info',       // "Free Web Hosting"
5618                 '.giftsee.com',
5619         ),
5620         'admin at pertol.info' => array(
5621                 // 81.0.195.189 "Free Web Hosting"
5622                 '.laparka.cn',
5623                 '.mirlos.cn',
5624                 '.oldmoms.cn',
5625
5626                 // 217.11.233.64(timed-out)
5627                 '.ejmpep.cn',   // by admin at pertol.info
5628                 '.ytere.cn',    // by admin at x2t.com
5629
5630                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5631                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5632
5633                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5634                 '.new-greece-travel.com',
5635                 '.peraonline.info',
5636         ),
5637
5638         'aofa at vip.163.com' => array(
5639                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5640                 '.5944.net',
5641         ),
5642         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5643                 '.maxrentcar.info',
5644                 '.newsonyericsson.info',
5645                 '.pornositeworld.biz',
5646                 '.rentcarweb.info',
5647                 '.xxxdomainsex.biz',
5648         ),
5649         'kopper1970 at gmail.com' => array(
5650                 '.cardealerall.info',           // by Green
5651                 '.donatecarsales.info',         // by Sipil
5652                 '.ringtonewilly.info',          // by Sipil
5653                 '.travelstraveling.info',       // by Chinik
5654                 '.viagrabuyonline.org',         // by Sipil
5655                 '.viagraorderbuy.com',          // by Anatol
5656                 '.worldcuptourism.info',        // by Sipil
5657         ),
5658         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5659                 '.globalinfoland.info',
5660                 '.goodlifesearch.info',
5661                 '.hotnetinfo.info',
5662                 '.hotpornmovies.org',
5663                 '.infopilot.info',
5664         ),
5665         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5666                 '.bang-bro.org',
5667                 '.datinghost.info',
5668                 '.hello-craulers.info',
5669                 '.free-blog-host.info',
5670                 '.sucking-boobs.info',
5671         ),
5672         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5673                 '.allcamsguide.info',
5674                 '.camerascams.info',
5675                 '.camerasera.info',
5676                 '.girlcamsworld.info',
5677                 '.hiddenlimocams.info',
5678                 '.redlivecams.info',
5679                 '.spycamsgear.info',
5680                 '.spycamssite.info',
5681                 '.supercamsusa.info',
5682                 '.thecamsnow.info',
5683         ),
5684         '87.242.116.81' => array(
5685                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5686                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5687                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5688                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5689                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5690         ),
5691         '208.70.75.153' => array(
5692                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5693                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5694                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5695                 '.cerc-on.info',
5696                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5697                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5698                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5699                 '.cerc-tr.info',
5700                 '.cerc-tw.info',
5701                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5702                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5703                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5704                 '.cerc-on.org',         // by cerca-one at ya.ru
5705                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5706                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5707                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5708                 '.cerc-tr.org',         // by cerca-one at ya.ru
5709                 '.cerc-tw.org',         // by cerca-one at ya.ru
5710                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5711                 '.cerca-fo.info',
5712                 '.cerca-no.info',
5713                 '.cerca-on.info',
5714                 '.cerca-sv.info',
5715                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5716                 '.cerca-te.info',
5717                 '.cerca-tr.info',
5718                 '.cerca-sx.org',
5719                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5720                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5721                 '.ricerca-fo.info',
5722                 '.ricerca-one.org',
5723                 '.ricerca-sv.org',
5724                 '.ricerca-sx.org',
5725                 '.ricerca-te.org',
5726                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5727                 '.subit01.org',
5728                 '.subit02.org',
5729                 '.subit03.org',
5730                 '.subit04.org',
5731                 '.subit05.org',
5732                 '.subit06.org',
5733                 '.subit01.info',
5734                 '.subit02.info',
5735                 '.subit03.info',
5736                 '.subit04.info',
5737                 '.subit05.info',
5738                 '.subit06.info',
5739         ),
5740         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5741                 '.5-base.com',
5742                 '.pharmacy-style.com',
5743         ),
5744         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5745                 '.ista-2006.ru',
5746                 '.wefas.ru',
5747         ),
5748         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5749                 '.tourismworldsite.info',
5750                 '.yourtourismtravel.info',
5751         ),
5752         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5753                 '.easyfindcar.info',
5754                 '.siteinfosystems.info',
5755         ),
5756         'smesh1155 at gmail.com' => array(
5757                 '.hospitalforyou.info',                 // by Gimmi
5758                 '.thephentermineonline.info',   // by Kipola
5759         ),
5760         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5761                 '.kiski.net.in',
5762                 '.pipki.org.in',
5763                 '.popki.ind.in',
5764                 '.siski.co.in',
5765         ),
5766         'tiptronikmike at mail.com' => array(
5767                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5768                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5769                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5770                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5771                 //'.i0sex.info',                // Michael
5772                 //'.i1sex.info',                // Michael
5773                 //'.i2sex.info',                // Martin
5774                 //'.i3sex.info',                // Martin
5775                 //'.i4sex.info',                // Adulterra
5776                 //'.i5sex.info',                // Adulterra
5777                 //[irvyz]6sex.info not found
5778                 '.i8sex.info',                  // by Martin
5779         ),
5780         'skuarlytronald at mail.com' => array(
5781                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5782                 '.girlsgoingmad.info',          // 64.27.13.120
5783                 '.girlsgonewildside.info',      // 64.27.13.120
5784         ),
5785         '66.232.109.250' => array(
5786                 '.1626pornporno.info',
5787                 '.1851pornporno.info',
5788                 '.1876pornporno.info',
5789                 '.476pornporno.info',
5790         ),
5791         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5792                 '.compactxxx.com',
5793                 '.eadulthost.com',
5794                 '.eadultview.com',
5795                 '.eroticpool.net',
5796                 '.ipornservice.com',
5797                 '.liveadulthost.com',
5798                 '.nudepal.com',
5799                 '.sweetservers.com',
5800         ),
5801         'support at orgija.org' => array(
