spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.192 2008/07/19 01:04:26 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //'desperadoes.biz',                    // YEAR OF THE CAT, PukiWiki skin designer
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     symy.jp
 104         //       "One or more users are using our URL redirect
 105         //        service for spam/botnet.
 106         //        So we closed this service."
 107         //     tinyclick.com
 108         //       "...stop offering it's free services because
 109         //        too many people were taking advantage of it"
 110         //     xjs.org
 111         //       "We have been forced to close this facility
 112         //        due to a minority of knuckle draggers who
 113         //        abused this web site."
 114         //
 115         // Please notify us about this list with reason:
 116         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 117         //
 118         '0nz.org',
 119         '0rz.tw',
 120         '0url.com',
 121         '0zed.info',
 122         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 123         '123.que.jp',
 124         '12url.org',
 125         '*.15h.com',
 126         '*.1dr.biz',
 127         '1K.pl' => array(
 128                 '*.1k.pl',
 129                 '*.5g.pl',
 130                 '*.orq.pl',
 131         ),
 132         '1nk.us',
 133         '1url.org',
 134         '1url.in',
 135         '1webspace.org',
 136         '2Ch.net' => array(
 137                 'ime.nu',
 138                 'ime.st',
 139         ),
 140         '2ch2.net',
 141         '2hop4.com',
 142         '2s.ca',
 143         '2site.com',
 144         '2url.org',
 145         '301url.com',
 146         '32url.com',
 147         '.3dg.de',
 148         '*.4bb.ru',
 149         'big5.51job.com',       ///gate/big5/
 150         '5jp.net',
 151         '.6url.com',
 152         '*.6x.to',
 153         '7ref.com',
 154         '82m.org',
 155         '*.8rf.com',
 156         '98.to',
 157         'abbrv.co.uk',
 158         '*.abwb.org',
 159         'acnw.de',
 160         'Active.ws' => array(
 161                 '*.321.cn',
 162                 '*.4x2.net',
 163                 'active.ws',
 164                 '*.better.ws',
 165                 '*.here.ws',
 166                 '*.mypiece.com',
 167                 '*.official.ws',
 168                 '*.ouch.ws',
 169                 '*.premium.ws',
 170                 '*.such.info',
 171                 '*.true.ws',
 172                 '*.visit.ws',
 173         ),
 174         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 175         'aifam.com',
 176         'All4WebMasters.pl' => array(
 177                 '*.ovp.pl',
 178                 '*.6-6-6.pl',
 179         ),
 180         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 181         'amoo.org',
 182         'web.archive.org',              ///web/2
 183         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 184                 'jmp2.net',
 185                 '2me.tw',
 186         ),
 187         'ataja.es',
 188         'ATBHost.com' => array(
 189                 '*.atbhost.com',
 190                 '*.bzhost.net',
 191         ),
 192         'atk.jp',
 193         'clearp.ath.cx',
 194         'athomebiz.com',
 195         'aukcje1.pl',
 196         'beam.to',
 197         '*.bebo.com',
 198         'beermapping.com',
 199         'besturl.in',
 200         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 201         'biglnk.com',
 202         'bingr.com',
 203         'bit.ly',
 204         'bittyurl.com',
 205         '*.bizz.cc',
 206         '*.blo.pl',
 207         '*.bo.pl',
 208         'briefurl.com',
 209         'brokenscript.com',
 210         'BucksoGen.com' => array(
 211                 '*.bucksogen.com',
 212                 '*.bulochka.org',
 213                 '*.korzhik.org',
 214                 '*.kovrizhka.org',
 215                 '*.pirozhok.org',
 216                 '*.plushka.org',
 217                 '*.pryanik.org',
 218                 '*.sushka.org',
 219         ),
 220         'budgethosts.org',
 221         'budu.com',                             // by peter.eder at imcworld.com
 222         '*.buzznet.com',
 223         '*.bydl.com',
 224         'C-O.IN' => array(
 225                 '*.c-o.cc',
 226                 '*.c-o.in',
 227                 '*.coz.in',
 228                 '*.cq.bz',
 229         ),
 230         'c64.ch',
 231         'c711.com',
 232         '*.cej.pl',
 233         'checkasite.net',
 234         'url.chefhost.com',
 235         '*.chicappa.jp',
 236         'chilicity.com',
 237         'big5.china.com',               ///gate/big5/
 238         'chopurl.com',
 239         'christopherleestreet.com',
 240         'cintcm.com',
 241         '*.cjb.net',
 242         'clipurl.com',
 243         '*.co.nr',
 244         'Comtech Enterprises ' => array(        // comteche.com
 245                 'tinyurl.name',
 246                 'tinyurl.us',
 247         ),
 248         'Cool168.com' => array(
 249                 '*.cool158.com',
 250                 '*.cool168.com',
 251                 '*.ko168.com',
 252                 '*.ko188.com',
 253         ),
 254         'Coolurl.de' => array(
 255                 'coolurl.de',
 256                 'dornenboy.de',
 257                 'eyeqweb.com',
 258                 'hardcore-porn.de',
 259                 'maschinen-bluten-nicht.de',
 260         ),
 261         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 262         'cutalink.com',
 263         '*.da.cx',
 264         '*.da.ru',
 265         'dae2.com',
 266         'dephine.org',
 267         'desiurl.com',
 268         'dhurl.com',
 269         'digbig.com',
 270         'Digipills.com' => array(
 271                 '*.digipills.com',
 272                 'minilien.com',
 273                 'tinylink.com',
 274         ),
 275         '*.discutbb.com',
 276         'DL.AM' => array(
 277                 '*.cx.la',
 278                 '*.dl.am',
 279         ),
 280         '*.dl.pl',
 281         '*.dmdns.com',
 282         'doiop.com',
 283         'drlinky.com',
 284         'durl.us',
 285         '*.dvdonly.ru',
 286         '*.dynu.ca',
 287         'dwarf.name',
 288         '*.eadf.com',
 289         'easyURL.net' => array(
 290                 '*.easyurl.net',
 291                 '.goshrink.com',
 292                 'ushrink.com',
 293         ),
 294         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 295                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 296                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 297                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 298                 //   "Keep continuing to seek originality and contribute it to local,
 299                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 300                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 301                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 302                 // I'm so much impressed of the situation around this imported one today.
 303         'elfurl.com',
 304         'eny.pl',
 305         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 306                 '.mywiitime.com',
 307                 '.surfindark.com',              // webmaster at etechfocus.com
 308                 '.surfinshade.com',
 309                 '.surfinshadow.com',
 310                 '.surfinwind.com',
 311                 '.topsecretlive.com',
 312         ),
 313         '*.eu.org',
 314         'F2B.be' => array(
 315                 '*.f2b.be',
 316                 '*.freakz.eu',
 317                 '*.n0.be',
 318                 '*.n3t.nl',
 319                 '*.short.be',
 320                 '*.ssr.be',
 321                 '*.tweaker.eu',
 322         ),
 323         '*.fancyurl.com',
 324         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 325                 'blue11.jp',
 326                 'fanznet.com',
 327                 'katou.in',
 328                 'mymap.in',
 329                 'saitou.in',
 330                 'satou.in',
 331                 'susan.in',
 332         ),
 333         '.fe.pl',                       // Redirection and subdomain
 334         'ffwd.to',
 335         'url.fibiger.org',
 336         'FireMe.to' => array(
 337                 'fireme.to',
 338                 'nextdoor.to',
 339                 'ontheway.to',
 340         ),
 341         'flingk.com',
 342         'flog.jp',                      // careless redirector and bbs
 343         'fm7.biz',
 344         'fnbi.jp',
 345         '*.fnbi.jp',
 346         'forgeturl.com',
 347         '*.free.bg',
 348         'Freeservers.com' => array(     // United Online Web Services, Inc.
 349                 '*.4mg.com',
 350                 '*.4t.com',
 351                 '*.8m.com',
 352                 '*.8m.net',
 353                 '*.8k.com',
 354                 '*.faithweb.com',
 355                 '*.freehosting.net',
 356                 '*.freeservers.com',
 357                 '*.gq.nu',
 358                 '*.htmlplanet.com',
 359                 '*.itgo.com',
 360                 '*.iwarp.com',
 361                 '*.s5.com',
 362                 '*.scriptmania.com',
 363                 '*.tvheaven.com',
 364         ),
 365         '*.freewebpages.com',
 366         'FreeWebServices.net' => array( // Host Department LLC
 367                 '*.about.gs',   // Dead?
 368                 '*.about.tc',
 369                 '*.about.vg',
 370                 '*.aboutus.gs',
 371                 '*.aboutus.ms',
 372                 '*.aboutus.tc',
 373                 '*.aboutus.vg',
 374                 '*.biografi.biz',
 375                 '*.biografi.info',
 376                 '*.biografi.org',
 377                 '*.biografi.us',
 378                 '*.datadiri.biz',
 379                 '*.datadiri.cc',
 380                 '*.datadiri.com',
 381                 '*.datadiri.info',
 382                 '*.datadiri.net',
 383                 '*.datadiri.org',
 384                 '*.datadiri.tv',
 385                 '*.datadiri.us',
 386                 '*.ecv.gs',
 387                 '*.ecv.ms',
 388                 '*.ecv.tc',
 389                 '*.ecv.vg',
 390                 '*.eprofile.us',
 391                 '*.go2net.ws',
 392                 '*.hits.io',
 393                 '*.hostingweb.us',
 394                 '*.hub.io',
 395                 '*.indo.bz',
 396                 '*.indo.cc',
 397                 '*.indo.gs',
 398                 '*.indo.ms',
 399                 '*.indo.tc',
 400                 '*.indo.vg',
 401                 '*.infinitehosting.net',
 402                 '*.infinites.net',
 403                 '*.lan.io',
 404                 '*.max.io',
 405                 '*.mycv.bz',
 406                 '*.mycv.nu',
 407                 '*.mycv.tv',
 408                 '*.myweb.io',
 409                 '*.ourprofile.biz',
 410                 '*.ourprofile.info',
 411                 '*.ourprofile.net',     // Dead?
 412                 '*.ourprofile.org',
 413                 '*.ourprofile.us',
 414                 '*.profil.bz',
 415                 '*.profil.cc',
 416                 '*.profil.cn',
 417                 '*.profil.gs',
 418                 '*.profil.in',
 419                 '*.profil.ms',
 420                 '*.profil.tc',
 421                 '*.profil.tv',
 422                 '*.profil.vg',  // ?
 423                 '*.site.io',
 424                 '*.wan.io',
 425                 '*.web-cam.ws',
 426                 '*.webs.io',
 427                 '*.zip.io',
 428         ),
 429         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 430         '*.fx.to',
 431         'fyad.org',
 432         'fype.com',
 433         'gentleurl.net',
 434         'Get2.us' => array(
 435                 '*.get2.us',
 436                 '*.hasballs.com',
 437                 '*.ismyidol.com',
 438                 '*.spotted.us',
 439                 '*.went2.us',
 440                 '*.wentto.us',
 441         ),
 442         'glinki.com',
 443         '*.globalredirect.com',
 444         'gnu.vu',
 445         '*.go.cc',
 446         //'Google.com' => array(
 447         //              google.com/translate_c\?u=(?:http://)?
 448         //),
 449         'goonlink.com',
 450         '.gourl.org',
 451         '.greatitem.com',
 452         'gzurl.com',
 453         'url.grillsportverein.de',
 454         'Harudake.net' => array('*.hyu.jp'),
 455         'Hattinger Linux User Group' => array('short.hatlug.de'),
 456         'Hexten.net' => array('lyxus.net'),
 457         'here.is',
 458         'HispaVista.com' => array(
 459                 '*.blogdiario.com',
 460                 '*.hispavista.com',
 461                 '.galeon.com',
 462         ),
 463         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 464                 '*.8l.pl',
 465                 '*.blg.pl',
 466                 '*.czytajto.pl',
 467                 '*.ryj.pl',
 468                 '*.xit.pl',
 469                 '*.xlc.pl',
 470                 '*.hk.pl',
 471                 '*.home.pl',
 472                 '*.of.pl',
 473         ),
 474         'hort.net',
 475         'free4.hostrocket.com',
 476         '*.hotindex.ru',
 477         'HotRedirect.com' => array(
 478                 '*.coolhere.com',
 479                 '*.homepagehere.com',
 480                 '*.hothere.com',
 481                 '*.mustbehere.com',
 482                 '*.onlyhere.net',
 483                 '*.pagehere.com',
 484                 '*.surfhere.net',
 485                 '*.zonehere.com',
 486         ),
 487         'hotshorturl.com',
 488         'hotwebcomics.com',     ///search_redirect.php
 489         'hurl.to',
 490         '*.hux.de',
 491         '*.i89.us',
 492         'iat.net',                      // 74.208.58.130 by Tony Carter
 493         'ibm.com',                      ///links (Correct it)
 494         '*.iceglow.com',
 495         'internetadresi.com' => array (
 496                 'rxbuycheap.com',
 497                 'rxcheapwestern.com',
 498         ),
 499         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 500         'Ideas para Nuevos Mercados SL' => array(
 501                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 502                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 503                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 504                 // by edgar bortolin (oscar at i4nm.com)
 505                 // by Edgar Bortolin  (oscar at i4nm.com)
 506                 // by oscar florez (oscar at i4nm.com)
 507                 // by Oscar Florez (oscar at red-es.com)
 508                 // by covadonga del valle (oscar at i4nm.com)
 509                 '*.ar.gd',
 510                 '*.ar.gs',      // ns *.nora.net
 511                 '*.ar.kz',      // by oscar
 512                 '*.ar.nu',      // by Edgar
 513                 '*.ar.tc',      // by oscar
 514                 '*.ar.vg',      // by oscar
 515                 '*.bo.kz',      // by oscar
 516                 '*.bo.nu',      // by covadonga
 517                 '*.bo.tc',      // by oscar
 518                 '*.bo.tf',      // by Oscar
 519                 '*.bo.vg',      // by oscar
 520                 '*.br.gd',
 521                 '*.br.gs',      // ns *.nora.net
 522                 '*.br.nu',      // by edgar
 523                 '*.br.vg',      // by oscar
 524                 '*.ca.gs',      // by oscar
 525                 '*.ca.kz',      // by oscar
 526                 '*.cl.gd',      // by oscar
 527                 '*.cl.kz',      // by oscar
 528                 '*.cl.nu',      // by edgar
 529                 '*.cl.tc',      // by oscar
 530                 '*.cl.tf',      // by Oscar
 531                 '*.cl.vg',      // by oscar
 532                 '*.col.nu',     // by Edgar
 533                 '*.cr.gs',      // ns *.nora.net
 534                 '*.cr.kz',      // by oscar
 535                 '*.cr.nu',      // by edgar
 536                 '*.cr.tc',      // by oscar
 537                 '*.cu.tc',      // by oscar
 538                 '*.do.kz',      // by oscar
 539                 '*.do.nu',      // by edgar
 540                 '*.ec.kz',      // by edgar
 541                 '*.ec.nu',      // by Edgar
 542                 '*.ec.tf',      // by Oscar
 543                 '*.es.kz',      // by oscar
 544                 '*.eu.kz',      // by oscar
 545                 '*.gt.gs',      // ns *.nora.net
 546                 '*.gt.tc',      // by oscar
 547                 '*.gt.tf',      // by Oscar
 548                 '*.gt.vg',      // by Oscar
 549                 '*.hn.gs',      // ns *.nora.net
 550                 '*.hn.tc',      // by oscar
 551                 '*.hn.tf',      // by Oscar
 552                 '*.hn.vg',      // by oscar
 553                 '*.mx.gd',
 554                 '*.mx.gs',      // ns *.nora.net
 555                 '*.mx.kz',      // by oscar
 556                 '*.mx.vg',      // by oscar
 557                 '*.ni.kz',      // by oscar
 558                 '*.pa.kz',      // by oscar
 559                 '*.pe.kz',      // by oscar
 560                 '*.pe.nu',      // by Edgar
 561                 '*.pr.kz',      // by oscar
 562                 '*.pr.nu',      // by edgar
 563                 '*.pt.gs',      // ns *.nora.net
 564                 '*.pt.kz',      // by edgar
 565                 '*.pt.nu',      // by edgar
 566                 '*.pt.tc',      // by oscar
 567                 '*.pt.tf',      // by Oscar
 568                 '*.py.gs',      // ns *.nora.net
 569                 '*.py.nu',      // by edgar
 570                 '*.py.tc',      // by oscar
 571                 '*.py.tf',      // by Oscar
 572                 '*.py.vg',      // by oscar
 573                 '*.sv.tc',      // by oscar
 574                 '*.usa.gs',     // ns *.nora.net
 575                 '*.uy.gs',      // ns *.nora.net
 576                 '*.uy.kz',      // by oscar
 577                 '*.uy.nu',      // by edgar
 578                 '*.uy.tc',      // by oscar
 579                 '*.uy.tf',      // by Oscar
 580                 '*.uy.vg',      // by oscar
 581                 '*.ve.gs',      // by oscar
 582                 '*.ve.tc',      // by oscar
 583                 '*.ve.tf',      // by Oscar
 584                 '*.ve.vg',      // by oscar
 585                 '*.ven.nu',     // by edgar
 586         ),
 587         'ie.to',
 588         'igoto.co.uk',
 589         'ilook.tw',
 590         'indianpad.com',                ///view/
 591         'iNetwork.co.il' => array(
 592                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 593                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 594                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 595         ),
 596         '*.infogami.com',
 597         'infotop.jp',
 598         'ipoo.org',
 599         'IR.pl' => array(
 600                 '*.aj.pl',
 601                 '*.aliasy.org',
 602                 '*.gu.pl',
 603                 '*.hu.pl',
 604                 '*.ir.pl',
 605                 '*.jo.pl',
 606                 '*.su.pl',
 607                 '*.td.pl',
 608                 '*.uk.pl',
 609                 '*.uy.pl',
 610                 '*.xa.pl',
 611                 '*.zj.pl',
 612         ),
 613         'irotator.com',
 614         '.iwebtool.com',
 615         'j6.bz',
 616         'jeeee.net',
 617         'Jaze Redirect Services' => array(
 618                 '*.arecool.net',
 619                 '*.iscool.net',
 620                 '*.isfun.net',
 621                 '*.tux.nu',
 622         ),
 623         '*.jed.pl',
 624         'JeremyJohnstone.com' => array('url.vg'),
 625         'jemurl.com',
 626         'jggj.net',
 627         'jpan.jp',
 628         'josh.nu',
 629         'kat.cc',
 630         'Kickme.to' => array(
 631                 '.1024bit.at',
 632                 '.128bit.at',
 633                 '.16bit.at',
 634                 '.256bit.at',
 635                 '.32bit.at',
 636                 '.512bit.at',
 637                 '.64bit.at',
 638                 '.8bit.at',
 639                 '.adores.it',
 640                 '.again.at',
 641                 '.allday.at',
 642                 '.alone.at',
 643                 '.altair.at',
 644                 '.american.at',
 645                 '.amiga500.at',
 646                 '.ammo.at',
 647                 '.amplifier.at',
 648                 '.amstrad.at',
 649                 '.anglican.at',
 650                 '.angry.at',
 651                 '.around.at',
 652                 '.arrange.at',
 653                 '.australian.at',
 654                 '.baptist.at',
 655                 '.basque.at',
 656                 '.battle.at',
 657                 '.bazooka.at',
 658                 '.berber.at',
 659                 '.blackhole.at',
 660                 '.booze.at',
 661                 '.bosnian.at',
 662                 '.brainiac.at',
 663                 '.brazilian.at',
 664                 '.bummer.at',
 665                 '.burn.at',
 666                 '.c-64.at',
 667                 '.catalonian.at',
 668                 '.catholic.at',
 669                 '.chapel.at',
 670                 '.chills.it',
 671                 '.christiandemocrats.at',
 672                 '.cname.at',
 673                 '.colors.at',
 674                 '.commodore.at',
 675                 '.commodore64.at',
 676                 '.communists.at',
 677                 '.conservatives.at',
 678                 '.conspiracy.at',
 679                 '.cooldude.at',
 680                 '.craves.it',
 681                 '.croatian.at',
 682                 '.cuteboy.at',
 683                 '.dancemix.at',
 684                 '.danceparty.at',
 685                 '.dances.it',
 686                 '.danish.at',
 687                 '.dealing.at',
 688                 '.deep.at',
 689                 '.democrats.at',
 690                 '.digs.it',
 691                 '.divxlinks.at',
 692                 '.divxmovies.at',
 693                 '.divxstuff.at',
 694                 '.dizzy.at',
 695                 '.does.it',
 696                 '.dork.at',
 697                 '.drives.it',
 698                 '.dutch.at',
 699                 '.dvdlinks.at',
 700                 '.dvdmovies.at',
 701                 '.dvdstuff.at',
 702                 '.emulators.at',
 703                 '.end.at',
 704                 '.english.at',
 705                 '.eniac.at',
 706                 '.error403.at',
 707                 '.error404.at',
 708                 '.evangelism.at',
 709                 '.exhibitionist.at',
 710                 '.faith.at',
 711                 '.fight.at',
 712                 '.finish.at',
 713                 '.finnish.at',
 714                 '.forward.at',
 715                 '.freebie.at',
 716                 '.freemp3.at',
 717                 '.french.at',
 718                 '.graduatejobs.at',
 719                 '.greenparty.at',
 720                 '.grunge.at',
 721                 '.hacked.at',
 722                 '.hang.at',
 723                 '.hangup.at',
 724                 '.has.it',
 725                 '.hide.at',
 726                 '.hindu.at',
 727                 '.htmlpage.at',
 728                 '.hungarian.at',
 729                 '.icelandic.at',
 730                 '.independents.at',
 731                 '.invisible.at',
 732                 '.is-chillin.it',
 733                 '.is-groovin.it',
 734                 '.japanese.at',
 735                 '.jive.at',
 736                 '.kickass.at',
 737                 '.kickme.to',
 738                 '.kindergarden.at',
 739                 '.knows.it',
 740                 '.kurd.at',
 741                 '.labour.at',
 742                 '.leech.at',
 743                 '.liberals.at',
 744                 '.linuxserver.at',
 745                 '.liqour.at',
 746                 '.lovez.it',
 747                 '.makes.it',
 748                 '.maxed.at',
 749                 '.means.it',
 750                 '.meltdown.at',
 751                 '.methodist.at',
 752                 '.microcomputers.at',
 753                 '.mingle.at',
 754                 '.mirror.at',
 755                 '.moan.at',
 756                 '.mormons.at',
 757                 '.musicmix.at',
 758                 '.nationalists.at',
 759                 '.needz.it',
 760                 '.nerds.at',
 761                 '.neuromancer.at',
 762                 '.newbie.at',
 763                 '.nicepage.at',
 764                 '.ninja.at',
 765                 '.norwegian.at',
 766                 '.ntserver.at',
 767                 '.owns.it',
 768                 '.paint.at',
 769                 '.palestinian.at',
 770                 '.phoneme.at',
 771                 '.phreaking.at',
 772                 '.playz.it',
 773                 '.polish.at',
 774                 '.popmusic.at',
 775                 '.portuguese.at',
 776                 '.powermac.at',
 777                 '.processor.at',
 778                 '.prospects.at',
 779                 '.protestant.at',
 780                 '.rapmusic.at',
 781                 '.raveparty.at',
 782                 '.reachme.at',
 783                 '.reads.it',
 784                 '.reboot.at',
 785                 '.relaxed.at',
 786                 '.republicans.at',
 787                 '.researcher.at',
 788                 '.reset.at',
 789                 '.resolve.at',
 790                 '.retrocomputers.at',
 791                 '.rockparty.at',
 792                 '.rocks.it',
 793                 '.rollover.at',
 794                 '.rough.at',
 795                 '.rules.it',
 796                 '.rumble.at',
 797                 '.russian.at',
 798                 '.says.it',
 799                 '.scared.at',
 800                 '.seikh.at',
 801                 '.serbian.at',
 802                 '.short.as',
 803                 '.shows.it',
 804                 '.silence.at',
 805                 '.simpler.at',
 806                 '.sinclair.at',
 807                 '.singz.it',
 808                 '.slowdown.at',
 809                 '.socialists.at',
 810                 '.spanish.at',
 811                 '.split.at',
 812                 '.stand.at',
 813                 '.stoned.at',
 814                 '.stumble.at',
 815                 '.supercomputer.at',
 816                 '.surfs.it',
 817                 '.swedish.at',
 818                 '.swims.it',
 819                 '.synagogue.at',
 820                 '.syntax.at',
 821                 '.syntaxerror.at',
 822                 '.techie.at',
 823                 '.temple.at',
 824                 '.thinkbig.at',
 825                 '.thirsty.at',
 826                 '.throw.at',
 827                 '.toplist.at',
 828                 '.trekkie.at',
 829                 '.trouble.at',
 830                 '.turkish.at',
 831                 '.unexplained.at',
 832                 '.unixserver.at',
 833                 '.vegetarian.at',
 834                 '.venture.at',
 835                 '.verycool.at',
 836                 '.vic-20.at',
 837                 '.viewing.at',
 838                 '.vintagecomputers.at',
 839                 '.virii.at',
 840                 '.vodka.at',
 841                 '.wannabe.at',
 842                 '.webpagedesign.at',
 843                 '.wheels.at',
 844                 '.whisper.at',
 845                 '.whiz.at',
 846                 '.wonderful.at',
 847                 '.zor.org',
 848                 '.zx80.at',
 849                 '.zx81.at',
 850                 '.zxspectrum.at',
 851         ),
 852         'kisaweb.com',
 853         'krotki.pl',
 854         'kuerzer.de',
 855         '*.kupisz.pl',
 856         'kuso.cc',
 857         '*.l8t.com',
 858         'lame.name',
 859         'lediga.st',
 860         'liencourt.com',
 861         'liteurl.com',
 862         'linkachi.com',
 863         'linkezy.com',
 864         'linkfrog.net',
 865         'linkook.com',
 866         'linkyme.com',
 867         'linkzip.net',
 868         'lispurl.com',
 869         'lnk.in',
 870         'makeashorterlink.com',
 871         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 872                 '*.3gp.fr',
 873                 '*.gtx.fr',
 874                 '*.ici.st',
 875                 '*.max.st',
 876                 '*.nn.cx',              // ns *.sivit.org
 877                 '*.site.cx',    // ns *.sivit.org
 878                 '*.user.fr',
 879                 '*.zxr.fr',
 880         ),
 881         'mcturl.com',
 882         'memurl.com',
 883         'Metamark.net' => array('xrl.us'),
 884         'midgeturl.com',
 885         'Minilink.org' => array('lnk.nu'),
 886         'miniurl.org',
 887         'miniurl.pl',
 888         'mixi.bz',
 889         'mo-v.jp',
 890         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 891                 '.com.md',
 892                 '.co.md',
 893                 '.org.md',
 894                 '.info.md',
 895                 '.host.md',
 896         ),
 897         'monster-submit.com',
 898         'mooo.jp',
 899         'murl.net',
 900         'myactivesurf.net',
 901         'mytinylink.com',
 902         'myurl.in',
 903         'myurl.com.tw',
 904         'nanoref.com',
 905         'Ne1.net' => array(
 906                 '*.ne1.net',
 907                 '*.r8.org',
 908         ),
 909         'Nashville Linux Users Group' => array('nlug.org'),
 910         'not2long.net',
 911         '*.notlong.com',
 912         '*.nuv.pl',
 913         'ofzo.be',
 914         '*.ontheinter.net',
 915         'ourl.org',
 916         'ov2.net',                              // frame
 917         '*.ozonez.com',
 918         'pagebang.com',
 919         'palurl.com',
 920         '*.paulding.net',
 921         'phpfaber.org',
 922         'pygmyurl.com',
 923         'pnope.com',
 924         'prettylink.com',
 925         'PROXID.net' => array(  // also xRelay.net
 926                 '*.asso.ws',
 927                 '*.corp.st',
 928                 '*.euro.tm',
 929                 '*.perso.tc',
 930                 '*.site.tc',
