spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.184 2007/12/02 12:44:46 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //'desperadoes.biz',                    // YEAR OF THE CAT, PukiWiki skin designer
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'amoo.org',
 177         'web.archive.org',              ///web/2
 178         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 179                 'jmp2.net',
 180                 '2me.tw',
 181         ),
 182         'ataja.es',
 183         'ATBHost.com' => array(
 184                 '*.atbhost.com',
 185                 '*.bzhost.net',
 186         ),
 187         'atk.jp',
 188         'clearp.ath.cx',
 189         'athomebiz.com',
 190         'aukcje1.pl',
 191         'beam.to',
 192         'beermapping.com',
 193         'besturl.in',
 194         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 195         'biglnk.com',
 196         'bingr.com',
 197         'bittyurl.com',
 198         '*.bizz.cc',
 199         '*.blo.pl',
 200         '*.bo.pl',
 201         'briefurl.com',
 202         'brokenscript.com',
 203         'BucksoGen.com' => array(
 204                 '*.bucksogen.com',
 205                 '*.bulochka.org',
 206                 '*.korzhik.org',
 207                 '*.kovrizhka.org',
 208                 '*.pirozhok.org',
 209                 '*.plushka.org',
 210                 '*.pryanik.org',
 211                 '*.sushka.org',
 212         ),
 213         'budgethosts.org',
 214         'budu.com',                             // by peter.eder at imcworld.com
 215         '*.buzznet.com',
 216         '*.bydl.com',
 217         'C-O.IN' => array(
 218                 '*.c-o.cc',
 219                 '*.c-o.in',
 220                 '*.coz.in',
 221                 '*.cq.bz',
 222         ),
 223         'c64.ch',
 224         'c711.com',
 225         '*.cej.pl',
 226         'checkasite.net',
 227         'url.chefhost.com',
 228         '*.chicappa.jp',
 229         'chilicity.com',
 230         'big5.china.com',               ///gate/big5/
 231         'chopurl.com',
 232         'christopherleestreet.com',
 233         'cintcm.com',
 234         '*.cjb.net',
 235         'clipurl.com',
 236         '*.co.nr',
 237         'Comtech Enterprises ' => array(        // comteche.com
 238                 'tinyurl.name',
 239                 'tinyurl.us',
 240         ),
 241         'Cool168.com' => array(
 242                 '*.cool158.com',
 243                 '*.cool168.com',
 244                 '*.ko168.com',
 245                 '*.ko188.com',
 246         ),
 247         'Coolurl.de' => array(
 248                 'coolurl.de',
 249                 'dornenboy.de',
 250                 'eyeqweb.com',
 251                 'hardcore-porn.de',
 252                 'maschinen-bluten-nicht.de',
 253         ),
 254         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 255         'cutalink.com',
 256         '*.da.cx',
 257         '*.da.ru',
 258         'dae2.com',
 259         'dephine.org',
 260         'desiurl.com',
 261         'dhurl.com',
 262         'digbig.com',
 263         'Digipills.com' => array(
 264                 '*.digipills.com',
 265                 'minilien.com',
 266                 'tinylink.com',
 267         ),
 268         '*.discutbb.com',
 269         'DL.AM' => array(
 270                 '*.cx.la',
 271                 '*.dl.am',
 272         ),
 273         '*.dl.pl',
 274         '*.dmdns.com',
 275         'doiop.com',
 276         'drlinky.com',
 277         'durl.us',
 278         '*.dvdonly.ru',
 279         '*.dynu.ca',
 280         'dwarf.name',
 281         '*.eadf.com',
 282         'easyURL.net' => array(
 283                 '*.easyurl.net',
 284                 '.goshrink.com',
 285                 'ushrink.com',
 286         ),
 287         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 288                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 289                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 290                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 291                 //   "Keep continuing to seek originality and contribute it to local,
 292                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 293                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 294                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 295                 // I'm so much impressed of the situation around this imported one today.
 296         'elfurl.com',
 297         'eny.pl',
 298         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 299                 '.mywiitime.com',
 300                 '.surfindark.com',              // webmaster at etechfocus.com
 301                 '.surfinshade.com',
 302                 '.surfinshadow.com',
 303                 '.surfinwind.com',
 304                 '.topsecretlive.com',
 305         ),
 306         '*.eu.org',
 307         'F2B.be' => array(
 308                 '*.f2b.be',
 309                 '*.freakz.eu',
 310                 '*.n0.be',
 311                 '*.n3t.nl',
 312                 '*.short.be',
 313                 '*.ssr.be',
 314                 '*.tweaker.eu',
 315         ),
 316         '*.fancyurl.com',
 317         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 318                 'blue11.jp',
 319                 'fanznet.com',
 320                 'katou.in',
 321                 'mymap.in',
 322                 'saitou.in',
 323                 'satou.in',
 324                 'susan.in',
 325         ),
 326         '.fe.pl',                       // Redirection and subdomain
 327         'ffwd.to',
 328         'url.fibiger.org',
 329         'FireMe.to' => array(
 330                 'fireme.to',
 331                 'nextdoor.to',
 332                 'ontheway.to',
 333         ),
 334         'flingk.com',
 335         'flog.jp',                      // careless redirector and bbs
 336         'fm7.biz',
 337         'fnbi.jp',
 338         '*.fnbi.jp',
 339         'forgeturl.com',
 340         '*.free.bg',
 341         'Freeservers.com' => array(     // United Online Web Services, Inc.
 342                 '*.4mg.com',
 343                 '*.4t.com',
 344                 '*.8m.com',
 345                 '*.8m.net',
 346                 '*.8k.com',
 347                 '*.faithweb.com',
 348                 '*.freehosting.net',
 349                 '*.freeservers.com',
 350                 '*.gq.nu',
 351                 '*.htmlplanet.com',
 352                 '*.itgo.com',
 353                 '*.iwarp.com',
 354                 '*.s5.com',
 355                 '*.scriptmania.com',
 356                 '*.tvheaven.com',
 357         ),
 358         '*.freewebpages.com',
 359         'FreeWebServices.net' => array( // Host Department LLC
 360                 '*.about.gs',   // Dead?
 361                 '*.about.tc',
 362                 '*.about.vg',
 363                 '*.aboutus.gs',
 364                 '*.aboutus.ms',
 365                 '*.aboutus.tc',
 366                 '*.aboutus.vg',
 367                 '*.biografi.biz',
 368                 '*.biografi.info',
 369                 '*.biografi.org',
 370                 '*.biografi.us',
 371                 '*.datadiri.biz',
 372                 '*.datadiri.cc',
 373                 '*.datadiri.com',
 374                 '*.datadiri.info',
 375                 '*.datadiri.net',
 376                 '*.datadiri.org',
 377                 '*.datadiri.tv',
 378                 '*.datadiri.us',
 379                 '*.ecv.gs',
 380                 '*.ecv.ms',
 381                 '*.ecv.tc',
 382                 '*.ecv.vg',
 383                 '*.eprofile.us',
 384                 '*.go2net.ws',
 385                 '*.hits.io',
 386                 '*.hostingweb.us',
 387                 '*.hub.io',
 388                 '*.indo.bz',
 389                 '*.indo.cc',
 390                 '*.indo.gs',
 391                 '*.indo.ms',
 392                 '*.indo.tc',
 393                 '*.indo.vg',
 394                 '*.infinitehosting.net',
 395                 '*.infinites.net',
 396                 '*.lan.io',
 397                 '*.max.io',
 398                 '*.mycv.bz',
 399                 '*.mycv.nu',
 400                 '*.mycv.tv',
 401                 '*.myweb.io',
 402                 '*.ourprofile.biz',
 403                 '*.ourprofile.info',
 404                 '*.ourprofile.net',     // Dead?
 405                 '*.ourprofile.org',
 406                 '*.ourprofile.us',
 407                 '*.profil.bz',
 408                 '*.profil.cc',
 409                 '*.profil.cn',
 410                 '*.profil.gs',
 411                 '*.profil.in',
 412                 '*.profil.ms',
 413                 '*.profil.tc',
 414                 '*.profil.tv',
 415                 '*.profil.vg',  // ?
 416                 '*.site.io',
 417                 '*.wan.io',
 418                 '*.web-cam.ws',
 419                 '*.webs.io',
 420                 '*.zip.io',
 421         ),
 422         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 423         '*.fx.to',
 424         'fyad.org',
 425         'fype.com',
 426         'gentleurl.net',
 427         'Get2.us' => array(
 428                 '*.get2.us',
 429                 '*.hasballs.com',
 430                 '*.ismyidol.com',
 431                 '*.spotted.us',
 432                 '*.went2.us',
 433                 '*.wentto.us',
 434         ),
 435         'glinki.com',
 436         '*.globalredirect.com',
 437         'gnu.vu',
 438         '*.go.cc',
 439         //'Google.com' => array(
 440         //              google.com/translate_c\?u=(?:http://)?
 441         //),
 442         'goonlink.com',
 443         '.gourl.org',
 444         '.greatitem.com',
 445         'gzurl.com',
 446         'url.grillsportverein.de',
 447         'Harudake.net' => array('*.hyu.jp'),
 448         'Hattinger Linux User Group' => array('short.hatlug.de'),
 449         'Hexten.net' => array('lyxus.net'),
 450         'here.is',
 451         'HispaVista.com' => array(
 452                 '*.blogdiario.com',
 453                 '*.hispavista.com',
 454                 '.galeon.com',
 455         ),
 456         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 457                 '*.8l.pl',
 458                 '*.blg.pl',
 459                 '*.czytajto.pl',
 460                 '*.ryj.pl',
 461                 '*.xit.pl',
 462                 '*.xlc.pl',
 463                 '*.hk.pl',
 464                 '*.home.pl',
 465                 '*.of.pl',
 466         ),
 467         'hort.net',
 468         'free4.hostrocket.com',
 469         '*.hotindex.ru',
 470         'HotRedirect.com' => array(
 471                 '*.coolhere.com',
 472                 '*.homepagehere.com',
 473                 '*.hothere.com',
 474                 '*.mustbehere.com',
 475                 '*.onlyhere.net',
 476                 '*.pagehere.com',
 477                 '*.surfhere.net',
 478                 '*.zonehere.com',
 479         ),
 480         'hotshorturl.com',
 481         'hotwebcomics.com',     ///search_redirect.php
 482         'hurl.to',
 483         '*.hux.de',
 484         '*.i89.us',
 485         'iat.net',                      // 74.208.58.130 by Tony Carter
 486         'ibm.com',                      ///links (Correct it)
 487         '*.iceglow.com',
 488         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 489         'Ideas para Nuevos Mercados SL' => array(
 490                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 491                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 492                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 493                 // by edgar bortolin (oscar at i4nm.com)
 494                 // by Edgar Bortolin  (oscar at i4nm.com)
 495                 // by oscar florez (oscar at i4nm.com)
 496                 // by Oscar Florez (oscar at red-es.com)
 497                 // by covadonga del valle (oscar at i4nm.com)
 498                 '*.ar.gd',
 499                 '*.ar.gs',      // ns *.nora.net
 500                 '*.ar.kz',      // by oscar
 501                 '*.ar.nu',      // by Edgar
 502                 '*.ar.tc',      // by oscar
 503                 '*.ar.vg',      // by oscar
 504                 '*.bo.kz',      // by oscar
 505                 '*.bo.nu',      // by covadonga
 506                 '*.bo.tc',      // by oscar
 507                 '*.bo.tf',      // by Oscar
 508                 '*.bo.vg',      // by oscar
 509                 '*.br.gd',
 510                 '*.br.gs',      // ns *.nora.net
 511                 '*.br.nu',      // by edgar
 512                 '*.br.vg',      // by oscar
 513                 '*.ca.gs',      // by oscar
 514                 '*.ca.kz',      // by oscar
 515                 '*.cl.gd',      // by oscar
 516                 '*.cl.kz',      // by oscar
 517                 '*.cl.nu',      // by edgar
 518                 '*.cl.tc',      // by oscar
 519                 '*.cl.tf',      // by Oscar
 520                 '*.cl.vg',      // by oscar
 521                 '*.col.nu',     // by Edgar
 522                 '*.cr.gs',      // ns *.nora.net
 523                 '*.cr.kz',      // by oscar
 524                 '*.cr.nu',      // by edgar
 525                 '*.cr.tc',      // by oscar
 526                 '*.cu.tc',      // by oscar
 527                 '*.do.kz',      // by oscar
 528                 '*.do.nu',      // by edgar
 529                 '*.ec.kz',      // by edgar
 530                 '*.ec.nu',      // by Edgar
 531                 '*.ec.tf',      // by Oscar
 532                 '*.es.kz',      // by oscar
 533                 '*.eu.kz',      // by oscar
 534                 '*.gt.gs',      // ns *.nora.net
 535                 '*.gt.tc',      // by oscar
 536                 '*.gt.tf',      // by Oscar
 537                 '*.gt.vg',      // by Oscar
 538                 '*.hn.gs',      // ns *.nora.net
 539                 '*.hn.tc',      // by oscar
 540                 '*.hn.tf',      // by Oscar
 541                 '*.hn.vg',      // by oscar
 542                 '*.mx.gd',
 543                 '*.mx.gs',      // ns *.nora.net
 544                 '*.mx.kz',      // by oscar
 545                 '*.mx.vg',      // by oscar
 546                 '*.ni.kz',      // by oscar
 547                 '*.pa.kz',      // by oscar
 548                 '*.pe.kz',      // by oscar
 549                 '*.pe.nu',      // by Edgar
 550                 '*.pr.kz',      // by oscar
 551                 '*.pr.nu',      // by edgar
 552                 '*.pt.gs',      // ns *.nora.net
 553                 '*.pt.kz',      // by edgar
 554                 '*.pt.nu',      // by edgar
 555                 '*.pt.tc',      // by oscar
 556                 '*.pt.tf',      // by Oscar
 557                 '*.py.gs',      // ns *.nora.net
 558                 '*.py.nu',      // by edgar
 559                 '*.py.tc',      // by oscar
 560                 '*.py.tf',      // by Oscar
 561                 '*.py.vg',      // by oscar
 562                 '*.sv.tc',      // by oscar
 563                 '*.usa.gs',     // ns *.nora.net
 564                 '*.uy.gs',      // ns *.nora.net
 565                 '*.uy.kz',      // by oscar
 566                 '*.uy.nu',      // by edgar
 567                 '*.uy.tc',      // by oscar
 568                 '*.uy.tf',      // by Oscar
 569                 '*.uy.vg',      // by oscar
 570                 '*.ve.gs',      // by oscar
 571                 '*.ve.tc',      // by oscar
 572                 '*.ve.tf',      // by Oscar
 573                 '*.ve.vg',      // by oscar
 574                 '*.ven.nu',     // by edgar
 575         ),
 576         'ie.to',
 577         'igoto.co.uk',
 578         'ilook.tw',
 579         'indianpad.com',                ///view/
 580         'iNetwork.co.il' => array(
 581                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 582                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 583                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 584         ),
 585         '*.infogami.com',
 586         'infotop.jp',
 587         'ipoo.org',
 588         'IR.pl' => array(
 589                 '*.aj.pl',
 590                 '*.aliasy.org',
 591                 '*.gu.pl',
 592                 '*.hu.pl',
 593                 '*.ir.pl',
 594                 '*.jo.pl',
 595                 '*.su.pl',
 596                 '*.td.pl',
 597                 '*.uk.pl',
 598                 '*.uy.pl',
 599                 '*.xa.pl',
 600                 '*.zj.pl',
 601         ),
 602         'irotator.com',
 603         '.iwebtool.com',
 604         'j6.bz',
 605         'jeeee.net',
 606         'Jaze Redirect Services' => array(
 607                 '*.arecool.net',
 608                 '*.iscool.net',
 609                 '*.isfun.net',
 610                 '*.tux.nu',
 611         ),
 612         '*.jed.pl',
 613         'JeremyJohnstone.com' => array('url.vg'),
 614         'jemurl.com',
 615         'jggj.net',
 616         'jpan.jp',
 617         'josh.nu',
 618         'kat.cc',
 619         'Kickme.to' => array(
 620                 '.1024bit.at',
 621                 '.128bit.at',
 622                 '.16bit.at',
 623                 '.256bit.at',
 624                 '.32bit.at',
 625                 '.512bit.at',
 626                 '.64bit.at',
 627                 '.8bit.at',
 628                 '.adores.it',
 629                 '.again.at',
 630                 '.allday.at',
 631                 '.alone.at',
 632                 '.altair.at',
 633                 '.american.at',
 634                 '.amiga500.at',
 635                 '.ammo.at',
 636                 '.amplifier.at',
 637                 '.amstrad.at',
 638                 '.anglican.at',
 639                 '.angry.at',
 640                 '.around.at',
 641                 '.arrange.at',
 642                 '.australian.at',
 643                 '.baptist.at',
 644                 '.basque.at',
 645                 '.battle.at',
 646                 '.bazooka.at',
 647                 '.berber.at',
 648                 '.blackhole.at',
 649                 '.booze.at',
 650                 '.bosnian.at',
 651                 '.brainiac.at',
 652                 '.brazilian.at',
 653                 '.bummer.at',
 654                 '.burn.at',
 655                 '.c-64.at',
 656                 '.catalonian.at',
 657                 '.catholic.at',
 658                 '.chapel.at',
 659                 '.chills.it',
 660                 '.christiandemocrats.at',
 661                 '.cname.at',
 662                 '.colors.at',
 663                 '.commodore.at',
 664                 '.commodore64.at',
 665                 '.communists.at',
 666                 '.conservatives.at',
 667                 '.conspiracy.at',
 668                 '.cooldude.at',
 669                 '.craves.it',
 670                 '.croatian.at',
 671                 '.cuteboy.at',
 672                 '.dancemix.at',
 673                 '.danceparty.at',
 674                 '.dances.it',
 675                 '.danish.at',
 676                 '.dealing.at',
 677                 '.deep.at',
 678                 '.democrats.at',
 679                 '.digs.it',
 680                 '.divxlinks.at',
 681                 '.divxmovies.at',
 682                 '.divxstuff.at',
 683                 '.dizzy.at',
 684                 '.does.it',
 685                 '.dork.at',
 686                 '.drives.it',
 687                 '.dutch.at',
 688                 '.dvdlinks.at',
 689                 '.dvdmovies.at',
 690                 '.dvdstuff.at',
 691                 '.emulators.at',
 692                 '.end.at',
 693                 '.english.at',
 694                 '.eniac.at',
 695                 '.error403.at',
 696                 '.error404.at',
 697                 '.evangelism.at',
 698                 '.exhibitionist.at',
 699                 '.faith.at',
 700                 '.fight.at',
 701                 '.finish.at',
 702                 '.finnish.at',
 703                 '.forward.at',
 704                 '.freebie.at',
 705                 '.freemp3.at',
 706                 '.french.at',
 707                 '.graduatejobs.at',
 708                 '.greenparty.at',
 709                 '.grunge.at',
 710                 '.hacked.at',
 711                 '.hang.at',
 712                 '.hangup.at',
 713                 '.has.it',
 714                 '.hide.at',
 715                 '.hindu.at',
 716                 '.htmlpage.at',
 717                 '.hungarian.at',
 718                 '.icelandic.at',
 719                 '.independents.at',
 720                 '.invisible.at',
 721                 '.is-chillin.it',
 722                 '.is-groovin.it',
 723                 '.japanese.at',
 724                 '.jive.at',
 725                 '.kickass.at',
 726                 '.kickme.to',
 727                 '.kindergarden.at',
 728                 '.knows.it',
 729                 '.kurd.at',
 730                 '.labour.at',
 731                 '.leech.at',
 732                 '.liberals.at',
 733                 '.linuxserver.at',
 734                 '.liqour.at',
 735                 '.lovez.it',
 736                 '.makes.it',
 737                 '.maxed.at',
 738                 '.means.it',
 739                 '.meltdown.at',
 740                 '.methodist.at',
 741                 '.microcomputers.at',
 742                 '.mingle.at',
 743                 '.mirror.at',
 744                 '.moan.at',
 745                 '.mormons.at',
 746                 '.musicmix.at',
 747                 '.nationalists.at',
 748                 '.needz.it',
 749                 '.nerds.at',
 750                 '.neuromancer.at',
 751                 '.newbie.at',
 752                 '.nicepage.at',
 753                 '.ninja.at',
 754                 '.norwegian.at',
 755                 '.ntserver.at',
 756                 '.owns.it',
 757                 '.paint.at',
 758                 '.palestinian.at',
 759                 '.phoneme.at',
 760                 '.phreaking.at',
 761                 '.playz.it',
 762                 '.polish.at',
 763                 '.popmusic.at',
 764                 '.portuguese.at',
 765                 '.powermac.at',
 766                 '.processor.at',
 767                 '.prospects.at',
 768                 '.protestant.at',
 769                 '.rapmusic.at',
 770                 '.raveparty.at',
 771                 '.reachme.at',
 772                 '.reads.it',
 773                 '.reboot.at',
 774                 '.relaxed.at',
 775                 '.republicans.at',
 776                 '.researcher.at',
 777                 '.reset.at',
 778                 '.resolve.at',
 779                 '.retrocomputers.at',
 780                 '.rockparty.at',
 781                 '.rocks.it',
 782                 '.rollover.at',
 783                 '.rough.at',
 784                 '.rules.it',
 785                 '.rumble.at',
 786                 '.russian.at',
 787                 '.says.it',
 788                 '.scared.at',
 789                 '.seikh.at',
 790                 '.serbian.at',
 791                 '.short.as',
 792                 '.shows.it',
 793                 '.silence.at',
 794                 '.simpler.at',
 795                 '.sinclair.at',
 796                 '.singz.it',
 797                 '.slowdown.at',
 798                 '.socialists.at',
 799                 '.spanish.at',
 800                 '.split.at',
 801                 '.stand.at',
 802                 '.stoned.at',
 803                 '.stumble.at',
 804                 '.supercomputer.at',
 805                 '.surfs.it',
 806                 '.swedish.at',
 807                 '.swims.it',
 808                 '.synagogue.at',
 809                 '.syntax.at',
 810                 '.syntaxerror.at',
 811                 '.techie.at',
 812                 '.temple.at',
 813                 '.thinkbig.at',
 814                 '.thirsty.at',
 815                 '.throw.at',
 816                 '.toplist.at',
 817                 '.trekkie.at',
 818                 '.trouble.at',
 819                 '.turkish.at',
 820                 '.unexplained.at',
 821                 '.unixserver.at',
 822                 '.vegetarian.at',
 823                 '.venture.at',
 824                 '.verycool.at',
 825                 '.vic-20.at',
 826                 '.viewing.at',
 827                 '.vintagecomputers.at',
 828                 '.virii.at',
 829                 '.vodka.at',
 830                 '.wannabe.at',
 831                 '.webpagedesign.at',
 832                 '.wheels.at',
 833                 '.whisper.at',
 834                 '.whiz.at',
 835                 '.wonderful.at',
 836                 '.zor.org',
 837                 '.zx80.at',
 838                 '.zx81.at',
 839                 '.zxspectrum.at',
 840         ),
 841         'kisaweb.com',
 842         'krotki.pl',
 843         'kuerzer.de',
 844         '*.kupisz.pl',
 845         'kuso.cc',
 846         '*.l8t.com',
 847         'lame.name',
 848         'lediga.st',
 849         'liencourt.com',
 850         'liteurl.com',
 851         'linkachi.com',
 852         'linkezy.com',
 853         'linkfrog.net',
 854         'linkook.com',
 855         'linkyme.com',
 856         'linkzip.net',
 857         'lispurl.com',
 858         'lnk.in',
 859         'makeashorterlink.com',
 860         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 861                 '*.3gp.fr',
 862                 '*.gtx.fr',
 863                 '*.ici.st',
 864                 '*.max.st',
 865                 '*.nn.cx',              // ns *.sivit.org
 866                 '*.site.cx',    // ns *.sivit.org
 867                 '*.user.fr',
 868                 '*.zxr.fr',
 869         ),
 870         'mcturl.com',
 871         'memurl.com',
 872         'Metamark.net' => array('xrl.us'),
 873         'midgeturl.com',
 874         'Minilink.org' => array('lnk.nu'),
 875         'miniurl.org',
 876         'miniurl.pl',
 877         'mixi.bz',
 878         'mo-v.jp',
 879         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 880                 '.com.md',
 881                 '.co.md',
 882                 '.org.md',
 883                 '.info.md',
 884                 '.host.md',
 885         ),
 886         'monster-submit.com',
 887         'mooo.jp',
 888         'murl.net',
 889         'myactivesurf.net',
 890         'mytinylink.com',
 891         'myurl.in',
 892         'myurl.com.tw',
 893         'nanoref.com',
 894         'Ne1.net' => array(
 895                 '*.ne1.net',
 896                 '*.r8.org',
 897         ),
 898         'Nashville Linux Users Group' => array('nlug.org'),
 899         'not2long.net',
 900         '*.notlong.com',
 901         '*.nuv.pl',
 902         'ofzo.be',
 903         '*.ontheinter.net',
 904         'ourl.org',
 905         'ov2.net',                              // frame
 906         '*.ozonez.com',
 907         'pagebang.com',
 908         'palurl.com',
 909         '*.paulding.net',
 910         'phpfaber.org',
 911         'pygmyurl.com',
 912         'pnope.com',
 913         'prettylink.com',
 914         'PROXID.net' => array(  // also xRelay.net
 915                 '*.asso.ws',
 916                 '*.corp.st',
 917                 '*.euro.tm',
 918                 '*.perso.tc',
 919                 '*.site.tc',
 920                 '*.societe.st',
 921         ),
 922         'qrl.jp',
 923         'qurl.net',
 924         'qwer.org',
 925         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 926         'radiobase.net',
 927         'Rakuten.co.jp' => array(
 928                 'pt.afl.rakuten.co.jp', ///c/
 929         ),
 930         'RedirectFree.com' => array(
 931                 '*.red.tc',
 932                 '*.redirectfree.com',
 933                 '*.sky.tc',
 934                 '*.the.vg',
 935         ),
 936         'redirme.com',
 937         'redirectme.to',
 938         'relic.net',
 939         'rezma.info',
 940         'rio.st',
 941         'rlink.org',
 942         '*.rmcinfo.fr',
 943         'rubyurl.com',
 944         '*.runboard.com',
 945         'runurl.com',
 946         's-url.net',
 947         's1u.net',
 948         'SG5.co.uk' => array(
 949                 '*.sg5.co.uk',
 950                 '*.sg5.info',
 951         ),
 952         'Shim.net' => array(
 953                 '*.0kn.com',
 954                 '*.2cd.net',
 955                 '*.freebiefinders.net',
 956                 '*.freegaming.org',
 957                 '*.op7.net',
 958                 '*.shim.net',
 959                 '*.v9z.com',
 960         ),
 961         'big5.shippingchina.com',
 962         'shorl.com',