5802                 '.assfuckporn.org',
5803                 '.dosugmos.org',
5804                 '.fuckporn.org',
5805                 '.girlsdosug.org',
5806                 '.girlsporno.org',
5807                 '.moscowintim.org',
5808                 '.pornass.org',
5809                 '.pornopussy.org',
5810                 '.progirlsporn.org',
5811                 '.pussypornogirls.org',
5812         ),
5813         '125.65.112.93' => array(
5814                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5815                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5816         ),
5817         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5818                 '.beta-google.com',
5819                 '.tv-reklama.info',
5820                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5821                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5822         ),
5823         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5824                 '.abobrinha.org',
5825                 '.aneurysmic.com',              // / not found
5826                 '.physcomp.org',                // / not found
5827                 '.seriedelcaribe2006.org',
5828                 '.refugeeyouthinamerica.com',
5829         ),
5830         'skip_20022 at yahoo.com' => array(
5831                 // 203.174.83.55
5832                 '.a28hosting.info',             // by Bill Jones
5833                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5834                 '.besthentai06.org',    // by yakon
5835         ),
5836         'USFINE.com' => array(
5837                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5838                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5839         ),
5840         '68.178.211.57' => array(
5841                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5842                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5843         ),
5844         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5845                 '.google-yahoo-msn.org',
5846                 '.expedia-travel.org',
5847         ),
5848         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5849                 '.emr5ce.org',
5850                 '.wfe7nv.org',
5851                 '.xyr99yx.org',
5852         ),
5853         '203.171.230.39' => array(
5854                 // by 51shell at 163.com
5855                 '.amatou-fc2.com',
5856
5857                 // registrar bizcn.com, iframe + cursor
5858                 '.playonlinenc.com',
5859                 '.playboss-jp.com',
5860         ),
5861         'Digi-Rock.com' => array(
5862                 '.rom776.com',
5863                 // owner-organization: DIGIROCK, INC.
5864                 // owner-email: domain-contact at digi-rock.com
5865                 // with an external ad-and-JavaScript,
5866                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
5867                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
5868         ),
5869         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
5870                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
5871                 '.getrun.cn',                           // 208.73.34.48
5872                 '.ipod-application.info',       // NO IP
5873                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
5874                 '.stonesex.info',                       // NO IP, was 74.50.97.136
5875         ),
5876         'germerts at yandex.ru' => array(
5877                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
5878                 '.andatra.info',
5879                 '.banchitos.info',
5880                 '.batareya.info',
5881                 '.blevota.info',
5882                 '.broneslon.info',
5883                 '.gamadril.info',
5884                 '.gipotenuza.info',
5885                 '.govnosaklo.info',
5886                 '.muflon.info',
5887                 '.termitnik.info',
5888         ),
5889         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
5890                 '.acronis-true-image.info',
5891                 '.calcio-xp.info',
5892                 '.cosanova.info',
5893                 '.cose-rx.info',
5894                 '.dictip.info',
5895                 '.findig.info',
5896                 '.fotonow.info',
5897                 '.lavoro-tip.info',
5898                 '.loan-homes.info',
5899                 '.mionovita.info',
5900                 '.mustv.info',
5901                 '.newsnaked.info',
5902                 '.online-tod.info',
5903                 '.opakit.info',
5904                 '.opanow.info',
5905                 '.opriton.info',
5906                 '.porta-bl.info',
5907                 '.refdif.info',
5908                 '.xzmovie.info',
5909         ),
5910         '84.252.148.120 etc' => array(
5911                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
5912                 '.planetavilton.info',  // 84.252.148.120
5913                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
5914         ),
5915         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
5916                 '.99jk.com',
5917                 '.99jk.com.cn',
5918                 '.99jk.cn',
5919         ),
5920         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
5921                 '.kliktop.biz',
5922                 '.kliktop.org',
5923                 '.pharmatop.us',
5924                 '.supertop.us',
5925                 '.supervaizer.info',
5926         ),
5927         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
5928                 '.freeamateursexx.info',        // 81.0.195.228
5929                 '.freeanalsexx.info',           // 217.11.233.97
5930                 '.freegaysexx.info',            // 81.0.195.228
5931         ),
5932         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
5933                 '.abbhi.info',
5934                 '.gayblogguide.biz',
5935                 '.huope.info',
5936                 '.thebdsmday.info',
5937                 '.zioprt.info',                 // 89.149.228.237
5938         ),
5939         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
5940                 '.boblisk.info',
5941                 '.factyri.info',
5942                 '.jorge1.info',
5943         ),
5944         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
5945                 '.bestmindstorm.org',
5946                 '.redstoreonline.org',
5947         ),
5948         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
5949                 '.8e8ae.net',
5950                 '.c-cock.com',
5951                 '.fa59eaf.com',
5952                 '.set-place.net',
5953                 '.sex-beauty.net',
5954         ),
5955         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
5956                 '.tomdir.info',
5957                 '.tomdirdirect.info',
5958                 '.tomdirworld.info',
5959                 '.treton.info',
5960                 '.trefas.info',
5961                 '.tretonmondo.info',
5962                 '.unefout.info',
5963                 '.unefoutprojet.info',
5964                 '.unitfree.info',
5965                 '.vilret.info',
5966                 '.vilttown.info',
5967                 '.votrefout.info',
5968                 '.warmfind.info',
5969                 '.warptop.info',
5970                 '.wildtram.info',
5971                 '.xofind.info',
5972                 '.xopdiscover.info',
5973                 '.xopfind.info',
5974                 '.xoplocate.info',
5975                 '.xopseek.info',
5976                 '.xpfirst.info',
5977                 '.xphighest.info',
5978                 '.xptop.info',
5979         ),
5980         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
5981                 '.myviagrasite.com',    // 80.74.153.2
5982                 '.thecanadianmeds.com', // 80.74.153.17
5983         ),
5984         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
5985                 '.bigemot.com',                         // 217.11.233.34, / not found
5986                 '.espharmacy.com',                      // 217.11.233.34
5987                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
5988                 '.ringtonecooler.com',          // 217.11.233.34
5989         ),
5990         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
5991                 // 220.166.64.44
5992                 '.okwit.com',
5993                 '.sakerver.com',
5994                 '.motewiki.net',
5995
5996                 '.8568985.com',         // 61.139.126.10 ns *.myhostadmin.net
5997
5998                 // 61.139.126.47, ns *.myhostadmin.net
