spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.189 2008/04/29 02:42:00 teanan Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //'desperadoes.biz',                    // YEAR OF THE CAT, PukiWiki skin designer
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 177         'amoo.org',
 178         'web.archive.org',              ///web/2
 179         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 180                 'jmp2.net',
 181                 '2me.tw',
 182         ),
 183         'ataja.es',
 184         'ATBHost.com' => array(
 185                 '*.atbhost.com',
 186                 '*.bzhost.net',
 187         ),
 188         'atk.jp',
 189         'clearp.ath.cx',
 190         'athomebiz.com',
 191         'aukcje1.pl',
 192         'beam.to',
 193         'beermapping.com',
 194         'besturl.in',
 195         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 196         'biglnk.com',
 197         'bingr.com',
 198         'bittyurl.com',
 199         '*.bizz.cc',
 200         '*.blo.pl',
 201         '*.bo.pl',
 202         'briefurl.com',
 203         'brokenscript.com',
 204         'BucksoGen.com' => array(
 205                 '*.bucksogen.com',
 206                 '*.bulochka.org',
 207                 '*.korzhik.org',
 208                 '*.kovrizhka.org',
 209                 '*.pirozhok.org',
 210                 '*.plushka.org',
 211                 '*.pryanik.org',
 212                 '*.sushka.org',
 213         ),
 214         'budgethosts.org',
 215         'budu.com',                             // by peter.eder at imcworld.com
 216         '*.buzznet.com',
 217         '*.bydl.com',
 218         'C-O.IN' => array(
 219                 '*.c-o.cc',
 220                 '*.c-o.in',
 221                 '*.coz.in',
 222                 '*.cq.bz',
 223         ),
 224         'c64.ch',
 225         'c711.com',
 226         '*.cej.pl',
 227         'checkasite.net',
 228         'url.chefhost.com',
 229         '*.chicappa.jp',
 230         'chilicity.com',
 231         'big5.china.com',               ///gate/big5/
 232         'chopurl.com',
 233         'christopherleestreet.com',
 234         'cintcm.com',
 235         '*.cjb.net',
 236         'clipurl.com',
 237         '*.co.nr',
 238         'Comtech Enterprises ' => array(        // comteche.com
 239                 'tinyurl.name',
 240                 'tinyurl.us',
 241         ),
 242         'Cool168.com' => array(
 243                 '*.cool158.com',
 244                 '*.cool168.com',
 245                 '*.ko168.com',
 246                 '*.ko188.com',
 247         ),
 248         'Coolurl.de' => array(
 249                 'coolurl.de',
 250                 'dornenboy.de',
 251                 'eyeqweb.com',
 252                 'hardcore-porn.de',
 253                 'maschinen-bluten-nicht.de',
 254         ),
 255         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 256         'cutalink.com',
 257         '*.da.cx',
 258         '*.da.ru',
 259         'dae2.com',
 260         'dephine.org',
 261         'desiurl.com',
 262         'dhurl.com',
 263         'digbig.com',
 264         'Digipills.com' => array(
 265                 '*.digipills.com',
 266                 'minilien.com',
 267                 'tinylink.com',
 268         ),
 269         '*.discutbb.com',
 270         'DL.AM' => array(
 271                 '*.cx.la',
 272                 '*.dl.am',
 273         ),
 274         '*.dl.pl',
 275         '*.dmdns.com',
 276         'doiop.com',
 277         'drlinky.com',
 278         'durl.us',
 279         '*.dvdonly.ru',
 280         '*.dynu.ca',
 281         'dwarf.name',
 282         '*.eadf.com',
 283         'easyURL.net' => array(
 284                 '*.easyurl.net',
 285                 '.goshrink.com',
 286                 'ushrink.com',
 287         ),
 288         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 289                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 290                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 291                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 292                 //   "Keep continuing to seek originality and contribute it to local,
 293                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 294                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 295                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 296                 // I'm so much impressed of the situation around this imported one today.
 297         'elfurl.com',
 298         'eny.pl',
 299         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 300                 '.mywiitime.com',
 301                 '.surfindark.com',              // webmaster at etechfocus.com
 302                 '.surfinshade.com',
 303                 '.surfinshadow.com',
 304                 '.surfinwind.com',
 305                 '.topsecretlive.com',
 306         ),
 307         '*.eu.org',
 308         'F2B.be' => array(
 309                 '*.f2b.be',
 310                 '*.freakz.eu',
 311                 '*.n0.be',
 312                 '*.n3t.nl',
 313                 '*.short.be',
 314                 '*.ssr.be',
 315                 '*.tweaker.eu',
 316         ),
 317         '*.fancyurl.com',
 318         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 319                 'blue11.jp',
 320                 'fanznet.com',
 321                 'katou.in',
 322                 'mymap.in',
 323                 'saitou.in',
 324                 'satou.in',
 325                 'susan.in',
 326         ),
 327         '.fe.pl',                       // Redirection and subdomain
 328         'ffwd.to',
 329         'url.fibiger.org',
 330         'FireMe.to' => array(
 331                 'fireme.to',
 332                 'nextdoor.to',
 333                 'ontheway.to',
 334         ),
 335         'flingk.com',
 336         'flog.jp',                      // careless redirector and bbs
 337         'fm7.biz',
 338         'fnbi.jp',
 339         '*.fnbi.jp',
 340         'forgeturl.com',
 341         '*.free.bg',
 342         'Freeservers.com' => array(     // United Online Web Services, Inc.
 343                 '*.4mg.com',
 344                 '*.4t.com',
 345                 '*.8m.com',
 346                 '*.8m.net',
 347                 '*.8k.com',
 348                 '*.faithweb.com',
 349                 '*.freehosting.net',
 350                 '*.freeservers.com',
 351                 '*.gq.nu',
 352                 '*.htmlplanet.com',
 353                 '*.itgo.com',
 354                 '*.iwarp.com',
 355                 '*.s5.com',
 356                 '*.scriptmania.com',
 357                 '*.tvheaven.com',
 358         ),
 359         '*.freewebpages.com',
 360         'FreeWebServices.net' => array( // Host Department LLC
 361                 '*.about.gs',   // Dead?
 362                 '*.about.tc',
 363                 '*.about.vg',
 364                 '*.aboutus.gs',
 365                 '*.aboutus.ms',
 366                 '*.aboutus.tc',
 367                 '*.aboutus.vg',
 368                 '*.biografi.biz',
 369                 '*.biografi.info',
 370                 '*.biografi.org',
 371                 '*.biografi.us',
 372                 '*.datadiri.biz',
 373                 '*.datadiri.cc',
 374                 '*.datadiri.com',
 375                 '*.datadiri.info',
 376                 '*.datadiri.net',
 377                 '*.datadiri.org',
 378                 '*.datadiri.tv',
 379                 '*.datadiri.us',
 380                 '*.ecv.gs',
 381                 '*.ecv.ms',
 382                 '*.ecv.tc',
 383                 '*.ecv.vg',
 384                 '*.eprofile.us',
 385                 '*.go2net.ws',
 386                 '*.hits.io',
 387                 '*.hostingweb.us',
 388                 '*.hub.io',
 389                 '*.indo.bz',
 390                 '*.indo.cc',
 391                 '*.indo.gs',
 392                 '*.indo.ms',
 393                 '*.indo.tc',
 394                 '*.indo.vg',
 395                 '*.infinitehosting.net',
 396                 '*.infinites.net',
 397                 '*.lan.io',
 398                 '*.max.io',
 399                 '*.mycv.bz',
 400                 '*.mycv.nu',
 401                 '*.mycv.tv',
 402                 '*.myweb.io',
 403                 '*.ourprofile.biz',
 404                 '*.ourprofile.info',
 405                 '*.ourprofile.net',     // Dead?
 406                 '*.ourprofile.org',
 407                 '*.ourprofile.us',
 408                 '*.profil.bz',
 409                 '*.profil.cc',
 410                 '*.profil.cn',
 411                 '*.profil.gs',
 412                 '*.profil.in',
 413                 '*.profil.ms',
 414                 '*.profil.tc',
 415                 '*.profil.tv',
 416                 '*.profil.vg',  // ?
 417                 '*.site.io',
 418                 '*.wan.io',
 419                 '*.web-cam.ws',
 420                 '*.webs.io',
 421                 '*.zip.io',
 422         ),
 423         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 424         '*.fx.to',
 425         'fyad.org',
 426         'fype.com',
 427         'gentleurl.net',
 428         'Get2.us' => array(
 429                 '*.get2.us',
 430                 '*.hasballs.com',
 431                 '*.ismyidol.com',
 432                 '*.spotted.us',
 433                 '*.went2.us',
 434                 '*.wentto.us',
 435         ),
 436         'glinki.com',
 437         '*.globalredirect.com',
 438         'gnu.vu',
 439         '*.go.cc',
 440         //'Google.com' => array(
 441         //              google.com/translate_c\?u=(?:http://)?
 442         //),
 443         'goonlink.com',
 444         '.gourl.org',
 445         '.greatitem.com',
 446         'gzurl.com',
 447         'url.grillsportverein.de',
 448         'Harudake.net' => array('*.hyu.jp'),
 449         'Hattinger Linux User Group' => array('short.hatlug.de'),
 450         'Hexten.net' => array('lyxus.net'),
 451         'here.is',
 452         'HispaVista.com' => array(
 453                 '*.blogdiario.com',
 454                 '*.hispavista.com',
 455                 '.galeon.com',
 456         ),
 457         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 458                 '*.8l.pl',
 459                 '*.blg.pl',
 460                 '*.czytajto.pl',
 461                 '*.ryj.pl',
 462                 '*.xit.pl',
 463                 '*.xlc.pl',
 464                 '*.hk.pl',
 465                 '*.home.pl',
 466                 '*.of.pl',
 467         ),
 468         'hort.net',
 469         'free4.hostrocket.com',
 470         '*.hotindex.ru',
 471         'HotRedirect.com' => array(
 472                 '*.coolhere.com',
 473                 '*.homepagehere.com',
 474                 '*.hothere.com',
 475                 '*.mustbehere.com',
 476                 '*.onlyhere.net',
 477                 '*.pagehere.com',
 478                 '*.surfhere.net',
 479                 '*.zonehere.com',
 480         ),
 481         'hotshorturl.com',
 482         'hotwebcomics.com',     ///search_redirect.php
 483         'hurl.to',
 484         '*.hux.de',
 485         '*.i89.us',
 486         'iat.net',                      // 74.208.58.130 by Tony Carter
 487         'ibm.com',                      ///links (Correct it)
 488         '*.iceglow.com',
 489         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 490         'Ideas para Nuevos Mercados SL' => array(
 491                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 492                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 493                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 494                 // by edgar bortolin (oscar at i4nm.com)
 495                 // by Edgar Bortolin  (oscar at i4nm.com)
 496                 // by oscar florez (oscar at i4nm.com)
 497                 // by Oscar Florez (oscar at red-es.com)
 498                 // by covadonga del valle (oscar at i4nm.com)
 499                 '*.ar.gd',
 500                 '*.ar.gs',      // ns *.nora.net
 501                 '*.ar.kz',      // by oscar
 502                 '*.ar.nu',      // by Edgar
 503                 '*.ar.tc',      // by oscar
 504                 '*.ar.vg',      // by oscar
 505                 '*.bo.kz',      // by oscar
 506                 '*.bo.nu',      // by covadonga
 507                 '*.bo.tc',      // by oscar
 508                 '*.bo.tf',      // by Oscar
 509                 '*.bo.vg',      // by oscar
 510                 '*.br.gd',
 511                 '*.br.gs',      // ns *.nora.net
 512                 '*.br.nu',      // by edgar
 513                 '*.br.vg',      // by oscar
 514                 '*.ca.gs',      // by oscar
 515                 '*.ca.kz',      // by oscar
 516                 '*.cl.gd',      // by oscar
 517                 '*.cl.kz',      // by oscar
 518                 '*.cl.nu',      // by edgar
 519                 '*.cl.tc',      // by oscar
 520                 '*.cl.tf',      // by Oscar
 521                 '*.cl.vg',      // by oscar
 522                 '*.col.nu',     // by Edgar
 523                 '*.cr.gs',      // ns *.nora.net
 524                 '*.cr.kz',      // by oscar
 525                 '*.cr.nu',      // by edgar
 526                 '*.cr.tc',      // by oscar
 527                 '*.cu.tc',      // by oscar
 528                 '*.do.kz',      // by oscar
 529                 '*.do.nu',      // by edgar
 530                 '*.ec.kz',      // by edgar
 531                 '*.ec.nu',      // by Edgar
 532                 '*.ec.tf',      // by Oscar
 533                 '*.es.kz',      // by oscar
 534                 '*.eu.kz',      // by oscar
 535                 '*.gt.gs',      // ns *.nora.net
 536                 '*.gt.tc',      // by oscar
 537                 '*.gt.tf',      // by Oscar
 538                 '*.gt.vg',      // by Oscar
 539                 '*.hn.gs',      // ns *.nora.net
 540                 '*.hn.tc',      // by oscar
 541                 '*.hn.tf',      // by Oscar
 542                 '*.hn.vg',      // by oscar
 543                 '*.mx.gd',
 544                 '*.mx.gs',      // ns *.nora.net
 545                 '*.mx.kz',      // by oscar
 546                 '*.mx.vg',      // by oscar
 547                 '*.ni.kz',      // by oscar
 548                 '*.pa.kz',      // by oscar
 549                 '*.pe.kz',      // by oscar
 550                 '*.pe.nu',      // by Edgar
 551                 '*.pr.kz',      // by oscar
 552                 '*.pr.nu',      // by edgar
 553                 '*.pt.gs',      // ns *.nora.net
 554                 '*.pt.kz',      // by edgar
 555                 '*.pt.nu',      // by edgar
 556                 '*.pt.tc',      // by oscar
 557                 '*.pt.tf',      // by Oscar
 558                 '*.py.gs',      // ns *.nora.net
 559                 '*.py.nu',      // by edgar
 560                 '*.py.tc',      // by oscar
 561                 '*.py.tf',      // by Oscar
 562                 '*.py.vg',      // by oscar
 563                 '*.sv.tc',      // by oscar
 564                 '*.usa.gs',     // ns *.nora.net
 565                 '*.uy.gs',      // ns *.nora.net
 566                 '*.uy.kz',      // by oscar
 567                 '*.uy.nu',      // by edgar
 568                 '*.uy.tc',      // by oscar
 569                 '*.uy.tf',      // by Oscar
 570                 '*.uy.vg',      // by oscar
 571                 '*.ve.gs',      // by oscar
 572                 '*.ve.tc',      // by oscar
 573                 '*.ve.tf',      // by Oscar
 574                 '*.ve.vg',      // by oscar
 575                 '*.ven.nu',     // by edgar
 576         ),
 577         'ie.to',
 578         'igoto.co.uk',
 579         'ilook.tw',
 580         'indianpad.com',                ///view/
 581         'iNetwork.co.il' => array(
 582                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 583                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 584                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 585         ),
 586         '*.infogami.com',
 587         'infotop.jp',
 588         'ipoo.org',
 589         'IR.pl' => array(
 590                 '*.aj.pl',
 591                 '*.aliasy.org',
 592                 '*.gu.pl',
 593                 '*.hu.pl',
 594                 '*.ir.pl',
 595                 '*.jo.pl',
 596                 '*.su.pl',
 597                 '*.td.pl',
 598                 '*.uk.pl',
 599                 '*.uy.pl',
 600                 '*.xa.pl',
 601                 '*.zj.pl',
 602         ),
 603         'irotator.com',
 604         '.iwebtool.com',
 605         'j6.bz',
 606         'jeeee.net',
 607         'Jaze Redirect Services' => array(
 608                 '*.arecool.net',
 609                 '*.iscool.net',
 610                 '*.isfun.net',
 611                 '*.tux.nu',
 612         ),
 613         '*.jed.pl',
 614         'JeremyJohnstone.com' => array('url.vg'),
 615         'jemurl.com',
 616         'jggj.net',
 617         'jpan.jp',
 618         'josh.nu',
 619         'kat.cc',
 620         'Kickme.to' => array(
 621                 '.1024bit.at',
 622                 '.128bit.at',
 623                 '.16bit.at',
 624                 '.256bit.at',
 625                 '.32bit.at',
 626                 '.512bit.at',
 627                 '.64bit.at',
 628                 '.8bit.at',
 629                 '.adores.it',
 630                 '.again.at',
 631                 '.allday.at',
 632                 '.alone.at',
 633                 '.altair.at',
 634                 '.american.at',
 635                 '.amiga500.at',
 636                 '.ammo.at',
 637                 '.amplifier.at',
 638                 '.amstrad.at',
 639                 '.anglican.at',
 640                 '.angry.at',
 641                 '.around.at',
 642                 '.arrange.at',
 643                 '.australian.at',
 644                 '.baptist.at',
 645                 '.basque.at',
 646                 '.battle.at',
 647                 '.bazooka.at',
 648                 '.berber.at',
 649                 '.blackhole.at',
 650                 '.booze.at',
 651                 '.bosnian.at',
 652                 '.brainiac.at',
 653                 '.brazilian.at',
 654                 '.bummer.at',
 655                 '.burn.at',
 656                 '.c-64.at',
 657                 '.catalonian.at',
 658                 '.catholic.at',
 659                 '.chapel.at',
 660                 '.chills.it',
 661                 '.christiandemocrats.at',
 662                 '.cname.at',
 663                 '.colors.at',
 664                 '.commodore.at',
 665                 '.commodore64.at',
 666                 '.communists.at',
 667                 '.conservatives.at',
 668                 '.conspiracy.at',
 669                 '.cooldude.at',
 670                 '.craves.it',
 671                 '.croatian.at',
 672                 '.cuteboy.at',
 673                 '.dancemix.at',
 674                 '.danceparty.at',
 675                 '.dances.it',
 676                 '.danish.at',
 677                 '.dealing.at',
 678                 '.deep.at',
 679                 '.democrats.at',
 680                 '.digs.it',
 681                 '.divxlinks.at',
 682                 '.divxmovies.at',
 683                 '.divxstuff.at',
 684                 '.dizzy.at',
 685                 '.does.it',
 686                 '.dork.at',
 687                 '.drives.it',
 688                 '.dutch.at',
 689                 '.dvdlinks.at',
 690                 '.dvdmovies.at',
 691                 '.dvdstuff.at',
 692                 '.emulators.at',
 693                 '.end.at',
 694                 '.english.at',
 695                 '.eniac.at',
 696                 '.error403.at',
 697                 '.error404.at',
 698                 '.evangelism.at',
 699                 '.exhibitionist.at',
 700                 '.faith.at',
 701                 '.fight.at',
 702                 '.finish.at',
 703                 '.finnish.at',
 704                 '.forward.at',
 705                 '.freebie.at',
 706                 '.freemp3.at',
 707                 '.french.at',
 708                 '.graduatejobs.at',
 709                 '.greenparty.at',
 710                 '.grunge.at',
 711                 '.hacked.at',
 712                 '.hang.at',
 713                 '.hangup.at',
 714                 '.has.it',
 715                 '.hide.at',
 716                 '.hindu.at',
 717                 '.htmlpage.at',
 718                 '.hungarian.at',
 719                 '.icelandic.at',
 720                 '.independents.at',
 721                 '.invisible.at',
 722                 '.is-chillin.it',
 723                 '.is-groovin.it',
 724                 '.japanese.at',
 725                 '.jive.at',
 726                 '.kickass.at',
 727                 '.kickme.to',
 728                 '.kindergarden.at',
 729                 '.knows.it',
 730                 '.kurd.at',
 731                 '.labour.at',
 732                 '.leech.at',
 733                 '.liberals.at',
 734                 '.linuxserver.at',
 735                 '.liqour.at',
 736                 '.lovez.it',
 737                 '.makes.it',
 738                 '.maxed.at',
 739                 '.means.it',
 740                 '.meltdown.at',
 741                 '.methodist.at',
 742                 '.microcomputers.at',
 743                 '.mingle.at',
 744                 '.mirror.at',
 745                 '.moan.at',
 746                 '.mormons.at',
 747                 '.musicmix.at',
 748                 '.nationalists.at',
 749                 '.needz.it',
 750                 '.nerds.at',
 751                 '.neuromancer.at',
 752                 '.newbie.at',
 753                 '.nicepage.at',
 754                 '.ninja.at',
 755                 '.norwegian.at',
 756                 '.ntserver.at',
 757                 '.owns.it',
 758                 '.paint.at',
 759                 '.palestinian.at',
 760                 '.phoneme.at',
 761                 '.phreaking.at',
 762                 '.playz.it',
 763                 '.polish.at',
 764                 '.popmusic.at',
 765                 '.portuguese.at',
 766                 '.powermac.at',
 767                 '.processor.at',
 768                 '.prospects.at',
 769                 '.protestant.at',
 770                 '.rapmusic.at',
 771                 '.raveparty.at',
 772                 '.reachme.at',
 773                 '.reads.it',
 774                 '.reboot.at',
 775                 '.relaxed.at',
 776                 '.republicans.at',
 777                 '.researcher.at',
 778                 '.reset.at',
 779                 '.resolve.at',
 780                 '.retrocomputers.at',
 781                 '.rockparty.at',
 782                 '.rocks.it',
 783                 '.rollover.at',
 784                 '.rough.at',
 785                 '.rules.it',
 786                 '.rumble.at',
 787                 '.russian.at',
 788                 '.says.it',
 789                 '.scared.at',
 790                 '.seikh.at',
 791                 '.serbian.at',
 792                 '.short.as',
 793                 '.shows.it',
 794                 '.silence.at',
 795                 '.simpler.at',
 796                 '.sinclair.at',
 797                 '.singz.it',
 798                 '.slowdown.at',
 799                 '.socialists.at',
 800                 '.spanish.at',
 801                 '.split.at',
 802                 '.stand.at',
 803                 '.stoned.at',
 804                 '.stumble.at',
 805                 '.supercomputer.at',
 806                 '.surfs.it',
 807                 '.swedish.at',
 808                 '.swims.it',
 809                 '.synagogue.at',
 810                 '.syntax.at',
 811                 '.syntaxerror.at',
 812                 '.techie.at',
 813                 '.temple.at',
 814                 '.thinkbig.at',
 815                 '.thirsty.at',
 816                 '.throw.at',
 817                 '.toplist.at',
 818                 '.trekkie.at',
 819                 '.trouble.at',
 820                 '.turkish.at',
 821                 '.unexplained.at',
 822                 '.unixserver.at',
 823                 '.vegetarian.at',
 824                 '.venture.at',
 825                 '.verycool.at',
 826                 '.vic-20.at',
 827                 '.viewing.at',
 828                 '.vintagecomputers.at',
 829                 '.virii.at',
 830                 '.vodka.at',
 831                 '.wannabe.at',
 832                 '.webpagedesign.at',
 833                 '.wheels.at',
 834                 '.whisper.at',
 835                 '.whiz.at',
 836                 '.wonderful.at',
 837                 '.zor.org',
 838                 '.zx80.at',
 839                 '.zx81.at',
 840                 '.zxspectrum.at',
 841         ),
 842         'kisaweb.com',
 843         'krotki.pl',
 844         'kuerzer.de',
 845         '*.kupisz.pl',
 846         'kuso.cc',
 847         '*.l8t.com',
 848         'lame.name',
 849         'lediga.st',
 850         'liencourt.com',
 851         'liteurl.com',
 852         'linkachi.com',
 853         'linkezy.com',
 854         'linkfrog.net',
 855         'linkook.com',
 856         'linkyme.com',
 857         'linkzip.net',
 858         'lispurl.com',
 859         'lnk.in',
 860         'makeashorterlink.com',
 861         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 862                 '*.3gp.fr',
 863                 '*.gtx.fr',
 864                 '*.ici.st',
 865                 '*.max.st',
 866                 '*.nn.cx',              // ns *.sivit.org
 867                 '*.site.cx',    // ns *.sivit.org
 868                 '*.user.fr',
 869                 '*.zxr.fr',
 870         ),
 871         'mcturl.com',
 872         'memurl.com',
 873         'Metamark.net' => array('xrl.us'),
 874         'midgeturl.com',
 875         'Minilink.org' => array('lnk.nu'),
 876         'miniurl.org',
 877         'miniurl.pl',
 878         'mixi.bz',
 879         'mo-v.jp',
 880         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 881                 '.com.md',
 882                 '.co.md',
 883                 '.org.md',
 884                 '.info.md',
 885                 '.host.md',
 886         ),
 887         'monster-submit.com',
 888         'mooo.jp',
 889         'murl.net',
 890         'myactivesurf.net',
 891         'mytinylink.com',
 892         'myurl.in',
 893         'myurl.com.tw',
 894         'nanoref.com',
 895         'Ne1.net' => array(
 896                 '*.ne1.net',
 897                 '*.r8.org',
 898         ),
 899         'Nashville Linux Users Group' => array('nlug.org'),
 900         'not2long.net',
 901         '*.notlong.com',
 902         '*.nuv.pl',
 903         'ofzo.be',
 904         '*.ontheinter.net',
 905         'ourl.org',
 906         'ov2.net',                              // frame
 907         '*.ozonez.com',
 908         'pagebang.com',
 909         'palurl.com',
 910         '*.paulding.net',
 911         'phpfaber.org',
 912         'pygmyurl.com',
 913         'pnope.com',
 914         'prettylink.com',
 915         'PROXID.net' => array(  // also xRelay.net
 916                 '*.asso.ws',
 917                 '*.corp.st',
 918                 '*.euro.tm',
 919                 '*.perso.tc',
 920                 '*.site.tc',
 921                 '*.societe.st',
 922         ),
 923         'qrl.jp',
 924         'qurl.net',
 925         'qwer.org',
 926         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 927         'radiobase.net',
 928         'Rakuten.co.jp' => array(
 929                 'pt.afl.rakuten.co.jp', ///c/
 930         ),
 931         'RedirectFree.com' => array(
 932                 '*.red.tc',
 933                 '*.redirectfree.com',
 934                 '*.sky.tc',
 935                 '*.the.vg',
 936         ),
 937         'redirme.com',
 938         'redirectme.to',
 939         'relic.net',
 940         'rezma.info',
 941         'rio.st',
 942         'rlink.org',
 943         '*.rmcinfo.fr',
 944         'rubyurl.com',
 945         '*.runboard.com',
 946         'runurl.com',
 947         's-url.net',
 948         's1u.net',
 949         'SG5.co.uk' => array(
 950                 '*.sg5.co.uk',
 951                 '*.sg5.info',
 952         ),
 953         'Shim.net' => array(
 954                 '*.0kn.com',
 955                 '*.2cd.net',
 956                 '*.freebiefinders.net',
 957                 '*.freegaming.org',
 958                 '*.op7.net',
 959                 '*.shim.net',
 960                 '*.v9z.com',
 961         ),
 962         'big5.shippingchina.com',
