spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.164 2007/08/26 14:21:41 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  68         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  69         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  70         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  71         //'ifastnet.com',                               // Server hosting
  72         //'threefortune.ifastnet.com',  // Server hosting
  73
  74         // Yours
  75         //''
  76         //''
  77         //''
  78
  79 );
  80
  81 // --------------------------------------------------
  82 // A: Sample setting of
  83 // Existing URI redirection or masking services
  84
  85 $blocklist['A-1'] = array(
  86
  87         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  88         // web-based proxy, DNS subdomains, etc
  89         // http://en.wikipedia.org/wiki/URL_redirection
  90         //
  91         // as known as cheap URI obscuring services today,
  92         // for spammers and affiliate users dazed by money.
  93         //
  94         //   Messages from forerunners:
  95         //     o-rly.net
  96         //       "A URL REDIRECTION SERVICE GONE BAD"
  97         //       "SORRY, TRULY"
  98         //     smcurl.com
  99         //       "Idiots were using smcURL to shrink URLs and
 100         //        send them out via spam."
 101         //     tinyclick.com
 102         //       "...stop offering it's free services because
 103         //        too many people were taking advantage of it"
 104         //     xjs.org
 105         //       "We have been forced to close this facility
 106         //        due to a minority of knuckle draggers who
 107         //        abused this web site."
 108         //
 109         // Please notify us about this list with reason:
 110         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 111         //
 112         '0nz.org',
 113         '0rz.tw',
 114         '0url.com',
 115         '0zed.info',
 116         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 117         '123.que.jp',
 118         '12url.org',
 119         '*.15h.com',
 120         '*.1dr.biz',
 121         '1K.pl' => array(
 122                 '*.1k.pl',
 123                 '*.5g.pl',
 124                 '*.orq.pl',
 125         ),
 126         '1nk.us',
 127         '1url.org',
 128         '1url.in',
 129         '1webspace.org',
 130         '2Ch.net' => array(
 131                 'ime.nu',
 132                 'ime.st',
 133         ),
 134         '2ch2.net',
 135         '2hop4.com',
 136         '2s.ca',
 137         '2site.com',
 138         '2url.org',
 139         '301url.com',
 140         '32url.com',
 141         '.3dg.de',
 142         '*.4bb.ru',
 143         'big5.51job.com',       ///gate/big5/
 144         '5jp.net',
 145         '.6url.com',
 146         '*.6x.to',
 147         '7ref.com',
 148         '82m.org',
 149         '*.8rf.com',
 150         '98.to',
 151         'abbrv.co.uk',
 152         '*.abwb.org',
 153         'acnw.de',
 154         'Active.ws' => array(
 155                 '*.321.cn',
 156                 '*.4x2.net',
 157                 'active.ws',
 158                 '*.better.ws',
 159                 '*.here.ws',
 160                 '*.mypiece.com',
 161                 '*.official.ws',
 162                 '*.ouch.ws',
 163                 '*.premium.ws',
 164                 '*.such.info',
 165                 '*.true.ws',
 166                 '*.visit.ws',
 167         ),
 168         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 169         'aifam.com',
 170         'All4WebMasters.pl' => array(
 171                 '*.ovp.pl',
 172                 '*.6-6-6.pl',
 173         ),
 174         'amoo.org',
 175         'web.archive.org',              ///web/2
 176         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 177                 'jmp2.net',
 178                 '2me.tw',
 179         ),
 180         'ataja.es',
 181         'ATBHost.com' => array(
 182                 '*.atbhost.com',
 183                 '*.bzhost.net',
 184         ),
 185         'atk.jp',
 186         'clearp.ath.cx',
 187         'athomebiz.com',
 188         'aukcje1.pl',
 189         'beam.to',
 190         'beermapping.com',
 191         'besturl.in',
 192         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 193         'biglnk.com',
 194         'bingr.com',
 195         'bittyurl.com',
 196         '*.bizz.cc',
 197         '*.blo.pl',
 198         '*.bo.pl',
 199         'briefurl.com',
 200         'brokenscript.com',
 201         'BucksoGen.com' => array(
 202                 '*.bucksogen.com',
 203                 '*.bulochka.org',
 204                 '*.korzhik.org',
 205                 '*.kovrizhka.org',
 206                 '*.pirozhok.org',
 207                 '*.plushka.org',
 208                 '*.pryanik.org',
 209                 '*.sushka.org',
 210         ),
 211         'budgethosts.org',
 212         'budu.com',                             // by peter.eder at imcworld.com
 213         '*.buzznet.com',
 214         '*.bydl.com',
 215         'C-O.IN' => array(
 216                 '*.c-o.cc',
 217                 '*.c-o.in',
 218                 '*.coz.in',
 219                 '*.cq.bz',
 220         ),
 221         'c64.ch',
 222         'c711.com',
 223         '*.cej.pl',
 224         'checkasite.net',
 225         'url.chefhost.com',
 226         '*.chicappa.jp',
 227         'chilicity.com',
 228         'big5.china.com',               ///gate/big5/
 229         'chopurl.com',
 230         'christopherleestreet.com',
 231         'cintcm.com',
 232         '*.cjb.net',
 233         'clipurl.com',
 234         '*.co.nr',
 235         'Comtech Enterprises ' => array(        // comteche.com
 236                 'tinyurl.name',
 237                 'tinyurl.us',
 238         ),
 239         'Cool168.com' => array(
 240                 '*.cool158.com',
 241                 '*.cool168.com',
 242                 '*.ko168.com',
 243                 '*.ko188.com',
 244         ),
 245         'Coolurl.de' => array(
 246                 'coolurl.de',
 247                 'dornenboy.de',
 248                 'eyeqweb.com',
 249                 'hardcore-porn.de',
 250                 'maschinen-bluten-nicht.de',
 251         ),
 252         'cutalink.com',
 253         '*.da.cx',
 254         '*.da.ru',
 255         'dae2.com',
 256         'dephine.org',
 257         'desiurl.com',
 258         'dhurl.com',
 259         'digbig.com',
 260         'Digipills.com' => array(
 261                 '*.digipills.com',
 262                 'minilien.com',
 263                 'tinylink.com',
 264         ),
 265         '*.discutbb.com',
 266         'DL.AM' => array(
 267                 '*.cx.la',
 268                 '*.dl.am',
 269         ),
 270         '*.dl.pl',
 271         '*.dmdns.com',
 272         'doiop.com',
 273         'drlinky.com',
 274         'durl.us',
 275         '*.dvdonly.ru',
 276         '*.dynu.ca',
 277         'dwarf.name',
 278         '*.eadf.com',
 279         '*.easyurl.net',
 280         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 281                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 282                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 283                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 284                 //   "Keep continuing to seek originality and contribute it to local,
 285                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 286                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 287                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 288                 // I'm so much impressed of the situation around this imported one today.
 289         'elfurl.com',
 290         'eny.pl',
 291         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 292                 '.mywiitime.com',
 293                 '.surfindark.com',              // webmaster at etechfocus.com
 294                 '.surfinshade.com',
 295                 '.surfinshadow.com',
 296                 '.surfinwind.com',
 297                 '.topsecretlive.com',
 298         ),
 299         '*.eu.org',
 300         'F2B.be' => array(
 301                 '*.f2b.be',
 302                 '*.freakz.eu',
 303                 '*.n0.be',
 304                 '*.n3t.nl',
 305                 '*.short.be',
 306                 '*.ssr.be',
 307                 '*.tweaker.eu',
 308         ),
 309         '*.fancyurl.com',
 310         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 311                 'blue11.jp',
 312                 'fanznet.com',
 313                 'katou.in',
 314                 'mymap.in',
 315                 'saitou.in',
 316                 'satou.in',
 317                 'susan.in',
 318         ),
 319         '.fe.pl',                       // Redirection and subdomain
 320         'ffwd.to',
 321         'url.fibiger.org',
 322         'FireMe.to' => array(
 323                 'fireme.to',
 324                 'nextdoor.to',
 325                 'ontheway.to',
 326         ),
 327         'flingk.com',
 328         'flog.jp',                      // careless redirector and bbs
 329         'fm7.biz',
 330         'fnbi.jp',
 331         '*.fnbi.jp',
 332         'forgeturl.com',
 333         '*.free.bg',
 334         'Freeservers.com' => array(     // United Online Web Services, Inc.
 335                 '*.4mg.com',
 336                 '*.4t.com',
 337                 '*.8m.com',
 338                 '*.8m.net',
 339                 '*.8k.com',
 340                 '*.faithweb.com',
 341                 '*.freehosting.net',
 342                 '*.freeservers.com',
 343                 '*.gq.nu',
 344                 '*.htmlplanet.com',
 345                 '*.itgo.com',
 346                 '*.iwarp.com',
 347                 '*.s5.com',
 348                 '*.scriptmania.com',
 349                 '*.tvheaven.com',
 350         ),
 351         '*.freewebpages.com',
 352         'FreeWebServices.net' => array( // Host Department LLC
 353                 '*.about.gs',   // Dead?
 354                 '*.about.tc',
 355                 '*.about.vg',
 356                 '*.aboutus.gs',
 357                 '*.aboutus.ms',
 358                 '*.aboutus.tc',
 359                 '*.aboutus.vg',
 360                 '*.biografi.biz',
 361                 '*.biografi.info',
 362                 '*.biografi.org',
 363                 '*.biografi.us',
 364                 '*.datadiri.biz',
 365                 '*.datadiri.cc',
 366                 '*.datadiri.com',
 367                 '*.datadiri.info',
 368                 '*.datadiri.net',
 369                 '*.datadiri.org',
 370                 '*.datadiri.tv',
 371                 '*.datadiri.us',
 372                 '*.ecv.gs',
 373                 '*.ecv.ms',
 374                 '*.ecv.tc',
 375                 '*.ecv.vg',
 376                 '*.eprofile.us',
 377                 '*.go2net.ws',
 378                 '*.hits.io',
 379                 '*.hostingweb.us',
 380                 '*.hub.io',
 381                 '*.indo.bz',
 382                 '*.indo.cc',
 383                 '*.indo.gs',
 384                 '*.indo.ms',
 385                 '*.indo.tc',
 386                 '*.indo.vg',
 387                 '*.infinitehosting.net',
 388                 '*.infinites.net',
 389                 '*.lan.io',
 390                 '*.max.io',
 391                 '*.mycv.bz',
 392                 '*.mycv.nu',
 393                 '*.mycv.tv',
 394                 '*.myweb.io',
 395                 '*.ourprofile.biz',
 396                 '*.ourprofile.info',
 397                 '*.ourprofile.net',     // Dead?
 398                 '*.ourprofile.org',
 399                 '*.ourprofile.us',
 400                 '*.profil.bz',
 401                 '*.profil.cc',
 402                 '*.profil.cn',
 403                 '*.profil.gs',
 404                 '*.profil.in',
 405                 '*.profil.ms',
 406                 '*.profil.tc',
 407                 '*.profil.tv',
 408                 '*.profil.vg',  // ?
 409                 '*.site.io',
 410                 '*.wan.io',
 411                 '*.web-cam.ws',
 412                 '*.webs.io',
 413                 '*.zip.io',
 414         ),
 415         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 416         '*.fx.to',
 417         'fyad.org',
 418         'fype.com',
 419         'gentleurl.net',
 420         'Get2.us' => array(
 421                 '*.get2.us',
 422                 '*.hasballs.com',
 423                 '*.ismyidol.com',
 424                 '*.spotted.us',
 425                 '*.went2.us',
 426                 '*.wentto.us',
 427         ),
 428         'glinki.com',
 429         '*.globalredirect.com',
 430         'gnu.vu',
 431         '*.go.cc',
 432         //'Google.com' => array(
 433         //              google.com/translate_c\?u=(?:http://)?
 434         //),
 435         'goonlink.com',
 436         '.gourl.org',
 437         '.greatitem.com',
 438         'gzurl.com',
 439         'url.grillsportverein.de',
 440         'Harudake.net' => array('*.hyu.jp'),
 441         'Hattinger Linux User Group' => array('short.hatlug.de'),
 442         'Hexten.net' => array('lyxus.net'),
 443         'here.is',
 444         'HispaVista.com' => array(
 445                 '*.blogdiario.com',
 446                 '*.hispavista.com',
 447                 '.galeon.com',
 448         ),
 449         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 450                 '*.8l.pl',
 451                 '*.blg.pl',
 452                 '*.czytajto.pl',
 453                 '*.ryj.pl',
 454                 '*.xit.pl',
 455                 '*.xlc.pl',
 456                 '*.hk.pl',
 457                 '*.home.pl',
 458                 '*.of.pl',
 459         ),
 460         'hort.net',
 461         'free4.hostrocket.com',
 462         '*.hotindex.ru',
 463         'HotRedirect.com' => array(
 464                 '*.coolhere.com',
 465                 '*.homepagehere.com',
 466                 '*.hothere.com',
 467                 '*.mustbehere.com',
 468                 '*.onlyhere.net',
 469                 '*.pagehere.com',
 470                 '*.surfhere.net',
 471                 '*.zonehere.com',
 472         ),
 473         'hotshorturl.com',
 474         'hotwebcomics.com',     ///search_redirect.php
 475         'hurl.to',
 476         '*.hux.de',
 477         '*.i89.us',
 478         'iat.net',                      // 74.208.58.130 by Tony Carter
 479         'ibm.com',                      ///links (Correct it)
 480         '*.iceglow.com',
 481         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 482         'Ideas para Nuevos Mercados SL' => array(
 483                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 484                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 485                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 486                 // by edgar bortolin (oscar at i4nm.com)
 487                 // by Edgar Bortolin  (oscar at i4nm.com)
 488                 // by oscar florez (oscar at i4nm.com)
 489                 // by Oscar Florez (oscar at red-es.com)
 490                 // by covadonga del valle (oscar at i4nm.com)
 491                 '*.ar.gd',
 492                 '*.ar.gs',      // ns *.nora.net
 493                 '*.ar.kz',      // by oscar
 494                 '*.ar.nu',      // by Edgar
 495                 '*.ar.tc',      // by oscar
 496                 '*.ar.vg',      // by oscar
 497                 '*.bo.kz',      // by oscar
 498                 '*.bo.nu',      // by covadonga
 499                 '*.bo.tc',      // by oscar
 500                 '*.bo.tf',      // by Oscar
 501                 '*.bo.vg',      // by oscar
 502                 '*.br.gd',
 503                 '*.br.gs',      // ns *.nora.net
 504                 '*.br.nu',      // by edgar
 505                 '*.br.vg',      // by oscar
 506                 '*.ca.gs',      // by oscar
 507                 '*.ca.kz',      // by oscar
 508                 '*.cl.gd',      // by oscar
 509                 '*.cl.kz',      // by oscar
 510                 '*.cl.nu',      // by edgar
 511                 '*.cl.tc',      // by oscar
 512                 '*.cl.tf',      // by Oscar
 513                 '*.cl.vg',      // by oscar
 514                 '*.col.nu',     // by Edgar
 515                 '*.cr.gs',      // ns *.nora.net
 516                 '*.cr.kz',      // by oscar
 517                 '*.cr.nu',      // by edgar
 518                 '*.cr.tc',      // by oscar
 519                 '*.cu.tc',      // by oscar
 520                 '*.do.kz',      // by oscar
 521                 '*.do.nu',      // by edgar
 522                 '*.ec.kz',      // by edgar
 523                 '*.ec.nu',      // by Edgar
 524                 '*.ec.tf',      // by Oscar
 525                 '*.es.kz',      // by oscar
 526                 '*.eu.kz',      // by oscar
 527                 '*.gt.gs',      // ns *.nora.net
 528                 '*.gt.tc',      // by oscar
 529                 '*.gt.tf',      // by Oscar
 530                 '*.gt.vg',      // by Oscar
 531                 '*.hn.gs',      // ns *.nora.net
 532                 '*.hn.tc',      // by oscar
 533                 '*.hn.tf',      // by Oscar
 534                 '*.hn.vg',      // by oscar
 535                 '*.mx.gd',
 536                 '*.mx.gs',      // ns *.nora.net
 537                 '*.mx.kz',      // by oscar
 538                 '*.mx.vg',      // by oscar
 539                 '*.ni.kz',      // by oscar
 540                 '*.pa.kz',      // by oscar
 541                 '*.pe.kz',      // by oscar
 542                 '*.pe.nu',      // by Edgar
 543                 '*.pr.kz',      // by oscar
 544                 '*.pr.nu',      // by edgar
 545                 '*.pt.gs',      // ns *.nora.net
 546                 '*.pt.kz',      // by edgar
 547                 '*.pt.nu',      // by edgar
 548                 '*.pt.tc',      // by oscar
 549                 '*.pt.tf',      // by Oscar
 550                 '*.py.gs',      // ns *.nora.net
 551                 '*.py.nu',      // by edgar
 552                 '*.py.tc',      // by oscar
 553                 '*.py.tf',      // by Oscar
 554                 '*.py.vg',      // by oscar
 555                 '*.sv.tc',      // by oscar
 556                 '*.usa.gs',     // ns *.nora.net
 557                 '*.uy.gs',      // ns *.nora.net
 558                 '*.uy.kz',      // by oscar
 559                 '*.uy.nu',      // by edgar
 560                 '*.uy.tc',      // by oscar
 561                 '*.uy.tf',      // by Oscar
 562                 '*.uy.vg',      // by oscar
 563                 '*.ve.gs',      // by oscar
 564                 '*.ve.tc',      // by oscar
 565                 '*.ve.tf',      // by Oscar
 566                 '*.ve.vg',      // by oscar
 567                 '*.ven.nu',     // by edgar
 568         ),
 569         'ie.to',
 570         'igoto.co.uk',
 571         'ilook.tw',
 572         'indianpad.com',                ///view/
 573         'iNetwork.co.il' => array(
 574                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 575                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 576                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 577         ),
 578         '*.infogami.com',
 579         'infotop.jp',
 580         'ipoo.org',
 581         'IR.pl' => array(
 582                 '*.aj.pl',
 583                 '*.aliasy.org',
 584                 '*.gu.pl',
 585                 '*.hu.pl',
 586                 '*.ir.pl',
 587                 '*.jo.pl',
 588                 '*.su.pl',
 589                 '*.td.pl',
 590                 '*.uk.pl',
 591                 '*.uy.pl',
 592                 '*.xa.pl',
 593                 '*.zj.pl',
 594         ),
 595         'irotator.com',
 596         '.iwebtool.com',
 597         'j6.bz',
 598         'jeeee.net',
 599         'Jaze Redirect Services' => array(
 600                 '*.arecool.net',
 601                 '*.iscool.net',
 602                 '*.isfun.net',
 603                 '*.tux.nu',
 604         ),
 605         '*.jed.pl',
 606         'JeremyJohnstone.com' => array('url.vg'),
 607         'jemurl.com',
 608         'jggj.net',
 609         'jpan.jp',
 610         'josh.nu',
 611         'kat.cc',
 612         'Kickme.to' => array(
 613                 '.1024bit.at',
 614                 '.128bit.at',
 615                 '.16bit.at',
 616                 '.256bit.at',
 617                 '.32bit.at',
 618                 '.512bit.at',
 619                 '.64bit.at',
 620                 '.8bit.at',
 621                 '.adores.it',
 622                 '.again.at',
 623                 '.allday.at',
 624                 '.alone.at',
 625                 '.altair.at',
 626                 '.american.at',
 627                 '.amiga500.at',
 628                 '.ammo.at',
 629                 '.amplifier.at',
 630                 '.amstrad.at',
 631                 '.anglican.at',
 632                 '.angry.at',
 633                 '.around.at',
 634                 '.arrange.at',
 635                 '.australian.at',
 636                 '.baptist.at',
 637                 '.basque.at',
 638                 '.battle.at',
 639                 '.bazooka.at',
 640                 '.berber.at',
 641                 '.blackhole.at',
 642                 '.booze.at',
 643                 '.bosnian.at',
 644                 '.brainiac.at',
 645                 '.brazilian.at',
 646                 '.bummer.at',
 647                 '.burn.at',
 648                 '.c-64.at',
 649                 '.catalonian.at',
 650                 '.catholic.at',
 651                 '.chapel.at',
 652                 '.chills.it',
 653                 '.christiandemocrats.at',
 654                 '.cname.at',
 655                 '.colors.at',
 656                 '.commodore.at',
 657                 '.commodore64.at',
 658                 '.communists.at',
 659                 '.conservatives.at',
 660                 '.conspiracy.at',
 661                 '.cooldude.at',
 662                 '.craves.it',
 663                 '.croatian.at',
 664                 '.cuteboy.at',
 665                 '.dancemix.at',
 666                 '.danceparty.at',
 667                 '.dances.it',
 668                 '.danish.at',
 669                 '.dealing.at',
 670                 '.deep.at',
 671                 '.democrats.at',
 672                 '.digs.it',
 673                 '.divxlinks.at',
 674                 '.divxmovies.at',
 675                 '.divxstuff.at',
 676                 '.dizzy.at',
 677                 '.does.it',
 678                 '.dork.at',
 679                 '.drives.it',
 680                 '.dutch.at',
 681                 '.dvdlinks.at',
 682                 '.dvdmovies.at',
 683                 '.dvdstuff.at',
 684                 '.emulators.at',
 685                 '.end.at',
 686                 '.english.at',
 687                 '.eniac.at',
 688                 '.error403.at',
 689                 '.error404.at',
 690                 '.evangelism.at',
 691                 '.exhibitionist.at',
 692                 '.faith.at',
 693                 '.fight.at',
 694                 '.finish.at',
 695                 '.finnish.at',
 696                 '.forward.at',
 697                 '.freebie.at',
 698                 '.freemp3.at',
 699                 '.french.at',
 700                 '.graduatejobs.at',
 701                 '.greenparty.at',
 702                 '.grunge.at',
 703                 '.hacked.at',
 704                 '.hang.at',
 705                 '.hangup.at',
 706                 '.has.it',
 707                 '.hide.at',
 708                 '.hindu.at',
 709                 '.htmlpage.at',
 710                 '.hungarian.at',
 711                 '.icelandic.at',
 712                 '.independents.at',
 713                 '.invisible.at',
 714                 '.is-chillin.it',
 715                 '.is-groovin.it',
 716                 '.japanese.at',
 717                 '.jive.at',
 718                 '.kickass.at',
 719                 '.kickme.to',
 720                 '.kindergarden.at',
 721                 '.knows.it',
 722                 '.kurd.at',
 723                 '.labour.at',
 724                 '.leech.at',
 725                 '.liberals.at',
 726                 '.linuxserver.at',
 727                 '.liqour.at',
 728                 '.lovez.it',
 729                 '.makes.it',
 730                 '.maxed.at',
 731                 '.means.it',
 732                 '.meltdown.at',
 733                 '.methodist.at',
 734                 '.microcomputers.at',
 735                 '.mingle.at',
 736                 '.mirror.at',
 737                 '.moan.at',
 738                 '.mormons.at',
 739                 '.musicmix.at',
 740                 '.nationalists.at',
 741                 '.needz.it',
 742                 '.nerds.at',
 743                 '.neuromancer.at',
 744                 '.newbie.at',
 745                 '.nicepage.at',
 746                 '.ninja.at',
 747                 '.norwegian.at',
 748                 '.ntserver.at',
 749                 '.owns.it',
 750                 '.paint.at',
 751                 '.palestinian.at',
 752                 '.phoneme.at',
 753                 '.phreaking.at',
 754                 '.playz.it',
 755                 '.polish.at',
 756                 '.popmusic.at',
 757                 '.portuguese.at',
 758                 '.powermac.at',
 759                 '.processor.at',
 760                 '.prospects.at',
 761                 '.protestant.at',
 762                 '.rapmusic.at',
 763                 '.raveparty.at',
 764                 '.reachme.at',
 765                 '.reads.it',
 766                 '.reboot.at',
 767                 '.relaxed.at',
 768                 '.republicans.at',
 769                 '.researcher.at',
 770                 '.reset.at',
 771                 '.resolve.at',
 772                 '.retrocomputers.at',
 773                 '.rockparty.at',
 774                 '.rocks.it',
 775                 '.rollover.at',
 776                 '.rough.at',
 777                 '.rules.it',
 778                 '.rumble.at',
 779                 '.russian.at',
 780                 '.says.it',
 781                 '.scared.at',
 782                 '.seikh.at',
 783                 '.serbian.at',
 784                 '.short.as',
 785                 '.shows.it',
 786                 '.silence.at',
 787                 '.simpler.at',
 788                 '.sinclair.at',
 789                 '.singz.it',
 790                 '.slowdown.at',
 791                 '.socialists.at',
 792                 '.spanish.at',
 793                 '.split.at',
 794                 '.stand.at',
 795                 '.stoned.at',
 796                 '.stumble.at',
 797                 '.supercomputer.at',
 798                 '.surfs.it',
 799                 '.swedish.at',
 800                 '.swims.it',
 801                 '.synagogue.at',
 802                 '.syntax.at',
 803                 '.syntaxerror.at',
 804                 '.techie.at',
 805                 '.temple.at',
 806                 '.thinkbig.at',
 807                 '.thirsty.at',
 808                 '.throw.at',
 809                 '.toplist.at',
 810                 '.trekkie.at',
 811                 '.trouble.at',
 812                 '.turkish.at',
 813                 '.unexplained.at',
 814                 '.unixserver.at',
 815                 '.vegetarian.at',
 816                 '.venture.at',
 817                 '.verycool.at',
 818                 '.vic-20.at',
 819                 '.viewing.at',
 820                 '.vintagecomputers.at',
 821                 '.virii.at',
 822                 '.vodka.at',
 823                 '.wannabe.at',
 824                 '.webpagedesign.at',
 825                 '.wheels.at',
 826                 '.whisper.at',
 827                 '.whiz.at',
 828                 '.wonderful.at',
 829                 '.zor.org',
 830                 '.zx80.at',
 831                 '.zx81.at',
 832                 '.zxspectrum.at',
 833         ),
 834         'kisaweb.com',
 835         'krotki.pl',
 836         'kuerzer.de',
 837         '*.kupisz.pl',