5999                 '.playonlanei.com',
6000                 '.rmtfcne.com',
6001         ),
6002         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6003                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6004                 '.lookmedicine.info',           // 206.161.205.22
6005                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6006                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6007                 '.worldsitesearch.info',        // 209.8.40.59
6008         ),
6009         'lee.seery at gmail.com' => array(
6010                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6011                 '.lingvol.com',         // 64.21.34.55
6012                 '.micevol.com',         // 64.21.34.55
6013                 '.heyhey.info',         // 64.21.34.55  by anonymous
6014         ),
6015         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6016                 // 69-64-64-71.dedicated.abac.net
6017                 '.520-ard.info',
6018                 '.550bcards.info',
6019                 '.559-cads.info',
6020                 '.559caard.info',
6021                 '.565-caaard.info',
6022                 '.575cadr.info',
6023                 '.577cadrs.info',
6024                 '.590-acrds.info',
6025                 '.596-cadrs.info',
6026                 '.596caards.info',
6027                 '.596caaard.info',
6028                 '.asstablishingcads.info',
6029                 '.astablish-ard.info',
6030                 '.astablishcacrds.info',
6031                 '.begginers-acards.info',
6032                 '.begginersacrds.info',
6033                 '.beggingcaaard.info',
6034                 '.beginercacrds.info',
6035                 '.cacrdscreating.info',
6036                 '.caditbegging.info',
6037                 '.cadr-buildup.info',
6038                 '.cadr-establilsh.info',
6039                 '.cadrs-buildercredit.info',
6040                 '.cadrs570.info',
6041                 '.cads-565.info',
6042
6043                 // 69-64-64-113.dedicated.abac.net
6044                 '.interistacards.info',
6045                 '.intrust-ards.info',
6046                 '.intrustacrds.info',
6047                 '.lfixed-ard.info',
6048                 '.lowerate-ard.info',
6049                 '.lowpercentage-ard.info',
6050                 '.lowpercentageacrd.info',
6051         ),
6052         'acua at mail.ru' => array(
6053
6054                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6055
6056                         // by adventurer at allmyns.info
6057                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6058
6059                         // by webmaster at allmyns.info
6060                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6061                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6062                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6063                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6064                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6065                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6066                         '.riumh.cn',    // 84.16.226.28(*snip*)
6067                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6068                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6069                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6070
6071                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6072                 '.dns4babka.info',      // by acua at mail.ru
6073
6074                         // by golubcov at dns4babka.info
6075                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6076
6077                         // by webmaster at dns4babka.info
6078                         '.credh.cn',
6079                         '.fucfv.cn',
6080                         '.gdxnk.cn',
6081                         '.sqrrt.cn',
6082                         '.ywtmd.cn',
6083                         '.kncqy.cn',    // by webmaster at allmyns.info
6084
6085                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6086                 '.dedka2ns.info',       // by acua at mail.ru
6087
6088                         // by chasik at dedka2ns.info
6089                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6090
6091                         // by rochel at dedka2ns.info
6092                         '.fudhxjjqh.cn',
6093
6094                         // by webmaster at dedka2ns.info
6095                         '.ascpo.cn',
6096                         '.jgycr.cn',
6097                         '.nqdtt.cn',
6098                         '.oswde.cn',
6099                         '.qeyig.cn',
6100                         '.soqsx.cn',
6101                         '.ukncd.cn',
6102                         '.zijgb.cn',
6103
6104                 // 84.16.255.253(*snip*), / says 'noy found'
6105                 '.dns4dedka.info',      // by acua at mail.ru
6106
6107                         // by aleon at dns4dedka.info
6108                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6109
6110                         // by dig at dns4dedka.info
6111                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6112                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6113                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6114                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6115                         '.heulw.cn',    // 84.16.226.217(*snip*)
6116                         '.hissw.cn',    // 84.16.249.240(*snip*)
6117                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6118                         '.obwew.cn',    // 84.16.251.218(*snip*)
6119                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6120                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6121                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6122                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6123                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6124                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6125                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6126                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6127                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6128                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6129                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6130                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6131
6132                         // by la at dns4dedka.info
6133                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6134                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6135                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6136                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6137                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6138                         '.eothy.cn',    // 84.16.249.241(*snip*)
6139                         '.epocy.cn',    // 84.16.251.220(*snip*)
6140                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6141                         '.faacz.cn',    // 84.16.251.222(*snip*)
6142                         '.filun.cn',    // 89.149.196.72(*snip*)
6143                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6144                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6145                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6146                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6147                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6148                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6149                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6150                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6151                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6152                         '.krumo.cn',    // 84.16.226.217(*snip*)
6153                         '.lbava.cn',    // 217.20.112.102(*snip*)
6154                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6155                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6156                         '.npovm.cn',    // 84.16.226.28(*snip*)
6157                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6158                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6159                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6160                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6161                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6162                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6163                         '.qydph.cn',    // 89.149.228.163(*snip*)
