spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.193 2009/01/04 03:35:24 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 //      'official/dev'  => FALSE,
  45 );
  46
  47 // 'list': Normal list
  48 $blocklist['list'] = array(
  49         'A-1'           => TRUE,        // General redirection services
  50         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  51         'B-1'           => TRUE,        // Web N.M spaces
  52         'B-2'           => TRUE,        // Jacked contents, something implanted
  53         'C'                     => TRUE,        // Exclusive spam domains
  54         //'D'           => TRUE,        // "Third party in good faith"s
  55         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  56         'Z'                     => TRUE,        // Yours
  57 );
  58
  59
  60 // --------------------------------------------------
  61 // Ignorance list
  62
  63 $blocklist['goodhost'] = array(
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65 );
  66
  67 $blocklist['official/dev'] = array(
  68         // PukiWiki-official/dev specific
  69         'pukiwiki.sourceforge.jp',
  70         'pukiwiki.org', // Temporary
  71         '.nyaa.tk',     // (Paid *.tk domain, Expire on 2008-05-19)
  72         '.wanwan.tk',   // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  73         'emasaka.blog65.fc2.com',       // Text-to-Impress converter
  74         'ifastnet.com',                         // Server hosting
  75         'threefortune.ifastnet.com',    // Server hosting
  76         'sirakaba.s21.xrea.com',                // Ratbeta, known as PukiWiki hacker
  77         'desperadoes.biz',                      // YEAR OF THE CAT, PukiWiki skin designer
  78 );
  79
  80
  81 // --------------------------------------------------
  82 // A: Sample setting of
  83 // Existing URI redirection or masking services
  84
  85 $blocklist['A-1'] = array(
  86
  87         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  88         // web-based proxy, DNS subdomains, etc
  89         // http://en.wikipedia.org/wiki/URL_redirection
  90         //
  91         // as known as cheap URI obscuring services today,
  92         // for spammers and affiliate users dazed by money.
  93         //
  94         //   Messages from forerunners:
  95         //     o-rly.net
  96         //       "A URL REDIRECTION SERVICE GONE BAD"
  97         //       "SORRY, TRULY"
  98         //     smcurl.com
  99         //       "Idiots were using smcURL to shrink URLs and
 100         //        send them out via spam."
 101         //     symy.jp
 102         //       "One or more users are using our URL redirect
 103         //        service for spam/botnet.
 104         //        So we closed this service."
 105         //     tinyclick.com
 106         //       "...stop offering it's free services because
 107         //        too many people were taking advantage of it"
 108         //     xjs.org
 109         //       "We have been forced to close this facility
 110         //        due to a minority of knuckle draggers who
 111         //        abused this web site."
 112         //
 113         // Please notify us about this list with reason:
 114         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 115         //
 116         '0nz.org',
 117         '0rz.tw',
 118         '0url.com',
 119         '0zed.info',
 120         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 121         '123.que.jp',
 122         '12url.org',
 123         '*.15h.com',
 124         '*.1dr.biz',
 125         '1K.pl' => array(
 126                 '*.1k.pl',
 127                 '*.5g.pl',
 128                 '*.orq.pl',
 129         ),
 130         '1nk.us',
 131         '1url.org',
 132         '1url.in',
 133         '1webspace.org',
 134         '2Ch.net' => array(
 135                 'ime.nu',
 136                 'ime.st',
 137         ),
 138         '2ch2.net',
 139         '2hop4.com',
 140         '2s.ca',
 141         '2site.com',
 142         '2url.org',
 143         '301url.com',
 144         '32url.com',
 145         '.3dg.de',
 146         '*.4bb.ru',
 147         'big5.51job.com',       ///gate/big5/
 148         '5jp.net',
 149         '.6url.com',
 150         '*.6x.to',
 151         '7ref.com',
 152         '82m.org',
 153         '*.8rf.com',
 154         '98.to',
 155         'abbrv.co.uk',
 156         '*.abwb.org',
 157         'acnw.de',
 158         'Active.ws' => array(
 159                 '*.321.cn',
 160                 '*.4x2.net',
 161                 'active.ws',
 162                 '*.better.ws',
 163                 '*.here.ws',
 164                 '*.mypiece.com',
 165                 '*.official.ws',
 166                 '*.ouch.ws',
 167                 '*.premium.ws',
 168                 '*.such.info',
 169                 '*.true.ws',
 170                 '*.visit.ws',
 171         ),
 172         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 173         'aifam.com',
 174         'All4WebMasters.pl' => array(
 175                 '*.ovp.pl',
 176                 '*.6-6-6.pl',
 177         ),
 178         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 179         'amoo.org',
 180         'web.archive.org',              ///web/2
 181         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 182                 'jmp2.net',
 183                 '2me.tw',
 184         ),
 185         'ataja.es',
 186         'ATBHost.com' => array(
 187                 '*.atbhost.com',
 188                 '*.bzhost.net',
 189         ),
 190         'atk.jp',
 191         'clearp.ath.cx',
 192         'athomebiz.com',
 193         'aukcje1.pl',
 194         'beam.to',
 195         '*.bebo.com',
 196         'beermapping.com',
 197         'besturl.in',
 198         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 199         'biglnk.com',
 200         'bingr.com',
 201         'bit.ly',
 202         'bittyurl.com',
 203         '*.bizz.cc',
 204         '*.blo.pl',
 205         '*.bo.pl',
 206         'briefurl.com',
 207         'brokenscript.com',
 208         'BucksoGen.com' => array(
 209                 '*.bucksogen.com',
 210                 '*.bulochka.org',
 211                 '*.korzhik.org',
 212                 '*.kovrizhka.org',
 213                 '*.pirozhok.org',
 214                 '*.plushka.org',
 215                 '*.pryanik.org',
 216                 '*.sushka.org',
 217         ),
 218         'budgethosts.org',
 219         'budu.com',                             // by peter.eder at imcworld.com
 220         '*.buzznet.com',
 221         '*.bydl.com',
 222         'C-O.IN' => array(
 223                 '*.c-o.cc',
 224                 '*.c-o.in',
 225                 '*.coz.in',
 226                 '*.cq.bz',
 227         ),
 228         'c64.ch',
 229         'c711.com',
 230         '*.cej.pl',
 231         'checkasite.net',
 232         'url.chefhost.com',
 233         '*.chicappa.jp',
 234         'chilicity.com',
 235         'big5.china.com',               ///gate/big5/
 236         'chopurl.com',
 237         'christopherleestreet.com',
 238         'cintcm.com',
 239         '*.cjb.net',
 240         'clipurl.com',
 241         '*.co.nr',
 242         'Comtech Enterprises ' => array(        // comteche.com
 243                 'tinyurl.name',
 244                 'tinyurl.us',
 245         ),
 246         'Cool168.com' => array(
 247                 '*.cool158.com',
 248                 '*.cool168.com',
 249                 '*.ko168.com',
 250                 '*.ko188.com',
 251         ),
 252         'Coolurl.de' => array(
 253                 'coolurl.de',
 254                 'dornenboy.de',
 255                 'eyeqweb.com',
 256                 'hardcore-porn.de',
 257                 'maschinen-bluten-nicht.de',
 258         ),
 259         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 260         'cutalink.com',
 261         '*.da.cx',
 262         '*.da.ru',
 263         'dae2.com',
 264         'dephine.org',
 265         'desiurl.com',
 266         'dhurl.com',
 267         'digbig.com',
 268         'Digipills.com' => array(
 269                 '*.digipills.com',
 270                 'minilien.com',
 271                 'tinylink.com',
 272         ),
 273         '*.discutbb.com',
 274         'DL.AM' => array(
 275                 '*.cx.la',
 276                 '*.dl.am',
 277         ),
 278         '*.dl.pl',
 279         '*.dmdns.com',
 280         'doiop.com',
 281         'drlinky.com',
 282         'durl.us',
 283         '*.dvdonly.ru',
 284         '*.dynu.ca',
 285         'dwarf.name',
 286         '*.eadf.com',
 287         'easyURL.net' => array(
 288                 '*.easyurl.net',
 289                 '.goshrink.com',
 290                 'ushrink.com',
 291         ),
 292         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 293                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 294                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 295                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 296                 //   "Keep continuing to seek originality and contribute it to local,
 297                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 298                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 299                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 300                 // I'm so much impressed of the situation around this imported one today.
 301         'elfurl.com',
 302         'eny.pl',
 303         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 304                 '.mywiitime.com',
 305                 '.surfindark.com',              // webmaster at etechfocus.com
 306                 '.surfinshade.com',
 307                 '.surfinshadow.com',
 308                 '.surfinwind.com',
 309                 '.topsecretlive.com',
 310         ),
 311         '*.eu.org',
 312         'F2B.be' => array(
 313                 '*.f2b.be',
 314                 '*.freakz.eu',
 315                 '*.n0.be',
 316                 '*.n3t.nl',
 317                 '*.short.be',
 318                 '*.ssr.be',
 319                 '*.tweaker.eu',
 320         ),
 321         '*.fancyurl.com',
 322         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 323                 'blue11.jp',
 324                 'fanznet.com',
 325                 'katou.in',
 326                 'mymap.in',
 327                 'saitou.in',
 328                 'satou.in',
 329                 'susan.in',
 330         ),
 331         '.fe.pl',                       // Redirection and subdomain
 332         'ffwd.to',
 333         'url.fibiger.org',
 334         'FireMe.to' => array(
 335                 'fireme.to',
 336                 'nextdoor.to',
 337                 'ontheway.to',
 338         ),
 339         'flingk.com',
 340         'flog.jp',                      // careless redirector and bbs
 341         'fm7.biz',
 342         'fnbi.jp',
 343         '*.fnbi.jp',
 344         'forgeturl.com',
 345         '*.free.bg',
 346         'Freeservers.com' => array(     // United Online Web Services, Inc.
 347                 '*.4mg.com',
 348                 '*.4t.com',
 349                 '*.8m.com',
 350                 '*.8m.net',
 351                 '*.8k.com',
 352                 '*.faithweb.com',
 353                 '*.freehosting.net',
 354                 '*.freeservers.com',
 355                 '*.gq.nu',
 356                 '*.htmlplanet.com',
 357                 '*.itgo.com',
 358                 '*.iwarp.com',
 359                 '*.s5.com',
 360                 '*.scriptmania.com',
 361                 '*.tvheaven.com',
 362         ),
 363         '*.freewebpages.com',
 364         'FreeWebServices.net' => array( // Host Department LLC
 365                 '*.about.gs',   // Dead?
 366                 '*.about.tc',
 367                 '*.about.vg',
 368                 '*.aboutus.gs',
 369                 '*.aboutus.ms',
 370                 '*.aboutus.tc',
 371                 '*.aboutus.vg',
 372                 '*.biografi.biz',
 373                 '*.biografi.info',
 374                 '*.biografi.org',
 375                 '*.biografi.us',
 376                 '*.datadiri.biz',
 377                 '*.datadiri.cc',
 378                 '*.datadiri.com',
 379                 '*.datadiri.info',
 380                 '*.datadiri.net',
 381                 '*.datadiri.org',
 382                 '*.datadiri.tv',
 383                 '*.datadiri.us',
 384                 '*.ecv.gs',
 385                 '*.ecv.ms',
 386                 '*.ecv.tc',
 387                 '*.ecv.vg',
 388                 '*.eprofile.us',
 389                 '*.go2net.ws',
 390                 '*.hits.io',
 391                 '*.hostingweb.us',
 392                 '*.hub.io',
 393                 '*.indo.bz',
 394                 '*.indo.cc',
 395                 '*.indo.gs',
 396                 '*.indo.ms',
 397                 '*.indo.tc',
 398                 '*.indo.vg',
 399                 '*.infinitehosting.net',
 400                 '*.infinites.net',
 401                 '*.lan.io',
 402                 '*.max.io',
 403                 '*.mycv.bz',
 404                 '*.mycv.nu',
 405                 '*.mycv.tv',
 406                 '*.myweb.io',
 407                 '*.ourprofile.biz',
 408                 '*.ourprofile.info',
 409                 '*.ourprofile.net',     // Dead?
 410                 '*.ourprofile.org',
 411                 '*.ourprofile.us',
 412                 '*.profil.bz',
 413                 '*.profil.cc',
 414                 '*.profil.cn',
 415                 '*.profil.gs',
 416                 '*.profil.in',
 417                 '*.profil.ms',
 418                 '*.profil.tc',
 419                 '*.profil.tv',
 420                 '*.profil.vg',  // ?
 421                 '*.site.io',
 422                 '*.wan.io',
 423                 '*.web-cam.ws',
 424                 '*.webs.io',
 425                 '*.zip.io',
 426         ),
 427         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 428         '*.fx.to',
 429         'fyad.org',
 430         'fype.com',
 431         'gentleurl.net',
 432         'Get2.us' => array(
 433                 '*.get2.us',
 434                 '*.hasballs.com',
 435                 '*.ismyidol.com',
 436                 '*.spotted.us',
 437                 '*.went2.us',
 438                 '*.wentto.us',
 439         ),
 440         'glinki.com',
 441         '*.globalredirect.com',
 442         'gnu.vu',
 443         '*.go.cc',
 444         //'Google.com' => array(
 445         //              google.com/translate_c\?u=(?:http://)?
 446         //),
 447         'goonlink.com',
 448         '.gourl.org',
 449         '.greatitem.com',
 450         'gzurl.com',
 451         'url.grillsportverein.de',
 452         'Harudake.net' => array('*.hyu.jp'),
 453         'Hattinger Linux User Group' => array('short.hatlug.de'),
 454         'Hexten.net' => array('lyxus.net'),
 455         'here.is',
 456         'HispaVista.com' => array(
 457                 '*.blogdiario.com',
 458                 '*.hispavista.com',
 459                 '.galeon.com',
 460         ),
 461         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 462                 '*.8l.pl',
 463                 '*.blg.pl',
 464                 '*.czytajto.pl',
 465                 '*.ryj.pl',
 466                 '*.xit.pl',
 467                 '*.xlc.pl',
 468                 '*.hk.pl',
 469                 '*.home.pl',
 470                 '*.of.pl',
 471         ),
 472         'hort.net',
 473         'free4.hostrocket.com',
 474         '*.hotindex.ru',
 475         'HotRedirect.com' => array(
 476                 '*.coolhere.com',
 477                 '*.homepagehere.com',
 478                 '*.hothere.com',
 479                 '*.mustbehere.com',
 480                 '*.onlyhere.net',
 481                 '*.pagehere.com',
 482                 '*.surfhere.net',
 483                 '*.zonehere.com',
 484         ),
 485         'hotshorturl.com',
 486         'hotwebcomics.com',     ///search_redirect.php
 487         'hurl.to',
 488         '*.hux.de',
 489         '*.i89.us',
 490         'iat.net',                      // 74.208.58.130 by Tony Carter
 491         'ibm.com',                      ///links (Correct it)
 492         '*.iceglow.com',
 493         'internetadresi.com' => array (
 494                 'rxbuycheap.com',
 495                 'rxcheapwestern.com',
 496         ),
 497         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 498         'Ideas para Nuevos Mercados SL' => array(
 499                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 500                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 501                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 502                 // by edgar bortolin (oscar at i4nm.com)
 503                 // by Edgar Bortolin  (oscar at i4nm.com)
 504                 // by oscar florez (oscar at i4nm.com)
 505                 // by Oscar Florez (oscar at red-es.com)
 506                 // by covadonga del valle (oscar at i4nm.com)
 507                 '*.ar.gd',
 508                 '*.ar.gs',      // ns *.nora.net
 509                 '*.ar.kz',      // by oscar
 510                 '*.ar.nu',      // by Edgar
 511                 '*.ar.tc',      // by oscar
 512                 '*.ar.vg',      // by oscar
 513                 '*.bo.kz',      // by oscar
 514                 '*.bo.nu',      // by covadonga
 515                 '*.bo.tc',      // by oscar
 516                 '*.bo.tf',      // by Oscar
 517                 '*.bo.vg',      // by oscar
 518                 '*.br.gd',
 519                 '*.br.gs',      // ns *.nora.net
 520                 '*.br.nu',      // by edgar
 521                 '*.br.vg',      // by oscar
 522                 '*.ca.gs',      // by oscar
 523                 '*.ca.kz',      // by oscar
 524                 '*.cl.gd',      // by oscar
 525                 '*.cl.kz',      // by oscar
 526                 '*.cl.nu',      // by edgar
 527                 '*.cl.tc',      // by oscar
 528                 '*.cl.tf',      // by Oscar
 529                 '*.cl.vg',      // by oscar
 530                 '*.col.nu',     // by Edgar
 531                 '*.cr.gs',      // ns *.nora.net
 532                 '*.cr.kz',      // by oscar
 533                 '*.cr.nu',      // by edgar
 534                 '*.cr.tc',      // by oscar
 535                 '*.cu.tc',      // by oscar
 536                 '*.do.kz',      // by oscar
 537                 '*.do.nu',      // by edgar
 538                 '*.ec.kz',      // by edgar
 539                 '*.ec.nu',      // by Edgar
 540                 '*.ec.tf',      // by Oscar
 541                 '*.es.kz',      // by oscar
 542                 '*.eu.kz',      // by oscar
 543                 '*.gt.gs',      // ns *.nora.net
 544                 '*.gt.tc',      // by oscar
 545                 '*.gt.tf',      // by Oscar
 546                 '*.gt.vg',      // by Oscar
 547                 '*.hn.gs',      // ns *.nora.net
 548                 '*.hn.tc',      // by oscar
 549                 '*.hn.tf',      // by Oscar
 550                 '*.hn.vg',      // by oscar
 551                 '*.mx.gd',
 552                 '*.mx.gs',      // ns *.nora.net
 553                 '*.mx.kz',      // by oscar
 554                 '*.mx.vg',      // by oscar
 555                 '*.ni.kz',      // by oscar
 556                 '*.pa.kz',      // by oscar
 557                 '*.pe.kz',      // by oscar
 558                 '*.pe.nu',      // by Edgar
 559                 '*.pr.kz',      // by oscar
 560                 '*.pr.nu',      // by edgar
 561                 '*.pt.gs',      // ns *.nora.net
 562                 '*.pt.kz',      // by edgar
 563                 '*.pt.nu',      // by edgar
 564                 '*.pt.tc',      // by oscar
 565                 '*.pt.tf',      // by Oscar
 566                 '*.py.gs',      // ns *.nora.net
 567                 '*.py.nu',      // by edgar
 568                 '*.py.tc',      // by oscar
 569                 '*.py.tf',      // by Oscar
 570                 '*.py.vg',      // by oscar
 571                 '*.sv.tc',      // by oscar
 572                 '*.usa.gs',     // ns *.nora.net
 573                 '*.uy.gs',      // ns *.nora.net
 574                 '*.uy.kz',      // by oscar
 575                 '*.uy.nu',      // by edgar
 576                 '*.uy.tc',      // by oscar
 577                 '*.uy.tf',      // by Oscar
 578                 '*.uy.vg',      // by oscar
 579                 '*.ve.gs',      // by oscar
 580                 '*.ve.tc',      // by oscar
 581                 '*.ve.tf',      // by Oscar
 582                 '*.ve.vg',      // by oscar
 583                 '*.ven.nu',     // by edgar
 584         ),
 585         'ie.to',
 586         'igoto.co.uk',
 587         'ilook.tw',
 588         'indianpad.com',                ///view/
 589         'iNetwork.co.il' => array(
 590                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 591                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 592                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 593         ),
 594         '*.infogami.com',
 595         'infotop.jp',
 596         'ipoo.org',
 597         'IR.pl' => array(
 598                 '*.aj.pl',
 599                 '*.aliasy.org',
 600                 '*.gu.pl',
 601                 '*.hu.pl',
 602                 '*.ir.pl',
 603                 '*.jo.pl',
 604                 '*.su.pl',
 605                 '*.td.pl',
 606                 '*.uk.pl',
 607                 '*.uy.pl',
 608                 '*.xa.pl',
 609                 '*.zj.pl',
 610         ),
 611         'irotator.com',
 612         '.iwebtool.com',
 613         'j6.bz',
 614         'jeeee.net',
 615         'Jaze Redirect Services' => array(
 616                 '*.arecool.net',
 617                 '*.iscool.net',
 618                 '*.isfun.net',
 619                 '*.tux.nu',
 620         ),
 621         '*.jed.pl',
 622         'JeremyJohnstone.com' => array('url.vg'),
 623         'jemurl.com',
 624         'jggj.net',
 625         'jpan.jp',
 626         'josh.nu',
 627         'kat.cc',
 628         'Kickme.to' => array(
 629                 '.1024bit.at',
 630                 '.128bit.at',
 631                 '.16bit.at',
 632                 '.256bit.at',
 633                 '.32bit.at',
 634                 '.512bit.at',
 635                 '.64bit.at',
 636                 '.8bit.at',
 637                 '.adores.it',
 638                 '.again.at',
 639                 '.allday.at',
 640                 '.alone.at',
 641                 '.altair.at',
 642                 '.american.at',
 643                 '.amiga500.at',
 644                 '.ammo.at',
 645                 '.amplifier.at',
 646                 '.amstrad.at',
 647                 '.anglican.at',
 648                 '.angry.at',
 649                 '.around.at',
 650                 '.arrange.at',
 651                 '.australian.at',
 652                 '.baptist.at',
 653                 '.basque.at',
 654                 '.battle.at',
 655                 '.bazooka.at',
 656                 '.berber.at',
 657                 '.blackhole.at',
 658                 '.booze.at',
 659                 '.bosnian.at',
 660                 '.brainiac.at',
 661                 '.brazilian.at',
 662                 '.bummer.at',
 663                 '.burn.at',
 664                 '.c-64.at',
 665                 '.catalonian.at',
 666                 '.catholic.at',
 667                 '.chapel.at',
 668                 '.chills.it',
 669                 '.christiandemocrats.at',
 670                 '.cname.at',
 671                 '.colors.at',
 672                 '.commodore.at',
 673                 '.commodore64.at',
 674                 '.communists.at',
 675                 '.conservatives.at',
 676                 '.conspiracy.at',
 677                 '.cooldude.at',
 678                 '.craves.it',
 679                 '.croatian.at',
 680                 '.cuteboy.at',
 681                 '.dancemix.at',
 682                 '.danceparty.at',
 683                 '.dances.it',
 684                 '.danish.at',
 685                 '.dealing.at',
 686                 '.deep.at',
 687                 '.democrats.at',
 688                 '.digs.it',
 689                 '.divxlinks.at',
 690                 '.divxmovies.at',
 691                 '.divxstuff.at',
 692                 '.dizzy.at',
 693                 '.does.it',
 694                 '.dork.at',
 695                 '.drives.it',
 696                 '.dutch.at',
 697                 '.dvdlinks.at',
 698                 '.dvdmovies.at',
 699                 '.dvdstuff.at',
 700                 '.emulators.at',
 701                 '.end.at',
 702                 '.english.at',
 703                 '.eniac.at',
 704                 '.error403.at',
 705                 '.error404.at',
 706                 '.evangelism.at',
 707                 '.exhibitionist.at',
 708                 '.faith.at',
 709                 '.fight.at',
 710                 '.finish.at',
 711                 '.finnish.at',
 712                 '.forward.at',
 713                 '.freebie.at',
 714                 '.freemp3.at',
 715                 '.french.at',
 716                 '.graduatejobs.at',
 717                 '.greenparty.at',
 718                 '.grunge.at',
 719                 '.hacked.at',
 720                 '.hang.at',
 721                 '.hangup.at',
 722                 '.has.it',
 723                 '.hide.at',
 724                 '.hindu.at',
 725                 '.htmlpage.at',
 726                 '.hungarian.at',
 727                 '.icelandic.at',
 728                 '.independents.at',
 729                 '.invisible.at',
 730                 '.is-chillin.it',
 731                 '.is-groovin.it',
 732                 '.japanese.at',
 733                 '.jive.at',
 734                 '.kickass.at',
 735                 '.kickme.to',
 736                 '.kindergarden.at',
 737                 '.knows.it',
 738                 '.kurd.at',
 739                 '.labour.at',
 740                 '.leech.at',
 741                 '.liberals.at',
 742                 '.linuxserver.at',
 743                 '.liqour.at',
 744                 '.lovez.it',
 745                 '.makes.it',
 746                 '.maxed.at',
 747                 '.means.it',
 748                 '.meltdown.at',
 749                 '.methodist.at',
 750                 '.microcomputers.at',
 751                 '.mingle.at',
 752                 '.mirror.at',
 753                 '.moan.at',
 754                 '.mormons.at',
 755                 '.musicmix.at',
 756                 '.nationalists.at',
 757                 '.needz.it',
 758                 '.nerds.at',
 759                 '.neuromancer.at',
 760                 '.newbie.at',
 761                 '.nicepage.at',
 762                 '.ninja.at',
 763                 '.norwegian.at',
 764                 '.ntserver.at',
 765                 '.owns.it',
 766                 '.paint.at',
 767                 '.palestinian.at',
 768                 '.phoneme.at',
 769                 '.phreaking.at',
 770                 '.playz.it',
 771                 '.polish.at',
 772                 '.popmusic.at',
 773                 '.portuguese.at',
 774                 '.powermac.at',
 775                 '.processor.at',
 776                 '.prospects.at',
 777                 '.protestant.at',
 778                 '.rapmusic.at',
 779                 '.raveparty.at',
 780                 '.reachme.at',
 781                 '.reads.it',
 782                 '.reboot.at',
 783                 '.relaxed.at',
 784                 '.republicans.at',
 785                 '.researcher.at',
 786                 '.reset.at',
 787                 '.resolve.at',
 788                 '.retrocomputers.at',
 789                 '.rockparty.at',
 790                 '.rocks.it',
 791                 '.rollover.at',
 792                 '.rough.at',
 793                 '.rules.it',
 794                 '.rumble.at',
 795                 '.russian.at',
 796                 '.says.it',
 797                 '.scared.at',
 798                 '.seikh.at',
 799                 '.serbian.at',
 800                 '.short.as',
 801                 '.shows.it',
 802                 '.silence.at',
 803                 '.simpler.at',
 804                 '.sinclair.at',
 805                 '.singz.it',
 806                 '.slowdown.at',
 807                 '.socialists.at',
 808                 '.spanish.at',
 809                 '.split.at',
 810                 '.stand.at',
 811                 '.stoned.at',
 812                 '.stumble.at',
 813                 '.supercomputer.at',
 814                 '.surfs.it',
 815                 '.swedish.at',
 816                 '.swims.it',
 817                 '.synagogue.at',
 818                 '.syntax.at',
 819                 '.syntaxerror.at',
 820                 '.techie.at',
 821                 '.temple.at',
 822                 '.thinkbig.at',
 823                 '.thirsty.at',
 824                 '.throw.at',
 825                 '.toplist.at',
 826                 '.trekkie.at',
 827                 '.trouble.at',
 828                 '.turkish.at',
 829                 '.unexplained.at',
 830                 '.unixserver.at',
 831                 '.vegetarian.at',
 832                 '.venture.at',
 833                 '.verycool.at',
 834                 '.vic-20.at',
 835                 '.viewing.at',
 836                 '.vintagecomputers.at',
 837                 '.virii.at',
 838                 '.vodka.at',
 839                 '.wannabe.at',
 840                 '.webpagedesign.at',
 841                 '.wheels.at',
 842                 '.whisper.at',
 843                 '.whiz.at',
 844                 '.wonderful.at',
 845                 '.zor.org',
 846                 '.zx80.at',
 847                 '.zx81.at',
 848                 '.zxspectrum.at',
 849         ),
 850         'kisaweb.com',
 851         'krotki.pl',
 852         'kuerzer.de',
 853         '*.kupisz.pl',
 854         'kuso.cc',
 855         '*.l8t.com',
 856         'lame.name',
 857         'lediga.st',
 858         'liencourt.com',
 859         'liteurl.com',
 860         'linkachi.com',
 861         'linkezy.com',
 862         'linkfrog.net',
 863         'linkook.com',
 864         'linkyme.com',
 865         'linkzip.net',
 866         'lispurl.com',
 867         'lnk.in',
 868         'makeashorterlink.com',
 869         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 870                 '*.3gp.fr',
 871                 '*.gtx.fr',
 872                 '*.ici.st',
 873                 '*.max.st',
 874                 '*.nn.cx',              // ns *.sivit.org
 875                 '*.site.cx',    // ns *.sivit.org
 876                 '*.user.fr',
 877                 '*.zxr.fr',
 878         ),
 879         'mcturl.com',
 880         'memurl.com',
 881         'Metamark.net' => array('xrl.us'),
 882         'midgeturl.com',
 883         'Minilink.org' => array('lnk.nu'),
 884         'miniurl.org',
 885         'miniurl.pl',
 886         'mixi.bz',
 887         'mo-v.jp',
 888         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 889                 '.com.md',
 890                 '.co.md',
 891                 '.org.md',