 838         'kuso.cc',
 839         '*.l8t.com',
 840         'lame.name',
 841         'lediga.st',
 842         'liencourt.com',
 843         'liteurl.com',
 844         'linkachi.com',
 845         'linkezy.com',
 846         'linkfrog.net',
 847         'linkook.com',
 848         'linkzip.net',
 849         'lispurl.com',
 850         'lnk.in',
 851         'makeashorterlink.com',
 852         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 853                 '*.3gp.fr',
 854                 '*.gtx.fr',
 855                 '*.ici.st',
 856                 '*.max.st',
 857                 '*.nn.cx',              // ns *.sivit.org
 858                 '*.site.cx',    // ns *.sivit.org
 859                 '*.user.fr',
 860                 '*.zxr.fr',
 861         ),
 862         'mcturl.com',
 863         'memurl.com',
 864         'Metamark.net' => array('xrl.us'),
 865         'midgeturl.com',
 866         'Minilink.org' => array('lnk.nu'),
 867         'miniurl.org',
 868         'miniurl.pl',
 869         'mixi.bz',
 870         'mo-v.jp',
 871         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 872                 '.com.md',
 873                 '.co.md',
 874                 '.org.md',
 875                 '.info.md',
 876                 '.host.md',
 877         ),
 878         'monster-submit.com',
 879         'mooo.jp',
 880         'murl.net',
 881         'myactivesurf.net',
 882         'mytinylink.com',
 883         'myurl.in',
 884         'myurl.com.tw',
 885         'nanoref.com',
 886         'Ne1.net' => array(
 887                 '*.ne1.net',
 888                 '*.r8.org',
 889         ),
 890         'Nashville Linux Users Group' => array('nlug.org'),
 891         'not2long.net',
 892         '*.notlong.com',
 893         '*.nuv.pl',
 894         'ofzo.be',
 895         '*.ontheinter.net',
 896         'ourl.org',
 897         'ov2.net',                              // frame
 898         '*.ozonez.com',
 899         'pagebang.com',
 900         'palurl.com',
 901         '*.paulding.net',
 902         'phpfaber.org',
 903         'pnope.com',
 904         'prettylink.com',
 905         'PROXID.net' => array(  // also xRelay.net
 906                 '*.asso.ws',
 907                 '*.corp.st',
 908                 '*.euro.tm',
 909                 '*.perso.tc',
 910                 '*.site.tc',
 911                 '*.societe.st',
 912         ),
 913         'qrl.jp',
 914         'qurl.net',
 915         'qwer.org',
 916         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 917         'radiobase.net',
 918         'Rakuten.co.jp' => array(
 919                 'pt.afl.rakuten.co.jp', ///c/
 920         ),
 921         'RedirectFree.com' => array(
 922                 '*.red.tc',
 923                 '*.redirectfree.com',
 924                 '*.sky.tc',
 925                 '*.the.vg',
 926         ),
 927         'redirme.com',
 928         'redirectme.to',
 929         'relic.net',
 930         'rezma.info',
 931         'rio.st',
 932         'rlink.org',
 933         '*.rmcinfo.fr',
 934         'rubyurl.com',
 935         '*.runboard.com',
 936         'runurl.com',
 937         's-url.net',
 938         's1u.net',
 939         'SG5.co.uk' => array(
 940                 '*.sg5.co.uk',
 941                 '*.sg5.info',
 942         ),
 943         'Shim.net' => array(
 944                 '*.0kn.com',
 945                 '*.2cd.net',
 946                 '*.freebiefinders.net',
 947                 '*.freegaming.org',
 948                 '*.op7.net',
 949                 '*.shim.net',
 950                 '*.v9z.com',
 951         ),
 952         'big5.shippingchina.com',
 953         'shorl.com',
 954         'shortenurl.com',
 955         'shorterlink.com',
 956         'shortlinks.co.uk',
 957         'shorttext.com',
 958         'shorturl-accessanalyzer.com',
 959         'Shortify.com' => array(
 960                 '74678439.com',
 961                 'shortify.com',
 962         ),
 963         'shortlink.co.uk',
 964         'ShortURL.com' => array(
 965                 '*.1sta.com',
 966                 '*.24ex.com',
 967                 '*.2fear.com',
 968                 '*.2fortune.com',
 969                 '*.2freedom.com',
 970                 '*.2hell.com',
 971                 '*.2savvy.com',
 972                 '*.2truth.com',
 973                 '*.2tunes.com',
 974                 '*.2ya.com',
 975                 '*.alturl.com',
 976                 '*.antiblog.com',
 977                 '*.bigbig.com',
 978                 '*.dealtap.com',
 979                 '*.ebored.com',
 980                 '*.echoz.com',
 981                 '*.filetap.com',
 982                 '*.funurl.com',
 983                 '*.headplug.com',
 984                 '*.hereweb.com',
 985                 '*.hitart.com',
 986                 '*.mirrorz.com',
 987                 '*.shorturl.com',
 988                 '*.spyw.com',
 989                 '*.vze.com',
 990         ),
 991         'shrinkalink.com',
 992         'shrinkthatlink.com',
 993         'shrinkurl.us',
 994         'shrt.org',
 995         'shrunkurl.com',
 996         'shurl.org',
 997         'shurl.net',
 998         'sid.to',
 999         'simurl.com',
1000         'sitefwd.com',
1001         'Sitelutions.com' => array(
1002                 '*.assexy.as',
1003                 '*.athersite.com',
1004                 '*.athissite.com',
1005                 '*.bestdeals.at',
1006                 '*.byinter.net',
1007                 '*.findhere.org',
1008                 '*.fw.nu',
1009                 '*.isgre.at',
1010                 '*.isthebe.st',
1011                 '*.kwik.to',
1012                 '*.lookin.at',
1013                 '*.lowestprices.at',
1014                 '*.onthenet.as',
1015                 '*.ontheweb.nu',
1016                 '*.pass.as',
1017                 '*.passingg.as',
1018                 '*.redirect.hm',
1019                 '*.rr.nu',
1020                 '*.ugly.as',
1021         ),
1022         '*.skracaj.pl',
1023         'skiltechurl.com',
1024         'skocz.pl',
1025         'slimurl.jp',
1026         'slink.in',
1027         'smallurl.eu',
1028         'smurl.name',
1029         'snipurl.com',
1030         'sp-nov.net',
1031         'splashblog.com',
1032         'spod.cx',
1033         '*.spydar.com',
1034         'Subdomain.gr' => array(
1035                 '*.p2p.gr',
1036                 '*.subdomain.gr',
1037         ),
1038         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1039         'surl.se',
1040         'surl.ws',
1041         'symy.jp',
1042         'tdurl.com',
1043         'tighturl.com',
1044         'tiniuri.com',
1045         'tiny.cc',
1046         'tiny.pl',
1047         'tiny2go.com',
1048         'tinylink.eu',
1049         'tinylinkworld.com',
1050         'tinypic.com',
1051         'tinyr.us',
1052         'TinyURL.com' => array(
1053                 'tinyurl.com',
1054                 'preview.tinyurl.com',
1055                 'tinyurl.co.uk',
1056         ),
1057         'titlien.com',
1058         '*.tlg.pl',
1059         'tlurl.com',
1060         'link.toolbot.com',
1061         'tnij.org',
1062         'Tokelau ccTLD' => array('.tk'),
1063         'toila.net',
1064         '*.toolbot.com',
1065         '*.torontonian.com',
1066         'trimurl.com',
1067         'ttu.cc',
1068         'turl.jp',
1069         '*.tz4.com',
1070         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1071                 '*.1.to',
1072                 '*.4.to',
1073                 '*.5.to',
1074                 '*.82.to',
1075                 '*.s.to',
1076                 '*.u.to',
1077                 '*.ce.to',
1078                 '*.cz.to',
1079                 '*.if.to',
1080                 '*.it.to',
1081                 '*.kp.to',
1082                 '*.ne.to',
1083                 '*.ok.to',
1084                 '*.pc.to',
1085                 '*.tv.to',
1086                 '*.dd.to',
1087                 '*.ee.to',
1088                 '*.hh.to',
1089                 '*.kk.to',
1090                 '*.mm.to',
1091                 '*.qq.to',
1092                 '*.xx.to',
1093                 '*.zz.to',
1094                 '*.ivy.to',
1095                 '*.joa.to',
1096                 '*.ever.to',
1097                 '*.mini.to',
1098         ),
1099         'uchinoko.in',
1100         'Ulimit.com' => array(
1101                 '*.be.tf',
1102                 '*.best.cd',
1103                 '*.bsd-fan.com',
1104                 '*.c0m.st',
1105                 '*.ca.tc',
1106                 '*.clan.st',
1107                 '*.com02.com',
1108                 '*.en.st',
1109                 '*.euro.st',
1110                 '*.fr.fm',
1111                 '*.fr.st',
1112                 '*.fr.vu',
1113                 '*.gr.st',
1114                 '*.ht.st',
1115                 '*.int.ms',
1116                 '*.it.st',
1117                 '*.java-fan.com',
1118                 '*.linux-fan.com',
1119                 '*.mac-fan.com',
1120                 '*.mp3.ms',
1121                 '*.qc.tc',
1122                 '*.sp.st',
1123                 '*.suisse.st',
1124                 '*.t2u.com',
1125                 '*.unixlover.com',
1126                 '*.zik.mu',
1127         ),
1128         '*.uni.cc',
1129         'UNONIC.com' => array(
1130                 '*.at.tf',      // AlpenNIC
1131                 '*.bg.tf',
1132                 '*.ca.tf',
1133                 '*.ch.tf',      // AlpenNIC
1134                 '*.cz.tf',
1135                 '*.de.tf',      // AlpenNIC
1136                 '*.edu.tf',
1137                 '*.eu.tf',
1138                 '*.int.tf',
1139                 '*.net.tf',
1140                 '*.pl.tf',
1141                 '*.ru.tf',
1142                 '*.sg.tf',
1143                 '*.us.tf',
1144         ),
1145         'Up.pl' => array(
1146                 '.69.pl',                       // by nsk101869
1147                 '.crack.pl',            // by nsk101869
1148                 '.film.pl',                     // by sibr19002
1149                 '.h2o.pl',                      // by nsk101869
1150                 '.hostessy.pl',         // by nsk101869
1151                 '.komis.pl',            // by nsk101869
1152                 '.laski.pl',            // by nsk101869
1153                 '.modelki.pl',          // by nsk101869
1154                 '.muzyka.pl',           // by sibr19002
1155                 '.nastolatki.pl',       // by nsk101869
1156                 '.obuwie.pl',           // by nsk101869
1157                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1158                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1159                 '.sexchat.pl',          // by nsk101869
1160                 '.sexlive.pl',          // by nsk101869
1161                 '.tv.pl',                       // by nsk101869
1162                 '.up.pl',                       // by nsk101869
1163                 '.video.pl',            // by nsk101869
1164                 '.xp.pl',                       // nsk101869
1165         ),
1166         '*.uploadr.com',
1167         'url.ie',
1168         'url4.net',
1169         'url-c.com',
1170         'urlbee.com',
1171         'urlbounce.com',
1172         'urlcut.com',
1173         'urlcutter.com',
1174         'urlic.com',
1175         'urlin.it',
1176         'urlkick.com',
1177         'URLLogs.com' => array(
1178                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1179                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1180         ),
1181         '*.urlproxy.com',
1182         'urlser.com',
1183         'urlsnip.com',
1184         'urlzip.de',
1185         'urlx.org',
1186         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1187         'utun.jp',
1188         'uxxy.com',
1189         '*.v27.net',
1190         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1191                 '*.all.at',
1192                 '*.back.to',
1193                 '*.beam.at',
1194                 '*.been.at',
1195                 '*.bite.to',
1196                 '*.board.to',
1197                 '*.bounce.to',
1198                 '*.bowl.to',
1199                 '*.break.at',
1200                 '*.browse.to',
1201                 '*.change.to',
1202                 '*.chip.ms',
1203                 '*.connect.to',
1204                 '*.crash.to',
1205                 '*.cut.by',
1206                 '*.direct.at',
1207                 '*.dive.to',
1208                 '*.drink.to',
1209                 '*.drive.to',
1210                 '*.drop.to',
1211                 '*.easy.to',
1212                 '*.everything.at',
1213                 '*.fade.to',
1214                 '*.fanclub.ms',
1215                 '*.firstpage.de',
1216                 '*.fly.to',
1217                 '*.flying.to',
1218                 '*.fortunecity.co.uk',
1219                 '*.fortunecity.com',
1220                 '*.forward.to',
1221                 '*.fullspeed.to',
1222                 '*.fun.ms',
1223                 '*.gameday.de',
1224                 '*.germany.ms',
1225                 '*.get.to',
1226                 '*.getit.at',
1227                 '*.hard-ware.de',
1228                 '*.hello.to',
1229                 '*.hey.to',
1230                 '*.hop.to',
1231                 '*.how.to',
1232                 '*.hp.ms',
1233                 '*.jump.to',
1234                 '*.kiss.to',
1235                 '*.listen.to',
1236                 '*.mediasite.de',
1237                 '*.megapage.de',
1238                 '*.messages.to',
1239                 '*.mine.at',
1240                 '*.more.at',
1241                 '*.more.by',
1242                 '*.move.to',
1243                 '*.musicpage.de',
1244                 '*.mypage.org',
1245                 '*.mysite.de',
1246                 '*.nav.to',
1247                 '*.notrix.at',
1248                 '*.notrix.ch',
1249                 '*.notrix.de',
1250                 '*.notrix.net',
1251                 '*.on.to',
1252                 '*.page.to',
1253                 '*.pagina.de',
1254                 '*.played.by',
1255                 '*.playsite.de',
1256                 '*.privat.ms',
1257                 '*.quickly.to',
1258                 '*.redirect.to',
1259                 '*.rulestheweb.com',
1260                 '*.run.to',
1261                 '*.scroll.to',
1262                 '*.seite.ms',
1263                 '*.shortcut.to',
1264                 '*.skip.to snap.to',
1265                 '*.soft-ware.de',
1266                 '*.start.at',
1267                 '*.stick.by',
1268                 '*.surf.to',
1269                 '*.switch.to',
1270                 '*.talk.to',
1271                 '*.tip.nu',
1272                 '*.top.ms',
1273                 '*.transfer.to',
1274                 '*.travel.to',
1275                 '*.turn.to',
1276                 '*.vacations.to',
1277                 '*.videopage.de',
1278                 '*.virtualpage.de',
1279                 '*.w3.to',
1280                 '*.walk.to',
1281                 '*.warp9.to',
1282                 '*.window.to',
1283                 '*.yours.at',
1284                 '*.zap.to',
1285                 '*.zip.to',
1286         ),
1287         'VDirect.com' => array(
1288                 '*.emailme.net',
1289                 '*.getto.net',
1290                 '*.inetgames.com',
1291                 '*.netbounce.com',
1292                 '*.netbounce.net',
1293                 '*.oneaddress.net',
1294                 '*.snapto.net',
1295                 '*.vdirect.com',
1296                 '*.vdirect.net',
1297                 '*.webrally.net',
1298         ),
1299         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1300         'vgo2.com',
1301         'Voila.fr' => array('r.voila.fr'),      // Fix it
1302         'w3t.org',
1303         'wapurl.co.uk',
1304         'Wb.st' => array(
1305                 '*.team.st',
1306                 '*.wb.st',
1307         ),
1308         'wbkt.net',
1309         'WebAlias.com' => array(
1310                 '*.andmuchmore.com',
1311                 '*.browser.to',
1312                 '*.escape.to',
1313                 '*.fornovices.com',
1314                 '*.fun.to',
1315                 '*.got.to',
1316                 '*.hottestpix.com',
1317                 '*.imegastores.com',
1318                 '*.latest-info.com',
1319                 '*.learn.to',
1320                 '*.moviefever.com',
1321                 '*.mp3-archives.com',
1322                 '*.myprivateidaho.com',
1323                 '*.radpages.com',
1324                 '*.remember.to',
1325                 '*.resourcez.com',
1326                 '*.return.to',
1327                 '*.sail.to',
1328                 '*.sports-reports.com',
1329                 '*.stop.to',
1330                 '*.thrill.to',
1331                 '*.tophonors.com',
1332                 '*.uncutuncensored.com',
1333                 '*.up.to',
1334                 '*.veryweird.com',
1335                 '*.way.to',
1336                 '*.web-freebies.com',
1337                 '.webalias.com',
1338                 '*.webdare.com',
1339                 '*.xxx-posed.com',
1340         ),
1341         'webmasterwise.com',
1342         'witherst at hotmail.com' => array(     // by Tim Withers
1343                 '*.associates-program.com',
1344                 '*.casinogopher.com',
1345                 '*.ezpagez.com',
1346                 '*.vgfaqs.com',
1347         ),
1348         'wittylink.com',
1349         'wiz.sc',                       // tiny.cc related
1350         'X50.us' => array(
1351                 '*.i50.de',
1352                 '*.x50.us',
1353         ),
1354         'big5.xinhuanet.com',   ///gate/big5/
1355         'xhref.com',
1356         'Xn6.net' => array(
1357                 '*.9ax.net',
1358                 '*.xn6.net',
1359         ),
1360         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1361         '.y11.net',
1362         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1363                 '*.yesns.com',
1364                 '*.srv4u.net',
1365                 //blogne.com
1366         ),
1367         'yatuc.com',
1368         'yep.it',
1369         'yumlum.com',
1370         'yurel.com',
1371         'Z.la' => array(
1372                 'z.la',
1373                 't.z.la',
1374         ),
1375         'zaable.com',
1376         'zapurl.com',
1377         'zarr.co.uk',
1378         'zerourl.com',
1379         'ZeroWeb.org' => array(
1380                 '*.80t.com',
1381                 '*.firez.org',
1382                 '*.fizz.nu',
1383                 '*.ingame.org',
1384                 '*.irio.net',
1385                 '*.v33.org',
1386                 '*.zeroweb.org',
1387         ),
1388         'zhukcity.ru',
1389         'zippedurl.com',
1390         'zr5.us',
1391         '*.zs.pl',
1392         '*.zu5.net',
1393         'zuso.tw',
1394         '*.zwap.to',
1395 );
1396
1397 // --------------------------------------------------
1398
1399 $blocklist['A-2'] = array(
1400
1401         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1402         //
1403         //'*.dyndns.*', // Wildcard for dyndns
1404         //
1405         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1406         'ddns.ru' => array('*.bpa.nu'),
1407         'Dhs.org' => array(
1408                 '*.2y.net',
1409                 '*.dhs.org',
1410         ),
1411         '*.dnip.net',
1412         '*.dyndns.co.za',
1413         '*.dyndns.dk',
1414         '*.dyndns.nemox.net',
1415         'DyDNS.com' => array(
1416                 '*.ath.cx',
1417                 '*.dnsalias.org',
1418                 '*.dyndns.org',
1419                 '*.homeip.net',
1420                 '*.homelinux.net',
1421                 '*.mine.nu',
1422                 '*.shacknet.nu',
1423         ),
1424         '*.dtdns.net',                  // by jscott at sceiron.com
1425         '*.dynu.com',
1426         '*.dynup.net',
1427         '*.fdns.net',
1428         'J-Speed.net' => array(
1429                 '*.bne.jp',
1430                 '*.ii2.cc',
1431                 '*.jdyn.cc',
1432                 '*.jspeed.jp',
1433         ),
1434         '*.mydyn.de',
1435         '*.nerdcamp.net',
1436         'No-IP.com' => array(
1437                         '*.bounceme.net',
1438                         '*.hopto.org',
1439                         '*.myftp.biz',
1440                         '*.myftp.org',
1441                         '*.myvnc.com',
1442                         '*.no-ip.biz',
1443                         '*.no-ip.info',
1444                         '*.no-ip.org',
1445                         '*.redirectme.net',
1446                         '*.servebeer.com',
1447                         '*.serveblog.net',
1448                         '*.servecounterstrike.com',
1449                         '*.serveftp.com',
1450                         '*.servegame.com',
1451                         '*.servehalflife.com',
1452                         '*.servehttp.com',
1453                         '*.servemp3.com',
1454                         '*.servepics.com',
1455                         '*.servequake.com',
1456                         '*.sytes.net',
1457                         '*.zapto.org',
1458         ),
1459         '*.opendns.be',
1460         'Yi.org' => array(      // by dns at whyi.org
1461                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1462
1463                 // 72.55.129.46(redirect.yi.org)
1464                 '*.whyi.org',
1465                 '*.weedns.com',
1466         ),
1467         '*.zenno.info',
1468         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1469                         // and all non-recorded domains redirect to 'agoga.com' now
1470                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1471                         // http://agoga.com/aboutus.html
1472 );
1473
1474 // --------------------------------------------------
1475
1476 // B: Sample setting of:
1477 // Jacked (taken advantage of) and cleaning-less sites
1478 //
1479 // Please notify us about this list with reason:
1480 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1481
1482 $blocklist['B-1'] = array(
1483
1484         // B-1: Web spaces
1485         //
1486         //   Messages from forerunners:
1487         //     activefreehost.com
1488         //       "We regret to inform you that ActiveFreeHost
1489         //        free hosting service has is now closed (as of
1490         //        September 18). We have been online for over
1491         //        two and half years, but have recently decided
1492         //        to take time for software improvement to fight
1493         //        with server abuse, Spam advertisement and
1494         //        fraud."
1495         //
1496         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1497         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1498         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1499         '0Catch.com related' => array(
1500                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1501
1502                 // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1503                 '*.100freemb.com',              // by Danny Ashworth
1504                 '*.exactpages.com',
1505                 '*.fcpages.com',
1506                 '*.wtcsites.com',
1507
1508                 // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1509                 '*.741.com',
1510                 '*.freecities.com',
1511                 '*.freesite.org',
1512                 '*.freewebpages.org',
1513                 '*.freewebsitehosting.com',
1514                 '*.jvl.com',
1515
1516                 // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1517                 '*.freespaceusa.com',
1518                 '*.usafreespace.com',
1519
1520                 // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1521                 '*.dex1.com',
1522                 '*.questh.com',
1523
1524                 // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1525                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1526                 '*.012webpages.com',    // by support at 0catch.com
1527                 '*.150m.com',
1528                 '*.1sweethost.com',             // by whois at bluehost.com
1529                 '*.250m.com',                   // by jason at fahlman.net
1530                 '*.9cy.com',                    // by paulw0t at gmail.com
1531                 '*.angelcities.com',    // by cliff at eccentrix.com
1532                 '*.arcadepages.com',    // by admin at site-see.com
1533                 '*.e-host.ws',                  // by dns at jomax.net
1534                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1535                 '*.fw.bz',                              // by ben at kuehl.as
1536                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1537                 '*.g0g.net',                    // by domains at seem.co.uk
1538                 '*.galaxy99.net',               // by admin at bagchi.org
1539                 '*.greatnow.com',               // by peo at peakspace.com
1540                 '*.hautlynx.com',               // by hlewis28 at juno.com
1541                 '*.ibnsites.com',               // by cmrojas at mail.com
1542                 '*.just-allen.com',             // by extremehype at msn.com
1543                 '*.kogaryu.com',                // by angelguerra at msn.com
1544                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1545                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1546                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1547                 '*.s-enterprize.com',
1548                 '*.servetown.com',              // by jonahbliss at earthlink.net
1549                 '*.stinkdot.org',               // by bluedot at ziplip.com
1550                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1551                 '*.zomi.net',                   // by sianpu at gmail.com
1552         ),
1553         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1554         '100 Best Inc' => array(
1555                 // by 100 Best Inc (info at 100best.com)
1556
1557                 // 66.235.204.7(h204-007.bluefishhosting.com)
1558                 '*.2-hi.com',
1559                 '*.20fr.com',
1560                 '*.20ii.com',
1561                 '*.20is.com',
1562                 '*.20it.com',
1563                 '*.20m.com',    // by jlee at 100bestinc.com
1564                 '*.20to.com',
1565                 '*.2u-2.com',
1566                 '*.3-st.com',
1567                 '*.fws1.com',
1568                 '*.fw-2.com',
1569                 '*.inc5.com',
1570                 '*.on-4.com',
1571                 '*.st-3.com',
1572                 '*.st20.com',
1573                 '*.up-a.com',
1574
1575                 // 216.40.33.252(www-pd.mdnsservice.com)
1576                 '*.0-st.com',
1577                 '*.20me.com',
1578         ),
1579         '*.100foros.com',
1580         '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl) by tycho at e-lab.nl
1581         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1582         '20six Weblog Services' => array(
1583                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1584                 '.20six.co.uk',
1585                 '.20six.fr',
1586                 'myblog.de',
1587                 'myblog.es',
1588         ),
1589         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1590         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1591         '2Page.de' => array(
1592                 '.dreipage.de',
1593                 '.2page.de',
1594         ),
1595         '*.3-hosting.net',
1596         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1597         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1598         '*.8000web.com',        // 75.126.189.45
1599         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1600         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1601         '*.aimoo.com',
1602         '*.alkablog.com',
1603         '*.alluwant.de',
1604         '.amkbb.com',
1605         'AOL.com' =>    // http://about.aol.com/international_services
1606                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1607                 '(?:aol|americaonline)\.' .