 963         'shortenurl.com',
 964         'shorterlink.com',
 965         'shortlinks.co.uk',
 966         'shorttext.com',
 967         'shorturl-accessanalyzer.com',
 968         'Shortify.com' => array(
 969                 '74678439.com',
 970                 'shortify.com',
 971         ),
 972         'shortlink.co.uk',
 973         'ShortURL.com' => array(
 974                 '*.1sta.com',
 975                 '*.24ex.com',
 976                 '*.2fear.com',
 977                 '*.2fortune.com',
 978                 '*.2freedom.com',
 979                 '*.2hell.com',
 980                 '*.2savvy.com',
 981                 '*.2truth.com',
 982                 '*.2tunes.com',
 983                 '*.2ya.com',
 984                 '*.alturl.com',
 985                 '*.antiblog.com',
 986                 '*.bigbig.com',
 987                 '*.dealtap.com',
 988                 '*.ebored.com',
 989                 '*.echoz.com',
 990                 '*.filetap.com',
 991                 '*.funurl.com',
 992                 '*.headplug.com',
 993                 '*.hereweb.com',
 994                 '*.hitart.com',
 995                 '*.mirrorz.com',
 996                 '*.shorturl.com',
 997                 '*.spyw.com',
 998                 '*.vze.com',
 999         ),
1000         'shrinkalink.com',
1001         'shrinkthatlink.com',
1002         'shrinkurl.us',
1003         'shrt.org',
1004         'shrunkurl.com',
1005         'shurl.org',
1006         'shurl.net',
1007         'sid.to',
1008         'simurl.com',
1009         'sitefwd.com',
1010         'Sitelutions.com' => array(
1011                 '*.assexy.as',
1012                 '*.athersite.com',
1013                 '*.athissite.com',
1014                 '*.bestdeals.at',
1015                 '*.byinter.net',
1016                 '*.findhere.org',
1017                 '*.fw.nu',
1018                 '*.isgre.at',
1019                 '*.isthebe.st',
1020                 '*.kwik.to',
1021                 '*.lookin.at',
1022                 '*.lowestprices.at',
1023                 '*.onthenet.as',
1024                 '*.ontheweb.nu',
1025                 '*.pass.as',
1026                 '*.passingg.as',
1027                 '*.redirect.hm',
1028                 '*.rr.nu',
1029                 '*.ugly.as',
1030         ),
1031         '*.skracaj.pl',
1032         'skiltechurl.com',
1033         'skocz.pl',
1034         'slimurl.jp',
1035         'slink.in',
1036         'smallurl.eu',
1037         'smurl.name',
1038         'snipurl.com',
1039         'sp-nov.net',
1040         'splashblog.com',
1041         'spod.cx',
1042         '*.spydar.com',
1043         'Subdomain.gr' => array(
1044                 '*.p2p.gr',
1045                 '*.subdomain.gr',
1046         ),
1047         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1048         'surl.se',
1049         'surl.ws',
1050         'symy.jp',
1051         'tdurl.com',
1052         'tighturl.com',
1053         'tiniuri.com',
1054         'tiny.cc',
1055         'tiny.pl',
1056         'tiny2go.com',
1057         'tinylink.eu',
1058         'tinylinkworld.com',
1059         'tinypic.com',
1060         'tinyr.us',
1061         'TinyURL.com' => array(
1062                 'tinyurl.com',
1063                 'preview.tinyurl.com',
1064                 'tinyurl.co.uk',
1065         ),
1066         'titlien.com',
1067         '*.tlg.pl',
1068         'tlurl.com',
1069         'link.toolbot.com',
1070         'tnij.org',
1071         'Tokelau ccTLD' => array('.tk'),
1072         'toila.net',
1073         '*.toolbot.com',
1074         '*.torontonian.com',
1075         'trimurl.com',
1076         'ttu.cc',
1077         'turl.jp',
1078         '*.tz4.com',
1079         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1080                 '*.1.to',
1081                 '*.4.to',
1082                 '*.5.to',
1083                 '*.82.to',
1084                 '*.s.to',
1085                 '*.u.to',
1086                 '*.ce.to',
1087                 '*.cz.to',
1088                 '*.if.to',
1089                 '*.it.to',
1090                 '*.kp.to',
1091                 '*.ne.to',
1092                 '*.ok.to',
1093                 '*.pc.to',
1094                 '*.tv.to',
1095                 '*.dd.to',
1096                 '*.ee.to',
1097                 '*.hh.to',
1098                 '*.kk.to',
1099                 '*.mm.to',
1100                 '*.qq.to',
1101                 '*.xx.to',
1102                 '*.zz.to',
1103                 '*.ivy.to',
1104                 '*.joa.to',
1105                 '*.ever.to',
1106                 '*.mini.to',
1107         ),
1108         'uchinoko.in',
1109         'Ulimit.com' => array(
1110                 '*.be.tf',
1111                 '*.best.cd',
1112                 '*.bsd-fan.com',
1113                 '*.c0m.st',
1114                 '*.ca.tc',
1115                 '*.clan.st',
1116                 '*.com02.com',
1117                 '*.en.st',
1118                 '*.euro.st',
1119                 '*.fr.fm',
1120                 '*.fr.st',
1121                 '*.fr.vu',
1122                 '*.gr.st',
1123                 '*.ht.st',
1124                 '*.int.ms',
1125                 '*.it.st',
1126                 '*.java-fan.com',
1127                 '*.linux-fan.com',
1128                 '*.mac-fan.com',
1129                 '*.mp3.ms',
1130                 '*.qc.tc',
1131                 '*.sp.st',
1132                 '*.suisse.st',
1133                 '*.t2u.com',
1134                 '*.unixlover.com',
1135                 '*.zik.mu',
1136         ),
1137         '*.uni.cc',
1138         'UNONIC.com' => array(
1139                 '*.at.tf',      // AlpenNIC
1140                 '*.bg.tf',
1141                 '*.ca.tf',
1142                 '*.ch.tf',      // AlpenNIC
1143                 '*.cz.tf',
1144                 '*.de.tf',      // AlpenNIC
1145                 '*.edu.tf',
1146                 '*.eu.tf',
1147                 '*.int.tf',
1148                 '*.net.tf',
1149                 '*.pl.tf',
1150                 '*.ru.tf',
1151                 '*.sg.tf',
1152                 '*.us.tf',
1153         ),
1154         'Up.pl' => array(
1155                 '.69.pl',                       // by nsk101869
1156                 '.crack.pl',            // by nsk101869
1157                 '.film.pl',                     // by sibr19002
1158                 '.h2o.pl',                      // by nsk101869
1159                 '.hostessy.pl',         // by nsk101869
1160                 '.komis.pl',            // by nsk101869
1161                 '.laski.pl',            // by nsk101869
1162                 '.modelki.pl',          // by nsk101869
1163                 '.muzyka.pl',           // by sibr19002
1164                 '.nastolatki.pl',       // by nsk101869
1165                 '.obuwie.pl',           // by nsk101869
1166                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1167                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1168                 '.sexchat.pl',          // by nsk101869
1169                 '.sexlive.pl',          // by nsk101869
1170                 '.tv.pl',                       // by nsk101869
1171                 '.up.pl',                       // by nsk101869
1172                 '.video.pl',            // by nsk101869
1173                 '.xp.pl',                       // nsk101869
1174         ),
1175         '*.uploadr.com',
1176         'url.ie',
1177         'url4.net',
1178         'url-c.com',
1179         'urlbee.com',
1180         'urlbounce.com',
1181         'urlcut.com',
1182         'urlcutter.com',
1183         'urlic.com',
1184         'urlin.it',
1185         'urlkick.com',
1186         'URLLogs.com' => array(
1187                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1188                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1189         ),
1190         '*.urlproxy.com',
1191         'urlser.com',
1192         'urlsnip.com',
1193         'urlzip.de',
1194         'urlx.org',
1195         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1196         'utun.jp',
1197         'uxxy.com',
1198         '*.v27.net',
1199         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1200                 '*.all.at',
1201                 '*.back.to',
1202                 '*.beam.at',
1203                 '*.been.at',
1204                 '*.bite.to',
1205                 '*.board.to',
1206                 '*.bounce.to',
1207                 '*.bowl.to',
1208                 '*.break.at',
1209                 '*.browse.to',
1210                 '*.change.to',
1211                 '*.chip.ms',
1212                 '*.connect.to',
1213                 '*.crash.to',
1214                 '*.cut.by',
1215                 '*.direct.at',
1216                 '*.dive.to',
1217                 '*.drink.to',
1218                 '*.drive.to',
1219                 '*.drop.to',
1220                 '*.easy.to',
1221                 '*.everything.at',
1222                 '*.fade.to',
1223                 '*.fanclub.ms',
1224                 '*.firstpage.de',
1225                 '*.fly.to',
1226                 '*.flying.to',
1227                 '*.fortunecity.co.uk',
1228                 '*.fortunecity.com',
1229                 '*.forward.to',
1230                 '*.fullspeed.to',
1231                 '*.fun.ms',
1232                 '*.gameday.de',
1233                 '*.germany.ms',
1234                 '*.get.to',
1235                 '*.getit.at',
1236                 '*.hard-ware.de',
1237                 '*.hello.to',
1238                 '*.hey.to',
1239                 '*.hop.to',
1240                 '*.how.to',
1241                 '*.hp.ms',
1242                 '*.jump.to',
1243                 '*.kiss.to',
1244                 '*.listen.to',
1245                 '*.mediasite.de',
1246                 '*.megapage.de',
1247                 '*.messages.to',
1248                 '*.mine.at',
1249                 '*.more.at',
1250                 '*.more.by',
1251                 '*.move.to',
1252                 '*.musicpage.de',
1253                 '*.mypage.org',
1254                 '*.mysite.de',
1255                 '*.nav.to',
1256                 '*.notrix.at',
1257                 '*.notrix.ch',
1258                 '*.notrix.de',
1259                 '*.notrix.net',
1260                 '*.on.to',
1261                 '*.page.to',
1262                 '*.pagina.de',
1263                 '*.played.by',
1264                 '*.playsite.de',
1265                 '*.privat.ms',
1266                 '*.quickly.to',
1267                 '*.redirect.to',
1268                 '*.rulestheweb.com',
1269                 '*.run.to',
1270                 '*.scroll.to',
1271                 '*.seite.ms',
1272                 '*.shortcut.to',
1273                 '*.skip.to snap.to',
1274                 '*.soft-ware.de',
1275                 '*.start.at',
1276                 '*.stick.by',
1277                 '*.surf.to',
1278                 '*.switch.to',
1279                 '*.talk.to',
1280                 '*.tip.nu',
1281                 '*.top.ms',
1282                 '*.transfer.to',
1283                 '*.travel.to',
1284                 '*.turn.to',
1285                 '*.vacations.to',
1286                 '*.videopage.de',
1287                 '*.virtualpage.de',
1288                 '*.w3.to',
1289                 '*.walk.to',
1290                 '*.warp9.to',
1291                 '*.window.to',
1292                 '*.yours.at',
1293                 '*.zap.to',
1294                 '*.zip.to',
1295         ),
1296         'VDirect.com' => array(
1297                 '*.emailme.net',
1298                 '*.getto.net',
1299                 '*.inetgames.com',
1300                 '*.netbounce.com',
1301                 '*.netbounce.net',
1302                 '*.oneaddress.net',
1303                 '*.snapto.net',
1304                 '*.vdirect.com',
1305                 '*.vdirect.net',
1306                 '*.webrally.net',
1307         ),
1308         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1309         'vgo2.com',
1310         'Voila.fr' => array('r.voila.fr'),      // Fix it
1311         'w3t.org',
1312         'wapurl.co.uk',
1313         'Wb.st' => array(
1314                 '*.team.st',
1315                 '*.wb.st',
1316         ),
1317         'wbkt.net',
1318         'WebAlias.com' => array(
1319                 '*.andmuchmore.com',
1320                 '*.browser.to',
1321                 '*.escape.to',
1322                 '*.fornovices.com',
1323                 '*.fun.to',
1324                 '*.got.to',
1325                 '*.hottestpix.com',
1326                 '*.imegastores.com',
1327                 '*.latest-info.com',
1328                 '*.learn.to',
1329                 '*.moviefever.com',
1330                 '*.mp3-archives.com',
1331                 '*.myprivateidaho.com',
1332                 '*.radpages.com',
1333                 '*.remember.to',
1334                 '*.resourcez.com',
1335                 '*.return.to',
1336                 '*.sail.to',
1337                 '*.sports-reports.com',
1338                 '*.stop.to',
1339                 '*.thrill.to',
1340                 '*.tophonors.com',
1341                 '*.uncutuncensored.com',
1342                 '*.up.to',
1343                 '*.veryweird.com',
1344                 '*.way.to',
1345                 '*.web-freebies.com',
1346                 '.webalias.com',
1347                 '*.webdare.com',
1348                 '*.xxx-posed.com',
1349         ),
1350         'webmasterwise.com',
1351         'witherst at hotmail.com' => array(     // by Tim Withers
1352                 '*.associates-program.com',
1353                 '*.casinogopher.com',
1354                 '*.ezpagez.com',
1355                 '*.vgfaqs.com',
1356         ),
1357         'wittylink.com',
1358         'wiz.sc',                       // tiny.cc related
1359         'X50.us' => array(
1360                 '*.i50.de',
1361                 '*.x50.us',
1362         ),
1363         'big5.xinhuanet.com',   ///gate/big5/
1364         'xhref.com',
1365         'Xn6.net' => array(
1366                 '*.9ax.net',
1367                 '*.xn6.net',
1368         ),
1369         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1370         '.y11.net',
1371         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1372                 '*.yesns.com',
1373                 '*.srv4u.net',
1374                 //blogne.com
1375         ),
1376         'yatuc.com',
1377         'yep.it',
1378         'yumlum.com',
1379         'yurel.com',
1380         'Z.la' => array(
1381                 'z.la',
1382                 't.z.la',
1383         ),
1384         'zaable.com',
1385         'zapurl.com',
1386         'zarr.co.uk',
1387         'zerourl.com',
1388         'ZeroWeb.org' => array(
1389                 '*.80t.com',
1390                 '*.firez.org',
1391                 '*.fizz.nu',
1392                 '*.ingame.org',
1393                 '*.irio.net',
1394                 '*.v33.org',
1395                 '*.zeroweb.org',
1396         ),
1397         'zhukcity.ru',
1398         'zippedurl.com',
1399         'zr5.us',
1400         '*.zs.pl',
1401         '*.zu5.net',
1402         'zuso.tw',
1403         '*.zwap.to',
1404 );
1405
1406 // --------------------------------------------------
1407
1408 $blocklist['A-2'] = array(
1409
1410         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1411         //
1412         //'*.dyndns.*', // Wildcard for dyndns
1413         //
1414         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1415         'ddns.ru' => array('*.bpa.nu'),
1416         'Dhs.org' => array(
1417                 '*.2y.net',
1418                 '*.dhs.org',
1419         ),
1420         '*.dnip.net',
1421         '*.dyndns.co.za',
1422         '*.dyndns.dk',
1423         '*.dyndns.nemox.net',
1424         'DyDNS.com' => array(
1425                 '*.ath.cx',
1426                 '*.dnsalias.org',
1427                 '*.dyndns.org',
1428                 '*.homeip.net',
1429                 '*.homelinux.net',
1430                 '*.mine.nu',
1431                 '*.shacknet.nu',
1432         ),
1433         '*.dtdns.net',                  // by jscott at sceiron.com
1434         '*.dynu.com',
1435         '*.dynup.net',
1436         '*.fdns.net',
1437         'J-Speed.net' => array(
1438                 '*.bne.jp',
1439                 '*.ii2.cc',
1440                 '*.jdyn.cc',
1441                 '*.jspeed.jp',
1442         ),
1443         '*.mydyn.de',
1444         '*.nerdcamp.net',
1445         'No-IP.com' => array(
1446                         '*.bounceme.net',
1447                         '*.hopto.org',
1448                         '*.myftp.biz',
1449                         '*.myftp.org',
1450                         '*.myvnc.com',
1451                         '*.no-ip.biz',
1452                         '*.no-ip.info',
1453                         '*.no-ip.org',
1454                         '*.redirectme.net',
1455                         '*.servebeer.com',
1456                         '*.serveblog.net',
1457                         '*.servecounterstrike.com',
1458                         '*.serveftp.com',
1459                         '*.servegame.com',
1460                         '*.servehalflife.com',
1461                         '*.servehttp.com',
1462                         '*.servemp3.com',
1463                         '*.servepics.com',
1464                         '*.servequake.com',
1465                         '*.sytes.net',
1466                         '*.zapto.org',
1467         ),
1468         '*.opendns.be',
1469         'Yi.org' => array(      // by dns at whyi.org
1470                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1471
1472                 // 72.55.129.46(redirect.yi.org)
1473                 '*.whyi.org',
1474                 '*.weedns.com',
1475         ),
1476         '*.zenno.info',
1477         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1478                         // and all non-recorded domains redirect to 'agoga.com' now
1479                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1480                         // http://agoga.com/aboutus.html
1481 );
1482
1483 // --------------------------------------------------
1484
1485 // B: Sample setting of:
1486 // Jacked (taken advantage of) and cleaning-less sites
1487 //
1488 // Please notify us about this list with reason:
1489 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1490
1491 $blocklist['B-1'] = array(
1492
1493         // B-1: Web N.M spaces (N > 0, M > 0)
1494         //
1495         //   Messages from forerunners:
1496         //     activefreehost.com
1497         //       "We regret to inform you that ActiveFreeHost
1498         //        free hosting service has is now closed (as of
1499         //        September 18). We have been online for over
1500         //        two and half years, but have recently decided
1501         //        to take time for software improvement to fight
1502         //        with server abuse, Spam advertisement and
1503         //        fraud."
1504         //
1505         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1506         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1507         '*.007webpro.com',              // by richord at ientry.com
1508         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1509         '*.0buckhost.com',              // by tycho at e-lab.nl
1510         '0Catch.com related' => array(
1511                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1512
1513                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1514                 '*.100megsfree5.com',
1515
1516                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1517                 '*.100freemb.com',              // by Danny Ashworth
1518                 '*.easyfreehosting.com',
1519                 '*.exactpages.com',
1520                 '*.fcpages.com',
1521                 '*.wtcsites.com',
1522
1523                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1524                 '*.741.com',
1525                 '*.freecities.com',
1526                 '*.freesite.org',
1527                 '*.freewebpages.org',
1528                 '*.freewebsitehosting.com',
1529                 '*.jvl.com',
1530
1531                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1532                 '*.freespaceusa.com',
1533                 '*.usafreespace.com',
1534
1535                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1536                 '*.dex1.com',
1537                 '*.questh.com',
1538
1539                 // 209.63.57.10(*snip*), ns *.0catch.com
1540                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1541                 '*.012webpages.com',    // by support at 0catch.com
1542                 '*.150m.com',
1543                 '*.1sweethost.com',             // by whois at bluehost.com
1544                 '*.250m.com',                   // by jason at fahlman.net
1545                 '*.9cy.com',                    // by paulw0t at gmail.com
1546                 '*.angelcities.com',    // by cliff at eccentrix.com
1547                 '*.arcadepages.com',    // by admin at site-see.com
1548                 '*.e-host.ws',                  // by dns at jomax.net
1549                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1550                 '*.fw.bz',                              // by ben at kuehl.as
1551                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1552                 '*.g0g.net',                    // by domains at seem.co.uk
1553                 '*.galaxy99.net',               // by admin at bagchi.org
1554                 '*.greatnow.com',               // by peo at peakspace.com
1555                 '*.hautlynx.com',               // by hlewis28 at juno.com
1556                 '*.ibnsites.com',               // by cmrojas at mail.com
1557                 '*.just-allen.com',             // by extremehype at msn.com
1558                 '*.kogaryu.com',                // by angelguerra at msn.com
1559                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1560                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1561                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1562                 '*.s-enterprize.com',
1563                 '*.servetown.com',              // by jonahbliss at earthlink.net
1564                 '*.stinkdot.org',               // by bluedot at ziplip.com
1565                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1566                 '*.zomi.net',                   // by sianpu at gmail.com
1567         ),
1568         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1569         '100 Best Inc' => array(
1570                 // by 100 Best Inc (info at 100best.com)
1571
1572                 // 66.235.204.7(h204-007.bluefishhosting.com)
1573                 '*.2-hi.com',
1574                 '*.20fr.com',
1575                 '*.20ii.com',
1576                 '*.20is.com',
1577                 '*.20it.com',
1578                 '*.20m.com',    // by jlee at 100bestinc.com
1579                 '*.20to.com',
1580                 '*.2u-2.com',
1581                 '*.3-st.com',
1582                 '*.fws1.com',
1583                 '*.fw-2.com',
1584                 '*.inc5.com',
1585                 '*.on-4.com',
1586                 '*.st-3.com',
1587                 '*.st20.com',
1588                 '*.up-a.com',
1589
1590                 // 216.40.33.252(www-pd.mdnsservice.com)
1591                 '*.0-st.com',
1592                 '*.20me.com',
1593         ),
1594         '*.100foros.com',
1595         '*.101freehost.com',
1596         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1597         '20six Weblog Services' => array(
1598                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1599                 '.20six.co.uk',
1600                 '.20six.fr',
1601                 'myblog.de',
1602                 'myblog.es',
1603         ),
1604         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1605         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1606         '2IP.com' => array(
1607                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1608                 '*.2ip.jp',
1609                 '*.474.jp',
1610                 '*.consensus.jp',
1611                 '*.desyo.jp',
1612                 '*.dif.jp',
1613                 '*.pastels.jp',
1614                 '*.powerblogger.jp',
1615                 '*.vippers.jp',
1616                 '*.webpages.jp',
1617
1618                 // 205.209.97.56(non-existent)
1619                 '*.biografi.biz',
1620                 '*.biografi.info',
1621                 '*.biografi.org',
1622                 '*.biografi.us',
1623                 '*.datadiri.biz',
1624                 '*.datadiri.cc',
1625                 '*.datadiri.com',
1626                 '*.datadiri.info',
1627                 '*.datadiri.net',
1628                 '*.datadiri.org',
1629                 '*.datadiri.tv',
1630                 '*.datadiri.us',
1631                 '*.indo.bz',
1632                 '*.indo.cc',
1633                 '*.profil.bz',
1634                 '*.profil.cc',
1635                 '*.profil.cn',
1636                 '*.profil.in',
1637                 '*.profil.tv',
1638
1639                 // 205.209.101.47(non-existent)
1640                 '*.about.tc',
1641                 '*.about.vg',
1642                 '*.aboutus.gs',
1643                 '*.aboutus.ms',
1644                 '*.aboutus.tc',
1645                 '*.aboutus.vg',
1646                 '*.band.io',
1647                 '*.beijing.am',
1648                 '*.blogs.io',
1649                 '*.boke.am',
1650                 '*.clan.io',
1651                 '*.ecv.gs',
1652                 '*.ecv.ms',
1653                 '*.ecv.vg',
1654                 '*.freekong.cn',
1655                 '*.go2net.ws',
1656                 '*.hello.cn.com',
1657                 '*.hello.io',
1658                 '*.hits.io',
1659                 '*.hostingweb.us',
1660                 '*.hub.io',
1661                 '*.ide.am',
1662                 '*.inc.io',
1663                 '*.incn.in',
1664                 '*.indo.gs',
1665                 '*.indo.ms',
1666                 '*.indo.tc',
1667                 '*.indo.vg',
1668                 '*.infinitehosting.net',
1669                 '*.infinites.net',
1670                 '*.jushige.cn',
1671                 '*.jushige.com',
1672                 '*.kongjian.in',
1673                 '*.lan.io',
1674                 '*.llc.nu',
1675                 '*.maimai.in',
1676                 '*.max.io',
1677                 '*.musician.io',
1678                 '*.mycv.bz',
1679                 '*.mycv.nu',
1680                 '*.mycv.tv',
1681                 '*.myweb.io',
1682                 '*.ourprofile.biz',
1683                 '*.ourprofile.info',
1684                 '*.ourprofile.net',
1685                 '*.ourprofile.org',
1686                 '*.ourprofile.us',
1687                 '*.profil.gs',
1688                 '*.profil.ms',
1689                 '*.profil.tc',
1690                 '*.qiye.in',
1691                 '*.site.io',
1692                 '*.wan.io',
1693                 '*.web-cam.ws',
1694                 '*.webs.io',
1695                 '*.xixu.cc',
1696                 '*.zaici.am',
1697                 '*.zip.io',
1698                 '*.zuzhi.in',
1699
1700                 '*.profil.vg',          // 205.209.101.67(non-existent)
1701                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1702                 //'*.about.gs',         // No record
1703                 //'*.eprofile.us',      // non-existent
1704         ),
1705         '2Page.de' => array(
1706                 '.dreipage.de',
1707                 '.2page.de',
1708         ),
1709         '*.3-hosting.net',
1710         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1711         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1712         '*.8000web.com',        // 75.126.189.45
1713         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1714         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1715         'Ai.NET' => array(
1716                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1717                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1718         ),
1719         '*.aimoo.com',
1720         '*.alkablog.com',
1721         '*.alluwant.de',
1722         '.amkbb.com',
1723         'answerbag.com',        // 8.5.0.128
1724         'anyboard.net',
1725         'AOL.com' =>    // http://about.aol.com/international_services
1726                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1727                 '(?:aol|americaonline)\.' .