 892                 '.info.md',
 893                 '.host.md',
 894         ),
 895         'monster-submit.com',
 896         'mooo.jp',
 897         'murl.net',
 898         'myactivesurf.net',
 899         'mytinylink.com',
 900         'myurl.in',
 901         'myurl.com.tw',
 902         'nanoref.com',
 903         'Ne1.net' => array(
 904                 '*.ne1.net',
 905                 '*.r8.org',
 906         ),
 907         'Nashville Linux Users Group' => array('nlug.org'),
 908         'not2long.net',
 909         '*.notlong.com',
 910         '*.nuv.pl',
 911         'ofzo.be',
 912         '*.ontheinter.net',
 913         'ourl.org',
 914         'ov2.net',                              // frame
 915         '*.ozonez.com',
 916         'pagebang.com',
 917         'palurl.com',
 918         '*.paulding.net',
 919         'phpfaber.org',
 920         'pygmyurl.com',
 921         'pnope.com',
 922         'prettylink.com',
 923         'PROXID.net' => array(  // also xRelay.net
 924                 '*.asso.ws',
 925                 '*.corp.st',
 926                 '*.euro.tm',
 927                 '*.perso.tc',
 928                 '*.site.tc',
 929                 '*.societe.st',
 930         ),
 931         'qqa.jp',
 932         'qrl.jp',
 933         'qurl.net',
 934         'qwer.org',
 935         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 936         'radiobase.net',
 937         'Rakuten.co.jp' => array(
 938                 'pt.afl.rakuten.co.jp', ///c/
 939         ),
 940         'RedirectFree.com' => array(
 941                 '*.red.tc',
 942                 '*.redirectfree.com',
 943                 '*.sky.tc',
 944                 '*.the.vg',
 945         ),
 946         'redirme.com',
 947         'redirectme.to',
 948         'relic.net',
 949         'rezma.info',
 950         'rio.st',
 951         'rlink.org',
 952         '*.rmcinfo.fr',
 953         'roo.to',               // Seems closed, says "bye-bye"
 954         'rubyurl.com',
 955         '*.runboard.com',
 956         'runurl.com',
 957         's-url.net',
 958         's1u.net',
 959         'SG5.co.uk' => array(
 960                 '*.sg5.co.uk',
 961                 '*.sg5.info',
 962         ),
 963         'Shim.net' => array(
 964                 '*.0kn.com',
 965                 '*.2cd.net',
 966                 '*.freebiefinders.net',
 967                 '*.freegaming.org',
 968                 '*.op7.net',
 969                 '*.shim.net',
 970                 '*.v9z.com',
 971         ),
 972         'big5.shippingchina.com',
 973         'shorl.com',
 974         'shortenurl.com',
 975         'shorterlink.com',
 976         'shortlinks.co.uk',
 977         'shorttext.com',
 978         'shorturl-accessanalyzer.com',
 979         'Shortify.com' => array(
 980                 '74678439.com',
 981                 'shortify.com',
 982         ),
 983         'shortlink.co.uk',
 984         'ShortURL.com' => array(
 985                 '*.1sta.com',
 986                 '*.24ex.com',
 987                 '*.2fear.com',
 988                 '*.2fortune.com',
 989                 '*.2freedom.com',
 990                 '*.2hell.com',
 991                 '*.2savvy.com',
 992                 '*.2truth.com',
 993                 '*.2tunes.com',
 994                 '*.2ya.com',
 995                 '*.alturl.com',
 996                 '*.antiblog.com',
 997                 '*.bigbig.com',
 998                 '*.dealtap.com',
 999                 '*.ebored.com',
1000                 '*.echoz.com',
1001                 '*.filetap.com',
1002                 '*.funurl.com',
1003                 '*.headplug.com',
1004                 '*.hereweb.com',
1005                 '*.hitart.com',
1006                 '*.mirrorz.com',
1007                 '*.shorturl.com',
1008                 '*.spyw.com',
1009                 '*.vze.com',
1010         ),
1011         'shrinkalink.com',
1012         'shrinkthatlink.com',
1013         'shrinkurl.us',
1014         'shrt.org',
1015         'shrunkurl.com',
1016         'shurl.org',
1017         'shurl.net',
1018         'sid.to',
1019         'simurl.com',
1020         'sitefwd.com',
1021         'Sitelutions.com' => array(
1022                 '*.assexy.as',
1023                 '*.athersite.com',
1024                 '*.athissite.com',
1025                 '*.bestdeals.at',
1026                 '*.byinter.net',
1027                 '*.findhere.org',
1028                 '*.fw.nu',
1029                 '*.isgre.at',
1030                 '*.isthebe.st',
1031                 '*.kwik.to',
1032                 '*.lookin.at',
1033                 '*.lowestprices.at',
1034                 '*.onthenet.as',
1035                 '*.ontheweb.nu',
1036                 '*.pass.as',
1037                 '*.passingg.as',
1038                 '*.redirect.hm',
1039                 '*.rr.nu',
1040                 '*.ugly.as',
1041         ),
1042         '*.skracaj.pl',
1043         'skiltechurl.com',
1044         'skocz.pl',
1045         'slimurl.jp',
1046         'slink.in',
1047         'smallurl.eu',
1048         'smurl.name',
1049         'snipurl.com',
1050         'sp-nov.net',
1051         'splashblog.com',
1052         'spod.cx',
1053         '*.spydar.com',
1054         'Subdomain.gr' => array(
1055                 '*.p2p.gr',
1056                 '*.subdomain.gr',
1057         ),
1058         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1059         'surl.se',
1060         'surl.ws',
1061         'tdurl.com',
1062         'tighturl.com',
1063         'tiniuri.com',
1064         'tiny.cc',
1065         'tiny.pl',
1066         'tiny2go.com',
1067         'tinylink.eu',
1068         'tinylinkworld.com',
1069         'tinypic.com',
1070         'tinyr.us',
1071         'TinyURL.com' => array(
1072                 'tinyurl.com',
1073                 'preview.tinyurl.com',
1074                 'tinyurl.co.uk',
1075         ),
1076         'titlien.com',
1077         '*.tlg.pl',
1078         'tlurl.com',
1079         'link.toolbot.com',
1080         'tnij.org',
1081         'Tokelau ccTLD' => array('.tk'),
1082         'toila.net',
1083         '*.toolbot.com',
1084         '*.torontonian.com',
1085         'trimurl.com',
1086         //'ttu.cc',             // Seems closed
1087         'turl.jp',
1088         '*.tz4.com',
1089         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1090                 '*.1.to',
1091                 '*.4.to',
1092                 '*.5.to',
1093                 '*.82.to',
1094                 '*.s.to',
1095                 '*.u.to',
1096                 '*.ce.to',
1097                 '*.cz.to',
1098                 '*.if.to',
1099                 '*.it.to',
1100                 '*.kp.to',
1101                 '*.ne.to',
1102                 '*.ok.to',
1103                 '*.pc.to',
1104                 '*.tv.to',
1105                 '*.dd.to',
1106                 '*.ee.to',
1107                 '*.hh.to',
1108                 '*.kk.to',
1109                 '*.mm.to',
1110                 '*.qq.to',
1111                 '*.xx.to',
1112                 '*.zz.to',
1113                 '*.ivy.to',
1114                 '*.joa.to',
1115                 '*.ever.to',
1116                 '*.mini.to',
1117         ),
1118         'u-go.to',
1119         'uchinoko.in',
1120         'Ulimit.com' => array(
1121                 '*.be.tf',
1122                 '*.best.cd',
1123                 '*.bsd-fan.com',
1124                 '*.c0m.st',
1125                 '*.ca.tc',
1126                 '*.clan.st',
1127                 '*.com02.com',
1128                 '*.en.st',
1129                 '*.euro.st',
1130                 '*.fr.fm',
1131                 '*.fr.st',
1132                 '*.fr.vu',
1133                 '*.gr.st',
1134                 '*.ht.st',
1135                 '*.int.ms',
1136                 '*.it.st',
1137                 '*.java-fan.com',
1138                 '*.linux-fan.com',
1139                 '*.mac-fan.com',
1140                 '*.mp3.ms',
1141                 '*.qc.tc',
1142                 '*.sp.st',
1143                 '*.suisse.st',
1144                 '*.t2u.com',
1145                 '*.unixlover.com',
1146                 '*.zik.mu',
1147         ),
1148         'urltea.com',
1149         '*.uni.cc',
1150         'UNONIC.com' => array(
1151                 '*.at.tf',      // AlpenNIC
1152                 '*.bg.tf',
1153                 '*.ca.tf',
1154                 '*.ch.tf',      // AlpenNIC
1155                 '*.cz.tf',
1156                 '*.de.tf',      // AlpenNIC
1157                 '*.edu.tf',
1158                 '*.eu.tf',
1159                 '*.int.tf',
1160                 '*.net.tf',
1161                 '*.pl.tf',
1162                 '*.ru.tf',
1163                 '*.sg.tf',
1164                 '*.us.tf',
1165         ),
1166         'Up.pl' => array(
1167                 '.69.pl',                       // by nsk101869
1168                 '.crack.pl',            // by nsk101869
1169                 '.film.pl',                     // by sibr19002
1170                 '.h2o.pl',                      // by nsk101869
1171                 '.hostessy.pl',         // by nsk101869
1172                 '.komis.pl',            // by nsk101869
1173                 '.laski.pl',            // by nsk101869
1174                 '.modelki.pl',          // by nsk101869
1175                 '.muzyka.pl',           // by sibr19002
1176                 '.nastolatki.pl',       // by nsk101869
1177                 '.obuwie.pl',           // by nsk101869
1178                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1179                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1180                 '.sexchat.pl',          // by nsk101869
1181                 '.sexlive.pl',          // by nsk101869
1182                 '.tv.pl',                       // by nsk101869
1183                 '.up.pl',                       // by nsk101869
1184                 '.video.pl',            // by nsk101869
1185                 '.xp.pl',                       // nsk101869
1186         ),
1187         '*.uploadr.com',
1188         'url.ie',
1189         'url4.net',
1190         'url-c.com',
1191         'urlbee.com',
1192         'urlbounce.com',
1193         'urlcut.com',
1194         'urlcutter.com',
1195         'urlic.com',
1196         'urlin.it',
1197         'urlkick.com',
1198         'URLLogs.com' => array(
1199                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1200                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1201         ),
1202         '*.urlproxy.com',
1203         'urlser.com',
1204         'urlsnip.com',
1205         'urlzip.de',
1206         'urlx.org',
1207         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1208         'utun.jp',
1209         'uxxy.com',
1210         '*.v27.net',
1211         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1212                 '*.all.at',
1213                 '*.back.to',
1214                 '*.beam.at',
1215                 '*.been.at',
1216                 '*.bite.to',
1217                 '*.board.to',
1218                 '*.bounce.to',
1219                 '*.bowl.to',
1220                 '*.break.at',
1221                 '*.browse.to',
1222                 '*.change.to',
1223                 '*.chip.ms',
1224                 '*.connect.to',
1225                 '*.crash.to',
1226                 '*.cut.by',
1227                 '*.direct.at',
1228                 '*.dive.to',
1229                 '*.drink.to',
1230                 '*.drive.to',
1231                 '*.drop.to',
1232                 '*.easy.to',
1233                 '*.everything.at',
1234                 '*.fade.to',
1235                 '*.fanclub.ms',
1236                 '*.firstpage.de',
1237                 '*.fly.to',
1238                 '*.flying.to',
1239                 '*.fortunecity.co.uk',
1240                 '*.fortunecity.com',
1241                 '*.forward.to',
1242                 '*.fullspeed.to',
1243                 '*.fun.ms',
1244                 '*.gameday.de',
1245                 '*.germany.ms',
1246                 '*.get.to',
1247                 '*.getit.at',
1248                 '*.hard-ware.de',
1249                 '*.hello.to',
1250                 '*.hey.to',
1251                 '*.hop.to',
1252                 '*.how.to',
1253                 '*.hp.ms',
1254                 '*.jump.to',
1255                 '*.kiss.to',
1256                 '*.listen.to',
1257                 '*.mediasite.de',
1258                 '*.megapage.de',
1259                 '*.messages.to',
1260                 '*.mine.at',
1261                 '*.more.at',
1262                 '*.more.by',
1263                 '*.move.to',
1264                 '*.musicpage.de',
1265                 '*.mypage.org',
1266                 '*.mysite.de',
1267                 '*.nav.to',
1268                 '*.notrix.at',
1269                 '*.notrix.ch',
1270                 '*.notrix.de',
1271                 '*.notrix.net',
1272                 '*.on.to',
1273                 '*.page.to',
1274                 '*.pagina.de',
1275                 '*.played.by',
1276                 '*.playsite.de',
1277                 '*.privat.ms',
1278                 '*.quickly.to',
1279                 '*.redirect.to',
1280                 '*.rulestheweb.com',
1281                 '*.run.to',
1282                 '*.scroll.to',
1283                 '*.seite.ms',
1284                 '*.shortcut.to',
1285                 '*.skip.to snap.to',
1286                 '*.soft-ware.de',
1287                 '*.start.at',
1288                 '*.stick.by',
1289                 '*.surf.to',
1290                 '*.switch.to',
1291                 '*.talk.to',
1292                 '*.tip.nu',
1293                 '*.top.ms',
1294                 '*.transfer.to',
1295                 '*.travel.to',
1296                 '*.turn.to',
1297                 '*.vacations.to',
1298                 '*.videopage.de',
1299                 '*.virtualpage.de',
1300                 '*.w3.to',
1301                 '*.walk.to',
1302                 '*.warp9.to',
1303                 '*.window.to',
1304                 '*.yours.at',
1305                 '*.zap.to',
1306                 '*.zip.to',
1307         ),
1308         'VDirect.com' => array(
1309                 '*.emailme.net',
1310                 '*.getto.net',
1311                 '*.inetgames.com',
1312                 '*.netbounce.com',
1313                 '*.netbounce.net',
1314                 '*.oneaddress.net',
1315                 '*.snapto.net',
1316                 '*.vdirect.com',
1317                 '*.vdirect.net',
1318                 '*.webrally.net',
1319         ),
1320         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1321         'vgo2.com',
1322         'Voila.fr' => array('r.voila.fr'),      // Fix it
1323         'w3t.org',
1324         'wapurl.co.uk',
1325         'Wb.st' => array(
1326                 '*.team.st',
1327                 '*.wb.st',
1328         ),
1329         'wbkt.net',
1330         'WebAlias.com' => array(
1331                 '*.andmuchmore.com',
1332                 '*.browser.to',
1333                 '*.escape.to',
1334                 '*.fornovices.com',
1335                 '*.fun.to',
1336                 '*.got.to',
1337                 '*.hottestpix.com',
1338                 '*.imegastores.com',
1339                 '*.latest-info.com',
1340                 '*.learn.to',
1341                 '*.moviefever.com',
1342                 '*.mp3-archives.com',
1343                 '*.myprivateidaho.com',
1344                 '*.radpages.com',
1345                 '*.remember.to',
1346                 '*.resourcez.com',
1347                 '*.return.to',
1348                 '*.sail.to',
1349                 '*.sports-reports.com',
1350                 '*.stop.to',
1351                 '*.thrill.to',
1352                 '*.tophonors.com',
1353                 '*.uncutuncensored.com',
1354                 '*.up.to',
1355                 '*.veryweird.com',
1356                 '*.way.to',
1357                 '*.web-freebies.com',
1358                 '.webalias.com',
1359                 '*.webdare.com',
1360                 '*.xxx-posed.com',
1361         ),
1362         'webmasterwise.com',
1363         'witherst at hotmail.com' => array(     // by Tim Withers
1364                 '*.associates-program.com',
1365                 '*.casinogopher.com',
1366                 '*.ezpagez.com',
1367                 '*.vgfaqs.com',
1368         ),
1369         'wittylink.com',
1370         'wiz.sc',                       // tiny.cc related
1371         'X50.us' => array(
1372                 '*.i50.de',
1373                 '*.x50.us',
1374         ),
1375         'big5.xinhuanet.com',   ///gate/big5/
1376         'xhref.com',
1377         'Xn6.net' => array(
1378                 '*.9ax.net',
1379                 '*.xn6.net',
1380         ),
1381         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1382         '.y11.net',
1383         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1384                 '*.yesns.com',
1385                 '*.srv4u.net',
1386                 //blogne.com
1387         ),
1388         'yatuc.com',
1389         'yep.it',
1390         'yumlum.com',
1391         'yurel.com',
1392         'Z.la' => array(
1393                 'z.la',
1394                 't.z.la',
1395         ),
1396         'zaable.com',
1397         'zapurl.com',
1398         'zarr.co.uk',
1399         'zerourl.com',
1400         'ZeroWeb.org' => array(
1401                 '*.80t.com',
1402                 '*.firez.org',
1403                 '*.fizz.nu',
1404                 '*.ingame.org',
1405                 '*.irio.net',
1406                 '*.v33.org',
1407                 '*.zeroweb.org',
1408         ),
1409         'zhukcity.ru',
1410         'zippedurl.com',
1411         'zr5.us',
1412         '*.zs.pl',
1413         '*.zu5.net',
1414         'zuso.tw',
1415         '*.zwap.to',
1416 );
1417
1418 // --------------------------------------------------
1419
1420 $blocklist['A-2'] = array(
1421
1422         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1423         //
1424         //'*.dyndns.*', // Wildcard for dyndns
1425         //
1426         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1427         'ddns.ru' => array('*.bpa.nu'),
1428         'Dhs.org' => array(
1429                 '*.2y.net',
1430                 '*.dhs.org',
1431         ),
1432         '*.dnip.net',
1433         '*.dyndns.co.za',
1434         '*.dyndns.dk',
1435         '*.dyndns.nemox.net',
1436         'DyDNS.com' => array(
1437                 '*.ath.cx',
1438                 '*.dnsalias.org',
1439                 '*.dyndns.org',
1440                 '*.homeip.net',
1441                 '*.homelinux.net',
1442                 '*.mine.nu',
1443                 '*.shacknet.nu',
1444         ),
1445         '*.dtdns.net',                  // by jscott at sceiron.com
1446         '*.dynu.com',
1447         '*.dynup.net',
1448         '*.fdns.net',
1449         'J-Speed.net' => array(
1450                 '*.bne.jp',
1451                 '*.ii2.cc',
1452                 '*.jdyn.cc',
1453                 '*.jspeed.jp',
1454         ),
1455         '*.mydyn.de',
1456         '*.nerdcamp.net',
1457         'No-IP.com' => array(
1458                         '*.bounceme.net',
1459                         '*.hopto.org',
1460                         '*.myftp.biz',
1461                         '*.myftp.org',
1462                         '*.myvnc.com',
1463                         '*.no-ip.biz',
1464                         '*.no-ip.info',
1465                         '*.no-ip.org',
1466                         '*.redirectme.net',
1467                         '*.servebeer.com',
1468                         '*.serveblog.net',
1469                         '*.servecounterstrike.com',
1470                         '*.serveftp.com',
1471                         '*.servegame.com',
1472                         '*.servehalflife.com',
1473                         '*.servehttp.com',
1474                         '*.servemp3.com',
1475                         '*.servepics.com',
1476                         '*.servequake.com',
1477                         '*.sytes.net',
1478                         '*.zapto.org',
1479         ),
1480         '*.opendns.be',
1481         'Yi.org' => array(      // by dns at whyi.org
1482                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1483
1484                 // 72.55.129.46(redirect.yi.org)
1485                 '*.whyi.org',
1486                 '*.weedns.com',
1487         ),
1488         '*.zenno.info',
1489         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1490                         // and all non-recorded domains redirect to 'agoga.com' now
1491                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1492                         // http://agoga.com/aboutus.html
1493 );
1494
1495 // --------------------------------------------------
1496
1497 // B: Sample setting of:
1498 // Jacked (taken advantage of) and cleaning-less sites
1499 //
1500 // Please notify us about this list with reason:
1501 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1502
1503 $blocklist['B-1'] = array(
1504
1505         // B-1: Web N.M spaces (N > 0, M >= 0)
1506         //
1507         //   Messages from forerunners:
1508         //     activefreehost.com
1509         //       "We regret to inform you that ActiveFreeHost
1510         //        free hosting service has is now closed (as of
1511         //        September 18). We have been online for over
1512         //        two and half years, but have recently decided
1513         //        to take time for software improvement to fight
1514         //        with server abuse, Spam advertisement and
1515         //        fraud."
1516         //
1517         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1518         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1519         '*.007webpro.com',              // by richord at ientry.com
1520         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1521         '*.0buckhost.com',              // by tycho at e-lab.nl
1522         '0Catch.com related' => array(
1523                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1524
1525                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1526                 '*.100megsfree5.com',
1527
1528                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1529                 '*.100freemb.com',              // by Danny Ashworth
1530                 '*.easyfreehosting.com',
1531                 '*.exactpages.com',
1532                 '*.fcpages.com',
1533                 '*.wtcsites.com',
1534
1535                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1536                 '*.741.com',
1537                 '*.freecities.com',
1538                 '*.freesite.org',
1539                 '*.freewebpages.org',
1540                 '*.freewebsitehosting.com',
1541                 '*.jvl.com',
1542
1543                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1544                 '*.freespaceusa.com',
1545                 '*.usafreespace.com',
1546
1547                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1548                 '*.dex1.com',
1549                 '*.questh.com',
1550
1551                 // 209.63.57.10(*snip*), ns *.0catch.com
1552                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1553                 '*.012webpages.com',    // by support at 0catch.com
1554                 '*.150m.com',
1555                 '*.1sweethost.com',             // by whois at bluehost.com
1556                 '*.250m.com',                   // by jason at fahlman.net
1557                 '*.9cy.com',                    // by paulw0t at gmail.com
1558                 '*.angelcities.com',    // by cliff at eccentrix.com
1559                 '*.arcadepages.com',    // by admin at site-see.com
1560                 '*.e-host.ws',                  // by dns at jomax.net
1561                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1562                 '*.fw.bz',                              // by ben at kuehl.as
1563                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1564                 '*.g0g.net',                    // by domains at seem.co.uk
1565                 '*.galaxy99.net',               // by admin at bagchi.org
1566                 '*.greatnow.com',               // by peo at peakspace.com
1567                 '*.hautlynx.com',               // by hlewis28 at juno.com
1568                 '*.ibnsites.com',               // by cmrojas at mail.com
1569                 '*.just-allen.com',             // by extremehype at msn.com
1570                 '*.kogaryu.com',                // by angelguerra at msn.com
1571                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1572                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1573                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1574                 '*.s-enterprize.com',
1575                 '*.servetown.com',              // by jonahbliss at earthlink.net
1576                 '*.stinkdot.org',               // by bluedot at ziplip.com
1577                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1578                 '*.zomi.net',                   // by sianpu at gmail.com
1579         ),
1580         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1581         '100 Best Inc' => array(
1582                 // by 100 Best Inc (info at 100best.com)
1583
1584                 // 66.235.204.7(h204-007.bluefishhosting.com)
1585                 '*.2-hi.com',
1586                 '*.20fr.com',
1587                 '*.20ii.com',
1588                 '*.20is.com',
1589                 '*.20it.com',
1590                 '*.20m.com',    // by jlee at 100bestinc.com
1591                 '*.20to.com',
1592                 '*.2u-2.com',
1593                 '*.3-st.com',
1594                 '*.fws1.com',
1595                 '*.fw-2.com',
1596                 '*.inc5.com',
1597                 '*.on-4.com',
1598                 '*.st-3.com',
1599                 '*.st20.com',
1600                 '*.up-a.com',
1601
1602                 // 216.40.33.252(www-pd.mdnsservice.com)
1603                 '*.0-st.com',
1604                 '*.20me.com',
1605         ),
1606         '*.100foros.com',
1607         '*.101freehost.com',
1608         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1609         '20six Weblog Services' => array(
1610                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1611                 '.20six.co.uk',
1612                 '.20six.fr',
1613                 'myblog.de',
1614                 'myblog.es',
1615         ),
1616         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1617         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1618         '2IP.com' => array(
1619                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1620                 '*.2ip.jp',
1621                 '*.474.jp',
1622                 '*.consensus.jp',
1623                 '*.desyo.jp',
1624                 '*.dif.jp',
1625                 '*.pastels.jp',
1626                 '*.powerblogger.jp',
1627                 '*.vippers.jp',
1628                 '*.webpages.jp',
1629
1630                 // 205.209.97.56(non-existent)
1631                 '*.biografi.biz',
1632                 '*.biografi.info',
1633                 '*.biografi.org',
1634                 '*.biografi.us',
1635                 '*.datadiri.biz',
1636                 '*.datadiri.cc',
1637                 '*.datadiri.com',
1638                 '*.datadiri.info',
1639                 '*.datadiri.net',
1640                 '*.datadiri.org',
1641                 '*.datadiri.tv',
1642                 '*.datadiri.us',
1643                 '*.indo.bz',
1644                 '*.indo.cc',
1645                 '*.profil.bz',
1646                 '*.profil.cc',
1647                 '*.profil.cn',
1648                 '*.profil.in',
1649                 '*.profil.tv',
1650
1651                 // 205.209.101.47(non-existent)
1652                 '*.about.tc',
1653                 '*.about.vg',
1654                 '*.aboutus.gs',
1655                 '*.aboutus.ms',
1656                 '*.aboutus.tc',
1657                 '*.aboutus.vg',
1658                 '*.band.io',
1659                 '*.beijing.am',
1660                 '*.blogs.io',
1661                 '*.boke.am',
1662                 '*.clan.io',
1663                 '*.ecv.gs',
1664                 '*.ecv.ms',
1665                 '*.ecv.vg',
1666                 '*.freekong.cn',
1667                 '*.go2net.ws',
1668                 '*.hello.cn.com',
1669                 '*.hello.io',
1670                 '*.hits.io',
1671                 '*.hostingweb.us',
1672                 '*.hub.io',
1673                 '*.ide.am',
1674                 '*.inc.io',
1675                 '*.incn.in',
1676                 '*.indo.gs',
1677                 '*.indo.ms',
1678                 '*.indo.tc',
1679                 '*.indo.vg',
1680                 '*.infinitehosting.net',
1681                 '*.infinites.net',
1682                 '*.jushige.cn',
1683                 '*.jushige.com',
1684                 '*.kongjian.in',
1685                 '*.lan.io',
1686                 '*.llc.nu',
1687                 '*.maimai.in',
1688                 '*.max.io',
1689                 '*.musician.io',
1690                 '*.mycv.bz',
1691                 '*.mycv.nu',
1692                 '*.mycv.tv',
1693                 '*.myweb.io',
1694                 '*.ourprofile.biz',
1695                 '*.ourprofile.info',
1696                 '*.ourprofile.net',
1697                 '*.ourprofile.org',
1698                 '*.ourprofile.us',
1699                 '*.profil.gs',
1700                 '*.profil.ms',
1701                 '*.profil.tc',
1702                 '*.qiye.in',
1703                 '*.site.io',
1704                 '*.wan.io',
1705                 '*.web-cam.ws',
1706                 '*.webs.io',
1707                 '*.xixu.cc',
1708                 '*.zaici.am',
1709                 '*.zip.io',
1710                 '*.zuzhi.in',
1711
1712                 '*.profil.vg',          // 205.209.101.67(non-existent)
1713                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1714                 //'*.about.gs',         // No record
1715                 //'*.eprofile.us',      // non-existent
1716         ),
1717         '2Page.de' => array(
1718                 '.dreipage.de',
1719                 '.2page.de',
1720         ),
1721         '*.3-hosting.net',
1722         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1723         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1724         '*.8000web.com',        // 75.126.189.45
1725         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1726         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1727         'Ai.NET' => array(
1728                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1729                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1730         ),
1731         '*.aimoo.com',
1732         '*.alkablog.com',
1733         '*.alluwant.de',
1734         '.amkbb.com',
1735         'answerbag.com',        // 8.5.0.128
1736         'anyboard.net',
1737         'AOL.com' =>    // http://about.aol.com/international_services
1738                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1739                 '(?:aol|americaonline)\.' .
