spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.191 2008/07/14 15:38:17 henoheno Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //'desperadoes.biz',                    // YEAR OF THE CAT, PukiWiki skin designer
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 177         'amoo.org',
 178         'web.archive.org',              ///web/2
 179         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 180                 'jmp2.net',
 181                 '2me.tw',
 182         ),
 183         'ataja.es',
 184         'ATBHost.com' => array(
 185                 '*.atbhost.com',
 186                 '*.bzhost.net',
 187         ),
 188         'atk.jp',
 189         'clearp.ath.cx',
 190         'athomebiz.com',
 191         'aukcje1.pl',
 192         'beam.to',
 193         '*.bebo.com',
 194         'beermapping.com',
 195         'besturl.in',
 196         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 197         'biglnk.com',
 198         'bingr.com',
 199         'bit.ly',
 200         'bittyurl.com',
 201         '*.bizz.cc',
 202         '*.blo.pl',
 203         '*.bo.pl',
 204         'briefurl.com',
 205         'brokenscript.com',
 206         'BucksoGen.com' => array(
 207                 '*.bucksogen.com',
 208                 '*.bulochka.org',
 209                 '*.korzhik.org',
 210                 '*.kovrizhka.org',
 211                 '*.pirozhok.org',
 212                 '*.plushka.org',
 213                 '*.pryanik.org',
 214                 '*.sushka.org',
 215         ),
 216         'budgethosts.org',
 217         'budu.com',                             // by peter.eder at imcworld.com
 218         '*.buzznet.com',
 219         '*.bydl.com',
 220         'C-O.IN' => array(
 221                 '*.c-o.cc',
 222                 '*.c-o.in',
 223                 '*.coz.in',
 224                 '*.cq.bz',
 225         ),
 226         'c64.ch',
 227         'c711.com',
 228         '*.cej.pl',
 229         'checkasite.net',
 230         'url.chefhost.com',
 231         '*.chicappa.jp',
 232         'chilicity.com',
 233         'big5.china.com',               ///gate/big5/
 234         'chopurl.com',
 235         'christopherleestreet.com',
 236         'cintcm.com',
 237         '*.cjb.net',
 238         'clipurl.com',
 239         '*.co.nr',
 240         'Comtech Enterprises ' => array(        // comteche.com
 241                 'tinyurl.name',
 242                 'tinyurl.us',
 243         ),
 244         'Cool168.com' => array(
 245                 '*.cool158.com',
 246                 '*.cool168.com',
 247                 '*.ko168.com',
 248                 '*.ko188.com',
 249         ),
 250         'Coolurl.de' => array(
 251                 'coolurl.de',
 252                 'dornenboy.de',
 253                 'eyeqweb.com',
 254                 'hardcore-porn.de',
 255                 'maschinen-bluten-nicht.de',
 256         ),
 257         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 258         'cutalink.com',
 259         '*.da.cx',
 260         '*.da.ru',
 261         'dae2.com',
 262         'dephine.org',
 263         'desiurl.com',
 264         'dhurl.com',
 265         'digbig.com',
 266         'Digipills.com' => array(
 267                 '*.digipills.com',
 268                 'minilien.com',
 269                 'tinylink.com',
 270         ),
 271         '*.discutbb.com',
 272         'DL.AM' => array(
 273                 '*.cx.la',
 274                 '*.dl.am',
 275         ),
 276         '*.dl.pl',
 277         '*.dmdns.com',
 278         'doiop.com',
 279         'drlinky.com',
 280         'durl.us',
 281         '*.dvdonly.ru',
 282         '*.dynu.ca',
 283         'dwarf.name',
 284         '*.eadf.com',
 285         'easyURL.net' => array(
 286                 '*.easyurl.net',
 287                 '.goshrink.com',
 288                 'ushrink.com',
 289         ),
 290         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 291                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 292                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 293                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 294                 //   "Keep continuing to seek originality and contribute it to local,
 295                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 296                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 297                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 298                 // I'm so much impressed of the situation around this imported one today.
 299         'elfurl.com',
 300         'eny.pl',
 301         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 302                 '.mywiitime.com',
 303                 '.surfindark.com',              // webmaster at etechfocus.com
 304                 '.surfinshade.com',
 305                 '.surfinshadow.com',
 306                 '.surfinwind.com',
 307                 '.topsecretlive.com',
 308         ),
 309         '*.eu.org',
 310         'F2B.be' => array(
 311                 '*.f2b.be',
 312                 '*.freakz.eu',
 313                 '*.n0.be',
 314                 '*.n3t.nl',
 315                 '*.short.be',
 316                 '*.ssr.be',
 317                 '*.tweaker.eu',
 318         ),
 319         '*.fancyurl.com',
 320         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 321                 'blue11.jp',
 322                 'fanznet.com',
 323                 'katou.in',
 324                 'mymap.in',
 325                 'saitou.in',
 326                 'satou.in',
 327                 'susan.in',
 328         ),
 329         '.fe.pl',                       // Redirection and subdomain
 330         'ffwd.to',
 331         'url.fibiger.org',
 332         'FireMe.to' => array(
 333                 'fireme.to',
 334                 'nextdoor.to',
 335                 'ontheway.to',
 336         ),
 337         'flingk.com',
 338         'flog.jp',                      // careless redirector and bbs
 339         'fm7.biz',
 340         'fnbi.jp',
 341         '*.fnbi.jp',
 342         'forgeturl.com',
 343         '*.free.bg',
 344         'Freeservers.com' => array(     // United Online Web Services, Inc.
 345                 '*.4mg.com',
 346                 '*.4t.com',
 347                 '*.8m.com',
 348                 '*.8m.net',
 349                 '*.8k.com',
 350                 '*.faithweb.com',
 351                 '*.freehosting.net',
 352                 '*.freeservers.com',
 353                 '*.gq.nu',
 354                 '*.htmlplanet.com',
 355                 '*.itgo.com',
 356                 '*.iwarp.com',
 357                 '*.s5.com',
 358                 '*.scriptmania.com',
 359                 '*.tvheaven.com',
 360         ),
 361         '*.freewebpages.com',
 362         'FreeWebServices.net' => array( // Host Department LLC
 363                 '*.about.gs',   // Dead?
 364                 '*.about.tc',
 365                 '*.about.vg',
 366                 '*.aboutus.gs',
 367                 '*.aboutus.ms',
 368                 '*.aboutus.tc',
 369                 '*.aboutus.vg',
 370                 '*.biografi.biz',
 371                 '*.biografi.info',
 372                 '*.biografi.org',
 373                 '*.biografi.us',
 374                 '*.datadiri.biz',
 375                 '*.datadiri.cc',
 376                 '*.datadiri.com',
 377                 '*.datadiri.info',
 378                 '*.datadiri.net',
 379                 '*.datadiri.org',
 380                 '*.datadiri.tv',
 381                 '*.datadiri.us',
 382                 '*.ecv.gs',
 383                 '*.ecv.ms',
 384                 '*.ecv.tc',
 385                 '*.ecv.vg',
 386                 '*.eprofile.us',
 387                 '*.go2net.ws',
 388                 '*.hits.io',
 389                 '*.hostingweb.us',
 390                 '*.hub.io',
 391                 '*.indo.bz',
 392                 '*.indo.cc',
 393                 '*.indo.gs',
 394                 '*.indo.ms',
 395                 '*.indo.tc',
 396                 '*.indo.vg',
 397                 '*.infinitehosting.net',
 398                 '*.infinites.net',
 399                 '*.lan.io',
 400                 '*.max.io',
 401                 '*.mycv.bz',
 402                 '*.mycv.nu',
 403                 '*.mycv.tv',
 404                 '*.myweb.io',
 405                 '*.ourprofile.biz',
 406                 '*.ourprofile.info',
 407                 '*.ourprofile.net',     // Dead?
 408                 '*.ourprofile.org',
 409                 '*.ourprofile.us',
 410                 '*.profil.bz',
 411                 '*.profil.cc',
 412                 '*.profil.cn',
 413                 '*.profil.gs',
 414                 '*.profil.in',
 415                 '*.profil.ms',
 416                 '*.profil.tc',
 417                 '*.profil.tv',
 418                 '*.profil.vg',  // ?
 419                 '*.site.io',
 420                 '*.wan.io',
 421                 '*.web-cam.ws',
 422                 '*.webs.io',
 423                 '*.zip.io',
 424         ),
 425         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 426         '*.fx.to',
 427         'fyad.org',
 428         'fype.com',
 429         'gentleurl.net',
 430         'Get2.us' => array(
 431                 '*.get2.us',
 432                 '*.hasballs.com',
 433                 '*.ismyidol.com',
 434                 '*.spotted.us',
 435                 '*.went2.us',
 436                 '*.wentto.us',
 437         ),
 438         'glinki.com',
 439         '*.globalredirect.com',
 440         'gnu.vu',
 441         '*.go.cc',
 442         //'Google.com' => array(
 443         //              google.com/translate_c\?u=(?:http://)?