1728                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1729                 // Rough but works
1730         'Apple.com' => array('idisk.mac.com'),
1731         '*.askfaq.org',
1732         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1733         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1734         '*.asphost4free.com',
1735         'basenow.com',
1736         'BatCave.net' => array(
1737                 '.batcave.net',                 // 64.22.112.226
1738                 '.freehostpro.com',             // 64.22.112.226
1739         ),
1740         '*.bb-fr.com',
1741         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1742         '*.beeplog.com',
1743         'beepworld.it',
1744         'bestfreeforums.com',
1745         'bestvotexxx.com',
1746         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1747         'blinklist.com',
1748         'Blog.com' => array(
1749                 // by admin.domains at co.blog.com
1750                 '*.blog.com',
1751                 '*.blogandorra.com',
1752                 '*.blogangola.com',
1753                 '*.blogaruba.com',
1754                 '*.blogaustria.at',
1755         ),
1756         '*.blog.com.es',
1757         '*.blog.hr',
1758         '*.blog4ever.com',
1759         '*.blog-fx.com',
1760         '*.blogbeee.com',
1761         'blogas.lt',
1762         'blogbud.com',
1763         '*.blogburkinafaso.com',
1764         '*.blogcu.com',                 // by info at nokta.com
1765         'blogfreely.com',
1766         '*.blogdrive.com',
1767         '*.blogg.de',
1768         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1769         'bloggercrab.com',
1770         'bloggers.nl',
1771         '*.bloggingmylife.com',
1772         '*.bloggles.info',
1773         '*.blogharbor.com',
1774         '*.bloguj.eu',
1775         'bloguitos.com',
1776         'blogosfer.com',
1777         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1778         '*.blogslive.net',
1779         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1780         '*.blogstream.com',
1781         'blogyaz.com',
1782         'bloodee.com',
1783         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1784         'board-4you.de',
1785         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1786         '*.boardhost.com',
1787         'Bravenet.com' => array(
1788                 '*.bravenet.com',
1789                 '*.bravehost.com',
1790         ),
1791         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1792         'C2k.jp' => array(
1793                 // by Makoto Okuse (webmaster at 2style.net)
1794                 '.081.in',
1795                 '.2style.in',
1796                 '.bian.in',
1797                 '.curl.in',
1798                 '.ennui.in',
1799                 '.jinx.in',
1800                 '.loose.in',
1801                 '.mist.in',
1802                 '.muu.in',
1803                 '.naive.in',
1804                 '.panic.in',
1805                 '.slum.in',
1806
1807                 // by 2style, ns *.click2k.net, *.2style.net
1808                 '.2st.jp',
1809                 '.betty.jp',
1810                 '.cabin.jp',
1811                 '.cult.jp',
1812                 '.mippi.jp',
1813                 '.purety.jp',
1814                 '.rapa.jp',
1815                 '.side-b.jp',
1816                 '.web-box.jp',
1817                 '.yea.jp',
1818
1819                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1820                 '.2style.net',
1821                 '.click2k.net',
1822                 '.houka5.com',
1823
1824                 // by click2k, ns *.click2k.net, *.2style.net
1825                 '.psyco.jp',
1826                 '.sweety.jp',
1827
1828                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1829                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1830         ),
1831         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1832         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1833         '*.chueca.com',
1834         'city-forum.com',
1835         '*.clicdev.com',
1836         '*.craigslist.org',
1837         'concepts-mall.com',
1838         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1839         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1840         'counterhit.de',
1841         '*.createblog.com',
1842         '*.createforum.net',
1843         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1844         '*.createmybb.com',
1845         'CwCity.de' => array(
1846                 '.cwcity.de',
1847                 '.cwsurf.de',
1848         ),
1849         'dakrats.net',
1850         '*.dcswtech.com',
1851         'del.icio.us',
1852         '*.devil.it',
1853         '*.diaryland.com',
1854         'diigo.com',                    ///user/
1855         'digg.com',
1856         'digstock.com',
1857         'domains at galaxywave.net' => array(
1858                 'blogstation.net',
1859                 '.phpbb-host.com',
1860         ),
1861         'dotbb.be',
1862         '*.dox.hu',                             // dns at 1b.hu
1863         '*.eadf.com',
1864         '*.eblog.com.au',
1865         '*.ekiwi.de',
1866         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1867         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1868         '*.ebloggy.com',
1869         'enunblog.com',
1870         '*.epinoy.com',
1871         '*.ez-sites.ws',
1872         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1873         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1874         '*.fathippohosting.com',        // 208.101.3.192
1875         'FC2.com' => array(
1876                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1877                         // Many traps available:
1878                         //      bqdr.blog98.fc2.com,       iframe
1879                         //      csfir.blog87.fc2.com,      iframe
1880                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1881                         //      sippou2006.blog60.fc2.com, iframe
1882                         // NOTE: 'blog.fc2.com' is not included
1883                 '*.h.fc2.com',  // Adult
1884         ),
1885         '*.fizwig.com',
1886         'forum.ezedia.net',
1887         '*.extra.hu',                   // angelo at jasmin.hu
1888         '*.fanforum.cc',
1889         'fingerprintmedia.com',
1890         '*.filelan.com',
1891         '*.fora.pl',
1892         '*.forka.eu',
1893         '*.foren-city.de',
1894         'foren-gratis.de',
1895         '*.foros.tv',
1896         '*.forospace.com',
1897         'foroswebgratis.com',
1898         '*.forum-on.de',
1899         '*.forum24.se',
1900         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1901         '.forum66.com',
1902         'Forumotion.com' => array(
1903                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1904                 '*.forumactif.com',     // 91.121.41.79
1905                 '*.editboard.com',      // 75.126.156.15
1906                 '*.sosblog.com',        // 74.86.25.140
1907
1908                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1909                 '*.0forum.biz',
1910                 '*.1forum.biz',
1911                 '*.1fr1.net',
1912                 '*.1talk.net',
1913                 '*.2forum.biz',
1914                 '*.3forum.biz',
1915                 '*.4forum.biz',
1916                 '*.4rumer.com',
1917                 '*.4rumer.net',
1918                 '*.4umer.com',
1919                 '*.4umer.net',
1920                 '*.5forum.biz',
1921                 '*.5forum.info',
1922                 '*.5forum.net',
1923                 '*.6forum.biz',
1924                 '*.6forum.info',
1925                 '*.77forum.com',
1926                 '*.7forum.biz',
1927                 '*.7forum.info',
1928                 '*.7forum.net',
1929                 '*.8forum.biz',
1930                 '*.8forum.info',
1931                 '*.8forum.net',
1932                 '*.9forum.biz',
1933                 '*.9forum.info',
1934                 '*.activebb.net',
1935                 '*.aforumfree.com',
1936                 '*.all-forum.net',
1937                 '*.all-up.com',
1938                 '*.alldiscussion.net',
1939                 '*.allgoo.net',
1940                 '*.allgoo.us',
1941                 '*.american-forum.net',
1942                 '*.americantalk.net',
1943                 '*.annuaire-forums.com',
1944                 '*.asiafreeforum.com',
1945                 '*.asianfreeforum.com',
1946                 '*.azureforum.com',
1947                 '*.azurforum.com',
1948                 '*.bestcheapforum.com',
1949                 '*.bestdiscussion.net',
1950                 '*.bestgoo.com',
1951                 '*.bestofforum.com',
1952                 '*.bestofforum.net',
1953                 '*.bestoforum.net',
1954                 '*.bforum.biz',
1955                 '*.big-forum.net',
1956                 '*.board-poster.com',
1957                 '*.board-realtors.com',
1958                 '*.boardonly.com',
1959                 '*.boardrealtors.net',
1960                 '*.boardsmessage.com',
1961                 '*.briceboard.com',
1962                 '*.bubblelol.com',
1963                 '*.buy-forum.com',
1964                 '*.buy-talk.com',
1965                 '*.buyforum.net',
1966                 '*.buygoo.net',
1967                 '*.buygoo.us',
1968                 '*.camelscrew.com',
1969                 '*.cheap-forum.com',
1970                 '*.cheapforum.net',
1971                 '*.chocoforum.com',
1972                 '*.chocoforum.net',
1973                 '*.clic-topic.com',
1974                 '*.clicboard.com',
1975                 '*.clictopic.com',
1976                 '*.clictopic.net',
1977                 '*.clictopics.com',
1978                 '*.clubdiscussion.net',
1979                 '*.coolbb.net',
1980                 '*.crazy4us.com',
1981                 '*.crazyfruits.net',
1982                 '*.createmyboard.com',
1983                 '*.crewcamel.com',
1984                 '*.cyberfreeforum.com',
1985                 '*.discutforum.com',
1986                 '*.discutfree.com',
1987                 '*.do-forum.com',
1988                 '*.do-goo.com',
1989                 '*.do-goo.net',
1990                 '*.do-talk.com',
1991                 '*.dodiscussion.com',
1992                 '*.dogoo.us',
1993                 '*.easydiscussion.net',
1994                 '*.easyforumlive.com',
1995                 '*.englishboard.net',
1996                 '*.englishboards.com',
1997                 '*.ephpbb.com',
1998                 '*.eraseboard.net',
1999                 '*.eraseboards.net',
2000                 '*.euro-talk.net',
2001                 '*.eurodiscussion.net',
2002                 '*.eurogoo.com',
2003                 '*.exchangesboard.com',
2004                 '*.exprimetoi.net',
2005                 '*.fairtopic.com',
2006                 '*.fforum.biz',
2007                 '*.fforumfree.com',
2008                 '*.first-forum.com',
2009                 '*.firstgoo.com',
2010                 '*.fororama.com',
2011                 '*.forum-2007.com',
2012                 '*.forum-actif.net',
2013                 '*.forum-free.biz',
2014                 '*.forum-free.org',
2015                 '*.forum-motion.com',
2016                 '*.forum0.biz',
2017                 '*.forum0.info',
2018                 '*.forum0.net',
2019                 '*.forum2.biz',
2020                 '*.forum3.biz',
2021                 '*.forum3.info',
2022                 '*.forum5.info',
2023                 '*.forum6.biz',
2024                 '*.forum6.info',
2025                 '*.forum7.biz',
2026                 '*.forum777.com',
2027                 '*.forum8.biz',
2028                 '*.forum9.biz',
2029                 '*.foruma.biz',
2030                 '*.forumactif.biz',
2031                 '*.forumactif.info',
2032                 '*.forumactif.name',
2033                 '*.forumactif.ws',
2034                 '*.forumaction.net',
2035                 '*.forumakers.com',
2036                 '*.forumandco.com',
2037                 '*.forumb.biz',
2038                 '*.forumc.biz',
2039                 '*.forumd.biz',
2040                 '*.forumdediscussions.com',
2041                 '*.forumdediscussions.net',
2042                 '*.forume.biz',
2043                 '*.forumeast.com',
2044                 '*.forumf.biz',
2045                 '*.forumfreek.com',
2046                 '*.forumfreez.com',
2047                 '*.forumg.biz',
2048                 '*.forumh.biz',
2049                 '*.forumh.net',
2050                 '*.forumhope.com',
2051                 '*.forumi.biz',
2052                 '*.forumice.net',
2053                 '*.foruminute.com',
2054                 '*.forumj.biz',
2055                 '*.forumj.net',
2056                 '*.forumjonction.com',
2057                 '*.forumk.biz',
2058                 '*.foruml.biz',
2059                 '*.forumm.biz',
2060                 '*.forummotion.com',
2061                 '*.forummotions.com',
2062                 '*.forumn.biz',
2063                 '*.forumn.net',
2064                 '*.forumo.biz',
2065                 '*.forumonline.biz',
2066                 '*.forumotions.com',
2067                 '*.forump.biz',
2068                 '*.forump.info',
2069                 '*.forumperso.com',
2070                 '*.forumpersos.com',
2071                 '*.forumplatinum.com',
2072                 '*.forumpro.fr',
2073                 '*.forumq.biz',
2074                 '*.forumr.biz',
2075                 '*.forumr.net',
2076                 '*.forumrama.com',
2077                 '*.forums-actifs.com',
2078                 '*.forums-actifs.net',
2079                 '*.forums1.net',
2080                 '*.forumsactifs.com',
2081                 '*.forumsactifs.net',
2082                 '*.forumsfree.org',
2083                 '*.forumsline.com',
2084                 '*.forumsmakers.com',
2085                 '*.forumsmotion.com',
2086                 '*.forumsmotions.com',
2087                 '*.forumt.biz',
2088                 '*.forumv.biz',
2089                 '*.forumvalue.com',
2090                 '*.forumw.biz',
2091                 '*.forumy.biz',
2092                 '*.free-boards.net',
2093                 '*.freediscussion.net',
2094                 '*.freediscussions.net',
2095                 '*.freeforum.me.uk',
2096                 '*.freeforumboard.net',
2097                 '*.freeforumfree.com',
2098                 '*.freevideotalk.com',
2099                 '*.frenchboard.com',
2100                 '*.fruitsandco.com',
2101                 '*.fullboards.com',
2102                 '*.fullsubject.com',
2103                 '*.fullsubject.net',
2104                 '*.get-forum.net',
2105                 '*.getdiscussion.com',
2106                 '*.getgoo.net',
2107                 '*.getgoo.us',
2108                 '*.gettalk.net',
2109                 '*.go-board.com',
2110                 '*.go-board.net',
2111                 '*.go-forum.net',
2112                 '*.go-ogler.com',
2113                 '*.gofreeforum.com',
2114                 '*.gogoo.us',
2115                 '*.goo-board.com',
2116                 '*.goo-boys.com',
2117                 '*.goo-dart.com',
2118                 '*.goo-dole.com',
2119                 '*.goo-done.com',
2120                 '*.gooboards.com',
2121                 '*.goodbb.net',
2122                 '*.goodearths.com',
2123                 '*.goodforum.net',
2124                 '*.goodoles.com',
2125                 '*.goodoolz.com',
2126                 '*.gooforum.com',
2127                 '*.gooforums.com',
2128                 '*.googoolz.com',
2129                 '*.great-forum.com',
2130                 '*.heavenforum.com',
2131                 '*.hforum.biz',
2132                 '*.high-forums.com',
2133                 '*.highbb.com',
2134                 '*.highforum.net',
2135                 '*.hightoxic.com',
2136                 '*.homediscussion.net',
2137                 '*.homegoo.com',
2138                 '*.hooxs.com',
2139                 '*.hot-me.com',
2140                 '*.hot4um.com',
2141                 '*.hotdiscussion.net',
2142                 '*.hotgoo.net',
2143                 '*.in-goo.com',
2144                 '*.in-goo.net',
2145                 '*.infodiscussion.net',
2146                 '*.ingoo.us',
2147                 '*.iowoi.com',
2148                 '*.jforum.biz',
2149                 '*.just-forum.net',
2150                 '*.justboard.net',
2151                 '*.justdiscussion.com',
2152                 '*.justforum.net',
2153                 '*.justgoo.com',
2154                 '*.keuf.net',
2155                 '*.lforum.biz',
2156                 '*.lifediscussion.net',
2157                 '*.lifeme.net',
2158                 '*.lightbb.com',
2159                 '*.logu2.com',
2160                 '*.longdomaine.com',
2161                 '*.lovediscussion.net',
2162                 '*.lowcostforum.com',
2163                 '*.make-free-forum.com',
2164                 '*.makeforumfree.com',
2165                 '*.makefreeforum.com',
2166                 '*.mam9.com',
2167                 '*.manageboard.com',
2168                 '*.max2forum.com',
2169                 '*.meabout.com',
2170                 '*.megabb.com',
2171                 '*.moncontact.com',
2172                 '*.moninter.net',
2173                 '*.motion-forum.net',
2174                 '*.motionforum.net',
2175                 '*.motionsforum.com',
2176                 '*.mrforum.net',
2177                 '*.msnboard.net',
2178                 '*.msnyou.com',
2179                 '*.my-free-board.com',
2180                 '*.my-free-boards.com',
2181                 '*.my-free-forum.com',
2182                 '*.my-free-forums.com',
2183                 '*.my-goo.com',
2184                 '*.my-goo.net',
2185                 '*.mydiscussionboard.com',
2186                 '*.myfreeboard.net',
2187                 '*.mygoo.org',
2188                 '*.myrealboard.com',
2189                 '*.netboarder.com',
2190                 '*.netdiscussion.net',
2191                 '*.netgoo.org',
2192                 '*.new-forum.net',
2193                 '*.newdiscussion.net',
2194                 '*.newgoo.net',
2195                 '*.nforum.biz',
2196                 '*.nice-album.com',
2197                 '*.nice-board.biz',
2198                 '*.nice-board.com',
2199                 '*.nice-board.net',
2200                 '*.nice-boards.com',
2201                 '*.nice-boards.net',
2202                 '*.nice-forum.com',
2203                 '*.nice-forum.net',
2204                 '*.nice-forums.com',
2205                 '*.nice-forums.net',
2206                 '*.nice-gallery.net',
2207                 '*.nice-subject.com',
2208                 '*.nice-subjects.com',
2209                 '*.nice-theme.com',
2210                 '*.nice-topic.com',
2211                 '*.nice-topics.com',
2212                 '*.nicealbums.com',
2213                 '*.niceboard.biz',
2214                 '*.niceboard.net',
2215                 '*.niceboards.net',
2216                 '*.nicegalleries.net',
2217                 '*.nicesubject.com',
2218                 '*.nicesubjects.com',
2219                 '*.nicetopic.net',
2220                 '*.nicetopics.com',
2221                 '*.nightforum.net',
2222                 '*.nocost-forum.com',
2223                 '*.nofeeforum.com',
2224                 '*.one-forum.net',
2225                 '*.onediscussion.net',
2226                 '*.onegoo.us',
2227                 '*.onlinegoo.com',
2228                 '*.onlyquery.com',
2229                 '*.open-board.com',
2230                 '*.openu2.com',
2231                 '*.othersboards.com',
2232                 '*.own0.com',
2233                 '*.pforum.biz',
2234                 '*.phpbb9.com',
2235                 '*.phpbbtest.com',
2236                 '*.positifforum.com',
2237                 '*.postalboard.com',
2238                 '*.prodiscussion.net',
2239                 '*.progoo.us',
2240                 '*.pureforum.net',
2241                 '*.qforum.biz',
2242                 '*.quickbb.net',
2243                 '*.realbb.net',
2244                 '*.realfreeforum.com',
2245                 '*.realmsn.com',
2246                 '*.rforum.biz',
2247                 '*.road2us.com',
2248                 '*.roomforum.com',
2249                 '*.saveboard.com',
2250                 '*.screwcamel.com',
2251                 '*.screwcamels.com',
2252                 '*.sendboard.com',
2253                 '*.sephorum.com',
2254                 '*.sforum.biz',
2255                 '*.shootboard.com',
2256                 '*.shop-forum.net',
2257                 '*.shopsubject.com',
2258                 '*.simpleboard.net',
2259                 '*.site-forums.com',
2260                 '*.smileyforum.net',
2261                 '*.sos-forum.net',
2262                 '*.sos4um.com',
2263                 '*.sos4um.net',
2264                 '*.sosforum.net',
2265                 '*.speedyforum.com',
2266                 '*.stationforum.com',
2267                 '*.subject-expert.com',
2268                 '*.subject-line.com',
2269                 '*.subject-tracer.com',
2270                 '*.subjectchange.com',
2271                 '*.subjectdeals.com',
2272                 '*.subjectdebate.com',
2273                 '*.subjectdone.com',
2274                 '*.subjectonline.com',
2275                 '*.subjectschange.com',
2276                 '*.subjectsecrets.com',
2277                 '*.super-forum.net',
2278                 '*.talk-forums.com',
2279                 '*.team-forum.net',
2280                 '*.team-talk.net',
2281                 '*.teamconvention.com',
2282                 '*.teamgoo.net',
2283                 '*.teensboards.com',
2284                 '*.the-talk.net',
2285                 '*.the-up.com',
2286                 '*.thegoo.us',
2287                 '*.thinksubject.com',
2288                 '*.top-board.com',
2289                 '*.top-forum.net',
2290                 '*.top-me.com',
2291                 '*.top-talk.net',
2292                 '*.topdiscussion.com',
2293                 '*.topgoo.net',
2294                 '*.topic-board.com',
2295                 '*.topic-board.net',
2296                 '*.topic-debate.com',
2297                 '*.topic-ideas.com',
2298                 '*.topic-mail.com',
2299                 '*.topic-zone.com',
2300                 '*.topicboard.net',
2301                 '*.topicboards.com',
2302                 '*.topicmanager.com',
2303                 '*.topicsolutions.net',
2304                 '*.toxicfarm.com',
2305                 '*.unlimitboard.com',
2306                 '*.unlimitedboard.com',
2307                 '*.unlimitedforum.com',
2308                 '*.up-with.com',
2309                 '*.up-your.com',
2310                 '*.urealboard.com',
2311                 '*.user-board.net',
2312                 '*.userboard.net',
2313                 '*.users-board.com',
2314                 '*.users-board.net',
2315                 '*.usersboard.com',
2316                 '*.usersboard.net',
2317                 '*.webgoo.us',
2318                 '*.withboards.com',
2319                 '*.withme.us',
2320                 '*.worldgoo.com',
2321                 '*.yahooboard.net',
2322                 '*.yforum.biz',
2323                 '*.yoo7.com',
2324                 '*.youneed.us',
2325                 '*.your-board.com',
2326                 '*.your-talk.com',
2327                 '*.yourme.net',
2328                 '*.zforum.biz',
2329
2330                 // 75.126.156.15 redirect to forumactif.com
2331                 '*.actifforum.com',
2332                 '*.fr-bb.com',
2333                 '*.superforum.fr',
2334
2335                 // 75.126.156.15 redirect to editboard.com
2336                 '*.bbfr.net',
2337                 '*.bbgraf.com',
2338                 '*.cinebb.com',
2339                 '*.darkbb.com',
2340                 '*.dynamicbb.com',
2341                 '*.zikforum.com',
2342
2343                 // 74.86.25.140 Used: sosblog.com
2344                 '*.0-up.com',
2345                 '*.0-yo.com',
2346                 '*.04live.com',
2347                 '*.06fr.com',
2348                 '*.0fra.com',
2349                 '*.0jet.com',
2350                 '*.0yoo.com',
2351                 '*.1toxic.com',
2352                 '*.2k00.com',
2353                 '*.2xik.com',
2354                 '*.blog-2007.com',
2355                 '*.blog-2008.com',
2356                 '*.blog-2009.com',
2357                 '*.blog-2010.com',
2358                 '*.blog-actif.net',
2359                 '*.blog-marley.com',
2360                 '*.blog-talker.com',
2361                 '*.blog2009.com',
2362                 '*.blogactif.net',
2363                 '*.blogalbums.com',
2364                 '*.blogalerie.com',
2365                 '*.blogaleries.com',
2366                 '*.blogallerys.com',
2367                 '*.blogandme.com',
2368                 '*.blogandyou.com',
2369                 '*.blogbubble.net',
2370                 '*.blogdollz.com',
2371                 '*.bloggeuse.net',
2372                 '*.bloggeuses.com',
2373                 '*.bloginstinct.com',
2374                 '*.bloginternet.net',
2375                 '*.blogmakers.net',
2376                 '*.blogmarley.net',
2377                 '*.blogminister.net',
2378                 '*.blogmorane.com',
2379                 '*.blognboard.com',
2380                 '*.blogotek.net',
2381                 '*.blogpas.com',
2382                 '*.blogpublisher.net',
2383                 '*.blogsalbum.com',
2384                 '*.blogsalbums.com',
2385                 '*.blogsfan.net',
2386                 '*.blogsgallerys.com',
2387                 '*.blogsitephp.com',
2388                 '*.blogsland.net',
2389                 '*.blogsmaker.com',
2390                 '*.blogsmakers.com',
2391                 '*.blogspeed.net',
2392                 '*.blogsup.net',
2393                 '*.blogsutil.com',
2394                 '*.blogsutils.com',
2395                 '*.blogsystem.net',
2396                 '*.blogtalker.net',
2397                 '*.blogtheque.net',
2398                 '*.blogutil.com',
2399                 '*.blogvsboard.com',
2400                 '*.briceblog.com',
2401                 '*.cibleblog.com',
2402                 '*.cristalblog.com',
2403                 '*.crystalblog.net',
2404                 '*.dad-blog.com',
2405                 '*.daddy-blog.com',
2406                 '*.defaultblog.com',
2407                 '*.discussionsblog.com',
2408                 '*.dollzblog.com',
2409                 '*.dtoxic.com',
2410                 '*.easiestblog.net',
2411                 '*.espaceblog.net',
2412                 '*.exitblog.net',
2413                 '*.expensiveblog.com',
2414                 '*.extra-blog.net',
2415                 '*.extrablog.net',
2416                 '*.facileblog.com',
2417                 '*.forblogger.com',
2418                 '*.forumsblogs.com',
2419                 '*.freephpblog.com',
2420                 '*.fresh-blog.net',
2421                 '*.galleryblog.net',
2422                 '*.galleryblogs.net',
2423                 '*.gallerysblog.com',
2424                 '*.gallerysblogs.com',
2425                 '*.hyper-blog.net',
2426                 '*.hyper-blogger.com',
2427                 '*.hyper-blogger.net',
2428                 '*.hyperblogger.net',
2429                 '*.instinctblog.com',
2430                 '*.jeunblog.com',
2431                 '*.jeuneblog.com',
2432                 '*.judblog.com',
2433                 '*.makeblog.net',
2434                 '*.man-blog.net',
2435                 '*.man-blogs.com',
2436                 '*.man-blogs.net',
2437                 '*.manblog.net',
2438                 '*.manblog.org',
2439                 '*.manblog.us',
2440                 '*.manblogs.net',
2441                 '*.mansblog.net',
2442                 '*.mansblogs.com',
2443                 '*.mansblogs.net',
2444                 '*.meetingsblogs.com',
2445                 '*.men-blog.net',
2446                 '*.men-blogs.com',
2447                 '*.men-blogs.net',
2448                 '*.menblog.us',
2449                 '*.menblogs.net',
2450                 '*.mensblogs.net',
2451                 '*.messaginblog.com',
2452                 '*.monblogger.com',
2453                 '*.mum-blog.com',
2454                 '*.mummy-blog.com',
2455                 '*.mummyblog.com',
2456                 '*.myareablog.com',
2457                 '*.myblog-online.net',
2458                 '*.mybloginternet.com',
2459                 '*.myblogland.com',
2460                 '*.myblogmag.com',
2461                 '*.myfreshblog.com',
2462                 '*.myinternetblog.net',
2463                 '*.myoverblog.com',
2464                 '*.myoverblog.net',
2465                 '*.mysharedblog.com',
2466                 '*.nice-albums.com',
2467                 '*.nice-galleries.com',
2468                 '*.nicealbum.net',
2469                 '*.nicegallery.net',
2470                 '*.notreblogger.com',
2471                 '*.outilblog.com',
2472                 '*.over-blogger.com',
2473                 '*.overblogger.com',
2474                 '*.pasblog.com',
2475                 '*.pasblog.net',
2476                 '*.perfect-blog.net',
2477                 '*.perfectblog.net',
2478                 '*.phpblogsite.com',
2479                 '*.phpmyblog.net',
2480                 '*.plateformeblog.com',
2481                 '*.playblogger.com',
2482                 '*.publishmyblog.com',
2483                 '*.pulseblog.net',
2484                 '*.pulseblogs.com',
2485                 '*.puretoxic.com',
2486                 '*.reservedblog.com',
2487                 '*.shareblog.net',
2488                 '*.shareblogs.net',
2489                 '*.shared-blogs.com',
2490                 '*.sharedblog.net',
2491                 '*.sharedblogs.net',
2492                 '*.solideblog.com',
2493                 '*.systemeblog.com',
2494                 '*.talkmeblog.com',
2495                 '*.toolsblog.net',
2496                 '*.toxicplace.com',
2497                 '*.ufreeblog.com',
2498                 '*.uliveblog.com',
2499                 '*.ultratoxic.com',
2500                 '*.utilblog.com',
2501                 '*.utilblogs.com',
2502                 '*.utilsblog.com',
2503                 '*.utilsblogs.com',
2504                 '*.various-blog.com',
2505                 '*.various-blog.net',
2506                 '*.various-blogs.com',
2507                 '*.various-blogs.net',
2508                 '*.variusblog.com',
2509                 '*.versusblog.com',
2510                 '*.vieuxblog.com',
2511                 '*.web-day.net',
2512                 '*.whatsblog.net',
2513                 '*.woman-blog.net',
2514                 '*.woman-blogs.com',
2515                 '*.woman-blogs.net',
2516                 '*.womanblog.com',
2517                 '*.womanblog.org',
2518                 '*.womanblog.us',
2519                 '*.womanblogs.net',
2520                 '*.womansblogs.com',
2521                 '*.womansblogs.net',
2522                 '*.women-blog.net',
2523                 '*.women-blogs.com',
2524                 '*.women-blogs.net',
2525                 '*.womenblog.us',
2526                 '*.womenblogs.net',
2527                 '*.womensblog.net',
2528                 '*.womensblogs.net',
2529                 '*.youblog.net',
2530                 '*.yourliveblog.com',
2531                 '*.yourweblog.net',
2532         ),
2533         '*.forumcommunity.net',
2534         '*.forumer.com',
2535         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2536         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2537         'forumhosting.org',
2538         '*.forums.com',
2539         'forumbolt.com',
2540         'phpbb.forumgratis.com',
2541         'forumlari.net',
2542         '*.forumlivre.com',
2543         'forumnow.com.br',
2544         '*.forumppl.com',
2545         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2546         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2547                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2548                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2549                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2550         '*.fory.pl',
2551         'fotolog.com',
2552         '*.fr33webhost.com',
2553         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2554         '*.free-25.de',
2555         '*.free-bb.com',
2556         'Free-Blog-Hosting.com' => array(
2557                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2558                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2559                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2560                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2561                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2562         ),
2563         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2564         'free-guestbook.net',
2565         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2566         'freebb.nl',
2567         '*.freeclans.de',
2568         '*.freehostplace.com',  // by contact at keepclear.co.uk
2569         '*.freelinuxhost.com',  // by 100webspace.com
2570         '*.nofeehost.com',
2571         '*.freehyperspace.com',
2572         'freeforum.at',                 // by Sandro Wilhelmy
2573         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2574         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2575         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2576         '*.freewebhostingpro.com',
2577         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2578         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2579                 '*.6te.net',
2580                 '*.ueuo.com',
2581                 '*.orgfree.com',
2582         ),
2583         '*.freewebpage.org',
2584         'Freewebs.com' => array(        // by inquiries at freewebs.com
2585                 'freewebs.com',
2586                 'freewebsfarms.com',
2587         ),
2588         '*.freewebspace.net.au',
2589         'freewebtown.com',
2590         '*.freemyforum.com',    // by messahost at gmail.com
2591         'freepowerboards.com',
2592         '*.freepowerboards.com',
2593         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2594         'Funpic.de' => array(   // by alexander at liemen.net
2595                 '*.funpic.de',
2596                 '*.funpic.org',
2597         ),
2598         'gb-hoster.de',
2599         '*.genblogger.com',
2600         'GetBetterHosting.com' => array(
2601                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2602                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2603         ),
2604         '*.gexxe.com',
2605         '*.goodboard.de',
2606         'gossiping.net',
2607         '*.greatnuke.com',
2608         '*.guestbook.de',
2609         'gwebspace.de',
2610         'Google.com' => array(
2611                 '*.blogspot.com',
2612                 'docs.google.com',
2613                 '*.googlegroups.com',           ///web/
2614                 '*.googlepages.com',
2615                 'groups-beta.google.com',
2616         ),
2617         'guestbook.at',
2618         'club.giovani.it',
2619         '*.gratis-server.de',
2620         'healthcaregroup.com',
2621         '*.heliohost.org',
2622         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2623                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2624                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2625                 '*.front.ru',           // (domain at hc.ru)
2626                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2627                 '*.hotbox.ru',          // (domain at hc.ru)
2628                 '*.hotmail.ru',         // (hosting at hc.ru)
2629                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2630                 '*.land.ru',            // (domain at hc.ru)
2631                 '*.mail15.com',         // (hosting at hc.ru)
2632                 '*.mail333.com',        // (hosting at hc.ru)
2633                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2634                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2635                 '*.pisem.net',          // (hosting at hc.ru)
2636                 '*.pochta.ru',          // (domain at hc.ru)
2637                 '*.pochtamt.ru',        // (domain at hc.ru)
2638                 '*.pop3.ru',            // (domain at hc.ru)
2639                 '*.rbcmail.ru',         // (domain at hc.ru)
2640                 '*.smtp.ru',            // (domain at hc.ru)
2641         ),
2642         '*.hiblogger.com',              // by chiaokin at gmail.com
2643         '*.hit.bg',                             // by forumup.com ??
2644         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2645         '*.host-page.com',
2646         '*.hostingclub.de',
2647         'forums.hspn.com',
2648         '*.httpsuites.com',
2649         '*.hut2.ru',
2650         'ibfree.org',                   // 208.101.45.88
2651         'IC.cz' => array(
2652                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2653                 '*.hu.cz',                      // internetcentrum at gmail.com
2654                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2655                 '*.ic.cz',                      // internetcentrum at gmail.com
2656                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2657                 '*.own.cz',                     // internetcentrum at gmail.com
2658                 '*.phorum.cz',          // internetcentrum at gmail.com
2659                 '*.tym.cz',                     // internetcentrum at gmail.com
2660                 '*.tym.sk',                     // jobot at ignum.cz
2661                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2662                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2663                 '*.yw.sk',                      // jobot at ignum.cz
2664         ),
2665         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2666                 '*.0moola.com',
2667                 '*.3000mb.com',
2668                 '.501megs.com',
2669                 '*.teracities.com',
2670                 '*.xoompages.com',
2671         ),
2672         '*.icspace.net',
2673         'iEUROP.net' => array(
2674                 '*.ibelgique.com',
2675                 '*.iespana.es',
2676                 '*.ifrance.com',
2677                 '*.iitalia.com',
2678                 '*.iquebec.com',
2679                 '*.isuisse.com',
2680         ),
2681         '*.ihateclowns.net',
2682         '*.ii55.com',
2683         '*.ipbfree.com',
2684         '*.iphorum.com',
2685         '*.blog.ijijiji.com',
2686         '*.info.com',
2687         '*.informe.com',
2688         'it168.com',
2689         '.iwannaforum.com',
2690         '*.jconserv.net',
2691         '*.jeeran.com',
2692         '*.jeun.fr',
2693         '*.joolo.com',
2694         '*.journalscape.com',
2695         '*.justfree.com',
2696         '*.blog.kataweb.it',
2697         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2698         '*.kokoom.com',
2699         'koolpages.com',
2700         '*.kostenlose-foren.org',
2701         '*.ksiegagosci.info',
2702         'Lide.cz' => array(
2703                 '*.lide.cz',
2704                 '*.sblog.cz',
2705         ),
2706         '*.lioru.com',
2707         'limmon.net',
2708         'linkinn.com',
2709         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2710         'listible.com',                 ///list/
2711         'Livedoor.com' => array(
2712                 'blog.livedoor.jp',
2713                 '*.blog.livedoor.com',  // redirection
2714         ),
2715         '*.livejournal.com',
2716         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2717         '*.logme.nl',
2718         'lol.to',
2719         'ltss.luton.ac.uk',
2720         'Lycos.com' => array(
2721                 '.angelfire.com',       // angelfire.lycos.com
2722
2723                 '*.jubii.dk',   // search., medlem.