 963         'shorl.com',
 964         'shortenurl.com',
 965         'shorterlink.com',
 966         'shortlinks.co.uk',
 967         'shorttext.com',
 968         'shorturl-accessanalyzer.com',
 969         'Shortify.com' => array(
 970                 '74678439.com',
 971                 'shortify.com',
 972         ),
 973         'shortlink.co.uk',
 974         'ShortURL.com' => array(
 975                 '*.1sta.com',
 976                 '*.24ex.com',
 977                 '*.2fear.com',
 978                 '*.2fortune.com',
 979                 '*.2freedom.com',
 980                 '*.2hell.com',
 981                 '*.2savvy.com',
 982                 '*.2truth.com',
 983                 '*.2tunes.com',
 984                 '*.2ya.com',
 985                 '*.alturl.com',
 986                 '*.antiblog.com',
 987                 '*.bigbig.com',
 988                 '*.dealtap.com',
 989                 '*.ebored.com',
 990                 '*.echoz.com',
 991                 '*.filetap.com',
 992                 '*.funurl.com',
 993                 '*.headplug.com',
 994                 '*.hereweb.com',
 995                 '*.hitart.com',
 996                 '*.mirrorz.com',
 997                 '*.shorturl.com',
 998                 '*.spyw.com',
 999                 '*.vze.com',
1000         ),
1001         'shrinkalink.com',
1002         'shrinkthatlink.com',
1003         'shrinkurl.us',
1004         'shrt.org',
1005         'shrunkurl.com',
1006         'shurl.org',
1007         'shurl.net',
1008         'sid.to',
1009         'simurl.com',
1010         'sitefwd.com',
1011         'Sitelutions.com' => array(
1012                 '*.assexy.as',
1013                 '*.athersite.com',
1014                 '*.athissite.com',
1015                 '*.bestdeals.at',
1016                 '*.byinter.net',
1017                 '*.findhere.org',
1018                 '*.fw.nu',
1019                 '*.isgre.at',
1020                 '*.isthebe.st',
1021                 '*.kwik.to',
1022                 '*.lookin.at',
1023                 '*.lowestprices.at',
1024                 '*.onthenet.as',
1025                 '*.ontheweb.nu',
1026                 '*.pass.as',
1027                 '*.passingg.as',
1028                 '*.redirect.hm',
1029                 '*.rr.nu',
1030                 '*.ugly.as',
1031         ),
1032         '*.skracaj.pl',
1033         'skiltechurl.com',
1034         'skocz.pl',
1035         'slimurl.jp',
1036         'slink.in',
1037         'smallurl.eu',
1038         'smurl.name',
1039         'snipurl.com',
1040         'sp-nov.net',
1041         'splashblog.com',
1042         'spod.cx',
1043         '*.spydar.com',
1044         'Subdomain.gr' => array(
1045                 '*.p2p.gr',
1046                 '*.subdomain.gr',
1047         ),
1048         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1049         'surl.se',
1050         'surl.ws',
1051         'symy.jp',
1052         'tdurl.com',
1053         'tighturl.com',
1054         'tiniuri.com',
1055         'tiny.cc',
1056         'tiny.pl',
1057         'tiny2go.com',
1058         'tinylink.eu',
1059         'tinylinkworld.com',
1060         'tinypic.com',
1061         'tinyr.us',
1062         'TinyURL.com' => array(
1063                 'tinyurl.com',
1064                 'preview.tinyurl.com',
1065                 'tinyurl.co.uk',
1066         ),
1067         'titlien.com',
1068         '*.tlg.pl',
1069         'tlurl.com',
1070         'link.toolbot.com',
1071         'tnij.org',
1072         'Tokelau ccTLD' => array('.tk'),
1073         'toila.net',
1074         '*.toolbot.com',
1075         '*.torontonian.com',
1076         'trimurl.com',
1077         'ttu.cc',
1078         'turl.jp',
1079         '*.tz4.com',
1080         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1081                 '*.1.to',
1082                 '*.4.to',
1083                 '*.5.to',
1084                 '*.82.to',
1085                 '*.s.to',
1086                 '*.u.to',
1087                 '*.ce.to',
1088                 '*.cz.to',
1089                 '*.if.to',
1090                 '*.it.to',
1091                 '*.kp.to',
1092                 '*.ne.to',
1093                 '*.ok.to',
1094                 '*.pc.to',
1095                 '*.tv.to',
1096                 '*.dd.to',
1097                 '*.ee.to',
1098                 '*.hh.to',
1099                 '*.kk.to',
1100                 '*.mm.to',
1101                 '*.qq.to',
1102                 '*.xx.to',
1103                 '*.zz.to',
1104                 '*.ivy.to',
1105                 '*.joa.to',
1106                 '*.ever.to',
1107                 '*.mini.to',
1108         ),
1109         'uchinoko.in',
1110         'Ulimit.com' => array(
1111                 '*.be.tf',
1112                 '*.best.cd',
1113                 '*.bsd-fan.com',
1114                 '*.c0m.st',
1115                 '*.ca.tc',
1116                 '*.clan.st',
1117                 '*.com02.com',
1118                 '*.en.st',
1119                 '*.euro.st',
1120                 '*.fr.fm',
1121                 '*.fr.st',
1122                 '*.fr.vu',
1123                 '*.gr.st',
1124                 '*.ht.st',
1125                 '*.int.ms',
1126                 '*.it.st',
1127                 '*.java-fan.com',
1128                 '*.linux-fan.com',
1129                 '*.mac-fan.com',
1130                 '*.mp3.ms',
1131                 '*.qc.tc',
1132                 '*.sp.st',
1133                 '*.suisse.st',
1134                 '*.t2u.com',
1135                 '*.unixlover.com',
1136                 '*.zik.mu',
1137         ),
1138         '*.uni.cc',
1139         'UNONIC.com' => array(
1140                 '*.at.tf',      // AlpenNIC
1141                 '*.bg.tf',
1142                 '*.ca.tf',
1143                 '*.ch.tf',      // AlpenNIC
1144                 '*.cz.tf',
1145                 '*.de.tf',      // AlpenNIC
1146                 '*.edu.tf',
1147                 '*.eu.tf',
1148                 '*.int.tf',
1149                 '*.net.tf',
1150                 '*.pl.tf',
1151                 '*.ru.tf',
1152                 '*.sg.tf',
1153                 '*.us.tf',
1154         ),
1155         'Up.pl' => array(
1156                 '.69.pl',                       // by nsk101869
1157                 '.crack.pl',            // by nsk101869
1158                 '.film.pl',                     // by sibr19002
1159                 '.h2o.pl',                      // by nsk101869
1160                 '.hostessy.pl',         // by nsk101869
1161                 '.komis.pl',            // by nsk101869
1162                 '.laski.pl',            // by nsk101869
1163                 '.modelki.pl',          // by nsk101869
1164                 '.muzyka.pl',           // by sibr19002
1165                 '.nastolatki.pl',       // by nsk101869
1166                 '.obuwie.pl',           // by nsk101869
1167                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1168                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1169                 '.sexchat.pl',          // by nsk101869
1170                 '.sexlive.pl',          // by nsk101869
1171                 '.tv.pl',                       // by nsk101869
1172                 '.up.pl',                       // by nsk101869
1173                 '.video.pl',            // by nsk101869
1174                 '.xp.pl',                       // nsk101869
1175         ),
1176         '*.uploadr.com',
1177         'url.ie',
1178         'url4.net',
1179         'url-c.com',
1180         'urlbee.com',
1181         'urlbounce.com',
1182         'urlcut.com',
1183         'urlcutter.com',
1184         'urlic.com',
1185         'urlin.it',
1186         'urlkick.com',
1187         'URLLogs.com' => array(
1188                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1189                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1190         ),
1191         '*.urlproxy.com',
1192         'urlser.com',
1193         'urlsnip.com',
1194         'urlzip.de',
1195         'urlx.org',
1196         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1197         'utun.jp',
1198         'uxxy.com',
1199         '*.v27.net',
1200         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1201                 '*.all.at',
1202                 '*.back.to',
1203                 '*.beam.at',
1204                 '*.been.at',
1205                 '*.bite.to',
1206                 '*.board.to',
1207                 '*.bounce.to',
1208                 '*.bowl.to',
1209                 '*.break.at',
1210                 '*.browse.to',
1211                 '*.change.to',
1212                 '*.chip.ms',
1213                 '*.connect.to',
1214                 '*.crash.to',
1215                 '*.cut.by',
1216                 '*.direct.at',
1217                 '*.dive.to',
1218                 '*.drink.to',
1219                 '*.drive.to',
1220                 '*.drop.to',
1221                 '*.easy.to',
1222                 '*.everything.at',
1223                 '*.fade.to',
1224                 '*.fanclub.ms',
1225                 '*.firstpage.de',
1226                 '*.fly.to',
1227                 '*.flying.to',
1228                 '*.fortunecity.co.uk',
1229                 '*.fortunecity.com',
1230                 '*.forward.to',
1231                 '*.fullspeed.to',
1232                 '*.fun.ms',
1233                 '*.gameday.de',
1234                 '*.germany.ms',
1235                 '*.get.to',
1236                 '*.getit.at',
1237                 '*.hard-ware.de',
1238                 '*.hello.to',
1239                 '*.hey.to',
1240                 '*.hop.to',
1241                 '*.how.to',
1242                 '*.hp.ms',
1243                 '*.jump.to',
1244                 '*.kiss.to',
1245                 '*.listen.to',
1246                 '*.mediasite.de',
1247                 '*.megapage.de',
1248                 '*.messages.to',
1249                 '*.mine.at',
1250                 '*.more.at',
1251                 '*.more.by',
1252                 '*.move.to',
1253                 '*.musicpage.de',
1254                 '*.mypage.org',
1255                 '*.mysite.de',
1256                 '*.nav.to',
1257                 '*.notrix.at',
1258                 '*.notrix.ch',
1259                 '*.notrix.de',
1260                 '*.notrix.net',
1261                 '*.on.to',
1262                 '*.page.to',
1263                 '*.pagina.de',
1264                 '*.played.by',
1265                 '*.playsite.de',
1266                 '*.privat.ms',
1267                 '*.quickly.to',
1268                 '*.redirect.to',
1269                 '*.rulestheweb.com',
1270                 '*.run.to',
1271                 '*.scroll.to',
1272                 '*.seite.ms',
1273                 '*.shortcut.to',
1274                 '*.skip.to snap.to',
1275                 '*.soft-ware.de',
1276                 '*.start.at',
1277                 '*.stick.by',
1278                 '*.surf.to',
1279                 '*.switch.to',
1280                 '*.talk.to',
1281                 '*.tip.nu',
1282                 '*.top.ms',
1283                 '*.transfer.to',
1284                 '*.travel.to',
1285                 '*.turn.to',
1286                 '*.vacations.to',
1287                 '*.videopage.de',
1288                 '*.virtualpage.de',
1289                 '*.w3.to',
1290                 '*.walk.to',
1291                 '*.warp9.to',
1292                 '*.window.to',
1293                 '*.yours.at',
1294                 '*.zap.to',
1295                 '*.zip.to',
1296         ),
1297         'VDirect.com' => array(
1298                 '*.emailme.net',
1299                 '*.getto.net',
1300                 '*.inetgames.com',
1301                 '*.netbounce.com',
1302                 '*.netbounce.net',
1303                 '*.oneaddress.net',
1304                 '*.snapto.net',
1305                 '*.vdirect.com',
1306                 '*.vdirect.net',
1307                 '*.webrally.net',
1308         ),
1309         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1310         'vgo2.com',
1311         'Voila.fr' => array('r.voila.fr'),      // Fix it
1312         'w3t.org',
1313         'wapurl.co.uk',
1314         'Wb.st' => array(
1315                 '*.team.st',
1316                 '*.wb.st',
1317         ),
1318         'wbkt.net',
1319         'WebAlias.com' => array(
1320                 '*.andmuchmore.com',
1321                 '*.browser.to',
1322                 '*.escape.to',
1323                 '*.fornovices.com',
1324                 '*.fun.to',
1325                 '*.got.to',
1326                 '*.hottestpix.com',
1327                 '*.imegastores.com',
1328                 '*.latest-info.com',
1329                 '*.learn.to',
1330                 '*.moviefever.com',
1331                 '*.mp3-archives.com',
1332                 '*.myprivateidaho.com',
1333                 '*.radpages.com',
1334                 '*.remember.to',
1335                 '*.resourcez.com',
1336                 '*.return.to',
1337                 '*.sail.to',
1338                 '*.sports-reports.com',
1339                 '*.stop.to',
1340                 '*.thrill.to',
1341                 '*.tophonors.com',
1342                 '*.uncutuncensored.com',
1343                 '*.up.to',
1344                 '*.veryweird.com',
1345                 '*.way.to',
1346                 '*.web-freebies.com',
1347                 '.webalias.com',
1348                 '*.webdare.com',
1349                 '*.xxx-posed.com',
1350         ),
1351         'webmasterwise.com',
1352         'witherst at hotmail.com' => array(     // by Tim Withers
1353                 '*.associates-program.com',
1354                 '*.casinogopher.com',
1355                 '*.ezpagez.com',
1356                 '*.vgfaqs.com',
1357         ),
1358         'wittylink.com',
1359         'wiz.sc',                       // tiny.cc related
1360         'X50.us' => array(
1361                 '*.i50.de',
1362                 '*.x50.us',
1363         ),
1364         'big5.xinhuanet.com',   ///gate/big5/
1365         'xhref.com',
1366         'Xn6.net' => array(
1367                 '*.9ax.net',
1368                 '*.xn6.net',
1369         ),
1370         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1371         '.y11.net',
1372         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1373                 '*.yesns.com',
1374                 '*.srv4u.net',
1375                 //blogne.com
1376         ),
1377         'yatuc.com',
1378         'yep.it',
1379         'yumlum.com',
1380         'yurel.com',
1381         'Z.la' => array(
1382                 'z.la',
1383                 't.z.la',
1384         ),
1385         'zaable.com',
1386         'zapurl.com',
1387         'zarr.co.uk',
1388         'zerourl.com',
1389         'ZeroWeb.org' => array(
1390                 '*.80t.com',
1391                 '*.firez.org',
1392                 '*.fizz.nu',
1393                 '*.ingame.org',
1394                 '*.irio.net',
1395                 '*.v33.org',
1396                 '*.zeroweb.org',
1397         ),
1398         'zhukcity.ru',
1399         'zippedurl.com',
1400         'zr5.us',
1401         '*.zs.pl',
1402         '*.zu5.net',
1403         'zuso.tw',
1404         '*.zwap.to',
1405 );
1406
1407 // --------------------------------------------------
1408
1409 $blocklist['A-2'] = array(
1410
1411         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1412         //
1413         //'*.dyndns.*', // Wildcard for dyndns
1414         //
1415         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1416         'ddns.ru' => array('*.bpa.nu'),
1417         'Dhs.org' => array(
1418                 '*.2y.net',
1419                 '*.dhs.org',
1420         ),
1421         '*.dnip.net',
1422         '*.dyndns.co.za',
1423         '*.dyndns.dk',
1424         '*.dyndns.nemox.net',
1425         'DyDNS.com' => array(
1426                 '*.ath.cx',
1427                 '*.dnsalias.org',
1428                 '*.dyndns.org',
1429                 '*.homeip.net',
1430                 '*.homelinux.net',
1431                 '*.mine.nu',
1432                 '*.shacknet.nu',
1433         ),
1434         '*.dtdns.net',                  // by jscott at sceiron.com
1435         '*.dynu.com',
1436         '*.dynup.net',
1437         '*.fdns.net',
1438         'J-Speed.net' => array(
1439                 '*.bne.jp',
1440                 '*.ii2.cc',
1441                 '*.jdyn.cc',
1442                 '*.jspeed.jp',
1443         ),
1444         '*.mydyn.de',
1445         '*.nerdcamp.net',
1446         'No-IP.com' => array(
1447                         '*.bounceme.net',
1448                         '*.hopto.org',
1449                         '*.myftp.biz',
1450                         '*.myftp.org',
1451                         '*.myvnc.com',
1452                         '*.no-ip.biz',
1453                         '*.no-ip.info',
1454                         '*.no-ip.org',
1455                         '*.redirectme.net',
1456                         '*.servebeer.com',
1457                         '*.serveblog.net',
1458                         '*.servecounterstrike.com',
1459                         '*.serveftp.com',
1460                         '*.servegame.com',
1461                         '*.servehalflife.com',
1462                         '*.servehttp.com',
1463                         '*.servemp3.com',
1464                         '*.servepics.com',
1465                         '*.servequake.com',
1466                         '*.sytes.net',
1467                         '*.zapto.org',
1468         ),
1469         '*.opendns.be',
1470         'Yi.org' => array(      // by dns at whyi.org
1471                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1472
1473                 // 72.55.129.46(redirect.yi.org)
1474                 '*.whyi.org',
1475                 '*.weedns.com',
1476         ),
1477         '*.zenno.info',
1478         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1479                         // and all non-recorded domains redirect to 'agoga.com' now
1480                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1481                         // http://agoga.com/aboutus.html
1482 );
1483
1484 // --------------------------------------------------
1485
1486 // B: Sample setting of:
1487 // Jacked (taken advantage of) and cleaning-less sites
1488 //
1489 // Please notify us about this list with reason:
1490 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1491
1492 $blocklist['B-1'] = array(
1493
1494         // B-1: Web N.M spaces (N > 0, M >= 0)
1495         //
1496         //   Messages from forerunners:
1497         //     activefreehost.com
1498         //       "We regret to inform you that ActiveFreeHost
1499         //        free hosting service has is now closed (as of
1500         //        September 18). We have been online for over
1501         //        two and half years, but have recently decided
1502         //        to take time for software improvement to fight
1503         //        with server abuse, Spam advertisement and
1504         //        fraud."
1505         //
1506         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1507         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1508         '*.007webpro.com',              // by richord at ientry.com
1509         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1510         '*.0buckhost.com',              // by tycho at e-lab.nl
1511         '0Catch.com related' => array(
1512                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1513
1514                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1515                 '*.100megsfree5.com',
1516
1517                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1518                 '*.100freemb.com',              // by Danny Ashworth
1519                 '*.easyfreehosting.com',
1520                 '*.exactpages.com',
1521                 '*.fcpages.com',
1522                 '*.wtcsites.com',
1523
1524                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1525                 '*.741.com',
1526                 '*.freecities.com',
1527                 '*.freesite.org',
1528                 '*.freewebpages.org',
1529                 '*.freewebsitehosting.com',
1530                 '*.jvl.com',
1531
1532                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1533                 '*.freespaceusa.com',
1534                 '*.usafreespace.com',
1535
1536                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1537                 '*.dex1.com',
1538                 '*.questh.com',
1539
1540                 // 209.63.57.10(*snip*), ns *.0catch.com
1541                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1542                 '*.012webpages.com',    // by support at 0catch.com
1543                 '*.150m.com',
1544                 '*.1sweethost.com',             // by whois at bluehost.com
1545                 '*.250m.com',                   // by jason at fahlman.net
1546                 '*.9cy.com',                    // by paulw0t at gmail.com
1547                 '*.angelcities.com',    // by cliff at eccentrix.com
1548                 '*.arcadepages.com',    // by admin at site-see.com
1549                 '*.e-host.ws',                  // by dns at jomax.net
1550                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1551                 '*.fw.bz',                              // by ben at kuehl.as
1552                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1553                 '*.g0g.net',                    // by domains at seem.co.uk
1554                 '*.galaxy99.net',               // by admin at bagchi.org
1555                 '*.greatnow.com',               // by peo at peakspace.com
1556                 '*.hautlynx.com',               // by hlewis28 at juno.com
1557                 '*.ibnsites.com',               // by cmrojas at mail.com
1558                 '*.just-allen.com',             // by extremehype at msn.com
1559                 '*.kogaryu.com',                // by angelguerra at msn.com
1560                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1561                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1562                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1563                 '*.s-enterprize.com',
1564                 '*.servetown.com',              // by jonahbliss at earthlink.net
1565                 '*.stinkdot.org',               // by bluedot at ziplip.com
1566                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1567                 '*.zomi.net',                   // by sianpu at gmail.com
1568         ),
1569         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1570         '100 Best Inc' => array(
1571                 // by 100 Best Inc (info at 100best.com)
1572
1573                 // 66.235.204.7(h204-007.bluefishhosting.com)
1574                 '*.2-hi.com',
1575                 '*.20fr.com',
1576                 '*.20ii.com',
1577                 '*.20is.com',
1578                 '*.20it.com',
1579                 '*.20m.com',    // by jlee at 100bestinc.com
1580                 '*.20to.com',
1581                 '*.2u-2.com',
1582                 '*.3-st.com',
1583                 '*.fws1.com',
1584                 '*.fw-2.com',
1585                 '*.inc5.com',
1586                 '*.on-4.com',
1587                 '*.st-3.com',
1588                 '*.st20.com',
1589                 '*.up-a.com',
1590
1591                 // 216.40.33.252(www-pd.mdnsservice.com)
1592                 '*.0-st.com',
1593                 '*.20me.com',
1594         ),
1595         '*.100foros.com',
1596         '*.101freehost.com',
1597         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1598         '20six Weblog Services' => array(
1599                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1600                 '.20six.co.uk',
1601                 '.20six.fr',
1602                 'myblog.de',
1603                 'myblog.es',
1604         ),
1605         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1606         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1607         '2IP.com' => array(
1608                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1609                 '*.2ip.jp',
1610                 '*.474.jp',
1611                 '*.consensus.jp',
1612                 '*.desyo.jp',
1613                 '*.dif.jp',
1614                 '*.pastels.jp',
1615                 '*.powerblogger.jp',
1616                 '*.vippers.jp',
1617                 '*.webpages.jp',
1618
1619                 // 205.209.97.56(non-existent)
1620                 '*.biografi.biz',
1621                 '*.biografi.info',
1622                 '*.biografi.org',
1623                 '*.biografi.us',
1624                 '*.datadiri.biz',
1625                 '*.datadiri.cc',
1626                 '*.datadiri.com',
1627                 '*.datadiri.info',
1628                 '*.datadiri.net',
1629                 '*.datadiri.org',
1630                 '*.datadiri.tv',
1631                 '*.datadiri.us',
1632                 '*.indo.bz',
1633                 '*.indo.cc',
1634                 '*.profil.bz',
1635                 '*.profil.cc',
1636                 '*.profil.cn',
1637                 '*.profil.in',
1638                 '*.profil.tv',
1639
1640                 // 205.209.101.47(non-existent)
1641                 '*.about.tc',
1642                 '*.about.vg',
1643                 '*.aboutus.gs',
1644                 '*.aboutus.ms',
1645                 '*.aboutus.tc',
1646                 '*.aboutus.vg',
1647                 '*.band.io',
1648                 '*.beijing.am',
1649                 '*.blogs.io',
1650                 '*.boke.am',
1651                 '*.clan.io',
1652                 '*.ecv.gs',
1653                 '*.ecv.ms',
1654                 '*.ecv.vg',
1655                 '*.freekong.cn',
1656                 '*.go2net.ws',
1657                 '*.hello.cn.com',
1658                 '*.hello.io',
1659                 '*.hits.io',
1660                 '*.hostingweb.us',
1661                 '*.hub.io',
1662                 '*.ide.am',
1663                 '*.inc.io',
1664                 '*.incn.in',
1665                 '*.indo.gs',
1666                 '*.indo.ms',
1667                 '*.indo.tc',
1668                 '*.indo.vg',
1669                 '*.infinitehosting.net',
1670                 '*.infinites.net',
1671                 '*.jushige.cn',
1672                 '*.jushige.com',
1673                 '*.kongjian.in',
1674                 '*.lan.io',
1675                 '*.llc.nu',
1676                 '*.maimai.in',
1677                 '*.max.io',
1678                 '*.musician.io',
1679                 '*.mycv.bz',
1680                 '*.mycv.nu',
1681                 '*.mycv.tv',
1682                 '*.myweb.io',
1683                 '*.ourprofile.biz',
1684                 '*.ourprofile.info',
1685                 '*.ourprofile.net',
1686                 '*.ourprofile.org',
1687                 '*.ourprofile.us',
1688                 '*.profil.gs',
1689                 '*.profil.ms',
1690                 '*.profil.tc',
1691                 '*.qiye.in',
1692                 '*.site.io',
1693                 '*.wan.io',
1694                 '*.web-cam.ws',
1695                 '*.webs.io',
1696                 '*.xixu.cc',
1697                 '*.zaici.am',
1698                 '*.zip.io',
1699                 '*.zuzhi.in',
1700
1701                 '*.profil.vg',          // 205.209.101.67(non-existent)
1702                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1703                 //'*.about.gs',         // No record
1704                 //'*.eprofile.us',      // non-existent
1705         ),
1706         '2Page.de' => array(
1707                 '.dreipage.de',
1708                 '.2page.de',
1709         ),
1710         '*.3-hosting.net',
1711         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1712         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1713         '*.8000web.com',        // 75.126.189.45
1714         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1715         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1716         'Ai.NET' => array(
1717                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1718                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1719         ),
1720         '*.aimoo.com',
1721         '*.alkablog.com',
1722         '*.alluwant.de',
1723         '.amkbb.com',
1724         'answerbag.com',        // 8.5.0.128
1725         'anyboard.net',
1726         'AOL.com' =>    // http://about.aol.com/international_services
1727                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1728                 '(?:aol|americaonline)\.' .