 444         //),
 445         'goonlink.com',
 446         '.gourl.org',
 447         '.greatitem.com',
 448         'gzurl.com',
 449         'url.grillsportverein.de',
 450         'Harudake.net' => array('*.hyu.jp'),
 451         'Hattinger Linux User Group' => array('short.hatlug.de'),
 452         'Hexten.net' => array('lyxus.net'),
 453         'here.is',
 454         'HispaVista.com' => array(
 455                 '*.blogdiario.com',
 456                 '*.hispavista.com',
 457                 '.galeon.com',
 458         ),
 459         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 460                 '*.8l.pl',
 461                 '*.blg.pl',
 462                 '*.czytajto.pl',
 463                 '*.ryj.pl',
 464                 '*.xit.pl',
 465                 '*.xlc.pl',
 466                 '*.hk.pl',
 467                 '*.home.pl',
 468                 '*.of.pl',
 469         ),
 470         'hort.net',
 471         'free4.hostrocket.com',
 472         '*.hotindex.ru',
 473         'HotRedirect.com' => array(
 474                 '*.coolhere.com',
 475                 '*.homepagehere.com',
 476                 '*.hothere.com',
 477                 '*.mustbehere.com',
 478                 '*.onlyhere.net',
 479                 '*.pagehere.com',
 480                 '*.surfhere.net',
 481                 '*.zonehere.com',
 482         ),
 483         'hotshorturl.com',
 484         'hotwebcomics.com',     ///search_redirect.php
 485         'hurl.to',
 486         '*.hux.de',
 487         '*.i89.us',
 488         'iat.net',                      // 74.208.58.130 by Tony Carter
 489         'ibm.com',                      ///links (Correct it)
 490         '*.iceglow.com',
 491         'internetadresi.com' => array (
 492                 'rxbuycheap.com',
 493                 'rxcheapwestern.com',
 494         ),
 495         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 496         'Ideas para Nuevos Mercados SL' => array(
 497                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 498                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 499                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 500                 // by edgar bortolin (oscar at i4nm.com)
 501                 // by Edgar Bortolin  (oscar at i4nm.com)
 502                 // by oscar florez (oscar at i4nm.com)
 503                 // by Oscar Florez (oscar at red-es.com)
 504                 // by covadonga del valle (oscar at i4nm.com)
 505                 '*.ar.gd',
 506                 '*.ar.gs',      // ns *.nora.net
 507                 '*.ar.kz',      // by oscar
 508                 '*.ar.nu',      // by Edgar
 509                 '*.ar.tc',      // by oscar
 510                 '*.ar.vg',      // by oscar
 511                 '*.bo.kz',      // by oscar
 512                 '*.bo.nu',      // by covadonga
 513                 '*.bo.tc',      // by oscar
 514                 '*.bo.tf',      // by Oscar
 515                 '*.bo.vg',      // by oscar
 516                 '*.br.gd',
 517                 '*.br.gs',      // ns *.nora.net
 518                 '*.br.nu',      // by edgar
 519                 '*.br.vg',      // by oscar
 520                 '*.ca.gs',      // by oscar
 521                 '*.ca.kz',      // by oscar
 522                 '*.cl.gd',      // by oscar
 523                 '*.cl.kz',      // by oscar
 524                 '*.cl.nu',      // by edgar
 525                 '*.cl.tc',      // by oscar
 526                 '*.cl.tf',      // by Oscar
 527                 '*.cl.vg',      // by oscar
 528                 '*.col.nu',     // by Edgar
 529                 '*.cr.gs',      // ns *.nora.net
 530                 '*.cr.kz',      // by oscar
 531                 '*.cr.nu',      // by edgar
 532                 '*.cr.tc',      // by oscar
 533                 '*.cu.tc',      // by oscar
 534                 '*.do.kz',      // by oscar
 535                 '*.do.nu',      // by edgar
 536                 '*.ec.kz',      // by edgar
 537                 '*.ec.nu',      // by Edgar
 538                 '*.ec.tf',      // by Oscar
 539                 '*.es.kz',      // by oscar
 540                 '*.eu.kz',      // by oscar
 541                 '*.gt.gs',      // ns *.nora.net
 542                 '*.gt.tc',      // by oscar
 543                 '*.gt.tf',      // by Oscar
 544                 '*.gt.vg',      // by Oscar
 545                 '*.hn.gs',      // ns *.nora.net
 546                 '*.hn.tc',      // by oscar
 547                 '*.hn.tf',      // by Oscar
 548                 '*.hn.vg',      // by oscar
 549                 '*.mx.gd',
 550                 '*.mx.gs',      // ns *.nora.net
 551                 '*.mx.kz',      // by oscar
 552                 '*.mx.vg',      // by oscar
 553                 '*.ni.kz',      // by oscar
 554                 '*.pa.kz',      // by oscar
 555                 '*.pe.kz',      // by oscar
 556                 '*.pe.nu',      // by Edgar
 557                 '*.pr.kz',      // by oscar
 558                 '*.pr.nu',      // by edgar
 559                 '*.pt.gs',      // ns *.nora.net
 560                 '*.pt.kz',      // by edgar
 561                 '*.pt.nu',      // by edgar
 562                 '*.pt.tc',      // by oscar
 563                 '*.pt.tf',      // by Oscar
 564                 '*.py.gs',      // ns *.nora.net
 565                 '*.py.nu',      // by edgar
 566                 '*.py.tc',      // by oscar
 567                 '*.py.tf',      // by Oscar
 568                 '*.py.vg',      // by oscar
 569                 '*.sv.tc',      // by oscar
 570                 '*.usa.gs',     // ns *.nora.net
 571                 '*.uy.gs',      // ns *.nora.net
 572                 '*.uy.kz',      // by oscar
 573                 '*.uy.nu',      // by edgar
 574                 '*.uy.tc',      // by oscar
 575                 '*.uy.tf',      // by Oscar
 576                 '*.uy.vg',      // by oscar
 577                 '*.ve.gs',      // by oscar
 578                 '*.ve.tc',      // by oscar
 579                 '*.ve.tf',      // by Oscar
 580                 '*.ve.vg',      // by oscar
 581                 '*.ven.nu',     // by edgar
 582         ),
 583         'ie.to',
 584         'igoto.co.uk',
 585         'ilook.tw',
 586         'indianpad.com',                ///view/
 587         'iNetwork.co.il' => array(
 588                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 589                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 590                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 591         ),
 592         '*.infogami.com',
 593         'infotop.jp',
 594         'ipoo.org',
 595         'IR.pl' => array(
 596                 '*.aj.pl',
 597                 '*.aliasy.org',
 598                 '*.gu.pl',
 599                 '*.hu.pl',
 600                 '*.ir.pl',
 601                 '*.jo.pl',
 602                 '*.su.pl',
 603                 '*.td.pl',
 604                 '*.uk.pl',
 605                 '*.uy.pl',
 606                 '*.xa.pl',
 607                 '*.zj.pl',
 608         ),
 609         'irotator.com',
 610         '.iwebtool.com',
 611         'j6.bz',
 612         'jeeee.net',
 613         'Jaze Redirect Services' => array(
 614                 '*.arecool.net',
 615                 '*.iscool.net',
 616                 '*.isfun.net',
 617                 '*.tux.nu',
 618         ),
 619         '*.jed.pl',
 620         'JeremyJohnstone.com' => array('url.vg'),
 621         'jemurl.com',
 622         'jggj.net',
 623         'jpan.jp',
 624         'josh.nu',
 625         'kat.cc',
 626         'Kickme.to' => array(
 627                 '.1024bit.at',
 628                 '.128bit.at',
 629                 '.16bit.at',
 630                 '.256bit.at',
 631                 '.32bit.at',
 632                 '.512bit.at',
 633                 '.64bit.at',
 634                 '.8bit.at',
 635                 '.adores.it',
 636                 '.again.at',
 637                 '.allday.at',
 638                 '.alone.at',
 639                 '.altair.at',
 640                 '.american.at',
 641                 '.amiga500.at',
 642                 '.ammo.at',
 643                 '.amplifier.at',
 644                 '.amstrad.at',
 645                 '.anglican.at',
 646                 '.angry.at',
 647                 '.around.at',
 648                 '.arrange.at',
 649                 '.australian.at',
 650                 '.baptist.at',
 651                 '.basque.at',
 652                 '.battle.at',
 653                 '.bazooka.at',
 654                 '.berber.at',
 655                 '.blackhole.at',
 656                 '.booze.at',
 657                 '.bosnian.at',
 658                 '.brainiac.at',
 659                 '.brazilian.at',
 660                 '.bummer.at',
 661                 '.burn.at',
 662                 '.c-64.at',
 663                 '.catalonian.at',
 664                 '.catholic.at',
 665                 '.chapel.at',
 666                 '.chills.it',
 667                 '.christiandemocrats.at',
 668                 '.cname.at',
 669                 '.colors.at',
 670                 '.commodore.at',
 671                 '.commodore64.at',
 672                 '.communists.at',
 673                 '.conservatives.at',
 674                 '.conspiracy.at',
 675                 '.cooldude.at',
 676                 '.craves.it',
 677                 '.croatian.at',
 678                 '.cuteboy.at',
 679                 '.dancemix.at',
 680                 '.danceparty.at',
 681                 '.dances.it',
 682                 '.danish.at',
 683                 '.dealing.at',
 684                 '.deep.at',
 685                 '.democrats.at',
 686                 '.digs.it',
 687                 '.divxlinks.at',
 688                 '.divxmovies.at',
 689                 '.divxstuff.at',
 690                 '.dizzy.at',
 691                 '.does.it',
 692                 '.dork.at',
 693                 '.drives.it',
 694                 '.dutch.at',
 695                 '.dvdlinks.at',
 696                 '.dvdmovies.at',
 697                 '.dvdstuff.at',
 698                 '.emulators.at',
 699                 '.end.at',
 700                 '.english.at',
 701                 '.eniac.at',
 702                 '.error403.at',
 703                 '.error404.at',
 704                 '.evangelism.at',
 705                 '.exhibitionist.at',
 706                 '.faith.at',
 707                 '.fight.at',
 708                 '.finish.at',
 709                 '.finnish.at',
 710                 '.forward.at',
 711                 '.freebie.at',
 712                 '.freemp3.at',
 713                 '.french.at',
 714                 '.graduatejobs.at',
 715                 '.greenparty.at',
 716                 '.grunge.at',
 717                 '.hacked.at',
 718                 '.hang.at',
 719                 '.hangup.at',
 720                 '.has.it',
 721                 '.hide.at',
 722                 '.hindu.at',
 723                 '.htmlpage.at',
 724                 '.hungarian.at',
 725                 '.icelandic.at',
 726                 '.independents.at',
 727                 '.invisible.at',
 728                 '.is-chillin.it',
 729                 '.is-groovin.it',
 730                 '.japanese.at',
 731                 '.jive.at',
 732                 '.kickass.at',
 733                 '.kickme.to',
 734                 '.kindergarden.at',
 735                 '.knows.it',
 736                 '.kurd.at',
 737                 '.labour.at',
 738                 '.leech.at',
 739                 '.liberals.at',
 740                 '.linuxserver.at',
 741                 '.liqour.at',
 742                 '.lovez.it',
 743                 '.makes.it',
 744                 '.maxed.at',
 745                 '.means.it',
 746                 '.meltdown.at',
 747                 '.methodist.at',
 748                 '.microcomputers.at',
 749                 '.mingle.at',