2724                 '*.jubiiblog.co.uk',
2725                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2726                 '*.jubiiblog.de',
2727                 '*.jubiiblog.dk',
2728                 '*.jubiiblog.fr',
2729                 '*.jubiiblog.it',
2730                 '*.jubiiblog.nl',
2731
2732                 '*.lycos.at',
2733                 '*.lycos.ch',
2734                 '*.lycos.co.uk',
2735                 'angelfire.lycos.com',
2736                 '*.lycos.de',
2737                 '*.lycos.es',
2738                 '*.lycos.fr',
2739                 '*.lycos.it',           // by Lycos Europe GmbH
2740                 '*.lycos.nl',
2741
2742                 '*.spray.se',
2743                 '*.sprayblog.se',
2744
2745                 '*.tripod.com',
2746         ),
2747         '*.mastertopforum.com',
2748         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2749         'meneame.net',
2750         '*.memebot.com',
2751         '*.messageboard.nl',
2752         'mokono GmbH' => array(
2753                 '*.blog.com.es',
2754                 '*.blog.de',
2755                 '*.blog.fr',
2756                 '*.blog.co.uk',
2757                 '*.blog.ca',
2758                 '*.blogs.se',
2759                 '*.blogs.fi',
2760                 '*.blogs.no',
2761                 '*.blogs.dk',
2762                 '*.blogs.ro',
2763                 '*.weblogs.pl',
2764                 '*.weblogs.cz',
2765                 '*.weblogs.hu',
2766         ),
2767         'mojklc.com',
2768         '*.mundoforo.com',
2769         '*.money-host.com',
2770         'MonForum.com' => array(
2771                 '*.monforum.com',
2772                 '*.monforum.fr',
2773         ),
2774         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2775         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2776         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2777         'myblog.is',
2778         'myblogma.com',
2779         '*.myblogvoice.com',
2780         'myblogwiki.com',
2781         '*.myforum.ro',
2782         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2783         '*.myfreewebs.net',
2784         '*.mysite.com',
2785         '*.myxhost.com',
2786         '*.netfast.org',
2787         'NetGears.com' => array(
2788                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2789                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2790                 '*.freewebspace.com',   // 64.49.236.72
2791         ),
2792         'Netscape.com' => array('*.netscape.com'),
2793         'users.newblog.com',
2794         'neweconomics.info',
2795         '*.newsit.es',                          // 75.126.252.108
2796         '*.nm.ru',
2797         '*.nmj.pl',
2798         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2799         'Northsky.com' => array(
2800                 // by hostmaster at northsky.com
2801                 // northsky.com redirects to communityarchitect.com
2802
2803                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2804                 '*.00author.com',
2805                 '*.00band.com',
2806                 '*.00books.com',
2807                 '*.00cash.com',
2808                 '*.00cd.com',
2809                 '*.00dvd.com',
2810                 '*.00family.com',
2811                 '*.00game.com',
2812                 '*.00home.com',
2813                 '*.00it.com',
2814                 '*.00me.com',
2815                 '*.00movies.com',
2816                 '*.00page.com',
2817                 '*.00politics.com',
2818                 '*.00sf.com',
2819                 '*.00show.com',
2820                 '*.00song.com',
2821                 '*.00trek.com',
2822                 '*.00video.com',
2823                 '*.0me.com',
2824                 '*.0pi.com',
2825                 '*.happy-couple.com',
2826                 '*.warp0.com',
2827
2828                 '*.50megs.com',         // 64.136.25.170
2829
2830                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2831                 '*.00server.com',
2832                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2833                 '*.fanspace.com',
2834
2835                 // 64.136.25.168 by Mark Bishop
2836                 '*.00go.com',
2837                 '*.00space.com',
2838                 '*.00sports.com',
2839         ),
2840         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2841         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2842         'onlyfree.de',
2843         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2844         '*.ohost.de',
2845         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2846                 '.friko.pl',
2847                 '.jak.pl',
2848                 '.nazwa.pl',
2849                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2850                 '.w8w.pl',
2851                 '.za.pl',
2852                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2853         ),
2854         'oyax.com',                             ///user_links.php
2855         '*.p2a.pl',
2856         '*.parlaris.com',
2857         '*.pathfinder.gr',
2858         '*.persianblog.com',
2859         '*.phorum.pl',
2860         'Phpbb24.com' => array( // by Daniel Eriksson
2861                 '*.createforum.us',     // registry at webbland.se
2862                 '*.forumportal.us',     // registry at webbland.se
2863                 '*.freeportal.us',      // registry at network24.se
2864                 '*.phpbb2.us',          // daniel at danielos.com
2865                 '*.phpbb24.com',        // daniel at danielos.com
2866                 '*.myforumportal.com',  // daniel at webbland.se
2867         ),
2868         'phpbb4you.com',
2869         'phpbbcommunity.com',
2870         '*.phpbbx.de',
2871         '*.pochta.ru',
2872         '*.portbb.com',
2873         '*.portcms.com',
2874         'powerwebmaster.de',
2875         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2876         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2877         '*.probook.de',
2878         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2879         '*.pun.pl',
2880         'putfile.com',
2881         '*.quickfreehost.com',
2882         'quizilla.com',
2883         '*.quotaless.com',
2884         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2885         'razyboard.com',
2886         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2887         'realhp.de',
2888         'reddit.com',           ///user/
2889         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2890                 '*.juicypornhost.com',
2891                 '*.pornzonehost.com',
2892                 '*.xhostar.com',
2893         ),
2894         'RIN.ru' => array(
2895                 '*.sbn.bz',
2896                 '*.wol.bz',
2897         ),
2898         '*.sayt.ws',
2899         'Seblg.com' => array(
2900                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2901                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2902         ),
2903         '*.seo-blog.org',
2904         '*.shoutpost.com',
2905         '*.siamforum.com',
2906         '*.siteburg.com',
2907         '*.sitehome.ru',
2908         '*.sitesfree.com',              // support at livesearching.com
2909         '*.sitesled.com',
2910         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2911         'SmarTrans.com' => array(
2912                 '.3w.to',
2913                 '.aim.to',
2914                 '.djmp.jp',
2915                 '.nihongourl.nu',
2916                 '.urljp.com',
2917                 '.www1.to',
2918                 '.www2.to',
2919                 '.www3.to',
2920         ),
2921         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2922         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2923         'members.spboards.com',
2924         'forums.speedguide.net',
2925         'Sphosting.com' => array(       // by admin at sphosting.com
2926                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2927                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2928                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2929                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2930                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2931         ),
2932         '*.spicyblogger.com',
2933         '*.spotbb.com',
2934         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2935         '*.squarespace.com',
2936         'stickypond.com',
2937         'stormloader.com',
2938         'strikebang.com',
2939         '*.sultryserver.com',
2940         '*.t35.com',
2941         '*.talks.at',
2942         'tabletpcbuzz.com',
2943         '*.talkthis.com',
2944         'tbns.net',
2945         'telasipforums.com',
2946         'theforumhub.com',
2947         'thestudentunderground.org',
2948         'think.ubc.ca',
2949         '*.thumblogger.com',
2950         'Topix.com' => array(
2951                 'topix.com',
2952                 'topix.net',
2953         ),
2954         'forum.tourism-talk.com.au',
2955         'tycho at e-lab.nl' => array(
2956                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2957                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2958         ),
2959         '*.tumblr.com',
2960         'UcoZ Web-Services' => array(
2961                 '*.3dn.ru',
2962                 '*.clan.su',
2963                 '*.moy.su',
2964                 '*.my1.ru',
2965                 '*.p0.ru',
2966                 '*.pp.net.ua',
2967                 '*.ucoz.co.uk',
2968                 '*.ucoz.com',
2969                 '*.ucoz.net',
2970                 '*.ucoz.org',
2971                 '*.ucoz.ru',
2972                 '*.ws.co.ua',
2973         ),
2974         '*.unforo.net',
2975         'veoh.com',
2976         '*.vdforum.ru',
2977         '*.vtost.com',
2978         '*.vidiac.com',
2979         'Voila.fr' => array('.site.voila.fr'),
2980         'volny.cz',
2981         'voy.com',
2982         '*.welover.org',
2983         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2984                 '*.fasthost.tv',
2985                 '*.hothost.tv',
2986                 '*.isgreat.tv',
2987                 '*.issexy.tv',
2988                 '*.isterrible.tv',
2989                 '*.somegood.tv',
2990                 '*.adultnations.com',
2991                 '*.alladultfemale.com',
2992                 '*.alladultmale.com',
2993                 '*.allbisexual.com',
2994                 '*.allbreast.com',
2995                 '*.allfeminism.com',
2996                 '*.allmanpages.com',
2997                 '*.allmendirect.com',
2998                 '*.allphotoalbum.com',
2999                 '*.allsexpages.com',
3000                 '*.allwomanweb.com',
3001                 '*.attorney-site.com',
3002                 '*.bedclip.com',
3003                 '*.bestfamilysite.com',
3004                 '*.bestmusicpages.com',
3005                 '*.bigmoron.com',
3006                 '*.bourgeoisonline.com',
3007                 '*.candyfrom.us',
3008                 '*.cartoonhit.com',
3009                 '*.cat-on-line.com',
3010                 '*.chokesondick.com',
3011                 '*.closeupsof.us',
3012                 '*.cpa-site.com',
3013                 '*.dampgirl.com',
3014                 '*.dampgirls.com',
3015                 '*.deepestfetish.com',
3016                 '*.docspages.com',
3017                 '*.dog-on-line.com',
3018                 '*.dogcountries.com',
3019                 '*.dognations.com',
3020                 '*.doingitwith.us',
3021                 '*.drenchedface.com',
3022                 '*.drenchedlips.com',
3023                 '*.drspages.com',
3024                 '*.edogden.com',
3025                 '*.eroticountry.com',
3026                 '*.fasthost.tv',
3027                 '*.fineststars.com',
3028                 '*.foronlinegames.com',
3029                 '*.forplanetearth.com',
3030                 '*.freeadultparty.com',
3031                 '*.freespeechsite.com',
3032                 '*.gayadultxxx.com',
3033                 '*.gaytaboo.com',
3034                 '*.greatcookery.com',
3035                 '*.greatrecipepages.com',
3036                 '*.greatstreamingvideo.com',
3037                 '*.hatesit.com',
3038                 '*.hothost.tv',
3039                 '*.iscrappy.com',
3040                 '*.isgreat.tv',
3041                 '*.issexy.tv',
3042                 '*.isterrible.tv',
3043                 '*.itinto.us',
3044                 '*.japannudes.net',
3045                 '*.jesussave.us',
3046                 '*.jesussaveus.com',
3047                 '*.labialand.com',
3048                 '*.lettersfrom.us',
3049                 '*.lookingat.us',
3050                 '*.lunaticsworld.com',
3051                 '*.microphallus.com',
3052                 '*.mycatshow.com',
3053                 '*.mydogshow.com',
3054                 '*.myhardman.com',
3055                 '*.mylawsite.net',
3056                 '*.mylovething.com',
3057                 '*.onasoapbox.com',
3058                 '*.onlinepulpit.com',
3059                 '*.petitionthegovernment.com',
3060                 '*.photosfor.us',
3061                 '*.picturetrades.com',
3062                 '*.pleasekiss.us',
3063                 '*.politicalemergency.com',
3064                 '*.power-emergency.com',
3065                 '*.prayingfor.us',
3066                 '*.realbadidea.com',
3067                 '*.realisticpolitics.com',
3068                 '*.reallybites.com',
3069                 '*.reallypumping.us',
3070                 '*.reallyrules.com',
3071                 '*.reallysuckass.com',
3072                 '*.reallysucksass.com',
3073                 '*.realsweetheart.com',
3074                 '*.rottenass.com',
3075                 '*.schoolreference.com',
3076                 '*.sexheroes.com',
3077                 '*.sharewith.us',
3078                 '*.smutstars.com',
3079                 '*.soakinglips.com',
3080                 '*.somegood.tv',
3081                 '*.songsfrom.us',
3082                 '*.stinkingfart.com',
3083                 '*.stinkyhands.com',
3084                 '*.storiesfrom.us',
3085                 '*.taboocountry.com',
3086                 '*.television-series.com',
3087                 '*.thisbelongsto.us',
3088                 '*.totallyboning.us',
3089                 '*.vaginasisters.com',
3090                 '*.verydirtylaundry.com',
3091                 '*.videosfor.us',
3092                 '*.videosfrom.us',
3093                 '*.videosof.us',
3094                 '*.virtualdogshit.com',
3095                 '*.web1000.com',
3096                 '*.webpicturebook.com',
3097                 '*.wronger.com',
3098                 '*.xxxnations.com',
3099                 '*.yourwaywith.us',
3100         ),
3101         'webblog.ru',
3102         'weblogmaniacs.com',
3103         '.webng.com',                   // www.*, www3.*
3104         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3105         'websitetoolbox.com',
3106         '*.webtropia.com',
3107         'Welnet.de' => array(
3108                 'welnet.de',
3109                 'welnet4u.de',
3110         ),
3111         'wh-gb.de',
3112         '*.wikidot.com',
3113         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3114         '*.wmjblogs.ru',
3115         '*.wordpress.com',
3116         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3117         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3118         '*.xforum.se',
3119         'xfreeforum.com',
3120         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3121         '*.xoomwebs.com',
3122         '.xterm.org',
3123         '.freeblogs.xp.tl',
3124         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3125         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3126         'Yahoo.com' => array(
3127                 'flickr.com',
3128                 'geocities.com',
3129         ),
3130         'YANDEX, LLC.' => array(        // noc at yandex.net
3131                 '*.narod.ru',
3132                 'ya.ru',
3133                 'yandex.ru',
3134         ),
3135         '*.yeahost.com',
3136         'yourfreebb.de',
3137         'Your-Websites.com' => array(
3138                 '*.your-websites.net',
3139                 '*.web-space.ws',
3140         ),
3141
3142
3143         '*.heliohost.org',      // by ashoat at gmail.com
3144         'X10Hosting.com' => array(
3145                 // by support at clockworkcomputers.com
3146                 '*.x10hosting.com',
3147                 '*.elementfx.com',
3148                 '*.exofire.net',
3149                 '*.pcriot.com',
3150         ),
3151         '.zendurl.com',         // by ajcar1992 at gmail.com
3152 );
3153
3154 // --------------------------------------------------
3155
3156 $blocklist['B-2'] = array(
3157
3158         // B-2: Jacked contents, something implanted
3159         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3160         '*.3dm3.com',
3161         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3162         '*.1fr1.com',
3163         'a4aid.org',
3164         'aac.com',
3165         '*.aamad.org',
3166         'ad-pecjak.si',
3167         'agnt.org',
3168         'alwanforthearts.org',
3169         '*.anchor.net.au',
3170         'anewme.org',
3171         'arisedesign.net',              //Portfolio/d981/
3172         'internetyfamilia.asturiastelecentros.com',
3173         'Ball State University' => array('web.bsu.edu'),
3174         'btofaq.net',                   ///v3/forum
3175         'blepharospasm.org',
3176         'nyweb.bowlnfun.dk',
3177         '*.buzznet.com',
3178         'Carroll College' => array(
3179                 'carroll.edu',          ///boards/
3180         ),
3181         '*.canberra.net.au',
3182         'castus.com',
3183         'Case Western Reserve University' => array('case.edu'),
3184         'ceval.de',
3185         'chaco.gov.ar',
3186         'codespeak.net',
3187         'Colorado School of Mines' => array('ticc.mines.edu'),
3188         '*.colourware.co.uk',
3189         'cpuisp.com',
3190         'International Christian University' => array('icu.edu.ua'),
3191         '*.iphpbb.com',
3192         'board-z.de',
3193         '*.board-z.de',
3194         'California State University Stanislaus' => array('writing.csustan.edu'),
3195         'cannon.co.za',
3196         'columbosgarden.com',
3197         '*.communityhost.de',
3198         'connectionone.org',
3199         'deathwinds.com',
3200         'deforum.org',
3201         'delayedreaction.org',
3202         'deproduction.org',
3203         'dc503.org',
3204         'dialadeck.com',                ///images/
3205         'dre-centro.pt',
3206         'Duke University' => array('devel.linux.duke.edu'),
3207         '*.esen.edu.sv',
3208         'forums.drumcore.com',
3209         'dundeeunited.org',
3210         'energyglass.com.ua',
3211         'exclusivehotels.com',
3212         'info.ems-rfid.com',
3213         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3214         'fbwloc.com',
3215         '.fhmcsa.org.au',
3216         'findyourwave.co.uk',
3217         'frogcafe.net',
3218         'plone4.fnal.gov',
3219         'freeforen.com',
3220         'funkdoc.com',
3221         'funnyclipcentral.com',
3222         'gearseds.com',
3223         'generationrice.com',
3224         'ghettojava.com',
3225         'gnacademy.org',
3226         '*.goodboard.de',
3227         'GreenDayVideo.net' => array(
3228                 'greendayvideo.net',
3229                 'espanol.greendayvideo.net',
3230         ),
3231         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3232         'Harvard Law School' => array('blogs.law.harvard.edu'),
3233         'helpiammoving.com',
3234         'homepage-dienste.com',
3235         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3236         'Howard University' => array('networks.howard.edu'),
3237         'hullandhull.com',
3238         'Huntington University' => array('huntington.edu'),
3239         'huskerink.com',
3240         '.hyba.info',
3241         'ideas4you.com',        ///photos/
3242         'inda.org',
3243         '*.indymedia.org',      // by abdecom at riseup.net
3244         'instantbulletin.com',
3245         'internetincomeclub.com',
3246         '*.inventforum.com',
3247         'Iowa State University' => array('boole.cs.iastate.edu'),
3248         'ipwso.org',
3249         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3250         'ironmind.com',
3251         'skkustp.itgozone.com', // hidden JavaScript
3252         'jazz2online.com',
3253         '.jloo.org',
3254         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3255         'kjon.com',
3256         'Kazan State University' => array(
3257                 'dir.kzn.ru',
3258                 'sys.kcn.ru',
3259         ),
3260         'test.kernel.org',
3261         'kevindmurray.com',
3262         'kroegjesroutes.nl',
3263         '.legion.org',
3264         'Loyola Marymount University' => array('lmu.edu'),
3265         'forum.lixium.fr',
3266         'macfaq.net',
3267         'macvirus.org',         ///board/
3268         'me4x4.com',
3269         'microbial-ecology.net',
3270         'minsterscouts.org',
3271         'morallaw.org',
3272         'morerevealed.com',
3273         'macronet.org',
3274         'mamiya.co.uk',
3275         'vcd.mmvcd.com',
3276         'Monmouth College' => array('department.monm.edu'),
3277         'mountainjusticemedia.org',
3278         '*.mybbland.com',
3279         'mydlstore.com',
3280         '*.netboardz.com',
3281         'North Carolina A&T State University' => array(
3282                 'ncat.edu',
3283                 'my.ncat.edu',
3284                 'hlc.ncat.edu',
3285         ),
3286         'placetobe.org',
3287         'Naropa University' => array(
3288                 'naropa.edu',                   ///forum/
3289         ),
3290         'users.nethit.pl',
3291         'nightclubvip.net',
3292         'njbodybuilding.com',
3293         'nlen.org',
3294         'North Carolina School of Science and Mathematics' => array(
3295                 'neverland.ncssm.edu',  ///include/web/forum/
3296                 'grid.ncssm.edu',               ///ncssm_grid/
3297         ),
3298         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3299         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3300         'offtextbooks.com',
3301         'ofimatika.com',
3302         'olympiafoto.com',              ///images/
3303         'omakase-net',                  // iframe
3304         'omikudzi.ru',
3305         'openchemist.net',
3306         'palungjit.com',
3307         'pataphysics-lab.com',
3308         'paypaldev.org',
3309         'paullima.com',
3310         'perl.org.br',
3311         'pfff.co.uk',
3312         'pimpo.com',                    ///_old_site/
3313         'pix4online.co.uk',
3314         'plone.dk',
3315         'preform.dk',
3316         'privatforum.de',
3317         'publicityhound.net',
3318         'puppylinux.net',               ///news/content/counter/pages/
3319         'qea.com',
3320         'rbkdesign.com',
3321         'rehoboth.com',
3322         'rodee.org',
3323         'ryanclark.org',
3324         '*.reallifelog.com',
3325         'rkphunt.com',
3326         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3327         'sapphireblue.com',
3328         'saskchamber.com',
3329         'savevoorhees.org',
3330         'sdhmalenovice.cz',             //galerie/
3331         'selikoff.net',
3332         'serbisyopilipino.org',
3333         'setbb.com',
3334         'sharejesusinternational.com',
3335         'silver-tears.net',
3336         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3337         '.softpress.com',
3338         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3339         'fora.taniemilitaria.pl',       ///phpbb
3340         'tehudar.ru',
3341         'Tennessee Tech University' => array('manila.tntech.edu'),
3342         'thebluebird.ws',
3343         'theosis.org',
3344         '*.thoforum.com',
3345         'troms-slekt.com',
3346         'theedgeblueisland.com',
3347         'toyshop.com.tw',               // /images/sigui/
3348         'torontoplace.com',
3349         'chat.travlang.com',
3350         'trickropingbylassue.com',
3351         'Truman State University' => array('mathbio.truman.edu'),
3352         'tuathadedannan.org',
3353         'txgotg.com',
3354         'tzaneen.co.za',
3355         'ugeavisen.com',                ///style/
3356         'forums.ugo.com',
3357         'whole.cs.unibo.it',
3358         'The University of North Dakota' => array(
3359                 'learn.aero.und.edu',
3360                 'ez.asn.und.edu',
3361         ),
3362         'The University of Alabama' => array('bama.ua.edu'),
3363         'unisonscotlandlaw.co.uk',
3364         'University of California' => array('classes.design.ucla.edu'),
3365         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3366         'University of Northern Colorado' => array('unco.edu'),
3367         'University of North Carolina' => array(
3368                 'elm.cis.uncw.edu'      ///testBoinc/
3369         ),
3370         'University of Toronto' => array(
3371                 'environment.utoronto.ca',
3372                 'grail.oise.utoronto.ca',
3373                 'utsc.utoronto.ca',
3374         ),
3375         'University of Wisconsin' => array(
3376                 'einstein.phys.uwm.edu'
3377         ),
3378         'urgentclick.com',
3379         'vacant.org.uk',
3380         'Villa Julie College' => array('www4.vjc.edu'),
3381         'Vail Valley Foundation' => array('.vvf.org'),
3382         'wabson.org',
3383         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3384         'webarch.com',          // by WebArchitects (webarch at insync.net)
3385         'weehob.com',
3386         'West Virginia University Parkersburg' => array('wvup.edu'),
3387         'williamsburgrentals.com',
3388         'wolvas.org.uk',
3389         'wookiewiki.org',
3390         'xsgaming.com',                 // Jacked
3391         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3392         'Yahoo.com' => array(
3393                 'blog.360.yahoo.com',
3394                 '*.groups.yahoo.com'
3395         ),
3396         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3397         'youthpeer.org',
3398         '*.zenburger.com',
3399         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3400 );
3401
3402 // --------------------------------------------------
3403
3404 $blocklist['C'] = array(
3405
3406         // C: Sample setting of:
3407         // Exclusive spam domains
3408         //
3409         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3410         // affiliates, finance, sending viruses, malicious attacks to browsers,
3411         // and/or mixed ones
3412         //
3413         // Please notify us about this list with reason:
3414         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3415
3416         // C-1: Domain sets (seems to be) born to spam you
3417         //
3418         // All buziness-related spam
3419         //'.biz'
3420         //
3421         'admin at seekforweb.com' => array(
3422                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3423                 '.lovestoryx.com',
3424                 '.loveaffairx.com',
3425                 '.onmore.info',
3426                 '.scfind.info',
3427                 '.scinfo.info',
3428                 '.webwork88.info',
3429         ),
3430         'boss at bse-sofia.bg' => array(        // by Boris
3431                 '.htewbop.org',
3432                 '.kimm--d.org',
3433                 '.gtre--h.org',
3434                 '.npou--k.org',
3435                 '.bres--z.org',
3436                 '.berk--p.org',
3437                 '.bplo--s.org',
3438                 '.basdpo.org',
3439                 '.jisu--m.org',
3440                 '.kire--z.org',
3441                 '.mertnop.org',
3442                 '.mooa--c.org',
3443                 '.nake--h.org',
3444                 '.noov--b.org',
3445                 '.suke--y.org',
3446                 '.vasdipv.org',
3447                 '.vase--l.org',
3448                 '.vertinds.org',
3449         ),
3450         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3451                 '.aqq3.info',
3452                 '.axa00.info',
3453                 '.okweb11.org',
3454                 '.okweb12.org',
3455                 '.okweb13.org',
3456                 '.okweb14.org',
3457         ),
3458         'opezdol at gmail.com' => array(
3459                 '.informazionicentro.info',
3460                 '.notiziacentro.info',
3461         ),
3462         'SomethingGen' => array(
3463                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3464                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3465                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3466                 // by Lee Chang (nebucha at model-x.com)
3467                 '.adult-chat-world.info',       // by Lui
3468                 '.adult-chat-world.org',        // by Lui
3469                 '.adult-sex-chat.info',         // by Lui
3470                 '.adult-sex-chat.org',          // by Lui
3471                 '.adult-cam-chat.info',         // by Lui
3472                 '.adult-cam-chat.org',          // by Lui
3473                 '.dildo-chat.org',                      // by Lui
3474                 '.dildo-chat.info',                     // by Lui
3475                 // flirt-online.info is not CamsGen
3476                 '.flirt-online.org',            // by Lui
3477                 '.live-adult-chat.info',        // by Lui
3478                 '.live-adult-chat.org',         // by Lui
3479                 '.sexy-chat-rooms.info',        // by Lui
3480                 '.sexy-chat-rooms.org',         // by Lui
3481                 '.swinger-sex-chat.info',       // by Lui
3482                 '.swinger-sex-chat.org',        // by Lui
3483                 '.nasty-sex-chat.info',         // by Lui
3484                 '.nasty-sex-chat.org',          // by Lui
3485
3486                 '.camshost.info',                       // by Sergey
3487                 '.camdoors.info',                       // by Sergey
3488                 '.chatdoors.info',                      // by Sergey
3489
3490                 // 89.149.206.225 by Pronin
3491                 '.dorozhka.info',
3492                 '.kolonochka.info',
3493                 '.knizhechka.info',
3494                 '.krantik.info',
3495                 '.lebedi.info',
3496                 '.loshad.info',
3497                 '.pechenka.info',
3498                 '.porosenok.info',
3499                 '.indyushonok.info',
3500                 '.kotyonok.info',
3501                 '.kozlyonok.info',
3502                 '.magnoliya.info',
3503                 '.svinka.info',
3504                 '.svinya.info',
3505                 '.televizorchik.info',
3506                 '.tumbochka.info',
3507                 '.zherebyonok.info',
3508
3509                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3510
3511                 '.adult-cam-chat-sex.info',             // by Lee
3512                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3513                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3514                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3515                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3516                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3517                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3518                 '.sex-chat-porn-cam.info',              // by Lee
3519         ),
3520         'mital at topo20.org' => array( // by Marcello Italianore
3521                 '.trevisos.org',
3522                 '.topo20.org',
3523         ),
3524         'WellCams.com' => array(
3525                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3526                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3527                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3528         ),
3529         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3530                 '.besturgent.org',
3531                 '.googletalknow.org',
3532                 '.montypythonltd.org',
3533                 '.supersettlemet.org',
3534                 '.thepythonfoxy.org',
3535                 '.ukgamesyahoo.org',
3536                 '.youryahoochat.org',
3537         ),
3538         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3539                 '.dbsajax.org',
3540                 '.acgt2005.org',
3541                 '.gopikottoor.com',
3542                 '.koosx.org',
3543                 '.mmgz.org',
3544                 '.zhiyehua.net',
3545         ),
3546         'vdf at lovespb.com' => array(  // by Andrey
3547                 '.02psa.info',
3548                 '.1818u.org',
3549                 '.18ew.info',
3550                 '.43sexx.org',
3551                 '.56porn.org',
3552                 '.6discount.info',
3553                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3554                 '.78rus.info',
3555                 '.92ssex.org',          // "ForumGenerator"
3556                 '.93adult.org',         // "ForumGenerator"
3557                 '.aboutsr.info',
3558                 '.aboutzw.info',
3559                 '.all23.info',
3560                 '.allvdf.info',
3561                 '.buy-dge.info',
3562                 '.buypo.info',
3563                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3564                 '.cv83.info',
3565                 '.cvwifw.info',
3566                 '.dabouts.info',
3567                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3568                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3569                 '.free01sa.info',
3570                 '.frees1.info',
3571                 '.freexz.info',
3572                 '.ifree-search.org',
3573                 '.lovespb.info',
3574                 '.myso2.info',
3575                 '.nb74u.info',
3576                 '.ohhh2.info',
3577                 '.ol43.info',
3578                 '.olala18.info',
3579                 '.oursales.info',
3580                 '.pasian1.info',
3581                 '.pldk.info',
3582                 '.po473.info',
3583                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3584                 '.poz2.info',
3585                 '.qpf8j4d.info',
3586                 '.saleqw.info',
3587                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3588                 '.sexz18.info',
3589                 '.sexy69a.info',
3590                 '.shedikc.info',
3591                 '.spb78.info',
3592                 '.usacanadauk.info',
3593                 '.v782mks.info',
3594                 '.vny0.info',
3595                 '.wifes1.info',
3596                 '.xranvam.info',
3597                 '.zenitcx.info',
3598                 '.zxolala.info',
3599         ),
3600         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3601                 '.care01.info',
3602                 '.care02.info',
3603                 '.care03.info',
3604                 '.care04.info',
3605                 '.care05.info',
3606                 '.care06.info',
3607                 '.care07.info',
3608                 '.care08.info',
3609                 '.care09.info',
3610                 '.care10.info',
3611                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3612                 '.klastar01.info',
3613                 '.klastar02.info',
3614                 '.klastar03.info',
3615                 '.klastar04.info',
3616                 '.klastar05.info',
3617                 '.klastar06.info',
3618                 '.klastar07.info',
3619                 '.klastar08.info',
3620                 '.klastar09.info',
3621                 '.klastar10.info',
3622                 '.um20ax01.info',
3623                 '.um20ax02.info',
3624                 '.um20ax03.info',
3625                 '.um20ax04.info',
3626                 '.um20ax05.info',
3627                 '.um20ax06.info',
3628                 '.um20ax07.info',
3629                 '.um20ax08.info',
3630                 '.um20ax09.info',
3631                 '.um20ax10.info',
3632         ),
3633         'forrass at gmail.com' => array(        // by Ismail
3634                 '.zmh01.info',
3635                 '.zmh02.info',
3636                 '.zmh03.info',
3637                 '.zmh04.info',
3638                 '.zmh05.info',
3639                 '.zmh06.info',
3640                 '.zmh07.info',
3641                 '.zmh08.info',
3642                 '.zmh09.info',
3643                 '.zmh10.info',
3644         ),
3645         'Varsylenko Vladimir and family' => array(
3646                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3647                 // by David C. Lack (David.C.Lack at dodgeit.com)
3648                 // by Kuzma V Safonov (admin at irtes.ru)
3649                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3650                 // by LAURI FUNK (vvm_kz at rambler.ru)
3651
3652                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3653                 '.abrek.info',                          // by Petrov
3654                 '.allsexonline.info',           // by Varsylenko
3655                 '.d1rnow.info',                         // by Petrov
3656                 '.doxer.info',                          // Petrov
3657                 '.freeforworld.info',           // Varsylenko
3658                 '.goodworksite.info',           // Varsylenko
3659                 '.onall.info',                          // by Varsylenko
3660                 '.powersiteonline.info',        // by Varsylenko
3661                 '.rentmysite.info',                     // by Varsylenko
3662                 '.sexdrink.info',                       // by Petrov
3663                 '.siteszone.info',                      // by Varsylenko
3664                 '.sfup.info',                           // by Petrov
3665                 '.superfreedownload.info',      // by Varsylenko
3666                 '.superneeded.info',            // by Varsylenko
3667                 '.srup.info',                           // by Petrov
3668
3669                 // 66.235.185.143(*.svabuse.info)
3670                 '.accommodationwiltshire.com',  // by Petrov
3671                 '.levines.info',                        // by Petrov
3672                 '.sernost.info',                        // by Petrov
3673                 '.sexvideosite.info',           // by Petrov
3674                 '.vvsag.info',                          // by Petrov
3675
3676                 // 81.0.195.134
3677                 '.michost.info',                        // by LAURI
3678                 '.parther.info',                        // by LAURI
3679
3680                 // 88.214.202.100
3681                 '.gitsite.info',                        // by Petrov
3682                 '.organiq.info',                        // by Petrov
3683                 '.yoursitedh.info',                     // by Petrov
3684
3685                 // 217.11.233.58 by Petrov
3686                 '.mp3vault.info',
3687
3688                 // DNS time out or failed
3689                 '.bequeous.info',                       // by Davi
3690                 '.sopius.info',                         // by Kuzma
3691                 '.sovidopad.info',                      // by Kuzma
3692                 '.yerap.info',                          // by Kuzma
3693         ),
3694         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3695                 '.flywebs.com',
3696                 '.hostrim.com',
3697                 '.playbit.com',
3698         ),
3699         'webmaster at dgo3d.info' => array(     // by Son Dittman
3700                 '.bsb3b.info',
3701                 '.dgo3d.info',
3702                 '.dgo5d.info',
3703         ),
3704         'cooler.infomedia at gmail.com' => array(
3705                 '.diabetescarelink.com',
3706                 '.firstdebthelp.com',
3707         ),
3708         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3709                 '.pokah.lv',
3710                 '.astrons.com',
3711         ),
3712         'seocool at bk.ru' => array(    // by Skar
3713                 '.implex3.com',
3714                 '.implex6.info',
3715                 '.softprof.org',
3716         ),
3717         'Caslim.info' => array(
3718                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3719                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3720         ),