1729                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1730                 // Rough but works
1731         'Apple.com' => array('idisk.mac.com'),
1732         '*.askfaq.org',
1733         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1734         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1735         '*.asphost4free.com',
1736         'basenow.com',
1737         'BatCave.net' => array(
1738                 '.batcave.net',                 // 64.22.112.226
1739                 '.freehostpro.com',             // 64.22.112.226
1740         ),
1741         '*.bb-fr.com',
1742         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1743         '*.beeplog.com',
1744         'beepworld.it',
1745         'bestfreeforums.com',
1746         'bestvotexxx.com',
1747         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1748         'blinklist.com',
1749         'Blog.com' => array(
1750                 // by admin.domains at co.blog.com
1751                 '*.blog.com',
1752                 '*.blogandorra.com',
1753                 '*.blogangola.com',
1754                 '*.blogaruba.com',
1755                 '*.blogaustria.at',
1756         ),
1757         '*.blog.com.es',
1758         '*.blog.hr',
1759         '*.blog4ever.com',
1760         '*.blog-fx.com',
1761         '*.blogbeee.com',
1762         'blogas.lt',
1763         'blogbud.com',
1764         '*.blogburkinafaso.com',
1765         '*.blogcu.com',                 // by info at nokta.com
1766         'blogfreely.com',
1767         '*.blogdrive.com',
1768         '*.blogg.de',
1769         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1770         'bloggercrab.com',
1771         'bloggers.nl',
1772         '*.bloggingmylife.com',
1773         '*.bloggles.info',
1774         '*.blogharbor.com',
1775         '*.bloguj.eu',
1776         'bloguitos.com',
1777         'blogosfer.com',
1778         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1779         '*.blogslive.net',
1780         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1781         '*.blogstream.com',
1782         'blogyaz.com',
1783         'bloodee.com',
1784         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1785         'board-4you.de',
1786         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1787         '*.boardhost.com',
1788         'Bravenet.com' => array(
1789                 '*.bravenet.com',
1790                 '*.bravehost.com',
1791         ),
1792         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1793         'C2k.jp' => array(
1794                 // by Makoto Okuse (webmaster at 2style.net)
1795                 '.081.in',
1796                 '.2style.in',
1797                 '.bian.in',
1798                 '.curl.in',
1799                 '.ennui.in',
1800                 '.jinx.in',
1801                 '.loose.in',
1802                 '.mist.in',
1803                 '.muu.in',
1804                 '.naive.in',
1805                 '.panic.in',
1806                 '.slum.in',
1807
1808                 // by 2style, ns *.click2k.net, *.2style.net
1809                 '.2st.jp',
1810                 '.betty.jp',
1811                 '.cabin.jp',
1812                 '.cult.jp',
1813                 '.mippi.jp',
1814                 '.purety.jp',
1815                 '.rapa.jp',
1816                 '.side-b.jp',
1817                 '.web-box.jp',
1818                 '.yea.jp',
1819
1820                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1821                 '.2style.net',
1822                 '.click2k.net',
1823                 '.houka5.com',
1824
1825                 // by click2k, ns *.click2k.net, *.2style.net
1826                 '.psyco.jp',
1827                 '.sweety.jp',
1828
1829                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1830                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1831         ),
1832         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1833         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1834         '*.chueca.com',
1835         'city-forum.com',
1836         '*.clicdev.com',
1837         '*.craigslist.org',
1838         'concepts-mall.com',
1839         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1840         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1841         'counterhit.de',
1842         '*.createblog.com',
1843         '*.createforum.net',
1844         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1845         '*.createmybb.com',
1846         'CwCity.de' => array(
1847                 '.cwcity.de',
1848                 '.cwsurf.de',
1849         ),
1850         'dakrats.net',
1851         '*.dcswtech.com',
1852         'del.icio.us',
1853         '*.devil.it',
1854         '*.diaryland.com',
1855         'diigo.com',                    ///user/
1856         'digg.com',
1857         'digstock.com',
1858         'domains at galaxywave.net' => array(
1859                 'blogstation.net',
1860                 '.phpbb-host.com',
1861         ),
1862         'dotbb.be',
1863         '*.dox.hu',                             // dns at 1b.hu
1864         '*.eadf.com',
1865         '*.eblog.com.au',
1866         '*.ekiwi.de',
1867         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1868         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1869         '*.easyjournal.com',
1870         '*.ebloggy.com',
1871         'enunblog.com',
1872         '*.epinoy.com',
1873         '*.ez-sites.ws',
1874         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1875         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1876         '*.fathippohosting.com',        // 208.101.3.192
1877         'FC2.com' => array(
1878                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1879                         // Many traps available:
1880                         //      bqdr.blog98.fc2.com,       iframe
1881                         //      csfir.blog87.fc2.com,      iframe
1882                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1883                         //      sippou2006.blog60.fc2.com, iframe
1884                         // NOTE: 'blog.fc2.com' is not included
1885                 '*.h.fc2.com',  // Adult
1886         ),
1887         '*.fizwig.com',
1888         'forum.ezedia.net',
1889         '*.extra.hu',                   // angelo at jasmin.hu
1890         '*.fanforum.cc',
1891         'fingerprintmedia.com',
1892         '*.filelan.com',
1893         '*.fora.pl',
1894         '*.forka.eu',
1895         '*.foren-city.de',
1896         'foren-gratis.de',
1897         '*.foros.tv',
1898         '*.forospace.com',
1899         'foroswebgratis.com',
1900         '*.forum-on.de',
1901         '*.forum24.se',
1902         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1903         '.forum66.com',
1904         'Forumotion.com' => array(
1905                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1906                 '*.forumactif.com',     // 91.121.41.79
1907                 '*.editboard.com',      // 75.126.156.15
1908                 '*.sosblog.com',        // 74.86.25.140
1909
1910                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1911                 '*.0forum.biz',
1912                 '*.1forum.biz',
1913                 '*.1fr1.net',
1914                 '*.1talk.net',
1915                 '*.2forum.biz',
1916                 '*.3forum.biz',
1917                 '*.4forum.biz',
1918                 '*.4rumer.com',
1919                 '*.4rumer.net',
1920                 '*.4umer.com',
1921                 '*.4umer.net',
1922                 '*.5forum.biz',
1923                 '*.5forum.info',
1924                 '*.5forum.net',
1925                 '*.6forum.biz',
1926                 '*.6forum.info',
1927                 '*.77forum.com',
1928                 '*.7forum.biz',
1929                 '*.7forum.info',
1930                 '*.7forum.net',
1931                 '*.8forum.biz',
1932                 '*.8forum.info',
1933                 '*.8forum.net',
1934                 '*.9forum.biz',
1935                 '*.9forum.info',
1936                 '*.activebb.net',
1937                 '*.aforumfree.com',
1938                 '*.all-forum.net',
1939                 '*.all-up.com',
1940                 '*.alldiscussion.net',
1941                 '*.allgoo.net',
1942                 '*.allgoo.us',
1943                 '*.american-forum.net',
1944                 '*.americantalk.net',
1945                 '*.annuaire-forums.com',
1946                 '*.asiafreeforum.com',
1947                 '*.asianfreeforum.com',
1948                 '*.azureforum.com',
1949                 '*.azurforum.com',
1950                 '*.bestcheapforum.com',
1951                 '*.bestdiscussion.net',
1952                 '*.bestgoo.com',
1953                 '*.bestofforum.com',
1954                 '*.bestofforum.net',
1955                 '*.bestoforum.net',
1956                 '*.bforum.biz',
1957                 '*.big-forum.net',
1958                 '*.board-poster.com',
1959                 '*.board-realtors.com',
1960                 '*.boardonly.com',
1961                 '*.boardrealtors.net',
1962                 '*.boardsmessage.com',
1963                 '*.briceboard.com',
1964                 '*.bubblelol.com',
1965                 '*.buy-forum.com',
1966                 '*.buy-talk.com',
1967                 '*.buyforum.net',
1968                 '*.buygoo.net',
1969                 '*.buygoo.us',
1970                 '*.camelscrew.com',
1971                 '*.cheap-forum.com',
1972                 '*.cheapforum.net',
1973                 '*.chocoforum.com',
1974                 '*.chocoforum.net',
1975                 '*.clic-topic.com',
1976                 '*.clicboard.com',
1977                 '*.clictopic.com',
1978                 '*.clictopic.net',
1979                 '*.clictopics.com',
1980                 '*.clubdiscussion.net',
1981                 '*.coolbb.net',
1982                 '*.crazy4us.com',
1983                 '*.crazyfruits.net',
1984                 '*.createmyboard.com',
1985                 '*.crewcamel.com',
1986                 '*.cyberfreeforum.com',
1987                 '*.discutforum.com',
1988                 '*.discutfree.com',
1989                 '*.do-forum.com',
1990                 '*.do-goo.com',
1991                 '*.do-goo.net',
1992                 '*.do-talk.com',
1993                 '*.dodiscussion.com',
1994                 '*.dogoo.us',
1995                 '*.easydiscussion.net',
1996                 '*.easyforumlive.com',
1997                 '*.englishboard.net',
1998                 '*.englishboards.com',
1999                 '*.ephpbb.com',
2000                 '*.eraseboard.net',
2001                 '*.eraseboards.net',
2002                 '*.euro-talk.net',
2003                 '*.eurodiscussion.net',
2004                 '*.eurogoo.com',
2005                 '*.exchangesboard.com',
2006                 '*.exprimetoi.net',
2007                 '*.fairtopic.com',
2008                 '*.fforum.biz',
2009                 '*.fforumfree.com',
2010                 '*.first-forum.com',
2011                 '*.firstgoo.com',
2012                 '*.fororama.com',
2013                 '*.forum-2007.com',
2014                 '*.forum-actif.net',
2015                 '*.forum-free.biz',
2016                 '*.forum-free.org',
2017                 '*.forum-motion.com',
2018                 '*.forum0.biz',
2019                 '*.forum0.info',
2020                 '*.forum0.net',
2021                 '*.forum2.biz',
2022                 '*.forum3.biz',
2023                 '*.forum3.info',
2024                 '*.forum5.info',
2025                 '*.forum6.biz',
2026                 '*.forum6.info',
2027                 '*.forum7.biz',
2028                 '*.forum777.com',
2029                 '*.forum8.biz',
2030                 '*.forum9.biz',
2031                 '*.foruma.biz',
2032                 '*.forumactif.biz',
2033                 '*.forumactif.info',
2034                 '*.forumactif.name',
2035                 '*.forumactif.ws',
2036                 '*.forumaction.net',
2037                 '*.forumakers.com',
2038                 '*.forumandco.com',
2039                 '*.forumb.biz',
2040                 '*.forumc.biz',
2041                 '*.forumd.biz',
2042                 '*.forumdediscussions.com',
2043                 '*.forumdediscussions.net',
2044                 '*.forume.biz',
2045                 '*.forumeast.com',
2046                 '*.forumf.biz',
2047                 '*.forumfreek.com',
2048                 '*.forumfreez.com',
2049                 '*.forumg.biz',
2050                 '*.forumh.biz',
2051                 '*.forumh.net',
2052                 '*.forumhope.com',
2053                 '*.forumi.biz',
2054                 '*.forumice.net',
2055                 '*.foruminute.com',
2056                 '*.forumj.biz',
2057                 '*.forumj.net',
2058                 '*.forumjonction.com',
2059                 '*.forumk.biz',
2060                 '*.foruml.biz',
2061                 '*.forumm.biz',
2062                 '*.forummotion.com',
2063                 '*.forummotions.com',
2064                 '*.forumn.biz',
2065                 '*.forumn.net',
2066                 '*.forumo.biz',
2067                 '*.forumonline.biz',
2068                 '*.forumotions.com',
2069                 '*.forump.biz',
2070                 '*.forump.info',
2071                 '*.forumperso.com',
2072                 '*.forumpersos.com',
2073                 '*.forumplatinum.com',
2074                 '*.forumpro.fr',
2075                 '*.forumq.biz',
2076                 '*.forumr.biz',
2077                 '*.forumr.net',
2078                 '*.forumrama.com',
2079                 '*.forums-actifs.com',
2080                 '*.forums-actifs.net',
2081                 '*.forums1.net',
2082                 '*.forumsactifs.com',
2083                 '*.forumsactifs.net',
2084                 '*.forumsfree.org',
2085                 '*.forumsline.com',
2086                 '*.forumsmakers.com',
2087                 '*.forumsmotion.com',
2088                 '*.forumsmotions.com',
2089                 '*.forumt.biz',
2090                 '*.forumv.biz',
2091                 '*.forumvalue.com',
2092                 '*.forumw.biz',
2093                 '*.forumy.biz',
2094                 '*.free-boards.net',
2095                 '*.freediscussion.net',
2096                 '*.freediscussions.net',
2097                 '*.freeforum.me.uk',
2098                 '*.freeforumboard.net',
2099                 '*.freeforumfree.com',
2100                 '*.freevideotalk.com',
2101                 '*.frenchboard.com',
2102                 '*.fruitsandco.com',
2103                 '*.fullboards.com',
2104                 '*.fullsubject.com',
2105                 '*.fullsubject.net',
2106                 '*.get-forum.net',
2107                 '*.getdiscussion.com',
2108                 '*.getgoo.net',
2109                 '*.getgoo.us',
2110                 '*.gettalk.net',
2111                 '*.go-board.com',
2112                 '*.go-board.net',
2113                 '*.go-forum.net',
2114                 '*.go-ogler.com',
2115                 '*.gofreeforum.com',
2116                 '*.gogoo.us',
2117                 '*.goo-board.com',
2118                 '*.goo-boys.com',
2119                 '*.goo-dart.com',
2120                 '*.goo-dole.com',
2121                 '*.goo-done.com',
2122                 '*.gooboards.com',
2123                 '*.goodbb.net',
2124                 '*.goodearths.com',
2125                 '*.goodforum.net',
2126                 '*.goodoles.com',
2127                 '*.goodoolz.com',
2128                 '*.gooforum.com',
2129                 '*.gooforums.com',
2130                 '*.googoolz.com',
2131                 '*.great-forum.com',
2132                 '*.heavenforum.com',
2133                 '*.hforum.biz',
2134                 '*.high-forums.com',
2135                 '*.highbb.com',
2136                 '*.highforum.net',
2137                 '*.hightoxic.com',
2138                 '*.homediscussion.net',
2139                 '*.homegoo.com',
2140                 '*.hooxs.com',
2141                 '*.hot-me.com',
2142                 '*.hot4um.com',
2143                 '*.hotdiscussion.net',
2144                 '*.hotgoo.net',
2145                 '*.in-goo.com',
2146                 '*.in-goo.net',
2147                 '*.infodiscussion.net',
2148                 '*.ingoo.us',
2149                 '*.iowoi.com',
2150                 '*.jforum.biz',
2151                 '*.just-forum.net',
2152                 '*.justboard.net',
2153                 '*.justdiscussion.com',
2154                 '*.justforum.net',
2155                 '*.justgoo.com',
2156                 '*.keuf.net',
2157                 '*.lforum.biz',
2158                 '*.lifediscussion.net',
2159                 '*.lifeme.net',
2160                 '*.lightbb.com',
2161                 '*.logu2.com',
2162                 '*.longdomaine.com',
2163                 '*.lovediscussion.net',
2164                 '*.lowcostforum.com',
2165                 '*.make-free-forum.com',
2166                 '*.makeforumfree.com',
2167                 '*.makefreeforum.com',
2168                 '*.mam9.com',
2169                 '*.manageboard.com',
2170                 '*.max2forum.com',
2171                 '*.meabout.com',
2172                 '*.megabb.com',
2173                 '*.moncontact.com',
2174                 '*.moninter.net',
2175                 '*.motion-forum.net',
2176                 '*.motionforum.net',
2177                 '*.motionsforum.com',
2178                 '*.mrforum.net',
2179                 '*.msnboard.net',
2180                 '*.msnyou.com',
2181                 '*.my-free-board.com',
2182                 '*.my-free-boards.com',
2183                 '*.my-free-forum.com',
2184                 '*.my-free-forums.com',
2185                 '*.my-goo.com',
2186                 '*.my-goo.net',
2187                 '*.mydiscussionboard.com',
2188                 '*.myfreeboard.net',
2189                 '*.mygoo.org',
2190                 '*.myrealboard.com',
2191                 '*.netboarder.com',
2192                 '*.netdiscussion.net',
2193                 '*.netgoo.org',
2194                 '*.new-forum.net',
2195                 '*.newdiscussion.net',
2196                 '*.newgoo.net',
2197                 '*.nforum.biz',
2198                 '*.nice-album.com',
2199                 '*.nice-board.biz',
2200                 '*.nice-board.com',
2201                 '*.nice-board.net',
2202                 '*.nice-boards.com',
2203                 '*.nice-boards.net',
2204                 '*.nice-forum.com',
2205                 '*.nice-forum.net',
2206                 '*.nice-forums.com',
2207                 '*.nice-forums.net',
2208                 '*.nice-gallery.net',
2209                 '*.nice-subject.com',
2210                 '*.nice-subjects.com',
2211                 '*.nice-theme.com',
2212                 '*.nice-topic.com',
2213                 '*.nice-topics.com',
2214                 '*.nicealbums.com',
2215                 '*.niceboard.biz',
2216                 '*.niceboard.net',
2217                 '*.niceboards.net',
2218                 '*.nicegalleries.net',
2219                 '*.nicesubject.com',
2220                 '*.nicesubjects.com',
2221                 '*.nicetopic.net',
2222                 '*.nicetopics.com',
2223                 '*.nightforum.net',
2224                 '*.nocost-forum.com',
2225                 '*.nofeeforum.com',
2226                 '*.one-forum.net',
2227                 '*.onediscussion.net',
2228                 '*.onegoo.us',
2229                 '*.onlinegoo.com',
2230                 '*.onlyquery.com',
2231                 '*.open-board.com',
2232                 '*.openu2.com',
2233                 '*.othersboards.com',
2234                 '*.own0.com',
2235                 '*.pforum.biz',
2236                 '*.phpbb9.com',
2237                 '*.phpbbtest.com',
2238                 '*.positifforum.com',
2239                 '*.postalboard.com',
2240                 '*.prodiscussion.net',
2241                 '*.progoo.us',
2242                 '*.pureforum.net',
2243                 '*.qforum.biz',
2244                 '*.quickbb.net',
2245                 '*.realbb.net',
2246                 '*.realfreeforum.com',
2247                 '*.realmsn.com',
2248                 '*.rforum.biz',
2249                 '*.road2us.com',
2250                 '*.roomforum.com',
2251                 '*.saveboard.com',
2252                 '*.screwcamel.com',
2253                 '*.screwcamels.com',
2254                 '*.sendboard.com',
2255                 '*.sephorum.com',
2256                 '*.sforum.biz',
2257                 '*.shootboard.com',
2258                 '*.shop-forum.net',
2259                 '*.shopsubject.com',
2260                 '*.simpleboard.net',
2261                 '*.site-forums.com',
2262                 '*.smileyforum.net',
2263                 '*.sos-forum.net',
2264                 '*.sos4um.com',
2265                 '*.sos4um.net',
2266                 '*.sosforum.net',
2267                 '*.speedyforum.com',
2268                 '*.stationforum.com',
2269                 '*.subject-expert.com',
2270                 '*.subject-line.com',
2271                 '*.subject-tracer.com',
2272                 '*.subjectchange.com',
2273                 '*.subjectdeals.com',
2274                 '*.subjectdebate.com',
2275                 '*.subjectdone.com',
2276                 '*.subjectonline.com',
2277                 '*.subjectschange.com',
2278                 '*.subjectsecrets.com',
2279                 '*.super-forum.net',
2280                 '*.talk-forums.com',
2281                 '*.team-forum.net',
2282                 '*.team-talk.net',
2283                 '*.teamconvention.com',
2284                 '*.teamgoo.net',
2285                 '*.teensboards.com',
2286                 '*.the-talk.net',
2287                 '*.the-up.com',
2288                 '*.thegoo.us',
2289                 '*.thinksubject.com',
2290                 '*.top-board.com',
2291                 '*.top-forum.net',
2292                 '*.top-me.com',
2293                 '*.top-talk.net',
2294                 '*.topdiscussion.com',
2295                 '*.topgoo.net',
2296                 '*.topic-board.com',
2297                 '*.topic-board.net',
2298                 '*.topic-debate.com',
2299                 '*.topic-ideas.com',
2300                 '*.topic-mail.com',
2301                 '*.topic-zone.com',
2302                 '*.topicboard.net',
2303                 '*.topicboards.com',
2304                 '*.topicmanager.com',
2305                 '*.topicsolutions.net',
2306                 '*.toxicfarm.com',
2307                 '*.unlimitboard.com',
2308                 '*.unlimitedboard.com',
2309                 '*.unlimitedforum.com',
2310                 '*.up-with.com',
2311                 '*.up-your.com',
2312                 '*.urealboard.com',
2313                 '*.user-board.net',
2314                 '*.userboard.net',
2315                 '*.users-board.com',
2316                 '*.users-board.net',
2317                 '*.usersboard.com',
2318                 '*.usersboard.net',
2319                 '*.webgoo.us',
2320                 '*.withboards.com',
2321                 '*.withme.us',
2322                 '*.worldgoo.com',
2323                 '*.yahooboard.net',
2324                 '*.yforum.biz',
2325                 '*.yoo7.com',
2326                 '*.youneed.us',
2327                 '*.your-board.com',
2328                 '*.your-talk.com',
2329                 '*.yourme.net',
2330                 '*.zforum.biz',
2331
2332                 // 75.126.156.15 redirect to forumactif.com
2333                 '*.actifforum.com',
2334                 '*.fr-bb.com',
2335                 '*.superforum.fr',
2336
2337                 // 75.126.156.15 redirect to editboard.com
2338                 '*.bbfr.net',
2339                 '*.bbgraf.com',
2340                 '*.cinebb.com',
2341                 '*.darkbb.com',
2342                 '*.dynamicbb.com',
2343                 '*.zikforum.com',
2344
2345                 // 74.86.25.140 Used: sosblog.com
2346                 '*.0-up.com',
2347                 '*.0-yo.com',
2348                 '*.04live.com',
2349                 '*.06fr.com',
2350                 '*.0fra.com',
2351                 '*.0jet.com',
2352                 '*.0yoo.com',
2353                 '*.1toxic.com',
2354                 '*.2k00.com',
2355                 '*.2xik.com',
2356                 '*.blog-2007.com',
2357                 '*.blog-2008.com',
2358                 '*.blog-2009.com',
2359                 '*.blog-2010.com',
2360                 '*.blog-actif.net',
2361                 '*.blog-marley.com',
2362                 '*.blog-talker.com',
2363                 '*.blog2009.com',
2364                 '*.blogactif.net',
2365                 '*.blogalbums.com',
2366                 '*.blogalerie.com',
2367                 '*.blogaleries.com',
2368                 '*.blogallerys.com',
2369                 '*.blogandme.com',
2370                 '*.blogandyou.com',
2371                 '*.blogbubble.net',
2372                 '*.blogdollz.com',
2373                 '*.bloggeuse.net',
2374                 '*.bloggeuses.com',
2375                 '*.bloginstinct.com',
2376                 '*.bloginternet.net',
2377                 '*.blogmakers.net',
2378                 '*.blogmarley.net',
2379                 '*.blogminister.net',
2380                 '*.blogmorane.com',
2381                 '*.blognboard.com',
2382                 '*.blogotek.net',
2383                 '*.blogpas.com',
2384                 '*.blogpublisher.net',
2385                 '*.blogsalbum.com',
2386                 '*.blogsalbums.com',
2387                 '*.blogsfan.net',
2388                 '*.blogsgallerys.com',
2389                 '*.blogsitephp.com',
2390                 '*.blogsland.net',
2391                 '*.blogsmaker.com',
2392                 '*.blogsmakers.com',
2393                 '*.blogspeed.net',
2394                 '*.blogsup.net',
2395                 '*.blogsutil.com',
2396                 '*.blogsutils.com',
2397                 '*.blogsystem.net',
2398                 '*.blogtalker.net',
2399                 '*.blogtheque.net',
2400                 '*.blogutil.com',
2401                 '*.blogvsboard.com',
2402                 '*.briceblog.com',
2403                 '*.cibleblog.com',
2404                 '*.cristalblog.com',
2405                 '*.crystalblog.net',
2406                 '*.dad-blog.com',
2407                 '*.daddy-blog.com',
2408                 '*.defaultblog.com',
2409                 '*.discussionsblog.com',
2410                 '*.dollzblog.com',
2411                 '*.dtoxic.com',
2412                 '*.easiestblog.net',
2413                 '*.espaceblog.net',
2414                 '*.exitblog.net',
2415                 '*.expensiveblog.com',
2416                 '*.extra-blog.net',
2417                 '*.extrablog.net',
2418                 '*.facileblog.com',
2419                 '*.forblogger.com',
2420                 '*.forumsblogs.com',
2421                 '*.freephpblog.com',
2422                 '*.fresh-blog.net',
2423                 '*.galleryblog.net',
2424                 '*.galleryblogs.net',
2425                 '*.gallerysblog.com',
2426                 '*.gallerysblogs.com',
2427                 '*.hyper-blog.net',
2428                 '*.hyper-blogger.com',
2429                 '*.hyper-blogger.net',
2430                 '*.hyperblogger.net',
2431                 '*.instinctblog.com',
2432                 '*.jeunblog.com',
2433                 '*.jeuneblog.com',
2434                 '*.judblog.com',
2435                 '*.makeblog.net',
2436                 '*.man-blog.net',
2437                 '*.man-blogs.com',
2438                 '*.man-blogs.net',
2439                 '*.manblog.net',
2440                 '*.manblog.org',
2441                 '*.manblog.us',
2442                 '*.manblogs.net',
2443                 '*.mansblog.net',
2444                 '*.mansblogs.com',
2445                 '*.mansblogs.net',
2446                 '*.meetingsblogs.com',
2447                 '*.men-blog.net',
2448                 '*.men-blogs.com',
2449                 '*.men-blogs.net',
2450                 '*.menblog.us',
2451                 '*.menblogs.net',
2452                 '*.mensblogs.net',
2453                 '*.messaginblog.com',
2454                 '*.monblogger.com',
2455                 '*.mum-blog.com',
2456                 '*.mummy-blog.com',
2457                 '*.mummyblog.com',
2458                 '*.myareablog.com',
2459                 '*.myblog-online.net',
2460                 '*.mybloginternet.com',
2461                 '*.myblogland.com',
2462                 '*.myblogmag.com',
2463                 '*.myfreshblog.com',
2464                 '*.myinternetblog.net',
2465                 '*.myoverblog.com',
2466                 '*.myoverblog.net',
2467                 '*.mysharedblog.com',
2468                 '*.nice-albums.com',
2469                 '*.nice-galleries.com',
2470                 '*.nicealbum.net',
2471                 '*.nicegallery.net',
2472                 '*.notreblogger.com',
2473                 '*.outilblog.com',
2474                 '*.over-blogger.com',
2475                 '*.overblogger.com',
2476                 '*.pasblog.com',
2477                 '*.pasblog.net',
2478                 '*.perfect-blog.net',
2479                 '*.perfectblog.net',
2480                 '*.phpblogsite.com',
2481                 '*.phpmyblog.net',
2482                 '*.plateformeblog.com',
2483                 '*.playblogger.com',
2484                 '*.publishmyblog.com',
2485                 '*.pulseblog.net',
2486                 '*.pulseblogs.com',
2487                 '*.puretoxic.com',
2488                 '*.reservedblog.com',
2489                 '*.shareblog.net',
2490                 '*.shareblogs.net',
2491                 '*.shared-blogs.com',
2492                 '*.sharedblog.net',
2493                 '*.sharedblogs.net',
2494                 '*.solideblog.com',
2495                 '*.systemeblog.com',
2496                 '*.talkmeblog.com',
2497                 '*.toolsblog.net',
2498                 '*.toxicplace.com',
2499                 '*.ufreeblog.com',
2500                 '*.uliveblog.com',
2501                 '*.ultratoxic.com',
2502                 '*.utilblog.com',
2503                 '*.utilblogs.com',
2504                 '*.utilsblog.com',
2505                 '*.utilsblogs.com',
2506                 '*.various-blog.com',
2507                 '*.various-blog.net',
2508                 '*.various-blogs.com',
2509                 '*.various-blogs.net',
2510                 '*.variusblog.com',
2511                 '*.versusblog.com',
2512                 '*.vieuxblog.com',
2513                 '*.web-day.net',
2514                 '*.whatsblog.net',
2515                 '*.woman-blog.net',
2516                 '*.woman-blogs.com',
2517                 '*.woman-blogs.net',
2518                 '*.womanblog.com',
2519                 '*.womanblog.org',
2520                 '*.womanblog.us',
2521                 '*.womanblogs.net',
2522                 '*.womansblogs.com',
2523                 '*.womansblogs.net',
2524                 '*.women-blog.net',
2525                 '*.women-blogs.com',
2526                 '*.women-blogs.net',
2527                 '*.womenblog.us',
2528                 '*.womenblogs.net',
2529                 '*.womensblog.net',
2530                 '*.womensblogs.net',
2531                 '*.youblog.net',
2532                 '*.yourliveblog.com',
2533                 '*.yourweblog.net',
2534         ),
2535         '*.forumcommunity.net',
2536         '*.forumer.com',
2537         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2538         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2539         'forumhosting.org',
2540         '*.forums.com',
2541         'forumbolt.com',
2542         'phpbb.forumgratis.com',
2543         'forumlari.net',
2544         '*.forumlivre.com',
2545         'forumnow.com.br',
2546         '*.forumppl.com',
2547         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2548         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2549                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2550                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2551                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2552         '*.fory.pl',
2553         'fotolog.com',
2554         '*.fr33webhost.com',
2555         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2556         '*.free-25.de',
2557         '*.free-bb.com',
2558         'Free-Blog-Hosting.com' => array(
2559                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2560                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2561                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2562                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2563                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2564         ),
2565         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2566         'free-guestbook.net',
2567         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2568         'freebb.nl',
2569         '*.freeclans.de',
2570         '*.freehostplace.com',  // by contact at keepclear.co.uk
2571         '*.freelinuxhost.com',  // by 100webspace.com
2572         '*.nofeehost.com',
2573         '*.freehyperspace.com',
2574         'freeforum.at',                 // by Sandro Wilhelmy
2575         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2576         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2577         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2578         '*.freewebhostingpro.com',
2579         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2580         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2581                 '*.6te.net',
2582                 '*.ueuo.com',
2583                 '*.orgfree.com',
2584         ),
2585         '*.freewebpage.org',
2586         'Freewebs.com' => array(        // by inquiries at freewebs.com
2587                 'freewebs.com',
2588                 'freewebsfarms.com',
2589         ),
2590         '*.freewebspace.net.au',
2591         'freewebtown.com',
2592         '*.freemyforum.com',    // by messahost at gmail.com
2593         'freepowerboards.com',
2594         '*.freepowerboards.com',
2595         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2596         'Funpic.de' => array(   // by alexander at liemen.net
2597                 '*.funpic.de',
2598                 '*.funpic.org',
2599         ),
2600         'gb-hoster.de',
2601         '*.genblogger.com',
2602         'GetBetterHosting.com' => array(
2603                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2604                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2605         ),
2606         '*.gexxe.com',
2607         '*.goodboard.de',
2608         'gossiping.net',
2609         '*.greatnuke.com',
2610         '*.guestbook.de',
2611         'gwebspace.de',
2612         'Google.com' => array(
2613                 '*.blogspot.com',
2614                 'docs.google.com',
2615                 '*.googlegroups.com',           ///web/
2616                 '*.googlepages.com',
2617                 'groups-beta.google.com',
2618                 'groups.google.*',       ///group/ Seems widely distributed
2619                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2620                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2621                         //'groups.google.it', ...
2622         ),
2623         'guestbook.at',
2624         'club.giovani.it',
2625         '*.gratis-server.de',
2626         'healthcaregroup.com',
2627         '*.heliohost.org',
2628         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2629                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2630                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2631                 '*.front.ru',           // (domain at hc.ru)
2632                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2633                 '*.hotbox.ru',          // (domain at hc.ru)
2634                 '*.hotmail.ru',         // (hosting at hc.ru)
2635                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2636                 '*.land.ru',            // (domain at hc.ru)
2637                 '*.mail15.com',         // (hosting at hc.ru)
2638                 '*.mail333.com',        // (hosting at hc.ru)
2639                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2640                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2641                 '*.pisem.net',          // (hosting at hc.ru)
2642                 '*.pochta.ru',          // (domain at hc.ru)
2643                 '*.pochtamt.ru',        // (domain at hc.ru)
2644                 '*.pop3.ru',            // (domain at hc.ru)
2645                 '*.rbcmail.ru',         // (domain at hc.ru)
2646                 '*.smtp.ru',            // (domain at hc.ru)
2647         ),
2648         '*.hiblogger.com',              // by chiaokin at gmail.com
2649         '*.hit.bg',                             // by forumup.com ??
2650         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2651         '*.host-page.com',
2652         '*.hostingclub.de',
2653         'forums.hspn.com',
2654         '*.httpsuites.com',
2655         '*.hut2.ru',
2656         'ibfree.org',                   // 208.101.45.88
2657         'IC.cz' => array(
2658                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2659                 '*.hu.cz',                      // internetcentrum at gmail.com
2660                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2661                 '*.ic.cz',                      // internetcentrum at gmail.com
2662                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2663                 '*.own.cz',                     // internetcentrum at gmail.com
2664                 '*.phorum.cz',          // internetcentrum at gmail.com
2665                 '*.tym.cz',                     // internetcentrum at gmail.com
2666                 '*.tym.sk',                     // jobot at ignum.cz
2667                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2668                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2669                 '*.yw.sk',                      // jobot at ignum.cz
2670         ),
2671         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2672                 '*.0moola.com',
2673                 '*.3000mb.com',
2674                 '.501megs.com',
2675                 '*.teracities.com',
2676                 '*.xoompages.com',
2677         ),
2678         '*.icspace.net',
2679         'iEUROP.net' => array(
2680                 '*.ibelgique.com',
2681                 '*.iespana.es',
2682                 '*.ifrance.com',
2683                 '*.iitalia.com',
2684                 '*.iquebec.com',
2685                 '*.isuisse.com',
2686         ),
2687         '*.ihateclowns.net',
2688         '*.ii55.com',
2689         '*.ipbfree.com',
2690         '*.iphorum.com',
2691         '*.blog.ijijiji.com',
2692         '*.info.com',
2693         '*.informe.com',
2694         'it168.com',
2695         '.iwannaforum.com',
2696         '*.jconserv.net',
2697         '*.jeeran.com',
2698         '*.jeun.fr',
2699         '*.joolo.com',
2700         '*.journalscape.com',
2701         '*.justfree.com',
2702         'kataweb.it' => array(          // kata-redir.kataweb.it
2703                 '*.blog.kataweb.it',
2704                 '*.repubblica.it',
2705         ),
2706         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2707         '*.kokoom.com',
2708         'koolpages.com',
2709         '*.kostenlose-foren.org',
2710         '*.ksiegagosci.info',
2711         'LaCoctelera.com' => array(
2712                 'lacoctelera.com',      // by alberto at the-cocktail.com
2713                 'espacioblog.com',      // by dominios at ferca.com
2714         ),
2715         'Lide.cz' => array(
2716                 '*.lide.cz',
2717                 '*.sblog.cz',
2718         ),
2719         '*.lioru.com',
2720         'limmon.net',
2721         'linkinn.com',
2722         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2723         'listible.com',                 ///list/
2724         'Livedoor.com' => array(
2725                 'blog.livedoor.jp',
2726                 '*.blog.livedoor.com',  // redirection
2727         ),
2728         '*.livejournal.com',
2729         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2730         '*.logme.nl',
2731         'lol.to',
2732         'ltss.luton.ac.uk',
2733         'Lycos.com' => array(
2734                 '.angelfire.com',       // angelfire.lycos.com
2735
2736                 '*.jubii.dk',   // search., medlem.