 931                 '*.societe.st',
 932         ),
 933         'qqa.jp',
 934         'qrl.jp',
 935         'qurl.net',
 936         'qwer.org',
 937         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 938         'radiobase.net',
 939         'Rakuten.co.jp' => array(
 940                 'pt.afl.rakuten.co.jp', ///c/
 941         ),
 942         'RedirectFree.com' => array(
 943                 '*.red.tc',
 944                 '*.redirectfree.com',
 945                 '*.sky.tc',
 946                 '*.the.vg',
 947         ),
 948         'redirme.com',
 949         'redirectme.to',
 950         'relic.net',
 951         'rezma.info',
 952         'rio.st',
 953         'rlink.org',
 954         '*.rmcinfo.fr',
 955         'roo.to',               // Seems closed, says "bye-bye"
 956         'rubyurl.com',
 957         '*.runboard.com',
 958         'runurl.com',
 959         's-url.net',
 960         's1u.net',
 961         'SG5.co.uk' => array(
 962                 '*.sg5.co.uk',
 963                 '*.sg5.info',
 964         ),
 965         'Shim.net' => array(
 966                 '*.0kn.com',
 967                 '*.2cd.net',
 968                 '*.freebiefinders.net',
 969                 '*.freegaming.org',
 970                 '*.op7.net',
 971                 '*.shim.net',
 972                 '*.v9z.com',
 973         ),
 974         'big5.shippingchina.com',
 975         'shorl.com',
 976         'shortenurl.com',
 977         'shorterlink.com',
 978         'shortlinks.co.uk',
 979         'shorttext.com',
 980         'shorturl-accessanalyzer.com',
 981         'Shortify.com' => array(
 982                 '74678439.com',
 983                 'shortify.com',
 984         ),
 985         'shortlink.co.uk',
 986         'ShortURL.com' => array(
 987                 '*.1sta.com',
 988                 '*.24ex.com',
 989                 '*.2fear.com',
 990                 '*.2fortune.com',
 991                 '*.2freedom.com',
 992                 '*.2hell.com',
 993                 '*.2savvy.com',
 994                 '*.2truth.com',
 995                 '*.2tunes.com',
 996                 '*.2ya.com',
 997                 '*.alturl.com',
 998                 '*.antiblog.com',
 999                 '*.bigbig.com',
1000                 '*.dealtap.com',
1001                 '*.ebored.com',
1002                 '*.echoz.com',
1003                 '*.filetap.com',
1004                 '*.funurl.com',
1005                 '*.headplug.com',
1006                 '*.hereweb.com',
1007                 '*.hitart.com',
1008                 '*.mirrorz.com',
1009                 '*.shorturl.com',
1010                 '*.spyw.com',
1011                 '*.vze.com',
1012         ),
1013         'shrinkalink.com',
1014         'shrinkthatlink.com',
1015         'shrinkurl.us',
1016         'shrt.org',
1017         'shrunkurl.com',
1018         'shurl.org',
1019         'shurl.net',
1020         'sid.to',
1021         'simurl.com',
1022         'sitefwd.com',
1023         'Sitelutions.com' => array(
1024                 '*.assexy.as',
1025                 '*.athersite.com',
1026                 '*.athissite.com',
1027                 '*.bestdeals.at',
1028                 '*.byinter.net',
1029                 '*.findhere.org',
1030                 '*.fw.nu',
1031                 '*.isgre.at',
1032                 '*.isthebe.st',
1033                 '*.kwik.to',
1034                 '*.lookin.at',
1035                 '*.lowestprices.at',
1036                 '*.onthenet.as',
1037                 '*.ontheweb.nu',
1038                 '*.pass.as',
1039                 '*.passingg.as',
1040                 '*.redirect.hm',
1041                 '*.rr.nu',
1042                 '*.ugly.as',
1043         ),
1044         '*.skracaj.pl',
1045         'skiltechurl.com',
1046         'skocz.pl',
1047         'slimurl.jp',
1048         'slink.in',
1049         'smallurl.eu',
1050         'smurl.name',
1051         'snipurl.com',
1052         'sp-nov.net',
1053         'splashblog.com',
1054         'spod.cx',
1055         '*.spydar.com',
1056         'Subdomain.gr' => array(
1057                 '*.p2p.gr',
1058                 '*.subdomain.gr',
1059         ),
1060         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1061         'surl.se',
1062         'surl.ws',
1063         'tdurl.com',
1064         'tighturl.com',
1065         'tiniuri.com',
1066         'tiny.cc',
1067         'tiny.pl',
1068         'tiny2go.com',
1069         'tinylink.eu',
1070         'tinylinkworld.com',
1071         'tinypic.com',
1072         'tinyr.us',
1073         'TinyURL.com' => array(
1074                 'tinyurl.com',
1075                 'preview.tinyurl.com',
1076                 'tinyurl.co.uk',
1077         ),
1078         'titlien.com',
1079         '*.tlg.pl',
1080         'tlurl.com',
1081         'link.toolbot.com',
1082         'tnij.org',
1083         'Tokelau ccTLD' => array('.tk'),
1084         'toila.net',
1085         '*.toolbot.com',
1086         '*.torontonian.com',
1087         'trimurl.com',
1088         //'ttu.cc',             // Seems closed
1089         'turl.jp',
1090         '*.tz4.com',
1091         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1092                 '*.1.to',
1093                 '*.4.to',
1094                 '*.5.to',
1095                 '*.82.to',
1096                 '*.s.to',
1097                 '*.u.to',
1098                 '*.ce.to',
1099                 '*.cz.to',
1100                 '*.if.to',
1101                 '*.it.to',
1102                 '*.kp.to',
1103                 '*.ne.to',
1104                 '*.ok.to',
1105                 '*.pc.to',
1106                 '*.tv.to',
1107                 '*.dd.to',
1108                 '*.ee.to',
1109                 '*.hh.to',
1110                 '*.kk.to',
1111                 '*.mm.to',
1112                 '*.qq.to',
1113                 '*.xx.to',
1114                 '*.zz.to',
1115                 '*.ivy.to',
1116                 '*.joa.to',
1117                 '*.ever.to',
1118                 '*.mini.to',
1119         ),
1120         'u-go.to',
1121         'uchinoko.in',
1122         'Ulimit.com' => array(
1123                 '*.be.tf',
1124                 '*.best.cd',
1125                 '*.bsd-fan.com',
1126                 '*.c0m.st',
1127                 '*.ca.tc',
1128                 '*.clan.st',
1129                 '*.com02.com',
1130                 '*.en.st',
1131                 '*.euro.st',
1132                 '*.fr.fm',
1133                 '*.fr.st',
1134                 '*.fr.vu',
1135                 '*.gr.st',
1136                 '*.ht.st',
1137                 '*.int.ms',
1138                 '*.it.st',
1139                 '*.java-fan.com',
1140                 '*.linux-fan.com',
1141                 '*.mac-fan.com',
1142                 '*.mp3.ms',
1143                 '*.qc.tc',
1144                 '*.sp.st',
1145                 '*.suisse.st',
1146                 '*.t2u.com',
1147                 '*.unixlover.com',
1148                 '*.zik.mu',
1149         ),
1150         'urltea.com',
1151         '*.uni.cc',
1152         'UNONIC.com' => array(
1153                 '*.at.tf',      // AlpenNIC
1154                 '*.bg.tf',
1155                 '*.ca.tf',
1156                 '*.ch.tf',      // AlpenNIC
1157                 '*.cz.tf',
1158                 '*.de.tf',      // AlpenNIC
1159                 '*.edu.tf',
1160                 '*.eu.tf',
1161                 '*.int.tf',
1162                 '*.net.tf',
1163                 '*.pl.tf',
1164                 '*.ru.tf',
1165                 '*.sg.tf',
1166                 '*.us.tf',
1167         ),
1168         'Up.pl' => array(
1169                 '.69.pl',                       // by nsk101869
1170                 '.crack.pl',            // by nsk101869
1171                 '.film.pl',                     // by sibr19002
1172                 '.h2o.pl',                      // by nsk101869
1173                 '.hostessy.pl',         // by nsk101869
1174                 '.komis.pl',            // by nsk101869
1175                 '.laski.pl',            // by nsk101869
1176                 '.modelki.pl',          // by nsk101869
1177                 '.muzyka.pl',           // by sibr19002
1178                 '.nastolatki.pl',       // by nsk101869
1179                 '.obuwie.pl',           // by nsk101869
1180                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1181                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1182                 '.sexchat.pl',          // by nsk101869
1183                 '.sexlive.pl',          // by nsk101869
1184                 '.tv.pl',                       // by nsk101869
1185                 '.up.pl',                       // by nsk101869
1186                 '.video.pl',            // by nsk101869
1187                 '.xp.pl',                       // nsk101869
1188         ),
1189         '*.uploadr.com',
1190         'url.ie',
1191         'url4.net',
1192         'url-c.com',
1193         'urlbee.com',
1194         'urlbounce.com',
1195         'urlcut.com',
1196         'urlcutter.com',
1197         'urlic.com',
1198         'urlin.it',
1199         'urlkick.com',
1200         'URLLogs.com' => array(
1201                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1202                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1203         ),
1204         '*.urlproxy.com',
1205         'urlser.com',
1206         'urlsnip.com',
1207         'urlzip.de',
1208         'urlx.org',
1209         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1210         'utun.jp',
1211         'uxxy.com',
1212         '*.v27.net',
1213         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1214                 '*.all.at',
1215                 '*.back.to',
1216                 '*.beam.at',
1217                 '*.been.at',
1218                 '*.bite.to',
1219                 '*.board.to',
1220                 '*.bounce.to',
1221                 '*.bowl.to',
1222                 '*.break.at',
1223                 '*.browse.to',
1224                 '*.change.to',
1225                 '*.chip.ms',
1226                 '*.connect.to',
1227                 '*.crash.to',
1228                 '*.cut.by',
1229                 '*.direct.at',
1230                 '*.dive.to',
1231                 '*.drink.to',
1232                 '*.drive.to',
1233                 '*.drop.to',
1234                 '*.easy.to',
1235                 '*.everything.at',
1236                 '*.fade.to',
1237                 '*.fanclub.ms',
1238                 '*.firstpage.de',
1239                 '*.fly.to',
1240                 '*.flying.to',
1241                 '*.fortunecity.co.uk',
1242                 '*.fortunecity.com',
1243                 '*.forward.to',
1244                 '*.fullspeed.to',
1245                 '*.fun.ms',
1246                 '*.gameday.de',
1247                 '*.germany.ms',
1248                 '*.get.to',
1249                 '*.getit.at',
1250                 '*.hard-ware.de',
1251                 '*.hello.to',
1252                 '*.hey.to',
1253                 '*.hop.to',
1254                 '*.how.to',
1255                 '*.hp.ms',
1256                 '*.jump.to',
1257                 '*.kiss.to',
1258                 '*.listen.to',
1259                 '*.mediasite.de',
1260                 '*.megapage.de',
1261                 '*.messages.to',
1262                 '*.mine.at',
1263                 '*.more.at',
1264                 '*.more.by',
1265                 '*.move.to',
1266                 '*.musicpage.de',
1267                 '*.mypage.org',
1268                 '*.mysite.de',
1269                 '*.nav.to',
1270                 '*.notrix.at',
1271                 '*.notrix.ch',
1272                 '*.notrix.de',
1273                 '*.notrix.net',
1274                 '*.on.to',
1275                 '*.page.to',
1276                 '*.pagina.de',
1277                 '*.played.by',
1278                 '*.playsite.de',
1279                 '*.privat.ms',
1280                 '*.quickly.to',
1281                 '*.redirect.to',
1282                 '*.rulestheweb.com',
1283                 '*.run.to',
1284                 '*.scroll.to',
1285                 '*.seite.ms',
1286                 '*.shortcut.to',
1287                 '*.skip.to snap.to',
1288                 '*.soft-ware.de',
1289                 '*.start.at',
1290                 '*.stick.by',
1291                 '*.surf.to',
1292                 '*.switch.to',
1293                 '*.talk.to',
1294                 '*.tip.nu',
1295                 '*.top.ms',
1296                 '*.transfer.to',
1297                 '*.travel.to',
1298                 '*.turn.to',
1299                 '*.vacations.to',
1300                 '*.videopage.de',
1301                 '*.virtualpage.de',
1302                 '*.w3.to',
1303                 '*.walk.to',
1304                 '*.warp9.to',
1305                 '*.window.to',
1306                 '*.yours.at',
1307                 '*.zap.to',
1308                 '*.zip.to',
1309         ),
1310         'VDirect.com' => array(
1311                 '*.emailme.net',
1312                 '*.getto.net',
1313                 '*.inetgames.com',
1314                 '*.netbounce.com',
1315                 '*.netbounce.net',
1316                 '*.oneaddress.net',
1317                 '*.snapto.net',
1318                 '*.vdirect.com',
1319                 '*.vdirect.net',
1320                 '*.webrally.net',
1321         ),
1322         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1323         'vgo2.com',
1324         'Voila.fr' => array('r.voila.fr'),      // Fix it
1325         'w3t.org',
1326         'wapurl.co.uk',
1327         'Wb.st' => array(
1328                 '*.team.st',
1329                 '*.wb.st',
1330         ),
1331         'wbkt.net',
1332         'WebAlias.com' => array(
1333                 '*.andmuchmore.com',
1334                 '*.browser.to',
1335                 '*.escape.to',
1336                 '*.fornovices.com',
1337                 '*.fun.to',
1338                 '*.got.to',
1339                 '*.hottestpix.com',
1340                 '*.imegastores.com',
1341                 '*.latest-info.com',
1342                 '*.learn.to',
1343                 '*.moviefever.com',
1344                 '*.mp3-archives.com',
1345                 '*.myprivateidaho.com',
1346                 '*.radpages.com',
1347                 '*.remember.to',
1348                 '*.resourcez.com',
1349                 '*.return.to',
1350                 '*.sail.to',
1351                 '*.sports-reports.com',
1352                 '*.stop.to',
1353                 '*.thrill.to',
1354                 '*.tophonors.com',
1355                 '*.uncutuncensored.com',
1356                 '*.up.to',
1357                 '*.veryweird.com',
1358                 '*.way.to',
1359                 '*.web-freebies.com',
1360                 '.webalias.com',
1361                 '*.webdare.com',
1362                 '*.xxx-posed.com',
1363         ),
1364         'webmasterwise.com',
1365         'witherst at hotmail.com' => array(     // by Tim Withers
1366                 '*.associates-program.com',
1367                 '*.casinogopher.com',
1368                 '*.ezpagez.com',
1369                 '*.vgfaqs.com',
1370         ),
1371         'wittylink.com',
1372         'wiz.sc',                       // tiny.cc related
1373         'X50.us' => array(
1374                 '*.i50.de',
1375                 '*.x50.us',
1376         ),
1377         'big5.xinhuanet.com',   ///gate/big5/
1378         'xhref.com',
1379         'Xn6.net' => array(
1380                 '*.9ax.net',
1381                 '*.xn6.net',
1382         ),
1383         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1384         '.y11.net',
1385         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1386                 '*.yesns.com',
1387                 '*.srv4u.net',
1388                 //blogne.com
1389         ),
1390         'yatuc.com',
1391         'yep.it',
1392         'yumlum.com',
1393         'yurel.com',
1394         'Z.la' => array(
1395                 'z.la',
1396                 't.z.la',
1397         ),
1398         'zaable.com',
1399         'zapurl.com',
1400         'zarr.co.uk',
1401         'zerourl.com',
1402         'ZeroWeb.org' => array(
1403                 '*.80t.com',
1404                 '*.firez.org',
1405                 '*.fizz.nu',
1406                 '*.ingame.org',
1407                 '*.irio.net',
1408                 '*.v33.org',
1409                 '*.zeroweb.org',
1410         ),
1411         'zhukcity.ru',
1412         'zippedurl.com',
1413         'zr5.us',
1414         '*.zs.pl',
1415         '*.zu5.net',
1416         'zuso.tw',
1417         '*.zwap.to',
1418 );
1419
1420 // --------------------------------------------------
1421
1422 $blocklist['A-2'] = array(
1423
1424         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1425         //
1426         //'*.dyndns.*', // Wildcard for dyndns
1427         //
1428         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1429         'ddns.ru' => array('*.bpa.nu'),
1430         'Dhs.org' => array(
1431                 '*.2y.net',
1432                 '*.dhs.org',
1433         ),
1434         '*.dnip.net',
1435         '*.dyndns.co.za',
1436         '*.dyndns.dk',
1437         '*.dyndns.nemox.net',
1438         'DyDNS.com' => array(
1439                 '*.ath.cx',
1440                 '*.dnsalias.org',
1441                 '*.dyndns.org',
1442                 '*.homeip.net',
1443                 '*.homelinux.net',
1444                 '*.mine.nu',
1445                 '*.shacknet.nu',
1446         ),
1447         '*.dtdns.net',                  // by jscott at sceiron.com
1448         '*.dynu.com',
1449         '*.dynup.net',
1450         '*.fdns.net',
1451         'J-Speed.net' => array(
1452                 '*.bne.jp',
1453                 '*.ii2.cc',
1454                 '*.jdyn.cc',
1455                 '*.jspeed.jp',
1456         ),
1457         '*.mydyn.de',
1458         '*.nerdcamp.net',
1459         'No-IP.com' => array(
1460                         '*.bounceme.net',
1461                         '*.hopto.org',
1462                         '*.myftp.biz',
1463                         '*.myftp.org',
1464                         '*.myvnc.com',
1465                         '*.no-ip.biz',
1466                         '*.no-ip.info',
1467                         '*.no-ip.org',
1468                         '*.redirectme.net',
1469                         '*.servebeer.com',
1470                         '*.serveblog.net',
1471                         '*.servecounterstrike.com',
1472                         '*.serveftp.com',
1473                         '*.servegame.com',
1474                         '*.servehalflife.com',
1475                         '*.servehttp.com',
1476                         '*.servemp3.com',
1477                         '*.servepics.com',
1478                         '*.servequake.com',
1479                         '*.sytes.net',
1480                         '*.zapto.org',
1481         ),
1482         '*.opendns.be',
1483         'Yi.org' => array(      // by dns at whyi.org
1484                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1485
1486                 // 72.55.129.46(redirect.yi.org)
1487                 '*.whyi.org',
1488                 '*.weedns.com',
1489         ),
1490         '*.zenno.info',
1491         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1492                         // and all non-recorded domains redirect to 'agoga.com' now
1493                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1494                         // http://agoga.com/aboutus.html
1495 );
1496
1497 // --------------------------------------------------
1498
1499 // B: Sample setting of:
1500 // Jacked (taken advantage of) and cleaning-less sites
1501 //
1502 // Please notify us about this list with reason:
1503 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1504
1505 $blocklist['B-1'] = array(
1506
1507         // B-1: Web N.M spaces (N > 0, M >= 0)
1508         //
1509         //   Messages from forerunners:
1510         //     activefreehost.com
1511         //       "We regret to inform you that ActiveFreeHost
1512         //        free hosting service has is now closed (as of
1513         //        September 18). We have been online for over
1514         //        two and half years, but have recently decided
1515         //        to take time for software improvement to fight
1516         //        with server abuse, Spam advertisement and
1517         //        fraud."
1518         //
1519         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1520         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1521         '*.007webpro.com',              // by richord at ientry.com
1522         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1523         '*.0buckhost.com',              // by tycho at e-lab.nl
1524         '0Catch.com related' => array(
1525                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1526
1527                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1528                 '*.100megsfree5.com',
1529
1530                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1531                 '*.100freemb.com',              // by Danny Ashworth
1532                 '*.easyfreehosting.com',
1533                 '*.exactpages.com',
1534                 '*.fcpages.com',
1535                 '*.wtcsites.com',
1536
1537                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1538                 '*.741.com',
1539                 '*.freecities.com',
1540                 '*.freesite.org',
1541                 '*.freewebpages.org',
1542                 '*.freewebsitehosting.com',
1543                 '*.jvl.com',
1544
1545                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1546                 '*.freespaceusa.com',
1547                 '*.usafreespace.com',
1548
1549                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1550                 '*.dex1.com',
1551                 '*.questh.com',
1552
1553                 // 209.63.57.10(*snip*), ns *.0catch.com
1554                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1555                 '*.012webpages.com',    // by support at 0catch.com
1556                 '*.150m.com',
1557                 '*.1sweethost.com',             // by whois at bluehost.com
1558                 '*.250m.com',                   // by jason at fahlman.net
1559                 '*.9cy.com',                    // by paulw0t at gmail.com
1560                 '*.angelcities.com',    // by cliff at eccentrix.com
1561                 '*.arcadepages.com',    // by admin at site-see.com
1562                 '*.e-host.ws',                  // by dns at jomax.net
1563                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1564                 '*.fw.bz',                              // by ben at kuehl.as
1565                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1566                 '*.g0g.net',                    // by domains at seem.co.uk
1567                 '*.galaxy99.net',               // by admin at bagchi.org
1568                 '*.greatnow.com',               // by peo at peakspace.com
1569                 '*.hautlynx.com',               // by hlewis28 at juno.com
1570                 '*.ibnsites.com',               // by cmrojas at mail.com
1571                 '*.just-allen.com',             // by extremehype at msn.com
1572                 '*.kogaryu.com',                // by angelguerra at msn.com
1573                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1574                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1575                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1576                 '*.s-enterprize.com',
1577                 '*.servetown.com',              // by jonahbliss at earthlink.net
1578                 '*.stinkdot.org',               // by bluedot at ziplip.com
1579                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1580                 '*.zomi.net',                   // by sianpu at gmail.com
1581         ),
1582         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1583         '100 Best Inc' => array(
1584                 // by 100 Best Inc (info at 100best.com)
1585
1586                 // 66.235.204.7(h204-007.bluefishhosting.com)
1587                 '*.2-hi.com',
1588                 '*.20fr.com',
1589                 '*.20ii.com',
1590                 '*.20is.com',
1591                 '*.20it.com',
1592                 '*.20m.com',    // by jlee at 100bestinc.com
1593                 '*.20to.com',
1594                 '*.2u-2.com',
1595                 '*.3-st.com',
1596                 '*.fws1.com',
1597                 '*.fw-2.com',
1598                 '*.inc5.com',
1599                 '*.on-4.com',
1600                 '*.st-3.com',
1601                 '*.st20.com',
1602                 '*.up-a.com',
1603
1604                 // 216.40.33.252(www-pd.mdnsservice.com)
1605                 '*.0-st.com',
1606                 '*.20me.com',
1607         ),
1608         '*.100foros.com',
1609         '*.101freehost.com',
1610         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1611         '20six Weblog Services' => array(
1612                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1613                 '.20six.co.uk',
1614                 '.20six.fr',
1615                 'myblog.de',
1616                 'myblog.es',
1617         ),
1618         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1619         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1620         '2IP.com' => array(
1621                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1622                 '*.2ip.jp',
1623                 '*.474.jp',
1624                 '*.consensus.jp',
1625                 '*.desyo.jp',
1626                 '*.dif.jp',
1627                 '*.pastels.jp',
1628                 '*.powerblogger.jp',
1629                 '*.vippers.jp',
1630                 '*.webpages.jp',
1631
1632                 // 205.209.97.56(non-existent)
1633                 '*.biografi.biz',
1634                 '*.biografi.info',
1635                 '*.biografi.org',
1636                 '*.biografi.us',
1637                 '*.datadiri.biz',
1638                 '*.datadiri.cc',
1639                 '*.datadiri.com',
1640                 '*.datadiri.info',
1641                 '*.datadiri.net',
1642                 '*.datadiri.org',
1643                 '*.datadiri.tv',
1644                 '*.datadiri.us',
1645                 '*.indo.bz',
1646                 '*.indo.cc',
1647                 '*.profil.bz',
1648                 '*.profil.cc',
1649                 '*.profil.cn',
1650                 '*.profil.in',
1651                 '*.profil.tv',
1652
1653                 // 205.209.101.47(non-existent)
1654                 '*.about.tc',
1655                 '*.about.vg',
1656                 '*.aboutus.gs',
1657                 '*.aboutus.ms',
1658                 '*.aboutus.tc',
1659                 '*.aboutus.vg',
1660                 '*.band.io',
1661                 '*.beijing.am',
1662                 '*.blogs.io',
1663                 '*.boke.am',
1664                 '*.clan.io',
1665                 '*.ecv.gs',
1666                 '*.ecv.ms',
1667                 '*.ecv.vg',
1668                 '*.freekong.cn',
1669                 '*.go2net.ws',
1670                 '*.hello.cn.com',
1671                 '*.hello.io',
1672                 '*.hits.io',
1673                 '*.hostingweb.us',
1674                 '*.hub.io',
1675                 '*.ide.am',
1676                 '*.inc.io',
1677                 '*.incn.in',
1678                 '*.indo.gs',
1679                 '*.indo.ms',
1680                 '*.indo.tc',
1681                 '*.indo.vg',
1682                 '*.infinitehosting.net',
1683                 '*.infinites.net',
1684                 '*.jushige.cn',
1685                 '*.jushige.com',
1686                 '*.kongjian.in',
1687                 '*.lan.io',
1688                 '*.llc.nu',
1689                 '*.maimai.in',
1690                 '*.max.io',
1691                 '*.musician.io',
1692                 '*.mycv.bz',
1693                 '*.mycv.nu',
1694                 '*.mycv.tv',
1695                 '*.myweb.io',
1696                 '*.ourprofile.biz',
1697                 '*.ourprofile.info',
1698                 '*.ourprofile.net',
1699                 '*.ourprofile.org',
1700                 '*.ourprofile.us',
1701                 '*.profil.gs',
1702                 '*.profil.ms',
1703                 '*.profil.tc',
1704                 '*.qiye.in',
1705                 '*.site.io',
1706                 '*.wan.io',
1707                 '*.web-cam.ws',
1708                 '*.webs.io',
1709                 '*.xixu.cc',
1710                 '*.zaici.am',
1711                 '*.zip.io',
1712                 '*.zuzhi.in',
1713
1714                 '*.profil.vg',          // 205.209.101.67(non-existent)
1715                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1716                 //'*.about.gs',         // No record
1717                 //'*.eprofile.us',      // non-existent
1718         ),
1719         '2Page.de' => array(
1720                 '.dreipage.de',
1721                 '.2page.de',
1722         ),
1723         '*.3-hosting.net',
1724         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1725         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1726         '*.8000web.com',        // 75.126.189.45
1727         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1728         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1729         'Ai.NET' => array(
1730                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1731                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1732         ),
1733         '*.aimoo.com',
1734         '*.alkablog.com',
1735         '*.alluwant.de',
1736         '.amkbb.com',
1737         'answerbag.com',        // 8.5.0.128
1738         'anyboard.net',
1739         'AOL.com' =>    // http://about.aol.com/international_services
1740                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1741                 '(?:aol|americaonline)\.' .