3721         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3722                 '.777-poker.biz',
3723                 '.porn-11.com',
3724         ),
3725         'Conto.pl' => array(
3726                 '.8x.pl',               // domena at az.pl
3727                 '.3x3.pl',              // by biuro at nazwa.pl
3728                 '.conto.pl',    // by biuro at nazwa.pl
3729                 '.guu.pl',              // by conto.pl (domena at az.pl)
3730                 '.xcx.pl',              // domena at az.pl
3731                 '.yo24.pl',             // domena at az.pl
3732         ),
3733         'mail at pcinc.cn' => array(
3734                 // Domains by Lin Zhi Qiang
3735                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3736
3737                 // 125.65.112.11
3738                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3739                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3740                 '.shoopivdoor.com',
3741
3742                 // 125.65.112.12
3743                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3744                 '.hosetaibei.com',
3745                 '.playsese.com',
3746
3747                 // 125.65.112.13
3748                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3749                 '.ahatena.com',
3750                 '.asdsdgh-jp.com',
3751                 '.conecojp.net',
3752                 '.game-oekakibbs.com',
3753                 '.geocitygame.com',
3754                 '.gsisdokf.net',
3755                 '.korunowish.com',
3756                 '.netgamelivedoor.com',
3757                 '.soultakerbbs.net',
3758                 '.yahoo-gamebbs.com',
3759                 '.ywdgigkb-jp.com',
3760
3761                 // 125.65.112.14
3762                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3763                 '.acyberhome.com',
3764                 '.bbs-qrcode.com',
3765                 '.gamesroro.com',
3766                 '.gameyoou.com',
3767                 '.gangnu.com',
3768                 '.goodclup.com',
3769                 '.lineage321.com',
3770                 '.linkcetou.com',
3771                 '.love888888.com',
3772                 '.ragnarok-bbs.com',
3773                 '.ragnarok-game.com',
3774                 '.rmt-navip.com',
3775                 '.watcheimpress.com',
3776
3777                 // 125.65.112.15
3778                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3779                 '.18girl-av.com',
3780                 '.aurasoul-visjp.com',
3781                 '.gamaniaech.com',
3782                 '.game-mmobbs.com',
3783                 '.gameslin.net',
3784                 '.gemnnammobbs.com',
3785                 '.gogolineage.net',
3786                 '.grandchasse.com',
3787                 '.jpragnarokonline.com',
3788                 '.jprmthome.com',
3789                 '.maplestorfy.com',
3790                 '.netgamero.net',
3791                 '.nothing-wiki.com',
3792                 '.ourafamily.com',
3793                 '.ragnarok-sara.com',
3794                 '.rmt-lineagecanopus.com',
3795                 '.rmt-ranloki.com',
3796                 '.rogamesline.com',
3797                 '.roprice.com',
3798                 '.tuankong.com',
3799                 '.twreatch.com',
3800
3801                 // 125.65.112.22
3802                 // The same IP: web013.cdnhost.cn
3803                 '.lzy88588.com',
3804                 '.ragnaroklink.com',
3805
3806                 // 125.65.112.24
3807                 '.rmtfane.com',
3808                 '.fc2weday.com',
3809                 '.nlftweb.com',
3810
3811                 // 125.65.112.27
3812                 '.i520i.com',
3813                 '.sunwayto.com',
3814
3815                 // 125.65.112.31
3816                 // The same IP: web016.cdnhost.cn
3817                 '.twyaooplay.com',
3818
3819                 // 125.65.112.32
3820                 // The same IP: web037.cdnhost.cn
3821                 '.emeriss.com',
3822                 '.raginfoy.com',
3823                 '.ragnarokgvg.com',
3824                 '.rentalbbs-livedoor.com',
3825                 '.romaker.com',
3826                 '.sagewikoo.com',
3827                 '.samples112xrea.com',
3828                 '.wiki-house.com',
3829
3830                 // 125.65.112.49
3831                 '.chaosx0.com',
3832
3833                 // 125.65.112.88
3834                 // The same IP: web015.cdnhost.cn
3835                 '.a-hatena.com',
3836                 '.biglobe-ne.com',
3837                 '.blogplaync.com',
3838                 '.din-or.com',
3839                 '.dtg-gamania.com',
3840                 '.fcty-net.com',
3841                 '.game-fc2blog.com',
3842                 '.gameurdr.com',
3843                 '.getamped-garm.com',
3844                 '.interzq.com',
3845                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3846                 '.luobuogood.com',
3847                 '.ragnarok-search.com',
3848                 '.rinku-livedoor.com',
3849
3850                 // 125.65.112.90
3851                 '.gtvxi.com',
3852
3853                 // 125.65.112.91
3854                 // The same IP: web004.cdnhost.cn
3855                 '.6828teacup.com',
3856                 '.blog-livedoor.net',
3857                 '.cityblog-fc2web.com',
3858                 '.deco030-cscblog.com',
3859                 '.imbbs2t4u.com',
3860                 '.k5dionne.com',
3861                 '.lineagejp-game.com',
3862                 '.mbspro6uic.com',
3863                 '.slower-qth.com',
3864                 '.wikiwiki-game.com',
3865
3866                 // 125.65.112.93
3867                 // The same IP: web022.cdnhost.cn
3868                 '.aaa-livedoor.net',
3869                 '.cityhokkai.com',              // web022.cdnhost.cn
3870                 '.fanavier.net',
3871                 '.geocitylinks.com',    // web022.cdnhost.cn
3872                 '.kuronowish.net',              // web022.cdnhost.cn
3873                 '.ro-bot.net',
3874
3875                 // 125.65.112.95
3876                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3877                 '.23styles.com',
3878                 '.aehatena-jp.com',
3879                 '.ameblog-jp.net',
3880                 '.antuclt.com',
3881                 '.blog-ekndesign.com',
3882                 '.d-jamesinfo.com',
3883                 '.editco-jp.com',
3884                 '.ezbbsy.com',
3885                 '.extd-web.com',
3886                 '.fotblong.com',
3887                 '.game62chjp.net',
3888                 '.gamegohi.com',
3889                 '.gamesmusic-realcgi.net',
3890                 '.gamesragnaroklink.net',
3891                 '.homepage-nifty.com',
3892                 '.ie6xp.com',
3893                 '.irisdti-jp.com',
3894                 '.jklomo-jp.com',
3895                 '.jpxpie6-7net.com',
3896                 '.lian-game.com',
3897                 '.lineage-bbs.com',
3898                 '.lineage1bbs.com',
3899                 '.livedoor-game.com',
3900                 '.litcan.com',
3901                 '.lovejpjp.com',
3902                 '.m-phage.com',
3903                 '.muantang.com',
3904                 '.plusd-itmedia.com',
3905                 '.runbal-fc2web.com',
3906                 '.saussrea.com',
3907                 '.tooalt.com',
3908                 '.toriningena.net',
3909                 '.yahoodoor-blog.com',
3910                 '.yy14-kakiko.com',
3911
3912                 // 125.65.112.137
3913                 '.clublineage.com',
3914
3915                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3916                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3917                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3918
3919                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3920                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3921
3922                 '.games-nifty.com',             // 255.255.255.255 now
3923                 '.homepage3-nifty.com', // 255.255.255.255 now
3924         ),
3925         'caddd at 126.com' => array(
3926                 '.chengzhibing.com',    // by chen gzhibing
3927                 '.jplinux.com',                 // by lian liang
3928                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3929                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3930                 '.tooplogui.com',               // by zibing cai
3931                 '.twsunkom.com',                // by guo zhi wei
3932                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3933         ),
3934         'nuigiym2 at 163.com' => array( // by fly bg
3935                 '.linainfo.net',                // Seems IP not allocated now
3936                 '.lineagalink.com',             // 220.247.157.99
3937                 '.lineagecojp.com',             // 61.139.126.10
3938                 '.ragnarokonlina.com',  // 220.247.158.99
3939         ),
3940         'aakin at yandex.ru' => array(
3941                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3942                 '.entirestar.com',
3943                 '.superbuycheap.com',
3944                 '.topdircet.com',
3945         ),
3946         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3947                 '.tianmieccp.com',
3948                 '.xianqiao.net',
3949         ),
3950         'm.frenzy at yahoo.com' => array(       // by Michael
3951                 '.p5v.org',
3952                 '.j111.net',
3953                 '.searchhunter.info',
3954                 '.soft2you.info',
3955                 '.top20health.info',
3956                 '.top20ringtones.info',
3957                 '.top20travels.info',
3958                 '.v09v.info',
3959                 '.x09x.info',
3960                 '.zb-1.com',
3961         ),
3962         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3963                 '.bingogoldenpalace.info',
3964                 '.ccarisoprodol.info',
3965                 '.ezxcv.info',
3966                 '.isuperdrug.com',
3967                 '.pharmacif.info',
3968                 '.pornsexteen.biz',
3969                 '.ugfds.info',
3970                 '.vviagra.info',
3971         ),
3972         'anatolsenator at gmail.com' => array(  // by Anatol
3973                 '.cheapestviagraonline.info',
3974                 '.buyphentermineworld.info'
3975         ),
3976         'webmaster at mederotica.com' => array(
3977                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3978                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3979                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3980                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3981         ),
3982         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3983                 '.auase.info',          // by ilemavyq7461 at techie.com
3984                 '.axeboxew.info',       // by zygeu220 at writeme.com
3985                 '.boluzuhy.info',       // by pikico5419 at post.com
3986                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3987                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3988                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3989                 '.exidiqe.info',        // by kufyca5475 at mail.com
3990                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3991                 '.gubiwu.info',         // by lywunef6532 at iname.com
3992                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3993                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3994                 '.jiuuz.info',          // by meqil6549 at mail.com
3995                 '.nudetar.info',        // by vohepafi3536 at techie.com
3996                 '.nipud.info',          // by bohox9872 at mindless.com
3997                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3998                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3999                 '.olasep.info',         // by lizon8506 at mail.com
4000                 '.oueuidop.info',       // by arytyb6913 at europe.com
4001                 '.oviravy.info',        // by amyuu3883 at london.com
4002                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4003                 '.ragibe.info',         // by ehome4458 at myself.com
4004                 '.ucazib.info',         // by gorare7222 at consultant.com
4005                 '.udaxu.info',          // by gubima4007 at usa.com
4006                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4007                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4008                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4009                 '.yvaxat.info',         // by koqun9660 at mindless.com
4010                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4011         ),
4012         'Carmodelrank.com etc' => array(
4013                 // by Brianna Dunlord (briasmi at yahoo.com)
4014                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4015                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4016                 '.carmodelrank.com',// by Brianna
4017                 '.cutestories.net',     // by Brianna
4018                 '.sturducs.com',
4019                 '.bestother.info',      // by Tim
4020                 '.premiumcasinogames.com',      // by Brianna)
4021                 '.yaahooo.info',        // by Alice
4022         ),
4023         'aliacsandr at yahoo.com' => array(
4024                 '.cubub.info',                          // "Free Web Hosting"
4025         ),
4026         'aliacsandr85 at yahoo.com' => array(
4027                 // by Dr. Portillo or Eva Sabina Lopez Castell
4028                 '.xoomer.alice.it',                     // "Free Web Hosting"
4029                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4030                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4031                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4032                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4033                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4034                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4035                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4036                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4037                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4038                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4039                 '.viagra-price.org',            // by Eva
4040                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4041                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4042         ),
4043         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4044         'Something-Gamble' => array(
4045                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4046                 '.atonlineroulette.com',                        // by Blaise Johns
4047                 '.atroulette.com',                                      // by Gino Sand
4048                 '.betting-123.com',                                     // by Joana Caceres
4049                 '.betting-i.biz',                                       // by Joaquina Angus
4050                 '.casino-challenge.com',                        // by Maren Camara
4051                 '.casino-gambling-i.biz',                       // by Giselle Nations
4052                 '.casino-italian.com',                          // by Holley Yan
4053                 '.casino123.net',                                       // by Ta Baines
4054                 '.casinohammamet.com',                          // by Inger Barhorst
4055                 '.casinoqz.com',                                        // by Berenice Snow
4056                 '.casinos-777.net',                                     // by Iona Ayotte
4057                 '.crapsok.com',                                         // by Devon Adair,
4058                 '.dcasinoa.com',                                        // by August Hawkinson
4059                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4060                 '.free-dvd-player.biz',                         // by Rosario Kidd
4061                 '.florida-lottery-01.com',                      // by Romeo Dillon
4062                 '.gaming-123.com',                                      // by Jennifer Byrne
4063                 '.kenogo.com',                                          // by Adriane Bell
4064                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4065                 '.onbaccarat.com',                                      // by Kassandra Dunn
4066                 '.online-experts.biz',                          // by Liberty Helmick
4067                 '.onlinepoker-123.com',                         // by Andrea Feaster
4068                 '.playpokeronline-123.com',                     // by Don Lenard
4069                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4070                 '.texasholdem123.com',                          // by Savion Lasseter
4071                 '.texasholdem-777.com',                         // by Savanna Lederman
4072                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4073                 '.the-craps-100.us',                            // by Lorrine Ripley
4074                 '.the-free-online-game-913.us',         // by Kanesha Clem
4075                 '.the-free-poker-1798.us',                      // by Elaina Witte
4076                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4077                 '.the-online-game-poker-1185.us',       // by Merna Bey
4078                 '.the-playing-black-jack.com',          // by Kristine Brinker
4079                 '.the-poker-1082.us',                           // by Kristofer Boldt
4080                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4081                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4082                 '.the-video-black-jack.com',            // by Jagger Godin
4083         ),
4084         'Something-Insurance' => array(
4085                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4086
4087                 // 0-9
4088                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4089                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4090                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4091                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4092                 '.18wkcf.com',                                  // by Lexy Bohannon
4093                 '.2001werm.org',                                // by Raphael Rayburn
4094                 '.2004heeparea1.org',                   // by Dinorah Andrews
4095                 '.21nt.net',                                    // by Jaida Estabrook
4096                 '.3finfo.com',                                  // by Damian Pearsall
4097                 '.3somes.org',                                  // by Mauro Tillett
4098                 '.453531.com',                                  // by Kurt Flannery
4099                 '.4freesay.com',                                // by Eloy Jones
4100                 '.5ssurvey.com',                                // by Annamarie Kowalski
4101                 '.8-f22.com',                                   // by Larraine Evers
4102                 '.9q.org',                                              // by Ami Boynton
4103
4104                 // A
4105                 '.a40infobahn.com',                             // by Amit Nguyen
4106                 '.a4h-squad.com',                               // by Ross Locklear
4107                 '.aac2000.org',                                 // by Randi Turner
4108                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4109                 '.acahost.com',                                 // by Milton Haberman
4110                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4111                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4112                 '.activel-learning-site.com',   // by Mateo Conn
4113                 '.ad-makers.com',                               // by Shemeka Arsenault
4114                 '.ada-information.org',                 // by Josef Osullivan
4115                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4116                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4117                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4118                 '.aerovac-hotpress.com',                // by Trey Marlow
4119                 '.agfbiosensors.com',                   // by Lionel Dempsey
4120                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4121                 '.affordablerealestate.net',    // by Season Otoole
4122                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4123                 '.ahouserefinance.com',                 // by Young Alley
4124                 '.akirasworld.com',                             // by Piper Sullivan
4125                 '.alderik-production.com',              // by Joan Stiles
4126                 '.alltechdata.com',                             // by Dom Laporte
4127                 '.amconllc.com',                                // by Syble Benjamin
4128                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4129                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4130                 '.angelandcrown.net',                   // by Claretta Najera
4131                 '.ankoralina.com',                              // by Eladia Demers
4132                 '.antiquegoldmine.com',                 // by Keena Marlow
4133                 '.aquinosotros.com',                    // by Nanci Prentice
4134                 '.architectionale.com',                 // by Wilbur Cornett
4135                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4136                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4137                 '.arefinancehome.com',                  // by Duane Doran
4138                 '.arefinancinghome.com',                // by Ike Laney
4139                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4140                 '.auction-emall-site.info',             // by Dayle Denman
4141                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4142                 '.auto-buy-rite.com',                   // by Asuncion Buie
4143                 '.axxinet.net',                                 // by Roberta Gasper
4144                 '.azimutservizi.com',                   // by Ethelene Brook
4145                 '.azstudies.org',                               // by Bernardina Walden
4146
4147                 // B
4148                 '.babtrek.com',                                 // by Simonette Mcbrayer
4149                 '.babycujo.com',                                // by Francisco Akers
4150                 '.bakeddelights.com',                   // by Dave Evenson
4151                 '.bbcart.com',                                  // by Lucio Hamlin
4152                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4153                 '.best-digital-phone.us',               // by Meghann Crockett
4154                 '.bjamusements.com',                    // by Lurlene Butz
4155                 '.blursgsu.com',                                // by Weston Killian
4156                 '.bookwide.net',                                // by Tequila Zacharias
4157                 '.boreholes.org',                               // by Flora Reed
4158                 '.breathingassociaiton.org',    // by Alfred Crayton
4159                 '.birdingnh.com',                               // by Donald Healy
4160                 '.bisdragons.org',                              // by Lupe Cassity
4161                 '.blcschools.net',                              // by Alycia Jolly
4162                 '.bronte-foods.com',                    // by Kary Pfeiffer
4163                 '.buckscountyneighbors.org',    // by Maile Gaffney
4164                 '.buffalofudge.com',                    // by Mable Whisenhunt
4165                 '.burlisonforcongress.com',             // by Luann King
4166                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4167                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4168
4169                 // C
4170                 '.cabanes-web.com',                             // by Vaughn Latham
4171                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4172                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4173                 '.checaloya.com',                               // by Susana Coburn
4174                 '.calvarychapelrgvt.org',               // by Karan Kittle
4175                 '.cameras-esite.info',                  // by Karlee Frisch
4176                 '.cancerkidsforum.org',                 // by Samson Constantino
4177                 '.ccchoices.org',                               // by Kenia Cranford
4178                 '.ccupca.org',                                  // by Evonne Serrano
4179                 '.celebratemehome.com',                 // by Soraya Tower
4180                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4181                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4182                 '.choose-shoes.net',                    // by Geoffrey Setser
4183                 '.churla.com',                                  // by Ollie Wolford
4184                 '.circuithorns.co.uk',                  // by Nathanial Halle
4185                 '.clanbov.com',                                 // by Donell Hozier
4186                 '.cnm-ok.org',                                  // by Thalia Moye
4187                 '.coalitioncoalition.org',              // by Ned Macklin
4188                 '.consoleaddicts.com',                  // by Dorla Hoy
4189                 '.counterclockwise.net',                // by Melynda Hartzell
4190                 '.codypub.com',                                 // by Mercedes Coffman
4191                 '.comedystore.net',                             // by Floy Donald
4192                 '.covsys.co.uk',                                // by Abby Jacey
4193                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4194                 '.craftybidders.com',                   // by Dannie Lazo
4195                 '.credit-card-finder.net',              // by Mellie Deherrera
4196                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4197                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4198                 '.ctwine.org',                                  // by Hailey Knox
4199
4200                 // D
4201                 '.dazyation.com',                               // by Louis Strasser
4202                 '.deepfoam.org',                                // by Ethelyn Southard
4203                 '.debt-fixing.com',                             // by Dagny Rickman
4204                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4205                 '.domainadoption.com',                  // by Breann Pappas
4206                 '.diannbomkamp.com',                    // by Russel Croteau
4207                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4208                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4209                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4210                 '.digital-cameras-esite.info',  // by Milan Jolin
4211                 '.dnstechnet.net',                              // by Tamera Oman
4212                 '.drivenbydata.org',                    // by Katherine Noyes
4213                 '.dtmf.net',                                    // by Micki Slayton
4214                 '.domainsfound.com',                    // by Blossom Lively
4215
4216                 // E
4217                 '.ecstacyabuse.net',                    // by Alana Knight
4218                 '.e-digital-camera-esite.info', // by Romaine Cress
4219                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4220                 '.eldorabusecenter.org',                // by Annabella Oneal
4221                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4222                 '.encaponline.com',                             // by Patrick Keel
4223                 '.ez-shopping-online.com',              // by Gail Bartlett
4224
4225                 // F
4226                 '.faithfulwordcf.com',                  // by Bart Weeks
4227                 '.fammedassoc.com',                             // by Joshua Nelson
4228                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4229                 '.f00k.org',                                    // by Leslie Chapman
4230                 '.foreignrealtions.org',                // by Krystal Hawley
4231                 '.fortwebsite.org',                             // by Kristina Motley
4232                 '.fotofirstdigital.com',                // by Tad Whitfield
4233                 '.foundationcommons.org',               // by Caryn Eskew
4234                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4235                 '.freaky-cheats.com',                   // by Al Klein
4236                 '.free--spyware.com',                   // by Nikki Contreras
4237                 '.french-home-finance-consultant.info', // by Santana Melton
4238                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4239
4240                 // G
4241                 '.gaintrafficfast.com',                 // by Lila Meekins
4242                 '.gaygain.org',                                 // by Shell Davila
4243                 '.gcaaa.com',                                   // by Vallie Jaworski
4244                 '.generalsysteme.com',                  // by Cale Vogel
4245                 '.generation4games.co.uk',              // by Sonya Graham
4246                 '.german-dictionary.us',                // by Rex Daniel
4247                 '.gilmerrec.com',                               // by Leighann Guillory
4248                 '.glenthuntly-athletics.com',   // by Julee Hair
4249                 '.glorybaskets.com',                    // by Lynette Lavelle
4250                 '.goconstructionloan.com',              // by Willis Monahan
4251                 '.gohireit.com',                                // by Bertha Metzger
4252                 '.godcenteredpeople.com',               // by Jaycee Coble
4253
4254                 // H
4255                 '.healthinsuranceem.com',               // by Justin Munson
4256                 '.hearthorizon.info',                   // by Kory Session
4257                 '.hegerindustrial.com',                 // by Toni Wesley
4258                 '.herzequip.com',                               // by Princess Dunkle
4259                 '.hglcms.org',                                  // by Gladwin Ng
4260                 '.hipanoempresa.com',                   // by Shannon Staub
4261                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4262                 '.horse-racing-result.com',             // by Rodney Reynolds
4263                 '.hueckerfamily.com',                   // by Hershel Sell
4264
4265                 // I
4266                 '.ilove2win.com',                               // by Lamont Dickerson
4267                 '.ilruralassistgrp.org',                // by Moises Hauser
4268                 '.imageonsolutions.com',                // by Porsche Dubois
4269                 '.infoanddatacenter.com',               // by Eva Okelley
4270                 '.islamfakta.org',                              // by Goldie Boykin
4271                 '.ithomemortgage.com',                  // by Adelaide Towers
4272                 '.iyoerg.com',                                  // by Madyson Gagliano
4273
4274                 // J
4275                 '.jeffaxelsen.com',                             // by Daphne William
4276                 '.jeffreyf.net',                                // by Vito Platt
4277                 '.johnmartinsreality.com',              // by Pamela Larry
4278                 '.johnsilvers.net',                             // by Silver Battaglia
4279
4280                 // K
4281                 '.kcgerbil.org',                                // by Marisa Thayer
4282                 '.kdc-phoenix.com',                             // by Salma Shoulders
4283                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4284                 '.kosove.org',                                  // by Darwin Schneider
4285
4286                 // L
4287                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4288                 '.letsgokayaking.net',                  // by Winnie Adair
4289                 '.libertycabs.com',                             // by Adela Bonds
4290                 '.liquor-store-cellar.info',    // by Hugh Pearson
4291                 '.locomojo.net',                                // by Marco Harmon
4292                 '.lodatissimo.com',                             // by Adrian Greeson
4293                 '.lsawc.org',                                   // by Lara Han
4294                 '.lycos-test.net',                              // by Rigoberto Oakley
4295
4296                 // M
4297                 '.macro-society.com',                   // by Venessa Hodgson
4298                 '.marthasflavorfest.com',               // by Ahmad Lau
4299                 '.martin-rank.com',                             // by Cathleen Crist
4300                 '.maryandfrank.org',                    // by Theodore Apodaca
4301                 '.masterkwonhapkido.com',               // by Misty Graham
4302                 '.maxrpm-demo.com',                             // by Cristal Cho
4303                 '.mechanomorphic.com',                  // by Stanford Crow
4304                 '.mepublishing.net',                    // by Karly Fleenor
4305                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4306                 '.metwahairports.com',                  // by Nan Kitchen
4307                 '.middle-eastnews.com',                 // by Tybalt Altmann
4308                 '.mikepelchy.com',                              // by Sherly Pearson
4309                 '.milpa.org',                                   // by Nelly Aguilera
4310                 '.modayun.com',                                 // by Camilla Velasco
4311                 '.moonstoneerp.com',                    // by Garret Salmon
4312                 '.morosozinho.com',                             // by Lenore Tovar
4313                 '.morphadox.com',                               // by Hung Zielinski
4314                 '.moscasenlared.com',                   // by Tera Gant
4315                 '.sdjavasig.com',                               // by Gia Swisher
4316                 '.mpeg-radio.com',                              // by Sincere Beebe
4317                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4318                 '.mtseniorcenter.org',                  // by Frederic Ortega
4319                 '.mysteryclips.com',                    // by Edward Ashford
4320
4321                 // N
4322                 '.naavs.org',                                   // by Yuridia Gandy
4323                 '.naval-aviation.org',                  // by Roselle Campo
4324                 '.navigare-ischia.com',                 // by Arielle Coons
4325                 '.ncredc.org',                                  // by Brenda Nye
4326                 '.neonmotorsports.com',                 // by Giovanna Vue
4327                 '.nf-ny.com',                                   // by Yadira Hibbard
4328                 '.ngfdyqva.com',                                // by Emiliano Samples
4329                 '.nicozone.com',                                // by Blaine Shell
4330                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4331                 '.npawny.org',                                  // by Willard Murphy
4332                 '.nysdoed.org',                                 // by Elric Delgadillo
4333                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4334                 '.nytech-ir.com',                               // by Adrien Beals
4335
4336                 // O
4337                 '.oadmidwest.com',                              // by Gavin Kaplan
4338                 '.oarauto.com',                                 // by Susann Merriman
4339                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4340                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4341                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4342                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4343                 '.online-pills-24x7.biz',               // by Aide Hallock
4344                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4345                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4346                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4347                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4348                 '.otterbayweb.com',                             // by Maxwell Irizarry
4349
4350                 // P
4351                 '.painting-technique.us',               // by Bryanna Tooley
4352                 '.pakamrcongress.com',                  // by Bryce Summerville
4353                 '.patabney.com',                                // by Kailyn Slone
4354                 '.parde.org',                                   // by Ellie Yates
4355                 '.participatingprofiles.com',   // by Jaelynn Meacham
4356                 '.partnershipconference.org',   // by Alla Floyd
4357                 '.pet-stars.com',                               // by Carmon Luevano
4358                 '.planning-law.org',                    // by Trista Holcombe
4359                 '.ppawa.com',                                   // by Evonne Scarlett
4360                 '.precisionfilters.net',                // by Faustina Fell
4361
4362                 // Q
4363                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4364                 '.quick-debt-consolidation.net',        // by Lala Marte
4365                 '.quicktvr.com',                                // by Vernell Crenshaw
4366
4367                 // R
4368                 '.radicalsolutions.org',                // by Reece Medlin
4369                 '.randallburgos.com',                   // by Bradly Villa
4370                 '.rcassel.com',                                 // by Janiah Gallant
4371                 '.rearchitect.org',                             // by Marcus Gaudet
4372                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4373                 '.reprisenashville.com',                // by Hester Khan
4374                 '.reptilemedia.com',                    // by Alicia Patel
4375                 '.resellers2000.com',                   // by Dedra Kennedy
4376                 '.reverse-billing.com',                 // by Lazaro Gluck
4377                 '.richcapaldi.com',                             // by Kya Haggard
4378                 '.richformissouri.com',                 // by Alanna Elston
4379                 '.robstraley.com',                              // by Leida Bartell
4380                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4381                 '.rpgbbs.com',                                  // by Leonel Peart
4382                 '.ruralbusinessonline.org',             // by Lynsey Watters
4383                 '.ruwomenscenter.org',                  // by Vince Mclemore
4384                 '.ryanjowens.com',                              // by Janine Smythe
4385
4386                 // S
4387                 '.sagarmathatv.org',                    // by Liam Funke
4388                 '.sakyathubtenling.org',                // by Liane Falgout
4389                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4390                 '.sandishaven.com',                             // by Lino Soloman
4391                 '.scienkeen.com',                               // by Liza Navarra
4392                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4393                 '.severios.com',                                // by Isa Steffen
4394                 '.sexual-hot-girls.com',                // by Viviana Bolton
4395                 '.shakespearelrc.com',                  // by Luciana Weaver
4396                 '.shashran.org',                                // by Adriel Humphries