 750                 '.mirror.at',
 751                 '.moan.at',
 752                 '.mormons.at',
 753                 '.musicmix.at',
 754                 '.nationalists.at',
 755                 '.needz.it',
 756                 '.nerds.at',
 757                 '.neuromancer.at',
 758                 '.newbie.at',
 759                 '.nicepage.at',
 760                 '.ninja.at',
 761                 '.norwegian.at',
 762                 '.ntserver.at',
 763                 '.owns.it',
 764                 '.paint.at',
 765                 '.palestinian.at',
 766                 '.phoneme.at',
 767                 '.phreaking.at',
 768                 '.playz.it',
 769                 '.polish.at',
 770                 '.popmusic.at',
 771                 '.portuguese.at',
 772                 '.powermac.at',
 773                 '.processor.at',
 774                 '.prospects.at',
 775                 '.protestant.at',
 776                 '.rapmusic.at',
 777                 '.raveparty.at',
 778                 '.reachme.at',
 779                 '.reads.it',
 780                 '.reboot.at',
 781                 '.relaxed.at',
 782                 '.republicans.at',
 783                 '.researcher.at',
 784                 '.reset.at',
 785                 '.resolve.at',
 786                 '.retrocomputers.at',
 787                 '.rockparty.at',
 788                 '.rocks.it',
 789                 '.rollover.at',
 790                 '.rough.at',
 791                 '.rules.it',
 792                 '.rumble.at',
 793                 '.russian.at',
 794                 '.says.it',
 795                 '.scared.at',
 796                 '.seikh.at',
 797                 '.serbian.at',
 798                 '.short.as',
 799                 '.shows.it',
 800                 '.silence.at',
 801                 '.simpler.at',
 802                 '.sinclair.at',
 803                 '.singz.it',
 804                 '.slowdown.at',
 805                 '.socialists.at',
 806                 '.spanish.at',
 807                 '.split.at',
 808                 '.stand.at',
 809                 '.stoned.at',
 810                 '.stumble.at',
 811                 '.supercomputer.at',
 812                 '.surfs.it',
 813                 '.swedish.at',
 814                 '.swims.it',
 815                 '.synagogue.at',
 816                 '.syntax.at',
 817                 '.syntaxerror.at',
 818                 '.techie.at',
 819                 '.temple.at',
 820                 '.thinkbig.at',
 821                 '.thirsty.at',
 822                 '.throw.at',
 823                 '.toplist.at',
 824                 '.trekkie.at',
 825                 '.trouble.at',
 826                 '.turkish.at',
 827                 '.unexplained.at',
 828                 '.unixserver.at',
 829                 '.vegetarian.at',
 830                 '.venture.at',
 831                 '.verycool.at',
 832                 '.vic-20.at',
 833                 '.viewing.at',
 834                 '.vintagecomputers.at',
 835                 '.virii.at',
 836                 '.vodka.at',
 837                 '.wannabe.at',
 838                 '.webpagedesign.at',
 839                 '.wheels.at',
 840                 '.whisper.at',
 841                 '.whiz.at',
 842                 '.wonderful.at',
 843                 '.zor.org',
 844                 '.zx80.at',
 845                 '.zx81.at',
 846                 '.zxspectrum.at',
 847         ),
 848         'kisaweb.com',
 849         'krotki.pl',
 850         'kuerzer.de',
 851         '*.kupisz.pl',
 852         'kuso.cc',
 853         '*.l8t.com',
 854         'lame.name',
 855         'lediga.st',
 856         'liencourt.com',
 857         'liteurl.com',
 858         'linkachi.com',
 859         'linkezy.com',
 860         'linkfrog.net',
 861         'linkook.com',
 862         'linkyme.com',
 863         'linkzip.net',
 864         'lispurl.com',
 865         'lnk.in',
 866         'makeashorterlink.com',
 867         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 868                 '*.3gp.fr',
 869                 '*.gtx.fr',
 870                 '*.ici.st',
 871                 '*.max.st',
 872                 '*.nn.cx',              // ns *.sivit.org
 873                 '*.site.cx',    // ns *.sivit.org
 874                 '*.user.fr',
 875                 '*.zxr.fr',
 876         ),
 877         'mcturl.com',
 878         'memurl.com',
 879         'Metamark.net' => array('xrl.us'),
 880         'midgeturl.com',
 881         'Minilink.org' => array('lnk.nu'),
 882         'miniurl.org',
 883         'miniurl.pl',
 884         'mixi.bz',
 885         'mo-v.jp',
 886         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 887                 '.com.md',
 888                 '.co.md',
 889                 '.org.md',
 890                 '.info.md',
 891                 '.host.md',
 892         ),
 893         'monster-submit.com',
 894         'mooo.jp',
 895         'murl.net',
 896         'myactivesurf.net',
 897         'mytinylink.com',
 898         'myurl.in',
 899         'myurl.com.tw',
 900         'nanoref.com',
 901         'Ne1.net' => array(
 902                 '*.ne1.net',
 903                 '*.r8.org',
 904         ),
 905         'Nashville Linux Users Group' => array('nlug.org'),
 906         'not2long.net',
 907         '*.notlong.com',
 908         '*.nuv.pl',
 909         'ofzo.be',
 910         '*.ontheinter.net',
 911         'ourl.org',
 912         'ov2.net',                              // frame
 913         '*.ozonez.com',
 914         'pagebang.com',
 915         'palurl.com',
 916         '*.paulding.net',
 917         'phpfaber.org',
 918         'pygmyurl.com',
 919         'pnope.com',
 920         'prettylink.com',
 921         'PROXID.net' => array(  // also xRelay.net
 922                 '*.asso.ws',
 923                 '*.corp.st',
 924                 '*.euro.tm',
 925                 '*.perso.tc',
 926                 '*.site.tc',
 927                 '*.societe.st',
 928         ),
 929         'qrl.jp',
 930         'qurl.net',
 931         'qwer.org',
 932         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 933         'radiobase.net',
 934         'Rakuten.co.jp' => array(
 935                 'pt.afl.rakuten.co.jp', ///c/
 936         ),
 937         'RedirectFree.com' => array(
 938                 '*.red.tc',
 939                 '*.redirectfree.com',
 940                 '*.sky.tc',
 941                 '*.the.vg',
 942         ),
 943         'redirme.com',
 944         'redirectme.to',
 945         'relic.net',
 946         'rezma.info',
 947         'rio.st',
 948         'rlink.org',
 949         '*.rmcinfo.fr',
 950         'rubyurl.com',
 951         '*.runboard.com',
 952         'runurl.com',
 953         's-url.net',
 954         's1u.net',
 955         'SG5.co.uk' => array(
 956                 '*.sg5.co.uk',
 957                 '*.sg5.info',
 958         ),
 959         'Shim.net' => array(
 960                 '*.0kn.com',
 961                 '*.2cd.net',
 962                 '*.freebiefinders.net',
 963                 '*.freegaming.org',
 964                 '*.op7.net',
 965                 '*.shim.net',
 966                 '*.v9z.com',
 967         ),
 968         'big5.shippingchina.com',
 969         'shorl.com',
 970         'shortenurl.com',
 971         'shorterlink.com',
 972         'shortlinks.co.uk',
 973         'shorttext.com',
 974         'shorturl-accessanalyzer.com',
 975         'Shortify.com' => array(
 976                 '74678439.com',
 977                 'shortify.com',
 978         ),
 979         'shortlink.co.uk',
 980         'ShortURL.com' => array(
 981                 '*.1sta.com',
 982                 '*.24ex.com',
 983                 '*.2fear.com',
 984                 '*.2fortune.com',
 985                 '*.2freedom.com',
 986                 '*.2hell.com',
 987                 '*.2savvy.com',
 988                 '*.2truth.com',
 989                 '*.2tunes.com',
 990                 '*.2ya.com',
 991                 '*.alturl.com',
 992                 '*.antiblog.com',
 993                 '*.bigbig.com',
 994                 '*.dealtap.com',
 995                 '*.ebored.com',
 996                 '*.echoz.com',
 997                 '*.filetap.com',
 998                 '*.funurl.com',
 999                 '*.headplug.com',
1000                 '*.hereweb.com',
1001                 '*.hitart.com',
1002                 '*.mirrorz.com',
1003                 '*.shorturl.com',
1004                 '*.spyw.com',
1005                 '*.vze.com',
1006         ),
1007         'shrinkalink.com',
1008         'shrinkthatlink.com',
1009         'shrinkurl.us',
1010         'shrt.org',
1011         'shrunkurl.com',
1012         'shurl.org',
1013         'shurl.net',
1014         'sid.to',
1015         'simurl.com',
1016         'sitefwd.com',
1017         'Sitelutions.com' => array(
1018                 '*.assexy.as',
1019                 '*.athersite.com',
1020                 '*.athissite.com',
1021                 '*.bestdeals.at',
1022                 '*.byinter.net',
1023                 '*.findhere.org',
1024                 '*.fw.nu',
1025                 '*.isgre.at',
1026                 '*.isthebe.st',
1027                 '*.kwik.to',
1028                 '*.lookin.at',
1029                 '*.lowestprices.at',
1030                 '*.onthenet.as',
1031                 '*.ontheweb.nu',
1032                 '*.pass.as',
1033                 '*.passingg.as',
1034                 '*.redirect.hm',
1035                 '*.rr.nu',
1036                 '*.ugly.as',
1037         ),
1038         '*.skracaj.pl',
1039         'skiltechurl.com',
1040         'skocz.pl',
1041         'slimurl.jp',
1042         'slink.in',
1043         'smallurl.eu',
1044         'smurl.name',
1045         'snipurl.com',
1046         'sp-nov.net',
1047         'splashblog.com',
1048         'spod.cx',
1049         '*.spydar.com',
1050         'Subdomain.gr' => array(
1051                 '*.p2p.gr',
1052                 '*.subdomain.gr',
1053         ),
1054         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1055         'surl.se',
1056         'surl.ws',
1057         'symy.jp',
1058         'tdurl.com',
1059         'tighturl.com',
1060         'tiniuri.com',
1061         'tiny.cc',
1062         'tiny.pl',
1063         'tiny2go.com',
1064         'tinylink.eu',
1065         'tinylinkworld.com',
1066         'tinypic.com',
1067         'tinyr.us',
1068         'TinyURL.com' => array(
1069                 'tinyurl.com',
1070                 'preview.tinyurl.com',
1071                 'tinyurl.co.uk',
1072         ),
1073         'titlien.com',
1074         '*.tlg.pl',
1075         'tlurl.com',
1076         'link.toolbot.com',
1077         'tnij.org',
1078         'Tokelau ccTLD' => array('.tk'),
1079         'toila.net',
1080         '*.toolbot.com',
1081         '*.torontonian.com',
1082         'trimurl.com',
1083         'ttu.cc',
1084         'turl.jp',
1085         '*.tz4.com',
1086         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1087                 '*.1.to',
1088                 '*.4.to',
1089                 '*.5.to',
1090                 '*.82.to',
1091                 '*.s.to',
1092                 '*.u.to',
1093                 '*.ce.to',
1094                 '*.cz.to',
1095                 '*.if.to',
1096                 '*.it.to',
1097                 '*.kp.to',
1098                 '*.ne.to',
1099                 '*.ok.to',
1100                 '*.pc.to',
1101                 '*.tv.to',
1102                 '*.dd.to',
1103                 '*.ee.to',
1104                 '*.hh.to',
1105                 '*.kk.to',
1106                 '*.mm.to',
1107                 '*.qq.to',
1108                 '*.xx.to',
1109                 '*.zz.to',
1110                 '*.ivy.to',
1111                 '*.joa.to',
1112                 '*.ever.to',
1113                 '*.mini.to',
1114         ),
1115         'uchinoko.in',
1116         'Ulimit.com' => array(
1117                 '*.be.tf',
1118                 '*.best.cd',