1742                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1743                 // Rough but works
1744         'Apple.com' => array('idisk.mac.com'),
1745         '*.askfaq.org',
1746         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1747         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1748         '*.asphost4free.com',
1749         'basenow.com',
1750         'BatCave.net' => array(
1751                 '.batcave.net',                 // 64.22.112.226
1752                 '.freehostpro.com',             // 64.22.112.226
1753         ),
1754         '*.bb-fr.com',
1755         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1756         '*.beeplog.com',
1757         'beepworld.it',
1758         'bestfreeforums.com',
1759         'bestvotexxx.com',
1760         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1761         'blinklist.com',
1762         'Blog.com' => array(
1763                 // by admin.domains at co.blog.com
1764                 '*.blog.com',
1765                 '*.blogandorra.com',
1766                 '*.blogangola.com',
1767                 '*.blogaruba.com',
1768                 '*.blogaustria.at',
1769         ),
1770         '*.blog.com.es',
1771         '*.blog.hr',
1772         '*.blog4ever.com',
1773         '*.blog-fx.com',
1774         '*.blogbeee.com',
1775         'blogas.lt',
1776         'blogbud.com',
1777         '*.blogburkinafaso.com',
1778         '*.blogcu.com',                 // by info at nokta.com
1779         'blogfreely.com',
1780         '*.blogdrive.com',
1781         '*.blogg.de',
1782         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1783         'bloggercrab.com',
1784         'bloggers.nl',
1785         '*.bloggingmylife.com',
1786         '*.bloggles.info',
1787         '*.blogharbor.com',
1788         '*.bloguj.eu',
1789         'bloguitos.com',
1790         'blogosfer.com',
1791         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1792         '*.blogslive.net',
1793         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1794         '*.blogstream.com',
1795         'blogyaz.com',
1796         'bloodee.com',
1797         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1798         'board-4you.de',
1799         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1800         '*.boardhost.com',
1801         'Bravenet.com' => array(
1802                 '*.bravenet.com',
1803                 '*.bravehost.com',
1804         ),
1805         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1806         'C2k.jp' => array(
1807                 // by Makoto Okuse (webmaster at 2style.net)
1808                 '.081.in',
1809                 '.2style.in',
1810                 '.bian.in',
1811                 '.curl.in',
1812                 '.ennui.in',
1813                 '.jinx.in',
1814                 '.loose.in',
1815                 '.mist.in',
1816                 '.muu.in',
1817                 '.naive.in',
1818                 '.panic.in',
1819                 '.slum.in',
1820
1821                 // by 2style, ns *.click2k.net, *.2style.net
1822                 '.2st.jp',
1823                 '.betty.jp',
1824                 '.cabin.jp',
1825                 '.cult.jp',
1826                 '.mippi.jp',
1827                 '.purety.jp',
1828                 '.rapa.jp',
1829                 '.side-b.jp',
1830                 '.web-box.jp',
1831                 '.yea.jp',
1832
1833                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1834                 '.2style.net',
1835                 '.click2k.net',
1836                 '.houka5.com',
1837
1838                 // by click2k, ns *.click2k.net, *.2style.net
1839                 '.psyco.jp',
1840                 '.sweety.jp',
1841
1842                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1843                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1844         ),
1845         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1846         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1847         '*.chueca.com',
1848         'city-forum.com',
1849         '*.clicdev.com',
1850         '*.craigslist.org',
1851         'concepts-mall.com',
1852         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1853         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1854         'counterhit.de',
1855         '*.createblog.com',
1856         '*.createforum.net',
1857         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1858         '*.createmybb.com',
1859         'CwCity.de' => array(
1860                 '.cwcity.de',
1861                 '.cwsurf.de',
1862         ),
1863         'dakrats.net',
1864         '*.dcswtech.com',
1865         'del.icio.us',
1866         '*.devil.it',
1867         '*.diaryland.com',
1868         'diigo.com',                    ///user/
1869         'digg.com',
1870         'digstock.com',
1871         'domains at galaxywave.net' => array(
1872                 'blogstation.net',
1873                 '.phpbb-host.com',
1874         ),
1875         'dotbb.be',
1876         '*.dox.hu',                             // dns at 1b.hu
1877         '*.eadf.com',
1878         '*.eblog.com.au',
1879         '*.ekiwi.de',
1880         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1881         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1882         '*.easyjournal.com',
1883         '*.ebloggy.com',
1884         'enunblog.com',
1885         '*.epinoy.com',
1886         '*.ez-sites.ws',
1887         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1888         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1889         '*.fathippohosting.com',        // 208.101.3.192
1890         'FC2.com' => array(
1891                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1892                         // Many traps available:
1893                         //      bqdr.blog98.fc2.com,       iframe
1894                         //      csfir.blog87.fc2.com,      iframe
1895                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1896                         //      sippou2006.blog60.fc2.com, iframe
1897                         // NOTE: 'blog.fc2.com' is not included
1898                 '*.h.fc2.com',  // Adult
1899         ),
1900         '*.fizwig.com',
1901         'forum.ezedia.net',
1902         '*.extra.hu',                   // angelo at jasmin.hu
1903         '*.fanforum.cc',
1904         'fingerprintmedia.com',
1905         '*.filelan.com',
1906         '*.fora.pl',
1907         '*.forka.eu',
1908         '*.foren-city.de',
1909         'foren-gratis.de',
1910         '*.foros.tv',
1911         '*.forospace.com',
1912         'foroswebgratis.com',
1913         '*.forum-on.de',
1914         '*.forum24.se',
1915         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1916         '.forum66.com',
1917         'Forumotion.com' => array(
1918                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1919                 '*.forumactif.com',     // 91.121.41.79
1920                 '*.editboard.com',      // 75.126.156.15
1921                 '*.sosblog.com',        // 74.86.25.140
1922
1923                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1924                 '*.0forum.biz',
1925                 '*.1forum.biz',
1926                 '*.1fr1.net',
1927                 '*.1talk.net',
1928                 '*.2forum.biz',
1929                 '*.3forum.biz',
1930                 '*.4forum.biz',
1931                 '*.4rumer.com',
1932                 '*.4rumer.net',
1933                 '*.4umer.com',
1934                 '*.4umer.net',
1935                 '*.5forum.biz',
1936                 '*.5forum.info',
1937                 '*.5forum.net',
1938                 '*.6forum.biz',
1939                 '*.6forum.info',
1940                 '*.77forum.com',
1941                 '*.7forum.biz',
1942                 '*.7forum.info',
1943                 '*.7forum.net',
1944                 '*.8forum.biz',
1945                 '*.8forum.info',
1946                 '*.8forum.net',
1947                 '*.9forum.biz',
1948                 '*.9forum.info',
1949                 '*.activebb.net',
1950                 '*.aforumfree.com',
1951                 '*.all-forum.net',
1952                 '*.all-up.com',
1953                 '*.alldiscussion.net',
1954                 '*.allgoo.net',
1955                 '*.allgoo.us',
1956                 '*.american-forum.net',
1957                 '*.americantalk.net',
1958                 '*.annuaire-forums.com',
1959                 '*.asiafreeforum.com',
1960                 '*.asianfreeforum.com',
1961                 '*.azureforum.com',
1962                 '*.azurforum.com',
1963                 '*.bestcheapforum.com',
1964                 '*.bestdiscussion.net',
1965                 '*.bestgoo.com',
1966                 '*.bestofforum.com',
1967                 '*.bestofforum.net',
1968                 '*.bestoforum.net',
1969                 '*.bforum.biz',
1970                 '*.big-forum.net',
1971                 '*.board-poster.com',
1972                 '*.board-realtors.com',
1973                 '*.boardonly.com',
1974                 '*.boardrealtors.net',
1975                 '*.boardsmessage.com',
1976                 '*.briceboard.com',
1977                 '*.bubblelol.com',
1978                 '*.buy-forum.com',
1979                 '*.buy-talk.com',
1980                 '*.buyforum.net',
1981                 '*.buygoo.net',
1982                 '*.buygoo.us',
1983                 '*.camelscrew.com',
1984                 '*.cheap-forum.com',
1985                 '*.cheapforum.net',
1986                 '*.chocoforum.com',
1987                 '*.chocoforum.net',
1988                 '*.clic-topic.com',
1989                 '*.clicboard.com',
1990                 '*.clictopic.com',
1991                 '*.clictopic.net',
1992                 '*.clictopics.com',
1993                 '*.clubdiscussion.net',
1994                 '*.coolbb.net',
1995                 '*.crazy4us.com',
1996                 '*.crazyfruits.net',
1997                 '*.createmyboard.com',
1998                 '*.crewcamel.com',
1999                 '*.cyberfreeforum.com',
2000                 '*.discutforum.com',
2001                 '*.discutfree.com',
2002                 '*.do-forum.com',
2003                 '*.do-goo.com',
2004                 '*.do-goo.net',
2005                 '*.do-talk.com',
2006                 '*.dodiscussion.com',
2007                 '*.dogoo.us',
2008                 '*.easydiscussion.net',
2009                 '*.easyforumlive.com',
2010                 '*.englishboard.net',
2011                 '*.englishboards.com',
2012                 '*.ephpbb.com',
2013                 '*.eraseboard.net',
2014                 '*.eraseboards.net',
2015                 '*.euro-talk.net',
2016                 '*.eurodiscussion.net',
2017                 '*.eurogoo.com',
2018                 '*.exchangesboard.com',
2019                 '*.exprimetoi.net',
2020                 '*.fairtopic.com',
2021                 '*.fforum.biz',
2022                 '*.fforumfree.com',
2023                 '*.first-forum.com',
2024                 '*.firstgoo.com',
2025                 '*.fororama.com',
2026                 '*.forum-2007.com',
2027                 '*.forum-actif.net',
2028                 '*.forum-free.biz',
2029                 '*.forum-free.org',
2030                 '*.forum-motion.com',
2031                 '*.forum0.biz',
2032                 '*.forum0.info',
2033                 '*.forum0.net',
2034                 '*.forum2.biz',
2035                 '*.forum3.biz',
2036                 '*.forum3.info',
2037                 '*.forum5.info',
2038                 '*.forum6.biz',
2039                 '*.forum6.info',
2040                 '*.forum7.biz',
2041                 '*.forum777.com',
2042                 '*.forum8.biz',
2043                 '*.forum9.biz',
2044                 '*.foruma.biz',
2045                 '*.forumactif.biz',
2046                 '*.forumactif.info',
2047                 '*.forumactif.name',
2048                 '*.forumactif.ws',
2049                 '*.forumaction.net',
2050                 '*.forumakers.com',
2051                 '*.forumandco.com',
2052                 '*.forumb.biz',
2053                 '*.forumc.biz',
2054                 '*.forumd.biz',
2055                 '*.forumdediscussions.com',
2056                 '*.forumdediscussions.net',
2057                 '*.forume.biz',
2058                 '*.forumeast.com',
2059                 '*.forumf.biz',
2060                 '*.forumfreek.com',
2061                 '*.forumfreez.com',
2062                 '*.forumg.biz',
2063                 '*.forumh.biz',
2064                 '*.forumh.net',
2065                 '*.forumhope.com',
2066                 '*.forumi.biz',
2067                 '*.forumice.net',
2068                 '*.foruminute.com',
2069                 '*.forumj.biz',
2070                 '*.forumj.net',
2071                 '*.forumjonction.com',
2072                 '*.forumk.biz',
2073                 '*.foruml.biz',
2074                 '*.forumm.biz',
2075                 '*.forummotion.com',
2076                 '*.forummotions.com',
2077                 '*.forumn.biz',
2078                 '*.forumn.net',
2079                 '*.forumo.biz',
2080                 '*.forumonline.biz',
2081                 '*.forumotions.com',
2082                 '*.forump.biz',
2083                 '*.forump.info',
2084                 '*.forumperso.com',
2085                 '*.forumpersos.com',
2086                 '*.forumplatinum.com',
2087                 '*.forumpro.fr',
2088                 '*.forumq.biz',
2089                 '*.forumr.biz',
2090                 '*.forumr.net',
2091                 '*.forumrama.com',
2092                 '*.forums-actifs.com',
2093                 '*.forums-actifs.net',
2094                 '*.forums1.net',
2095                 '*.forumsactifs.com',
2096                 '*.forumsactifs.net',
2097                 '*.forumsfree.org',
2098                 '*.forumsline.com',
2099                 '*.forumsmakers.com',
2100                 '*.forumsmotion.com',
2101                 '*.forumsmotions.com',
2102                 '*.forumt.biz',
2103                 '*.forumv.biz',
2104                 '*.forumvalue.com',
2105                 '*.forumw.biz',
2106                 '*.forumy.biz',
2107                 '*.free-boards.net',
2108                 '*.freediscussion.net',
2109                 '*.freediscussions.net',
2110                 '*.freeforum.me.uk',
2111                 '*.freeforumboard.net',
2112                 '*.freeforumfree.com',
2113                 '*.freevideotalk.com',
2114                 '*.frenchboard.com',
2115                 '*.fruitsandco.com',
2116                 '*.fullboards.com',
2117                 '*.fullsubject.com',
2118                 '*.fullsubject.net',
2119                 '*.get-forum.net',
2120                 '*.getdiscussion.com',
2121                 '*.getgoo.net',
2122                 '*.getgoo.us',
2123                 '*.gettalk.net',
2124                 '*.go-board.com',
2125                 '*.go-board.net',
2126                 '*.go-forum.net',
2127                 '*.go-ogler.com',
2128                 '*.gofreeforum.com',
2129                 '*.gogoo.us',
2130                 '*.goo-board.com',
2131                 '*.goo-boys.com',
2132                 '*.goo-dart.com',
2133                 '*.goo-dole.com',
2134                 '*.goo-done.com',
2135                 '*.gooboards.com',
2136                 '*.goodbb.net',
2137                 '*.goodearths.com',
2138                 '*.goodforum.net',
2139                 '*.goodoles.com',
2140                 '*.goodoolz.com',
2141                 '*.gooforum.com',
2142                 '*.gooforums.com',
2143                 '*.googoolz.com',
2144                 '*.great-forum.com',
2145                 '*.heavenforum.com',
2146                 '*.hforum.biz',
2147                 '*.high-forums.com',
2148                 '*.highbb.com',
2149                 '*.highforum.net',
2150                 '*.hightoxic.com',
2151                 '*.homediscussion.net',
2152                 '*.homegoo.com',
2153                 '*.hooxs.com',
2154                 '*.hot-me.com',
2155                 '*.hot4um.com',
2156                 '*.hotdiscussion.net',
2157                 '*.hotgoo.net',
2158                 '*.in-goo.com',
2159                 '*.in-goo.net',
2160                 '*.infodiscussion.net',
2161                 '*.ingoo.us',
2162                 '*.iowoi.com',
2163                 '*.jforum.biz',
2164                 '*.just-forum.net',
2165                 '*.justboard.net',
2166                 '*.justdiscussion.com',
2167                 '*.justforum.net',
2168                 '*.justgoo.com',
2169                 '*.keuf.net',
2170                 '*.lforum.biz',
2171                 '*.lifediscussion.net',
2172                 '*.lifeme.net',
2173                 '*.lightbb.com',
2174                 '*.logu2.com',
2175                 '*.longdomaine.com',
2176                 '*.lovediscussion.net',
2177                 '*.lowcostforum.com',
2178                 '*.make-free-forum.com',
2179                 '*.makeforumfree.com',
2180                 '*.makefreeforum.com',
2181                 '*.mam9.com',
2182                 '*.manageboard.com',
2183                 '*.max2forum.com',
2184                 '*.meabout.com',
2185                 '*.megabb.com',
2186                 '*.moncontact.com',
2187                 '*.moninter.net',
2188                 '*.motion-forum.net',
2189                 '*.motionforum.net',
2190                 '*.motionsforum.com',
2191                 '*.mrforum.net',
2192                 '*.msnboard.net',
2193                 '*.msnyou.com',
2194                 '*.my-free-board.com',
2195                 '*.my-free-boards.com',
2196                 '*.my-free-forum.com',
2197                 '*.my-free-forums.com',
2198                 '*.my-goo.com',
2199                 '*.my-goo.net',
2200                 '*.mydiscussionboard.com',
2201                 '*.myfreeboard.net',
2202                 '*.mygoo.org',
2203                 '*.myrealboard.com',
2204                 '*.netboarder.com',
2205                 '*.netdiscussion.net',
2206                 '*.netgoo.org',
2207                 '*.new-forum.net',
2208                 '*.newdiscussion.net',
2209                 '*.newgoo.net',
2210                 '*.nforum.biz',
2211                 '*.nice-album.com',
2212                 '*.nice-board.biz',
2213                 '*.nice-board.com',
2214                 '*.nice-board.net',
2215                 '*.nice-boards.com',
2216                 '*.nice-boards.net',
2217                 '*.nice-forum.com',
2218                 '*.nice-forum.net',
2219                 '*.nice-forums.com',
2220                 '*.nice-forums.net',
2221                 '*.nice-gallery.net',
2222                 '*.nice-subject.com',
2223                 '*.nice-subjects.com',
2224                 '*.nice-theme.com',
2225                 '*.nice-topic.com',
2226                 '*.nice-topics.com',
2227                 '*.nicealbums.com',
2228                 '*.niceboard.biz',
2229                 '*.niceboard.net',
2230                 '*.niceboards.net',
2231                 '*.nicegalleries.net',
2232                 '*.nicesubject.com',
2233                 '*.nicesubjects.com',
2234                 '*.nicetopic.net',
2235                 '*.nicetopics.com',
2236                 '*.nightforum.net',
2237                 '*.nocost-forum.com',
2238                 '*.nofeeforum.com',
2239                 '*.one-forum.net',
2240                 '*.onediscussion.net',
2241                 '*.onegoo.us',
2242                 '*.onlinegoo.com',
2243                 '*.onlyquery.com',
2244                 '*.open-board.com',
2245                 '*.openu2.com',
2246                 '*.othersboards.com',
2247                 '*.own0.com',
2248                 '*.pforum.biz',
2249                 '*.phpbb9.com',
2250                 '*.phpbbtest.com',
2251                 '*.positifforum.com',
2252                 '*.postalboard.com',
2253                 '*.prodiscussion.net',
2254                 '*.progoo.us',
2255                 '*.pureforum.net',
2256                 '*.qforum.biz',
2257                 '*.quickbb.net',
2258                 '*.realbb.net',
2259                 '*.realfreeforum.com',
2260                 '*.realmsn.com',
2261                 '*.rforum.biz',
2262                 '*.road2us.com',
2263                 '*.roomforum.com',
2264                 '*.saveboard.com',
2265                 '*.screwcamel.com',
2266                 '*.screwcamels.com',
2267                 '*.sendboard.com',
2268                 '*.sephorum.com',
2269                 '*.sforum.biz',
2270                 '*.shootboard.com',
2271                 '*.shop-forum.net',
2272                 '*.shopsubject.com',
2273                 '*.simpleboard.net',
2274                 '*.site-forums.com',
2275                 '*.smileyforum.net',
2276                 '*.sos-forum.net',
2277                 '*.sos4um.com',
2278                 '*.sos4um.net',
2279                 '*.sosforum.net',
2280                 '*.speedyforum.com',
2281                 '*.stationforum.com',
2282                 '*.subject-expert.com',
2283                 '*.subject-line.com',
2284                 '*.subject-tracer.com',
2285                 '*.subjectchange.com',
2286                 '*.subjectdeals.com',
2287                 '*.subjectdebate.com',
2288                 '*.subjectdone.com',
2289                 '*.subjectonline.com',
2290                 '*.subjectschange.com',
2291                 '*.subjectsecrets.com',
2292                 '*.super-forum.net',
2293                 '*.talk-forums.com',
2294                 '*.team-forum.net',
2295                 '*.team-talk.net',
2296                 '*.teamconvention.com',
2297                 '*.teamgoo.net',
2298                 '*.teensboards.com',
2299                 '*.the-talk.net',
2300                 '*.the-up.com',
2301                 '*.thegoo.us',
2302                 '*.thinksubject.com',
2303                 '*.top-board.com',
2304                 '*.top-forum.net',
2305                 '*.top-me.com',
2306                 '*.top-talk.net',
2307                 '*.topdiscussion.com',
2308                 '*.topgoo.net',
2309                 '*.topic-board.com',
2310                 '*.topic-board.net',
2311                 '*.topic-debate.com',
2312                 '*.topic-ideas.com',
2313                 '*.topic-mail.com',
2314                 '*.topic-zone.com',
2315                 '*.topicboard.net',
2316                 '*.topicboards.com',
2317                 '*.topicmanager.com',
2318                 '*.topicsolutions.net',
2319                 '*.toxicfarm.com',
2320                 '*.unlimitboard.com',
2321                 '*.unlimitedboard.com',
2322                 '*.unlimitedforum.com',
2323                 '*.up-with.com',
2324                 '*.up-your.com',
2325                 '*.urealboard.com',
2326                 '*.user-board.net',
2327                 '*.userboard.net',
2328                 '*.users-board.com',
2329                 '*.users-board.net',
2330                 '*.usersboard.com',
2331                 '*.usersboard.net',
2332                 '*.webgoo.us',
2333                 '*.withboards.com',
2334                 '*.withme.us',
2335                 '*.worldgoo.com',
2336                 '*.yahooboard.net',
2337                 '*.yforum.biz',
2338                 '*.yoo7.com',
2339                 '*.youneed.us',
2340                 '*.your-board.com',
2341                 '*.your-talk.com',
2342                 '*.yourme.net',
2343                 '*.zforum.biz',
2344
2345                 // 75.126.156.15 redirect to forumactif.com
2346                 '*.actifforum.com',
2347                 '*.fr-bb.com',
2348                 '*.superforum.fr',
2349
2350                 // 75.126.156.15 redirect to editboard.com
2351                 '*.bbfr.net',
2352                 '*.bbgraf.com',
2353                 '*.cinebb.com',
2354                 '*.darkbb.com',
2355                 '*.dynamicbb.com',
2356                 '*.zikforum.com',
2357
2358                 // 74.86.25.140 Used: sosblog.com
2359                 '*.0-up.com',
2360                 '*.0-yo.com',
2361                 '*.04live.com',
2362                 '*.06fr.com',
2363                 '*.0fra.com',
2364                 '*.0jet.com',
2365                 '*.0yoo.com',
2366                 '*.1toxic.com',
2367                 '*.2k00.com',
2368                 '*.2xik.com',
2369                 '*.blog-2007.com',
2370                 '*.blog-2008.com',
2371                 '*.blog-2009.com',
2372                 '*.blog-2010.com',
2373                 '*.blog-actif.net',
2374                 '*.blog-marley.com',
2375                 '*.blog-talker.com',
2376                 '*.blog2009.com',
2377                 '*.blogactif.net',
2378                 '*.blogalbums.com',
2379                 '*.blogalerie.com',
2380                 '*.blogaleries.com',
2381                 '*.blogallerys.com',
2382                 '*.blogandme.com',
2383                 '*.blogandyou.com',
2384                 '*.blogbubble.net',
2385                 '*.blogdollz.com',
2386                 '*.bloggeuse.net',
2387                 '*.bloggeuses.com',
2388                 '*.bloginstinct.com',
2389                 '*.bloginternet.net',
2390                 '*.blogmakers.net',
2391                 '*.blogmarley.net',
2392                 '*.blogminister.net',
2393                 '*.blogmorane.com',
2394                 '*.blognboard.com',
2395                 '*.blogotek.net',
2396                 '*.blogpas.com',
2397                 '*.blogpublisher.net',
2398                 '*.blogsalbum.com',
2399                 '*.blogsalbums.com',
2400                 '*.blogsfan.net',
2401                 '*.blogsgallerys.com',
2402                 '*.blogsitephp.com',
2403                 '*.blogsland.net',
2404                 '*.blogsmaker.com',
2405                 '*.blogsmakers.com',
2406                 '*.blogspeed.net',
2407                 '*.blogsup.net',
2408                 '*.blogsutil.com',
2409                 '*.blogsutils.com',
2410                 '*.blogsystem.net',
2411                 '*.blogtalker.net',
2412                 '*.blogtheque.net',
2413                 '*.blogutil.com',
2414                 '*.blogvsboard.com',
2415                 '*.briceblog.com',
2416                 '*.cibleblog.com',
2417                 '*.cristalblog.com',
2418                 '*.crystalblog.net',
2419                 '*.dad-blog.com',
2420                 '*.daddy-blog.com',
2421                 '*.defaultblog.com',
2422                 '*.discussionsblog.com',
2423                 '*.dollzblog.com',
2424                 '*.dtoxic.com',
2425                 '*.easiestblog.net',
2426                 '*.espaceblog.net',
2427                 '*.exitblog.net',
2428                 '*.expensiveblog.com',
2429                 '*.extra-blog.net',
2430                 '*.extrablog.net',
2431                 '*.facileblog.com',
2432                 '*.forblogger.com',
2433                 '*.forumsblogs.com',
2434                 '*.freephpblog.com',
2435                 '*.fresh-blog.net',
2436                 '*.galleryblog.net',
2437                 '*.galleryblogs.net',
2438                 '*.gallerysblog.com',
2439                 '*.gallerysblogs.com',
2440                 '*.hyper-blog.net',
2441                 '*.hyper-blogger.com',
2442                 '*.hyper-blogger.net',
2443                 '*.hyperblogger.net',
2444                 '*.instinctblog.com',
2445                 '*.jeunblog.com',
2446                 '*.jeuneblog.com',
2447                 '*.judblog.com',
2448                 '*.makeblog.net',
2449                 '*.man-blog.net',
2450                 '*.man-blogs.com',
2451                 '*.man-blogs.net',
2452                 '*.manblog.net',
2453                 '*.manblog.org',
2454                 '*.manblog.us',
2455                 '*.manblogs.net',
2456                 '*.mansblog.net',
2457                 '*.mansblogs.com',
2458                 '*.mansblogs.net',
2459                 '*.meetingsblogs.com',
2460                 '*.men-blog.net',
2461                 '*.men-blogs.com',
2462                 '*.men-blogs.net',
2463                 '*.menblog.us',
2464                 '*.menblogs.net',
2465                 '*.mensblogs.net',
2466                 '*.messaginblog.com',
2467                 '*.monblogger.com',
2468                 '*.mum-blog.com',
2469                 '*.mummy-blog.com',
2470                 '*.mummyblog.com',
2471                 '*.myareablog.com',
2472                 '*.myblog-online.net',
2473                 '*.mybloginternet.com',
2474                 '*.myblogland.com',
2475                 '*.myblogmag.com',
2476                 '*.myfreshblog.com',
2477                 '*.myinternetblog.net',
2478                 '*.myoverblog.com',
2479                 '*.myoverblog.net',
2480                 '*.mysharedblog.com',
2481                 '*.nice-albums.com',
2482                 '*.nice-galleries.com',
2483                 '*.nicealbum.net',
2484                 '*.nicegallery.net',
2485                 '*.notreblogger.com',
2486                 '*.outilblog.com',
2487                 '*.over-blogger.com',
2488                 '*.overblogger.com',
2489                 '*.pasblog.com',
2490                 '*.pasblog.net',
2491                 '*.perfect-blog.net',
2492                 '*.perfectblog.net',
2493                 '*.phpblogsite.com',
2494                 '*.phpmyblog.net',
2495                 '*.plateformeblog.com',
2496                 '*.playblogger.com',
2497                 '*.publishmyblog.com',
2498                 '*.pulseblog.net',
2499                 '*.pulseblogs.com',
2500                 '*.puretoxic.com',
2501                 '*.reservedblog.com',
2502                 '*.shareblog.net',
2503                 '*.shareblogs.net',
2504                 '*.shared-blogs.com',
2505                 '*.sharedblog.net',
2506                 '*.sharedblogs.net',
2507                 '*.solideblog.com',
2508                 '*.systemeblog.com',
2509                 '*.talkmeblog.com',
2510                 '*.toolsblog.net',
2511                 '*.toxicplace.com',
2512                 '*.ufreeblog.com',
2513                 '*.uliveblog.com',
2514                 '*.ultratoxic.com',
2515                 '*.utilblog.com',
2516                 '*.utilblogs.com',
2517                 '*.utilsblog.com',
2518                 '*.utilsblogs.com',
2519                 '*.various-blog.com',
2520                 '*.various-blog.net',
2521                 '*.various-blogs.com',
2522                 '*.various-blogs.net',
2523                 '*.variusblog.com',
2524                 '*.versusblog.com',
2525                 '*.vieuxblog.com',
2526                 '*.web-day.net',
2527                 '*.whatsblog.net',
2528                 '*.woman-blog.net',
2529                 '*.woman-blogs.com',
2530                 '*.woman-blogs.net',
2531                 '*.womanblog.com',
2532                 '*.womanblog.org',
2533                 '*.womanblog.us',
2534                 '*.womanblogs.net',
2535                 '*.womansblogs.com',
2536                 '*.womansblogs.net',
2537                 '*.women-blog.net',
2538                 '*.women-blogs.com',
2539                 '*.women-blogs.net',
2540                 '*.womenblog.us',
2541                 '*.womenblogs.net',
2542                 '*.womensblog.net',
2543                 '*.womensblogs.net',
2544                 '*.youblog.net',
2545                 '*.yourliveblog.com',
2546                 '*.yourweblog.net',
2547         ),
2548         '*.forumcommunity.net',
2549         '*.forumer.com',
2550         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2551         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2552         'forumhosting.org',
2553         '*.forums.com',
2554         'forumbolt.com',
2555         'phpbb.forumgratis.com',
2556         'forumlari.net',
2557         '*.forumlivre.com',
2558         'forumnow.com.br',
2559         '*.forumppl.com',
2560         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2561         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2562                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2563                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2564                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2565         '*.fory.pl',
2566         'fotolog.com',
2567         '*.fr33webhost.com',
2568         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2569         '*.free-25.de',
2570         '*.free-bb.com',
2571         'Free-Blog-Hosting.com' => array(
2572                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2573                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2574                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2575                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2576                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2577         ),
2578         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2579         'free-guestbook.net',
2580         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2581         'freebb.nl',
2582         '*.freeclans.de',
2583         '*.freehostplace.com',  // by contact at keepclear.co.uk
2584         '*.freelinuxhost.com',  // by 100webspace.com
2585         '*.nofeehost.com',
2586         '*.freehyperspace.com',
2587         'freeforum.at',                 // by Sandro Wilhelmy
2588         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2589         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2590         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2591         '*.freewebhostingpro.com',
2592         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2593         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2594                 '*.6te.net',
2595                 '*.ueuo.com',
2596                 '*.orgfree.com',
2597         ),
2598         '*.freewebpage.org',
2599         'Freewebs.com' => array(        // by inquiries at freewebs.com
2600                 'freewebs.com',
2601                 'freewebsfarms.com',
2602         ),
2603         '*.freewebspace.net.au',
2604         'freewebtown.com',
2605         '*.freemyforum.com',    // by messahost at gmail.com
2606         'freepowerboards.com',
2607         '*.freepowerboards.com',
2608         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2609         'Funpic.de' => array(   // by alexander at liemen.net
2610                 '*.funpic.de',
2611                 '*.funpic.org',
2612         ),
2613         'gb-hoster.de',
2614         '*.genblogger.com',
2615         'GetBetterHosting.com' => array(
2616                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2617                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2618         ),
2619         '*.gexxe.com',
2620         '*.goodboard.de',
2621         'gossiping.net',
2622         '*.greatnuke.com',
2623         '*.guestbook.de',
2624         'gwebspace.de',
2625         'Google.com' => array(
2626                 '*.blogspot.com',
2627                 'docs.google.com',
2628                 '*.googlegroups.com',           ///web/
2629                 '*.googlepages.com',
2630                 'groups-beta.google.com',
2631                 'groups.google.*',       ///group/ Seems widely distributed
2632                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2633                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2634                         //'groups.google.it', ...
2635         ),
2636         'guestbook.at',
2637         'club.giovani.it',
2638         '*.gratis-server.de',
2639         'healthcaregroup.com',
2640         '*.heliohost.org',
2641         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2642                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2643                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2644                 '*.front.ru',           // (domain at hc.ru)
2645                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2646                 '*.hotbox.ru',          // (domain at hc.ru)
2647                 '*.hotmail.ru',         // (hosting at hc.ru)
2648                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2649                 '*.land.ru',            // (domain at hc.ru)
2650                 '*.mail15.com',         // (hosting at hc.ru)
2651                 '*.mail333.com',        // (hosting at hc.ru)
2652                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2653                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2654                 '*.pisem.net',          // (hosting at hc.ru)
2655                 '*.pochta.ru',          // (domain at hc.ru)
2656                 '*.pochtamt.ru',        // (domain at hc.ru)
2657                 '*.pop3.ru',            // (domain at hc.ru)
2658                 '*.rbcmail.ru',         // (domain at hc.ru)
2659                 '*.smtp.ru',            // (domain at hc.ru)
2660         ),
2661         '*.hiblogger.com',              // by chiaokin at gmail.com
2662         '*.hit.bg',                             // by forumup.com ??
2663         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2664         '*.host-page.com',
2665         '*.hostingclub.de',
2666         'forums.hspn.com',
2667         '*.httpsuites.com',
2668         '*.hut2.ru',
2669         'ibfree.org',                   // 208.101.45.88
2670         'IC.cz' => array(
2671                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2672                 '*.hu.cz',                      // internetcentrum at gmail.com
2673                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2674                 '*.ic.cz',                      // internetcentrum at gmail.com
2675                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2676                 '*.own.cz',                     // internetcentrum at gmail.com
2677                 '*.phorum.cz',          // internetcentrum at gmail.com
2678                 '*.tym.cz',                     // internetcentrum at gmail.com
2679                 '*.tym.sk',                     // jobot at ignum.cz
2680                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2681                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2682                 '*.yw.sk',                      // jobot at ignum.cz
2683         ),
2684         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2685                 '*.0moola.com',
2686                 '*.3000mb.com',
2687                 '.501megs.com',
2688                 '*.teracities.com',
2689                 '*.xoompages.com',
2690         ),
2691         '*.icspace.net',
2692         'iEUROP.net' => array(
2693                 '*.ibelgique.com',
2694                 '*.iespana.es',
2695                 '*.ifrance.com',
2696                 '*.iitalia.com',
2697                 '*.iquebec.com',
2698                 '*.isuisse.com',
2699         ),
2700         '*.ihateclowns.net',
2701         '*.ii55.com',
2702         '*.ipbfree.com',
2703         '*.iphorum.com',
2704         '*.blog.ijijiji.com',
2705         '*.info.com',
2706         '*.informe.com',
2707         'it168.com',
2708         '.iwannaforum.com',
2709         '*.jconserv.net',
2710         '*.jeeran.com',
2711         '*.jeun.fr',
2712         '*.joolo.com',
2713         '*.journalscape.com',
2714         '*.justfree.com',
2715         'kataweb.it' => array(          // kata-redir.kataweb.it
2716                 '*.blog.kataweb.it',
2717                 '*.repubblica.it',
2718         ),
2719         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2720         '*.kokoom.com',
2721         'koolpages.com',
2722         '*.kostenlose-foren.org',
2723         '*.ksiegagosci.info',
2724         'LaCoctelera.com' => array(
2725                 'lacoctelera.com',      // by alberto at the-cocktail.com
2726                 'espacioblog.com',      // by dominios at ferca.com
2727         ),
2728         'Lide.cz' => array(
2729                 '*.lide.cz',
2730                 '*.sblog.cz',
2731         ),
2732         '*.lioru.com',
2733         'limmon.net',
2734         'linkinn.com',
2735         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2736         'listible.com',                 ///list/
2737         'Livedoor.com' => array(
2738                 'blog.livedoor.jp',
2739                 '*.blog.livedoor.com',  // redirection
2740         ),
2741         '*.livejournal.com',
2742         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2743         '*.logme.nl',
2744         'lol.to',
2745         'ltss.luton.ac.uk',
2746         'Lycos.com' => array(
2747                 '.angelfire.com',       // angelfire.lycos.com
2748
2749                 '*.jubii.dk',   // search., medlem.