1740                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1741                 // Rough but works
1742         'Apple.com' => array('idisk.mac.com'),
1743         '*.askfaq.org',
1744         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1745         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1746         '*.asphost4free.com',
1747         'basenow.com',
1748         'BatCave.net' => array(
1749                 '.batcave.net',                 // 64.22.112.226
1750                 '.freehostpro.com',             // 64.22.112.226
1751         ),
1752         '*.bb-fr.com',
1753         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1754         '*.beeplog.com',
1755         'beepworld.it',
1756         'bestfreeforums.com',
1757         'bestvotexxx.com',
1758         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1759         'blinklist.com',
1760         'Blog.com' => array(
1761                 // by admin.domains at co.blog.com
1762                 '*.blog.com',
1763                 '*.blogandorra.com',
1764                 '*.blogangola.com',
1765                 '*.blogaruba.com',
1766                 '*.blogaustria.at',
1767         ),
1768         '*.blog.com.es',
1769         '*.blog.hr',
1770         '*.blog4ever.com',
1771         '*.blog-fx.com',
1772         '*.blogbeee.com',
1773         'blogas.lt',
1774         'blogbud.com',
1775         '*.blogburkinafaso.com',
1776         '*.blogcu.com',                 // by info at nokta.com
1777         'blogfreely.com',
1778         '*.blogdrive.com',
1779         '*.blogg.de',
1780         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1781         'bloggercrab.com',
1782         'bloggers.nl',
1783         '*.bloggingmylife.com',
1784         '*.bloggles.info',
1785         '*.blogharbor.com',
1786         '*.bloguj.eu',
1787         'bloguitos.com',
1788         'blogosfer.com',
1789         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1790         '*.blogslive.net',
1791         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1792         '*.blogstream.com',
1793         'blogyaz.com',
1794         'bloodee.com',
1795         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1796         'board-4you.de',
1797         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1798         '*.boardhost.com',
1799         'Bravenet.com' => array(
1800                 '*.bravenet.com',
1801                 '*.bravehost.com',
1802         ),
1803         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1804         'C2k.jp' => array(
1805                 // by Makoto Okuse (webmaster at 2style.net)
1806                 '.081.in',
1807                 '.2style.in',
1808                 '.bian.in',
1809                 '.curl.in',
1810                 '.ennui.in',
1811                 '.jinx.in',
1812                 '.loose.in',
1813                 '.mist.in',
1814                 '.muu.in',
1815                 '.naive.in',
1816                 '.panic.in',
1817                 '.slum.in',
1818
1819                 // by 2style, ns *.click2k.net, *.2style.net
1820                 '.2st.jp',
1821                 '.betty.jp',
1822                 '.cabin.jp',
1823                 '.cult.jp',
1824                 '.mippi.jp',
1825                 '.purety.jp',
1826                 '.rapa.jp',
1827                 '.side-b.jp',
1828                 '.web-box.jp',
1829                 '.yea.jp',
1830
1831                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1832                 '.2style.net',
1833                 '.click2k.net',
1834                 '.houka5.com',
1835
1836                 // by click2k, ns *.click2k.net, *.2style.net
1837                 '.psyco.jp',
1838                 '.sweety.jp',
1839
1840                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1841                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1842         ),
1843         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1844         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1845         '*.chueca.com',
1846         'city-forum.com',
1847         '*.clicdev.com',
1848         '*.craigslist.org',
1849         'concepts-mall.com',
1850         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1851         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1852         'counterhit.de',
1853         '*.createblog.com',
1854         '*.createforum.net',
1855         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1856         '*.createmybb.com',
1857         'CwCity.de' => array(
1858                 '.cwcity.de',
1859                 '.cwsurf.de',
1860         ),
1861         'dakrats.net',
1862         '*.dcswtech.com',
1863         'del.icio.us',
1864         '*.devil.it',
1865         '*.diaryland.com',
1866         'diigo.com',                    ///user/
1867         'digg.com',
1868         'digstock.com',
1869         'domains at galaxywave.net' => array(
1870                 'blogstation.net',
1871                 '.phpbb-host.com',
1872         ),
1873         'dotbb.be',
1874         '*.dox.hu',                             // dns at 1b.hu
1875         '*.eadf.com',
1876         '*.eblog.com.au',
1877         '*.ekiwi.de',
1878         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1879         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1880         '*.easyjournal.com',
1881         '*.ebloggy.com',
1882         'enunblog.com',
1883         '*.epinoy.com',
1884         '*.ez-sites.ws',
1885         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1886         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1887         '*.fathippohosting.com',        // 208.101.3.192
1888         'FC2.com' => array(
1889                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1890                         // Many traps available:
1891                         //      bqdr.blog98.fc2.com,       iframe
1892                         //      csfir.blog87.fc2.com,      iframe
1893                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1894                         //      sippou2006.blog60.fc2.com, iframe
1895                         // NOTE: 'blog.fc2.com' is not included
1896                 '*.h.fc2.com',  // Adult
1897         ),
1898         '*.fizwig.com',
1899         'forum.ezedia.net',
1900         '*.extra.hu',                   // angelo at jasmin.hu
1901         '*.fanforum.cc',
1902         'fingerprintmedia.com',
1903         '*.filelan.com',
1904         '*.fora.pl',
1905         '*.forka.eu',
1906         '*.foren-city.de',
1907         'foren-gratis.de',
1908         '*.foros.tv',
1909         '*.forospace.com',
1910         'foroswebgratis.com',
1911         '*.forum-on.de',
1912         '*.forum24.se',
1913         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1914         '.forum66.com',
1915         'Forumotion.com' => array(
1916                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1917                 '*.forumactif.com',     // 91.121.41.79
1918                 '*.editboard.com',      // 75.126.156.15
1919                 '*.sosblog.com',        // 74.86.25.140
1920
1921                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1922                 '*.0forum.biz',
1923                 '*.1forum.biz',
1924                 '*.1fr1.net',
1925                 '*.1talk.net',
1926                 '*.2forum.biz',
1927                 '*.3forum.biz',
1928                 '*.4forum.biz',
1929                 '*.4rumer.com',
1930                 '*.4rumer.net',
1931                 '*.4umer.com',
1932                 '*.4umer.net',
1933                 '*.5forum.biz',
1934                 '*.5forum.info',
1935                 '*.5forum.net',
1936                 '*.6forum.biz',
1937                 '*.6forum.info',
1938                 '*.77forum.com',
1939                 '*.7forum.biz',
1940                 '*.7forum.info',
1941                 '*.7forum.net',
1942                 '*.8forum.biz',
1943                 '*.8forum.info',
1944                 '*.8forum.net',
1945                 '*.9forum.biz',
1946                 '*.9forum.info',
1947                 '*.activebb.net',
1948                 '*.aforumfree.com',
1949                 '*.all-forum.net',
1950                 '*.all-up.com',
1951                 '*.alldiscussion.net',
1952                 '*.allgoo.net',
1953                 '*.allgoo.us',
1954                 '*.american-forum.net',
1955                 '*.americantalk.net',
1956                 '*.annuaire-forums.com',
1957                 '*.asiafreeforum.com',
1958                 '*.asianfreeforum.com',
1959                 '*.azureforum.com',
1960                 '*.azurforum.com',
1961                 '*.bestcheapforum.com',
1962                 '*.bestdiscussion.net',
1963                 '*.bestgoo.com',
1964                 '*.bestofforum.com',
1965                 '*.bestofforum.net',
1966                 '*.bestoforum.net',
1967                 '*.bforum.biz',
1968                 '*.big-forum.net',
1969                 '*.board-poster.com',
1970                 '*.board-realtors.com',
1971                 '*.boardonly.com',
1972                 '*.boardrealtors.net',
1973                 '*.boardsmessage.com',
1974                 '*.briceboard.com',
1975                 '*.bubblelol.com',
1976                 '*.buy-forum.com',
1977                 '*.buy-talk.com',
1978                 '*.buyforum.net',
1979                 '*.buygoo.net',
1980                 '*.buygoo.us',
1981                 '*.camelscrew.com',
1982                 '*.cheap-forum.com',
1983                 '*.cheapforum.net',
1984                 '*.chocoforum.com',
1985                 '*.chocoforum.net',
1986                 '*.clic-topic.com',
1987                 '*.clicboard.com',
1988                 '*.clictopic.com',
1989                 '*.clictopic.net',
1990                 '*.clictopics.com',
1991                 '*.clubdiscussion.net',
1992                 '*.coolbb.net',
1993                 '*.crazy4us.com',
1994                 '*.crazyfruits.net',
1995                 '*.createmyboard.com',
1996                 '*.crewcamel.com',
1997                 '*.cyberfreeforum.com',
1998                 '*.discutforum.com',
1999                 '*.discutfree.com',
2000                 '*.do-forum.com',
2001                 '*.do-goo.com',
2002                 '*.do-goo.net',
2003                 '*.do-talk.com',
2004                 '*.dodiscussion.com',
2005                 '*.dogoo.us',
2006                 '*.easydiscussion.net',
2007                 '*.easyforumlive.com',
2008                 '*.englishboard.net',
2009                 '*.englishboards.com',
2010                 '*.ephpbb.com',
2011                 '*.eraseboard.net',
2012                 '*.eraseboards.net',
2013                 '*.euro-talk.net',
2014                 '*.eurodiscussion.net',
2015                 '*.eurogoo.com',
2016                 '*.exchangesboard.com',
2017                 '*.exprimetoi.net',
2018                 '*.fairtopic.com',
2019                 '*.fforum.biz',
2020                 '*.fforumfree.com',
2021                 '*.first-forum.com',
2022                 '*.firstgoo.com',
2023                 '*.fororama.com',
2024                 '*.forum-2007.com',
2025                 '*.forum-actif.net',
2026                 '*.forum-free.biz',
2027                 '*.forum-free.org',
2028                 '*.forum-motion.com',
2029                 '*.forum0.biz',
2030                 '*.forum0.info',
2031                 '*.forum0.net',
2032                 '*.forum2.biz',
2033                 '*.forum3.biz',
2034                 '*.forum3.info',
2035                 '*.forum5.info',
2036                 '*.forum6.biz',
2037                 '*.forum6.info',
2038                 '*.forum7.biz',
2039                 '*.forum777.com',
2040                 '*.forum8.biz',
2041                 '*.forum9.biz',
2042                 '*.foruma.biz',
2043                 '*.forumactif.biz',
2044                 '*.forumactif.info',
2045                 '*.forumactif.name',
2046                 '*.forumactif.ws',
2047                 '*.forumaction.net',
2048                 '*.forumakers.com',
2049                 '*.forumandco.com',
2050                 '*.forumb.biz',
2051                 '*.forumc.biz',
2052                 '*.forumd.biz',
2053                 '*.forumdediscussions.com',
2054                 '*.forumdediscussions.net',
2055                 '*.forume.biz',
2056                 '*.forumeast.com',
2057                 '*.forumf.biz',
2058                 '*.forumfreek.com',
2059                 '*.forumfreez.com',
2060                 '*.forumg.biz',
2061                 '*.forumh.biz',
2062                 '*.forumh.net',
2063                 '*.forumhope.com',
2064                 '*.forumi.biz',
2065                 '*.forumice.net',
2066                 '*.foruminute.com',
2067                 '*.forumj.biz',
2068                 '*.forumj.net',
2069                 '*.forumjonction.com',
2070                 '*.forumk.biz',
2071                 '*.foruml.biz',
2072                 '*.forumm.biz',
2073                 '*.forummotion.com',
2074                 '*.forummotions.com',
2075                 '*.forumn.biz',
2076                 '*.forumn.net',
2077                 '*.forumo.biz',
2078                 '*.forumonline.biz',
2079                 '*.forumotions.com',
2080                 '*.forump.biz',
2081                 '*.forump.info',
2082                 '*.forumperso.com',
2083                 '*.forumpersos.com',
2084                 '*.forumplatinum.com',
2085                 '*.forumpro.fr',
2086                 '*.forumq.biz',
2087                 '*.forumr.biz',
2088                 '*.forumr.net',
2089                 '*.forumrama.com',
2090                 '*.forums-actifs.com',
2091                 '*.forums-actifs.net',
2092                 '*.forums1.net',
2093                 '*.forumsactifs.com',
2094                 '*.forumsactifs.net',
2095                 '*.forumsfree.org',
2096                 '*.forumsline.com',
2097                 '*.forumsmakers.com',
2098                 '*.forumsmotion.com',
2099                 '*.forumsmotions.com',
2100                 '*.forumt.biz',
2101                 '*.forumv.biz',
2102                 '*.forumvalue.com',
2103                 '*.forumw.biz',
2104                 '*.forumy.biz',
2105                 '*.free-boards.net',
2106                 '*.freediscussion.net',
2107                 '*.freediscussions.net',
2108                 '*.freeforum.me.uk',
2109                 '*.freeforumboard.net',
2110                 '*.freeforumfree.com',
2111                 '*.freevideotalk.com',
2112                 '*.frenchboard.com',
2113                 '*.fruitsandco.com',
2114                 '*.fullboards.com',
2115                 '*.fullsubject.com',
2116                 '*.fullsubject.net',
2117                 '*.get-forum.net',
2118                 '*.getdiscussion.com',
2119                 '*.getgoo.net',
2120                 '*.getgoo.us',
2121                 '*.gettalk.net',
2122                 '*.go-board.com',
2123                 '*.go-board.net',
2124                 '*.go-forum.net',
2125                 '*.go-ogler.com',
2126                 '*.gofreeforum.com',
2127                 '*.gogoo.us',
2128                 '*.goo-board.com',
2129                 '*.goo-boys.com',
2130                 '*.goo-dart.com',
2131                 '*.goo-dole.com',
2132                 '*.goo-done.com',
2133                 '*.gooboards.com',
2134                 '*.goodbb.net',
2135                 '*.goodearths.com',
2136                 '*.goodforum.net',
2137                 '*.goodoles.com',
2138                 '*.goodoolz.com',
2139                 '*.gooforum.com',
2140                 '*.gooforums.com',
2141                 '*.googoolz.com',
2142                 '*.great-forum.com',
2143                 '*.heavenforum.com',
2144                 '*.hforum.biz',
2145                 '*.high-forums.com',
2146                 '*.highbb.com',
2147                 '*.highforum.net',
2148                 '*.hightoxic.com',
2149                 '*.homediscussion.net',
2150                 '*.homegoo.com',
2151                 '*.hooxs.com',
2152                 '*.hot-me.com',
2153                 '*.hot4um.com',
2154                 '*.hotdiscussion.net',
2155                 '*.hotgoo.net',
2156                 '*.in-goo.com',
2157                 '*.in-goo.net',
2158                 '*.infodiscussion.net',
2159                 '*.ingoo.us',
2160                 '*.iowoi.com',
2161                 '*.jforum.biz',
2162                 '*.just-forum.net',
2163                 '*.justboard.net',
2164                 '*.justdiscussion.com',
2165                 '*.justforum.net',
2166                 '*.justgoo.com',
2167                 '*.keuf.net',
2168                 '*.lforum.biz',
2169                 '*.lifediscussion.net',
2170                 '*.lifeme.net',
2171                 '*.lightbb.com',
2172                 '*.logu2.com',
2173                 '*.longdomaine.com',
2174                 '*.lovediscussion.net',
2175                 '*.lowcostforum.com',
2176                 '*.make-free-forum.com',
2177                 '*.makeforumfree.com',
2178                 '*.makefreeforum.com',
2179                 '*.mam9.com',
2180                 '*.manageboard.com',
2181                 '*.max2forum.com',
2182                 '*.meabout.com',
2183                 '*.megabb.com',
2184                 '*.moncontact.com',
2185                 '*.moninter.net',
2186                 '*.motion-forum.net',
2187                 '*.motionforum.net',
2188                 '*.motionsforum.com',
2189                 '*.mrforum.net',
2190                 '*.msnboard.net',
2191                 '*.msnyou.com',
2192                 '*.my-free-board.com',
2193                 '*.my-free-boards.com',
2194                 '*.my-free-forum.com',
2195                 '*.my-free-forums.com',
2196                 '*.my-goo.com',
2197                 '*.my-goo.net',
2198                 '*.mydiscussionboard.com',
2199                 '*.myfreeboard.net',
2200                 '*.mygoo.org',
2201                 '*.myrealboard.com',
2202                 '*.netboarder.com',
2203                 '*.netdiscussion.net',
2204                 '*.netgoo.org',
2205                 '*.new-forum.net',
2206                 '*.newdiscussion.net',
2207                 '*.newgoo.net',
2208                 '*.nforum.biz',
2209                 '*.nice-album.com',
2210                 '*.nice-board.biz',
2211                 '*.nice-board.com',
2212                 '*.nice-board.net',
2213                 '*.nice-boards.com',
2214                 '*.nice-boards.net',
2215                 '*.nice-forum.com',
2216                 '*.nice-forum.net',
2217                 '*.nice-forums.com',
2218                 '*.nice-forums.net',
2219                 '*.nice-gallery.net',
2220                 '*.nice-subject.com',
2221                 '*.nice-subjects.com',
2222                 '*.nice-theme.com',
2223                 '*.nice-topic.com',
2224                 '*.nice-topics.com',
2225                 '*.nicealbums.com',
2226                 '*.niceboard.biz',
2227                 '*.niceboard.net',
2228                 '*.niceboards.net',
2229                 '*.nicegalleries.net',
2230                 '*.nicesubject.com',
2231                 '*.nicesubjects.com',
2232                 '*.nicetopic.net',
2233                 '*.nicetopics.com',
2234                 '*.nightforum.net',
2235                 '*.nocost-forum.com',
2236                 '*.nofeeforum.com',
2237                 '*.one-forum.net',
2238                 '*.onediscussion.net',
2239                 '*.onegoo.us',
2240                 '*.onlinegoo.com',
2241                 '*.onlyquery.com',
2242                 '*.open-board.com',
2243                 '*.openu2.com',
2244                 '*.othersboards.com',
2245                 '*.own0.com',
2246                 '*.pforum.biz',
2247                 '*.phpbb9.com',
2248                 '*.phpbbtest.com',
2249                 '*.positifforum.com',
2250                 '*.postalboard.com',
2251                 '*.prodiscussion.net',
2252                 '*.progoo.us',
2253                 '*.pureforum.net',
2254                 '*.qforum.biz',
2255                 '*.quickbb.net',
2256                 '*.realbb.net',
2257                 '*.realfreeforum.com',
2258                 '*.realmsn.com',
2259                 '*.rforum.biz',
2260                 '*.road2us.com',
2261                 '*.roomforum.com',
2262                 '*.saveboard.com',
2263                 '*.screwcamel.com',
2264                 '*.screwcamels.com',
2265                 '*.sendboard.com',
2266                 '*.sephorum.com',
2267                 '*.sforum.biz',
2268                 '*.shootboard.com',
2269                 '*.shop-forum.net',
2270                 '*.shopsubject.com',
2271                 '*.simpleboard.net',
2272                 '*.site-forums.com',
2273                 '*.smileyforum.net',
2274                 '*.sos-forum.net',
2275                 '*.sos4um.com',
2276                 '*.sos4um.net',
2277                 '*.sosforum.net',
2278                 '*.speedyforum.com',
2279                 '*.stationforum.com',
2280                 '*.subject-expert.com',
2281                 '*.subject-line.com',
2282                 '*.subject-tracer.com',
2283                 '*.subjectchange.com',
2284                 '*.subjectdeals.com',
2285                 '*.subjectdebate.com',
2286                 '*.subjectdone.com',
2287                 '*.subjectonline.com',
2288                 '*.subjectschange.com',
2289                 '*.subjectsecrets.com',
2290                 '*.super-forum.net',
2291                 '*.talk-forums.com',
2292                 '*.team-forum.net',
2293                 '*.team-talk.net',
2294                 '*.teamconvention.com',
2295                 '*.teamgoo.net',
2296                 '*.teensboards.com',
2297                 '*.the-talk.net',
2298                 '*.the-up.com',
2299                 '*.thegoo.us',
2300                 '*.thinksubject.com',
2301                 '*.top-board.com',
2302                 '*.top-forum.net',
2303                 '*.top-me.com',
2304                 '*.top-talk.net',
2305                 '*.topdiscussion.com',
2306                 '*.topgoo.net',
2307                 '*.topic-board.com',
2308                 '*.topic-board.net',
2309                 '*.topic-debate.com',
2310                 '*.topic-ideas.com',
2311                 '*.topic-mail.com',
2312                 '*.topic-zone.com',
2313                 '*.topicboard.net',
2314                 '*.topicboards.com',
2315                 '*.topicmanager.com',
2316                 '*.topicsolutions.net',
2317                 '*.toxicfarm.com',
2318                 '*.unlimitboard.com',
2319                 '*.unlimitedboard.com',
2320                 '*.unlimitedforum.com',
2321                 '*.up-with.com',
2322                 '*.up-your.com',
2323                 '*.urealboard.com',
2324                 '*.user-board.net',
2325                 '*.userboard.net',
2326                 '*.users-board.com',
2327                 '*.users-board.net',
2328                 '*.usersboard.com',
2329                 '*.usersboard.net',
2330                 '*.webgoo.us',
2331                 '*.withboards.com',
2332                 '*.withme.us',
2333                 '*.worldgoo.com',
2334                 '*.yahooboard.net',
2335                 '*.yforum.biz',
2336                 '*.yoo7.com',
2337                 '*.youneed.us',
2338                 '*.your-board.com',
2339                 '*.your-talk.com',
2340                 '*.yourme.net',
2341                 '*.zforum.biz',
2342
2343                 // 75.126.156.15 redirect to forumactif.com
2344                 '*.actifforum.com',
2345                 '*.fr-bb.com',
2346                 '*.superforum.fr',
2347
2348                 // 75.126.156.15 redirect to editboard.com
2349                 '*.bbfr.net',
2350                 '*.bbgraf.com',
2351                 '*.cinebb.com',
2352                 '*.darkbb.com',
2353                 '*.dynamicbb.com',
2354                 '*.zikforum.com',
2355
2356                 // 74.86.25.140 Used: sosblog.com
2357                 '*.0-up.com',
2358                 '*.0-yo.com',
2359                 '*.04live.com',
2360                 '*.06fr.com',
2361                 '*.0fra.com',
2362                 '*.0jet.com',
2363                 '*.0yoo.com',
2364                 '*.1toxic.com',
2365                 '*.2k00.com',
2366                 '*.2xik.com',
2367                 '*.blog-2007.com',
2368                 '*.blog-2008.com',
2369                 '*.blog-2009.com',
2370                 '*.blog-2010.com',
2371                 '*.blog-actif.net',
2372                 '*.blog-marley.com',
2373                 '*.blog-talker.com',
2374                 '*.blog2009.com',
2375                 '*.blogactif.net',
2376                 '*.blogalbums.com',
2377                 '*.blogalerie.com',
2378                 '*.blogaleries.com',
2379                 '*.blogallerys.com',
2380                 '*.blogandme.com',
2381                 '*.blogandyou.com',
2382                 '*.blogbubble.net',
2383                 '*.blogdollz.com',
2384                 '*.bloggeuse.net',
2385                 '*.bloggeuses.com',
2386                 '*.bloginstinct.com',
2387                 '*.bloginternet.net',
2388                 '*.blogmakers.net',
2389                 '*.blogmarley.net',
2390                 '*.blogminister.net',
2391                 '*.blogmorane.com',
2392                 '*.blognboard.com',
2393                 '*.blogotek.net',
2394                 '*.blogpas.com',
2395                 '*.blogpublisher.net',
2396                 '*.blogsalbum.com',
2397                 '*.blogsalbums.com',
2398                 '*.blogsfan.net',
2399                 '*.blogsgallerys.com',
2400                 '*.blogsitephp.com',
2401                 '*.blogsland.net',
2402                 '*.blogsmaker.com',
2403                 '*.blogsmakers.com',
2404                 '*.blogspeed.net',
2405                 '*.blogsup.net',
2406                 '*.blogsutil.com',
2407                 '*.blogsutils.com',
2408                 '*.blogsystem.net',
2409                 '*.blogtalker.net',
2410                 '*.blogtheque.net',
2411                 '*.blogutil.com',
2412                 '*.blogvsboard.com',
2413                 '*.briceblog.com',
2414                 '*.cibleblog.com',
2415                 '*.cristalblog.com',
2416                 '*.crystalblog.net',
2417                 '*.dad-blog.com',
2418                 '*.daddy-blog.com',
2419                 '*.defaultblog.com',
2420                 '*.discussionsblog.com',
2421                 '*.dollzblog.com',
2422                 '*.dtoxic.com',
2423                 '*.easiestblog.net',
2424                 '*.espaceblog.net',
2425                 '*.exitblog.net',
2426                 '*.expensiveblog.com',
2427                 '*.extra-blog.net',
2428                 '*.extrablog.net',
2429                 '*.facileblog.com',
2430                 '*.forblogger.com',
2431                 '*.forumsblogs.com',
2432                 '*.freephpblog.com',
2433                 '*.fresh-blog.net',
2434                 '*.galleryblog.net',
2435                 '*.galleryblogs.net',
2436                 '*.gallerysblog.com',
2437                 '*.gallerysblogs.com',
2438                 '*.hyper-blog.net',
2439                 '*.hyper-blogger.com',
2440                 '*.hyper-blogger.net',
2441                 '*.hyperblogger.net',
2442                 '*.instinctblog.com',
2443                 '*.jeunblog.com',
2444                 '*.jeuneblog.com',
2445                 '*.judblog.com',
2446                 '*.makeblog.net',
2447                 '*.man-blog.net',
2448                 '*.man-blogs.com',
2449                 '*.man-blogs.net',
2450                 '*.manblog.net',
2451                 '*.manblog.org',
2452                 '*.manblog.us',
2453                 '*.manblogs.net',
2454                 '*.mansblog.net',
2455                 '*.mansblogs.com',
2456                 '*.mansblogs.net',
2457                 '*.meetingsblogs.com',
2458                 '*.men-blog.net',
2459                 '*.men-blogs.com',
2460                 '*.men-blogs.net',
2461                 '*.menblog.us',
2462                 '*.menblogs.net',
2463                 '*.mensblogs.net',
2464                 '*.messaginblog.com',
2465                 '*.monblogger.com',
2466                 '*.mum-blog.com',
2467                 '*.mummy-blog.com',
2468                 '*.mummyblog.com',
2469                 '*.myareablog.com',
2470                 '*.myblog-online.net',
2471                 '*.mybloginternet.com',
2472                 '*.myblogland.com',
2473                 '*.myblogmag.com',
2474                 '*.myfreshblog.com',
2475                 '*.myinternetblog.net',
2476                 '*.myoverblog.com',
2477                 '*.myoverblog.net',
2478                 '*.mysharedblog.com',
2479                 '*.nice-albums.com',
2480                 '*.nice-galleries.com',
2481                 '*.nicealbum.net',
2482                 '*.nicegallery.net',
2483                 '*.notreblogger.com',
2484                 '*.outilblog.com',
2485                 '*.over-blogger.com',
2486                 '*.overblogger.com',
2487                 '*.pasblog.com',
2488                 '*.pasblog.net',
2489                 '*.perfect-blog.net',
2490                 '*.perfectblog.net',
2491                 '*.phpblogsite.com',
2492                 '*.phpmyblog.net',
2493                 '*.plateformeblog.com',
2494                 '*.playblogger.com',
2495                 '*.publishmyblog.com',
2496                 '*.pulseblog.net',
2497                 '*.pulseblogs.com',
2498                 '*.puretoxic.com',
2499                 '*.reservedblog.com',
2500                 '*.shareblog.net',
2501                 '*.shareblogs.net',
2502                 '*.shared-blogs.com',
2503                 '*.sharedblog.net',
2504                 '*.sharedblogs.net',
2505                 '*.solideblog.com',
2506                 '*.systemeblog.com',
2507                 '*.talkmeblog.com',
2508                 '*.toolsblog.net',
2509                 '*.toxicplace.com',
2510                 '*.ufreeblog.com',
2511                 '*.uliveblog.com',
2512                 '*.ultratoxic.com',
2513                 '*.utilblog.com',
2514                 '*.utilblogs.com',
2515                 '*.utilsblog.com',
2516                 '*.utilsblogs.com',
2517                 '*.various-blog.com',
2518                 '*.various-blog.net',
2519                 '*.various-blogs.com',
2520                 '*.various-blogs.net',
2521                 '*.variusblog.com',
2522                 '*.versusblog.com',
2523                 '*.vieuxblog.com',
2524                 '*.web-day.net',
2525                 '*.whatsblog.net',
2526                 '*.woman-blog.net',
2527                 '*.woman-blogs.com',
2528                 '*.woman-blogs.net',
2529                 '*.womanblog.com',
2530                 '*.womanblog.org',
2531                 '*.womanblog.us',
2532                 '*.womanblogs.net',
2533                 '*.womansblogs.com',
2534                 '*.womansblogs.net',
2535                 '*.women-blog.net',
2536                 '*.women-blogs.com',
2537                 '*.women-blogs.net',
2538                 '*.womenblog.us',
2539                 '*.womenblogs.net',
2540                 '*.womensblog.net',
2541                 '*.womensblogs.net',
2542                 '*.youblog.net',
2543                 '*.yourliveblog.com',
2544                 '*.yourweblog.net',
2545         ),
2546         '*.forumcommunity.net',
2547         '*.forumer.com',
2548         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2549         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2550         'forumhosting.org',
2551         '*.forums.com',
2552         'forumbolt.com',
2553         'phpbb.forumgratis.com',
2554         'forumlari.net',
2555         '*.forumlivre.com',
2556         'forumnow.com.br',
2557         '*.forumppl.com',
2558         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2559         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2560                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2561                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2562                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2563         '*.fory.pl',
2564         'fotolog.com',
2565         '*.fr33webhost.com',
2566         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2567         '*.free-25.de',
2568         '*.free-bb.com',
2569         'Free-Blog-Hosting.com' => array(
2570                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2571                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2572                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2573                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2574                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2575         ),
2576         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2577         'free-guestbook.net',
2578         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2579         'freebb.nl',
2580         '*.freeclans.de',
2581         '*.freehostplace.com',  // by contact at keepclear.co.uk
2582         '*.freelinuxhost.com',  // by 100webspace.com
2583         '*.nofeehost.com',
2584         '*.freehyperspace.com',
2585         'freeforum.at',                 // by Sandro Wilhelmy
2586         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2587         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2588         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2589         '*.freewebhostingpro.com',
2590         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2591         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2592                 '*.6te.net',
2593                 '*.ueuo.com',
2594                 '*.orgfree.com',
2595         ),
2596         '*.freewebpage.org',
2597         'Freewebs.com' => array(        // by inquiries at freewebs.com
2598                 'freewebs.com',
2599                 'freewebsfarms.com',
2600         ),
2601         '*.freewebspace.net.au',
2602         'freewebtown.com',
2603         '*.freemyforum.com',    // by messahost at gmail.com
2604         'freepowerboards.com',
2605         '*.freepowerboards.com',
2606         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2607         'Funpic.de' => array(   // by alexander at liemen.net
2608                 '*.funpic.de',
2609                 '*.funpic.org',
2610         ),
2611         'gb-hoster.de',
2612         '*.genblogger.com',
2613         'GetBetterHosting.com' => array(
2614                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2615                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2616         ),
2617         '*.gexxe.com',
2618         '*.goodboard.de',
2619         'gossiping.net',
2620         '*.greatnuke.com',
2621         '*.guestbook.de',
2622         'gwebspace.de',
2623         'Google.com' => array(
2624                 '*.blogspot.com',
2625                 'docs.google.com',
2626                 '*.googlegroups.com',           ///web/
2627                 '*.googlepages.com',
2628                 'groups-beta.google.com',
2629                 'groups.google.*',       ///group/ Seems widely distributed
2630                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2631                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2632                         //'groups.google.it', ...
2633         ),
2634         'guestbook.at',
2635         'club.giovani.it',
2636         '*.gratis-server.de',
2637         'healthcaregroup.com',
2638         '*.heliohost.org',
2639         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2640                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2641                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2642                 '*.front.ru',           // (domain at hc.ru)
2643                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2644                 '*.hotbox.ru',          // (domain at hc.ru)
2645                 '*.hotmail.ru',         // (hosting at hc.ru)
2646                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2647                 '*.land.ru',            // (domain at hc.ru)
2648                 '*.mail15.com',         // (hosting at hc.ru)
2649                 '*.mail333.com',        // (hosting at hc.ru)
2650                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2651                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2652                 '*.pisem.net',          // (hosting at hc.ru)
2653                 '*.pochta.ru',          // (domain at hc.ru)
2654                 '*.pochtamt.ru',        // (domain at hc.ru)
2655                 '*.pop3.ru',            // (domain at hc.ru)
2656                 '*.rbcmail.ru',         // (domain at hc.ru)
2657                 '*.smtp.ru',            // (domain at hc.ru)
2658         ),
2659         '*.hiblogger.com',              // by chiaokin at gmail.com
2660         '*.hit.bg',                             // by forumup.com ??