2737                 '*.jubiiblog.co.uk',
2738                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2739                 '*.jubiiblog.de',
2740                 '*.jubiiblog.dk',
2741                 '*.jubiiblog.fr',
2742                 '*.jubiiblog.it',
2743                 '*.jubiiblog.nl',
2744
2745                 '*.lycos.at',
2746                 '*.lycos.ch',
2747                 '*.lycos.co.uk',
2748                 'angelfire.lycos.com',
2749                 '*.lycos.de',
2750                 '*.lycos.es',
2751                 '*.lycos.fr',
2752                 '*.lycos.it',           // by Lycos Europe GmbH
2753                 '*.lycos.nl',
2754
2755                 '*.spray.se',
2756                 '*.sprayblog.se',
2757
2758                 '*.tripod.com',
2759         ),
2760         '*.mastertopforum.com',
2761         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2762         'meneame.net',
2763         '*.memebot.com',
2764         '*.messageboard.nl',
2765         'mokono GmbH' => array(
2766                 '*.blog.com.es',
2767                 '*.blog.de',
2768                 '*.blog.fr',
2769                 '*.blog.co.uk',
2770                 '*.blog.ca',
2771                 '*.blogs.se',
2772                 '*.blogs.fi',
2773                 '*.blogs.no',
2774                 '*.blogs.dk',
2775                 '*.blogs.ro',
2776                 '*.weblogs.pl',
2777                 '*.weblogs.cz',
2778                 '*.weblogs.hu',
2779         ),
2780         'mojklc.com',
2781         '*.mundoforo.com',
2782         '*.money-host.com',
2783         'MonForum.com' => array(
2784                 '*.monforum.com',
2785                 '*.monforum.fr',
2786         ),
2787         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2788         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2789         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2790         'myblog.is',
2791         'myblogma.com',
2792         '*.myblogvoice.com',
2793         'myblogwiki.com',
2794         '*.myforum.ro',
2795         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2796         '*.myfreewebs.net',
2797         '*.mysite.com',
2798         '*.myxhost.com',
2799         '*.netfast.org',
2800         'NetGears.com' => array(
2801                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2802                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2803                 '*.freewebspace.com',   // 64.49.236.72
2804         ),
2805         'Netscape.com' => array('*.netscape.com'),
2806         'users.newblog.com',
2807         'neweconomics.info',
2808         '*.newsit.es',                          // 75.126.252.108
2809         '*.nm.ru',
2810         '*.nmj.pl',
2811         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2812         'Northsky.com' => array(
2813                 // by hostmaster at northsky.com
2814                 // northsky.com redirects to communityarchitect.com
2815
2816                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2817                 '*.00author.com',
2818                 '*.00band.com',
2819                 '*.00books.com',
2820                 '*.00cash.com',
2821                 '*.00cd.com',
2822                 '*.00dvd.com',
2823                 '*.00family.com',
2824                 '*.00game.com',
2825                 '*.00home.com',
2826                 '*.00it.com',
2827                 '*.00me.com',
2828                 '*.00movies.com',
2829                 '*.00page.com',
2830                 '*.00politics.com',
2831                 '*.00sf.com',
2832                 '*.00show.com',
2833                 '*.00song.com',
2834                 '*.00trek.com',
2835                 '*.00video.com',
2836                 '*.0me.com',
2837                 '*.0pi.com',
2838                 '*.happy-couple.com',
2839                 '*.warp0.com',
2840
2841                 '*.50megs.com',         // 64.136.25.170
2842
2843                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2844                 '*.00server.com',
2845                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2846                 '*.fanspace.com',
2847
2848                 // 64.136.25.168 by Mark Bishop
2849                 '*.00go.com',
2850                 '*.00space.com',
2851                 '*.00sports.com',
2852         ),
2853         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2854         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2855         'onlyfree.de',
2856         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2857         '*.ohost.de',
2858         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2859                 '.friko.pl',
2860                 '.jak.pl',
2861                 '.nazwa.pl',
2862                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2863                 '.w8w.pl',
2864                 '.za.pl',
2865                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2866         ),
2867         'oyax.com',                             ///user_links.php
2868         '*.p2a.pl',
2869         '*.parlaris.com',
2870         '*.pathfinder.gr',
2871         '*.persianblog.com',
2872         '*.phorum.pl',
2873         'Phpbb24.com' => array( // by Daniel Eriksson
2874                 '*.createforum.us',     // registry at webbland.se
2875                 '*.forumportal.us',     // registry at webbland.se
2876                 '*.freeportal.us',      // registry at network24.se
2877                 '*.phpbb2.us',          // daniel at danielos.com
2878                 '*.phpbb24.com',        // daniel at danielos.com
2879                 '*.myforumportal.com',  // daniel at webbland.se
2880         ),
2881         'phpbb4you.com',
2882         'phpbbcommunity.com',
2883         '*.phpbbx.de',
2884         '*.pochta.ru',
2885         '*.portbb.com',
2886         '*.portcms.com',
2887         'powerwebmaster.de',
2888         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2889         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2890         '*.probook.de',
2891         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2892         '*.pun.pl',
2893         'putfile.com',
2894         '*.quickfreehost.com',
2895         'quizilla.com',
2896         '*.quotaless.com',
2897         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2898         'razyboard.com',
2899         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2900         'realhp.de',
2901         'reddit.com',           ///user/
2902         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2903                 '*.juicypornhost.com',
2904                 '*.pornzonehost.com',
2905                 '*.xhostar.com',
2906         ),
2907         'RIN.ru' => array(
2908                 '*.sbn.bz',
2909                 '*.wol.bz',
2910         ),
2911         '*.sayt.ws',
2912         'Seblg.com' => array(
2913                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2914                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2915         ),
2916         '*.seo-blog.org',
2917         '*.shoutpost.com',
2918         '*.siamforum.com',
2919         '*.siteburg.com',
2920         '*.sitehome.ru',
2921         '*.sitesfree.com',              // support at livesearching.com
2922         '*.sitesled.com',
2923         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2924         'SmarTrans.com' => array(
2925                 '.3w.to',
2926                 '.aim.to',
2927                 '.djmp.jp',
2928                 '.nihongourl.nu',
2929                 '.urljp.com',
2930                 '.www1.to',
2931                 '.www2.to',
2932                 '.www3.to',
2933         ),
2934         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2935         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2936         'members.spboards.com',
2937         'forums.speedguide.net',
2938         'Sphosting.com' => array(       // by admin at sphosting.com
2939                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2940                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2941                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2942                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2943                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2944         ),
2945         '*.spicyblogger.com',
2946         '*.spotbb.com',
2947         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2948         '*.squarespace.com',
2949         'stickypond.com',
2950         'stormloader.com',
2951         'strikebang.com',
2952         '*.sultryserver.com',
2953         '*.t35.com',
2954         '*.talks.at',
2955         'tabletpcbuzz.com',
2956         '*.talkthis.com',
2957         'tbns.net',
2958         'telasipforums.com',
2959         'theforumhub.com',
2960         'thestudentunderground.org',
2961         'think.ubc.ca',
2962         '*.thumblogger.com',
2963         'Topix.com' => array(
2964                 'topix.com',
2965                 'topix.net',
2966         ),
2967         'forum.tourism-talk.com.au',
2968         'tycho at e-lab.nl' => array(
2969                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2970                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2971         ),
2972         '*.tumblr.com',
2973         'UcoZ Web-Services' => array(
2974                 '*.3dn.ru',
2975                 '*.clan.su',
2976                 '*.moy.su',
2977                 '*.my1.ru',
2978                 '*.p0.ru',
2979                 '*.pp.net.ua',
2980                 '*.ucoz.co.uk',
2981                 '*.ucoz.com',
2982                 '*.ucoz.net',
2983                 '*.ucoz.org',
2984                 '*.ucoz.ru',
2985                 '*.ws.co.ua',
2986         ),
2987         '*.unforo.net',
2988         'veoh.com',
2989         '*.vdforum.ru',
2990         '*.vtost.com',
2991         '*.vidiac.com',
2992         'Voila.fr' => array('.site.voila.fr'),
2993         'volny.cz',
2994         'voy.com',
2995         '*.welover.org',
2996         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2997                 '*.fasthost.tv',
2998                 '*.hothost.tv',
2999                 '*.isgreat.tv',
3000                 '*.issexy.tv',
3001                 '*.isterrible.tv',
3002                 '*.somegood.tv',
3003                 '*.adultnations.com',
3004                 '*.alladultfemale.com',
3005                 '*.alladultmale.com',
3006                 '*.allbisexual.com',
3007                 '*.allbreast.com',
3008                 '*.allfeminism.com',
3009                 '*.allmanpages.com',
3010                 '*.allmendirect.com',
3011                 '*.allphotoalbum.com',
3012                 '*.allsexpages.com',
3013                 '*.allwomanweb.com',
3014                 '*.attorney-site.com',
3015                 '*.bedclip.com',
3016                 '*.bestfamilysite.com',
3017                 '*.bestmusicpages.com',
3018                 '*.bigmoron.com',
3019                 '*.bourgeoisonline.com',
3020                 '*.candyfrom.us',
3021                 '*.cartoonhit.com',
3022                 '*.cat-on-line.com',
3023                 '*.chokesondick.com',
3024                 '*.closeupsof.us',
3025                 '*.cpa-site.com',
3026                 '*.dampgirl.com',
3027                 '*.dampgirls.com',
3028                 '*.deepestfetish.com',
3029                 '*.docspages.com',
3030                 '*.dog-on-line.com',
3031                 '*.dogcountries.com',
3032                 '*.dognations.com',
3033                 '*.doingitwith.us',
3034                 '*.drenchedface.com',
3035                 '*.drenchedlips.com',
3036                 '*.drspages.com',
3037                 '*.edogden.com',
3038                 '*.eroticountry.com',
3039                 '*.fasthost.tv',
3040                 '*.fineststars.com',
3041                 '*.foronlinegames.com',
3042                 '*.forplanetearth.com',
3043                 '*.freeadultparty.com',
3044                 '*.freespeechsite.com',
3045                 '*.gayadultxxx.com',
3046                 '*.gaytaboo.com',
3047                 '*.greatcookery.com',
3048                 '*.greatrecipepages.com',
3049                 '*.greatstreamingvideo.com',
3050                 '*.hatesit.com',
3051                 '*.hothost.tv',
3052                 '*.iscrappy.com',
3053                 '*.isgreat.tv',
3054                 '*.issexy.tv',
3055                 '*.isterrible.tv',
3056                 '*.itinto.us',
3057                 '*.japannudes.net',
3058                 '*.jesussave.us',
3059                 '*.jesussaveus.com',
3060                 '*.labialand.com',
3061                 '*.lettersfrom.us',
3062                 '*.lookingat.us',
3063                 '*.lunaticsworld.com',
3064                 '*.microphallus.com',
3065                 '*.mycatshow.com',
3066                 '*.mydogshow.com',
3067                 '*.myhardman.com',
3068                 '*.mylawsite.net',
3069                 '*.mylovething.com',
3070                 '*.onasoapbox.com',
3071                 '*.onlinepulpit.com',
3072                 '*.petitionthegovernment.com',
3073                 '*.photosfor.us',
3074                 '*.picturetrades.com',
3075                 '*.pleasekiss.us',
3076                 '*.politicalemergency.com',
3077                 '*.power-emergency.com',
3078                 '*.prayingfor.us',
3079                 '*.realbadidea.com',
3080                 '*.realisticpolitics.com',
3081                 '*.reallybites.com',
3082                 '*.reallypumping.us',
3083                 '*.reallyrules.com',
3084                 '*.reallysuckass.com',
3085                 '*.reallysucksass.com',
3086                 '*.realsweetheart.com',
3087                 '*.rottenass.com',
3088                 '*.schoolreference.com',
3089                 '*.sexheroes.com',
3090                 '*.sharewith.us',
3091                 '*.smutstars.com',
3092                 '*.soakinglips.com',
3093                 '*.somegood.tv',
3094                 '*.songsfrom.us',
3095                 '*.stinkingfart.com',
3096                 '*.stinkyhands.com',
3097                 '*.storiesfrom.us',
3098                 '*.taboocountry.com',
3099                 '*.television-series.com',
3100                 '*.thisbelongsto.us',
3101                 '*.totallyboning.us',
3102                 '*.vaginasisters.com',
3103                 '*.verydirtylaundry.com',
3104                 '*.videosfor.us',
3105                 '*.videosfrom.us',
3106                 '*.videosof.us',
3107                 '*.virtualdogshit.com',
3108                 '*.web1000.com',
3109                 '*.webpicturebook.com',
3110                 '*.wronger.com',
3111                 '*.xxxnations.com',
3112                 '*.yourwaywith.us',
3113         ),
3114         'webblog.ru',
3115         'weblogmaniacs.com',
3116         '.webng.com',                   // www.*, www3.*
3117         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3118         'websitetoolbox.com',
3119         '*.webtropia.com',
3120         'Welnet.de' => array(
3121                 'welnet.de',
3122                 'welnet4u.de',
3123         ),
3124         'wh-gb.de',
3125         '*.wikidot.com',
3126         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3127         '*.wmjblogs.ru',
3128         '*.wordpress.com',
3129         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3130         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3131         '*.xforum.se',
3132         'xfreeforum.com',
3133         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3134         '*.xoomwebs.com',
3135         '.xterm.org',
3136         '.freeblogs.xp.tl',
3137         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3138         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3139         'Yahoo.com' => array(
3140                 'flickr.com',
3141                 'geocities.com',
3142         ),
3143         'YANDEX, LLC.' => array(        // noc at yandex.net
3144                 '*.narod.ru',
3145                 'ya.ru',
3146                 'yandex.ru',
3147         ),
3148         '*.yeahost.com',
3149         'yourfreebb.de',
3150         'Your-Websites.com' => array(
3151                 '*.your-websites.net',
3152                 '*.web-space.ws',
3153         ),
3154
3155
3156         '*.heliohost.org',      // by ashoat at gmail.com
3157         'X10Hosting.com' => array(
3158                 // by support at clockworkcomputers.com
3159                 '*.x10hosting.com',
3160                 '*.elementfx.com',
3161                 '*.exofire.net',
3162                 '*.pcriot.com',
3163         ),
3164         '.zendurl.com',         // by ajcar1992 at gmail.com
3165 );
3166
3167 // --------------------------------------------------
3168
3169 $blocklist['B-2'] = array(
3170
3171         // B-2: Jacked contents, something implanted
3172         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3173         '*.3dm3.com',
3174         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3175         '*.1fr1.com',
3176         'a4aid.org',
3177         'aac.com',
3178         '*.aamad.org',
3179         'ad-pecjak.si',
3180         'agnt.org',
3181         'alwanforthearts.org',
3182         '*.anchor.net.au',
3183         'anewme.org',
3184         'arcrockett.com',               ///golf/excel/
3185         'arisedesign.net',              //Portfolio/d981/
3186         'internetyfamilia.asturiastelecentros.com',
3187         'ballblair.com',                ///images/thumbs/
3188         'Ball State University' => array('web.bsu.edu'),
3189         'btofaq.net',                   ///v3/forum
3190         'blepharospasm.org',
3191         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3192         'nyweb.bowlnfun.dk',
3193         '*.buzznet.com',
3194         'Carroll College' => array(
3195                 'carroll.edu',          ///boards/
3196         ),
3197         '*.canberra.net.au',
3198         'castus.com',
3199         'Case Western Reserve University' => array('case.edu'),
3200         'ceval.de',
3201         'chaco.gov.ar',
3202         'chasingrainbowsaustralia.com', ///geometry/
3203         'codespeak.net',
3204         'Colorado School of Mines' => array('ticc.mines.edu'),
3205         '*.colourware.co.uk',
3206         'cpuisp.com',
3207         'International Christian University' => array('icu.edu.ua'),
3208         '*.iphpbb.com',
3209         'board-z.de',
3210         '*.board-z.de',
3211         'California State University Stanislaus' => array('writing.csustan.edu'),
3212         'cannon.co.za',
3213         'columbosgarden.com',
3214         '*.communityhost.de',
3215         'connectionone.org',
3216         'deathwinds.com',
3217         'deforum.org',
3218         'delayedreaction.org',
3219         'deproduction.org',
3220         'dc503.org',
3221         'dialadeck.com',                ///images/
3222         'dre-centro.pt',
3223         'Duke University' => array('devel.linux.duke.edu'),
3224         '*.esen.edu.sv',
3225         'forums.drumcore.com',
3226         'dundeeunited.org',
3227         'energyglass.com.ua',
3228         'equitas.com.au',               ///images/mim3/, no index.html
3229         'exclusivehotels.com',
3230         'info.ems-rfid.com',
3231         'fairyfunkyard.com',    ///images_files/files/
3232         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3233         'fbwloc.com',
3234         '.fhmcsa.org.au',
3235         'findyourwave.co.uk',
3236         'frogcafe.net',
3237         'plone4.fnal.gov',
3238         'freeforen.com',
3239         'funkdoc.com',
3240         'funnyclipcentral.com',
3241         'gearseds.com',
3242         'generationrice.com',
3243         'ghettojava.com',
3244         'gnacademy.org',
3245         '*.goodboard.de',
3246         'GreenDayVideo.net' => array(
3247                 'greendayvideo.net',
3248                 'espanol.greendayvideo.net',
3249         ),
3250         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3251         'Harvard Law School' => array('blogs.law.harvard.edu'),
3252         'helpiammoving.com',
3253         'homepage-dienste.com',
3254         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3255         'Howard University' => array('networks.howard.edu'),
3256         'hullandhull.com',
3257         'Huntington University' => array('huntington.edu'),
3258         'huskerink.com',
3259         '.hyba.info',
3260         'ideas4you.com',        ///photos/
3261         'inda.org',
3262         '*.indymedia.org',      // by abdecom at riseup.net
3263         'instantbulletin.com',
3264         'internetincomeclub.com',
3265         '*.inventforum.com',
3266         'Iowa State University' => array('boole.cs.iastate.edu'),
3267         'ipwso.org',
3268         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3269         'ironmind.com',
3270         'skkustp.itgozone.com', // hidden JavaScript
3271         'jazz2online.com',
3272         '.jloo.org',
3273         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3274         'kjon.com',
3275         'Kazan State University' => array(
3276                 'dir.kzn.ru',
3277                 'sys.kcn.ru',
3278         ),
3279         'test.kernel.org',
3280         'kevindmurray.com',
3281         'kroegjesroutes.nl',
3282         '.legion.org',
3283         'Loyola Marymount University' => array('lmu.edu'),
3284         'forum.lixium.fr',
3285         'macfaq.net',
3286         'macvirus.org',         ///board/
3287         'me4x4.com',
3288         'microbial-ecology.net',
3289         'minsterscouts.org',
3290         'morallaw.org',
3291         'morerevealed.com',
3292         'macronet.org',
3293         'mamiya.co.uk',
3294         'vcd.mmvcd.com',
3295         'Monmouth College' => array('department.monm.edu'),
3296         'mountainjusticemedia.org',
3297         '*.mybbland.com',
3298         'mydlstore.com',
3299         '*.netboardz.com',
3300         'North Carolina A&T State University' => array(
3301                 'ncat.edu',
3302                 'my.ncat.edu',
3303                 'hlc.ncat.edu',
3304         ),
3305         'placetobe.org',
3306         'Naropa University' => array(
3307                 'naropa.edu',                   ///forum/
3308         ),
3309         'users.nethit.pl',
3310         'nightclubvip.net',
3311         'njbodybuilding.com',
3312         'nlen.org',
3313         'North Carolina School of Science and Mathematics' => array(
3314                 'neverland.ncssm.edu',  ///include/web/forum/
3315                 'grid.ncssm.edu',               ///ncssm_grid/
3316         ),
3317         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3318         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3319         'offtextbooks.com',
3320         'ofimatika.com',
3321         'olympiafoto.com',              ///images/
3322         'omakase-net',                  // iframe
3323         'omikudzi.ru',
3324         'openchemist.net',
3325         'palungjit.com',
3326         'pataphysics-lab.com',
3327         'paypaldev.org',
3328         'paullima.com',
3329         'perl.org.br',
3330         'pfff.co.uk',
3331         'pimpo.com',                    ///_old_site/
3332         'pix4online.co.uk',
3333         'plone.dk',
3334         'preform.dk',
3335         'privatforum.de',
3336         'publicityhound.net',
3337         'puppylinux.net',               ///news/content/counter/pages/
3338         'qea.com',
3339         'rbkdesign.com',
3340         'rehoboth.com',
3341         'rodee.org',
3342         'ryanclark.org',
3343         '*.reallifelog.com',
3344         'rkphunt.com',
3345         'rso-csp.org',                  ///bulletins/
3346         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3347         'sapphireblue.com',
3348         'saskchamber.com',
3349         'savevoorhees.org',
3350         'sdhmalenovice.cz',             //galerie/
3351         'selikoff.net',
3352         'serbisyopilipino.org',
3353         'setbb.com',
3354         'sharejesusinternational.com',
3355         'silver-tears.net',
3356         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3357         '.softpress.com',
3358         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3359         'fora.taniemilitaria.pl',       ///phpbb
3360         'tehudar.ru',
3361         'Tennessee Tech University' => array('manila.tntech.edu'),
3362         'thebluebird.ws',
3363         'theosis.org',
3364         '*.thoforum.com',
3365         'troms-slekt.com',
3366         'theedgeblueisland.com',
3367         'toyshop.com.tw',               // /images/sigui/
3368         'torontoplace.com',
3369         'chat.travlang.com',
3370         'trickropingbylassue.com',
3371         'Truman State University' => array('mathbio.truman.edu'),
3372         'tuathadedannan.org',
3373         'txgotg.com',
3374         'tzaneen.co.za',
3375         'ugeavisen.com',                ///style/
3376         'forums.ugo.com',
3377         'whole.cs.unibo.it',
3378         'The University of North Dakota' => array(
3379                 'learn.aero.und.edu',
3380                 'ez.asn.und.edu',
3381         ),
3382         'The University of Alabama' => array('bama.ua.edu'),
3383         'unisonscotlandlaw.co.uk',
3384         'University of California' => array('classes.design.ucla.edu'),
3385         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3386         'University of Northern Colorado' => array('unco.edu'),
3387         'University of North Carolina' => array(
3388                 'elm.cis.uncw.edu'      ///testBoinc/
3389         ),
3390         'University of Toronto' => array(
3391                 'environment.utoronto.ca',
3392                 'grail.oise.utoronto.ca',
3393                 'utsc.utoronto.ca',
3394         ),
3395         'University of Wisconsin' => array(
3396                 'einstein.phys.uwm.edu'
3397         ),
3398         'urgentclick.com',
3399         'vacant.org.uk',
3400         'Villa Julie College' => array('www4.vjc.edu'),
3401         'Vail Valley Foundation' => array('.vvf.org'),
3402         'wabson.org',
3403         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3404         'webarch.com',          // by WebArchitects (webarch at insync.net)
3405         'weehob.com',
3406         'West Virginia University Parkersburg' => array('wvup.edu'),
3407         'williamsburgrentals.com',
3408         'wolvas.org.uk',
3409         'wookiewiki.org',
3410         'xsgaming.com',                 // Jacked
3411         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3412         'Yahoo.com' => array(
3413                 'blog.360.yahoo.com',
3414                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3415         ),
3416         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3417         'youthpeer.org',
3418         '*.zenburger.com',
3419         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3420 );
3421
3422 // --------------------------------------------------
3423
3424 $blocklist['C'] = array(
3425
3426         // C: Sample setting of:
3427         // Exclusive spam domains
3428         //
3429         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3430         // affiliates, finance, sending viruses, malicious attacks to browsers,
3431         // and/or mixed ones
3432         //
3433         // Please notify us about this list with reason:
3434         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3435
3436         // C-1: Domain sets (seems to be) born to spam you
3437         //
3438         // All buziness-related spam
3439         //'.biz'
3440         //
3441         'admin at seekforweb.com' => array(
3442                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3443                 '.lovestoryx.com',
3444                 '.loveaffairx.com',
3445                 '.onmore.info',
3446                 '.scfind.info',
3447                 '.scinfo.info',
3448                 '.webwork88.info',
3449         ),
3450         'boss at bse-sofia.bg' => array(        // by Boris
3451                 '.htewbop.org',
3452                 '.kimm--d.org',
3453                 '.gtre--h.org',
3454                 '.npou--k.org',
3455                 '.bres--z.org',
3456                 '.berk--p.org',
3457                 '.bplo--s.org',
3458                 '.basdpo.org',
3459                 '.jisu--m.org',
3460                 '.kire--z.org',
3461                 '.mertnop.org',
3462                 '.mooa--c.org',
3463                 '.nake--h.org',
3464                 '.noov--b.org',
3465                 '.suke--y.org',
3466                 '.vasdipv.org',
3467                 '.vase--l.org',
3468                 '.vertinds.org',
3469         ),
3470         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3471                 '.aqq3.info',
3472                 '.axa00.info',
3473                 '.okweb11.org',
3474                 '.okweb12.org',
3475                 '.okweb13.org',
3476                 '.okweb14.org',
3477         ),
3478         'opezdol at gmail.com' => array(
3479                 '.informazionicentro.info',
3480                 '.notiziacentro.info',
3481         ),
3482         'SomethingGen' => array(
3483                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3484                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3485                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3486                 // by Lee Chang (nebucha at model-x.com)
3487                 '.adult-chat-world.info',       // by Lui
3488                 '.adult-chat-world.org',        // by Lui
3489                 '.adult-sex-chat.info',         // by Lui
3490                 '.adult-sex-chat.org',          // by Lui
3491                 '.adult-cam-chat.info',         // by Lui
3492                 '.adult-cam-chat.org',          // by Lui
3493                 '.dildo-chat.org',                      // by Lui
3494                 '.dildo-chat.info',                     // by Lui
3495                 // flirt-online.info is not CamsGen
3496                 '.flirt-online.org',            // by Lui
3497                 '.live-adult-chat.info',        // by Lui
3498                 '.live-adult-chat.org',         // by Lui
3499                 '.sexy-chat-rooms.info',        // by Lui
3500                 '.sexy-chat-rooms.org',         // by Lui
3501                 '.swinger-sex-chat.info',       // by Lui
3502                 '.swinger-sex-chat.org',        // by Lui
3503                 '.nasty-sex-chat.info',         // by Lui
3504                 '.nasty-sex-chat.org',          // by Lui
3505
3506                 '.camshost.info',                       // by Sergey
3507                 '.camdoors.info',                       // by Sergey
3508                 '.chatdoors.info',                      // by Sergey
3509
3510                 // 89.149.206.225 by Pronin
3511                 '.dorozhka.info',
3512                 '.kolonochka.info',
3513                 '.knizhechka.info',
3514                 '.krantik.info',
3515                 '.lebedi.info',
3516                 '.loshad.info',
3517                 '.pechenka.info',
3518                 '.porosenok.info',
3519                 '.indyushonok.info',
3520                 '.kotyonok.info',
3521                 '.kozlyonok.info',
3522                 '.magnoliya.info',
3523                 '.svinka.info',
3524                 '.svinya.info',
3525                 '.televizorchik.info',
3526                 '.tumbochka.info',
3527                 '.zherebyonok.info',
3528
3529                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3530
3531                 '.adult-cam-chat-sex.info',             // by Lee
3532                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3533                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3534                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3535                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3536                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3537                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3538                 '.sex-chat-porn-cam.info',              // by Lee
3539         ),
3540         'mital at topo20.org' => array( // by Marcello Italianore
3541                 '.trevisos.org',
3542                 '.topo20.org',
3543         ),
3544         'WellCams.com' => array(
3545                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3546                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3547                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3548         ),
3549         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3550                 '.besturgent.org',
3551                 '.googletalknow.org',
3552                 '.montypythonltd.org',
3553                 '.supersettlemet.org',
3554                 '.thepythonfoxy.org',
3555                 '.ukgamesyahoo.org',
3556                 '.youryahoochat.org',
3557         ),
3558         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3559                 '.dbsajax.org',
3560                 '.acgt2005.org',
3561                 '.gopikottoor.com',
3562                 '.koosx.org',
3563                 '.mmgz.org',
3564                 '.zhiyehua.net',
3565         ),
3566         'vdf at lovespb.com' => array(  // by Andrey
3567                 '.02psa.info',
3568                 '.1818u.org',
3569                 '.18ew.info',
3570                 '.43sexx.org',
3571                 '.56porn.org',
3572                 '.6discount.info',
3573                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3574                 '.78rus.info',
3575                 '.92ssex.org',          // "ForumGenerator"
3576                 '.93adult.org',         // "ForumGenerator"
3577                 '.aboutsr.info',
3578                 '.aboutzw.info',
3579                 '.all23.info',
3580                 '.allvdf.info',
3581                 '.buy-dge.info',
3582                 '.buypo.info',
3583                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3584                 '.cv83.info',
3585                 '.cvwifw.info',
3586                 '.dabouts.info',
3587                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3588                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3589                 '.free01sa.info',
3590                 '.frees1.info',
3591                 '.freexz.info',
3592                 '.ifree-search.org',
3593                 '.lovespb.info',
3594                 '.myso2.info',
3595                 '.nb74u.info',
3596                 '.ohhh2.info',
3597                 '.ol43.info',
3598                 '.olala18.info',
3599                 '.oursales.info',
3600                 '.pasian1.info',
3601                 '.pldk.info',
3602                 '.po473.info',
3603                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3604                 '.poz2.info',
3605                 '.qpf8j4d.info',
3606                 '.saleqw.info',
3607                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3608                 '.sexz18.info',
3609                 '.sexy69a.info',
3610                 '.shedikc.info',
3611                 '.spb78.info',
3612                 '.usacanadauk.info',
3613                 '.v782mks.info',
3614                 '.vny0.info',
3615                 '.wifes1.info',
3616                 '.xranvam.info',
3617                 '.zenitcx.info',
3618                 '.zxolala.info',
3619         ),
3620         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3621                 '.care01.info',
3622                 '.care02.info',
3623                 '.care03.info',
3624                 '.care04.info',
3625                 '.care05.info',
3626                 '.care06.info',
3627                 '.care07.info',
3628                 '.care08.info',
3629                 '.care09.info',
3630                 '.care10.info',
3631                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3632                 '.klastar01.info',
3633                 '.klastar02.info',
3634                 '.klastar03.info',
3635                 '.klastar04.info',
3636                 '.klastar05.info',
3637                 '.klastar06.info',
3638                 '.klastar07.info',
3639                 '.klastar08.info',
3640                 '.klastar09.info',
3641                 '.klastar10.info',
3642                 '.um20ax01.info',
3643                 '.um20ax02.info',
3644                 '.um20ax03.info',
3645                 '.um20ax04.info',
3646                 '.um20ax05.info',
3647                 '.um20ax06.info',
3648                 '.um20ax07.info',
3649                 '.um20ax08.info',
3650                 '.um20ax09.info',
3651                 '.um20ax10.info',
3652         ),
3653         'forrass at gmail.com' => array(        // by Ismail
3654                 '.zmh01.info',
3655                 '.zmh02.info',
3656                 '.zmh03.info',
3657                 '.zmh04.info',
3658                 '.zmh05.info',
3659                 '.zmh06.info',
3660                 '.zmh07.info',
3661                 '.zmh08.info',
3662                 '.zmh09.info',
3663                 '.zmh10.info',
3664         ),
3665         'Varsylenko Vladimir and family' => array(
3666                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3667                 // by David C. Lack (David.C.Lack at dodgeit.com)
3668                 // by Kuzma V Safonov (admin at irtes.ru)
3669                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3670                 // by LAURI FUNK (vvm_kz at rambler.ru)
3671
3672                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3673                 '.abrek.info',                          // by Petrov
3674                 '.allsexonline.info',           // by Varsylenko
3675                 '.d1rnow.info',                         // by Petrov
3676                 '.doxer.info',                          // Petrov
3677                 '.freeforworld.info',           // Varsylenko
3678                 '.goodworksite.info',           // Varsylenko
3679                 '.onall.info',                          // by Varsylenko
3680                 '.powersiteonline.info',        // by Varsylenko
3681                 '.rentmysite.info',                     // by Varsylenko
3682                 '.sexdrink.info',                       // by Petrov
3683                 '.siteszone.info',                      // by Varsylenko
3684                 '.sfup.info',                           // by Petrov
3685                 '.superfreedownload.info',      // by Varsylenko
3686                 '.superneeded.info',            // by Varsylenko
3687                 '.srup.info',                           // by Petrov
3688
3689                 // 66.235.185.143(*.svabuse.info)
3690                 '.accommodationwiltshire.com',  // by Petrov
3691                 '.levines.info',                        // by Petrov
3692                 '.sernost.info',                        // by Petrov
3693                 '.sexvideosite.info',           // by Petrov
3694                 '.vvsag.info',                          // by Petrov
3695
3696                 // 81.0.195.134
3697                 '.michost.info',                        // by LAURI
3698                 '.parther.info',                        // by LAURI
3699
3700                 // 88.214.202.100
3701                 '.gitsite.info',                        // by Petrov
3702                 '.organiq.info',                        // by Petrov
3703                 '.yoursitedh.info',                     // by Petrov
3704
3705                 // 217.11.233.58 by Petrov
3706                 '.mp3vault.info',
3707
3708                 // DNS time out or failed
3709                 '.bequeous.info',                       // by Davi
3710                 '.sopius.info',                         // by Kuzma
3711                 '.sovidopad.info',                      // by Kuzma
3712                 '.yerap.info',                          // by Kuzma
3713         ),
3714         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3715                 '.flywebs.com',
3716                 '.hostrim.com',
3717                 '.playbit.com',
3718         ),
3719         'webmaster at dgo3d.info' => array(     // by Son Dittman
3720                 '.bsb3b.info',
3721                 '.dgo3d.info',
3722                 '.dgo5d.info',
3723         ),
3724         'cooler.infomedia at gmail.com' => array(
3725                 '.diabetescarelink.com',
3726                 '.firstdebthelp.com',
3727         ),
3728         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3729                 '.pokah.lv',
3730                 '.astrons.com',
3731         ),
3732         'seocool at bk.ru' => array(    // by Skar
3733                 '.implex3.com',
3734                 '.implex6.info',