6164                         '.rxens.cn',    // 89.149.196.72(*snip*)
6165                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6166                         '.srths.cn',    // 84.16.251.222(*snip*)
6167                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6168                         '.unquz.cn',    // 84.16.251.223(*snip*)
6169                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6170                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6171                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6172                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6173                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6174                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6175
6176                         // by le at dns4dedka.info
6177                         '.goslw.cn',    // 84.16.251.220(*snip*)
6178                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6179                         '.iewik.cn',    // 84.16.255.254(*snip*)
6180                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6181                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6182                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6183                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6184                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6185                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6186                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6187                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6188                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6189                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6190                         '.qniww.cn',    // 84.16.251.218(*snip*)
6191                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6192                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6193
6194                         // by skspb at dns4dedka.info
6195                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6196
6197                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6198                         '.bcpnb.cn',
6199                         '.cfbpr.cn',
6200                         '.dnndb.cn',
6201                         '.ekwme.cn',
6202                         '.iutps.cn',
6203                         '.ryftj.cn',
6204                         '.vxqcb.cn',
6205
6206                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6207                         // by apple at ns2best.info
6208                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6209                         // by paulwolf at ns2best.info
6210                         '.ifytzq.cn',
6211
6212                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6213                         // by pigato at sedns.info
6214                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6215                         // by roschem at sedns.info
6216                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6217         ),
6218         'gilvcta sy jilbertsbram.com' => array(
6219                 // 206.53.51.126
6220                 '.dsfljkeilm1.cn',
6221                 '.dsfljkeilm2.cn',
6222                 '.dsfljkeilm3.cn',
6223                 '.dsfljkeilm4.cn',
6224                 '.dsfljkeilm5.cn',
6225                 '.dsfljkeilm6.cn',
6226                 '.dsfljkeilm7.cn',
6227                 '.dsfljkeilm8.cn',
6228                 '.dsfljkeilm9.cn',
6229                 '.dsfljkeilm10.cn',
6230         ),
6231         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6232
6233                 // 69.64.82.76(*.dedicated.abac.net)
6234                 '.bruised-criedit.info',
6235                 '.bruised-crtedit.info',
6236                 '.bruised-czrd.info',
6237                 '.bruisedcreditcars.info',
6238                 '.bruisedcreitcard.info',
6239                 '.bruisedcreitd.info',
6240                 '.buliderscreadet.info',
6241                 '.cleaningup-cdit.info',
6242                 '.cleaningup-cedict.info',
6243                 '.cleaningup-cerdic.info',
6244                 '.cleanup-crrd.info',
6245
6246                 // 69.64.82.77(*.dedicated.abac.net)
6247                 '.bruised-crediot.info',
6248                 '.bruised-credtid.info',
6249                 '.bruisedcriet.info',
6250                 '.bruisedredit.info',
6251                 '.buliders-crdt.info',
6252                 '.buliders-cre4dit.info',
6253                 '.buliders-creadt.info',
6254                 '.buliders-credcards.info',
6255                 '.buliders-credictcard.info',
6256                 '.cleaningupccreditcards.info',
6257                 '.cleaningupcdedit.info',
6258                 '.cleaningupcedirt.info',
6259                 '.cleaningupceidt.info',
6260                 '.cleaningupcrasd.info',
6261                 '.cleaningupcreait.info',
6262
6263                 // 69.64.82.78(*.dedicated.abac.net)
6264                 '.bruised-cridet.info',
6265                 '.bruised-drecit.info',
6266                 '.bruised-reditcards.info',
6267                 '.bruisedcredikt.info',
6268                 '.bruisedcredith.info',
6269                 '.bruisedcredtid.info',
6270                 '.cleanup-criet.info',
6271                 '.cleanup-csrds.info',
6272                 '.cleanup-dards.info',
6273
6274                 // 69.64.82.79(*.dedicated.abac.net)
6275                 '.bruised-crediotcards.info',
6276                 '.bruised-creditcar.info',
6277                 '.bruised-creid.info',
6278                 '.bruised-creidtcard.info',
6279                 '.buliders-crdit.info',
6280                 '.buliders-creadet.info',
6281                 '.cleaningup-ceridt.info',
6282                 '.cleaningupcrecit.info',
6283                 '.cleaningupccritcard.info',
6284                 '.cleanupdredit.info',
6285                 '.cleanupredit.info',
6286         ),
6287         '.malwarealarm.com',
6288                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6289                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6290                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6291         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6292         'Inet-Traffic.com' => array(
6293                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6294                 //'.dcomm.com',         // by D Communications Inc. S.A.
6295
6296                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6297                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6298                 // ...
6299                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6300                 // ...
6301                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6302                 // ...
6303                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6304                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6305                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6306                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6307                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6308                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6309                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6310                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6311                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6312                 // ...
6313                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6314                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6315                 // ...
6316                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6317                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6318                 // ...
6319                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6320                 // ...
6321                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6322                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6323                 // ...
6324                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6325         ),
6326         'andreyletov at yahoo.com related' => array(