2750                 '*.jubiiblog.co.uk',
2751                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2752                 '*.jubiiblog.de',
2753                 '*.jubiiblog.dk',
2754                 '*.jubiiblog.fr',
2755                 '*.jubiiblog.it',
2756                 '*.jubiiblog.nl',
2757
2758                 '*.lycos.at',
2759                 '*.lycos.ch',
2760                 '*.lycos.co.uk',
2761                 'angelfire.lycos.com',
2762                 '*.lycos.de',
2763                 '*.lycos.es',
2764                 '*.lycos.fr',
2765                 '*.lycos.it',           // by Lycos Europe GmbH
2766                 '*.lycos.nl',
2767
2768                 '*.spray.se',
2769                 '*.sprayblog.se',
2770
2771                 '*.tripod.com',
2772         ),
2773         '*.mastertopforum.com',
2774         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2775         'meneame.net',
2776         '*.memebot.com',
2777         '*.messageboard.nl',
2778         'mokono GmbH' => array(
2779                 '*.blog.com.es',
2780                 '*.blog.de',
2781                 '*.blog.fr',
2782                 '*.blog.co.uk',
2783                 '*.blog.ca',
2784                 '*.blogs.se',
2785                 '*.blogs.fi',
2786                 '*.blogs.no',
2787                 '*.blogs.dk',
2788                 '*.blogs.ro',
2789                 '*.weblogs.pl',
2790                 '*.weblogs.cz',
2791                 '*.weblogs.hu',
2792         ),
2793         'mojklc.com',
2794         '*.mundoforo.com',
2795         '*.money-host.com',
2796         'MonForum.com' => array(
2797                 '*.monforum.com',
2798                 '*.monforum.fr',
2799         ),
2800         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2801         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2802         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2803         'myblog.is',
2804         'myblogma.com',
2805         '*.myblogvoice.com',
2806         'myblogwiki.com',
2807         '*.myforum.ro',
2808         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2809         '*.myfreewebs.net',
2810         '*.mysite.com',
2811         '*.myxhost.com',
2812         '*.netfast.org',
2813         'NetGears.com' => array(
2814                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2815                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2816                 '*.freewebspace.com',   // 64.49.236.72
2817         ),
2818         'Netscape.com' => array('*.netscape.com'),
2819         'users.newblog.com',
2820         'neweconomics.info',
2821         '*.newsit.es',                          // 75.126.252.108
2822         '*.nm.ru',
2823         '*.nmj.pl',
2824         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2825         'Northsky.com' => array(
2826                 // by hostmaster at northsky.com
2827                 // northsky.com redirects to communityarchitect.com
2828
2829                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2830                 '*.00author.com',
2831                 '*.00band.com',
2832                 '*.00books.com',
2833                 '*.00cash.com',
2834                 '*.00cd.com',
2835                 '*.00dvd.com',
2836                 '*.00family.com',
2837                 '*.00game.com',
2838                 '*.00home.com',
2839                 '*.00it.com',
2840                 '*.00me.com',
2841                 '*.00movies.com',
2842                 '*.00page.com',
2843                 '*.00politics.com',
2844                 '*.00sf.com',
2845                 '*.00show.com',
2846                 '*.00song.com',
2847                 '*.00trek.com',
2848                 '*.00video.com',
2849                 '*.0me.com',
2850                 '*.0pi.com',
2851                 '*.happy-couple.com',
2852                 '*.warp0.com',
2853
2854                 '*.50megs.com',         // 64.136.25.170
2855
2856                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2857                 '*.00server.com',
2858                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2859                 '*.fanspace.com',
2860
2861                 // 64.136.25.168 by Mark Bishop
2862                 '*.00go.com',
2863                 '*.00space.com',
2864                 '*.00sports.com',
2865         ),
2866         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2867         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2868         'onlyfree.de',
2869         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2870         '*.ohost.de',
2871         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2872                 '.friko.pl',
2873                 '.jak.pl',
2874                 '.nazwa.pl',
2875                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2876                 '.w8w.pl',
2877                 '.za.pl',
2878                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2879         ),
2880         'oyax.com',                             ///user_links.php
2881         '*.p2a.pl',
2882         '*.parlaris.com',
2883         '*.pathfinder.gr',
2884         '*.persianblog.com',
2885         '*.phorum.pl',
2886         'Phpbb24.com' => array( // by Daniel Eriksson
2887                 '*.createforum.us',     // registry at webbland.se
2888                 '*.forumportal.us',     // registry at webbland.se
2889                 '*.freeportal.us',      // registry at network24.se
2890                 '*.phpbb2.us',          // daniel at danielos.com
2891                 '*.phpbb24.com',        // daniel at danielos.com
2892                 '*.myforumportal.com',  // daniel at webbland.se
2893         ),
2894         'phpbb4you.com',
2895         'phpbbcommunity.com',
2896         '*.phpbbx.de',
2897         '*.pochta.ru',
2898         '*.portbb.com',
2899         '*.portcms.com',
2900         'powerwebmaster.de',
2901         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2902         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2903         '*.probook.de',
2904         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2905         '*.pun.pl',
2906         'putfile.com',
2907         '*.quickfreehost.com',
2908         'quizilla.com',
2909         '*.quotaless.com',
2910         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2911         'razyboard.com',
2912         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2913         'realhp.de',
2914         'reddit.com',           ///user/
2915         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2916                 '*.juicypornhost.com',
2917                 '*.pornzonehost.com',
2918                 '*.xhostar.com',
2919         ),
2920         'RIN.ru' => array(
2921                 '*.sbn.bz',
2922                 '*.wol.bz',
2923         ),
2924         '*.sayt.ws',
2925         'Seblg.com' => array(
2926                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2927                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2928         ),
2929         '*.seo-blog.org',
2930         '*.shoutpost.com',
2931         '*.siamforum.com',
2932         '*.siteburg.com',
2933         '*.sitehome.ru',
2934         '*.sitesfree.com',              // support at livesearching.com
2935         '*.sitesled.com',
2936         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2937         'SmarTrans.com' => array(
2938                 '.3w.to',
2939                 '.aim.to',
2940                 '.djmp.jp',
2941                 '.nihongourl.nu',
2942                 '.url.sh',              // Says SmarTrans
2943                 '.urljp.com',
2944                 '.www1.to',
2945                 '.www2.to',
2946                 '.www3.to',
2947         ),
2948         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2949         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2950         'members.spboards.com',
2951         'forums.speedguide.net',
2952         'Sphosting.com' => array(       // by admin at sphosting.com
2953                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2954                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2955                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2956                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2957                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2958         ),
2959         '*.spicyblogger.com',
2960         '*.spotbb.com',
2961         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2962         '*.squarespace.com',
2963         'stickypond.com',
2964         'stormloader.com',
2965         'strikebang.com',
2966         '*.sultryserver.com',
2967         '*.t35.com',
2968         '*.talks.at',
2969         'tabletpcbuzz.com',
2970         '*.talkthis.com',
2971         'tbns.net',
2972         'telasipforums.com',
2973         'theforumhub.com',
2974         'thestudentunderground.org',
2975         'think.ubc.ca',
2976         '*.thumblogger.com',
2977         'Topix.com' => array(
2978                 'topix.com',
2979                 'topix.net',
2980         ),
2981         'forum.tourism-talk.com.au',
2982         'tycho at e-lab.nl' => array(
2983                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2984                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2985         ),
2986         '*.tumblr.com',
2987         'UcoZ Web-Services' => array(
2988                 '*.3dn.ru',
2989                 '*.clan.su',
2990                 '*.moy.su',
2991                 '*.my1.ru',
2992                 '*.p0.ru',
2993                 '*.pp.net.ua',
2994                 '*.ucoz.co.uk',
2995                 '*.ucoz.com',
2996                 '*.ucoz.net',
2997                 '*.ucoz.org',
2998                 '*.ucoz.ru',
2999                 '*.ws.co.ua',
3000         ),
3001         '*.unforo.net',
3002         'veoh.com',
3003         '*.vdforum.ru',
3004         '*.vtost.com',
3005         '*.vidiac.com',
3006         'Voila.fr' => array('.site.voila.fr'),
3007         'volny.cz',
3008         'voy.com',
3009         '*.welover.org',
3010         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
3011                 '*.fasthost.tv',
3012                 '*.hothost.tv',
3013                 '*.isgreat.tv',
3014                 '*.issexy.tv',
3015                 '*.isterrible.tv',
3016                 '*.somegood.tv',
3017                 '*.adultnations.com',
3018                 '*.alladultfemale.com',
3019                 '*.alladultmale.com',
3020                 '*.allbisexual.com',
3021                 '*.allbreast.com',
3022                 '*.allfeminism.com',
3023                 '*.allmanpages.com',
3024                 '*.allmendirect.com',
3025                 '*.allphotoalbum.com',
3026                 '*.allsexpages.com',
3027                 '*.allwomanweb.com',
3028                 '*.attorney-site.com',
3029                 '*.bedclip.com',
3030                 '*.bestfamilysite.com',
3031                 '*.bestmusicpages.com',
3032                 '*.bigmoron.com',
3033                 '*.bourgeoisonline.com',
3034                 '*.candyfrom.us',
3035                 '*.cartoonhit.com',
3036                 '*.cat-on-line.com',
3037                 '*.chokesondick.com',
3038                 '*.closeupsof.us',
3039                 '*.cpa-site.com',
3040                 '*.dampgirl.com',
3041                 '*.dampgirls.com',
3042                 '*.deepestfetish.com',
3043                 '*.docspages.com',
3044                 '*.dog-on-line.com',
3045                 '*.dogcountries.com',
3046                 '*.dognations.com',
3047                 '*.doingitwith.us',
3048                 '*.drenchedface.com',
3049                 '*.drenchedlips.com',
3050                 '*.drspages.com',
3051                 '*.edogden.com',
3052                 '*.eroticountry.com',
3053                 '*.fasthost.tv',
3054                 '*.fineststars.com',
3055                 '*.foronlinegames.com',
3056                 '*.forplanetearth.com',
3057                 '*.freeadultparty.com',
3058                 '*.freespeechsite.com',
3059                 '*.gayadultxxx.com',
3060                 '*.gaytaboo.com',
3061                 '*.greatcookery.com',
3062                 '*.greatrecipepages.com',
3063                 '*.greatstreamingvideo.com',
3064                 '*.hatesit.com',
3065                 '*.hothost.tv',
3066                 '*.iscrappy.com',
3067                 '*.isgreat.tv',
3068                 '*.issexy.tv',
3069                 '*.isterrible.tv',
3070                 '*.itinto.us',
3071                 '*.japannudes.net',
3072                 '*.jesussave.us',
3073                 '*.jesussaveus.com',
3074                 '*.labialand.com',
3075                 '*.lettersfrom.us',
3076                 '*.lookingat.us',
3077                 '*.lunaticsworld.com',
3078                 '*.microphallus.com',
3079                 '*.mycatshow.com',
3080                 '*.mydogshow.com',
3081                 '*.myhardman.com',
3082                 '*.mylawsite.net',
3083                 '*.mylovething.com',
3084                 '*.onasoapbox.com',
3085                 '*.onlinepulpit.com',
3086                 '*.petitionthegovernment.com',
3087                 '*.photosfor.us',
3088                 '*.picturetrades.com',
3089                 '*.pleasekiss.us',
3090                 '*.politicalemergency.com',
3091                 '*.power-emergency.com',
3092                 '*.prayingfor.us',
3093                 '*.realbadidea.com',
3094                 '*.realisticpolitics.com',
3095                 '*.reallybites.com',
3096                 '*.reallypumping.us',
3097                 '*.reallyrules.com',
3098                 '*.reallysuckass.com',
3099                 '*.reallysucksass.com',
3100                 '*.realsweetheart.com',
3101                 '*.rottenass.com',
3102                 '*.schoolreference.com',
3103                 '*.sexheroes.com',
3104                 '*.sharewith.us',
3105                 '*.smutstars.com',
3106                 '*.soakinglips.com',
3107                 '*.somegood.tv',
3108                 '*.songsfrom.us',
3109                 '*.stinkingfart.com',
3110                 '*.stinkyhands.com',
3111                 '*.storiesfrom.us',
3112                 '*.taboocountry.com',
3113                 '*.television-series.com',
3114                 '*.thisbelongsto.us',
3115                 '*.totallyboning.us',
3116                 '*.vaginasisters.com',
3117                 '*.verydirtylaundry.com',
3118                 '*.videosfor.us',
3119                 '*.videosfrom.us',
3120                 '*.videosof.us',
3121                 '*.virtualdogshit.com',
3122                 '*.web1000.com',
3123                 '*.webpicturebook.com',
3124                 '*.wronger.com',
3125                 '*.xxxnations.com',
3126                 '*.yourwaywith.us',
3127         ),
3128         'webblog.ru',
3129         'weblogmaniacs.com',
3130         '.webng.com',                   // www.*, www3.*
3131         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3132         'websitetoolbox.com',
3133         '*.webtropia.com',
3134         'Welnet.de' => array(
3135                 'welnet.de',
3136                 'welnet4u.de',
3137         ),
3138         'wh-gb.de',
3139         '*.wikidot.com',
3140         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3141         '*.wmjblogs.ru',
3142         '*.wordpress.com',
3143         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3144         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3145         '*.xforum.se',
3146         'xfreeforum.com',
3147         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3148         '*.xoomwebs.com',
3149         '.xterm.org',
3150         '.freeblogs.xp.tl',
3151         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3152         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3153         'Yahoo.com' => array(
3154                 'flickr.com',
3155                 'geocities.com',
3156         ),
3157         'YANDEX, LLC.' => array(        // noc at yandex.net
3158                 '*.narod.ru',
3159                 'ya.ru',
3160                 'yandex.ru',
3161         ),
3162         '*.yeahost.com',
3163         'yourfreebb.de',
3164         'Your-Websites.com' => array(
3165                 '*.your-websites.net',
3166                 '*.web-space.ws',
3167         ),
3168
3169
3170         '*.heliohost.org',      // by ashoat at gmail.com
3171         'X10Hosting.com' => array(
3172                 // by support at clockworkcomputers.com
3173                 '*.x10hosting.com',
3174                 '*.elementfx.com',
3175                 '*.exofire.net',
3176                 '*.pcriot.com',
3177         ),
3178         '.zendurl.com',         // by ajcar1992 at gmail.com
3179 );
3180
3181 // --------------------------------------------------
3182
3183 $blocklist['B-2'] = array(
3184
3185         // B-2: Jacked contents, something implanted
3186         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3187         '*.3dm3.com',
3188         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3189         '*.1fr1.com',
3190         'a4aid.org',
3191         'aac.com',
3192         '*.aamad.org',
3193         'ad-pecjak.si',
3194         'agnt.org',
3195         'alwanforthearts.org',
3196         '*.anchor.net.au',
3197         'anewme.org',
3198         'arcrockett.com',               ///golf/excel/
3199         'arisedesign.net',              //Portfolio/d981/
3200         'internetyfamilia.asturiastelecentros.com',
3201         'ballblair.com',                ///images/thumbs/
3202         'Ball State University' => array('web.bsu.edu'),
3203         'btofaq.net',                   ///v3/forum
3204         'blepharospasm.org',
3205         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3206         'nyweb.bowlnfun.dk',
3207         '*.buzznet.com',
3208         'Carroll College' => array(
3209                 'carroll.edu',          ///boards/
3210         ),
3211         '*.canberra.net.au',
3212         'castus.com',
3213         'Case Western Reserve University' => array('case.edu'),
3214         'ceval.de',
3215         'chaco.gov.ar',
3216         'chasingrainbowsaustralia.com', ///geometry/
3217         'codespeak.net',
3218         'Colorado School of Mines' => array('ticc.mines.edu'),
3219         '*.colourware.co.uk',
3220         'cpuisp.com',
3221         'International Christian University' => array('icu.edu.ua'),
3222         '*.iphpbb.com',
3223         'board-z.de',
3224         '*.board-z.de',
3225         'California State University Stanislaus' => array('writing.csustan.edu'),
3226         'cannon.co.za',
3227         'columbosgarden.com',
3228         '*.communityhost.de',
3229         'connectionone.org',
3230         'deathwinds.com',
3231         'deforum.org',
3232         'delayedreaction.org',
3233         'deproduction.org',
3234         'dc503.org',
3235         'dialadeck.com',                ///images/
3236         'dre-centro.pt',
3237         'Duke University' => array('devel.linux.duke.edu'),
3238         '*.esen.edu.sv',
3239         'forums.drumcore.com',
3240         'dundeeunited.org',
3241         'energyglass.com.ua',
3242         'equitas.com.au',               ///images/mim3/, no index.html
3243         'exclusivehotels.com',
3244         'info.ems-rfid.com',
3245         'fairyfunkyard.com',    ///images_files/files/
3246         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3247         'fbwloc.com',
3248         '.fhmcsa.org.au',
3249         'findyourwave.co.uk',
3250         'frogcafe.net',
3251         'plone4.fnal.gov',
3252         'freeforen.com',
3253         'funkdoc.com',
3254         'funnyclipcentral.com',
3255         'gearseds.com',
3256         'generationrice.com',
3257         'ghettojava.com',
3258         'gnacademy.org',
3259         '*.goodboard.de',
3260         'GreenDayVideo.net' => array(
3261                 'greendayvideo.net',
3262                 'espanol.greendayvideo.net',
3263         ),
3264         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3265         'Harvard Law School' => array('blogs.law.harvard.edu'),
3266         'helpiammoving.com',
3267         'homepage-dienste.com',
3268         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3269         'Howard University' => array('networks.howard.edu'),
3270         'hullandhull.com',
3271         'Huntington University' => array('huntington.edu'),
3272         'huskerink.com',
3273         '.hyba.info',
3274         'ideas4you.com',        ///photos/
3275         'inda.org',
3276         '*.indymedia.org',      // by abdecom at riseup.net
3277         'instantbulletin.com',
3278         'internetincomeclub.com',
3279         '*.inventforum.com',
3280         'Iowa State University' => array('boole.cs.iastate.edu'),
3281         'ipwso.org',
3282         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3283         'ironmind.com',
3284         'skkustp.itgozone.com', // hidden JavaScript
3285         'jazz2online.com',
3286         '.jloo.org',
3287         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3288         'kjon.com',
3289         'Kazan State University' => array(
3290                 'dir.kzn.ru',
3291                 'sys.kcn.ru',
3292         ),
3293         'test.kernel.org',
3294         'kevindmurray.com',
3295         'kroegjesroutes.nl',
3296         '.legion.org',
3297         'Loyola Marymount University' => array('lmu.edu'),
3298         'forum.lixium.fr',
3299         'macfaq.net',
3300         'macvirus.org',         ///board/
3301         'me4x4.com',
3302         'microbial-ecology.net',
3303         'minsterscouts.org',
3304         'morallaw.org',
3305         'morerevealed.com',
3306         'macronet.org',
3307         'mamiya.co.uk',
3308         'vcd.mmvcd.com',
3309         'Monmouth College' => array('department.monm.edu'),
3310         'mountainjusticemedia.org',
3311         '*.mybbland.com',
3312         'mydlstore.com',
3313         '*.netboardz.com',
3314         'North Carolina A&T State University' => array(
3315                 'ncat.edu',
3316                 'my.ncat.edu',
3317                 'hlc.ncat.edu',
3318         ),
3319         'placetobe.org',
3320         'Naropa University' => array(
3321                 'naropa.edu',                   ///forum/
3322         ),
3323         'users.nethit.pl',
3324         'nightclubvip.net',
3325         'njbodybuilding.com',
3326         'nlen.org',
3327         'North Carolina School of Science and Mathematics' => array(
3328                 'neverland.ncssm.edu',  ///include/web/forum/
3329                 'grid.ncssm.edu',               ///ncssm_grid/
3330         ),
3331         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3332         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3333         'offtextbooks.com',
3334         'ofimatika.com',
3335         'olympiafoto.com',              ///images/
3336         'omakase-net',                  // iframe
3337         'omikudzi.ru',
3338         'openchemist.net',
3339         'palungjit.com',
3340         'pataphysics-lab.com',
3341         'paypaldev.org',
3342         'paullima.com',
3343         'perl.org.br',
3344         'pfff.co.uk',
3345         'pimpo.com',                    ///_old_site/
3346         'pix4online.co.uk',
3347         'plone.dk',
3348         'preform.dk',
3349         'privatforum.de',
3350         'publicityhound.net',
3351         'puppylinux.net',               ///news/content/counter/pages/
3352         'qea.com',
3353         'rbkdesign.com',
3354         'rehoboth.com',
3355         'rodee.org',
3356         'ryanclark.org',
3357         '*.reallifelog.com',
3358         'rkphunt.com',
3359         'rso-csp.org',                  ///bulletins/
3360         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3361         'sapphireblue.com',
3362         'saskchamber.com',
3363         'savevoorhees.org',
3364         'sdhmalenovice.cz',             //galerie/
3365         'selikoff.net',
3366         'serbisyopilipino.org',
3367         'setbb.com',
3368         'sharejesusinternational.com',
3369         'silver-tears.net',
3370         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3371         '.softpress.com',
3372         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3373         'fora.taniemilitaria.pl',       ///phpbb
3374         'tehudar.ru',
3375         'Tennessee Tech University' => array('manila.tntech.edu'),
3376         'thebluebird.ws',
3377         'theosis.org',
3378         '*.thoforum.com',
3379         'troms-slekt.com',
3380         'theedgeblueisland.com',
3381         'toyshop.com.tw',               // /images/sigui/
3382         'torontoplace.com',
3383         'chat.travlang.com',
3384         'trickropingbylassue.com',
3385         'Truman State University' => array('mathbio.truman.edu'),
3386         'tuathadedannan.org',
3387         'txgotg.com',
3388         'tzaneen.co.za',
3389         'ugeavisen.com',                ///style/
3390         'forums.ugo.com',
3391         'whole.cs.unibo.it',
3392         'The University of North Dakota' => array(
3393                 'learn.aero.und.edu',
3394                 'ez.asn.und.edu',
3395         ),
3396         'The University of Alabama' => array('bama.ua.edu'),
3397         'unisonscotlandlaw.co.uk',
3398         'University of California' => array('classes.design.ucla.edu'),
3399         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3400         'University of Northern Colorado' => array('unco.edu'),
3401         'University of North Carolina' => array(
3402                 'elm.cis.uncw.edu'      ///testBoinc/
3403         ),
3404         'University of Toronto' => array(
3405                 'environment.utoronto.ca',
3406                 'grail.oise.utoronto.ca',
3407                 'utsc.utoronto.ca',
3408         ),
3409         'University of Wisconsin' => array(
3410                 'einstein.phys.uwm.edu'
3411         ),
3412         'urgentclick.com',
3413         'vacant.org.uk',
3414         'Villa Julie College' => array('www4.vjc.edu'),
3415         'Vail Valley Foundation' => array('.vvf.org'),
3416         'wabson.org',
3417         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3418         'webarch.com',          // by WebArchitects (webarch at insync.net)
3419         'weehob.com',
3420         'West Virginia University Parkersburg' => array('wvup.edu'),
3421         'williamsburgrentals.com',
3422         'wolvas.org.uk',
3423         'wookiewiki.org',
3424         'xsgaming.com',                 // Jacked
3425         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3426         'Yahoo.com' => array(
3427                 'blog.360.yahoo.com',
3428                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3429         ),
3430         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3431         'youthpeer.org',
3432         '*.zenburger.com',
3433         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3434 );
3435
3436 // --------------------------------------------------
3437
3438 $blocklist['C'] = array(
3439
3440         // C: Sample setting of:
3441         // Exclusive spam domains
3442         //
3443         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3444         // affiliates, finance, sending viruses, malicious attacks to browsers,
3445         // and/or mixed ones
3446         //
3447         // Please notify us about this list with reason:
3448         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3449
3450         // C-1: Domain sets (seems to be) born to spam you
3451         //
3452         // All buziness-related spam
3453         //'.biz'
3454         //
3455         'admin at seekforweb.com' => array(
3456                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3457                 '.lovestoryx.com',
3458                 '.loveaffairx.com',
3459                 '.onmore.info',
3460                 '.scfind.info',
3461                 '.scinfo.info',
3462                 '.webwork88.info',
3463         ),
3464         'boss at bse-sofia.bg' => array(        // by Boris
3465                 '.htewbop.org',
3466                 '.kimm--d.org',
3467                 '.gtre--h.org',
3468                 '.npou--k.org',
3469                 '.bres--z.org',
3470                 '.berk--p.org',
3471                 '.bplo--s.org',
3472                 '.basdpo.org',
3473                 '.jisu--m.org',
3474                 '.kire--z.org',
3475                 '.mertnop.org',
3476                 '.mooa--c.org',
3477                 '.nake--h.org',
3478                 '.noov--b.org',
3479                 '.suke--y.org',
3480                 '.vasdipv.org',
3481                 '.vase--l.org',
3482                 '.vertinds.org',
3483         ),
3484         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3485                 '.aqq3.info',
3486                 '.axa00.info',
3487                 '.okweb11.org',
3488                 '.okweb12.org',
3489                 '.okweb13.org',
3490                 '.okweb14.org',
3491         ),
3492         'opezdol at gmail.com' => array(
3493                 '.informazionicentro.info',
3494                 '.notiziacentro.info',
3495         ),
3496         'SomethingGen' => array(
3497                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3498                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3499                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3500                 // by Lee Chang (nebucha at model-x.com)
3501                 '.adult-chat-world.info',       // by Lui
3502                 '.adult-chat-world.org',        // by Lui
3503                 '.adult-sex-chat.info',         // by Lui
3504                 '.adult-sex-chat.org',          // by Lui
3505                 '.adult-cam-chat.info',         // by Lui
3506                 '.adult-cam-chat.org',          // by Lui
3507                 '.dildo-chat.org',                      // by Lui
3508                 '.dildo-chat.info',                     // by Lui
3509                 // flirt-online.info is not CamsGen
3510                 '.flirt-online.org',            // by Lui
3511                 '.live-adult-chat.info',        // by Lui
3512                 '.live-adult-chat.org',         // by Lui
3513                 '.sexy-chat-rooms.info',        // by Lui
3514                 '.sexy-chat-rooms.org',         // by Lui
3515                 '.swinger-sex-chat.info',       // by Lui
3516                 '.swinger-sex-chat.org',        // by Lui
3517                 '.nasty-sex-chat.info',         // by Lui
3518                 '.nasty-sex-chat.org',          // by Lui
3519
3520                 '.camshost.info',                       // by Sergey
3521                 '.camdoors.info',                       // by Sergey
3522                 '.chatdoors.info',                      // by Sergey
3523
3524                 // 89.149.206.225 by Pronin
3525                 '.dorozhka.info',
3526                 '.kolonochka.info',
3527                 '.knizhechka.info',
3528                 '.krantik.info',
3529                 '.lebedi.info',
3530                 '.loshad.info',
3531                 '.pechenka.info',
3532                 '.porosenok.info',
3533                 '.indyushonok.info',
3534                 '.kotyonok.info',
3535                 '.kozlyonok.info',
3536                 '.magnoliya.info',
3537                 '.svinka.info',
3538                 '.svinya.info',
3539                 '.televizorchik.info',
3540                 '.tumbochka.info',
3541                 '.zherebyonok.info',
3542
3543                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3544
3545                 '.adult-cam-chat-sex.info',             // by Lee
3546                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3547                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3548                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3549                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3550                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3551                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3552                 '.sex-chat-porn-cam.info',              // by Lee
3553         ),
3554         'mital at topo20.org' => array( // by Marcello Italianore
3555                 '.trevisos.org',
3556                 '.topo20.org',
3557         ),
3558         'WellCams.com' => array(
3559                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3560                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3561                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3562         ),
3563         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3564                 '.besturgent.org',
3565                 '.googletalknow.org',
3566                 '.montypythonltd.org',
3567                 '.supersettlemet.org',
3568                 '.thepythonfoxy.org',
3569                 '.ukgamesyahoo.org',
3570                 '.youryahoochat.org',
3571         ),
3572         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3573                 '.dbsajax.org',
3574                 '.acgt2005.org',
3575                 '.gopikottoor.com',
3576                 '.koosx.org',
3577                 '.mmgz.org',
3578                 '.zhiyehua.net',
3579         ),
3580         'vdf at lovespb.com' => array(  // by Andrey
3581                 '.02psa.info',
3582                 '.1818u.org',
3583                 '.18ew.info',
3584                 '.43sexx.org',
3585                 '.56porn.org',
3586                 '.6discount.info',
3587                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3588                 '.78rus.info',
3589                 '.92ssex.org',          // "ForumGenerator"
3590                 '.93adult.org',         // "ForumGenerator"
3591                 '.aboutsr.info',
3592                 '.aboutzw.info',
3593                 '.all23.info',
3594                 '.allvdf.info',
3595                 '.buy-dge.info',
3596                 '.buypo.info',
3597                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3598                 '.cv83.info',
3599                 '.cvwifw.info',
3600                 '.dabouts.info',
3601                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3602                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3603                 '.free01sa.info',
3604                 '.frees1.info',
3605                 '.freexz.info',
3606                 '.ifree-search.org',
3607                 '.lovespb.info',
3608                 '.myso2.info',
3609                 '.nb74u.info',
3610                 '.ohhh2.info',
3611                 '.ol43.info',
3612                 '.olala18.info',
3613                 '.oursales.info',
3614                 '.pasian1.info',
3615                 '.pldk.info',
3616                 '.po473.info',
3617                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3618                 '.poz2.info',
3619                 '.qpf8j4d.info',
3620                 '.saleqw.info',
3621                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3622                 '.sexz18.info',
3623                 '.sexy69a.info',
3624                 '.shedikc.info',
3625                 '.spb78.info',
3626                 '.usacanadauk.info',
3627                 '.v782mks.info',
3628                 '.vny0.info',
3629                 '.wifes1.info',
3630                 '.xranvam.info',
3631                 '.zenitcx.info',
3632                 '.zxolala.info',
3633         ),
3634         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3635                 '.care01.info',
3636                 '.care02.info',
3637                 '.care03.info',
3638                 '.care04.info',
3639                 '.care05.info',
3640                 '.care06.info',
3641                 '.care07.info',
3642                 '.care08.info',
3643                 '.care09.info',
3644                 '.care10.info',
3645                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3646                 '.klastar01.info',
3647                 '.klastar02.info',
3648                 '.klastar03.info',
3649                 '.klastar04.info',
3650                 '.klastar05.info',
3651                 '.klastar06.info',
3652                 '.klastar07.info',
3653                 '.klastar08.info',
3654                 '.klastar09.info',
3655                 '.klastar10.info',
3656                 '.um20ax01.info',
3657                 '.um20ax02.info',
3658                 '.um20ax03.info',
3659                 '.um20ax04.info',
3660                 '.um20ax05.info',
3661                 '.um20ax06.info',
3662                 '.um20ax07.info',
3663                 '.um20ax08.info',
3664                 '.um20ax09.info',
3665                 '.um20ax10.info',
3666         ),
3667         'forrass at gmail.com' => array(        // by Ismail
3668                 '.zmh01.info',
3669                 '.zmh02.info',
3670                 '.zmh03.info',
3671                 '.zmh04.info',
3672                 '.zmh05.info',
3673                 '.zmh06.info',
3674                 '.zmh07.info',
3675                 '.zmh08.info',
3676                 '.zmh09.info',
3677                 '.zmh10.info',
3678         ),
3679         'Varsylenko Vladimir and family' => array(
3680                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3681                 // by David C. Lack (David.C.Lack at dodgeit.com)
3682                 // by Kuzma V Safonov (admin at irtes.ru)
3683                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3684                 // by LAURI FUNK (vvm_kz at rambler.ru)
3685
3686                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3687                 '.abrek.info',                          // by Petrov
3688                 '.allsexonline.info',           // by Varsylenko
3689                 '.d1rnow.info',                         // by Petrov
3690                 '.doxer.info',                          // Petrov
3691                 '.freeforworld.info',           // Varsylenko
3692                 '.goodworksite.info',           // Varsylenko
3693                 '.onall.info',                          // by Varsylenko
3694                 '.powersiteonline.info',        // by Varsylenko
3695                 '.rentmysite.info',                     // by Varsylenko
3696                 '.sexdrink.info',                       // by Petrov
3697                 '.siteszone.info',                      // by Varsylenko
3698                 '.sfup.info',                           // by Petrov
3699                 '.superfreedownload.info',      // by Varsylenko
3700                 '.superneeded.info',            // by Varsylenko
3701                 '.srup.info',                           // by Petrov
3702
3703                 // 66.235.185.143(*.svabuse.info)
3704                 '.accommodationwiltshire.com',  // by Petrov
3705                 '.levines.info',                        // by Petrov
3706                 '.sernost.info',                        // by Petrov
3707                 '.sexvideosite.info',           // by Petrov
3708                 '.vvsag.info',                          // by Petrov
3709
3710                 // 81.0.195.134
3711                 '.michost.info',                        // by LAURI
3712                 '.parther.info',                        // by LAURI
3713
3714                 // 88.214.202.100
3715                 '.gitsite.info',                        // by Petrov
3716                 '.organiq.info',                        // by Petrov
3717                 '.yoursitedh.info',                     // by Petrov
3718
3719                 // 217.11.233.58 by Petrov
3720                 '.mp3vault.info',
3721
3722                 // DNS time out or failed
3723                 '.bequeous.info',                       // by Davi
3724                 '.sopius.info',                         // by Kuzma
3725                 '.sovidopad.info',                      // by Kuzma
3726                 '.yerap.info',                          // by Kuzma
3727         ),
3728         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3729                 '.flywebs.com',
3730                 '.hostrim.com',
3731                 '.playbit.com',
3732         ),
3733         'webmaster at dgo3d.info' => array(     // by Son Dittman
3734                 '.bsb3b.info',
3735                 '.dgo3d.info',
3736                 '.dgo5d.info',
3737         ),
3738         'cooler.infomedia at gmail.com' => array(
3739                 '.diabetescarelink.com',
3740                 '.firstdebthelp.com',
3741         ),
3742         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3743                 '.pokah.lv',
3744                 '.astrons.com',
3745         ),
3746         'seocool at bk.ru' => array(    // by Skar
3747                 '.implex3.com',
3748                 '.implex6.info',
3749                 '.softprof.org',