4397                 '.shoes-shop.us',                               // by Austen Higginbotham
4398                 '.skagitvalleybassanglers.com', // by Necole Thiele
4399                 '.skinsciencesalon.com',                // by Nena Rook
4400                 '.smartalternative.net',                // by Nicki Lariviere
4401                 '.sml338.org',                                  // by Nickole Krol
4402                 '.smogfee.com',                                 // by Sienna Kimble
4403                 '.sneakers-e-shop.info',                // by Nikki Fye
4404                 '.spacewavemedia.com',                  // by Thanh Gast
4405                 '.softkernel.com',                              // by Nicol Hummer
4406                 '.stjoanmerrillville.com',              // by Hunter Beckham
4407                 '.strelinger.com',                              // by Arron Highsmith
4408                 '.striking-viking.com',                 // by Kylie Endsley
4409                 '.sunnydeception.org',                  // by Amaya Llora
4410                 '.sunzmicro.com',                               // by Goddard Arreola
4411                 '.sv-iabc.org',                                 // by Braden Buck
4412                 '.sykotick.com',                                // by Pierce Knecht
4413
4414                 // T
4415                 '.tbody.net',                                   // by Ormond Roman
4416                 '.the-pizzaman.com',                    // by Mario Ramsey
4417                 '.the-shoes.us',                                // by Alejandro Gaffney
4418                 '.theborneocompany.com',                // by Bryanna Tooley
4419                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4420                 '.thehomeschool.net',                   // by September Concepcio
4421                 '.thenewlywed.com',                             // by Allegra Marra
4422                 '.tigerspice.com',                              // by Denis Mosser
4423                 '.tnaa.net',                                    // by Jasmine Andress
4424                 '.top-finance-sites.com',               // by Maryann Doud
4425                 '.tradereport.org',                             // by Bettie Sisk
4426                 '.transmodeling.com',                   // by Martine Button
4427                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4428                 '.tsaoc.com',                                   // by Heriberto Mcfall
4429                 '.tsunamidinner.com',                   // by Nannie Richey
4430
4431                 // U
4432                 '.uhsaaa.com',                                  // by Risa Herbert
4433                 '.ultradeepfield.org',                  // by Bobby Ragland
4434                 '.umkclaw.info',                                // by Cammy Kern
4435                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4436                 '.usa-wolf.com',                                // by Jacklyn Morrill
4437                 '.usjobfair.com',                               // by Lorina Burchette
4438
4439                 // V
4440                 '.vacancesalouer.com',                  // by Loris Bergquist
4441                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4442                 '.valleylibertarians.org',              // by Lena Massengale
4443                 '.vanderbiltevents.com',                // by Gannon Krueger
4444                 '.vanwallree.com',                              // by Michelina Donahue
4445                 '.vcertificates.com',                   // by Hyun Lamp
4446                 '.vonormytexas.us',                             // by Suzette Waymire
4447
4448                 // W
4449                 '.washingtondc-areahomes.net',  // by Ailene Broome
4450                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4451                 '.wolsaoh.org',                                 // by Daniela English
4452                 '.worldpropertycatalog.com',    // by Aray Baxter
4453
4454                 // Y
4455                 '.yankee-merchants.com',                // by Jackson Hinojosa
4456                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4457                 '.yourdomainsource.com',                // by Deems Weingarten
4458
4459                 // Z
4460                 '.zkashan.com',                                 // by Evan Light
4461                 '.zockclock.com',                               // by Dorothea Guthrie
4462         ),
4463         'Something-Drugs' => array(
4464                 // Drugs / Pills / Diet
4465                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4466                 '.abdelghani-shady.com',                // by Elly Alton
4467                 '.bangbangfilm.com',                    // by Davin Chou
4468                 '.centroantequera.com',                 // by Keon Kwiatkowski
4469                 '.champagne-cellar.info',               // by Kandis Rizzo
4470                 '.chix0r.org',                                  // by Christoper Baird
4471                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4472                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4473                 '.fast-cash-01.com',                    // by Edgar Oliver
4474                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4475                 '.fn-nato.com',                                 // by Donny Dunlap
4476                 '.gqyinran.com',                                // by Alejandro Parks
4477                 '.juris-net.com',                               // by Rachelle Bravo
4478                 '.leftpencey.com',                              // by Aileen Ashby
4479                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4480                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4481                 '.palaceroyale.net',                    // by Brycen Stebbins
4482                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4483                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4484                 '.yukissushi.com',                              // by Donell Hozier
4485         ),
4486         'Something-Others' => array(
4487                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4488                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4489         ),
4490         'Something-NoApp' => array(
4491                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4492                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4493                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4494                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4495                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4496         ),
4497         'Cortez and family' => array(
4498                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4499                 '.dronadaarsujf.info',  // by Cortez
4500                 '.fromnananaref.info',  // by Cortez
4501                 '.goorkkjsaka.info',    // by Cortez
4502                 '.jkdfjjkkdfe.info',    // by Rico
4503                 '.jkllloldkjsa.info',   // by Cortez
4504                 '.nnjdksfornms.info',   // by Rico
4505                 '.mcmdkkksaoka.info',   // by Cortez
4506                 '.srattaragfon.info',   // by Cortez
4507                 '.yreifnnonoom.info',   // by Rico
4508                 '.zjajjsvgeuds.info',   // by Cortez
4509         ),
4510         'admin at ematuranza.com' => array(
4511                 '.ancorlontano.com',
4512                 '.dentroallago.com',
4513                 '.digiovinezza.com',
4514                 '.ematuranza.com',
4515                 '.ilfango.com',
4516                 '.nullarimane.com',
4517                 '.questaimmensa.com',
4518                 '.tentailvolo.com',
4519                 '.unatenerezza.com',
4520                 '.volgondilettose.com',
4521         ),
4522         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4523                 '.bid99df.info',
4524                 '.bj498uf.info',
4525                 '.edeuj84.info',
4526                 '.f4mfid.info',
4527                 '.g4vf03a.info',
4528                 '.j09j4r.info',
4529                 '.jv4r8hv.info',
4530                 '.k43sd3.info',
4531                 '.k4r84d.info',
4532                 '.k4rvda.info',
4533                 '.k4v0df.info',
4534                 '.k903os.info',
4535                 '.k9df93d.info',
4536                 '.kv94fd.info',
4537                 '.ksjs93.info',
4538                 '.l0ks03.info',
4539                 '.l9u3jc.info',
4540                 '.lv043a.info',
4541                 '.nh94h9.info',
4542                 '.m94r9d.info',
4543                 '.s87fvd.info',
4544                 '.v3k0d.info',
4545                 '.v4r8j4.info',
4546                 '.vf044s.info',
4547                 '.vj49rs.info',
4548                 '.vk498j.info',
4549                 '.u03jow.info',
4550         ),
4551         'Nikhil and Brian' => array(
4552                 // by Brian Dieckman (info at iudndjsdhgas.info)
4553                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4554                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4555                 '.ihfjeswouigf.info',   // by Brian, / was not found
4556                 '.iudndjsdhgas.info',   // by Brian, / was not found
4557                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4558                 '.jiatdbdisut.info',    // by Brian, / was not found
4559                 '.jkfierwoundhw.info',  // by Brian, / was not found
4560                 '.kfjeoutweh.info',             // by Brian, / was not found
4561                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4562                 '.oudjskdwibfm.info',   // by Brian, / was not found
4563                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4564                 '.itxbsjacun.info',             // by Nikhil, / was not found
4565                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4566                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4567                 '.najedncdcounrd.info', // by Nikhil, / was not found
4568                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4569                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4570                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4571                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4572                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4573                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4574                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4575                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4576                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4577         ),
4578         'wealth777 at gmail.com' => array(      // by Henry Ford
4579                 '.brutal-forced.com',
4580                 '.library-bdsm.com',
4581                 '.rape-fantasy.us',
4582         ),
4583         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4584                 '.purerotica.com',
4585                 '.richsex.com',
4586                 '.servik.net',
4587                 '.withsex.com',
4588         ),
4589         'dreamteammoney.com' => array(
4590                 '.dreamteammoney.com',  // dtmurl.com related
4591                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4592         ),
4593         'KLIK VIP Search and family' => array(
4594                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4595                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4596                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4597                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4598                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4599                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4600                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4601         ),
4602         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4603                 '.antivirs.info',
4604                 '.antivirus1.info',
4605                 '.antivirus2.info',
4606         ),
4607         'wasam at vangers.net and family' => array(
4608
4609                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4610                 '.bahatoca.org',
4611                 '.digestlycos.org',
4612                 '.educativaanale.info',
4613                 '.guildstuscan.org',
4614                 '.isaakrobbins.info',
4615                 '.isfelons.org',
4616                 '.lvwelevated.org',
4617                 '.macphersonaca.org',
4618                 '.markyaustrian.org',
4619                 '.michelepug.org',
4620                 '.opalbusy.info',
4621                 '.quijotebachata.info',
4622                 '.salthjc.info',
4623                 '.shogunnerd.info',
4624                 '.solarissean.org',
4625                 '.sparkgsx.info',
4626                 '.tarzanyearly.org',
4627                 '.tulabnsf.org',
4628                 '.vaccarinos.org',
4629
4630                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4631                 '.e2007.info',
4632                 '.cmoss.info',
4633
4634                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4635                 '.finddesk.org',
4636                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4637                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4638                 '.rcatalog.org',
4639                 '.sbitzone.org',
4640
4641                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4642                 '.cheapns.org',
4643                 '.my-top.net',
4644                 '.sfind.net',
4645                 '.sspot.net',
4646                 '.suvfind.info',
4647
4648                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4649                 '.trumber.com',
4650
4651                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4652                 '.blogduet.org',
4653                 '.carelf.info',
4654                 '.cmagic.org',
4655                 '.cspell.org',
4656                 '.dspark.org',
4657                 '.dtonic.org',
4658                 '.mcharm.info',
4659                 '.mslook.info',
4660                 '.phpdinnerware.info',
4661                 '.rnation.org',
4662                 '.uzing.org',
4663
4664                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4665                 '.allbar.info',
4666                 '.allersearch.org',
4667                 '.allzoom.org',
4668                 '.dynall.org',
4669                 '.fastopia.org',
4670                 '.offasfast.info',
4671                 '.rblast.org',
4672                 '.rchistes.info',
4673                 '.rette.org',
4674                 '.shufflequince.org',
4675                 '.suvlook.org',
4676
4677                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4678                 '.290cabeza.org',
4679                 '.bossierpainted.org',
4680                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4681                 '.definekonica.info',   // Admin: tvaals at vangers.net
4682                 '.gradetelemundo.info',
4683                 '.hydraulickin.info',
4684                 '.indicadorestmj.info',
4685                 '.keeleykincaid.org',
4686                 '.kleenbowser.info',
4687                 '.pipnickname.info',
4688                 '.pacolily.org',
4689                 '.redeemtrabalho.info',
4690                 '.scanmakerchua.info',
4691                 '.titanmessina.info',
4692                 '.tragratuit.org',
4693                 '.yeareola.info',
4694         ),
4695         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4696                 '.canadianmedsworld.info',      // 84.252.133.112
4697                 '.tabsdrugstore.info',          // 84.252.133.114
4698                 '.tabsstore.info',                      // 84.252.133.114
4699                 '.topcholesterol.info',         // 84.252.133.132
4700         ),
4701         'be.cx' => array(
4702                 '.be.cx',
4703                 '.ca.cx',
4704         ),
4705         'john780321 at yahoo.com' => array(     // by John  Brown
4706                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4707                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4708                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4709         ),
4710         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4711                 '.bertela.info',
4712                 '.forblis.info',
4713                 '.frenallo.info',
4714                 '.goyahoo.info',
4715                 '.herbak.info',
4716                 '.kiokast.info',
4717                 '.nerenok.info',
4718                 '.pestgets.info',
4719                 '.snukker.info',
4720                 '.thegetspons.info',
4721         ),
4722         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4723                 '.bobop.info',
4724                 '.kwwwe.info',
4725                 '.piikz.info',
4726                 '.moosm.info',
4727                 '.vvvw.info',
4728         ),
4729         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4730                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4731                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4732                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4733                 '.jplingood.com',       // 125.65.112.15
4734                 '.linenew.com',         // 203.191.148.96
4735                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4736                 '.yzlin.com',           // 220.162.244.36
4737         ),
4738         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4739                 '.1111mb.com',
4740                 '.2sex18.com',
4741                 '.69porn1.com',
4742         ),
4743         'ECTechnology' => array(
4744                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4745                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4746                 '.automouse.jp',
4747         ),
4748         'lyqz at 21cn.com' => array(
4749                 '.japangame1.com',
4750                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4751                 '.livedoor1.com',
4752                 '.ragnarokonline1.com',
4753                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4754         ),
4755         'kingrou at hotmail.com' => array(      // by yangjianhe
4756                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4757                 '.453787.com',
4758         ),
4759         'anpaul541000 at 163.com' => array(     // by su qiuqing
4760                 '.cetname.com',                 // 222.77.185.87
4761                 '.jpgamer.net',                 // 220.247.157.106
4762                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4763                 '.lovejptt.com',                // 222.77.185.87
4764                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4765                 '.playncsoft.net',              // 220.247.157.106
4766         ),
4767         'abc00613 at 163.com' => array( // by guo yong
4768                 '.avtw1068.com',                // 64.74.223.11
4769                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4770                 '.djkkk66990.com',              // 68.178.232.99
4771                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4772         ),
4773         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4774                 '.cmonfofo.com',
4775                 '.discutbb.com',
4776         ),
4777         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4778                 '.preca.info',
4779                 '.skiaggi.info',
4780                 '.scrianal.info',
4781                 '.tageom.info',
4782         ),
4783         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4784                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4785                 '.inpros.net',                  // 202.181.98.79
4786                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4787         ),
4788         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4789                 '.ec51.com',
4790                 '.ec51.net',
4791         ),
4792         'abbevillelaties at yahoo.fr etc' => array(
4793                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4794                 '.ringtones-rate.com',
4795                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4796                 '.special-ringtones.net',
4797         ),
4798         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4799                 '.1sgsc.info',
4800                 '.3h4r89h.info',
4801                 '.3v44dd.info',
4802                 '.6rfuh6.info',
4803                 '.84hd8.info',
4804                 '.94bui89.info',
4805                 '.agysb3.info',
4806                 '.asdjhs.info',
4807                 '.bcvnrth.info',
4808                 '.bheb4r.info',
4809                 '.bhiuno.info',
4810                 '.biug7g.info',
4811                 '.bjb5f4.info',
4812                 '.bob8g7g.info',
4813                 '.br89bdd.info',
4814                 '.bsa3h.info',
4815                 '.bsieb8.info',
4816                 '.basbiubf.info',
4817                 '.bobwwfs2.info',
4818                 '.ciuv9t.info',
4819                 '.dbmdx4.info',
4820                 '.dbrjms.info',
4821                 '.dbtcm.info',
4822                 '.dff9ghu.info',
4823                 '.dfshbb.info',
4824                 '.dgd4ffdh.info',
4825                 '.dh3ge.info',
4826                 '.duc86jh.info',
4827                 '.ergth45.info',
4828                 '.f78bf7ffb.info',
4829                 '.gbdfbo4.info',
4830                 '.ger45.info',
4831                 '.gnvnrrg.info',
4832                 '.h47he7.info',
4833                 '.h488hbd4.info',
4834                 '.hd72b94.info',
4835                 '.he74b7.info',
4836                 '.hfujfnr.info',
4837                 '.husdhd42.info',
4838                 '.hbwje.info',
4839                 '.itg87gji.info',
4840                 '.iugiougiuh.info',
4841                 '.jhd4f4aa.info',
4842                 '.jshd73.info',
4843                 '.krhpgd.info',
4844                 '.lyihjn.info',
4845                 '.nfyjnfj.info',
4846                 '.oihbv.info',
4847                 '.os44fvs.info',
4848                 '.sdfsd3.info',
4849                 '.sdiug4.info',
4850                 '.sdkufhh.info',
4851                 '.sdugb4f.info',
4852                 '.skdbf.info',
4853                 '.sipiv78.info',
4854                 '.sudbfb.info',
4855                 '.tymbbmy.info',
4856                 '.uilhjk.info',
4857                 '.vi87vub.info',
4858                 '.vfuyf87f.info',
4859                 '.viyvvj877.info',
4860                 '.w7fc8eu.info',
4861                 '.wefg43g.info',
4862                 '.xbrch78e.info',
4863                 '.ywsfu.info',
4864                 '.zxcbiv.info',
4865         ),
4866         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4867                 '.abofios.info',
4868                 '.amlekfn.info',
4869                 '.amlkdoie.info',
4870                 '.amkslewq.info',
4871                 '.alemfu.info',
4872                 '.aloweks1.info',
4873                 '.alposd3.info',
4874                 '.bamhpb.info',
4875                 '.bhjkb.info',
4876                 '.bjqnj.info',
4877                 '.cvcxcbhpr.info',
4878                 '.czoypaiat.info',
4879                 '.dbpmgc.info',
4880                 '.dgvogrxs.info',
4881                 '.dldksf.info',
4882                 '.dlor6za.com',
4883                 '.dmkoiew.info',
4884                 '.eewrefr.info',
4885                 '.eladne.info',
4886                 '.elksem.info',
4887                 '.elwpod.info',
4888                 '.emlwkdnr.info',
4889                 '.esgmyqk.info',
4890                 '.fauqv.info',
4891                 '.fgxkgy.info',
4892                 '.fhryns.info',
4893                 '.fj38n4g.info',
4894                 '.fjnesal.info',
4895                 '.fmkfoe.info',
4896                 '.fqkcfldtr.info',
4897                 '.fwcigpdwz.info',
4898                 '.fyhik.info',
4899                 '.glrkje.info',
4900                 '.gwkslfq.info',
4901                 '.gwjracvh.info',
4902                 '.hihopepe.info',
4903                 '.hwlyggbkw.info',
4904                 '.hmwbfw.info',
4905                 '.hthyeb.info',
4906                 '.iaofkyaw.info',
4907                 '.uldkxuiw.info',
4908                 '.is7c6w4.info',
4909                 '.ivuddhdk.info',
4910                 '.jgfndjem.info',
4911                 '.jgmdlek.info',
4912                 '.jkrnvmpad.info',
4913                 '.jqujn.info',
4914                 '.jvgmmba.info',
4915                 '.kbaur.info',
4916                 '.kgjindptv.info',
4917                 '.kleo7s9.info',
4918                 '.lezfgam.info',
4919                 '.lfaasy.info',
4920                 '.ljpdjki.info',
4921                 '.lmnpis.info',
4922                 '.lpzcu2f.info',
4923                 '.lrptn.info',
4924                 '.lursqt.info',
4925                 '.mgkabviil.info',
4926                 '.mhtknjyt.info',
4927                 '.mksuuku.info',
4928                 '.mkyky.info',
4929                 '.mloaisn.com',
4930                 '.mlsiknd.info',
4931                 '.mthqz.info',
4932                 '.nnooq.info',
4933                 '.nohhylvc.info',
4934                 '.nuprndsye.info',
4935                 '.nsoelam.info',
4936                 '.nykobczv.info',
4937                 '.nzuhli.info',
4938                 '.odyqzgylr.info',
4939                 '.oidiau.info',
4940                 '.oitzkw.info',
4941                 '.okdmrpz.info',
4942                 '.ooinziti.info',
4943                 '.ortqr.info',
4944                 '.osmkpnekv.info',
4945                 '.ozkzfih.info',
4946                 '.p3ix8wc.com',
4947                 '.piwyt.info',
4948                 '.pfkijrm.info',
4949                 '.pjktcragi.info',
4950                 '.pleoz.info',
4951                 '.plvqm73.info',
4952                 '.pqyrem.info',
4953                 '.qipgqd.info',
4954                 '.qlewixu.com',
4955                 '.qmlskme.info',
4956                 '.qtuff.info',
4957                 '.quoga.info',
4958                 '.quqz.info',
4959                 '.qzxuw.info',
4960                 '.rcaidegp.info',
4961                 '.rlkmdi.info',
4962                 '.rnsoiov.info',
4963                 '.rnwlams.info',
4964                 '.rprgkgqld.info',
4965                 '.rubqvxrn.info',
4966                 '.spqxstl.info',
4967                 '.syckoqjql.info',
4968                 '.tbirb.info',
4969                 '.thalc34.info',
4970                 '.tiabq.info',
4971                 '.tszzpjr.info',
4972                 '.tyjdyn.info',
4973                 '.twgugpns.info',
4974                 '.uaezrqp.info',
4975                 '.udlkasu.info',
4976                 '.uejncyf.info',
4977                 '.ukvflb.info',
4978                 '.ugsuv.info',
4979                 '.ukhgpcp.info',
4980                 '.urprzn.info',
4981                 '.uuhememkw.info',
4982                 '.yalc7en.info',
4983                 '.ybuid.info',
4984                 '.yhdkgfob.info',
4985                 '.ymenq.info',
4986                 '.ynlyb.info',
4987                 '.vieatlubk.info',
4988                 '.vltcaho.info',
4989                 '.wlamsiek.info',
4990                 '.wlerp.info',
4991                 '.wlmtshzi.info',
4992                 '.wmlkams.info',
4993                 '.wprqd.info',
4994                 '.wpyspszi.info',
4995                 '.xdscc.info',
4996                 '.xdvy.info',
4997                 '.xeypku.info',
4998                 '.xsrxh.info',
4999                 '.xwjyrpfe.info',
5000                 '.yxcqw.info',
5001                 '.zhbktrh.info',
5002                 '.zspepn.info',
5003                 '.zsxtz.info',
5004         ),
5005         'survi at poczta.fm and smiley' => array(
5006                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5007                 '.ppert.info',
5008                 '.pperta.info',
5009                 '.pperts.info',
5010                 '.pprtuis.info',
5011                 '.13iuey.info',         // ":>"
5012                 '.13jkhs.info',
5013                 '.13lksa.info',
5014                 '.13rxtx.info',
5015                 '.13slkd.info',
5016                 '.13zaer.info',
5017         ),
5018         'admin at esemeski.com' => array(       // by Jan Kalka
5019                 '.kxils.info',
5020                 '.kuaph.info',
5021                 '.lncdc.info',
5022                 '.lsqpd.info',
5023                 '.mczed.info',
5024                 '.npous.info',
5025                 '.obgju.info',
5026         ),
5027         'LiquidNetLimited.com' => array(
5028                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5029
5030                 // FateBack.com related
5031                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5032                 '.bebto.com',
5033                 '.fateback.com',
5034                 '.undonet.com',
5035                 '.yoll.net',
5036                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5037
5038                 // 50webs.com                   // 64.72.112.10
5039                 // dns2.50webs.com              // 64.72.112.11
5040                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5041                 // dns2.freehostia.com  // 64.72.112.13
5042                 // serv3.freehostia.com // 64.72.112.14
5043                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5044                 // mail.50webs.com              // 64.72.112.26
5045                 // supremecenter41.com  // 64.72.112.52
5046                 // 50webs2.50webs.com   // 64.72.112.89
5047                 // supremecenter39.com  // 64.72.112.103
5048
5049                 // by LiquidNet Ltd. (support at propersupport.com)
5050                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5051                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5052                         'duoservers.com',               // 216.65.1.130
5053
5054                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5055         ),
5056         'domains at agava.com' => array(
5057                 '.h18.ru',
5058                 '.hut1.ru',
5059         ),
5060         'wlmx009 at hotmail.com' => array(
5061                 '.123lineage.com',
5062                 '.ff11-info.com',
5063                 '.lastlineage.com',
5064                 '.lineage2-ol.com',
5065                 '.lineage2006.com',
5066                 '.lineagefirst.com',
5067         ),
5068         'Zettahost.com' => array(
5069                 '.atspace.biz',         // sales at zettahost.com
5070                 '.atspace.com',         // abuse at zettahost.com
5071                 '.atspace.name',        // NS atspace.com
5072                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5073                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5074         ),
5075         'hlq9814 at 163.com' => array(
5076                 '.kotonohax.com',               // by ling bao
5077                 '.ragnarox.mobi',               // by lin bao, *.exe download
5078                 '.rokonline-jp.com',    // by hang long
5079         ),
5080         '77ch.jp' => array(
5081                 '.77ch.jp',
5082                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5083         ),
5084         'serchportal at mail.ru' => array(      // by Namu Adin
5085                 '.43fert.info',
5086                 '.belis.info',
5087                 '.bonu.info',
5088                 '.chelsite.info',
5089                 '.chparael.info',
5090                 '.cool9f.info',
5091                 '.dada2.info',
5092                 '.dorplanete.info',
5093                 '.dormonde.info',
5094                 '.dorprojet.info',
5095                 '.faciledor.info',
5096                 '.fastsearchgroup.info',
5097                 '.gerta0.info',
5098                 '.getse.info',
5099                 '.gopvl.info',
5100                 '.knopki.info',
5101                 '.propidor.info',
5102                 '.quicksearchnet.info',
5103                 '.ret5.info',
5104                 '.slimfastsearch.info',
5105                 '.virtualpvl.info',
5106                 '.vpvla.info',
5107                 '.xjdor.info',
5108                 '.zhopki.info',
5109         ),
5110         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5111                 '*.444mb.com',          // Free hosting
5112                 'urlnip.com',           // Redirection
5113         ),
5114         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5115                 '.1fasttimesatnau.info',
5116                 '.1freecybersex.info',
5117                 '.1freexxxcomics.info',
5118                 '.1fuckingmywife.info',
5119                 '.1pornpreview.info',
5120                 'www.ru',                                       // by (service at demos.ru), redirection
5121         ),
5122         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5123                 '.adultschat.info',
5124                 '.livecamonline.info',
5125                 '.webcam4u.info',
5126                 '.younghot.info',
5127         ),
5128         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5129                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5130
5131                 // 209.51.196.242
5132                 '.22web.net',
5133                 '.2kool4u.net',
5134                 '.9skul.com',
5135                 '.alojalo.info',
5136                 '.byet.net',
5137                 '.byethost2.com',
5138                 '.byethost3.com',
5139                 '.byethost4.com',
5140                 '.byethost5.com',
5141                 '.byethost6.com',
5142                 '.byethost7.com',
5143                 '.byethost8.com',
5144                 '.byethost9.com',
5145                 '.byethost10.com',
5146                 '.byethost11.com',
5147                 '.byethost12.com',
5148                 '.byethost13.com',
5149                 '.byethost14.com',
5150                 '.byethost15.com',
5151                 '.byethost16.com',
5152                 '.byethost17.com',
5153                 '.byethost18.com',
5154                 '.headshothost.net',
5155                 '.hostwq.net',
5156                 '.mega-file.net',
5157                 '.truefreehost.com',
5158
5159                 '.ifastnet.com',        // 209.51.196.243
5160
5161                 // 209.190.16.82(mx1.byet.org)
5162                 '.1sthost.org',
5163                 '.4sql.net',
5164                 '.byet.org',
5165                 '.hyperphp.com',
5166                 '.kwikphp.com',
5167                 '.my-php.net',
5168                 '.my-place.us',
5169                 '.my-webs.org',
5170                 '.netfast.org',
5171                 '.php0h.com',
5172                 '.php1h.com',
5173                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5174                 '.phpnet.us',
5175                 '.prohosts.org',
5176                 '.pro-php.org',
5177                 '.prophp.org',
5178                 '.sprinterweb.net',
5179                 '.swiftphp.com',
5180                 '.xlphp.net',
5181
5182                 // 209.190.16.83(mx2.byet.org)
5183                 '.instant-wiki.net',
5184
5185                 // 209.190.16.84(mx3.byet.org)
5186
5187                 // 209.190.16.85(mx4.byet.org)
5188                 '.instant-blog.net',
5189                 '.instant-forum.net',
5190
5191                 '.byethost.com',                        // 209.190.18.138
5192         ),
5193         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5194                 '.analmoviesite.info',
5195                 '.bestgirlssex.info',
5196                 '.boxvagina.info',
5197                 '.cyberlivegirls.info',
5198                 '.hotredgirls.info',
5199                 '.forsexlove.info',
5200                 '.hotnudezone.info',
5201                 '.hotredpussy.info',
5202                 '.lesbians-live.info',
5203                 '.lesbians-on-cam.info',
5204                 '.onlinegirlssite.info',
5205                 '.sexloveonline.info',
5206                 '.teensexcard.info',
5207                 '.teensexdirect.info',
5208                 '.topnudesite.info',
5209                 '.vaginafree.info',
5210                 '.webcam-show.info',
5211                 '.webcamshow.info',
5212                 '.youngsexchat.info',
5213                 '.yourcumshot.info',
5214         ),
5215         'stocking.club at gmail.com' => array(
5216                 '.adulthotmodels.com',          // by David Zajwzran
5217                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5218                 '.cash-call.info',                      // by David Theissen
5219                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5220                 '.cheap-online-viagra.info',    // by David Theissen
5221                 '.drugcleansing.net',           // by David Zajwzran
5222                 '.men-health-zone.com',         // by David Theissen
5223                 '.purchase-viagra.info',        // by David Theissen
5224                 '.realdrunkengirls.biz',        // by David Theissen
5225                 '.sextoyslife.com',                     // by David Zajwzran
5226                 '.sexysubjects.info',           // by David Zajwzran
5227                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5228                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5229                 '.travelcardsite.info',         // by David Theissen
5230         ),
5231         'lustiq at p5com.com' => array(
5232                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5233                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5234         ),
5235         'web at 6jy.com' => array(
5236                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5237                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5238         ),
5239         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5240                 '.auto-fgen.info',
5241                 '.fast-marketing.info',
5242                 '.from-usa.info',
5243                 '.generic-pharm.info',
5244                 '.pharm-directory.info',
5245                 '.popular-people.info',
5246                 '.safe-health.info',
5247                 '.star-celebrities.info',
5248                 '.super-home-biz.info',
5249                 '.top5-auto.info',
5250                 '.top5-cars.info',
5251                 '.vip-furniture.info',
5252                 '.vip-pc.info',
5253                 '.vip-pets.info',
5254         ),
5255         'abuse at search-store.org' => array(
5256                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5257         ),
5258         'Leading Edge Marketing Inc.' => array(
5259                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5260                 '.abemedical.com',
5261                 '.attractwomennow.com',
5262                 '.bettersexmall.com',
5263                 '.buymaxoderm.com',
5264                 '.buyvprx.com',
5265                 '.genf20.com',
5266                 '.infinityhealthnews.com',
5267                 '.istnewsletter.com',
5268                 '.leadingedgecash.com',
5269                 '.leadingedgeherbals.com',
5270                 '.leadingedgevipsonly.com',
5271                 '.lecash.com',
5272                 '.leminfo.com',
5273                 '.proextendersystem.com',
5274                 '.provestra.com',
5275                 '.semenax.com',
5276                 '.shavenomore.com',
5277                 '.theedgenewsletter.com',
5278                 '.vigorelle.com',
5279                 '.vigrx.com',
5280                 '.vigrxplus.com',
5281                 '.wbstnewsletter.com',
5282         ),
5283         'clickx at bk.ru' => array(     // by Alexey Enrertov
5284                 '.coolget*.info' =>
5285                         '#^(?:.*\.)?' . 'coolget' .