6327                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6328                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6329                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6330
6331                 // 89.248.99.118 by anonymous
6332                 '.lpgpharmacy.com',
6333                 '.onlybestgalleries.com',
6334                 '.viagrabest.info',
6335                 '.viagrabestprice.info',
6336                 '.viagratop.info',
6337
6338                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6339                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6340                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6341         ),
6342         'alrusnac at hotmail.com' => array(
6343                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6344                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6345         ),
6346         '203.116.63.123' => array(
6347                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6348                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6349         ),
6350         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6351                 '.autotowncar.cn',              // 69.73.146.184
6352                 '.badgirlhome.cn',              // 69.73.146.186
6353         ),
6354         'Wmp.co.jp' => array(
6355                 // 219.94.134.208, ns *.dns.ne.jp, adult
6356                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6357                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6358                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6359         ),
6360         'Macherie.tv' => array(
6361                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6362                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6363                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6364         ),
6365         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6366                 '.yemine.info',
6367                 '.fr4f3ds.info',
6368         ),
6369         '75.126.129.222' => array(
6370                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6371                 '.viagrabuycheap.info', // ns *.advernsserver.com
6372                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6373         ),
6374         'sqr at bk.ru' => array(
6375                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6376                 '.masserch.info',               // "Free Web Hosting", spam
6377                 '.miserch.info',
6378         ),
6379         'gangstadra at hotmail.com' => array(
6380                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6381                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6382                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6383                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6384         ),
6385         'hosan by front.ru' => array(
6386                 '.salihome.info',                               // 206.53.51.155(non-existent)
6387                 '.online-freesearch.com',               // 206.53.51.155
6388                 '.choosefinest.com',                    // 206.53.51.157
6389                 '.carsprojects.com',                    // 206.53.51.159
6390                 '.sport-brands.com',                    // 206.53.51.167
6391                 '.online-pharmaceutics.com',    // 206.53.51.168
6392         ),
6393         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6394                 '.cialischeap.info',
6395                 '.superrv.info',
6396         ),
6397         '74.50.97.*' => array(
6398                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
6399                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
6400                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6401                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
6402                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
6403                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6404                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
6405                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
6406                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
6407                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6408                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
6409                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
6410                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
6411                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
6412                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6413                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
6414
6415                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
6416                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
6417                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
6418                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
6419                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
6420                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
6421                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
6422                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
6423                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
6424                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
6425                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
6426                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
6427                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
6428                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
6429                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
6430                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
6431                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
6432                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
6433                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
6434
6435                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
6436                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
6437                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
6438                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
6439                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
6440         ),
6441         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6442                 '.hatbi.com',
6443                 '.kol2you.com',
6444                 '.kolplanet.com',
6445                 '.pbaol.com',
6446                 '.planetkol.com',
6447         ),
6448         'Abra1.com' => array(
6449                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6450                 '.abra1.com',           // by info at maisontropicale.com
6451                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6452
6453                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6454                 '.abra2.com',           // by domain at anondns.org
6455                 '.abra3.com',           // by domain at anondns.org
6456         ),
6457         'topdomainz at gmail.com' => array(
6458                 // 217.73.201.237 , ns *.parked.ru
6459                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6460                 '.aboutgooglegroup.info',
6461                 '.aboutgoogleimage.info',
6462                 '.aboutgooglemail.info',
6463                 '.aboutgooglemap.info',
6464                 '.aboutgooglenews.info',
6465                 '.aboutgooglevideo.info',
6466                 '.bestgoogleearth.info',
6467                 '.magicgoogleearth.info',
6468                 '.magicgooglemap.info',
6469                 '.magicgooglevideo.info',
6470
6471                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6472                 '.slajzer.info',
6473                 '.tonoscelular.info',
6474                 '.tonosmotorola.info',
6475         ),
6476         '89.149.208.23' => array(
6477                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6478                 '.w3rar.info',
6479                 '.w3sex.info',
6480                 '.w3zip.info',
6481                 '.w3in.info',
6482                 '.w3out.info',
6483
6484                 // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript
6485                 '.2vip.info',
6486                 '.4cat.info',
6487                 '.8vip.info',