3750         ),
3751         'Caslim.info' => array(
3752                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3753                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3754         ),
3755         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3756                 '.777-poker.biz',
3757                 '.porn-11.com',
3758         ),
3759         'Conto.pl' => array(
3760                 '.8x.pl',               // domena at az.pl
3761                 '.3x3.pl',              // by biuro at nazwa.pl
3762                 '.conto.pl',    // by biuro at nazwa.pl
3763                 '.guu.pl',              // by conto.pl (domena at az.pl)
3764                 '.xcx.pl',              // domena at az.pl
3765                 '.yo24.pl',             // domena at az.pl
3766         ),
3767         'mail at pcinc.cn' => array(
3768                 // Domains by Lin Zhi Qiang
3769                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3770
3771                 // 125.65.112.11
3772                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3773                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3774                 '.shoopivdoor.com',
3775
3776                 // 125.65.112.12
3777                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3778                 '.hosetaibei.com',
3779                 '.playsese.com',
3780
3781                 // 125.65.112.13
3782                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3783                 '.ahatena.com',
3784                 '.asdsdgh-jp.com',
3785                 '.conecojp.net',
3786                 '.game-oekakibbs.com',
3787                 '.geocitygame.com',
3788                 '.gsisdokf.net',
3789                 '.korunowish.com',
3790                 '.netgamelivedoor.com',
3791                 '.soultakerbbs.net',
3792                 '.yahoo-gamebbs.com',
3793                 '.ywdgigkb-jp.com',
3794
3795                 // 125.65.112.14
3796                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3797                 '.acyberhome.com',
3798                 '.bbs-qrcode.com',
3799                 '.gamesroro.com',
3800                 '.gameyoou.com',
3801                 '.gangnu.com',
3802                 '.goodclup.com',
3803                 '.lineage321.com',
3804                 '.linkcetou.com',
3805                 '.love888888.com',
3806                 '.ragnarok-bbs.com',
3807                 '.ragnarok-game.com',
3808                 '.rmt-navip.com',
3809                 '.watcheimpress.com',
3810
3811                 // 125.65.112.15
3812                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3813                 '.18girl-av.com',
3814                 '.aurasoul-visjp.com',
3815                 '.gamaniaech.com',
3816                 '.game-mmobbs.com',
3817                 '.gameslin.net',
3818                 '.gemnnammobbs.com',
3819                 '.gogolineage.net',
3820                 '.grandchasse.com',
3821                 '.jpragnarokonline.com',
3822                 '.jprmthome.com',
3823                 '.maplestorfy.com',
3824                 '.netgamero.net',
3825                 '.nothing-wiki.com',
3826                 '.ourafamily.com',
3827                 '.ragnarok-sara.com',
3828                 '.rmt-lineagecanopus.com',
3829                 '.rmt-ranloki.com',
3830                 '.rogamesline.com',
3831                 '.roprice.com',
3832                 '.tuankong.com',
3833                 '.twreatch.com',
3834
3835                 // 125.65.112.22
3836                 // The same IP: web013.cdnhost.cn
3837                 '.lzy88588.com',
3838                 '.ragnaroklink.com',
3839
3840                 // 125.65.112.24
3841                 '.rmtfane.com',
3842                 '.fc2weday.com',
3843                 '.nlftweb.com',
3844
3845                 // 125.65.112.27
3846                 '.i520i.com',
3847                 '.sunwayto.com',
3848
3849                 // 125.65.112.31
3850                 // The same IP: web016.cdnhost.cn
3851                 '.twyaooplay.com',
3852
3853                 // 125.65.112.32
3854                 // The same IP: web037.cdnhost.cn
3855                 '.emeriss.com',
3856                 '.raginfoy.com',
3857                 '.ragnarokgvg.com',
3858                 '.rentalbbs-livedoor.com',
3859                 '.romaker.com',
3860                 '.sagewikoo.com',
3861                 '.samples112xrea.com',
3862                 '.wiki-house.com',
3863
3864                 // 125.65.112.49
3865                 '.chaosx0.com',
3866
3867                 // 125.65.112.88
3868                 // The same IP: web015.cdnhost.cn
3869                 '.a-hatena.com',
3870                 '.biglobe-ne.com',
3871                 '.blogplaync.com',
3872                 '.din-or.com',
3873                 '.dtg-gamania.com',
3874                 '.fcty-net.com',
3875                 '.game-fc2blog.com',
3876                 '.gameurdr.com',
3877                 '.getamped-garm.com',
3878                 '.interzq.com',
3879                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3880                 '.luobuogood.com',
3881                 '.ragnarok-search.com',
3882                 '.rinku-livedoor.com',
3883
3884                 // 125.65.112.90
3885                 '.gtvxi.com',
3886
3887                 // 125.65.112.91
3888                 // The same IP: web004.cdnhost.cn
3889                 '.6828teacup.com',
3890                 '.blog-livedoor.net',
3891                 '.cityblog-fc2web.com',
3892                 '.deco030-cscblog.com',
3893                 '.imbbs2t4u.com',
3894                 '.k5dionne.com',
3895                 '.lineagejp-game.com',
3896                 '.mbspro6uic.com',
3897                 '.slower-qth.com',
3898                 '.wikiwiki-game.com',
3899
3900                 // 125.65.112.93
3901                 // The same IP: web022.cdnhost.cn
3902                 '.aaa-livedoor.net',
3903                 '.cityhokkai.com',              // web022.cdnhost.cn
3904                 '.fanavier.net',
3905                 '.geocitylinks.com',    // web022.cdnhost.cn
3906                 '.kuronowish.net',              // web022.cdnhost.cn
3907                 '.ro-bot.net',
3908
3909                 // 125.65.112.95
3910                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3911                 '.23styles.com',
3912                 '.aehatena-jp.com',
3913                 '.ameblog-jp.net',
3914                 '.antuclt.com',
3915                 '.blog-ekndesign.com',
3916                 '.d-jamesinfo.com',
3917                 '.editco-jp.com',
3918                 '.ezbbsy.com',
3919                 '.extd-web.com',
3920                 '.fotblong.com',
3921                 '.game62chjp.net',
3922                 '.gamegohi.com',
3923                 '.gamesmusic-realcgi.net',
3924                 '.gamesragnaroklink.net',
3925                 '.homepage-nifty.com',
3926                 '.ie6xp.com',
3927                 '.irisdti-jp.com',
3928                 '.jklomo-jp.com',
3929                 '.jpxpie6-7net.com',
3930                 '.lian-game.com',
3931                 '.lineage-bbs.com',
3932                 '.lineage1bbs.com',
3933                 '.livedoor-game.com',
3934                 '.litcan.com',
3935                 '.lovejpjp.com',
3936                 '.m-phage.com',
3937                 '.muantang.com',
3938                 '.plusd-itmedia.com',
3939                 '.runbal-fc2web.com',
3940                 '.saussrea.com',
3941                 '.tooalt.com',
3942                 '.toriningena.net',
3943                 '.yahoodoor-blog.com',
3944                 '.yy14-kakiko.com',
3945
3946                 // 125.65.112.137
3947                 '.clublineage.com',
3948
3949                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3950                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3951                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3952
3953                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3954                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3955
3956                 '.games-nifty.com',             // 255.255.255.255 now
3957                 '.homepage3-nifty.com', // 255.255.255.255 now
3958         ),
3959         'caddd at 126.com' => array(
3960                 '.chengzhibing.com',    // by chen gzhibing
3961                 '.jplinux.com',                 // by lian liang
3962                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3963                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3964                 '.tooplogui.com',               // by zibing cai
3965                 '.twsunkom.com',                // by guo zhi wei
3966                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3967         ),
3968         'nuigiym2 at 163.com' => array( // by fly bg
3969                 '.linainfo.net',                // Seems IP not allocated now
3970                 '.lineagalink.com',             // 220.247.157.99
3971                 '.lineagecojp.com',             // 61.139.126.10
3972                 '.ragnarokonlina.com',  // 220.247.158.99
3973         ),
3974         'aakin at yandex.ru' => array(
3975                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3976                 '.entirestar.com',
3977                 '.joppperl.info',
3978                 '.onlinedrugsdirect.com',
3979                 '.pilkazen.info',
3980                 '.superbuycheap.com',
3981                 '.supersmartdrugs.com',
3982                 '.thecheappillspharmacy.com',
3983                 '.topdircet.com',
3984         ),
3985         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3986                 '.tianmieccp.com',
3987                 '.xianqiao.net',
3988         ),
3989         'm.frenzy at yahoo.com' => array(       // by Michael
3990                 '.p5v.org',
3991                 '.j111.net',
3992                 '.searchhunter.info',
3993                 '.soft2you.info',
3994                 '.top20health.info',
3995                 '.top20ringtones.info',
3996                 '.top20travels.info',
3997                 '.v09v.info',
3998                 '.x09x.info',
3999                 '.zb-1.com',
4000         ),
4001         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
4002                 '.bingogoldenpalace.info',
4003                 '.ccarisoprodol.info',
4004                 '.ezxcv.info',
4005                 '.isuperdrug.com',
4006                 '.pharmacif.info',
4007                 '.pornsexteen.biz',
4008                 '.ugfds.info',
4009                 '.vviagra.info',
4010         ),
4011         'anatolsenator at gmail.com' => array(  // by Anatol
4012                 '.cheapestviagraonline.info',
4013                 '.buyphentermineworld.info'
4014         ),
4015         'webmaster at mederotica.com' => array(
4016                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
4017                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
4018                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4019                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4020         ),
4021         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4022                 '.auase.info',          // by ilemavyq7461 at techie.com
4023                 '.axeboxew.info',       // by zygeu220 at writeme.com
4024                 '.boluzuhy.info',       // by pikico5419 at post.com
4025                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4026                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4027                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4028                 '.exidiqe.info',        // by kufyca5475 at mail.com
4029                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4030                 '.gubiwu.info',         // by lywunef6532 at iname.com
4031                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4032                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4033                 '.jiuuz.info',          // by meqil6549 at mail.com
4034                 '.nudetar.info',        // by vohepafi3536 at techie.com
4035                 '.nipud.info',          // by bohox9872 at mindless.com
4036                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4037                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4038                 '.olasep.info',         // by lizon8506 at mail.com
4039                 '.oueuidop.info',       // by arytyb6913 at europe.com
4040                 '.oviravy.info',        // by amyuu3883 at london.com
4041                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4042                 '.ragibe.info',         // by ehome4458 at myself.com
4043                 '.ucazib.info',         // by gorare7222 at consultant.com
4044                 '.udaxu.info',          // by gubima4007 at usa.com
4045                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4046                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4047                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4048                 '.yvaxat.info',         // by koqun9660 at mindless.com
4049                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4050         ),
4051         'Carmodelrank.com etc' => array(
4052                 // by Brianna Dunlord (briasmi at yahoo.com)
4053                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4054                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4055                 '.carmodelrank.com',// by Brianna
4056                 '.cutestories.net',     // by Brianna
4057                 '.sturducs.com',
4058                 '.bestother.info',      // by Tim
4059                 '.premiumcasinogames.com',      // by Brianna)
4060                 '.yaahooo.info',        // by Alice
4061         ),
4062         'aliacsandr at yahoo.com' => array(
4063                 '.cubub.info',                          // "Free Web Hosting"
4064         ),
4065         'aliacsandr85 at yahoo.com' => array(
4066                 // by Dr. Portillo or Eva Sabina Lopez Castell
4067                 '.xoomer.alice.it',                     // "Free Web Hosting"
4068                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4069                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4070                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4071                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4072                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4073                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4074                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4075                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4076                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4077                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4078                 '.viagra-price.org',            // by Eva
4079                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4080                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4081         ),
4082         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4083         'Something-Gamble' => array(
4084                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4085                 '.atonlineroulette.com',                        // by Blaise Johns
4086                 '.atroulette.com',                                      // by Gino Sand
4087                 '.betting-123.com',                                     // by Joana Caceres
4088                 '.betting-i.biz',                                       // by Joaquina Angus
4089                 '.casino-challenge.com',                        // by Maren Camara
4090                 '.casino-gambling-i.biz',                       // by Giselle Nations
4091                 '.casino-italian.com',                          // by Holley Yan
4092                 '.casino123.net',                                       // by Ta Baines
4093                 '.casinohammamet.com',                          // by Inger Barhorst
4094                 '.casinoqz.com',                                        // by Berenice Snow
4095                 '.casinos-777.net',                                     // by Iona Ayotte
4096                 '.crapsok.com',                                         // by Devon Adair,
4097                 '.dcasinoa.com',                                        // by August Hawkinson
4098                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4099                 '.free-dvd-player.biz',                         // by Rosario Kidd
4100                 '.florida-lottery-01.com',                      // by Romeo Dillon
4101                 '.gaming-123.com',                                      // by Jennifer Byrne
4102                 '.kenogo.com',                                          // by Adriane Bell
4103                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4104                 '.onbaccarat.com',                                      // by Kassandra Dunn
4105                 '.online-experts.biz',                          // by Liberty Helmick
4106                 '.onlinepoker-123.com',                         // by Andrea Feaster
4107                 '.playpokeronline-123.com',                     // by Don Lenard
4108                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4109                 '.texasholdem123.com',                          // by Savion Lasseter
4110                 '.texasholdem-777.com',                         // by Savanna Lederman
4111                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4112                 '.the-craps-100.us',                            // by Lorrine Ripley
4113                 '.the-free-online-game-913.us',         // by Kanesha Clem
4114                 '.the-free-poker-1798.us',                      // by Elaina Witte
4115                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4116                 '.the-online-game-poker-1185.us',       // by Merna Bey
4117                 '.the-playing-black-jack.com',          // by Kristine Brinker
4118                 '.the-poker-1082.us',                           // by Kristofer Boldt
4119                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4120                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4121                 '.the-video-black-jack.com',            // by Jagger Godin
4122         ),
4123         'Something-Insurance' => array(
4124                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4125
4126                 // 0-9
4127                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4128                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4129                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4130                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4131                 '.18wkcf.com',                                  // by Lexy Bohannon
4132                 '.2001werm.org',                                // by Raphael Rayburn
4133                 '.2004heeparea1.org',                   // by Dinorah Andrews
4134                 '.21nt.net',                                    // by Jaida Estabrook
4135                 '.3finfo.com',                                  // by Damian Pearsall
4136                 '.3somes.org',                                  // by Mauro Tillett
4137                 '.453531.com',                                  // by Kurt Flannery
4138                 '.4freesay.com',                                // by Eloy Jones
4139                 '.5ssurvey.com',                                // by Annamarie Kowalski
4140                 '.8-f22.com',                                   // by Larraine Evers
4141                 '.9q.org',                                              // by Ami Boynton
4142
4143                 // A
4144                 '.a40infobahn.com',                             // by Amit Nguyen
4145                 '.a4h-squad.com',                               // by Ross Locklear
4146                 '.aac2000.org',                                 // by Randi Turner
4147                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4148                 '.acahost.com',                                 // by Milton Haberman
4149                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4150                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4151                 '.activel-learning-site.com',   // by Mateo Conn
4152                 '.ad-makers.com',                               // by Shemeka Arsenault
4153                 '.ada-information.org',                 // by Josef Osullivan
4154                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4155                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4156                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4157                 '.aerovac-hotpress.com',                // by Trey Marlow
4158                 '.agfbiosensors.com',                   // by Lionel Dempsey
4159                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4160                 '.affordablerealestate.net',    // by Season Otoole
4161                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4162                 '.ahouserefinance.com',                 // by Young Alley
4163                 '.akirasworld.com',                             // by Piper Sullivan
4164                 '.alderik-production.com',              // by Joan Stiles
4165                 '.alltechdata.com',                             // by Dom Laporte
4166                 '.amconllc.com',                                // by Syble Benjamin
4167                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4168                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4169                 '.angelandcrown.net',                   // by Claretta Najera
4170                 '.ankoralina.com',                              // by Eladia Demers
4171                 '.antiquegoldmine.com',                 // by Keena Marlow
4172                 '.aquinosotros.com',                    // by Nanci Prentice
4173                 '.architectionale.com',                 // by Wilbur Cornett
4174                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4175                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4176                 '.arefinancehome.com',                  // by Duane Doran
4177                 '.arefinancinghome.com',                // by Ike Laney
4178                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4179                 '.auction-emall-site.info',             // by Dayle Denman
4180                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4181                 '.auto-buy-rite.com',                   // by Asuncion Buie
4182                 '.axxinet.net',                                 // by Roberta Gasper
4183                 '.azimutservizi.com',                   // by Ethelene Brook
4184                 '.azstudies.org',                               // by Bernardina Walden
4185
4186                 // B
4187                 '.babtrek.com',                                 // by Simonette Mcbrayer
4188                 '.babycujo.com',                                // by Francisco Akers
4189                 '.bakeddelights.com',                   // by Dave Evenson
4190                 '.bbcart.com',                                  // by Lucio Hamlin
4191                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4192                 '.best-digital-phone.us',               // by Meghann Crockett
4193                 '.bjamusements.com',                    // by Lurlene Butz
4194                 '.blursgsu.com',                                // by Weston Killian
4195                 '.bookwide.net',                                // by Tequila Zacharias
4196                 '.boreholes.org',                               // by Flora Reed
4197                 '.breathingassociaiton.org',    // by Alfred Crayton
4198                 '.birdingnh.com',                               // by Donald Healy
4199                 '.bisdragons.org',                              // by Lupe Cassity
4200                 '.blcschools.net',                              // by Alycia Jolly
4201                 '.bronte-foods.com',                    // by Kary Pfeiffer
4202                 '.buckscountyneighbors.org',    // by Maile Gaffney
4203                 '.buffalofudge.com',                    // by Mable Whisenhunt
4204                 '.burlisonforcongress.com',             // by Luann King
4205                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4206                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4207
4208                 // C
4209                 '.cabanes-web.com',                             // by Vaughn Latham
4210                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4211                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4212                 '.checaloya.com',                               // by Susana Coburn
4213                 '.calvarychapelrgvt.org',               // by Karan Kittle
4214                 '.cameras-esite.info',                  // by Karlee Frisch
4215                 '.cancerkidsforum.org',                 // by Samson Constantino
4216                 '.ccchoices.org',                               // by Kenia Cranford
4217                 '.ccupca.org',                                  // by Evonne Serrano
4218                 '.celebratemehome.com',                 // by Soraya Tower
4219                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4220                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4221                 '.choose-shoes.net',                    // by Geoffrey Setser
4222                 '.churla.com',                                  // by Ollie Wolford
4223                 '.circuithorns.co.uk',                  // by Nathanial Halle
4224                 '.clanbov.com',                                 // by Donell Hozier
4225                 '.cnm-ok.org',                                  // by Thalia Moye
4226                 '.coalitioncoalition.org',              // by Ned Macklin
4227                 '.consoleaddicts.com',                  // by Dorla Hoy
4228                 '.counterclockwise.net',                // by Melynda Hartzell
4229                 '.codypub.com',                                 // by Mercedes Coffman
4230                 '.comedystore.net',                             // by Floy Donald
4231                 '.covsys.co.uk',                                // by Abby Jacey
4232                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4233                 '.craftybidders.com',                   // by Dannie Lazo
4234                 '.credit-card-finder.net',              // by Mellie Deherrera
4235                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4236                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4237                 '.ctwine.org',                                  // by Hailey Knox
4238
4239                 // D
4240                 '.dazyation.com',                               // by Louis Strasser
4241                 '.deepfoam.org',                                // by Ethelyn Southard
4242                 '.debt-fixing.com',                             // by Dagny Rickman
4243                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4244                 '.domainadoption.com',                  // by Breann Pappas
4245                 '.diannbomkamp.com',                    // by Russel Croteau
4246                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4247                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4248                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4249                 '.digital-cameras-esite.info',  // by Milan Jolin
4250                 '.dnstechnet.net',                              // by Tamera Oman
4251                 '.drivenbydata.org',                    // by Katherine Noyes
4252                 '.dtmf.net',                                    // by Micki Slayton
4253                 '.domainsfound.com',                    // by Blossom Lively
4254
4255                 // E
4256                 '.ecstacyabuse.net',                    // by Alana Knight
4257                 '.e-digital-camera-esite.info', // by Romaine Cress
4258                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4259                 '.eldorabusecenter.org',                // by Annabella Oneal
4260                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4261                 '.encaponline.com',                             // by Patrick Keel
4262                 '.ez-shopping-online.com',              // by Gail Bartlett
4263
4264                 // F
4265                 '.faithfulwordcf.com',                  // by Bart Weeks
4266                 '.fammedassoc.com',                             // by Joshua Nelson
4267                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4268                 '.f00k.org',                                    // by Leslie Chapman
4269                 '.foreignrealtions.org',                // by Krystal Hawley
4270                 '.fortwebsite.org',                             // by Kristina Motley
4271                 '.fotofirstdigital.com',                // by Tad Whitfield
4272                 '.foundationcommons.org',               // by Caryn Eskew
4273                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4274                 '.freaky-cheats.com',                   // by Al Klein
4275                 '.free--spyware.com',                   // by Nikki Contreras
4276                 '.french-home-finance-consultant.info', // by Santana Melton
4277                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4278
4279                 // G
4280                 '.gaintrafficfast.com',                 // by Lila Meekins
4281                 '.gaygain.org',                                 // by Shell Davila
4282                 '.gcaaa.com',                                   // by Vallie Jaworski
4283                 '.generalsysteme.com',                  // by Cale Vogel
4284                 '.generation4games.co.uk',              // by Sonya Graham
4285                 '.german-dictionary.us',                // by Rex Daniel
4286                 '.gilmerrec.com',                               // by Leighann Guillory
4287                 '.glenthuntly-athletics.com',   // by Julee Hair
4288                 '.glorybaskets.com',                    // by Lynette Lavelle
4289                 '.goconstructionloan.com',              // by Willis Monahan
4290                 '.gohireit.com',                                // by Bertha Metzger
4291                 '.godcenteredpeople.com',               // by Jaycee Coble
4292
4293                 // H
4294                 '.healthinsuranceem.com',               // by Justin Munson
4295                 '.hearthorizon.info',                   // by Kory Session
4296                 '.hegerindustrial.com',                 // by Toni Wesley
4297                 '.herzequip.com',                               // by Princess Dunkle
4298                 '.hglcms.org',                                  // by Gladwin Ng
4299                 '.hipanoempresa.com',                   // by Shannon Staub
4300                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4301                 '.horse-racing-result.com',             // by Rodney Reynolds
4302                 '.hueckerfamily.com',                   // by Hershel Sell
4303
4304                 // I
4305                 '.ilove2win.com',                               // by Lamont Dickerson
4306                 '.ilruralassistgrp.org',                // by Moises Hauser
4307                 '.imageonsolutions.com',                // by Porsche Dubois
4308                 '.infoanddatacenter.com',               // by Eva Okelley
4309                 '.islamfakta.org',                              // by Goldie Boykin
4310                 '.ithomemortgage.com',                  // by Adelaide Towers
4311                 '.iyoerg.com',                                  // by Madyson Gagliano
4312
4313                 // J
4314                 '.jeffaxelsen.com',                             // by Daphne William
4315                 '.jeffreyf.net',                                // by Vito Platt
4316                 '.johnmartinsreality.com',              // by Pamela Larry
4317                 '.johnsilvers.net',                             // by Silver Battaglia
4318
4319                 // K
4320                 '.kcgerbil.org',                                // by Marisa Thayer
4321                 '.kdc-phoenix.com',                             // by Salma Shoulders
4322                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4323                 '.kosove.org',                                  // by Darwin Schneider
4324
4325                 // L
4326                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4327                 '.letsgokayaking.net',                  // by Winnie Adair
4328                 '.libertycabs.com',                             // by Adela Bonds
4329                 '.liquor-store-cellar.info',    // by Hugh Pearson
4330                 '.locomojo.net',                                // by Marco Harmon
4331                 '.lodatissimo.com',                             // by Adrian Greeson
4332                 '.lsawc.org',                                   // by Lara Han
4333                 '.lycos-test.net',                              // by Rigoberto Oakley
4334
4335                 // M
4336                 '.macro-society.com',                   // by Venessa Hodgson
4337                 '.marthasflavorfest.com',               // by Ahmad Lau
4338                 '.martin-rank.com',                             // by Cathleen Crist
4339                 '.maryandfrank.org',                    // by Theodore Apodaca
4340                 '.masterkwonhapkido.com',               // by Misty Graham
4341                 '.maxrpm-demo.com',                             // by Cristal Cho
4342                 '.mechanomorphic.com',                  // by Stanford Crow
4343                 '.mepublishing.net',                    // by Karly Fleenor
4344                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4345                 '.metwahairports.com',                  // by Nan Kitchen
4346                 '.middle-eastnews.com',                 // by Tybalt Altmann
4347                 '.mikepelchy.com',                              // by Sherly Pearson
4348                 '.milpa.org',                                   // by Nelly Aguilera
4349                 '.modayun.com',                                 // by Camilla Velasco
4350                 '.moonstoneerp.com',                    // by Garret Salmon
4351                 '.morosozinho.com',                             // by Lenore Tovar
4352                 '.morphadox.com',                               // by Hung Zielinski
4353                 '.moscasenlared.com',                   // by Tera Gant
4354                 '.sdjavasig.com',                               // by Gia Swisher
4355                 '.mpeg-radio.com',                              // by Sincere Beebe
4356                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4357                 '.mtseniorcenter.org',                  // by Frederic Ortega
4358                 '.mysteryclips.com',                    // by Edward Ashford
4359
4360                 // N
4361                 '.naavs.org',                                   // by Yuridia Gandy
4362                 '.naval-aviation.org',                  // by Roselle Campo
4363                 '.navigare-ischia.com',                 // by Arielle Coons
4364                 '.ncredc.org',                                  // by Brenda Nye
4365                 '.neonmotorsports.com',                 // by Giovanna Vue
4366                 '.nf-ny.com',                                   // by Yadira Hibbard
4367                 '.ngfdyqva.com',                                // by Emiliano Samples
4368                 '.nicozone.com',                                // by Blaine Shell
4369                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4370                 '.npawny.org',                                  // by Willard Murphy
4371                 '.nysdoed.org',                                 // by Elric Delgadillo
4372                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4373                 '.nytech-ir.com',                               // by Adrien Beals
4374
4375                 // O
4376                 '.oadmidwest.com',                              // by Gavin Kaplan
4377                 '.oarauto.com',                                 // by Susann Merriman
4378                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4379                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4380                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4381                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4382                 '.online-pills-24x7.biz',               // by Aide Hallock
4383                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4384                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4385                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4386                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4387                 '.otterbayweb.com',                             // by Maxwell Irizarry
4388
4389                 // P
4390                 '.painting-technique.us',               // by Bryanna Tooley
4391                 '.pakamrcongress.com',                  // by Bryce Summerville
4392                 '.patabney.com',                                // by Kailyn Slone
4393                 '.parde.org',                                   // by Ellie Yates
4394                 '.participatingprofiles.com',   // by Jaelynn Meacham
4395                 '.partnershipconference.org',   // by Alla Floyd
4396                 '.pet-stars.com',                               // by Carmon Luevano
4397                 '.planning-law.org',                    // by Trista Holcombe
4398                 '.ppawa.com',                                   // by Evonne Scarlett
4399                 '.precisionfilters.net',                // by Faustina Fell
4400
4401                 // Q
4402                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4403                 '.quick-debt-consolidation.net',        // by Lala Marte
4404                 '.quicktvr.com',                                // by Vernell Crenshaw
4405
4406                 // R
4407                 '.radicalsolutions.org',                // by Reece Medlin
4408                 '.randallburgos.com',                   // by Bradly Villa
4409                 '.rcassel.com',                                 // by Janiah Gallant
4410                 '.rearchitect.org',                             // by Marcus Gaudet
4411                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4412                 '.reprisenashville.com',                // by Hester Khan
4413                 '.reptilemedia.com',                    // by Alicia Patel
4414                 '.resellers2000.com',                   // by Dedra Kennedy
4415                 '.reverse-billing.com',                 // by Lazaro Gluck
4416                 '.richcapaldi.com',                             // by Kya Haggard
4417                 '.richformissouri.com',                 // by Alanna Elston
4418                 '.robstraley.com',                              // by Leida Bartell
4419                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4420                 '.rpgbbs.com',                                  // by Leonel Peart
4421                 '.ruralbusinessonline.org',             // by Lynsey Watters
4422                 '.ruwomenscenter.org',                  // by Vince Mclemore
4423                 '.ryanjowens.com',                              // by Janine Smythe
4424
4425                 // S
4426                 '.sagarmathatv.org',                    // by Liam Funke
4427                 '.sakyathubtenling.org',                // by Liane Falgout
4428                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4429                 '.sandishaven.com',                             // by Lino Soloman
4430                 '.scienkeen.com',                               // by Liza Navarra
4431                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4432                 '.severios.com',                                // by Isa Steffen