5286                         '(?:bus|find|news|php|place|post|srch)' .
5287                         '\.info$#',
5288                 '.coolgirl*.info' =>
5289                         '#^(?:.*\.)?' . 'coolgirl' .
5290                         '(?:apple|fish|search)' .
5291                         '\.info$#',
5292                 '.coolmeet*.info' =>
5293                         '#^(?:.*\.)?' . 'coolmeet' .
5294                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5295                         '\.info$#',
5296                 '.cool**.info' =>
5297                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5298                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5299                         '\.info$#',
5300                 '.freseasy*.info' =>
5301                         '#^(?:.*\.)?' . 'freseasy' .
5302                         '(?:apple|click|find|fish|post|search)' .
5303                         '\.info$#',
5304                 '.fres**.info' =>
5305                         '#^(?:.*\.)?' .
5306                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5307                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5308                         '\.info$#',
5309                         // These are not found yet:
5310                         // fresgirlsrch.info
5311                         // fresadultapple.info
5312                         // fresadultclick.info
5313                         // frestheplace.info
5314
5315                 // 66.232.113.44
5316                 '.nuhost.info',
5317                 '.susearch.info',
5318
5319                 // 66.232.126.74(hv94.steephost.com)
5320                 '.dilej.com',
5321                 '.fyvij.com',
5322                 '.howus.com',
5323                 '.jisyn.com',
5324                 '.kaxem.com',
5325                 '.mihug.com',
5326                 '.mobyb.com',
5327                 '.qidat.com',
5328                 '.qihek.com',
5329                 '.ryzic.com',
5330                 '.sasuv.com',
5331                 '.tuquh.com',
5332                 '.vehyq.com',
5333                 '.wezid.com',
5334                 '.wifuj.com',
5335                 '.xijyt.com',
5336                 '.zuqyn.com',
5337
5338                 '.mosugy.com',
5339         ),
5340         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5341                 '.hitsearching.info',
5342                 '.hugeamountdata.info',
5343                 '.megafasthost.info',
5344                 '.real-big-host.info',
5345                 '.search4freez.info',
5346                 '.yasech.info',
5347
5348                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5349                 '.bymire.com',
5350
5351                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5352                 '.ligiwa.com',
5353
5354                 '.mubeho.com',
5355         ),
5356         'ice--man at mail.ru related' => array(
5357                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5358                 '.bestcreola.com',
5359                 '.crekatierra.com',
5360                 '.creolafire.com',
5361                 '.crolik.com',
5362                 '.croller.cn',
5363                 '.ecrmx.com',
5364                 '.eflashpoint.com',
5365                 '.exoticmed.com',
5366                 '.feelview.com',
5367                 '.greatexotic.com',
5368                 '.icrtx.com',
5369                 '.icyhip.com',
5370                 '.icyiceman.com',
5371                 '.icypopular.com',
5372                 '.iflashpoint.com',
5373                 '.justmdx.com',
5374                 '.kiliusgroup.com',
5375                 '.klickerr.com',
5376                 '.klickerrworld.com',
5377                 '.kreolic.com',
5378                 '.margansitio.com',
5379                 '.margantierra.com',
5380                 '.mimargan.com',
5381                 '.oilkeys.com',
5382                 '.planetmdx.com',
5383                 '.thekeyse.com',
5384                 '.viewgreat.com',
5385                 '.yourcreola.com',
5386
5387                 // 69.46.23.48
5388                 '.bestkilius.com',
5389                 '.crekadirecto.com',
5390                 '.getflashsite.com',
5391                 '.sucreka.com',
5392                 '.superkilius.com',
5393
5394                 // 69.46.23.48 by bing-16 at ftunez.org
5395                 '.bovorup.cn',
5396                 '.litotar.cn',
5397                 '.nihydec.cn',
5398
5399                 // 66.232.112.175 by bing-32 at ftunez.org
5400                 '.lasyxy.cn',
5401
5402                 // by bing-65 at ftunez.org
5403                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5404                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5405                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5406                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5407                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5408                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5409                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5410                 '.saralar.cn',          // 66.232.120.113(non-existent)
5411                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5412
5413                 // 69.46.23.48 by clarkson-34 at ftunez.org
5414                 '.bumora.cn',
5415                 '.byxite.cn',
5416                 '.byxuqu.cn',
5417                 '.jadama.cn',
5418                 '.kybope.cn',
5419                 '.mefeki.cn',
5420                 '.mokiso.cn',
5421                 '.niqeme.cn',
5422                 '.pukafo.cn',
5423                 '.qesaxa.cn',
5424                 '.toxezi.cn',
5425                 '.tujudy.cn',
5426                 '.tutike.cn',
5427
5428                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5429                 '.cabino.cn',
5430                 '.cuwace.cn',
5431                 '.ferazi.cn',
5432                 '.gigywy.cn',
5433                 '.lapype.cn',
5434                 '.mewabe.cn',
5435                 '.pezegy.cn',
5436                 '.pyzuza.cn',
5437                 '.qypony.cn',
5438                 '.ropesy.cn',
5439                 '.wadyfe.cn',
5440
5441                 // 69.46.23.48 clarkson-58 at ftunez.org
5442                 '.becabe.cn',
5443                 '.biciqy.cn',
5444                 '.bezymu.cn',
5445                 '.cifori.cn',
5446                 '.ciwyxi.cn',
5447                 '.dobari.cn',
5448                 '.dusofe.cn',
5449                 '.dutyda.cn',
5450                 '.dykanu.cn',
5451                 '.fakexu.cn',
5452                 '.fylema.cn',
5453                 '.godymo.cn',
5454                 '.hyhaxy.cn',
5455                 '.ganosi.cn',
5456                 '.kuxyju.cn',
5457                 '.lacezy.cn',
5458                 '.lonyru.cn',
5459                 '.lycato.cn',
5460                 '.nykyby.cn',
5461                 '.qyhuko.cn',
5462                 '.redere.cn',
5463                 '.riwimu.cn',
5464                 '.wopary.cn',
5465                 '.xizity.cn',
5466                 '.xuxusa.cn',
5467
5468                 // by entretov-28 at ftunez.org
5469                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5470                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5471
5472                 // 69.46.23.48 by entretov-32 at ftunez.org
5473                 '.cihuji.cn',
5474                 '.deqyve.cn',
5475                 '.genefa.cn',
5476                 '.gujyju.cn',
5477                 '.hasadu.cn',
5478                 '.hedomi.cn',
5479                 '.kecicy.cn',
5480                 '.kipabo.cn',
5481                 '.manunu.cn',
5482                 '.musoru.cn',
5483                 '.myvuna.cn',
5484                 '.pikybe.cn',
5485                 '.riqawo.cn',
5486                 '.rufuxy.cn',
5487                 '.vyfilu.cn',
5488                 '.xadule.cn',
5489                 '.zolaxe.cn',
5490                 '.zerixu.cn',
5491
5492                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5493                 '.dozoda.cn',
5494                 '.nemipu.cn',
5495
5496                 // entretov-84 at ftunez.org
5497                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5498                 '.favulol.cn',          // 66.232.120.115(*snip*)
5499                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5500
5501                 // 69.46.23.48 by jeremy-57 at ftunez.org
5502                 '.duzele.cn',
5503                 '.figede.cn',
5504                 '.fiwany.cn',
5505                 '.gyfalu.cn',
5506                 '.jepylo.cn',
5507                 '.nuqumy.cn',
5508
5509                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5510                 '.burahu.cn',
5511                 '.jydijy.cn',
5512                 '.komyby.cn',
5513                 '.najepa.cn',
5514                 '.pylobu.cn',
5515                 '.qofoly.cn',
5516                 '.sybuvi.cn',
5517                 '.vycexu.cn',
5518                 '.wotyqo.cn',
5519                 '.xudoli.cn',
5520
5521                 // by entretov-28 at ftunez.org
5522                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5523
5524                 // by entretov-37 at ftunez.org
5525                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5526                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5527
5528                 // 66.232.112.175 by entretov-86 at ftunez.org
5529                 '.faweji.cn',
5530                 '.jypaci.cn',
5531                 '.xozuso.cn',
5532
5533                 // 69.46.23.48 by miles-37 at ftunez.org
5534                 '.beqymo.cn',
5535                 '.ceqibi.cn',
5536                 '.dyraqo.cn',
5537                 '.qenedo.cn',
5538                 '.qurypa.cn',
5539                 '.siluvo.cn',
5540                 '.tujala.cn',
5541                 '.wukuwi.cn',
5542                 '.xenibo.cn',
5543                 '.xiculo.cn',
5544                 '.zabemu.cn',
5545
5546                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5547                 '.bevaka.cn',
5548                 '.fysyte.cn',
5549                 '.guxixu.cn',
5550                 '.hatoli.cn',
5551                 '.jitobu.cn',
5552                 '.juxeca.cn',
5553                 '.kifuhy.cn',
5554                 '.licila.cn',
5555                 '.mecomy.cn',
5556                 '.niryko.cn',
5557                 '.noxoco.cn',
5558                 '.qiwysu.cn',
5559                 '.tutysy.cn',
5560
5561                 // by oker-74 at ftunez.org
5562                 '.navufol.cn',
5563
5564                 // by oker-97 at ftunez.org
5565                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5566                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5567                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5568                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5569                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5570                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5571                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5572
5573                 // by polet-20 at ftunez.org
5574                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5575
5576                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5577                 '.gywiqe.cn',
5578                 '.jotapo.cn',
5579                 '.jywixa.cn',
5580
5581                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5582                 '.bawegap.cn',
5583                 '.buremyl.cn',
5584                 '.cilybut.cn',
5585                 '.cutufek.cn',
5586                 '.defypyr.cn',
5587                 '.femaxij.cn',
5588                 '.gelejo.cn',
5589                 '.gocylyv.cn',
5590                 '.kehiqaq.cn',
5591                 '.ninyjit.cn',
5592                 '.ruroruw.cn',
5593                 '.vetehow.cn',
5594
5595                 // 69.46.23.48 sabrosky-85 at ftunez.org
5596                 '.banyla.cn',
5597                 '.bubaqu.cn',
5598                 '.bygage.cn',
5599                 '.dafozy.cn',
5600                 '.kaxyjo.cn',
5601                 '.makyle.cn',
5602                 '.naleto.cn',
5603                 '.pidele.cn',
5604                 '.poqexa.cn',
5605                 '.pymaqo.cn',
5606                 '.qupiqy.cn',
5607                 '.reqefy.cn',
5608                 '.sopocy.cn',
5609                 '.vuhexo.cn',
5610                 '.weryso.cn',
5611                 '.wubula.cn',
5612                 '.xufuxy.cn',
5613                 '.zuhyxu.cn',
5614
5615                 // 69.46.23.48 by tribiani-97 at ftunez.org
5616                 '.dyxorod.cn',
5617                 '.firywoz.cn',
5618                 '.jixezyx.cn',
5619                 '.joveraw.cn',
5620                 '.jowaxup.cn',
5621                 '.nodarej.cn',
5622                 '.pimijom.cn',
5623                 '.tugupeg.cn',
5624
5625                 // 66.232.112.175 by abuse-here at inbox.ru
5626                 '.catybe.cn',
5627                 '.jytame.cn',
5628                 '.wygete.cn',
5629         ),
5630         '74.50.97.*' => array(
5631                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5632                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5633                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5634                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5635                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5636                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5637                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5638                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5639                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5640                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5641                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5642                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5643                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5644                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5645                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5646                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5647
5648                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5649                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5650                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5651                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5652                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5653                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5654                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5655                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5656                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5657                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5658                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5659                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5660                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5661                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5662                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5663                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5664                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5665                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5666                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5667
5668                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5669                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5670                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5671                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5672                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5673         ),
5674         'nijeoi at hotmai.com' => array(
5675                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5676                 '.bowij.com',
5677                 '.bozib.com',
5678                 '.cavux.com',
5679                 '.dipov.com',
5680                 '.gumoz.com',
5681                 '.hakyb.com',
5682                 '.hehyv.com',
5683                 '.hepyt.com',
5684                 '.howoj.com',
5685                 '.jywaz.com',
5686                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5687                 '.kyheq.com',
5688                 '.kyzad.com',
5689                 '.qicad.com',
5690                 '.qubyd.com',
5691                 '.mocyq.com',
5692                 '.muloq.com',
5693                 '.myxim.com',
5694                 '.nufyp.com',
5695                 '.waqog.com',
5696                 '.wyduc.com',
5697                 '.xefyv.com',
5698                 '.xomej.com',
5699                 '.xomip.com',
5700                 '.xykyl.com',
5701                 '.zakuw.com',
5702                 '.zeliw.com',
5703                 '.zimev.com',
5704                 '.zipif.com',
5705
5706                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5707                 '.tycoco.com',
5708
5709                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5710                 '.pufeqa.com',
5711
5712                 '.xehymi.com',
5713         ),
5714         'niichka at hotmail.com' => array(
5715                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5716                 '.aerosearch.info',
5717                 '.freader.info',
5718                 '.info4searchz.info',
5719                 '.nice-host.info',
5720                 '.realyfast.info',
5721                 '.resuts.info',
5722
5723                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5724                 '.bepoh.com',
5725                 '.gufiq.com',
5726                 '.kedyh.com',
5727                 '.pofyb.com',
5728                 '.rurid.com',
5729                 '.vucaj.com',
5730                 '.vuwir.com',
5731
5732                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5733                 '.bejefe.com',
5734
5735                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5736                 '.tidawu.com',
5737
5738                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5739                 '.rofuqa.com',
5740         ),
5741         'porychik at hot.ee' => array(  // by Igor
5742                 '.tedstate.info',       // "Free Web Hosting"
5743                 '.giftsee.com',
5744         ),
5745         'admin at pertol.info' => array(
5746                 // 81.0.195.189 "Free Web Hosting"
5747                 '.laparka.cn',
5748                 '.mirlos.cn',
5749                 '.oldmoms.cn',
5750
5751                 // 217.11.233.64(timed-out)
5752                 '.ejmpep.cn',   // by admin at pertol.info
5753                 '.ytere.cn',    // by admin at x2t.com
5754
5755                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5756                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5757
5758                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5759                 '.new-greece-travel.com',
5760                 '.peraonline.info',
5761         ),
5762
5763         'aofa at vip.163.com' => array(
5764                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5765                 '.5944.net',
5766         ),
5767         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5768                 '.maxrentcar.info',
5769                 '.newsonyericsson.info',
5770                 '.pornositeworld.biz',
5771                 '.rentcarweb.info',
5772                 '.xxxdomainsex.biz',
5773         ),
5774         'kopper1970 at gmail.com' => array(
5775                 '.cardealerall.info',           // by Green
5776                 '.donatecarsales.info',         // by Sipil
5777                 '.ringtonewilly.info',          // by Sipil
5778                 '.travelstraveling.info',       // by Chinik
5779                 '.viagrabuyonline.org',         // by Sipil
5780                 '.viagraorderbuy.com',          // by Anatol
5781                 '.worldcuptourism.info',        // by Sipil
5782         ),
5783         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5784                 '.globalinfoland.info',
5785                 '.goodlifesearch.info',
5786                 '.hotnetinfo.info',
5787                 '.hotpornmovies.org',
5788                 '.infopilot.info',
5789         ),
5790         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5791                 '.bang-bro.org',
5792                 '.datinghost.info',
5793                 '.hello-craulers.info',
5794                 '.free-blog-host.info',
5795                 '.sucking-boobs.info',
5796         ),
5797         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5798                 '.allcamsguide.info',
5799                 '.camerascams.info',
5800                 '.camerasera.info',
5801                 '.girlcamsworld.info',
5802                 '.hiddenlimocams.info',
5803                 '.redlivecams.info',
5804                 '.spycamsgear.info',
5805                 '.spycamssite.info',
5806                 '.supercamsusa.info',
5807                 '.thecamsnow.info',
5808         ),
5809         '87.242.116.81' => array(
5810                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5811                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5812                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5813                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5814                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5815         ),
5816         '208.70.75.153' => array(
5817                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5818                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5819                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5820                 '.cerc-on.info',
5821                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5822                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5823                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5824                 '.cerc-tr.info',
5825                 '.cerc-tw.info',
5826                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5827                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5828                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5829                 '.cerc-on.org',         // by cerca-one at ya.ru
5830                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5831                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5832                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5833                 '.cerc-tr.org',         // by cerca-one at ya.ru
5834                 '.cerc-tw.org',         // by cerca-one at ya.ru
5835                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5836                 '.cerca-fo.info',
5837                 '.cerca-no.info',
5838                 '.cerca-on.info',
5839                 '.cerca-sv.info',
5840                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5841                 '.cerca-te.info',
5842                 '.cerca-tr.info',
5843                 '.cerca-sx.org',
5844                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5845                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5846                 '.ricerca-fo.info',
5847                 '.ricerca-one.org',
5848                 '.ricerca-sv.org',
5849                 '.ricerca-sx.org',
5850                 '.ricerca-te.org',
5851                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5852                 '.subit01.org',
5853                 '.subit02.org',
5854                 '.subit03.org',
5855                 '.subit04.org',
5856                 '.subit05.org',
5857                 '.subit06.org',
5858                 '.subit01.info',
5859                 '.subit02.info',
5860                 '.subit03.info',
5861                 '.subit04.info',
5862                 '.subit05.info',
5863                 '.subit06.info',
5864         ),
5865         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5866                 '.5-base.com',
5867                 '.pharmacy-style.com',
5868         ),
5869         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5870                 '.ista-2006.ru',
5871                 '.wefas.ru',
5872         ),
5873         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5874                 '.tourismworldsite.info',
5875                 '.yourtourismtravel.info',
5876         ),
5877         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5878                 '.easyfindcar.info',
5879                 '.siteinfosystems.info',
5880         ),
5881         'smesh1155 at gmail.com' => array(
5882                 '.hospitalforyou.info',                 // by Gimmi
5883                 '.thephentermineonline.info',   // by Kipola
5884         ),
5885         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5886                 '.kiski.net.in',
5887                 '.pipki.org.in',
5888                 '.popki.ind.in',
5889                 '.siski.co.in',
5890         ),
5891         'tiptronikmike at mail.com' => array(
5892                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5893                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5894                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5895                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5896                 //'.i0sex.info',                // Michael
5897                 //'.i1sex.info',                // Michael
5898                 //'.i2sex.info',                // Martin
5899                 //'.i3sex.info',                // Martin
5900                 //'.i4sex.info',                // Adulterra
5901                 //'.i5sex.info',                // Adulterra
5902                 //[irvyz]6sex.info not found
5903                 '.i8sex.info',                  // by Martin
5904         ),
5905         'skuarlytronald at mail.com' => array(
5906                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5907                 '.girlsgoingmad.info',          // 64.27.13.120
5908                 '.girlsgonewildside.info',      // 64.27.13.120
5909         ),
5910         '66.232.109.250' => array(
5911                 '.1626pornporno.info',
5912                 '.1851pornporno.info',
5913                 '.1876pornporno.info',
5914                 '.476pornporno.info',
5915         ),
5916         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5917                 '.compactxxx.com',
5918                 '.eadulthost.com',
5919                 '.eadultview.com',
5920                 '.eroticpool.net',
5921                 '.ipornservice.com',
5922                 '.liveadulthost.com',
5923                 '.nudepal.com',
5924                 '.sweetservers.com',
5925         ),
5926         'support at orgija.org' => array(
5927                 '.assfuckporn.org',
5928                 '.dosugmos.org',
5929                 '.fuckporn.org',
5930                 '.girlsdosug.org',
5931                 '.girlsporno.org',
5932                 '.moscowintim.org',
5933                 '.pornass.org',
5934                 '.pornopussy.org',
5935                 '.progirlsporn.org',
5936                 '.pussypornogirls.org',
5937         ),
5938         '125.65.112.93' => array(
5939                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5940                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5941         ),
5942         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5943                 '.beta-google.com',
5944                 '.tv-reklama.info',
5945                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5946                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5947         ),
5948         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5949                 '.abobrinha.org',
5950                 '.aneurysmic.com',              // / not found
5951                 '.physcomp.org',                // / not found
5952                 '.seriedelcaribe2006.org',
5953                 '.refugeeyouthinamerica.com',
5954         ),
5955         'skip_20022 at yahoo.com' => array(
5956                 // 203.174.83.55
5957                 '.a28hosting.info',             // by Bill Jones
5958                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5959                 '.besthentai06.org',    // by yakon
5960         ),
5961         'USFINE.com' => array(
5962                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5963                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5964         ),
5965         '68.178.211.57' => array(
5966                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5967                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5968         ),
5969         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5970                 '.google-yahoo-msn.org',
5971                 '.expedia-travel.org',
5972         ),
5973         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5974                 '.emr5ce.org',
5975                 '.wfe7nv.org',
5976                 '.xyr99yx.org',
5977         ),
5978         '203.171.230.39' => array(
5979                 // by 51shell at 163.com
5980                 '.amatou-fc2.com',
5981
5982                 // registrar bizcn.com, iframe + cursor
5983                 '.playonlinenc.com',
5984                 '.playboss-jp.com',
5985         ),
5986         'Digi-Rock.com' => array(
5987                 '.rom776.com',
5988                 // owner-organization: DIGIROCK, INC.