6488                 '.9upp.info',
6489         ),
6490         'zorkin87 at mail.ru' => array(
6491                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6492                 '.ruqore.com',
6493                 '.goxama.com',
6494                 '.cazebi.com',
6495                 '.fukeqa.com',
6496                 '.fydoge.com',
6497                 '.jukaly.com',
6498                 '.jumoga.com',
6499                 '.jumuxo.com',
6500                 '.tyriva.com',
6501                 '.vudyho.com'
6502         ),
6503         'jessicaeagloff at yahoo.co.uk' => array(
6504                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6505                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6506                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6507                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6508         ),
6509         'qbbs at xinoffice.com' => array(
6510                 // ns *.name-services.com
6511                 '.lingage.com',         // 8.15.231.118
6512                 '.puksins.com',         // IP not allocated now
6513         ),
6514
6515         // C-2: Lonely domains (buddies not found yet)
6516         '.0721-4404.com',
6517         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6518         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6519         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6520         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6521         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6522         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6523         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6524         '.0annie.info',
6525         '.6i6.de',
6526         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6527         '.angioco.com',                 // 62.37.112.100, gamble
6528         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6529         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6530         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6531         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6532         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6533         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6534         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6535         '.allworlddirect.info', // Forbidden
6536         '.amoreitsex.com',
6537         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6538         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6539         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6540         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6541         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6542         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6543         '.auto-car-cheap.org',
6544         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6545         '.baurish.info',
6546         '.bestop.name',
6547         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6548         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6549         '.bestshopfinder.info',
6550         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6551         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6552         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6553         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6554         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6555         '.catkittenmagazines.org',              // 87.118.97.117
6556         '.chatwalker.com',              // 124.32.230.65
6557         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6558         '.covertarena.co.uk',   // by Wayne Huxtable
6559         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6560         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6561         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6562         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6563         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6564         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6565         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6566         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6567         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6568         '.easyshopusa.com',             // by riter (riter at nm.ru)
6569         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6570         '.edu.ph',                              // "philippine network foundation inc"
6571         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6572         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6573         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6574         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6575         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6576         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6577         '.filthserver.com',             // sales at onlinemarketingservices.biz
6578         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6579         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6580         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6581         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6582         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6583         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6584         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6585         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6586         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6587         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6588         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6589         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6590         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6591         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6592         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6593         '.gm-exchange.jp',              // 210.188.216.49 RMT
6594         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6595         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6596         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6597         '.greatbestwestern.org',// by gao.wungao at gmail.com
6598         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6599         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6600         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6601         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6602         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6603         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6604         '.hostuju.cz',                  // ns banan.cz, banan.it
6605         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6606         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6607         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6608         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6609         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6610         '.infradoc.com',
6611         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6612         '.ismarket.com',                // Google-hiding. intercage.com related IP
6613         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6614         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6615         '.itsexosit.net',
6616         '.itxxxit.net',
6617         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6618         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6619         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6620         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6621         '.kingtools.de',
6622         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6623         '.leucainfo.com',
6624         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6625         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6626         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6627         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6628         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6629         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6630         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6631         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6632         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6633         '.megvideochatlive.info',       // Bad seo
6634         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6635         '.mncxvsm.info',                // 217.11.233.105, / blank