4433                 '.sexual-hot-girls.com',                // by Viviana Bolton
4434                 '.shakespearelrc.com',                  // by Luciana Weaver
4435                 '.shashran.org',                                // by Adriel Humphries
4436                 '.shoes-shop.us',                               // by Austen Higginbotham
4437                 '.skagitvalleybassanglers.com', // by Necole Thiele
4438                 '.skinsciencesalon.com',                // by Nena Rook
4439                 '.smartalternative.net',                // by Nicki Lariviere
4440                 '.sml338.org',                                  // by Nickole Krol
4441                 '.smogfee.com',                                 // by Sienna Kimble
4442                 '.sneakers-e-shop.info',                // by Nikki Fye
4443                 '.spacewavemedia.com',                  // by Thanh Gast
4444                 '.softkernel.com',                              // by Nicol Hummer
4445                 '.stjoanmerrillville.com',              // by Hunter Beckham
4446                 '.strelinger.com',                              // by Arron Highsmith
4447                 '.striking-viking.com',                 // by Kylie Endsley
4448                 '.sunnydeception.org',                  // by Amaya Llora
4449                 '.sunzmicro.com',                               // by Goddard Arreola
4450                 '.sv-iabc.org',                                 // by Braden Buck
4451                 '.sykotick.com',                                // by Pierce Knecht
4452
4453                 // T
4454                 '.tbody.net',                                   // by Ormond Roman
4455                 '.the-pizzaman.com',                    // by Mario Ramsey
4456                 '.the-shoes.us',                                // by Alejandro Gaffney
4457                 '.theborneocompany.com',                // by Bryanna Tooley
4458                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4459                 '.thehomeschool.net',                   // by September Concepcio
4460                 '.thenewlywed.com',                             // by Allegra Marra
4461                 '.tigerspice.com',                              // by Denis Mosser
4462                 '.tnaa.net',                                    // by Jasmine Andress
4463                 '.top-finance-sites.com',               // by Maryann Doud
4464                 '.tradereport.org',                             // by Bettie Sisk
4465                 '.transmodeling.com',                   // by Martine Button
4466                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4467                 '.tsaoc.com',                                   // by Heriberto Mcfall
4468                 '.tsunamidinner.com',                   // by Nannie Richey
4469
4470                 // U
4471                 '.uhsaaa.com',                                  // by Risa Herbert
4472                 '.ultradeepfield.org',                  // by Bobby Ragland
4473                 '.umkclaw.info',                                // by Cammy Kern
4474                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4475                 '.usa-wolf.com',                                // by Jacklyn Morrill
4476                 '.usjobfair.com',                               // by Lorina Burchette
4477
4478                 // V
4479                 '.vacancesalouer.com',                  // by Loris Bergquist
4480                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4481                 '.valleylibertarians.org',              // by Lena Massengale
4482                 '.vanderbiltevents.com',                // by Gannon Krueger
4483                 '.vanwallree.com',                              // by Michelina Donahue
4484                 '.vcertificates.com',                   // by Hyun Lamp
4485                 '.vonormytexas.us',                             // by Suzette Waymire
4486
4487                 // W
4488                 '.washingtondc-areahomes.net',  // by Ailene Broome
4489                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4490                 '.wolsaoh.org',                                 // by Daniela English
4491                 '.worldpropertycatalog.com',    // by Aray Baxter
4492
4493                 // Y
4494                 '.yankee-merchants.com',                // by Jackson Hinojosa
4495                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4496                 '.yourdomainsource.com',                // by Deems Weingarten
4497
4498                 // Z
4499                 '.zkashan.com',                                 // by Evan Light
4500                 '.zockclock.com',                               // by Dorothea Guthrie
4501         ),
4502         'Something-Drugs' => array(
4503                 // Drugs / Pills / Diet
4504                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4505                 '.abdelghani-shady.com',                // by Elly Alton
4506                 '.bangbangfilm.com',                    // by Davin Chou
4507                 '.centroantequera.com',                 // by Keon Kwiatkowski
4508                 '.champagne-cellar.info',               // by Kandis Rizzo
4509                 '.chix0r.org',                                  // by Christoper Baird
4510                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4511                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4512                 '.fast-cash-01.com',                    // by Edgar Oliver
4513                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4514                 '.fn-nato.com',                                 // by Donny Dunlap
4515                 '.gqyinran.com',                                // by Alejandro Parks
4516                 '.juris-net.com',                               // by Rachelle Bravo
4517                 '.leftpencey.com',                              // by Aileen Ashby
4518                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4519                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4520                 '.palaceroyale.net',                    // by Brycen Stebbins
4521                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4522                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4523                 '.yukissushi.com',                              // by Donell Hozier
4524         ),
4525         'Something-Others' => array(
4526                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4527                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4528         ),
4529         'Something-NoApp' => array(
4530                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4531                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4532                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4533                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4534                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4535         ),
4536         'Cortez and family' => array(
4537                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4538                 '.dronadaarsujf.info',  // by Cortez
4539                 '.fromnananaref.info',  // by Cortez
4540                 '.goorkkjsaka.info',    // by Cortez
4541                 '.jkdfjjkkdfe.info',    // by Rico
4542                 '.jkllloldkjsa.info',   // by Cortez
4543                 '.nnjdksfornms.info',   // by Rico
4544                 '.mcmdkkksaoka.info',   // by Cortez
4545                 '.srattaragfon.info',   // by Cortez
4546                 '.yreifnnonoom.info',   // by Rico
4547                 '.zjajjsvgeuds.info',   // by Cortez
4548         ),
4549         'admin at ematuranza.com' => array(
4550                 '.ancorlontano.com',
4551                 '.dentroallago.com',
4552                 '.digiovinezza.com',
4553                 '.ematuranza.com',
4554                 '.ilfango.com',
4555                 '.nullarimane.com',
4556                 '.questaimmensa.com',
4557                 '.tentailvolo.com',
4558                 '.unatenerezza.com',
4559                 '.volgondilettose.com',
4560         ),
4561         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4562                 '.bid99df.info',
4563                 '.bj498uf.info',
4564                 '.edeuj84.info',
4565                 '.f4mfid.info',
4566                 '.g4vf03a.info',
4567                 '.j09j4r.info',
4568                 '.jv4r8hv.info',
4569                 '.k43sd3.info',
4570                 '.k4r84d.info',
4571                 '.k4rvda.info',
4572                 '.k4v0df.info',
4573                 '.k903os.info',
4574                 '.k9df93d.info',
4575                 '.kv94fd.info',
4576                 '.ksjs93.info',
4577                 '.l0ks03.info',
4578                 '.l9u3jc.info',
4579                 '.lv043a.info',
4580                 '.nh94h9.info',
4581                 '.m94r9d.info',
4582                 '.s87fvd.info',
4583                 '.v3k0d.info',
4584                 '.v4r8j4.info',
4585                 '.vf044s.info',
4586                 '.vj49rs.info',
4587                 '.vk498j.info',
4588                 '.u03jow.info',
4589         ),
4590         'Nikhil and Brian' => array(
4591                 // by Brian Dieckman (info at iudndjsdhgas.info)
4592                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4593                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4594                 '.ihfjeswouigf.info',   // by Brian, / was not found
4595                 '.iudndjsdhgas.info',   // by Brian, / was not found
4596                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4597                 '.jiatdbdisut.info',    // by Brian, / was not found
4598                 '.jkfierwoundhw.info',  // by Brian, / was not found
4599                 '.kfjeoutweh.info',             // by Brian, / was not found
4600                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4601                 '.oudjskdwibfm.info',   // by Brian, / was not found
4602                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4603                 '.itxbsjacun.info',             // by Nikhil, / was not found
4604                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4605                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4606                 '.najedncdcounrd.info', // by Nikhil, / was not found
4607                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4608                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4609                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4610                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4611                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4612                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4613                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4614                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4615                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4616         ),
4617         'wealth777 at gmail.com' => array(      // by Henry Ford
4618                 '.brutal-forced.com',
4619                 '.library-bdsm.com',
4620                 '.rape-fantasy.us',
4621         ),
4622         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4623                 '.purerotica.com',
4624                 '.richsex.com',
4625                 '.servik.net',
4626                 '.withsex.com',
4627         ),
4628         'dreamteammoney.com' => array(
4629                 '.dreamteammoney.com',  // dtmurl.com related
4630                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4631         ),
4632         'KLIK VIP Search and family' => array(
4633                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4634                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4635                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4636                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4637                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4638                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4639                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4640         ),
4641         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4642                 '.antivirs.info',
4643                 '.antivirus1.info',
4644                 '.antivirus2.info',
4645         ),
4646         'wasam at vangers.net and family' => array(
4647
4648                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4649                 '.bahatoca.org',
4650                 '.digestlycos.org',
4651                 '.educativaanale.info',
4652                 '.guildstuscan.org',
4653                 '.isaakrobbins.info',
4654                 '.isfelons.org',
4655                 '.lvwelevated.org',
4656                 '.macphersonaca.org',
4657                 '.markyaustrian.org',
4658                 '.michelepug.org',
4659                 '.opalbusy.info',
4660                 '.quijotebachata.info',
4661                 '.salthjc.info',
4662                 '.shogunnerd.info',
4663                 '.solarissean.org',
4664                 '.sparkgsx.info',
4665                 '.tarzanyearly.org',
4666                 '.tulabnsf.org',
4667                 '.vaccarinos.org',
4668
4669                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4670                 '.e2007.info',
4671                 '.cmoss.info',
4672
4673                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4674                 '.finddesk.org',
4675                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4676                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4677                 '.rcatalog.org',
4678                 '.sbitzone.org',
4679
4680                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4681                 '.cheapns.org',
4682                 '.my-top.net',
4683                 '.sfind.net',
4684                 '.sspot.net',
4685                 '.suvfind.info',
4686
4687                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4688                 '.trumber.com',
4689
4690                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4691                 '.blogduet.org',
4692                 '.carelf.info',
4693                 '.cmagic.org',
4694                 '.cspell.org',
4695                 '.dspark.org',
4696                 '.dtonic.org',
4697                 '.mcharm.info',
4698                 '.mslook.info',
4699                 '.phpdinnerware.info',
4700                 '.rnation.org',
4701                 '.uzing.org',
4702
4703                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4704                 '.allbar.info',
4705                 '.allersearch.org',
4706                 '.allzoom.org',
4707                 '.dynall.org',
4708                 '.fastopia.org',
4709                 '.offasfast.info',
4710                 '.rblast.org',
4711                 '.rchistes.info',
4712                 '.rette.org',
4713                 '.shufflequince.org',
4714                 '.suvlook.org',
4715
4716                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4717                 '.290cabeza.org',
4718                 '.bossierpainted.org',
4719                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4720                 '.definekonica.info',   // Admin: tvaals at vangers.net
4721                 '.gradetelemundo.info',
4722                 '.hydraulickin.info',
4723                 '.indicadorestmj.info',
4724                 '.keeleykincaid.org',
4725                 '.kleenbowser.info',
4726                 '.pipnickname.info',
4727                 '.pacolily.org',
4728                 '.redeemtrabalho.info',
4729                 '.scanmakerchua.info',
4730                 '.titanmessina.info',
4731                 '.tragratuit.org',
4732                 '.yeareola.info',
4733         ),
4734         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4735                 '.canadianmedsworld.info',      // 84.252.133.112
4736                 '.tabsdrugstore.info',          // 84.252.133.114
4737                 '.tabsstore.info',                      // 84.252.133.114
4738                 '.topcholesterol.info',         // 84.252.133.132
4739         ),
4740         'be.cx' => array(
4741                 '.be.cx',
4742                 '.ca.cx',
4743         ),
4744         'john780321 at yahoo.com' => array(     // by John  Brown
4745                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4746                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4747                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4748         ),
4749         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4750                 '.bertela.info',
4751                 '.forblis.info',
4752                 '.frenallo.info',
4753                 '.goyahoo.info',
4754                 '.herbak.info',
4755                 '.kiokast.info',
4756                 '.nerenok.info',
4757                 '.pestgets.info',
4758                 '.snukker.info',
4759                 '.thegetspons.info',
4760         ),
4761         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4762                 '.bobop.info',
4763                 '.kwwwe.info',
4764                 '.piikz.info',
4765                 '.moosm.info',
4766                 '.vvvw.info',
4767         ),
4768         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4769                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4770                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4771                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4772                 '.jplingood.com',       // 125.65.112.15
4773                 '.linenew.com',         // 203.191.148.96
4774                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4775                 '.yzlin.com',           // 220.162.244.36
4776         ),
4777         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4778                 '.1111mb.com',
4779                 '.2sex18.com',
4780                 '.69porn1.com',
4781         ),
4782         'ECTechnology' => array(
4783                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4784                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4785                 '.automouse.jp',
4786         ),
4787         'lyqz at 21cn.com' => array(
4788                 '.japangame1.com',
4789                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4790                 '.livedoor1.com',
4791                 '.ragnarokonline1.com',
4792                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4793         ),
4794         'kingrou at hotmail.com' => array(      // by yangjianhe
4795                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4796                 '.453787.com',
4797         ),
4798         'anpaul541000 at 163.com' => array(     // by su qiuqing
4799                 '.cetname.com',                 // 222.77.185.87
4800                 '.jpgamer.net',                 // 220.247.157.106
4801                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4802                 '.lovejptt.com',                // 222.77.185.87
4803                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4804                 '.playncsoft.net',              // 220.247.157.106
4805         ),
4806         'abc00613 at 163.com' => array( // by guo yong
4807                 '.avtw1068.com',                // 64.74.223.11
4808                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4809                 '.djkkk66990.com',              // 68.178.232.99
4810                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4811         ),
4812         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4813                 '.cmonfofo.com',
4814                 '.discutbb.com',
4815         ),
4816         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4817                 '.preca.info',
4818                 '.skiaggi.info',
4819                 '.scrianal.info',
4820                 '.tageom.info',
4821         ),
4822         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4823                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4824                 '.inpros.net',                  // 202.181.98.79
4825                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4826         ),
4827         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4828                 '.ec51.com',
4829                 '.ec51.net',
4830         ),
4831         'abbevillelaties at yahoo.fr etc' => array(
4832                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4833                 '.ringtones-rate.com',
4834                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4835                 '.special-ringtones.net',
4836         ),
4837         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4838                 '.1sgsc.info',
4839                 '.3h4r89h.info',
4840                 '.3v44dd.info',
4841                 '.6rfuh6.info',
4842                 '.84hd8.info',
4843                 '.94bui89.info',
4844                 '.agysb3.info',
4845                 '.asdjhs.info',
4846                 '.bcvnrth.info',
4847                 '.bheb4r.info',
4848                 '.bhiuno.info',
4849                 '.biug7g.info',
4850                 '.bjb5f4.info',
4851                 '.bob8g7g.info',
4852                 '.br89bdd.info',
4853                 '.bsa3h.info',
4854                 '.bsieb8.info',
4855                 '.basbiubf.info',
4856                 '.bobwwfs2.info',
4857                 '.ciuv9t.info',
4858                 '.dbmdx4.info',
4859                 '.dbrjms.info',
4860                 '.dbtcm.info',
4861                 '.dff9ghu.info',
4862                 '.dfshbb.info',
4863                 '.dgd4ffdh.info',
4864                 '.dh3ge.info',
4865                 '.duc86jh.info',
4866                 '.ergth45.info',
4867                 '.f78bf7ffb.info',
4868                 '.gbdfbo4.info',
4869                 '.ger45.info',
4870                 '.gnvnrrg.info',
4871                 '.h47he7.info',
4872                 '.h488hbd4.info',
4873                 '.hd72b94.info',
4874                 '.he74b7.info',
4875                 '.hfujfnr.info',
4876                 '.husdhd42.info',
4877                 '.hbwje.info',
4878                 '.itg87gji.info',
4879                 '.iugiougiuh.info',
4880                 '.jhd4f4aa.info',
4881                 '.jshd73.info',
4882                 '.krhpgd.info',
4883                 '.lyihjn.info',
4884                 '.nfyjnfj.info',
4885                 '.oihbv.info',
4886                 '.os44fvs.info',
4887                 '.sdfsd3.info',
4888                 '.sdiug4.info',
4889                 '.sdkufhh.info',
4890                 '.sdugb4f.info',
4891                 '.skdbf.info',
4892                 '.sipiv78.info',
4893                 '.sudbfb.info',
4894                 '.tymbbmy.info',
4895                 '.uilhjk.info',
4896                 '.vi87vub.info',
4897                 '.vfuyf87f.info',
4898                 '.viyvvj877.info',
4899                 '.w7fc8eu.info',
4900                 '.wefg43g.info',
4901                 '.xbrch78e.info',
4902                 '.ywsfu.info',
4903                 '.zxcbiv.info',
4904         ),
4905         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4906                 '.abofios.info',
4907                 '.amlekfn.info',
4908                 '.amlkdoie.info',
4909                 '.amkslewq.info',
4910                 '.alemfu.info',
4911                 '.aloweks1.info',
4912                 '.alposd3.info',
4913                 '.bamhpb.info',
4914                 '.bhjkb.info',
4915                 '.bjqnj.info',
4916                 '.cvcxcbhpr.info',
4917                 '.czoypaiat.info',
4918                 '.dbpmgc.info',
4919                 '.dgvogrxs.info',
4920                 '.dldksf.info',
4921                 '.dlor6za.com',
4922                 '.dmkoiew.info',
4923                 '.eewrefr.info',
4924                 '.eladne.info',
4925                 '.elksem.info',
4926                 '.elwpod.info',
4927                 '.emlwkdnr.info',
4928                 '.esgmyqk.info',
4929                 '.fauqv.info',
4930                 '.fgxkgy.info',
4931                 '.fhryns.info',
4932                 '.fj38n4g.info',
4933                 '.fjnesal.info',
4934                 '.fmkfoe.info',
4935                 '.fqkcfldtr.info',
4936                 '.fwcigpdwz.info',
4937                 '.fyhik.info',
4938                 '.glrkje.info',
4939                 '.gwkslfq.info',
4940                 '.gwjracvh.info',
4941                 '.hihopepe.info',
4942                 '.hwlyggbkw.info',
4943                 '.hmwbfw.info',
4944                 '.hthyeb.info',
4945                 '.iaofkyaw.info',
4946                 '.uldkxuiw.info',
4947                 '.is7c6w4.info',
4948                 '.ivuddhdk.info',
4949                 '.jgfndjem.info',
4950                 '.jgmdlek.info',
4951                 '.jkrnvmpad.info',
4952                 '.jqujn.info',
4953                 '.jvgmmba.info',
4954                 '.kbaur.info',
4955                 '.kgjindptv.info',
4956                 '.kleo7s9.info',
4957                 '.lezfgam.info',
4958                 '.lfaasy.info',
4959                 '.ljpdjki.info',
4960                 '.lmnpis.info',
4961                 '.lpzcu2f.info',
4962                 '.lrptn.info',
4963                 '.lursqt.info',
4964                 '.mgkabviil.info',
4965                 '.mhtknjyt.info',
4966                 '.mksuuku.info',
4967                 '.mkyky.info',
4968                 '.mloaisn.com',
4969                 '.mlsiknd.info',
4970                 '.mthqz.info',
4971                 '.nnooq.info',
4972                 '.nohhylvc.info',
4973                 '.nuprndsye.info',
4974                 '.nsoelam.info',
4975                 '.nykobczv.info',
4976                 '.nzuhli.info',
4977                 '.odyqzgylr.info',
4978                 '.oidiau.info',
4979                 '.oitzkw.info',
4980                 '.okdmrpz.info',
4981                 '.ooinziti.info',
4982                 '.ortqr.info',
4983                 '.osmkpnekv.info',
4984                 '.ozkzfih.info',
4985                 '.p3ix8wc.com',
4986                 '.piwyt.info',
4987                 '.pfkijrm.info',
4988                 '.pjktcragi.info',
4989                 '.pleoz.info',
4990                 '.plvqm73.info',
4991                 '.pqyrem.info',
4992                 '.qipgqd.info',
4993                 '.qlewixu.com',
4994                 '.qmlskme.info',
4995                 '.qtuff.info',
4996                 '.quoga.info',
4997                 '.quqz.info',
4998                 '.qzxuw.info',
4999                 '.rcaidegp.info',
5000                 '.rlkmdi.info',
5001                 '.rnsoiov.info',
5002                 '.rnwlams.info',
5003                 '.rprgkgqld.info',
5004                 '.rubqvxrn.info',
5005                 '.spqxstl.info',
5006                 '.syckoqjql.info',
5007                 '.tbirb.info',
5008                 '.thalc34.info',
5009                 '.tiabq.info',
5010                 '.tszzpjr.info',
5011                 '.tyjdyn.info',
5012                 '.twgugpns.info',
5013                 '.uaezrqp.info',
5014                 '.udlkasu.info',
5015                 '.uejncyf.info',
5016                 '.ukvflb.info',
5017                 '.ugsuv.info',
5018                 '.ukhgpcp.info',
5019                 '.urprzn.info',
5020                 '.uuhememkw.info',
5021                 '.yalc7en.info',
5022                 '.ybuid.info',
5023                 '.yhdkgfob.info',
5024                 '.ymenq.info',
5025                 '.ynlyb.info',
5026                 '.vieatlubk.info',
5027                 '.vltcaho.info',
5028                 '.wlamsiek.info',
5029                 '.wlerp.info',
5030                 '.wlmtshzi.info',
5031                 '.wmlkams.info',
5032                 '.wprqd.info',
5033                 '.wpyspszi.info',
5034                 '.xdscc.info',
5035                 '.xdvy.info',
5036                 '.xeypku.info',
5037                 '.xsrxh.info',
5038                 '.xwjyrpfe.info',
5039                 '.yxcqw.info',
5040                 '.zhbktrh.info',
5041                 '.zspepn.info',
5042                 '.zsxtz.info',
5043         ),
5044         'survi at poczta.fm and smiley' => array(
5045                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5046                 '.ppert.info',
5047                 '.pperta.info',
5048                 '.pperts.info',
5049                 '.pprtuis.info',
5050                 '.13iuey.info',         // ":>"
5051                 '.13jkhs.info',
5052                 '.13lksa.info',
5053                 '.13rxtx.info',
5054                 '.13slkd.info',
5055                 '.13zaer.info',
5056         ),
5057         'admin at esemeski.com' => array(       // by Jan Kalka
5058                 '.kxils.info',
5059                 '.kuaph.info',
5060                 '.lncdc.info',
5061                 '.lsqpd.info',
5062                 '.mczed.info',
5063                 '.npous.info',
5064                 '.obgju.info',
5065         ),
5066         'LiquidNetLimited.com' => array(
5067                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5068
5069                 // FateBack.com related
5070                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5071                 '.bebto.com',
5072                 '.fateback.com',
5073                 '.undonet.com',
5074                 '.yoll.net',
5075                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5076
5077                 // 50webs.com                   // 64.72.112.10
5078                 // dns2.50webs.com              // 64.72.112.11
5079                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5080                 // dns2.freehostia.com  // 64.72.112.13
5081                 // serv3.freehostia.com // 64.72.112.14
5082                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5083                 // mail.50webs.com              // 64.72.112.26
5084                 // supremecenter41.com  // 64.72.112.52
5085                 // 50webs2.50webs.com   // 64.72.112.89
5086                 // supremecenter39.com  // 64.72.112.103
5087
5088                 // by LiquidNet Ltd. (support at propersupport.com)
5089                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5090                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5091                         'duoservers.com',               // 216.65.1.130
5092
5093                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5094         ),
5095         'domains at agava.com' => array(
5096                 '.h18.ru',
5097                 '.hut1.ru',
5098         ),
5099         'wlmx009 at hotmail.com' => array(
5100                 '.123lineage.com',
5101                 '.ff11-info.com',
5102                 '.lastlineage.com',
5103                 '.lineage2-ol.com',
5104                 '.lineage2006.com',
5105                 '.lineagefirst.com',
5106         ),
5107         'Zettahost.com' => array(
5108                 '.atspace.biz',         // sales at zettahost.com
5109                 '.atspace.com',         // abuse at zettahost.com
5110                 '.atspace.name',        // NS atspace.com
5111                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5112                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5113         ),
5114         'hlq9814 at 163.com' => array(
5115                 '.kotonohax.com',               // by ling bao
5116                 '.ragnarox.mobi',               // by lin bao, *.exe download
5117                 '.rokonline-jp.com',    // by hang long
5118         ),
5119         '77ch.jp' => array(
5120                 '.77ch.jp',
5121                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5122         ),
5123         'serchportal at mail.ru' => array(      // by Namu Adin
5124                 '.43fert.info',
5125                 '.belis.info',
5126                 '.bonu.info',
5127                 '.chelsite.info',
5128                 '.chparael.info',
5129                 '.cool9f.info',
5130                 '.dada2.info',
5131                 '.dorplanete.info',
5132                 '.dormonde.info',
5133                 '.dorprojet.info',
5134                 '.faciledor.info',
5135                 '.fastsearchgroup.info',
5136                 '.gerta0.info',
5137                 '.getse.info',
5138                 '.gopvl.info',
5139                 '.knopki.info',
5140                 '.propidor.info',
5141                 '.quicksearchnet.info',
5142                 '.ret5.info',
5143                 '.slimfastsearch.info',
5144                 '.virtualpvl.info',
5145                 '.vpvla.info',
5146                 '.xjdor.info',
5147                 '.zhopki.info',
5148         ),
5149         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5150                 '*.444mb.com',          // Free hosting
5151                 'urlnip.com',           // Redirection
5152         ),
5153         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5154                 '.1fasttimesatnau.info',
5155                 '.1freecybersex.info',
5156                 '.1freexxxcomics.info',
5157                 '.1fuckingmywife.info',
5158                 '.1pornpreview.info',
5159                 'www.ru',                                       // by (service at demos.ru), redirection
5160         ),
5161         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5162                 '.adultschat.info',
5163                 '.livecamonline.info',
5164                 '.webcam4u.info',
5165                 '.younghot.info',
5166         ),
5167         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5168                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5169
5170                 // 209.51.196.242
5171                 '.22web.net',
5172                 '.2kool4u.net',
5173                 '.9skul.com',
5174                 '.alojalo.info',
5175                 '.byet.net',
5176                 '.byethost2.com',
5177                 '.byethost3.com',
5178                 '.byethost4.com',
5179                 '.byethost5.com',
5180                 '.byethost6.com',
5181                 '.byethost7.com',
5182                 '.byethost8.com',
5183                 '.byethost9.com',
5184                 '.byethost10.com',
5185                 '.byethost11.com',
5186                 '.byethost12.com',
5187                 '.byethost13.com',
5188                 '.byethost14.com',
5189                 '.byethost15.com',
5190                 '.byethost16.com',
5191                 '.byethost17.com',
5192                 '.byethost18.com',
5193                 '.headshothost.net',
5194                 '.hostwq.net',
5195                 '.mega-file.net',
5196                 '.truefreehost.com',
5197
5198                 '.ifastnet.com',        // 209.51.196.243
5199
5200                 // 209.190.16.82(mx1.byet.org)
5201                 '.1sthost.org',
5202                 '.4sql.net',
5203                 '.byet.org',
5204                 '.hyperphp.com',
5205                 '.kwikphp.com',
5206                 '.my-php.net',
5207                 '.my-place.us',
5208                 '.my-webs.org',
5209                 '.netfast.org',
5210                 '.php0h.com',
5211                 '.php1h.com',
5212                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5213                 '.phpnet.us',
5214                 '.prohosts.org',
5215                 '.pro-php.org',
5216                 '.prophp.org',
5217                 '.sprinterweb.net',
5218                 '.swiftphp.com',
5219                 '.xlphp.net',
5220
5221                 // 209.190.16.83(mx2.byet.org)
5222                 '.instant-wiki.net',
5223
5224                 // 209.190.16.84(mx3.byet.org)
5225
5226                 // 209.190.16.85(mx4.byet.org)
5227                 '.instant-blog.net',
5228                 '.instant-forum.net',
5229
5230                 '.byethost.com',                        // 209.190.18.138
5231         ),
5232         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5233                 '.analmoviesite.info',
5234                 '.bestgirlssex.info',
5235                 '.boxvagina.info',
5236                 '.cyberlivegirls.info',
5237                 '.hotredgirls.info',
5238                 '.forsexlove.info',
5239                 '.hotnudezone.info',
5240                 '.hotredpussy.info',
5241                 '.lesbians-live.info',
5242                 '.lesbians-on-cam.info',
5243                 '.onlinegirlssite.info',
5244                 '.sexloveonline.info',
5245                 '.teensexcard.info',
5246                 '.teensexdirect.info',
5247                 '.topnudesite.info',
5248                 '.vaginafree.info',
5249                 '.webcam-show.info',
5250                 '.webcamshow.info',
5251                 '.youngsexchat.info',
5252                 '.yourcumshot.info',
5253         ),
5254         'stocking.club at gmail.com' => array(
5255                 '.adulthotmodels.com',          // by David Zajwzran
5256                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5257                 '.cash-call.info',                      // by David Theissen
5258                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5259                 '.cheap-online-viagra.info',    // by David Theissen
5260                 '.drugcleansing.net',           // by David Zajwzran
5261                 '.men-health-zone.com',         // by David Theissen
5262                 '.purchase-viagra.info',        // by David Theissen
5263                 '.realdrunkengirls.biz',        // by David Theissen
5264                 '.sextoyslife.com',                     // by David Zajwzran
5265                 '.sexysubjects.info',           // by David Zajwzran
5266                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5267                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5268                 '.travelcardsite.info',         // by David Theissen
5269         ),
5270         'lustiq at p5com.com' => array(
5271                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5272                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5273         ),
5274         'web at 6jy.com' => array(
5275                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5276                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5277         ),
5278         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5279                 '.auto-fgen.info',
5280                 '.fast-marketing.info',
5281                 '.from-usa.info',
5282                 '.generic-pharm.info',
5283                 '.pharm-directory.info',
5284                 '.popular-people.info',
5285                 '.safe-health.info',
5286                 '.star-celebrities.info',
5287                 '.super-home-biz.info',
5288                 '.top5-auto.info',
5289                 '.top5-cars.info',
5290                 '.vip-furniture.info',
5291                 '.vip-pc.info',
5292                 '.vip-pets.info',
5293         ),
5294         'abuse at search-store.org' => array(
5295                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5296         ),
5297         'Leading Edge Marketing Inc.' => array(
5298                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5299                 '.abemedical.com',
5300                 '.attractwomennow.com',
5301                 '.bettersexmall.com',
5302                 '.buymaxoderm.com',
5303                 '.buyvprx.com',
5304                 '.genf20.com',
5305                 '.infinityhealthnews.com',
5306                 '.istnewsletter.com',
5307                 '.leadingedgecash.com',
5308                 '.leadingedgeherbals.com',
5309                 '.leadingedgevipsonly.com',
5310                 '.lecash.com',
5311                 '.leminfo.com',
5312                 '.proextendersystem.com',
5313                 '.provestra.com',
5314                 '.semenax.com',
5315                 '.shavenomore.com',
5316                 '.theedgenewsletter.com',
5317                 '.vigorelle.com',
5318                 '.vigrx.com',
5319                 '.vigrxplus.com',
5320                 '.wbstnewsletter.com',
5321         ),
5322         'clickx at bk.ru' => array(     // by Alexey Enrertov
5323                 '.coolget*.info' =>
5324                         '#^(?:.*\.)?' . 'coolget' .