5989                 // owner-email: domain-contact at digi-rock.com
5990                 // with an external ad-and-JavaScript,
5991                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
5992                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
5993         ),
5994         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
5995                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
5996                 '.getrun.cn',                           // 208.73.34.48
5997                 '.ipod-application.info',       // NO IP
5998                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
5999                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6000         ),
6001         'germerts at yandex.ru' => array(
6002                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6003                 '.andatra.info',
6004                 '.banchitos.info',
6005                 '.batareya.info',
6006                 '.blevota.info',
6007                 '.broneslon.info',
6008                 '.gamadril.info',
6009                 '.gipotenuza.info',
6010                 '.govnosaklo.info',
6011                 '.muflon.info',
6012                 '.termitnik.info',
6013                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6014         ),
6015         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6016                 '.acronis-true-image.info',
6017                 '.calcio-xp.info',
6018                 '.cosanova.info',
6019                 '.cose-rx.info',
6020                 '.dictip.info',
6021                 '.findig.info',
6022                 '.fotonow.info',
6023                 '.lavoro-tip.info',
6024                 '.loan-homes.info',
6025                 '.mionovita.info',
6026                 '.mustv.info',
6027                 '.newsnaked.info',
6028                 '.online-tod.info',
6029                 '.opakit.info',
6030                 '.opanow.info',
6031                 '.opriton.info',
6032                 '.porta-bl.info',
6033                 '.refdif.info',
6034                 '.xzmovie.info',
6035         ),
6036         '84.252.148.120 etc' => array(
6037                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6038                 '.planetavilton.info',  // 84.252.148.120
6039                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6040         ),
6041         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6042                 '.99jk.com',
6043                 '.99jk.com.cn',
6044                 '.99jk.cn',
6045         ),
6046         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6047                 '.kliktop.biz',
6048                 '.kliktop.org',
6049                 '.pharmatop.us',
6050                 '.supertop.us',
6051                 '.supervaizer.info',
6052         ),
6053         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6054                 '.freeamateursexx.info',        // 81.0.195.228
6055                 '.freeanalsexx.info',           // 217.11.233.97
6056                 '.freegaysexx.info',            // 81.0.195.228
6057         ),
6058         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6059                 '.abbhi.info',
6060                 '.gayblogguide.biz',
6061                 '.huope.info',
6062                 '.thebdsmday.info',
6063                 '.zioprt.info',                 // 89.149.228.237
6064         ),
6065         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6066                 '.boblisk.info',
6067                 '.factyri.info',
6068                 '.jorge1.info',
6069         ),
6070         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6071                 '.bestmindstorm.org',
6072                 '.redstoreonline.org',
6073         ),
6074         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6075                 '.8e8ae.net',
6076                 '.c-cock.com',
6077                 '.fa59eaf.com',
6078                 '.set-place.net',
6079                 '.sex-beauty.net',
6080         ),
6081         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6082                 '.tomdir.info',
6083                 '.tomdirdirect.info',
6084                 '.tomdirworld.info',
6085                 '.treton.info',
6086                 '.trefas.info',
6087                 '.tretonmondo.info',
6088                 '.unefout.info',
6089                 '.unefoutprojet.info',
6090                 '.unitfree.info',
6091                 '.vilret.info',
6092                 '.vilttown.info',
6093                 '.votrefout.info',
6094                 '.warmfind.info',
6095                 '.warptop.info',
6096                 '.wildtram.info',
6097                 '.xofind.info',
6098                 '.xopdiscover.info',
6099                 '.xopfind.info',
6100                 '.xoplocate.info',
6101                 '.xopseek.info',
6102                 '.xpfirst.info',
6103                 '.xphighest.info',
6104                 '.xptop.info',
6105         ),
6106         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6107                 '.myviagrasite.com',    // 80.74.153.2
6108                 '.thecanadianmeds.com', // 80.74.153.17
6109         ),
6110         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6111                 '.bigemot.com',                         // 217.11.233.34, / not found
6112                 '.espharmacy.com',                      // 217.11.233.34
6113                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6114                 '.ringtonecooler.com',          // 217.11.233.34
6115         ),
6116         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
6117                 // 220.166.64.44
6118                 '.okwit.com',
6119                 '.sakerver.com',
6120                 '.motewiki.net',
6121
6122                 '.8568985.com',         // 61.139.126.10 ns *.myhostadmin.net
6123
6124                 // 61.139.126.47, ns *.myhostadmin.net
6125                 '.playonlanei.com',
6126                 '.rmtfcne.com',
6127         ),
6128         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6129                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6130                 '.lookmedicine.info',           // 206.161.205.22
6131                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6132                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6133                 '.worldsitesearch.info',        // 209.8.40.59
6134         ),
6135         'lee.seery at gmail.com' => array(
6136                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6137                 '.lingvol.com',         // 64.21.34.55
6138                 '.micevol.com',         // 64.21.34.55
6139                 '.heyhey.info',         // 64.21.34.55  by anonymous
6140         ),
6141         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6142                 // 69-64-64-71.dedicated.abac.net
6143                 '.520-ard.info',
6144                 '.550bcards.info',
6145                 '.559-cads.info',
6146                 '.559caard.info',
6147                 '.565-caaard.info',
6148                 '.575cadr.info',
6149                 '.577cadrs.info',
6150                 '.590-acrds.info',
6151                 '.596-cadrs.info',
6152                 '.596caards.info',
6153                 '.596caaard.info',
6154                 '.asstablishingcads.info',
6155                 '.astablish-ard.info',
6156                 '.astablishcacrds.info',
6157                 '.begginers-acards.info',
6158                 '.begginersacrds.info',
6159                 '.beggingcaaard.info',
6160                 '.beginercacrds.info',
6161                 '.cacrdscreating.info',
6162                 '.caditbegging.info',
6163                 '.cadr-buildup.info',
6164                 '.cadr-establilsh.info',
6165                 '.cadrs-buildercredit.info',
6166                 '.cadrs570.info',
6167                 '.cads-565.info',
6168
6169                 // 69-64-64-113.dedicated.abac.net
6170                 '.interistacards.info',
6171                 '.intrust-ards.info',
6172                 '.intrustacrds.info',
6173                 '.lfixed-ard.info',
6174                 '.lowerate-ard.info',
6175                 '.lowpercentage-ard.info',
6176                 '.lowpercentageacrd.info',
6177         ),
6178         'acua at mail.ru' => array(
6179
6180                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6181
6182                         // by adventurer at allmyns.info
6183                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6184
6185                         // by webmaster at allmyns.info
6186                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6187                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6188                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6189                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6190                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6191                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6192                         '.riumh.cn',    // 84.16.226.28(*snip*)
6193                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6194                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6195                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6196
6197                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6198                 '.dns4babka.info',      // by acua at mail.ru
6199
6200                         // by golubcov at dns4babka.info
6201                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6202
6203                         // by webmaster at dns4babka.info
6204                         '.credh.cn',
6205                         '.fucfv.cn',
6206                         '.gdxnk.cn',
6207                         '.sqrrt.cn',
6208                         '.ywtmd.cn',
6209                         '.kncqy.cn',    // by webmaster at allmyns.info
6210
6211                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6212                 '.dedka2ns.info',       // by acua at mail.ru
6213
6214                         // by chasik at dedka2ns.info
6215                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6216
6217                         // by rochel at dedka2ns.info
6218                         '.fudhxjjqh.cn',
6219
6220                         // by webmaster at dedka2ns.info
6221                         '.ascpo.cn',
6222                         '.jgycr.cn',
6223                         '.nqdtt.cn',
6224                         '.oswde.cn',
6225                         '.qeyig.cn',
6226                         '.soqsx.cn',
6227                         '.ukncd.cn',
6228                         '.zijgb.cn',
6229
6230                 // 84.16.255.253(*snip*), / says 'noy found'
6231                 '.dns4dedka.info',      // by acua at mail.ru
6232
6233                         // by aleon at dns4dedka.info
6234                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6235
6236                         // by dig at dns4dedka.info
6237                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6238                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6239                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6240                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6241                         '.heulw.cn',    // 84.16.226.217(*snip*)
6242                         '.hissw.cn',    // 84.16.249.240(*snip*)
6243                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6244                         '.obwew.cn',    // 84.16.251.218(*snip*)
6245                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6246                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6247                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6248                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6249                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6250                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6251                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6252                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6253                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6254                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6255                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6256                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6257
6258                         // by la at dns4dedka.info
6259                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6260                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6261                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6262                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6263                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6264                         '.eothy.cn',    // 84.16.249.241(*snip*)
6265                         '.epocy.cn',    // 84.16.251.220(*snip*)
6266                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6267                         '.faacz.cn',    // 84.16.251.222(*snip*)
6268                         '.filun.cn',    // 89.149.196.72(*snip*)
6269                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6270                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6271                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6272                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6273                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6274                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6275                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6276                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6277                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6278                         '.krumo.cn',    // 84.16.226.217(*snip*)
6279                         '.lbava.cn',    // 217.20.112.102(*snip*)
6280                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6281                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6282                         '.npovm.cn',    // 84.16.226.28(*snip*)
6283                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6284                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6285                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6286                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6287                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6288                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6289                         '.qydph.cn',    // 89.149.228.163(*snip*)
6290                         '.rxens.cn',    // 89.149.196.72(*snip*)
6291                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6292                         '.srths.cn',    // 84.16.251.222(*snip*)
6293                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6294                         '.unquz.cn',    // 84.16.251.223(*snip*)
6295                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6296                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6297                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6298                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6299                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6300                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6301
6302                         // by le at dns4dedka.info
6303                         '.goslw.cn',    // 84.16.251.220(*snip*)
6304                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6305                         '.iewik.cn',    // 84.16.255.254(*snip*)
6306                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6307                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6308                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6309                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6310                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6311                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6312                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6313                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6314                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6315                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6316                         '.qniww.cn',    // 84.16.251.218(*snip*)
6317                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6318                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6319
6320                         // by skspb at dns4dedka.info
6321                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6322
6323                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6324                         '.bcpnb.cn',
6325                         '.cfbpr.cn',
6326                         '.dnndb.cn',
6327                         '.ekwme.cn',
6328                         '.iutps.cn',
6329                         '.ryftj.cn',
6330                         '.vxqcb.cn',
6331
6332                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6333                         // by apple at ns2best.info
6334                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6335                         // by paulwolf at ns2best.info
6336                         '.ifytzq.cn',
6337
6338                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6339                         // by pigato at sedns.info
6340                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6341                         // by roschem at sedns.info
6342                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6343                         // by op at sedns.info
6344                         '.bumfn.cn',
6345                         '.csmlu.cn',
6346                         '.epcwi.cn',
6347                         '.krwzn.cn',
6348                         '.lkvcp.cn',
6349                         '.mvmkh.cn',
6350                         '.nwpeg.cn',
6351                         '.rnqol.cn',
6352                         '.tyuaf.cn',
6353                         '.ucysa.cn',
6354                         '.vhyom.cn',
6355                         '.wtstu.cn',
6356                         '.zslxr.cn',
6357         ),
6358         'gilvcta sy jilbertsbram.com' => array(
6359                 // 206.53.51.126
6360                 '.dsfljkeilm1.cn',
6361                 '.dsfljkeilm2.cn',
6362                 '.dsfljkeilm3.cn',
6363                 '.dsfljkeilm4.cn',
6364                 '.dsfljkeilm5.cn',
6365                 '.dsfljkeilm6.cn',
6366                 '.dsfljkeilm7.cn',
6367                 '.dsfljkeilm8.cn',
6368                 '.dsfljkeilm9.cn',
6369                 '.dsfljkeilm10.cn',
6370         ),
6371         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6372
6373                 // 69.64.82.76(*.dedicated.abac.net)
6374                 '.bruised-criedit.info',
6375                 '.bruised-crtedit.info',
6376                 '.bruised-czrd.info',
6377                 '.bruisedcreditcars.info',
6378                 '.bruisedcreitcard.info',
6379                 '.bruisedcreitd.info',
6380                 '.buliderscreadet.info',
6381                 '.cleaningup-cdit.info',
6382                 '.cleaningup-cedict.info',
6383                 '.cleaningup-cerdic.info',
6384                 '.cleanup-crrd.info',
6385
6386                 // 69.64.82.77(*.dedicated.abac.net)
6387                 '.bruised-crediot.info',
6388                 '.bruised-credtid.info',
6389                 '.bruisedcriet.info',
6390                 '.bruisedredit.info',
6391                 '.buliders-crdt.info',
6392                 '.buliders-cre4dit.info',
6393                 '.buliders-creadt.info',
6394                 '.buliders-credcards.info',
6395                 '.buliders-credictcard.info',
6396                 '.cleaningupccreditcards.info',
6397                 '.cleaningupcdedit.info',
6398                 '.cleaningupcedirt.info',
6399                 '.cleaningupceidt.info',
6400                 '.cleaningupcrasd.info',
6401                 '.cleaningupcreait.info',
6402
6403                 // 69.64.82.78(*.dedicated.abac.net)
6404                 '.bruised-cridet.info',
6405                 '.bruised-drecit.info',
6406                 '.bruised-reditcards.info',
6407                 '.bruisedcredikt.info',
6408                 '.bruisedcredith.info',
6409                 '.bruisedcredtid.info',
6410                 '.cleanup-criet.info',
6411                 '.cleanup-csrds.info',
6412                 '.cleanup-dards.info',
6413
6414                 // 69.64.82.79(*.dedicated.abac.net)
6415                 '.bruised-crediotcards.info',
6416                 '.bruised-creditcar.info',
6417                 '.bruised-creid.info',
6418                 '.bruised-creidtcard.info',
6419                 '.buliders-crdit.info',
6420                 '.buliders-creadet.info',
6421                 '.cleaningup-ceridt.info',
6422                 '.cleaningupcrecit.info',
6423                 '.cleaningupccritcard.info',
6424                 '.cleanupdredit.info',
6425                 '.cleanupredit.info',
6426         ),
6427         '.malwarealarm.com',
6428                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6429                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6430                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6431         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6432         'Inet-Traffic.com' => array(
6433                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6434                 //'.dcomm.com',         // by D Communications Inc. S.A.
6435
6436                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6437                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6438                 // ...
6439                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6440                 // ...
6441                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6442                 // ...
6443                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6444                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6445                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6446                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6447                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6448                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6449                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6450                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6451                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6452                 // ...
6453                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6454                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6455                 // ...
6456                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6457                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6458                 // ...
6459                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6460                 // ...
6461                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6462                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6463                 // ...
6464                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6465         ),
6466         'andreyletov at yahoo.com related' => array(
6467                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6468                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6469                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6470
6471                 // 89.248.99.118 by anonymous
6472                 '.lpgpharmacy.com',
6473                 '.onlybestgalleries.com',
6474                 '.viagrabest.info',
6475                 '.viagrabestprice.info',
6476                 '.viagratop.info',
6477
6478                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6479                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6480                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6481         ),
6482         'alrusnac at hotmail.com' => array(
6483                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6484                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6485         ),
6486         '203.116.63.123' => array(
6487                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6488                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6489         ),
6490         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6491                 '.autotowncar.cn',              // 69.73.146.184
6492                 '.badgirlhome.cn',              // 69.73.146.186
6493         ),
6494         'Wmp.co.jp' => array(
6495                 // 219.94.134.208, ns *.dns.ne.jp, adult
6496                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6497                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6498                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6499         ),
6500         'Macherie.tv' => array(
6501                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6502                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6503                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6504         ),
6505         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6506                 '.yemine.info',
6507                 '.fr4f3ds.info',
6508         ),
6509         '75.126.129.222' => array(
6510                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6511                 '.viagrabuycheap.info', // ns *.advernsserver.com
6512                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6513         ),
6514         'sqr at bk.ru' => array(
6515                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6516                 '.masserch.info',               // "Free Web Hosting", spam
6517                 '.miserch.info',
6518         ),
6519         'gangstadra at hotmail.com' => array(
6520                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6521                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6522                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6523                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6524         ),
6525         'hosan by front.ru' => array(
6526                 '.salihome.info',                               // 206.53.51.155(non-existent)
6527                 '.online-freesearch.com',               // 206.53.51.155
6528                 '.choosefinest.com',                    // 206.53.51.157
6529                 '.carsprojects.com',                    // 206.53.51.159
6530                 '.sport-brands.com',                    // 206.53.51.167
6531                 '.online-pharmaceutics.com',    // 206.53.51.168
6532         ),
6533         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6534                 '.canadians-health.com',        // by andreyletov at yahoo.com
6535                 '.cialischeap.info',
6536                 '.superrv.info',
6537         ),
6538         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6539                 '.hatbi.com',
6540                 '.justrty.com',
6541                 '.kol2you.com',
6542                 '.kolplanet.com',
6543                 '.myrty.com',
6544                 '.officialrty.com',
6545                 '.pbaol.com',
6546                 '.planetkol.com',
6547         ),
6548         'Abra1.com' => array(
6549                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6550                 '.abra1.com',           // by info at maisontropicale.com
6551                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6552
6553                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6554                 '.abra2.com',           // by domain at anondns.org
6555                 '.abra3.com',           // by domain at anondns.org
6556         ),
6557         'topdomainz at gmail.com' => array(
6558                 // 217.73.201.237 , ns *.parked.ru
6559                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6560                 '.aboutgooglegroup.info',
6561                 '.aboutgoogleimage.info',
6562                 '.aboutgooglemail.info',
6563                 '.aboutgooglemap.info',
6564                 '.aboutgooglenews.info',
6565                 '.aboutgooglevideo.info',
6566                 '.bestgoogleearth.info',
6567                 '.magicgoogleearth.info',
6568                 '.magicgooglemap.info',
6569                 '.magicgooglevideo.info',
6570
6571                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6572                 '.slajzer.info',
6573                 '.tonoscelular.info',
6574                 '.tonosmotorola.info',
6575         ),
6576         '89.149.208.23' => array(
6577                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6578                 '.w3rar.info',
6579                 '.w3sex.info',
6580                 '.w3zip.info',
6581                 '.w3in.info',
6582                 '.w3out.info',
6583
6584                 // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript
6585                 '.2vip.info',
6586                 '.4cat.info',
6587                 '.8vip.info',
6588                 '.9upp.info',
6589         ),
6590         'zorkin87 at mail.ru' => array(
6591                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6592                 '.ruqore.com',
6593                 '.goxama.com',
6594                 '.cazebi.com',
6595                 '.fukeqa.com',
6596                 '.fydoge.com',
6597                 '.jukaly.com',
6598                 '.jumoga.com',
6599                 '.jumuxo.com',
6600                 '.tyriva.com',
6601                 '.vudyho.com'
6602         ),
6603         'jessicaeagloff at yahoo.co.uk' => array(
6604                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6605                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6606                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6607                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6608         ),
6609         'qbbs at xinoffice.com' => array(
6610                 // ns *.name-services.com
6611                 '.lingage.com',         // 8.15.231.118
6612                 '.puksins.com',         // IP not allocated now
6613         ),
6614         'advertolog at gmail.com' =>
6615                 // 81.0.250.86(network.upl.cz => non-existent) or
6616                 // 217.11.233.27
6617                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6618         'contact at aboutdomain.com' => array(
6619                 '.lopieur0.com',        // Not match but used
6620                 '.lopieur1.com',        // Not match but used
6621                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6622         ),
6623         'info at cash4wm.biz related' => array(
6624                 // 84.16.233.12(*.internetserviceteam.com)
6625                 '.newsblogforu.com',
6626
6627                 // 84.16.235.141()
6628                 '.informator4you.com',
6629
6630                 // 84.16.240.68(*.internetserviceteam.com)
6631                 '.absolute-best-site.com',
6632                 '.new-blog-for-you.com',
6633
6634                 // 84.16.240.69(*.internetserviceteam.com)
6635                 '.best-sport-blog.com',
6636                 '.big-internet-site.com',
6637                 '.brendsite.com',
6638                 '.my-news-blog.com',
6639
6640                 // 84.16.242.123(*.internetserviceteam.com)
6641                 '.best-news-blog.com',
6642                 '.site-with-content.com',
6643
6644                 // The same method with info at cash4wm.biz
6645                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6646                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6647                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6648                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6649                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6650                 '.bloginfo4u.info',             // 89.149.247.25
6651         ),
6652         'kerjy at yahoo.com' => array(
6653                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6654                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6655                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6656                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6657                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6658         ),
6659         'vme at hotmail.ru' => array(
6660                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6661                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6662         ),
6663
6664         // C-2: Lonely domains (buddies not found yet)
6665         '.0721-4404.com',
6666         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6667         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6668         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6669         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6670         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6671         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6672         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6673         '.0annie.info',
6674         '.6i6.de',
6675         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6676         '.angioco.com',                 // 62.37.112.100, gamble
6677         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6678         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6679         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6680         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6681         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6682         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6683         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6684         '.allworlddirect.info', // Forbidden
6685         '.amoreitsex.com',
6686         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6687         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6688         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6689         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6690         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6691         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6692         '.auto-car-cheap.org',
6693         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6694         '.baurish.info',
6695         '.bestop.name',
6696         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6697         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6698         '.bestshopfinder.info',
6699         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6700         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6701         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6702         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6703         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6704         '.catkittenmagazines.org',              // 87.118.97.117
6705         '.chatwalker.com',              // 124.32.230.65
6706         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6707         '.covertarena.co.uk',   // by Wayne Huxtable
6708         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6709         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6710         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6711         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6712         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6713         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6714         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6715         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6716         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6717         '.easyshopusa.com',             // by riter (riter at nm.ru)
6718         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6719         '.edu.ph',                              // "philippine network foundation inc"
6720         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6721         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6722         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6723         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6724         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6725         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6726         '.filthserver.com',             // sales at onlinemarketingservices.biz
6727         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6728         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6729         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6730         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6731         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6732         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6733         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6734         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6735         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6736         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6737         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6738         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6739         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6740         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6741         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6742         '.gm-exchange.jp',              // 210.188.216.49 RMT
6743         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6744         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6745         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6746         '.greatbestwestern.org',// by gao.wungao at gmail.com
6747         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6748         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6749         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6750         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6751         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6752         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6753         '.hostuju.cz',                  // ns banan.cz, banan.it
6754         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6755         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6756         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6757         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6758         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6759         '.infradoc.com',
6760         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6761         '.ismarket.com',                // Google-hiding. intercage.com related IP
6762         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6763         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6764         '.itsexosit.net',
6765         '.itxxxit.net',
6766         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6767         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6768         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6769         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6770         '.kingtools.de',
6771         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6772         '.leucainfo.com',
6773         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6774         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6775         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6776         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6777         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6778         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6779         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6780         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6781         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6782         '.megvideochatlive.info',       // Bad seo
6783         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6784         '.mncxvsm.info',                // 217.11.233.105, / blank
6785         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6786         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6787         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6788         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6789         '.mxsupportmailer.com',
6790         '.next-moneylife.com',  // RMT
6791         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6792         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6793         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6794         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6795         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6796         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6797         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6798         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6799         '.onlineviagra.de',
6800         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6801         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6802         '.ozomw.info',
6803         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6804         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6805         '.perevozka777.ru',             // by witalik at gmail.com
6806         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6807         '.pills-storage.com',   // by
6808         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6809         '.porkyhost.com',               // 79965 at whois.gkg.net
6810         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6811         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6812         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6813         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6814         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6815         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6816         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6817         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6818         '.quality-teen-porn-photo.com', // by info at densa.info
6819         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6820         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6821         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6822         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6823         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6824         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6825         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6826         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6827         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6828         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6829         '.sexamoreit.com',
6830         '.sexforit.com',
6831         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6832         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6833         '.sirlook.com',
6834         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6835         '.sepcn.info',                  // / not found
6836         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6837         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6838         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6839         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6840         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6841         '.superverizonringtones.com',   // by joshua at list.ru
6842         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6843         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6844         '.thehostcity.com',             // Domains by Proxy
6845         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6846         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6847         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6848         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6849         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6850         '.topmeds10.com',
6851         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6852         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6853         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6854         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6855         '.unctad.net',                  // by gfdogfd at lovespb.com
6856         '.vacant.org.uk',
6857         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6858         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6859         '.virtualsystem.de',
6860         '.vdxhost.com',
6861         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6862         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6863         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6864         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6865         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6866         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6867         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6868         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6869         '.whoop.to',                    // RMT
6870         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6871         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6872         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6873         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6874         '.wwwna.info',                  // / 404 Not Found
6875         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6876         '.xamorexxx.net',
6877         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6878         '.xsessox.com',
6879         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6880         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6881         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6882         '.zyguo.info',                  // ns globoxhost.net
6883         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6884
6885
6886         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6887         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6888         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6889         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6890         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6891
6892         // The same approach of 'acua at mail.ru'
6893         '.iblcqms.cn',                  // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
6894         '.aasghwf.cn',                  // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
6895         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info
6896         '.klmnei.cn',                   // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info
6897         '.lumyjugmn.cn',                // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6898         '.lxwxjzpiy.cn',                // TODO:
6899         '.qyxswynd.cn',                 // TODO:
6900         '.ugivorm.cn',                  // TODO:
6901         '.uxmrscgdi.cn',                // TODO:
6902
6903         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6904
6905         // C-3: Not classifiable (information wanted)
6906         //
6907         // Something incoming to pukiwiki related sites
6908         'nana.co.il related' => array(
6909                 '.planetnana.co.il',
6910                 '.nana.co.il',
6911         ),
6912 );
6913
6914 // --------------------------------------------------
6915
6916 $blocklist['D'] = array(
6917         // D: Sample setting of
6918         // "Third party in good faith"s
6919         //
6920         // Hosts shown inside of the implanted contents,
6921         // not used via spam, but maybe useful to detect these contents
6922         //
6923         // 'RESERVED',
6924 );
6925
6926 // --------------------------------------------------
6927
6928 $blocklist['E'] = array(
6929         // E: Sample setting of
6930         // Promoters
6931         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6932         //  Ads, Business promotions, SEO, etc)
6933         //
6934         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
6935         // Sometimes they may promote each other
6936
6937         '15-Mail.com related' => array(
6938                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
6939                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6940                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
6941                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
6942                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
6943         ),
6944         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
6945         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
6946         'E-brainers.com related' => array(
6947                 // 202.212.14.101
6948                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
6949                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
6950                 '.my-tune.jp',                                  // by brainers Inc.
6951                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
6952                 '.weekle.jp',                                   // by brainers Inc.
6953
6954                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
6955                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
6956                 '.3minutes-marketing-club.com', // by Fujio
6957                 '.affiliate-vampire.com',               // by Masatoshi
6958                 '.article-site-power-package.com',      // by Masatoshi
6959                 '.audio-marketing-club.com',    // by Fujio
6960                 '.brainers-task-manager.com',   // by Masatoshi
6961                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
6962                 '.brainersbuzz.com',                    // by Masatoshi
6963                 '.den4renz-marketing-club.com', // by Fujio
6964                 '.english-contents-club.com',   // by Masatoshi
6965                 '.fly-in-ads-japan.com',                // by Fujio
6966                 '.free-resalerights-giveaway.com',      // by Fujio
6967                 '.freegiveawaysecret.com',              // by Masatoshi
6968                 '.guaranteedvisitorpro.com',    // by Masatoshi
6969                 '.havads-japan.com',                    // by Masatoshi
6970                 '.info-business123.com',                // by Fujio
6971                 '.instant-marketing-club.com',  // by Fujio
6972                 '.internetmarketinggorinjyu.com',       // by Masatoshi
6973                 '.marketing-force-japan.com',   // by Fujio
6974                 '.masatoshikobayashi.com',              // by Fujio
6975                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
6976                 '.replytomatt.com',                             // by Fujio
6977                 '.santa-deal.com',                              // by Fujio
6978                 '.santa-deal-summer.com',               // by Fujio
6979                 '.scratch-card-factory.com',    // by Masatoshi
6980                 '.script4you-japan.com',                // by Fujio
6981                 '.sell1000000dollarinjapan.com',// by Fujio
6982                 '.squeeze-page-secret.com',             // by Masatoshi
6983                 '.viral-blog-square.com',               // by Fujio
6984                 '.viralarticle.com',                    // by Fujio
6985                 '.wowhoken.com',                                // by Fujio
6986
6987                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
6988                 '.brainerstelevision.com',
6989                 '.demosite4you.com',
6990                 '.keywordcatcherpro.com',
6991                 '.script-marketing-club.com',
6992
6993                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
6994                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
6995                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
6996                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
6997                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
6998                 '.brainerscode.com',    // by akada
6999                 '.brainerslive.com',    // by domain
7000                 '.brainersreview.com',  // by domain
7001                 '.brainerstest.com',    // by akada
7002                 '.otosecret.com',               // by domain
7003                 '.ultimate-marketing-weapon.com',       // by akada
7004                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7005                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7006
7007                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7008                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7009         ),
7010         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7011         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7012         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7013         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7014         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7015                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7016                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7017                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7018
7019                 // Redirects and affiliates:
7020                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7021                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7022                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7023                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7024                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7025                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7026                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7027                 //   ...
7028
7029                 // Other suggestions:
7030                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7031
7032                 // Blog posting at the same time
7033                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7034                 //   2007/06/13 e123.info/archives/76
7035                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7036                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7037                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7038         ),
7039         'info at kobeweb.jp' => array(
7040                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7041                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7042                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7043         ),
7044         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7045         'Infocart.jp' => array(         // by wai at infocart.jp
7046                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7047                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7048                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7049
7050                 //inetnum:      60.32.154.176 - 60.32.154.183
7051                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7052                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7053         ),
7054         'Info-sniper.com' => array(
7055                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7056                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7057                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7058         ),
7059         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7060         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7061         'JunSuzuki.com' => array(       // e-brainers.com related
7062                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7063                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7064         ),
7065         'Natsukih.net' => array(
7066                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7067                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7068                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7069                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7070
7071                 // by info at natsukih.net
7072                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7073                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7074                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7075                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7076                 '.5muryoureport.com',   // 210.251.253.230
7077                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7078                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7079                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7080         ),
7081         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7082                 '.11kanji.com',         // 211.10.131.88
7083                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7084                 '.point-park.com',      // 211.10.131.88
7085                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7086         ),
7087         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7088         'PRJAPAN.co.jp' => array(
7089                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7090                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7091                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7092                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7093                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7094                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7095         ),
7096         'Rakuten.co.jp' => array(
7097                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7098                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7099         ),
7100         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7101         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7102         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7103         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7104                 '.e123.info',
7105                 '.ialchemist.net',
7106                 '.j012.net',
7107                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7108         ),
7109         'Viscose.jp' => array(
7110                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7111                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7112         ),
7113         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7114 );
7115
7116 // --------------------------------------------------
7117
7118 $blocklist['Z'] = array(
7119         // Z: Yours
7120         //
7121         //'',
7122         //'',
7123         //'',
7124 );
7125
7126 ?>