2661         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2662         '*.host-page.com',
2663         '*.hostingclub.de',
2664         'forums.hspn.com',
2665         '*.httpsuites.com',
2666         '*.hut2.ru',
2667         'ibfree.org',                   // 208.101.45.88
2668         'IC.cz' => array(
2669                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2670                 '*.hu.cz',                      // internetcentrum at gmail.com
2671                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2672                 '*.ic.cz',                      // internetcentrum at gmail.com
2673                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2674                 '*.own.cz',                     // internetcentrum at gmail.com
2675                 '*.phorum.cz',          // internetcentrum at gmail.com
2676                 '*.tym.cz',                     // internetcentrum at gmail.com
2677                 '*.tym.sk',                     // jobot at ignum.cz
2678                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2679                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2680                 '*.yw.sk',                      // jobot at ignum.cz
2681         ),
2682         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2683                 '*.0moola.com',
2684                 '*.3000mb.com',
2685                 '.501megs.com',
2686                 '*.teracities.com',
2687                 '*.xoompages.com',
2688         ),
2689         '*.icspace.net',
2690         'iEUROP.net' => array(
2691                 '*.ibelgique.com',
2692                 '*.iespana.es',
2693                 '*.ifrance.com',
2694                 '*.iitalia.com',
2695                 '*.iquebec.com',
2696                 '*.isuisse.com',
2697         ),
2698         '*.ihateclowns.net',
2699         '*.ii55.com',
2700         '*.ipbfree.com',
2701         '*.iphorum.com',
2702         '*.blog.ijijiji.com',
2703         '*.info.com',
2704         '*.informe.com',
2705         'it168.com',
2706         '.iwannaforum.com',
2707         '*.jconserv.net',
2708         '*.jeeran.com',
2709         '*.jeun.fr',
2710         '*.joolo.com',
2711         '*.journalscape.com',
2712         '*.justfree.com',
2713         'kataweb.it' => array(          // kata-redir.kataweb.it
2714                 '*.blog.kataweb.it',
2715                 '*.repubblica.it',
2716         ),
2717         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2718         '*.kokoom.com',
2719         'koolpages.com',
2720         '*.kostenlose-foren.org',
2721         '*.ksiegagosci.info',
2722         'LaCoctelera.com' => array(
2723                 'lacoctelera.com',      // by alberto at the-cocktail.com
2724                 'espacioblog.com',      // by dominios at ferca.com
2725         ),
2726         'Lide.cz' => array(
2727                 '*.lide.cz',
2728                 '*.sblog.cz',
2729         ),
2730         '*.lioru.com',
2731         'limmon.net',
2732         'linkinn.com',
2733         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2734         'listible.com',                 ///list/
2735         'Livedoor.com' => array(
2736                 'blog.livedoor.jp',
2737                 '*.blog.livedoor.com',  // redirection
2738         ),
2739         '*.livejournal.com',
2740         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2741         '*.logme.nl',
2742         'lol.to',
2743         'ltss.luton.ac.uk',
2744         'Lycos.com' => array(
2745                 '.angelfire.com',       // angelfire.lycos.com
2746
2747                 '*.jubii.dk',   // search., medlem.
2748                 '*.jubiiblog.co.uk',
2749                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2750                 '*.jubiiblog.de',
2751                 '*.jubiiblog.dk',
2752                 '*.jubiiblog.fr',
2753                 '*.jubiiblog.it',
2754                 '*.jubiiblog.nl',
2755
2756                 '*.lycos.at',
2757                 '*.lycos.ch',
2758                 '*.lycos.co.uk',
2759                 'angelfire.lycos.com',
2760                 '*.lycos.de',
2761                 '*.lycos.es',
2762                 '*.lycos.fr',
2763                 '*.lycos.it',           // by Lycos Europe GmbH
2764                 '*.lycos.nl',
2765
2766                 '*.spray.se',
2767                 '*.sprayblog.se',
2768
2769                 '*.tripod.com',
2770         ),
2771         '*.mastertopforum.com',
2772         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2773         'meneame.net',
2774         '*.memebot.com',
2775         '*.messageboard.nl',
2776         'mokono GmbH' => array(
2777                 '*.blog.com.es',
2778                 '*.blog.de',
2779                 '*.blog.fr',
2780                 '*.blog.co.uk',
2781                 '*.blog.ca',
2782                 '*.blogs.se',
2783                 '*.blogs.fi',
2784                 '*.blogs.no',
2785                 '*.blogs.dk',
2786                 '*.blogs.ro',
2787                 '*.weblogs.pl',
2788                 '*.weblogs.cz',
2789                 '*.weblogs.hu',
2790         ),
2791         'mojklc.com',
2792         '*.mundoforo.com',
2793         '*.money-host.com',
2794         'MonForum.com' => array(
2795                 '*.monforum.com',
2796                 '*.monforum.fr',
2797         ),
2798         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2799         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2800         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2801         'myblog.is',
2802         'myblogma.com',
2803         '*.myblogvoice.com',
2804         'myblogwiki.com',
2805         '*.myforum.ro',
2806         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2807         '*.myfreewebs.net',
2808         '*.mysite.com',
2809         '*.myxhost.com',
2810         '*.netfast.org',
2811         'NetGears.com' => array(
2812                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2813                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2814                 '*.freewebspace.com',   // 64.49.236.72
2815         ),
2816         'Netscape.com' => array('*.netscape.com'),
2817         'users.newblog.com',
2818         'neweconomics.info',
2819         '*.newsit.es',                          // 75.126.252.108
2820         '*.nm.ru',
2821         '*.nmj.pl',
2822         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2823         'Northsky.com' => array(
2824                 // by hostmaster at northsky.com
2825                 // northsky.com redirects to communityarchitect.com
2826
2827                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2828                 '*.00author.com',
2829                 '*.00band.com',
2830                 '*.00books.com',
2831                 '*.00cash.com',
2832                 '*.00cd.com',
2833                 '*.00dvd.com',
2834                 '*.00family.com',
2835                 '*.00game.com',
2836                 '*.00home.com',
2837                 '*.00it.com',
2838                 '*.00me.com',
2839                 '*.00movies.com',
2840                 '*.00page.com',
2841                 '*.00politics.com',
2842                 '*.00sf.com',
2843                 '*.00show.com',
2844                 '*.00song.com',
2845                 '*.00trek.com',
2846                 '*.00video.com',
2847                 '*.0me.com',
2848                 '*.0pi.com',
2849                 '*.happy-couple.com',
2850                 '*.warp0.com',
2851
2852                 '*.50megs.com',         // 64.136.25.170
2853
2854                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2855                 '*.00server.com',
2856                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2857                 '*.fanspace.com',
2858
2859                 // 64.136.25.168 by Mark Bishop
2860                 '*.00go.com',
2861                 '*.00space.com',
2862                 '*.00sports.com',
2863         ),
2864         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2865         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2866         'onlyfree.de',
2867         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2868         '*.ohost.de',
2869         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2870                 '.friko.pl',
2871                 '.jak.pl',
2872                 '.nazwa.pl',
2873                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2874                 '.w8w.pl',
2875                 '.za.pl',
2876                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2877         ),
2878         'oyax.com',                             ///user_links.php
2879         '*.p2a.pl',
2880         '*.parlaris.com',
2881         '*.pathfinder.gr',
2882         '*.persianblog.com',
2883         '*.phorum.pl',
2884         'Phpbb24.com' => array( // by Daniel Eriksson
2885                 '*.createforum.us',     // registry at webbland.se
2886                 '*.forumportal.us',     // registry at webbland.se
2887                 '*.freeportal.us',      // registry at network24.se
2888                 '*.phpbb2.us',          // daniel at danielos.com
2889                 '*.phpbb24.com',        // daniel at danielos.com
2890                 '*.myforumportal.com',  // daniel at webbland.se
2891         ),
2892         'phpbb4you.com',
2893         'phpbbcommunity.com',
2894         '*.phpbbx.de',
2895         '*.pochta.ru',
2896         '*.portbb.com',
2897         '*.portcms.com',
2898         'powerwebmaster.de',
2899         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2900         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2901         '*.probook.de',
2902         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2903         '*.pun.pl',
2904         'putfile.com',
2905         '*.quickfreehost.com',
2906         'quizilla.com',
2907         '*.quotaless.com',
2908         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2909         'razyboard.com',
2910         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2911         'realhp.de',
2912         'reddit.com',           ///user/
2913         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2914                 '*.juicypornhost.com',
2915                 '*.pornzonehost.com',
2916                 '*.xhostar.com',
2917         ),
2918         'RIN.ru' => array(
2919                 '*.sbn.bz',
2920                 '*.wol.bz',
2921         ),
2922         '*.sayt.ws',
2923         'Seblg.com' => array(
2924                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2925                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2926         ),
2927         '*.seo-blog.org',
2928         '*.shoutpost.com',
2929         '*.siamforum.com',
2930         '*.siteburg.com',
2931         '*.sitehome.ru',
2932         '*.sitesfree.com',              // support at livesearching.com
2933         '*.sitesled.com',
2934         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2935         'SmarTrans.com' => array(
2936                 '.3w.to',
2937                 '.aim.to',
2938                 '.djmp.jp',
2939                 '.nihongourl.nu',
2940                 '.url.sh',              // Says SmarTrans
2941                 '.urljp.com',
2942                 '.www1.to',
2943                 '.www2.to',
2944                 '.www3.to',
2945         ),
2946         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2947         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2948         'members.spboards.com',
2949         'forums.speedguide.net',
2950         'Sphosting.com' => array(       // by admin at sphosting.com
2951                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2952                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2953                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2954                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2955                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2956         ),
2957         '*.spicyblogger.com',
2958         '*.spotbb.com',
2959         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2960         '*.squarespace.com',
2961         'stickypond.com',
2962         'stormloader.com',
2963         'strikebang.com',
2964         '*.sultryserver.com',
2965         '*.t35.com',
2966         '*.talks.at',
2967         'tabletpcbuzz.com',
2968         '*.talkthis.com',
2969         'tbns.net',
2970         'telasipforums.com',
2971         'theforumhub.com',
2972         'thestudentunderground.org',
2973         'think.ubc.ca',
2974         '*.thumblogger.com',
2975         'Topix.com' => array(
2976                 'topix.com',
2977                 'topix.net',
2978         ),
2979         'forum.tourism-talk.com.au',
2980         'tycho at e-lab.nl' => array(
2981                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2982                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2983         ),
2984         '*.tumblr.com',
2985         'UcoZ Web-Services' => array(
2986                 '*.3dn.ru',
2987                 '*.clan.su',
2988                 '*.moy.su',
2989                 '*.my1.ru',
2990                 '*.p0.ru',
2991                 '*.pp.net.ua',
2992                 '*.ucoz.co.uk',
2993                 '*.ucoz.com',
2994                 '*.ucoz.net',
2995                 '*.ucoz.org',
2996                 '*.ucoz.ru',
2997                 '*.ws.co.ua',
2998         ),
2999         '*.unforo.net',
3000         'veoh.com',
3001         '*.vdforum.ru',
3002         '*.vtost.com',
3003         '*.vidiac.com',
3004         'Voila.fr' => array('.site.voila.fr'),
3005         'volny.cz',
3006         'voy.com',
3007         '*.welover.org',
3008         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
3009                 '*.fasthost.tv',
3010                 '*.hothost.tv',
3011                 '*.isgreat.tv',
3012                 '*.issexy.tv',
3013                 '*.isterrible.tv',
3014                 '*.somegood.tv',
3015                 '*.adultnations.com',
3016                 '*.alladultfemale.com',
3017                 '*.alladultmale.com',
3018                 '*.allbisexual.com',
3019                 '*.allbreast.com',
3020                 '*.allfeminism.com',
3021                 '*.allmanpages.com',
3022                 '*.allmendirect.com',
3023                 '*.allphotoalbum.com',
3024                 '*.allsexpages.com',
3025                 '*.allwomanweb.com',
3026                 '*.attorney-site.com',
3027                 '*.bedclip.com',
3028                 '*.bestfamilysite.com',
3029                 '*.bestmusicpages.com',
3030                 '*.bigmoron.com',
3031                 '*.bourgeoisonline.com',
3032                 '*.candyfrom.us',
3033                 '*.cartoonhit.com',
3034                 '*.cat-on-line.com',
3035                 '*.chokesondick.com',
3036                 '*.closeupsof.us',
3037                 '*.cpa-site.com',
3038                 '*.dampgirl.com',
3039                 '*.dampgirls.com',
3040                 '*.deepestfetish.com',
3041                 '*.docspages.com',
3042                 '*.dog-on-line.com',
3043                 '*.dogcountries.com',
3044                 '*.dognations.com',
3045                 '*.doingitwith.us',
3046                 '*.drenchedface.com',
3047                 '*.drenchedlips.com',
3048                 '*.drspages.com',
3049                 '*.edogden.com',
3050                 '*.eroticountry.com',
3051                 '*.fasthost.tv',
3052                 '*.fineststars.com',
3053                 '*.foronlinegames.com',
3054                 '*.forplanetearth.com',
3055                 '*.freeadultparty.com',
3056                 '*.freespeechsite.com',
3057                 '*.gayadultxxx.com',
3058                 '*.gaytaboo.com',
3059                 '*.greatcookery.com',
3060                 '*.greatrecipepages.com',
3061                 '*.greatstreamingvideo.com',
3062                 '*.hatesit.com',
3063                 '*.hothost.tv',
3064                 '*.iscrappy.com',
3065                 '*.isgreat.tv',
3066                 '*.issexy.tv',
3067                 '*.isterrible.tv',
3068                 '*.itinto.us',
3069                 '*.japannudes.net',
3070                 '*.jesussave.us',
3071                 '*.jesussaveus.com',
3072                 '*.labialand.com',
3073                 '*.lettersfrom.us',
3074                 '*.lookingat.us',
3075                 '*.lunaticsworld.com',
3076                 '*.microphallus.com',
3077                 '*.mycatshow.com',
3078                 '*.mydogshow.com',
3079                 '*.myhardman.com',
3080                 '*.mylawsite.net',
3081                 '*.mylovething.com',
3082                 '*.onasoapbox.com',
3083                 '*.onlinepulpit.com',
3084                 '*.petitionthegovernment.com',
3085                 '*.photosfor.us',
3086                 '*.picturetrades.com',
3087                 '*.pleasekiss.us',
3088                 '*.politicalemergency.com',
3089                 '*.power-emergency.com',
3090                 '*.prayingfor.us',
3091                 '*.realbadidea.com',
3092                 '*.realisticpolitics.com',
3093                 '*.reallybites.com',
3094                 '*.reallypumping.us',
3095                 '*.reallyrules.com',
3096                 '*.reallysuckass.com',
3097                 '*.reallysucksass.com',
3098                 '*.realsweetheart.com',
3099                 '*.rottenass.com',
3100                 '*.schoolreference.com',
3101                 '*.sexheroes.com',
3102                 '*.sharewith.us',
3103                 '*.smutstars.com',
3104                 '*.soakinglips.com',
3105                 '*.somegood.tv',
3106                 '*.songsfrom.us',
3107                 '*.stinkingfart.com',
3108                 '*.stinkyhands.com',
3109                 '*.storiesfrom.us',
3110                 '*.taboocountry.com',
3111                 '*.television-series.com',
3112                 '*.thisbelongsto.us',
3113                 '*.totallyboning.us',
3114                 '*.vaginasisters.com',
3115                 '*.verydirtylaundry.com',
3116                 '*.videosfor.us',
3117                 '*.videosfrom.us',
3118                 '*.videosof.us',
3119                 '*.virtualdogshit.com',
3120                 '*.web1000.com',
3121                 '*.webpicturebook.com',
3122                 '*.wronger.com',
3123                 '*.xxxnations.com',
3124                 '*.yourwaywith.us',
3125         ),
3126         'webblog.ru',
3127         'weblogmaniacs.com',
3128         '.webng.com',                   // www.*, www3.*
3129         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3130         'websitetoolbox.com',
3131         '*.webtropia.com',
3132         'Welnet.de' => array(
3133                 'welnet.de',
3134                 'welnet4u.de',
3135         ),
3136         'wh-gb.de',
3137         '*.wikidot.com',
3138         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3139         '*.wmjblogs.ru',
3140         '*.wordpress.com',
3141         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3142         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3143         '*.xforum.se',
3144         'xfreeforum.com',
3145         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3146         '*.xoomwebs.com',
3147         '.xterm.org',
3148         '.freeblogs.xp.tl',
3149         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3150         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3151         'Yahoo.com' => array(
3152                 'flickr.com',
3153                 'geocities.com',
3154         ),
3155         'YANDEX, LLC.' => array(        // noc at yandex.net
3156                 '*.narod.ru',
3157                 'ya.ru',
3158                 'yandex.ru',
3159         ),
3160         '*.yeahost.com',
3161         'yourfreebb.de',
3162         'Your-Websites.com' => array(
3163                 '*.your-websites.net',
3164                 '*.web-space.ws',
3165         ),
3166
3167
3168         '*.heliohost.org',      // by ashoat at gmail.com
3169         'X10Hosting.com' => array(
3170                 // by support at clockworkcomputers.com
3171                 '*.x10hosting.com',
3172                 '*.elementfx.com',
3173                 '*.exofire.net',
3174                 '*.pcriot.com',
3175         ),
3176         '.zendurl.com',         // by ajcar1992 at gmail.com
3177 );
3178
3179 // --------------------------------------------------
3180
3181 $blocklist['B-2'] = array(
3182
3183         // B-2: Jacked contents, something implanted
3184         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3185         '*.3dm3.com',
3186         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3187         '*.1fr1.com',
3188         'a4aid.org',
3189         'aac.com',
3190         '*.aamad.org',
3191         'ad-pecjak.si',
3192         'agnt.org',
3193         'alwanforthearts.org',
3194         '*.anchor.net.au',
3195         'anewme.org',
3196         'arcrockett.com',               ///golf/excel/
3197         'arisedesign.net',              //Portfolio/d981/
3198         'internetyfamilia.asturiastelecentros.com',
3199         'ballblair.com',                ///images/thumbs/
3200         'Ball State University' => array('web.bsu.edu'),
3201         'btofaq.net',                   ///v3/forum
3202         'blepharospasm.org',
3203         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3204         'nyweb.bowlnfun.dk',
3205         '*.buzznet.com',
3206         'Carroll College' => array(
3207                 'carroll.edu',          ///boards/
3208         ),
3209         '*.canberra.net.au',
3210         'castus.com',
3211         'Case Western Reserve University' => array('case.edu'),
3212         'ceval.de',
3213         'chaco.gov.ar',
3214         'chasingrainbowsaustralia.com', ///geometry/
3215         'codespeak.net',
3216         'Colorado School of Mines' => array('ticc.mines.edu'),
3217         '*.colourware.co.uk',
3218         'cpuisp.com',
3219         'International Christian University' => array('icu.edu.ua'),
3220         '*.iphpbb.com',
3221         'board-z.de',
3222         '*.board-z.de',
3223         'California State University Stanislaus' => array('writing.csustan.edu'),
3224         'cannon.co.za',
3225         'columbosgarden.com',
3226         '*.communityhost.de',
3227         'connectionone.org',
3228         'deathwinds.com',
3229         'deforum.org',
3230         'delayedreaction.org',
3231         'deproduction.org',
3232         'dc503.org',
3233         'dialadeck.com',                ///images/
3234         'dre-centro.pt',
3235         'Duke University' => array('devel.linux.duke.edu'),
3236         '*.esen.edu.sv',
3237         'forums.drumcore.com',
3238         'dundeeunited.org',
3239         'energyglass.com.ua',
3240         'equitas.com.au',               ///images/mim3/, no index.html
3241         'exclusivehotels.com',
3242         'info.ems-rfid.com',
3243         'fairyfunkyard.com',    ///images_files/files/
3244         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3245         'fbwloc.com',
3246         '.fhmcsa.org.au',
3247         'findyourwave.co.uk',
3248         'frogcafe.net',
3249         'plone4.fnal.gov',
3250         'freeforen.com',
3251         'funkdoc.com',
3252         'funnyclipcentral.com',
3253         'gearseds.com',
3254         'generationrice.com',
3255         'ghettojava.com',
3256         'gnacademy.org',
3257         '*.goodboard.de',
3258         'GreenDayVideo.net' => array(
3259                 'greendayvideo.net',
3260                 'espanol.greendayvideo.net',
3261         ),
3262         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3263         'Harvard Law School' => array('blogs.law.harvard.edu'),
3264         'helpiammoving.com',
3265         'homepage-dienste.com',
3266         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3267         'Howard University' => array('networks.howard.edu'),
3268         'hullandhull.com',
3269         'Huntington University' => array('huntington.edu'),
3270         'huskerink.com',
3271         '.hyba.info',
3272         'ideas4you.com',        ///photos/
3273         'inda.org',
3274         '*.indymedia.org',      // by abdecom at riseup.net
3275         'instantbulletin.com',
3276         'internetincomeclub.com',
3277         '*.inventforum.com',
3278         'Iowa State University' => array('boole.cs.iastate.edu'),
3279         'ipwso.org',
3280         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3281         'ironmind.com',
3282         'skkustp.itgozone.com', // hidden JavaScript
3283         'jazz2online.com',
3284         '.jloo.org',
3285         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3286         'kjon.com',
3287         'Kazan State University' => array(
3288                 'dir.kzn.ru',
3289                 'sys.kcn.ru',
3290         ),
3291         'test.kernel.org',
3292         'kevindmurray.com',
3293         'kroegjesroutes.nl',
3294         '.legion.org',
3295         'Loyola Marymount University' => array('lmu.edu'),
3296         'forum.lixium.fr',
3297         'macfaq.net',
3298         'macvirus.org',         ///board/
3299         'me4x4.com',
3300         'microbial-ecology.net',
3301         'minsterscouts.org',
3302         'morallaw.org',
3303         'morerevealed.com',
3304         'macronet.org',
3305         'mamiya.co.uk',
3306         'vcd.mmvcd.com',
3307         'Monmouth College' => array('department.monm.edu'),
3308         'mountainjusticemedia.org',
3309         '*.mybbland.com',
3310         'mydlstore.com',
3311         '*.netboardz.com',
3312         'North Carolina A&T State University' => array(
3313                 'ncat.edu',
3314                 'my.ncat.edu',
3315                 'hlc.ncat.edu',
3316         ),
3317         'placetobe.org',
3318         'Naropa University' => array(
3319                 'naropa.edu',                   ///forum/
3320         ),
3321         'users.nethit.pl',
3322         'nightclubvip.net',
3323         'njbodybuilding.com',
3324         'nlen.org',
3325         'North Carolina School of Science and Mathematics' => array(
3326                 'neverland.ncssm.edu',  ///include/web/forum/
3327                 'grid.ncssm.edu',               ///ncssm_grid/
3328         ),
3329         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3330         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3331         'offtextbooks.com',
3332         'ofimatika.com',
3333         'olympiafoto.com',              ///images/
3334         'omakase-net',                  // iframe
3335         'omikudzi.ru',
3336         'openchemist.net',
3337         'palungjit.com',
3338         'pataphysics-lab.com',
3339         'paypaldev.org',
3340         'paullima.com',
3341         'perl.org.br',
3342         'pfff.co.uk',
3343         'pimpo.com',                    ///_old_site/
3344         'pix4online.co.uk',
3345         'plone.dk',
3346         'preform.dk',
3347         'privatforum.de',
3348         'publicityhound.net',
3349         'puppylinux.net',               ///news/content/counter/pages/
3350         'qea.com',
3351         'rbkdesign.com',
3352         'rehoboth.com',
3353         'rodee.org',
3354         'ryanclark.org',
3355         '*.reallifelog.com',
3356         'rkphunt.com',
3357         'rso-csp.org',                  ///bulletins/
3358         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3359         'sapphireblue.com',
3360         'saskchamber.com',
3361         'savevoorhees.org',
3362         'sdhmalenovice.cz',             //galerie/
3363         'selikoff.net',
3364         'serbisyopilipino.org',
3365         'setbb.com',
3366         'sharejesusinternational.com',
3367         'silver-tears.net',
3368         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3369         '.softpress.com',
3370         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3371         'fora.taniemilitaria.pl',       ///phpbb
3372         'tehudar.ru',
3373         'Tennessee Tech University' => array('manila.tntech.edu'),
3374         'thebluebird.ws',
3375         'theosis.org',
3376         '*.thoforum.com',
3377         'troms-slekt.com',
3378         'theedgeblueisland.com',
3379         'toyshop.com.tw',               // /images/sigui/
3380         'torontoplace.com',
3381         'chat.travlang.com',
3382         'trickropingbylassue.com',
3383         'Truman State University' => array('mathbio.truman.edu'),
3384         'tuathadedannan.org',
3385         'txgotg.com',
3386         'tzaneen.co.za',
3387         'ugeavisen.com',                ///style/
3388         'forums.ugo.com',
3389         'whole.cs.unibo.it',
3390         'The University of North Dakota' => array(
3391                 'learn.aero.und.edu',
3392                 'ez.asn.und.edu',
3393         ),
3394         'The University of Alabama' => array('bama.ua.edu'),
3395         'unisonscotlandlaw.co.uk',
3396         'University of California' => array('classes.design.ucla.edu'),
3397         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3398         'University of Northern Colorado' => array('unco.edu'),
3399         'University of North Carolina' => array(
3400                 'elm.cis.uncw.edu'      ///testBoinc/
3401         ),
3402         'University of Toronto' => array(
3403                 'environment.utoronto.ca',
3404                 'grail.oise.utoronto.ca',
3405                 'utsc.utoronto.ca',
3406         ),
3407         'University of Wisconsin' => array(
3408                 'einstein.phys.uwm.edu'
3409         ),
3410         'urgentclick.com',
3411         'vacant.org.uk',
3412         'Villa Julie College' => array('www4.vjc.edu'),
3413         'Vail Valley Foundation' => array('.vvf.org'),
3414         'wabson.org',
3415         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3416         'webarch.com',          // by WebArchitects (webarch at insync.net)
3417         'weehob.com',
3418         'West Virginia University Parkersburg' => array('wvup.edu'),
3419         'williamsburgrentals.com',
3420         'wolvas.org.uk',
3421         'wookiewiki.org',
3422         'xsgaming.com',                 // Jacked
3423         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3424         'Yahoo.com' => array(
3425                 'blog.360.yahoo.com',
3426                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3427         ),
3428         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3429         'youthpeer.org',
3430         '*.zenburger.com',
3431         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3432 );
3433
3434 // --------------------------------------------------
3435
3436 $blocklist['C'] = array(
3437
3438         // C: Sample setting of:
3439         // Exclusive spam domains
3440         //
3441         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3442         // affiliates, finance, sending viruses, malicious attacks to browsers,
3443         // and/or mixed ones
3444         //
3445         // Please notify us about this list with reason:
3446         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3447
3448         // C-1: Domain sets (seems to be) born to spam you
3449         //
3450         // All buziness-related spam
3451         //'.biz'
3452         //
3453         'admin at seekforweb.com' => array(
3454                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3455                 '.lovestoryx.com',
3456                 '.loveaffairx.com',
3457                 '.onmore.info',
3458                 '.scfind.info',
3459                 '.scinfo.info',
3460                 '.webwork88.info',
3461         ),
3462         'boss at bse-sofia.bg' => array(        // by Boris
3463                 '.htewbop.org',
3464                 '.kimm--d.org',
3465                 '.gtre--h.org',
3466                 '.npou--k.org',
3467                 '.bres--z.org',
3468                 '.berk--p.org',
3469                 '.bplo--s.org',
3470                 '.basdpo.org',
3471                 '.jisu--m.org',
3472                 '.kire--z.org',
3473                 '.mertnop.org',
3474                 '.mooa--c.org',
3475                 '.nake--h.org',
3476                 '.noov--b.org',
3477                 '.suke--y.org',
3478                 '.vasdipv.org',
3479                 '.vase--l.org',
3480                 '.vertinds.org',
3481         ),
3482         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3483                 '.aqq3.info',
3484                 '.axa00.info',
3485                 '.okweb11.org',
3486                 '.okweb12.org',
3487                 '.okweb13.org',
3488                 '.okweb14.org',
3489         ),
3490         'opezdol at gmail.com' => array(
3491                 '.informazionicentro.info',
3492                 '.notiziacentro.info',
3493         ),
3494         'SomethingGen' => array(
3495                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3496                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3497                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3498                 // by Lee Chang (nebucha at model-x.com)
3499                 '.adult-chat-world.info',       // by Lui
3500                 '.adult-chat-world.org',        // by Lui
3501                 '.adult-sex-chat.info',         // by Lui
3502                 '.adult-sex-chat.org',          // by Lui
3503                 '.adult-cam-chat.info',         // by Lui
3504                 '.adult-cam-chat.org',          // by Lui
3505                 '.dildo-chat.org',                      // by Lui
3506                 '.dildo-chat.info',                     // by Lui
3507                 // flirt-online.info is not CamsGen
3508                 '.flirt-online.org',            // by Lui
3509                 '.live-adult-chat.info',        // by Lui
3510                 '.live-adult-chat.org',         // by Lui
3511                 '.sexy-chat-rooms.info',        // by Lui
3512                 '.sexy-chat-rooms.org',         // by Lui
3513                 '.swinger-sex-chat.info',       // by Lui
3514                 '.swinger-sex-chat.org',        // by Lui
3515                 '.nasty-sex-chat.info',         // by Lui
3516                 '.nasty-sex-chat.org',          // by Lui
3517
3518                 '.camshost.info',                       // by Sergey
3519                 '.camdoors.info',                       // by Sergey
3520                 '.chatdoors.info',                      // by Sergey
3521
3522                 // 89.149.206.225 by Pronin
3523                 '.dorozhka.info',
3524                 '.kolonochka.info',
3525                 '.knizhechka.info',
3526                 '.krantik.info',
3527                 '.lebedi.info',
3528                 '.loshad.info',
3529                 '.pechenka.info',
3530                 '.porosenok.info',
3531                 '.indyushonok.info',
3532                 '.kotyonok.info',
3533                 '.kozlyonok.info',
3534                 '.magnoliya.info',
3535                 '.svinka.info',
3536                 '.svinya.info',
3537                 '.televizorchik.info',
3538                 '.tumbochka.info',
3539                 '.zherebyonok.info',
3540
3541                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3542
3543                 '.adult-cam-chat-sex.info',             // by Lee
3544                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3545                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3546                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3547                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3548                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3549                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3550                 '.sex-chat-porn-cam.info',              // by Lee
3551         ),
3552         'mital at topo20.org' => array( // by Marcello Italianore
3553                 '.trevisos.org',
3554                 '.topo20.org',
3555         ),
3556         'WellCams.com' => array(
3557                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3558                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3559                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3560         ),
3561         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3562                 '.besturgent.org',
3563                 '.googletalknow.org',
3564                 '.montypythonltd.org',
3565                 '.supersettlemet.org',
3566                 '.thepythonfoxy.org',
3567                 '.ukgamesyahoo.org',
3568                 '.youryahoochat.org',
3569         ),
3570         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3571                 '.dbsajax.org',
3572                 '.acgt2005.org',
3573                 '.gopikottoor.com',
3574                 '.koosx.org',
3575                 '.mmgz.org',
3576                 '.zhiyehua.net',
3577         ),
3578         'vdf at lovespb.com' => array(  // by Andrey
3579                 '.02psa.info',
3580                 '.1818u.org',
3581                 '.18ew.info',
3582                 '.43sexx.org',
3583                 '.56porn.org',
3584                 '.6discount.info',
3585                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3586                 '.78rus.info',
3587                 '.92ssex.org',          // "ForumGenerator"
3588                 '.93adult.org',         // "ForumGenerator"
3589                 '.aboutsr.info',
3590                 '.aboutzw.info',
3591                 '.all23.info',
3592                 '.allvdf.info',
3593                 '.buy-dge.info',
3594                 '.buypo.info',
3595                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3596                 '.cv83.info',
3597                 '.cvwifw.info',
3598                 '.dabouts.info',
3599                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3600                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3601                 '.free01sa.info',
3602                 '.frees1.info',
3603                 '.freexz.info',
3604                 '.ifree-search.org',
3605                 '.lovespb.info',
3606                 '.myso2.info',
3607                 '.nb74u.info',
3608                 '.ohhh2.info',
3609                 '.ol43.info',
3610                 '.olala18.info',
3611                 '.oursales.info',
3612                 '.pasian1.info',
3613                 '.pldk.info',
3614                 '.po473.info',
3615                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3616                 '.poz2.info',
3617                 '.qpf8j4d.info',
3618                 '.saleqw.info',
3619                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3620                 '.sexz18.info',
3621                 '.sexy69a.info',
3622                 '.shedikc.info',
3623                 '.spb78.info',
3624                 '.usacanadauk.info',
3625                 '.v782mks.info',
3626                 '.vny0.info',
3627                 '.wifes1.info',
3628                 '.xranvam.info',
3629                 '.zenitcx.info',
3630                 '.zxolala.info',
3631         ),
3632         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3633                 '.care01.info',
3634                 '.care02.info',
3635                 '.care03.info',
3636                 '.care04.info',
3637                 '.care05.info',
3638                 '.care06.info',
3639                 '.care07.info',
3640                 '.care08.info',
3641                 '.care09.info',
3642                 '.care10.info',
3643                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3644                 '.klastar01.info',
3645                 '.klastar02.info',
3646                 '.klastar03.info',
3647                 '.klastar04.info',
3648                 '.klastar05.info',
3649                 '.klastar06.info',
3650                 '.klastar07.info',
3651                 '.klastar08.info',
3652                 '.klastar09.info',
3653                 '.klastar10.info',
3654                 '.um20ax01.info',
3655                 '.um20ax02.info',
3656                 '.um20ax03.info',
3657                 '.um20ax04.info',
3658                 '.um20ax05.info',
3659                 '.um20ax06.info',
3660                 '.um20ax07.info',
3661                 '.um20ax08.info',
3662                 '.um20ax09.info',
3663                 '.um20ax10.info',
3664         ),
3665         'forrass at gmail.com' => array(        // by Ismail
3666                 '.zmh01.info',
3667                 '.zmh02.info',
3668                 '.zmh03.info',
3669                 '.zmh04.info',
3670                 '.zmh05.info',
3671                 '.zmh06.info',
3672                 '.zmh07.info',
3673                 '.zmh08.info',
3674                 '.zmh09.info',
3675                 '.zmh10.info',
3676         ),
3677         'Varsylenko Vladimir and family' => array(
3678                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3679                 // by David C. Lack (David.C.Lack at dodgeit.com)
3680                 // by Kuzma V Safonov (admin at irtes.ru)
3681                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3682                 // by LAURI FUNK (vvm_kz at rambler.ru)
3683
3684                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3685                 '.abrek.info',                          // by Petrov
3686                 '.allsexonline.info',           // by Varsylenko
3687                 '.d1rnow.info',                         // by Petrov
3688                 '.doxer.info',                          // Petrov
3689                 '.freeforworld.info',           // Varsylenko
3690                 '.goodworksite.info',           // Varsylenko
3691                 '.onall.info',                          // by Varsylenko
3692                 '.powersiteonline.info',        // by Varsylenko
3693                 '.rentmysite.info',                     // by Varsylenko
3694                 '.sexdrink.info',                       // by Petrov
3695                 '.siteszone.info',                      // by Varsylenko