1608                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1609                 // Rough but works
1610         'Apple.com' => array('idisk.mac.com'),
1611         '*.askfaq.org',
1612         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1613         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1614         '*.asphost4free.com',
1615         'basenow.com',
1616         'BatCave.net' => array(
1617                 '.batcave.net',                 // 64.22.112.226
1618                 '.freehostpro.com',             // 64.22.112.226
1619         ),
1620         '*.bb-fr.com',
1621         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1622         '*.beeplog.com',
1623         'bestfreeforums.com',
1624         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1625         'Blog.com' => array(
1626                 '*.blog.com',
1627                 '*.blogandorra.com',    // by admin.domains at co.blog.com
1628                 '*.blogangola.com',             // by admin.domains at co.blog.com
1629         ),
1630         '*.blog.com.es',
1631         '*.blog.hr',
1632         '*.blog-fx.com',
1633         '*.blogbeee.com',
1634         'blogas.lt',
1635         'blogbud.com',
1636         '*.blogburkinafaso.com',
1637         '*.blogcu.com',                 // by info at nokta.com
1638         'blogfreely.com',
1639         '*.blogdrive.com',
1640         '*.blogg.de',
1641         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1642         'bloggercrab.com',
1643         'bloggers.nl',
1644         '*.bloggingmylife.com',
1645         '*.bloggles.info',
1646         '*.blogharbor.com',
1647         '*.bloguj.eu',
1648         'bloguitos.com',
1649         'blogosfer.com',
1650         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1651         '*.blogslive.net',
1652         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1653         '*.blogstream.com',
1654         'blogyaz.com',
1655         'board-4you.de',
1656         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1657         '*.boardhost.com',
1658         'Bravenet.com' => array(
1659                 '*.bravenet.com',
1660                 '*.bravehost.com',
1661         ),
1662         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1663         'C2k.jp' => array(
1664                 // by Makoto Okuse (webmaster at 2style.net)
1665                 '.081.in',
1666                 '.2style.in',
1667                 '.bian.in',
1668                 '.curl.in',
1669                 '.ennui.in',
1670                 '.jinx.in',
1671                 '.loose.in',
1672                 '.mist.in',
1673                 '.muu.in',
1674                 '.naive.in',
1675                 '.panic.in',
1676                 '.slum.in',
1677
1678                 // by 2style, ns *.click2k.net, *.2style.net
1679                 '.2st.jp',
1680                 '.betty.jp',
1681                 '.cabin.jp',
1682                 '.cult.jp',
1683                 '.mippi.jp',
1684                 '.purety.jp',
1685                 '.rapa.jp',
1686                 '.side-b.jp',
1687                 '.web-box.jp',
1688                 '.yea.jp',
1689
1690                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1691                 '.2style.net',
1692                 '.click2k.net',
1693                 '.houka5.com',
1694
1695                 // by click2k, ns *.click2k.net, *.2style.net
1696                 '.psyco.jp',
1697                 '.sweety.jp',
1698
1699                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1700                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1701         ),
1702         '*.chueca.com',
1703         'city-forum.com',
1704         'concepts-mall.com',
1705         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1706         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1707         'counterhit.de',
1708         '*.createforum.net',
1709         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1710         '*.createmybb.com',
1711         'CwCity.de' => array(
1712                 '.cwcity.de',
1713                 '.cwsurf.de',
1714         ),
1715         'dakrats.net',
1716         '*.dcswtech.com',
1717         '*.devil.it',
1718         '*.diaryland.com',
1719         'digg.com',
1720         'domains at galaxywave.net' => array(
1721                 'blogstation.net',
1722                 '.phpbb-host.com',
1723         ),
1724         'dotbb.be',
1725         '*.dox.hu',                             // dns at 1b.hu
1726         '*.eadf.com',
1727         '*.eblog.com.au',
1728         '*.ekiwi.de',
1729         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1730         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1731         '*.ebloggy.com',
1732         'enunblog.com',
1733         '*.epinoy.com',
1734         '*.ez-sites.ws',
1735         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1736         '*.fathippohosting.com',        // 208.101.3.192
1737         'FC2.com' => array(
1738                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1739                         // Many traps available:
1740                         //      bqdr.blog98.fc2.com,       iframe
1741                         //      csfir.blog87.fc2.com,      iframe
1742                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1743                         //      sippou2006.blog60.fc2.com, iframe
1744                         // NOTE: 'blog.fc2.com' is not included
1745                 '*.h.fc2.com',  // Adult
1746         ),
1747         '*.fizwig.com',
1748         'forum.ezedia.net',
1749         '*.extra.hu',                   // angelo at jasmin.hu
1750         '*.fanforum.cc',
1751         'fingerprintmedia.com',
1752         '*.filelan.com',
1753         '*.fora.pl',
1754         '*.forka.eu',
1755         '*.foren-city.de',
1756         'foren-gratis.de',
1757         '*.foros.tv',
1758         '*.forospace.com',
1759         'foroswebgratis.com',
1760         '*.forum-on.de',
1761         '*.forum24.se',
1762         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1763         '.forum66.com',
1764         '*.forumcommunity.net',
1765         'forumhosting.org',
1766         '*.forums.com',
1767         'forumbolt.com',
1768         'phpbb.forumgratis.com',
1769         '*.forumlivre.com',
1770         'forumnow.com.br',
1771         '*.forumppl.com',
1772         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
1773         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
1774                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
1775                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
1776                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
1777         '*.fory.pl',
1778         '*.free-25.de',
1779         '*.free-bb.com',
1780         'Free-Blog-Hosting.com' => array(
1781                 'free-blog-hosting.com',        // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
1782                 'cheap-web-hosting-411.com',    // by Robert Vigil, ns *.thisismyserver.net
1783                 'blog-tonite.com',                      // ns *.phpwebhosting.com
1784                 'blogznow.com',                         // ns *.phpwebhosting.com
1785                 'myblogstreet.com',                     // by Robert Vigil, ns *.phpwebhosting.com
1786                 'blogbeam.com',                         // by Robert Vigil, ns *.phpwebhosting.com
1787         ),
1788         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
1789         'free-guestbook.net',
1790         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
1791         'freebb.nl',
1792         '*.freeclans.de',
1793         '*.freelinuxhost.com',  // by 100webspace.com
1794         '*.nofeehost.com',
1795         '*.freehyperspace.com',
1796         'freeforum.at',                 // by Sandro Wilhelmy
1797         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
1798         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
1799         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
1800         '*.freewebhostingpro.com',
1801         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
1802         'FreeWebHostingArea.com' => array(      // or www.freewha.com
1803                 '*.6te.net',
1804                 '*.ueuo.com',
1805                 '*.orgfree.com',
1806         ),
1807         '*.freewebpage.org',
1808         'Freewebs.com' => array(        // by inquiries at freewebs.com
1809                 'freewebs.com',
1810                 'freewebsfarms.com',
1811         ),
1812         '*.freewebspace.net.au',
1813         '*.freemyforum.com',    // by messahost at gmail.com
1814         'freepowerboards.com',
1815         '*.freepowerboards.com',
1816         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
1817         'Funpic.de' => array(   // by alexander at liemen.net
1818                 '*.funpic.de',
1819                 '*.funpic.org',
1820         ),
1821         'gb-hoster.de',
1822         '*.genblogger.com',
1823         'GetBetterHosting.com' => array(
1824                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
1825                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
1826         ),
1827         '*.goodboard.de',
1828         'gossiping.net',
1829         '*.greatnuke.com',
1830         '*.guestbook.de',
1831         'gwebspace.de',
1832         'Google.com' => array(
1833                 '*.blogspot.com',
1834                 'docs.google.com',
1835                 'groups-beta.google.com',
1836         ),
1837         'guestbook.at',
1838         'club.giovani.it',
1839         '*.gratis-server.de',
1840         'healthcaregroup.com',
1841         '*.heliohost.org',
1842         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
1843                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
1844                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
1845                 '*.front.ru',           // (domain at hc.ru)
1846                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
1847                 '*.hotbox.ru',          // (domain at hc.ru)
1848                 '*.hotmail.ru',         // (hosting at hc.ru)
1849                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
1850                 '*.land.ru',            // (domain at hc.ru)
1851                 '*.mail15.com',         // (hosting at hc.ru)
1852                 '*.mail333.com',        // (hosting at hc.ru)
1853                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
1854                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
1855                 '*.pisem.net',          // (hosting at hc.ru)
1856                 '*.pochta.ru',          // (domain at hc.ru)
1857                 '*.pochtamt.ru',        // (domain at hc.ru)
1858                 '*.pop3.ru',            // (domain at hc.ru)
1859                 '*.rbcmail.ru',         // (domain at hc.ru)
1860                 '*.smtp.ru',            // (domain at hc.ru)
1861         ),
1862         '*.hiblogger.com',              // by chiaokin at gmail.com
1863         '*.hit.bg',                             // by forumup.com ??
1864         '*.host-page.com',
1865         '*.hostingclub.de',
1866         'forums.hspn.com',
1867         '*.httpsuites.com',
1868         '*.hut2.ru',
1869         'ibfree.org',                   // 208.101.45.88
1870         'IC.cz' => array(
1871                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
1872                 '*.hu.cz',                      // internetcentrum at gmail.com
1873                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
1874                 '*.ic.cz',                      // internetcentrum at gmail.com
1875                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
1876                 '*.own.cz',                     // internetcentrum at gmail.com
1877                 '*.phorum.cz',          // internetcentrum at gmail.com
1878                 '*.tym.cz',                     // internetcentrum at gmail.com
1879                 '*.tym.sk',                     // jobot at ignum.cz
1880                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
1881                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
1882                 '*.yw.sk',                      // jobot at ignum.cz
1883         ),
1884         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
1885                 '*.0moola.com',
1886                 '*.3000mb.com',
1887                 '.501megs.com',
1888                 '*.teracities.com',
1889                 '*.xoompages.com',
1890         ),
1891         '*.icspace.net',
1892         'iEUROP.net' => array(
1893                 '*.ibelgique.com',
1894                 '*.iespana.es',
1895                 '*.ifrance.com',
1896                 '*.iitalia.com',
1897                 '*.iquebec.com',
1898                 '*.isuisse.com',
1899         ),
1900         '*.ihateclowns.net',
1901         '*.ii55.com',
1902         '*.ipbfree.com',
1903         '*.iphorum.com',
1904         '*.blog.ijijiji.com',
1905         '*.info.com',
1906         '*.informe.com',
1907         'it168.com',
1908         '.iwannaforum.com',
1909         '*.jconserv.net',
1910         '*.jeeran.com',
1911         '*.jeun.fr',
1912         '*.journalscape.com',
1913         '*.justfree.com',
1914         '*.blog.kataweb.it',
1915         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
1916         '*.kokoom.com',
1917         'koolpages.com',
1918         '*.ksiegagosci.info',
1919         'Lide.cz' => array(
1920                 '*.lide.cz',
1921                 '*.sblog.cz',
1922         ),
1923         'limmon.net',
1924         'Livedoor.com' => array(
1925                 'blog.livedoor.jp',
1926                 '*.blog.livedoor.com',  // redirection
1927         ),
1928         '*.livejournal.com',
1929         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
1930         '*.logme.nl',
1931         'lol.to',
1932         'ltss.luton.ac.uk',
1933         'Lycos.com' => array(
1934                 '.angelfire.com',       // angelfire.lycos.com
1935
1936                 '*.jubii.dk',   // search., medlem.
1937                 '*.jubiiblog.co.uk',
1938                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
1939                 '*.jubiiblog.de',
1940                 '*.jubiiblog.dk',
1941                 '*.jubiiblog.fr',
1942                 '*.jubiiblog.it',
1943                 '*.jubiiblog.nl',
1944
1945                 '*.lycos.at',
1946                 '*.lycos.ch',
1947                 '*.lycos.co.uk',
1948                 'angelfire.lycos.com',
1949                 '*.lycos.de',
1950                 '*.lycos.es',
1951                 '*.lycos.fr',
1952                 '*.lycos.it',           // by Lycos Europe GmbH
1953                 '*.lycos.nl',
1954
1955                 '*.spray.se',
1956                 '*.sprayblog.se',
1957
1958                 '*.tripod.com',
1959         ),
1960         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
1961         '*.memebot.com',
1962         '*.messageboard.nl',
1963         'mokono GmbH' => array(
1964                 '*.blog.com.es',
1965                 '*.blog.de',
1966                 '*.blog.fr',
1967                 '*.blog.co.uk',
1968                 '*.blog.ca',
1969                 '*.blogs.se',
1970                 '*.blogs.fi',
1971                 '*.blogs.no',
1972                 '*.blogs.dk',
1973                 '*.blogs.ro',
1974                 '*.weblogs.pl',
1975                 '*.weblogs.cz',
1976                 '*.weblogs.hu',
1977         ),
1978         'mojklc.com',
1979         'MonForum.com' => array(
1980                 '*.monforum.com',
1981                 '*.monforum.fr',
1982         ),
1983         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
1984         '*.my10gb.com',
1985         'myblog.is',
1986         'myblogma.com',
1987         '*.myblogvoice.com',
1988         'myblogwiki.com',
1989         '*.myforum.ro',
1990         '*.myfreewebs.net',
1991         '*.mysite.com',
1992         '*.myxhost.com',
1993         '*.netfast.org',
1994         'NetGears.com' => array(
1995                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
1996                 '*.9k.com',                             // 64.39.31.55(netgears.com)
1997                 '*.freewebspace.com',   // 64.49.236.72
1998         ),
1999         'Netscape.com' => array('mywebpage.netscape.com'),
2000         'users.newblog.com',
2001         'neweconomics.info',
2002         '*.newsit.es',                          // 75.126.252.108
2003         'Northsky.com' => array(
2004                 // by hostmaster at northsky.com
2005                 // northsky.com redirects to communityarchitect.com
2006
2007                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2008                 '*.00author.com',
2009                 '*.00band.com',
2010                 '*.00books.com',
2011                 '*.00cash.com',
2012                 '*.00cd.com',
2013                 '*.00dvd.com',
2014                 '*.00family.com',
2015                 '*.00game.com',
2016                 '*.00home.com',
2017                 '*.00it.com',
2018                 '*.00me.com',
2019                 '*.00movies.com',
2020                 '*.00page.com',
2021                 '*.00politics.com',
2022                 '*.00sf.com',
2023                 '*.00show.com',
2024                 '*.00song.com',
2025                 '*.00trek.com',
2026                 '*.00video.com',
2027                 '*.0me.com',
2028                 '*.0pi.com',
2029                 '*.happy-couple.com',
2030                 '*.warp0.com',
2031
2032                 '*.50megs.com',         // 64.136.25.170
2033
2034                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2035                 '*.00server.com',
2036                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2037                 '*.fanspace.com',
2038
2039                 // 64.136.25.168 by Mark Bishop
2040                 '*.00go.com',
2041                 '*.00space.com',
2042                 '*.00sports.com',
2043         ),
2044         '*.nm.ru',
2045         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2046         'onlyfree.de',
2047         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2048         '*.ohost.de',
2049         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2050                 '.friko.pl',
2051                 '.jak.pl',
2052                 '.nazwa.pl',
2053                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2054                 '.w8w.pl',
2055                 '.za.pl',
2056                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2057         ),
2058         '*.parlaris.com',
2059         '*.pathfinder.gr',
2060         '*.persianblog.com',
2061         '*.phorum.pl',
2062         'Phpbb24.com' => array( // by Daniel Eriksson
2063                 '*.createforum.us',     // registry at webbland.se
2064                 '*.forumportal.us',     // registry at webbland.se
2065                 '*.freeportal.us',      // registry at network24.se
2066                 '*.phpbb2.us',          // daniel at danielos.com
2067                 '*.phpbb24.com',        // daniel at danielos.com
2068                 '*.myforumportal.com',  // daniel at webbland.se
2069         ),
2070         'phpbb4you.com',
2071         'phpbbcommunity.com',
2072         '*.phpbbx.de',
2073         '*.pochta.ru',
2074         '*.portbb.com',
2075         'powerwebmaster.de',
2076         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2077         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2078         '*.probook.de',
2079         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2080         '*.quickfreehost.com',
2081         'quizilla.com',
2082         '*.quotaless.com',
2083         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2084         'razyboard.com',
2085         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2086         'realhp.de',
2087         'reddit.com',           ///user/
2088         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2089                 '*.juicypornhost.com',
2090                 '*.pornzonehost.com',
2091                 '*.xhostar.com',
2092         ),
2093         'RIN.ru' => array(
2094                 '*.sbn.bz',
2095                 '*.wol.bz',
2096         ),
2097         '*.sayt.ws',
2098         'Seblg.com' => array(
2099                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2100                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2101         ),
2102         '*.seo-blog.org',
2103         '*.shoutpost.com',
2104         '*.siamforum.com',
2105         '*.siteburg.com',
2106         '*.sitehome.ru',
2107         '*.sitesfree.com',              // support at livesearching.com
2108         '*.sitesled.com',
2109         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2110         'SmarTrans.com' => array(
2111                 '.3w.to',
2112                 '.aim.to',
2113                 '.djmp.jp',
2114                 '.nihongourl.nu',
2115                 '.urljp.com',
2116                 '.www1.to',
2117                 '.www2.to',
2118                 '.www3.to',
2119         ),
2120         '*.spazioforum.it',
2121         'members.spboards.com',
2122         'forums.speedguide.net',
2123         'Sphosting.com' => array(       // by admin at sphosting.com
2124                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2125                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2126                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2127                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2128                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2129         ),
2130         '*.spicyblogger.com',
2131         '*.spotbb.com',
2132         '*.squarespace.com',
2133         'stickypond.com',
2134         'stormloader.com',
2135         'strikebang.com',
2136         '*.sultryserver.com',
2137         '*.t35.com',
2138         '*.talks.at',
2139         'tabletpcbuzz.com',
2140         '*.talkthis.com',
2141         'tbns.net',
2142         'telasipforums.com',
2143         'thestudentunderground.org',
2144         'think.ubc.ca',
2145         '*.thumblogger.com',
2146         'Topix.com' => array(
2147                 'topix.com',
2148                 'topix.net',
2149         ),
2150         'forum.tourism-talk.com.au',
2151         'UcoZ Web-Services' => array(
2152                 '*.3dn.ru',
2153                 '*.clan.su',
2154                 '*.moy.su',
2155                 '*.my1.ru',
2156                 '*.p0.ru',
2157                 '*.pp.net.ua',
2158                 '*.ucoz.co.uk',
2159                 '*.ucoz.com',
2160                 '*.ucoz.net',
2161                 '*.ucoz.org',
2162                 '*.ucoz.ru',
2163                 '*.ws.co.ua',
2164         ),
2165         '*.unforo.net',
2166         '*.vdforum.ru',
2167         '*.vtost.com',
2168         '*.vidiac.com',
2169         'Voila.fr' => array('.site.voila.fr'),
2170         'volny.cz',
2171         'voy.com',
2172         '*.welover.org',
2173         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
2174                 '*.fasthost.tv',
2175                 '*.hothost.tv',
2176                 '*.isgreat.tv',
2177                 '*.issexy.tv',
2178                 '*.isterrible.tv',
2179                 '*.somegood.tv',
2180                 '*.adultnations.com',
2181                 '*.alladultfemale.com',
2182                 '*.alladultmale.com',
2183                 '*.allbisexual.com',
2184                 '*.allbreast.com',
2185                 '*.allfeminism.com',
2186                 '*.allmanpages.com',
2187                 '*.allmendirect.com',
2188                 '*.allphotoalbum.com',
2189                 '*.allsexpages.com',
2190                 '*.allwomanweb.com',
2191                 '*.attorney-site.com',
2192                 '*.bedclip.com',
2193                 '*.bestfamilysite.com',
2194                 '*.bestmusicpages.com',
2195                 '*.bigmoron.com',
2196                 '*.bourgeoisonline.com',
2197                 '*.candyfrom.us',
2198                 '*.cartoonhit.com',
2199                 '*.cat-on-line.com',
2200                 '*.chokesondick.com',
2201                 '*.closeupsof.us',
2202                 '*.cpa-site.com',
2203                 '*.dampgirl.com',
2204                 '*.dampgirls.com',
2205                 '*.deepestfetish.com',
2206                 '*.docspages.com',
2207                 '*.dog-on-line.com',
2208                 '*.dogcountries.com',
2209                 '*.dognations.com',
2210                 '*.doingitwith.us',
2211                 '*.drenchedface.com',
2212                 '*.drenchedlips.com',
2213                 '*.drspages.com',
2214                 '*.edogden.com',
2215                 '*.eroticountry.com',
2216                 '*.fasthost.tv',
2217                 '*.fineststars.com',
2218                 '*.foronlinegames.com',
2219                 '*.forplanetearth.com',
2220                 '*.freeadultparty.com',
2221                 '*.freespeechsite.com',
2222                 '*.gayadultxxx.com',
2223                 '*.gaytaboo.com',
2224                 '*.greatcookery.com',
2225                 '*.greatrecipepages.com',
2226                 '*.greatstreamingvideo.com',
2227                 '*.hatesit.com',
2228                 '*.hothost.tv',
2229                 '*.iscrappy.com',
2230                 '*.isgreat.tv',
2231                 '*.issexy.tv',
2232                 '*.isterrible.tv',
2233                 '*.itinto.us',
2234                 '*.japannudes.net',
2235                 '*.jesussave.us',
2236                 '*.jesussaveus.com',
2237                 '*.labialand.com',
2238                 '*.lettersfrom.us',
2239                 '*.lookingat.us',
2240                 '*.lunaticsworld.com',
2241                 '*.microphallus.com',
2242                 '*.mycatshow.com',
2243                 '*.mydogshow.com',
2244                 '*.myhardman.com',
2245                 '*.mylawsite.net',
2246                 '*.mylovething.com',
2247                 '*.onasoapbox.com',
2248                 '*.onlinepulpit.com',
2249                 '*.petitionthegovernment.com',
2250                 '*.photosfor.us',
2251                 '*.picturetrades.com',
2252                 '*.pleasekiss.us',
2253                 '*.politicalemergency.com',
2254                 '*.power-emergency.com',
2255                 '*.prayingfor.us',
2256                 '*.realbadidea.com',
2257                 '*.realisticpolitics.com',
2258                 '*.reallybites.com',
2259                 '*.reallypumping.us',
2260                 '*.reallyrules.com',
2261                 '*.reallysuckass.com',
2262                 '*.reallysucksass.com',
2263                 '*.realsweetheart.com',
2264                 '*.rottenass.com',
2265                 '*.schoolreference.com',
2266                 '*.sexheroes.com',
2267                 '*.sharewith.us',
2268                 '*.smutstars.com',
2269                 '*.soakinglips.com',
2270                 '*.somegood.tv',
2271                 '*.songsfrom.us',
2272                 '*.stinkingfart.com',
2273                 '*.stinkyhands.com',
2274                 '*.storiesfrom.us',
2275                 '*.taboocountry.com',
2276                 '*.television-series.com',
2277                 '*.thisbelongsto.us',
2278                 '*.totallyboning.us',
2279                 '*.vaginasisters.com',
2280                 '*.verydirtylaundry.com',
2281                 '*.videosfor.us',
2282                 '*.videosfrom.us',
2283                 '*.videosof.us',
2284                 '*.virtualdogshit.com',
2285                 '*.web1000.com',
2286                 '*.webpicturebook.com',
2287                 '*.wronger.com',
2288                 '*.xxxnations.com',
2289                 '*.yourwaywith.us',
2290         ),
2291         'webblog.ru',
2292         'weblogmaniacs.com',
2293         '.webng.com',                   // www.*, www3.*
2294         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
2295         'websitetoolbox.com',
2296         'Welnet.de' => array(
2297                 'welnet.de',
2298                 'welnet4u.de',
2299         ),
2300         'wh-gb.de',
2301         '*.wikidot.com',
2302         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
2303         '*.wmjblogs.ru',
2304         '*.wordpress.com',
2305         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
2306         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
2307         '*.xforum.se',
2308         'xfreeforum.com',
2309         '*.xoomwebs.com',
2310         '.freeblogs.xp.tl',
2311         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
2312         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
2313         'Yahoo.com' => array(
2314                 'geocities.com',
2315         ),
2316         'YANDEX, LLC.' => array(        // noc at yandex.net
2317                 '*.narod.ru',
2318                 'ya.ru',
2319                 'yandex.ru',
2320         ),
2321         '*.yeahost.com',
2322         'yourfreebb.de',
2323         'Your-Websites.com' => array(
2324                 '*.your-websites.net',
2325                 '*.web-space.ws',
2326         ),
2327 );
2328
2329 // --------------------------------------------------
2330
2331 $blocklist['B-2'] = array(
2332
2333         // B-2: Jacked contents, something implanted
2334         // (e.g. some sort of blog comments, BBSes, forums, wikis)
2335         '*.3dm3.com',
2336         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
2337         '*.1fr1.com',
2338         'a4aid.org',
2339         'aac.com',
2340         '*.aamad.org',
2341         'ad-pecjak.si',
2342         'agnt.org',
2343         'alwanforthearts.org',
2344         '*.anchor.net.au',
2345         'anewme.org',
