spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.195 2009/12/13 14:27:07 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 //      'official/dev'  => FALSE,
  45 );
  46
  47 // 'list': Normal list
  48 $blocklist['list'] = array(
  49         'A-1'           => TRUE,        // General redirection services
  50         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  51         'B-1'           => TRUE,        // Web N.M spaces
  52         'B-2'           => TRUE,        // Jacked contents, something implanted
  53         'C'                     => TRUE,        // Exclusive spam domains
  54         //'D'           => TRUE,        // "Third party in good faith"s
  55         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  56         'Z'                     => TRUE,        // Yours
  57 );
  58
  59
  60 // --------------------------------------------------
  61 // Ignorance list
  62
  63 $blocklist['goodhost'] = array(
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65 );
  66
  67 $blocklist['official/dev'] = array(
  68         // PukiWiki-official/dev specific
  69         'pukiwiki.sourceforge.jp',
  70         '.nyaa.tk',     // (Paid *.tk domain, Expire on 2008-05-19)
  71         '.wanwan.tk',   // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         'emasaka.blog65.fc2.com',       // Text-to-Impress converter
  73         'ifastnet.com',                         // Server hosting
  74         'threefortune.ifastnet.com',    // Server hosting
  75         'sirakaba.s21.xrea.com',                // Ratbeta, known as PukiWiki hacker
  76         'desperadoes.biz',                      // YEAR OF THE CAT, PukiWiki skin designer
  77 );
  78
  79
  80 // --------------------------------------------------
  81 // A: Sample setting of
  82 // Existing URI redirection or masking services
  83
  84 $blocklist['A-1'] = array(
  85
  86         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  87         // web-based proxy, DNS subdomains, etc
  88         // http://en.wikipedia.org/wiki/URL_redirection
  89         //
  90         // as known as cheap URI obscuring services today,
  91         // for spammers and affiliate users dazed by money.
  92         //
  93         //   Messages from forerunners:
  94         //     o-rly.net
  95         //       "A URL REDIRECTION SERVICE GONE BAD"
  96         //       "SORRY, TRULY"
  97         //     smcurl.com
  98         //       "Idiots were using smcURL to shrink URLs and
  99         //        send them out via spam."
 100         //     symy.jp
 101         //       "One or more users are using our URL redirect
 102         //        service for spam/botnet.
 103         //        So we closed this service."
 104         //     tinyclick.com
 105         //       "...stop offering it's free services because
 106         //        too many people were taking advantage of it"
 107         //     xjs.org
 108         //       "We have been forced to close this facility
 109         //        due to a minority of knuckle draggers who
 110         //        abused this web site."
 111         //
 112         // Please notify us about this list with reason:
 113         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 114         //
 115         '0nz.org',
 116         '0rz.tw',
 117         '0url.com',
 118         '0zed.info',
 119         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 120         '123.que.jp',
 121         '12url.org',
 122         '*.15h.com',
 123         '*.1dr.biz',
 124         '1K.pl' => array(
 125                 '*.1k.pl',
 126                 '*.5g.pl',
 127                 '*.orq.pl',
 128         ),
 129         '1nk.us',
 130         '1url.org',
 131         '1url.in',
 132         '1webspace.org',
 133         '2Ch.net' => array(
 134                 'ime.nu',
 135                 'ime.st',
 136         ),
 137         '2ch2.net',
 138         '2hop4.com',
 139         '2s.ca',
 140         '2site.com',
 141         '2url.org',
 142         '301url.com',
 143         '32url.com',
 144         '.3dg.de',
 145         '*.4bb.ru',
 146         'big5.51job.com',       ///gate/big5/
 147         '5jp.net',
 148         '.6url.com',
 149         '*.6x.to',
 150         '7ref.com',
 151         '82m.org',
 152         '*.8rf.com',
 153         '98.to',
 154         'abbrv.co.uk',
 155         '*.abwb.org',
 156         'acnw.de',
 157         'Active.ws' => array(
 158                 '*.321.cn',
 159                 '*.4x2.net',
 160                 'active.ws',
 161                 '*.better.ws',
 162                 '*.here.ws',
 163                 '*.mypiece.com',
 164                 '*.official.ws',
 165                 '*.ouch.ws',
 166                 '*.premium.ws',
 167                 '*.such.info',
 168                 '*.true.ws',
 169                 '*.visit.ws',
 170         ),
 171         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 172         'aifam.com',
 173         'All4WebMasters.pl' => array(
 174                 '*.ovp.pl',
 175                 '*.6-6-6.pl',
 176         ),
 177         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 178         'amoo.org',
 179         'web.archive.org',              ///web/2
 180         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 181                 'jmp2.net',
 182                 '2me.tw',
 183         ),
 184         'ataja.es',
 185         'ATBHost.com' => array(
 186                 '*.atbhost.com',
 187                 '*.bzhost.net',
 188         ),
 189         'atk.jp',
 190         'clearp.ath.cx',
 191         'athomebiz.com',
 192         'aukcje1.pl',
 193         'beam.to',
 194         '*.bebo.com',
 195         'beermapping.com',
 196         'besturl.in',
 197         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 198         'biglnk.com',
 199         'bingr.com',
 200         'bit.ly',
 201         'bittyurl.com',
 202         '*.bizz.cc',
 203         '*.blo.pl',
 204         '*.bo.pl',
 205         'briefurl.com',
 206         'brokenscript.com',
 207         'BucksoGen.com' => array(
 208                 '*.bucksogen.com',
 209                 '*.bulochka.org',
 210                 '*.korzhik.org',
 211                 '*.kovrizhka.org',
 212                 '*.pirozhok.org',
 213                 '*.plushka.org',
 214                 '*.pryanik.org',
 215                 '*.sushka.org',
 216         ),
 217         'budgethosts.org',
 218         'budu.com',                             // by peter.eder at imcworld.com
 219         '*.buzznet.com',
 220         '*.bydl.com',
 221         'C-O.IN' => array(
 222                 '*.c-o.cc',
 223                 '*.c-o.in',
 224                 '*.coz.in',
 225                 '*.cq.bz',
 226         ),
 227         'c64.ch',
 228         'c711.com',
 229         '*.cej.pl',
 230         'checkasite.net',
 231         'url.chefhost.com',
 232         '*.chicappa.jp',
 233         'chilicity.com',
 234         'big5.china.com',               ///gate/big5/
 235         'chopurl.com',
 236         'christopherleestreet.com',
 237         'cintcm.com',
 238         '*.cjb.net',
 239         'clipurl.com',
 240         '*.co.nr',
 241         'Comtech Enterprises ' => array(        // comteche.com
 242                 'tinyurl.name',
 243                 'tinyurl.us',
 244         ),
 245         'Cool168.com' => array(
 246                 '*.cool158.com',
 247                 '*.cool168.com',
 248                 '*.ko168.com',
 249                 '*.ko188.com',
 250         ),
 251         'Coolurl.de' => array(
 252                 'coolurl.de',
 253                 'dornenboy.de',
 254                 'eyeqweb.com',
 255                 'hardcore-porn.de',
 256                 'maschinen-bluten-nicht.de',
 257         ),
 258         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 259         'cutalink.com',
 260         '*.da.cx',
 261         '*.da.ru',
 262         'dae2.com',
 263         'dephine.org',
 264         'desiurl.com',
 265         'dhurl.com',
 266         'digbig.com',
 267         'Digipills.com' => array(
 268                 '*.digipills.com',
 269                 'minilien.com',
 270                 'tinylink.com',
 271         ),
 272         '*.discutbb.com',
 273         'DL.AM' => array(
 274                 '*.cx.la',
 275                 '*.dl.am',
 276         ),
 277         '*.dl.pl',
 278         '*.dmdns.com',
 279         'doiop.com',
 280         'drlinky.com',
 281         'durl.us',
 282         '*.dvdonly.ru',
 283         '*.dynu.ca',
 284         'dwarf.name',
 285         '*.eadf.com',
 286         'easyURL.net' => array(
 287                 '*.easyurl.net',
 288                 '.goshrink.com',
 289                 'ushrink.com',
 290         ),
 291         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 292                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 293                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 294                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 295                 //   "Keep continuing to seek originality and contribute it to local,
 296                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 297                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 298                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 299                 // I'm so much impressed of the situation around this imported one today.
 300         'elfurl.com',
 301         'eny.pl',
 302         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 303                 '.mywiitime.com',
 304                 '.surfindark.com',              // webmaster at etechfocus.com
 305                 '.surfinshade.com',
 306                 '.surfinshadow.com',
 307                 '.surfinwind.com',
 308                 '.topsecretlive.com',
 309         ),
 310         '*.eu.org',
 311         'F2B.be' => array(
 312                 '*.f2b.be',
 313                 '*.freakz.eu',
 314                 '*.n0.be',
 315                 '*.n3t.nl',
 316                 '*.short.be',
 317                 '*.ssr.be',
 318                 '*.tweaker.eu',
 319         ),
 320         '*.fancyurl.com',
 321         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 322                 'blue11.jp',
 323                 'fanznet.com',
 324                 'katou.in',
 325                 'mymap.in',
 326                 'saitou.in',
 327                 'satou.in',
 328                 'susan.in',
 329         ),
 330         '.fe.pl',                       // Redirection and subdomain
 331         'ffwd.to',
 332         'url.fibiger.org',
 333         'FireMe.to' => array(
 334                 'fireme.to',
 335                 'nextdoor.to',
 336                 'ontheway.to',
 337         ),
 338         'flingk.com',
 339         'flog.jp',                      // careless redirector and bbs
 340         'fm7.biz',
 341         'fnbi.jp',
 342         '*.fnbi.jp',
 343         'forgeturl.com',
 344         '*.free.bg',
 345         'Freeservers.com' => array(     // United Online Web Services, Inc.
 346                 '*.4mg.com',
 347                 '*.4t.com',
 348                 '*.8m.com',
 349                 '*.8m.net',
 350                 '*.8k.com',
 351                 '*.faithweb.com',
 352                 '*.freehosting.net',
 353                 '*.freeservers.com',
 354                 '*.gq.nu',
 355                 '*.htmlplanet.com',
 356                 '*.itgo.com',
 357                 '*.iwarp.com',
 358                 '*.s5.com',
 359                 '*.scriptmania.com',
 360                 '*.tvheaven.com',
 361         ),
 362         '*.freewebpages.com',
 363         'FreeWebServices.net' => array( // Host Department LLC
 364                 '*.about.gs',   // Dead?
 365                 '*.about.tc',
 366                 '*.about.vg',
 367                 '*.aboutus.gs',
 368                 '*.aboutus.ms',
 369                 '*.aboutus.tc',
 370                 '*.aboutus.vg',
 371                 '*.biografi.biz',
 372                 '*.biografi.info',
 373                 '*.biografi.org',
 374                 '*.biografi.us',
 375                 '*.datadiri.biz',
 376                 '*.datadiri.cc',
 377                 '*.datadiri.com',
 378                 '*.datadiri.info',
 379                 '*.datadiri.net',
 380                 '*.datadiri.org',
 381                 '*.datadiri.tv',
 382                 '*.datadiri.us',
 383                 '*.ecv.gs',
 384                 '*.ecv.ms',
 385                 '*.ecv.tc',
 386                 '*.ecv.vg',
 387                 '*.eprofile.us',
 388                 '*.go2net.ws',
 389                 '*.hits.io',
 390                 '*.hostingweb.us',
 391                 '*.hub.io',
 392                 '*.indo.bz',
 393                 '*.indo.cc',
 394                 '*.indo.gs',
 395                 '*.indo.ms',
 396                 '*.indo.tc',
 397                 '*.indo.vg',
 398                 '*.infinitehosting.net',
 399                 '*.infinites.net',
 400                 '*.lan.io',
 401                 '*.max.io',
 402                 '*.mycv.bz',
 403                 '*.mycv.nu',
 404                 '*.mycv.tv',
 405                 '*.myweb.io',
 406                 '*.ourprofile.biz',
 407                 '*.ourprofile.info',
 408                 '*.ourprofile.net',     // Dead?
 409                 '*.ourprofile.org',
 410                 '*.ourprofile.us',
 411                 '*.profil.bz',
 412                 '*.profil.cc',
 413                 '*.profil.cn',
 414                 '*.profil.gs',
 415                 '*.profil.in',
 416                 '*.profil.ms',
 417                 '*.profil.tc',
 418                 '*.profil.tv',
 419                 '*.profil.vg',  // ?
 420                 '*.site.io',
 421                 '*.wan.io',
 422                 '*.web-cam.ws',
 423                 '*.webs.io',
 424                 '*.zip.io',
 425         ),
 426         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 427         '*.fx.to',
 428         'fyad.org',
 429         'fype.com',
 430         'gentleurl.net',
 431         'Get2.us' => array(
 432                 '*.get2.us',
 433                 '*.hasballs.com',
 434                 '*.ismyidol.com',
 435                 '*.spotted.us',
 436                 '*.went2.us',
 437                 '*.wentto.us',
 438         ),
 439         'glinki.com',
 440         '*.globalredirect.com',
 441         'gnu.vu',
 442         '*.go.cc',
 443         //'Google.com' => array(
 444         //              google.com/translate_c\?u=(?:http://)?
 445         //),
 446         'goonlink.com',
 447         '.gourl.org',
 448         '.greatitem.com',
 449         'gzurl.com',
 450         'url.grillsportverein.de',
 451         'Harudake.net' => array('*.hyu.jp'),
 452         'Hattinger Linux User Group' => array('short.hatlug.de'),
 453         'Hexten.net' => array('lyxus.net'),
 454         'here.is',
 455         'HispaVista.com' => array(
 456                 '*.blogdiario.com',
 457                 '*.hispavista.com',
 458                 '.galeon.com',
 459         ),
 460         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 461                 '*.8l.pl',
 462                 '*.blg.pl',
 463                 '*.czytajto.pl',
 464                 '*.ryj.pl',
 465                 '*.xit.pl',
 466                 '*.xlc.pl',
 467                 '*.hk.pl',
 468                 '*.home.pl',
 469                 '*.of.pl',
 470         ),
 471         'hort.net',
 472         'free4.hostrocket.com',
 473         '*.hotindex.ru',
 474         'HotRedirect.com' => array(
 475                 '*.coolhere.com',
 476                 '*.homepagehere.com',
 477                 '*.hothere.com',
 478                 '*.mustbehere.com',
 479                 '*.onlyhere.net',
 480                 '*.pagehere.com',
 481                 '*.surfhere.net',
 482                 '*.zonehere.com',
 483         ),
 484         'hotshorturl.com',
 485         'hotwebcomics.com',     ///search_redirect.php
 486         'hurl.to',
 487         '*.hux.de',
 488         '*.i89.us',
 489         'iat.net',                      // 74.208.58.130 by Tony Carter
 490         'ibm.com',                      ///links (Correct it)
 491         '*.iceglow.com',
 492         'internetadresi.com' => array (
 493                 'rxbuycheap.com',
 494                 'rxcheapwestern.com',
 495         ),
 496         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 497         'Ideas para Nuevos Mercados SL' => array(
 498                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 499                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 500                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 501                 // by edgar bortolin (oscar at i4nm.com)
 502                 // by Edgar Bortolin  (oscar at i4nm.com)
 503                 // by oscar florez (oscar at i4nm.com)
 504                 // by Oscar Florez (oscar at red-es.com)
 505                 // by covadonga del valle (oscar at i4nm.com)
 506                 '*.ar.gd',
 507                 '*.ar.gs',      // ns *.nora.net
 508                 '*.ar.kz',      // by oscar
 509                 '*.ar.nu',      // by Edgar
 510                 '*.ar.tc',      // by oscar
 511                 '*.ar.vg',      // by oscar
 512                 '*.bo.kz',      // by oscar
 513                 '*.bo.nu',      // by covadonga
 514                 '*.bo.tc',      // by oscar
 515                 '*.bo.tf',      // by Oscar
 516                 '*.bo.vg',      // by oscar
 517                 '*.br.gd',
 518                 '*.br.gs',      // ns *.nora.net
 519                 '*.br.nu',      // by edgar
 520                 '*.br.vg',      // by oscar
 521                 '*.ca.gs',      // by oscar
 522                 '*.ca.kz',      // by oscar
 523                 '*.cl.gd',      // by oscar
 524                 '*.cl.kz',      // by oscar
 525                 '*.cl.nu',      // by edgar
 526                 '*.cl.tc',      // by oscar
 527                 '*.cl.tf',      // by Oscar
 528                 '*.cl.vg',      // by oscar
 529                 '*.col.nu',     // by Edgar
 530                 '*.cr.gs',      // ns *.nora.net
 531                 '*.cr.kz',      // by oscar
 532                 '*.cr.nu',      // by edgar
 533                 '*.cr.tc',      // by oscar
 534                 '*.cu.tc',      // by oscar
 535                 '*.do.kz',      // by oscar
 536                 '*.do.nu',      // by edgar
 537                 '*.ec.kz',      // by edgar
 538                 '*.ec.nu',      // by Edgar
 539                 '*.ec.tf',      // by Oscar
 540                 '*.es.kz',      // by oscar
 541                 '*.eu.kz',      // by oscar
 542                 '*.gt.gs',      // ns *.nora.net
 543                 '*.gt.tc',      // by oscar
 544                 '*.gt.tf',      // by Oscar
 545                 '*.gt.vg',      // by Oscar
 546                 '*.hn.gs',      // ns *.nora.net
 547                 '*.hn.tc',      // by oscar
 548                 '*.hn.tf',      // by Oscar
 549                 '*.hn.vg',      // by oscar
 550                 '*.mx.gd',
 551                 '*.mx.gs',      // ns *.nora.net
 552                 '*.mx.kz',      // by oscar
 553                 '*.mx.vg',      // by oscar
 554                 '*.ni.kz',      // by oscar
 555                 '*.pa.kz',      // by oscar
 556                 '*.pe.kz',      // by oscar
 557                 '*.pe.nu',      // by Edgar
 558                 '*.pr.kz',      // by oscar
 559                 '*.pr.nu',      // by edgar
 560                 '*.pt.gs',      // ns *.nora.net
 561                 '*.pt.kz',      // by edgar
 562                 '*.pt.nu',      // by edgar
 563                 '*.pt.tc',      // by oscar
 564                 '*.pt.tf',      // by Oscar
 565                 '*.py.gs',      // ns *.nora.net
 566                 '*.py.nu',      // by edgar
 567                 '*.py.tc',      // by oscar
 568                 '*.py.tf',      // by Oscar
 569                 '*.py.vg',      // by oscar
 570                 '*.sv.tc',      // by oscar
 571                 '*.usa.gs',     // ns *.nora.net
 572                 '*.uy.gs',      // ns *.nora.net
 573                 '*.uy.kz',      // by oscar
 574                 '*.uy.nu',      // by edgar
 575                 '*.uy.tc',      // by oscar
 576                 '*.uy.tf',      // by Oscar
 577                 '*.uy.vg',      // by oscar
 578                 '*.ve.gs',      // by oscar
 579                 '*.ve.tc',      // by oscar
 580                 '*.ve.tf',      // by Oscar
 581                 '*.ve.vg',      // by oscar
 582                 '*.ven.nu',     // by edgar
 583         ),
 584         'ie.to',
 585         'igoto.co.uk',
 586         'ilook.tw',
 587         'indianpad.com',                ///view/
 588         'iNetwork.co.il' => array(
 589                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 590                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 591                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 592         ),
 593         '*.infogami.com',
 594         'infotop.jp',
 595         'ipoo.org',
 596         'IR.pl' => array(
 597                 '*.aj.pl',
 598                 '*.aliasy.org',
 599                 '*.gu.pl',
 600                 '*.hu.pl',
 601                 '*.ir.pl',
 602                 '*.jo.pl',
 603                 '*.su.pl',
 604                 '*.td.pl',
 605                 '*.uk.pl',
 606                 '*.uy.pl',
 607                 '*.xa.pl',
 608                 '*.zj.pl',
 609         ),
 610         'irotator.com',
 611         '.iwebtool.com',
 612         'j6.bz',
 613         'jeeee.net',
 614         'Jaze Redirect Services' => array(
 615                 '*.arecool.net',
 616                 '*.iscool.net',
 617                 '*.isfun.net',
 618                 '*.tux.nu',
 619         ),
 620         '*.jed.pl',
 621         'JeremyJohnstone.com' => array('url.vg'),
 622         'jemurl.com',
 623         'jggj.net',
 624         'jpan.jp',
 625         'josh.nu',
 626         'kat.cc',
 627         'Kickme.to' => array(
 628                 '.1024bit.at',
 629                 '.128bit.at',
 630                 '.16bit.at',
 631                 '.256bit.at',
 632                 '.32bit.at',
 633                 '.512bit.at',
 634                 '.64bit.at',
 635                 '.8bit.at',
 636                 '.adores.it',
 637                 '.again.at',
 638                 '.allday.at',
 639                 '.alone.at',
 640                 '.altair.at',
 641                 '.american.at',
 642                 '.amiga500.at',
 643                 '.ammo.at',
 644                 '.amplifier.at',
 645                 '.amstrad.at',
 646                 '.anglican.at',
 647                 '.angry.at',
 648                 '.around.at',
 649                 '.arrange.at',
 650                 '.australian.at',
 651                 '.baptist.at',
 652                 '.basque.at',
 653                 '.battle.at',
 654                 '.bazooka.at',
 655                 '.berber.at',
 656                 '.blackhole.at',
 657                 '.booze.at',
 658                 '.bosnian.at',
 659                 '.brainiac.at',
 660                 '.brazilian.at',
 661                 '.bummer.at',
 662                 '.burn.at',
 663                 '.c-64.at',
 664                 '.catalonian.at',
 665                 '.catholic.at',
 666                 '.chapel.at',
 667                 '.chills.it',
 668                 '.christiandemocrats.at',
 669                 '.cname.at',
 670                 '.colors.at',
 671                 '.commodore.at',
 672                 '.commodore64.at',
 673                 '.communists.at',
 674                 '.conservatives.at',
 675                 '.conspiracy.at',
 676                 '.cooldude.at',
 677                 '.craves.it',
 678                 '.croatian.at',
 679                 '.cuteboy.at',
 680                 '.dancemix.at',
 681                 '.danceparty.at',
 682                 '.dances.it',
 683                 '.danish.at',
 684                 '.dealing.at',
 685                 '.deep.at',
 686                 '.democrats.at',
 687                 '.digs.it',
 688                 '.divxlinks.at',
 689                 '.divxmovies.at',
 690                 '.divxstuff.at',
 691                 '.dizzy.at',
 692                 '.does.it',
 693                 '.dork.at',
 694                 '.drives.it',
 695                 '.dutch.at',
 696                 '.dvdlinks.at',
 697                 '.dvdmovies.at',
 698                 '.dvdstuff.at',
 699                 '.emulators.at',
 700                 '.end.at',
 701                 '.english.at',
 702                 '.eniac.at',
 703                 '.error403.at',
 704                 '.error404.at',
 705                 '.evangelism.at',
 706                 '.exhibitionist.at',
 707                 '.faith.at',
 708                 '.fight.at',
 709                 '.finish.at',
 710                 '.finnish.at',
 711                 '.forward.at',
 712                 '.freebie.at',
 713                 '.freemp3.at',
 714                 '.french.at',
 715                 '.graduatejobs.at',
 716                 '.greenparty.at',
 717                 '.grunge.at',
 718                 '.hacked.at',
 719                 '.hang.at',
 720                 '.hangup.at',
 721                 '.has.it',
 722                 '.hide.at',
 723                 '.hindu.at',
 724                 '.htmlpage.at',
 725                 '.hungarian.at',
 726                 '.icelandic.at',
 727                 '.independents.at',
 728                 '.invisible.at',
 729                 '.is-chillin.it',
 730                 '.is-groovin.it',
 731                 '.japanese.at',
 732                 '.jive.at',
 733                 '.kickass.at',
 734                 '.kickme.to',
 735                 '.kindergarden.at',
 736                 '.knows.it',
 737                 '.kurd.at',
 738                 '.labour.at',
 739                 '.leech.at',
 740                 '.liberals.at',
 741                 '.linuxserver.at',
 742                 '.liqour.at',
 743                 '.lovez.it',
 744                 '.makes.it',
 745                 '.maxed.at',
 746                 '.means.it',
 747                 '.meltdown.at',
 748                 '.methodist.at',
 749                 '.microcomputers.at',
 750                 '.mingle.at',
 751                 '.mirror.at',
 752                 '.moan.at',
 753                 '.mormons.at',
 754                 '.musicmix.at',
 755                 '.nationalists.at',
 756                 '.needz.it',
 757                 '.nerds.at',
 758                 '.neuromancer.at',
 759                 '.newbie.at',
 760                 '.nicepage.at',
 761                 '.ninja.at',
 762                 '.norwegian.at',
 763                 '.ntserver.at',
 764                 '.owns.it',
 765                 '.paint.at',
 766                 '.palestinian.at',
 767                 '.phoneme.at',
 768                 '.phreaking.at',
 769                 '.playz.it',
 770                 '.polish.at',
 771                 '.popmusic.at',
 772                 '.portuguese.at',
 773                 '.powermac.at',
 774                 '.processor.at',
 775                 '.prospects.at',
 776                 '.protestant.at',
 777                 '.rapmusic.at',
 778                 '.raveparty.at',
 779                 '.reachme.at',
 780                 '.reads.it',
 781                 '.reboot.at',
 782                 '.relaxed.at',
 783                 '.republicans.at',
 784                 '.researcher.at',
 785                 '.reset.at',
 786                 '.resolve.at',
 787                 '.retrocomputers.at',
 788                 '.rockparty.at',
 789                 '.rocks.it',
 790                 '.rollover.at',
 791                 '.rough.at',
 792                 '.rules.it',
 793                 '.rumble.at',
 794                 '.russian.at',
 795                 '.says.it',
 796                 '.scared.at',
 797                 '.seikh.at',
 798                 '.serbian.at',
 799                 '.short.as',
 800                 '.shows.it',
 801                 '.silence.at',
 802                 '.simpler.at',
 803                 '.sinclair.at',
 804                 '.singz.it',
 805                 '.slowdown.at',
 806                 '.socialists.at',
 807                 '.spanish.at',
 808                 '.split.at',
 809                 '.stand.at',
 810                 '.stoned.at',
 811                 '.stumble.at',
 812                 '.supercomputer.at',
 813                 '.surfs.it',
 814                 '.swedish.at',
 815                 '.swims.it',
 816                 '.synagogue.at',
 817                 '.syntax.at',
 818                 '.syntaxerror.at',
 819                 '.techie.at',
 820                 '.temple.at',
 821                 '.thinkbig.at',
 822                 '.thirsty.at',
 823                 '.throw.at',
 824                 '.toplist.at',
 825                 '.trekkie.at',
 826                 '.trouble.at',
 827                 '.turkish.at',
 828                 '.unexplained.at',
 829                 '.unixserver.at',
 830                 '.vegetarian.at',
 831                 '.venture.at',
 832                 '.verycool.at',
 833                 '.vic-20.at',
 834                 '.viewing.at',
 835                 '.vintagecomputers.at',
 836                 '.virii.at',
 837                 '.vodka.at',
 838                 '.wannabe.at',
 839                 '.webpagedesign.at',
 840                 '.wheels.at',
 841                 '.whisper.at',
 842                 '.whiz.at',
 843                 '.wonderful.at',
 844                 '.zor.org',
 845                 '.zx80.at',
 846                 '.zx81.at',
 847                 '.zxspectrum.at',
 848         ),
 849         'kisaweb.com',
 850         'krotki.pl',
 851         'kuerzer.de',
 852         '*.kupisz.pl',
 853         'kuso.cc',
 854         '*.l8t.com',
 855         'lame.name',
 856         'lediga.st',
 857         'liencourt.com',
 858         'liteurl.com',
 859         'linkachi.com',
 860         'linkezy.com',
 861         'linkfrog.net',
 862         'linkook.com',
 863         'linkyme.com',
 864         'linkzip.net',
 865         'lispurl.com',
 866         'lnk.in',
 867         'makeashorterlink.com',
 868         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 869                 '*.3gp.fr',
 870                 '*.gtx.fr',
 871                 '*.ici.st',
 872                 '*.max.st',
 873                 '*.nn.cx',              // ns *.sivit.org
 874                 '*.site.cx',    // ns *.sivit.org
 875                 '*.user.fr',
 876                 '*.zxr.fr',
 877         ),
 878         'mcturl.com',
 879         'memurl.com',
 880         'Metamark.net' => array('xrl.us'),
 881         'midgeturl.com',
 882         'Minilink.org' => array('lnk.nu'),
 883         'miniurl.org',
 884         'miniurl.pl',
 885         'mixi.bz',
 886         'mo-v.jp',
 887         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 888                 '.com.md',
 889                 '.co.md',
 890                 '.org.md',
 891                 '.info.md',