3696                 '.sfup.info',                           // by Petrov
3697                 '.superfreedownload.info',      // by Varsylenko
3698                 '.superneeded.info',            // by Varsylenko
3699                 '.srup.info',                           // by Petrov
3700
3701                 // 66.235.185.143(*.svabuse.info)
3702                 '.accommodationwiltshire.com',  // by Petrov
3703                 '.levines.info',                        // by Petrov
3704                 '.sernost.info',                        // by Petrov
3705                 '.sexvideosite.info',           // by Petrov
3706                 '.vvsag.info',                          // by Petrov
3707
3708                 // 81.0.195.134
3709                 '.michost.info',                        // by LAURI
3710                 '.parther.info',                        // by LAURI
3711
3712                 // 88.214.202.100
3713                 '.gitsite.info',                        // by Petrov
3714                 '.organiq.info',                        // by Petrov
3715                 '.yoursitedh.info',                     // by Petrov
3716
3717                 // 217.11.233.58 by Petrov
3718                 '.mp3vault.info',
3719
3720                 // DNS time out or failed
3721                 '.bequeous.info',                       // by Davi
3722                 '.sopius.info',                         // by Kuzma
3723                 '.sovidopad.info',                      // by Kuzma
3724                 '.yerap.info',                          // by Kuzma
3725         ),
3726         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3727                 '.flywebs.com',
3728                 '.hostrim.com',
3729                 '.playbit.com',
3730         ),
3731         'webmaster at dgo3d.info' => array(     // by Son Dittman
3732                 '.bsb3b.info',
3733                 '.dgo3d.info',
3734                 '.dgo5d.info',
3735         ),
3736         'cooler.infomedia at gmail.com' => array(
3737                 '.diabetescarelink.com',
3738                 '.firstdebthelp.com',
3739         ),
3740         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3741                 '.pokah.lv',
3742                 '.astrons.com',
3743         ),
3744         'seocool at bk.ru' => array(    // by Skar
3745                 '.implex3.com',
3746                 '.implex6.info',
3747                 '.softprof.org',
3748         ),
3749         'Caslim.info' => array(
3750                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3751                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3752         ),
3753         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3754                 '.777-poker.biz',
3755                 '.porn-11.com',
3756         ),
3757         'Conto.pl' => array(
3758                 '.8x.pl',               // domena at az.pl
3759                 '.3x3.pl',              // by biuro at nazwa.pl
3760                 '.conto.pl',    // by biuro at nazwa.pl
3761                 '.guu.pl',              // by conto.pl (domena at az.pl)
3762                 '.xcx.pl',              // domena at az.pl
3763                 '.yo24.pl',             // domena at az.pl
3764         ),
3765         'mail at pcinc.cn' => array(
3766                 // Domains by Lin Zhi Qiang
3767                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3768
3769                 // 125.65.112.11
3770                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3771                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3772                 '.shoopivdoor.com',
3773
3774                 // 125.65.112.12
3775                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3776                 '.hosetaibei.com',
3777                 '.playsese.com',
3778
3779                 // 125.65.112.13
3780                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3781                 '.ahatena.com',
3782                 '.asdsdgh-jp.com',
3783                 '.conecojp.net',
3784                 '.game-oekakibbs.com',
3785                 '.geocitygame.com',
3786                 '.gsisdokf.net',
3787                 '.korunowish.com',
3788                 '.netgamelivedoor.com',
3789                 '.soultakerbbs.net',
3790                 '.yahoo-gamebbs.com',
3791                 '.ywdgigkb-jp.com',
3792
3793                 // 125.65.112.14
3794                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3795                 '.acyberhome.com',
3796                 '.bbs-qrcode.com',
3797                 '.gamesroro.com',
3798                 '.gameyoou.com',
3799                 '.gangnu.com',
3800                 '.goodclup.com',
3801                 '.lineage321.com',
3802                 '.linkcetou.com',
3803                 '.love888888.com',
3804                 '.ragnarok-bbs.com',
3805                 '.ragnarok-game.com',
3806                 '.rmt-navip.com',
3807                 '.watcheimpress.com',
3808
3809                 // 125.65.112.15
3810                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3811                 '.18girl-av.com',
3812                 '.aurasoul-visjp.com',
3813                 '.gamaniaech.com',
3814                 '.game-mmobbs.com',
3815                 '.gameslin.net',
3816                 '.gemnnammobbs.com',
3817                 '.gogolineage.net',
3818                 '.grandchasse.com',
3819                 '.jpragnarokonline.com',
3820                 '.jprmthome.com',
3821                 '.maplestorfy.com',
3822                 '.netgamero.net',
3823                 '.nothing-wiki.com',
3824                 '.ourafamily.com',
3825                 '.ragnarok-sara.com',
3826                 '.rmt-lineagecanopus.com',
3827                 '.rmt-ranloki.com',
3828                 '.rogamesline.com',
3829                 '.roprice.com',
3830                 '.tuankong.com',
3831                 '.twreatch.com',
3832
3833                 // 125.65.112.22
3834                 // The same IP: web013.cdnhost.cn
3835                 '.lzy88588.com',
3836                 '.ragnaroklink.com',
3837
3838                 // 125.65.112.24
3839                 '.rmtfane.com',
3840                 '.fc2weday.com',
3841                 '.nlftweb.com',
3842
3843                 // 125.65.112.27
3844                 '.i520i.com',
3845                 '.sunwayto.com',
3846
3847                 // 125.65.112.31
3848                 // The same IP: web016.cdnhost.cn
3849                 '.twyaooplay.com',
3850
3851                 // 125.65.112.32
3852                 // The same IP: web037.cdnhost.cn
3853                 '.emeriss.com',
3854                 '.raginfoy.com',
3855                 '.ragnarokgvg.com',
3856                 '.rentalbbs-livedoor.com',
3857                 '.romaker.com',
3858                 '.sagewikoo.com',
3859                 '.samples112xrea.com',
3860                 '.wiki-house.com',
3861
3862                 // 125.65.112.49
3863                 '.chaosx0.com',
3864
3865                 // 125.65.112.88
3866                 // The same IP: web015.cdnhost.cn
3867                 '.a-hatena.com',
3868                 '.biglobe-ne.com',
3869                 '.blogplaync.com',
3870                 '.din-or.com',
3871                 '.dtg-gamania.com',
3872                 '.fcty-net.com',
3873                 '.game-fc2blog.com',
3874                 '.gameurdr.com',
3875                 '.getamped-garm.com',
3876                 '.interzq.com',
3877                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3878                 '.luobuogood.com',
3879                 '.ragnarok-search.com',
3880                 '.rinku-livedoor.com',
3881
3882                 // 125.65.112.90
3883                 '.gtvxi.com',
3884
3885                 // 125.65.112.91
3886                 // The same IP: web004.cdnhost.cn
3887                 '.6828teacup.com',
3888                 '.blog-livedoor.net',
3889                 '.cityblog-fc2web.com',
3890                 '.deco030-cscblog.com',
3891                 '.imbbs2t4u.com',
3892                 '.k5dionne.com',
3893                 '.lineagejp-game.com',
3894                 '.mbspro6uic.com',
3895                 '.slower-qth.com',
3896                 '.wikiwiki-game.com',
3897
3898                 // 125.65.112.93
3899                 // The same IP: web022.cdnhost.cn
3900                 '.aaa-livedoor.net',
3901                 '.cityhokkai.com',              // web022.cdnhost.cn
3902                 '.fanavier.net',
3903                 '.geocitylinks.com',    // web022.cdnhost.cn
3904                 '.kuronowish.net',              // web022.cdnhost.cn
3905                 '.ro-bot.net',
3906
3907                 // 125.65.112.95
3908                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3909                 '.23styles.com',
3910                 '.aehatena-jp.com',
3911                 '.ameblog-jp.net',
3912                 '.antuclt.com',
3913                 '.blog-ekndesign.com',
3914                 '.d-jamesinfo.com',
3915                 '.editco-jp.com',
3916                 '.ezbbsy.com',
3917                 '.extd-web.com',
3918                 '.fotblong.com',
3919                 '.game62chjp.net',
3920                 '.gamegohi.com',
3921                 '.gamesmusic-realcgi.net',
3922                 '.gamesragnaroklink.net',
3923                 '.homepage-nifty.com',
3924                 '.ie6xp.com',
3925                 '.irisdti-jp.com',
3926                 '.jklomo-jp.com',
3927                 '.jpxpie6-7net.com',
3928                 '.lian-game.com',
3929                 '.lineage-bbs.com',
3930                 '.lineage1bbs.com',
3931                 '.livedoor-game.com',
3932                 '.litcan.com',
3933                 '.lovejpjp.com',
3934                 '.m-phage.com',
3935                 '.muantang.com',
3936                 '.plusd-itmedia.com',
3937                 '.runbal-fc2web.com',
3938                 '.saussrea.com',
3939                 '.tooalt.com',
3940                 '.toriningena.net',
3941                 '.yahoodoor-blog.com',
3942                 '.yy14-kakiko.com',
3943
3944                 // 125.65.112.137
3945                 '.clublineage.com',
3946
3947                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3948                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3949                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3950
3951                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3952                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3953
3954                 '.games-nifty.com',             // 255.255.255.255 now
3955                 '.homepage3-nifty.com', // 255.255.255.255 now
3956         ),
3957         'caddd at 126.com' => array(
3958                 '.chengzhibing.com',    // by chen gzhibing
3959                 '.jplinux.com',                 // by lian liang
3960                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3961                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3962                 '.tooplogui.com',               // by zibing cai
3963                 '.twsunkom.com',                // by guo zhi wei
3964                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3965         ),
3966         'nuigiym2 at 163.com' => array( // by fly bg
3967                 '.linainfo.net',                // Seems IP not allocated now
3968                 '.lineagalink.com',             // 220.247.157.99
3969                 '.lineagecojp.com',             // 61.139.126.10
3970                 '.ragnarokonlina.com',  // 220.247.158.99
3971         ),
3972         'aakin at yandex.ru' => array(
3973                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3974                 '.entirestar.com',
3975                 '.joppperl.info',
3976                 '.onlinedrugsdirect.com',
3977                 '.pilkazen.info',
3978                 '.superbuycheap.com',
3979                 '.supersmartdrugs.com',
3980                 '.thecheappillspharmacy.com',
3981                 '.topdircet.com',
3982         ),
3983         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3984                 '.tianmieccp.com',
3985                 '.xianqiao.net',
3986         ),
3987         'm.frenzy at yahoo.com' => array(       // by Michael
3988                 '.p5v.org',
3989                 '.j111.net',
3990                 '.searchhunter.info',
3991                 '.soft2you.info',
3992                 '.top20health.info',
3993                 '.top20ringtones.info',
3994                 '.top20travels.info',
3995                 '.v09v.info',
3996                 '.x09x.info',
3997                 '.zb-1.com',
3998         ),
3999         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
4000                 '.bingogoldenpalace.info',
4001                 '.ccarisoprodol.info',
4002                 '.ezxcv.info',
4003                 '.isuperdrug.com',
4004                 '.pharmacif.info',
4005                 '.pornsexteen.biz',
4006                 '.ugfds.info',
4007                 '.vviagra.info',
4008         ),
4009         'anatolsenator at gmail.com' => array(  // by Anatol
4010                 '.cheapestviagraonline.info',
4011                 '.buyphentermineworld.info'
4012         ),
4013         'webmaster at mederotica.com' => array(
4014                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
4015                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
4016                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4017                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4018         ),
4019         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4020                 '.auase.info',          // by ilemavyq7461 at techie.com
4021                 '.axeboxew.info',       // by zygeu220 at writeme.com
4022                 '.boluzuhy.info',       // by pikico5419 at post.com
4023                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4024                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4025                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4026                 '.exidiqe.info',        // by kufyca5475 at mail.com
4027                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4028                 '.gubiwu.info',         // by lywunef6532 at iname.com
4029                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4030                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4031                 '.jiuuz.info',          // by meqil6549 at mail.com
4032                 '.nudetar.info',        // by vohepafi3536 at techie.com
4033                 '.nipud.info',          // by bohox9872 at mindless.com
4034                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4035                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4036                 '.olasep.info',         // by lizon8506 at mail.com
4037                 '.oueuidop.info',       // by arytyb6913 at europe.com
4038                 '.oviravy.info',        // by amyuu3883 at london.com
4039                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4040                 '.ragibe.info',         // by ehome4458 at myself.com
4041                 '.ucazib.info',         // by gorare7222 at consultant.com
4042                 '.udaxu.info',          // by gubima4007 at usa.com
4043                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4044                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4045                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4046                 '.yvaxat.info',         // by koqun9660 at mindless.com
4047                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4048         ),
4049         'Carmodelrank.com etc' => array(
4050                 // by Brianna Dunlord (briasmi at yahoo.com)
4051                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4052                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4053                 '.carmodelrank.com',// by Brianna
4054                 '.cutestories.net',     // by Brianna
4055                 '.sturducs.com',
4056                 '.bestother.info',      // by Tim
4057                 '.premiumcasinogames.com',      // by Brianna)
4058                 '.yaahooo.info',        // by Alice
4059         ),
4060         'aliacsandr at yahoo.com' => array(
4061                 '.cubub.info',                          // "Free Web Hosting"
4062         ),
4063         'aliacsandr85 at yahoo.com' => array(
4064                 // by Dr. Portillo or Eva Sabina Lopez Castell
4065                 '.xoomer.alice.it',                     // "Free Web Hosting"
4066                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4067                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4068                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4069                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4070                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4071                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4072                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4073                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4074                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4075                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4076                 '.viagra-price.org',            // by Eva
4077                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4078                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4079         ),
4080         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4081         'Something-Gamble' => array(
4082                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4083                 '.atonlineroulette.com',                        // by Blaise Johns
4084                 '.atroulette.com',                                      // by Gino Sand
4085                 '.betting-123.com',                                     // by Joana Caceres
4086                 '.betting-i.biz',                                       // by Joaquina Angus
4087                 '.casino-challenge.com',                        // by Maren Camara
4088                 '.casino-gambling-i.biz',                       // by Giselle Nations
4089                 '.casino-italian.com',                          // by Holley Yan
4090                 '.casino123.net',                                       // by Ta Baines
4091                 '.casinohammamet.com',                          // by Inger Barhorst
4092                 '.casinoqz.com',                                        // by Berenice Snow
4093                 '.casinos-777.net',                                     // by Iona Ayotte
4094                 '.crapsok.com',                                         // by Devon Adair,
4095                 '.dcasinoa.com',                                        // by August Hawkinson
4096                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4097                 '.free-dvd-player.biz',                         // by Rosario Kidd
4098                 '.florida-lottery-01.com',                      // by Romeo Dillon
4099                 '.gaming-123.com',                                      // by Jennifer Byrne
4100                 '.kenogo.com',                                          // by Adriane Bell
4101                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4102                 '.onbaccarat.com',                                      // by Kassandra Dunn
4103                 '.online-experts.biz',                          // by Liberty Helmick
4104                 '.onlinepoker-123.com',                         // by Andrea Feaster
4105                 '.playpokeronline-123.com',                     // by Don Lenard
4106                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4107                 '.texasholdem123.com',                          // by Savion Lasseter
4108                 '.texasholdem-777.com',                         // by Savanna Lederman
4109                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4110                 '.the-craps-100.us',                            // by Lorrine Ripley
4111                 '.the-free-online-game-913.us',         // by Kanesha Clem
4112                 '.the-free-poker-1798.us',                      // by Elaina Witte
4113                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4114                 '.the-online-game-poker-1185.us',       // by Merna Bey
4115                 '.the-playing-black-jack.com',          // by Kristine Brinker
4116                 '.the-poker-1082.us',                           // by Kristofer Boldt
4117                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4118                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4119                 '.the-video-black-jack.com',            // by Jagger Godin
4120         ),
4121         'Something-Insurance' => array(
4122                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4123
4124                 // 0-9
4125                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4126                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4127                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4128                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4129                 '.18wkcf.com',                                  // by Lexy Bohannon
4130                 '.2001werm.org',                                // by Raphael Rayburn
4131                 '.2004heeparea1.org',                   // by Dinorah Andrews
4132                 '.21nt.net',                                    // by Jaida Estabrook
4133                 '.3finfo.com',                                  // by Damian Pearsall
4134                 '.3somes.org',                                  // by Mauro Tillett
4135                 '.453531.com',                                  // by Kurt Flannery
4136                 '.4freesay.com',                                // by Eloy Jones
4137                 '.5ssurvey.com',                                // by Annamarie Kowalski
4138                 '.8-f22.com',                                   // by Larraine Evers
4139                 '.9q.org',                                              // by Ami Boynton
4140
4141                 // A
4142                 '.a40infobahn.com',                             // by Amit Nguyen
4143                 '.a4h-squad.com',                               // by Ross Locklear
4144                 '.aac2000.org',                                 // by Randi Turner
4145                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4146                 '.acahost.com',                                 // by Milton Haberman
4147                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4148                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4149                 '.activel-learning-site.com',   // by Mateo Conn
4150                 '.ad-makers.com',                               // by Shemeka Arsenault
4151                 '.ada-information.org',                 // by Josef Osullivan
4152                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4153                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4154                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4155                 '.aerovac-hotpress.com',                // by Trey Marlow
4156                 '.agfbiosensors.com',                   // by Lionel Dempsey
4157                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4158                 '.affordablerealestate.net',    // by Season Otoole
4159                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4160                 '.ahouserefinance.com',                 // by Young Alley
4161                 '.akirasworld.com',                             // by Piper Sullivan
4162                 '.alderik-production.com',              // by Joan Stiles
4163                 '.alltechdata.com',                             // by Dom Laporte
4164                 '.amconllc.com',                                // by Syble Benjamin
4165                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4166                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4167                 '.angelandcrown.net',                   // by Claretta Najera
4168                 '.ankoralina.com',                              // by Eladia Demers
4169                 '.antiquegoldmine.com',                 // by Keena Marlow
4170                 '.aquinosotros.com',                    // by Nanci Prentice
4171                 '.architectionale.com',                 // by Wilbur Cornett
4172                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4173                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4174                 '.arefinancehome.com',                  // by Duane Doran
4175                 '.arefinancinghome.com',                // by Ike Laney
4176                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4177                 '.auction-emall-site.info',             // by Dayle Denman
4178                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4179                 '.auto-buy-rite.com',                   // by Asuncion Buie
4180                 '.axxinet.net',                                 // by Roberta Gasper
4181                 '.azimutservizi.com',                   // by Ethelene Brook
4182                 '.azstudies.org',                               // by Bernardina Walden
4183
4184                 // B
4185                 '.babtrek.com',                                 // by Simonette Mcbrayer
4186                 '.babycujo.com',                                // by Francisco Akers
4187                 '.bakeddelights.com',                   // by Dave Evenson
4188                 '.bbcart.com',                                  // by Lucio Hamlin
4189                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4190                 '.best-digital-phone.us',               // by Meghann Crockett
4191                 '.bjamusements.com',                    // by Lurlene Butz
4192                 '.blursgsu.com',                                // by Weston Killian
4193                 '.bookwide.net',                                // by Tequila Zacharias
4194                 '.boreholes.org',                               // by Flora Reed
4195                 '.breathingassociaiton.org',    // by Alfred Crayton
4196                 '.birdingnh.com',                               // by Donald Healy
4197                 '.bisdragons.org',                              // by Lupe Cassity
4198                 '.blcschools.net',                              // by Alycia Jolly
4199                 '.bronte-foods.com',                    // by Kary Pfeiffer
4200                 '.buckscountyneighbors.org',    // by Maile Gaffney
4201                 '.buffalofudge.com',                    // by Mable Whisenhunt
4202                 '.burlisonforcongress.com',             // by Luann King
4203                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4204                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4205
4206                 // C
4207                 '.cabanes-web.com',                             // by Vaughn Latham
4208                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4209                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4210                 '.checaloya.com',                               // by Susana Coburn
4211                 '.calvarychapelrgvt.org',               // by Karan Kittle
4212                 '.cameras-esite.info',                  // by Karlee Frisch
4213                 '.cancerkidsforum.org',                 // by Samson Constantino
4214                 '.ccchoices.org',                               // by Kenia Cranford
4215                 '.ccupca.org',                                  // by Evonne Serrano
4216                 '.celebratemehome.com',                 // by Soraya Tower
4217                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4218                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4219                 '.choose-shoes.net',                    // by Geoffrey Setser
4220                 '.churla.com',                                  // by Ollie Wolford
4221                 '.circuithorns.co.uk',                  // by Nathanial Halle
4222                 '.clanbov.com',                                 // by Donell Hozier
4223                 '.cnm-ok.org',                                  // by Thalia Moye
4224                 '.coalitioncoalition.org',              // by Ned Macklin
4225                 '.consoleaddicts.com',                  // by Dorla Hoy
4226                 '.counterclockwise.net',                // by Melynda Hartzell
4227                 '.codypub.com',                                 // by Mercedes Coffman
4228                 '.comedystore.net',                             // by Floy Donald
4229                 '.covsys.co.uk',                                // by Abby Jacey
4230                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4231                 '.craftybidders.com',                   // by Dannie Lazo
4232                 '.credit-card-finder.net',              // by Mellie Deherrera
4233                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4234                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4235                 '.ctwine.org',                                  // by Hailey Knox
4236
4237                 // D
4238                 '.dazyation.com',                               // by Louis Strasser
4239                 '.deepfoam.org',                                // by Ethelyn Southard
4240                 '.debt-fixing.com',                             // by Dagny Rickman
4241                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4242                 '.domainadoption.com',                  // by Breann Pappas
4243                 '.diannbomkamp.com',                    // by Russel Croteau
4244                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4245                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4246                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4247                 '.digital-cameras-esite.info',  // by Milan Jolin
4248                 '.dnstechnet.net',                              // by Tamera Oman
4249                 '.drivenbydata.org',                    // by Katherine Noyes
4250                 '.dtmf.net',                                    // by Micki Slayton
4251                 '.domainsfound.com',                    // by Blossom Lively
4252
4253                 // E
4254                 '.ecstacyabuse.net',                    // by Alana Knight
4255                 '.e-digital-camera-esite.info', // by Romaine Cress
4256                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4257                 '.eldorabusecenter.org',                // by Annabella Oneal
4258                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4259                 '.encaponline.com',                             // by Patrick Keel
4260                 '.ez-shopping-online.com',              // by Gail Bartlett
4261
4262                 // F
4263                 '.faithfulwordcf.com',                  // by Bart Weeks
4264                 '.fammedassoc.com',                             // by Joshua Nelson
4265                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4266                 '.f00k.org',                                    // by Leslie Chapman
4267                 '.foreignrealtions.org',                // by Krystal Hawley
4268                 '.fortwebsite.org',                             // by Kristina Motley
4269                 '.fotofirstdigital.com',                // by Tad Whitfield
4270                 '.foundationcommons.org',               // by Caryn Eskew
4271                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4272                 '.freaky-cheats.com',                   // by Al Klein
4273                 '.free--spyware.com',                   // by Nikki Contreras
4274                 '.french-home-finance-consultant.info', // by Santana Melton
4275                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4276
4277                 // G
4278                 '.gaintrafficfast.com',                 // by Lila Meekins
4279                 '.gaygain.org',                                 // by Shell Davila
4280                 '.gcaaa.com',                                   // by Vallie Jaworski
4281                 '.generalsysteme.com',                  // by Cale Vogel
4282                 '.generation4games.co.uk',              // by Sonya Graham
4283                 '.german-dictionary.us',                // by Rex Daniel
4284                 '.gilmerrec.com',                               // by Leighann Guillory
4285                 '.glenthuntly-athletics.com',   // by Julee Hair
4286                 '.glorybaskets.com',                    // by Lynette Lavelle
4287                 '.goconstructionloan.com',              // by Willis Monahan
4288                 '.gohireit.com',                                // by Bertha Metzger
4289                 '.godcenteredpeople.com',               // by Jaycee Coble
4290
4291                 // H
4292                 '.healthinsuranceem.com',               // by Justin Munson
4293                 '.hearthorizon.info',                   // by Kory Session
4294                 '.hegerindustrial.com',                 // by Toni Wesley
4295                 '.herzequip.com',                               // by Princess Dunkle
4296                 '.hglcms.org',                                  // by Gladwin Ng
4297                 '.hipanoempresa.com',                   // by Shannon Staub
4298                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4299                 '.horse-racing-result.com',             // by Rodney Reynolds
4300                 '.hueckerfamily.com',                   // by Hershel Sell
4301
4302                 // I
4303                 '.ilove2win.com',                               // by Lamont Dickerson
4304                 '.ilruralassistgrp.org',                // by Moises Hauser
4305                 '.imageonsolutions.com',                // by Porsche Dubois
4306                 '.infoanddatacenter.com',               // by Eva Okelley
4307                 '.islamfakta.org',                              // by Goldie Boykin
4308                 '.ithomemortgage.com',                  // by Adelaide Towers
4309                 '.iyoerg.com',                                  // by Madyson Gagliano
4310
4311                 // J
4312                 '.jeffaxelsen.com',                             // by Daphne William
4313                 '.jeffreyf.net',                                // by Vito Platt
4314                 '.johnmartinsreality.com',              // by Pamela Larry
4315                 '.johnsilvers.net',                             // by Silver Battaglia
4316
4317                 // K
4318                 '.kcgerbil.org',                                // by Marisa Thayer
4319                 '.kdc-phoenix.com',                             // by Salma Shoulders
4320                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4321                 '.kosove.org',                                  // by Darwin Schneider
4322
4323                 // L
4324                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4325                 '.letsgokayaking.net',                  // by Winnie Adair
4326                 '.libertycabs.com',                             // by Adela Bonds
4327                 '.liquor-store-cellar.info',    // by Hugh Pearson
4328                 '.locomojo.net',                                // by Marco Harmon
4329                 '.lodatissimo.com',                             // by Adrian Greeson
4330                 '.lsawc.org',                                   // by Lara Han
4331                 '.lycos-test.net',                              // by Rigoberto Oakley
4332
4333                 // M
4334                 '.macro-society.com',                   // by Venessa Hodgson
4335                 '.marthasflavorfest.com',               // by Ahmad Lau
4336                 '.martin-rank.com',                             // by Cathleen Crist
4337                 '.maryandfrank.org',                    // by Theodore Apodaca
4338                 '.masterkwonhapkido.com',               // by Misty Graham
4339                 '.maxrpm-demo.com',                             // by Cristal Cho
4340                 '.mechanomorphic.com',                  // by Stanford Crow
4341                 '.mepublishing.net',                    // by Karly Fleenor
4342                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4343                 '.metwahairports.com',                  // by Nan Kitchen
4344                 '.middle-eastnews.com',                 // by Tybalt Altmann
4345                 '.mikepelchy.com',                              // by Sherly Pearson
4346                 '.milpa.org',                                   // by Nelly Aguilera
4347                 '.modayun.com',                                 // by Camilla Velasco
4348                 '.moonstoneerp.com',                    // by Garret Salmon
4349                 '.morosozinho.com',                             // by Lenore Tovar
4350                 '.morphadox.com',                               // by Hung Zielinski
4351                 '.moscasenlared.com',                   // by Tera Gant
4352                 '.sdjavasig.com',                               // by Gia Swisher
4353                 '.mpeg-radio.com',                              // by Sincere Beebe
4354                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4355                 '.mtseniorcenter.org',                  // by Frederic Ortega
4356                 '.mysteryclips.com',                    // by Edward Ashford
4357
4358                 // N
4359                 '.naavs.org',                                   // by Yuridia Gandy
4360                 '.naval-aviation.org',                  // by Roselle Campo
4361                 '.navigare-ischia.com',                 // by Arielle Coons
4362                 '.ncredc.org',                                  // by Brenda Nye
4363                 '.neonmotorsports.com',                 // by Giovanna Vue
4364                 '.nf-ny.com',                                   // by Yadira Hibbard
4365                 '.ngfdyqva.com',                                // by Emiliano Samples
4366                 '.nicozone.com',                                // by Blaine Shell
4367                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4368                 '.npawny.org',                                  // by Willard Murphy
4369                 '.nysdoed.org',                                 // by Elric Delgadillo
4370                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4371                 '.nytech-ir.com',                               // by Adrien Beals
4372
4373                 // O
4374                 '.oadmidwest.com',                              // by Gavin Kaplan
4375                 '.oarauto.com',                                 // by Susann Merriman
4376                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4377                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4378                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4379                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4380                 '.online-pills-24x7.biz',               // by Aide Hallock
4381                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4382                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4383                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4384                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4385                 '.otterbayweb.com',                             // by Maxwell Irizarry
4386
4387                 // P
4388                 '.painting-technique.us',               // by Bryanna Tooley
4389                 '.pakamrcongress.com',                  // by Bryce Summerville
4390                 '.patabney.com',                                // by Kailyn Slone
4391                 '.parde.org',                                   // by Ellie Yates
4392                 '.participatingprofiles.com',   // by Jaelynn Meacham
4393                 '.partnershipconference.org',   // by Alla Floyd
4394                 '.pet-stars.com',                               // by Carmon Luevano
4395                 '.planning-law.org',                    // by Trista Holcombe
4396                 '.ppawa.com',                                   // by Evonne Scarlett
4397                 '.precisionfilters.net',                // by Faustina Fell
4398
4399                 // Q
4400                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4401                 '.quick-debt-consolidation.net',        // by Lala Marte
4402                 '.quicktvr.com',                                // by Vernell Crenshaw
4403
4404                 // R
4405                 '.radicalsolutions.org',                // by Reece Medlin
4406                 '.randallburgos.com',                   // by Bradly Villa
4407                 '.rcassel.com',                                 // by Janiah Gallant
4408                 '.rearchitect.org',                             // by Marcus Gaudet
4409                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4410                 '.reprisenashville.com',                // by Hester Khan
4411                 '.reptilemedia.com',                    // by Alicia Patel
4412                 '.resellers2000.com',                   // by Dedra Kennedy
4413                 '.reverse-billing.com',                 // by Lazaro Gluck
4414                 '.richcapaldi.com',                             // by Kya Haggard