2346         'internetyfamilia.asturiastelecentros.com',
2347         'Ball State University' => array('web.bsu.edu'),
2348         'btofaq.net',                   ///v3/forum
2349         'blepharospasm.org',
2350         'nyweb.bowlnfun.dk',
2351         '*.buzznet.com',
2352         '*.canberra.net.au',
2353         'castus.com',
2354         'Case Western Reserve University' => array('case.edu'),
2355         'ceval.de',
2356         'codespeak.net',
2357         'Colorado School of Mines' => array('ticc.mines.edu'),
2358         '*.colourware.co.uk',
2359         'cpuisp.com',
2360         'International Christian University' => array('icu.edu.ua'),
2361         '*.iphpbb.com',
2362         'board-z.de',
2363         '*.board-z.de',
2364         'California State University Stanislaus' => array('writing.csustan.edu'),
2365         'cannon.co.za',
2366         'columbosgarden.com',
2367         '*.communityhost.de',
2368         'connectionone.org',
2369         'deathwinds.com',
2370         'deforum.org',
2371         'delayedreaction.org',
2372         'deproduction.org',
2373         'dc503.org',
2374         'dre-centro.pt',
2375         'Duke University' => array('devel.linux.duke.edu'),
2376         '*.esen.edu.sv',
2377         'forums.drumcore.com',
2378         'dundeeunited.org',
2379         'energyglass.com.ua',
2380         'exclusivehotels.com',
2381         'info.ems-rfid.com',
2382         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
2383         'fbwloc.com',
2384         '.fhmcsa.org.au',
2385         'findyourwave.co.uk',
2386         'frogcafe.net',
2387         'plone4.fnal.gov',
2388         'freeforen.com',
2389         'funkdoc.com',
2390         'funnyclipcentral.com',
2391         'gearseds.com',
2392         'generationrice.com',
2393         'ghettojava.com',
2394         'gnacademy.org',
2395         '*.goodboard.de',
2396         'GreenDayVideo.net' => array(
2397                 'greendayvideo.net',
2398                 'espanol.greendayvideo.net',
2399         ),
2400         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
2401         'Harvard Law School' => array('blogs.law.harvard.edu'),
2402         'helpiammoving.com',
2403         'homepage-dienste.com',
2404         'Howard University' => array('networks.howard.edu'),
2405         'hullandhull.com',
2406         'Huntington University' => array('huntington.edu'),
2407         'huskerink.com',
2408         '.hyba.info',
2409         'inda.org',
2410         '*.indymedia.org',      // by abdecom at riseup.net
2411         'instantbulletin.com',
2412         'internetincomeclub.com',
2413         '*.inventforum.com',
2414         'Iowa State University' => array('boole.cs.iastate.edu'),
2415         'ipwso.org',
2416         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
2417         'ironmind.com',
2418         'skkustp.itgozone.com', // hidden JavaScript
2419         'jazz2online.com',
2420         '.jloo.org',
2421         'Kazan State University' => array(
2422                 'dir.kzn.ru',
2423                 'sys.kcn.ru',
2424         ),
2425         'test.kernel.org',
2426         'kevindmurray.com',
2427         'kroegjesroutes.nl',
2428         '.legion.org',
2429         'Loyola Marymount University' => array('lmu.edu'),
2430         'forum.lixium.fr',
2431         'macfaq.net',
2432         'me4x4.com',
2433         'microbial-ecology.net',
2434         'minsterscouts.org',
2435         'morallaw.org',
2436         'morerevealed.com',
2437         'macronet.org',
2438         'mamiya.co.uk',
2439         'vcd.mmvcd.com',
2440         'Monmouth College' => array('department.monm.edu'),
2441         'mountainjusticemedia.org',
2442         '*.mybbland.com',
2443         'mydlstore.com',
2444         '*.netboardz.com',
2445         'North Carolina A&T State University' => array(
2446                 'ncat.edu',
2447                 'my.ncat.edu',
2448                 'hlc.ncat.edu',
2449         ),
2450         'placetobe.org',
2451         'users.nethit.pl',
2452         'nightclubvip.net',
2453         'njbodybuilding.com',
2454         'nlen.org',
2455         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
2456         'offtextbooks.com',
2457         'ofimatika.com',
2458         'omakase-net',                  // iframe
2459         'omikudzi.ru',
2460         'openchemist.net',
2461         'palungjit.com',
2462         'pataphysics-lab.com',
2463         'paullima.com',
2464         'perl.org.br',
2465         'pfff.co.uk',
2466         'pix4online.co.uk',
2467         'plone.dk',
2468         'preform.dk',
2469         'privatforum.de',
2470         'publicityhound.net',
2471         'qea.com',
2472         'rbkdesign.com',
2473         'rehoboth.com',
2474         'rodee.org',
2475         'ryanclark.org',
2476         '*.reallifelog.com',
2477         'rkphunt.com',
2478         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
2479         'sapphireblue.com',
2480         'saskchamber.com',
2481         'savevoorhees.org',
2482         'selikoff.net',
2483         'serbisyopilipino.org',
2484         'setbb.com',
2485         'sharejesusinternational.com',
2486         'silver-tears.net',
2487         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
2488         '.softpress.com',
2489         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
2490         'tehudar.ru',
2491         'Tennessee Tech University' => array('manila.tntech.edu'),
2492         'thebluebird.ws',
2493         'theosis.org',
2494         '*.thoforum.com',
2495         'troms-slekt.com',
2496         'theedgeblueisland.com',
2497         'toyshop.com.tw',               // /images/sigui/
2498         'torontoplace.com',
2499         'chat.travlang.com',
2500         'trickropingbylassue.com',
2501         'Truman State University' => array('mathbio.truman.edu'),
2502         'tuathadedannan.org',
2503         'txgotg.com',
2504         'tzaneen.co.za',
2505         'The University of North Dakota' => array(
2506                 'learn.aero.und.edu',
2507                 'ez.asn.und.edu',
2508         ),
2509         'The University of Alabama' => array('bama.ua.edu'),
2510         'unisonscotlandlaw.co.uk',
2511         'University of California' => array('classes.design.ucla.edu'),
2512         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
2513         'University of Northern Colorado' => array('unco.edu'),
2514         'University of Toronto' => array(
2515                 'environment.utoronto.ca',
2516                 'grail.oise.utoronto.ca',
2517                 'utsc.utoronto.ca',
2518         ),
2519         'urgentclick.com',
2520         'vacant.org.uk',
2521         'Villa Julie College' => array('www4.vjc.edu'),
2522         'Vail Valley Foundation' => array('.vvf.org'),
2523         'wabson.org',
2524         'warping.to',           // Seems (a redirection site, but now) taken advantage of
2525         'webarch.com',          // by WebArchitects (webarch at insync.net)
2526         'weehob.com',
2527         'West Virginia University Parkersburg' => array('wvup.edu'),
2528         'williamsburgrentals.com',
2529         'wolvas.org.uk',
2530         'wookiewiki.org',
2531         'xsgaming.com',                 // Jacked
2532         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
2533         'Yahoo.com' => array(
2534                 'blog.360.yahoo.com',
2535                 '*.groups.yahoo.com'
2536         ),
2537         'yasushi.site.ne.jp',   // One of mixedmedia.net'
2538         'youthpeer.org',
2539         '*.zenburger.com',
2540         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
2541 );
2542
2543 // --------------------------------------------------
2544
2545 $blocklist['C'] = array(
2546
2547         // C: Sample setting of:
2548         // Exclusive spam domains
2549         //
2550         // Seems to have flavor of links, pills, gamble, online-games, erotic,
2551         // affiliates, finance, sending viruses, malicious attacks to browsers,
2552         // and/or mixed ones
2553         //
2554         // Please notify us about this list with reason:
2555         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
2556
2557         // C-1: Domain sets (seems to be) born to spam you
2558         //
2559         // All buziness-related spam
2560         //'.biz'
2561         //
2562         'admin at seekforweb.com' => array(
2563                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
2564                 '.lovestoryx.com',
2565                 '.loveaffairx.com',
2566                 '.onmore.info',
2567                 '.scfind.info',
2568                 '.scinfo.info',
2569                 '.webwork88.info',
2570         ),
2571         'boss at bse-sofia.bg' => array(        // by Boris
2572                 '.htewbop.org',
2573                 '.kimm--d.org',
2574                 '.gtre--h.org',
2575                 '.npou--k.org',
2576                 '.bres--z.org',
2577                 '.berk--p.org',
2578                 '.bplo--s.org',
2579                 '.basdpo.org',
2580                 '.jisu--m.org',
2581                 '.kire--z.org',
2582                 '.mertnop.org',
2583                 '.mooa--c.org',
2584                 '.nake--h.org',
2585                 '.noov--b.org',
2586                 '.suke--y.org',
2587                 '.vasdipv.org',
2588                 '.vase--l.org',
2589                 '.vertinds.org',
2590         ),
2591         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
2592                 '.aqq3.info',
2593                 '.axa00.info',
2594                 '.okweb11.org',
2595                 '.okweb12.org',
2596                 '.okweb13.org',
2597                 '.okweb14.org',
2598         ),
2599         'opezdol at gmail.com' => array(
2600                 '.informazionicentro.info',
2601                 '.notiziacentro.info',
2602         ),
2603         'SomethingGen' => array(
2604                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
2605                 // 'CamsGen' by Sergey (buckster at hotpop.com)
2606                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
2607                 // by Lee Chang (nebucha at model-x.com)
2608                 '.adult-chat-world.info',       // by Lui
2609                 '.adult-chat-world.org',        // by Lui
2610                 '.adult-sex-chat.info',         // by Lui
2611                 '.adult-sex-chat.org',          // by Lui
2612                 '.adult-cam-chat.info',         // by Lui
2613                 '.adult-cam-chat.org',          // by Lui
2614                 '.dildo-chat.org',                      // by Lui
2615                 '.dildo-chat.info',                     // by Lui
2616                 // flirt-online.info is not CamsGen
2617                 '.flirt-online.org',            // by Lui
2618                 '.live-adult-chat.info',        // by Lui
2619                 '.live-adult-chat.org',         // by Lui
2620                 '.sexy-chat-rooms.info',        // by Lui
2621                 '.sexy-chat-rooms.org',         // by Lui
2622                 '.swinger-sex-chat.info',       // by Lui
2623                 '.swinger-sex-chat.org',        // by Lui
2624                 '.nasty-sex-chat.info',         // by Lui
2625                 '.nasty-sex-chat.org',          // by Lui
2626
2627                 '.camshost.info',                       // by Sergey
2628                 '.camdoors.info',                       // by Sergey
2629                 '.chatdoors.info',                      // by Sergey
2630
2631                 '.lebedi.info',                         // by Pronin
2632                 '.loshad.info',                         // by Pronin
2633                 '.porosenok.info',                      // by Pronin
2634                 '.indyushonok.info',            // by Pronin
2635                 '.kotyonok.info',                       // by Pronin
2636                 '.kozlyonok.info',                      // by Pronin
2637                 '.magnoliya.info',                      // by Pronin
2638                 '.svinka.info',                         // by Pronin
2639                 '.svinya.info',                         // by Pronin
2640                 '.zherebyonok.info',            // 89.149.206.225 by Pronin
2641
2642                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
2643
2644                 '.adult-cam-chat-sex.info',             // by Lee
2645                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
2646                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
2647                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
2648                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
2649                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
2650                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
2651                 '.sex-chat-porn-cam.info',              // by Lee
2652         ),
2653         'mital at topo20.org' => array( // by Marcello Italianore
2654                 '.trevisos.org',
2655                 '.topo20.org',
2656         ),
2657         'WellCams.com' => array(
2658                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
2659                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
2660                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
2661         ),
2662         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
2663                 '.besturgent.org',
2664                 '.googletalknow.org',
2665                 '.montypythonltd.org',
2666                 '.supersettlemet.org',
2667                 '.thepythonfoxy.org',
2668                 '.ukgamesyahoo.org',
2669                 '.youryahoochat.org',
2670         ),
2671         'kikimas at mail.net' => array( // Redirect to nb717.com etc
2672                 '.dbsajax.org',
2673                 '.acgt2005.org',
2674                 '.gopikottoor.com',
2675                 '.koosx.org',
2676                 '.mmgz.org',
2677                 '.zhiyehua.net',
2678         ),
2679         'vdf at lovespb.com' => array(  // by Andrey
2680                 '.02psa.info',
2681                 '.1818u.org',
2682                 '.18ew.info',
2683                 '.43sexx.org',
2684                 '.56porn.org',
2685                 '.6discount.info',
2686                 '.78porn.org',          // "UcoZ WEB-SERVICES"
2687                 '.78rus.info',
2688                 '.92ssex.org',          // "ForumGenerator"
2689                 '.93adult.org',         // "ForumGenerator"
2690                 '.aboutsr.info',
2691                 '.aboutzw.info',
2692                 '.all23.info',
2693                 '.allvdf.info',
2694                 '.buy-dge.info',
2695                 '.buypo.info',
2696                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
2697                 '.cv83.info',
2698                 '.cvwifw.info',
2699                 '.dabouts.info',
2700                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
2701                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
2702                 '.free01sa.info',
2703                 '.frees1.info',
2704                 '.freexz.info',
2705                 '.ifree-search.org',
2706                 '.lovespb.info',
2707                 '.myso2.info',
2708                 '.nb74u.info',
2709                 '.ohhh2.info',
2710                 '.ol43.info',
2711                 '.olala18.info',
2712                 '.oursales.info',
2713                 '.pasian1.info',
2714                 '.pldk.info',
2715                 '.po473.info',
2716                 '.pornr.info',          // "UcoZ WEB-SERVICES"
2717                 '.poz2.info',
2718                 '.qpf8j4d.info',
2719                 '.saleqw.info',
2720                 '.sexof.info',          // "UcoZ WEB-SERVICES"
2721                 '.sexz18.info',
2722                 '.sexy69a.info',
2723                 '.shedikc.info',
2724                 '.spb78.info',
2725                 '.usacanadauk.info',
2726                 '.v782mks.info',
2727                 '.vny0.info',
2728                 '.wifes1.info',
2729                 '.xranvam.info',
2730                 '.zenitcx.info',
2731                 '.zxolala.info',
2732         ),
2733         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
2734                 '.care01.info',
2735                 '.care02.info',
2736                 '.care03.info',
2737                 '.care04.info',
2738                 '.care05.info',
2739                 '.care06.info',
2740                 '.care07.info',
2741                 '.care08.info',
2742                 '.care09.info',
2743                 '.care10.info',
2744                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
2745                 '.klastar01.info',
2746                 '.klastar02.info',
2747                 '.klastar03.info',
2748                 '.klastar04.info',
2749                 '.klastar05.info',
2750                 '.klastar06.info',
2751                 '.klastar07.info',
2752                 '.klastar08.info',
2753                 '.klastar09.info',
2754                 '.klastar10.info',
2755                 '.um20ax01.info',
2756                 '.um20ax02.info',
2757                 '.um20ax03.info',
2758                 '.um20ax04.info',
2759                 '.um20ax05.info',
2760                 '.um20ax06.info',
2761                 '.um20ax07.info',
2762                 '.um20ax08.info',
2763                 '.um20ax09.info',
2764                 '.um20ax10.info',
2765         ),
2766         'forrass at gmail.com' => array(        // by Ismail
2767                 '.zmh01.info',
2768                 '.zmh02.info',
2769                 '.zmh03.info',
2770                 '.zmh04.info',
2771                 '.zmh05.info',
2772                 '.zmh06.info',
2773                 '.zmh07.info',
2774                 '.zmh08.info',
2775                 '.zmh09.info',
2776                 '.zmh10.info',
2777         ),
2778         'Varsylenko Vladimir and family' => array(
2779                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
2780                 // by David C. Lack (David.C.Lack at dodgeit.com)
2781                 // by Kuzma V Safonov (admin at irtes.ru)
2782                 // by Petrov Vladimir (vvm_kz at rambler.ru)
2783                 // by LAURI FUNK (vvm_kz at rambler.ru)
2784
2785                 // 64.92.162.210(*.static.reverse.ltdomains.com)
2786                 '.abrek.info',                          // by Petrov
2787                 '.allsexonline.info',           // by Varsylenko
2788                 '.d1rnow.info',                         // by Petrov
2789                 '.doxer.info',                          // Petrov
2790                 '.freeforworld.info',           // Varsylenko
2791                 '.goodworksite.info',           // Varsylenko
2792                 '.onall.info',                          // by Varsylenko
2793                 '.powersiteonline.info',        // by Varsylenko
2794                 '.rentmysite.info',                     // by Varsylenko
2795                 '.sexdrink.info',                       // by Petrov
2796                 '.siteszone.info',                      // by Varsylenko
2797                 '.sfup.info',                           // by Petrov
2798                 '.superfreedownload.info',      // by Varsylenko
2799                 '.superneeded.info',            // by Varsylenko
2800                 '.srup.info',                           // by Petrov
2801
2802                 // 66.235.185.143(*.svabuse.info)
2803                 '.accommodationwiltshire.com',  // by Petrov
2804                 '.levines.info',                        // by Petrov
2805                 '.sernost.info',                        // by Petrov
2806                 '.sexvideosite.info',           // by Petrov
2807                 '.vvsag.info',                          // by Petrov
2808
2809                 // 81.0.195.134
2810                 '.michost.info',                        // by LAURI
2811                 '.parther.info',                        // by LAURI
2812
2813                 // 88.214.202.100
2814                 '.gitsite.info',                        // by Petrov
2815                 '.organiq.info',                        // by Petrov
2816                 '.yoursitedh.info',                     // by Petrov
2817
2818                 // 217.11.233.58 by Petrov
2819                 '.mp3vault.info',
2820
2821                 // DNS time out or failed
2822                 '.bequeous.info',                       // by Davi
2823                 '.sopius.info',                         // by Kuzma
2824                 '.sovidopad.info',                      // by Kuzma
2825                 '.yerap.info',                          // by Kuzma
2826         ),
2827         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
2828                 '.flywebs.com',
2829                 '.hostrim.com',
2830                 '.playbit.com',
2831         ),
2832         'webmaster at dgo3d.info' => array(     // by Son Dittman
2833                 '.bsb3b.info',
2834                 '.dgo3d.info',
2835                 '.dgo5d.info',
2836         ),
2837         'cooler.infomedia at gmail.com' => array(
2838                 '.diabetescarelink.com',
2839                 '.firstdebthelp.com',
2840         ),
2841         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
2842                 '.pokah.lv',
2843                 '.astrons.com',
2844         ),
2845         'seocool at bk.ru' => array(    // by Skar
2846                 '.implex3.com',
2847                 '.implex6.info',
2848                 '.softprof.org',
2849         ),
2850         'Caslim.info' => array(
2851                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
2852                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
2853         ),
2854         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
2855                 '.777-poker.biz',
2856                 '.porn-11.com',
2857         ),
2858         'Conto.pl' => array(
2859                 '.8x.pl',               // domena at az.pl
2860                 '.3x3.pl',              // by biuro at nazwa.pl
2861                 '.conto.pl',    // by biuro at nazwa.pl
2862                 '.guu.pl',              // by conto.pl (domena at az.pl)
2863                 '.xcx.pl',              // domena at az.pl
2864                 '.yo24.pl',             // domena at az.pl
2865         ),
2866         'mail at pcinc.cn' => array(
2867                 // Domains by Lin Zhi Qiang
2868                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
2869
2870                 // 125.65.112.11
2871                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
2872                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
2873                 '.shoopivdoor.com',
2874
2875                 // 125.65.112.12
2876                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
2877                 '.hosetaibei.com',
2878                 '.playsese.com',
2879
2880                 // 125.65.112.13
2881                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
2882                 '.ahatena.com',
2883                 '.asdsdgh-jp.com',
2884                 '.conecojp.net',
2885                 '.game-oekakibbs.com',
2886                 '.geocitygame.com',
2887                 '.gsisdokf.net',
2888                 '.korunowish.com',
2889                 '.netgamelivedoor.com',
2890                 '.soultakerbbs.net',
2891                 '.yahoo-gamebbs.com',
2892                 '.ywdgigkb-jp.com',
2893
2894                 // 125.65.112.14
2895                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
2896                 '.acyberhome.com',
2897                 '.bbs-qrcode.com',
2898                 '.gamesroro.com',
2899                 '.gameyoou.com',
2900                 '.gangnu.com',
2901                 '.goodclup.com',
2902                 '.lineage321.com',
2903                 '.linkcetou.com',
2904                 '.love888888.com',
2905                 '.ragnarok-bbs.com',
2906                 '.ragnarok-game.com',
2907                 '.rmt-navip.com',
2908                 '.watcheimpress.com',
2909
2910                 // 125.65.112.15
2911                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
2912                 '.18girl-av.com',
2913                 '.aurasoul-visjp.com',
2914                 '.gamaniaech.com',
2915                 '.game-mmobbs.com',
2916                 '.gameslin.net',
2917                 '.gemnnammobbs.com',
2918                 '.gogolineage.net',
2919                 '.grandchasse.com',
2920                 '.jpragnarokonline.com',
2921                 '.jprmthome.com',
2922                 '.maplestorfy.com',
2923                 '.netgamero.net',
2924                 '.nothing-wiki.com',
2925                 '.ourafamily.com',
2926                 '.ragnarok-sara.com',
2927                 '.rmt-lineagecanopus.com',
2928                 '.rmt-ranloki.com',
2929                 '.rogamesline.com',
2930                 '.roprice.com',
2931                 '.tuankong.com',
2932                 '.twreatch.com',
2933
2934                 // 125.65.112.22
2935                 // The same IP: web013.cdnhost.cn
2936                 '.lzy88588.com',
2937                 '.ragnaroklink.com',
2938
2939                 // 125.65.112.24
2940                 '.rmtfane.com',
2941                 '.fc2weday.com',
2942                 '.nlftweb.com',
2943
2944                 // 125.65.112.27
2945                 '.i520i.com',
2946                 '.sunwayto.com',
2947
2948                 // 125.65.112.31
2949                 // The same IP: web016.cdnhost.cn
2950                 '.twyaooplay.com',
2951
2952                 // 125.65.112.32
2953                 // The same IP: web037.cdnhost.cn
2954                 '.emeriss.com',
2955                 '.raginfoy.com',
2956                 '.ragnarokgvg.com',
2957                 '.rentalbbs-livedoor.com',
2958                 '.romaker.com',
2959                 '.sagewikoo.com',
2960                 '.samples112xrea.com',
2961                 '.wiki-house.com',
2962
2963                 // 125.65.112.49
2964                 '.chaosx0.com',
2965
2966                 // 125.65.112.88
2967                 // The same IP: web015.cdnhost.cn
2968                 '.a-hatena.com',
2969                 '.biglobe-ne.com',
2970                 '.blogplaync.com',
2971                 '.din-or.com',
2972                 '.dtg-gamania.com',
2973                 '.fcty-net.com',
2974                 '.game-fc2blog.com',
2975                 '.gameurdr.com',
2976                 '.getamped-garm.com',
2977                 '.interzq.com',
2978                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
2979                 '.luobuogood.com',
2980                 '.ragnarok-search.com',
2981                 '.rinku-livedoor.com',
2982
2983                 // 125.65.112.90
2984                 '.gtvxi.com',
2985
2986                 // 125.65.112.91
2987                 // The same IP: web004.cdnhost.cn
2988                 '.6828teacup.com',
2989                 '.blog-livedoor.net',
2990                 '.cityblog-fc2web.com',
2991                 '.deco030-cscblog.com',
2992                 '.imbbs2t4u.com',
2993                 '.k5dionne.com',
2994                 '.lineagejp-game.com',
2995                 '.mbspro6uic.com',
2996                 '.slower-qth.com',
2997                 '.wikiwiki-game.com',
2998
2999                 // 125.65.112.93
3000                 // The same IP: web022.cdnhost.cn
3001                 '.aaa-livedoor.net',
3002                 '.cityhokkai.com',              // web022.cdnhost.cn
3003                 '.fanavier.net',
3004                 '.geocitylinks.com',    // web022.cdnhost.cn
3005                 '.kuronowish.net',              // web022.cdnhost.cn
3006                 '.ro-bot.net',
3007
3008                 // 125.65.112.95
3009                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3010                 '.23styles.com',
3011                 '.aehatena-jp.com',
3012                 '.ameblog-jp.net',
3013                 '.antuclt.com',
3014                 '.blog-ekndesign.com',
3015                 '.d-jamesinfo.com',
3016                 '.editco-jp.com',
3017                 '.ezbbsy.com',
3018                 '.extd-web.com',
3019                 '.fotblong.com',
3020                 '.game62chjp.net',
3021                 '.gamegohi.com',
3022                 '.gamesmusic-realcgi.net',
3023                 '.gamesragnaroklink.net',
3024                 '.homepage-nifty.com',
3025                 '.ie6xp.com',
3026                 '.irisdti-jp.com',
3027                 '.jklomo-jp.com',
3028                 '.jpxpie6-7net.com',
3029                 '.lian-game.com',
3030                 '.lineage-bbs.com',
3031                 '.lineage1bbs.com',
3032                 '.livedoor-game.com',
3033                 '.litcan.com',
3034                 '.lovejpjp.com',
3035                 '.m-phage.com',
3036                 '.muantang.com',
3037                 '.plusd-itmedia.com',
3038                 '.runbal-fc2web.com',
3039                 '.saussrea.com',
3040                 '.tooalt.com',
3041                 '.toriningena.net',
3042                 '.yahoodoor-blog.com',
3043                 '.yy14-kakiko.com',
3044
3045                 // 125.65.112.137
3046                 '.clublineage.com',
3047
3048                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3049                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3050                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3051
3052                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3053                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3054
3055                 '.games-nifty.com',             // 255.255.255.255 now
3056                 '.homepage3-nifty.com', // 255.255.255.255 now
3057         ),