 892                 '.host.md',
 893         ),
 894         'monster-submit.com',
 895         'mooo.jp',
 896         'murl.net',
 897         'myactivesurf.net',
 898         'mytinylink.com',
 899         'myurl.in',
 900         'myurl.com.tw',
 901         'nanoref.com',
 902         'Ne1.net' => array(
 903                 '*.ne1.net',
 904                 '*.r8.org',
 905         ),
 906         'Nashville Linux Users Group' => array('nlug.org'),
 907         'not2long.net',
 908         '*.notlong.com',
 909         '*.nuv.pl',
 910         'ofzo.be',
 911         '*.ontheinter.net',
 912         'ourl.org',
 913         'ov2.net',                              // frame
 914         '*.ozonez.com',
 915         'pagebang.com',
 916         'palurl.com',
 917         '*.paulding.net',
 918         'phpfaber.org',
 919         'pygmyurl.com',
 920         'pnope.com',
 921         'prettylink.com',
 922         'PROXID.net' => array(  // also xRelay.net
 923                 '*.asso.ws',
 924                 '*.corp.st',
 925                 '*.euro.tm',
 926                 '*.perso.tc',
 927                 '*.site.tc',
 928                 '*.societe.st',
 929         ),
 930         'qqa.jp',
 931         'qrl.jp',
 932         'qurl.net',
 933         'qwer.org',
 934         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 935         'radiobase.net',
 936         'Rakuten.co.jp' => array(
 937                 'pt.afl.rakuten.co.jp', ///c/
 938         ),
 939         'RedirectFree.com' => array(
 940                 '*.red.tc',
 941                 '*.redirectfree.com',
 942                 '*.sky.tc',
 943                 '*.the.vg',
 944         ),
 945         'redirme.com',
 946         'redirectme.to',
 947         'relic.net',
 948         'rezma.info',
 949         'rio.st',
 950         'rlink.org',
 951         '*.rmcinfo.fr',
 952         'roo.to',               // Seems closed, says "bye-bye"
 953         'rubyurl.com',
 954         '*.runboard.com',
 955         'runurl.com',
 956         's-url.net',
 957         's1u.net',
 958         'SG5.co.uk' => array(
 959                 '*.sg5.co.uk',
 960                 '*.sg5.info',
 961         ),
 962         'Shim.net' => array(
 963                 '*.0kn.com',
 964                 '*.2cd.net',
 965                 '*.freebiefinders.net',
 966                 '*.freegaming.org',
 967                 '*.op7.net',
 968                 '*.shim.net',
 969                 '*.v9z.com',
 970         ),
 971         'big5.shippingchina.com',
 972         'shorl.com',
 973         'shortenurl.com',
 974         'shorterlink.com',
 975         'shortlinks.co.uk',
 976         'shorttext.com',
 977         'shorturl-accessanalyzer.com',
 978         'Shortify.com' => array(
 979                 '74678439.com',
 980                 'shortify.com',
 981         ),
 982         'shortlink.co.uk',
 983         'ShortURL.com' => array(
 984                 '*.1sta.com',
 985                 '*.24ex.com',
 986                 '*.2fear.com',
 987                 '*.2fortune.com',
 988                 '*.2freedom.com',
 989                 '*.2hell.com',
 990                 '*.2savvy.com',
 991                 '*.2truth.com',
 992                 '*.2tunes.com',
 993                 '*.2ya.com',
 994                 '*.alturl.com',
 995                 '*.antiblog.com',
 996                 '*.bigbig.com',
 997                 '*.dealtap.com',
 998                 '*.ebored.com',
 999                 '*.echoz.com',
1000                 '*.filetap.com',
1001                 '*.funurl.com',
1002                 '*.headplug.com',
1003                 '*.hereweb.com',
1004                 '*.hitart.com',
1005                 '*.mirrorz.com',
1006                 '*.shorturl.com',
1007                 '*.spyw.com',
1008                 '*.vze.com',
1009         ),
1010         'shrinkalink.com',
1011         'shrinkthatlink.com',
1012         'shrinkurl.us',
1013         'shrt.org',
1014         'shrunkurl.com',
1015         'shurl.org',
1016         'shurl.net',
1017         'sid.to',
1018         'simurl.com',
1019         'sitefwd.com',
1020         'Sitelutions.com' => array(
1021                 '*.assexy.as',
1022                 '*.athersite.com',
1023                 '*.athissite.com',
1024                 '*.bestdeals.at',
1025                 '*.byinter.net',
1026                 '*.findhere.org',
1027                 '*.fw.nu',
1028                 '*.isgre.at',
1029                 '*.isthebe.st',
1030                 '*.kwik.to',
1031                 '*.lookin.at',
1032                 '*.lowestprices.at',
1033                 '*.onthenet.as',
1034                 '*.ontheweb.nu',
1035                 '*.pass.as',
1036                 '*.passingg.as',
1037                 '*.redirect.hm',
1038                 '*.rr.nu',
1039                 '*.ugly.as',
1040         ),
1041         '*.skracaj.pl',
1042         'skiltechurl.com',
1043         'skocz.pl',
1044         'slimurl.jp',
1045         'slink.in',
1046         'smallurl.eu',
1047         'smurl.name',
1048         'snipurl.com',
1049         'sp-nov.net',
1050         'splashblog.com',
1051         'spod.cx',
1052         '*.spydar.com',
1053         'Subdomain.gr' => array(
1054                 '*.p2p.gr',
1055                 '*.subdomain.gr',
1056         ),
1057         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1058         'surl.se',
1059         'surl.ws',
1060         'tdurl.com',
1061         'tighturl.com',
1062         'tiniuri.com',
1063         'tiny.cc',
1064         'tiny.pl',
1065         'tiny2go.com',
1066         'tinylink.eu',
1067         'tinylinkworld.com',
1068         'tinypic.com',
1069         'tinyr.us',
1070         'TinyURL.com' => array(
1071                 'tinyurl.com',
1072                 'preview.tinyurl.com',
1073                 'tinyurl.co.uk',
1074         ),
1075         'titlien.com',
1076         '*.tlg.pl',
1077         'tlurl.com',
1078         'link.toolbot.com',
1079         'tnij.org',
1080         'Tokelau ccTLD' => array('.tk'),
1081         'toila.net',
1082         '*.toolbot.com',
1083         '*.torontonian.com',
1084         'trimurl.com',
1085         //'ttu.cc',             // Seems closed
1086         'turl.jp',
1087         '*.tz4.com',
1088         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1089                 '*.1.to',
1090                 '*.4.to',
1091                 '*.5.to',
1092                 '*.82.to',
1093                 '*.s.to',
1094                 '*.u.to',
1095                 '*.ce.to',
1096                 '*.cz.to',
1097                 '*.if.to',
1098                 '*.it.to',
1099                 '*.kp.to',
1100                 '*.ne.to',
1101                 '*.ok.to',
1102                 '*.pc.to',
1103                 '*.tv.to',
1104                 '*.dd.to',
1105                 '*.ee.to',
1106                 '*.hh.to',
1107                 '*.kk.to',
1108                 '*.mm.to',
1109                 '*.qq.to',
1110                 '*.xx.to',
1111                 '*.zz.to',
1112                 '*.ivy.to',
1113                 '*.joa.to',
1114                 '*.ever.to',
1115                 '*.mini.to',
1116         ),
1117         'u-go.to',
1118         'uchinoko.in',
1119         'Ulimit.com' => array(
1120                 '*.be.tf',
1121                 '*.best.cd',
1122                 '*.bsd-fan.com',
1123                 '*.c0m.st',
1124                 '*.ca.tc',
1125                 '*.clan.st',
1126                 '*.com02.com',
1127                 '*.en.st',
1128                 '*.euro.st',
1129                 '*.fr.fm',
1130                 '*.fr.st',
1131                 '*.fr.vu',
1132                 '*.gr.st',
1133                 '*.ht.st',
1134                 '*.int.ms',
1135                 '*.it.st',
1136                 '*.java-fan.com',
1137                 '*.linux-fan.com',
1138                 '*.mac-fan.com',
1139                 '*.mp3.ms',
1140                 '*.qc.tc',
1141                 '*.sp.st',
1142                 '*.suisse.st',
1143                 '*.t2u.com',
1144                 '*.unixlover.com',
1145                 '*.zik.mu',
1146         ),
1147         'urltea.com',
1148         '*.uni.cc',
1149         'UNONIC.com' => array(
1150                 '*.at.tf',      // AlpenNIC
1151                 '*.bg.tf',
1152                 '*.ca.tf',
1153                 '*.ch.tf',      // AlpenNIC
1154                 '*.cz.tf',
1155                 '*.de.tf',      // AlpenNIC
1156                 '*.edu.tf',
1157                 '*.eu.tf',
1158                 '*.int.tf',
1159                 '*.net.tf',
1160                 '*.pl.tf',
1161                 '*.ru.tf',
1162                 '*.sg.tf',
1163                 '*.us.tf',
1164         ),
1165         'Up.pl' => array(
1166                 '.69.pl',                       // by nsk101869
1167                 '.crack.pl',            // by nsk101869
1168                 '.film.pl',                     // by sibr19002
1169                 '.h2o.pl',                      // by nsk101869
1170                 '.hostessy.pl',         // by nsk101869
1171                 '.komis.pl',            // by nsk101869
1172                 '.laski.pl',            // by nsk101869
1173                 '.modelki.pl',          // by nsk101869
1174                 '.muzyka.pl',           // by sibr19002
1175                 '.nastolatki.pl',       // by nsk101869
1176                 '.obuwie.pl',           // by nsk101869
1177                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1178                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1179                 '.sexchat.pl',          // by nsk101869
1180                 '.sexlive.pl',          // by nsk101869
1181                 '.tv.pl',                       // by nsk101869
1182                 '.up.pl',                       // by nsk101869
1183                 '.video.pl',            // by nsk101869
1184                 '.xp.pl',                       // nsk101869
1185         ),
1186         '*.uploadr.com',
1187         'url.ie',
1188         'url4.net',
1189         'url-c.com',
1190         'urlbee.com',
1191         'urlbounce.com',
1192         'urlcut.com',
1193         'urlcutter.com',
1194         'urlic.com',
1195         'urlin.it',
1196         'urlkick.com',
1197         'URLLogs.com' => array(
1198                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1199                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1200         ),
1201         '*.urlproxy.com',
1202         'urlser.com',
1203         'urlsnip.com',
1204         'urlzip.de',
1205         'urlx.org',
1206         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1207         'utun.jp',
1208         'uxxy.com',
1209         '*.v27.net',
1210         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1211                 '*.all.at',
1212                 '*.back.to',
1213                 '*.beam.at',
1214                 '*.been.at',
1215                 '*.bite.to',
1216                 '*.board.to',
1217                 '*.bounce.to',
1218                 '*.bowl.to',
1219                 '*.break.at',
1220                 '*.browse.to',
1221                 '*.change.to',
1222                 '*.chip.ms',
1223                 '*.connect.to',
1224                 '*.crash.to',
1225                 '*.cut.by',
1226                 '*.direct.at',
1227                 '*.dive.to',
1228                 '*.drink.to',
1229                 '*.drive.to',
1230                 '*.drop.to',
1231                 '*.easy.to',
1232                 '*.everything.at',
1233                 '*.fade.to',
1234                 '*.fanclub.ms',
1235                 '*.firstpage.de',
1236                 '*.fly.to',
1237                 '*.flying.to',
1238                 '*.fortunecity.co.uk',
1239                 '*.fortunecity.com',
1240                 '*.forward.to',
1241                 '*.fullspeed.to',
1242                 '*.fun.ms',
1243                 '*.gameday.de',
1244                 '*.germany.ms',
1245                 '*.get.to',
1246                 '*.getit.at',
1247                 '*.hard-ware.de',
1248                 '*.hello.to',
1249                 '*.hey.to',
1250                 '*.hop.to',
1251                 '*.how.to',
1252                 '*.hp.ms',
1253                 '*.jump.to',
1254                 '*.kiss.to',
1255                 '*.listen.to',
1256                 '*.mediasite.de',
1257                 '*.megapage.de',
1258                 '*.messages.to',
1259                 '*.mine.at',
1260                 '*.more.at',
1261                 '*.more.by',
1262                 '*.move.to',
1263                 '*.musicpage.de',
1264                 '*.mypage.org',
1265                 '*.mysite.de',
1266                 '*.nav.to',
1267                 '*.notrix.at',
1268                 '*.notrix.ch',
1269                 '*.notrix.de',
1270                 '*.notrix.net',
1271                 '*.on.to',
1272                 '*.page.to',
1273                 '*.pagina.de',
1274                 '*.played.by',
1275                 '*.playsite.de',
1276                 '*.privat.ms',
1277                 '*.quickly.to',
1278                 '*.redirect.to',
1279                 '*.rulestheweb.com',
1280                 '*.run.to',
1281                 '*.scroll.to',
1282                 '*.seite.ms',
1283                 '*.shortcut.to',
1284                 '*.skip.to snap.to',
1285                 '*.soft-ware.de',
1286                 '*.start.at',
1287                 '*.stick.by',
1288                 '*.surf.to',
1289                 '*.switch.to',
1290                 '*.talk.to',
1291                 '*.tip.nu',
1292                 '*.top.ms',
1293                 '*.transfer.to',
1294                 '*.travel.to',
1295                 '*.turn.to',
1296                 '*.vacations.to',
1297                 '*.videopage.de',
1298                 '*.virtualpage.de',
1299                 '*.w3.to',
1300                 '*.walk.to',
1301                 '*.warp9.to',
1302                 '*.window.to',
1303                 '*.yours.at',
1304                 '*.zap.to',
1305                 '*.zip.to',
1306         ),
1307         'VDirect.com' => array(
1308                 '*.emailme.net',
1309                 '*.getto.net',
1310                 '*.inetgames.com',
1311                 '*.netbounce.com',
1312                 '*.netbounce.net',
1313                 '*.oneaddress.net',
1314                 '*.snapto.net',
1315                 '*.vdirect.com',
1316                 '*.vdirect.net',
1317                 '*.webrally.net',
1318         ),
1319         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1320         'vgo2.com',
1321         'Voila.fr' => array('r.voila.fr'),      // Fix it
1322         'w3t.org',
1323         'wapurl.co.uk',
1324         'Wb.st' => array(
1325                 '*.team.st',
1326                 '*.wb.st',
1327         ),
1328         'wbkt.net',
1329         'WebAlias.com' => array(
1330                 '*.andmuchmore.com',
1331                 '*.browser.to',
1332                 '*.escape.to',
1333                 '*.fornovices.com',
1334                 '*.fun.to',
1335                 '*.got.to',
1336                 '*.hottestpix.com',
1337                 '*.imegastores.com',
1338                 '*.latest-info.com',
1339                 '*.learn.to',
1340                 '*.moviefever.com',
1341                 '*.mp3-archives.com',
1342                 '*.myprivateidaho.com',
1343                 '*.radpages.com',
1344                 '*.remember.to',
1345                 '*.resourcez.com',
1346                 '*.return.to',
1347                 '*.sail.to',
1348                 '*.sports-reports.com',
1349                 '*.stop.to',
1350                 '*.thrill.to',
1351                 '*.tophonors.com',
1352                 '*.uncutuncensored.com',
1353                 '*.up.to',
1354                 '*.veryweird.com',
1355                 '*.way.to',
1356                 '*.web-freebies.com',
1357                 '.webalias.com',
1358                 '*.webdare.com',
1359                 '*.xxx-posed.com',
1360         ),
1361         'webmasterwise.com',
1362         'witherst at hotmail.com' => array(     // by Tim Withers
1363                 '*.associates-program.com',
1364                 '*.casinogopher.com',
1365                 '*.ezpagez.com',
1366                 '*.vgfaqs.com',
1367         ),
1368         'wittylink.com',
1369         'wiz.sc',                       // tiny.cc related
1370         'X50.us' => array(
1371                 '*.i50.de',
1372                 '*.x50.us',
1373         ),
1374         'big5.xinhuanet.com',   ///gate/big5/
1375         'xhref.com',
1376         'Xn6.net' => array(
1377                 '*.9ax.net',
1378                 '*.xn6.net',
1379         ),
1380         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1381         '.y11.net',
1382         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1383                 '*.yesns.com',
1384                 '*.srv4u.net',
1385                 //blogne.com
1386         ),
1387         'yatuc.com',
1388         'yep.it',
1389         'yumlum.com',
1390         'yurel.com',
1391         'Z.la' => array(
1392                 'z.la',
1393                 't.z.la',
1394         ),
1395         'zaable.com',
1396         'zapurl.com',
1397         'zarr.co.uk',
1398         'zerourl.com',
1399         'ZeroWeb.org' => array(
1400                 '*.80t.com',
1401                 '*.firez.org',
1402                 '*.fizz.nu',
1403                 '*.ingame.org',
1404                 '*.irio.net',
1405                 '*.v33.org',
1406                 '*.zeroweb.org',
1407         ),
1408         'zhukcity.ru',
1409         'zippedurl.com',
1410         'zr5.us',
1411         '*.zs.pl',
1412         '*.zu5.net',
1413         'zuso.tw',
1414         '*.zwap.to',
1415 );
1416
1417 // --------------------------------------------------
1418
1419 $blocklist['A-2'] = array(
1420
1421         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1422         //
1423         //'*.dyndns.*', // Wildcard for dyndns
1424         //
1425         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1426         'ddns.ru' => array('*.bpa.nu'),
1427         'Dhs.org' => array(
1428                 '*.2y.net',
1429                 '*.dhs.org',
1430         ),
1431         '*.dnip.net',
1432         '*.dyndns.co.za',
1433         '*.dyndns.dk',
1434         '*.dyndns.nemox.net',
1435         'DyDNS.com' => array(
1436                 '*.ath.cx',
1437                 '*.dnsalias.org',
1438                 '*.dyndns.org',
1439                 '*.homeip.net',
1440                 '*.homelinux.net',
1441                 '*.mine.nu',
1442                 '*.shacknet.nu',
1443         ),
1444         '*.dtdns.net',                  // by jscott at sceiron.com
1445         '*.dynu.com',
1446         '*.dynup.net',
1447         '*.fdns.net',
1448         'J-Speed.net' => array(
1449                 '*.bne.jp',
1450                 '*.ii2.cc',
1451                 '*.jdyn.cc',
1452                 '*.jspeed.jp',
1453         ),
1454         '*.mydyn.de',
1455         '*.nerdcamp.net',
1456         'No-IP.com' => array(
1457                         '*.bounceme.net',
1458                         '*.hopto.org',
1459                         '*.myftp.biz',
1460                         '*.myftp.org',
1461                         '*.myvnc.com',
1462                         '*.no-ip.biz',
1463                         '*.no-ip.info',
1464                         '*.no-ip.org',
1465                         '*.redirectme.net',
1466                         '*.servebeer.com',
1467                         '*.serveblog.net',
1468                         '*.servecounterstrike.com',
1469                         '*.serveftp.com',
1470                         '*.servegame.com',
1471                         '*.servehalflife.com',
1472                         '*.servehttp.com',
1473                         '*.servemp3.com',
1474                         '*.servepics.com',
1475                         '*.servequake.com',
1476                         '*.sytes.net',
1477                         '*.zapto.org',
1478         ),
1479         '*.opendns.be',
1480         'Yi.org' => array(      // by dns at whyi.org
1481                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1482
1483                 // 72.55.129.46(redirect.yi.org)
1484                 '*.whyi.org',
1485                 '*.weedns.com',
1486         ),
1487         '*.zenno.info',
1488         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1489                         // and all non-recorded domains redirect to 'agoga.com' now
1490                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1491                         // http://agoga.com/aboutus.html
1492 );
1493
1494 // --------------------------------------------------
1495
1496 // B: Sample setting of:
1497 // Jacked (taken advantage of) and cleaning-less sites
1498 //
1499 // Please notify us about this list with reason:
1500 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1501
1502 $blocklist['B-1'] = array(
1503
1504         // B-1: Web N.M spaces (N > 0, M >= 0)
1505         //
1506         //   Messages from forerunners:
1507         //     activefreehost.com
1508         //       "We regret to inform you that ActiveFreeHost
1509         //        free hosting service has is now closed (as of
1510         //        September 18). We have been online for over
1511         //        two and half years, but have recently decided
1512         //        to take time for software improvement to fight
1513         //        with server abuse, Spam advertisement and
1514         //        fraud."
1515         //
1516         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1517         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1518         '*.007webpro.com',              // by richord at ientry.com
1519         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1520         '*.0buckhost.com',              // by tycho at e-lab.nl
1521         '0Catch.com related' => array(
1522                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1523
1524                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1525                 '*.100megsfree5.com',
1526
1527                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1528                 '*.100freemb.com',              // by Danny Ashworth
1529                 '*.easyfreehosting.com',
1530                 '*.exactpages.com',
1531                 '*.fcpages.com',
1532                 '*.wtcsites.com',
1533
1534                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1535                 '*.741.com',
1536                 '*.freecities.com',
1537                 '*.freesite.org',
1538                 '*.freewebpages.org',
1539                 '*.freewebsitehosting.com',
1540                 '*.jvl.com',
1541
1542                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1543                 '*.freespaceusa.com',
1544                 '*.usafreespace.com',
1545
1546                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1547                 '*.dex1.com',
1548                 '*.questh.com',
1549
1550                 // 209.63.57.10(*snip*), ns *.0catch.com
1551                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1552                 '*.012webpages.com',    // by support at 0catch.com
1553                 '*.150m.com',
1554                 '*.1sweethost.com',             // by whois at bluehost.com
1555                 '*.250m.com',                   // by jason at fahlman.net
1556                 '*.9cy.com',                    // by paulw0t at gmail.com
1557                 '*.angelcities.com',    // by cliff at eccentrix.com
1558                 '*.arcadepages.com',    // by admin at site-see.com
1559                 '*.e-host.ws',                  // by dns at jomax.net
1560                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1561                 '*.fw.bz',                              // by ben at kuehl.as
1562                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1563                 '*.g0g.net',                    // by domains at seem.co.uk
1564                 '*.galaxy99.net',               // by admin at bagchi.org
1565                 '*.greatnow.com',               // by peo at peakspace.com
1566                 '*.hautlynx.com',               // by hlewis28 at juno.com
1567                 '*.ibnsites.com',               // by cmrojas at mail.com
1568                 '*.just-allen.com',             // by extremehype at msn.com
1569                 '*.kogaryu.com',                // by angelguerra at msn.com
1570                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1571                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1572                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1573                 '*.s-enterprize.com',
1574                 '*.servetown.com',              // by jonahbliss at earthlink.net
1575                 '*.stinkdot.org',               // by bluedot at ziplip.com
1576                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1577                 '*.zomi.net',                   // by sianpu at gmail.com
1578         ),
1579         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1580         '100 Best Inc' => array(
1581                 // by 100 Best Inc (info at 100best.com)
1582
1583                 // 66.235.204.7(h204-007.bluefishhosting.com)
1584                 '*.2-hi.com',
1585                 '*.20fr.com',
1586                 '*.20ii.com',
1587                 '*.20is.com',
1588                 '*.20it.com',
1589                 '*.20m.com',    // by jlee at 100bestinc.com
1590                 '*.20to.com',
1591                 '*.2u-2.com',
1592                 '*.3-st.com',
1593                 '*.fws1.com',
1594                 '*.fw-2.com',
1595                 '*.inc5.com',
1596                 '*.on-4.com',
1597                 '*.st-3.com',
1598                 '*.st20.com',
1599                 '*.up-a.com',
1600
1601                 // 216.40.33.252(www-pd.mdnsservice.com)
1602                 '*.0-st.com',
1603                 '*.20me.com',
1604         ),
1605         '*.100foros.com',
1606         '*.101freehost.com',
1607         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1608         '20six Weblog Services' => array(
1609                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1610                 '.20six.co.uk',
1611                 '.20six.fr',
1612                 'myblog.de',
1613                 'myblog.es',
1614         ),
1615         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1616         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1617         '2IP.com' => array(
1618                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1619                 '*.2ip.jp',
1620                 '*.474.jp',
1621                 '*.consensus.jp',
1622                 '*.desyo.jp',
1623                 '*.dif.jp',
1624                 '*.pastels.jp',
1625                 '*.powerblogger.jp',
1626                 '*.vippers.jp',
1627                 '*.webpages.jp',
1628
1629                 // 205.209.97.56(non-existent)
1630                 '*.biografi.biz',
1631                 '*.biografi.info',
1632                 '*.biografi.org',
1633                 '*.biografi.us',
1634                 '*.datadiri.biz',
1635                 '*.datadiri.cc',
1636                 '*.datadiri.com',
1637                 '*.datadiri.info',
1638                 '*.datadiri.net',
1639                 '*.datadiri.org',
1640                 '*.datadiri.tv',
1641                 '*.datadiri.us',
1642                 '*.indo.bz',
1643                 '*.indo.cc',
1644                 '*.profil.bz',
1645                 '*.profil.cc',
1646                 '*.profil.cn',
1647                 '*.profil.in',
1648                 '*.profil.tv',
1649
1650                 // 205.209.101.47(non-existent)
1651                 '*.about.tc',
1652                 '*.about.vg',
1653                 '*.aboutus.gs',
1654                 '*.aboutus.ms',
1655                 '*.aboutus.tc',
1656                 '*.aboutus.vg',
1657                 '*.band.io',
1658                 '*.beijing.am',
1659                 '*.blogs.io',
1660                 '*.boke.am',
1661                 '*.clan.io',
1662                 '*.ecv.gs',
1663                 '*.ecv.ms',
1664                 '*.ecv.vg',
1665                 '*.freekong.cn',
1666                 '*.go2net.ws',
1667                 '*.hello.cn.com',
1668                 '*.hello.io',
1669                 '*.hits.io',
1670                 '*.hostingweb.us',
1671                 '*.hub.io',
1672                 '*.ide.am',
1673                 '*.inc.io',
1674                 '*.incn.in',
1675                 '*.indo.gs',
1676                 '*.indo.ms',
1677                 '*.indo.tc',
1678                 '*.indo.vg',
1679                 '*.infinitehosting.net',
1680                 '*.infinites.net',
1681                 '*.jushige.cn',
1682                 '*.jushige.com',
1683                 '*.kongjian.in',
1684                 '*.lan.io',
1685                 '*.llc.nu',
1686                 '*.maimai.in',
1687                 '*.max.io',
1688                 '*.musician.io',
1689                 '*.mycv.bz',
1690                 '*.mycv.nu',
1691                 '*.mycv.tv',
1692                 '*.myweb.io',
1693                 '*.ourprofile.biz',
1694                 '*.ourprofile.info',
1695                 '*.ourprofile.net',
1696                 '*.ourprofile.org',
1697                 '*.ourprofile.us',
1698                 '*.profil.gs',
1699                 '*.profil.ms',
1700                 '*.profil.tc',
1701                 '*.qiye.in',
1702                 '*.site.io',
1703                 '*.wan.io',
1704                 '*.web-cam.ws',
1705                 '*.webs.io',
1706                 '*.xixu.cc',
1707                 '*.zaici.am',
1708                 '*.zip.io',
1709                 '*.zuzhi.in',
1710
1711                 '*.profil.vg',          // 205.209.101.67(non-existent)
1712                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1713                 //'*.about.gs',         // No record
1714                 //'*.eprofile.us',      // non-existent
1715         ),
1716         '2Page.de' => array(
1717                 '.dreipage.de',
1718                 '.2page.de',
1719         ),
1720         '*.3-hosting.net',
1721         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1722         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1723         '*.8000web.com',        // 75.126.189.45
1724         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1725         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1726         'Ai.NET' => array(
1727                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1728                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1729         ),
1730         '*.aimoo.com',
1731         '*.alkablog.com',
1732         '*.alluwant.de',
1733         '.amkbb.com',
1734         'answerbag.com',        // 8.5.0.128
1735         'anyboard.net',
1736         'AOL.com' =>    // http://about.aol.com/international_services
1737                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1738                 '(?:aol|americaonline)\.' .