3735                 '.softprof.org',
3736         ),
3737         'Caslim.info' => array(
3738                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3739                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3740         ),
3741         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3742                 '.777-poker.biz',
3743                 '.porn-11.com',
3744         ),
3745         'Conto.pl' => array(
3746                 '.8x.pl',               // domena at az.pl
3747                 '.3x3.pl',              // by biuro at nazwa.pl
3748                 '.conto.pl',    // by biuro at nazwa.pl
3749                 '.guu.pl',              // by conto.pl (domena at az.pl)
3750                 '.xcx.pl',              // domena at az.pl
3751                 '.yo24.pl',             // domena at az.pl
3752         ),
3753         'mail at pcinc.cn' => array(
3754                 // Domains by Lin Zhi Qiang
3755                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3756
3757                 // 125.65.112.11
3758                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3759                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3760                 '.shoopivdoor.com',
3761
3762                 // 125.65.112.12
3763                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3764                 '.hosetaibei.com',
3765                 '.playsese.com',
3766
3767                 // 125.65.112.13
3768                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3769                 '.ahatena.com',
3770                 '.asdsdgh-jp.com',
3771                 '.conecojp.net',
3772                 '.game-oekakibbs.com',
3773                 '.geocitygame.com',
3774                 '.gsisdokf.net',
3775                 '.korunowish.com',
3776                 '.netgamelivedoor.com',
3777                 '.soultakerbbs.net',
3778                 '.yahoo-gamebbs.com',
3779                 '.ywdgigkb-jp.com',
3780
3781                 // 125.65.112.14
3782                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3783                 '.acyberhome.com',
3784                 '.bbs-qrcode.com',
3785                 '.gamesroro.com',
3786                 '.gameyoou.com',
3787                 '.gangnu.com',
3788                 '.goodclup.com',
3789                 '.lineage321.com',
3790                 '.linkcetou.com',
3791                 '.love888888.com',
3792                 '.ragnarok-bbs.com',
3793                 '.ragnarok-game.com',
3794                 '.rmt-navip.com',
3795                 '.watcheimpress.com',
3796
3797                 // 125.65.112.15
3798                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3799                 '.18girl-av.com',
3800                 '.aurasoul-visjp.com',
3801                 '.gamaniaech.com',
3802                 '.game-mmobbs.com',
3803                 '.gameslin.net',
3804                 '.gemnnammobbs.com',
3805                 '.gogolineage.net',
3806                 '.grandchasse.com',
3807                 '.jpragnarokonline.com',
3808                 '.jprmthome.com',
3809                 '.maplestorfy.com',
3810                 '.netgamero.net',
3811                 '.nothing-wiki.com',
3812                 '.ourafamily.com',
3813                 '.ragnarok-sara.com',
3814                 '.rmt-lineagecanopus.com',
3815                 '.rmt-ranloki.com',
3816                 '.rogamesline.com',
3817                 '.roprice.com',
3818                 '.tuankong.com',
3819                 '.twreatch.com',
3820
3821                 // 125.65.112.22
3822                 // The same IP: web013.cdnhost.cn
3823                 '.lzy88588.com',
3824                 '.ragnaroklink.com',
3825
3826                 // 125.65.112.24
3827                 '.rmtfane.com',
3828                 '.fc2weday.com',
3829                 '.nlftweb.com',
3830
3831                 // 125.65.112.27
3832                 '.i520i.com',
3833                 '.sunwayto.com',
3834
3835                 // 125.65.112.31
3836                 // The same IP: web016.cdnhost.cn
3837                 '.twyaooplay.com',
3838
3839                 // 125.65.112.32
3840                 // The same IP: web037.cdnhost.cn
3841                 '.emeriss.com',
3842                 '.raginfoy.com',
3843                 '.ragnarokgvg.com',
3844                 '.rentalbbs-livedoor.com',
3845                 '.romaker.com',
3846                 '.sagewikoo.com',
3847                 '.samples112xrea.com',
3848                 '.wiki-house.com',
3849
3850                 // 125.65.112.49
3851                 '.chaosx0.com',
3852
3853                 // 125.65.112.88
3854                 // The same IP: web015.cdnhost.cn
3855                 '.a-hatena.com',
3856                 '.biglobe-ne.com',
3857                 '.blogplaync.com',
3858                 '.din-or.com',
3859                 '.dtg-gamania.com',
3860                 '.fcty-net.com',
3861                 '.game-fc2blog.com',
3862                 '.gameurdr.com',
3863                 '.getamped-garm.com',
3864                 '.interzq.com',
3865                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3866                 '.luobuogood.com',
3867                 '.ragnarok-search.com',
3868                 '.rinku-livedoor.com',
3869
3870                 // 125.65.112.90
3871                 '.gtvxi.com',
3872
3873                 // 125.65.112.91
3874                 // The same IP: web004.cdnhost.cn
3875                 '.6828teacup.com',
3876                 '.blog-livedoor.net',
3877                 '.cityblog-fc2web.com',
3878                 '.deco030-cscblog.com',
3879                 '.imbbs2t4u.com',
3880                 '.k5dionne.com',
3881                 '.lineagejp-game.com',
3882                 '.mbspro6uic.com',
3883                 '.slower-qth.com',
3884                 '.wikiwiki-game.com',
3885
3886                 // 125.65.112.93
3887                 // The same IP: web022.cdnhost.cn
3888                 '.aaa-livedoor.net',
3889                 '.cityhokkai.com',              // web022.cdnhost.cn
3890                 '.fanavier.net',
3891                 '.geocitylinks.com',    // web022.cdnhost.cn
3892                 '.kuronowish.net',              // web022.cdnhost.cn
3893                 '.ro-bot.net',
3894
3895                 // 125.65.112.95
3896                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3897                 '.23styles.com',
3898                 '.aehatena-jp.com',
3899                 '.ameblog-jp.net',
3900                 '.antuclt.com',
3901                 '.blog-ekndesign.com',
3902                 '.d-jamesinfo.com',
3903                 '.editco-jp.com',
3904                 '.ezbbsy.com',
3905                 '.extd-web.com',
3906                 '.fotblong.com',
3907                 '.game62chjp.net',
3908                 '.gamegohi.com',
3909                 '.gamesmusic-realcgi.net',
3910                 '.gamesragnaroklink.net',
3911                 '.homepage-nifty.com',
3912                 '.ie6xp.com',
3913                 '.irisdti-jp.com',
3914                 '.jklomo-jp.com',
3915                 '.jpxpie6-7net.com',
3916                 '.lian-game.com',
3917                 '.lineage-bbs.com',
3918                 '.lineage1bbs.com',
3919                 '.livedoor-game.com',
3920                 '.litcan.com',
3921                 '.lovejpjp.com',
3922                 '.m-phage.com',
3923                 '.muantang.com',
3924                 '.plusd-itmedia.com',
3925                 '.runbal-fc2web.com',
3926                 '.saussrea.com',
3927                 '.tooalt.com',
3928                 '.toriningena.net',
3929                 '.yahoodoor-blog.com',
3930                 '.yy14-kakiko.com',
3931
3932                 // 125.65.112.137
3933                 '.clublineage.com',
3934
3935                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3936                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3937                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3938
3939                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3940                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3941
3942                 '.games-nifty.com',             // 255.255.255.255 now
3943                 '.homepage3-nifty.com', // 255.255.255.255 now
3944         ),
3945         'caddd at 126.com' => array(
3946                 '.chengzhibing.com',    // by chen gzhibing
3947                 '.jplinux.com',                 // by lian liang
3948                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3949                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3950                 '.tooplogui.com',               // by zibing cai
3951                 '.twsunkom.com',                // by guo zhi wei
3952                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3953         ),
3954         'nuigiym2 at 163.com' => array( // by fly bg
3955                 '.linainfo.net',                // Seems IP not allocated now
3956                 '.lineagalink.com',             // 220.247.157.99
3957                 '.lineagecojp.com',             // 61.139.126.10
3958                 '.ragnarokonlina.com',  // 220.247.158.99
3959         ),
3960         'aakin at yandex.ru' => array(
3961                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3962                 '.entirestar.com',
3963                 '.superbuycheap.com',
3964                 '.topdircet.com',
3965         ),
3966         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3967                 '.tianmieccp.com',
3968                 '.xianqiao.net',
3969         ),
3970         'm.frenzy at yahoo.com' => array(       // by Michael
3971                 '.p5v.org',
3972                 '.j111.net',
3973                 '.searchhunter.info',
3974                 '.soft2you.info',
3975                 '.top20health.info',
3976                 '.top20ringtones.info',
3977                 '.top20travels.info',
3978                 '.v09v.info',
3979                 '.x09x.info',
3980                 '.zb-1.com',
3981         ),
3982         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3983                 '.bingogoldenpalace.info',
3984                 '.ccarisoprodol.info',
3985                 '.ezxcv.info',
3986                 '.isuperdrug.com',
3987                 '.pharmacif.info',
3988                 '.pornsexteen.biz',
3989                 '.ugfds.info',
3990                 '.vviagra.info',
3991         ),
3992         'anatolsenator at gmail.com' => array(  // by Anatol
3993                 '.cheapestviagraonline.info',
3994                 '.buyphentermineworld.info'
3995         ),
3996         'webmaster at mederotica.com' => array(
3997                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3998                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3999                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4000                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4001         ),
4002         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4003                 '.auase.info',          // by ilemavyq7461 at techie.com
4004                 '.axeboxew.info',       // by zygeu220 at writeme.com
4005                 '.boluzuhy.info',       // by pikico5419 at post.com
4006                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4007                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4008                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4009                 '.exidiqe.info',        // by kufyca5475 at mail.com
4010                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4011                 '.gubiwu.info',         // by lywunef6532 at iname.com
4012                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4013                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4014                 '.jiuuz.info',          // by meqil6549 at mail.com
4015                 '.nudetar.info',        // by vohepafi3536 at techie.com
4016                 '.nipud.info',          // by bohox9872 at mindless.com
4017                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4018                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4019                 '.olasep.info',         // by lizon8506 at mail.com
4020                 '.oueuidop.info',       // by arytyb6913 at europe.com
4021                 '.oviravy.info',        // by amyuu3883 at london.com
4022                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4023                 '.ragibe.info',         // by ehome4458 at myself.com
4024                 '.ucazib.info',         // by gorare7222 at consultant.com
4025                 '.udaxu.info',          // by gubima4007 at usa.com
4026                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4027                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4028                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4029                 '.yvaxat.info',         // by koqun9660 at mindless.com
4030                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4031         ),
4032         'Carmodelrank.com etc' => array(
4033                 // by Brianna Dunlord (briasmi at yahoo.com)
4034                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4035                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4036                 '.carmodelrank.com',// by Brianna
4037                 '.cutestories.net',     // by Brianna
4038                 '.sturducs.com',
4039                 '.bestother.info',      // by Tim
4040                 '.premiumcasinogames.com',      // by Brianna)
4041                 '.yaahooo.info',        // by Alice
4042         ),
4043         'aliacsandr at yahoo.com' => array(
4044                 '.cubub.info',                          // "Free Web Hosting"
4045         ),
4046         'aliacsandr85 at yahoo.com' => array(
4047                 // by Dr. Portillo or Eva Sabina Lopez Castell
4048                 '.xoomer.alice.it',                     // "Free Web Hosting"
4049                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4050                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4051                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4052                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4053                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4054                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4055                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4056                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4057                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4058                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4059                 '.viagra-price.org',            // by Eva
4060                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4061                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4062         ),
4063         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4064         'Something-Gamble' => array(
4065                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4066                 '.atonlineroulette.com',                        // by Blaise Johns
4067                 '.atroulette.com',                                      // by Gino Sand
4068                 '.betting-123.com',                                     // by Joana Caceres
4069                 '.betting-i.biz',                                       // by Joaquina Angus
4070                 '.casino-challenge.com',                        // by Maren Camara
4071                 '.casino-gambling-i.biz',                       // by Giselle Nations
4072                 '.casino-italian.com',                          // by Holley Yan
4073                 '.casino123.net',                                       // by Ta Baines
4074                 '.casinohammamet.com',                          // by Inger Barhorst
4075                 '.casinoqz.com',                                        // by Berenice Snow
4076                 '.casinos-777.net',                                     // by Iona Ayotte
4077                 '.crapsok.com',                                         // by Devon Adair,
4078                 '.dcasinoa.com',                                        // by August Hawkinson
4079                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4080                 '.free-dvd-player.biz',                         // by Rosario Kidd
4081                 '.florida-lottery-01.com',                      // by Romeo Dillon
4082                 '.gaming-123.com',                                      // by Jennifer Byrne
4083                 '.kenogo.com',                                          // by Adriane Bell
4084                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4085                 '.onbaccarat.com',                                      // by Kassandra Dunn
4086                 '.online-experts.biz',                          // by Liberty Helmick
4087                 '.onlinepoker-123.com',                         // by Andrea Feaster
4088                 '.playpokeronline-123.com',                     // by Don Lenard
4089                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4090                 '.texasholdem123.com',                          // by Savion Lasseter
4091                 '.texasholdem-777.com',                         // by Savanna Lederman
4092                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4093                 '.the-craps-100.us',                            // by Lorrine Ripley
4094                 '.the-free-online-game-913.us',         // by Kanesha Clem
4095                 '.the-free-poker-1798.us',                      // by Elaina Witte
4096                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4097                 '.the-online-game-poker-1185.us',       // by Merna Bey
4098                 '.the-playing-black-jack.com',          // by Kristine Brinker
4099                 '.the-poker-1082.us',                           // by Kristofer Boldt
4100                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4101                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4102                 '.the-video-black-jack.com',            // by Jagger Godin
4103         ),
4104         'Something-Insurance' => array(
4105                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4106
4107                 // 0-9
4108                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4109                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4110                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4111                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4112                 '.18wkcf.com',                                  // by Lexy Bohannon
4113                 '.2001werm.org',                                // by Raphael Rayburn
4114                 '.2004heeparea1.org',                   // by Dinorah Andrews
4115                 '.21nt.net',                                    // by Jaida Estabrook
4116                 '.3finfo.com',                                  // by Damian Pearsall
4117                 '.3somes.org',                                  // by Mauro Tillett
4118                 '.453531.com',                                  // by Kurt Flannery
4119                 '.4freesay.com',                                // by Eloy Jones
4120                 '.5ssurvey.com',                                // by Annamarie Kowalski
4121                 '.8-f22.com',                                   // by Larraine Evers
4122                 '.9q.org',                                              // by Ami Boynton
4123
4124                 // A
4125                 '.a40infobahn.com',                             // by Amit Nguyen
4126                 '.a4h-squad.com',                               // by Ross Locklear
4127                 '.aac2000.org',                                 // by Randi Turner
4128                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4129                 '.acahost.com',                                 // by Milton Haberman
4130                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4131                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4132                 '.activel-learning-site.com',   // by Mateo Conn
4133                 '.ad-makers.com',                               // by Shemeka Arsenault
4134                 '.ada-information.org',                 // by Josef Osullivan
4135                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4136                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4137                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4138                 '.aerovac-hotpress.com',                // by Trey Marlow
4139                 '.agfbiosensors.com',                   // by Lionel Dempsey
4140                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4141                 '.affordablerealestate.net',    // by Season Otoole
4142                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4143                 '.ahouserefinance.com',                 // by Young Alley
4144                 '.akirasworld.com',                             // by Piper Sullivan
4145                 '.alderik-production.com',              // by Joan Stiles
4146                 '.alltechdata.com',                             // by Dom Laporte
4147                 '.amconllc.com',                                // by Syble Benjamin
4148                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4149                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4150                 '.angelandcrown.net',                   // by Claretta Najera
4151                 '.ankoralina.com',                              // by Eladia Demers
4152                 '.antiquegoldmine.com',                 // by Keena Marlow
4153                 '.aquinosotros.com',                    // by Nanci Prentice
4154                 '.architectionale.com',                 // by Wilbur Cornett
4155                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4156                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4157                 '.arefinancehome.com',                  // by Duane Doran
4158                 '.arefinancinghome.com',                // by Ike Laney
4159                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4160                 '.auction-emall-site.info',             // by Dayle Denman
4161                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4162                 '.auto-buy-rite.com',                   // by Asuncion Buie
4163                 '.axxinet.net',                                 // by Roberta Gasper
4164                 '.azimutservizi.com',                   // by Ethelene Brook
4165                 '.azstudies.org',                               // by Bernardina Walden
4166
4167                 // B
4168                 '.babtrek.com',                                 // by Simonette Mcbrayer
4169                 '.babycujo.com',                                // by Francisco Akers
4170                 '.bakeddelights.com',                   // by Dave Evenson
4171                 '.bbcart.com',                                  // by Lucio Hamlin
4172                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4173                 '.best-digital-phone.us',               // by Meghann Crockett
4174                 '.bjamusements.com',                    // by Lurlene Butz
4175                 '.blursgsu.com',                                // by Weston Killian
4176                 '.bookwide.net',                                // by Tequila Zacharias
4177                 '.boreholes.org',                               // by Flora Reed
4178                 '.breathingassociaiton.org',    // by Alfred Crayton
4179                 '.birdingnh.com',                               // by Donald Healy
4180                 '.bisdragons.org',                              // by Lupe Cassity
4181                 '.blcschools.net',                              // by Alycia Jolly
4182                 '.bronte-foods.com',                    // by Kary Pfeiffer
4183                 '.buckscountyneighbors.org',    // by Maile Gaffney
4184                 '.buffalofudge.com',                    // by Mable Whisenhunt
4185                 '.burlisonforcongress.com',             // by Luann King
4186                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4187                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4188
4189                 // C
4190                 '.cabanes-web.com',                             // by Vaughn Latham
4191                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4192                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4193                 '.checaloya.com',                               // by Susana Coburn
4194                 '.calvarychapelrgvt.org',               // by Karan Kittle
4195                 '.cameras-esite.info',                  // by Karlee Frisch
4196                 '.cancerkidsforum.org',                 // by Samson Constantino
4197                 '.ccchoices.org',                               // by Kenia Cranford
4198                 '.ccupca.org',                                  // by Evonne Serrano
4199                 '.celebratemehome.com',                 // by Soraya Tower
4200                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4201                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4202                 '.choose-shoes.net',                    // by Geoffrey Setser
4203                 '.churla.com',                                  // by Ollie Wolford
4204                 '.circuithorns.co.uk',                  // by Nathanial Halle
4205                 '.clanbov.com',                                 // by Donell Hozier
4206                 '.cnm-ok.org',                                  // by Thalia Moye
4207                 '.coalitioncoalition.org',              // by Ned Macklin
4208                 '.consoleaddicts.com',                  // by Dorla Hoy
4209                 '.counterclockwise.net',                // by Melynda Hartzell
4210                 '.codypub.com',                                 // by Mercedes Coffman
4211                 '.comedystore.net',                             // by Floy Donald
4212                 '.covsys.co.uk',                                // by Abby Jacey
4213                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4214                 '.craftybidders.com',                   // by Dannie Lazo
4215                 '.credit-card-finder.net',              // by Mellie Deherrera
4216                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4217                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4218                 '.ctwine.org',                                  // by Hailey Knox
4219
4220                 // D
4221                 '.dazyation.com',                               // by Louis Strasser
4222                 '.deepfoam.org',                                // by Ethelyn Southard
4223                 '.debt-fixing.com',                             // by Dagny Rickman
4224                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4225                 '.domainadoption.com',                  // by Breann Pappas
4226                 '.diannbomkamp.com',                    // by Russel Croteau
4227                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4228                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4229                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4230                 '.digital-cameras-esite.info',  // by Milan Jolin
4231                 '.dnstechnet.net',                              // by Tamera Oman
4232                 '.drivenbydata.org',                    // by Katherine Noyes
4233                 '.dtmf.net',                                    // by Micki Slayton
4234                 '.domainsfound.com',                    // by Blossom Lively
4235
4236                 // E
4237                 '.ecstacyabuse.net',                    // by Alana Knight
4238                 '.e-digital-camera-esite.info', // by Romaine Cress
4239                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4240                 '.eldorabusecenter.org',                // by Annabella Oneal
4241                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4242                 '.encaponline.com',                             // by Patrick Keel
4243                 '.ez-shopping-online.com',              // by Gail Bartlett
4244
4245                 // F
4246                 '.faithfulwordcf.com',                  // by Bart Weeks
4247                 '.fammedassoc.com',                             // by Joshua Nelson
4248                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4249                 '.f00k.org',                                    // by Leslie Chapman
4250                 '.foreignrealtions.org',                // by Krystal Hawley
4251                 '.fortwebsite.org',                             // by Kristina Motley
4252                 '.fotofirstdigital.com',                // by Tad Whitfield
4253                 '.foundationcommons.org',               // by Caryn Eskew
4254                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4255                 '.freaky-cheats.com',                   // by Al Klein
4256                 '.free--spyware.com',                   // by Nikki Contreras
4257                 '.french-home-finance-consultant.info', // by Santana Melton
4258                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4259
4260                 // G
4261                 '.gaintrafficfast.com',                 // by Lila Meekins
4262                 '.gaygain.org',                                 // by Shell Davila
4263                 '.gcaaa.com',                                   // by Vallie Jaworski
4264                 '.generalsysteme.com',                  // by Cale Vogel
4265                 '.generation4games.co.uk',              // by Sonya Graham
4266                 '.german-dictionary.us',                // by Rex Daniel
4267                 '.gilmerrec.com',                               // by Leighann Guillory
4268                 '.glenthuntly-athletics.com',   // by Julee Hair
4269                 '.glorybaskets.com',                    // by Lynette Lavelle
4270                 '.goconstructionloan.com',              // by Willis Monahan
4271                 '.gohireit.com',                                // by Bertha Metzger
4272                 '.godcenteredpeople.com',               // by Jaycee Coble
4273
4274                 // H
4275                 '.healthinsuranceem.com',               // by Justin Munson
4276                 '.hearthorizon.info',                   // by Kory Session
4277                 '.hegerindustrial.com',                 // by Toni Wesley
4278                 '.herzequip.com',                               // by Princess Dunkle
4279                 '.hglcms.org',                                  // by Gladwin Ng
4280                 '.hipanoempresa.com',                   // by Shannon Staub
4281                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4282                 '.horse-racing-result.com',             // by Rodney Reynolds
4283                 '.hueckerfamily.com',                   // by Hershel Sell
4284
4285                 // I
4286                 '.ilove2win.com',                               // by Lamont Dickerson
4287                 '.ilruralassistgrp.org',                // by Moises Hauser
4288                 '.imageonsolutions.com',                // by Porsche Dubois
4289                 '.infoanddatacenter.com',               // by Eva Okelley
4290                 '.islamfakta.org',                              // by Goldie Boykin
4291                 '.ithomemortgage.com',                  // by Adelaide Towers
4292                 '.iyoerg.com',                                  // by Madyson Gagliano
4293
4294                 // J
4295                 '.jeffaxelsen.com',                             // by Daphne William
4296                 '.jeffreyf.net',                                // by Vito Platt
4297                 '.johnmartinsreality.com',              // by Pamela Larry
4298                 '.johnsilvers.net',                             // by Silver Battaglia
4299
4300                 // K
4301                 '.kcgerbil.org',                                // by Marisa Thayer
4302                 '.kdc-phoenix.com',                             // by Salma Shoulders
4303                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4304                 '.kosove.org',                                  // by Darwin Schneider
4305
4306                 // L
4307                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4308                 '.letsgokayaking.net',                  // by Winnie Adair
4309                 '.libertycabs.com',                             // by Adela Bonds
4310                 '.liquor-store-cellar.info',    // by Hugh Pearson
4311                 '.locomojo.net',                                // by Marco Harmon
4312                 '.lodatissimo.com',                             // by Adrian Greeson
4313                 '.lsawc.org',                                   // by Lara Han
4314                 '.lycos-test.net',                              // by Rigoberto Oakley
4315
4316                 // M
4317                 '.macro-society.com',                   // by Venessa Hodgson
4318                 '.marthasflavorfest.com',               // by Ahmad Lau
4319                 '.martin-rank.com',                             // by Cathleen Crist
4320                 '.maryandfrank.org',                    // by Theodore Apodaca
4321                 '.masterkwonhapkido.com',               // by Misty Graham
4322                 '.maxrpm-demo.com',                             // by Cristal Cho
4323                 '.mechanomorphic.com',                  // by Stanford Crow
4324                 '.mepublishing.net',                    // by Karly Fleenor
4325                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4326                 '.metwahairports.com',                  // by Nan Kitchen
4327                 '.middle-eastnews.com',                 // by Tybalt Altmann
4328                 '.mikepelchy.com',                              // by Sherly Pearson
4329                 '.milpa.org',                                   // by Nelly Aguilera
4330                 '.modayun.com',                                 // by Camilla Velasco
4331                 '.moonstoneerp.com',                    // by Garret Salmon
4332                 '.morosozinho.com',                             // by Lenore Tovar
4333                 '.morphadox.com',                               // by Hung Zielinski
4334                 '.moscasenlared.com',                   // by Tera Gant
4335                 '.sdjavasig.com',                               // by Gia Swisher
4336                 '.mpeg-radio.com',                              // by Sincere Beebe
4337                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4338                 '.mtseniorcenter.org',                  // by Frederic Ortega
4339                 '.mysteryclips.com',                    // by Edward Ashford
4340
4341                 // N
4342                 '.naavs.org',                                   // by Yuridia Gandy
4343                 '.naval-aviation.org',                  // by Roselle Campo
4344                 '.navigare-ischia.com',                 // by Arielle Coons
4345                 '.ncredc.org',                                  // by Brenda Nye
4346                 '.neonmotorsports.com',                 // by Giovanna Vue
4347                 '.nf-ny.com',                                   // by Yadira Hibbard
4348                 '.ngfdyqva.com',                                // by Emiliano Samples
4349                 '.nicozone.com',                                // by Blaine Shell
4350                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4351                 '.npawny.org',                                  // by Willard Murphy
4352                 '.nysdoed.org',                                 // by Elric Delgadillo
4353                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4354                 '.nytech-ir.com',                               // by Adrien Beals
4355
4356                 // O
4357                 '.oadmidwest.com',                              // by Gavin Kaplan
4358                 '.oarauto.com',                                 // by Susann Merriman
4359                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4360                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4361                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4362                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4363                 '.online-pills-24x7.biz',               // by Aide Hallock
4364                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4365                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4366                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4367                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4368                 '.otterbayweb.com',                             // by Maxwell Irizarry
4369
4370                 // P
4371                 '.painting-technique.us',               // by Bryanna Tooley
4372                 '.pakamrcongress.com',                  // by Bryce Summerville
4373                 '.patabney.com',                                // by Kailyn Slone
4374                 '.parde.org',                                   // by Ellie Yates
4375                 '.participatingprofiles.com',   // by Jaelynn Meacham
4376                 '.partnershipconference.org',   // by Alla Floyd
4377                 '.pet-stars.com',                               // by Carmon Luevano
4378                 '.planning-law.org',                    // by Trista Holcombe
4379                 '.ppawa.com',                                   // by Evonne Scarlett
4380                 '.precisionfilters.net',                // by Faustina Fell
4381
4382                 // Q
4383                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4384                 '.quick-debt-consolidation.net',        // by Lala Marte
4385                 '.quicktvr.com',                                // by Vernell Crenshaw
4386
4387                 // R
4388                 '.radicalsolutions.org',                // by Reece Medlin
4389                 '.randallburgos.com',                   // by Bradly Villa
4390                 '.rcassel.com',                                 // by Janiah Gallant
4391                 '.rearchitect.org',                             // by Marcus Gaudet
4392                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4393                 '.reprisenashville.com',                // by Hester Khan
4394                 '.reptilemedia.com',                    // by Alicia Patel
4395                 '.resellers2000.com',                   // by Dedra Kennedy
4396                 '.reverse-billing.com',                 // by Lazaro Gluck
4397                 '.richcapaldi.com',                             // by Kya Haggard
4398                 '.richformissouri.com',                 // by Alanna Elston
4399                 '.robstraley.com',                              // by Leida Bartell
4400                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4401                 '.rpgbbs.com',                                  // by Leonel Peart
4402                 '.ruralbusinessonline.org',             // by Lynsey Watters
4403                 '.ruwomenscenter.org',                  // by Vince Mclemore
4404                 '.ryanjowens.com',                              // by Janine Smythe
4405
4406                 // S
4407                 '.sagarmathatv.org',                    // by Liam Funke
4408                 '.sakyathubtenling.org',                // by Liane Falgout
4409                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4410                 '.sandishaven.com',                             // by Lino Soloman
4411                 '.scienkeen.com',                               // by Liza Navarra
4412                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4413                 '.severios.com',                                // by Isa Steffen
4414                 '.sexual-hot-girls.com',                // by Viviana Bolton