4415                 '.richformissouri.com',                 // by Alanna Elston
4416                 '.robstraley.com',                              // by Leida Bartell
4417                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4418                 '.rpgbbs.com',                                  // by Leonel Peart
4419                 '.ruralbusinessonline.org',             // by Lynsey Watters
4420                 '.ruwomenscenter.org',                  // by Vince Mclemore
4421                 '.ryanjowens.com',                              // by Janine Smythe
4422
4423                 // S
4424                 '.sagarmathatv.org',                    // by Liam Funke
4425                 '.sakyathubtenling.org',                // by Liane Falgout
4426                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4427                 '.sandishaven.com',                             // by Lino Soloman
4428                 '.scienkeen.com',                               // by Liza Navarra
4429                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4430                 '.severios.com',                                // by Isa Steffen
4431                 '.sexual-hot-girls.com',                // by Viviana Bolton
4432                 '.shakespearelrc.com',                  // by Luciana Weaver
4433                 '.shashran.org',                                // by Adriel Humphries
4434                 '.shoes-shop.us',                               // by Austen Higginbotham
4435                 '.skagitvalleybassanglers.com', // by Necole Thiele
4436                 '.skinsciencesalon.com',                // by Nena Rook
4437                 '.smartalternative.net',                // by Nicki Lariviere
4438                 '.sml338.org',                                  // by Nickole Krol
4439                 '.smogfee.com',                                 // by Sienna Kimble
4440                 '.sneakers-e-shop.info',                // by Nikki Fye
4441                 '.spacewavemedia.com',                  // by Thanh Gast
4442                 '.softkernel.com',                              // by Nicol Hummer
4443                 '.stjoanmerrillville.com',              // by Hunter Beckham
4444                 '.strelinger.com',                              // by Arron Highsmith
4445                 '.striking-viking.com',                 // by Kylie Endsley
4446                 '.sunnydeception.org',                  // by Amaya Llora
4447                 '.sunzmicro.com',                               // by Goddard Arreola
4448                 '.sv-iabc.org',                                 // by Braden Buck
4449                 '.sykotick.com',                                // by Pierce Knecht
4450
4451                 // T
4452                 '.tbody.net',                                   // by Ormond Roman
4453                 '.the-pizzaman.com',                    // by Mario Ramsey
4454                 '.the-shoes.us',                                // by Alejandro Gaffney
4455                 '.theborneocompany.com',                // by Bryanna Tooley
4456                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4457                 '.thehomeschool.net',                   // by September Concepcio
4458                 '.thenewlywed.com',                             // by Allegra Marra
4459                 '.tigerspice.com',                              // by Denis Mosser
4460                 '.tnaa.net',                                    // by Jasmine Andress
4461                 '.top-finance-sites.com',               // by Maryann Doud
4462                 '.tradereport.org',                             // by Bettie Sisk
4463                 '.transmodeling.com',                   // by Martine Button
4464                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4465                 '.tsaoc.com',                                   // by Heriberto Mcfall
4466                 '.tsunamidinner.com',                   // by Nannie Richey
4467
4468                 // U
4469                 '.uhsaaa.com',                                  // by Risa Herbert
4470                 '.ultradeepfield.org',                  // by Bobby Ragland
4471                 '.umkclaw.info',                                // by Cammy Kern
4472                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4473                 '.usa-wolf.com',                                // by Jacklyn Morrill
4474                 '.usjobfair.com',                               // by Lorina Burchette
4475
4476                 // V
4477                 '.vacancesalouer.com',                  // by Loris Bergquist
4478                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4479                 '.valleylibertarians.org',              // by Lena Massengale
4480                 '.vanderbiltevents.com',                // by Gannon Krueger
4481                 '.vanwallree.com',                              // by Michelina Donahue
4482                 '.vcertificates.com',                   // by Hyun Lamp
4483                 '.vonormytexas.us',                             // by Suzette Waymire
4484
4485                 // W
4486                 '.washingtondc-areahomes.net',  // by Ailene Broome
4487                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4488                 '.wolsaoh.org',                                 // by Daniela English
4489                 '.worldpropertycatalog.com',    // by Aray Baxter
4490
4491                 // Y
4492                 '.yankee-merchants.com',                // by Jackson Hinojosa
4493                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4494                 '.yourdomainsource.com',                // by Deems Weingarten
4495
4496                 // Z
4497                 '.zkashan.com',                                 // by Evan Light
4498                 '.zockclock.com',                               // by Dorothea Guthrie
4499         ),
4500         'Something-Drugs' => array(
4501                 // Drugs / Pills / Diet
4502                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4503                 '.abdelghani-shady.com',                // by Elly Alton
4504                 '.bangbangfilm.com',                    // by Davin Chou
4505                 '.centroantequera.com',                 // by Keon Kwiatkowski
4506                 '.champagne-cellar.info',               // by Kandis Rizzo
4507                 '.chix0r.org',                                  // by Christoper Baird
4508                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4509                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4510                 '.fast-cash-01.com',                    // by Edgar Oliver
4511                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4512                 '.fn-nato.com',                                 // by Donny Dunlap
4513                 '.gqyinran.com',                                // by Alejandro Parks
4514                 '.juris-net.com',                               // by Rachelle Bravo
4515                 '.leftpencey.com',                              // by Aileen Ashby
4516                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4517                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4518                 '.palaceroyale.net',                    // by Brycen Stebbins
4519                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4520                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4521                 '.yukissushi.com',                              // by Donell Hozier
4522         ),
4523         'Something-Others' => array(
4524                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4525                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4526         ),
4527         'Something-NoApp' => array(
4528                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4529                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4530                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4531                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4532                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4533         ),
4534         'Cortez and family' => array(
4535                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4536                 '.dronadaarsujf.info',  // by Cortez
4537                 '.fromnananaref.info',  // by Cortez
4538                 '.goorkkjsaka.info',    // by Cortez
4539                 '.jkdfjjkkdfe.info',    // by Rico
4540                 '.jkllloldkjsa.info',   // by Cortez
4541                 '.nnjdksfornms.info',   // by Rico
4542                 '.mcmdkkksaoka.info',   // by Cortez
4543                 '.srattaragfon.info',   // by Cortez
4544                 '.yreifnnonoom.info',   // by Rico
4545                 '.zjajjsvgeuds.info',   // by Cortez
4546         ),
4547         'admin at ematuranza.com' => array(
4548                 '.ancorlontano.com',
4549                 '.dentroallago.com',
4550                 '.digiovinezza.com',
4551                 '.ematuranza.com',
4552                 '.ilfango.com',
4553                 '.nullarimane.com',
4554                 '.questaimmensa.com',
4555                 '.tentailvolo.com',
4556                 '.unatenerezza.com',
4557                 '.volgondilettose.com',
4558         ),
4559         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4560                 '.bid99df.info',
4561                 '.bj498uf.info',
4562                 '.edeuj84.info',
4563                 '.f4mfid.info',
4564                 '.g4vf03a.info',
4565                 '.j09j4r.info',
4566                 '.jv4r8hv.info',
4567                 '.k43sd3.info',
4568                 '.k4r84d.info',
4569                 '.k4rvda.info',
4570                 '.k4v0df.info',
4571                 '.k903os.info',
4572                 '.k9df93d.info',
4573                 '.kv94fd.info',
4574                 '.ksjs93.info',
4575                 '.l0ks03.info',
4576                 '.l9u3jc.info',
4577                 '.lv043a.info',
4578                 '.nh94h9.info',
4579                 '.m94r9d.info',
4580                 '.s87fvd.info',
4581                 '.v3k0d.info',
4582                 '.v4r8j4.info',
4583                 '.vf044s.info',
4584                 '.vj49rs.info',
4585                 '.vk498j.info',
4586                 '.u03jow.info',
4587         ),
4588         'Nikhil and Brian' => array(
4589                 // by Brian Dieckman (info at iudndjsdhgas.info)
4590                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4591                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4592                 '.ihfjeswouigf.info',   // by Brian, / was not found
4593                 '.iudndjsdhgas.info',   // by Brian, / was not found
4594                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4595                 '.jiatdbdisut.info',    // by Brian, / was not found
4596                 '.jkfierwoundhw.info',  // by Brian, / was not found
4597                 '.kfjeoutweh.info',             // by Brian, / was not found
4598                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4599                 '.oudjskdwibfm.info',   // by Brian, / was not found
4600                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4601                 '.itxbsjacun.info',             // by Nikhil, / was not found
4602                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4603                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4604                 '.najedncdcounrd.info', // by Nikhil, / was not found
4605                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4606                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4607                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4608                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4609                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4610                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4611                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4612                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4613                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4614         ),
4615         'wealth777 at gmail.com' => array(      // by Henry Ford
4616                 '.brutal-forced.com',
4617                 '.library-bdsm.com',
4618                 '.rape-fantasy.us',
4619         ),
4620         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4621                 '.purerotica.com',
4622                 '.richsex.com',
4623                 '.servik.net',
4624                 '.withsex.com',
4625         ),
4626         'dreamteammoney.com' => array(
4627                 '.dreamteammoney.com',  // dtmurl.com related
4628                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4629         ),
4630         'KLIK VIP Search and family' => array(
4631                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4632                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4633                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4634                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4635                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4636                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4637                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4638         ),
4639         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4640                 '.antivirs.info',
4641                 '.antivirus1.info',
4642                 '.antivirus2.info',
4643         ),
4644         'wasam at vangers.net and family' => array(
4645
4646                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4647                 '.bahatoca.org',
4648                 '.digestlycos.org',
4649                 '.educativaanale.info',
4650                 '.guildstuscan.org',
4651                 '.isaakrobbins.info',
4652                 '.isfelons.org',
4653                 '.lvwelevated.org',
4654                 '.macphersonaca.org',
4655                 '.markyaustrian.org',
4656                 '.michelepug.org',
4657                 '.opalbusy.info',
4658                 '.quijotebachata.info',
4659                 '.salthjc.info',
4660                 '.shogunnerd.info',
4661                 '.solarissean.org',
4662                 '.sparkgsx.info',
4663                 '.tarzanyearly.org',
4664                 '.tulabnsf.org',
4665                 '.vaccarinos.org',
4666
4667                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4668                 '.e2007.info',
4669                 '.cmoss.info',
4670
4671                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4672                 '.finddesk.org',
4673                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4674                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4675                 '.rcatalog.org',
4676                 '.sbitzone.org',
4677
4678                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4679                 '.cheapns.org',
4680                 '.my-top.net',
4681                 '.sfind.net',
4682                 '.sspot.net',
4683                 '.suvfind.info',
4684
4685                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4686                 '.trumber.com',
4687
4688                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4689                 '.blogduet.org',
4690                 '.carelf.info',
4691                 '.cmagic.org',
4692                 '.cspell.org',
4693                 '.dspark.org',
4694                 '.dtonic.org',
4695                 '.mcharm.info',
4696                 '.mslook.info',
4697                 '.phpdinnerware.info',
4698                 '.rnation.org',
4699                 '.uzing.org',
4700
4701                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4702                 '.allbar.info',
4703                 '.allersearch.org',
4704                 '.allzoom.org',
4705                 '.dynall.org',
4706                 '.fastopia.org',
4707                 '.offasfast.info',
4708                 '.rblast.org',
4709                 '.rchistes.info',
4710                 '.rette.org',
4711                 '.shufflequince.org',
4712                 '.suvlook.org',
4713
4714                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4715                 '.290cabeza.org',
4716                 '.bossierpainted.org',
4717                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4718                 '.definekonica.info',   // Admin: tvaals at vangers.net
4719                 '.gradetelemundo.info',
4720                 '.hydraulickin.info',
4721                 '.indicadorestmj.info',
4722                 '.keeleykincaid.org',
4723                 '.kleenbowser.info',
4724                 '.pipnickname.info',
4725                 '.pacolily.org',
4726                 '.redeemtrabalho.info',
4727                 '.scanmakerchua.info',
4728                 '.titanmessina.info',
4729                 '.tragratuit.org',
4730                 '.yeareola.info',
4731         ),
4732         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4733                 '.canadianmedsworld.info',      // 84.252.133.112
4734                 '.tabsdrugstore.info',          // 84.252.133.114
4735                 '.tabsstore.info',                      // 84.252.133.114
4736                 '.topcholesterol.info',         // 84.252.133.132
4737         ),
4738         'be.cx' => array(
4739                 '.be.cx',
4740                 '.ca.cx',
4741         ),
4742         'john780321 at yahoo.com' => array(     // by John  Brown
4743                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4744                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4745                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4746         ),
4747         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4748                 '.bertela.info',
4749                 '.forblis.info',
4750                 '.frenallo.info',
4751                 '.goyahoo.info',
4752                 '.herbak.info',
4753                 '.kiokast.info',
4754                 '.nerenok.info',
4755                 '.pestgets.info',
4756                 '.snukker.info',
4757                 '.thegetspons.info',
4758         ),
4759         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4760                 '.bobop.info',
4761                 '.kwwwe.info',
4762                 '.piikz.info',
4763                 '.moosm.info',
4764                 '.vvvw.info',
4765         ),
4766         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4767                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4768                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4769                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4770                 '.jplingood.com',       // 125.65.112.15
4771                 '.linenew.com',         // 203.191.148.96
4772                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4773                 '.yzlin.com',           // 220.162.244.36
4774         ),
4775         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4776                 '.1111mb.com',
4777                 '.2sex18.com',
4778                 '.69porn1.com',
4779         ),
4780         'ECTechnology' => array(
4781                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4782                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4783                 '.automouse.jp',
4784         ),
4785         'lyqz at 21cn.com' => array(
4786                 '.japangame1.com',
4787                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4788                 '.livedoor1.com',
4789                 '.ragnarokonline1.com',
4790                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4791         ),
4792         'kingrou at hotmail.com' => array(      // by yangjianhe
4793                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4794                 '.453787.com',
4795         ),
4796         'anpaul541000 at 163.com' => array(     // by su qiuqing
4797                 '.cetname.com',                 // 222.77.185.87
4798                 '.jpgamer.net',                 // 220.247.157.106
4799                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4800                 '.lovejptt.com',                // 222.77.185.87
4801                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4802                 '.playncsoft.net',              // 220.247.157.106
4803         ),
4804         'abc00613 at 163.com' => array( // by guo yong
4805                 '.avtw1068.com',                // 64.74.223.11
4806                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4807                 '.djkkk66990.com',              // 68.178.232.99
4808                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4809         ),
4810         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4811                 '.cmonfofo.com',
4812                 '.discutbb.com',
4813         ),
4814         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4815                 '.preca.info',
4816                 '.skiaggi.info',
4817                 '.scrianal.info',
4818                 '.tageom.info',
4819         ),
4820         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4821                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4822                 '.inpros.net',                  // 202.181.98.79
4823                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4824         ),
4825         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4826                 '.ec51.com',
4827                 '.ec51.net',
4828         ),
4829         'abbevillelaties at yahoo.fr etc' => array(
4830                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4831                 '.ringtones-rate.com',
4832                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4833                 '.special-ringtones.net',
4834         ),
4835         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4836                 '.1sgsc.info',
4837                 '.3h4r89h.info',
4838                 '.3v44dd.info',
4839                 '.6rfuh6.info',
4840                 '.84hd8.info',
4841                 '.94bui89.info',
4842                 '.agysb3.info',
4843                 '.asdjhs.info',
4844                 '.bcvnrth.info',
4845                 '.bheb4r.info',
4846                 '.bhiuno.info',
4847                 '.biug7g.info',
4848                 '.bjb5f4.info',
4849                 '.bob8g7g.info',
4850                 '.br89bdd.info',
4851                 '.bsa3h.info',
4852                 '.bsieb8.info',
4853                 '.basbiubf.info',
4854                 '.bobwwfs2.info',
4855                 '.ciuv9t.info',
4856                 '.dbmdx4.info',
4857                 '.dbrjms.info',
4858                 '.dbtcm.info',
4859                 '.dff9ghu.info',
4860                 '.dfshbb.info',
4861                 '.dgd4ffdh.info',
4862                 '.dh3ge.info',
4863                 '.duc86jh.info',
4864                 '.ergth45.info',
4865                 '.f78bf7ffb.info',
4866                 '.gbdfbo4.info',
4867                 '.ger45.info',
4868                 '.gnvnrrg.info',
4869                 '.h47he7.info',
4870                 '.h488hbd4.info',
4871                 '.hd72b94.info',
4872                 '.he74b7.info',
4873                 '.hfujfnr.info',
4874                 '.husdhd42.info',
4875                 '.hbwje.info',
4876                 '.itg87gji.info',
4877                 '.iugiougiuh.info',
4878                 '.jhd4f4aa.info',
4879                 '.jshd73.info',
4880                 '.krhpgd.info',
4881                 '.lyihjn.info',
4882                 '.nfyjnfj.info',
4883                 '.oihbv.info',
4884                 '.os44fvs.info',
4885                 '.sdfsd3.info',
4886                 '.sdiug4.info',
4887                 '.sdkufhh.info',
4888                 '.sdugb4f.info',
4889                 '.skdbf.info',
4890                 '.sipiv78.info',
4891                 '.sudbfb.info',
4892                 '.tymbbmy.info',
4893                 '.uilhjk.info',
4894                 '.vi87vub.info',
4895                 '.vfuyf87f.info',
4896                 '.viyvvj877.info',
4897                 '.w7fc8eu.info',
4898                 '.wefg43g.info',
4899                 '.xbrch78e.info',
4900                 '.ywsfu.info',
4901                 '.zxcbiv.info',
4902         ),
4903         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4904                 '.abofios.info',
4905                 '.amlekfn.info',
4906                 '.amlkdoie.info',
4907                 '.amkslewq.info',
4908                 '.alemfu.info',
4909                 '.aloweks1.info',
4910                 '.alposd3.info',
4911                 '.bamhpb.info',
4912                 '.bhjkb.info',
4913                 '.bjqnj.info',
4914                 '.cvcxcbhpr.info',
4915                 '.czoypaiat.info',
4916                 '.dbpmgc.info',
4917                 '.dgvogrxs.info',
4918                 '.dldksf.info',
4919                 '.dlor6za.com',
4920                 '.dmkoiew.info',
4921                 '.eewrefr.info',
4922                 '.eladne.info',
4923                 '.elksem.info',
4924                 '.elwpod.info',
4925                 '.emlwkdnr.info',
4926                 '.esgmyqk.info',
4927                 '.fauqv.info',
4928                 '.fgxkgy.info',
4929                 '.fhryns.info',
4930                 '.fj38n4g.info',
4931                 '.fjnesal.info',
4932                 '.fmkfoe.info',
4933                 '.fqkcfldtr.info',
4934                 '.fwcigpdwz.info',
4935                 '.fyhik.info',
4936                 '.glrkje.info',
4937                 '.gwkslfq.info',
4938                 '.gwjracvh.info',
4939                 '.hihopepe.info',
4940                 '.hwlyggbkw.info',
4941                 '.hmwbfw.info',
4942                 '.hthyeb.info',
4943                 '.iaofkyaw.info',
4944                 '.uldkxuiw.info',
4945                 '.is7c6w4.info',
4946                 '.ivuddhdk.info',
4947                 '.jgfndjem.info',
4948                 '.jgmdlek.info',
4949                 '.jkrnvmpad.info',
4950                 '.jqujn.info',
4951                 '.jvgmmba.info',
4952                 '.kbaur.info',
4953                 '.kgjindptv.info',
4954                 '.kleo7s9.info',
4955                 '.lezfgam.info',
4956                 '.lfaasy.info',
4957                 '.ljpdjki.info',
4958                 '.lmnpis.info',
4959                 '.lpzcu2f.info',
4960                 '.lrptn.info',
4961                 '.lursqt.info',
4962                 '.mgkabviil.info',
4963                 '.mhtknjyt.info',
4964                 '.mksuuku.info',
4965                 '.mkyky.info',
4966                 '.mloaisn.com',
4967                 '.mlsiknd.info',
4968                 '.mthqz.info',
4969                 '.nnooq.info',
4970                 '.nohhylvc.info',
4971                 '.nuprndsye.info',
4972                 '.nsoelam.info',
4973                 '.nykobczv.info',
4974                 '.nzuhli.info',
4975                 '.odyqzgylr.info',
4976                 '.oidiau.info',
4977                 '.oitzkw.info',
4978                 '.okdmrpz.info',
4979                 '.ooinziti.info',
4980                 '.ortqr.info',
4981                 '.osmkpnekv.info',
4982                 '.ozkzfih.info',
4983                 '.p3ix8wc.com',
4984                 '.piwyt.info',
4985                 '.pfkijrm.info',
4986                 '.pjktcragi.info',
4987                 '.pleoz.info',
4988                 '.plvqm73.info',
4989                 '.pqyrem.info',
4990                 '.qipgqd.info',
4991                 '.qlewixu.com',
4992                 '.qmlskme.info',
4993                 '.qtuff.info',
4994                 '.quoga.info',
4995                 '.quqz.info',
4996                 '.qzxuw.info',
4997                 '.rcaidegp.info',
4998                 '.rlkmdi.info',
4999                 '.rnsoiov.info',
5000                 '.rnwlams.info',
5001                 '.rprgkgqld.info',
5002                 '.rubqvxrn.info',
5003                 '.spqxstl.info',
5004                 '.syckoqjql.info',
5005                 '.tbirb.info',
5006                 '.thalc34.info',
5007                 '.tiabq.info',
5008                 '.tszzpjr.info',
5009                 '.tyjdyn.info',
5010                 '.twgugpns.info',
5011                 '.uaezrqp.info',
5012                 '.udlkasu.info',
5013                 '.uejncyf.info',
5014                 '.ukvflb.info',
5015                 '.ugsuv.info',
5016                 '.ukhgpcp.info',
5017                 '.urprzn.info',
5018                 '.uuhememkw.info',
5019                 '.yalc7en.info',
5020                 '.ybuid.info',
5021                 '.yhdkgfob.info',
5022                 '.ymenq.info',
5023                 '.ynlyb.info',
5024                 '.vieatlubk.info',
5025                 '.vltcaho.info',
5026                 '.wlamsiek.info',
5027                 '.wlerp.info',
5028                 '.wlmtshzi.info',
5029                 '.wmlkams.info',
5030                 '.wprqd.info',
5031                 '.wpyspszi.info',
5032                 '.xdscc.info',
5033                 '.xdvy.info',
5034                 '.xeypku.info',
5035                 '.xsrxh.info',
5036                 '.xwjyrpfe.info',
5037                 '.yxcqw.info',
5038                 '.zhbktrh.info',
5039                 '.zspepn.info',
5040                 '.zsxtz.info',
5041         ),
5042         'survi at poczta.fm and smiley' => array(
5043                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5044                 '.ppert.info',
5045                 '.pperta.info',
5046                 '.pperts.info',
5047                 '.pprtuis.info',
5048                 '.13iuey.info',         // ":>"
5049                 '.13jkhs.info',
5050                 '.13lksa.info',
5051                 '.13rxtx.info',
5052                 '.13slkd.info',
5053                 '.13zaer.info',
5054         ),
5055         'admin at esemeski.com' => array(       // by Jan Kalka
5056                 '.kxils.info',
5057                 '.kuaph.info',
5058                 '.lncdc.info',
5059                 '.lsqpd.info',
5060                 '.mczed.info',
5061                 '.npous.info',
5062                 '.obgju.info',
5063         ),
5064         'LiquidNetLimited.com' => array(
5065                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5066
5067                 // FateBack.com related
5068                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5069                 '.bebto.com',
5070                 '.fateback.com',
5071                 '.undonet.com',
5072                 '.yoll.net',
5073                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5074
5075                 // 50webs.com                   // 64.72.112.10
5076                 // dns2.50webs.com              // 64.72.112.11
5077                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5078                 // dns2.freehostia.com  // 64.72.112.13
5079                 // serv3.freehostia.com // 64.72.112.14
5080                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5081                 // mail.50webs.com              // 64.72.112.26
5082                 // supremecenter41.com  // 64.72.112.52
5083                 // 50webs2.50webs.com   // 64.72.112.89
5084                 // supremecenter39.com  // 64.72.112.103
5085
5086                 // by LiquidNet Ltd. (support at propersupport.com)
5087                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5088                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5089                         'duoservers.com',               // 216.65.1.130
5090
5091                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5092         ),
5093         'domains at agava.com' => array(
5094                 '.h18.ru',
5095                 '.hut1.ru',
5096         ),
5097         'wlmx009 at hotmail.com' => array(
5098                 '.123lineage.com',
5099                 '.ff11-info.com',
5100                 '.lastlineage.com',
5101                 '.lineage2-ol.com',
5102                 '.lineage2006.com',
5103                 '.lineagefirst.com',
5104         ),
5105         'Zettahost.com' => array(
5106                 '.atspace.biz',         // sales at zettahost.com
5107                 '.atspace.com',         // abuse at zettahost.com
5108                 '.atspace.name',        // NS atspace.com
5109                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5110                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5111         ),
5112         'hlq9814 at 163.com' => array(
5113                 '.kotonohax.com',               // by ling bao
5114                 '.ragnarox.mobi',               // by lin bao, *.exe download
5115                 '.rokonline-jp.com',    // by hang long
5116         ),
5117         '77ch.jp' => array(
5118                 '.77ch.jp',
5119                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5120         ),
5121         'serchportal at mail.ru' => array(      // by Namu Adin
5122                 '.43fert.info',
5123                 '.belis.info',
5124                 '.bonu.info',
5125                 '.chelsite.info',
5126                 '.chparael.info',
5127                 '.cool9f.info',
5128                 '.dada2.info',
5129                 '.dorplanete.info',
5130                 '.dormonde.info',
5131                 '.dorprojet.info',
5132                 '.faciledor.info',
5133                 '.fastsearchgroup.info',
5134                 '.gerta0.info',
5135                 '.getse.info',
5136                 '.gopvl.info',
5137                 '.knopki.info',
5138                 '.propidor.info',
5139                 '.quicksearchnet.info',
5140                 '.ret5.info',
5141                 '.slimfastsearch.info',
5142                 '.virtualpvl.info',
5143                 '.vpvla.info',
5144                 '.xjdor.info',
5145                 '.zhopki.info',
5146         ),
5147         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5148                 '*.444mb.com',          // Free hosting
5149                 'urlnip.com',           // Redirection
5150         ),
5151         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5152                 '.1fasttimesatnau.info',
5153                 '.1freecybersex.info',
5154                 '.1freexxxcomics.info',
5155                 '.1fuckingmywife.info',
5156                 '.1pornpreview.info',
5157                 'www.ru',                                       // by (service at demos.ru), redirection
5158         ),
5159         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5160                 '.adultschat.info',
5161                 '.livecamonline.info',
5162                 '.webcam4u.info',
5163                 '.younghot.info',
5164         ),
5165         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5166                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5167
5168                 // 209.51.196.242
5169                 '.22web.net',
5170                 '.2kool4u.net',
5171                 '.9skul.com',
5172                 '.alojalo.info',
5173                 '.byet.net',
5174                 '.byethost2.com',
5175                 '.byethost3.com',
5176                 '.byethost4.com',
5177                 '.byethost5.com',
5178                 '.byethost6.com',
5179                 '.byethost7.com',
5180                 '.byethost8.com',
5181                 '.byethost9.com',
5182                 '.byethost10.com',
5183                 '.byethost11.com',
5184                 '.byethost12.com',
5185                 '.byethost13.com',
5186                 '.byethost14.com',
5187                 '.byethost15.com',
5188                 '.byethost16.com',
5189                 '.byethost17.com',
5190                 '.byethost18.com',
5191                 '.headshothost.net',
5192                 '.hostwq.net',
5193                 '.mega-file.net',
5194                 '.truefreehost.com',
5195
5196                 '.ifastnet.com',        // 209.51.196.243
5197
5198                 // 209.190.16.82(mx1.byet.org)
5199                 '.1sthost.org',
5200                 '.4sql.net',
5201                 '.byet.org',
5202                 '.hyperphp.com',
5203                 '.kwikphp.com',
5204                 '.my-php.net',
5205                 '.my-place.us',
5206                 '.my-webs.org',
5207                 '.netfast.org',
5208                 '.php0h.com',
5209                 '.php1h.com',
5210                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5211                 '.phpnet.us',
5212                 '.prohosts.org',
5213                 '.pro-php.org',
5214                 '.prophp.org',
5215                 '.sprinterweb.net',
5216                 '.swiftphp.com',
5217                 '.xlphp.net',
5218
5219                 // 209.190.16.83(mx2.byet.org)
5220                 '.instant-wiki.net',
5221
5222                 // 209.190.16.84(mx3.byet.org)
5223
5224                 // 209.190.16.85(mx4.byet.org)
5225                 '.instant-blog.net',
5226                 '.instant-forum.net',
5227
5228                 '.byethost.com',                        // 209.190.18.138
5229         ),
5230         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5231                 '.analmoviesite.info',
5232                 '.bestgirlssex.info',
5233                 '.boxvagina.info',
5234                 '.cyberlivegirls.info',
5235                 '.hotredgirls.info',
5236                 '.forsexlove.info',
5237                 '.hotnudezone.info',
5238                 '.hotredpussy.info',
5239                 '.lesbians-live.info',
5240                 '.lesbians-on-cam.info',
5241                 '.onlinegirlssite.info',
5242                 '.sexloveonline.info',
5243                 '.teensexcard.info',
5244                 '.teensexdirect.info',
5245                 '.topnudesite.info',
5246                 '.vaginafree.info',
5247                 '.webcam-show.info',
5248                 '.webcamshow.info',
5249                 '.youngsexchat.info',
5250                 '.yourcumshot.info',
5251         ),
5252         'stocking.club at gmail.com' => array(
5253                 '.adulthotmodels.com',          // by David Zajwzran
5254                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5255                 '.cash-call.info',                      // by David Theissen
5256                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5257                 '.cheap-online-viagra.info',    // by David Theissen
5258                 '.drugcleansing.net',           // by David Zajwzran
5259                 '.men-health-zone.com',         // by David Theissen
5260                 '.purchase-viagra.info',        // by David Theissen
5261                 '.realdrunkengirls.biz',        // by David Theissen
5262                 '.sextoyslife.com',                     // by David Zajwzran
5263                 '.sexysubjects.info',           // by David Zajwzran
5264                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5265                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5266                 '.travelcardsite.info',         // by David Theissen
5267         ),
5268         'lustiq at p5com.com' => array(
5269                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5270                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5271         ),
5272         'web at 6jy.com' => array(
5273                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5274                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5275         ),
5276         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5277                 '.auto-fgen.info',
5278                 '.fast-marketing.info',
5279                 '.from-usa.info',
5280                 '.generic-pharm.info',
5281                 '.pharm-directory.info',
5282                 '.popular-people.info',
5283                 '.safe-health.info',
5284                 '.star-celebrities.info',
5285                 '.super-home-biz.info',
5286                 '.top5-auto.info',
5287                 '.top5-cars.info',
5288                 '.vip-furniture.info',
5289                 '.vip-pc.info',
5290                 '.vip-pets.info',
5291         ),
5292         'abuse at search-store.org' => array(
5293                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5294         ),
5295         'Leading Edge Marketing Inc.' => array(
5296                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5297                 '.abemedical.com',
5298                 '.attractwomennow.com',
5299                 '.bettersexmall.com',
5300                 '.buymaxoderm.com',
5301                 '.buyvprx.com',
5302                 '.genf20.com',
5303                 '.infinityhealthnews.com',
5304                 '.istnewsletter.com',
5305                 '.leadingedgecash.com',
5306                 '.leadingedgeherbals.com',
5307                 '.leadingedgevipsonly.com',
5308                 '.lecash.com',
5309                 '.leminfo.com',
5310                 '.proextendersystem.com',
5311                 '.provestra.com',
5312                 '.semenax.com',
5313                 '.shavenomore.com',
5314                 '.theedgenewsletter.com',
5315                 '.vigorelle.com',
5316                 '.vigrx.com',
5317                 '.vigrxplus.com',
5318                 '.wbstnewsletter.com',
5319         ),
5320         'clickx at bk.ru' => array(     // by Alexey Enrertov
5321                 '.coolget*.info' =>
5322                         '#^(?:.*\.)?' . 'coolget' .