1119                 '*.bsd-fan.com',
1120                 '*.c0m.st',
1121                 '*.ca.tc',
1122                 '*.clan.st',
1123                 '*.com02.com',
1124                 '*.en.st',
1125                 '*.euro.st',
1126                 '*.fr.fm',
1127                 '*.fr.st',
1128                 '*.fr.vu',
1129                 '*.gr.st',
1130                 '*.ht.st',
1131                 '*.int.ms',
1132                 '*.it.st',
1133                 '*.java-fan.com',
1134                 '*.linux-fan.com',
1135                 '*.mac-fan.com',
1136                 '*.mp3.ms',
1137                 '*.qc.tc',
1138                 '*.sp.st',
1139                 '*.suisse.st',
1140                 '*.t2u.com',
1141                 '*.unixlover.com',
1142                 '*.zik.mu',
1143         ),
1144         '*.uni.cc',
1145         'UNONIC.com' => array(
1146                 '*.at.tf',      // AlpenNIC
1147                 '*.bg.tf',
1148                 '*.ca.tf',
1149                 '*.ch.tf',      // AlpenNIC
1150                 '*.cz.tf',
1151                 '*.de.tf',      // AlpenNIC
1152                 '*.edu.tf',
1153                 '*.eu.tf',
1154                 '*.int.tf',
1155                 '*.net.tf',
1156                 '*.pl.tf',
1157                 '*.ru.tf',
1158                 '*.sg.tf',
1159                 '*.us.tf',
1160         ),
1161         'Up.pl' => array(
1162                 '.69.pl',                       // by nsk101869
1163                 '.crack.pl',            // by nsk101869
1164                 '.film.pl',                     // by sibr19002
1165                 '.h2o.pl',                      // by nsk101869
1166                 '.hostessy.pl',         // by nsk101869
1167                 '.komis.pl',            // by nsk101869
1168                 '.laski.pl',            // by nsk101869
1169                 '.modelki.pl',          // by nsk101869
1170                 '.muzyka.pl',           // by sibr19002
1171                 '.nastolatki.pl',       // by nsk101869
1172                 '.obuwie.pl',           // by nsk101869
1173                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1174                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1175                 '.sexchat.pl',          // by nsk101869
1176                 '.sexlive.pl',          // by nsk101869
1177                 '.tv.pl',                       // by nsk101869
1178                 '.up.pl',                       // by nsk101869
1179                 '.video.pl',            // by nsk101869
1180                 '.xp.pl',                       // nsk101869
1181         ),
1182         '*.uploadr.com',
1183         'url.ie',
1184         'url4.net',
1185         'url-c.com',
1186         'urlbee.com',
1187         'urlbounce.com',
1188         'urlcut.com',
1189         'urlcutter.com',
1190         'urlic.com',
1191         'urlin.it',
1192         'urlkick.com',
1193         'URLLogs.com' => array(
1194                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1195                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1196         ),
1197         '*.urlproxy.com',
1198         'urlser.com',
1199         'urlsnip.com',
1200         'urlzip.de',
1201         'urlx.org',
1202         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1203         'utun.jp',
1204         'uxxy.com',
1205         '*.v27.net',
1206         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1207                 '*.all.at',
1208                 '*.back.to',
1209                 '*.beam.at',
1210                 '*.been.at',
1211                 '*.bite.to',
1212                 '*.board.to',
1213                 '*.bounce.to',
1214                 '*.bowl.to',
1215                 '*.break.at',
1216                 '*.browse.to',
1217                 '*.change.to',
1218                 '*.chip.ms',
1219                 '*.connect.to',
1220                 '*.crash.to',
1221                 '*.cut.by',
1222                 '*.direct.at',
1223                 '*.dive.to',
1224                 '*.drink.to',
1225                 '*.drive.to',
1226                 '*.drop.to',
1227                 '*.easy.to',
1228                 '*.everything.at',
1229                 '*.fade.to',
1230                 '*.fanclub.ms',
1231                 '*.firstpage.de',
1232                 '*.fly.to',
1233                 '*.flying.to',
1234                 '*.fortunecity.co.uk',
1235                 '*.fortunecity.com',
1236                 '*.forward.to',
1237                 '*.fullspeed.to',
1238                 '*.fun.ms',
1239                 '*.gameday.de',
1240                 '*.germany.ms',
1241                 '*.get.to',
1242                 '*.getit.at',
1243                 '*.hard-ware.de',
1244                 '*.hello.to',
1245                 '*.hey.to',
1246                 '*.hop.to',
1247                 '*.how.to',
1248                 '*.hp.ms',
1249                 '*.jump.to',
1250                 '*.kiss.to',
1251                 '*.listen.to',
1252                 '*.mediasite.de',
1253                 '*.megapage.de',
1254                 '*.messages.to',
1255                 '*.mine.at',
1256                 '*.more.at',
1257                 '*.more.by',
1258                 '*.move.to',
1259                 '*.musicpage.de',
1260                 '*.mypage.org',
1261                 '*.mysite.de',
1262                 '*.nav.to',
1263                 '*.notrix.at',
1264                 '*.notrix.ch',
1265                 '*.notrix.de',
1266                 '*.notrix.net',
1267                 '*.on.to',
1268                 '*.page.to',
1269                 '*.pagina.de',
1270                 '*.played.by',
1271                 '*.playsite.de',
1272                 '*.privat.ms',
1273                 '*.quickly.to',
1274                 '*.redirect.to',
1275                 '*.rulestheweb.com',
1276                 '*.run.to',
1277                 '*.scroll.to',
1278                 '*.seite.ms',
1279                 '*.shortcut.to',
1280                 '*.skip.to snap.to',
1281                 '*.soft-ware.de',
1282                 '*.start.at',
1283                 '*.stick.by',
1284                 '*.surf.to',
1285                 '*.switch.to',
1286                 '*.talk.to',
1287                 '*.tip.nu',
1288                 '*.top.ms',
1289                 '*.transfer.to',
1290                 '*.travel.to',
1291                 '*.turn.to',
1292                 '*.vacations.to',
1293                 '*.videopage.de',
1294                 '*.virtualpage.de',
1295                 '*.w3.to',
1296                 '*.walk.to',
1297                 '*.warp9.to',
1298                 '*.window.to',
1299                 '*.yours.at',
1300                 '*.zap.to',
1301                 '*.zip.to',
1302         ),
1303         'VDirect.com' => array(
1304                 '*.emailme.net',
1305                 '*.getto.net',
1306                 '*.inetgames.com',
1307                 '*.netbounce.com',
1308                 '*.netbounce.net',
1309                 '*.oneaddress.net',
1310                 '*.snapto.net',
1311                 '*.vdirect.com',
1312                 '*.vdirect.net',
1313                 '*.webrally.net',
1314         ),
1315         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1316         'vgo2.com',
1317         'Voila.fr' => array('r.voila.fr'),      // Fix it
1318         'w3t.org',
1319         'wapurl.co.uk',
1320         'Wb.st' => array(
1321                 '*.team.st',
1322                 '*.wb.st',
1323         ),
1324         'wbkt.net',
1325         'WebAlias.com' => array(
1326                 '*.andmuchmore.com',
1327                 '*.browser.to',
1328                 '*.escape.to',
1329                 '*.fornovices.com',
1330                 '*.fun.to',
1331                 '*.got.to',
1332                 '*.hottestpix.com',
1333                 '*.imegastores.com',
1334                 '*.latest-info.com',
1335                 '*.learn.to',
1336                 '*.moviefever.com',
1337                 '*.mp3-archives.com',
1338                 '*.myprivateidaho.com',
1339                 '*.radpages.com',
1340                 '*.remember.to',
1341                 '*.resourcez.com',
1342                 '*.return.to',
1343                 '*.sail.to',
1344                 '*.sports-reports.com',
1345                 '*.stop.to',
1346                 '*.thrill.to',
1347                 '*.tophonors.com',
1348                 '*.uncutuncensored.com',
1349                 '*.up.to',
1350                 '*.veryweird.com',
1351                 '*.way.to',
1352                 '*.web-freebies.com',
1353                 '.webalias.com',
1354                 '*.webdare.com',
1355                 '*.xxx-posed.com',
1356         ),
1357         'webmasterwise.com',
1358         'witherst at hotmail.com' => array(     // by Tim Withers
1359                 '*.associates-program.com',
1360                 '*.casinogopher.com',
1361                 '*.ezpagez.com',
1362                 '*.vgfaqs.com',
1363         ),
1364         'wittylink.com',
1365         'wiz.sc',                       // tiny.cc related
1366         'X50.us' => array(
1367                 '*.i50.de',
1368                 '*.x50.us',
1369         ),
1370         'big5.xinhuanet.com',   ///gate/big5/
1371         'xhref.com',
1372         'Xn6.net' => array(
1373                 '*.9ax.net',
1374                 '*.xn6.net',
1375         ),
1376         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1377         '.y11.net',
1378         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1379                 '*.yesns.com',
1380                 '*.srv4u.net',
1381                 //blogne.com
1382         ),
1383         'yatuc.com',
1384         'yep.it',
1385         'yumlum.com',
1386         'yurel.com',
1387         'Z.la' => array(
1388                 'z.la',
1389                 't.z.la',
1390         ),
1391         'zaable.com',
1392         'zapurl.com',
1393         'zarr.co.uk',
1394         'zerourl.com',
1395         'ZeroWeb.org' => array(
1396                 '*.80t.com',
1397                 '*.firez.org',
1398                 '*.fizz.nu',
1399                 '*.ingame.org',
1400                 '*.irio.net',
1401                 '*.v33.org',
1402                 '*.zeroweb.org',
1403         ),
1404         'zhukcity.ru',
1405         'zippedurl.com',
1406         'zr5.us',
1407         '*.zs.pl',
1408         '*.zu5.net',
1409         'zuso.tw',
1410         '*.zwap.to',
1411 );
1412
1413 // --------------------------------------------------
1414
1415 $blocklist['A-2'] = array(
1416
1417         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1418         //
1419         //'*.dyndns.*', // Wildcard for dyndns
1420         //
1421         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1422         'ddns.ru' => array('*.bpa.nu'),
1423         'Dhs.org' => array(
1424                 '*.2y.net',
1425                 '*.dhs.org',
1426         ),
1427         '*.dnip.net',
1428         '*.dyndns.co.za',
1429         '*.dyndns.dk',
1430         '*.dyndns.nemox.net',
1431         'DyDNS.com' => array(
1432                 '*.ath.cx',
1433                 '*.dnsalias.org',
1434                 '*.dyndns.org',
1435                 '*.homeip.net',
1436                 '*.homelinux.net',
1437                 '*.mine.nu',
1438                 '*.shacknet.nu',
1439         ),
1440         '*.dtdns.net',                  // by jscott at sceiron.com
1441         '*.dynu.com',
1442         '*.dynup.net',
1443         '*.fdns.net',
1444         'J-Speed.net' => array(
1445                 '*.bne.jp',
1446                 '*.ii2.cc',
1447                 '*.jdyn.cc',
1448                 '*.jspeed.jp',
1449         ),
1450         '*.mydyn.de',
1451         '*.nerdcamp.net',
1452         'No-IP.com' => array(
1453                         '*.bounceme.net',
1454                         '*.hopto.org',
1455                         '*.myftp.biz',
1456                         '*.myftp.org',