1739                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1740                 // Rough but works
1741         'Apple.com' => array('idisk.mac.com'),
1742         '*.askfaq.org',
1743         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1744         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1745         '*.asphost4free.com',
1746         'basenow.com',
1747         'BatCave.net' => array(
1748                 '.batcave.net',                 // 64.22.112.226
1749                 '.freehostpro.com',             // 64.22.112.226
1750         ),
1751         '*.bb-fr.com',
1752         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1753         '*.beeplog.com',
1754         'beepworld.it',
1755         'bestfreeforums.com',
1756         'bestvotexxx.com',
1757         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1758         'blinklist.com',
1759         'Blog.com' => array(
1760                 // by admin.domains at co.blog.com
1761                 '*.blog.com',
1762                 '*.blogandorra.com',
1763                 '*.blogangola.com',
1764                 '*.blogaruba.com',
1765                 '*.blogaustria.at',
1766         ),
1767         '*.blog.com.es',
1768         '*.blog.hr',
1769         '*.blog4ever.com',
1770         '*.blog-fx.com',
1771         '*.blogbeee.com',
1772         'blogas.lt',
1773         'blogbud.com',
1774         '*.blogburkinafaso.com',
1775         '*.blogcu.com',                 // by info at nokta.com
1776         'blogfreely.com',
1777         '*.blogdrive.com',
1778         '*.blogg.de',
1779         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1780         'bloggercrab.com',
1781         'bloggers.nl',
1782         '*.bloggingmylife.com',
1783         '*.bloggles.info',
1784         '*.blogharbor.com',
1785         '*.bloguj.eu',
1786         'bloguitos.com',
1787         'blogosfer.com',
1788         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1789         '*.blogslive.net',
1790         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1791         '*.blogstream.com',
1792         'blogyaz.com',
1793         'bloodee.com',
1794         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1795         'board-4you.de',
1796         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1797         '*.boardhost.com',
1798         'Bravenet.com' => array(
1799                 '*.bravenet.com',
1800                 '*.bravehost.com',
1801         ),
1802         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1803         'C2k.jp' => array(
1804                 // by Makoto Okuse (webmaster at 2style.net)
1805                 '.081.in',
1806                 '.2style.in',
1807                 '.bian.in',
1808                 '.curl.in',
1809                 '.ennui.in',
1810                 '.jinx.in',
1811                 '.loose.in',
1812                 '.mist.in',
1813                 '.muu.in',
1814                 '.naive.in',
1815                 '.panic.in',
1816                 '.slum.in',
1817
1818                 // by 2style, ns *.click2k.net, *.2style.net
1819                 '.2st.jp',
1820                 '.betty.jp',
1821                 '.cabin.jp',
1822                 '.cult.jp',
1823                 '.mippi.jp',
1824                 '.purety.jp',
1825                 '.rapa.jp',
1826                 '.side-b.jp',
1827                 '.web-box.jp',
1828                 '.yea.jp',
1829
1830                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1831                 '.2style.net',
1832                 '.click2k.net',
1833                 '.houka5.com',
1834
1835                 // by click2k, ns *.click2k.net, *.2style.net
1836                 '.psyco.jp',
1837                 '.sweety.jp',
1838
1839                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1840                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1841         ),
1842         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1843         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1844         '*.chueca.com',
1845         'city-forum.com',
1846         '*.clicdev.com',
1847         '*.craigslist.org',
1848         'concepts-mall.com',
1849         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1850         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1851         'counterhit.de',
1852         '*.createblog.com',
1853         '*.createforum.net',
1854         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1855         '*.createmybb.com',
1856         'CwCity.de' => array(
1857                 '.cwcity.de',
1858                 '.cwsurf.de',
1859         ),
1860         'dakrats.net',
1861         '*.dcswtech.com',
1862         'del.icio.us',
1863         '*.devil.it',
1864         '*.diaryland.com',
1865         'diigo.com',                    ///user/
1866         'digg.com',
1867         'digstock.com',
1868         'domains at galaxywave.net' => array(
1869                 'blogstation.net',
1870                 '.phpbb-host.com',
1871         ),
1872         'dotbb.be',
1873         '*.dox.hu',                             // dns at 1b.hu
1874         '*.eadf.com',
1875         '*.eblog.com.au',
1876         '*.ekiwi.de',
1877         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1878         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1879         '*.easyjournal.com',
1880         '*.ebloggy.com',
1881         'enunblog.com',
1882         '*.epinoy.com',
1883         '*.ez-sites.ws',
1884         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1885         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1886         '*.fathippohosting.com',        // 208.101.3.192
1887         'FC2.com' => array(
1888                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1889                         // Many traps available:
1890                         //      bqdr.blog98.fc2.com,       iframe
1891                         //      csfir.blog87.fc2.com,      iframe
1892                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1893                         //      sippou2006.blog60.fc2.com, iframe
1894                         // NOTE: 'blog.fc2.com' is not included
1895                 '*.h.fc2.com',  // Adult
1896         ),
1897         '*.fizwig.com',
1898         'forum.ezedia.net',
1899         '*.extra.hu',                   // angelo at jasmin.hu
1900         '*.fanforum.cc',
1901         'fingerprintmedia.com',
1902         '*.filelan.com',
1903         '*.fora.pl',
1904         '*.forka.eu',
1905         '*.foren-city.de',
1906         'foren-gratis.de',
1907         '*.foros.tv',
1908         '*.forospace.com',
1909         'foroswebgratis.com',
1910         '*.forum-on.de',
1911         '*.forum24.se',
1912         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1913         '.forum66.com',
1914         'Forumotion.com' => array(
1915                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1916                 '*.forumactif.com',     // 91.121.41.79
1917                 '*.editboard.com',      // 75.126.156.15
1918                 '*.sosblog.com',        // 74.86.25.140
1919
1920                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1921                 '*.0forum.biz',
1922                 '*.1forum.biz',
1923                 '*.1fr1.net',
1924                 '*.1talk.net',
1925                 '*.2forum.biz',
1926                 '*.3forum.biz',
1927                 '*.4forum.biz',
1928                 '*.4rumer.com',
1929                 '*.4rumer.net',
1930                 '*.4umer.com',
1931                 '*.4umer.net',
1932                 '*.5forum.biz',
1933                 '*.5forum.info',
1934                 '*.5forum.net',
1935                 '*.6forum.biz',
1936                 '*.6forum.info',
1937                 '*.77forum.com',
1938                 '*.7forum.biz',
1939                 '*.7forum.info',
1940                 '*.7forum.net',
1941                 '*.8forum.biz',
1942                 '*.8forum.info',
1943                 '*.8forum.net',
1944                 '*.9forum.biz',
1945                 '*.9forum.info',
1946                 '*.activebb.net',
1947                 '*.aforumfree.com',
1948                 '*.all-forum.net',
1949                 '*.all-up.com',
1950                 '*.alldiscussion.net',
1951                 '*.allgoo.net',
1952                 '*.allgoo.us',
1953                 '*.american-forum.net',
1954                 '*.americantalk.net',
1955                 '*.annuaire-forums.com',
1956                 '*.asiafreeforum.com',
1957                 '*.asianfreeforum.com',
1958                 '*.azureforum.com',
1959                 '*.azurforum.com',
1960                 '*.bestcheapforum.com',
1961                 '*.bestdiscussion.net',
1962                 '*.bestgoo.com',
1963                 '*.bestofforum.com',
1964                 '*.bestofforum.net',
1965                 '*.bestoforum.net',
1966                 '*.bforum.biz',
1967                 '*.big-forum.net',
1968                 '*.board-poster.com',
1969                 '*.board-realtors.com',
1970                 '*.boardonly.com',
1971                 '*.boardrealtors.net',
1972                 '*.boardsmessage.com',
1973                 '*.briceboard.com',
1974                 '*.bubblelol.com',
1975                 '*.buy-forum.com',
1976                 '*.buy-talk.com',
1977                 '*.buyforum.net',
1978                 '*.buygoo.net',
1979                 '*.buygoo.us',
1980                 '*.camelscrew.com',
1981                 '*.cheap-forum.com',
1982                 '*.cheapforum.net',
1983                 '*.chocoforum.com',
1984                 '*.chocoforum.net',
1985                 '*.clic-topic.com',
1986                 '*.clicboard.com',
1987                 '*.clictopic.com',
1988                 '*.clictopic.net',
1989                 '*.clictopics.com',
1990                 '*.clubdiscussion.net',
1991                 '*.coolbb.net',
1992                 '*.crazy4us.com',
1993                 '*.crazyfruits.net',
1994                 '*.createmyboard.com',
1995                 '*.crewcamel.com',
1996                 '*.cyberfreeforum.com',
1997                 '*.discutforum.com',
1998                 '*.discutfree.com',
1999                 '*.do-forum.com',
2000                 '*.do-goo.com',
2001                 '*.do-goo.net',
2002                 '*.do-talk.com',
2003                 '*.dodiscussion.com',
2004                 '*.dogoo.us',
2005                 '*.easydiscussion.net',
2006                 '*.easyforumlive.com',
2007                 '*.englishboard.net',
2008                 '*.englishboards.com',
2009                 '*.ephpbb.com',
2010                 '*.eraseboard.net',
2011                 '*.eraseboards.net',
2012                 '*.euro-talk.net',
2013                 '*.eurodiscussion.net',
2014                 '*.eurogoo.com',
2015                 '*.exchangesboard.com',
2016                 '*.exprimetoi.net',
2017                 '*.fairtopic.com',
2018                 '*.fforum.biz',
2019                 '*.fforumfree.com',
2020                 '*.first-forum.com',
2021                 '*.firstgoo.com',
2022                 '*.fororama.com',
2023                 '*.forum-2007.com',
2024                 '*.forum-actif.net',
2025                 '*.forum-free.biz',
2026                 '*.forum-free.org',
2027                 '*.forum-motion.com',
2028                 '*.forum0.biz',
2029                 '*.forum0.info',
2030                 '*.forum0.net',
2031                 '*.forum2.biz',
2032                 '*.forum3.biz',
2033                 '*.forum3.info',
2034                 '*.forum5.info',
2035                 '*.forum6.biz',
2036                 '*.forum6.info',
2037                 '*.forum7.biz',
2038                 '*.forum777.com',
2039                 '*.forum8.biz',
2040                 '*.forum9.biz',
2041                 '*.foruma.biz',
2042                 '*.forumactif.biz',
2043                 '*.forumactif.info',
2044                 '*.forumactif.name',
2045                 '*.forumactif.ws',
2046                 '*.forumaction.net',
2047                 '*.forumakers.com',
2048                 '*.forumandco.com',
2049                 '*.forumb.biz',
2050                 '*.forumc.biz',
2051                 '*.forumd.biz',
2052                 '*.forumdediscussions.com',
2053                 '*.forumdediscussions.net',
2054                 '*.forume.biz',
2055                 '*.forumeast.com',
2056                 '*.forumf.biz',
2057                 '*.forumfreek.com',
2058                 '*.forumfreez.com',
2059                 '*.forumg.biz',
2060                 '*.forumh.biz',
2061                 '*.forumh.net',
2062                 '*.forumhope.com',
2063                 '*.forumi.biz',
2064                 '*.forumice.net',
2065                 '*.foruminute.com',
2066                 '*.forumj.biz',
2067                 '*.forumj.net',
2068                 '*.forumjonction.com',
2069                 '*.forumk.biz',
2070                 '*.foruml.biz',
2071                 '*.forumm.biz',
2072                 '*.forummotion.com',
2073                 '*.forummotions.com',
2074                 '*.forumn.biz',
2075                 '*.forumn.net',
2076                 '*.forumo.biz',
2077                 '*.forumonline.biz',
2078                 '*.forumotions.com',
2079                 '*.forump.biz',
2080                 '*.forump.info',
2081                 '*.forumperso.com',
2082                 '*.forumpersos.com',
2083                 '*.forumplatinum.com',
2084                 '*.forumpro.fr',
2085                 '*.forumq.biz',
2086                 '*.forumr.biz',
2087                 '*.forumr.net',
2088                 '*.forumrama.com',
2089                 '*.forums-actifs.com',
2090                 '*.forums-actifs.net',
2091                 '*.forums1.net',
2092                 '*.forumsactifs.com',
2093                 '*.forumsactifs.net',
2094                 '*.forumsfree.org',
2095                 '*.forumsline.com',
2096                 '*.forumsmakers.com',
2097                 '*.forumsmotion.com',
2098                 '*.forumsmotions.com',
2099                 '*.forumt.biz',
2100                 '*.forumv.biz',
2101                 '*.forumvalue.com',
2102                 '*.forumw.biz',
2103                 '*.forumy.biz',
2104                 '*.free-boards.net',
2105                 '*.freediscussion.net',
2106                 '*.freediscussions.net',
2107                 '*.freeforum.me.uk',
2108                 '*.freeforumboard.net',
2109                 '*.freeforumfree.com',
2110                 '*.freevideotalk.com',
2111                 '*.frenchboard.com',
2112                 '*.fruitsandco.com',
2113                 '*.fullboards.com',
2114                 '*.fullsubject.com',
2115                 '*.fullsubject.net',
2116                 '*.get-forum.net',
2117                 '*.getdiscussion.com',
2118                 '*.getgoo.net',
2119                 '*.getgoo.us',
2120                 '*.gettalk.net',
2121                 '*.go-board.com',
2122                 '*.go-board.net',
2123                 '*.go-forum.net',
2124                 '*.go-ogler.com',
2125                 '*.gofreeforum.com',
2126                 '*.gogoo.us',
2127                 '*.goo-board.com',
2128                 '*.goo-boys.com',
2129                 '*.goo-dart.com',
2130                 '*.goo-dole.com',
2131                 '*.goo-done.com',
2132                 '*.gooboards.com',
2133                 '*.goodbb.net',
2134                 '*.goodearths.com',
2135                 '*.goodforum.net',
2136                 '*.goodoles.com',
2137                 '*.goodoolz.com',
2138                 '*.gooforum.com',
2139                 '*.gooforums.com',
2140                 '*.googoolz.com',
2141                 '*.great-forum.com',
2142                 '*.heavenforum.com',
2143                 '*.hforum.biz',
2144                 '*.high-forums.com',
2145                 '*.highbb.com',
2146                 '*.highforum.net',
2147                 '*.hightoxic.com',
2148                 '*.homediscussion.net',
2149                 '*.homegoo.com',
2150                 '*.hooxs.com',
2151                 '*.hot-me.com',
2152                 '*.hot4um.com',
2153                 '*.hotdiscussion.net',
2154                 '*.hotgoo.net',
2155                 '*.in-goo.com',
2156                 '*.in-goo.net',
2157                 '*.infodiscussion.net',
2158                 '*.ingoo.us',
2159                 '*.iowoi.com',
2160                 '*.jforum.biz',
2161                 '*.just-forum.net',
2162                 '*.justboard.net',
2163                 '*.justdiscussion.com',
2164                 '*.justforum.net',
2165                 '*.justgoo.com',
2166                 '*.keuf.net',
2167                 '*.lforum.biz',
2168                 '*.lifediscussion.net',
2169                 '*.lifeme.net',
2170                 '*.lightbb.com',
2171                 '*.logu2.com',
2172                 '*.longdomaine.com',
2173                 '*.lovediscussion.net',
2174                 '*.lowcostforum.com',
2175                 '*.make-free-forum.com',
2176                 '*.makeforumfree.com',
2177                 '*.makefreeforum.com',
2178                 '*.mam9.com',
2179                 '*.manageboard.com',
2180                 '*.max2forum.com',
2181                 '*.meabout.com',
2182                 '*.megabb.com',
2183                 '*.moncontact.com',
2184                 '*.moninter.net',
2185                 '*.motion-forum.net',
2186                 '*.motionforum.net',
2187                 '*.motionsforum.com',
2188                 '*.mrforum.net',
2189                 '*.msnboard.net',
2190                 '*.msnyou.com',
2191                 '*.my-free-board.com',
2192                 '*.my-free-boards.com',
2193                 '*.my-free-forum.com',
2194                 '*.my-free-forums.com',
2195                 '*.my-goo.com',
2196                 '*.my-goo.net',
2197                 '*.mydiscussionboard.com',
2198                 '*.myfreeboard.net',
2199                 '*.mygoo.org',
2200                 '*.myrealboard.com',
2201                 '*.netboarder.com',
2202                 '*.netdiscussion.net',
2203                 '*.netgoo.org',
2204                 '*.new-forum.net',
2205                 '*.newdiscussion.net',
2206                 '*.newgoo.net',
2207                 '*.nforum.biz',
2208                 '*.nice-album.com',
2209                 '*.nice-board.biz',
2210                 '*.nice-board.com',
2211                 '*.nice-board.net',
2212                 '*.nice-boards.com',
2213                 '*.nice-boards.net',
2214                 '*.nice-forum.com',
2215                 '*.nice-forum.net',
2216                 '*.nice-forums.com',
2217                 '*.nice-forums.net',
2218                 '*.nice-gallery.net',
2219                 '*.nice-subject.com',
2220                 '*.nice-subjects.com',
2221                 '*.nice-theme.com',
2222                 '*.nice-topic.com',
2223                 '*.nice-topics.com',
2224                 '*.nicealbums.com',
2225                 '*.niceboard.biz',
2226                 '*.niceboard.net',
2227                 '*.niceboards.net',
2228                 '*.nicegalleries.net',
2229                 '*.nicesubject.com',
2230                 '*.nicesubjects.com',
2231                 '*.nicetopic.net',
2232                 '*.nicetopics.com',
2233                 '*.nightforum.net',
2234                 '*.nocost-forum.com',
2235                 '*.nofeeforum.com',
2236                 '*.one-forum.net',
2237                 '*.onediscussion.net',
2238                 '*.onegoo.us',
2239                 '*.onlinegoo.com',
2240                 '*.onlyquery.com',
2241                 '*.open-board.com',
2242                 '*.openu2.com',
2243                 '*.othersboards.com',
2244                 '*.own0.com',
2245                 '*.pforum.biz',
2246                 '*.phpbb9.com',
2247                 '*.phpbbtest.com',
2248                 '*.positifforum.com',
2249                 '*.postalboard.com',
2250                 '*.prodiscussion.net',
2251                 '*.progoo.us',
2252                 '*.pureforum.net',
2253                 '*.qforum.biz',
2254                 '*.quickbb.net',
2255                 '*.realbb.net',
2256                 '*.realfreeforum.com',
2257                 '*.realmsn.com',
2258                 '*.rforum.biz',
2259                 '*.road2us.com',
2260                 '*.roomforum.com',
2261                 '*.saveboard.com',
2262                 '*.screwcamel.com',
2263                 '*.screwcamels.com',
2264                 '*.sendboard.com',
2265                 '*.sephorum.com',
2266                 '*.sforum.biz',
2267                 '*.shootboard.com',
2268                 '*.shop-forum.net',
2269                 '*.shopsubject.com',
2270                 '*.simpleboard.net',
2271                 '*.site-forums.com',
2272                 '*.smileyforum.net',
2273                 '*.sos-forum.net',
2274                 '*.sos4um.com',
2275                 '*.sos4um.net',
2276                 '*.sosforum.net',
2277                 '*.speedyforum.com',
2278                 '*.stationforum.com',
2279                 '*.subject-expert.com',
2280                 '*.subject-line.com',
2281                 '*.subject-tracer.com',
2282                 '*.subjectchange.com',
2283                 '*.subjectdeals.com',
2284                 '*.subjectdebate.com',
2285                 '*.subjectdone.com',
2286                 '*.subjectonline.com',
2287                 '*.subjectschange.com',
2288                 '*.subjectsecrets.com',
2289                 '*.super-forum.net',
2290                 '*.talk-forums.com',
2291                 '*.team-forum.net',
2292                 '*.team-talk.net',
2293                 '*.teamconvention.com',
2294                 '*.teamgoo.net',
2295                 '*.teensboards.com',
2296                 '*.the-talk.net',
2297                 '*.the-up.com',
2298                 '*.thegoo.us',
2299                 '*.thinksubject.com',
2300                 '*.top-board.com',
2301                 '*.top-forum.net',
2302                 '*.top-me.com',
2303                 '*.top-talk.net',
2304                 '*.topdiscussion.com',
2305                 '*.topgoo.net',
2306                 '*.topic-board.com',
2307                 '*.topic-board.net',
2308                 '*.topic-debate.com',
2309                 '*.topic-ideas.com',
2310                 '*.topic-mail.com',
2311                 '*.topic-zone.com',
2312                 '*.topicboard.net',
2313                 '*.topicboards.com',
2314                 '*.topicmanager.com',
2315                 '*.topicsolutions.net',
2316                 '*.toxicfarm.com',
2317                 '*.unlimitboard.com',
2318                 '*.unlimitedboard.com',
2319                 '*.unlimitedforum.com',
2320                 '*.up-with.com',
2321                 '*.up-your.com',
2322                 '*.urealboard.com',
2323                 '*.user-board.net',
2324                 '*.userboard.net',
2325                 '*.users-board.com',
2326                 '*.users-board.net',
2327                 '*.usersboard.com',
2328                 '*.usersboard.net',
2329                 '*.webgoo.us',
2330                 '*.withboards.com',
2331                 '*.withme.us',
2332                 '*.worldgoo.com',
2333                 '*.yahooboard.net',
2334                 '*.yforum.biz',
2335                 '*.yoo7.com',
2336                 '*.youneed.us',
2337                 '*.your-board.com',
2338                 '*.your-talk.com',
2339                 '*.yourme.net',
2340                 '*.zforum.biz',
2341
2342                 // 75.126.156.15 redirect to forumactif.com
2343                 '*.actifforum.com',
2344                 '*.fr-bb.com',
2345                 '*.superforum.fr',
2346
2347                 // 75.126.156.15 redirect to editboard.com
2348                 '*.bbfr.net',
2349                 '*.bbgraf.com',
2350                 '*.cinebb.com',
2351                 '*.darkbb.com',
2352                 '*.dynamicbb.com',
2353                 '*.zikforum.com',
2354
2355                 // 74.86.25.140 Used: sosblog.com
2356                 '*.0-up.com',
2357                 '*.0-yo.com',
2358                 '*.04live.com',
2359                 '*.06fr.com',
2360                 '*.0fra.com',
2361                 '*.0jet.com',
2362                 '*.0yoo.com',
2363                 '*.1toxic.com',
2364                 '*.2k00.com',
2365                 '*.2xik.com',
2366                 '*.blog-2007.com',
2367                 '*.blog-2008.com',
2368                 '*.blog-2009.com',
2369                 '*.blog-2010.com',
2370                 '*.blog-actif.net',
2371                 '*.blog-marley.com',
2372                 '*.blog-talker.com',
2373                 '*.blog2009.com',
2374                 '*.blogactif.net',
2375                 '*.blogalbums.com',
2376                 '*.blogalerie.com',
2377                 '*.blogaleries.com',
2378                 '*.blogallerys.com',
2379                 '*.blogandme.com',
2380                 '*.blogandyou.com',
2381                 '*.blogbubble.net',
2382                 '*.blogdollz.com',
2383                 '*.bloggeuse.net',
2384                 '*.bloggeuses.com',
2385                 '*.bloginstinct.com',
2386                 '*.bloginternet.net',
2387                 '*.blogmakers.net',
2388                 '*.blogmarley.net',
2389                 '*.blogminister.net',
2390                 '*.blogmorane.com',
2391                 '*.blognboard.com',
2392                 '*.blogotek.net',
2393                 '*.blogpas.com',
2394                 '*.blogpublisher.net',
2395                 '*.blogsalbum.com',
2396                 '*.blogsalbums.com',
2397                 '*.blogsfan.net',
2398                 '*.blogsgallerys.com',
2399                 '*.blogsitephp.com',
2400                 '*.blogsland.net',
2401                 '*.blogsmaker.com',
2402                 '*.blogsmakers.com',
2403                 '*.blogspeed.net',
2404                 '*.blogsup.net',
2405                 '*.blogsutil.com',
2406                 '*.blogsutils.com',
2407                 '*.blogsystem.net',
2408                 '*.blogtalker.net',
2409                 '*.blogtheque.net',
2410                 '*.blogutil.com',
2411                 '*.blogvsboard.com',
2412                 '*.briceblog.com',
2413                 '*.cibleblog.com',
2414                 '*.cristalblog.com',
2415                 '*.crystalblog.net',
2416                 '*.dad-blog.com',
2417                 '*.daddy-blog.com',
2418                 '*.defaultblog.com',
2419                 '*.discussionsblog.com',
2420                 '*.dollzblog.com',
2421                 '*.dtoxic.com',
2422                 '*.easiestblog.net',
2423                 '*.espaceblog.net',
2424                 '*.exitblog.net',
2425                 '*.expensiveblog.com',
2426                 '*.extra-blog.net',
2427                 '*.extrablog.net',
2428                 '*.facileblog.com',
2429                 '*.forblogger.com',
2430                 '*.forumsblogs.com',
2431                 '*.freephpblog.com',
2432                 '*.fresh-blog.net',
2433                 '*.galleryblog.net',
2434                 '*.galleryblogs.net',
2435                 '*.gallerysblog.com',
2436                 '*.gallerysblogs.com',
2437                 '*.hyper-blog.net',
2438                 '*.hyper-blogger.com',
2439                 '*.hyper-blogger.net',
2440                 '*.hyperblogger.net',
2441                 '*.instinctblog.com',
2442                 '*.jeunblog.com',
2443                 '*.jeuneblog.com',
2444                 '*.judblog.com',
2445                 '*.makeblog.net',
2446                 '*.man-blog.net',
2447                 '*.man-blogs.com',
2448                 '*.man-blogs.net',
2449                 '*.manblog.net',
2450                 '*.manblog.org',
2451                 '*.manblog.us',
2452                 '*.manblogs.net',
2453                 '*.mansblog.net',
2454                 '*.mansblogs.com',
2455                 '*.mansblogs.net',
2456                 '*.meetingsblogs.com',
2457                 '*.men-blog.net',
2458                 '*.men-blogs.com',
2459                 '*.men-blogs.net',
2460                 '*.menblog.us',
2461                 '*.menblogs.net',
2462                 '*.mensblogs.net',
2463                 '*.messaginblog.com',
2464                 '*.monblogger.com',
2465                 '*.mum-blog.com',
2466                 '*.mummy-blog.com',
2467                 '*.mummyblog.com',
2468                 '*.myareablog.com',
2469                 '*.myblog-online.net',
2470                 '*.mybloginternet.com',
2471                 '*.myblogland.com',
2472                 '*.myblogmag.com',
2473                 '*.myfreshblog.com',
2474                 '*.myinternetblog.net',
2475                 '*.myoverblog.com',
2476                 '*.myoverblog.net',
2477                 '*.mysharedblog.com',
2478                 '*.nice-albums.com',
2479                 '*.nice-galleries.com',
2480                 '*.nicealbum.net',
2481                 '*.nicegallery.net',
2482                 '*.notreblogger.com',
2483                 '*.outilblog.com',
2484                 '*.over-blogger.com',
2485                 '*.overblogger.com',
2486                 '*.pasblog.com',
2487                 '*.pasblog.net',
2488                 '*.perfect-blog.net',
2489                 '*.perfectblog.net',
2490                 '*.phpblogsite.com',
2491                 '*.phpmyblog.net',
2492                 '*.plateformeblog.com',
2493                 '*.playblogger.com',
2494                 '*.publishmyblog.com',
2495                 '*.pulseblog.net',
2496                 '*.pulseblogs.com',
2497                 '*.puretoxic.com',
2498                 '*.reservedblog.com',
2499                 '*.shareblog.net',
2500                 '*.shareblogs.net',
2501                 '*.shared-blogs.com',
2502                 '*.sharedblog.net',
2503                 '*.sharedblogs.net',
2504                 '*.solideblog.com',
2505                 '*.systemeblog.com',
2506                 '*.talkmeblog.com',
2507                 '*.toolsblog.net',
2508                 '*.toxicplace.com',
2509                 '*.ufreeblog.com',
2510                 '*.uliveblog.com',
2511                 '*.ultratoxic.com',
2512                 '*.utilblog.com',
2513                 '*.utilblogs.com',
2514                 '*.utilsblog.com',
2515                 '*.utilsblogs.com',
2516                 '*.various-blog.com',
2517                 '*.various-blog.net',
2518                 '*.various-blogs.com',
2519                 '*.various-blogs.net',
2520                 '*.variusblog.com',
2521                 '*.versusblog.com',
2522                 '*.vieuxblog.com',
2523                 '*.web-day.net',
2524                 '*.whatsblog.net',
2525                 '*.woman-blog.net',
2526                 '*.woman-blogs.com',
2527                 '*.woman-blogs.net',
2528                 '*.womanblog.com',
2529                 '*.womanblog.org',
2530                 '*.womanblog.us',
2531                 '*.womanblogs.net',
2532                 '*.womansblogs.com',
2533                 '*.womansblogs.net',
2534                 '*.women-blog.net',
2535                 '*.women-blogs.com',
2536                 '*.women-blogs.net',
2537                 '*.womenblog.us',
2538                 '*.womenblogs.net',
2539                 '*.womensblog.net',
2540                 '*.womensblogs.net',
2541                 '*.youblog.net',
2542                 '*.yourliveblog.com',
2543                 '*.yourweblog.net',
2544         ),
2545         '*.forumcommunity.net',
2546         '*.forumer.com',
2547         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2548         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2549         'forumhosting.org',
2550         '*.forums.com',
2551         'forumbolt.com',
2552         'phpbb.forumgratis.com',
2553         'forumlari.net',
2554         '*.forumlivre.com',
2555         'forumnow.com.br',
2556         '*.forumppl.com',
2557         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2558         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2559                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2560                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2561                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2562         '*.fory.pl',
2563         'fotolog.com',
2564         '*.fr33webhost.com',
2565         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2566         '*.free-25.de',
2567         '*.free-bb.com',
2568         'Free-Blog-Hosting.com' => array(
2569                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2570                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2571                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2572                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2573                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2574         ),
2575         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2576         'free-guestbook.net',
2577         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2578         'freebb.nl',
2579         '*.freeclans.de',
2580         '*.freehostplace.com',  // by contact at keepclear.co.uk
2581         '*.freelinuxhost.com',  // by 100webspace.com
2582         '*.nofeehost.com',
2583         '*.freehyperspace.com',
2584         'freeforum.at',                 // by Sandro Wilhelmy
2585         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2586         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2587         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2588         '*.freewebhostingpro.com',
2589         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2590         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2591                 '*.6te.net',
2592                 '*.ueuo.com',
2593                 '*.orgfree.com',
2594         ),
2595         '*.freewebpage.org',
2596         'Freewebs.com' => array(        // by inquiries at freewebs.com
2597                 'freewebs.com',
2598                 'freewebsfarms.com',
2599         ),
2600         '*.freewebspace.net.au',
2601         'freewebtown.com',
2602         '*.freemyforum.com',    // by messahost at gmail.com
2603         'freepowerboards.com',
2604         '*.freepowerboards.com',
2605         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2606         'Funpic.de' => array(   // by alexander at liemen.net
2607                 '*.funpic.de',
2608                 '*.funpic.org',
2609         ),
2610         'gb-hoster.de',
2611         '*.genblogger.com',
2612         'GetBetterHosting.com' => array(
2613                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2614                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2615         ),
2616         '*.gexxe.com',
2617         '*.goodboard.de',
2618         'gossiping.net',
2619         '*.greatnuke.com',
2620         '*.guestbook.de',
2621         'gwebspace.de',
2622         'Google.com' => array(
2623                 '*.blogspot.com',
2624                 'docs.google.com',
2625                 '*.googlegroups.com',           ///web/
2626                 '*.googlepages.com',
2627                 'groups-beta.google.com',
2628                 'groups.google.*',       ///group/ Seems widely distributed
2629                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2630                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2631                         //'groups.google.it', ...
2632         ),
2633         'guestbook.at',
2634         'club.giovani.it',
2635         '*.gratis-server.de',
2636         'healthcaregroup.com',
2637         '*.heliohost.org',
2638         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2639                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2640                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2641                 '*.front.ru',           // (domain at hc.ru)
2642                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2643                 '*.hotbox.ru',          // (domain at hc.ru)
2644                 '*.hotmail.ru',         // (hosting at hc.ru)
2645                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2646                 '*.land.ru',            // (domain at hc.ru)
2647                 '*.mail15.com',         // (hosting at hc.ru)
2648                 '*.mail333.com',        // (hosting at hc.ru)
2649                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2650                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2651                 '*.pisem.net',          // (hosting at hc.ru)
2652                 '*.pochta.ru',          // (domain at hc.ru)
2653                 '*.pochtamt.ru',        // (domain at hc.ru)
2654                 '*.pop3.ru',            // (domain at hc.ru)
2655                 '*.rbcmail.ru',         // (domain at hc.ru)
2656                 '*.smtp.ru',            // (domain at hc.ru)
2657         ),
2658         '*.hiblogger.com',              // by chiaokin at gmail.com
2659         '*.hit.bg',                             // by forumup.com ??