6636         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6637         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6638         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6639         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6640         '.mxsupportmailer.com',
6641         '.next-moneylife.com',  // RMT
6642         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6643         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6644         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6645         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6646         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6647         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6648         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6649         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6650         '.onlineviagra.de',
6651         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6652         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6653         '.ozomw.info',
6654         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6655         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6656         '.perevozka777.ru',             // by witalik at gmail.com
6657         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6658         '.pills-storage.com',   // by
6659         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6660         '.porkyhost.com',               // 79965 at whois.gkg.net
6661         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6662         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6663         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6664         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6665         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6666         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6667         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6668         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6669         '.quality-teen-porn-photo.com', // by info at densa.info
6670         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6671         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6672         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6673         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6674         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6675         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6676         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6677         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6678         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6679         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6680         '.sexamoreit.com',
6681         '.sexforit.com',
6682         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6683         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6684         '.sirlook.com',
6685         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6686         '.sepcn.info',                  // / not found
6687         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6688         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6689         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6690         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6691         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6692         '.superverizonringtones.com',   // by joshua at list.ru
6693         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6694         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6695         '.thehostcity.com',             // Domains by Proxy
6696         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6697         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6698         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6699         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6700         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6701         '.topmeds10.com',
6702         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6703         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6704         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6705         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6706         '.unctad.net',                  // by gfdogfd at lovespb.com
6707         '.vacant.org.uk',
6708         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6709         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6710         '.virtualsystem.de',
6711         '.vdxhost.com',
6712         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6713         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6714         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6715         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6716         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6717         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6718         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6719         '.whoop.to',                    // RMT
6720         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6721         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6722         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6723         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6724         '.wwwna.info',                  // / 404 Not Found
6725         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6726         '.xamorexxx.net',
6727         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6728         '.xsessox.com',
6729         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6730         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6731         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6732         '.zyguo.info',                  // ns globoxhost.net
6733         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6734
6735         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6736
6737         // The same approach of 'acua at mail.ru'
6738         '.iblcqms.cn',                  // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
6739         '.aasghwf.cn',                  // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
6740         '.fwjjjtmrlr.cn',               // TODO:
6741         '.klmnei.cn',                   // TODO:
6742         '.lumyjugmn.cn',                // TODO:
6743         '.lxwxjzpiy.cn',                // TODO:
6744         '.qyxswynd.cn',                 // TODO:
6745         '.ugivorm.cn',                  // TODO:
6746         '.uxmrscgdi.cn',                // TODO:
6747
6748         // C-3: Not classifiable (information wanted)
6749         //
6750         // Something incoming to pukiwiki related sites
6751         'nana.co.il related' => array(
6752                 '.planetnana.co.il',
6753                 '.nana.co.il',
6754         ),
6755 );
6756
6757 // --------------------------------------------------
6758
6759 $blocklist['D'] = array(
6760         // D: Sample setting of
6761         // "Third party in good faith"s
6762         //
6763         // Hosts shown inside of the implanted contents,
6764         // not used via spam, but maybe useful to detect these contents
6765         //
6766         // 'RESERVED',
6767 );
6768
6769 // --------------------------------------------------
6770
6771 $blocklist['E'] = array(
6772         // E: Sample setting of
6773         // Promoters
6774         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6775         //  Ads, Business promotions)
6776         //
6777         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6778         // Sometimes they may promote each other
6779
6780         '15-Mail.com related' => array(
6781                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6782                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6783                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6784                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
6785                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
6786         ),
6787         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
6788         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
6789         'E-brainers.com related' => array(
6790                 // 202.212.14.101
6791                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
6792                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
6793                 '.my-tune.jp',                                  // by brainers Inc.
6794                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
6795                 '.weekle.jp',                                   // by brainers Inc.