1457                         '*.myvnc.com',
1458                         '*.no-ip.biz',
1459                         '*.no-ip.info',
1460                         '*.no-ip.org',
1461                         '*.redirectme.net',
1462                         '*.servebeer.com',
1463                         '*.serveblog.net',
1464                         '*.servecounterstrike.com',
1465                         '*.serveftp.com',
1466                         '*.servegame.com',
1467                         '*.servehalflife.com',
1468                         '*.servehttp.com',
1469                         '*.servemp3.com',
1470                         '*.servepics.com',
1471                         '*.servequake.com',
1472                         '*.sytes.net',
1473                         '*.zapto.org',
1474         ),
1475         '*.opendns.be',
1476         'Yi.org' => array(      // by dns at whyi.org
1477                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1478
1479                 // 72.55.129.46(redirect.yi.org)
1480                 '*.whyi.org',
1481                 '*.weedns.com',
1482         ),
1483         '*.zenno.info',
1484         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1485                         // and all non-recorded domains redirect to 'agoga.com' now
1486                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1487                         // http://agoga.com/aboutus.html
1488 );
1489
1490 // --------------------------------------------------
1491
1492 // B: Sample setting of:
1493 // Jacked (taken advantage of) and cleaning-less sites
1494 //
1495 // Please notify us about this list with reason:
1496 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1497
1498 $blocklist['B-1'] = array(
1499
1500         // B-1: Web N.M spaces (N > 0, M >= 0)
1501         //
1502         //   Messages from forerunners:
1503         //     activefreehost.com
1504         //       "We regret to inform you that ActiveFreeHost
1505         //        free hosting service has is now closed (as of
1506         //        September 18). We have been online for over
1507         //        two and half years, but have recently decided
1508         //        to take time for software improvement to fight
1509         //        with server abuse, Spam advertisement and
1510         //        fraud."
1511         //
1512         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1513         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1514         '*.007webpro.com',              // by richord at ientry.com
1515         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1516         '*.0buckhost.com',              // by tycho at e-lab.nl
1517         '0Catch.com related' => array(
1518                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1519
1520                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1521                 '*.100megsfree5.com',
1522
1523                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1524                 '*.100freemb.com',              // by Danny Ashworth
1525                 '*.easyfreehosting.com',
1526                 '*.exactpages.com',
1527                 '*.fcpages.com',
1528                 '*.wtcsites.com',
1529
1530                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1531                 '*.741.com',
1532                 '*.freecities.com',
1533                 '*.freesite.org',
1534                 '*.freewebpages.org',
1535                 '*.freewebsitehosting.com',
1536                 '*.jvl.com',
1537
1538                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1539                 '*.freespaceusa.com',
1540                 '*.usafreespace.com',
1541
1542                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1543                 '*.dex1.com',
1544                 '*.questh.com',
1545
1546                 // 209.63.57.10(*snip*), ns *.0catch.com
1547                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1548                 '*.012webpages.com',    // by support at 0catch.com
1549                 '*.150m.com',
1550                 '*.1sweethost.com',             // by whois at bluehost.com
1551                 '*.250m.com',                   // by jason at fahlman.net
1552                 '*.9cy.com',                    // by paulw0t at gmail.com
1553                 '*.angelcities.com',    // by cliff at eccentrix.com
1554                 '*.arcadepages.com',    // by admin at site-see.com
1555                 '*.e-host.ws',                  // by dns at jomax.net
1556                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1557                 '*.fw.bz',                              // by ben at kuehl.as
1558                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1559                 '*.g0g.net',                    // by domains at seem.co.uk
1560                 '*.galaxy99.net',               // by admin at bagchi.org
1561                 '*.greatnow.com',               // by peo at peakspace.com
1562                 '*.hautlynx.com',               // by hlewis28 at juno.com
1563                 '*.ibnsites.com',               // by cmrojas at mail.com
1564                 '*.just-allen.com',             // by extremehype at msn.com
1565                 '*.kogaryu.com',                // by angelguerra at msn.com
1566                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1567                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1568                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1569                 '*.s-enterprize.com',
1570                 '*.servetown.com',              // by jonahbliss at earthlink.net
1571                 '*.stinkdot.org',               // by bluedot at ziplip.com
1572                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1573                 '*.zomi.net',                   // by sianpu at gmail.com
1574         ),
1575         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1576         '100 Best Inc' => array(
1577                 // by 100 Best Inc (info at 100best.com)
1578
1579                 // 66.235.204.7(h204-007.bluefishhosting.com)
1580                 '*.2-hi.com',
1581                 '*.20fr.com',
1582                 '*.20ii.com',
1583                 '*.20is.com',
1584                 '*.20it.com',
1585                 '*.20m.com',    // by jlee at 100bestinc.com
1586                 '*.20to.com',
1587                 '*.2u-2.com',
1588                 '*.3-st.com',
1589                 '*.fws1.com',
1590                 '*.fw-2.com',
1591                 '*.inc5.com',
1592                 '*.on-4.com',
1593                 '*.st-3.com',
1594                 '*.st20.com',
1595                 '*.up-a.com',
1596
1597                 // 216.40.33.252(www-pd.mdnsservice.com)
1598                 '*.0-st.com',
1599                 '*.20me.com',
1600         ),
1601         '*.100foros.com',
1602         '*.101freehost.com',
1603         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1604         '20six Weblog Services' => array(
1605                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1606                 '.20six.co.uk',
1607                 '.20six.fr',
1608                 'myblog.de',
1609                 'myblog.es',
1610         ),
1611         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1612         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1613         '2IP.com' => array(
1614                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1615                 '*.2ip.jp',
1616                 '*.474.jp',
1617                 '*.consensus.jp',
1618                 '*.desyo.jp',
1619                 '*.dif.jp',
1620                 '*.pastels.jp',
1621                 '*.powerblogger.jp',
1622                 '*.vippers.jp',
1623                 '*.webpages.jp',
1624
1625                 // 205.209.97.56(non-existent)
1626                 '*.biografi.biz',
1627                 '*.biografi.info',
1628                 '*.biografi.org',
1629                 '*.biografi.us',
1630                 '*.datadiri.biz',
1631                 '*.datadiri.cc',
1632                 '*.datadiri.com',
1633                 '*.datadiri.info',
1634                 '*.datadiri.net',
1635                 '*.datadiri.org',
1636                 '*.datadiri.tv',
1637                 '*.datadiri.us',
1638                 '*.indo.bz',
1639                 '*.indo.cc',
1640                 '*.profil.bz',
1641                 '*.profil.cc',
1642                 '*.profil.cn',
1643                 '*.profil.in',
1644                 '*.profil.tv',
1645
1646                 // 205.209.101.47(non-existent)
1647                 '*.about.tc',
1648                 '*.about.vg',
1649                 '*.aboutus.gs',
1650                 '*.aboutus.ms',
1651                 '*.aboutus.tc',
1652                 '*.aboutus.vg',
1653                 '*.band.io',
1654                 '*.beijing.am',
1655                 '*.blogs.io',
1656                 '*.boke.am',
1657                 '*.clan.io',
1658                 '*.ecv.gs',
1659                 '*.ecv.ms',
1660                 '*.ecv.vg',
1661                 '*.freekong.cn',
1662                 '*.go2net.ws',
1663                 '*.hello.cn.com',
1664                 '*.hello.io',
1665                 '*.hits.io',
1666                 '*.hostingweb.us',
1667                 '*.hub.io',
1668                 '*.ide.am',
1669                 '*.inc.io',
1670                 '*.incn.in',
1671                 '*.indo.gs',
1672                 '*.indo.ms',
1673                 '*.indo.tc',
1674                 '*.indo.vg',
1675                 '*.infinitehosting.net',
1676                 '*.infinites.net',
1677                 '*.jushige.cn',
1678                 '*.jushige.com',
1679                 '*.kongjian.in',
1680                 '*.lan.io',
1681                 '*.llc.nu',
1682                 '*.maimai.in',
1683                 '*.max.io',
1684                 '*.musician.io',
1685                 '*.mycv.bz',
1686                 '*.mycv.nu',
1687                 '*.mycv.tv',
1688                 '*.myweb.io',
1689                 '*.ourprofile.biz',
1690                 '*.ourprofile.info',
1691                 '*.ourprofile.net',
1692                 '*.ourprofile.org',
1693                 '*.ourprofile.us',
1694                 '*.profil.gs',
1695                 '*.profil.ms',
1696                 '*.profil.tc',
1697                 '*.qiye.in',
1698                 '*.site.io',
1699                 '*.wan.io',
1700                 '*.web-cam.ws',
1701                 '*.webs.io',
1702                 '*.xixu.cc',
1703                 '*.zaici.am',
1704                 '*.zip.io',
1705                 '*.zuzhi.in',
1706
1707                 '*.profil.vg',          // 205.209.101.67(non-existent)
1708                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1709                 //'*.about.gs',         // No record
1710                 //'*.eprofile.us',      // non-existent
1711         ),
1712         '2Page.de' => array(
1713                 '.dreipage.de',
1714                 '.2page.de',
1715         ),
1716         '*.3-hosting.net',
1717         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1718         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1719         '*.8000web.com',        // 75.126.189.45
1720         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1721         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1722         'Ai.NET' => array(
1723                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1724                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1725         ),
1726         '*.aimoo.com',
1727         '*.alkablog.com',
1728         '*.alluwant.de',
1729         '.amkbb.com',
1730         'answerbag.com',        // 8.5.0.128
1731         'anyboard.net',
1732         'AOL.com' =>    // http://about.aol.com/international_services
1733                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1734                 '(?:aol|americaonline)\.' .