2660         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2661         '*.host-page.com',
2662         '*.hostingclub.de',
2663         'forums.hspn.com',
2664         '*.httpsuites.com',
2665         '*.hut2.ru',
2666         'ibfree.org',                   // 208.101.45.88
2667         'IC.cz' => array(
2668                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2669                 '*.hu.cz',                      // internetcentrum at gmail.com
2670                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2671                 '*.ic.cz',                      // internetcentrum at gmail.com
2672                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2673                 '*.own.cz',                     // internetcentrum at gmail.com
2674                 '*.phorum.cz',          // internetcentrum at gmail.com
2675                 '*.tym.cz',                     // internetcentrum at gmail.com
2676                 '*.tym.sk',                     // jobot at ignum.cz
2677                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2678                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2679                 '*.yw.sk',                      // jobot at ignum.cz
2680         ),
2681         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2682                 '*.0moola.com',
2683                 '*.3000mb.com',
2684                 '.501megs.com',
2685                 '*.teracities.com',
2686                 '*.xoompages.com',
2687         ),
2688         '*.icspace.net',
2689         'iEUROP.net' => array(
2690                 '*.ibelgique.com',
2691                 '*.iespana.es',
2692                 '*.ifrance.com',
2693                 '*.iitalia.com',
2694                 '*.iquebec.com',
2695                 '*.isuisse.com',
2696         ),
2697         '*.ihateclowns.net',
2698         '*.ii55.com',
2699         '*.ipbfree.com',
2700         '*.iphorum.com',
2701         '*.blog.ijijiji.com',
2702         '*.info.com',
2703         '*.informe.com',
2704         'it168.com',
2705         '.iwannaforum.com',
2706         '*.jconserv.net',
2707         '*.jeeran.com',
2708         '*.jeun.fr',
2709         '*.joolo.com',
2710         '*.journalscape.com',
2711         '*.justfree.com',
2712         'kataweb.it' => array(          // kata-redir.kataweb.it
2713                 '*.blog.kataweb.it',
2714                 '*.repubblica.it',
2715         ),
2716         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2717         '*.kokoom.com',
2718         'koolpages.com',
2719         '*.kostenlose-foren.org',
2720         '*.ksiegagosci.info',
2721         'LaCoctelera.com' => array(
2722                 'lacoctelera.com',      // by alberto at the-cocktail.com
2723                 'espacioblog.com',      // by dominios at ferca.com
2724         ),
2725         'Lide.cz' => array(
2726                 '*.lide.cz',
2727                 '*.sblog.cz',
2728         ),
2729         '*.lioru.com',
2730         'limmon.net',
2731         'linkinn.com',
2732         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2733         'listible.com',                 ///list/
2734         'Livedoor.com' => array(
2735                 'blog.livedoor.jp',
2736                 '*.blog.livedoor.com',  // redirection
2737         ),
2738         '*.livejournal.com',
2739         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2740         '*.logme.nl',
2741         'lol.to',
2742         'ltss.luton.ac.uk',
2743         'Lycos.com' => array(
2744                 '.angelfire.com',       // angelfire.lycos.com
2745
2746                 '*.jubii.dk',   // search., medlem.
2747                 '*.jubiiblog.co.uk',
2748                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2749                 '*.jubiiblog.de',
2750                 '*.jubiiblog.dk',
2751                 '*.jubiiblog.fr',
2752                 '*.jubiiblog.it',
2753                 '*.jubiiblog.nl',
2754
2755                 '*.lycos.at',
2756                 '*.lycos.ch',
2757                 '*.lycos.co.uk',
2758                 'angelfire.lycos.com',
2759                 '*.lycos.de',
2760                 '*.lycos.es',
2761                 '*.lycos.fr',
2762                 '*.lycos.it',           // by Lycos Europe GmbH
2763                 '*.lycos.nl',
2764
2765                 '*.spray.se',
2766                 '*.sprayblog.se',
2767
2768                 '*.tripod.com',
2769         ),
2770         '*.mastertopforum.com',
2771         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2772         'meneame.net',
2773         '*.memebot.com',
2774         '*.messageboard.nl',
2775         'mokono GmbH' => array(
2776                 '*.blog.com.es',
2777                 '*.blog.de',
2778                 '*.blog.fr',
2779                 '*.blog.co.uk',
2780                 '*.blog.ca',
2781                 '*.blogs.se',
2782                 '*.blogs.fi',
2783                 '*.blogs.no',
2784                 '*.blogs.dk',
2785                 '*.blogs.ro',
2786                 '*.weblogs.pl',
2787                 '*.weblogs.cz',
2788                 '*.weblogs.hu',
2789         ),
2790         'mojklc.com',
2791         '*.mundoforo.com',
2792         '*.money-host.com',
2793         'MonForum.com' => array(
2794                 '*.monforum.com',
2795                 '*.monforum.fr',
2796         ),
2797         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2798         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2799         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2800         'myblog.is',
2801         'myblogma.com',
2802         '*.myblogvoice.com',
2803         'myblogwiki.com',
2804         '*.myforum.ro',
2805         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2806         '*.myfreewebs.net',
2807         '*.mysite.com',
2808         '*.myxhost.com',
2809         '*.netfast.org',
2810         'NetGears.com' => array(
2811                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2812                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2813                 '*.freewebspace.com',   // 64.49.236.72
2814         ),
2815         'Netscape.com' => array('*.netscape.com'),
2816         'users.newblog.com',
2817         'neweconomics.info',
2818         '*.newsit.es',                          // 75.126.252.108
2819         '*.nm.ru',
2820         '*.nmj.pl',
2821         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2822         'Northsky.com' => array(
2823                 // by hostmaster at northsky.com
2824                 // northsky.com redirects to communityarchitect.com
2825
2826                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2827                 '*.00author.com',
2828                 '*.00band.com',
2829                 '*.00books.com',
2830                 '*.00cash.com',
2831                 '*.00cd.com',
2832                 '*.00dvd.com',
2833                 '*.00family.com',
2834                 '*.00game.com',
2835                 '*.00home.com',
2836                 '*.00it.com',
2837                 '*.00me.com',
2838                 '*.00movies.com',
2839                 '*.00page.com',
2840                 '*.00politics.com',
2841                 '*.00sf.com',
2842                 '*.00show.com',
2843                 '*.00song.com',
2844                 '*.00trek.com',
2845                 '*.00video.com',
2846                 '*.0me.com',
2847                 '*.0pi.com',
2848                 '*.happy-couple.com',
2849                 '*.warp0.com',
2850
2851                 '*.50megs.com',         // 64.136.25.170
2852
2853                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2854                 '*.00server.com',
2855                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2856                 '*.fanspace.com',
2857
2858                 // 64.136.25.168 by Mark Bishop
2859                 '*.00go.com',
2860                 '*.00space.com',
2861                 '*.00sports.com',
2862         ),
2863         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2864         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2865         'onlyfree.de',
2866         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2867         '*.ohost.de',
2868         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2869                 '.friko.pl',
2870                 '.jak.pl',
2871                 '.nazwa.pl',
2872                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2873                 '.w8w.pl',
2874                 '.za.pl',
2875                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2876         ),
2877         'oyax.com',                             ///user_links.php
2878         '*.p2a.pl',
2879         '*.parlaris.com',
2880         '*.pathfinder.gr',
2881         '*.persianblog.com',
2882         '*.phorum.pl',
2883         'Phpbb24.com' => array( // by Daniel Eriksson
2884                 '*.createforum.us',     // registry at webbland.se
2885                 '*.forumportal.us',     // registry at webbland.se
2886                 '*.freeportal.us',      // registry at network24.se
2887                 '*.phpbb2.us',          // daniel at danielos.com
2888                 '*.phpbb24.com',        // daniel at danielos.com
2889                 '*.myforumportal.com',  // daniel at webbland.se
2890         ),
2891         'phpbb4you.com',
2892         'phpbbcommunity.com',
2893         '*.phpbbx.de',
2894         '*.pochta.ru',
2895         '*.portbb.com',
2896         '*.portcms.com',
2897         'powerwebmaster.de',
2898         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2899         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2900         '*.probook.de',
2901         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2902         '*.pun.pl',
2903         'putfile.com',
2904         '*.quickfreehost.com',
2905         'quizilla.com',
2906         '*.quotaless.com',
2907         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2908         'razyboard.com',
2909         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2910         'realhp.de',
2911         'reddit.com',           ///user/
2912         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2913                 '*.juicypornhost.com',
2914                 '*.pornzonehost.com',
2915                 '*.xhostar.com',
2916         ),
2917         'RIN.ru' => array(
2918                 '*.sbn.bz',
2919                 '*.wol.bz',
2920         ),
2921         '*.sayt.ws',
2922         'Seblg.com' => array(
2923                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2924                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2925         ),
2926         '*.seo-blog.org',
2927         '*.shoutpost.com',
2928         '*.siamforum.com',
2929         '*.siteburg.com',
2930         '*.sitehome.ru',
2931         '*.sitesfree.com',              // support at livesearching.com
2932         '*.sitesled.com',
2933         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2934         'SmarTrans.com' => array(
2935                 '.3w.to',
2936                 '.aim.to',
2937                 '.djmp.jp',
2938                 '.nihongourl.nu',
2939                 '.url.sh',              // Says SmarTrans
2940                 '.urljp.com',
2941                 '.www1.to',
2942                 '.www2.to',
2943                 '.www3.to',
2944         ),
2945         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2946         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2947         'members.spboards.com',
2948         'forums.speedguide.net',
2949         'Sphosting.com' => array(       // by admin at sphosting.com
2950                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2951                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2952                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2953                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2954                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2955         ),
2956         '*.spicyblogger.com',
2957         '*.spotbb.com',
2958         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2959         '*.squarespace.com',
2960         'stickypond.com',
2961         'stormloader.com',
2962         'strikebang.com',
2963         '*.sultryserver.com',
2964         '*.t35.com',
2965         '*.talks.at',
2966         'tabletpcbuzz.com',
2967         '*.talkthis.com',
2968         'tbns.net',
2969         'telasipforums.com',
2970         'theforumhub.com',
2971         'thestudentunderground.org',
2972         'think.ubc.ca',
2973         '*.thumblogger.com',
2974         'Topix.com' => array(
2975                 'topix.com',
2976                 'topix.net',
2977         ),
2978         'forum.tourism-talk.com.au',
2979         'tycho at e-lab.nl' => array(
2980                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2981                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2982         ),
2983         '*.tumblr.com',
2984         'UcoZ Web-Services' => array(
2985                 '*.3dn.ru',
2986                 '*.clan.su',
2987                 '*.moy.su',
2988                 '*.my1.ru',
2989                 '*.p0.ru',
2990                 '*.pp.net.ua',
2991                 '*.ucoz.co.uk',
2992                 '*.ucoz.com',
2993                 '*.ucoz.net',
2994                 '*.ucoz.org',
2995                 '*.ucoz.ru',
2996                 '*.ws.co.ua',
2997         ),
2998         '*.unforo.net',
2999         'veoh.com',
3000         '*.vdforum.ru',
3001         '*.vtost.com',
3002         '*.vidiac.com',
3003         'Voila.fr' => array('.site.voila.fr'),
3004         'volny.cz',
3005         'voy.com',
3006         '*.welover.org',
3007         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
3008                 '*.fasthost.tv',
3009                 '*.hothost.tv',
3010                 '*.isgreat.tv',
3011                 '*.issexy.tv',
3012                 '*.isterrible.tv',
3013                 '*.somegood.tv',
3014                 '*.adultnations.com',
3015                 '*.alladultfemale.com',
3016                 '*.alladultmale.com',
3017                 '*.allbisexual.com',
3018                 '*.allbreast.com',
3019                 '*.allfeminism.com',
3020                 '*.allmanpages.com',
3021                 '*.allmendirect.com',
3022                 '*.allphotoalbum.com',
3023                 '*.allsexpages.com',
3024                 '*.allwomanweb.com',
3025                 '*.attorney-site.com',
3026                 '*.bedclip.com',
3027                 '*.bestfamilysite.com',
3028                 '*.bestmusicpages.com',
3029                 '*.bigmoron.com',
3030                 '*.bourgeoisonline.com',
3031                 '*.candyfrom.us',
3032                 '*.cartoonhit.com',
3033                 '*.cat-on-line.com',
3034                 '*.chokesondick.com',
3035                 '*.closeupsof.us',
3036                 '*.cpa-site.com',
3037                 '*.dampgirl.com',
3038                 '*.dampgirls.com',
3039                 '*.deepestfetish.com',
3040                 '*.docspages.com',
3041                 '*.dog-on-line.com',
3042                 '*.dogcountries.com',
3043                 '*.dognations.com',
3044                 '*.doingitwith.us',
3045                 '*.drenchedface.com',
3046                 '*.drenchedlips.com',
3047                 '*.drspages.com',
3048                 '*.edogden.com',
3049                 '*.eroticountry.com',
3050                 '*.fasthost.tv',
3051                 '*.fineststars.com',
3052                 '*.foronlinegames.com',
3053                 '*.forplanetearth.com',
3054                 '*.freeadultparty.com',
3055                 '*.freespeechsite.com',
3056                 '*.gayadultxxx.com',
3057                 '*.gaytaboo.com',
3058                 '*.greatcookery.com',
3059                 '*.greatrecipepages.com',
3060                 '*.greatstreamingvideo.com',
3061                 '*.hatesit.com',
3062                 '*.hothost.tv',
3063                 '*.iscrappy.com',
3064                 '*.isgreat.tv',
3065                 '*.issexy.tv',
3066                 '*.isterrible.tv',
3067                 '*.itinto.us',
3068                 '*.japannudes.net',
3069                 '*.jesussave.us',
3070                 '*.jesussaveus.com',
3071                 '*.labialand.com',
3072                 '*.lettersfrom.us',
3073                 '*.lookingat.us',
3074                 '*.lunaticsworld.com',
3075                 '*.microphallus.com',
3076                 '*.mycatshow.com',
3077                 '*.mydogshow.com',
3078                 '*.myhardman.com',
3079                 '*.mylawsite.net',
3080                 '*.mylovething.com',
3081                 '*.onasoapbox.com',
3082                 '*.onlinepulpit.com',
3083                 '*.petitionthegovernment.com',
3084                 '*.photosfor.us',
3085                 '*.picturetrades.com',
3086                 '*.pleasekiss.us',
3087                 '*.politicalemergency.com',
3088                 '*.power-emergency.com',
3089                 '*.prayingfor.us',
3090                 '*.realbadidea.com',
3091                 '*.realisticpolitics.com',
3092                 '*.reallybites.com',
3093                 '*.reallypumping.us',
3094                 '*.reallyrules.com',
3095                 '*.reallysuckass.com',
3096                 '*.reallysucksass.com',
3097                 '*.realsweetheart.com',
3098                 '*.rottenass.com',
3099                 '*.schoolreference.com',
3100                 '*.sexheroes.com',
3101                 '*.sharewith.us',
3102                 '*.smutstars.com',
3103                 '*.soakinglips.com',
3104                 '*.somegood.tv',
3105                 '*.songsfrom.us',
3106                 '*.stinkingfart.com',
3107                 '*.stinkyhands.com',
3108                 '*.storiesfrom.us',
3109                 '*.taboocountry.com',
3110                 '*.television-series.com',
3111                 '*.thisbelongsto.us',
3112                 '*.totallyboning.us',
3113                 '*.vaginasisters.com',
3114                 '*.verydirtylaundry.com',
3115                 '*.videosfor.us',
3116                 '*.videosfrom.us',
3117                 '*.videosof.us',
3118                 '*.virtualdogshit.com',
3119                 '*.web1000.com',
3120                 '*.webpicturebook.com',
3121                 '*.wronger.com',
3122                 '*.xxxnations.com',
3123                 '*.yourwaywith.us',
3124         ),
3125         'webblog.ru',
3126         'weblogmaniacs.com',
3127         '.webng.com',                   // www.*, www3.*
3128         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3129         'websitetoolbox.com',
3130         '*.webtropia.com',
3131         'Welnet.de' => array(
3132                 'welnet.de',
3133                 'welnet4u.de',
3134         ),
3135         'wh-gb.de',
3136         '*.wikidot.com',
3137         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3138         '*.wmjblogs.ru',
3139         '*.wordpress.com',
3140         '.wsboards.com',                // Noticed this site had been removed due to spam
3141         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3142         '*.xforum.se',
3143         'xfreeforum.com',
3144         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3145         '*.xoomwebs.com',
3146         '.xterm.org',
3147         '.freeblogs.xp.tl',
3148         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3149         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3150         'Yahoo.com' => array(
3151                 'flickr.com',
3152                 'geocities.com',
3153         ),
3154         'YANDEX, LLC.' => array(        // noc at yandex.net
3155                 '*.narod.ru',
3156                 'ya.ru',
3157                 'yandex.ru',
3158         ),
3159         '*.yeahost.com',
3160         'yourfreebb.de',
3161         'Your-Websites.com' => array(
3162                 '*.your-websites.net',
3163                 '*.web-space.ws',
3164         ),
3165
3166
3167         '*.heliohost.org',      // by ashoat at gmail.com
3168         'X10Hosting.com' => array(
3169                 // by support at clockworkcomputers.com
3170                 '*.x10hosting.com',
3171                 '*.elementfx.com',
3172                 '*.exofire.net',
3173                 '*.pcriot.com',
3174         ),
3175         '.zendurl.com',         // by ajcar1992 at gmail.com
3176 );
3177
3178 // --------------------------------------------------
3179
3180 $blocklist['B-2'] = array(
3181
3182         // B-2: Jacked contents, something implanted
3183         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3184         '*.3dm3.com',
3185         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3186         '*.1fr1.com',
3187         'a4aid.org',
3188         'aac.com',
3189         '*.aamad.org',
3190         'ad-pecjak.si',
3191         'agnt.org',
3192         'alwanforthearts.org',
3193         '*.anchor.net.au',
3194         'anewme.org',
3195         'arcrockett.com',               ///golf/excel/
3196         'arisedesign.net',              //Portfolio/d981/
3197         'internetyfamilia.asturiastelecentros.com',
3198         'ballblair.com',                ///images/thumbs/
3199         'Ball State University' => array('web.bsu.edu'),
3200         'btofaq.net',                   ///v3/forum
3201         'blepharospasm.org',
3202         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3203         'nyweb.bowlnfun.dk',
3204         '*.buzznet.com',
3205         'Carroll College' => array(
3206                 'carroll.edu',          ///boards/
3207         ),
3208         '*.canberra.net.au',
3209         'castus.com',
3210         'Case Western Reserve University' => array('case.edu'),
3211         'ceval.de',
3212         'chaco.gov.ar',
3213         'chasingrainbowsaustralia.com', ///geometry/
3214         'codespeak.net',
3215         'Colorado School of Mines' => array('ticc.mines.edu'),
3216         '*.colourware.co.uk',
3217         'cpuisp.com',
3218         'International Christian University' => array('icu.edu.ua'),
3219         '*.iphpbb.com',
3220         'board-z.de',
3221         '*.board-z.de',
3222         'California State University Stanislaus' => array('writing.csustan.edu'),
3223         'cannon.co.za',
3224         'columbosgarden.com',
3225         '*.communityhost.de',
3226         'connectionone.org',
3227         'deathwinds.com',
3228         'deforum.org',
3229         'delayedreaction.org',
3230         'deproduction.org',
3231         'dc503.org',
3232         'dialadeck.com',                ///images/
3233         'dre-centro.pt',
3234         'Duke University' => array('devel.linux.duke.edu'),
3235         '*.esen.edu.sv',
3236         'forums.drumcore.com',
3237         'dundeeunited.org',
3238         'energyglass.com.ua',
3239         'equitas.com.au',               ///images/mim3/, no index.html
3240         'exclusivehotels.com',
3241         'info.ems-rfid.com',
3242         'fairyfunkyard.com',    ///images_files/files/
3243         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3244         'fbwloc.com',
3245         '.fhmcsa.org.au',
3246         'findyourwave.co.uk',
3247         'frogcafe.net',
3248         'plone4.fnal.gov',
3249         'freeforen.com',
3250         'funkdoc.com',
3251         'funnyclipcentral.com',
3252         'gearseds.com',
3253         'generationrice.com',
3254         'ghettojava.com',
3255         'gnacademy.org',
3256         '*.goodboard.de',
3257         'GreenDayVideo.net' => array(
3258                 'greendayvideo.net',
3259                 'espanol.greendayvideo.net',
3260         ),
3261         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3262         'Harvard Law School' => array('blogs.law.harvard.edu'),
3263         'helpiammoving.com',
3264         'homepage-dienste.com',
3265         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3266         'Howard University' => array('networks.howard.edu'),
3267         'hullandhull.com',
3268         'Huntington University' => array('huntington.edu'),
3269         'huskerink.com',
3270         '.hyba.info',
3271         'ideas4you.com',        ///photos/
3272         'inda.org',
3273         '*.indymedia.org',      // by abdecom at riseup.net
3274         'instantbulletin.com',
3275         'internetincomeclub.com',
3276         '*.inventforum.com',
3277         'Iowa State University' => array('boole.cs.iastate.edu'),
3278         'ipwso.org',
3279         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3280         'ironmind.com',
3281         'skkustp.itgozone.com', // hidden JavaScript
3282         'jazz2online.com',
3283         '.jloo.org',
3284         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3285         'kjon.com',
3286         'Kazan State University' => array(
3287                 'dir.kzn.ru',
3288                 'sys.kcn.ru',
3289         ),
3290         'test.kernel.org',
3291         'kevindmurray.com',
3292         'kroegjesroutes.nl',
3293         '.legion.org',
3294         'Loyola Marymount University' => array('lmu.edu'),
3295         'forum.lixium.fr',
3296         'macfaq.net',
3297         'macvirus.org',         ///board/
3298         'me4x4.com',
3299         'microbial-ecology.net',
3300         'minsterscouts.org',
3301         'morallaw.org',
3302         'morerevealed.com',
3303         'macronet.org',
3304         'mamiya.co.uk',
3305         'vcd.mmvcd.com',
3306         'Monmouth College' => array('department.monm.edu'),
3307         'mountainjusticemedia.org',
3308         '*.mybbland.com',
3309         'mydlstore.com',
3310         '*.netboardz.com',
3311         'North Carolina A&T State University' => array(
3312                 'ncat.edu',
3313                 'my.ncat.edu',
3314                 'hlc.ncat.edu',
3315         ),
3316         'placetobe.org',
3317         'Naropa University' => array(
3318                 'naropa.edu',                   ///forum/
3319         ),
3320         'users.nethit.pl',
3321         'nightclubvip.net',
3322         'njbodybuilding.com',
3323         'nlen.org',
3324         'North Carolina School of Science and Mathematics' => array(
3325                 'neverland.ncssm.edu',  ///include/web/forum/
3326                 'grid.ncssm.edu',               ///ncssm_grid/
3327         ),
3328         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3329         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3330         'offtextbooks.com',
3331         'ofimatika.com',
3332         'olympiafoto.com',              ///images/
3333         'omakase-net',                  // iframe
3334         'omikudzi.ru',
3335         'openchemist.net',
3336         'palungjit.com',
3337         'pataphysics-lab.com',
3338         'paypaldev.org',
3339         'paullima.com',
3340         'perl.org.br',
3341         'pfff.co.uk',
3342         'pimpo.com',                    ///_old_site/
3343         'pix4online.co.uk',
3344         'plone.dk',
3345         'preform.dk',
3346         'privatforum.de',
3347         'publicityhound.net',
3348         'puppylinux.net',               ///news/content/counter/pages/
3349         'qea.com',
3350         'rbkdesign.com',
3351         'rehoboth.com',
3352         'rodee.org',
3353         'ryanclark.org',
3354         '*.reallifelog.com',
3355         'rkphunt.com',
3356         'rso-csp.org',                  ///bulletins/
3357         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3358         'sapphireblue.com',
3359         'saskchamber.com',
3360         'savevoorhees.org',
3361         'sdhmalenovice.cz',             //galerie/
3362         'selikoff.net',
3363         'serbisyopilipino.org',
3364         'setbb.com',
3365         'sharejesusinternational.com',
3366         'silver-tears.net',
3367         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3368         '.softpress.com',
3369         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3370         'fora.taniemilitaria.pl',       ///phpbb
3371         'tehudar.ru',
3372         'Tennessee Tech University' => array('manila.tntech.edu'),
3373         'thebluebird.ws',
3374         'theosis.org',
3375         '*.thoforum.com',
3376         'troms-slekt.com',
3377         'theedgeblueisland.com',
3378         'toyshop.com.tw',               // /images/sigui/
3379         'torontoplace.com',
3380         'chat.travlang.com',
3381         'trickropingbylassue.com',
3382         'Truman State University' => array('mathbio.truman.edu'),
3383         'tuathadedannan.org',
3384         'txgotg.com',
3385         'tzaneen.co.za',
3386         'ugeavisen.com',                ///style/
3387         'forums.ugo.com',
3388         'whole.cs.unibo.it',
3389         'The University of North Dakota' => array(
3390                 'learn.aero.und.edu',
3391                 'ez.asn.und.edu',
3392         ),
3393         'The University of Alabama' => array('bama.ua.edu'),
3394         'unisonscotlandlaw.co.uk',
3395         'University of California' => array('classes.design.ucla.edu'),
3396         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3397         'University of Northern Colorado' => array('unco.edu'),
3398         'University of North Carolina' => array(
3399                 'elm.cis.uncw.edu'      ///testBoinc/
3400         ),
3401         'University of Toronto' => array(
3402                 'environment.utoronto.ca',
3403                 'grail.oise.utoronto.ca',
3404                 'utsc.utoronto.ca',
3405         ),
3406         'University of Wisconsin' => array(
3407                 'einstein.phys.uwm.edu'
3408         ),
3409         'urgentclick.com',
3410         'vacant.org.uk',
3411         'Villa Julie College' => array('www4.vjc.edu'),
3412         'Vail Valley Foundation' => array('.vvf.org'),
3413         'wabson.org',
3414         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3415         'webarch.com',          // by WebArchitects (webarch at insync.net)
3416         'weehob.com',
3417         'West Virginia University Parkersburg' => array('wvup.edu'),
3418         'williamsburgrentals.com',
3419         'wolvas.org.uk',
3420         'wookiewiki.org',
3421         'xsgaming.com',                 // Jacked
3422         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3423         'Yahoo.com' => array(
3424                 'blog.360.yahoo.com',
3425                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3426         ),
3427         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3428         'youthpeer.org',
3429         '*.zenburger.com',
3430         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3431 );
3432
3433 // --------------------------------------------------
3434
3435 $blocklist['C'] = array(
3436
3437         // C: Sample setting of:
3438         // Exclusive spam domains
3439         //
3440         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3441         // affiliates, finance, sending viruses, malicious attacks to browsers,
3442         // and/or mixed ones
3443         //
3444         // Please notify us about this list with reason:
3445         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3446
3447         // C-1: Domain sets (seems to be) born to spam you
3448         //
3449         // All buziness-related spam
3450         //'.biz'
3451         //
3452         'admin at seekforweb.com' => array(
3453                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3454                 '.lovestoryx.com',
3455                 '.loveaffairx.com',
3456                 '.onmore.info',
3457                 '.scfind.info',
3458                 '.scinfo.info',
3459                 '.webwork88.info',
3460         ),
3461         'boss at bse-sofia.bg' => array(        // by Boris
3462                 '.htewbop.org',
3463                 '.kimm--d.org',
3464                 '.gtre--h.org',
3465                 '.npou--k.org',
3466                 '.bres--z.org',
3467                 '.berk--p.org',
3468                 '.bplo--s.org',
3469                 '.basdpo.org',
3470                 '.jisu--m.org',
3471                 '.kire--z.org',
3472                 '.mertnop.org',
3473                 '.mooa--c.org',
3474                 '.nake--h.org',
3475                 '.noov--b.org',
3476                 '.suke--y.org',
3477                 '.vasdipv.org',
3478                 '.vase--l.org',
3479                 '.vertinds.org',
3480         ),
3481         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3482                 '.aqq3.info',
3483                 '.axa00.info',
3484                 '.okweb11.org',
3485                 '.okweb12.org',
3486                 '.okweb13.org',
3487                 '.okweb14.org',
3488         ),
3489         'opezdol at gmail.com' => array(
3490                 '.informazionicentro.info',
3491                 '.notiziacentro.info',
3492         ),
3493         'SomethingGen' => array(
3494                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3495                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3496                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3497                 // by Lee Chang (nebucha at model-x.com)
3498                 '.adult-chat-world.info',       // by Lui
3499                 '.adult-chat-world.org',        // by Lui
3500                 '.adult-sex-chat.info',         // by Lui
3501                 '.adult-sex-chat.org',          // by Lui
3502                 '.adult-cam-chat.info',         // by Lui
3503                 '.adult-cam-chat.org',          // by Lui
3504                 '.dildo-chat.org',                      // by Lui
3505                 '.dildo-chat.info',                     // by Lui
3506                 // flirt-online.info is not CamsGen
3507                 '.flirt-online.org',            // by Lui
3508                 '.live-adult-chat.info',        // by Lui
3509                 '.live-adult-chat.org',         // by Lui
3510                 '.sexy-chat-rooms.info',        // by Lui
3511                 '.sexy-chat-rooms.org',         // by Lui
3512                 '.swinger-sex-chat.info',       // by Lui
3513                 '.swinger-sex-chat.org',        // by Lui
3514                 '.nasty-sex-chat.info',         // by Lui
3515                 '.nasty-sex-chat.org',          // by Lui
3516
3517                 '.camshost.info',                       // by Sergey
3518                 '.camdoors.info',                       // by Sergey
3519                 '.chatdoors.info',                      // by Sergey
3520
3521                 // 89.149.206.225 by Pronin
3522                 '.dorozhka.info',
3523                 '.kolonochka.info',
3524                 '.knizhechka.info',
3525                 '.krantik.info',
3526                 '.lebedi.info',
3527                 '.loshad.info',
3528                 '.pechenka.info',
3529                 '.porosenok.info',
3530                 '.indyushonok.info',
3531                 '.kotyonok.info',
3532                 '.kozlyonok.info',
3533                 '.magnoliya.info',
3534                 '.svinka.info',
3535                 '.svinya.info',
3536                 '.televizorchik.info',
3537                 '.tumbochka.info',
3538                 '.zherebyonok.info',
3539
3540                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3541
3542                 '.adult-cam-chat-sex.info',             // by Lee
3543                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3544                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3545                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3546                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3547                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3548                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3549                 '.sex-chat-porn-cam.info',              // by Lee
3550         ),
3551         'mital at topo20.org' => array( // by Marcello Italianore
3552                 '.trevisos.org',
3553                 '.topo20.org',
3554         ),
3555         'WellCams.com' => array(
3556                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3557                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3558                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3559         ),
3560         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3561                 '.besturgent.org',
3562                 '.googletalknow.org',
3563                 '.montypythonltd.org',
3564                 '.supersettlemet.org',
3565                 '.thepythonfoxy.org',
3566                 '.ukgamesyahoo.org',
3567                 '.youryahoochat.org',
3568         ),
3569         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3570                 '.dbsajax.org',
3571                 '.acgt2005.org',
3572                 '.gopikottoor.com',
3573                 '.koosx.org',
3574                 '.mmgz.org',
3575                 '.zhiyehua.net',
3576         ),
3577         'vdf at lovespb.com' => array(  // by Andrey
3578                 '.02psa.info',
3579                 '.1818u.org',
3580                 '.18ew.info',
3581                 '.43sexx.org',
3582                 '.56porn.org',
3583                 '.6discount.info',
3584                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3585                 '.78rus.info',
3586                 '.92ssex.org',          // "ForumGenerator"
3587                 '.93adult.org',         // "ForumGenerator"
3588                 '.aboutsr.info',
3589                 '.aboutzw.info',
3590                 '.all23.info',
3591                 '.allvdf.info',
3592                 '.buy-dge.info',
3593                 '.buypo.info',
3594                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3595                 '.cv83.info',
3596                 '.cvwifw.info',
3597                 '.dabouts.info',
3598                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3599                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3600                 '.free01sa.info',
3601                 '.frees1.info',
3602                 '.freexz.info',
3603                 '.ifree-search.org',
3604                 '.lovespb.info',
3605                 '.myso2.info',
3606                 '.nb74u.info',
3607                 '.ohhh2.info',
3608                 '.ol43.info',
3609                 '.olala18.info',
3610                 '.oursales.info',
3611                 '.pasian1.info',
3612                 '.pldk.info',
3613                 '.po473.info',
3614                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3615                 '.poz2.info',
3616                 '.qpf8j4d.info',
3617                 '.saleqw.info',
3618                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3619                 '.sexz18.info',
3620                 '.sexy69a.info',
3621                 '.shedikc.info',
3622                 '.spb78.info',
3623                 '.usacanadauk.info',
3624                 '.v782mks.info',
3625                 '.vny0.info',
3626                 '.wifes1.info',
3627                 '.xranvam.info',
3628                 '.zenitcx.info',
3629                 '.zxolala.info',
3630         ),
3631         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3632                 '.care01.info',
3633                 '.care02.info',
3634                 '.care03.info',
3635                 '.care04.info',
3636                 '.care05.info',
3637                 '.care06.info',
3638                 '.care07.info',
3639                 '.care08.info',
3640                 '.care09.info',
3641                 '.care10.info',
3642                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3643                 '.klastar01.info',
3644                 '.klastar02.info',
3645                 '.klastar03.info',
3646                 '.klastar04.info',
3647                 '.klastar05.info',
3648                 '.klastar06.info',
3649                 '.klastar07.info',
3650                 '.klastar08.info',
3651                 '.klastar09.info',
3652                 '.klastar10.info',
3653                 '.um20ax01.info',
3654                 '.um20ax02.info',
3655                 '.um20ax03.info',
3656                 '.um20ax04.info',
3657                 '.um20ax05.info',
3658                 '.um20ax06.info',
3659                 '.um20ax07.info',
3660                 '.um20ax08.info',
3661                 '.um20ax09.info',
3662                 '.um20ax10.info',
3663         ),
3664         'forrass at gmail.com' => array(        // by Ismail
3665                 '.zmh01.info',
3666                 '.zmh02.info',
3667                 '.zmh03.info',
3668                 '.zmh04.info',
3669                 '.zmh05.info',
3670                 '.zmh06.info',
3671                 '.zmh07.info',
3672                 '.zmh08.info',
3673                 '.zmh09.info',
3674                 '.zmh10.info',
3675         ),
3676         'Varsylenko Vladimir and family' => array(
3677                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3678                 // by David C. Lack (David.C.Lack at dodgeit.com)
3679                 // by Kuzma V Safonov (admin at irtes.ru)
3680                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3681                 // by LAURI FUNK (vvm_kz at rambler.ru)
3682
3683                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3684                 '.abrek.info',                          // by Petrov
3685                 '.allsexonline.info',           // by Varsylenko
3686                 '.d1rnow.info',                         // by Petrov
3687                 '.doxer.info',                          // Petrov
3688                 '.freeforworld.info',           // Varsylenko
3689                 '.goodworksite.info',           // Varsylenko
3690                 '.onall.info',                          // by Varsylenko
3691                 '.powersiteonline.info',        // by Varsylenko
3692                 '.rentmysite.info',                     // by Varsylenko
3693                 '.sexdrink.info',                       // by Petrov
3694                 '.siteszone.info',                      // by Varsylenko