6796
6797                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
6798                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
6799                 '.3minutes-marketing-club.com', // by Fujio
6800                 '.affiliate-vampire.com',               // by Masatoshi
6801                 '.article-site-power-package.com',      // by Masatoshi
6802                 '.audio-marketing-club.com',    // by Fujio
6803                 '.brainers-task-manager.com',   // by Masatoshi
6804                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
6805                 '.brainersbuzz.com',                    // by Masatoshi
6806                 '.den4renz-marketing-club.com', // by Fujio
6807                 '.english-contents-club.com',   // by Masatoshi
6808                 '.fly-in-ads-japan.com',                // by Fujio
6809                 '.free-resalerights-giveaway.com',      // by Fujio
6810                 '.freegiveawaysecret.com',              // by Masatoshi
6811                 '.guaranteedvisitorpro.com',    // by Masatoshi
6812                 '.havads-japan.com',                    // by Masatoshi
6813                 '.info-business123.com',                // by Fujio
6814                 '.instant-marketing-club.com',  // by Fujio
6815                 '.internetmarketinggorinjyu.com',       // by Masatoshi
6816                 '.marketing-force-japan.com',   // by Fujio
6817                 '.masatoshikobayashi.com',              // by Fujio
6818                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
6819                 '.replytomatt.com',                             // by Fujio
6820                 '.santa-deal.com',                              // by Fujio
6821                 '.santa-deal-summer.com',               // by Fujio
6822                 '.scratch-card-factory.com',    // by Masatoshi
6823                 '.script4you-japan.com',                // by Fujio
6824                 '.sell1000000dollarinjapan.com',// by Fujio
6825                 '.squeeze-page-secret.com',             // by Masatoshi
6826                 '.viral-blog-square.com',               // by Fujio
6827                 '.viralarticle.com',                    // by Fujio
6828                 '.wowhoken.com',                                // by Fujio
6829
6830                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
6831                 '.brainerstelevision.com',
6832                 '.demosite4you.com',
6833                 '.keywordcatcherpro.com',
6834                 '.script-marketing-club.com',
6835
6836                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
6837                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
6838                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
6839                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
6840                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
6841                 '.brainerscode.com',    // by akada
6842                 '.brainerslive.com',    // by domain
6843                 '.brainersreview.com',  // by domain
6844                 '.brainerstest.com',    // by akada
6845                 '.otosecret.com',               // by domain
6846                 '.ultimate-marketing-weapon.com',       // by akada
6847                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
6848                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
6849
6850                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
6851                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
6852         ),
6853         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
6854         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
6855         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
6856         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
6857         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
6858                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
6859                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
6860                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
6861
6862                 // Redirects and affiliates:
6863                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
6864                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
6865                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
6866                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
6867                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
6868                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
6869                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
6870                 //   ...
6871
6872                 // Other suggestions:
6873                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
6874
6875                 // Blog posting at the same time
6876                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
6877                 //   2007/06/13 e123.info/archives/76
6878                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
6879                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
6880                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
6881         ),
6882         'info at kobeweb.jp' => array(
6883                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
6884                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
6885                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
6886         ),
6887         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
6888         'Infocart.jp' => array(         // by wai at infocart.jp
6889                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
6890                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
6891                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
6892
6893                 //inetnum:      60.32.154.176 - 60.32.154.183
6894                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
6895                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
6896         ),
6897         'Info-sniper.com' => array(
6898                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
6899                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
6900                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
6901         ),
6902         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
6903         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
6904         'JunSuzuki.com' => array(       // e-brainers.com related
6905                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
6906                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
6907         ),
6908         'Natsukih.net' => array(
6909                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
6910                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
6911                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
6912                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
6913
6914                 // by info at natsukih.net
6915                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
6916                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
6917                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
6918                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
6919                 '.5muryoureport.com',   // 210.251.253.230
6920                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
6921                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
6922                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
6923         ),
6924         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
6925                 '.11kanji.com',         // 211.10.131.88
6926                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
6927                 '.point-park.com',      // 211.10.131.88
6928                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
6929         ),
6930         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
6931         'PRJAPAN.co.jp' => array(
6932                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
6933                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
6934                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
6935                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
6936                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
6937                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
6938         ),
6939         'Rakuten.co.jp' => array(
6940                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
6941                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
6942         ),
6943         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
6944         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
6945         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
6946                 '.e123.info',
6947                 '.ialchemist.net',
6948                 '.j012.net',
6949                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
6950         ),
6951         'Viscose.jp' => array(
6952                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
6953                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
6954         ),
6955         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
6956 );
6957
6958 // --------------------------------------------------
6959
6960 $blocklist['Z'] = array(
6961         // Z: Yours
6962         //
6963         //'',
6964         //'',
6965         //'',
6966 );
6967
6968 ?>