3058         'caddd at 126.com' => array(
3059                 '.chengzhibing.com',    // by chen gzhibing
3060                 '.jplinux.com',                 // by lian liang
3061                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3062                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3063                 '.tooplogui.com',               // by zibing cai
3064                 '.twsunkom.com',                // by guo zhi wei
3065                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3066         ),
3067         'nuigiym2 at 163.com' => array( // by fly bg
3068                 '.linainfo.net',                // Seems IP not allocated now
3069                 '.lineagalink.com',             // 220.247.157.99
3070                 '.lineagecojp.com',             // 61.139.126.10
3071                 '.ragnarokonlina.com',  // 220.247.158.99
3072         ),
3073         'aakin at yandex.ru' => array(  // by Baer
3074                 '.entirestar.com',
3075                 '.superbuycheap.com',
3076                 '.topdircet.com',
3077         ),
3078         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3079                 '.tianmieccp.com',
3080                 '.xianqiao.net',
3081         ),
3082         'm.frenzy at yahoo.com' => array(       // by Michael
3083                 '.p5v.org',
3084                 '.j111.net',
3085                 '.searchhunter.info',
3086                 '.soft2you.info',
3087                 '.top20health.info',
3088                 '.top20ringtones.info',
3089                 '.top20travels.info',
3090                 '.v09v.info',
3091                 '.x09x.info',
3092                 '.zb-1.com',
3093         ),
3094         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3095                 '.bingogoldenpalace.info',
3096                 '.ccarisoprodol.info',
3097                 '.ezxcv.info',
3098                 '.isuperdrug.com',
3099                 '.pharmacif.info',
3100                 '.pornsexteen.biz',
3101                 '.ugfds.info',
3102                 '.vviagra.info',
3103         ),
3104         'anatolsenator at gmail.com' => array(  // by Anatol
3105                 '.cheapestviagraonline.info',
3106                 '.buyphentermineworld.info'
3107         ),
3108         'webmaster at mederotica.com' => array(
3109                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
3110                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
3111                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
3112                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
3113         ),
3114         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
3115                 '.auase.info',          // by ilemavyq7461 at techie.com
3116                 '.axeboxew.info',       // by zygeu220 at writeme.com
3117                 '.boluzuhy.info',       // by pikico5419 at post.com
3118                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
3119                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
3120                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
3121                 '.exidiqe.info',        // by kufyca5475 at mail.com
3122                 '.gerucovo.info',       // by apegityk7224 at writeme.com
3123                 '.gubiwu.info',         // by lywunef6532 at iname.com
3124                 '.ijizauax.info',       // by ysauuz2341 at iname.com
3125                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
3126                 '.jiuuz.info',          // by meqil6549 at mail.com
3127                 '.nudetar.info',        // by vohepafi3536 at techie.com
3128                 '.nipud.info',          // by bohox9872 at mindless.com
3129                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
3130                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
3131                 '.olasep.info',         // by lizon8506 at mail.com
3132                 '.oueuidop.info',       // by arytyb6913 at europe.com
3133                 '.oviravy.info',        // by amyuu3883 at london.com
3134                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
3135                 '.ragibe.info',         // by ehome4458 at myself.com
3136                 '.ucazib.info',         // by gorare7222 at consultant.com
3137                 '.udaxu.info',          // by gubima4007 at usa.com
3138                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
3139                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
3140                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
3141                 '.yvaxat.info',         // by koqun9660 at mindless.com
3142                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
3143         ),
3144         'Carmodelrank.com etc' => array(
3145                 // by Brianna Dunlord (briasmi at yahoo.com)
3146                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
3147                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
3148                 '.carmodelrank.com',// by Brianna
3149                 '.cutestories.net',     // by Brianna
3150                 '.sturducs.com',
3151                 '.bestother.info',      // by Tim
3152                 '.premiumcasinogames.com',      // by Brianna)
3153                 '.yaahooo.info',        // by Alice
3154         ),
3155         'aliacsandr at yahoo.com' => array(
3156                 '.cubub.info',                          // "Free Web Hosting"
3157         ),
3158         'aliacsandr85 at yahoo.com' => array(
3159                 // by Dr. Portillo or Eva Sabina Lopez Castell
3160                 '.xoomer.alice.it',                     // "Free Web Hosting"
3161                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
3162                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
3163                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
3164                 '.icesearch.org',                       // "Free Web Hosting" by Eva
3165                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
3166                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
3167                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
3168                 '.topadult10.org',                      // "Free Web Hosting" by Eva
3169                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
3170                 '.xxxse.info',                          // "Free Web Hosting" by Eva
3171                 '.viagra-price.org',            // by Eva
3172                 '.vvsa.org',                            // "Free Web Hosting" by Eva
3173                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
3174         ),
3175         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
3176         'Something-Gamble' => array(
3177                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
3178                 '.atonlineroulette.com',                        // by Blaise Johns
3179                 '.atroulette.com',                                      // by Gino Sand
3180                 '.betting-123.com',                                     // by Joana Caceres
3181                 '.betting-i.biz',                                       // by Joaquina Angus
3182                 '.casino-challenge.com',                        // by Maren Camara
3183                 '.casino-gambling-i.biz',                       // by Giselle Nations
3184                 '.casino-italian.com',                          // by Holley Yan
3185                 '.casino123.net',                                       // by Ta Baines
3186                 '.casinohammamet.com',                          // by Inger Barhorst
3187                 '.casinoqz.com',                                        // by Berenice Snow
3188                 '.casinos-777.net',                                     // by Iona Ayotte
3189                 '.crapsok.com',                                         // by Devon Adair,
3190                 '.dcasinoa.com',                                        // by August Hawkinson
3191                 '.e-poker-4u.com',                                      // by Issac Leibowitz
3192                 '.free-dvd-player.biz',                         // by Rosario Kidd
3193                 '.florida-lottery-01.com',                      // by Romeo Dillon
3194                 '.gaming-123.com',                                      // by Jennifer Byrne
3195                 '.kenogo.com',                                          // by Adriane Bell
3196                 '.mycaribbeanpoker.com',                        // by Andy Mullis
3197                 '.onbaccarat.com',                                      // by Kassandra Dunn
3198                 '.online-experts.biz',                          // by Liberty Helmick
3199                 '.onlinepoker-123.com',                         // by Andrea Feaster
3200                 '.playpokeronline-123.com',                     // by Don Lenard
3201                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
3202                 '.texasholdem123.com',                          // by Savion Lasseter
3203                 '.texasholdem-777.com',                         // by Savanna Lederman
3204                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
3205                 '.the-craps-100.us',                            // by Lorrine Ripley
3206                 '.the-free-online-game-913.us',         // by Kanesha Clem
3207                 '.the-free-poker-1798.us',                      // by Elaina Witte
3208                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
3209                 '.the-online-game-poker-1185.us',       // by Merna Bey
3210                 '.the-playing-black-jack.com',          // by Kristine Brinker
3211                 '.the-poker-1082.us',                           // by Kristofer Boldt
3212                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
3213                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
3214                 '.the-video-black-jack.com',            // by Jagger Godin
3215         ),
3216         'Something-Insurance' => array(
3217                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
3218
3219                 // 0-9
3220                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
3221                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
3222                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
3223                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
3224                 '.18wkcf.com',                                  // by Lexy Bohannon
3225                 '.2001werm.org',                                // by Raphael Rayburn
3226                 '.2004heeparea1.org',                   // by Dinorah Andrews
3227                 '.21nt.net',                                    // by Jaida Estabrook
3228                 '.3finfo.com',                                  // by Damian Pearsall
3229                 '.3somes.org',                                  // by Mauro Tillett
3230                 '.453531.com',                                  // by Kurt Flannery
3231                 '.4freesay.com',                                // by Eloy Jones
3232                 '.5ssurvey.com',                                // by Annamarie Kowalski
3233                 '.8-f22.com',                                   // by Larraine Evers
3234                 '.9q.org',                                              // by Ami Boynton
3235
3236                 // A
3237                 '.a40infobahn.com',                             // by Amit Nguyen
3238                 '.a4h-squad.com',                               // by Ross Locklear
3239                 '.aac2000.org',                                 // by Randi Turner
3240                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
3241                 '.acahost.com',                                 // by Milton Haberman
3242                 '.aconspiracyofmountains.com',  // by Lovell Gaines
3243                 '.acornwebdesign.co.uk',                // by Uriel Dorian
3244                 '.activel-learning-site.com',   // by Mateo Conn
3245                 '.ad-makers.com',                               // by Shemeka Arsenault
3246                 '.ada-information.org',                 // by Josef Osullivan
3247                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
3248                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
3249                 '.aequityrefinance.com',                // by Jadwiga Duckworth
3250                 '.aerovac-hotpress.com',                // by Trey Marlow
3251                 '.agfbiosensors.com',                   // by Lionel Dempsey
3252                 '.ahomeloanrefinance.com',              // by Leslie Kinser
3253                 '.affordablerealestate.net',    // by Season Otoole
3254                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
3255                 '.ahouserefinance.com',                 // by Young Alley
3256                 '.akirasworld.com',                             // by Piper Sullivan
3257                 '.alderik-production.com',              // by Joan Stiles
3258                 '.alltechdata.com',                             // by Dom Laporte
3259                 '.amconllc.com',                                // by Syble Benjamin
3260                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
3261                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
3262                 '.angelandcrown.net',                   // by Claretta Najera
3263                 '.ankoralina.com',                              // by Eladia Demers
3264                 '.antiquegoldmine.com',                 // by Keena Marlow
3265                 '.aquinosotros.com',                    // by Nanci Prentice
3266                 '.architectionale.com',                 // by Wilbur Cornett
3267                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
3268                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
3269                 '.arefinancehome.com',                  // by Duane Doran
3270                 '.arefinancinghome.com',                // by Ike Laney
3271                 '.athletic-shoes-e-shop.info',  // by Romelia Money
3272                 '.auction-emall-site.info',             // by Dayle Denman
3273                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
3274                 '.auto-buy-rite.com',                   // by Asuncion Buie
3275                 '.axxinet.net',                                 // by Roberta Gasper
3276                 '.azimutservizi.com',                   // by Ethelene Brook
3277                 '.azstudies.org',                               // by Bernardina Walden
3278
3279                 // B
3280                 '.babtrek.com',                                 // by Simonette Mcbrayer
3281                 '.babycujo.com',                                // by Francisco Akers
3282                 '.bakeddelights.com',                   // by Dave Evenson
3283                 '.bbcart.com',                                  // by Lucio Hamlin
3284                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
3285                 '.best-digital-phone.us',               // by Meghann Crockett
3286                 '.bjamusements.com',                    // by Lurlene Butz
3287                 '.blursgsu.com',                                // by Weston Killian
3288                 '.bookwide.net',                                // by Tequila Zacharias
3289                 '.boreholes.org',                               // by Flora Reed
3290                 '.breathingassociaiton.org',    // by Alfred Crayton
3291                 '.birdingnh.com',                               // by Donald Healy
3292                 '.bisdragons.org',                              // by Lupe Cassity
3293                 '.blcschools.net',                              // by Alycia Jolly
3294                 '.bronte-foods.com',                    // by Kary Pfeiffer
3295                 '.buckscountyneighbors.org',    // by Maile Gaffney
3296                 '.buffalofudge.com',                    // by Mable Whisenhunt
3297                 '.burlisonforcongress.com',             // by Luann King
3298                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
3299                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
3300
3301                 // C
3302                 '.cabanes-web.com',                             // by Vaughn Latham
3303                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
3304                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
3305                 '.checaloya.com',                               // by Susana Coburn
3306                 '.calvarychapelrgvt.org',               // by Karan Kittle
3307                 '.cameras-esite.info',                  // by Karlee Frisch
3308                 '.cancerkidsforum.org',                 // by Samson Constantino
3309                 '.ccchoices.org',                               // by Kenia Cranford
3310                 '.ccupca.org',                                  // by Evonne Serrano
3311                 '.celebratemehome.com',                 // by Soraya Tower
3312                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
3313                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
3314                 '.choose-shoes.net',                    // by Geoffrey Setser
3315                 '.churla.com',                                  // by Ollie Wolford
3316                 '.circuithorns.co.uk',                  // by Nathanial Halle
3317                 '.clanbov.com',                                 // by Donell Hozier
3318                 '.cnm-ok.org',                                  // by Thalia Moye
3319                 '.coalitioncoalition.org',              // by Ned Macklin
3320                 '.consoleaddicts.com',                  // by Dorla Hoy
3321                 '.counterclockwise.net',                // by Melynda Hartzell
3322                 '.codypub.com',                                 // by Mercedes Coffman
3323                 '.comedystore.net',                             // by Floy Donald
3324                 '.covsys.co.uk',                                // by Abby Jacey
3325                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
3326                 '.craftybidders.com',                   // by Dannie Lazo
3327                 '.credit-card-finder.net',              // by Mellie Deherrera
3328                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
3329                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
3330                 '.ctwine.org',                                  // by Hailey Knox
3331
3332                 // D
3333                 '.dazyation.com',                               // by Louis Strasser
3334                 '.deepfoam.org',                                // by Ethelyn Southard
3335                 '.debt-fixing.com',                             // by Dagny Rickman
3336                 '.dgmarketingwebdesign.com',    // by Nubia Lea
3337                 '.domainadoption.com',                  // by Breann Pappas
3338                 '.diannbomkamp.com',                    // by Russel Croteau
3339                 '.dictionary-spanish.us',               // by Jacki Gilbreath
3340                 '.dictionary-yahoo.us',                 // by Lili Mitchem
3341                 '.digital-camera-review-esite.info',    // by Milagros Jowers
3342                 '.digital-cameras-esite.info',  // by Milan Jolin
3343                 '.dnstechnet.net',                              // by Tamera Oman
3344                 '.drivenbydata.org',                    // by Katherine Noyes
3345                 '.dtmf.net',                                    // by Micki Slayton
3346                 '.domainsfound.com',                    // by Blossom Lively
3347
3348                 // E
3349                 '.ecstacyabuse.net',                    // by Alana Knight
3350                 '.e-digital-camera-esite.info', // by Romaine Cress
3351                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
3352                 '.eldorabusecenter.org',                // by Annabella Oneal
3353                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
3354                 '.encaponline.com',                             // by Patrick Keel
3355                 '.ez-shopping-online.com',              // by Gail Bartlett
3356
3357                 // F
3358                 '.faithfulwordcf.com',                  // by Bart Weeks
3359                 '.fammedassoc.com',                             // by Joshua Nelson
3360                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
3361                 '.f00k.org',                                    // by Leslie Chapman
3362                 '.foreignrealtions.org',                // by Krystal Hawley
3363                 '.fortwebsite.org',                             // by Kristina Motley
3364                 '.fotofirstdigital.com',                // by Tad Whitfield
3365                 '.foundationcommons.org',               // by Caryn Eskew
3366                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
3367                 '.freaky-cheats.com',                   // by Al Klein
3368                 '.free--spyware.com',                   // by Nikki Contreras
3369                 '.french-home-finance-consultant.info', // by Santana Melton
3370                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
3371
3372                 // G
3373                 '.gaintrafficfast.com',                 // by Lila Meekins
3374                 '.gaygain.org',                                 // by Shell Davila
3375                 '.gcaaa.com',                                   // by Vallie Jaworski
3376                 '.generalsysteme.com',                  // by Cale Vogel
3377                 '.generation4games.co.uk',              // by Sonya Graham
3378                 '.german-dictionary.us',                // by Rex Daniel
3379                 '.gilmerrec.com',                               // by Leighann Guillory
3380                 '.glenthuntly-athletics.com',   // by Julee Hair
3381                 '.glorybaskets.com',                    // by Lynette Lavelle
3382                 '.goconstructionloan.com',              // by Willis Monahan
3383                 '.gohireit.com',                                // by Bertha Metzger
3384                 '.godcenteredpeople.com',               // by Jaycee Coble
3385
3386                 // H
3387                 '.healthinsuranceem.com',               // by Justin Munson
3388                 '.hearthorizon.info',                   // by Kory Session
3389                 '.hegerindustrial.com',                 // by Toni Wesley
3390                 '.herzequip.com',                               // by Princess Dunkle
3391                 '.hglcms.org',                                  // by Gladwin Ng
3392                 '.hipanoempresa.com',                   // by Shannon Staub
3393                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
3394                 '.horse-racing-result.com',             // by Rodney Reynolds
3395                 '.hueckerfamily.com',                   // by Hershel Sell
3396
3397                 // I
3398                 '.ilove2win.com',                               // by Lamont Dickerson
3399                 '.ilruralassistgrp.org',                // by Moises Hauser
3400                 '.imageonsolutions.com',                // by Porsche Dubois
3401                 '.infoanddatacenter.com',               // by Eva Okelley
3402                 '.islamfakta.org',                              // by Goldie Boykin
3403                 '.ithomemortgage.com',                  // by Adelaide Towers
3404                 '.iyoerg.com',                                  // by Madyson Gagliano
3405
3406                 // J
3407                 '.jeffaxelsen.com',                             // by Daphne William
3408                 '.jeffreyf.net',                                // by Vito Platt
3409                 '.johnmartinsreality.com',              // by Pamela Larry
3410                 '.johnsilvers.net',                             // by Silver Battaglia
3411
3412                 // K
3413                 '.kcgerbil.org',                                // by Marisa Thayer
3414                 '.kdc-phoenix.com',                             // by Salma Shoulders
3415                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
3416                 '.kosove.org',                                  // by Darwin Schneider
3417
3418                 // L
3419                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
3420                 '.letsgokayaking.net',                  // by Winnie Adair
3421                 '.libertycabs.com',                             // by Adela Bonds
3422                 '.liquor-store-cellar.info',    // by Hugh Pearson
3423                 '.locomojo.net',                                // by Marco Harmon
3424                 '.lodatissimo.com',                             // by Adrian Greeson
3425                 '.lsawc.org',                                   // by Lara Han
3426                 '.lycos-test.net',                              // by Rigoberto Oakley
3427
3428                 // M
3429                 '.macro-society.com',                   // by Venessa Hodgson
3430                 '.marthasflavorfest.com',               // by Ahmad Lau
3431                 '.martin-rank.com',                             // by Cathleen Crist
3432                 '.maryandfrank.org',                    // by Theodore Apodaca
3433                 '.masterkwonhapkido.com',               // by Misty Graham
3434                 '.maxrpm-demo.com',                             // by Cristal Cho
3435                 '.mechanomorphic.com',                  // by Stanford Crow
3436                 '.mepublishing.net',                    // by Karly Fleenor
3437                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
3438                 '.metwahairports.com',                  // by Nan Kitchen
3439                 '.middle-eastnews.com',                 // by Tybalt Altmann
3440                 '.mikepelchy.com',                              // by Sherly Pearson
3441                 '.milpa.org',                                   // by Nelly Aguilera
3442                 '.modayun.com',                                 // by Camilla Velasco
3443                 '.moonstoneerp.com',                    // by Garret Salmon
3444                 '.morosozinho.com',                             // by Lenore Tovar
3445                 '.morphadox.com',                               // by Hung Zielinski
3446                 '.moscasenlared.com',                   // by Tera Gant
3447                 '.sdjavasig.com',                               // by Gia Swisher
3448                 '.mpeg-radio.com',                              // by Sincere Beebe
3449                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
3450                 '.mtseniorcenter.org',                  // by Frederic Ortega
3451                 '.mysteryclips.com',                    // by Edward Ashford
3452
3453                 // N
3454                 '.naavs.org',                                   // by Yuridia Gandy
3455                 '.naval-aviation.org',                  // by Roselle Campo
3456                 '.navigare-ischia.com',                 // by Arielle Coons
3457                 '.ncredc.org',                                  // by Brenda Nye
3458                 '.neonmotorsports.com',                 // by Giovanna Vue
3459                 '.nf-ny.com',                                   // by Yadira Hibbard
3460                 '.ngfdyqva.com',                                // by Emiliano Samples
3461                 '.nicozone.com',                                // by Blaine Shell
3462                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
3463                 '.npawny.org',                                  // by Willard Murphy
3464                 '.nysdoed.org',                                 // by Elric Delgadillo
3465                 '.nyswasteless.org',                    // by Shaylee Moskowitz
3466                 '.nytech-ir.com',                               // by Adrien Beals
3467
3468                 // O
3469                 '.oadmidwest.com',                              // by Gavin Kaplan
3470                 '.oarauto.com',                                 // by Susann Merriman
3471                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
3472                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
3473                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
3474                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
3475                 '.online-pills-24x7.biz',               // by Aide Hallock
3476                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
3477                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
3478                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
3479                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
3480                 '.otterbayweb.com',                             // by Maxwell Irizarry
3481
3482                 // P
3483                 '.painting-technique.us',               // by Bryanna Tooley
3484                 '.pakamrcongress.com',                  // by Bryce Summerville
3485                 '.patabney.com',                                // by Kailyn Slone
3486                 '.parde.org',                                   // by Ellie Yates
3487                 '.participatingprofiles.com',   // by Jaelynn Meacham