3695                 '.sfup.info',                           // by Petrov
3696                 '.superfreedownload.info',      // by Varsylenko
3697                 '.superneeded.info',            // by Varsylenko
3698                 '.srup.info',                           // by Petrov
3699
3700                 // 66.235.185.143(*.svabuse.info)
3701                 '.accommodationwiltshire.com',  // by Petrov
3702                 '.levines.info',                        // by Petrov
3703                 '.sernost.info',                        // by Petrov
3704                 '.sexvideosite.info',           // by Petrov
3705                 '.vvsag.info',                          // by Petrov
3706
3707                 // 81.0.195.134
3708                 '.michost.info',                        // by LAURI
3709                 '.parther.info',                        // by LAURI
3710
3711                 // 88.214.202.100
3712                 '.gitsite.info',                        // by Petrov
3713                 '.organiq.info',                        // by Petrov
3714                 '.yoursitedh.info',                     // by Petrov
3715
3716                 // 217.11.233.58 by Petrov
3717                 '.mp3vault.info',
3718
3719                 // DNS time out or failed
3720                 '.bequeous.info',                       // by Davi
3721                 '.sopius.info',                         // by Kuzma
3722                 '.sovidopad.info',                      // by Kuzma
3723                 '.yerap.info',                          // by Kuzma
3724         ),
3725         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3726                 '.flywebs.com',
3727                 '.hostrim.com',
3728                 '.playbit.com',
3729         ),
3730         'webmaster at dgo3d.info' => array(     // by Son Dittman
3731                 '.bsb3b.info',
3732                 '.dgo3d.info',
3733                 '.dgo5d.info',
3734         ),
3735         'cooler.infomedia at gmail.com' => array(
3736                 '.diabetescarelink.com',
3737                 '.firstdebthelp.com',
3738         ),
3739         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3740                 '.pokah.lv',
3741                 '.astrons.com',
3742         ),
3743         'seocool at bk.ru' => array(    // by Skar
3744                 '.implex3.com',
3745                 '.implex6.info',
3746                 '.softprof.org',
3747         ),
3748         'Caslim.info' => array(
3749                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3750                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3751         ),
3752         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3753                 '.777-poker.biz',
3754                 '.porn-11.com',
3755         ),
3756         'Conto.pl' => array(
3757                 '.8x.pl',               // domena at az.pl
3758                 '.3x3.pl',              // by biuro at nazwa.pl
3759                 '.conto.pl',    // by biuro at nazwa.pl
3760                 '.guu.pl',              // by conto.pl (domena at az.pl)
3761                 '.xcx.pl',              // domena at az.pl
3762                 '.yo24.pl',             // domena at az.pl
3763         ),
3764         'mail at pcinc.cn' => array(
3765                 // Domains by Lin Zhi Qiang
3766                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3767
3768                 // 125.65.112.11
3769                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3770                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3771                 '.shoopivdoor.com',
3772
3773                 // 125.65.112.12
3774                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3775                 '.hosetaibei.com',
3776                 '.playsese.com',
3777
3778                 // 125.65.112.13
3779                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3780                 '.ahatena.com',
3781                 '.asdsdgh-jp.com',
3782                 '.conecojp.net',
3783                 '.game-oekakibbs.com',
3784                 '.geocitygame.com',
3785                 '.gsisdokf.net',
3786                 '.korunowish.com',
3787                 '.netgamelivedoor.com',
3788                 '.soultakerbbs.net',
3789                 '.yahoo-gamebbs.com',
3790                 '.ywdgigkb-jp.com',
3791
3792                 // 125.65.112.14
3793                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3794                 '.acyberhome.com',
3795                 '.bbs-qrcode.com',
3796                 '.gamesroro.com',
3797                 '.gameyoou.com',
3798                 '.gangnu.com',
3799                 '.goodclup.com',
3800                 '.lineage321.com',
3801                 '.linkcetou.com',
3802                 '.love888888.com',
3803                 '.ragnarok-bbs.com',
3804                 '.ragnarok-game.com',
3805                 '.rmt-navip.com',
3806                 '.watcheimpress.com',
3807
3808                 // 125.65.112.15
3809                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3810                 '.18girl-av.com',
3811                 '.aurasoul-visjp.com',
3812                 '.gamaniaech.com',
3813                 '.game-mmobbs.com',
3814                 '.gameslin.net',
3815                 '.gemnnammobbs.com',
3816                 '.gogolineage.net',
3817                 '.grandchasse.com',
3818                 '.jpragnarokonline.com',
3819                 '.jprmthome.com',
3820                 '.maplestorfy.com',
3821                 '.netgamero.net',
3822                 '.nothing-wiki.com',
3823                 '.ourafamily.com',
3824                 '.ragnarok-sara.com',
3825                 '.rmt-lineagecanopus.com',
3826                 '.rmt-ranloki.com',
3827                 '.rogamesline.com',
3828                 '.roprice.com',
3829                 '.tuankong.com',
3830                 '.twreatch.com',
3831
3832                 // 125.65.112.22
3833                 // The same IP: web013.cdnhost.cn
3834                 '.lzy88588.com',
3835                 '.ragnaroklink.com',
3836
3837                 // 125.65.112.24
3838                 '.rmtfane.com',
3839                 '.fc2weday.com',
3840                 '.nlftweb.com',
3841
3842                 // 125.65.112.27
3843                 '.i520i.com',
3844                 '.sunwayto.com',
3845
3846                 // 125.65.112.31
3847                 // The same IP: web016.cdnhost.cn
3848                 '.twyaooplay.com',
3849
3850                 // 125.65.112.32
3851                 // The same IP: web037.cdnhost.cn
3852                 '.emeriss.com',
3853                 '.raginfoy.com',
3854                 '.ragnarokgvg.com',
3855                 '.rentalbbs-livedoor.com',
3856                 '.romaker.com',
3857                 '.sagewikoo.com',
3858                 '.samples112xrea.com',
3859                 '.wiki-house.com',
3860
3861                 // 125.65.112.49
3862                 '.chaosx0.com',
3863
3864                 // 125.65.112.88
3865                 // The same IP: web015.cdnhost.cn
3866                 '.a-hatena.com',
3867                 '.biglobe-ne.com',
3868                 '.blogplaync.com',
3869                 '.din-or.com',
3870                 '.dtg-gamania.com',
3871                 '.fcty-net.com',
3872                 '.game-fc2blog.com',
3873                 '.gameurdr.com',
3874                 '.getamped-garm.com',
3875                 '.interzq.com',
3876                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3877                 '.luobuogood.com',
3878                 '.ragnarok-search.com',
3879                 '.rinku-livedoor.com',
3880
3881                 // 125.65.112.90
3882                 '.gtvxi.com',
3883
3884                 // 125.65.112.91
3885                 // The same IP: web004.cdnhost.cn
3886                 '.6828teacup.com',
3887                 '.blog-livedoor.net',
3888                 '.cityblog-fc2web.com',
3889                 '.deco030-cscblog.com',
3890                 '.imbbs2t4u.com',
3891                 '.k5dionne.com',
3892                 '.lineagejp-game.com',
3893                 '.mbspro6uic.com',
3894                 '.slower-qth.com',
3895                 '.wikiwiki-game.com',
3896
3897                 // 125.65.112.93
3898                 // The same IP: web022.cdnhost.cn
3899                 '.aaa-livedoor.net',
3900                 '.cityhokkai.com',              // web022.cdnhost.cn
3901                 '.fanavier.net',
3902                 '.geocitylinks.com',    // web022.cdnhost.cn
3903                 '.kuronowish.net',              // web022.cdnhost.cn
3904                 '.ro-bot.net',
3905
3906                 // 125.65.112.95
3907                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3908                 '.23styles.com',
3909                 '.aehatena-jp.com',
3910                 '.ameblog-jp.net',
3911                 '.antuclt.com',
3912                 '.blog-ekndesign.com',
3913                 '.d-jamesinfo.com',
3914                 '.editco-jp.com',
3915                 '.ezbbsy.com',
3916                 '.extd-web.com',
3917                 '.fotblong.com',
3918                 '.game62chjp.net',
3919                 '.gamegohi.com',
3920                 '.gamesmusic-realcgi.net',
3921                 '.gamesragnaroklink.net',
3922                 '.homepage-nifty.com',
3923                 '.ie6xp.com',
3924                 '.irisdti-jp.com',
3925                 '.jklomo-jp.com',
3926                 '.jpxpie6-7net.com',
3927                 '.lian-game.com',
3928                 '.lineage-bbs.com',
3929                 '.lineage1bbs.com',
3930                 '.livedoor-game.com',
3931                 '.litcan.com',
3932                 '.lovejpjp.com',
3933                 '.m-phage.com',
3934                 '.muantang.com',
3935                 '.plusd-itmedia.com',
3936                 '.runbal-fc2web.com',
3937                 '.saussrea.com',
3938                 '.tooalt.com',
3939                 '.toriningena.net',
3940                 '.yahoodoor-blog.com',
3941                 '.yy14-kakiko.com',
3942
3943                 // 125.65.112.137
3944                 '.clublineage.com',
3945
3946                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3947                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3948                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3949
3950                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3951                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3952
3953                 '.games-nifty.com',             // 255.255.255.255 now
3954                 '.homepage3-nifty.com', // 255.255.255.255 now
3955         ),
3956         'caddd at 126.com' => array(
3957                 '.chengzhibing.com',    // by chen gzhibing
3958                 '.jplinux.com',                 // by lian liang
3959                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3960                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3961                 '.tooplogui.com',               // by zibing cai
3962                 '.twsunkom.com',                // by guo zhi wei
3963                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3964         ),
3965         'nuigiym2 at 163.com' => array( // by fly bg
3966                 '.linainfo.net',                // Seems IP not allocated now
3967                 '.lineagalink.com',             // 220.247.157.99
3968                 '.lineagecojp.com',             // 61.139.126.10
3969                 '.ragnarokonlina.com',  // 220.247.158.99
3970         ),
3971         'aakin at yandex.ru' => array(
3972                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3973                 '.entirestar.com',
3974                 '.joppperl.info',
3975                 '.onlinedrugsdirect.com',
3976                 '.pilkazen.info',
3977                 '.superbuycheap.com',
3978                 '.supersmartdrugs.com',
3979                 '.thecheappillspharmacy.com',
3980                 '.topdircet.com',
3981         ),
3982         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3983                 '.tianmieccp.com',
3984                 '.xianqiao.net',
3985         ),
3986         'm.frenzy at yahoo.com' => array(       // by Michael
3987                 '.p5v.org',
3988                 '.j111.net',
3989                 '.searchhunter.info',
3990                 '.soft2you.info',
3991                 '.top20health.info',
3992                 '.top20ringtones.info',
3993                 '.top20travels.info',
3994                 '.v09v.info',
3995                 '.x09x.info',
3996                 '.zb-1.com',
3997         ),
3998         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3999                 '.bingogoldenpalace.info',
4000                 '.ccarisoprodol.info',
4001                 '.ezxcv.info',
4002                 '.isuperdrug.com',
4003                 '.pharmacif.info',
4004                 '.pornsexteen.biz',
4005                 '.ugfds.info',
4006                 '.vviagra.info',
4007         ),
4008         'anatolsenator at gmail.com' => array(  // by Anatol
4009                 '.cheapestviagraonline.info',
4010                 '.buyphentermineworld.info'
4011         ),
4012         'webmaster at mederotica.com' => array(
4013                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
4014                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
4015                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4016                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4017         ),
4018         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4019                 '.auase.info',          // by ilemavyq7461 at techie.com
4020                 '.axeboxew.info',       // by zygeu220 at writeme.com
4021                 '.boluzuhy.info',       // by pikico5419 at post.com
4022                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4023                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4024                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4025                 '.exidiqe.info',        // by kufyca5475 at mail.com
4026                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4027                 '.gubiwu.info',         // by lywunef6532 at iname.com
4028                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4029                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4030                 '.jiuuz.info',          // by meqil6549 at mail.com
4031                 '.nudetar.info',        // by vohepafi3536 at techie.com
4032                 '.nipud.info',          // by bohox9872 at mindless.com
4033                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4034                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4035                 '.olasep.info',         // by lizon8506 at mail.com
4036                 '.oueuidop.info',       // by arytyb6913 at europe.com
4037                 '.oviravy.info',        // by amyuu3883 at london.com
4038                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4039                 '.ragibe.info',         // by ehome4458 at myself.com
4040                 '.ucazib.info',         // by gorare7222 at consultant.com
4041                 '.udaxu.info',          // by gubima4007 at usa.com
4042                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4043                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4044                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4045                 '.yvaxat.info',         // by koqun9660 at mindless.com
4046                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4047         ),
4048         'Carmodelrank.com etc' => array(
4049                 // by Brianna Dunlord (briasmi at yahoo.com)
4050                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4051                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4052                 '.carmodelrank.com',// by Brianna
4053                 '.cutestories.net',     // by Brianna
4054                 '.sturducs.com',
4055                 '.bestother.info',      // by Tim
4056                 '.premiumcasinogames.com',      // by Brianna)
4057                 '.yaahooo.info',        // by Alice
4058         ),
4059         'aliacsandr at yahoo.com' => array(
4060                 '.cubub.info',                          // "Free Web Hosting"
4061         ),
4062         'aliacsandr85 at yahoo.com' => array(
4063                 // by Dr. Portillo or Eva Sabina Lopez Castell
4064                 '.xoomer.alice.it',                     // "Free Web Hosting"
4065                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4066                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4067                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4068                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4069                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4070                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4071                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4072                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4073                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4074                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4075                 '.viagra-price.org',            // by Eva
4076                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4077                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4078         ),
4079         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4080         'Something-Gamble' => array(
4081                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4082                 '.atonlineroulette.com',                        // by Blaise Johns
4083                 '.atroulette.com',                                      // by Gino Sand
4084                 '.betting-123.com',                                     // by Joana Caceres
4085                 '.betting-i.biz',                                       // by Joaquina Angus
4086                 '.casino-challenge.com',                        // by Maren Camara
4087                 '.casino-gambling-i.biz',                       // by Giselle Nations
4088                 '.casino-italian.com',                          // by Holley Yan
4089                 '.casino123.net',                                       // by Ta Baines
4090                 '.casinohammamet.com',                          // by Inger Barhorst
4091                 '.casinoqz.com',                                        // by Berenice Snow
4092                 '.casinos-777.net',                                     // by Iona Ayotte
4093                 '.crapsok.com',                                         // by Devon Adair,
4094                 '.dcasinoa.com',                                        // by August Hawkinson
4095                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4096                 '.free-dvd-player.biz',                         // by Rosario Kidd
4097                 '.florida-lottery-01.com',                      // by Romeo Dillon
4098                 '.gaming-123.com',                                      // by Jennifer Byrne
4099                 '.kenogo.com',                                          // by Adriane Bell
4100                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4101                 '.onbaccarat.com',                                      // by Kassandra Dunn
4102                 '.online-experts.biz',                          // by Liberty Helmick
4103                 '.onlinepoker-123.com',                         // by Andrea Feaster
4104                 '.playpokeronline-123.com',                     // by Don Lenard
4105                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4106                 '.texasholdem123.com',                          // by Savion Lasseter
4107                 '.texasholdem-777.com',                         // by Savanna Lederman
4108                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4109                 '.the-craps-100.us',                            // by Lorrine Ripley
4110                 '.the-free-online-game-913.us',         // by Kanesha Clem
4111                 '.the-free-poker-1798.us',                      // by Elaina Witte
4112                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4113                 '.the-online-game-poker-1185.us',       // by Merna Bey
4114                 '.the-playing-black-jack.com',          // by Kristine Brinker
4115                 '.the-poker-1082.us',                           // by Kristofer Boldt
4116                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4117                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4118                 '.the-video-black-jack.com',            // by Jagger Godin
4119         ),
4120         'Something-Insurance' => array(
4121                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4122
4123                 // 0-9
4124                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4125                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4126                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4127                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4128                 '.18wkcf.com',                                  // by Lexy Bohannon
4129                 '.2001werm.org',                                // by Raphael Rayburn
4130                 '.2004heeparea1.org',                   // by Dinorah Andrews
4131                 '.21nt.net',                                    // by Jaida Estabrook
4132                 '.3finfo.com',                                  // by Damian Pearsall
4133                 '.3somes.org',                                  // by Mauro Tillett
4134                 '.453531.com',                                  // by Kurt Flannery
4135                 '.4freesay.com',                                // by Eloy Jones
4136                 '.5ssurvey.com',                                // by Annamarie Kowalski
4137                 '.8-f22.com',                                   // by Larraine Evers
4138                 '.9q.org',                                              // by Ami Boynton
4139
4140                 // A
4141                 '.a40infobahn.com',                             // by Amit Nguyen
4142                 '.a4h-squad.com',                               // by Ross Locklear
4143                 '.aac2000.org',                                 // by Randi Turner
4144                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4145                 '.acahost.com',                                 // by Milton Haberman
4146                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4147                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4148                 '.activel-learning-site.com',   // by Mateo Conn
4149                 '.ad-makers.com',                               // by Shemeka Arsenault
4150                 '.ada-information.org',                 // by Josef Osullivan
4151                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4152                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4153                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4154                 '.aerovac-hotpress.com',                // by Trey Marlow
4155                 '.agfbiosensors.com',                   // by Lionel Dempsey
4156                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4157                 '.affordablerealestate.net',    // by Season Otoole
4158                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4159                 '.ahouserefinance.com',                 // by Young Alley
4160                 '.akirasworld.com',                             // by Piper Sullivan
4161                 '.alderik-production.com',              // by Joan Stiles
4162                 '.alltechdata.com',                             // by Dom Laporte
4163                 '.amconllc.com',                                // by Syble Benjamin
4164                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4165                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4166                 '.angelandcrown.net',                   // by Claretta Najera
4167                 '.ankoralina.com',                              // by Eladia Demers
4168                 '.antiquegoldmine.com',                 // by Keena Marlow
4169                 '.aquinosotros.com',                    // by Nanci Prentice
4170                 '.architectionale.com',                 // by Wilbur Cornett
4171                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4172                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4173                 '.arefinancehome.com',                  // by Duane Doran
4174                 '.arefinancinghome.com',                // by Ike Laney
4175                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4176                 '.auction-emall-site.info',             // by Dayle Denman
4177                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4178                 '.auto-buy-rite.com',                   // by Asuncion Buie
4179                 '.axxinet.net',                                 // by Roberta Gasper
4180                 '.azimutservizi.com',                   // by Ethelene Brook
4181                 '.azstudies.org',                               // by Bernardina Walden
4182
4183                 // B
4184                 '.babtrek.com',                                 // by Simonette Mcbrayer
4185                 '.babycujo.com',                                // by Francisco Akers
4186                 '.bakeddelights.com',                   // by Dave Evenson
4187                 '.bbcart.com',                                  // by Lucio Hamlin
4188                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4189                 '.best-digital-phone.us',               // by Meghann Crockett
4190                 '.bjamusements.com',                    // by Lurlene Butz
4191                 '.blursgsu.com',                                // by Weston Killian
4192                 '.bookwide.net',                                // by Tequila Zacharias
4193                 '.boreholes.org',                               // by Flora Reed
4194                 '.breathingassociaiton.org',    // by Alfred Crayton
4195                 '.birdingnh.com',                               // by Donald Healy
4196                 '.bisdragons.org',                              // by Lupe Cassity
4197                 '.blcschools.net',                              // by Alycia Jolly
4198                 '.bronte-foods.com',                    // by Kary Pfeiffer
4199                 '.buckscountyneighbors.org',    // by Maile Gaffney
4200                 '.buffalofudge.com',                    // by Mable Whisenhunt
4201                 '.burlisonforcongress.com',             // by Luann King
4202                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4203                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4204
4205                 // C
4206                 '.cabanes-web.com',                             // by Vaughn Latham
4207                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4208                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4209                 '.checaloya.com',                               // by Susana Coburn
4210                 '.calvarychapelrgvt.org',               // by Karan Kittle
4211                 '.cameras-esite.info',                  // by Karlee Frisch
4212                 '.cancerkidsforum.org',                 // by Samson Constantino
4213                 '.ccchoices.org',                               // by Kenia Cranford
4214                 '.ccupca.org',                                  // by Evonne Serrano
4215                 '.celebratemehome.com',                 // by Soraya Tower
4216                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4217                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4218                 '.choose-shoes.net',                    // by Geoffrey Setser
4219                 '.churla.com',                                  // by Ollie Wolford
4220                 '.circuithorns.co.uk',                  // by Nathanial Halle
4221                 '.clanbov.com',                                 // by Donell Hozier
4222                 '.cnm-ok.org',                                  // by Thalia Moye
4223                 '.coalitioncoalition.org',              // by Ned Macklin
4224                 '.consoleaddicts.com',                  // by Dorla Hoy
4225                 '.counterclockwise.net',                // by Melynda Hartzell
4226                 '.codypub.com',                                 // by Mercedes Coffman
4227                 '.comedystore.net',                             // by Floy Donald
4228                 '.covsys.co.uk',                                // by Abby Jacey
4229                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4230                 '.craftybidders.com',                   // by Dannie Lazo
4231                 '.credit-card-finder.net',              // by Mellie Deherrera
4232                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4233                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4234                 '.ctwine.org',                                  // by Hailey Knox
4235
4236                 // D
4237                 '.dazyation.com',                               // by Louis Strasser
4238                 '.deepfoam.org',                                // by Ethelyn Southard
4239                 '.debt-fixing.com',                             // by Dagny Rickman
4240                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4241                 '.domainadoption.com',                  // by Breann Pappas
4242                 '.diannbomkamp.com',                    // by Russel Croteau
4243                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4244                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4245                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4246                 '.digital-cameras-esite.info',  // by Milan Jolin
4247                 '.dnstechnet.net',                              // by Tamera Oman
4248                 '.drivenbydata.org',                    // by Katherine Noyes
4249                 '.dtmf.net',                                    // by Micki Slayton
4250                 '.domainsfound.com',                    // by Blossom Lively
4251
4252                 // E
4253                 '.ecstacyabuse.net',                    // by Alana Knight
4254                 '.e-digital-camera-esite.info', // by Romaine Cress
4255                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4256                 '.eldorabusecenter.org',                // by Annabella Oneal
4257                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4258                 '.encaponline.com',                             // by Patrick Keel
4259                 '.ez-shopping-online.com',              // by Gail Bartlett
4260
4261                 // F
4262                 '.faithfulwordcf.com',                  // by Bart Weeks
4263                 '.fammedassoc.com',                             // by Joshua Nelson
4264                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4265                 '.f00k.org',                                    // by Leslie Chapman
4266                 '.foreignrealtions.org',                // by Krystal Hawley
4267                 '.fortwebsite.org',                             // by Kristina Motley
4268                 '.fotofirstdigital.com',                // by Tad Whitfield
4269                 '.foundationcommons.org',               // by Caryn Eskew
4270                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4271                 '.freaky-cheats.com',                   // by Al Klein
4272                 '.free--spyware.com',                   // by Nikki Contreras
4273                 '.french-home-finance-consultant.info', // by Santana Melton
4274                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4275
4276                 // G
4277                 '.gaintrafficfast.com',                 // by Lila Meekins
4278                 '.gaygain.org',                                 // by Shell Davila
4279                 '.gcaaa.com',                                   // by Vallie Jaworski
4280                 '.generalsysteme.com',                  // by Cale Vogel
4281                 '.generation4games.co.uk',              // by Sonya Graham
4282                 '.german-dictionary.us',                // by Rex Daniel
4283                 '.gilmerrec.com',                               // by Leighann Guillory
4284                 '.glenthuntly-athletics.com',   // by Julee Hair
4285                 '.glorybaskets.com',                    // by Lynette Lavelle
4286                 '.goconstructionloan.com',              // by Willis Monahan
4287                 '.gohireit.com',                                // by Bertha Metzger
4288                 '.godcenteredpeople.com',               // by Jaycee Coble
4289
4290                 // H
4291                 '.healthinsuranceem.com',               // by Justin Munson
4292                 '.hearthorizon.info',                   // by Kory Session
4293                 '.hegerindustrial.com',                 // by Toni Wesley
4294                 '.herzequip.com',                               // by Princess Dunkle
4295                 '.hglcms.org',                                  // by Gladwin Ng
4296                 '.hipanoempresa.com',                   // by Shannon Staub
4297                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4298                 '.horse-racing-result.com',             // by Rodney Reynolds
4299                 '.hueckerfamily.com',                   // by Hershel Sell
4300
4301                 // I
4302                 '.ilove2win.com',                               // by Lamont Dickerson
4303                 '.ilruralassistgrp.org',                // by Moises Hauser
4304                 '.imageonsolutions.com',                // by Porsche Dubois
4305                 '.infoanddatacenter.com',               // by Eva Okelley
4306                 '.islamfakta.org',                              // by Goldie Boykin
4307                 '.ithomemortgage.com',                  // by Adelaide Towers
4308                 '.iyoerg.com',                                  // by Madyson Gagliano
4309
4310                 // J
4311                 '.jeffaxelsen.com',                             // by Daphne William
4312                 '.jeffreyf.net',                                // by Vito Platt
4313                 '.johnmartinsreality.com',              // by Pamela Larry
4314                 '.johnsilvers.net',                             // by Silver Battaglia
4315
4316                 // K
4317                 '.kcgerbil.org',                                // by Marisa Thayer
4318                 '.kdc-phoenix.com',                             // by Salma Shoulders
4319                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4320                 '.kosove.org',                                  // by Darwin Schneider
4321
4322                 // L
4323                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4324                 '.letsgokayaking.net',                  // by Winnie Adair
4325                 '.libertycabs.com',                             // by Adela Bonds
4326                 '.liquor-store-cellar.info',    // by Hugh Pearson
4327                 '.locomojo.net',                                // by Marco Harmon
4328                 '.lodatissimo.com',                             // by Adrian Greeson
4329                 '.lsawc.org',                                   // by Lara Han
4330                 '.lycos-test.net',                              // by Rigoberto Oakley
4331
4332                 // M
4333                 '.macro-society.com',                   // by Venessa Hodgson
4334                 '.marthasflavorfest.com',               // by Ahmad Lau
4335                 '.martin-rank.com',                             // by Cathleen Crist
4336                 '.maryandfrank.org',                    // by Theodore Apodaca
4337                 '.masterkwonhapkido.com',               // by Misty Graham
4338                 '.maxrpm-demo.com',                             // by Cristal Cho
4339                 '.mechanomorphic.com',                  // by Stanford Crow
4340                 '.mepublishing.net',                    // by Karly Fleenor
4341                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4342                 '.metwahairports.com',                  // by Nan Kitchen
4343                 '.middle-eastnews.com',                 // by Tybalt Altmann
4344                 '.mikepelchy.com',                              // by Sherly Pearson
4345                 '.milpa.org',                                   // by Nelly Aguilera
4346                 '.modayun.com',                                 // by Camilla Velasco
4347                 '.moonstoneerp.com',                    // by Garret Salmon
4348                 '.morosozinho.com',                             // by Lenore Tovar
4349                 '.morphadox.com',                               // by Hung Zielinski
4350                 '.moscasenlared.com',                   // by Tera Gant
4351                 '.sdjavasig.com',                               // by Gia Swisher
4352                 '.mpeg-radio.com',                              // by Sincere Beebe
4353                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4354                 '.mtseniorcenter.org',                  // by Frederic Ortega
4355                 '.mysteryclips.com',                    // by Edward Ashford
4356
4357                 // N
4358                 '.naavs.org',                                   // by Yuridia Gandy
4359                 '.naval-aviation.org',                  // by Roselle Campo
4360                 '.navigare-ischia.com',                 // by Arielle Coons
4361                 '.ncredc.org',                                  // by Brenda Nye
4362                 '.neonmotorsports.com',                 // by Giovanna Vue
4363                 '.nf-ny.com',                                   // by Yadira Hibbard
4364                 '.ngfdyqva.com',                                // by Emiliano Samples
4365                 '.nicozone.com',                                // by Blaine Shell
4366                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4367                 '.npawny.org',                                  // by Willard Murphy
4368                 '.nysdoed.org',                                 // by Elric Delgadillo
4369                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4370                 '.nytech-ir.com',                               // by Adrien Beals
4371
4372                 // O
4373                 '.oadmidwest.com',                              // by Gavin Kaplan
4374                 '.oarauto.com',                                 // by Susann Merriman
4375                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4376                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4377                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4378                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4379                 '.online-pills-24x7.biz',               // by Aide Hallock
4380                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4381                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4382                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4383                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4384                 '.otterbayweb.com',                             // by Maxwell Irizarry
4385
4386                 // P
4387                 '.painting-technique.us',               // by Bryanna Tooley
4388                 '.pakamrcongress.com',                  // by Bryce Summerville
4389                 '.patabney.com',                                // by Kailyn Slone
4390                 '.parde.org',                                   // by Ellie Yates
4391                 '.participatingprofiles.com',   // by Jaelynn Meacham
4392                 '.partnershipconference.org',   // by Alla Floyd
4393                 '.pet-stars.com',                               // by Carmon Luevano
4394                 '.planning-law.org',                    // by Trista Holcombe
4395                 '.ppawa.com',                                   // by Evonne Scarlett
4396                 '.precisionfilters.net',                // by Faustina Fell
4397
4398                 // Q
4399                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4400                 '.quick-debt-consolidation.net',        // by Lala Marte
4401                 '.quicktvr.com',                                // by Vernell Crenshaw
4402
4403                 // R
4404                 '.radicalsolutions.org',                // by Reece Medlin
4405                 '.randallburgos.com',                   // by Bradly Villa
4406                 '.rcassel.com',                                 // by Janiah Gallant
4407                 '.rearchitect.org',                             // by Marcus Gaudet
4408                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4409                 '.reprisenashville.com',                // by Hester Khan
4410                 '.reptilemedia.com',                    // by Alicia Patel
4411                 '.resellers2000.com',                   // by Dedra Kennedy
4412                 '.reverse-billing.com',                 // by Lazaro Gluck