5325                         '(?:bus|find|news|php|place|post|srch)' .
5326                         '\.info$#',
5327                 '.coolgirl*.info' =>
5328                         '#^(?:.*\.)?' . 'coolgirl' .
5329                         '(?:apple|fish|search)' .
5330                         '\.info$#',
5331                 '.coolmeet*.info' =>
5332                         '#^(?:.*\.)?' . 'coolmeet' .
5333                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5334                         '\.info$#',
5335                 '.cool**.info' =>
5336                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5337                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5338                         '\.info$#',
5339                 '.freseasy*.info' =>
5340                         '#^(?:.*\.)?' . 'freseasy' .
5341                         '(?:apple|click|find|fish|post|search)' .
5342                         '\.info$#',
5343                 '.fres**.info' =>
5344                         '#^(?:.*\.)?' .
5345                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5346                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5347                         '\.info$#',
5348                         // These are not found yet:
5349                         // fresgirlsrch.info
5350                         // fresadultapple.info
5351                         // fresadultclick.info
5352                         // frestheplace.info
5353
5354                 // 66.232.113.44
5355                 '.nuhost.info',
5356                 '.susearch.info',
5357
5358                 // 66.232.126.74(hv94.steephost.com)
5359                 '.dilej.com',
5360                 '.fyvij.com',
5361                 '.howus.com',
5362                 '.jisyn.com',
5363                 '.kaxem.com',
5364                 '.mihug.com',
5365                 '.mobyb.com',
5366                 '.qidat.com',
5367                 '.qihek.com',
5368                 '.ryzic.com',
5369                 '.sasuv.com',
5370                 '.tuquh.com',
5371                 '.vehyq.com',
5372                 '.wezid.com',
5373                 '.wifuj.com',
5374                 '.xijyt.com',
5375                 '.zuqyn.com',
5376
5377                 '.mosugy.com',
5378         ),
5379         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5380                 '.hitsearching.info',
5381                 '.hugeamountdata.info',
5382                 '.megafasthost.info',
5383                 '.real-big-host.info',
5384                 '.search4freez.info',
5385                 '.yasech.info',
5386
5387                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5388                 '.bymire.com',
5389
5390                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5391                 '.ligiwa.com',
5392
5393                 '.mubeho.com',
5394         ),
5395         'ice--man at mail.ru related' => array(
5396                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5397                 '.bestcreola.com',
5398                 '.crekatierra.com',
5399                 '.creolafire.com',
5400                 '.crolik.com',
5401                 '.croller.cn',
5402                 '.ecrmx.com',
5403                 '.eflashpoint.com',
5404                 '.exoticmed.com',
5405                 '.feelview.com',
5406                 '.greatexotic.com',
5407                 '.icrtx.com',
5408                 '.icyhip.com',
5409                 '.icyiceman.com',
5410                 '.icypopular.com',
5411                 '.iflashpoint.com',
5412                 '.justmdx.com',
5413                 '.kiliusgroup.com',
5414                 '.klickerr.com',
5415                 '.klickerrworld.com',
5416                 '.kreolic.com',
5417                 '.margansitio.com',
5418                 '.margantierra.com',
5419                 '.mimargan.com',
5420                 '.oilkeys.com',
5421                 '.planetmdx.com',
5422                 '.thekeyse.com',
5423                 '.viewgreat.com',
5424                 '.yourcreola.com',
5425
5426                 // 69.46.23.48
5427                 '.bestkilius.com',
5428                 '.crekadirecto.com',
5429                 '.getflashsite.com',
5430                 '.sucreka.com',
5431                 '.superkilius.com',
5432
5433                 // 69.46.23.48 by bing-16 at ftunez.org
5434                 '.bovorup.cn',
5435                 '.litotar.cn',
5436                 '.nihydec.cn',
5437
5438                 // 66.232.112.175 by bing-32 at ftunez.org
5439                 '.lasyxy.cn',
5440
5441                 // by bing-65 at ftunez.org
5442                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5443                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5444                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5445                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5446                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5447                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5448                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5449                 '.saralar.cn',          // 66.232.120.113(non-existent)
5450                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5451
5452                 // 69.46.23.48 by clarkson-34 at ftunez.org
5453                 '.bumora.cn',
5454                 '.byxite.cn',
5455                 '.byxuqu.cn',
5456                 '.jadama.cn',
5457                 '.kybope.cn',
5458                 '.mefeki.cn',
5459                 '.mokiso.cn',
5460                 '.niqeme.cn',
5461                 '.pukafo.cn',
5462                 '.qesaxa.cn',
5463                 '.toxezi.cn',
5464                 '.tujudy.cn',
5465                 '.tutike.cn',
5466
5467                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5468                 '.cabino.cn',
5469                 '.cuwace.cn',
5470                 '.ferazi.cn',
5471                 '.gigywy.cn',
5472                 '.lapype.cn',
5473                 '.mewabe.cn',
5474                 '.pezegy.cn',
5475                 '.pyzuza.cn',
5476                 '.qypony.cn',
5477                 '.ropesy.cn',
5478                 '.wadyfe.cn',
5479
5480                 // 69.46.23.48 clarkson-58 at ftunez.org
5481                 '.becabe.cn',
5482                 '.biciqy.cn',
5483                 '.bezymu.cn',
5484                 '.cifori.cn',
5485                 '.ciwyxi.cn',
5486                 '.dobari.cn',
5487                 '.dusofe.cn',
5488                 '.dutyda.cn',
5489                 '.dykanu.cn',
5490                 '.fakexu.cn',
5491                 '.fylema.cn',
5492                 '.godymo.cn',
5493                 '.hyhaxy.cn',
5494                 '.ganosi.cn',
5495                 '.kuxyju.cn',
5496                 '.lacezy.cn',
5497                 '.lonyru.cn',
5498                 '.lycato.cn',
5499                 '.nykyby.cn',
5500                 '.qyhuko.cn',
5501                 '.redere.cn',
5502                 '.riwimu.cn',
5503                 '.wopary.cn',
5504                 '.xizity.cn',
5505                 '.xuxusa.cn',
5506
5507                 // by entretov-28 at ftunez.org
5508                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5509                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5510
5511                 // 69.46.23.48 by entretov-32 at ftunez.org
5512                 '.cihuji.cn',
5513                 '.deqyve.cn',
5514                 '.genefa.cn',
5515                 '.gujyju.cn',
5516                 '.hasadu.cn',
5517                 '.hedomi.cn',
5518                 '.kecicy.cn',
5519                 '.kipabo.cn',
5520                 '.manunu.cn',
5521                 '.musoru.cn',
5522                 '.myvuna.cn',
5523                 '.pikybe.cn',
5524                 '.riqawo.cn',
5525                 '.rufuxy.cn',
5526                 '.vyfilu.cn',
5527                 '.xadule.cn',
5528                 '.zolaxe.cn',
5529                 '.zerixu.cn',
5530
5531                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5532                 '.dozoda.cn',
5533                 '.nemipu.cn',
5534
5535                 // entretov-84 at ftunez.org
5536                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5537                 '.favulol.cn',          // 66.232.120.115(*snip*)
5538                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5539
5540                 // 69.46.23.48 by jeremy-57 at ftunez.org
5541                 '.duzele.cn',
5542                 '.figede.cn',
5543                 '.fiwany.cn',
5544                 '.gyfalu.cn',
5545                 '.jepylo.cn',
5546                 '.nuqumy.cn',
5547
5548                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5549                 '.burahu.cn',
5550                 '.jydijy.cn',
5551                 '.komyby.cn',
5552                 '.najepa.cn',
5553                 '.pylobu.cn',
5554                 '.qofoly.cn',
5555                 '.sybuvi.cn',
5556                 '.vycexu.cn',
5557                 '.wotyqo.cn',
5558                 '.xudoli.cn',
5559
5560                 // by entretov-28 at ftunez.org
5561                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5562
5563                 // by entretov-37 at ftunez.org
5564                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5565                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5566
5567                 // 66.232.112.175 by entretov-86 at ftunez.org
5568                 '.faweji.cn',
5569                 '.jypaci.cn',
5570                 '.xozuso.cn',
5571
5572                 // 69.46.23.48 by miles-37 at ftunez.org
5573                 '.beqymo.cn',
5574                 '.ceqibi.cn',
5575                 '.dyraqo.cn',
5576                 '.qenedo.cn',
5577                 '.qurypa.cn',
5578                 '.siluvo.cn',
5579                 '.tujala.cn',
5580                 '.wukuwi.cn',
5581                 '.xenibo.cn',
5582                 '.xiculo.cn',
5583                 '.zabemu.cn',
5584
5585                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5586                 '.bevaka.cn',
5587                 '.fysyte.cn',
5588                 '.guxixu.cn',
5589                 '.hatoli.cn',
5590                 '.jitobu.cn',
5591                 '.juxeca.cn',
5592                 '.kifuhy.cn',
5593                 '.licila.cn',
5594                 '.mecomy.cn',
5595                 '.niryko.cn',
5596                 '.noxoco.cn',
5597                 '.qiwysu.cn',
5598                 '.tutysy.cn',
5599
5600                 // by oker-74 at ftunez.org
5601                 '.navufol.cn',
5602
5603                 // by oker-97 at ftunez.org
5604                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5605                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5606                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5607                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5608                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5609                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5610                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5611
5612                 // by polet-20 at ftunez.org
5613                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5614
5615                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5616                 '.gywiqe.cn',
5617                 '.jotapo.cn',
5618                 '.jywixa.cn',
5619
5620                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5621                 '.bawegap.cn',
5622                 '.buremyl.cn',
5623                 '.cilybut.cn',
5624                 '.cutufek.cn',
5625                 '.defypyr.cn',
5626                 '.femaxij.cn',
5627                 '.gelejo.cn',
5628                 '.gocylyv.cn',
5629                 '.kehiqaq.cn',
5630                 '.ninyjit.cn',
5631                 '.ruroruw.cn',
5632                 '.vetehow.cn',
5633
5634                 // 69.46.23.48 sabrosky-85 at ftunez.org
5635                 '.banyla.cn',
5636                 '.bubaqu.cn',
5637                 '.bygage.cn',
5638                 '.dafozy.cn',
5639                 '.kaxyjo.cn',
5640                 '.makyle.cn',
5641                 '.naleto.cn',
5642                 '.pidele.cn',
5643                 '.poqexa.cn',
5644                 '.pymaqo.cn',
5645                 '.qupiqy.cn',
5646                 '.reqefy.cn',
5647                 '.sopocy.cn',
5648                 '.vuhexo.cn',
5649                 '.weryso.cn',
5650                 '.wubula.cn',
5651                 '.xufuxy.cn',
5652                 '.zuhyxu.cn',
5653
5654                 // 69.46.23.48 by tribiani-97 at ftunez.org
5655                 '.dyxorod.cn',
5656                 '.firywoz.cn',
5657                 '.jixezyx.cn',
5658                 '.joveraw.cn',
5659                 '.jowaxup.cn',
5660                 '.nodarej.cn',
5661                 '.pimijom.cn',
5662                 '.tugupeg.cn',
5663
5664                 // 66.232.112.175 by abuse-here at inbox.ru
5665                 '.catybe.cn',
5666                 '.jytame.cn',
5667                 '.wygete.cn',
5668         ),
5669         '74.50.97.*' => array(
5670                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5671                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5672                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5673                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5674                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5675                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5676                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5677                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5678                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5679                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5680                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5681                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5682                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5683                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5684                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5685                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5686
5687                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5688                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5689                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5690                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5691                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5692                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5693                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5694                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5695                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5696                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5697                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5698                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5699                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5700                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5701                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5702                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5703                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5704                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5705                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5706
5707                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5708                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5709                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5710                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5711                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5712         ),
5713         'nijeoi at hotmai.com' => array(
5714                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5715                 '.bowij.com',
5716                 '.bozib.com',
5717                 '.cavux.com',
5718                 '.dipov.com',
5719                 '.gumoz.com',
5720                 '.hakyb.com',
5721                 '.hehyv.com',
5722                 '.hepyt.com',
5723                 '.howoj.com',
5724                 '.jywaz.com',
5725                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5726                 '.kyheq.com',
5727                 '.kyzad.com',
5728                 '.qicad.com',
5729                 '.qubyd.com',
5730                 '.mocyq.com',
5731                 '.muloq.com',
5732                 '.myxim.com',
5733                 '.nufyp.com',
5734                 '.waqog.com',
5735                 '.wyduc.com',
5736                 '.xefyv.com',
5737                 '.xomej.com',
5738                 '.xomip.com',
5739                 '.xykyl.com',
5740                 '.zakuw.com',
5741                 '.zeliw.com',
5742                 '.zimev.com',
5743                 '.zipif.com',
5744
5745                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5746                 '.tycoco.com',
5747
5748                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5749                 '.pufeqa.com',
5750
5751                 '.xehymi.com',
5752         ),
5753         'niichka at hotmail.com' => array(
5754                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5755                 '.aerosearch.info',
5756                 '.freader.info',
5757                 '.info4searchz.info',
5758                 '.nice-host.info',
5759                 '.realyfast.info',
5760                 '.resuts.info',
5761
5762                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5763                 '.bepoh.com',
5764                 '.gufiq.com',
5765                 '.kedyh.com',
5766                 '.pofyb.com',
5767                 '.rurid.com',
5768                 '.vucaj.com',
5769                 '.vuwir.com',
5770
5771                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5772                 '.bejefe.com',
5773
5774                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5775                 '.tidawu.com',
5776
5777                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5778                 '.rofuqa.com',
5779         ),
5780         'porychik at hot.ee' => array(  // by Igor
5781                 '.tedstate.info',       // "Free Web Hosting"
5782                 '.giftsee.com',
5783         ),
5784         'admin at pertol.info' => array(
5785                 // 81.0.195.189 "Free Web Hosting"
5786                 '.laparka.cn',
5787                 '.mirlos.cn',
5788                 '.oldmoms.cn',
5789
5790                 // 217.11.233.64(timed-out)
5791                 '.ejmpep.cn',   // by admin at pertol.info
5792                 '.ytere.cn',    // by admin at x2t.com
5793
5794                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5795                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5796
5797                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5798                 '.new-greece-travel.com',
5799                 '.peraonline.info',
5800
5801                 '.barkman.cn',
5802         ),
5803
5804         'aofa at vip.163.com' => array(
5805                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5806                 '.5944.net',
5807         ),
5808         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5809                 '.maxrentcar.info',
5810                 '.newsonyericsson.info',
5811                 '.pornositeworld.biz',
5812                 '.rentcarweb.info',
5813                 '.xxxdomainsex.biz',
5814         ),
5815         'kopper1970 at gmail.com' => array(
5816                 '.cardealerall.info',           // by Green
5817                 '.donatecarsales.info',         // by Sipil
5818                 '.ringtonewilly.info',          // by Sipil
5819                 '.travelstraveling.info',       // by Chinik
5820                 '.viagrabuyonline.org',         // by Sipil
5821                 '.viagraorderbuy.com',          // by Anatol
5822                 '.worldcuptourism.info',        // by Sipil
5823         ),
5824         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5825                 '.globalinfoland.info',
5826                 '.goodlifesearch.info',
5827                 '.hotnetinfo.info',
5828                 '.hotpornmovies.org',
5829                 '.infopilot.info',
5830         ),
5831         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5832                 '.bang-bro.org',
5833                 '.datinghost.info',
5834                 '.hello-craulers.info',
5835                 '.free-blog-host.info',
5836                 '.sucking-boobs.info',
5837         ),
5838         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5839                 '.allcamsguide.info',
5840                 '.camerascams.info',
5841                 '.camerasera.info',
5842                 '.girlcamsworld.info',
5843                 '.hiddenlimocams.info',
5844                 '.redlivecams.info',
5845                 '.spycamsgear.info',
5846                 '.spycamssite.info',
5847                 '.supercamsusa.info',
5848                 '.thecamsnow.info',
5849         ),
5850         '87.242.116.81' => array(
5851                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5852                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5853                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5854                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5855                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5856         ),
5857         '208.70.75.153' => array(
5858                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5859                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5860                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5861                 '.cerc-on.info',
5862                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5863                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5864                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5865                 '.cerc-tr.info',
5866                 '.cerc-tw.info',
5867                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5868                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5869                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5870                 '.cerc-on.org',         // by cerca-one at ya.ru
5871                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5872                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5873                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5874                 '.cerc-tr.org',         // by cerca-one at ya.ru
5875                 '.cerc-tw.org',         // by cerca-one at ya.ru
5876                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5877                 '.cerca-fo.info',
5878                 '.cerca-no.info',
5879                 '.cerca-on.info',
5880                 '.cerca-sv.info',
5881                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5882                 '.cerca-te.info',
5883                 '.cerca-tr.info',
5884                 '.cerca-sx.org',
5885                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5886                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5887                 '.ricerca-fo.info',
5888                 '.ricerca-one.org',
5889                 '.ricerca-sv.org',
5890                 '.ricerca-sx.org',
5891                 '.ricerca-te.org',
5892                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5893                 '.subit01.org',
5894                 '.subit02.org',
5895                 '.subit03.org',
5896                 '.subit04.org',
5897                 '.subit05.org',
5898                 '.subit06.org',
5899                 '.subit01.info',
5900                 '.subit02.info',
5901                 '.subit03.info',
5902                 '.subit04.info',
5903                 '.subit05.info',
5904                 '.subit06.info',
5905         ),
5906         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5907                 '.5-base.com',
5908                 '.pharmacy-style.com',
5909         ),
5910         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5911                 '.ista-2006.ru',
5912                 '.wefas.ru',
5913         ),
5914         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5915                 '.tourismworldsite.info',
5916                 '.yourtourismtravel.info',
5917         ),
5918         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5919                 '.easyfindcar.info',
5920                 '.siteinfosystems.info',
5921         ),
5922         'smesh1155 at gmail.com' => array(
5923                 '.hospitalforyou.info',                 // by Gimmi
5924                 '.thephentermineonline.info',   // by Kipola
5925         ),
5926         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5927                 '.kiski.net.in',
5928                 '.pipki.org.in',
5929                 '.popki.ind.in',
5930                 '.siski.co.in',
5931         ),
5932         'tiptronikmike at mail.com' => array(
5933                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5934                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5935                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5936                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5937                 //'.i0sex.info',                // Michael
5938                 //'.i1sex.info',                // Michael
5939                 //'.i2sex.info',                // Martin
5940                 //'.i3sex.info',                // Martin
5941                 //'.i4sex.info',                // Adulterra
5942                 //'.i5sex.info',                // Adulterra
5943                 //[irvyz]6sex.info not found
5944                 '.i8sex.info',                  // by Martin
5945         ),
5946         'skuarlytronald at mail.com' => array(
5947                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5948                 '.girlsgoingmad.info',          // 64.27.13.120
5949                 '.girlsgonewildside.info',      // 64.27.13.120
5950         ),
5951         '66.232.109.250' => array(
5952                 '.1626pornporno.info',
5953                 '.1851pornporno.info',
5954                 '.1876pornporno.info',
5955                 '.476pornporno.info',
5956         ),
5957         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5958                 '.compactxxx.com',
5959                 '.eadulthost.com',
5960                 '.eadultview.com',
5961                 '.eroticpool.net',
5962                 '.ipornservice.com',
5963                 '.liveadulthost.com',
5964                 '.nudepal.com',
5965                 '.sweetservers.com',
5966         ),
5967         'support at orgija.org' => array(
5968                 '.assfuckporn.org',
5969                 '.dosugmos.org',
5970                 '.fuckporn.org',
5971                 '.girlsdosug.org',
5972                 '.girlsporno.org',
5973                 '.moscowintim.org',
5974                 '.pornass.org',
5975                 '.pornopussy.org',
5976                 '.progirlsporn.org',
5977                 '.pussypornogirls.org',
5978         ),
5979         '125.65.112.93' => array(
5980                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5981                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5982         ),
5983         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5984                 '.beta-google.com',
5985                 '.tv-reklama.info',
5986                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5987                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5988         ),
5989         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5990                 '.abobrinha.org',
5991                 '.aneurysmic.com',              // / not found
5992                 '.physcomp.org',                // / not found
5993                 '.seriedelcaribe2006.org',
5994                 '.refugeeyouthinamerica.com',
5995         ),
5996         'skip_20022 at yahoo.com' => array(
5997                 // 203.174.83.55
5998                 '.a28hosting.info',             // by Bill Jones
5999                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
6000                 '.besthentai06.org',    // by yakon
6001         ),
6002         'USFINE.com' => array(
6003                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
6004                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
6005         ),
6006         '68.178.211.57' => array(
6007                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
6008                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
6009         ),
6010         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
6011                 '.google-yahoo-msn.org',
6012                 '.expedia-travel.org',
6013         ),
6014         'admin at newestsearch.com' => array(   // by Gibrel Sitce
6015                 '.emr5ce.org',
6016                 '.wfe7nv.org',
6017                 '.xyr99yx.org',
6018         ),
6019         '203.171.230.39' => array(
6020                 // by 51shell at 163.com
6021                 '.amatou-fc2.com',
6022
6023                 // registrar bizcn.com, iframe + cursor
6024                 '.playonlinenc.com',
6025                 '.playboss-jp.com',
6026         ),
6027         'Digi-Rock.com' => array(
6028                 '.rom776.com',
6029                 // owner-organization: DIGIROCK, INC.