3488                 '.partnershipconference.org',   // by Alla Floyd
3489                 '.pet-stars.com',                               // by Carmon Luevano
3490                 '.planning-law.org',                    // by Trista Holcombe
3491                 '.ppawa.com',                                   // by Evonne Scarlett
3492                 '.precisionfilters.net',                // by Faustina Fell
3493
3494                 // Q
3495                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
3496                 '.quick-debt-consolidation.net',        // by Lala Marte
3497                 '.quicktvr.com',                                // by Vernell Crenshaw
3498
3499                 // R
3500                 '.radicalsolutions.org',                // by Reece Medlin
3501                 '.randallburgos.com',                   // by Bradly Villa
3502                 '.rcassel.com',                                 // by Janiah Gallant
3503                 '.rearchitect.org',                             // by Marcus Gaudet
3504                 '.rent-an-mba.com',                             // by Valentina Mcdermott
3505                 '.reprisenashville.com',                // by Hester Khan
3506                 '.reptilemedia.com',                    // by Alicia Patel
3507                 '.resellers2000.com',                   // by Dedra Kennedy
3508                 '.reverse-billing.com',                 // by Lazaro Gluck
3509                 '.richcapaldi.com',                             // by Kya Haggard
3510                 '.richformissouri.com',                 // by Alanna Elston
3511                 '.robstraley.com',                              // by Leida Bartell
3512                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
3513                 '.rpgbbs.com',                                  // by Leonel Peart
3514                 '.ruralbusinessonline.org',             // by Lynsey Watters
3515                 '.ruwomenscenter.org',                  // by Vince Mclemore
3516                 '.ryanjowens.com',                              // by Janine Smythe
3517
3518                 // S
3519                 '.sagarmathatv.org',                    // by Liam Funke
3520                 '.sakyathubtenling.org',                // by Liane Falgout
3521                 '.sandiegolawyer.net',                  // by Linnie Sommervill
3522                 '.sandishaven.com',                             // by Lino Soloman
3523                 '.scienkeen.com',                               // by Liza Navarra
3524                 '.seimenswestinghouse.com',             // by Teresa Benedetto
3525                 '.severios.com',                                // by Isa Steffen
3526                 '.sexual-hot-girls.com',                // by Viviana Bolton
3527                 '.shakespearelrc.com',                  // by Luciana Weaver
3528                 '.shashran.org',                                // by Adriel Humphries
3529                 '.shoes-shop.us',                               // by Austen Higginbotham
3530                 '.skagitvalleybassanglers.com', // by Necole Thiele
3531                 '.skinsciencesalon.com',                // by Nena Rook
3532                 '.smartalternative.net',                // by Nicki Lariviere
3533                 '.sml338.org',                                  // by Nickole Krol
3534                 '.smogfee.com',                                 // by Sienna Kimble
3535                 '.sneakers-e-shop.info',                // by Nikki Fye
3536                 '.spacewavemedia.com',                  // by Thanh Gast
3537                 '.softkernel.com',                              // by Nicol Hummer
3538                 '.stjoanmerrillville.com',              // by Hunter Beckham
3539                 '.strelinger.com',                              // by Arron Highsmith
3540                 '.striking-viking.com',                 // by Kylie Endsley
3541                 '.sunnydeception.org',                  // by Amaya Llora
3542                 '.sunzmicro.com',                               // by Goddard Arreola
3543                 '.sv-iabc.org',                                 // by Braden Buck
3544                 '.sykotick.com',                                // by Pierce Knecht
3545
3546                 // T
3547                 '.tbody.net',                                   // by Ormond Roman
3548                 '.the-pizzaman.com',                    // by Mario Ramsey
3549                 '.the-shoes.us',                                // by Alejandro Gaffney
3550                 '.theborneocompany.com',                // by Bryanna Tooley
3551                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
3552                 '.thehomeschool.net',                   // by September Concepcio
3553                 '.thenewlywed.com',                             // by Allegra Marra
3554                 '.tigerspice.com',                              // by Denis Mosser
3555                 '.tnaa.net',                                    // by Jasmine Andress
3556                 '.top-finance-sites.com',               // by Maryann Doud
3557                 '.tradereport.org',                             // by Bettie Sisk
3558                 '.transmodeling.com',                   // by Martine Button
3559                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
3560                 '.tsaoc.com',                                   // by Heriberto Mcfall
3561                 '.tsunamidinner.com',                   // by Nannie Richey
3562
3563                 // U
3564                 '.uhsaaa.com',                                  // by Risa Herbert
3565                 '.ultradeepfield.org',                  // by Bobby Ragland
3566                 '.umkclaw.info',                                // by Cammy Kern
3567                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
3568                 '.usa-wolf.com',                                // by Jacklyn Morrill
3569                 '.usjobfair.com',                               // by Lorina Burchette
3570
3571                 // V
3572                 '.vacancesalouer.com',                  // by Loris Bergquist
3573                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
3574                 '.valleylibertarians.org',              // by Lena Massengale
3575                 '.vanderbiltevents.com',                // by Gannon Krueger
3576                 '.vanwallree.com',                              // by Michelina Donahue
3577                 '.vcertificates.com',                   // by Hyun Lamp
3578                 '.vonormytexas.us',                             // by Suzette Waymire
3579
3580                 // W
3581                 '.washingtondc-areahomes.net',  // by Ailene Broome
3582                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
3583                 '.wolsaoh.org',                                 // by Daniela English
3584                 '.worldpropertycatalog.com',    // by Aray Baxter
3585
3586                 // Y
3587                 '.yankee-merchants.com',                // by Jackson Hinojosa
3588                 '.yourbeachhouse.com',                  // by Dedrian Ryals
3589                 '.yourdomainsource.com',                // by Deems Weingarten
3590
3591                 // Z
3592                 '.zkashan.com',                                 // by Evan Light
3593                 '.zockclock.com',                               // by Dorothea Guthrie
3594         ),
3595         'Something-Drugs' => array(
3596                 // Drugs / Pills / Diet
3597                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
3598                 '.abdelghani-shady.com',                // by Elly Alton
3599                 '.bangbangfilm.com',                    // by Davin Chou
3600                 '.centroantequera.com',                 // by Keon Kwiatkowski
3601                 '.champagne-cellar.info',               // by Kandis Rizzo
3602                 '.chix0r.org',                                  // by Christoper Baird
3603                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
3604                 '.fantasticbooks-shop.com',             // by Kermit Ashley
3605                 '.fast-cash-01.com',                    // by Edgar Oliver
3606                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
3607                 '.fn-nato.com',                                 // by Donny Dunlap
3608                 '.gqyinran.com',                                // by Alejandro Parks
3609                 '.juris-net.com',                               // by Rachelle Bravo
3610                 '.leftpencey.com',                              // by Aileen Ashby
3611                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
3612                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
3613                 '.palaceroyale.net',                    // by Brycen Stebbins
3614                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
3615                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
3616                 '.yukissushi.com',                              // by Donell Hozier
3617         ),
3618         'Something-Others' => array(
3619                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
3620                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
3621         ),
3622         'Something-NoApp' => array(
3623                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
3624                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
3625                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3626                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
3627                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
3628         ),
3629         'Cortez and family' => array(
3630                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
3631                 '.dronadaarsujf.info',  // by Cortez
3632                 '.fromnananaref.info',  // by Cortez
3633                 '.goorkkjsaka.info',    // by Cortez
3634                 '.jkdfjjkkdfe.info',    // by Rico
3635                 '.jkllloldkjsa.info',   // by Cortez
3636                 '.nnjdksfornms.info',   // by Rico
3637                 '.mcmdkkksaoka.info',   // by Cortez
3638                 '.srattaragfon.info',   // by Cortez
3639                 '.yreifnnonoom.info',   // by Rico
3640                 '.zjajjsvgeuds.info',   // by Cortez
3641         ),
3642         'admin at ematuranza.com' => array(
3643                 '.ancorlontano.com',
3644                 '.dentroallago.com',
3645                 '.digiovinezza.com',
3646                 '.ematuranza.com',
3647                 '.ilfango.com',
3648                 '.nullarimane.com',
3649                 '.questaimmensa.com',
3650                 '.tentailvolo.com',
3651                 '.unatenerezza.com',
3652                 '.volgondilettose.com',
3653         ),
3654         'admin at edeuj84.info' => array(       // by Cornelius Boyers
3655                 '.bid99df.info',
3656                 '.bj498uf.info',
3657                 '.edeuj84.info',
3658                 '.f4mfid.info',
3659                 '.g4vf03a.info',
3660                 '.j09j4r.info',
3661                 '.jv4r8hv.info',
3662                 '.k43sd3.info',
3663                 '.k4r84d.info',
3664                 '.k4rvda.info',
3665                 '.k4v0df.info',
3666                 '.k903os.info',
3667                 '.k9df93d.info',
3668                 '.kv94fd.info',
3669                 '.ksjs93.info',
3670                 '.l0ks03.info',
3671                 '.l9u3jc.info',
3672                 '.lv043a.info',
3673                 '.nh94h9.info',
3674                 '.m94r9d.info',
3675                 '.s87fvd.info',
3676                 '.v3k0d.info',
3677                 '.v4r8j4.info',
3678                 '.vf044s.info',
3679                 '.vj49rs.info',
3680                 '.vk498j.info',
3681                 '.u03jow.info',
3682         ),
3683         'Nikhil and Brian' => array(
3684                 // by Brian Dieckman (info at iudndjsdhgas.info)
3685                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
3686                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
3687                 '.ihfjeswouigf.info',   // by Brian, / was not found
3688                 '.iudndjsdhgas.info',   // by Brian, / was not found
3689                 '.iufbsehxrtcd.info',   // by Brian, / was not found
3690                 '.jiatdbdisut.info',    // by Brian, / was not found
3691                 '.jkfierwoundhw.info',  // by Brian, / was not found
3692                 '.kfjeoutweh.info',             // by Brian, / was not found
3693                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
3694                 '.oudjskdwibfm.info',   // by Brian, / was not found
3695                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
3696                 '.itxbsjacun.info',             // by Nikhil, / was not found
3697                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
3698                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
3699                 '.najedncdcounrd.info', // by Nikhil, / was not found
3700                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
3701                 '.oujvjfdndl.info',             // by Nikhil, / was not found
3702                 '.uodncnewnncds.info',  // by Nikhil, / was not found
3703                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
3704                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
3705                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
3706                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
3707                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
3708                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
3709         ),
3710         'wealth777 at gmail.com' => array(      // by Henry Ford
3711                 '.brutal-forced.com',
3712                 '.library-bdsm.com',
3713                 '.rape-fantasy.us',
3714         ),
3715         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
3716                 '.purerotica.com',
3717                 '.richsex.com',
3718                 '.servik.net',
3719                 '.withsex.com',
3720         ),
3721         'dreamteammoney.com' => array(
3722                 '.dreamteammoney.com',  // dtmurl.com related
3723                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
3724         ),
3725         'KLIK VIP Search and family' => array(
3726                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
3727                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
3728                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
3729                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
3730                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
3731                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
3732                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
3733         ),
3734         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
3735                 '.antivirs.info',
3736                 '.antivirus1.info',
3737                 '.antivirus2.info',
3738         ),
3739         'wasam at vangers.net and family' => array(
3740
3741                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3742                 '.bahatoca.org',
3743                 '.digestlycos.org',
3744                 '.educativaanale.info',
3745                 '.guildstuscan.org',
3746                 '.isaakrobbins.info',
3747                 '.isfelons.org',
3748                 '.lvwelevated.org',
3749                 '.macphersonaca.org',
3750                 '.markyaustrian.org',
3751                 '.michelepug.org',
3752                 '.opalbusy.info',
3753                 '.quijotebachata.info',
3754                 '.salthjc.info',
3755                 '.shogunnerd.info',
3756                 '.solarissean.org',
3757                 '.sparkgsx.info',
3758                 '.tarzanyearly.org',
3759                 '.tulabnsf.org',
3760                 '.vaccarinos.org',
3761
3762                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
3763                 '.e2007.info',
3764                 '.cmoss.info',
3765
3766                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
3767                 '.finddesk.org',
3768                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
3769                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
3770                 '.rcatalog.org',
3771                 '.sbitzone.org',
3772
3773                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
3774                 '.cheapns.org',
3775                 '.my-top.net',
3776                 '.sfind.net',
3777                 '.sspot.net',
3778                 '.suvfind.info',
3779
3780                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
3781                 '.trumber.com',
3782
3783                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3784                 '.blogduet.org',
3785                 '.carelf.info',
3786                 '.cmagic.org',
3787                 '.cspell.org',
3788                 '.dspark.org',
3789                 '.dtonic.org',
3790                 '.mcharm.info',
3791                 '.mslook.info',
3792                 '.phpdinnerware.info',
3793                 '.rnation.org',
3794                 '.uzing.org',
3795
3796                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
3797                 '.allbar.info',
3798                 '.allersearch.org',
3799                 '.allzoom.org',
3800                 '.dynall.org',
3801                 '.fastopia.org',
3802                 '.offasfast.info',
3803                 '.rblast.org',
3804                 '.rchistes.info',
3805                 '.rette.org',
3806                 '.shufflequince.org',
3807                 '.suvlook.org',
3808
3809                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
3810                 '.290cabeza.org',
3811                 '.bossierpainted.org',
3812                 '.connickkarel.info',   // Admin: tvaals at vangers.net
3813                 '.definekonica.info',   // Admin: tvaals at vangers.net
3814                 '.gradetelemundo.info',
3815                 '.hydraulickin.info',
3816                 '.indicadorestmj.info',
3817                 '.keeleykincaid.org',
3818                 '.kleenbowser.info',
3819                 '.pipnickname.info',
3820                 '.pacolily.org',
3821                 '.redeemtrabalho.info',
3822                 '.scanmakerchua.info',
3823                 '.titanmessina.info',
3824                 '.tragratuit.org',
3825                 '.yeareola.info',
3826         ),
3827         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
3828                 '.canadianmedsworld.info',      // 84.252.133.112
3829                 '.tabsdrugstore.info',          // 84.252.133.114
3830                 '.tabsstore.info',                      // 84.252.133.114
3831                 '.topcholesterol.info',         // 84.252.133.132
3832         ),
3833         'be.cx' => array(
3834                 '.be.cx',
3835                 '.ca.cx',
3836         ),
3837         'john780321 at yahoo.com' => array(     // by John  Brown
3838                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
3839                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
3840                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
3841         ),
3842         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
3843                 '.bertela.info',
3844                 '.forblis.info',
3845                 '.frenallo.info',
3846                 '.goyahoo.info',
3847                 '.herbak.info',
3848                 '.kiokast.info',
3849                 '.nerenok.info',
3850                 '.pestgets.info',
3851                 '.snukker.info',
3852                 '.thegetspons.info',
3853         ),
3854         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
3855                 '.bobop.info',
3856                 '.kwwwe.info',
3857                 '.piikz.info',
3858                 '.moosm.info',
3859                 '.vvvw.info',
3860         ),
3861         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
3862                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
3863                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
3864                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
3865                 '.jplingood.com',       // 125.65.112.15
3866                 '.linenew.com',         // 203.191.148.96
3867                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
3868                 '.yzlin.com',           // 220.162.244.36
3869         ),
3870         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
3871                 '.1111mb.com',
3872                 '.2sex18.com',
3873                 '.69porn1.com',
3874         ),
3875         'ECTechnology' => array(
3876                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
3877                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
3878                 '.automouse.jp',
3879         ),
3880         'lyqz at 21cn.com' => array(
3881                 '.japangame1.com',
3882                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
3883                 '.livedoor1.com',
3884                 '.ragnarokonline1.com',
3885                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
3886         ),
3887         'kingrou at hotmail.com' => array(      // by yangjianhe
3888                 '.youshini.com',                // Two iframe to 453787.com's *.exe
3889                 '.453787.com',
3890         ),
3891         'anpaul541000 at 163.com' => array(     // by su qiuqing
3892                 '.cetname.com',                 // 222.77.185.87
3893                 '.jpgamer.net',                 // 220.247.157.106
3894                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
3895                 '.lovejptt.com',                // 222.77.185.87
3896                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
3897                 '.playncsoft.net',              // 220.247.157.106
3898         ),
3899         'abc00613 at 163.com' => array( // by guo yong
3900                 '.avtw1068.com',                // 64.74.223.11
3901                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
3902                 '.djkkk66990.com',              // 68.178.232.99
3903                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
3904         ),
3905         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
3906                 '.cmonfofo.com',
3907                 '.discutbb.com',
3908         ),
3909         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
3910                 '.preca.info',
3911                 '.skiaggi.info',
3912                 '.scrianal.info',
3913                 '.tageom.info',
3914         ),
3915         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
3916                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
3917                 '.inpros.net',                  // 202.181.98.79
3918                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
3919         ),
3920         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
3921                 '.ec51.com',
3922                 '.ec51.net',
3923         ),
3924         'abbevillelaties at yahoo.fr etc' => array(
3925                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
3926                 '.ringtones-rate.com',
3927                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
3928                 '.special-ringtones.net',
3929         ),
3930         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
3931                 '.1sgsc.info',
3932                 '.3h4r89h.info',
3933                 '.3v44dd.info',
3934                 '.6rfuh6.info',
3935                 '.84hd8.info',
3936                 '.94bui89.info',
3937                 '.agysb3.info',
3938                 '.asdjhs.info',
3939                 '.bcvnrth.info',
3940                 '.bheb4r.info',
3941                 '.bhiuno.info',
3942                 '.biug7g.info',
3943                 '.bjb5f4.info',
3944                 '.bob8g7g.info',
3945                 '.br89bdd.info',
3946                 '.bsa3h.info',
3947                 '.bsieb8.info',
3948                 '.basbiubf.info',
3949                 '.bobwwfs2.info',
3950                 '.ciuv9t.info',
3951                 '.dbmdx4.info',
3952                 '.dbrjms.info',
3953                 '.dbtcm.info',
3954                 '.dff9ghu.info',
3955                 '.dfshbb.info',
3956                 '.dgd4ffdh.info',
3957                 '.dh3ge.info',
3958                 '.duc86jh.info',
3959                 '.ergth45.info',
3960                 '.f78bf7ffb.info',
3961                 '.gbdfbo4.info',
3962                 '.ger45.info',
3963                 '.gnvnrrg.info',
3964                 '.h47he7.info',
3965                 '.h488hbd4.info',
3966                 '.hd72b94.info',
3967                 '.he74b7.info',
3968                 '.hfujfnr.info',
3969                 '.husdhd42.info',
3970                 '.hbwje.info',
3971                 '.itg87gji.info',
3972                 '.iugiougiuh.info',
3973                 '.jhd4f4aa.info',
3974                 '.jshd73.info',
3975                 '.krhpgd.info',
3976                 '.lyihjn.info',
3977                 '.nfyjnfj.info',
3978                 '.oihbv.info',
3979                 '.os44fvs.info',
3980                 '.sdfsd3.info',
3981                 '.sdiug4.info',
3982                 '.sdkufhh.info',
3983                 '.sdugb4f.info',
3984                 '.skdbf.info',
3985                 '.sipiv78.info',
3986                 '.sudbfb.info',
3987                 '.tymbbmy.info',
3988                 '.uilhjk.info',
3989                 '.vi87vub.info',
3990                 '.vfuyf87f.info',
3991                 '.viyvvj877.info',
3992                 '.w7fc8eu.info',
3993                 '.wefg43g.info',
3994                 '.xbrch78e.info',
3995                 '.ywsfu.info',
3996                 '.zxcbiv.info',
3997         ),
3998         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
3999                 '.abofios.info',
4000                 '.amlekfn.info',
4001                 '.amlkdoie.info',
4002                 '.amkslewq.info',
4003                 '.alemfu.info',
4004                 '.aloweks1.info',
4005                 '.alposd3.info',
4006                 '.bamhpb.info',
4007                 '.bhjkb.info',
4008                 '.bjqnj.info',
4009                 '.cvcxcbhpr.info',
4010                 '.czoypaiat.info',
4011                 '.dbpmgc.info',
4012                 '.dgvogrxs.info',
4013                 '.dldksf.info',
4014                 '.dlor6za.com',
4015                 '.dmkoiew.info',
4016                 '.eewrefr.info',
4017                 '.eladne.info',
4018                 '.elksem.info',
4019                 '.elwpod.info',
4020                 '.emlwkdnr.info',
4021                 '.esgmyqk.info',
4022                 '.fauqv.info',
4023                 '.fgxkgy.info',
4024                 '.fhryns.info',
4025                 '.fj38n4g.info',
4026                 '.fjnesal.info',
4027                 '.fmkfoe.info',
4028                 '.fqkcfldtr.info',
4029                 '.fwcigpdwz.info',
4030                 '.fyhik.info',
4031                 '.glrkje.info',
4032                 '.gwkslfq.info',
4033                 '.gwjracvh.info',
4034                 '.hihopepe.info',
4035                 '.hwlyggbkw.info',
4036                 '.hmwbfw.info',
4037                 '.hthyeb.info',
4038                 '.iaofkyaw.info',
4039                 '.uldkxuiw.info',
4040                 '.is7c6w4.info',
4041                 '.ivuddhdk.info',
4042                 '.jgfndjem.info',
4043                 '.jgmdlek.info',
4044                 '.jkrnvmpad.info',
4045                 '.jqujn.info',
4046                 '.jvgmmba.info',
4047                 '.kbaur.info',
4048                 '.kgjindptv.info',
4049                 '.kleo7s9.info',
4050                 '.lezfgam.info',
4051                 '.lfaasy.info',
4052                 '.ljpdjki.info',
4053                 '.lmnpis.info',
4054                 '.lpzcu2f.info',
4055                 '.lrptn.info',
4056                 '.lursqt.info',
4057                 '.mgkabviil.info',
4058                 '.mhtknjyt.info',
4059                 '.mksuuku.info',
4060                 '.mkyky.info',
4061                 '.mloaisn.com',
4062                 '.mlsiknd.info',
4063                 '.mthqz.info',
4064                 '.nnooq.info',
4065                 '.nohhylvc.info',
4066                 '.nuprndsye.info',
4067                 '.nsoelam.info',
4068                 '.nykobczv.info',
4069                 '.nzuhli.info',
4070                 '.odyqzgylr.info',
4071                 '.oidiau.info',
4072                 '.oitzkw.info',
4073                 '.okdmrpz.info',
4074                 '.ooinziti.info',
4075                 '.ortqr.info',
4076                 '.osmkpnekv.info',
4077                 '.ozkzfih.info',
4078                 '.p3ix8wc.com',
4079                 '.piwyt.info',
4080                 '.pfkijrm.info',
4081                 '.pjktcragi.info',
4082                 '.pleoz.info',
4083                 '.plvqm73.info',
4084                 '.pqyrem.info',
4085                 '.qipgqd.info',
4086                 '.qlewixu.com',
4087                 '.qmlskme.info',
4088                 '.qtuff.info',
4089                 '.quoga.info',
4090                 '.quqz.info',