4415                 '.shakespearelrc.com',                  // by Luciana Weaver
4416                 '.shashran.org',                                // by Adriel Humphries
4417                 '.shoes-shop.us',                               // by Austen Higginbotham
4418                 '.skagitvalleybassanglers.com', // by Necole Thiele
4419                 '.skinsciencesalon.com',                // by Nena Rook
4420                 '.smartalternative.net',                // by Nicki Lariviere
4421                 '.sml338.org',                                  // by Nickole Krol
4422                 '.smogfee.com',                                 // by Sienna Kimble
4423                 '.sneakers-e-shop.info',                // by Nikki Fye
4424                 '.spacewavemedia.com',                  // by Thanh Gast
4425                 '.softkernel.com',                              // by Nicol Hummer
4426                 '.stjoanmerrillville.com',              // by Hunter Beckham
4427                 '.strelinger.com',                              // by Arron Highsmith
4428                 '.striking-viking.com',                 // by Kylie Endsley
4429                 '.sunnydeception.org',                  // by Amaya Llora
4430                 '.sunzmicro.com',                               // by Goddard Arreola
4431                 '.sv-iabc.org',                                 // by Braden Buck
4432                 '.sykotick.com',                                // by Pierce Knecht
4433
4434                 // T
4435                 '.tbody.net',                                   // by Ormond Roman
4436                 '.the-pizzaman.com',                    // by Mario Ramsey
4437                 '.the-shoes.us',                                // by Alejandro Gaffney
4438                 '.theborneocompany.com',                // by Bryanna Tooley
4439                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4440                 '.thehomeschool.net',                   // by September Concepcio
4441                 '.thenewlywed.com',                             // by Allegra Marra
4442                 '.tigerspice.com',                              // by Denis Mosser
4443                 '.tnaa.net',                                    // by Jasmine Andress
4444                 '.top-finance-sites.com',               // by Maryann Doud
4445                 '.tradereport.org',                             // by Bettie Sisk
4446                 '.transmodeling.com',                   // by Martine Button
4447                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4448                 '.tsaoc.com',                                   // by Heriberto Mcfall
4449                 '.tsunamidinner.com',                   // by Nannie Richey
4450
4451                 // U
4452                 '.uhsaaa.com',                                  // by Risa Herbert
4453                 '.ultradeepfield.org',                  // by Bobby Ragland
4454                 '.umkclaw.info',                                // by Cammy Kern
4455                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4456                 '.usa-wolf.com',                                // by Jacklyn Morrill
4457                 '.usjobfair.com',                               // by Lorina Burchette
4458
4459                 // V
4460                 '.vacancesalouer.com',                  // by Loris Bergquist
4461                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4462                 '.valleylibertarians.org',              // by Lena Massengale
4463                 '.vanderbiltevents.com',                // by Gannon Krueger
4464                 '.vanwallree.com',                              // by Michelina Donahue
4465                 '.vcertificates.com',                   // by Hyun Lamp
4466                 '.vonormytexas.us',                             // by Suzette Waymire
4467
4468                 // W
4469                 '.washingtondc-areahomes.net',  // by Ailene Broome
4470                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4471                 '.wolsaoh.org',                                 // by Daniela English
4472                 '.worldpropertycatalog.com',    // by Aray Baxter
4473
4474                 // Y
4475                 '.yankee-merchants.com',                // by Jackson Hinojosa
4476                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4477                 '.yourdomainsource.com',                // by Deems Weingarten
4478
4479                 // Z
4480                 '.zkashan.com',                                 // by Evan Light
4481                 '.zockclock.com',                               // by Dorothea Guthrie
4482         ),
4483         'Something-Drugs' => array(
4484                 // Drugs / Pills / Diet
4485                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4486                 '.abdelghani-shady.com',                // by Elly Alton
4487                 '.bangbangfilm.com',                    // by Davin Chou
4488                 '.centroantequera.com',                 // by Keon Kwiatkowski
4489                 '.champagne-cellar.info',               // by Kandis Rizzo
4490                 '.chix0r.org',                                  // by Christoper Baird
4491                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4492                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4493                 '.fast-cash-01.com',                    // by Edgar Oliver
4494                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4495                 '.fn-nato.com',                                 // by Donny Dunlap
4496                 '.gqyinran.com',                                // by Alejandro Parks
4497                 '.juris-net.com',                               // by Rachelle Bravo
4498                 '.leftpencey.com',                              // by Aileen Ashby
4499                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4500                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4501                 '.palaceroyale.net',                    // by Brycen Stebbins
4502                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4503                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4504                 '.yukissushi.com',                              // by Donell Hozier
4505         ),
4506         'Something-Others' => array(
4507                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4508                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4509         ),
4510         'Something-NoApp' => array(
4511                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4512                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4513                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4514                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4515                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4516         ),
4517         'Cortez and family' => array(
4518                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4519                 '.dronadaarsujf.info',  // by Cortez
4520                 '.fromnananaref.info',  // by Cortez
4521                 '.goorkkjsaka.info',    // by Cortez
4522                 '.jkdfjjkkdfe.info',    // by Rico
4523                 '.jkllloldkjsa.info',   // by Cortez
4524                 '.nnjdksfornms.info',   // by Rico
4525                 '.mcmdkkksaoka.info',   // by Cortez
4526                 '.srattaragfon.info',   // by Cortez
4527                 '.yreifnnonoom.info',   // by Rico
4528                 '.zjajjsvgeuds.info',   // by Cortez
4529         ),
4530         'admin at ematuranza.com' => array(
4531                 '.ancorlontano.com',
4532                 '.dentroallago.com',
4533                 '.digiovinezza.com',
4534                 '.ematuranza.com',
4535                 '.ilfango.com',
4536                 '.nullarimane.com',
4537                 '.questaimmensa.com',
4538                 '.tentailvolo.com',
4539                 '.unatenerezza.com',
4540                 '.volgondilettose.com',
4541         ),
4542         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4543                 '.bid99df.info',
4544                 '.bj498uf.info',
4545                 '.edeuj84.info',
4546                 '.f4mfid.info',
4547                 '.g4vf03a.info',
4548                 '.j09j4r.info',
4549                 '.jv4r8hv.info',
4550                 '.k43sd3.info',
4551                 '.k4r84d.info',
4552                 '.k4rvda.info',
4553                 '.k4v0df.info',
4554                 '.k903os.info',
4555                 '.k9df93d.info',
4556                 '.kv94fd.info',
4557                 '.ksjs93.info',
4558                 '.l0ks03.info',
4559                 '.l9u3jc.info',
4560                 '.lv043a.info',
4561                 '.nh94h9.info',
4562                 '.m94r9d.info',
4563                 '.s87fvd.info',
4564                 '.v3k0d.info',
4565                 '.v4r8j4.info',
4566                 '.vf044s.info',
4567                 '.vj49rs.info',
4568                 '.vk498j.info',
4569                 '.u03jow.info',
4570         ),
4571         'Nikhil and Brian' => array(
4572                 // by Brian Dieckman (info at iudndjsdhgas.info)
4573                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4574                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4575                 '.ihfjeswouigf.info',   // by Brian, / was not found
4576                 '.iudndjsdhgas.info',   // by Brian, / was not found
4577                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4578                 '.jiatdbdisut.info',    // by Brian, / was not found
4579                 '.jkfierwoundhw.info',  // by Brian, / was not found
4580                 '.kfjeoutweh.info',             // by Brian, / was not found
4581                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4582                 '.oudjskdwibfm.info',   // by Brian, / was not found
4583                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4584                 '.itxbsjacun.info',             // by Nikhil, / was not found
4585                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4586                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4587                 '.najedncdcounrd.info', // by Nikhil, / was not found
4588                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4589                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4590                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4591                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4592                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4593                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4594                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4595                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4596                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4597         ),
4598         'wealth777 at gmail.com' => array(      // by Henry Ford
4599                 '.brutal-forced.com',
4600                 '.library-bdsm.com',
4601                 '.rape-fantasy.us',
4602         ),
4603         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4604                 '.purerotica.com',
4605                 '.richsex.com',
4606                 '.servik.net',
4607                 '.withsex.com',
4608         ),
4609         'dreamteammoney.com' => array(
4610                 '.dreamteammoney.com',  // dtmurl.com related
4611                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4612         ),
4613         'KLIK VIP Search and family' => array(
4614                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4615                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4616                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4617                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4618                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4619                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4620                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4621         ),
4622         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4623                 '.antivirs.info',
4624                 '.antivirus1.info',
4625                 '.antivirus2.info',
4626         ),
4627         'wasam at vangers.net and family' => array(
4628
4629                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4630                 '.bahatoca.org',
4631                 '.digestlycos.org',
4632                 '.educativaanale.info',
4633                 '.guildstuscan.org',
4634                 '.isaakrobbins.info',
4635                 '.isfelons.org',
4636                 '.lvwelevated.org',
4637                 '.macphersonaca.org',
4638                 '.markyaustrian.org',
4639                 '.michelepug.org',
4640                 '.opalbusy.info',
4641                 '.quijotebachata.info',
4642                 '.salthjc.info',
4643                 '.shogunnerd.info',
4644                 '.solarissean.org',
4645                 '.sparkgsx.info',
4646                 '.tarzanyearly.org',
4647                 '.tulabnsf.org',
4648                 '.vaccarinos.org',
4649
4650                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4651                 '.e2007.info',
4652                 '.cmoss.info',
4653
4654                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4655                 '.finddesk.org',
4656                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4657                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4658                 '.rcatalog.org',
4659                 '.sbitzone.org',
4660
4661                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4662                 '.cheapns.org',
4663                 '.my-top.net',
4664                 '.sfind.net',
4665                 '.sspot.net',
4666                 '.suvfind.info',
4667
4668                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4669                 '.trumber.com',
4670
4671                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4672                 '.blogduet.org',
4673                 '.carelf.info',
4674                 '.cmagic.org',
4675                 '.cspell.org',
4676                 '.dspark.org',
4677                 '.dtonic.org',
4678                 '.mcharm.info',
4679                 '.mslook.info',
4680                 '.phpdinnerware.info',
4681                 '.rnation.org',
4682                 '.uzing.org',
4683
4684                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4685                 '.allbar.info',
4686                 '.allersearch.org',
4687                 '.allzoom.org',
4688                 '.dynall.org',
4689                 '.fastopia.org',
4690                 '.offasfast.info',
4691                 '.rblast.org',
4692                 '.rchistes.info',
4693                 '.rette.org',
4694                 '.shufflequince.org',
4695                 '.suvlook.org',
4696
4697                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4698                 '.290cabeza.org',
4699                 '.bossierpainted.org',
4700                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4701                 '.definekonica.info',   // Admin: tvaals at vangers.net
4702                 '.gradetelemundo.info',
4703                 '.hydraulickin.info',
4704                 '.indicadorestmj.info',
4705                 '.keeleykincaid.org',
4706                 '.kleenbowser.info',
4707                 '.pipnickname.info',
4708                 '.pacolily.org',
4709                 '.redeemtrabalho.info',
4710                 '.scanmakerchua.info',
4711                 '.titanmessina.info',
4712                 '.tragratuit.org',
4713                 '.yeareola.info',
4714         ),
4715         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4716                 '.canadianmedsworld.info',      // 84.252.133.112
4717                 '.tabsdrugstore.info',          // 84.252.133.114
4718                 '.tabsstore.info',                      // 84.252.133.114
4719                 '.topcholesterol.info',         // 84.252.133.132
4720         ),
4721         'be.cx' => array(
4722                 '.be.cx',
4723                 '.ca.cx',
4724         ),
4725         'john780321 at yahoo.com' => array(     // by John  Brown
4726                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4727                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4728                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4729         ),
4730         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4731                 '.bertela.info',
4732                 '.forblis.info',
4733                 '.frenallo.info',
4734                 '.goyahoo.info',
4735                 '.herbak.info',
4736                 '.kiokast.info',
4737                 '.nerenok.info',
4738                 '.pestgets.info',
4739                 '.snukker.info',
4740                 '.thegetspons.info',
4741         ),
4742         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4743                 '.bobop.info',
4744                 '.kwwwe.info',
4745                 '.piikz.info',
4746                 '.moosm.info',
4747                 '.vvvw.info',
4748         ),
4749         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4750                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4751                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4752                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4753                 '.jplingood.com',       // 125.65.112.15
4754                 '.linenew.com',         // 203.191.148.96
4755                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4756                 '.yzlin.com',           // 220.162.244.36
4757         ),
4758         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4759                 '.1111mb.com',
4760                 '.2sex18.com',
4761                 '.69porn1.com',
4762         ),
4763         'ECTechnology' => array(
4764                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4765                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4766                 '.automouse.jp',
4767         ),
4768         'lyqz at 21cn.com' => array(
4769                 '.japangame1.com',
4770                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4771                 '.livedoor1.com',
4772                 '.ragnarokonline1.com',
4773                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4774         ),
4775         'kingrou at hotmail.com' => array(      // by yangjianhe
4776                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4777                 '.453787.com',
4778         ),
4779         'anpaul541000 at 163.com' => array(     // by su qiuqing
4780                 '.cetname.com',                 // 222.77.185.87
4781                 '.jpgamer.net',                 // 220.247.157.106
4782                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4783                 '.lovejptt.com',                // 222.77.185.87
4784                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4785                 '.playncsoft.net',              // 220.247.157.106
4786         ),
4787         'abc00613 at 163.com' => array( // by guo yong
4788                 '.avtw1068.com',                // 64.74.223.11
4789                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4790                 '.djkkk66990.com',              // 68.178.232.99
4791                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4792         ),
4793         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4794                 '.cmonfofo.com',
4795                 '.discutbb.com',
4796         ),
4797         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4798                 '.preca.info',
4799                 '.skiaggi.info',
4800                 '.scrianal.info',
4801                 '.tageom.info',
4802         ),
4803         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4804                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4805                 '.inpros.net',                  // 202.181.98.79
4806                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4807         ),
4808         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4809                 '.ec51.com',
4810                 '.ec51.net',
4811         ),
4812         'abbevillelaties at yahoo.fr etc' => array(
4813                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4814                 '.ringtones-rate.com',
4815                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4816                 '.special-ringtones.net',
4817         ),
4818         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4819                 '.1sgsc.info',
4820                 '.3h4r89h.info',
4821                 '.3v44dd.info',
4822                 '.6rfuh6.info',
4823                 '.84hd8.info',
4824                 '.94bui89.info',
4825                 '.agysb3.info',
4826                 '.asdjhs.info',
4827                 '.bcvnrth.info',
4828                 '.bheb4r.info',
4829                 '.bhiuno.info',
4830                 '.biug7g.info',
4831                 '.bjb5f4.info',
4832                 '.bob8g7g.info',
4833                 '.br89bdd.info',
4834                 '.bsa3h.info',
4835                 '.bsieb8.info',
4836                 '.basbiubf.info',
4837                 '.bobwwfs2.info',
4838                 '.ciuv9t.info',
4839                 '.dbmdx4.info',
4840                 '.dbrjms.info',
4841                 '.dbtcm.info',
4842                 '.dff9ghu.info',
4843                 '.dfshbb.info',
4844                 '.dgd4ffdh.info',
4845                 '.dh3ge.info',
4846                 '.duc86jh.info',
4847                 '.ergth45.info',
4848                 '.f78bf7ffb.info',
4849                 '.gbdfbo4.info',
4850                 '.ger45.info',
4851                 '.gnvnrrg.info',
4852                 '.h47he7.info',
4853                 '.h488hbd4.info',
4854                 '.hd72b94.info',
4855                 '.he74b7.info',
4856                 '.hfujfnr.info',
4857                 '.husdhd42.info',
4858                 '.hbwje.info',
4859                 '.itg87gji.info',
4860                 '.iugiougiuh.info',
4861                 '.jhd4f4aa.info',
4862                 '.jshd73.info',
4863                 '.krhpgd.info',
4864                 '.lyihjn.info',
4865                 '.nfyjnfj.info',
4866                 '.oihbv.info',
4867                 '.os44fvs.info',
4868                 '.sdfsd3.info',
4869                 '.sdiug4.info',
4870                 '.sdkufhh.info',
4871                 '.sdugb4f.info',
4872                 '.skdbf.info',
4873                 '.sipiv78.info',
4874                 '.sudbfb.info',
4875                 '.tymbbmy.info',
4876                 '.uilhjk.info',
4877                 '.vi87vub.info',
4878                 '.vfuyf87f.info',
4879                 '.viyvvj877.info',
4880                 '.w7fc8eu.info',
4881                 '.wefg43g.info',
4882                 '.xbrch78e.info',
4883                 '.ywsfu.info',
4884                 '.zxcbiv.info',
4885         ),
4886         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4887                 '.abofios.info',
4888                 '.amlekfn.info',
4889                 '.amlkdoie.info',
4890                 '.amkslewq.info',
4891                 '.alemfu.info',
4892                 '.aloweks1.info',
4893                 '.alposd3.info',
4894                 '.bamhpb.info',
4895                 '.bhjkb.info',
4896                 '.bjqnj.info',
4897                 '.cvcxcbhpr.info',
4898                 '.czoypaiat.info',
4899                 '.dbpmgc.info',
4900                 '.dgvogrxs.info',
4901                 '.dldksf.info',
4902                 '.dlor6za.com',
4903                 '.dmkoiew.info',
4904                 '.eewrefr.info',
4905                 '.eladne.info',
4906                 '.elksem.info',
4907                 '.elwpod.info',
4908                 '.emlwkdnr.info',
4909                 '.esgmyqk.info',
4910                 '.fauqv.info',
4911                 '.fgxkgy.info',
4912                 '.fhryns.info',
4913                 '.fj38n4g.info',
4914                 '.fjnesal.info',
4915                 '.fmkfoe.info',
4916                 '.fqkcfldtr.info',
4917                 '.fwcigpdwz.info',
4918                 '.fyhik.info',
4919                 '.glrkje.info',
4920                 '.gwkslfq.info',
4921                 '.gwjracvh.info',
4922                 '.hihopepe.info',
4923                 '.hwlyggbkw.info',
4924                 '.hmwbfw.info',
4925                 '.hthyeb.info',
4926                 '.iaofkyaw.info',
4927                 '.uldkxuiw.info',
4928                 '.is7c6w4.info',
4929                 '.ivuddhdk.info',
4930                 '.jgfndjem.info',
4931                 '.jgmdlek.info',
4932                 '.jkrnvmpad.info',
4933                 '.jqujn.info',
4934                 '.jvgmmba.info',
4935                 '.kbaur.info',
4936                 '.kgjindptv.info',
4937                 '.kleo7s9.info',
4938                 '.lezfgam.info',
4939                 '.lfaasy.info',
4940                 '.ljpdjki.info',
4941                 '.lmnpis.info',
4942                 '.lpzcu2f.info',
4943                 '.lrptn.info',
4944                 '.lursqt.info',
4945                 '.mgkabviil.info',
4946                 '.mhtknjyt.info',
4947                 '.mksuuku.info',
4948                 '.mkyky.info',
4949                 '.mloaisn.com',
4950                 '.mlsiknd.info',
4951                 '.mthqz.info',
4952                 '.nnooq.info',
4953                 '.nohhylvc.info',
4954                 '.nuprndsye.info',
4955                 '.nsoelam.info',
4956                 '.nykobczv.info',
4957                 '.nzuhli.info',
4958                 '.odyqzgylr.info',
4959                 '.oidiau.info',
4960                 '.oitzkw.info',
4961                 '.okdmrpz.info',
4962                 '.ooinziti.info',
4963                 '.ortqr.info',
4964                 '.osmkpnekv.info',
4965                 '.ozkzfih.info',
4966                 '.p3ix8wc.com',
4967                 '.piwyt.info',
4968                 '.pfkijrm.info',
4969                 '.pjktcragi.info',
4970                 '.pleoz.info',
4971                 '.plvqm73.info',
4972                 '.pqyrem.info',
4973                 '.qipgqd.info',
4974                 '.qlewixu.com',
4975                 '.qmlskme.info',
4976                 '.qtuff.info',
4977                 '.quoga.info',
4978                 '.quqz.info',
4979                 '.qzxuw.info',
4980                 '.rcaidegp.info',
4981                 '.rlkmdi.info',
4982                 '.rnsoiov.info',
4983                 '.rnwlams.info',
4984                 '.rprgkgqld.info',
4985                 '.rubqvxrn.info',
4986                 '.spqxstl.info',
4987                 '.syckoqjql.info',
4988                 '.tbirb.info',
4989                 '.thalc34.info',
4990                 '.tiabq.info',
4991                 '.tszzpjr.info',
4992                 '.tyjdyn.info',
4993                 '.twgugpns.info',
4994                 '.uaezrqp.info',
4995                 '.udlkasu.info',
4996                 '.uejncyf.info',
4997                 '.ukvflb.info',
4998                 '.ugsuv.info',
4999                 '.ukhgpcp.info',
5000                 '.urprzn.info',
5001                 '.uuhememkw.info',
5002                 '.yalc7en.info',
5003                 '.ybuid.info',
5004                 '.yhdkgfob.info',
5005                 '.ymenq.info',
5006                 '.ynlyb.info',
5007                 '.vieatlubk.info',
5008                 '.vltcaho.info',
5009                 '.wlamsiek.info',
5010                 '.wlerp.info',
5011                 '.wlmtshzi.info',
5012                 '.wmlkams.info',
5013                 '.wprqd.info',
5014                 '.wpyspszi.info',
5015                 '.xdscc.info',
5016                 '.xdvy.info',
5017                 '.xeypku.info',
5018                 '.xsrxh.info',
5019                 '.xwjyrpfe.info',
5020                 '.yxcqw.info',
5021                 '.zhbktrh.info',
5022                 '.zspepn.info',
5023                 '.zsxtz.info',
5024         ),
5025         'survi at poczta.fm and smiley' => array(
5026                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5027                 '.ppert.info',
5028                 '.pperta.info',
5029                 '.pperts.info',
5030                 '.pprtuis.info',
5031                 '.13iuey.info',         // ":>"
5032                 '.13jkhs.info',
5033                 '.13lksa.info',
5034                 '.13rxtx.info',
5035                 '.13slkd.info',
5036                 '.13zaer.info',
5037         ),
5038         'admin at esemeski.com' => array(       // by Jan Kalka
5039                 '.kxils.info',
5040                 '.kuaph.info',
5041                 '.lncdc.info',
5042                 '.lsqpd.info',
5043                 '.mczed.info',
5044                 '.npous.info',
5045                 '.obgju.info',
5046         ),
5047         'LiquidNetLimited.com' => array(
5048                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5049
5050                 // FateBack.com related
5051                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5052                 '.bebto.com',
5053                 '.fateback.com',
5054                 '.undonet.com',
5055                 '.yoll.net',
5056                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5057
5058                 // 50webs.com                   // 64.72.112.10
5059                 // dns2.50webs.com              // 64.72.112.11
5060                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5061                 // dns2.freehostia.com  // 64.72.112.13
5062                 // serv3.freehostia.com // 64.72.112.14
5063                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5064                 // mail.50webs.com              // 64.72.112.26
5065                 // supremecenter41.com  // 64.72.112.52
5066                 // 50webs2.50webs.com   // 64.72.112.89
5067                 // supremecenter39.com  // 64.72.112.103
5068
5069                 // by LiquidNet Ltd. (support at propersupport.com)
5070                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5071                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5072                         'duoservers.com',               // 216.65.1.130
5073
5074                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5075         ),
5076         'domains at agava.com' => array(
5077                 '.h18.ru',
5078                 '.hut1.ru',
5079         ),
5080         'wlmx009 at hotmail.com' => array(
5081                 '.123lineage.com',
5082                 '.ff11-info.com',
5083                 '.lastlineage.com',
5084                 '.lineage2-ol.com',
5085                 '.lineage2006.com',
5086                 '.lineagefirst.com',
5087         ),
5088         'Zettahost.com' => array(
5089                 '.atspace.biz',         // sales at zettahost.com
5090                 '.atspace.com',         // abuse at zettahost.com
5091                 '.atspace.name',        // NS atspace.com
5092                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5093                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5094         ),
5095         'hlq9814 at 163.com' => array(
5096                 '.kotonohax.com',               // by ling bao
5097                 '.ragnarox.mobi',               // by lin bao, *.exe download
5098                 '.rokonline-jp.com',    // by hang long
5099         ),
5100         '77ch.jp' => array(
5101                 '.77ch.jp',
5102                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5103         ),
5104         'serchportal at mail.ru' => array(      // by Namu Adin
5105                 '.43fert.info',
5106                 '.belis.info',
5107                 '.bonu.info',
5108                 '.chelsite.info',
5109                 '.chparael.info',
5110                 '.cool9f.info',
5111                 '.dada2.info',
5112                 '.dorplanete.info',
5113                 '.dormonde.info',
5114                 '.dorprojet.info',
5115                 '.faciledor.info',
5116                 '.fastsearchgroup.info',
5117                 '.gerta0.info',
5118                 '.getse.info',
5119                 '.gopvl.info',
5120                 '.knopki.info',
5121                 '.propidor.info',
5122                 '.quicksearchnet.info',
5123                 '.ret5.info',
5124                 '.slimfastsearch.info',
5125                 '.virtualpvl.info',
5126                 '.vpvla.info',
5127                 '.xjdor.info',
5128                 '.zhopki.info',
5129         ),
5130         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5131                 '*.444mb.com',          // Free hosting
5132                 'urlnip.com',           // Redirection
5133         ),
5134         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5135                 '.1fasttimesatnau.info',
5136                 '.1freecybersex.info',
5137                 '.1freexxxcomics.info',
5138                 '.1fuckingmywife.info',
5139                 '.1pornpreview.info',
5140                 'www.ru',                                       // by (service at demos.ru), redirection
5141         ),
5142         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5143                 '.adultschat.info',
5144                 '.livecamonline.info',
5145                 '.webcam4u.info',
5146                 '.younghot.info',
5147         ),
5148         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5149                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5150
5151                 // 209.51.196.242
5152                 '.22web.net',
5153                 '.2kool4u.net',
5154                 '.9skul.com',
5155                 '.alojalo.info',
5156                 '.byet.net',
5157                 '.byethost2.com',
5158                 '.byethost3.com',
5159                 '.byethost4.com',
5160                 '.byethost5.com',
5161                 '.byethost6.com',
5162                 '.byethost7.com',
5163                 '.byethost8.com',
5164                 '.byethost9.com',
5165                 '.byethost10.com',
5166                 '.byethost11.com',
5167                 '.byethost12.com',
5168                 '.byethost13.com',
5169                 '.byethost14.com',
5170                 '.byethost15.com',
5171                 '.byethost16.com',
5172                 '.byethost17.com',
5173                 '.byethost18.com',
5174                 '.headshothost.net',
5175                 '.hostwq.net',
5176                 '.mega-file.net',
5177                 '.truefreehost.com',
5178
5179                 '.ifastnet.com',        // 209.51.196.243
5180
5181                 // 209.190.16.82(mx1.byet.org)
5182                 '.1sthost.org',
5183                 '.4sql.net',
5184                 '.byet.org',
5185                 '.hyperphp.com',
5186                 '.kwikphp.com',
5187                 '.my-php.net',
5188                 '.my-place.us',
5189                 '.my-webs.org',
5190                 '.netfast.org',
5191                 '.php0h.com',
5192                 '.php1h.com',
5193                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5194                 '.phpnet.us',
5195                 '.prohosts.org',
5196                 '.pro-php.org',
5197                 '.prophp.org',
5198                 '.sprinterweb.net',
5199                 '.swiftphp.com',
5200                 '.xlphp.net',
5201
5202                 // 209.190.16.83(mx2.byet.org)
5203                 '.instant-wiki.net',
5204
5205                 // 209.190.16.84(mx3.byet.org)
5206
5207                 // 209.190.16.85(mx4.byet.org)
5208                 '.instant-blog.net',
5209                 '.instant-forum.net',
5210
5211                 '.byethost.com',                        // 209.190.18.138
5212         ),
5213         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5214                 '.analmoviesite.info',
5215                 '.bestgirlssex.info',
5216                 '.boxvagina.info',
5217                 '.cyberlivegirls.info',
5218                 '.hotredgirls.info',
5219                 '.forsexlove.info',
5220                 '.hotnudezone.info',
5221                 '.hotredpussy.info',
5222                 '.lesbians-live.info',
5223                 '.lesbians-on-cam.info',
5224                 '.onlinegirlssite.info',
5225                 '.sexloveonline.info',
5226                 '.teensexcard.info',
5227                 '.teensexdirect.info',
5228                 '.topnudesite.info',
5229                 '.vaginafree.info',
5230                 '.webcam-show.info',
5231                 '.webcamshow.info',
5232                 '.youngsexchat.info',
5233                 '.yourcumshot.info',
5234         ),
5235         'stocking.club at gmail.com' => array(
5236                 '.adulthotmodels.com',          // by David Zajwzran
5237                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5238                 '.cash-call.info',                      // by David Theissen
5239                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5240                 '.cheap-online-viagra.info',    // by David Theissen
5241                 '.drugcleansing.net',           // by David Zajwzran
5242                 '.men-health-zone.com',         // by David Theissen
5243                 '.purchase-viagra.info',        // by David Theissen
5244                 '.realdrunkengirls.biz',        // by David Theissen
5245                 '.sextoyslife.com',                     // by David Zajwzran
5246                 '.sexysubjects.info',           // by David Zajwzran
5247                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5248                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5249                 '.travelcardsite.info',         // by David Theissen
5250         ),
5251         'lustiq at p5com.com' => array(
5252                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5253                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5254         ),
5255         'web at 6jy.com' => array(
5256                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5257                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5258         ),
5259         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5260                 '.auto-fgen.info',
5261                 '.fast-marketing.info',
5262                 '.from-usa.info',
5263                 '.generic-pharm.info',
5264                 '.pharm-directory.info',
5265                 '.popular-people.info',
5266                 '.safe-health.info',
5267                 '.star-celebrities.info',
5268                 '.super-home-biz.info',
5269                 '.top5-auto.info',
5270                 '.top5-cars.info',
5271                 '.vip-furniture.info',
5272                 '.vip-pc.info',
5273                 '.vip-pets.info',
5274         ),
5275         'abuse at search-store.org' => array(
5276                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5277         ),
5278         'Leading Edge Marketing Inc.' => array(
5279                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5280                 '.abemedical.com',
5281                 '.attractwomennow.com',
5282                 '.bettersexmall.com',
5283                 '.buymaxoderm.com',
5284                 '.buyvprx.com',
5285                 '.genf20.com',
5286                 '.infinityhealthnews.com',
5287                 '.istnewsletter.com',
5288                 '.leadingedgecash.com',
5289                 '.leadingedgeherbals.com',
5290                 '.leadingedgevipsonly.com',
5291                 '.lecash.com',
5292                 '.leminfo.com',
5293                 '.proextendersystem.com',
5294                 '.provestra.com',
5295                 '.semenax.com',
5296                 '.shavenomore.com',
5297                 '.theedgenewsletter.com',
5298                 '.vigorelle.com',
5299                 '.vigrx.com',
5300                 '.vigrxplus.com',
5301                 '.wbstnewsletter.com',
5302         ),
5303         'clickx at bk.ru' => array(     // by Alexey Enrertov
5304                 '.coolget*.info' =>
5305                         '#^(?:.*\.)?' . 'coolget' .