4413                 '.richcapaldi.com',                             // by Kya Haggard
4414                 '.richformissouri.com',                 // by Alanna Elston
4415                 '.robstraley.com',                              // by Leida Bartell
4416                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4417                 '.rpgbbs.com',                                  // by Leonel Peart
4418                 '.ruralbusinessonline.org',             // by Lynsey Watters
4419                 '.ruwomenscenter.org',                  // by Vince Mclemore
4420                 '.ryanjowens.com',                              // by Janine Smythe
4421
4422                 // S
4423                 '.sagarmathatv.org',                    // by Liam Funke
4424                 '.sakyathubtenling.org',                // by Liane Falgout
4425                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4426                 '.sandishaven.com',                             // by Lino Soloman
4427                 '.scienkeen.com',                               // by Liza Navarra
4428                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4429                 '.severios.com',                                // by Isa Steffen
4430                 '.sexual-hot-girls.com',                // by Viviana Bolton
4431                 '.shakespearelrc.com',                  // by Luciana Weaver
4432                 '.shashran.org',                                // by Adriel Humphries
4433                 '.shoes-shop.us',                               // by Austen Higginbotham
4434                 '.skagitvalleybassanglers.com', // by Necole Thiele
4435                 '.skinsciencesalon.com',                // by Nena Rook
4436                 '.smartalternative.net',                // by Nicki Lariviere
4437                 '.sml338.org',                                  // by Nickole Krol
4438                 '.smogfee.com',                                 // by Sienna Kimble
4439                 '.sneakers-e-shop.info',                // by Nikki Fye
4440                 '.spacewavemedia.com',                  // by Thanh Gast
4441                 '.softkernel.com',                              // by Nicol Hummer
4442                 '.stjoanmerrillville.com',              // by Hunter Beckham
4443                 '.strelinger.com',                              // by Arron Highsmith
4444                 '.striking-viking.com',                 // by Kylie Endsley
4445                 '.sunnydeception.org',                  // by Amaya Llora
4446                 '.sunzmicro.com',                               // by Goddard Arreola
4447                 '.sv-iabc.org',                                 // by Braden Buck
4448                 '.sykotick.com',                                // by Pierce Knecht
4449
4450                 // T
4451                 '.tbody.net',                                   // by Ormond Roman
4452                 '.the-pizzaman.com',                    // by Mario Ramsey
4453                 '.the-shoes.us',                                // by Alejandro Gaffney
4454                 '.theborneocompany.com',                // by Bryanna Tooley
4455                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4456                 '.thehomeschool.net',                   // by September Concepcio
4457                 '.thenewlywed.com',                             // by Allegra Marra
4458                 '.tigerspice.com',                              // by Denis Mosser
4459                 '.tnaa.net',                                    // by Jasmine Andress
4460                 '.top-finance-sites.com',               // by Maryann Doud
4461                 '.tradereport.org',                             // by Bettie Sisk
4462                 '.transmodeling.com',                   // by Martine Button
4463                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4464                 '.tsaoc.com',                                   // by Heriberto Mcfall
4465                 '.tsunamidinner.com',                   // by Nannie Richey
4466
4467                 // U
4468                 '.uhsaaa.com',                                  // by Risa Herbert
4469                 '.ultradeepfield.org',                  // by Bobby Ragland
4470                 '.umkclaw.info',                                // by Cammy Kern
4471                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4472                 '.usa-wolf.com',                                // by Jacklyn Morrill
4473                 '.usjobfair.com',                               // by Lorina Burchette
4474
4475                 // V
4476                 '.vacancesalouer.com',                  // by Loris Bergquist
4477                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4478                 '.valleylibertarians.org',              // by Lena Massengale
4479                 '.vanderbiltevents.com',                // by Gannon Krueger
4480                 '.vanwallree.com',                              // by Michelina Donahue
4481                 '.vcertificates.com',                   // by Hyun Lamp
4482                 '.vonormytexas.us',                             // by Suzette Waymire
4483
4484                 // W
4485                 '.washingtondc-areahomes.net',  // by Ailene Broome
4486                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4487                 '.wolsaoh.org',                                 // by Daniela English
4488                 '.worldpropertycatalog.com',    // by Aray Baxter
4489
4490                 // Y
4491                 '.yankee-merchants.com',                // by Jackson Hinojosa
4492                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4493                 '.yourdomainsource.com',                // by Deems Weingarten
4494
4495                 // Z
4496                 '.zkashan.com',                                 // by Evan Light
4497                 '.zockclock.com',                               // by Dorothea Guthrie
4498         ),
4499         'Something-Drugs' => array(
4500                 // Drugs / Pills / Diet
4501                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4502                 '.abdelghani-shady.com',                // by Elly Alton
4503                 '.bangbangfilm.com',                    // by Davin Chou
4504                 '.centroantequera.com',                 // by Keon Kwiatkowski
4505                 '.champagne-cellar.info',               // by Kandis Rizzo
4506                 '.chix0r.org',                                  // by Christoper Baird
4507                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4508                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4509                 '.fast-cash-01.com',                    // by Edgar Oliver
4510                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4511                 '.fn-nato.com',                                 // by Donny Dunlap
4512                 '.gqyinran.com',                                // by Alejandro Parks
4513                 '.juris-net.com',                               // by Rachelle Bravo
4514                 '.leftpencey.com',                              // by Aileen Ashby
4515                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4516                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4517                 '.palaceroyale.net',                    // by Brycen Stebbins
4518                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4519                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4520                 '.yukissushi.com',                              // by Donell Hozier
4521         ),
4522         'Something-Others' => array(
4523                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4524                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4525         ),
4526         'Something-NoApp' => array(
4527                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4528                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4529                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4530                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4531                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4532         ),
4533         'Cortez and family' => array(
4534                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4535                 '.dronadaarsujf.info',  // by Cortez
4536                 '.fromnananaref.info',  // by Cortez
4537                 '.goorkkjsaka.info',    // by Cortez
4538                 '.jkdfjjkkdfe.info',    // by Rico
4539                 '.jkllloldkjsa.info',   // by Cortez
4540                 '.nnjdksfornms.info',   // by Rico
4541                 '.mcmdkkksaoka.info',   // by Cortez
4542                 '.srattaragfon.info',   // by Cortez
4543                 '.yreifnnonoom.info',   // by Rico
4544                 '.zjajjsvgeuds.info',   // by Cortez
4545         ),
4546         'admin at ematuranza.com' => array(
4547                 '.ancorlontano.com',
4548                 '.dentroallago.com',
4549                 '.digiovinezza.com',
4550                 '.ematuranza.com',
4551                 '.ilfango.com',
4552                 '.nullarimane.com',
4553                 '.questaimmensa.com',
4554                 '.tentailvolo.com',
4555                 '.unatenerezza.com',
4556                 '.volgondilettose.com',
4557         ),
4558         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4559                 '.bid99df.info',
4560                 '.bj498uf.info',
4561                 '.edeuj84.info',
4562                 '.f4mfid.info',
4563                 '.g4vf03a.info',
4564                 '.j09j4r.info',
4565                 '.jv4r8hv.info',
4566                 '.k43sd3.info',
4567                 '.k4r84d.info',
4568                 '.k4rvda.info',
4569                 '.k4v0df.info',
4570                 '.k903os.info',
4571                 '.k9df93d.info',
4572                 '.kv94fd.info',
4573                 '.ksjs93.info',
4574                 '.l0ks03.info',
4575                 '.l9u3jc.info',
4576                 '.lv043a.info',
4577                 '.nh94h9.info',
4578                 '.m94r9d.info',
4579                 '.s87fvd.info',
4580                 '.v3k0d.info',
4581                 '.v4r8j4.info',
4582                 '.vf044s.info',
4583                 '.vj49rs.info',
4584                 '.vk498j.info',
4585                 '.u03jow.info',
4586         ),
4587         'Nikhil and Brian' => array(
4588                 // by Brian Dieckman (info at iudndjsdhgas.info)
4589                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4590                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4591                 '.ihfjeswouigf.info',   // by Brian, / was not found
4592                 '.iudndjsdhgas.info',   // by Brian, / was not found
4593                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4594                 '.jiatdbdisut.info',    // by Brian, / was not found
4595                 '.jkfierwoundhw.info',  // by Brian, / was not found
4596                 '.kfjeoutweh.info',             // by Brian, / was not found
4597                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4598                 '.oudjskdwibfm.info',   // by Brian, / was not found
4599                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4600                 '.itxbsjacun.info',             // by Nikhil, / was not found
4601                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4602                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4603                 '.najedncdcounrd.info', // by Nikhil, / was not found
4604                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4605                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4606                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4607                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4608                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4609                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4610                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4611                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4612                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4613         ),
4614         'wealth777 at gmail.com' => array(      // by Henry Ford
4615                 '.brutal-forced.com',
4616                 '.library-bdsm.com',
4617                 '.rape-fantasy.us',
4618         ),
4619         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4620                 '.purerotica.com',
4621                 '.richsex.com',
4622                 '.servik.net',
4623                 '.withsex.com',
4624         ),
4625         'dreamteammoney.com' => array(
4626                 '.dreamteammoney.com',  // dtmurl.com related
4627                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4628         ),
4629         'KLIK VIP Search and family' => array(
4630                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4631                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4632                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4633                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4634                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4635                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4636                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4637         ),
4638         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4639                 '.antivirs.info',
4640                 '.antivirus1.info',
4641                 '.antivirus2.info',
4642         ),
4643         'wasam at vangers.net and family' => array(
4644
4645                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4646                 '.bahatoca.org',
4647                 '.digestlycos.org',
4648                 '.educativaanale.info',
4649                 '.guildstuscan.org',
4650                 '.isaakrobbins.info',
4651                 '.isfelons.org',
4652                 '.lvwelevated.org',
4653                 '.macphersonaca.org',
4654                 '.markyaustrian.org',
4655                 '.michelepug.org',
4656                 '.opalbusy.info',
4657                 '.quijotebachata.info',
4658                 '.salthjc.info',
4659                 '.shogunnerd.info',
4660                 '.solarissean.org',
4661                 '.sparkgsx.info',
4662                 '.tarzanyearly.org',
4663                 '.tulabnsf.org',
4664                 '.vaccarinos.org',
4665
4666                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4667                 '.e2007.info',
4668                 '.cmoss.info',
4669
4670                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4671                 '.finddesk.org',
4672                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4673                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4674                 '.rcatalog.org',
4675                 '.sbitzone.org',
4676
4677                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4678                 '.cheapns.org',
4679                 '.my-top.net',
4680                 '.sfind.net',
4681                 '.sspot.net',
4682                 '.suvfind.info',
4683
4684                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4685                 '.trumber.com',
4686
4687                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4688                 '.blogduet.org',
4689                 '.carelf.info',
4690                 '.cmagic.org',
4691                 '.cspell.org',
4692                 '.dspark.org',
4693                 '.dtonic.org',
4694                 '.mcharm.info',
4695                 '.mslook.info',
4696                 '.phpdinnerware.info',
4697                 '.rnation.org',
4698                 '.uzing.org',
4699
4700                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4701                 '.allbar.info',
4702                 '.allersearch.org',
4703                 '.allzoom.org',
4704                 '.dynall.org',
4705                 '.fastopia.org',
4706                 '.offasfast.info',
4707                 '.rblast.org',
4708                 '.rchistes.info',
4709                 '.rette.org',
4710                 '.shufflequince.org',
4711                 '.suvlook.org',
4712
4713                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4714                 '.290cabeza.org',
4715                 '.bossierpainted.org',
4716                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4717                 '.definekonica.info',   // Admin: tvaals at vangers.net
4718                 '.gradetelemundo.info',
4719                 '.hydraulickin.info',
4720                 '.indicadorestmj.info',
4721                 '.keeleykincaid.org',
4722                 '.kleenbowser.info',
4723                 '.pipnickname.info',
4724                 '.pacolily.org',
4725                 '.redeemtrabalho.info',
4726                 '.scanmakerchua.info',
4727                 '.titanmessina.info',
4728                 '.tragratuit.org',
4729                 '.yeareola.info',
4730         ),
4731         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4732                 '.canadianmedsworld.info',      // 84.252.133.112
4733                 '.tabsdrugstore.info',          // 84.252.133.114
4734                 '.tabsstore.info',                      // 84.252.133.114
4735                 '.topcholesterol.info',         // 84.252.133.132
4736         ),
4737         'be.cx' => array(
4738                 '.be.cx',
4739                 '.ca.cx',
4740         ),
4741         'john780321 at yahoo.com' => array(     // by John  Brown
4742                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4743                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4744                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4745         ),
4746         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4747                 '.bertela.info',
4748                 '.forblis.info',
4749                 '.frenallo.info',
4750                 '.goyahoo.info',
4751                 '.herbak.info',
4752                 '.kiokast.info',
4753                 '.nerenok.info',
4754                 '.pestgets.info',
4755                 '.snukker.info',
4756                 '.thegetspons.info',
4757         ),
4758         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4759                 '.bobop.info',
4760                 '.kwwwe.info',
4761                 '.piikz.info',
4762                 '.moosm.info',
4763                 '.vvvw.info',
4764         ),
4765         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4766                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4767                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4768                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4769                 '.jplingood.com',       // 125.65.112.15
4770                 '.linenew.com',         // 203.191.148.96
4771                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4772                 '.yzlin.com',           // 220.162.244.36
4773         ),
4774         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4775                 '.1111mb.com',
4776                 '.2sex18.com',
4777                 '.69porn1.com',
4778         ),
4779         'ECTechnology' => array(
4780                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4781                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4782                 '.automouse.jp',
4783         ),
4784         'lyqz at 21cn.com' => array(
4785                 '.japangame1.com',
4786                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4787                 '.livedoor1.com',
4788                 '.ragnarokonline1.com',
4789                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4790         ),
4791         'kingrou at hotmail.com' => array(      // by yangjianhe
4792                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4793                 '.453787.com',
4794         ),
4795         'anpaul541000 at 163.com' => array(     // by su qiuqing
4796                 '.cetname.com',                 // 222.77.185.87
4797                 '.jpgamer.net',                 // 220.247.157.106
4798                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4799                 '.lovejptt.com',                // 222.77.185.87
4800                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4801                 '.playncsoft.net',              // 220.247.157.106
4802         ),
4803         'abc00613 at 163.com' => array( // by guo yong
4804                 '.avtw1068.com',                // 64.74.223.11
4805                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4806                 '.djkkk66990.com',              // 68.178.232.99
4807                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4808         ),
4809         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4810                 '.cmonfofo.com',
4811                 '.discutbb.com',
4812         ),
4813         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4814                 '.preca.info',
4815                 '.skiaggi.info',
4816                 '.scrianal.info',
4817                 '.tageom.info',
4818         ),
4819         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4820                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4821                 '.inpros.net',                  // 202.181.98.79
4822                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4823         ),
4824         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4825                 '.ec51.com',
4826                 '.ec51.net',
4827         ),
4828         'abbevillelaties at yahoo.fr etc' => array(
4829                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4830                 '.ringtones-rate.com',
4831                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4832                 '.special-ringtones.net',
4833         ),
4834         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4835                 '.1sgsc.info',
4836                 '.3h4r89h.info',
4837                 '.3v44dd.info',
4838                 '.6rfuh6.info',
4839                 '.84hd8.info',
4840                 '.94bui89.info',
4841                 '.agysb3.info',
4842                 '.asdjhs.info',
4843                 '.bcvnrth.info',
4844                 '.bheb4r.info',
4845                 '.bhiuno.info',
4846                 '.biug7g.info',
4847                 '.bjb5f4.info',
4848                 '.bob8g7g.info',
4849                 '.br89bdd.info',
4850                 '.bsa3h.info',
4851                 '.bsieb8.info',
4852                 '.basbiubf.info',
4853                 '.bobwwfs2.info',
4854                 '.ciuv9t.info',
4855                 '.dbmdx4.info',
4856                 '.dbrjms.info',
4857                 '.dbtcm.info',
4858                 '.dff9ghu.info',
4859                 '.dfshbb.info',
4860                 '.dgd4ffdh.info',
4861                 '.dh3ge.info',
4862                 '.duc86jh.info',
4863                 '.ergth45.info',
4864                 '.f78bf7ffb.info',
4865                 '.gbdfbo4.info',
4866                 '.ger45.info',
4867                 '.gnvnrrg.info',
4868                 '.h47he7.info',
4869                 '.h488hbd4.info',
4870                 '.hd72b94.info',
4871                 '.he74b7.info',
4872                 '.hfujfnr.info',
4873                 '.husdhd42.info',
4874                 '.hbwje.info',
4875                 '.itg87gji.info',
4876                 '.iugiougiuh.info',
4877                 '.jhd4f4aa.info',
4878                 '.jshd73.info',
4879                 '.krhpgd.info',
4880                 '.lyihjn.info',
4881                 '.nfyjnfj.info',
4882                 '.oihbv.info',
4883                 '.os44fvs.info',
4884                 '.sdfsd3.info',
4885                 '.sdiug4.info',
4886                 '.sdkufhh.info',
4887                 '.sdugb4f.info',
4888                 '.skdbf.info',
4889                 '.sipiv78.info',
4890                 '.sudbfb.info',
4891                 '.tymbbmy.info',
4892                 '.uilhjk.info',
4893                 '.vi87vub.info',
4894                 '.vfuyf87f.info',
4895                 '.viyvvj877.info',
4896                 '.w7fc8eu.info',
4897                 '.wefg43g.info',
4898                 '.xbrch78e.info',
4899                 '.ywsfu.info',
4900                 '.zxcbiv.info',
4901         ),
4902         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4903                 '.abofios.info',
4904                 '.amlekfn.info',
4905                 '.amlkdoie.info',
4906                 '.amkslewq.info',
4907                 '.alemfu.info',
4908                 '.aloweks1.info',
4909                 '.alposd3.info',
4910                 '.bamhpb.info',
4911                 '.bhjkb.info',
4912                 '.bjqnj.info',
4913                 '.cvcxcbhpr.info',
4914                 '.czoypaiat.info',
4915                 '.dbpmgc.info',
4916                 '.dgvogrxs.info',
4917                 '.dldksf.info',
4918                 '.dlor6za.com',
4919                 '.dmkoiew.info',
4920                 '.eewrefr.info',
4921                 '.eladne.info',
4922                 '.elksem.info',
4923                 '.elwpod.info',
4924                 '.emlwkdnr.info',
4925                 '.esgmyqk.info',
4926                 '.fauqv.info',
4927                 '.fgxkgy.info',
4928                 '.fhryns.info',
4929                 '.fj38n4g.info',
4930                 '.fjnesal.info',
4931                 '.fmkfoe.info',
4932                 '.fqkcfldtr.info',
4933                 '.fwcigpdwz.info',
4934                 '.fyhik.info',
4935                 '.glrkje.info',
4936                 '.gwkslfq.info',
4937                 '.gwjracvh.info',
4938                 '.hihopepe.info',
4939                 '.hwlyggbkw.info',
4940                 '.hmwbfw.info',
4941                 '.hthyeb.info',
4942                 '.iaofkyaw.info',
4943                 '.uldkxuiw.info',
4944                 '.is7c6w4.info',
4945                 '.ivuddhdk.info',
4946                 '.jgfndjem.info',
4947                 '.jgmdlek.info',
4948                 '.jkrnvmpad.info',
4949                 '.jqujn.info',
4950                 '.jvgmmba.info',
4951                 '.kbaur.info',
4952                 '.kgjindptv.info',
4953                 '.kleo7s9.info',
4954                 '.lezfgam.info',
4955                 '.lfaasy.info',
4956                 '.ljpdjki.info',
4957                 '.lmnpis.info',
4958                 '.lpzcu2f.info',
4959                 '.lrptn.info',
4960                 '.lursqt.info',
4961                 '.mgkabviil.info',
4962                 '.mhtknjyt.info',
4963                 '.mksuuku.info',
4964                 '.mkyky.info',
4965                 '.mloaisn.com',
4966                 '.mlsiknd.info',
4967                 '.mthqz.info',
4968                 '.nnooq.info',
4969                 '.nohhylvc.info',
4970                 '.nuprndsye.info',
4971                 '.nsoelam.info',
4972                 '.nykobczv.info',
4973                 '.nzuhli.info',
4974                 '.odyqzgylr.info',
4975                 '.oidiau.info',
4976                 '.oitzkw.info',
4977                 '.okdmrpz.info',
4978                 '.ooinziti.info',
4979                 '.ortqr.info',
4980                 '.osmkpnekv.info',
4981                 '.ozkzfih.info',
4982                 '.p3ix8wc.com',
4983                 '.piwyt.info',
4984                 '.pfkijrm.info',
4985                 '.pjktcragi.info',
4986                 '.pleoz.info',
4987                 '.plvqm73.info',
4988                 '.pqyrem.info',
4989                 '.qipgqd.info',
4990                 '.qlewixu.com',
4991                 '.qmlskme.info',
4992                 '.qtuff.info',
4993                 '.quoga.info',
4994                 '.quqz.info',
4995                 '.qzxuw.info',
4996                 '.rcaidegp.info',
4997                 '.rlkmdi.info',
4998                 '.rnsoiov.info',
4999                 '.rnwlams.info',
5000                 '.rprgkgqld.info',
5001                 '.rubqvxrn.info',
5002                 '.spqxstl.info',
5003                 '.syckoqjql.info',
5004                 '.tbirb.info',
5005                 '.thalc34.info',
5006                 '.tiabq.info',
5007                 '.tszzpjr.info',
5008                 '.tyjdyn.info',
5009                 '.twgugpns.info',
5010                 '.uaezrqp.info',
5011                 '.udlkasu.info',
5012                 '.uejncyf.info',
5013                 '.ukvflb.info',
5014                 '.ugsuv.info',
5015                 '.ukhgpcp.info',
5016                 '.urprzn.info',
5017                 '.uuhememkw.info',
5018                 '.yalc7en.info',
5019                 '.ybuid.info',
5020                 '.yhdkgfob.info',
5021                 '.ymenq.info',
5022                 '.ynlyb.info',
5023                 '.vieatlubk.info',
5024                 '.vltcaho.info',
5025                 '.wlamsiek.info',
5026                 '.wlerp.info',
5027                 '.wlmtshzi.info',
5028                 '.wmlkams.info',
5029                 '.wprqd.info',
5030                 '.wpyspszi.info',
5031                 '.xdscc.info',
5032                 '.xdvy.info',
5033                 '.xeypku.info',
5034                 '.xsrxh.info',
5035                 '.xwjyrpfe.info',
5036                 '.yxcqw.info',
5037                 '.zhbktrh.info',
5038                 '.zspepn.info',
5039                 '.zsxtz.info',
5040         ),
5041         'survi at poczta.fm and smiley' => array(
5042                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5043                 '.ppert.info',
5044                 '.pperta.info',
5045                 '.pperts.info',
5046                 '.pprtuis.info',
5047                 '.13iuey.info',         // ":>"
5048                 '.13jkhs.info',
5049                 '.13lksa.info',
5050                 '.13rxtx.info',
5051                 '.13slkd.info',
5052                 '.13zaer.info',
5053         ),
5054         'admin at esemeski.com' => array(       // by Jan Kalka
5055                 '.kxils.info',
5056                 '.kuaph.info',
5057                 '.lncdc.info',
5058                 '.lsqpd.info',
5059                 '.mczed.info',
5060                 '.npous.info',
5061                 '.obgju.info',
5062         ),
5063         'LiquidNetLimited.com' => array(
5064                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5065
5066                 // FateBack.com related
5067                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5068                 '.bebto.com',
5069                 '.fateback.com',
5070                 '.undonet.com',
5071                 '.yoll.net',
5072                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5073
5074                 // 50webs.com                   // 64.72.112.10
5075                 // dns2.50webs.com              // 64.72.112.11
5076                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5077                 // dns2.freehostia.com  // 64.72.112.13
5078                 // serv3.freehostia.com // 64.72.112.14
5079                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5080                 // mail.50webs.com              // 64.72.112.26
5081                 // supremecenter41.com  // 64.72.112.52
5082                 // 50webs2.50webs.com   // 64.72.112.89
5083                 // supremecenter39.com  // 64.72.112.103
5084
5085                 // by LiquidNet Ltd. (support at propersupport.com)
5086                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5087                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5088                         'duoservers.com',               // 216.65.1.130
5089
5090                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5091         ),
5092         'domains at agava.com' => array(
5093                 '.h18.ru',
5094                 '.hut1.ru',
5095         ),
5096         'wlmx009 at hotmail.com' => array(
5097                 '.123lineage.com',
5098                 '.ff11-info.com',
5099                 '.lastlineage.com',
5100                 '.lineage2-ol.com',
5101                 '.lineage2006.com',
5102                 '.lineagefirst.com',
5103         ),
5104         'Zettahost.com' => array(
5105                 '.atspace.biz',         // sales at zettahost.com
5106                 '.atspace.com',         // abuse at zettahost.com
5107                 '.atspace.name',        // NS atspace.com
5108                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5109                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5110         ),
5111         'hlq9814 at 163.com' => array(
5112                 '.kotonohax.com',               // by ling bao
5113                 '.ragnarox.mobi',               // by lin bao, *.exe download
5114                 '.rokonline-jp.com',    // by hang long
5115         ),
5116         '77ch.jp' => array(
5117                 '.77ch.jp',
5118                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5119         ),
5120         'serchportal at mail.ru' => array(      // by Namu Adin
5121                 '.43fert.info',
5122                 '.belis.info',
5123                 '.bonu.info',
5124                 '.chelsite.info',
5125                 '.chparael.info',
5126                 '.cool9f.info',
5127                 '.dada2.info',
5128                 '.dorplanete.info',
5129                 '.dormonde.info',
5130                 '.dorprojet.info',
5131                 '.faciledor.info',
5132                 '.fastsearchgroup.info',
5133                 '.gerta0.info',
5134                 '.getse.info',
5135                 '.gopvl.info',
5136                 '.knopki.info',
5137                 '.propidor.info',
5138                 '.quicksearchnet.info',
5139                 '.ret5.info',
5140                 '.slimfastsearch.info',
5141                 '.virtualpvl.info',
5142                 '.vpvla.info',
5143                 '.xjdor.info',
5144                 '.zhopki.info',
5145         ),
5146         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5147                 '*.444mb.com',          // Free hosting
5148                 'urlnip.com',           // Redirection
5149         ),
5150         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5151                 '.1fasttimesatnau.info',
5152                 '.1freecybersex.info',
5153                 '.1freexxxcomics.info',
5154                 '.1fuckingmywife.info',
5155                 '.1pornpreview.info',
5156                 'www.ru',                                       // by (service at demos.ru), redirection
5157         ),
5158         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5159                 '.adultschat.info',
5160                 '.livecamonline.info',
5161                 '.webcam4u.info',
5162                 '.younghot.info',
5163         ),
5164         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5165                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5166
5167                 // 209.51.196.242
5168                 '.22web.net',
5169                 '.2kool4u.net',
5170                 '.9skul.com',
5171                 '.alojalo.info',
5172                 '.byet.net',
5173                 '.byethost2.com',
5174                 '.byethost3.com',
5175                 '.byethost4.com',
5176                 '.byethost5.com',
5177                 '.byethost6.com',
5178                 '.byethost7.com',
5179                 '.byethost8.com',
5180                 '.byethost9.com',
5181                 '.byethost10.com',
5182                 '.byethost11.com',
5183                 '.byethost12.com',
5184                 '.byethost13.com',
5185                 '.byethost14.com',
5186                 '.byethost15.com',
5187                 '.byethost16.com',
5188                 '.byethost17.com',
5189                 '.byethost18.com',
5190                 '.headshothost.net',
5191                 '.hostwq.net',
5192                 '.mega-file.net',
5193                 '.truefreehost.com',
5194
5195                 '.ifastnet.com',        // 209.51.196.243
5196
5197                 // 209.190.16.82(mx1.byet.org)
5198                 '.1sthost.org',
5199                 '.4sql.net',
5200                 '.byet.org',
5201                 '.hyperphp.com',
5202                 '.kwikphp.com',
5203                 '.my-php.net',
5204                 '.my-place.us',
5205                 '.my-webs.org',
5206                 '.netfast.org',
5207                 '.php0h.com',
5208                 '.php1h.com',
5209                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5210                 '.phpnet.us',
5211                 '.prohosts.org',
5212                 '.pro-php.org',
5213                 '.prophp.org',
5214                 '.sprinterweb.net',
5215                 '.swiftphp.com',
5216                 '.xlphp.net',
5217
5218                 // 209.190.16.83(mx2.byet.org)
5219                 '.instant-wiki.net',
5220
5221                 // 209.190.16.84(mx3.byet.org)
5222
5223                 // 209.190.16.85(mx4.byet.org)
5224                 '.instant-blog.net',
5225                 '.instant-forum.net',
5226
5227                 '.byethost.com',                        // 209.190.18.138
5228         ),
5229         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5230                 '.analmoviesite.info',
5231                 '.bestgirlssex.info',
5232                 '.boxvagina.info',
5233                 '.cyberlivegirls.info',
5234                 '.hotredgirls.info',
5235                 '.forsexlove.info',
5236                 '.hotnudezone.info',
5237                 '.hotredpussy.info',
5238                 '.lesbians-live.info',
5239                 '.lesbians-on-cam.info',
5240                 '.onlinegirlssite.info',
5241                 '.sexloveonline.info',
5242                 '.teensexcard.info',
5243                 '.teensexdirect.info',
5244                 '.topnudesite.info',
5245                 '.vaginafree.info',
5246                 '.webcam-show.info',
5247                 '.webcamshow.info',
5248                 '.youngsexchat.info',
5249                 '.yourcumshot.info',
5250         ),
5251         'stocking.club at gmail.com' => array(
5252                 '.adulthotmodels.com',          // by David Zajwzran
5253                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5254                 '.cash-call.info',                      // by David Theissen
5255                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5256                 '.cheap-online-viagra.info',    // by David Theissen
5257                 '.drugcleansing.net',           // by David Zajwzran
5258                 '.men-health-zone.com',         // by David Theissen
5259                 '.purchase-viagra.info',        // by David Theissen
5260                 '.realdrunkengirls.biz',        // by David Theissen
5261                 '.sextoyslife.com',                     // by David Zajwzran
5262                 '.sexysubjects.info',           // by David Zajwzran
5263                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5264                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5265                 '.travelcardsite.info',         // by David Theissen
5266         ),
5267         'lustiq at p5com.com' => array(
5268                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5269                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5270         ),
5271         'web at 6jy.com' => array(
5272                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5273                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5274         ),
5275         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5276                 '.auto-fgen.info',
5277                 '.fast-marketing.info',
5278                 '.from-usa.info',
5279                 '.generic-pharm.info',
5280                 '.pharm-directory.info',
5281                 '.popular-people.info',
5282                 '.safe-health.info',
5283                 '.star-celebrities.info',
5284                 '.super-home-biz.info',
5285                 '.top5-auto.info',
5286                 '.top5-cars.info',
5287                 '.vip-furniture.info',
5288                 '.vip-pc.info',
5289                 '.vip-pets.info',
5290         ),
5291         'abuse at search-store.org' => array(
5292                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5293         ),
5294         'Leading Edge Marketing Inc.' => array(
5295                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5296                 '.abemedical.com',
5297                 '.attractwomennow.com',
5298                 '.bettersexmall.com',
5299                 '.buymaxoderm.com',
5300                 '.buyvprx.com',
5301                 '.genf20.com',
5302                 '.infinityhealthnews.com',
5303                 '.istnewsletter.com',
5304                 '.leadingedgecash.com',
5305                 '.leadingedgeherbals.com',
5306                 '.leadingedgevipsonly.com',
5307                 '.lecash.com',
5308                 '.leminfo.com',
5309                 '.proextendersystem.com',
5310                 '.provestra.com',
5311                 '.semenax.com',
5312                 '.shavenomore.com',
5313                 '.theedgenewsletter.com',
5314                 '.vigorelle.com',
5315                 '.vigrx.com',
5316                 '.vigrxplus.com',
5317                 '.wbstnewsletter.com',
5318         ),
5319         'clickx at bk.ru' => array(     // by Alexey Enrertov
5320                 '.coolget*.info' =>
5321                         '#^(?:.*\.)?' . 'coolget' .