4091                 '.qzxuw.info',
4092                 '.rcaidegp.info',
4093                 '.rlkmdi.info',
4094                 '.rnsoiov.info',
4095                 '.rnwlams.info',
4096                 '.rprgkgqld.info',
4097                 '.rubqvxrn.info',
4098                 '.spqxstl.info',
4099                 '.syckoqjql.info',
4100                 '.tbirb.info',
4101                 '.thalc34.info',
4102                 '.tiabq.info',
4103                 '.tszzpjr.info',
4104                 '.tyjdyn.info',
4105                 '.twgugpns.info',
4106                 '.uaezrqp.info',
4107                 '.udlkasu.info',
4108                 '.uejncyf.info',
4109                 '.ukvflb.info',
4110                 '.ugsuv.info',
4111                 '.ukhgpcp.info',
4112                 '.urprzn.info',
4113                 '.uuhememkw.info',
4114                 '.yalc7en.info',
4115                 '.ybuid.info',
4116                 '.yhdkgfob.info',
4117                 '.ymenq.info',
4118                 '.ynlyb.info',
4119                 '.vieatlubk.info',
4120                 '.vltcaho.info',
4121                 '.wlamsiek.info',
4122                 '.wlerp.info',
4123                 '.wlmtshzi.info',
4124                 '.wmlkams.info',
4125                 '.wprqd.info',
4126                 '.wpyspszi.info',
4127                 '.xdscc.info',
4128                 '.xdvy.info',
4129                 '.xeypku.info',
4130                 '.xsrxh.info',
4131                 '.xwjyrpfe.info',
4132                 '.yxcqw.info',
4133                 '.zhbktrh.info',
4134                 '.zspepn.info',
4135                 '.zsxtz.info',
4136         ),
4137         'survi at poczta.fm and smiley' => array(
4138                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
4139                 '.ppert.info',
4140                 '.pperta.info',
4141                 '.pperts.info',
4142                 '.pprtuis.info',
4143                 '.13iuey.info',         // ":>"
4144                 '.13jkhs.info',
4145                 '.13lksa.info',
4146                 '.13rxtx.info',
4147                 '.13slkd.info',
4148                 '.13zaer.info',
4149         ),
4150         'admin at esemeski.com' => array(       // by Jan Kalka
4151                 '.kxils.info',
4152                 '.kuaph.info',
4153                 '.lncdc.info',
4154                 '.lsqpd.info',
4155                 '.mczed.info',
4156                 '.npous.info',
4157                 '.obgju.info',
4158         ),
4159         'LiquidNetLimited.com' => array(
4160                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
4161
4162                 // FateBack.com related
4163                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
4164                 '.bebto.com',
4165                 '.fateback.com',
4166                 '.undonet.com',
4167                 '.yoll.net',
4168
4169                 // 50webs.com                   // 64.72.112.10
4170                 // dns2.50webs.com              // 64.72.112.11
4171                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
4172                 // dns2.freehostia.com  // 64.72.112.13
4173                 // serv3.freehostia.com // 64.72.112.14
4174                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
4175                 // mail.50webs.com              // 64.72.112.26
4176                 // supremecenter41.com  // 64.72.112.52
4177                 // 50webs2.50webs.com   // 64.72.112.89
4178                 // supremecenter39.com  // 64.72.112.103
4179
4180                 // by LiquidNet Ltd. (support at propersupport.com)
4181                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
4182                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
4183                         'duoservers.com',               // 216.65.1.130
4184
4185                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
4186         ),
4187         'domains at agava.com' => array(
4188                 '.h18.ru',
4189                 '.hut1.ru',
4190         ),
4191         'wlmx009 at hotmail.com' => array(
4192                 '.123lineage.com',
4193                 '.ff11-info.com',
4194                 '.lastlineage.com',
4195                 '.lineage2-ol.com',
4196                 '.lineage2006.com',
4197                 '.lineagefirst.com',
4198         ),
4199         'Zettahost.com' => array(
4200                 '.atspace.biz',         // sales at zettahost.com
4201                 '.atspace.com',         // abuse at zettahost.com
4202                 '.atspace.name',        // NS atspace.com
4203                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
4204                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
4205         ),
4206         'hlq9814 at 163.com' => array(
4207                 '.kotonohax.com',               // by ling bao
4208                 '.ragnarox.mobi',               // by lin bao, *.exe download
4209                 '.rokonline-jp.com',    // by hang long
4210         ),
4211         '77ch.jp' => array(
4212                 '.77ch.jp',
4213                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
4214         ),
4215         'serchportal at mail.ru' => array(      // by Namu Adin
4216                 '.43fert.info',
4217                 '.belis.info',
4218                 '.bonu.info',
4219                 '.chelsite.info',
4220                 '.chparael.info',
4221                 '.cool9f.info',
4222                 '.dada2.info',
4223                 '.dorplanete.info',
4224                 '.dormonde.info',
4225                 '.dorprojet.info',
4226                 '.faciledor.info',
4227                 '.fastsearchgroup.info',
4228                 '.gerta0.info',
4229                 '.getse.info',
4230                 '.gopvl.info',
4231                 '.knopki.info',
4232                 '.propidor.info',
4233                 '.quicksearchnet.info',
4234                 '.ret5.info',
4235                 '.slimfastsearch.info',
4236                 '.virtualpvl.info',
4237                 '.vpvla.info',
4238                 '.xjdor.info',
4239                 '.zhopki.info',
4240         ),
4241         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
4242                 '*.444mb.com',          // Free hosting
4243                 'urlnip.com',           // Redirection
4244         ),
4245         'WWW.RU' => array(              // by Angela (abuse at www.ru)
4246                 '.1fasttimesatnau.info',
4247                 '.1freecybersex.info',
4248                 '.1freexxxcomics.info',
4249                 '.1fuckingmywife.info',
4250                 '.1pornpreview.info',
4251                 'www.ru',                                       // by (service at demos.ru), redirection
4252         ),
4253         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
4254                 '.adultschat.info',
4255                 '.livecamonline.info',
4256                 '.webcam4u.info',
4257                 '.younghot.info',
4258         ),
4259         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
4260                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
4261
4262                 // 209.51.196.242
4263                 '.22web.net',
4264                 '.2kool4u.net',
4265                 '.9skul.com',
4266                 '.alojalo.info',
4267                 '.byet.net',
4268                 '.byethost2.com',
4269                 '.byethost3.com',
4270                 '.byethost4.com',
4271                 '.byethost5.com',
4272                 '.byethost6.com',
4273                 '.byethost7.com',
4274                 '.byethost8.com',
4275                 '.byethost9.com',
4276                 '.byethost10.com',
4277                 '.byethost11.com',
4278                 '.byethost12.com',
4279                 '.byethost13.com',
4280                 '.byethost14.com',
4281                 '.byethost15.com',
4282                 '.byethost16.com',
4283                 '.byethost17.com',
4284                 '.byethost18.com',
4285                 '.headshothost.net',
4286                 '.hostwq.net',
4287                 '.mega-file.net',
4288                 '.truefreehost.com',
4289
4290                 '.ifastnet.com',        // 209.51.196.243
4291
4292                 // 209.190.16.82(mx1.byet.org)
4293                 '.1sthost.org',
4294                 '.4sql.net',
4295                 '.byet.org',
4296                 '.hyperphp.com',
4297                 '.kwikphp.com',
4298                 '.my-php.net',
4299                 '.my-place.us',
4300                 '.my-webs.org',
4301                 '.netfast.org',
4302                 '.php0h.com',
4303                 '.php1h.com',
4304                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
4305                 '.phpnet.us',
4306                 '.prohosts.org',
4307                 '.pro-php.org',
4308                 '.prophp.org',
4309                 '.sprinterweb.net',
4310                 '.swiftphp.com',
4311                 '.xlphp.net',
4312
4313                 // 209.190.16.83(mx2.byet.org)
4314                 '.instant-wiki.net',
4315
4316                 // 209.190.16.84(mx3.byet.org)
4317
4318                 // 209.190.16.85(mx4.byet.org)
4319                 '.instant-blog.net',
4320                 '.instant-forum.net',
4321
4322                 '.byethost.com',                        // 209.190.18.138
4323         ),
4324         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
4325                 '.analmoviesite.info',
4326                 '.bestgirlssex.info',
4327                 '.boxvagina.info',
4328                 '.cyberlivegirls.info',
4329                 '.hotredgirls.info',
4330                 '.forsexlove.info',
4331                 '.hotnudezone.info',
4332                 '.hotredpussy.info',
4333                 '.lesbians-live.info',
4334                 '.lesbians-on-cam.info',
4335                 '.onlinegirlssite.info',
4336                 '.sexloveonline.info',
4337                 '.teensexcard.info',
4338                 '.teensexdirect.info',
4339                 '.topnudesite.info',
4340                 '.vaginafree.info',
4341                 '.webcam-show.info',
4342                 '.webcamshow.info',
4343                 '.youngsexchat.info',
4344                 '.yourcumshot.info',
4345         ),
4346         'stocking.club at gmail.com' => array(
4347                 '.adulthotmodels.com',          // by David Zajwzran
4348                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
4349                 '.cash-call.info',                      // by David Theissen
4350                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
4351                 '.cheap-online-viagra.info',    // by David Theissen
4352                 '.drugcleansing.net',           // by David Zajwzran
4353                 '.men-health-zone.com',         // by David Theissen
4354                 '.purchase-viagra.info',        // by David Theissen
4355                 '.realdrunkengirls.biz',        // by David Theissen
4356                 '.sextoyslife.com',                     // by David Zajwzran
4357                 '.sexysubjects.info',           // by David Zajwzran
4358                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
4359                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
4360                 '.travelcardsite.info',         // by David Theissen
4361         ),
4362         'lustiq at p5com.com' => array(
4363                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
4364                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
4365         ),
4366         'web at 6jy.com' => array(
4367                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
4368                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
4369         ),
4370         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
4371                 '.auto-fgen.info',
4372                 '.fast-marketing.info',
4373                 '.from-usa.info',
4374                 '.generic-pharm.info',
4375                 '.pharm-directory.info',
4376                 '.popular-people.info',
4377                 '.safe-health.info',
4378                 '.star-celebrities.info',
4379                 '.super-home-biz.info',
4380                 '.top5-auto.info',
4381                 '.top5-cars.info',
4382                 '.vip-furniture.info',
4383                 '.vip-pc.info',
4384                 '.vip-pets.info',
4385         ),
4386         'abuse at search-store.org' => array(
4387                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
4388         ),
4389         'Leading Edge Marketing Inc.' => array(
4390                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
4391                 '.abemedical.com',
4392                 '.attractwomennow.com',
4393                 '.bettersexmall.com',
4394                 '.buymaxoderm.com',
4395                 '.buyvprx.com',
4396                 '.genf20.com',
4397                 '.infinityhealthnews.com',
4398                 '.istnewsletter.com',
4399                 '.leadingedgecash.com',
4400                 '.leadingedgeherbals.com',
4401                 '.leadingedgevipsonly.com',
4402                 '.lecash.com',
4403                 '.leminfo.com',
4404                 '.proextendersystem.com',
4405                 '.provestra.com',
4406                 '.semenax.com',
4407                 '.shavenomore.com',
4408                 '.theedgenewsletter.com',
4409                 '.vigorelle.com',
4410                 '.vigrx.com',
4411                 '.vigrxplus.com',
4412                 '.wbstnewsletter.com',
4413         ),
4414         'clickx at bk.ru' => array(     // by Alexey Enrertov
4415                 '.coolget*.info' =>
4416                         '#^(?:.*\.)?' . 'coolget' .
4417                         '(?:bus|find|news|php|place|post|srch)' .
4418                         '\.info$#',
4419                 '.coolgirl*.info' =>
4420                         '#^(?:.*\.)?' . 'coolgirl' .
4421                         '(?:apple|fish|search)' .
4422                         '\.info$#',
4423                 '.coolmeet*.info' =>
4424                         '#^(?:.*\.)?' . 'coolmeet' .
4425                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
4426                         '\.info$#',
4427                 '.cool**.info' =>
4428                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
4429                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4430                         '\.info$#',
4431                 '.freseasy*.info' =>
4432                         '#^(?:.*\.)?' . 'freseasy' .
4433                         '(?:apple|click|find|fish|post|search)' .
4434                         '\.info$#',
4435                 '.fres**.info' =>
4436                         '#^(?:.*\.)?' .
4437                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
4438                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
4439                         '\.info$#',
4440                         // These are not found yet:
4441                         // fresgirlsrch.info
4442                         // fresadultapple.info
4443                         // fresadultclick.info
4444                         // frestheplace.info
4445
4446                 // 66.232.113.44
4447                 '.nuhost.info',
4448                 '.susearch.info',
4449
4450                 // 66.232.126.74(hv94.steephost.com)
4451                 '.dilej.com',
4452                 '.fyvij.com',
4453                 '.howus.com',
4454                 '.jisyn.com',
4455                 '.kaxem.com',
4456                 '.mihug.com',
4457                 '.mobyb.com',
4458                 '.qidat.com',
4459                 '.qihek.com',
4460                 '.ryzic.com',
4461                 '.sasuv.com',
4462                 '.tuquh.com',
4463                 '.vehyq.com',
4464                 '.wezid.com',
4465                 '.wifuj.com',
4466                 '.xijyt.com',
4467                 '.zuqyn.com',
4468         ),
4469         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
4470                 '.hitsearching.info',
4471                 '.hugeamountdata.info',
4472                 '.megafasthost.info',
4473                 '.real-big-host.info',
4474                 '.search4freez.info',
4475                 '.yasech.info',
4476         ),
4477         'ice--man at mail.ru' => array(
4478                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
4479                 '.bestcreola.com',
4480                 '.crekatierra.com',
4481                 '.creolafire.com',
4482                 '.crolik.com',
4483                 '.croller.cn',
4484                 '.ecrmx.com',
4485                 '.eflashpoint.com',
4486                 '.exoticmed.com',
4487                 '.feelview.com',
4488                 '.greatexotic.com',
4489                 '.icrtx.com',
4490                 '.icyhip.com',
4491                 '.icyiceman.com',
4492                 '.icypopular.com',
4493                 '.iflashpoint.com',
4494                 '.justmdx.com',
4495                 '.klickerr.com',
4496                 '.klickerrworld.com',
4497                 '.kreolic.com',
4498                 '.margansitio.com',
4499                 '.margantierra.com',
4500                 '.mimargan.com',
4501                 '.oilkeys.com',
4502                 '.planetmdx.com',
4503                 '.thekeyse.com',
4504                 '.viewgreat.com',
4505                 '.yourcreola.com',
4506
4507                 // 69.46.23.48
4508                 '.crekadirecto.com',
4509                 '.getflashsite.com',
4510                 '.sucreka.com',
4511         ),
4512         'nijeoi at hotmai.com' => array(
4513                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
4514                 '.bowij.com',
4515                 '.bozib.com',
4516                 '.cavux.com',
4517                 '.dipov.com',
4518                 '.gumoz.com',
4519                 '.hakyb.com',
4520                 '.hehyv.com',
4521                 '.hepyt.com',
4522                 '.howoj.com',
4523                 '.jywaz.com',
4524                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
4525                 '.kyheq.com',
4526                 '.kyzad.com',
4527                 '.qicad.com',
4528                 '.qubyd.com',
4529                 '.mocyq.com',
4530                 '.muloq.com',
4531                 '.myxim.com',
4532                 '.nufyp.com',
4533                 '.waqog.com',
4534                 '.wyduc.com',
4535                 '.xefyv.com',
4536                 '.xomej.com',
4537                 '.xomip.com',
4538                 '.xykyl.com',
4539                 '.zakuw.com',
4540                 '.zeliw.com',
4541                 '.zimev.com',
4542                 '.zipif.com',
4543         ),
4544         'niichka at hotmail.com' => array(
4545                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
4546                 '.aerosearch.info',
4547                 '.freader.info',
4548                 '.info4searchz.info',
4549                 '.nice-host.info',
4550                 '.realyfast.info',
4551                 '.resuts.info',
4552         ),
4553         'porychik at hot.ee' => array(  // by Igor
4554                 '.tedstate.info',       // "Free Web Hosting"
4555                 '.giftsee.com',
4556         ),
4557         'aofa at vip.163.com' => array(
4558                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
4559                 '.5944.net',
4560         ),
4561         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
4562                 '.maxrentcar.info',
4563                 '.newsonyericsson.info',
4564                 '.pornositeworld.biz',
4565                 '.rentcarweb.info',
4566                 '.xxxdomainsex.biz',
4567         ),
4568         'kopper1970 at gmail.com' => array(
4569                 '.cardealerall.info',           // by Green
4570                 '.donatecarsales.info',         // by Sipil
4571                 '.ringtonewilly.info',          // by Sipil
4572                 '.travelstraveling.info',       // by Chinik
4573                 '.viagrabuyonline.org',         // by Sipil
4574                 '.viagraorderbuy.com',          // by Anatol
4575                 '.worldcuptourism.info',        // by Sipil
4576         ),
4577         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
4578                 '.globalinfoland.info',
4579                 '.goodlifesearch.info',
4580                 '.hotnetinfo.info',
4581                 '.hotpornmovies.org',
4582                 '.infopilot.info',
4583         ),
4584         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
4585                 '.bang-bro.org',
4586                 '.datinghost.info',
4587                 '.hello-craulers.info',
4588                 '.free-blog-host.info',
4589                 '.sucking-boobs.info',
4590         ),
4591         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
4592                 '.allcamsguide.info',
4593                 '.camerascams.info',
4594                 '.camerasera.info',
4595                 '.girlcamsworld.info',
4596                 '.hiddenlimocams.info',
4597                 '.redlivecams.info',
4598                 '.spycamsgear.info',
4599                 '.spycamssite.info',
4600                 '.supercamsusa.info',
4601                 '.thecamsnow.info',
4602         ),
4603         '87.242.116.81' => array(
4604                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
4605                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
4606                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
4607                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
4608                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
4609         ),
4610         '208.70.75.153' => array(
4611                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
4612                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
4613                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
4614                 '.cerc-on.info',
4615                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
4616                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4617                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
4618                 '.cerc-tr.info',
4619                 '.cerc-tw.info',
4620                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
4621                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
4622                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
4623                 '.cerc-on.org',         // by cerca-one at ya.ru
4624                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
4625                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
4626                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
4627                 '.cerc-tr.org',         // by cerca-one at ya.ru
4628                 '.cerc-tw.org',         // by cerca-one at ya.ru
4629                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
4630                 '.cerca-fo.info',
4631                 '.cerca-no.info',
4632                 '.cerca-on.info',
4633                 '.cerca-sv.info',
4634                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
4635                 '.cerca-te.info',
4636                 '.cerca-tr.info',
4637                 '.cerca-sx.org',
4638                 '.cerca-tr.org',        // orgitaly1 at ya.ru
4639                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
4640                 '.ricerca-fo.info',
4641                 '.ricerca-one.org',
4642                 '.ricerca-sv.org',
4643                 '.ricerca-sx.org',
4644                 '.ricerca-te.org',
4645                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
4646                 '.subit01.org',
4647                 '.subit02.org',
4648                 '.subit03.org',
4649                 '.subit04.org',
4650                 '.subit05.org',
4651                 '.subit06.org',
4652                 '.subit01.info',
4653                 '.subit02.info',
4654                 '.subit03.info',
4655                 '.subit04.info',
4656                 '.subit05.info',
4657                 '.subit06.info',
4658         ),
4659         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
4660                 '.5-base.com',
4661                 '.pharmacy-style.com',
4662         ),
4663         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
4664                 '.ista-2006.ru',
4665                 '.wefas.ru',
4666         ),
4667         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
4668                 '.tourismworldsite.info',
4669                 '.yourtourismtravel.info',
4670         ),
4671         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
4672                 '.easyfindcar.info',
4673                 '.siteinfosystems.info',
4674         ),
4675         'smesh1155 at gmail.com' => array(
4676                 '.hospitalforyou.info',                 // by Gimmi
4677                 '.thephentermineonline.info',   // by Kipola
4678         ),
4679         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
4680                 '.kiski.net.in',
4681                 '.pipki.org.in',
4682                 '.siski.co.in',
4683         ),
4684         'tiptronikmike at mail.com' => array(
4685                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
4686                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
4687                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
4688                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
4689                 //'.i0sex.info',                // Michael
4690                 //'.i1sex.info',                // Michael
4691                 //'.i2sex.info',                // Martin
4692                 //'.i3sex.info',                // Martin
4693                 //'.i4sex.info',                // Adulterra
4694                 //'.i5sex.info',                // Adulterra
4695                 //[irvyz]6sex.info not found
4696                 '.i8sex.info',                  // by Martin
4697         ),
4698         'skuarlytronald at mail.com' => array(
4699                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
4700                 '.girlsgoingmad.info',          // 64.27.13.120
4701                 '.girlsgonewildside.info',      // 64.27.13.120
4702         ),
4703         '66.232.109.250' => array(
4704                 '.1626pornporno.info',
4705                 '.1851pornporno.info',
4706                 '.1876pornporno.info',
4707                 '.476pornporno.info',
4708         ),
4709         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
4710                 '.compactxxx.com',
4711                 '.eadulthost.com',
4712                 '.eadultview.com',
4713                 '.eroticpool.net',
4714                 '.ipornservice.com',
4715                 '.liveadulthost.com',
4716                 '.nudepal.com',
4717                 '.sweetservers.com',
4718         ),
4719         'support at orgija.org' => array(
4720                 '.assfuckporn.org',
4721                 '.dosugmos.org',
4722                 '.fuckporn.org',
4723                 '.girlsdosug.org',
4724                 '.girlsporno.org',
4725                 '.moscowintim.org',
4726                 '.pornass.org',
4727                 '.pornopussy.org',
4728                 '.progirlsporn.org',
4729                 '.pussypornogirls.org',
4730         ),
4731         '125.65.112.93' => array(
4732                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
4733                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
4734         ),
4735         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
4736                 '.beta-google.com',
4737                 '.tv-reklama.info',
4738                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
4739                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
4740         ),
4741         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
4742                 '.abobrinha.org',
4743                 '.aneurysmic.com',              // / not found
4744                 '.physcomp.org',                // / not found
4745                 '.seriedelcaribe2006.org',
4746                 '.refugeeyouthinamerica.com',
4747         ),
4748         'skip_20022 at yahoo.com' => array(
4749                 // 203.174.83.55
4750                 '.a28hosting.info',             // by Bill Jones
4751                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
4752                 '.besthentai06.org',    // by yakon
4753         ),
4754         'USFINE.com' => array(
4755                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
4756                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
4757         ),
4758         '68.178.211.57' => array(
4759                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
4760                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
4761         ),
4762         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
4763                 '.google-yahoo-msn.org',
4764                 '.expedia-travel.org',
4765         ),
4766         'admin at newestsearch.com' => array(   // by Gibrel Sitce
4767                 '.emr5ce.org',
4768                 '.wfe7nv.org',
4769                 '.xyr99yx.org',
4770         ),
4771         '203.171.230.39' => array(      // registrar bizcn.com, iframe + cursor
4772                 '.playonlinenc.com',
4773                 '.playboss-jp.com',
4774         ),
4775         'Digi-Rock.com' => array(
4776                 '.rom776.com',
4777                 // owner-organization: DIGIROCK, INC.