1735                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1736                 // Rough but works
1737         'Apple.com' => array('idisk.mac.com'),
1738         '*.askfaq.org',
1739         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1740         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1741         '*.asphost4free.com',
1742         'basenow.com',
1743         'BatCave.net' => array(
1744                 '.batcave.net',                 // 64.22.112.226
1745                 '.freehostpro.com',             // 64.22.112.226
1746         ),
1747         '*.bb-fr.com',
1748         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1749         '*.beeplog.com',
1750         'beepworld.it',
1751         'bestfreeforums.com',
1752         'bestvotexxx.com',
1753         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1754         'blinklist.com',
1755         'Blog.com' => array(
1756                 // by admin.domains at co.blog.com
1757                 '*.blog.com',
1758                 '*.blogandorra.com',
1759                 '*.blogangola.com',
1760                 '*.blogaruba.com',
1761                 '*.blogaustria.at',
1762         ),
1763         '*.blog.com.es',
1764         '*.blog.hr',
1765         '*.blog4ever.com',
1766         '*.blog-fx.com',
1767         '*.blogbeee.com',
1768         'blogas.lt',
1769         'blogbud.com',
1770         '*.blogburkinafaso.com',
1771         '*.blogcu.com',                 // by info at nokta.com
1772         'blogfreely.com',
1773         '*.blogdrive.com',
1774         '*.blogg.de',
1775         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1776         'bloggercrab.com',
1777         'bloggers.nl',
1778         '*.bloggingmylife.com',
1779         '*.bloggles.info',
1780         '*.blogharbor.com',
1781         '*.bloguj.eu',
1782         'bloguitos.com',
1783         'blogosfer.com',
1784         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1785         '*.blogslive.net',
1786         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1787         '*.blogstream.com',
1788         'blogyaz.com',
1789         'bloodee.com',
1790         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1791         'board-4you.de',
1792         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1793         '*.boardhost.com',
1794         'Bravenet.com' => array(
1795                 '*.bravenet.com',
1796                 '*.bravehost.com',
1797         ),
1798         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1799         'C2k.jp' => array(
1800                 // by Makoto Okuse (webmaster at 2style.net)
1801                 '.081.in',
1802                 '.2style.in',
1803                 '.bian.in',
1804                 '.curl.in',
1805                 '.ennui.in',
1806                 '.jinx.in',
1807                 '.loose.in',
1808                 '.mist.in',
1809                 '.muu.in',
1810                 '.naive.in',
1811                 '.panic.in',
1812                 '.slum.in',
1813
1814                 // by 2style, ns *.click2k.net, *.2style.net
1815                 '.2st.jp',
1816                 '.betty.jp',
1817                 '.cabin.jp',
1818                 '.cult.jp',
1819                 '.mippi.jp',
1820                 '.purety.jp',
1821                 '.rapa.jp',
1822                 '.side-b.jp',
1823                 '.web-box.jp',
1824                 '.yea.jp',
1825
1826                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1827                 '.2style.net',
1828                 '.click2k.net',
1829                 '.houka5.com',
1830
1831                 // by click2k, ns *.click2k.net, *.2style.net
1832                 '.psyco.jp',
1833                 '.sweety.jp',
1834
1835                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1836                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1837         ),
1838         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1839         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1840         '*.chueca.com',
1841         'city-forum.com',
1842         '*.clicdev.com',
1843         '*.craigslist.org',
1844         'concepts-mall.com',
1845         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1846         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1847         'counterhit.de',
1848         '*.createblog.com',
1849         '*.createforum.net',
1850         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1851         '*.createmybb.com',
1852         'CwCity.de' => array(
1853                 '.cwcity.de',
1854                 '.cwsurf.de',
1855         ),
1856         'dakrats.net',
1857         '*.dcswtech.com',
1858         'del.icio.us',
1859         '*.devil.it',
1860         '*.diaryland.com',
1861         'diigo.com',                    ///user/
1862         'digg.com',
1863         'digstock.com',
1864         'domains at galaxywave.net' => array(
1865                 'blogstation.net',
1866                 '.phpbb-host.com',
1867         ),
1868         'dotbb.be',
1869         '*.dox.hu',                             // dns at 1b.hu
1870         '*.eadf.com',
1871         '*.eblog.com.au',
1872         '*.ekiwi.de',
1873         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1874         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1875         '*.easyjournal.com',
1876         '*.ebloggy.com',
1877         'enunblog.com',
1878         '*.epinoy.com',
1879         '*.ez-sites.ws',
1880         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1881         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1882         '*.fathippohosting.com',        // 208.101.3.192
1883         'FC2.com' => array(
1884                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1885                         // Many traps available:
1886                         //      bqdr.blog98.fc2.com,       iframe
1887                         //      csfir.blog87.fc2.com,      iframe
1888                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1889                         //      sippou2006.blog60.fc2.com, iframe
1890                         // NOTE: 'blog.fc2.com' is not included
1891                 '*.h.fc2.com',  // Adult
1892         ),
1893         '*.fizwig.com',
1894         'forum.ezedia.net',
1895         '*.extra.hu',                   // angelo at jasmin.hu
1896         '*.fanforum.cc',
1897         'fingerprintmedia.com',
1898         '*.filelan.com',
1899         '*.fora.pl',
1900         '*.forka.eu',
1901         '*.foren-city.de',
1902         'foren-gratis.de',
1903         '*.foros.tv',
1904         '*.forospace.com',
1905         'foroswebgratis.com',
1906         '*.forum-on.de',
1907         '*.forum24.se',
1908         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1909         '.forum66.com',
1910         'Forumotion.com' => array(
1911                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1912                 '*.forumactif.com',     // 91.121.41.79
1913                 '*.editboard.com',      // 75.126.156.15
1914                 '*.sosblog.com',        // 74.86.25.140
1915
1916                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1917                 '*.0forum.biz',
1918                 '*.1forum.biz',
1919                 '*.1fr1.net',
1920                 '*.1talk.net',
1921                 '*.2forum.biz',
1922                 '*.3forum.biz',
1923                 '*.4forum.biz',
1924                 '*.4rumer.com',
1925                 '*.4rumer.net',
1926                 '*.4umer.com',
1927                 '*.4umer.net',
1928                 '*.5forum.biz',
1929                 '*.5forum.info',
1930                 '*.5forum.net',
1931                 '*.6forum.biz',
1932                 '*.6forum.info',
1933                 '*.77forum.com',
1934                 '*.7forum.biz',
1935                 '*.7forum.info',
1936                 '*.7forum.net',
1937                 '*.8forum.biz',
1938                 '*.8forum.info',
1939                 '*.8forum.net',
1940                 '*.9forum.biz',
1941                 '*.9forum.info',
1942                 '*.activebb.net',
1943                 '*.aforumfree.com',
1944                 '*.all-forum.net',
1945                 '*.all-up.com',
1946                 '*.alldiscussion.net',
1947                 '*.allgoo.net',
1948                 '*.allgoo.us',
1949                 '*.american-forum.net',
1950                 '*.americantalk.net',
1951                 '*.annuaire-forums.com',
1952                 '*.asiafreeforum.com',
1953                 '*.asianfreeforum.com',
1954                 '*.azureforum.com',
1955                 '*.azurforum.com',
1956                 '*.bestcheapforum.com',
1957                 '*.bestdiscussion.net',
1958                 '*.bestgoo.com',
1959                 '*.bestofforum.com',
1960                 '*.bestofforum.net',
1961                 '*.bestoforum.net',
1962                 '*.bforum.biz',
1963                 '*.big-forum.net',
1964                 '*.board-poster.com',
1965                 '*.board-realtors.com',
1966                 '*.boardonly.com',
1967                 '*.boardrealtors.net',
1968                 '*.boardsmessage.com',
1969                 '*.briceboard.com',
1970                 '*.bubblelol.com',
1971                 '*.buy-forum.com',
1972                 '*.buy-talk.com',
1973                 '*.buyforum.net',
1974                 '*.buygoo.net',
1975                 '*.buygoo.us',
1976                 '*.camelscrew.com',
1977                 '*.cheap-forum.com',
1978                 '*.cheapforum.net',
1979                 '*.chocoforum.com',
1980                 '*.chocoforum.net',
1981                 '*.clic-topic.com',
1982                 '*.clicboard.com',
1983                 '*.clictopic.com',
1984                 '*.clictopic.net',
1985                 '*.clictopics.com',
1986                 '*.clubdiscussion.net',
1987                 '*.coolbb.net',
1988                 '*.crazy4us.com',
1989                 '*.crazyfruits.net',
1990                 '*.createmyboard.com',