5322                         '(?:bus|find|news|php|place|post|srch)' .
5323                         '\.info$#',
5324                 '.coolgirl*.info' =>
5325                         '#^(?:.*\.)?' . 'coolgirl' .
5326                         '(?:apple|fish|search)' .
5327                         '\.info$#',
5328                 '.coolmeet*.info' =>
5329                         '#^(?:.*\.)?' . 'coolmeet' .
5330                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5331                         '\.info$#',
5332                 '.cool**.info' =>
5333                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5334                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5335                         '\.info$#',
5336                 '.freseasy*.info' =>
5337                         '#^(?:.*\.)?' . 'freseasy' .
5338                         '(?:apple|click|find|fish|post|search)' .
5339                         '\.info$#',
5340                 '.fres**.info' =>
5341                         '#^(?:.*\.)?' .
5342                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5343                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5344                         '\.info$#',
5345                         // These are not found yet:
5346                         // fresgirlsrch.info
5347                         // fresadultapple.info
5348                         // fresadultclick.info
5349                         // frestheplace.info
5350
5351                 // 66.232.113.44
5352                 '.nuhost.info',
5353                 '.susearch.info',
5354
5355                 // 66.232.126.74(hv94.steephost.com)
5356                 '.dilej.com',
5357                 '.fyvij.com',
5358                 '.howus.com',
5359                 '.jisyn.com',
5360                 '.kaxem.com',
5361                 '.mihug.com',
5362                 '.mobyb.com',
5363                 '.qidat.com',
5364                 '.qihek.com',
5365                 '.ryzic.com',
5366                 '.sasuv.com',
5367                 '.tuquh.com',
5368                 '.vehyq.com',
5369                 '.wezid.com',
5370                 '.wifuj.com',
5371                 '.xijyt.com',
5372                 '.zuqyn.com',
5373
5374                 '.mosugy.com',
5375         ),
5376         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5377                 '.hitsearching.info',
5378                 '.hugeamountdata.info',
5379                 '.megafasthost.info',
5380                 '.real-big-host.info',
5381                 '.search4freez.info',
5382                 '.yasech.info',
5383
5384                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5385                 '.bymire.com',
5386
5387                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5388                 '.ligiwa.com',
5389
5390                 '.mubeho.com',
5391         ),
5392         'ice--man at mail.ru related' => array(
5393                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5394                 '.bestcreola.com',
5395                 '.crekatierra.com',
5396                 '.creolafire.com',
5397                 '.crolik.com',
5398                 '.croller.cn',
5399                 '.ecrmx.com',
5400                 '.eflashpoint.com',
5401                 '.exoticmed.com',
5402                 '.feelview.com',
5403                 '.greatexotic.com',
5404                 '.icrtx.com',
5405                 '.icyhip.com',
5406                 '.icyiceman.com',
5407                 '.icypopular.com',
5408                 '.iflashpoint.com',
5409                 '.justmdx.com',
5410                 '.kiliusgroup.com',
5411                 '.klickerr.com',
5412                 '.klickerrworld.com',
5413                 '.kreolic.com',
5414                 '.margansitio.com',
5415                 '.margantierra.com',
5416                 '.mimargan.com',
5417                 '.oilkeys.com',
5418                 '.planetmdx.com',
5419                 '.thekeyse.com',
5420                 '.viewgreat.com',
5421                 '.yourcreola.com',
5422
5423                 // 69.46.23.48
5424                 '.bestkilius.com',
5425                 '.crekadirecto.com',
5426                 '.getflashsite.com',
5427                 '.sucreka.com',
5428                 '.superkilius.com',
5429
5430                 // 69.46.23.48 by bing-16 at ftunez.org
5431                 '.bovorup.cn',
5432                 '.litotar.cn',
5433                 '.nihydec.cn',
5434
5435                 // 66.232.112.175 by bing-32 at ftunez.org
5436                 '.lasyxy.cn',
5437
5438                 // by bing-65 at ftunez.org
5439                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5440                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5441                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5442                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5443                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5444                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5445                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5446                 '.saralar.cn',          // 66.232.120.113(non-existent)
5447                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5448
5449                 // 69.46.23.48 by clarkson-34 at ftunez.org
5450                 '.bumora.cn',
5451                 '.byxite.cn',
5452                 '.byxuqu.cn',
5453                 '.jadama.cn',
5454                 '.kybope.cn',
5455                 '.mefeki.cn',
5456                 '.mokiso.cn',
5457                 '.niqeme.cn',
5458                 '.pukafo.cn',
5459                 '.qesaxa.cn',
5460                 '.toxezi.cn',
5461                 '.tujudy.cn',
5462                 '.tutike.cn',
5463
5464                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5465                 '.cabino.cn',
5466                 '.cuwace.cn',
5467                 '.ferazi.cn',
5468                 '.gigywy.cn',
5469                 '.lapype.cn',
5470                 '.mewabe.cn',
5471                 '.pezegy.cn',
5472                 '.pyzuza.cn',
5473                 '.qypony.cn',
5474                 '.ropesy.cn',
5475                 '.wadyfe.cn',
5476
5477                 // 69.46.23.48 clarkson-58 at ftunez.org
5478                 '.becabe.cn',
5479                 '.biciqy.cn',
5480                 '.bezymu.cn',
5481                 '.cifori.cn',
5482                 '.ciwyxi.cn',
5483                 '.dobari.cn',
5484                 '.dusofe.cn',
5485                 '.dutyda.cn',
5486                 '.dykanu.cn',
5487                 '.fakexu.cn',
5488                 '.fylema.cn',
5489                 '.godymo.cn',
5490                 '.hyhaxy.cn',
5491                 '.ganosi.cn',
5492                 '.kuxyju.cn',
5493                 '.lacezy.cn',
5494                 '.lonyru.cn',
5495                 '.lycato.cn',
5496                 '.nykyby.cn',
5497                 '.qyhuko.cn',
5498                 '.redere.cn',
5499                 '.riwimu.cn',
5500                 '.wopary.cn',
5501                 '.xizity.cn',
5502                 '.xuxusa.cn',
5503
5504                 // by entretov-28 at ftunez.org
5505                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5506                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5507
5508                 // 69.46.23.48 by entretov-32 at ftunez.org
5509                 '.cihuji.cn',
5510                 '.deqyve.cn',
5511                 '.genefa.cn',
5512                 '.gujyju.cn',
5513                 '.hasadu.cn',
5514                 '.hedomi.cn',
5515                 '.kecicy.cn',
5516                 '.kipabo.cn',
5517                 '.manunu.cn',
5518                 '.musoru.cn',
5519                 '.myvuna.cn',
5520                 '.pikybe.cn',
5521                 '.riqawo.cn',
5522                 '.rufuxy.cn',
5523                 '.vyfilu.cn',
5524                 '.xadule.cn',
5525                 '.zolaxe.cn',
5526                 '.zerixu.cn',
5527
5528                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5529                 '.dozoda.cn',
5530                 '.nemipu.cn',
5531
5532                 // entretov-84 at ftunez.org
5533                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5534                 '.favulol.cn',          // 66.232.120.115(*snip*)
5535                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5536
5537                 // 69.46.23.48 by jeremy-57 at ftunez.org
5538                 '.duzele.cn',
5539                 '.figede.cn',
5540                 '.fiwany.cn',
5541                 '.gyfalu.cn',
5542                 '.jepylo.cn',
5543                 '.nuqumy.cn',
5544
5545                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5546                 '.burahu.cn',
5547                 '.jydijy.cn',
5548                 '.komyby.cn',
5549                 '.najepa.cn',
5550                 '.pylobu.cn',
5551                 '.qofoly.cn',
5552                 '.sybuvi.cn',
5553                 '.vycexu.cn',
5554                 '.wotyqo.cn',
5555                 '.xudoli.cn',
5556
5557                 // by entretov-28 at ftunez.org
5558                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5559
5560                 // by entretov-37 at ftunez.org
5561                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5562                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5563
5564                 // 66.232.112.175 by entretov-86 at ftunez.org
5565                 '.faweji.cn',
5566                 '.jypaci.cn',
5567                 '.xozuso.cn',
5568
5569                 // 69.46.23.48 by miles-37 at ftunez.org
5570                 '.beqymo.cn',
5571                 '.ceqibi.cn',
5572                 '.dyraqo.cn',
5573                 '.qenedo.cn',
5574                 '.qurypa.cn',
5575                 '.siluvo.cn',
5576                 '.tujala.cn',
5577                 '.wukuwi.cn',
5578                 '.xenibo.cn',
5579                 '.xiculo.cn',
5580                 '.zabemu.cn',
5581
5582                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5583                 '.bevaka.cn',
5584                 '.fysyte.cn',
5585                 '.guxixu.cn',
5586                 '.hatoli.cn',
5587                 '.jitobu.cn',
5588                 '.juxeca.cn',
5589                 '.kifuhy.cn',
5590                 '.licila.cn',
5591                 '.mecomy.cn',
5592                 '.niryko.cn',
5593                 '.noxoco.cn',
5594                 '.qiwysu.cn',
5595                 '.tutysy.cn',
5596
5597                 // by oker-74 at ftunez.org
5598                 '.navufol.cn',
5599
5600                 // by oker-97 at ftunez.org
5601                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5602                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5603                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5604                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5605                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5606                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5607                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5608
5609                 // by polet-20 at ftunez.org
5610                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5611
5612                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5613                 '.gywiqe.cn',
5614                 '.jotapo.cn',
5615                 '.jywixa.cn',
5616
5617                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5618                 '.bawegap.cn',
5619                 '.buremyl.cn',
5620                 '.cilybut.cn',
5621                 '.cutufek.cn',
5622                 '.defypyr.cn',
5623                 '.femaxij.cn',
5624                 '.gelejo.cn',
5625                 '.gocylyv.cn',
5626                 '.kehiqaq.cn',
5627                 '.ninyjit.cn',
5628                 '.ruroruw.cn',
5629                 '.vetehow.cn',
5630
5631                 // 69.46.23.48 sabrosky-85 at ftunez.org
5632                 '.banyla.cn',
5633                 '.bubaqu.cn',
5634                 '.bygage.cn',
5635                 '.dafozy.cn',
5636                 '.kaxyjo.cn',
5637                 '.makyle.cn',
5638                 '.naleto.cn',
5639                 '.pidele.cn',
5640                 '.poqexa.cn',
5641                 '.pymaqo.cn',
5642                 '.qupiqy.cn',
5643                 '.reqefy.cn',
5644                 '.sopocy.cn',
5645                 '.vuhexo.cn',
5646                 '.weryso.cn',
5647                 '.wubula.cn',
5648                 '.xufuxy.cn',
5649                 '.zuhyxu.cn',
5650
5651                 // 69.46.23.48 by tribiani-97 at ftunez.org
5652                 '.dyxorod.cn',
5653                 '.firywoz.cn',
5654                 '.jixezyx.cn',
5655                 '.joveraw.cn',
5656                 '.jowaxup.cn',
5657                 '.nodarej.cn',
5658                 '.pimijom.cn',
5659                 '.tugupeg.cn',
5660
5661                 // 66.232.112.175 by abuse-here at inbox.ru
5662                 '.catybe.cn',
5663                 '.jytame.cn',
5664                 '.wygete.cn',
5665         ),
5666         '74.50.97.*' => array(
5667                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5668                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5669                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5670                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5671                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5672                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5673                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5674                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5675                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5676                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5677                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5678                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5679                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5680                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5681                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5682                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5683
5684                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5685                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5686                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5687                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5688                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5689                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5690                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5691                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5692                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5693                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5694                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5695                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5696                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5697                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5698                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5699                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5700                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5701                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5702                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5703
5704                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5705                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5706                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5707                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5708                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5709         ),
5710         'nijeoi at hotmai.com' => array(
5711                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5712                 '.bowij.com',
5713                 '.bozib.com',
5714                 '.cavux.com',
5715                 '.dipov.com',
5716                 '.gumoz.com',
5717                 '.hakyb.com',
5718                 '.hehyv.com',
5719                 '.hepyt.com',
5720                 '.howoj.com',
5721                 '.jywaz.com',
5722                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5723                 '.kyheq.com',
5724                 '.kyzad.com',
5725                 '.qicad.com',
5726                 '.qubyd.com',
5727                 '.mocyq.com',
5728                 '.muloq.com',
5729                 '.myxim.com',
5730                 '.nufyp.com',
5731                 '.waqog.com',
5732                 '.wyduc.com',
5733                 '.xefyv.com',
5734                 '.xomej.com',
5735                 '.xomip.com',
5736                 '.xykyl.com',
5737                 '.zakuw.com',
5738                 '.zeliw.com',
5739                 '.zimev.com',
5740                 '.zipif.com',
5741
5742                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5743                 '.tycoco.com',
5744
5745                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5746                 '.pufeqa.com',
5747
5748                 '.xehymi.com',
5749         ),
5750         'niichka at hotmail.com' => array(
5751                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5752                 '.aerosearch.info',
5753                 '.freader.info',
5754                 '.info4searchz.info',
5755                 '.nice-host.info',
5756                 '.realyfast.info',
5757                 '.resuts.info',
5758
5759                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5760                 '.bepoh.com',
5761                 '.gufiq.com',
5762                 '.kedyh.com',
5763                 '.pofyb.com',
5764                 '.rurid.com',
5765                 '.vucaj.com',
5766                 '.vuwir.com',
5767
5768                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5769                 '.bejefe.com',
5770
5771                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5772                 '.tidawu.com',
5773
5774                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5775                 '.rofuqa.com',
5776         ),
5777         'porychik at hot.ee' => array(  // by Igor
5778                 '.tedstate.info',       // "Free Web Hosting"
5779                 '.giftsee.com',
5780         ),
5781         'admin at pertol.info' => array(
5782                 // 81.0.195.189 "Free Web Hosting"
5783                 '.laparka.cn',
5784                 '.mirlos.cn',
5785                 '.oldmoms.cn',
5786
5787                 // 217.11.233.64(timed-out)
5788                 '.ejmpep.cn',   // by admin at pertol.info
5789                 '.ytere.cn',    // by admin at x2t.com
5790
5791                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5792                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5793
5794                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5795                 '.new-greece-travel.com',
5796                 '.peraonline.info',
5797
5798                 '.barkman.cn',
5799         ),
5800
5801         'aofa at vip.163.com' => array(
5802                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5803                 '.5944.net',
5804         ),
5805         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5806                 '.maxrentcar.info',
5807                 '.newsonyericsson.info',
5808                 '.pornositeworld.biz',
5809                 '.rentcarweb.info',
5810                 '.xxxdomainsex.biz',
5811         ),
5812         'kopper1970 at gmail.com' => array(
5813                 '.cardealerall.info',           // by Green
5814                 '.donatecarsales.info',         // by Sipil
5815                 '.ringtonewilly.info',          // by Sipil
5816                 '.travelstraveling.info',       // by Chinik
5817                 '.viagrabuyonline.org',         // by Sipil
5818                 '.viagraorderbuy.com',          // by Anatol
5819                 '.worldcuptourism.info',        // by Sipil
5820         ),
5821         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5822                 '.globalinfoland.info',
5823                 '.goodlifesearch.info',
5824                 '.hotnetinfo.info',
5825                 '.hotpornmovies.org',
5826                 '.infopilot.info',
5827         ),
5828         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5829                 '.bang-bro.org',
5830                 '.datinghost.info',
5831                 '.hello-craulers.info',
5832                 '.free-blog-host.info',
5833                 '.sucking-boobs.info',
5834         ),
5835         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5836                 '.allcamsguide.info',
5837                 '.camerascams.info',
5838                 '.camerasera.info',
5839                 '.girlcamsworld.info',
5840                 '.hiddenlimocams.info',
5841                 '.redlivecams.info',
5842                 '.spycamsgear.info',
5843                 '.spycamssite.info',
5844                 '.supercamsusa.info',
5845                 '.thecamsnow.info',
5846         ),
5847         '87.242.116.81' => array(
5848                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5849                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5850                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5851                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5852                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5853         ),
5854         '208.70.75.153' => array(
5855                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5856                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5857                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5858                 '.cerc-on.info',
5859                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5860                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5861                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5862                 '.cerc-tr.info',
5863                 '.cerc-tw.info',
5864                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5865                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5866                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5867                 '.cerc-on.org',         // by cerca-one at ya.ru
5868                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5869                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5870                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5871                 '.cerc-tr.org',         // by cerca-one at ya.ru
5872                 '.cerc-tw.org',         // by cerca-one at ya.ru
5873                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5874                 '.cerca-fo.info',
5875                 '.cerca-no.info',
5876                 '.cerca-on.info',
5877                 '.cerca-sv.info',
5878                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5879                 '.cerca-te.info',
5880                 '.cerca-tr.info',
5881                 '.cerca-sx.org',
5882                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5883                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5884                 '.ricerca-fo.info',
5885                 '.ricerca-one.org',
5886                 '.ricerca-sv.org',
5887                 '.ricerca-sx.org',
5888                 '.ricerca-te.org',
5889                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5890                 '.subit01.org',
5891                 '.subit02.org',
5892                 '.subit03.org',
5893                 '.subit04.org',
5894                 '.subit05.org',
5895                 '.subit06.org',
5896                 '.subit01.info',
5897                 '.subit02.info',
5898                 '.subit03.info',
5899                 '.subit04.info',
5900                 '.subit05.info',
5901                 '.subit06.info',
5902         ),
5903         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5904                 '.5-base.com',
5905                 '.pharmacy-style.com',
5906         ),
5907         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5908                 '.ista-2006.ru',
5909                 '.wefas.ru',
5910         ),
5911         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5912                 '.tourismworldsite.info',
5913                 '.yourtourismtravel.info',
5914         ),
5915         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5916                 '.easyfindcar.info',
5917                 '.siteinfosystems.info',
5918         ),
5919         'smesh1155 at gmail.com' => array(
5920                 '.hospitalforyou.info',                 // by Gimmi
5921                 '.thephentermineonline.info',   // by Kipola
5922         ),
5923         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5924                 '.kiski.net.in',
5925                 '.pipki.org.in',
5926                 '.popki.ind.in',
5927                 '.siski.co.in',
5928         ),
5929         'tiptronikmike at mail.com' => array(
5930                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5931                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5932                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5933                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5934                 //'.i0sex.info',                // Michael
5935                 //'.i1sex.info',                // Michael
5936                 //'.i2sex.info',                // Martin
5937                 //'.i3sex.info',                // Martin
5938                 //'.i4sex.info',                // Adulterra
5939                 //'.i5sex.info',                // Adulterra
5940                 //[irvyz]6sex.info not found
5941                 '.i8sex.info',                  // by Martin
5942         ),
5943         'skuarlytronald at mail.com' => array(
5944                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5945                 '.girlsgoingmad.info',          // 64.27.13.120
5946                 '.girlsgonewildside.info',      // 64.27.13.120
5947         ),
5948         '66.232.109.250' => array(
5949                 '.1626pornporno.info',
5950                 '.1851pornporno.info',
5951                 '.1876pornporno.info',
5952                 '.476pornporno.info',
5953         ),
5954         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5955                 '.compactxxx.com',
5956                 '.eadulthost.com',
5957                 '.eadultview.com',
5958                 '.eroticpool.net',
5959                 '.ipornservice.com',
5960                 '.liveadulthost.com',
5961                 '.nudepal.com',
5962                 '.sweetservers.com',
5963         ),
5964         'support at orgija.org' => array(
5965                 '.assfuckporn.org',
5966                 '.dosugmos.org',
5967                 '.fuckporn.org',
5968                 '.girlsdosug.org',
5969                 '.girlsporno.org',
5970                 '.moscowintim.org',
5971                 '.pornass.org',
5972                 '.pornopussy.org',
5973                 '.progirlsporn.org',
5974                 '.pussypornogirls.org',
5975         ),
5976         '125.65.112.93' => array(
5977                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5978                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5979         ),
5980         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5981                 '.beta-google.com',
5982                 '.tv-reklama.info',
5983                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5984                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5985         ),
5986         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5987                 '.abobrinha.org',
5988                 '.aneurysmic.com',              // / not found
5989                 '.physcomp.org',                // / not found
5990                 '.seriedelcaribe2006.org',
5991                 '.refugeeyouthinamerica.com',
5992         ),
5993         'skip_20022 at yahoo.com' => array(
5994                 // 203.174.83.55
5995                 '.a28hosting.info',             // by Bill Jones
5996                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5997                 '.besthentai06.org',    // by yakon
5998         ),
5999         'USFINE.com' => array(
6000                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
6001                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
6002         ),
6003         '68.178.211.57' => array(
6004                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
6005                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
6006         ),
6007         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
6008                 '.google-yahoo-msn.org',
6009                 '.expedia-travel.org',
6010         ),
6011         'admin at newestsearch.com' => array(   // by Gibrel Sitce
6012                 '.emr5ce.org',
6013                 '.wfe7nv.org',
6014                 '.xyr99yx.org',
6015         ),
6016         '203.171.230.39' => array(
6017                 // by 51shell at 163.com
6018                 '.amatou-fc2.com',
6019
6020                 // registrar bizcn.com, iframe + cursor
6021                 '.playonlinenc.com',
6022                 '.playboss-jp.com',
6023         ),
6024         'Digi-Rock.com' => array(
6025                 '.rom776.com',
6026                 // owner-organization: DIGIROCK, INC.