5323                         '(?:bus|find|news|php|place|post|srch)' .
5324                         '\.info$#',
5325                 '.coolgirl*.info' =>
5326                         '#^(?:.*\.)?' . 'coolgirl' .
5327                         '(?:apple|fish|search)' .
5328                         '\.info$#',
5329                 '.coolmeet*.info' =>
5330                         '#^(?:.*\.)?' . 'coolmeet' .
5331                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5332                         '\.info$#',
5333                 '.cool**.info' =>
5334                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5335                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5336                         '\.info$#',
5337                 '.freseasy*.info' =>
5338                         '#^(?:.*\.)?' . 'freseasy' .
5339                         '(?:apple|click|find|fish|post|search)' .
5340                         '\.info$#',
5341                 '.fres**.info' =>
5342                         '#^(?:.*\.)?' .
5343                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5344                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5345                         '\.info$#',
5346                         // These are not found yet:
5347                         // fresgirlsrch.info
5348                         // fresadultapple.info
5349                         // fresadultclick.info
5350                         // frestheplace.info
5351
5352                 // 66.232.113.44
5353                 '.nuhost.info',
5354                 '.susearch.info',
5355
5356                 // 66.232.126.74(hv94.steephost.com)
5357                 '.dilej.com',
5358                 '.fyvij.com',
5359                 '.howus.com',
5360                 '.jisyn.com',
5361                 '.kaxem.com',
5362                 '.mihug.com',
5363                 '.mobyb.com',
5364                 '.qidat.com',
5365                 '.qihek.com',
5366                 '.ryzic.com',
5367                 '.sasuv.com',
5368                 '.tuquh.com',
5369                 '.vehyq.com',
5370                 '.wezid.com',
5371                 '.wifuj.com',
5372                 '.xijyt.com',
5373                 '.zuqyn.com',
5374
5375                 '.mosugy.com',
5376         ),
5377         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5378                 '.hitsearching.info',
5379                 '.hugeamountdata.info',
5380                 '.megafasthost.info',
5381                 '.real-big-host.info',
5382                 '.search4freez.info',
5383                 '.yasech.info',
5384
5385                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5386                 '.bymire.com',
5387
5388                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5389                 '.ligiwa.com',
5390
5391                 '.mubeho.com',
5392         ),
5393         'ice--man at mail.ru related' => array(
5394                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5395                 '.bestcreola.com',
5396                 '.crekatierra.com',
5397                 '.creolafire.com',
5398                 '.crolik.com',
5399                 '.croller.cn',
5400                 '.ecrmx.com',
5401                 '.eflashpoint.com',
5402                 '.exoticmed.com',
5403                 '.feelview.com',
5404                 '.greatexotic.com',
5405                 '.icrtx.com',
5406                 '.icyhip.com',
5407                 '.icyiceman.com',
5408                 '.icypopular.com',
5409                 '.iflashpoint.com',
5410                 '.justmdx.com',
5411                 '.kiliusgroup.com',
5412                 '.klickerr.com',
5413                 '.klickerrworld.com',
5414                 '.kreolic.com',
5415                 '.margansitio.com',
5416                 '.margantierra.com',
5417                 '.mimargan.com',
5418                 '.oilkeys.com',
5419                 '.planetmdx.com',
5420                 '.thekeyse.com',
5421                 '.viewgreat.com',
5422                 '.yourcreola.com',
5423
5424                 // 69.46.23.48
5425                 '.bestkilius.com',
5426                 '.crekadirecto.com',
5427                 '.getflashsite.com',
5428                 '.sucreka.com',
5429                 '.superkilius.com',
5430
5431                 // 69.46.23.48 by bing-16 at ftunez.org
5432                 '.bovorup.cn',
5433                 '.litotar.cn',
5434                 '.nihydec.cn',
5435
5436                 // 66.232.112.175 by bing-32 at ftunez.org
5437                 '.lasyxy.cn',
5438
5439                 // by bing-65 at ftunez.org
5440                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5441                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5442                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5443                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5444                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5445                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5446                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5447                 '.saralar.cn',          // 66.232.120.113(non-existent)
5448                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5449
5450                 // 69.46.23.48 by clarkson-34 at ftunez.org
5451                 '.bumora.cn',
5452                 '.byxite.cn',
5453                 '.byxuqu.cn',
5454                 '.jadama.cn',
5455                 '.kybope.cn',
5456                 '.mefeki.cn',
5457                 '.mokiso.cn',
5458                 '.niqeme.cn',
5459                 '.pukafo.cn',
5460                 '.qesaxa.cn',
5461                 '.toxezi.cn',
5462                 '.tujudy.cn',
5463                 '.tutike.cn',
5464
5465                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5466                 '.cabino.cn',
5467                 '.cuwace.cn',
5468                 '.ferazi.cn',
5469                 '.gigywy.cn',
5470                 '.lapype.cn',
5471                 '.mewabe.cn',
5472                 '.pezegy.cn',
5473                 '.pyzuza.cn',
5474                 '.qypony.cn',
5475                 '.ropesy.cn',
5476                 '.wadyfe.cn',
5477
5478                 // 69.46.23.48 clarkson-58 at ftunez.org
5479                 '.becabe.cn',
5480                 '.biciqy.cn',
5481                 '.bezymu.cn',
5482                 '.cifori.cn',
5483                 '.ciwyxi.cn',
5484                 '.dobari.cn',
5485                 '.dusofe.cn',
5486                 '.dutyda.cn',
5487                 '.dykanu.cn',
5488                 '.fakexu.cn',
5489                 '.fylema.cn',
5490                 '.godymo.cn',
5491                 '.hyhaxy.cn',
5492                 '.ganosi.cn',
5493                 '.kuxyju.cn',
5494                 '.lacezy.cn',
5495                 '.lonyru.cn',
5496                 '.lycato.cn',
5497                 '.nykyby.cn',
5498                 '.qyhuko.cn',
5499                 '.redere.cn',
5500                 '.riwimu.cn',
5501                 '.wopary.cn',
5502                 '.xizity.cn',
5503                 '.xuxusa.cn',
5504
5505                 // by entretov-28 at ftunez.org
5506                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5507                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5508
5509                 // 69.46.23.48 by entretov-32 at ftunez.org
5510                 '.cihuji.cn',
5511                 '.deqyve.cn',
5512                 '.genefa.cn',
5513                 '.gujyju.cn',
5514                 '.hasadu.cn',
5515                 '.hedomi.cn',
5516                 '.kecicy.cn',
5517                 '.kipabo.cn',
5518                 '.manunu.cn',
5519                 '.musoru.cn',
5520                 '.myvuna.cn',
5521                 '.pikybe.cn',
5522                 '.riqawo.cn',
5523                 '.rufuxy.cn',
5524                 '.vyfilu.cn',
5525                 '.xadule.cn',
5526                 '.zolaxe.cn',
5527                 '.zerixu.cn',
5528
5529                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5530                 '.dozoda.cn',
5531                 '.nemipu.cn',
5532
5533                 // entretov-84 at ftunez.org
5534                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5535                 '.favulol.cn',          // 66.232.120.115(*snip*)
5536                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5537
5538                 // 69.46.23.48 by jeremy-57 at ftunez.org
5539                 '.duzele.cn',
5540                 '.figede.cn',
5541                 '.fiwany.cn',
5542                 '.gyfalu.cn',
5543                 '.jepylo.cn',
5544                 '.nuqumy.cn',
5545
5546                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5547                 '.burahu.cn',
5548                 '.jydijy.cn',
5549                 '.komyby.cn',
5550                 '.najepa.cn',
5551                 '.pylobu.cn',
5552                 '.qofoly.cn',
5553                 '.sybuvi.cn',
5554                 '.vycexu.cn',
5555                 '.wotyqo.cn',
5556                 '.xudoli.cn',
5557
5558                 // by entretov-28 at ftunez.org
5559                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5560
5561                 // by entretov-37 at ftunez.org
5562                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5563                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5564
5565                 // 66.232.112.175 by entretov-86 at ftunez.org
5566                 '.faweji.cn',
5567                 '.jypaci.cn',
5568                 '.xozuso.cn',
5569
5570                 // 69.46.23.48 by miles-37 at ftunez.org
5571                 '.beqymo.cn',
5572                 '.ceqibi.cn',
5573                 '.dyraqo.cn',
5574                 '.qenedo.cn',
5575                 '.qurypa.cn',
5576                 '.siluvo.cn',
5577                 '.tujala.cn',
5578                 '.wukuwi.cn',
5579                 '.xenibo.cn',
5580                 '.xiculo.cn',
5581                 '.zabemu.cn',
5582
5583                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5584                 '.bevaka.cn',
5585                 '.fysyte.cn',
5586                 '.guxixu.cn',
5587                 '.hatoli.cn',
5588                 '.jitobu.cn',
5589                 '.juxeca.cn',
5590                 '.kifuhy.cn',
5591                 '.licila.cn',
5592                 '.mecomy.cn',
5593                 '.niryko.cn',
5594                 '.noxoco.cn',
5595                 '.qiwysu.cn',
5596                 '.tutysy.cn',
5597
5598                 // by oker-74 at ftunez.org
5599                 '.navufol.cn',
5600
5601                 // by oker-97 at ftunez.org
5602                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5603                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5604                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5605                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5606                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5607                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5608                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5609
5610                 // by polet-20 at ftunez.org
5611                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5612
5613                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5614                 '.gywiqe.cn',
5615                 '.jotapo.cn',
5616                 '.jywixa.cn',
5617
5618                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5619                 '.bawegap.cn',
5620                 '.buremyl.cn',
5621                 '.cilybut.cn',
5622                 '.cutufek.cn',
5623                 '.defypyr.cn',
5624                 '.femaxij.cn',
5625                 '.gelejo.cn',
5626                 '.gocylyv.cn',
5627                 '.kehiqaq.cn',
5628                 '.ninyjit.cn',
5629                 '.ruroruw.cn',
5630                 '.vetehow.cn',
5631
5632                 // 69.46.23.48 sabrosky-85 at ftunez.org
5633                 '.banyla.cn',
5634                 '.bubaqu.cn',
5635                 '.bygage.cn',
5636                 '.dafozy.cn',
5637                 '.kaxyjo.cn',
5638                 '.makyle.cn',
5639                 '.naleto.cn',
5640                 '.pidele.cn',
5641                 '.poqexa.cn',
5642                 '.pymaqo.cn',
5643                 '.qupiqy.cn',
5644                 '.reqefy.cn',
5645                 '.sopocy.cn',
5646                 '.vuhexo.cn',
5647                 '.weryso.cn',
5648                 '.wubula.cn',
5649                 '.xufuxy.cn',
5650                 '.zuhyxu.cn',
5651
5652                 // 69.46.23.48 by tribiani-97 at ftunez.org
5653                 '.dyxorod.cn',
5654                 '.firywoz.cn',
5655                 '.jixezyx.cn',
5656                 '.joveraw.cn',
5657                 '.jowaxup.cn',
5658                 '.nodarej.cn',
5659                 '.pimijom.cn',
5660                 '.tugupeg.cn',
5661
5662                 // 66.232.112.175 by abuse-here at inbox.ru
5663                 '.catybe.cn',
5664                 '.jytame.cn',
5665                 '.wygete.cn',
5666         ),
5667         '74.50.97.*' => array(
5668                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5669                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5670                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5671                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5672                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5673                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5674                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5675                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5676                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5677                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5678                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5679                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5680                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5681                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5682                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5683                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5684
5685                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5686                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5687                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5688                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5689                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5690                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5691                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5692                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5693                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5694                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5695                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5696                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5697                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5698                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5699                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5700                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5701                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5702                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5703                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5704
5705                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5706                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5707                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5708                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5709                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5710         ),
5711         'nijeoi at hotmai.com' => array(
5712                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5713                 '.bowij.com',
5714                 '.bozib.com',
5715                 '.cavux.com',
5716                 '.dipov.com',
5717                 '.gumoz.com',
5718                 '.hakyb.com',
5719                 '.hehyv.com',
5720                 '.hepyt.com',
5721                 '.howoj.com',
5722                 '.jywaz.com',
5723                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5724                 '.kyheq.com',
5725                 '.kyzad.com',
5726                 '.qicad.com',
5727                 '.qubyd.com',
5728                 '.mocyq.com',
5729                 '.muloq.com',
5730                 '.myxim.com',
5731                 '.nufyp.com',
5732                 '.waqog.com',
5733                 '.wyduc.com',
5734                 '.xefyv.com',
5735                 '.xomej.com',
5736                 '.xomip.com',
5737                 '.xykyl.com',
5738                 '.zakuw.com',
5739                 '.zeliw.com',
5740                 '.zimev.com',
5741                 '.zipif.com',
5742
5743                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5744                 '.tycoco.com',
5745
5746                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5747                 '.pufeqa.com',
5748
5749                 '.xehymi.com',
5750         ),
5751         'niichka at hotmail.com' => array(
5752                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5753                 '.aerosearch.info',
5754                 '.freader.info',
5755                 '.info4searchz.info',
5756                 '.nice-host.info',
5757                 '.realyfast.info',
5758                 '.resuts.info',
5759
5760                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5761                 '.bepoh.com',
5762                 '.gufiq.com',
5763                 '.kedyh.com',
5764                 '.pofyb.com',
5765                 '.rurid.com',
5766                 '.vucaj.com',
5767                 '.vuwir.com',
5768
5769                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5770                 '.bejefe.com',
5771
5772                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5773                 '.tidawu.com',
5774
5775                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5776                 '.rofuqa.com',
5777         ),
5778         'porychik at hot.ee' => array(  // by Igor
5779                 '.tedstate.info',       // "Free Web Hosting"
5780                 '.giftsee.com',
5781         ),
5782         'admin at pertol.info' => array(
5783                 // 81.0.195.189 "Free Web Hosting"
5784                 '.laparka.cn',
5785                 '.mirlos.cn',
5786                 '.oldmoms.cn',
5787
5788                 // 217.11.233.64(timed-out)
5789                 '.ejmpep.cn',   // by admin at pertol.info
5790                 '.ytere.cn',    // by admin at x2t.com
5791
5792                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5793                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5794
5795                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5796                 '.new-greece-travel.com',
5797                 '.peraonline.info',
5798
5799                 '.barkman.cn',
5800         ),
5801
5802         'aofa at vip.163.com' => array(
5803                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5804                 '.5944.net',
5805         ),
5806         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5807                 '.maxrentcar.info',
5808                 '.newsonyericsson.info',
5809                 '.pornositeworld.biz',
5810                 '.rentcarweb.info',
5811                 '.xxxdomainsex.biz',
5812         ),
5813         'kopper1970 at gmail.com' => array(
5814                 '.cardealerall.info',           // by Green
5815                 '.donatecarsales.info',         // by Sipil
5816                 '.ringtonewilly.info',          // by Sipil
5817                 '.travelstraveling.info',       // by Chinik
5818                 '.viagrabuyonline.org',         // by Sipil
5819                 '.viagraorderbuy.com',          // by Anatol
5820                 '.worldcuptourism.info',        // by Sipil
5821         ),
5822         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5823                 '.globalinfoland.info',
5824                 '.goodlifesearch.info',
5825                 '.hotnetinfo.info',
5826                 '.hotpornmovies.org',
5827                 '.infopilot.info',
5828         ),
5829         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5830                 '.bang-bro.org',
5831                 '.datinghost.info',
5832                 '.hello-craulers.info',
5833                 '.free-blog-host.info',
5834                 '.sucking-boobs.info',
5835         ),
5836         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5837                 '.allcamsguide.info',
5838                 '.camerascams.info',
5839                 '.camerasera.info',
5840                 '.girlcamsworld.info',
5841                 '.hiddenlimocams.info',
5842                 '.redlivecams.info',
5843                 '.spycamsgear.info',
5844                 '.spycamssite.info',
5845                 '.supercamsusa.info',
5846                 '.thecamsnow.info',
5847         ),
5848         '87.242.116.81' => array(
5849                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5850                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5851                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5852                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5853                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5854         ),
5855         '208.70.75.153' => array(
5856                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5857                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5858                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5859                 '.cerc-on.info',
5860                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5861                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5862                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5863                 '.cerc-tr.info',
5864                 '.cerc-tw.info',
5865                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5866                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5867                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5868                 '.cerc-on.org',         // by cerca-one at ya.ru
5869                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5870                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5871                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5872                 '.cerc-tr.org',         // by cerca-one at ya.ru
5873                 '.cerc-tw.org',         // by cerca-one at ya.ru
5874                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5875                 '.cerca-fo.info',
5876                 '.cerca-no.info',
5877                 '.cerca-on.info',
5878                 '.cerca-sv.info',
5879                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5880                 '.cerca-te.info',
5881                 '.cerca-tr.info',
5882                 '.cerca-sx.org',
5883                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5884                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5885                 '.ricerca-fo.info',
5886                 '.ricerca-one.org',
5887                 '.ricerca-sv.org',
5888                 '.ricerca-sx.org',
5889                 '.ricerca-te.org',
5890                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5891                 '.subit01.org',
5892                 '.subit02.org',
5893                 '.subit03.org',
5894                 '.subit04.org',
5895                 '.subit05.org',
5896                 '.subit06.org',
5897                 '.subit01.info',
5898                 '.subit02.info',
5899                 '.subit03.info',
5900                 '.subit04.info',
5901                 '.subit05.info',
5902                 '.subit06.info',
5903         ),
5904         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5905                 '.5-base.com',
5906                 '.pharmacy-style.com',
5907         ),
5908         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5909                 '.ista-2006.ru',
5910                 '.wefas.ru',
5911         ),
5912         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5913                 '.tourismworldsite.info',
5914                 '.yourtourismtravel.info',
5915         ),
5916         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5917                 '.easyfindcar.info',
5918                 '.siteinfosystems.info',
5919         ),
5920         'smesh1155 at gmail.com' => array(
5921                 '.hospitalforyou.info',                 // by Gimmi
5922                 '.thephentermineonline.info',   // by Kipola
5923         ),
5924         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5925                 '.kiski.net.in',
5926                 '.pipki.org.in',
5927                 '.popki.ind.in',
5928                 '.siski.co.in',
5929         ),
5930         'tiptronikmike at mail.com' => array(
5931                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5932                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5933                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5934                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5935                 //'.i0sex.info',                // Michael
5936                 //'.i1sex.info',                // Michael
5937                 //'.i2sex.info',                // Martin
5938                 //'.i3sex.info',                // Martin
5939                 //'.i4sex.info',                // Adulterra
5940                 //'.i5sex.info',                // Adulterra
5941                 //[irvyz]6sex.info not found
5942                 '.i8sex.info',                  // by Martin
5943         ),
5944         'skuarlytronald at mail.com' => array(
5945                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5946                 '.girlsgoingmad.info',          // 64.27.13.120
5947                 '.girlsgonewildside.info',      // 64.27.13.120
5948         ),
5949         '66.232.109.250' => array(
5950                 '.1626pornporno.info',
5951                 '.1851pornporno.info',
5952                 '.1876pornporno.info',
5953                 '.476pornporno.info',
5954         ),
5955         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5956                 '.compactxxx.com',
5957                 '.eadulthost.com',
5958                 '.eadultview.com',
5959                 '.eroticpool.net',
5960                 '.ipornservice.com',
5961                 '.liveadulthost.com',
5962                 '.nudepal.com',
5963                 '.sweetservers.com',
5964         ),
5965         'support at orgija.org' => array(
5966                 '.assfuckporn.org',
5967                 '.dosugmos.org',
5968                 '.fuckporn.org',
5969                 '.girlsdosug.org',
5970                 '.girlsporno.org',
5971                 '.moscowintim.org',
5972                 '.pornass.org',
5973                 '.pornopussy.org',
5974                 '.progirlsporn.org',
5975                 '.pussypornogirls.org',
5976         ),
5977         '125.65.112.93' => array(
5978                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5979                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5980         ),
5981         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5982                 '.beta-google.com',
5983                 '.tv-reklama.info',
5984                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5985                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5986         ),
5987         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5988                 '.abobrinha.org',
5989                 '.aneurysmic.com',              // / not found
5990                 '.physcomp.org',                // / not found
5991                 '.seriedelcaribe2006.org',
5992                 '.refugeeyouthinamerica.com',
5993         ),
5994         'skip_20022 at yahoo.com' => array(
5995                 // 203.174.83.55
5996                 '.a28hosting.info',             // by Bill Jones
5997                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5998                 '.besthentai06.org',    // by yakon
5999         ),
6000         'USFINE.com' => array(
6001                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
6002                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
6003         ),
6004         '68.178.211.57' => array(
6005                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
6006                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
6007         ),
6008         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
6009                 '.google-yahoo-msn.org',
6010                 '.expedia-travel.org',
6011         ),
6012         'admin at newestsearch.com' => array(   // by Gibrel Sitce
6013                 '.emr5ce.org',
6014                 '.wfe7nv.org',
6015                 '.xyr99yx.org',
6016         ),
6017         '203.171.230.39' => array(
6018                 // by 51shell at 163.com
6019                 '.amatou-fc2.com',
6020
6021                 // registrar bizcn.com, iframe + cursor
6022                 '.playonlinenc.com',
6023                 '.playboss-jp.com',
6024         ),
6025         'Digi-Rock.com' => array(
6026                 '.rom776.com',
6027                 // owner-organization: DIGIROCK, INC.