1991                 '*.crewcamel.com',
1992                 '*.cyberfreeforum.com',
1993                 '*.discutforum.com',
1994                 '*.discutfree.com',
1995                 '*.do-forum.com',
1996                 '*.do-goo.com',
1997                 '*.do-goo.net',
1998                 '*.do-talk.com',
1999                 '*.dodiscussion.com',
2000                 '*.dogoo.us',
2001                 '*.easydiscussion.net',
2002                 '*.easyforumlive.com',
2003                 '*.englishboard.net',
2004                 '*.englishboards.com',
2005                 '*.ephpbb.com',
2006                 '*.eraseboard.net',
2007                 '*.eraseboards.net',
2008                 '*.euro-talk.net',
2009                 '*.eurodiscussion.net',
2010                 '*.eurogoo.com',
2011                 '*.exchangesboard.com',
2012                 '*.exprimetoi.net',
2013                 '*.fairtopic.com',
2014                 '*.fforum.biz',
2015                 '*.fforumfree.com',
2016                 '*.first-forum.com',
2017                 '*.firstgoo.com',
2018                 '*.fororama.com',
2019                 '*.forum-2007.com',
2020                 '*.forum-actif.net',
2021                 '*.forum-free.biz',
2022                 '*.forum-free.org',
2023                 '*.forum-motion.com',
2024                 '*.forum0.biz',
2025                 '*.forum0.info',
2026                 '*.forum0.net',
2027                 '*.forum2.biz',
2028                 '*.forum3.biz',
2029                 '*.forum3.info',
2030                 '*.forum5.info',
2031                 '*.forum6.biz',
2032                 '*.forum6.info',
2033                 '*.forum7.biz',
2034                 '*.forum777.com',
2035                 '*.forum8.biz',
2036                 '*.forum9.biz',
2037                 '*.foruma.biz',
2038                 '*.forumactif.biz',
2039                 '*.forumactif.info',
2040                 '*.forumactif.name',
2041                 '*.forumactif.ws',
2042                 '*.forumaction.net',
2043                 '*.forumakers.com',
2044                 '*.forumandco.com',
2045                 '*.forumb.biz',
2046                 '*.forumc.biz',
2047                 '*.forumd.biz',
2048                 '*.forumdediscussions.com',
2049                 '*.forumdediscussions.net',
2050                 '*.forume.biz',
2051                 '*.forumeast.com',
2052                 '*.forumf.biz',
2053                 '*.forumfreek.com',
2054                 '*.forumfreez.com',
2055                 '*.forumg.biz',
2056                 '*.forumh.biz',
2057                 '*.forumh.net',
2058                 '*.forumhope.com',
2059                 '*.forumi.biz',
2060                 '*.forumice.net',
2061                 '*.foruminute.com',
2062                 '*.forumj.biz',
2063                 '*.forumj.net',
2064                 '*.forumjonction.com',
2065                 '*.forumk.biz',
2066                 '*.foruml.biz',
2067                 '*.forumm.biz',
2068                 '*.forummotion.com',
2069                 '*.forummotions.com',
2070                 '*.forumn.biz',
2071                 '*.forumn.net',
2072                 '*.forumo.biz',
2073                 '*.forumonline.biz',
2074                 '*.forumotions.com',
2075                 '*.forump.biz',
2076                 '*.forump.info',
2077                 '*.forumperso.com',
2078                 '*.forumpersos.com',
2079                 '*.forumplatinum.com',
2080                 '*.forumpro.fr',
2081                 '*.forumq.biz',
2082                 '*.forumr.biz',
2083                 '*.forumr.net',
2084                 '*.forumrama.com',
2085                 '*.forums-actifs.com',
2086                 '*.forums-actifs.net',
2087                 '*.forums1.net',
2088                 '*.forumsactifs.com',
2089                 '*.forumsactifs.net',
2090                 '*.forumsfree.org',
2091                 '*.forumsline.com',
2092                 '*.forumsmakers.com',
2093                 '*.forumsmotion.com',
2094                 '*.forumsmotions.com',
2095                 '*.forumt.biz',
2096                 '*.forumv.biz',
2097                 '*.forumvalue.com',
2098                 '*.forumw.biz',
2099                 '*.forumy.biz',
2100                 '*.free-boards.net',
2101                 '*.freediscussion.net',
2102                 '*.freediscussions.net',
2103                 '*.freeforum.me.uk',
2104                 '*.freeforumboard.net',
2105                 '*.freeforumfree.com',
2106                 '*.freevideotalk.com',
2107                 '*.frenchboard.com',
2108                 '*.fruitsandco.com',
2109                 '*.fullboards.com',
2110                 '*.fullsubject.com',
2111                 '*.fullsubject.net',
2112                 '*.get-forum.net',
2113                 '*.getdiscussion.com',
2114                 '*.getgoo.net',
2115                 '*.getgoo.us',
2116                 '*.gettalk.net',
2117                 '*.go-board.com',
2118                 '*.go-board.net',
2119                 '*.go-forum.net',
2120                 '*.go-ogler.com',
2121                 '*.gofreeforum.com',
2122                 '*.gogoo.us',
2123                 '*.goo-board.com',
2124                 '*.goo-boys.com',
2125                 '*.goo-dart.com',
2126                 '*.goo-dole.com',
2127                 '*.goo-done.com',
2128                 '*.gooboards.com',
2129                 '*.goodbb.net',
2130                 '*.goodearths.com',
2131                 '*.goodforum.net',
2132                 '*.goodoles.com',
2133                 '*.goodoolz.com',
2134                 '*.gooforum.com',
2135                 '*.gooforums.com',
2136                 '*.googoolz.com',
2137                 '*.great-forum.com',
2138                 '*.heavenforum.com',
2139                 '*.hforum.biz',
2140                 '*.high-forums.com',
2141                 '*.highbb.com',
2142                 '*.highforum.net',
2143                 '*.hightoxic.com',
2144                 '*.homediscussion.net',
2145                 '*.homegoo.com',
2146                 '*.hooxs.com',
2147                 '*.hot-me.com',
2148                 '*.hot4um.com',
2149                 '*.hotdiscussion.net',
2150                 '*.hotgoo.net',
2151                 '*.in-goo.com',
2152                 '*.in-goo.net',
2153                 '*.infodiscussion.net',
2154                 '*.ingoo.us',
2155                 '*.iowoi.com',
2156                 '*.jforum.biz',
2157                 '*.just-forum.net',
2158                 '*.justboard.net',
2159                 '*.justdiscussion.com',
2160                 '*.justforum.net',
2161                 '*.justgoo.com',
2162                 '*.keuf.net',
2163                 '*.lforum.biz',
2164                 '*.lifediscussion.net',
2165                 '*.lifeme.net',
2166                 '*.lightbb.com',
2167                 '*.logu2.com',
2168                 '*.longdomaine.com',
2169                 '*.lovediscussion.net',
2170                 '*.lowcostforum.com',
2171                 '*.make-free-forum.com',
2172                 '*.makeforumfree.com',
2173                 '*.makefreeforum.com',
2174                 '*.mam9.com',
2175                 '*.manageboard.com',
2176                 '*.max2forum.com',
2177                 '*.meabout.com',
2178                 '*.megabb.com',
2179                 '*.moncontact.com',
2180                 '*.moninter.net',
2181                 '*.motion-forum.net',
2182                 '*.motionforum.net',
2183                 '*.motionsforum.com',
2184                 '*.mrforum.net',
2185                 '*.msnboard.net',
2186                 '*.msnyou.com',
2187                 '*.my-free-board.com',
2188                 '*.my-free-boards.com',
2189                 '*.my-free-forum.com',
2190                 '*.my-free-forums.com',
2191                 '*.my-goo.com',
2192                 '*.my-goo.net',
2193                 '*.mydiscussionboard.com',
2194                 '*.myfreeboard.net',
2195                 '*.mygoo.org',
2196                 '*.myrealboard.com',
2197                 '*.netboarder.com',
2198                 '*.netdiscussion.net',
2199                 '*.netgoo.org',
2200                 '*.new-forum.net',
2201                 '*.newdiscussion.net',
2202                 '*.newgoo.net',
2203                 '*.nforum.biz',
2204                 '*.nice-album.com',
2205                 '*.nice-board.biz',
2206                 '*.nice-board.com',
2207                 '*.nice-board.net',
2208                 '*.nice-boards.com',
2209                 '*.nice-boards.net',
2210                 '*.nice-forum.com',
2211                 '*.nice-forum.net',
2212                 '*.nice-forums.com',
2213                 '*.nice-forums.net',
2214                 '*.nice-gallery.net',
2215                 '*.nice-subject.com',
2216                 '*.nice-subjects.com',
2217                 '*.nice-theme.com',
2218                 '*.nice-topic.com',
2219                 '*.nice-topics.com',
2220                 '*.nicealbums.com',
2221                 '*.niceboard.biz',
2222                 '*.niceboard.net',
2223                 '*.niceboards.net',
2224                 '*.nicegalleries.net',
2225                 '*.nicesubject.com',
2226                 '*.nicesubjects.com',
2227                 '*.nicetopic.net',
2228                 '*.nicetopics.com',
2229                 '*.nightforum.net',
2230                 '*.nocost-forum.com',
2231                 '*.nofeeforum.com',
2232                 '*.one-forum.net',
2233                 '*.onediscussion.net',
2234                 '*.onegoo.us',
2235                 '*.onlinegoo.com',
2236                 '*.onlyquery.com',
2237                 '*.open-board.com',
2238                 '*.openu2.com',
2239                 '*.othersboards.com',
2240                 '*.own0.com',
2241                 '*.pforum.biz',
2242                 '*.phpbb9.com',
2243                 '*.phpbbtest.com',
2244                 '*.positifforum.com',
2245                 '*.postalboard.com',