6027                 // owner-email: domain-contact at digi-rock.com
6028                 // with an external ad-and-JavaScript,
6029                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6030                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6031         ),
6032         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6033                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6034                 '.getrun.cn',                           // 208.73.34.48
6035                 '.ipod-application.info',       // NO IP
6036                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6037                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6038         ),
6039         'germerts at yandex.ru' => array(
6040                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6041                 '.andatra.info',
6042                 '.banchitos.info',
6043                 '.batareya.info',
6044                 '.blevota.info',
6045                 '.broneslon.info',
6046                 '.gamadril.info',
6047                 '.gipotenuza.info',
6048                 '.govnosaklo.info',
6049                 '.muflon.info',
6050                 '.termitnik.info',
6051                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6052         ),
6053         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6054                 '.acronis-true-image.info',
6055                 '.calcio-xp.info',
6056                 '.cosanova.info',
6057                 '.cose-rx.info',
6058                 '.dictip.info',
6059                 '.findig.info',
6060                 '.fotonow.info',
6061                 '.lavoro-tip.info',
6062                 '.loan-homes.info',
6063                 '.mionovita.info',
6064                 '.mustv.info',
6065                 '.newsnaked.info',
6066                 '.online-tod.info',
6067                 '.opakit.info',
6068                 '.opanow.info',
6069                 '.opriton.info',
6070                 '.porta-bl.info',
6071                 '.refdif.info',
6072                 '.xzmovie.info',
6073         ),
6074         '84.252.148.120 etc' => array(
6075                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6076                 '.planetavilton.info',  // 84.252.148.120
6077                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6078         ),
6079         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6080                 '.99jk.com',
6081                 '.99jk.com.cn',
6082                 '.99jk.cn',
6083         ),
6084         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6085                 '.kliktop.biz',
6086                 '.kliktop.org',
6087                 '.pharmatop.us',
6088                 '.supertop.us',
6089                 '.supervaizer.info',
6090         ),
6091         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6092                 '.freeamateursexx.info',        // 81.0.195.228
6093                 '.freeanalsexx.info',           // 217.11.233.97
6094                 '.freegaysexx.info',            // 81.0.195.228
6095         ),
6096         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6097                 '.abbhi.info',
6098                 '.gayblogguide.biz',
6099                 '.huope.info',
6100                 '.thebdsmday.info',
6101                 '.zioprt.info',                 // 89.149.228.237
6102         ),
6103         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6104                 '.boblisk.info',
6105                 '.factyri.info',
6106                 '.jorge1.info',
6107         ),
6108         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6109                 '.bestmindstorm.org',
6110                 '.redstoreonline.org',
6111         ),
6112         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6113                 '.8e8ae.net',
6114                 '.c-cock.com',
6115                 '.fa59eaf.com',
6116                 '.set-place.net',
6117                 '.sex-beauty.net',
6118         ),
6119         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6120                 '.tomdir.info',
6121                 '.tomdirdirect.info',
6122                 '.tomdirworld.info',
6123                 '.treton.info',
6124                 '.trefas.info',
6125                 '.tretonmondo.info',
6126                 '.unefout.info',
6127                 '.unefoutprojet.info',
6128                 '.unitfree.info',
6129                 '.vilret.info',
6130                 '.vilttown.info',
6131                 '.votrefout.info',
6132                 '.warmfind.info',
6133                 '.warptop.info',
6134                 '.wildtram.info',
6135                 '.xofind.info',
6136                 '.xopdiscover.info',
6137                 '.xopfind.info',
6138                 '.xoplocate.info',
6139                 '.xopseek.info',
6140                 '.xpfirst.info',
6141                 '.xphighest.info',
6142                 '.xptop.info',
6143         ),
6144         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6145                 '.myviagrasite.com',    // 80.74.153.2
6146                 '.thecanadianmeds.com', // 80.74.153.17
6147         ),
6148         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6149                 '.bigemot.com',                         // 217.11.233.34, / not found
6150                 '.espharmacy.com',                      // 217.11.233.34
6151                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6152                 '.ringtonecooler.com',          // 217.11.233.34
6153         ),
6154         'dfym at dfym.cn' => array(
6155                 // ANI, JavaScript, iframe
6156
6157                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6158                 '.okwit.com',
6159                 '.sakerver.com',
6160                 '.motewiki.net',
6161
6162                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6163
6164                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6165
6166                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6167                 '.bbtv-chat.com',
6168                 '.ketubatle.com',
6169                 '.playonlanei.com',
6170                 '.rmtfcne.com',
6171
6172         ),
6173         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6174                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6175                 '.lookmedicine.info',           // 206.161.205.22
6176                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6177                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6178                 '.worldsitesearch.info',        // 209.8.40.59
6179         ),
6180         'lee.seery at gmail.com' => array(
6181                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6182                 '.lingvol.com',         // 64.21.34.55
6183                 '.micevol.com',         // 64.21.34.55
6184                 '.heyhey.info',         // 64.21.34.55  by anonymous
6185         ),
6186         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6187                 // 69-64-64-71.dedicated.abac.net
6188                 '.520-ard.info',
6189                 '.550bcards.info',
6190                 '.559-cads.info',
6191                 '.559caard.info',
6192                 '.565-caaard.info',
6193                 '.575cadr.info',
6194                 '.577cadrs.info',
6195                 '.590-acrds.info',
6196                 '.596-cadrs.info',
6197                 '.596caards.info',
6198                 '.596caaard.info',
6199                 '.asstablishingcads.info',
6200                 '.astablish-ard.info',
6201                 '.astablishcacrds.info',
6202                 '.begginers-acards.info',
6203                 '.begginersacrds.info',
6204                 '.beggingcaaard.info',
6205                 '.beginercacrds.info',
6206                 '.cacrdscreating.info',
6207                 '.caditbegging.info',
6208                 '.cadr-buildup.info',
6209                 '.cadr-establilsh.info',
6210                 '.cadrs-buildercredit.info',
6211                 '.cadrs570.info',
6212                 '.cads-565.info',
6213
6214                 // 69-64-64-113.dedicated.abac.net
6215                 '.interistacards.info',
6216                 '.intrust-ards.info',
6217                 '.intrustacrds.info',
6218                 '.lfixed-ard.info',
6219                 '.lowerate-ard.info',
6220                 '.lowpercentage-ard.info',
6221                 '.lowpercentageacrd.info',
6222         ),
6223         'acua at mail.ru' => array(
6224
6225                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6226
6227                         // by adventurer at allmyns.info
6228                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6229
6230                         // by webmaster at allmyns.info
6231                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6232                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6233                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6234                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6235                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6236                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6237                         '.riumh.cn',    // 84.16.226.28(*snip*)
6238                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6239                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6240                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6241
6242                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6243                 '.dns4babka.info',      // by acua at mail.ru
6244
6245                         // by golubcov at dns4babka.info
6246                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6247
6248                         // by webmaster at dns4babka.info
6249                         '.credh.cn',
6250                         '.fucfv.cn',
6251                         '.gdxnk.cn',
6252                         '.sqrrt.cn',
6253                         '.ywtmd.cn',
6254                         '.kncqy.cn',    // by webmaster at allmyns.info
6255
6256                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6257                 '.dedka2ns.info',       // by acua at mail.ru
6258
6259                         // by chasik at dedka2ns.info
6260                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6261
6262                         // by rochel at dedka2ns.info
6263                         '.fudhxjjqh.cn',
6264
6265                         // by webmaster at dedka2ns.info
6266                         '.ascpo.cn',
6267                         '.jgycr.cn',
6268                         '.nqdtt.cn',
6269                         '.oswde.cn',
6270                         '.qeyig.cn',
6271                         '.soqsx.cn',
6272                         '.ukncd.cn',
6273                         '.zijgb.cn',
6274
6275                 // 84.16.255.253(*snip*), / says 'noy found'
6276                 '.dns4dedka.info',      // by acua at mail.ru
6277
6278                         // by aleon at dns4dedka.info
6279                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6280
6281                         // by dig at dns4dedka.info
6282                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6283                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6284                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6285                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6286                         '.heulw.cn',    // 84.16.226.217(*snip*)
6287                         '.hissw.cn',    // 84.16.249.240(*snip*)
6288                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6289                         '.obwew.cn',    // 84.16.251.218(*snip*)
6290                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6291                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6292                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6293                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6294                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6295                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6296                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6297                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6298                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6299                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6300                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6301                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6302
6303                         // by la at dns4dedka.info
6304                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6305                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6306                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6307                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6308                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6309                         '.eothy.cn',    // 84.16.249.241(*snip*)
6310                         '.epocy.cn',    // 84.16.251.220(*snip*)
6311                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6312                         '.faacz.cn',    // 84.16.251.222(*snip*)
6313                         '.filun.cn',    // 89.149.196.72(*snip*)
6314                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6315                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6316                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6317                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6318                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6319                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6320                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6321                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6322                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6323                         '.krumo.cn',    // 84.16.226.217(*snip*)
6324                         '.lbava.cn',    // 217.20.112.102(*snip*)
6325                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6326                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6327                         '.npovm.cn',    // 84.16.226.28(*snip*)
6328                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6329                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6330                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6331                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6332                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6333                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6334                         '.qydph.cn',    // 89.149.228.163(*snip*)
6335                         '.rxens.cn',    // 89.149.196.72(*snip*)
6336                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6337                         '.srths.cn',    // 84.16.251.222(*snip*)
6338                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6339                         '.unquz.cn',    // 84.16.251.223(*snip*)
6340                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6341                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6342                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6343                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6344                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6345                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6346
6347                         // by le at dns4dedka.info
6348                         '.goslw.cn',    // 84.16.251.220(*snip*)
6349                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6350                         '.iewik.cn',    // 84.16.255.254(*snip*)
6351                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6352                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6353                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6354                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6355                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6356                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6357                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6358                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6359                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6360                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6361                         '.qniww.cn',    // 84.16.251.218(*snip*)
6362                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6363                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6364
6365                         // by skspb at dns4dedka.info
6366                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6367
6368                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6369                         '.bcpnb.cn',
6370                         '.cfbpr.cn',
6371                         '.dnndb.cn',
6372                         '.ekwme.cn',
6373                         '.iutps.cn',
6374                         '.ryftj.cn',
6375                         '.vxqcb.cn',
6376
6377                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6378                         // by apple at ns2best.info
6379                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6380                         // by paulwolf at ns2best.info
6381                         '.ifytzq.cn',
6382
6383                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6384                         // by pigato at sedns.info
6385                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6386                         // by roschem at sedns.info
6387                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6388                         // by op at sedns.info
6389                         '.bumfn.cn',
6390                         '.csmlu.cn',
6391                         '.epcwi.cn',
6392                         '.krwzn.cn',
6393                         '.lkvcp.cn',
6394                         '.mvmkh.cn',
6395                         '.nwpeg.cn',
6396                         '.rnqol.cn',
6397                         '.tyuaf.cn',
6398                         '.ucysa.cn',
6399                         '.vhyom.cn',
6400                         '.wtstu.cn',
6401                         '.zslxr.cn',
6402         ),
6403         'gilvcta sy jilbertsbram.com' => array(
6404                 // 206.53.51.126
6405                 '.dsfljkeilm1.cn',
6406                 '.dsfljkeilm2.cn',
6407                 '.dsfljkeilm3.cn',
6408                 '.dsfljkeilm4.cn',
6409                 '.dsfljkeilm5.cn',
6410                 '.dsfljkeilm6.cn',
6411                 '.dsfljkeilm7.cn',
6412                 '.dsfljkeilm8.cn',
6413                 '.dsfljkeilm9.cn',
6414                 '.dsfljkeilm10.cn',
6415         ),
6416         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6417
6418                 // 69.64.82.76(*.dedicated.abac.net)
6419                 '.bruised-criedit.info',
6420                 '.bruised-crtedit.info',
6421                 '.bruised-czrd.info',
6422                 '.bruisedcreditcars.info',
6423                 '.bruisedcreitcard.info',
6424                 '.bruisedcreitd.info',
6425                 '.buliderscreadet.info',
6426                 '.cleaningup-cdit.info',
6427                 '.cleaningup-cedict.info',
6428                 '.cleaningup-cerdic.info',
6429                 '.cleanup-crrd.info',
6430
6431                 // 69.64.82.77(*.dedicated.abac.net)
6432                 '.bruised-crediot.info',
6433                 '.bruised-credtid.info',
6434                 '.bruisedcriet.info',
6435                 '.bruisedredit.info',
6436                 '.buliders-crdt.info',
6437                 '.buliders-cre4dit.info',
6438                 '.buliders-creadt.info',
6439                 '.buliders-credcards.info',
6440                 '.buliders-credictcard.info',
6441                 '.cleaningupccreditcards.info',
6442                 '.cleaningupcdedit.info',
6443                 '.cleaningupcedirt.info',
6444                 '.cleaningupceidt.info',
6445                 '.cleaningupcrasd.info',
6446                 '.cleaningupcreait.info',
6447
6448                 // 69.64.82.78(*.dedicated.abac.net)
6449                 '.bruised-cridet.info',
6450                 '.bruised-drecit.info',
6451                 '.bruised-reditcards.info',
6452                 '.bruisedcredikt.info',
6453                 '.bruisedcredith.info',
6454                 '.bruisedcredtid.info',
6455                 '.cleanup-criet.info',
6456                 '.cleanup-csrds.info',
6457                 '.cleanup-dards.info',
6458
6459                 // 69.64.82.79(*.dedicated.abac.net)
6460                 '.bruised-crediotcards.info',
6461                 '.bruised-creditcar.info',
6462                 '.bruised-creid.info',
6463                 '.bruised-creidtcard.info',
6464                 '.buliders-crdit.info',
6465                 '.buliders-creadet.info',
6466                 '.cleaningup-ceridt.info',
6467                 '.cleaningupcrecit.info',
6468                 '.cleaningupccritcard.info',
6469                 '.cleanupdredit.info',
6470                 '.cleanupredit.info',
6471         ),
6472         '.malwarealarm.com',
6473                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6474                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6475                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6476         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6477         'Inet-Traffic.com' => array(
6478                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6479                 //'.dcomm.com',         // by D Communications Inc. S.A.
6480
6481                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6482                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6483                 // ...
6484                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6485                 // ...
6486                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6487                 // ...
6488                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6489                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6490                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6491                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6492                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6493                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6494                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6495                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6496                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6497                 // ...
6498                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6499                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6500                 // ...
6501                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6502                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6503                 // ...
6504                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6505                 // ...
6506                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6507                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6508                 // ...
6509                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6510         ),
6511         'andreyletov at yahoo.com related' => array(
6512                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6513                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6514                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6515
6516                 // 89.248.99.118 by anonymous
6517                 '.lpgpharmacy.com',
6518                 '.onlybestgalleries.com',
6519                 '.viagrabest.info',
6520                 '.viagrabestprice.info',
6521                 '.viagratop.info',
6522
6523                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6524                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6525                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6526         ),
6527         'alrusnac at hotmail.com' => array(
6528                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6529                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6530         ),
6531         '203.116.63.123' => array(
6532                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6533                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6534         ),
6535         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6536                 '.autotowncar.cn',              // 69.73.146.184
6537                 '.badgirlhome.cn',              // 69.73.146.186
6538         ),
6539         'Wmp.co.jp' => array(
6540                 // 219.94.134.208, ns *.dns.ne.jp, adult
6541                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6542                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6543                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6544         ),
6545         'Macherie.tv' => array(
6546                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6547                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6548                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6549         ),
6550         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6551                 '.yemine.info',
6552                 '.fr4f3ds.info',
6553         ),
6554         '75.126.129.222' => array(
6555                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6556                 '.viagrabuycheap.info', // ns *.advernsserver.com
6557                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6558         ),
6559         'sqr at bk.ru' => array(
6560                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6561                 '.masserch.info',               // "Free Web Hosting", spam
6562                 '.miserch.info',
6563         ),
6564         'gangstadra at hotmail.com' => array(
6565                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6566                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6567                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6568                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6569         ),
6570         'hosan by front.ru' => array(
6571                 '.salihome.info',                               // 206.53.51.155(non-existent)
6572                 '.online-freesearch.com',               // 206.53.51.155
6573                 '.choosefinest.com',                    // 206.53.51.157
6574                 '.carsprojects.com',                    // 206.53.51.159
6575                 '.sport-brands.com',                    // 206.53.51.167
6576                 '.online-pharmaceutics.com',    // 206.53.51.168
6577         ),
6578         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6579                 '.canadians-health.com',        // by andreyletov at yahoo.com
6580                 '.cialischeap.info',
6581                 '.superrv.info',
6582         ),
6583         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6584                 '.hatbi.com',
6585                 '.justrty.com',
6586                 '.kol2you.com',
6587                 '.kolplanet.com',
6588                 '.myrty.com',
6589                 '.officialrty.com',
6590                 '.pbaol.com',
6591                 '.planetkol.com',
6592         ),
6593         'Abra1.com' => array(
6594                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6595                 '.abra1.com',           // by info at maisontropicale.com
6596                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6597
6598                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6599                 '.abra2.com',           // by domain at anondns.org
6600                 '.abra3.com',           // by domain at anondns.org
6601         ),
6602         'topdomainz at gmail.com' => array(
6603                 // 217.73.201.237 , ns *.parked.ru
6604                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6605                 '.aboutgooglegroup.info',
6606                 '.aboutgoogleimage.info',
6607                 '.aboutgooglemail.info',
6608                 '.aboutgooglemap.info',
6609                 '.aboutgooglenews.info',
6610                 '.aboutgooglevideo.info',
6611                 '.bestgoogleearth.info',
6612                 '.magicgoogleearth.info',
6613                 '.magicgooglemap.info',
6614                 '.magicgooglevideo.info',
6615
6616                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6617                 '.slajzer.info',
6618                 '.tonoscelular.info',
6619                 '.tonosmotorola.info',
6620         ),
6621         'Anderson at extra.by' => array(
6622                 // Encoded JavaScript
6623
6624                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6625                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6626                 '.6dir.info',
6627                 '.8dir.info',
6628                 '.9dir.info',
6629                 '.2pro.info',
6630                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6631                 '.6pro.info',
6632                 '.7pro.info',
6633                 '.8pro.info',
6634                 '.9pro.info',
6635                 '.5sms.info',
6636                 '.6sms.info',
6637                 '.8sms.info',
6638                 '.9sms.info',
6639                 '.1upp.info',
6640                 '.2upp.info',
6641                 '.3upp.info',
6642                 '.4upp.info',
6643                 '.5upp.info',
6644                 '.6upp.info',
6645                 '.7upp.info',
6646                 '.8upp.info',
6647                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6648                 '.2vip.info',   // by Anderson at extra.by
6649                 '.4vip.info',
6650                 '.5vip.info',
6651                 '.6vip.info',
6652                 '.7vip.info',
6653                 '.8vip.info',   // ns *.9upp.info
6654                 '.9vip.info',
6655
6656                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6657                 '.w3rar.info',
6658                 '.w3sex.info',
6659                 '.w3zip.info',
6660                 '.w3in.info',
6661                 '.w3out.info',
6662         ),
6663         'zorkin87 at mail.ru' => array(
6664                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6665                 '.ruqore.com',
6666                 '.goxama.com',
6667                 '.cazebi.com',
6668                 '.fukeqa.com',
6669                 '.fydoge.com',
6670                 '.jukaly.com',
6671                 '.jumoga.com',
6672                 '.jumuxo.com',
6673                 '.tyriva.com',
6674                 '.vudyho.com'
6675         ),
6676         'jessicaeagloff at yahoo.co.uk' => array(
6677                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6678                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6679                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6680                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6681         ),
6682         'qbbs at xinoffice.com' => array(
6683                 // ns *.name-services.com
6684                 '.lingage.com',         // 8.15.231.118
6685                 '.puksins.com',         // IP not allocated now
6686         ),
6687         'advertolog at gmail.com' =>
6688                 // 81.0.250.86(network.upl.cz => non-existent) or
6689                 // 217.11.233.27
6690                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6691         'contact at aboutdomain.com' => array(
6692                 '.lopieur0.com',        // Not match but used
6693                 '.lopieur1.com',        // Not match but used
6694                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6695         ),
6696         'info at cash4wm.biz related' => array(
6697                 // 84.16.233.12(*.internetserviceteam.com)
6698                 '.newsblogforu.com',
6699
6700                 // 84.16.235.141()
6701                 '.informator4you.com',
6702
6703                 // 84.16.240.68(*.internetserviceteam.com)
6704                 '.absolute-best-site.com',
6705                 '.new-blog-for-you.com',
6706
6707                 // 84.16.240.69(*.internetserviceteam.com)
6708                 '.best-sport-blog.com',
6709                 '.big-internet-site.com',
6710                 '.brendsite.com',
6711                 '.my-news-blog.com',
6712
6713                 // 84.16.242.123(*.internetserviceteam.com)
6714                 '.best-news-blog.com',
6715                 '.site-with-content.com',
6716
6717                 // The same method with info at cash4wm.biz
6718                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6719                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6720                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6721                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6722                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6723                 '.bloginfo4u.info',             // 89.149.247.25
6724         ),
6725         'kerjy at yahoo.com' => array(
6726                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6727                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6728                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6729                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6730                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6731         ),
6732         'vme at hotmail.ru' => array(
6733                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6734                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6735         ),
6736         'john at hellomyns.info' => array(
6737                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6738                 '.byouz.cn',            // 89.149.247.24, / nothing
6739                 '.idghc.cn',
6740                 '.inxrj.cn',
6741                 '.jqzdf.cn',
6742                 '.vsxej.cn',
6743                 '.wkgnr.cn',
6744         ),
6745         '.CN spam payload' => array(
6746                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6747                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6748                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6749                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6750                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6751                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6752                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6753                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6754                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6755                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6756         ),
6757         'Time2ns.info' => array(
6758                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6759                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6760                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6761                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6762                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6763         ),
6764         'Ilovemyns.info' => array(
6765                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6766                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6767         ),
6768         'Freehostdns.info' => array(
6769                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6770                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6771                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6772         ),
6773         'Newns4me.info' => array(
6774                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6775                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6776         ),
6777
6778         // C-2: Lonely domains (buddies not found yet)
6779         '.0721-4404.com',
6780         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6781         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6782         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6783         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6784         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6785         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6786         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6787         '.0annie.info',
6788         '.6i6.de',
6789         '.77toperrwuter1.info', // by Roman
6790         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6791         '.angioco.com',                 // 62.37.112.100, gamble
6792         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6793         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6794         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6795         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6796         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6797         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6798         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6799         '.allworlddirect.info', // Forbidden
6800         '.amoreitsex.com',
6801         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6802         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6803         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6804         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6805         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6806         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6807         '.auto-car-cheap.org',
6808         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6809         '.baurish.info',
6810         '.bernardtomic21.info', // by filboj at hotmail.com
6811         '.bestop.name',
6812         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6813         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6814         '.bestshopfinder.info',
6815         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6816         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6817         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6818         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6819         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6820         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6821         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6822         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6823         '.catkittenmagazines.org',              // 87.118.97.117
6824         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6825         '.chatwalker.com',              // 124.32.230.65
6826         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6827         '.covertarena.co.uk',   // by Wayne Huxtable
6828         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6829         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6830         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6831         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6832         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6833         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6834         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6835         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6836         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6837         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6838         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6839         '.easyshopusa.com',             // by riter (riter at nm.ru)
6840         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6841         '.edu.ph',                              // "philippine network foundation inc"
6842         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6843         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6844         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6845         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6846         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6847         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6848         '.filthserver.com',             // sales at onlinemarketingservices.biz
6849         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6850         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6851         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6852         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6853         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6854         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6855         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6856         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6857         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6858         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6859         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6860         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6861         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6862         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6863         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6864         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6865         '.gm-exchange.jp',              // 210.188.216.49 RMT
6866         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6867         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6868         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6869         '.greatbestwestern.org',// by gao.wungao at gmail.com
6870         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6871         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6872         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6873         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6874         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6875         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6876         '.hostuju.cz',                  // ns banan.cz, banan.it
6877         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6878         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6879         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6880         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6881         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6882         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6883         '.infradoc.com',
6884         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6885         '.ismarket.com',                // Google-hiding. intercage.com related IP
6886         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6887         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6888         '.itsexosit.net',
6889         '.itxxxit.net',
6890         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6891         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6892         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6893         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6894         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6895         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6896         '.kingtools.de',
6897         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6898         '.leucainfo.com',
6899         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6900         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6901         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6902         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6903         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6904         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6905         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6906         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6907         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6908         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6909         '.megvideochatlive.info',       // Bad seo
6910         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6911         '.mncxvsm.info',                // 217.11.233.105, / blank
6912         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6913         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6914         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6915         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6916         '.mxsupportmailer.com',
6917         '.next-moneylife.com',  // RMT
6918         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6919         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6920         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6921         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6922         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6923         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6924         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6925         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6926         '.onlineviagra.de',
6927         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6928         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6929         '.ozomw.info',
6930         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6931         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6932         '.perevozka777.ru',             // by witalik at gmail.com
6933         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6934         '.pills-storage.com',   // by
6935         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6936         '.porkyhost.com',               // 79965 at whois.gkg.net
6937         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6938         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6939         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6940         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6941         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6942         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6943         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6944         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6945         '.quality-teen-porn-photo.com', // by info at densa.info
6946         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6947         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6948         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6949         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6950         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6951         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6952         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6953         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6954         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6955         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6956         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6957         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6958         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6959         '.sexamoreit.com',
6960         '.sexforit.com',
6961         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6962         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6963         '.sirlook.com',
6964         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6965         '.sepcn.info',                  // / not found
6966         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6967         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6968         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6969         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6970         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6971         '.superverizonringtones.com',   // by joshua at list.ru
6972         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6973         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6974         '.thehostcity.com',             // Domains by Proxy
6975         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6976         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6977         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6978         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6979         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6980         '.topmeds10.com',
6981         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6982         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6983         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6984         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6985         '.unctad.net',                  // by gfdogfd at lovespb.com
6986         '.vacant.org.uk',
6987         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6988         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6989         '.virtualsystem.de',
6990         '.vdxhost.com',
6991         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6992         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6993         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6994         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6995         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6996         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6997         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6998         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6999         '.whoop.to',                    // RMT
7000         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
7001         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
7002         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
7003         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
7004         '.wwwna.info',                  // / 404 Not Found
7005         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
7006         '.xamorexxx.net',
7007         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
7008         '.xsessox.com',
7009         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
7010         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
7011         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
7012         '.zyguo.info',                  // ns globoxhost.net
7013         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
7014
7015
7016         // C-3: Not classifiable (information wanted)
7017         //
7018         // Something incoming to pukiwiki related sites
7019         'nana.co.il related' => array(
7020                 '.planetnana.co.il',
7021                 '.nana.co.il',
7022         ),
7023 );
7024
7025 // --------------------------------------------------
7026
7027 $blocklist['D'] = array(
7028         // D: Sample setting of
7029         // "Third party in good faith"s
7030         //
7031         // Hosts shown inside of the implanted contents,
7032         // not used via spam, but maybe useful to detect these contents
7033         //
7034         // 'RESERVED',
7035 );
7036
7037 // --------------------------------------------------
7038
7039 $blocklist['E'] = array(
7040         // E: Sample setting of
7041         // Promoters
7042         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7043         //  Ads, Business promotions, SEO, etc)
7044         //
7045         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7046         // Sometimes they may promote each other
7047
7048         '15-Mail.com related' => array(
7049                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7050                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7051                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7052                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7053                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7054         ),
7055         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7056         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7057         'E-brainers.com related' => array(
7058                 // 202.212.14.101
7059                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7060                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7061                 '.my-tune.jp',                                  // by brainers Inc.
7062                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7063                 '.weekle.jp',                                   // by brainers Inc.
7064
7065                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7066                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7067                 '.3minutes-marketing-club.com', // by Fujio
7068                 '.affiliate-vampire.com',               // by Masatoshi
7069                 '.article-site-power-package.com',      // by Masatoshi
7070                 '.audio-marketing-club.com',    // by Fujio
7071                 '.brainers-task-manager.com',   // by Masatoshi
7072                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7073                 '.brainersbuzz.com',                    // by Masatoshi
7074                 '.den4renz-marketing-club.com', // by Fujio
7075                 '.english-contents-club.com',   // by Masatoshi
7076                 '.fly-in-ads-japan.com',                // by Fujio
7077                 '.free-resalerights-giveaway.com',      // by Fujio
7078                 '.freegiveawaysecret.com',              // by Masatoshi
7079                 '.guaranteedvisitorpro.com',    // by Masatoshi
7080                 '.havads-japan.com',                    // by Masatoshi
7081                 '.info-business123.com',                // by Fujio
7082                 '.instant-marketing-club.com',  // by Fujio
7083                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7084                 '.marketing-force-japan.com',   // by Fujio
7085                 '.masatoshikobayashi.com',              // by Fujio
7086                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7087                 '.replytomatt.com',                             // by Fujio
7088                 '.santa-deal.com',                              // by Fujio
7089                 '.santa-deal-summer.com',               // by Fujio
7090                 '.scratch-card-factory.com',    // by Masatoshi
7091                 '.script4you-japan.com',                // by Fujio
7092                 '.sell1000000dollarinjapan.com',// by Fujio
7093                 '.squeeze-page-secret.com',             // by Masatoshi
7094                 '.viral-blog-square.com',               // by Fujio
7095                 '.viralarticle.com',                    // by Fujio
7096                 '.wowhoken.com',                                // by Fujio
7097
7098                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7099                 '.brainerstelevision.com',
7100                 '.demosite4you.com',
7101                 '.keywordcatcherpro.com',
7102                 '.script-marketing-club.com',
7103
7104                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7105                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7106                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7107                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7108                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7109                 '.brainerscode.com',    // by akada
7110                 '.brainerslive.com',    // by domain
7111                 '.brainersreview.com',  // by domain
7112                 '.brainerstest.com',    // by akada
7113                 '.otosecret.com',               // by domain
7114                 '.ultimate-marketing-weapon.com',       // by akada
7115                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7116                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7117
7118                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7119                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7120         ),
7121         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7122         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7123         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7124         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7125         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7126                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7127                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7128                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7129
7130                 // Redirects and affiliates:
7131                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7132                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7133                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7134                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7135                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7136                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7137                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7138                 //   ...
7139
7140                 // Other suggestions:
7141                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7142
7143                 // Blog posting at the same time
7144                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7145                 //   2007/06/13 e123.info/archives/76
7146                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7147                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7148                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7149         ),
7150         'info at kobeweb.jp' => array(
7151                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7152                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7153                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7154         ),
7155         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7156         'Infocart.jp' => array(         // by wai at infocart.jp
7157                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7158                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7159                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7160
7161                 //inetnum:      60.32.154.176 - 60.32.154.183
7162                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7163                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7164         ),
7165         'Info-sniper.com' => array(
7166                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7167                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7168                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7169         ),
7170         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7171         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7172         'JunSuzuki.com' => array(       // e-brainers.com related
7173                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7174                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7175         ),
7176         'Natsukih.net' => array(
7177                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7178                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7179                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7180                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7181
7182                 // by info at natsukih.net
7183                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7184                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7185                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7186                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7187                 '.5muryoureport.com',   // 210.251.253.230
7188                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7189                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7190                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7191         ),
7192         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7193                 '.11kanji.com',         // 211.10.131.88
7194                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7195                 '.point-park.com',      // 211.10.131.88
7196                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7197         ),
7198         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7199         'PRJAPAN.co.jp' => array(
7200                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7201                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7202                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7203                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7204                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7205                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7206         ),
7207         'Rakuten.co.jp' => array(
7208                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7209                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7210         ),
7211         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7212         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7213         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7214         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7215                 '.e123.info',
7216                 '.ialchemist.net',
7217                 '.j012.net',
7218                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7219         ),
7220         'Viscose.jp' => array(
7221                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7222                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7223         ),
7224         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7225 );
7226
7227 // --------------------------------------------------
7228
7229 $blocklist['Z'] = array(
7230         // Z: Yours
7231         //
7232         //'',
7233         //'',
7234         //'',
7235 );
7236
7237 ?>