5306                         '(?:bus|find|news|php|place|post|srch)' .
5307                         '\.info$#',
5308                 '.coolgirl*.info' =>
5309                         '#^(?:.*\.)?' . 'coolgirl' .
5310                         '(?:apple|fish|search)' .
5311                         '\.info$#',
5312                 '.coolmeet*.info' =>
5313                         '#^(?:.*\.)?' . 'coolmeet' .
5314                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5315                         '\.info$#',
5316                 '.cool**.info' =>
5317                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5318                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5319                         '\.info$#',
5320                 '.freseasy*.info' =>
5321                         '#^(?:.*\.)?' . 'freseasy' .
5322                         '(?:apple|click|find|fish|post|search)' .
5323                         '\.info$#',
5324                 '.fres**.info' =>
5325                         '#^(?:.*\.)?' .
5326                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5327                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5328                         '\.info$#',
5329                         // These are not found yet:
5330                         // fresgirlsrch.info
5331                         // fresadultapple.info
5332                         // fresadultclick.info
5333                         // frestheplace.info
5334
5335                 // 66.232.113.44
5336                 '.nuhost.info',
5337                 '.susearch.info',
5338
5339                 // 66.232.126.74(hv94.steephost.com)
5340                 '.dilej.com',
5341                 '.fyvij.com',
5342                 '.howus.com',
5343                 '.jisyn.com',
5344                 '.kaxem.com',
5345                 '.mihug.com',
5346                 '.mobyb.com',
5347                 '.qidat.com',
5348                 '.qihek.com',
5349                 '.ryzic.com',
5350                 '.sasuv.com',
5351                 '.tuquh.com',
5352                 '.vehyq.com',
5353                 '.wezid.com',
5354                 '.wifuj.com',
5355                 '.xijyt.com',
5356                 '.zuqyn.com',
5357
5358                 '.mosugy.com',
5359         ),
5360         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5361                 '.hitsearching.info',
5362                 '.hugeamountdata.info',
5363                 '.megafasthost.info',
5364                 '.real-big-host.info',
5365                 '.search4freez.info',
5366                 '.yasech.info',
5367
5368                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5369                 '.bymire.com',
5370
5371                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5372                 '.ligiwa.com',
5373
5374                 '.mubeho.com',
5375         ),
5376         'ice--man at mail.ru related' => array(
5377                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5378                 '.bestcreola.com',
5379                 '.crekatierra.com',
5380                 '.creolafire.com',
5381                 '.crolik.com',
5382                 '.croller.cn',
5383                 '.ecrmx.com',
5384                 '.eflashpoint.com',
5385                 '.exoticmed.com',
5386                 '.feelview.com',
5387                 '.greatexotic.com',
5388                 '.icrtx.com',
5389                 '.icyhip.com',
5390                 '.icyiceman.com',
5391                 '.icypopular.com',
5392                 '.iflashpoint.com',
5393                 '.justmdx.com',
5394                 '.kiliusgroup.com',
5395                 '.klickerr.com',
5396                 '.klickerrworld.com',
5397                 '.kreolic.com',
5398                 '.margansitio.com',
5399                 '.margantierra.com',
5400                 '.mimargan.com',
5401                 '.oilkeys.com',
5402                 '.planetmdx.com',
5403                 '.thekeyse.com',
5404                 '.viewgreat.com',
5405                 '.yourcreola.com',
5406
5407                 // 69.46.23.48
5408                 '.bestkilius.com',
5409                 '.crekadirecto.com',
5410                 '.getflashsite.com',
5411                 '.sucreka.com',
5412                 '.superkilius.com',
5413
5414                 // 69.46.23.48 by bing-16 at ftunez.org
5415                 '.bovorup.cn',
5416                 '.litotar.cn',
5417                 '.nihydec.cn',
5418
5419                 // 66.232.112.175 by bing-32 at ftunez.org
5420                 '.lasyxy.cn',
5421
5422                 // by bing-65 at ftunez.org
5423                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5424                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5425                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5426                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5427                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5428                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5429                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5430                 '.saralar.cn',          // 66.232.120.113(non-existent)
5431                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5432
5433                 // 69.46.23.48 by clarkson-34 at ftunez.org
5434                 '.bumora.cn',
5435                 '.byxite.cn',
5436                 '.byxuqu.cn',
5437                 '.jadama.cn',
5438                 '.kybope.cn',
5439                 '.mefeki.cn',
5440                 '.mokiso.cn',
5441                 '.niqeme.cn',
5442                 '.pukafo.cn',
5443                 '.qesaxa.cn',
5444                 '.toxezi.cn',
5445                 '.tujudy.cn',
5446                 '.tutike.cn',
5447
5448                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5449                 '.cabino.cn',
5450                 '.cuwace.cn',
5451                 '.ferazi.cn',
5452                 '.gigywy.cn',
5453                 '.lapype.cn',
5454                 '.mewabe.cn',
5455                 '.pezegy.cn',
5456                 '.pyzuza.cn',
5457                 '.qypony.cn',
5458                 '.ropesy.cn',
5459                 '.wadyfe.cn',
5460
5461                 // 69.46.23.48 clarkson-58 at ftunez.org
5462                 '.becabe.cn',
5463                 '.biciqy.cn',
5464                 '.bezymu.cn',
5465                 '.cifori.cn',
5466                 '.ciwyxi.cn',
5467                 '.dobari.cn',
5468                 '.dusofe.cn',
5469                 '.dutyda.cn',
5470                 '.dykanu.cn',
5471                 '.fakexu.cn',
5472                 '.fylema.cn',
5473                 '.godymo.cn',
5474                 '.hyhaxy.cn',
5475                 '.ganosi.cn',
5476                 '.kuxyju.cn',
5477                 '.lacezy.cn',
5478                 '.lonyru.cn',
5479                 '.lycato.cn',
5480                 '.nykyby.cn',
5481                 '.qyhuko.cn',
5482                 '.redere.cn',
5483                 '.riwimu.cn',
5484                 '.wopary.cn',
5485                 '.xizity.cn',
5486                 '.xuxusa.cn',
5487
5488                 // by entretov-28 at ftunez.org
5489                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5490                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5491
5492                 // 69.46.23.48 by entretov-32 at ftunez.org
5493                 '.cihuji.cn',
5494                 '.deqyve.cn',
5495                 '.genefa.cn',
5496                 '.gujyju.cn',
5497                 '.hasadu.cn',
5498                 '.hedomi.cn',
5499                 '.kecicy.cn',
5500                 '.kipabo.cn',
5501                 '.manunu.cn',
5502                 '.musoru.cn',
5503                 '.myvuna.cn',
5504                 '.pikybe.cn',
5505                 '.riqawo.cn',
5506                 '.rufuxy.cn',
5507                 '.vyfilu.cn',
5508                 '.xadule.cn',
5509                 '.zolaxe.cn',
5510                 '.zerixu.cn',
5511
5512                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5513                 '.dozoda.cn',
5514                 '.nemipu.cn',
5515
5516                 // entretov-84 at ftunez.org
5517                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5518                 '.favulol.cn',          // 66.232.120.115(*snip*)
5519                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5520
5521                 // 69.46.23.48 by jeremy-57 at ftunez.org
5522                 '.duzele.cn',
5523                 '.figede.cn',
5524                 '.fiwany.cn',
5525                 '.gyfalu.cn',
5526                 '.jepylo.cn',
5527                 '.nuqumy.cn',
5528
5529                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5530                 '.burahu.cn',
5531                 '.jydijy.cn',
5532                 '.komyby.cn',
5533                 '.najepa.cn',
5534                 '.pylobu.cn',
5535                 '.qofoly.cn',
5536                 '.sybuvi.cn',
5537                 '.vycexu.cn',
5538                 '.wotyqo.cn',
5539                 '.xudoli.cn',
5540
5541                 // by entretov-28 at ftunez.org
5542                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5543
5544                 // by entretov-37 at ftunez.org
5545                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5546                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5547
5548                 // 66.232.112.175 by entretov-86 at ftunez.org
5549                 '.faweji.cn',
5550                 '.jypaci.cn',
5551                 '.xozuso.cn',
5552
5553                 // 69.46.23.48 by miles-37 at ftunez.org
5554                 '.beqymo.cn',
5555                 '.ceqibi.cn',
5556                 '.dyraqo.cn',
5557                 '.qenedo.cn',
5558                 '.qurypa.cn',
5559                 '.siluvo.cn',
5560                 '.tujala.cn',
5561                 '.wukuwi.cn',
5562                 '.xenibo.cn',
5563                 '.xiculo.cn',
5564                 '.zabemu.cn',
5565
5566                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5567                 '.bevaka.cn',
5568                 '.fysyte.cn',
5569                 '.guxixu.cn',
5570                 '.hatoli.cn',
5571                 '.jitobu.cn',
5572                 '.juxeca.cn',
5573                 '.kifuhy.cn',
5574                 '.licila.cn',
5575                 '.mecomy.cn',
5576                 '.niryko.cn',
5577                 '.noxoco.cn',
5578                 '.qiwysu.cn',
5579                 '.tutysy.cn',
5580
5581                 // by oker-74 at ftunez.org
5582                 '.navufol.cn',
5583
5584                 // by oker-97 at ftunez.org
5585                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5586                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5587                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5588                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5589                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5590                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5591                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5592
5593                 // by polet-20 at ftunez.org
5594                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5595
5596                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5597                 '.gywiqe.cn',
5598                 '.jotapo.cn',
5599                 '.jywixa.cn',
5600
5601                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5602                 '.bawegap.cn',
5603                 '.buremyl.cn',
5604                 '.cilybut.cn',
5605                 '.cutufek.cn',
5606                 '.defypyr.cn',
5607                 '.femaxij.cn',
5608                 '.gelejo.cn',
5609                 '.gocylyv.cn',
5610                 '.kehiqaq.cn',
5611                 '.ninyjit.cn',
5612                 '.ruroruw.cn',
5613                 '.vetehow.cn',
5614
5615                 // 69.46.23.48 sabrosky-85 at ftunez.org
5616                 '.banyla.cn',
5617                 '.bubaqu.cn',
5618                 '.bygage.cn',
5619                 '.dafozy.cn',
5620                 '.kaxyjo.cn',
5621                 '.makyle.cn',
5622                 '.naleto.cn',
5623                 '.pidele.cn',
5624                 '.poqexa.cn',
5625                 '.pymaqo.cn',
5626                 '.qupiqy.cn',
5627                 '.reqefy.cn',
5628                 '.sopocy.cn',
5629                 '.vuhexo.cn',
5630                 '.weryso.cn',
5631                 '.wubula.cn',
5632                 '.xufuxy.cn',
5633                 '.zuhyxu.cn',
5634
5635                 // 69.46.23.48 by tribiani-97 at ftunez.org
5636                 '.dyxorod.cn',
5637                 '.firywoz.cn',
5638                 '.jixezyx.cn',
5639                 '.joveraw.cn',
5640                 '.jowaxup.cn',
5641                 '.nodarej.cn',
5642                 '.pimijom.cn',
5643                 '.tugupeg.cn',
5644
5645                 // 66.232.112.175 by abuse-here at inbox.ru
5646                 '.catybe.cn',
5647                 '.jytame.cn',
5648                 '.wygete.cn',
5649         ),
5650         '74.50.97.*' => array(
5651                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5652                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5653                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5654                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5655                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5656                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5657                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5658                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5659                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5660                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5661                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5662                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5663                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5664                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5665                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5666                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5667
5668                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5669                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5670                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5671                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5672                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5673                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5674                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5675                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5676                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5677                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5678                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5679                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5680                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5681                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5682                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5683                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5684                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5685                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5686                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5687
5688                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5689                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5690                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5691                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5692                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5693         ),
5694         'nijeoi at hotmai.com' => array(
5695                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5696                 '.bowij.com',
5697                 '.bozib.com',
5698                 '.cavux.com',
5699                 '.dipov.com',
5700                 '.gumoz.com',
5701                 '.hakyb.com',
5702                 '.hehyv.com',
5703                 '.hepyt.com',
5704                 '.howoj.com',
5705                 '.jywaz.com',
5706                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5707                 '.kyheq.com',
5708                 '.kyzad.com',
5709                 '.qicad.com',
5710                 '.qubyd.com',
5711                 '.mocyq.com',
5712                 '.muloq.com',
5713                 '.myxim.com',
5714                 '.nufyp.com',
5715                 '.waqog.com',
5716                 '.wyduc.com',
5717                 '.xefyv.com',
5718                 '.xomej.com',
5719                 '.xomip.com',
5720                 '.xykyl.com',
5721                 '.zakuw.com',
5722                 '.zeliw.com',
5723                 '.zimev.com',
5724                 '.zipif.com',
5725
5726                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5727                 '.tycoco.com',
5728
5729                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5730                 '.pufeqa.com',
5731
5732                 '.xehymi.com',
5733         ),
5734         'niichka at hotmail.com' => array(
5735                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5736                 '.aerosearch.info',
5737                 '.freader.info',
5738                 '.info4searchz.info',
5739                 '.nice-host.info',
5740                 '.realyfast.info',
5741                 '.resuts.info',
5742
5743                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5744                 '.bepoh.com',
5745                 '.gufiq.com',
5746                 '.kedyh.com',
5747                 '.pofyb.com',
5748                 '.rurid.com',
5749                 '.vucaj.com',
5750                 '.vuwir.com',
5751
5752                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5753                 '.bejefe.com',
5754
5755                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5756                 '.tidawu.com',
5757
5758                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5759                 '.rofuqa.com',
5760         ),
5761         'porychik at hot.ee' => array(  // by Igor
5762                 '.tedstate.info',       // "Free Web Hosting"
5763                 '.giftsee.com',
5764         ),
5765         'admin at pertol.info' => array(
5766                 // 81.0.195.189 "Free Web Hosting"
5767                 '.laparka.cn',
5768                 '.mirlos.cn',
5769                 '.oldmoms.cn',
5770
5771                 // 217.11.233.64(timed-out)
5772                 '.ejmpep.cn',   // by admin at pertol.info
5773                 '.ytere.cn',    // by admin at x2t.com
5774
5775                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5776                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5777
5778                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5779                 '.new-greece-travel.com',
5780                 '.peraonline.info',
5781
5782                 '.barkman.cn',
5783         ),
5784
5785         'aofa at vip.163.com' => array(
5786                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5787                 '.5944.net',
5788         ),
5789         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5790                 '.maxrentcar.info',
5791                 '.newsonyericsson.info',
5792                 '.pornositeworld.biz',
5793                 '.rentcarweb.info',
5794                 '.xxxdomainsex.biz',
5795         ),
5796         'kopper1970 at gmail.com' => array(
5797                 '.cardealerall.info',           // by Green
5798                 '.donatecarsales.info',         // by Sipil
5799                 '.ringtonewilly.info',          // by Sipil
5800                 '.travelstraveling.info',       // by Chinik
5801                 '.viagrabuyonline.org',         // by Sipil
5802                 '.viagraorderbuy.com',          // by Anatol
5803                 '.worldcuptourism.info',        // by Sipil
5804         ),
5805         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5806                 '.globalinfoland.info',
5807                 '.goodlifesearch.info',
5808                 '.hotnetinfo.info',
5809                 '.hotpornmovies.org',
5810                 '.infopilot.info',
5811         ),
5812         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5813                 '.bang-bro.org',
5814                 '.datinghost.info',
5815                 '.hello-craulers.info',
5816                 '.free-blog-host.info',
5817                 '.sucking-boobs.info',
5818         ),
5819         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5820                 '.allcamsguide.info',
5821                 '.camerascams.info',
5822                 '.camerasera.info',
5823                 '.girlcamsworld.info',
5824                 '.hiddenlimocams.info',
5825                 '.redlivecams.info',
5826                 '.spycamsgear.info',
5827                 '.spycamssite.info',
5828                 '.supercamsusa.info',
5829                 '.thecamsnow.info',
5830         ),
5831         '87.242.116.81' => array(
5832                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5833                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5834                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5835                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5836                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5837         ),
5838         '208.70.75.153' => array(
5839                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5840                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5841                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5842                 '.cerc-on.info',
5843                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5844                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5845                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5846                 '.cerc-tr.info',
5847                 '.cerc-tw.info',
5848                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5849                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5850                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5851                 '.cerc-on.org',         // by cerca-one at ya.ru
5852                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5853                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5854                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5855                 '.cerc-tr.org',         // by cerca-one at ya.ru
5856                 '.cerc-tw.org',         // by cerca-one at ya.ru
5857                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5858                 '.cerca-fo.info',
5859                 '.cerca-no.info',
5860                 '.cerca-on.info',
5861                 '.cerca-sv.info',
5862                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5863                 '.cerca-te.info',
5864                 '.cerca-tr.info',
5865                 '.cerca-sx.org',
5866                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5867                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5868                 '.ricerca-fo.info',
5869                 '.ricerca-one.org',
5870                 '.ricerca-sv.org',
5871                 '.ricerca-sx.org',
5872                 '.ricerca-te.org',
5873                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5874                 '.subit01.org',
5875                 '.subit02.org',
5876                 '.subit03.org',
5877                 '.subit04.org',
5878                 '.subit05.org',
5879                 '.subit06.org',
5880                 '.subit01.info',
5881                 '.subit02.info',
5882                 '.subit03.info',
5883                 '.subit04.info',
5884                 '.subit05.info',
5885                 '.subit06.info',
5886         ),
5887         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5888                 '.5-base.com',
5889                 '.pharmacy-style.com',
5890         ),
5891         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5892                 '.ista-2006.ru',
5893                 '.wefas.ru',
5894         ),
5895         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5896                 '.tourismworldsite.info',
5897                 '.yourtourismtravel.info',
5898         ),
5899         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5900                 '.easyfindcar.info',
5901                 '.siteinfosystems.info',
5902         ),
5903         'smesh1155 at gmail.com' => array(
5904                 '.hospitalforyou.info',                 // by Gimmi
5905                 '.thephentermineonline.info',   // by Kipola
5906         ),
5907         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5908                 '.kiski.net.in',
5909                 '.pipki.org.in',
5910                 '.popki.ind.in',
5911                 '.siski.co.in',
5912         ),
5913         'tiptronikmike at mail.com' => array(
5914                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5915                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5916                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5917                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5918                 //'.i0sex.info',                // Michael
5919                 //'.i1sex.info',                // Michael
5920                 //'.i2sex.info',                // Martin
5921                 //'.i3sex.info',                // Martin
5922                 //'.i4sex.info',                // Adulterra
5923                 //'.i5sex.info',                // Adulterra
5924                 //[irvyz]6sex.info not found
5925                 '.i8sex.info',                  // by Martin
5926         ),
5927         'skuarlytronald at mail.com' => array(
5928                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5929                 '.girlsgoingmad.info',          // 64.27.13.120
5930                 '.girlsgonewildside.info',      // 64.27.13.120
5931         ),
5932         '66.232.109.250' => array(
5933                 '.1626pornporno.info',
5934                 '.1851pornporno.info',
5935                 '.1876pornporno.info',
5936                 '.476pornporno.info',
5937         ),
5938         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5939                 '.compactxxx.com',
5940                 '.eadulthost.com',
5941                 '.eadultview.com',
5942                 '.eroticpool.net',
5943                 '.ipornservice.com',
5944                 '.liveadulthost.com',
5945                 '.nudepal.com',
5946                 '.sweetservers.com',
5947         ),
5948         'support at orgija.org' => array(
5949                 '.assfuckporn.org',
5950                 '.dosugmos.org',
5951                 '.fuckporn.org',
5952                 '.girlsdosug.org',
5953                 '.girlsporno.org',
5954                 '.moscowintim.org',
5955                 '.pornass.org',
5956                 '.pornopussy.org',
5957                 '.progirlsporn.org',
5958                 '.pussypornogirls.org',
5959         ),
5960         '125.65.112.93' => array(
5961                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5962                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5963         ),
5964         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5965                 '.beta-google.com',
5966                 '.tv-reklama.info',
5967                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5968                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5969         ),
5970         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5971                 '.abobrinha.org',
5972                 '.aneurysmic.com',              // / not found
5973                 '.physcomp.org',                // / not found
5974                 '.seriedelcaribe2006.org',
5975                 '.refugeeyouthinamerica.com',
5976         ),
5977         'skip_20022 at yahoo.com' => array(
5978                 // 203.174.83.55
5979                 '.a28hosting.info',             // by Bill Jones
5980                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5981                 '.besthentai06.org',    // by yakon
5982         ),
5983         'USFINE.com' => array(
5984                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5985                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5986         ),
5987         '68.178.211.57' => array(
5988                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5989                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
5990         ),
5991         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
5992                 '.google-yahoo-msn.org',
5993                 '.expedia-travel.org',
5994         ),
5995         'admin at newestsearch.com' => array(   // by Gibrel Sitce
5996                 '.emr5ce.org',
5997                 '.wfe7nv.org',
5998                 '.xyr99yx.org',
5999         ),
6000         '203.171.230.39' => array(
6001                 // by 51shell at 163.com
6002                 '.amatou-fc2.com',
6003
6004                 // registrar bizcn.com, iframe + cursor
6005                 '.playonlinenc.com',
6006                 '.playboss-jp.com',
6007         ),
6008         'Digi-Rock.com' => array(
6009                 '.rom776.com',
6010                 // owner-organization: DIGIROCK, INC.