4778                 // owner-email: domain-contact at digi-rock.com
4779                 // with an external ad-and-JavaScript,
4780                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
4781                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
4782         ),
4783         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
4784                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
4785                 '.ipod-application.info',       // NO IP
4786                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
4787                 '.stonesex.info',                       // NO IP, was 74.50.97.136
4788         ),
4789         'germerts at yandex.ru' => array(       // by Sergey Marchenko (germerts at yandex.ru)
4790                 '.andatra.info',
4791                 '.banchitos.info',
4792                 '.batareya.info',
4793                 '.blevota.info',
4794                 '.broneslon.info',
4795                 '.gamadril.info',
4796                 '.gipotenuza.info',
4797                 '.govnosaklo.info',
4798         ),
4799         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
4800                 '.acronis-true-image.info',
4801                 '.calcio-xp.info',
4802                 '.cosanova.info',
4803                 '.cose-rx.info',
4804                 '.dictip.info',
4805                 '.findig.info',
4806                 '.fotonow.info',
4807                 '.lavoro-tip.info',
4808                 '.loan-homes.info',
4809                 '.mionovita.info',
4810                 '.mustv.info',
4811                 '.newsnaked.info',
4812                 '.online-tod.info',
4813                 '.opakit.info',
4814                 '.opanow.info',
4815                 '.opriton.info',
4816                 '.porta-bl.info',
4817                 '.refdif.info',
4818                 '.xzmovie.info',
4819         ),
4820         '84.252.148.120 etc' => array(
4821                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
4822                 '.planetavilton.info',  // 84.252.148.120
4823                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
4824         ),
4825         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
4826                 '.99jk.com',
4827                 '.99jk.com.cn',
4828                 '.99jk.cn',
4829         ),
4830         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
4831                 '.kliktop.biz',
4832                 '.kliktop.org',
4833                 '.pharmatop.us',
4834                 '.supertop.us',
4835                 '.supervaizer.info',
4836         ),
4837         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
4838                 '.freeamateursexx.info',        // 81.0.195.228
4839                 '.freeanalsexx.info',           // 217.11.233.97
4840                 '.freegaysexx.info',            // 81.0.195.228
4841         ),
4842         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
4843                 '.abbhi.info',
4844                 '.gayblogguide.biz',
4845                 '.huope.info',
4846                 '.thebdsmday.info',
4847                 '.zioprt.info',                 // 89.149.228.237
4848         ),
4849         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
4850                 '.boblisk.info',
4851                 '.factyri.info',
4852                 '.jorge1.info',
4853         ),
4854         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
4855                 '.bestmindstorm.org',
4856                 '.redstoreonline.org',
4857         ),
4858         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
4859                 '.8e8ae.net',
4860                 '.c-cock.com',
4861                 '.fa59eaf.com',
4862                 '.set-place.net',
4863                 '.sex-beauty.net',
4864         ),
4865         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
4866                 '.tomdir.info',
4867                 '.tomdirdirect.info',
4868                 '.tomdirworld.info',
4869                 '.treton.info',
4870                 '.trefas.info',
4871                 '.tretonmondo.info',
4872                 '.unefout.info',
4873                 '.unefoutprojet.info',
4874                 '.unitfree.info',
4875                 '.vilret.info',
4876                 '.vilttown.info',
4877                 '.votrefout.info',
4878                 '.warmfind.info',
4879                 '.warptop.info',
4880                 '.wildtram.info',
4881                 '.xofind.info',
4882                 '.xopdiscover.info',
4883                 '.xopfind.info',
4884                 '.xoplocate.info',
4885                 '.xopseek.info',
4886                 '.xpfirst.info',
4887                 '.xphighest.info',
4888                 '.xptop.info',
4889         ),
4890         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
4891                 '.myviagrasite.com',    // 80.74.153.2
4892                 '.thecanadianmeds.com', // 80.74.153.17
4893         ),
4894         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
4895                 '.bigemot.com',                         // 217.11.233.34, / not found
4896                 '.espharmacy.com',                      // 217.11.233.34
4897                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
4898                 '.ringtonecooler.com',          // 217.11.233.34
4899         ),
4900         'dfym at dfym.cn' => array(     // by chen jinian (dfym at dfym.cn)
4901                 '.okwit.com',           // 220.166.64.44
4902                 '.sakerver.com',        // 220.166.64.194
4903                 '.motewiki.net',        // 220.166.64.194
4904         ),
4905         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
4906                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
4907                 '.lookmedicine.info',           // 206.161.205.22
4908                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
4909                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
4910                 '.worldsitesearch.info',        // 209.8.40.59
4911         ),
4912         'lee.seery at gmail.com' => array(
4913                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
4914                 '.lingvol.com',         // 64.21.34.55
4915                 '.micevol.com',         // 64.21.34.55
4916                 '.heyhey.info',         // 64.21.34.55  by anonymous
4917         ),
4918         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
4919                 // 69-64-64-71.dedicated.abac.net
4920                 '.520-ard.info',
4921                 '.550bcards.info',
4922                 '.559-cads.info',
4923                 '.559caard.info',
4924                 '.565-caaard.info',
4925                 '.575cadr.info',
4926                 '.577cadrs.info',
4927                 '.590-acrds.info',
4928                 '.596-cadrs.info',
4929                 '.596caards.info',
4930                 '.596caaard.info',
4931                 '.asstablishingcads.info',
4932                 '.astablish-ard.info',
4933                 '.astablishcacrds.info',
4934                 '.begginers-acards.info',
4935                 '.begginersacrds.info',
4936                 '.beggingcaaard.info',
4937                 '.beginercacrds.info',
4938                 '.cacrdscreating.info',
4939                 '.caditbegging.info',
4940                 '.cadr-buildup.info',
4941                 '.cadr-establilsh.info',
4942                 '.cadrs-buildercredit.info',
4943                 '.cadrs570.info',
4944                 '.cads-565.info',
4945
4946                 // 69-64-64-113.dedicated.abac.net
4947                 '.interistacards.info',
4948                 '.intrust-ards.info',
4949                 '.intrustacrds.info',
4950                 '.lfixed-ard.info',
4951                 '.lowerate-ard.info',
4952                 '.lowpercentage-ard.info',
4953                 '.lowpercentageacrd.info',
4954         ),
4955         'acua at mail.ru' => array(
4956
4957                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
4958                 '.dns4babka.info',      // by acua at mail.ru
4959                         // by webmaster at dns4babka.info
4960                         '.credh.cn',
4961                         '.fucfv.cn',
4962                         '.gdxnk.cn',
4963                         '.sqrrt.cn',
4964                         '.ywtmd.cn',
4965                         '.kncqy.cn',    // by webmaster at allmyns.info
4966
4967                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
4968                 '.dedka2ns.info',       // by acua at mail.ru
4969                         // by webmaster at dedka2ns.info
4970                         '.ascpo.cn',
4971                         '.jgycr.cn',
4972                         '.nqdtt.cn',
4973                         '.oswde.cn',
4974                         '.qeyig.cn',
4975                         '.soqsx.cn',
4976                         '.ukncd.cn',
4977                         '.zijgb.cn',
4978
4979                 // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
4980                 '.dns4dedka.info',      // by acua at mail.ru
4981                         // by webmaster at dns4dedka.info
4982                         '.bcpnb.cn',
4983                         '.cfbpr.cn',
4984                         '.dnndb.cn',
4985                         '.ekwme.cn',
4986                         '.iutps.cn',
4987                         '.ryftj.cn',
4988                         '.vxqcb.cn',
4989                         '.zxvlr.cn',    // by webmaster at allmyns.info
4990
4991                 // by dig at dns4dedka.info
4992                 '.bdnge.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
4993                 '.dcdsu.cn',    // 217.20.112.102(*.internetserviceteam.com)
4994                 '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
4995                 '.frvdv.cn',    // 84.16.226.28(*snip*)
4996                 '.heulw.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
4997                 '.hissw.cn',    // 84.16.249.240(*snip*)
4998                 '.lwqjr.cn',    // 84.16.255.253(*snip*)
4999                 '.obwew.cn',    // 84.16.251.218(*.internetserviceteam.com)
5000                 '.otkiu.cn',    // 84.16.255.254(*.internetserviceteam.com)
5001                 '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
5002                 '.rgjcs.cn',    // 84.16.251.219(*.internetserviceteam.com)
5003                 '.rjskp.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
5004                 '.sokrp.cn',    // 84.16.226.217(*snip*)
5005                 '.ubtnp.cn',    // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de)
5006                 '.vdecc.cn',    // 84.16.226.29(*snip*)
5007                 '.vgkkc.cn',    // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
5008                 '.vqsmy.cn',    // 84.16.249.239(*snip*)
5009                 '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
5010                 '.xiuky.cn',    // 84.16.251.222(*snip*)
5011                 '.xrqcd.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
5012
5013                 // by la at dns4dedka.info
5014                 '.aeyzf.cn',    // 84.16.251.218(*snip*)
5015                 '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
5016                 '.bgslu.cn',    // 89.149.228.163(*snip*)
5017                 '.dxouw.cn',    // 84.16.255.253(*snip*)
5018                 '.ecsbe.cn',    // 84.16.251.218(*snip*)
5019                 '.eothy.cn',    // 84.16.249.241(*snip*)
5020                 '.epocy.cn',    // 84.16.251.220(*.internetserviceteam.com)
5021                 '.ewvjw.cn',    // 89.149.196.72(*snip*)
5022                 '.faacz.cn',    // 84.16.251.222(*snip*)
5023                 '.filun.cn',    // 89.149.196.72(*snip*)
5024                 '.fzdpk.cn',    // 84.16.249.239(*snip*)
5025                 '.hatyg.cn',    // 84.16.251.223(*snip*)
5026                 '.hmtqn.cn',    // 84.16.249.240(*snip*)
5027                 '.ibfte.cn',    // 89.149.196.19(*snip*)
5028                 '.jcaym.cn',    // 84.16.249.240(*snip*)
5029                 '.iqzaw.cn',    // 84.16.255.254(*snip*)
5030                 '.jclsf.cn',    // 84.16.249.240(*snip*)
5031                 '.jefdh.cn',    // 84.16.249.240(*snip*)
5032                 '.kchjh.cn',    // 84.16.251.219(*snip*)
5033                 '.krumo.cn',    // 84.16.226.217(*snip*)
5034                 '.lbava.cn',    // 217.20.112.102(*snip*)
5035                 '.mqrtw.cn',    // 84.16.226.29(*snip*)
5036                 '.njpgv.cn',    // 84.16.251.219(*snip*)
5037                 '.npovm.cn',    // 84.16.226.28(*snip*)
5038                 '.nyobt.cn',    // 89.149.196.19(*snip*)
5039                 '.ovxxt.cn',    // 84.16.251.223(*snip*)
5040                 '.owhwz.cn',    // 89.149.228.163(*snip*)
5041                 '.ozjyi.cn',    // 84.16.249.241(*snip*)
5042                 '.pfnzj.cn',    // 84.16.226.217(*snip*)
5043                 '.pixvf.cn',    // 84.16.255.254(*snip*)
5044                 '.qydph.cn',    // 89.149.228.163(*snip*)
5045                 '.rxens.cn',    // 89.149.196.72(*snip*)
5046                 '.sojbp.cn',    // 84.16.249.239(*snip*)
5047                 '.srths.cn',    // 84.16.251.222(*snip*)
5048                 '.tdytc.cn',    // 84.16.255.254(*snip*)
5049                 '.unquz.cn',    // 84.16.251.223(*snip*)
5050                 '.uwcns.cn',    // 89.149.196.19(*snip*)
5051                 '.vcbdm.cn',    // 84.16.251.220(*snip*)
5052                 '.wnmat.cn',    // 84.16.255.253(*snip*)
5053                 '.wttmr.cn',    // 84.16.226.29(*snip*)
5054                 '.xpwib.cn',    // 84.16.251.220(*snip*)
5055                 '.yrogt.cn',    // 84.16.249.239(*snip*)
5056
5057                 // by le at dns4dedka.info
5058                 '.goslw.cn',    // 84.16.251.220(*snip*)
5059                 '.hqbmh.cn',    // 84.16.251.223(*snip*)
5060                 '.iewik.cn',    // 84.16.255.254(*snip*)
5061                 '.jnkeh.cn',    // 89.149.228.163(*snip*)
5062                 '.pifyp.cn',    // 89.149.228.163(*snip*)
5063                 '.nohyl.cn',    // 89.149.196.72(*snip*)
5064                 '.nvzvx.cn',    // 84.16.255.254(*snip*)
5065                 '.uchoe.cn',    // 84.16.249.239(*snip*)
5066                 '.ujoyf.cn',    // 84.16.251.218(*snip*)
5067                 '.ulfqh.cn',    // 89.149.196.19(*snip*)
5068                 '.vxugv.cn',    // 84.16.251.223(*snip*)
5069
5070                 '.dbgti.cn',    // 84.16.249.240(*snip*)
5071                 '.oelmv.cn',    // 84.16.226.28(*snip*)
5072                 '.qniww.cn',    // 84.16.251.218(*snip*)
5073                 '.vtvyq.cn',    // 84.16.251.219(*snip*)
5074                 '.zqonm.cn',    // 84.16.249.241(*snip*)
5075
5076                 '.allmyns.info',        // 84.16.226.29 by acua at mail.ru, / forbidden
5077                         // by webmaster at allmyns.info
5078                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
5079                         '.ihpvy.cn',    // 84.16.226.28(*snip*)
5080                         '.lbtuo.cn',    // 84.16.255.254(*snip*)
5081                         '.liunc.cn',    // 84.16.249.241(*snip*)
5082                         '.rcyqr.cn',    // 84.16.226.217(*snip*)
5083                         '.rekth.cn',    // 89.149.196.19(*snip*)
5084                         '.riumh.cn',    // 84.16.226.28(*snip*)
5085                         '.zbtym.cn',    // 84.16.251.219(*snip*)
5086                         '.zjcgx.cn',    // 217.20.112.102(*snip*)
5087         ),
5088         'gilvcta sy jilbertsbram.com' => array(
5089                 '.dsfljkeilm1.cn',      //  206.53.51.126
5090                 '.dsfljkeilm2.cn',      //  206.53.51.126
5091                 '.dsfljkeilm3.cn',      // IP not allocated now
5092                 '.dsfljkeilm4.cn',      // IP not allocated now
5093                 '.dsfljkeilm5.cn',      // IP not allocated now
5094                 '.dsfljkeilm6.cn',      // IP not allocated now
5095                 '.dsfljkeilm7.cn',      // IP not allocated now
5096                 '.dsfljkeilm8.cn',      // IP not allocated now
5097                 '.dsfljkeilm9.cn',      // IP not allocated now
5098                 '.dsfljkeilm10.cn',     // IP not allocated now
5099         ),
5100         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
5101
5102                 // 69.64.82.76(*.dedicated.abac.net)
5103                 '.bruised-criedit.info',
5104                 '.bruised-crtedit.info',
5105                 '.bruised-czrd.info',
5106                 '.bruisedcreditcars.info',
5107                 '.bruisedcreitcard.info',
5108                 '.bruisedcreitd.info',
5109                 '.buliderscreadet.info',
5110                 '.cleaningup-cdit.info',
5111                 '.cleaningup-cedict.info',
5112                 '.cleaningup-cerdic.info',
5113                 '.cleanup-crrd.info',
5114
5115                 // 69.64.82.77(*.dedicated.abac.net)
5116                 '.bruised-crediot.info',
5117                 '.bruised-credtid.info',
5118                 '.bruisedcriet.info',
5119                 '.bruisedredit.info',
5120                 '.buliders-crdt.info',
5121                 '.buliders-cre4dit.info',
5122                 '.buliders-creadt.info',
5123                 '.buliders-credcards.info',
5124                 '.buliders-credictcard.info',
5125                 '.cleaningupccreditcards.info',
5126                 '.cleaningupcdedit.info',
5127                 '.cleaningupcedirt.info',
5128                 '.cleaningupceidt.info',
5129                 '.cleaningupcrasd.info',
5130                 '.cleaningupcreait.info',
5131
5132                 // 69.64.82.78(*.dedicated.abac.net)
5133                 '.bruised-cridet.info',
5134                 '.bruised-drecit.info',
5135                 '.bruised-reditcards.info',
5136                 '.bruisedcredikt.info',
5137                 '.bruisedcredith.info',
5138                 '.bruisedcredtid.info',
5139                 '.cleanup-criet.info',
5140                 '.cleanup-csrds.info',
5141                 '.cleanup-dards.info',
5142
5143                 // 69.64.82.79(*.dedicated.abac.net)
5144                 '.bruised-crediotcards.info',
5145                 '.bruised-creditcar.info',
5146                 '.bruised-creid.info',
5147                 '.bruised-creidtcard.info',
5148                 '.buliders-crdit.info',
5149                 '.buliders-creadet.info',
5150                 '.cleaningup-ceridt.info',
5151                 '.cleaningupcrecit.info',
5152                 '.cleaningupccritcard.info',
5153                 '.cleanupdredit.info',
5154                 '.cleanupredit.info',
5155         ),
5156         '.malwarealarm.com',
5157                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
5158                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
5159                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
5160         '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated)
5161         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated)
5162         'Inet-Traffic.com' => array(
5163                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
5164                 //'.dcomm.com',         // by D Communications Inc. S.A.
5165
5166                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
5167                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5168                 // ...
5169                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
5170                 // ...
5171                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
5172                 // ...
5173                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
5174                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
5175                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
5176                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
5177                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
5178                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
5179                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
5180                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
5181                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
5182                 // ...
5183                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
5184                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
5185                 // ...
5186                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
5187                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
5188                 // ...
5189                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
5190                 // ...
5191                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
5192                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
5193                 // ...
5194                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
5195         ),
5196         'andreyletov at yahoo.com' => array(
5197                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
5198                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
5199                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
5200         ),
5201         'alrusnac at hotmail.com' => array(
5202                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
5203                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
5204         ),
5205         '203.116.63.123' => array(
5206                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
5207                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
5208         ),
5209         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
5210                 '.autotowncar.cn',              // 69.73.146.184
5211                 '.badgirlhome.cn',              // 69.73.146.186
5212         ),
5213         'Wmp.co.jp' => array(
5214                 // 219.94.134.208, ns *.dns.ne.jp, adult
5215                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
5216                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
5217                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
5218         ),
5219         'Macherie.tv' => array(
5220                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
5221                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
5222                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
5223         ),
5224         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
5225                 '.yemine.info',
5226                 '.fr4f3ds.info',
5227         ),
5228         '66.232.112.175' => array(
5229                 // by abuse-here at inbox.ru
5230                 '.catybe.cn',
5231                 '.jytame.cn',
5232                 '.wygete.cn',
5233
5234                 // by bing-32 at ftunez.org
5235                 '.lasyxy.cn',
5236
5237                 // by entretov-86 at ftunez.org
5238                 '.faweji.cn',
5239                 '.xozuso.cn',
5240         ),
5241
5242         // C-2: Lonely domains (buddies not found yet)
5243         '.0721-4404.com',
5244         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
5245         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
5246         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
5247         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
5248         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
5249         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
5250         '.0annie.info',
5251         '.6i6.de',
5252         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
5253         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
5254         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
5255         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
5256         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
5257         '.allworlddirect.info', // Forbidden
5258         '.amoreitsex.com',
5259         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
5260         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
5261         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
5262         '.auto-car-cheap.org',
5263         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
5264         '.baurish.info',
5265         '.bestop.name',
5266         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
5267         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
5268         '.bestshopfinder.info',
5269         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
5270         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
5271         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
5272         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
5273         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
5274         '.catkittenmagazines.org',              // 87.118.97.117
5275         '.covertarena.co.uk',   // by Wayne Huxtable
5276         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
5277         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
5278         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
5279         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
5280         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
5281         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
5282         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
5283         '.easyshopusa.com',             // by riter (riter at nm.ru)
5284         '.edu.ph',                              // "philippine network foundation inc"
5285         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
5286         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
5287         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
5288         '.fastppc.info',                // by peter conor (fastppc at msn.com)
5289         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
5290         '*.filthserver.com',    // sales at onlinemarketingservices.biz
5291         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
5292         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
5293         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
5294         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
5295         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
5296         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
5297         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
5298         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
5299         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
5300         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
5301         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
5302         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
5303
5304         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
5305
5306         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
5307         '.gm-exchange.jp',              // 210.188.216.49 RMT
5308         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
5309         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
5310         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
5311         '.greatbestwestern.org',// by gao.wungao at gmail.com
5312         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
5313         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
5314         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
5315         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
5316         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
5317         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
5318         '.hostuju.cz',                  // ns banan.cz, banan.it
5319         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
5320         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
5321         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
5322         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
5323         '.infradoc.com',
5324         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
5325         '.ismarket.com',                // Google-hiding. intercage.com related IP
5326         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
5327         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
5328         '.itsexosit.net',
5329         '.itxxxit.net',
5330         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
5331         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
5332         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
5333         '.kingtools.de',
5334         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
5335         '.leucainfo.com',
5336         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
5337         '.lingage.com',                 // by huan bing (qbbs at xinoffice.com)
5338         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
5339         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
5340         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
5341         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
5342         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
5343         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
5344         '.megvideochatlive.info',       // Bad seo
5345         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
5346         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
5347         '.myfgj.info',                  // by Filus (softscript at gmail.com)
5348         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
5349         '.mxsupportmailer.com',
5350         '.next-moneylife.com',  // RMT
5351         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
5352         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
5353         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
5354         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
5355         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
5356         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
5357         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
5358         '.onlineviagra.de',
5359         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
5360         '.ozomw.info',
5361         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
5362         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
5363         '.perevozka777.ru',             // by witalik at gmail.com
5364         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
5365         '.pills-storage.com',   // by
5366         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
5367         '.popki.ind.in',                        // by Aleksandr Krasnik (supermaster at pisem.net)
5368         '.porkyhost.com',               // 79965 at whois.gkg.net
5369         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
5370         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
5371         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
5372         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
5373         '.prama.info',                  // by Juan.Kang at mytrashmail.com
5374         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
5375         '.qoclick.net',                 // by DMITRIY SOLDATENKO
5376         '.quality-teen-porn-photo.com', // by info at densa.info
5377         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
5378         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
5379         '.rigame.info',                 // by debra_jordan07 at yahoo.com
5380         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
5381         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
5382         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
5383         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
5384         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
5385         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
5386         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
5387         '.sexamoreit.com',
5388         '.sexforit.com',
5389         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
5390         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
5391         '.sirlook.com',
5392         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
5393         '.sepcn.info',                  // / not found
5394         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
5395         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
5396         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
5397         '.superverizonringtones.com',   // by joshua at list.ru
5398         '.thehostcity.com',             // Domains by Proxy
5399         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
5400         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
5401         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
5402         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
5403         '.topmeds10.com',
5404         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
5405         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
5406         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
5407         '.unctad.net',                  // by gfdogfd at lovespb.com
5408         '.vacant.org.uk',
5409         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
5410         '.virtualsystem.de',
5411         '.vdxhost.com',
5412         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
5413         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
5414         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
5415         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
5416         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
5417         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
5418         '.whoop.to',                    // RMT
5419         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
5420         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
5421         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
5422         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
5423         '.wwwna.info',                  // / 404 Not Found
5424         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
5425         '.xamorexxx.net',
5426         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
5427         '.xsessox.com',
5428         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
5429         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
5430         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
5431         '.zyguo.info',                  // ns globoxhost.net
5432         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
5433
5434         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
5435         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
5436         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
5437
5438         '.masserch.info',               // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com) "Free Web Hosting" by sqr at bk.ru, spam
5439         '.viagrabuycheap.info', // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...), ns *.advernsserver.com
5440
5441         '.chatwalker.com',              // 124.32.230.65
5442         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
5443         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
5444
5445         '.mncxvsm.info',                // 217.11.233.105, / blank
5446         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
5447
5448         // C-3: Not classifiable (information wanted)
5449         //
5450         // Something incoming to pukiwiki related sites
5451         'nana.co.il related' => array(
5452                 '.planetnana.co.il',
5453                 '.nana.co.il',
5454         ),
5455 );
5456
5457 // --------------------------------------------------
5458
5459 $blocklist['D'] = array(
5460         // D: Sample setting of
5461         // "Third party in good faith"s
5462         //
5463         // Hosts shown inside of the implanted contents,
5464         // not used via spam, but maybe useful to detect these contents
5465         //
5466         // 'RESERVED',
5467 );
5468
5469 // --------------------------------------------------
5470
5471 $blocklist['E'] = array(
5472         // E: Sample setting of
5473         // Promoters
5474         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
5475         //  Ads, Business promotions)
5476         //
5477         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
5478         // Sometimes they may promote each other
5479
5480         '15-Mail.com related' => array(
5481                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
5482                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5483                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
5484                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
5485                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
5486         ),
5487         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
5488         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
5489         'E-brainers.com related' => array(
5490                 // 202.212.14.101
5491                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
5492                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
5493                 '.my-tune.jp',                                  // by brainers Inc.
5494                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
5495                 '.weekle.jp',                                   // by brainers Inc.
5496
5497                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
5498                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
5499                 '.3minutes-marketing-club.com', // by Fujio
5500                 '.affiliate-vampire.com',               // by Masatoshi
5501                 '.article-site-power-package.com',      // by Masatoshi
5502                 '.audio-marketing-club.com',    // by Fujio
5503                 '.brainers-task-manager.com',   // by Masatoshi
5504                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
5505                 '.brainersbuzz.com',                    // by Masatoshi
5506                 '.den4renz-marketing-club.com', // by Fujio
5507                 '.english-contents-club.com',   // by Masatoshi
5508                 '.fly-in-ads-japan.com',                // by Fujio
5509                 '.free-resalerights-giveaway.com',      // by Fujio
5510                 '.freegiveawaysecret.com',              // by Masatoshi
5511                 '.guaranteedvisitorpro.com',    // by Masatoshi
5512                 '.havads-japan.com',                    // by Masatoshi
5513                 '.info-business123.com',                // by Fujio
5514                 '.instant-marketing-club.com',  // by Fujio
5515                 '.internetmarketinggorinjyu.com',       // by Masatoshi
5516                 '.marketing-force-japan.com',   // by Fujio
5517                 '.masatoshikobayashi.com',              // by Fujio
5518                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
5519                 '.replytomatt.com',                             // by Fujio
5520                 '.santa-deal.com',                              // by Fujio
5521                 '.santa-deal-summer.com',               // by Fujio
5522                 '.scratch-card-factory.com',    // by Masatoshi
5523                 '.script4you-japan.com',                // by Fujio
5524                 '.sell1000000dollarinjapan.com',// by Fujio
5525                 '.squeeze-page-secret.com',             // by Masatoshi
5526                 '.viral-blog-square.com',               // by Fujio
5527                 '.viralarticle.com',                    // by Fujio
5528                 '.wowhoken.com',                                // by Fujio
5529
5530                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
5531                 '.brainerstelevision.com',
5532                 '.demosite4you.com',
5533                 '.keywordcatcherpro.com',
5534                 '.script-marketing-club.com',
5535
5536                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
5537                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
5538                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
5539                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
5540                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
5541                 '.brainerscode.com',    // by akada
5542                 '.brainerslive.com',    // by domain
5543                 '.brainersreview.com',  // by domain
5544                 '.brainerstest.com',    // by akada
5545                 '.otosecret.com',               // by domain
5546                 '.ultimate-marketing-weapon.com',       // by akada
5547                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
5548                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
5549
5550                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
5551                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
5552         ),
5553         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
5554         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
5555         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
5556         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
5557         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
5558                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
5559                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
5560                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
5561
5562                 // Redirects and affiliates:
5563                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
5564                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
5565                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
5566                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
5567                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
5568                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
5569                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
5570                 //   ...
5571
5572                 // Other suggestions:
5573                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
5574
5575                 // Blog posting at the same time
5576                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
5577                 //   2007/06/13 e123.info/archives/76
5578                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
5579                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
5580                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
5581         ),
5582         'info at kobeweb.jp' => array(
5583                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
5584                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
5585                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
5586         ),
5587         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
5588         'Infocart.jp' => array(         // by wai at infocart.jp
5589                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
5590                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
5591                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
5592
5593                 //inetnum:      60.32.154.176 - 60.32.154.183
5594                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
5595                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
5596         ),
5597         'Info-sniper.com' => array(
5598                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
5599                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
5600                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
5601         ),
5602         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
5603         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
5604         'JunSuzuki.com' => array(       // e-brainers.com related
5605                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
5606                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
5607         ),
5608         'Natsukih.net' => array(
5609                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
5610                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
5611                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
5612                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
5613
5614                 // by info at natsukih.net
5615                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
5616                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
5617                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
5618                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
5619                 '.5muryoureport.com',   // 210.251.253.230
5620                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
5621                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
5622                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
5623         ),
5624         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
5625                 '.11kanji.com',         // 211.10.131.88
5626                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
5627                 '.point-park.com',      // 211.10.131.88
5628                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
5629         ),
5630         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
5631         'Rakuten.co.jp' => array(
5632                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
5633                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
5634         ),
5635         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
5636         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
5637         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
5638                 '.e123.info',
5639                 '.ialchemist.net',
5640                 '.j012.net',
5641                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
5642         ),
5643         'Viscose.jp' => array(
5644                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
5645                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
5646         ),
5647         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
5648 );
5649
5650 // --------------------------------------------------
5651
5652 $blocklist['Z'] = array(
5653         // Z: Yours
5654         //
5655         //'',
5656         //'',
5657         //'',
5658 );
5659
5660 ?>