6028                 // owner-email: domain-contact at digi-rock.com
6029                 // with an external ad-and-JavaScript,
6030                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6031                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6032         ),
6033         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6034                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6035                 '.getrun.cn',                           // 208.73.34.48
6036                 '.ipod-application.info',       // NO IP
6037                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6038                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6039         ),
6040         'germerts at yandex.ru' => array(
6041                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6042                 '.andatra.info',
6043                 '.banchitos.info',
6044                 '.batareya.info',
6045                 '.blevota.info',
6046                 '.broneslon.info',
6047                 '.gamadril.info',
6048                 '.gipotenuza.info',
6049                 '.govnosaklo.info',
6050                 '.muflon.info',
6051                 '.termitnik.info',
6052                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6053         ),
6054         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6055                 '.acronis-true-image.info',
6056                 '.calcio-xp.info',
6057                 '.cosanova.info',
6058                 '.cose-rx.info',
6059                 '.dictip.info',
6060                 '.findig.info',
6061                 '.fotonow.info',
6062                 '.lavoro-tip.info',
6063                 '.loan-homes.info',
6064                 '.mionovita.info',
6065                 '.mustv.info',
6066                 '.newsnaked.info',
6067                 '.online-tod.info',
6068                 '.opakit.info',
6069                 '.opanow.info',
6070                 '.opriton.info',
6071                 '.porta-bl.info',
6072                 '.refdif.info',
6073                 '.xzmovie.info',
6074         ),
6075         '84.252.148.120 etc' => array(
6076                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6077                 '.planetavilton.info',  // 84.252.148.120
6078                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6079         ),
6080         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6081                 '.99jk.com',
6082                 '.99jk.com.cn',
6083                 '.99jk.cn',
6084         ),
6085         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6086                 '.kliktop.biz',
6087                 '.kliktop.org',
6088                 '.pharmatop.us',
6089                 '.supertop.us',
6090                 '.supervaizer.info',
6091         ),
6092         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6093                 '.freeamateursexx.info',        // 81.0.195.228
6094                 '.freeanalsexx.info',           // 217.11.233.97
6095                 '.freegaysexx.info',            // 81.0.195.228
6096         ),
6097         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6098                 '.abbhi.info',
6099                 '.gayblogguide.biz',
6100                 '.huope.info',
6101                 '.thebdsmday.info',
6102                 '.zioprt.info',                 // 89.149.228.237
6103         ),
6104         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6105                 '.boblisk.info',
6106                 '.factyri.info',
6107                 '.jorge1.info',
6108         ),
6109         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6110                 '.bestmindstorm.org',
6111                 '.redstoreonline.org',
6112         ),
6113         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6114                 '.8e8ae.net',
6115                 '.c-cock.com',
6116                 '.fa59eaf.com',
6117                 '.set-place.net',
6118                 '.sex-beauty.net',
6119         ),
6120         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6121                 '.tomdir.info',
6122                 '.tomdirdirect.info',
6123                 '.tomdirworld.info',
6124                 '.treton.info',
6125                 '.trefas.info',
6126                 '.tretonmondo.info',
6127                 '.unefout.info',
6128                 '.unefoutprojet.info',
6129                 '.unitfree.info',
6130                 '.vilret.info',
6131                 '.vilttown.info',
6132                 '.votrefout.info',
6133                 '.warmfind.info',
6134                 '.warptop.info',
6135                 '.wildtram.info',
6136                 '.xofind.info',
6137                 '.xopdiscover.info',
6138                 '.xopfind.info',
6139                 '.xoplocate.info',
6140                 '.xopseek.info',
6141                 '.xpfirst.info',
6142                 '.xphighest.info',
6143                 '.xptop.info',
6144         ),
6145         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6146                 '.myviagrasite.com',    // 80.74.153.2
6147                 '.thecanadianmeds.com', // 80.74.153.17
6148         ),
6149         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6150                 '.bigemot.com',                         // 217.11.233.34, / not found
6151                 '.espharmacy.com',                      // 217.11.233.34
6152                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6153                 '.ringtonecooler.com',          // 217.11.233.34
6154         ),
6155         'dfym at dfym.cn' => array(
6156                 // ANI, JavaScript, iframe
6157
6158                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6159                 '.okwit.com',
6160                 '.sakerver.com',
6161                 '.motewiki.net',
6162
6163                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6164
6165                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6166
6167                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6168                 '.bbtv-chat.com',
6169                 '.ketubatle.com',
6170                 '.playonlanei.com',
6171                 '.rmtfcne.com',
6172
6173         ),
6174         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6175                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6176                 '.lookmedicine.info',           // 206.161.205.22
6177                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6178                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6179                 '.worldsitesearch.info',        // 209.8.40.59
6180         ),
6181         'lee.seery at gmail.com' => array(
6182                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6183                 '.lingvol.com',         // 64.21.34.55
6184                 '.micevol.com',         // 64.21.34.55
6185                 '.heyhey.info',         // 64.21.34.55  by anonymous
6186         ),
6187         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6188                 // 69-64-64-71.dedicated.abac.net
6189                 '.520-ard.info',
6190                 '.550bcards.info',
6191                 '.559-cads.info',
6192                 '.559caard.info',
6193                 '.565-caaard.info',
6194                 '.575cadr.info',
6195                 '.577cadrs.info',
6196                 '.590-acrds.info',
6197                 '.596-cadrs.info',
6198                 '.596caards.info',
6199                 '.596caaard.info',
6200                 '.asstablishingcads.info',
6201                 '.astablish-ard.info',
6202                 '.astablishcacrds.info',
6203                 '.begginers-acards.info',
6204                 '.begginersacrds.info',
6205                 '.beggingcaaard.info',
6206                 '.beginercacrds.info',
6207                 '.cacrdscreating.info',
6208                 '.caditbegging.info',
6209                 '.cadr-buildup.info',
6210                 '.cadr-establilsh.info',
6211                 '.cadrs-buildercredit.info',
6212                 '.cadrs570.info',
6213                 '.cads-565.info',
6214
6215                 // 69-64-64-113.dedicated.abac.net
6216                 '.interistacards.info',
6217                 '.intrust-ards.info',
6218                 '.intrustacrds.info',
6219                 '.lfixed-ard.info',
6220                 '.lowerate-ard.info',
6221                 '.lowpercentage-ard.info',
6222                 '.lowpercentageacrd.info',
6223         ),
6224         'acua at mail.ru' => array(
6225
6226                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6227
6228                         // by adventurer at allmyns.info
6229                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6230
6231                         // by webmaster at allmyns.info
6232                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6233                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6234                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6235                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6236                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6237                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6238                         '.riumh.cn',    // 84.16.226.28(*snip*)
6239                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6240                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6241                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6242
6243                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6244                 '.dns4babka.info',      // by acua at mail.ru
6245
6246                         // by golubcov at dns4babka.info
6247                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6248
6249                         // by webmaster at dns4babka.info
6250                         '.credh.cn',
6251                         '.fucfv.cn',
6252                         '.gdxnk.cn',
6253                         '.sqrrt.cn',
6254                         '.ywtmd.cn',
6255                         '.kncqy.cn',    // by webmaster at allmyns.info
6256
6257                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6258                 '.dedka2ns.info',       // by acua at mail.ru
6259
6260                         // by chasik at dedka2ns.info
6261                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6262
6263                         // by rochel at dedka2ns.info
6264                         '.fudhxjjqh.cn',
6265
6266                         // by webmaster at dedka2ns.info
6267                         '.ascpo.cn',
6268                         '.jgycr.cn',
6269                         '.nqdtt.cn',
6270                         '.oswde.cn',
6271                         '.qeyig.cn',
6272                         '.soqsx.cn',
6273                         '.ukncd.cn',
6274                         '.zijgb.cn',
6275
6276                 // 84.16.255.253(*snip*), / says 'noy found'
6277                 '.dns4dedka.info',      // by acua at mail.ru
6278
6279                         // by aleon at dns4dedka.info
6280                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6281
6282                         // by dig at dns4dedka.info
6283                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6284                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6285                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6286                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6287                         '.heulw.cn',    // 84.16.226.217(*snip*)
6288                         '.hissw.cn',    // 84.16.249.240(*snip*)
6289                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6290                         '.obwew.cn',    // 84.16.251.218(*snip*)
6291                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6292                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6293                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6294                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6295                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6296                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6297                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6298                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6299                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6300                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6301                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6302                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6303
6304                         // by la at dns4dedka.info
6305                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6306                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6307                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6308                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6309                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6310                         '.eothy.cn',    // 84.16.249.241(*snip*)
6311                         '.epocy.cn',    // 84.16.251.220(*snip*)
6312                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6313                         '.faacz.cn',    // 84.16.251.222(*snip*)
6314                         '.filun.cn',    // 89.149.196.72(*snip*)
6315                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6316                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6317                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6318                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6319                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6320                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6321                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6322                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6323                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6324                         '.krumo.cn',    // 84.16.226.217(*snip*)
6325                         '.lbava.cn',    // 217.20.112.102(*snip*)
6326                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6327                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6328                         '.npovm.cn',    // 84.16.226.28(*snip*)
6329                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6330                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6331                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6332                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6333                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6334                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6335                         '.qydph.cn',    // 89.149.228.163(*snip*)
6336                         '.rxens.cn',    // 89.149.196.72(*snip*)
6337                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6338                         '.srths.cn',    // 84.16.251.222(*snip*)
6339                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6340                         '.unquz.cn',    // 84.16.251.223(*snip*)
6341                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6342                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6343                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6344                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6345                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6346                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6347
6348                         // by le at dns4dedka.info
6349                         '.goslw.cn',    // 84.16.251.220(*snip*)
6350                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6351                         '.iewik.cn',    // 84.16.255.254(*snip*)
6352                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6353                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6354                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6355                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6356                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6357                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6358                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6359                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6360                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6361                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6362                         '.qniww.cn',    // 84.16.251.218(*snip*)
6363                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6364                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6365
6366                         // by skspb at dns4dedka.info
6367                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6368
6369                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6370                         '.bcpnb.cn',
6371                         '.cfbpr.cn',
6372                         '.dnndb.cn',
6373                         '.ekwme.cn',
6374                         '.iutps.cn',
6375                         '.ryftj.cn',
6376                         '.vxqcb.cn',
6377
6378                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6379                         // by apple at ns2best.info
6380                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6381                         // by paulwolf at ns2best.info
6382                         '.ifytzq.cn',
6383
6384                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6385                         // by pigato at sedns.info
6386                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6387                         // by roschem at sedns.info
6388                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6389                         // by op at sedns.info
6390                         '.bumfn.cn',
6391                         '.csmlu.cn',
6392                         '.epcwi.cn',
6393                         '.krwzn.cn',
6394                         '.lkvcp.cn',
6395                         '.mvmkh.cn',
6396                         '.nwpeg.cn',
6397                         '.rnqol.cn',
6398                         '.tyuaf.cn',
6399                         '.ucysa.cn',
6400                         '.vhyom.cn',
6401                         '.wtstu.cn',
6402                         '.zslxr.cn',
6403         ),
6404         'gilvcta sy jilbertsbram.com' => array(
6405                 // 206.53.51.126
6406                 '.dsfljkeilm1.cn',
6407                 '.dsfljkeilm2.cn',
6408                 '.dsfljkeilm3.cn',
6409                 '.dsfljkeilm4.cn',
6410                 '.dsfljkeilm5.cn',
6411                 '.dsfljkeilm6.cn',
6412                 '.dsfljkeilm7.cn',
6413                 '.dsfljkeilm8.cn',
6414                 '.dsfljkeilm9.cn',
6415                 '.dsfljkeilm10.cn',
6416         ),
6417         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6418
6419                 // 69.64.82.76(*.dedicated.abac.net)
6420                 '.bruised-criedit.info',
6421                 '.bruised-crtedit.info',
6422                 '.bruised-czrd.info',
6423                 '.bruisedcreditcars.info',
6424                 '.bruisedcreitcard.info',
6425                 '.bruisedcreitd.info',
6426                 '.buliderscreadet.info',
6427                 '.cleaningup-cdit.info',
6428                 '.cleaningup-cedict.info',
6429                 '.cleaningup-cerdic.info',
6430                 '.cleanup-crrd.info',
6431
6432                 // 69.64.82.77(*.dedicated.abac.net)
6433                 '.bruised-crediot.info',
6434                 '.bruised-credtid.info',
6435                 '.bruisedcriet.info',
6436                 '.bruisedredit.info',
6437                 '.buliders-crdt.info',
6438                 '.buliders-cre4dit.info',
6439                 '.buliders-creadt.info',
6440                 '.buliders-credcards.info',
6441                 '.buliders-credictcard.info',
6442                 '.cleaningupccreditcards.info',
6443                 '.cleaningupcdedit.info',
6444                 '.cleaningupcedirt.info',
6445                 '.cleaningupceidt.info',
6446                 '.cleaningupcrasd.info',
6447                 '.cleaningupcreait.info',
6448
6449                 // 69.64.82.78(*.dedicated.abac.net)
6450                 '.bruised-cridet.info',
6451                 '.bruised-drecit.info',
6452                 '.bruised-reditcards.info',
6453                 '.bruisedcredikt.info',
6454                 '.bruisedcredith.info',
6455                 '.bruisedcredtid.info',
6456                 '.cleanup-criet.info',
6457                 '.cleanup-csrds.info',
6458                 '.cleanup-dards.info',
6459
6460                 // 69.64.82.79(*.dedicated.abac.net)
6461                 '.bruised-crediotcards.info',
6462                 '.bruised-creditcar.info',
6463                 '.bruised-creid.info',
6464                 '.bruised-creidtcard.info',
6465                 '.buliders-crdit.info',
6466                 '.buliders-creadet.info',
6467                 '.cleaningup-ceridt.info',
6468                 '.cleaningupcrecit.info',
6469                 '.cleaningupccritcard.info',
6470                 '.cleanupdredit.info',
6471                 '.cleanupredit.info',
6472         ),
6473         '.malwarealarm.com',
6474                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6475                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6476                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6477         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6478         'Inet-Traffic.com' => array(
6479                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6480                 //'.dcomm.com',         // by D Communications Inc. S.A.
6481
6482                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6483                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6484                 // ...
6485                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6486                 // ...
6487                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6488                 // ...
6489                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6490                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6491                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6492                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6493                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6494                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6495                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6496                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6497                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6498                 // ...
6499                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6500                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6501                 // ...
6502                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6503                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6504                 // ...
6505                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6506                 // ...
6507                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6508                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6509                 // ...
6510                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6511         ),
6512         'andreyletov at yahoo.com related' => array(
6513                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6514                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6515                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6516
6517                 // 89.248.99.118 by anonymous
6518                 '.lpgpharmacy.com',
6519                 '.onlybestgalleries.com',
6520                 '.viagrabest.info',
6521                 '.viagrabestprice.info',
6522                 '.viagratop.info',
6523
6524                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6525                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6526                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6527         ),
6528         'alrusnac at hotmail.com' => array(
6529                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6530                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6531         ),
6532         '203.116.63.123' => array(
6533                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6534                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6535         ),
6536         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6537                 '.autotowncar.cn',              // 69.73.146.184
6538                 '.badgirlhome.cn',              // 69.73.146.186
6539         ),
6540         'Wmp.co.jp' => array(
6541                 // 219.94.134.208, ns *.dns.ne.jp, adult
6542                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6543                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6544                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6545         ),
6546         'Macherie.tv' => array(
6547                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6548                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6549                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6550         ),
6551         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6552                 '.yemine.info',
6553                 '.fr4f3ds.info',
6554         ),
6555         '75.126.129.222' => array(
6556                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6557                 '.viagrabuycheap.info', // ns *.advernsserver.com
6558                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6559         ),
6560         'sqr at bk.ru' => array(
6561                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6562                 '.masserch.info',               // "Free Web Hosting", spam
6563                 '.miserch.info',
6564         ),
6565         'gangstadra at hotmail.com' => array(
6566                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6567                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6568                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6569                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6570         ),
6571         'hosan by front.ru' => array(
6572                 '.salihome.info',                               // 206.53.51.155(non-existent)
6573                 '.online-freesearch.com',               // 206.53.51.155
6574                 '.choosefinest.com',                    // 206.53.51.157
6575                 '.carsprojects.com',                    // 206.53.51.159
6576                 '.sport-brands.com',                    // 206.53.51.167
6577                 '.online-pharmaceutics.com',    // 206.53.51.168
6578         ),
6579         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6580                 '.canadians-health.com',        // by andreyletov at yahoo.com
6581                 '.cialischeap.info',
6582                 '.superrv.info',
6583         ),
6584         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6585                 '.hatbi.com',
6586                 '.justrty.com',
6587                 '.kol2you.com',
6588                 '.kolplanet.com',
6589                 '.myrty.com',
6590                 '.officialrty.com',
6591                 '.pbaol.com',
6592                 '.planetkol.com',
6593         ),
6594         'Abra1.com' => array(
6595                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6596                 '.abra1.com',           // by info at maisontropicale.com
6597                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6598
6599                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6600                 '.abra2.com',           // by domain at anondns.org
6601                 '.abra3.com',           // by domain at anondns.org
6602         ),
6603         'topdomainz at gmail.com' => array(
6604                 // 217.73.201.237 , ns *.parked.ru
6605                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6606                 '.aboutgooglegroup.info',
6607                 '.aboutgoogleimage.info',
6608                 '.aboutgooglemail.info',
6609                 '.aboutgooglemap.info',
6610                 '.aboutgooglenews.info',
6611                 '.aboutgooglevideo.info',
6612                 '.bestgoogleearth.info',
6613                 '.magicgoogleearth.info',
6614                 '.magicgooglemap.info',
6615                 '.magicgooglevideo.info',
6616
6617                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6618                 '.slajzer.info',
6619                 '.tonoscelular.info',
6620                 '.tonosmotorola.info',
6621         ),
6622         'Anderson at extra.by' => array(
6623                 // Encoded JavaScript
6624
6625                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6626                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6627                 '.6dir.info',
6628                 '.8dir.info',
6629                 '.9dir.info',
6630                 '.2pro.info',
6631                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6632                 '.6pro.info',
6633                 '.7pro.info',
6634                 '.8pro.info',
6635                 '.9pro.info',
6636                 '.5sms.info',
6637                 '.6sms.info',
6638                 '.8sms.info',
6639                 '.9sms.info',
6640                 '.1upp.info',
6641                 '.2upp.info',
6642                 '.3upp.info',
6643                 '.4upp.info',
6644                 '.5upp.info',
6645                 '.6upp.info',
6646                 '.7upp.info',
6647                 '.8upp.info',
6648                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6649                 '.2vip.info',   // by Anderson at extra.by
6650                 '.4vip.info',
6651                 '.5vip.info',
6652                 '.6vip.info',
6653                 '.7vip.info',
6654                 '.8vip.info',   // ns *.9upp.info
6655                 '.9vip.info',
6656
6657                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6658                 '.w3rar.info',
6659                 '.w3sex.info',
6660                 '.w3zip.info',
6661                 '.w3in.info',
6662                 '.w3out.info',
6663         ),
6664         'zorkin87 at mail.ru' => array(
6665                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6666                 '.ruqore.com',
6667                 '.goxama.com',
6668                 '.cazebi.com',
6669                 '.fukeqa.com',
6670                 '.fydoge.com',
6671                 '.jukaly.com',
6672                 '.jumoga.com',
6673                 '.jumuxo.com',
6674                 '.tyriva.com',
6675                 '.vudyho.com'
6676         ),
6677         'jessicaeagloff at yahoo.co.uk' => array(
6678                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6679                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6680                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6681                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6682         ),
6683         'qbbs at xinoffice.com' => array(
6684                 // ns *.name-services.com
6685                 '.lingage.com',         // 8.15.231.118
6686                 '.puksins.com',         // IP not allocated now
6687         ),
6688         'advertolog at gmail.com' =>
6689                 // 81.0.250.86(network.upl.cz => non-existent) or
6690                 // 217.11.233.27
6691                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6692         'contact at aboutdomain.com' => array(
6693                 '.lopieur0.com',        // Not match but used
6694                 '.lopieur1.com',        // Not match but used
6695                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6696         ),
6697         'info at cash4wm.biz related' => array(
6698                 // 84.16.233.12(*.internetserviceteam.com)
6699                 '.newsblogforu.com',
6700
6701                 // 84.16.235.141()
6702                 '.informator4you.com',
6703
6704                 // 84.16.240.68(*.internetserviceteam.com)
6705                 '.absolute-best-site.com',
6706                 '.new-blog-for-you.com',
6707
6708                 // 84.16.240.69(*.internetserviceteam.com)
6709                 '.best-sport-blog.com',
6710                 '.big-internet-site.com',
6711                 '.brendsite.com',
6712                 '.my-news-blog.com',
6713
6714                 // 84.16.242.123(*.internetserviceteam.com)
6715                 '.best-news-blog.com',
6716                 '.site-with-content.com',
6717
6718                 // The same method with info at cash4wm.biz
6719                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6720                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6721                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6722                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6723                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6724                 '.bloginfo4u.info',             // 89.149.247.25
6725         ),
6726         'kerjy at yahoo.com' => array(
6727                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6728                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6729                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6730                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6731                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6732         ),
6733         'vme at hotmail.ru' => array(
6734                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6735                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6736         ),
6737         'john at hellomyns.info' => array(
6738                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6739                 '.byouz.cn',            // 89.149.247.24, / nothing
6740                 '.idghc.cn',
6741                 '.inxrj.cn',
6742                 '.jqzdf.cn',
6743                 '.vsxej.cn',
6744                 '.wkgnr.cn',
6745         ),
6746         '.CN spam payload' => array(
6747                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6748                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6749                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6750                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6751                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6752                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6753                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6754                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6755                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6756                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6757         ),
6758         'Time2ns.info' => array(
6759                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6760                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6761                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6762                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6763                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6764         ),
6765         'Ilovemyns.info' => array(
6766                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6767                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6768         ),
6769         'Freehostdns.info' => array(
6770                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6771                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6772                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6773         ),
6774         'Newns4me.info' => array(
6775                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6776                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6777         ),
6778
6779         // C-2: Lonely domains (buddies not found yet)
6780         '.0721-4404.com',
6781         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6782         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6783         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6784         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6785         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6786         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6787         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6788         '.0annie.info',
6789         '.6i6.de',
6790         '.77toperrwuter1.info', // by Roman
6791         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6792         '.angioco.com',                 // 62.37.112.100, gamble
6793         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6794         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6795         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6796         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6797         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6798         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6799         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6800         '.allworlddirect.info', // Forbidden
6801         '.amoreitsex.com',
6802         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6803         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6804         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6805         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6806         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6807         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6808         '.auto-car-cheap.org',
6809         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6810         '.baurish.info',
6811         '.bernardtomic21.info', // by filboj at hotmail.com
6812         '.bestop.name',
6813         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6814         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6815         '.bestshopfinder.info',
6816         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6817         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6818         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6819         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6820         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6821         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6822         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6823         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6824         '.catkittenmagazines.org',              // 87.118.97.117
6825         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6826         '.chatwalker.com',              // 124.32.230.65
6827         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6828         '.covertarena.co.uk',   // by Wayne Huxtable
6829         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6830         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6831         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6832         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6833         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6834         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6835         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6836         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6837         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6838         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6839         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6840         '.easyshopusa.com',             // by riter (riter at nm.ru)
6841         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6842         '.edu.ph',                              // "philippine network foundation inc"
6843         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6844         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6845         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6846         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6847         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6848         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6849         '.filthserver.com',             // sales at onlinemarketingservices.biz
6850         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6851         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6852         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6853         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6854         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6855         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6856         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6857         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6858         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6859         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6860         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6861         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6862         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6863         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6864         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6865         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6866         '.gm-exchange.jp',              // 210.188.216.49 RMT
6867         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6868         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6869         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6870         '.greatbestwestern.org',// by gao.wungao at gmail.com
6871         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6872         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6873         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6874         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6875         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6876         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6877         '.hostuju.cz',                  // ns banan.cz, banan.it
6878         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6879         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6880         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6881         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6882         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6883         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6884         '.infradoc.com',
6885         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6886         '.ismarket.com',                // Google-hiding. intercage.com related IP
6887         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6888         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6889         '.itsexosit.net',
6890         '.itxxxit.net',
6891         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6892         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6893         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6894         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6895         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6896         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6897         '.kingtools.de',
6898         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6899         '.leucainfo.com',
6900         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6901         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6902         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6903         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6904         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6905         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6906         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6907         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6908         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6909         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6910         '.megvideochatlive.info',       // Bad seo
6911         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6912         '.mncxvsm.info',                // 217.11.233.105, / blank
6913         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6914         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6915         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6916         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6917         '.mxsupportmailer.com',
6918         '.next-moneylife.com',  // RMT
6919         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6920         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6921         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6922         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6923         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6924         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6925         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6926         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6927         '.onlineviagra.de',
6928         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6929         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6930         '.ozomw.info',
6931         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6932         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6933         '.perevozka777.ru',             // by witalik at gmail.com
6934         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6935         '.pills-storage.com',   // by
6936         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6937         '.porkyhost.com',               // 79965 at whois.gkg.net
6938         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6939         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6940         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6941         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6942         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6943         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6944         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6945         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6946         '.quality-teen-porn-photo.com', // by info at densa.info
6947         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6948         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6949         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6950         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6951         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6952         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6953         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6954         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6955         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6956         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6957         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6958         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6959         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6960         '.sexamoreit.com',
6961         '.sexforit.com',
6962         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6963         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6964         '.sirlook.com',
6965         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6966         '.sepcn.info',                  // / not found
6967         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6968         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6969         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6970         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6971         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6972         '.superverizonringtones.com',   // by joshua at list.ru
6973         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6974         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6975         '.thehostcity.com',             // Domains by Proxy
6976         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6977         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6978         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6979         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6980         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6981         '.topmeds10.com',
6982         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6983         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6984         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6985         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6986         '.unctad.net',                  // by gfdogfd at lovespb.com
6987         '.vacant.org.uk',
6988         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6989         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6990         '.virtualsystem.de',
6991         '.vdxhost.com',
6992         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6993         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6994         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6995         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6996         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6997         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6998         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6999         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
7000         '.whoop.to',                    // RMT
7001         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
7002         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
7003         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
7004         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
7005         '.wwwna.info',                  // / 404 Not Found
7006         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
7007         '.xamorexxx.net',
7008         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
7009         '.xsessox.com',
7010         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
7011         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
7012         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
7013         '.zyguo.info',                  // ns globoxhost.net
7014         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
7015
7016
7017         // C-3: Not classifiable (information wanted)
7018         //
7019         // Something incoming to pukiwiki related sites
7020         'nana.co.il related' => array(
7021                 '.planetnana.co.il',
7022                 '.nana.co.il',
7023         ),
7024 );
7025
7026 // --------------------------------------------------
7027
7028 $blocklist['D'] = array(
7029         // D: Sample setting of
7030         // "Third party in good faith"s
7031         //
7032         // Hosts shown inside of the implanted contents,
7033         // not used via spam, but maybe useful to detect these contents
7034         //
7035         // 'RESERVED',
7036 );
7037
7038 // --------------------------------------------------
7039
7040 $blocklist['E'] = array(
7041         // E: Sample setting of
7042         // Promoters
7043         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7044         //  Ads, Business promotions, SEO, etc)
7045         //
7046         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7047         // Sometimes they may promote each other
7048
7049         '15-Mail.com related' => array(
7050                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7051                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7052                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7053                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7054                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7055         ),
7056         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7057         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7058         'E-brainers.com related' => array(
7059                 // 202.212.14.101
7060                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7061                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7062                 '.my-tune.jp',                                  // by brainers Inc.
7063                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7064                 '.weekle.jp',                                   // by brainers Inc.
7065
7066                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7067                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7068                 '.3minutes-marketing-club.com', // by Fujio
7069                 '.affiliate-vampire.com',               // by Masatoshi
7070                 '.article-site-power-package.com',      // by Masatoshi
7071                 '.audio-marketing-club.com',    // by Fujio
7072                 '.brainers-task-manager.com',   // by Masatoshi
7073                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7074                 '.brainersbuzz.com',                    // by Masatoshi
7075                 '.den4renz-marketing-club.com', // by Fujio
7076                 '.english-contents-club.com',   // by Masatoshi
7077                 '.fly-in-ads-japan.com',                // by Fujio
7078                 '.free-resalerights-giveaway.com',      // by Fujio
7079                 '.freegiveawaysecret.com',              // by Masatoshi
7080                 '.guaranteedvisitorpro.com',    // by Masatoshi
7081                 '.havads-japan.com',                    // by Masatoshi
7082                 '.info-business123.com',                // by Fujio
7083                 '.instant-marketing-club.com',  // by Fujio
7084                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7085                 '.marketing-force-japan.com',   // by Fujio
7086                 '.masatoshikobayashi.com',              // by Fujio
7087                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7088                 '.replytomatt.com',                             // by Fujio
7089                 '.santa-deal.com',                              // by Fujio
7090                 '.santa-deal-summer.com',               // by Fujio
7091                 '.scratch-card-factory.com',    // by Masatoshi
7092                 '.script4you-japan.com',                // by Fujio
7093                 '.sell1000000dollarinjapan.com',// by Fujio
7094                 '.squeeze-page-secret.com',             // by Masatoshi
7095                 '.viral-blog-square.com',               // by Fujio
7096                 '.viralarticle.com',                    // by Fujio
7097                 '.wowhoken.com',                                // by Fujio
7098
7099                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7100                 '.brainerstelevision.com',
7101                 '.demosite4you.com',
7102                 '.keywordcatcherpro.com',
7103                 '.script-marketing-club.com',
7104
7105                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7106                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7107                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7108                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7109                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7110                 '.brainerscode.com',    // by akada
7111                 '.brainerslive.com',    // by domain
7112                 '.brainersreview.com',  // by domain
7113                 '.brainerstest.com',    // by akada
7114                 '.otosecret.com',               // by domain
7115                 '.ultimate-marketing-weapon.com',       // by akada
7116                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7117                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7118
7119                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7120                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7121         ),
7122         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7123         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7124         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7125         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7126         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7127                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7128                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7129                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7130
7131                 // Redirects and affiliates:
7132                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7133                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7134                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7135                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7136                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7137                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7138                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7139                 //   ...
7140
7141                 // Other suggestions:
7142                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7143
7144                 // Blog posting at the same time
7145                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7146                 //   2007/06/13 e123.info/archives/76
7147                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7148                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7149                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7150         ),
7151         'info at kobeweb.jp' => array(
7152                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7153                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7154                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7155         ),
7156         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7157         'Infocart.jp' => array(         // by wai at infocart.jp
7158                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7159                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7160                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7161
7162                 //inetnum:      60.32.154.176 - 60.32.154.183
7163                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7164                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7165         ),
7166         'Info-sniper.com' => array(
7167                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7168                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7169                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7170         ),
7171         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7172         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7173         'JunSuzuki.com' => array(       // e-brainers.com related
7174                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7175                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7176         ),
7177         'Natsukih.net' => array(
7178                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7179                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7180                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7181                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7182
7183                 // by info at natsukih.net
7184                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7185                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7186                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7187                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7188                 '.5muryoureport.com',   // 210.251.253.230
7189                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7190                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7191                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7192         ),
7193         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7194                 '.11kanji.com',         // 211.10.131.88
7195                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7196                 '.point-park.com',      // 211.10.131.88
7197                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7198         ),
7199         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7200         'PRJAPAN.co.jp' => array(
7201                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7202                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7203                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7204                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7205                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7206                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7207         ),
7208         'Rakuten.co.jp' => array(
7209                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7210                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7211         ),
7212         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7213         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7214         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7215         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7216                 '.e123.info',
7217                 '.ialchemist.net',
7218                 '.j012.net',
7219                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7220         ),
7221         'Viscose.jp' => array(
7222                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7223                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7224         ),
7225         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7226 );
7227
7228 // --------------------------------------------------
7229
7230 $blocklist['Z'] = array(
7231         // Z: Yours
7232         //
7233         //'',
7234         //'',
7235         //'',
7236 );
7237
7238 ?>