6011                 // owner-email: domain-contact at digi-rock.com
6012                 // with an external ad-and-JavaScript,
6013                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6014                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6015         ),
6016         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6017                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6018                 '.getrun.cn',                           // 208.73.34.48
6019                 '.ipod-application.info',       // NO IP
6020                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6021                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6022         ),
6023         'germerts at yandex.ru' => array(
6024                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6025                 '.andatra.info',
6026                 '.banchitos.info',
6027                 '.batareya.info',
6028                 '.blevota.info',
6029                 '.broneslon.info',
6030                 '.gamadril.info',
6031                 '.gipotenuza.info',
6032                 '.govnosaklo.info',
6033                 '.muflon.info',
6034                 '.termitnik.info',
6035                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6036         ),
6037         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6038                 '.acronis-true-image.info',
6039                 '.calcio-xp.info',
6040                 '.cosanova.info',
6041                 '.cose-rx.info',
6042                 '.dictip.info',
6043                 '.findig.info',
6044                 '.fotonow.info',
6045                 '.lavoro-tip.info',
6046                 '.loan-homes.info',
6047                 '.mionovita.info',
6048                 '.mustv.info',
6049                 '.newsnaked.info',
6050                 '.online-tod.info',
6051                 '.opakit.info',
6052                 '.opanow.info',
6053                 '.opriton.info',
6054                 '.porta-bl.info',
6055                 '.refdif.info',
6056                 '.xzmovie.info',
6057         ),
6058         '84.252.148.120 etc' => array(
6059                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6060                 '.planetavilton.info',  // 84.252.148.120
6061                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6062         ),
6063         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6064                 '.99jk.com',
6065                 '.99jk.com.cn',
6066                 '.99jk.cn',
6067         ),
6068         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6069                 '.kliktop.biz',
6070                 '.kliktop.org',
6071                 '.pharmatop.us',
6072                 '.supertop.us',
6073                 '.supervaizer.info',
6074         ),
6075         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6076                 '.freeamateursexx.info',        // 81.0.195.228
6077                 '.freeanalsexx.info',           // 217.11.233.97
6078                 '.freegaysexx.info',            // 81.0.195.228
6079         ),
6080         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6081                 '.abbhi.info',
6082                 '.gayblogguide.biz',
6083                 '.huope.info',
6084                 '.thebdsmday.info',
6085                 '.zioprt.info',                 // 89.149.228.237
6086         ),
6087         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6088                 '.boblisk.info',
6089                 '.factyri.info',
6090                 '.jorge1.info',
6091         ),
6092         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6093                 '.bestmindstorm.org',
6094                 '.redstoreonline.org',
6095         ),
6096         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6097                 '.8e8ae.net',
6098                 '.c-cock.com',
6099                 '.fa59eaf.com',
6100                 '.set-place.net',
6101                 '.sex-beauty.net',
6102         ),
6103         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6104                 '.tomdir.info',
6105                 '.tomdirdirect.info',
6106                 '.tomdirworld.info',
6107                 '.treton.info',
6108                 '.trefas.info',
6109                 '.tretonmondo.info',
6110                 '.unefout.info',
6111                 '.unefoutprojet.info',
6112                 '.unitfree.info',
6113                 '.vilret.info',
6114                 '.vilttown.info',
6115                 '.votrefout.info',
6116                 '.warmfind.info',
6117                 '.warptop.info',
6118                 '.wildtram.info',
6119                 '.xofind.info',
6120                 '.xopdiscover.info',
6121                 '.xopfind.info',
6122                 '.xoplocate.info',
6123                 '.xopseek.info',
6124                 '.xpfirst.info',
6125                 '.xphighest.info',
6126                 '.xptop.info',
6127         ),
6128         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6129                 '.myviagrasite.com',    // 80.74.153.2
6130                 '.thecanadianmeds.com', // 80.74.153.17
6131         ),
6132         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6133                 '.bigemot.com',                         // 217.11.233.34, / not found
6134                 '.espharmacy.com',                      // 217.11.233.34
6135                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6136                 '.ringtonecooler.com',          // 217.11.233.34
6137         ),
6138         'dfym at dfym.cn' => array(
6139                 // ANI, JavaScript, iframe
6140
6141                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6142                 '.okwit.com',
6143                 '.sakerver.com',
6144                 '.motewiki.net',
6145
6146                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6147
6148                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6149
6150                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6151                 '.bbtv-chat.com',
6152                 '.ketubatle.com',
6153                 '.playonlanei.com',
6154                 '.rmtfcne.com',
6155
6156         ),
6157         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6158                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6159                 '.lookmedicine.info',           // 206.161.205.22
6160                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6161                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6162                 '.worldsitesearch.info',        // 209.8.40.59
6163         ),
6164         'lee.seery at gmail.com' => array(
6165                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6166                 '.lingvol.com',         // 64.21.34.55
6167                 '.micevol.com',         // 64.21.34.55
6168                 '.heyhey.info',         // 64.21.34.55  by anonymous
6169         ),
6170         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6171                 // 69-64-64-71.dedicated.abac.net
6172                 '.520-ard.info',
6173                 '.550bcards.info',
6174                 '.559-cads.info',
6175                 '.559caard.info',
6176                 '.565-caaard.info',
6177                 '.575cadr.info',
6178                 '.577cadrs.info',
6179                 '.590-acrds.info',
6180                 '.596-cadrs.info',
6181                 '.596caards.info',
6182                 '.596caaard.info',
6183                 '.asstablishingcads.info',
6184                 '.astablish-ard.info',
6185                 '.astablishcacrds.info',
6186                 '.begginers-acards.info',
6187                 '.begginersacrds.info',
6188                 '.beggingcaaard.info',
6189                 '.beginercacrds.info',
6190                 '.cacrdscreating.info',
6191                 '.caditbegging.info',
6192                 '.cadr-buildup.info',
6193                 '.cadr-establilsh.info',
6194                 '.cadrs-buildercredit.info',
6195                 '.cadrs570.info',
6196                 '.cads-565.info',
6197
6198                 // 69-64-64-113.dedicated.abac.net
6199                 '.interistacards.info',
6200                 '.intrust-ards.info',
6201                 '.intrustacrds.info',
6202                 '.lfixed-ard.info',
6203                 '.lowerate-ard.info',
6204                 '.lowpercentage-ard.info',
6205                 '.lowpercentageacrd.info',
6206         ),
6207         'acua at mail.ru' => array(
6208
6209                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6210
6211                         // by adventurer at allmyns.info
6212                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6213
6214                         // by webmaster at allmyns.info
6215                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6216                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6217                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6218                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6219                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6220                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6221                         '.riumh.cn',    // 84.16.226.28(*snip*)
6222                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6223                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6224                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6225
6226                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6227                 '.dns4babka.info',      // by acua at mail.ru
6228
6229                         // by golubcov at dns4babka.info
6230                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6231
6232                         // by webmaster at dns4babka.info
6233                         '.credh.cn',
6234                         '.fucfv.cn',
6235                         '.gdxnk.cn',
6236                         '.sqrrt.cn',
6237                         '.ywtmd.cn',
6238                         '.kncqy.cn',    // by webmaster at allmyns.info
6239
6240                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6241                 '.dedka2ns.info',       // by acua at mail.ru
6242
6243                         // by chasik at dedka2ns.info
6244                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6245
6246                         // by rochel at dedka2ns.info
6247                         '.fudhxjjqh.cn',
6248
6249                         // by webmaster at dedka2ns.info
6250                         '.ascpo.cn',
6251                         '.jgycr.cn',
6252                         '.nqdtt.cn',
6253                         '.oswde.cn',
6254                         '.qeyig.cn',
6255                         '.soqsx.cn',
6256                         '.ukncd.cn',
6257                         '.zijgb.cn',
6258
6259                 // 84.16.255.253(*snip*), / says 'noy found'
6260                 '.dns4dedka.info',      // by acua at mail.ru
6261
6262                         // by aleon at dns4dedka.info
6263                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6264
6265                         // by dig at dns4dedka.info
6266                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6267                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6268                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6269                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6270                         '.heulw.cn',    // 84.16.226.217(*snip*)
6271                         '.hissw.cn',    // 84.16.249.240(*snip*)
6272                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6273                         '.obwew.cn',    // 84.16.251.218(*snip*)
6274                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6275                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6276                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6277                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6278                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6279                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6280                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6281                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6282                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6283                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6284                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6285                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6286
6287                         // by la at dns4dedka.info
6288                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6289                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6290                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6291                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6292                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6293                         '.eothy.cn',    // 84.16.249.241(*snip*)
6294                         '.epocy.cn',    // 84.16.251.220(*snip*)
6295                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6296                         '.faacz.cn',    // 84.16.251.222(*snip*)
6297                         '.filun.cn',    // 89.149.196.72(*snip*)
6298                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6299                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6300                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6301                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6302                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6303                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6304                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6305                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6306                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6307                         '.krumo.cn',    // 84.16.226.217(*snip*)
6308                         '.lbava.cn',    // 217.20.112.102(*snip*)
6309                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6310                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6311                         '.npovm.cn',    // 84.16.226.28(*snip*)
6312                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6313                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6314                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6315                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6316                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6317                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6318                         '.qydph.cn',    // 89.149.228.163(*snip*)
6319                         '.rxens.cn',    // 89.149.196.72(*snip*)
6320                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6321                         '.srths.cn',    // 84.16.251.222(*snip*)
6322                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6323                         '.unquz.cn',    // 84.16.251.223(*snip*)
6324                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6325                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6326                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6327                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6328                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6329                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6330
6331                         // by le at dns4dedka.info
6332                         '.goslw.cn',    // 84.16.251.220(*snip*)
6333                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6334                         '.iewik.cn',    // 84.16.255.254(*snip*)
6335                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6336                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6337                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6338                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6339                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6340                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6341                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6342                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6343                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6344                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6345                         '.qniww.cn',    // 84.16.251.218(*snip*)
6346                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6347                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6348
6349                         // by skspb at dns4dedka.info
6350                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6351
6352                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6353                         '.bcpnb.cn',
6354                         '.cfbpr.cn',
6355                         '.dnndb.cn',
6356                         '.ekwme.cn',
6357                         '.iutps.cn',
6358                         '.ryftj.cn',
6359                         '.vxqcb.cn',
6360
6361                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6362                         // by apple at ns2best.info
6363                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6364                         // by paulwolf at ns2best.info
6365                         '.ifytzq.cn',
6366
6367                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6368                         // by pigato at sedns.info
6369                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6370                         // by roschem at sedns.info
6371                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6372                         // by op at sedns.info
6373                         '.bumfn.cn',
6374                         '.csmlu.cn',
6375                         '.epcwi.cn',
6376                         '.krwzn.cn',
6377                         '.lkvcp.cn',
6378                         '.mvmkh.cn',
6379                         '.nwpeg.cn',
6380                         '.rnqol.cn',
6381                         '.tyuaf.cn',
6382                         '.ucysa.cn',
6383                         '.vhyom.cn',
6384                         '.wtstu.cn',
6385                         '.zslxr.cn',
6386         ),
6387         'gilvcta sy jilbertsbram.com' => array(
6388                 // 206.53.51.126
6389                 '.dsfljkeilm1.cn',
6390                 '.dsfljkeilm2.cn',
6391                 '.dsfljkeilm3.cn',
6392                 '.dsfljkeilm4.cn',
6393                 '.dsfljkeilm5.cn',
6394                 '.dsfljkeilm6.cn',
6395                 '.dsfljkeilm7.cn',
6396                 '.dsfljkeilm8.cn',
6397                 '.dsfljkeilm9.cn',
6398                 '.dsfljkeilm10.cn',
6399         ),
6400         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6401
6402                 // 69.64.82.76(*.dedicated.abac.net)
6403                 '.bruised-criedit.info',
6404                 '.bruised-crtedit.info',
6405                 '.bruised-czrd.info',
6406                 '.bruisedcreditcars.info',
6407                 '.bruisedcreitcard.info',
6408                 '.bruisedcreitd.info',
6409                 '.buliderscreadet.info',
6410                 '.cleaningup-cdit.info',
6411                 '.cleaningup-cedict.info',
6412                 '.cleaningup-cerdic.info',
6413                 '.cleanup-crrd.info',
6414
6415                 // 69.64.82.77(*.dedicated.abac.net)
6416                 '.bruised-crediot.info',
6417                 '.bruised-credtid.info',
6418                 '.bruisedcriet.info',
6419                 '.bruisedredit.info',
6420                 '.buliders-crdt.info',
6421                 '.buliders-cre4dit.info',
6422                 '.buliders-creadt.info',
6423                 '.buliders-credcards.info',
6424                 '.buliders-credictcard.info',
6425                 '.cleaningupccreditcards.info',
6426                 '.cleaningupcdedit.info',
6427                 '.cleaningupcedirt.info',
6428                 '.cleaningupceidt.info',
6429                 '.cleaningupcrasd.info',
6430                 '.cleaningupcreait.info',
6431
6432                 // 69.64.82.78(*.dedicated.abac.net)
6433                 '.bruised-cridet.info',
6434                 '.bruised-drecit.info',
6435                 '.bruised-reditcards.info',
6436                 '.bruisedcredikt.info',
6437                 '.bruisedcredith.info',
6438                 '.bruisedcredtid.info',
6439                 '.cleanup-criet.info',
6440                 '.cleanup-csrds.info',
6441                 '.cleanup-dards.info',
6442
6443                 // 69.64.82.79(*.dedicated.abac.net)
6444                 '.bruised-crediotcards.info',
6445                 '.bruised-creditcar.info',
6446                 '.bruised-creid.info',
6447                 '.bruised-creidtcard.info',
6448                 '.buliders-crdit.info',
6449                 '.buliders-creadet.info',
6450                 '.cleaningup-ceridt.info',
6451                 '.cleaningupcrecit.info',
6452                 '.cleaningupccritcard.info',
6453                 '.cleanupdredit.info',
6454                 '.cleanupredit.info',
6455         ),
6456         '.malwarealarm.com',
6457                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6458                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6459                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6460         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6461         'Inet-Traffic.com' => array(
6462                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6463                 //'.dcomm.com',         // by D Communications Inc. S.A.
6464
6465                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6466                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6467                 // ...
6468                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6469                 // ...
6470                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6471                 // ...
6472                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6473                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6474                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6475                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6476                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6477                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6478                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6479                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6480                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6481                 // ...
6482                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6483                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6484                 // ...
6485                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6486                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6487                 // ...
6488                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6489                 // ...
6490                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6491                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6492                 // ...
6493                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6494         ),
6495         'andreyletov at yahoo.com related' => array(
6496                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6497                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6498                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6499
6500                 // 89.248.99.118 by anonymous
6501                 '.lpgpharmacy.com',
6502                 '.onlybestgalleries.com',
6503                 '.viagrabest.info',
6504                 '.viagrabestprice.info',
6505                 '.viagratop.info',
6506
6507                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6508                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6509                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6510         ),
6511         'alrusnac at hotmail.com' => array(
6512                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6513                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6514         ),
6515         '203.116.63.123' => array(
6516                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6517                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6518         ),
6519         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6520                 '.autotowncar.cn',              // 69.73.146.184
6521                 '.badgirlhome.cn',              // 69.73.146.186
6522         ),
6523         'Wmp.co.jp' => array(
6524                 // 219.94.134.208, ns *.dns.ne.jp, adult
6525                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6526                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6527                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6528         ),
6529         'Macherie.tv' => array(
6530                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6531                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6532                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6533         ),
6534         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6535                 '.yemine.info',
6536                 '.fr4f3ds.info',
6537         ),
6538         '75.126.129.222' => array(
6539                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6540                 '.viagrabuycheap.info', // ns *.advernsserver.com
6541                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6542         ),
6543         'sqr at bk.ru' => array(
6544                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6545                 '.masserch.info',               // "Free Web Hosting", spam
6546                 '.miserch.info',
6547         ),
6548         'gangstadra at hotmail.com' => array(
6549                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6550                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6551                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6552                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6553         ),
6554         'hosan by front.ru' => array(
6555                 '.salihome.info',                               // 206.53.51.155(non-existent)
6556                 '.online-freesearch.com',               // 206.53.51.155
6557                 '.choosefinest.com',                    // 206.53.51.157
6558                 '.carsprojects.com',                    // 206.53.51.159
6559                 '.sport-brands.com',                    // 206.53.51.167
6560                 '.online-pharmaceutics.com',    // 206.53.51.168
6561         ),
6562         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6563                 '.canadians-health.com',        // by andreyletov at yahoo.com
6564                 '.cialischeap.info',
6565                 '.superrv.info',
6566         ),
6567         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6568                 '.hatbi.com',
6569                 '.justrty.com',
6570                 '.kol2you.com',
6571                 '.kolplanet.com',
6572                 '.myrty.com',
6573                 '.officialrty.com',
6574                 '.pbaol.com',
6575                 '.planetkol.com',
6576         ),
6577         'Abra1.com' => array(
6578                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6579                 '.abra1.com',           // by info at maisontropicale.com
6580                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6581
6582                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6583                 '.abra2.com',           // by domain at anondns.org
6584                 '.abra3.com',           // by domain at anondns.org
6585         ),
6586         'topdomainz at gmail.com' => array(
6587                 // 217.73.201.237 , ns *.parked.ru
6588                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6589                 '.aboutgooglegroup.info',
6590                 '.aboutgoogleimage.info',
6591                 '.aboutgooglemail.info',
6592                 '.aboutgooglemap.info',
6593                 '.aboutgooglenews.info',
6594                 '.aboutgooglevideo.info',
6595                 '.bestgoogleearth.info',
6596                 '.magicgoogleearth.info',
6597                 '.magicgooglemap.info',
6598                 '.magicgooglevideo.info',
6599
6600                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6601                 '.slajzer.info',
6602                 '.tonoscelular.info',
6603                 '.tonosmotorola.info',
6604         ),
6605         'Anderson at extra.by' => array(
6606                 // Encoded JavaScript
6607
6608                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6609                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6610                 '.6dir.info',
6611                 '.8dir.info',
6612                 '.9dir.info',
6613                 '.2pro.info',
6614                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6615                 '.6pro.info',
6616                 '.7pro.info',
6617                 '.8pro.info',
6618                 '.9pro.info',
6619                 '.5sms.info',
6620                 '.6sms.info',
6621                 '.8sms.info',
6622                 '.9sms.info',
6623                 '.1upp.info',
6624                 '.2upp.info',
6625                 '.3upp.info',
6626                 '.4upp.info',
6627                 '.5upp.info',
6628                 '.6upp.info',
6629                 '.7upp.info',
6630                 '.8upp.info',
6631                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6632                 '.2vip.info',   // by Anderson at extra.by
6633                 '.4vip.info',
6634                 '.5vip.info',
6635                 '.6vip.info',
6636                 '.7vip.info',
6637                 '.8vip.info',   // ns *.9upp.info
6638                 '.9vip.info',
6639
6640                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6641                 '.w3rar.info',
6642                 '.w3sex.info',
6643                 '.w3zip.info',
6644                 '.w3in.info',
6645                 '.w3out.info',
6646         ),
6647         'zorkin87 at mail.ru' => array(
6648                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6649                 '.ruqore.com',
6650                 '.goxama.com',
6651                 '.cazebi.com',
6652                 '.fukeqa.com',
6653                 '.fydoge.com',
6654                 '.jukaly.com',
6655                 '.jumoga.com',
6656                 '.jumuxo.com',
6657                 '.tyriva.com',
6658                 '.vudyho.com'
6659         ),
6660         'jessicaeagloff at yahoo.co.uk' => array(
6661                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6662                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6663                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6664                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6665         ),
6666         'qbbs at xinoffice.com' => array(
6667                 // ns *.name-services.com
6668                 '.lingage.com',         // 8.15.231.118
6669                 '.puksins.com',         // IP not allocated now
6670         ),
6671         'advertolog at gmail.com' =>
6672                 // 81.0.250.86(network.upl.cz => non-existent) or
6673                 // 217.11.233.27
6674                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6675         'contact at aboutdomain.com' => array(
6676                 '.lopieur0.com',        // Not match but used
6677                 '.lopieur1.com',        // Not match but used
6678                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6679         ),
6680         'info at cash4wm.biz related' => array(
6681                 // 84.16.233.12(*.internetserviceteam.com)
6682                 '.newsblogforu.com',
6683
6684                 // 84.16.235.141()
6685                 '.informator4you.com',
6686
6687                 // 84.16.240.68(*.internetserviceteam.com)
6688                 '.absolute-best-site.com',
6689                 '.new-blog-for-you.com',
6690
6691                 // 84.16.240.69(*.internetserviceteam.com)
6692                 '.best-sport-blog.com',
6693                 '.big-internet-site.com',
6694                 '.brendsite.com',
6695                 '.my-news-blog.com',
6696
6697                 // 84.16.242.123(*.internetserviceteam.com)
6698                 '.best-news-blog.com',
6699                 '.site-with-content.com',
6700
6701                 // The same method with info at cash4wm.biz
6702                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6703                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6704                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6705                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6706                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6707                 '.bloginfo4u.info',             // 89.149.247.25
6708         ),
6709         'kerjy at yahoo.com' => array(
6710                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6711                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6712                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6713                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6714                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6715         ),
6716         'vme at hotmail.ru' => array(
6717                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6718                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6719         ),
6720         'john at hellomyns.info' => array(
6721                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6722                 '.byouz.cn',            // 89.149.247.24, / nothing
6723                 '.idghc.cn',
6724                 '.inxrj.cn',
6725                 '.jqzdf.cn',
6726                 '.vsxej.cn',
6727                 '.wkgnr.cn',
6728         ),
6729         '.CN spam payload' => array(
6730                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6731                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6732                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6733                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6734                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6735                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6736                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6737                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6738                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6739                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6740         ),
6741         'Time2ns.info' => array(
6742                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6743                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6744                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6745                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6746                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6747         ),
6748         'Ilovemyns.info' => array(
6749                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6750                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6751         ),
6752         'Freehostdns.info' => array(
6753                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6754                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6755                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6756         ),
6757         'Newns4me.info' => array(
6758                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6759                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6760         ),
6761
6762         // C-2: Lonely domains (buddies not found yet)
6763         '.0721-4404.com',
6764         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6765         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6766         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6767         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6768         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6769         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6770         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6771         '.0annie.info',
6772         '.6i6.de',
6773         '.77toperrwuter1.info', // by Roman
6774         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6775         '.angioco.com',                 // 62.37.112.100, gamble
6776         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6777         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6778         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6779         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6780         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6781         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6782         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6783         '.allworlddirect.info', // Forbidden
6784         '.amoreitsex.com',
6785         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6786         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6787         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6788         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6789         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6790         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6791         '.auto-car-cheap.org',
6792         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6793         '.baurish.info',
6794         '.bernardtomic21.info', // by filboj at hotmail.com
6795         '.bestop.name',
6796         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6797         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6798         '.bestshopfinder.info',
6799         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6800         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6801         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6802         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6803         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6804         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6805         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6806         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6807         '.catkittenmagazines.org',              // 87.118.97.117
6808         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6809         '.chatwalker.com',              // 124.32.230.65
6810         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6811         '.covertarena.co.uk',   // by Wayne Huxtable
6812         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6813         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6814         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6815         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6816         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6817         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6818         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6819         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6820         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6821         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6822         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6823         '.easyshopusa.com',             // by riter (riter at nm.ru)
6824         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6825         '.edu.ph',                              // "philippine network foundation inc"
6826         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6827         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6828         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6829         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6830         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6831         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6832         '.filthserver.com',             // sales at onlinemarketingservices.biz
6833         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6834         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6835         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6836         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6837         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6838         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6839         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6840         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6841         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6842         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6843         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6844         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6845         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6846         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6847         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6848         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6849         '.gm-exchange.jp',              // 210.188.216.49 RMT
6850         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6851         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6852         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6853         '.greatbestwestern.org',// by gao.wungao at gmail.com
6854         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6855         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6856         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6857         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6858         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6859         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6860         '.hostuju.cz',                  // ns banan.cz, banan.it
6861         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6862         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6863         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6864         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6865         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6866         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6867         '.infradoc.com',
6868         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6869         '.ismarket.com',                // Google-hiding. intercage.com related IP
6870         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6871         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6872         '.itsexosit.net',
6873         '.itxxxit.net',
6874         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6875         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6876         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6877         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6878         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6879         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6880         '.kingtools.de',
6881         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6882         '.leucainfo.com',
6883         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6884         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6885         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6886         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6887         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6888         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6889         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6890         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6891         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6892         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6893         '.megvideochatlive.info',       // Bad seo
6894         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6895         '.mncxvsm.info',                // 217.11.233.105, / blank
6896         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6897         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6898         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6899         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6900         '.mxsupportmailer.com',
6901         '.next-moneylife.com',  // RMT
6902         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6903         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6904         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6905         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6906         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6907         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6908         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6909         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6910         '.onlineviagra.de',
6911         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6912         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6913         '.ozomw.info',
6914         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6915         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6916         '.perevozka777.ru',             // by witalik at gmail.com
6917         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6918         '.pills-storage.com',   // by
6919         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6920         '.porkyhost.com',               // 79965 at whois.gkg.net
6921         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6922         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6923         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6924         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6925         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6926         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6927         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6928         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6929         '.quality-teen-porn-photo.com', // by info at densa.info
6930         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6931         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6932         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6933         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6934         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6935         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6936         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6937         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6938         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6939         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6940         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6941         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6942         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6943         '.sexamoreit.com',
6944         '.sexforit.com',
6945         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6946         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6947         '.sirlook.com',
6948         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6949         '.sepcn.info',                  // / not found
6950         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6951         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6952         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6953         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6954         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6955         '.superverizonringtones.com',   // by joshua at list.ru
6956         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6957         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6958         '.thehostcity.com',             // Domains by Proxy
6959         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6960         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6961         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6962         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6963         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6964         '.topmeds10.com',
6965         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6966         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6967         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6968         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6969         '.unctad.net',                  // by gfdogfd at lovespb.com
6970         '.vacant.org.uk',
6971         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6972         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6973         '.virtualsystem.de',
6974         '.vdxhost.com',
6975         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6976         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6977         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6978         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6979         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6980         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6981         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6982         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6983         '.whoop.to',                    // RMT
6984         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6985         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6986         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6987         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6988         '.wwwna.info',                  // / 404 Not Found
6989         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
6990         '.xamorexxx.net',
6991         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
6992         '.xsessox.com',
6993         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
6994         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
6995         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
6996         '.zyguo.info',                  // ns globoxhost.net
6997         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
6998
6999
7000         // C-3: Not classifiable (information wanted)
7001         //
7002         // Something incoming to pukiwiki related sites
7003         'nana.co.il related' => array(
7004                 '.planetnana.co.il',
7005                 '.nana.co.il',
7006         ),
7007 );
7008
7009 // --------------------------------------------------
7010
7011 $blocklist['D'] = array(
7012         // D: Sample setting of
7013         // "Third party in good faith"s
7014         //
7015         // Hosts shown inside of the implanted contents,
7016         // not used via spam, but maybe useful to detect these contents
7017         //
7018         // 'RESERVED',
7019 );
7020
7021 // --------------------------------------------------
7022
7023 $blocklist['E'] = array(
7024         // E: Sample setting of
7025         // Promoters
7026         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7027         //  Ads, Business promotions, SEO, etc)
7028         //
7029         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7030         // Sometimes they may promote each other
7031
7032         '15-Mail.com related' => array(
7033                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7034                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7035                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7036                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7037                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7038         ),
7039         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7040         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7041         'E-brainers.com related' => array(
7042                 // 202.212.14.101
7043                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7044                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7045                 '.my-tune.jp',                                  // by brainers Inc.
7046                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7047                 '.weekle.jp',                                   // by brainers Inc.
7048
7049                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7050                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7051                 '.3minutes-marketing-club.com', // by Fujio
7052                 '.affiliate-vampire.com',               // by Masatoshi
7053                 '.article-site-power-package.com',      // by Masatoshi
7054                 '.audio-marketing-club.com',    // by Fujio
7055                 '.brainers-task-manager.com',   // by Masatoshi
7056                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7057                 '.brainersbuzz.com',                    // by Masatoshi
7058                 '.den4renz-marketing-club.com', // by Fujio
7059                 '.english-contents-club.com',   // by Masatoshi
7060                 '.fly-in-ads-japan.com',                // by Fujio
7061                 '.free-resalerights-giveaway.com',      // by Fujio
7062                 '.freegiveawaysecret.com',              // by Masatoshi
7063                 '.guaranteedvisitorpro.com',    // by Masatoshi
7064                 '.havads-japan.com',                    // by Masatoshi
7065                 '.info-business123.com',                // by Fujio
7066                 '.instant-marketing-club.com',  // by Fujio
7067                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7068                 '.marketing-force-japan.com',   // by Fujio
7069                 '.masatoshikobayashi.com',              // by Fujio
7070                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7071                 '.replytomatt.com',                             // by Fujio
7072                 '.santa-deal.com',                              // by Fujio
7073                 '.santa-deal-summer.com',               // by Fujio
7074                 '.scratch-card-factory.com',    // by Masatoshi
7075                 '.script4you-japan.com',                // by Fujio
7076                 '.sell1000000dollarinjapan.com',// by Fujio
7077                 '.squeeze-page-secret.com',             // by Masatoshi
7078                 '.viral-blog-square.com',               // by Fujio
7079                 '.viralarticle.com',                    // by Fujio
7080                 '.wowhoken.com',                                // by Fujio
7081
7082                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7083                 '.brainerstelevision.com',
7084                 '.demosite4you.com',
7085                 '.keywordcatcherpro.com',
7086                 '.script-marketing-club.com',
7087
7088                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7089                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7090                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7091                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7092                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7093                 '.brainerscode.com',    // by akada
7094                 '.brainerslive.com',    // by domain
7095                 '.brainersreview.com',  // by domain
7096                 '.brainerstest.com',    // by akada
7097                 '.otosecret.com',               // by domain
7098                 '.ultimate-marketing-weapon.com',       // by akada
7099                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7100                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7101
7102                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7103                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7104         ),
7105         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7106         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7107         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7108         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7109         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7110                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7111                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7112                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7113
7114                 // Redirects and affiliates:
7115                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7116                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7117                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7118                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7119                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7120                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7121                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7122                 //   ...
7123
7124                 // Other suggestions:
7125                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7126
7127                 // Blog posting at the same time
7128                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7129                 //   2007/06/13 e123.info/archives/76
7130                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7131                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7132                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7133         ),
7134         'info at kobeweb.jp' => array(
7135                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7136                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7137                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7138         ),
7139         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7140         'Infocart.jp' => array(         // by wai at infocart.jp
7141                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7142                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7143                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7144
7145                 //inetnum:      60.32.154.176 - 60.32.154.183
7146                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7147                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7148         ),
7149         'Info-sniper.com' => array(
7150                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7151                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7152                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7153         ),
7154         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7155         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7156         'JunSuzuki.com' => array(       // e-brainers.com related
7157                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7158                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7159         ),
7160         'Natsukih.net' => array(
7161                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7162                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7163                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7164                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7165
7166                 // by info at natsukih.net
7167                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7168                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7169                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7170                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7171                 '.5muryoureport.com',   // 210.251.253.230
7172                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7173                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7174                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7175         ),
7176         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7177                 '.11kanji.com',         // 211.10.131.88
7178                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7179                 '.point-park.com',      // 211.10.131.88
7180                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7181         ),
7182         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7183         'PRJAPAN.co.jp' => array(
7184                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7185                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7186                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7187                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7188                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7189                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7190         ),
7191         'Rakuten.co.jp' => array(
7192                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7193                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7194         ),
7195         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7196         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7197         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7198         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7199                 '.e123.info',
7200                 '.ialchemist.net',
7201                 '.j012.net',
7202                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7203         ),
7204         'Viscose.jp' => array(
7205                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7206                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7207         ),
7208         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7209 );
7210
7211 // --------------------------------------------------
7212
7213 $blocklist['Z'] = array(
7214         // Z: Yours
7215         //
7216         //'',
7217         //'',
7218         //'',
7219 );
7220
7221 ?>