6030                 // owner-email: domain-contact at digi-rock.com
6031                 // with an external ad-and-JavaScript,
6032                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6033                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6034         ),
6035         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6036                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6037                 '.getrun.cn',                           // 208.73.34.48
6038                 '.ipod-application.info',       // NO IP
6039                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6040                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6041         ),
6042         'germerts at yandex.ru' => array(
6043                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6044                 '.andatra.info',
6045                 '.banchitos.info',
6046                 '.batareya.info',
6047                 '.blevota.info',
6048                 '.broneslon.info',
6049                 '.gamadril.info',
6050                 '.gipotenuza.info',
6051                 '.govnosaklo.info',
6052                 '.muflon.info',
6053                 '.termitnik.info',
6054                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6055         ),
6056         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6057                 '.acronis-true-image.info',
6058                 '.calcio-xp.info',
6059                 '.cosanova.info',
6060                 '.cose-rx.info',
6061                 '.dictip.info',
6062                 '.findig.info',
6063                 '.fotonow.info',
6064                 '.lavoro-tip.info',
6065                 '.loan-homes.info',
6066                 '.mionovita.info',
6067                 '.mustv.info',
6068                 '.newsnaked.info',
6069                 '.online-tod.info',
6070                 '.opakit.info',
6071                 '.opanow.info',
6072                 '.opriton.info',
6073                 '.porta-bl.info',
6074                 '.refdif.info',
6075                 '.xzmovie.info',
6076         ),
6077         '84.252.148.120 etc' => array(
6078                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6079                 '.planetavilton.info',  // 84.252.148.120
6080                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6081         ),
6082         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6083                 '.99jk.com',
6084                 '.99jk.com.cn',
6085                 '.99jk.cn',
6086         ),
6087         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6088                 '.kliktop.biz',
6089                 '.kliktop.org',
6090                 '.pharmatop.us',
6091                 '.supertop.us',
6092                 '.supervaizer.info',
6093         ),
6094         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6095                 '.freeamateursexx.info',        // 81.0.195.228
6096                 '.freeanalsexx.info',           // 217.11.233.97
6097                 '.freegaysexx.info',            // 81.0.195.228
6098         ),
6099         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6100                 '.abbhi.info',
6101                 '.gayblogguide.biz',
6102                 '.huope.info',
6103                 '.thebdsmday.info',
6104                 '.zioprt.info',                 // 89.149.228.237
6105         ),
6106         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6107                 '.boblisk.info',
6108                 '.factyri.info',
6109                 '.jorge1.info',
6110         ),
6111         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6112                 '.bestmindstorm.org',
6113                 '.redstoreonline.org',
6114         ),
6115         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6116                 '.8e8ae.net',
6117                 '.c-cock.com',
6118                 '.fa59eaf.com',
6119                 '.set-place.net',
6120                 '.sex-beauty.net',
6121         ),
6122         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6123                 '.tomdir.info',
6124                 '.tomdirdirect.info',
6125                 '.tomdirworld.info',
6126                 '.treton.info',
6127                 '.trefas.info',
6128                 '.tretonmondo.info',
6129                 '.unefout.info',
6130                 '.unefoutprojet.info',
6131                 '.unitfree.info',
6132                 '.vilret.info',
6133                 '.vilttown.info',
6134                 '.votrefout.info',
6135                 '.warmfind.info',
6136                 '.warptop.info',
6137                 '.wildtram.info',
6138                 '.xofind.info',
6139                 '.xopdiscover.info',
6140                 '.xopfind.info',
6141                 '.xoplocate.info',
6142                 '.xopseek.info',
6143                 '.xpfirst.info',
6144                 '.xphighest.info',
6145                 '.xptop.info',
6146         ),
6147         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6148                 '.myviagrasite.com',    // 80.74.153.2
6149                 '.thecanadianmeds.com', // 80.74.153.17
6150         ),
6151         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6152                 '.bigemot.com',                         // 217.11.233.34, / not found
6153                 '.espharmacy.com',                      // 217.11.233.34
6154                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6155                 '.ringtonecooler.com',          // 217.11.233.34
6156         ),
6157         'dfym at dfym.cn' => array(
6158                 // ANI, JavaScript, iframe
6159
6160                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6161                 '.okwit.com',
6162                 '.sakerver.com',
6163                 '.motewiki.net',
6164
6165                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6166
6167                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6168
6169                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6170                 '.bbtv-chat.com',
6171                 '.ketubatle.com',
6172                 '.playonlanei.com',
6173                 '.rmtfcne.com',
6174
6175         ),
6176         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6177                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6178                 '.lookmedicine.info',           // 206.161.205.22
6179                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6180                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6181                 '.worldsitesearch.info',        // 209.8.40.59
6182         ),
6183         'lee.seery at gmail.com' => array(
6184                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6185                 '.lingvol.com',         // 64.21.34.55
6186                 '.micevol.com',         // 64.21.34.55
6187                 '.heyhey.info',         // 64.21.34.55  by anonymous
6188         ),
6189         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6190                 // 69-64-64-71.dedicated.abac.net
6191                 '.520-ard.info',
6192                 '.550bcards.info',
6193                 '.559-cads.info',
6194                 '.559caard.info',
6195                 '.565-caaard.info',
6196                 '.575cadr.info',
6197                 '.577cadrs.info',
6198                 '.590-acrds.info',
6199                 '.596-cadrs.info',
6200                 '.596caards.info',
6201                 '.596caaard.info',
6202                 '.asstablishingcads.info',
6203                 '.astablish-ard.info',
6204                 '.astablishcacrds.info',
6205                 '.begginers-acards.info',
6206                 '.begginersacrds.info',
6207                 '.beggingcaaard.info',
6208                 '.beginercacrds.info',
6209                 '.cacrdscreating.info',
6210                 '.caditbegging.info',
6211                 '.cadr-buildup.info',
6212                 '.cadr-establilsh.info',
6213                 '.cadrs-buildercredit.info',
6214                 '.cadrs570.info',
6215                 '.cads-565.info',
6216
6217                 // 69-64-64-113.dedicated.abac.net
6218                 '.interistacards.info',
6219                 '.intrust-ards.info',
6220                 '.intrustacrds.info',
6221                 '.lfixed-ard.info',
6222                 '.lowerate-ard.info',
6223                 '.lowpercentage-ard.info',
6224                 '.lowpercentageacrd.info',
6225         ),
6226         'acua at mail.ru' => array(
6227
6228                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6229
6230                         // by adventurer at allmyns.info
6231                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6232
6233                         // by webmaster at allmyns.info
6234                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6235                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6236                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6237                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6238                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6239                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6240                         '.riumh.cn',    // 84.16.226.28(*snip*)
6241                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6242                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6243                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6244
6245                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6246                 '.dns4babka.info',      // by acua at mail.ru
6247
6248                         // by golubcov at dns4babka.info
6249                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6250
6251                         // by webmaster at dns4babka.info
6252                         '.credh.cn',
6253                         '.fucfv.cn',
6254                         '.gdxnk.cn',
6255                         '.sqrrt.cn',
6256                         '.ywtmd.cn',
6257                         '.kncqy.cn',    // by webmaster at allmyns.info
6258
6259                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6260                 '.dedka2ns.info',       // by acua at mail.ru
6261
6262                         // by chasik at dedka2ns.info
6263                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6264
6265                         // by rochel at dedka2ns.info
6266                         '.fudhxjjqh.cn',
6267
6268                         // by webmaster at dedka2ns.info
6269                         '.ascpo.cn',
6270                         '.jgycr.cn',
6271                         '.nqdtt.cn',
6272                         '.oswde.cn',
6273                         '.qeyig.cn',
6274                         '.soqsx.cn',
6275                         '.ukncd.cn',
6276                         '.zijgb.cn',
6277
6278                 // 84.16.255.253(*snip*), / says 'noy found'
6279                 '.dns4dedka.info',      // by acua at mail.ru
6280
6281                         // by aleon at dns4dedka.info
6282                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6283
6284                         // by dig at dns4dedka.info
6285                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6286                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6287                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6288                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6289                         '.heulw.cn',    // 84.16.226.217(*snip*)
6290                         '.hissw.cn',    // 84.16.249.240(*snip*)
6291                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6292                         '.obwew.cn',    // 84.16.251.218(*snip*)
6293                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6294                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6295                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6296                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6297                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6298                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6299                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6300                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6301                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6302                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6303                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6304                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6305
6306                         // by la at dns4dedka.info
6307                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6308                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6309                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6310                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6311                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6312                         '.eothy.cn',    // 84.16.249.241(*snip*)
6313                         '.epocy.cn',    // 84.16.251.220(*snip*)
6314                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6315                         '.faacz.cn',    // 84.16.251.222(*snip*)
6316                         '.filun.cn',    // 89.149.196.72(*snip*)
6317                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6318                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6319                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6320                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6321                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6322                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6323                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6324                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6325                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6326                         '.krumo.cn',    // 84.16.226.217(*snip*)
6327                         '.lbava.cn',    // 217.20.112.102(*snip*)
6328                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6329                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6330                         '.npovm.cn',    // 84.16.226.28(*snip*)
6331                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6332                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6333                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6334                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6335                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6336                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6337                         '.qydph.cn',    // 89.149.228.163(*snip*)
6338                         '.rxens.cn',    // 89.149.196.72(*snip*)
6339                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6340                         '.srths.cn',    // 84.16.251.222(*snip*)
6341                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6342                         '.unquz.cn',    // 84.16.251.223(*snip*)
6343                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6344                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6345                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6346                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6347                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6348                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6349
6350                         // by le at dns4dedka.info
6351                         '.goslw.cn',    // 84.16.251.220(*snip*)
6352                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6353                         '.iewik.cn',    // 84.16.255.254(*snip*)
6354                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6355                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6356                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6357                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6358                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6359                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6360                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6361                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6362                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6363                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6364                         '.qniww.cn',    // 84.16.251.218(*snip*)
6365                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6366                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6367
6368                         // by skspb at dns4dedka.info
6369                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6370
6371                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6372                         '.bcpnb.cn',
6373                         '.cfbpr.cn',
6374                         '.dnndb.cn',
6375                         '.ekwme.cn',
6376                         '.iutps.cn',
6377                         '.ryftj.cn',
6378                         '.vxqcb.cn',
6379
6380                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6381                         // by apple at ns2best.info
6382                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6383                         // by paulwolf at ns2best.info
6384                         '.ifytzq.cn',
6385
6386                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6387                         // by pigato at sedns.info
6388                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6389                         // by roschem at sedns.info
6390                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6391                         // by op at sedns.info
6392                         '.bumfn.cn',
6393                         '.csmlu.cn',
6394                         '.epcwi.cn',
6395                         '.krwzn.cn',
6396                         '.lkvcp.cn',
6397                         '.mvmkh.cn',
6398                         '.nwpeg.cn',
6399                         '.rnqol.cn',
6400                         '.tyuaf.cn',
6401                         '.ucysa.cn',
6402                         '.vhyom.cn',
6403                         '.wtstu.cn',
6404                         '.zslxr.cn',
6405         ),
6406         'gilvcta sy jilbertsbram.com' => array(
6407                 // 206.53.51.126
6408                 '.dsfljkeilm1.cn',
6409                 '.dsfljkeilm2.cn',
6410                 '.dsfljkeilm3.cn',
6411                 '.dsfljkeilm4.cn',
6412                 '.dsfljkeilm5.cn',
6413                 '.dsfljkeilm6.cn',
6414                 '.dsfljkeilm7.cn',
6415                 '.dsfljkeilm8.cn',
6416                 '.dsfljkeilm9.cn',
6417                 '.dsfljkeilm10.cn',
6418         ),
6419         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6420
6421                 // 69.64.82.76(*.dedicated.abac.net)
6422                 '.bruised-criedit.info',
6423                 '.bruised-crtedit.info',
6424                 '.bruised-czrd.info',
6425                 '.bruisedcreditcars.info',
6426                 '.bruisedcreitcard.info',
6427                 '.bruisedcreitd.info',
6428                 '.buliderscreadet.info',
6429                 '.cleaningup-cdit.info',
6430                 '.cleaningup-cedict.info',
6431                 '.cleaningup-cerdic.info',
6432                 '.cleanup-crrd.info',
6433
6434                 // 69.64.82.77(*.dedicated.abac.net)
6435                 '.bruised-crediot.info',
6436                 '.bruised-credtid.info',
6437                 '.bruisedcriet.info',
6438                 '.bruisedredit.info',
6439                 '.buliders-crdt.info',
6440                 '.buliders-cre4dit.info',
6441                 '.buliders-creadt.info',
6442                 '.buliders-credcards.info',
6443                 '.buliders-credictcard.info',
6444                 '.cleaningupccreditcards.info',
6445                 '.cleaningupcdedit.info',
6446                 '.cleaningupcedirt.info',
6447                 '.cleaningupceidt.info',
6448                 '.cleaningupcrasd.info',
6449                 '.cleaningupcreait.info',
6450
6451                 // 69.64.82.78(*.dedicated.abac.net)
6452                 '.bruised-cridet.info',
6453                 '.bruised-drecit.info',
6454                 '.bruised-reditcards.info',
6455                 '.bruisedcredikt.info',
6456                 '.bruisedcredith.info',
6457                 '.bruisedcredtid.info',
6458                 '.cleanup-criet.info',
6459                 '.cleanup-csrds.info',
6460                 '.cleanup-dards.info',
6461
6462                 // 69.64.82.79(*.dedicated.abac.net)
6463                 '.bruised-crediotcards.info',
6464                 '.bruised-creditcar.info',
6465                 '.bruised-creid.info',
6466                 '.bruised-creidtcard.info',
6467                 '.buliders-crdit.info',
6468                 '.buliders-creadet.info',
6469                 '.cleaningup-ceridt.info',
6470                 '.cleaningupcrecit.info',
6471                 '.cleaningupccritcard.info',
6472                 '.cleanupdredit.info',
6473                 '.cleanupredit.info',
6474         ),
6475         '.malwarealarm.com',
6476                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6477                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6478                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6479         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6480         'Inet-Traffic.com' => array(
6481                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6482                 //'.dcomm.com',         // by D Communications Inc. S.A.
6483
6484                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6485                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6486                 // ...
6487                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6488                 // ...
6489                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6490                 // ...
6491                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6492                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6493                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6494                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6495                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6496                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6497                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6498                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6499                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6500                 // ...
6501                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6502                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6503                 // ...
6504                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6505                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6506                 // ...
6507                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6508                 // ...
6509                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6510                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6511                 // ...
6512                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6513         ),
6514         'andreyletov at yahoo.com related' => array(
6515                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6516                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6517                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6518
6519                 // 89.248.99.118 by anonymous
6520                 '.lpgpharmacy.com',
6521                 '.onlybestgalleries.com',
6522                 '.viagrabest.info',
6523                 '.viagrabestprice.info',
6524                 '.viagratop.info',
6525
6526                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6527                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6528                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6529         ),
6530         'alrusnac at hotmail.com' => array(
6531                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6532                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6533         ),
6534         '203.116.63.123' => array(
6535                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6536                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6537         ),
6538         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6539                 '.autotowncar.cn',              // 69.73.146.184
6540                 '.badgirlhome.cn',              // 69.73.146.186
6541         ),
6542         'Wmp.co.jp' => array(
6543                 // 219.94.134.208, ns *.dns.ne.jp, adult
6544                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6545                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6546                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6547         ),
6548         'Macherie.tv' => array(
6549                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6550                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6551                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6552         ),
6553         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6554                 '.yemine.info',
6555                 '.fr4f3ds.info',
6556         ),
6557         '75.126.129.222' => array(
6558                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6559                 '.viagrabuycheap.info', // ns *.advernsserver.com
6560                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6561         ),
6562         'sqr at bk.ru' => array(
6563                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6564                 '.masserch.info',               // "Free Web Hosting", spam
6565                 '.miserch.info',
6566         ),
6567         'gangstadra at hotmail.com' => array(
6568                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6569                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6570                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6571                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6572         ),
6573         'hosan by front.ru' => array(
6574                 '.salihome.info',                               // 206.53.51.155(non-existent)
6575                 '.online-freesearch.com',               // 206.53.51.155
6576                 '.choosefinest.com',                    // 206.53.51.157
6577                 '.carsprojects.com',                    // 206.53.51.159
6578                 '.sport-brands.com',                    // 206.53.51.167
6579                 '.online-pharmaceutics.com',    // 206.53.51.168
6580         ),
6581         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6582                 '.canadians-health.com',        // by andreyletov at yahoo.com
6583                 '.cialischeap.info',
6584                 '.superrv.info',
6585         ),
6586         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6587                 '.hatbi.com',
6588                 '.justrty.com',
6589                 '.kol2you.com',
6590                 '.kolplanet.com',
6591                 '.myrty.com',
6592                 '.officialrty.com',
6593                 '.pbaol.com',
6594                 '.planetkol.com',
6595         ),
6596         'Abra1.com' => array(
6597                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6598                 '.abra1.com',           // by info at maisontropicale.com
6599                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6600
6601                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6602                 '.abra2.com',           // by domain at anondns.org
6603                 '.abra3.com',           // by domain at anondns.org
6604         ),
6605         'topdomainz at gmail.com' => array(
6606                 // 217.73.201.237 , ns *.parked.ru
6607                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6608                 '.aboutgooglegroup.info',
6609                 '.aboutgoogleimage.info',
6610                 '.aboutgooglemail.info',
6611                 '.aboutgooglemap.info',
6612                 '.aboutgooglenews.info',
6613                 '.aboutgooglevideo.info',
6614                 '.bestgoogleearth.info',
6615                 '.magicgoogleearth.info',
6616                 '.magicgooglemap.info',
6617                 '.magicgooglevideo.info',
6618
6619                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6620                 '.slajzer.info',
6621                 '.tonoscelular.info',
6622                 '.tonosmotorola.info',
6623         ),
6624         'Anderson at extra.by' => array(
6625                 // Encoded JavaScript
6626
6627                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6628                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6629                 '.6dir.info',
6630                 '.8dir.info',
6631                 '.9dir.info',
6632                 '.2pro.info',
6633                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6634                 '.6pro.info',
6635                 '.7pro.info',
6636                 '.8pro.info',
6637                 '.9pro.info',
6638                 '.5sms.info',
6639                 '.6sms.info',
6640                 '.8sms.info',
6641                 '.9sms.info',
6642                 '.1upp.info',
6643                 '.2upp.info',
6644                 '.3upp.info',
6645                 '.4upp.info',
6646                 '.5upp.info',
6647                 '.6upp.info',
6648                 '.7upp.info',
6649                 '.8upp.info',
6650                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6651                 '.2vip.info',   // by Anderson at extra.by
6652                 '.4vip.info',
6653                 '.5vip.info',
6654                 '.6vip.info',
6655                 '.7vip.info',
6656                 '.8vip.info',   // ns *.9upp.info
6657                 '.9vip.info',
6658
6659                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6660                 '.w3rar.info',
6661                 '.w3sex.info',
6662                 '.w3zip.info',
6663                 '.w3in.info',
6664                 '.w3out.info',
6665         ),
6666         'zorkin87 at mail.ru' => array(
6667                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6668                 '.ruqore.com',
6669                 '.goxama.com',
6670                 '.cazebi.com',
6671                 '.fukeqa.com',
6672                 '.fydoge.com',
6673                 '.jukaly.com',
6674                 '.jumoga.com',
6675                 '.jumuxo.com',
6676                 '.tyriva.com',
6677                 '.vudyho.com'
6678         ),
6679         'jessicaeagloff at yahoo.co.uk' => array(
6680                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6681                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6682                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6683                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6684         ),
6685         'qbbs at xinoffice.com' => array(
6686                 // ns *.name-services.com
6687                 '.lingage.com',         // 8.15.231.118
6688                 '.puksins.com',         // IP not allocated now
6689         ),
6690         'advertolog at gmail.com' =>
6691                 // 81.0.250.86(network.upl.cz => non-existent) or
6692                 // 217.11.233.27
6693                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6694         'contact at aboutdomain.com' => array(
6695                 '.lopieur0.com',        // Not match but used
6696                 '.lopieur1.com',        // Not match but used
6697                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6698         ),
6699         'info at cash4wm.biz related' => array(
6700                 // 84.16.233.12(*.internetserviceteam.com)
6701                 '.newsblogforu.com',
6702
6703                 // 84.16.235.141()
6704                 '.informator4you.com',
6705
6706                 // 84.16.240.68(*.internetserviceteam.com)
6707                 '.absolute-best-site.com',
6708                 '.new-blog-for-you.com',
6709
6710                 // 84.16.240.69(*.internetserviceteam.com)
6711                 '.best-sport-blog.com',
6712                 '.big-internet-site.com',
6713                 '.brendsite.com',
6714                 '.my-news-blog.com',
6715
6716                 // 84.16.242.123(*.internetserviceteam.com)
6717                 '.best-news-blog.com',
6718                 '.site-with-content.com',
6719
6720                 // The same method with info at cash4wm.biz
6721                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6722                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6723                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6724                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6725                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6726                 '.bloginfo4u.info',             // 89.149.247.25
6727         ),
6728         'kerjy at yahoo.com' => array(
6729                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6730                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6731                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6732                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6733                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6734         ),
6735         'vme at hotmail.ru' => array(
6736                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6737                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6738         ),
6739         'john at hellomyns.info' => array(
6740                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6741                 '.byouz.cn',            // 89.149.247.24, / nothing
6742                 '.idghc.cn',
6743                 '.inxrj.cn',
6744                 '.jqzdf.cn',
6745                 '.vsxej.cn',
6746                 '.wkgnr.cn',
6747         ),
6748         '.CN spam payload' => array(
6749                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6750                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6751                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6752                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6753                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6754                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6755                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6756                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6757                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6758                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6759         ),
6760         'Time2ns.info' => array(
6761                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6762                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6763                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6764                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6765                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6766         ),
6767         'Ilovemyns.info' => array(
6768                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6769                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6770         ),
6771         'Freehostdns.info' => array(
6772                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6773                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6774                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6775         ),
6776         'Newns4me.info' => array(
6777                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6778                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6779         ),
6780
6781         // C-2: Lonely domains (buddies not found yet)
6782         '.0721-4404.com',
6783         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6784         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6785         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6786         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6787         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6788         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6789         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6790         '.0annie.info',
6791         '.6i6.de',
6792         '.77toperrwuter1.info', // by Roman
6793         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6794         '.angioco.com',                 // 62.37.112.100, gamble
6795         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6796         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6797         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6798         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6799         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6800         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6801         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6802         '.allworlddirect.info', // Forbidden
6803         '.amoreitsex.com',
6804         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6805         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6806         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6807         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6808         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6809         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6810         '.auto-car-cheap.org',
6811         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6812         '.baurish.info',
6813         '.bernardtomic21.info', // by filboj at hotmail.com
6814         '.bestop.name',
6815         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6816         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6817         '.bestshopfinder.info',
6818         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6819         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6820         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6821         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6822         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6823         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6824         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6825         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6826         '.catkittenmagazines.org',              // 87.118.97.117
6827         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6828         '.chatwalker.com',              // 124.32.230.65
6829         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6830         '.covertarena.co.uk',   // by Wayne Huxtable
6831         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6832         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6833         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6834         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6835         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6836         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6837         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6838         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6839         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6840         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6841         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6842         '.easyshopusa.com',             // by riter (riter at nm.ru)
6843         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6844         '.edu.ph',                              // "philippine network foundation inc"
6845         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6846         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6847         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6848         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6849         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6850         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6851         '.filthserver.com',             // sales at onlinemarketingservices.biz
6852         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6853         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6854         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6855         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6856         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6857         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6858         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6859         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6860         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6861         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6862         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6863         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6864         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6865         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6866         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6867         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6868         '.gm-exchange.jp',              // 210.188.216.49 RMT
6869         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6870         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6871         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6872         '.greatbestwestern.org',// by gao.wungao at gmail.com
6873         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6874         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6875         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6876         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6877         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6878         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6879         '.hostuju.cz',                  // ns banan.cz, banan.it
6880         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6881         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6882         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6883         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6884         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6885         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6886         '.infradoc.com',
6887         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6888         '.ismarket.com',                // Google-hiding. intercage.com related IP
6889         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6890         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6891         '.itsexosit.net',
6892         '.itxxxit.net',
6893         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6894         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6895         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6896         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6897         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6898         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6899         '.kingtools.de',
6900         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6901         '.leucainfo.com',
6902         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6903         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6904         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6905         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6906         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6907         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6908         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6909         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6910         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6911         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6912         '.megvideochatlive.info',       // Bad seo
6913         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6914         '.mncxvsm.info',                // 217.11.233.105, / blank
6915         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6916         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6917         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6918         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6919         '.mxsupportmailer.com',
6920         '.next-moneylife.com',  // RMT
6921         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6922         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6923         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6924         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6925         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6926         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6927         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6928         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6929         '.onlineviagra.de',
6930         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6931         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6932         '.ozomw.info',
6933         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6934         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6935         '.perevozka777.ru',             // by witalik at gmail.com
6936         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6937         '.pills-storage.com',   // by
6938         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6939         '.porkyhost.com',               // 79965 at whois.gkg.net
6940         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6941         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6942         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6943         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6944         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6945         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6946         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6947         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6948         '.quality-teen-porn-photo.com', // by info at densa.info
6949         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6950         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6951         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6952         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6953         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6954         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6955         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6956         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6957         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6958         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6959         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6960         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6961         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6962         '.sexamoreit.com',
6963         '.sexforit.com',
6964         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6965         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6966         '.sirlook.com',
6967         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6968         '.sepcn.info',                  // / not found
6969         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6970         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6971         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6972         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6973         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6974         '.superverizonringtones.com',   // by joshua at list.ru
6975         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6976         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6977         '.thehostcity.com',             // Domains by Proxy
6978         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6979         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6980         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6981         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6982         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6983         '.topmeds10.com',
6984         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6985         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6986         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6987         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6988         '.unctad.net',                  // by gfdogfd at lovespb.com
6989         '.vacant.org.uk',
6990         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6991         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6992         '.virtualsystem.de',
6993         '.vdxhost.com',
6994         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6995         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6996         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6997         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6998         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6999         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
7000         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
7001         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
7002         '.whoop.to',                    // RMT
7003         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
7004         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
7005         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
7006         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
7007         '.wwwna.info',                  // / 404 Not Found
7008         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
7009         '.xamorexxx.net',
7010         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
7011         '.xsessox.com',
7012         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
7013         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
7014         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
7015         '.zyguo.info',                  // ns globoxhost.net
7016         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
7017
7018
7019         // C-3: Not classifiable (information wanted)
7020         //
7021         // Something incoming to pukiwiki related sites
7022         'nana.co.il related' => array(
7023                 '.planetnana.co.il',
7024                 '.nana.co.il',
7025         ),
7026 );
7027
7028 // --------------------------------------------------
7029
7030 $blocklist['D'] = array(
7031         // D: Sample setting of
7032         // "Third party in good faith"s
7033         //
7034         // Hosts shown inside of the implanted contents,
7035         // not used via spam, but maybe useful to detect these contents
7036         //
7037         // 'RESERVED',
7038 );
7039
7040 // --------------------------------------------------
7041
7042 $blocklist['E'] = array(
7043         // E: Sample setting of
7044         // Promoters
7045         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7046         //  Ads, Business promotions, SEO, etc)
7047         //
7048         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7049         // Sometimes they may promote each other
7050
7051         '15-Mail.com related' => array(
7052                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7053                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7054                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7055                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7056                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7057         ),
7058         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7059         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7060         'E-brainers.com related' => array(
7061                 // 202.212.14.101
7062                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7063                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7064                 '.my-tune.jp',                                  // by brainers Inc.
7065                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7066                 '.weekle.jp',                                   // by brainers Inc.
7067
7068                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7069                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7070                 '.3minutes-marketing-club.com', // by Fujio
7071                 '.affiliate-vampire.com',               // by Masatoshi
7072                 '.article-site-power-package.com',      // by Masatoshi
7073                 '.audio-marketing-club.com',    // by Fujio
7074                 '.brainers-task-manager.com',   // by Masatoshi
7075                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7076                 '.brainersbuzz.com',                    // by Masatoshi
7077                 '.den4renz-marketing-club.com', // by Fujio
7078                 '.english-contents-club.com',   // by Masatoshi
7079                 '.fly-in-ads-japan.com',                // by Fujio
7080                 '.free-resalerights-giveaway.com',      // by Fujio
7081                 '.freegiveawaysecret.com',              // by Masatoshi
7082                 '.guaranteedvisitorpro.com',    // by Masatoshi
7083                 '.havads-japan.com',                    // by Masatoshi
7084                 '.info-business123.com',                // by Fujio
7085                 '.instant-marketing-club.com',  // by Fujio
7086                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7087                 '.marketing-force-japan.com',   // by Fujio
7088                 '.masatoshikobayashi.com',              // by Fujio
7089                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7090                 '.replytomatt.com',                             // by Fujio
7091                 '.santa-deal.com',                              // by Fujio
7092                 '.santa-deal-summer.com',               // by Fujio
7093                 '.scratch-card-factory.com',    // by Masatoshi
7094                 '.script4you-japan.com',                // by Fujio
7095                 '.sell1000000dollarinjapan.com',// by Fujio
7096                 '.squeeze-page-secret.com',             // by Masatoshi
7097                 '.viral-blog-square.com',               // by Fujio
7098                 '.viralarticle.com',                    // by Fujio
7099                 '.wowhoken.com',                                // by Fujio
7100
7101                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7102                 '.brainerstelevision.com',
7103                 '.demosite4you.com',
7104                 '.keywordcatcherpro.com',
7105                 '.script-marketing-club.com',
7106
7107                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7108                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7109                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7110                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7111                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7112                 '.brainerscode.com',    // by akada
7113                 '.brainerslive.com',    // by domain
7114                 '.brainersreview.com',  // by domain
7115                 '.brainerstest.com',    // by akada
7116                 '.otosecret.com',               // by domain
7117                 '.ultimate-marketing-weapon.com',       // by akada
7118                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7119                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7120
7121                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7122                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7123         ),
7124         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7125         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7126         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7127         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7128         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7129                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7130                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7131                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7132
7133                 // Redirects and affiliates:
7134                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7135                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7136                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7137                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7138                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7139                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7140                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7141                 //   ...
7142
7143                 // Other suggestions:
7144                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7145
7146                 // Blog posting at the same time
7147                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7148                 //   2007/06/13 e123.info/archives/76
7149                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7150                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7151                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7152         ),
7153         'info at kobeweb.jp' => array(
7154                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7155                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7156                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7157         ),
7158         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7159         'Infocart.jp' => array(         // by wai at infocart.jp
7160                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7161                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7162                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7163
7164                 //inetnum:      60.32.154.176 - 60.32.154.183
7165                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7166                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7167         ),
7168         'Info-sniper.com' => array(
7169                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7170                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7171                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7172         ),
7173         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7174         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7175         'JunSuzuki.com' => array(       // e-brainers.com related
7176                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7177                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7178         ),
7179         'Natsukih.net' => array(
7180                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7181                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7182                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7183                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7184
7185                 // by info at natsukih.net
7186                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7187                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7188                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7189                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7190                 '.5muryoureport.com',   // 210.251.253.230
7191                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7192                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7193                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7194         ),
7195         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7196                 '.11kanji.com',         // 211.10.131.88
7197                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7198                 '.point-park.com',      // 211.10.131.88
7199                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7200         ),
7201         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7202         'PRJAPAN.co.jp' => array(
7203                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7204                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7205                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7206                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7207                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7208                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7209         ),
7210         'Rakuten.co.jp' => array(
7211                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7212                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7213         ),
7214         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7215         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7216         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7217         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7218                 '.e123.info',
7219                 '.ialchemist.net',
7220                 '.j012.net',
7221                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7222         ),
7223         'Viscose.jp' => array(
7224                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7225                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7226         ),
7227         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7228 );
7229
7230 // --------------------------------------------------
7231
7232 $blocklist['Z'] = array(
7233         // Z: Yours
7234         //
7235         //'',
7236         //'',
7237         //'',
7238 );
7239
7240 ?>