2246                 '*.prodiscussion.net',
2247                 '*.progoo.us',
2248                 '*.pureforum.net',
2249                 '*.qforum.biz',
2250                 '*.quickbb.net',
2251                 '*.realbb.net',
2252                 '*.realfreeforum.com',
2253                 '*.realmsn.com',
2254                 '*.rforum.biz',
2255                 '*.road2us.com',
2256                 '*.roomforum.com',
2257                 '*.saveboard.com',
2258                 '*.screwcamel.com',
2259                 '*.screwcamels.com',
2260                 '*.sendboard.com',
2261                 '*.sephorum.com',
2262                 '*.sforum.biz',
2263                 '*.shootboard.com',
2264                 '*.shop-forum.net',
2265                 '*.shopsubject.com',
2266                 '*.simpleboard.net',
2267                 '*.site-forums.com',
2268                 '*.smileyforum.net',
2269                 '*.sos-forum.net',
2270                 '*.sos4um.com',
2271                 '*.sos4um.net',
2272                 '*.sosforum.net',
2273                 '*.speedyforum.com',
2274                 '*.stationforum.com',
2275                 '*.subject-expert.com',
2276                 '*.subject-line.com',
2277                 '*.subject-tracer.com',
2278                 '*.subjectchange.com',
2279                 '*.subjectdeals.com',
2280                 '*.subjectdebate.com',
2281                 '*.subjectdone.com',
2282                 '*.subjectonline.com',
2283                 '*.subjectschange.com',
2284                 '*.subjectsecrets.com',
2285                 '*.super-forum.net',
2286                 '*.talk-forums.com',
2287                 '*.team-forum.net',
2288                 '*.team-talk.net',
2289                 '*.teamconvention.com',
2290                 '*.teamgoo.net',
2291                 '*.teensboards.com',
2292                 '*.the-talk.net',
2293                 '*.the-up.com',
2294                 '*.thegoo.us',
2295                 '*.thinksubject.com',
2296                 '*.top-board.com',
2297                 '*.top-forum.net',
2298                 '*.top-me.com',
2299                 '*.top-talk.net',
2300                 '*.topdiscussion.com',
2301                 '*.topgoo.net',
2302                 '*.topic-board.com',
2303                 '*.topic-board.net',
2304                 '*.topic-debate.com',
2305                 '*.topic-ideas.com',
2306                 '*.topic-mail.com',
2307                 '*.topic-zone.com',
2308                 '*.topicboard.net',
2309                 '*.topicboards.com',
2310                 '*.topicmanager.com',
2311                 '*.topicsolutions.net',
2312                 '*.toxicfarm.com',
2313                 '*.unlimitboard.com',
2314                 '*.unlimitedboard.com',
2315                 '*.unlimitedforum.com',
2316                 '*.up-with.com',
2317                 '*.up-your.com',
2318                 '*.urealboard.com',
2319                 '*.user-board.net',
2320                 '*.userboard.net',
2321                 '*.users-board.com',
2322                 '*.users-board.net',
2323                 '*.usersboard.com',
2324                 '*.usersboard.net',
2325                 '*.webgoo.us',
2326                 '*.withboards.com',
2327                 '*.withme.us',
2328                 '*.worldgoo.com',
2329                 '*.yahooboard.net',
2330                 '*.yforum.biz',
2331                 '*.yoo7.com',
2332                 '*.youneed.us',
2333                 '*.your-board.com',
2334                 '*.your-talk.com',
2335                 '*.yourme.net',
2336                 '*.zforum.biz',
2337
2338                 // 75.126.156.15 redirect to forumactif.com
2339                 '*.actifforum.com',
2340                 '*.fr-bb.com',
2341                 '*.superforum.fr',
2342
2343                 // 75.126.156.15 redirect to editboard.com
2344                 '*.bbfr.net',
2345                 '*.bbgraf.com',
2346                 '*.cinebb.com',
2347                 '*.darkbb.com',
2348                 '*.dynamicbb.com',
2349                 '*.zikforum.com',
2350
2351                 // 74.86.25.140 Used: sosblog.com
2352                 '*.0-up.com',
2353                 '*.0-yo.com',
2354                 '*.04live.com',
2355                 '*.06fr.com',
2356                 '*.0fra.com',
2357                 '*.0jet.com',
2358                 '*.0yoo.com',
2359                 '*.1toxic.com',
2360                 '*.2k00.com',
2361                 '*.2xik.com',
2362                 '*.blog-2007.com',
2363                 '*.blog-2008.com',
2364                 '*.blog-2009.com',
2365                 '*.blog-2010.com',
2366                 '*.blog-actif.net',
2367                 '*.blog-marley.com',
2368                 '*.blog-talker.com',
2369                 '*.blog2009.com',
2370                 '*.blogactif.net',
2371                 '*.blogalbums.com',
2372                 '*.blogalerie.com',
2373                 '*.blogaleries.com',
2374                 '*.blogallerys.com',
2375                 '*.blogandme.com',
2376                 '*.blogandyou.com',
2377                 '*.blogbubble.net',
2378                 '*.blogdollz.com',
2379                 '*.bloggeuse.net',
2380                 '*.bloggeuses.com',
2381                 '*.bloginstinct.com',
2382                 '*.bloginternet.net',
2383                 '*.blogmakers.net',
2384                 '*.blogmarley.net',
2385                 '*.blogminister.net',
2386                 '*.blogmorane.com',
2387                 '*.blognboard.com',
2388                 '*.blogotek.net',
2389                 '*.blogpas.com',
2390                 '*.blogpublisher.net',
2391                 '*.blogsalbum.com',
2392                 '*.blogsalbums.com',
2393                 '*.blogsfan.net',
2394                 '*.blogsgallerys.com',
2395                 '*.blogsitephp.com',
2396                 '*.blogsland.net',
2397                 '*.blogsmaker.com',
2398                 '*.blogsmakers.com',
2399                 '*.blogspeed.net',
2400                 '*.blogsup.net',
2401                 '*.blogsutil.com',
2402                 '*.blogsutils.com',
2403                 '*.blogsystem.net',
2404                 '*.blogtalker.net',
2405                 '*.blogtheque.net',
2406                 '*.blogutil.com',
2407                 '*.blogvsboard.com',
2408                 '*.briceblog.com',
2409                 '*.cibleblog.com',
2410                 '*.cristalblog.com',
2411                 '*.crystalblog.net',
2412                 '*.dad-blog.com',
2413                 '*.daddy-blog.com',
2414                 '*.defaultblog.com',
2415                 '*.discussionsblog.com',
2416                 '*.dollzblog.com',
2417                 '*.dtoxic.com',
2418                 '*.easiestblog.net',
2419                 '*.espaceblog.net',
2420                 '*.exitblog.net',
2421                 '*.expensiveblog.com',
2422                 '*.extra-blog.net',
2423                 '*.extrablog.net',
2424                 '*.facileblog.com',
2425                 '*.forblogger.com',
2426                 '*.forumsblogs.com',
2427                 '*.freephpblog.com',
2428                 '*.fresh-blog.net',
2429                 '*.galleryblog.net',
2430                 '*.galleryblogs.net',
2431                 '*.gallerysblog.com',
2432                 '*.gallerysblogs.com',
2433                 '*.hyper-blog.net',
2434                 '*.hyper-blogger.com',
2435                 '*.hyper-blogger.net',
2436                 '*.hyperblogger.net',
2437                 '*.instinctblog.com',
2438                 '*.jeunblog.com',
2439                 '*.jeuneblog.com',
2440                 '*.judblog.com',
2441                 '*.makeblog.net',
2442                 '*.man-blog.net',
2443                 '*.man-blogs.com',
2444                 '*.man-blogs.net',
2445                 '*.manblog.net',
2446                 '*.manblog.org',
2447                 '*.manblog.us',
2448                 '*.manblogs.net',
2449                 '*.mansblog.net',
2450                 '*.mansblogs.com',
2451                 '*.mansblogs.net',
2452                 '*.meetingsblogs.com',
2453                 '*.men-blog.net',
2454                 '*.men-blogs.com',
2455                 '*.men-blogs.net',
2456                 '*.menblog.us',
2457                 '*.menblogs.net',
2458                 '*.mensblogs.net',
2459                 '*.messaginblog.com',
2460                 '*.monblogger.com',
2461                 '*.mum-blog.com',
2462                 '*.mummy-blog.com',
2463                 '*.mummyblog.com',
2464                 '*.myareablog.com',
2465                 '*.myblog-online.net',
2466                 '*.mybloginternet.com',
2467                 '*.myblogland.com',
2468                 '*.myblogmag.com',
2469                 '*.myfreshblog.com',
2470                 '*.myinternetblog.net',
2471                 '*.myoverblog.com',
2472                 '*.myoverblog.net',
2473                 '*.mysharedblog.com',
2474                 '*.nice-albums.com',
2475                 '*.nice-galleries.com',
2476                 '*.nicealbum.net',
2477                 '*.nicegallery.net',
2478                 '*.notreblogger.com',
2479                 '*.outilblog.com',
2480                 '*.over-blogger.com',
2481                 '*.overblogger.com',
2482                 '*.pasblog.com',
2483                 '*.pasblog.net',
2484                 '*.perfect-blog.net',
2485                 '*.perfectblog.net',
2486                 '*.phpblogsite.com',
2487                 '*.phpmyblog.net',
2488                 '*.plateformeblog.com',
2489                 '*.playblogger.com',
2490                 '*.publishmyblog.com',
2491                 '*.pulseblog.net',
2492                 '*.pulseblogs.com',
2493                 '*.puretoxic.com',
2494                 '*.reservedblog.com',
2495                 '*.shareblog.net',
2496                 '*.shareblogs.net',
2497                 '*.shared-blogs.com',
2498                 '*.sharedblog.net',
2499                 '*.sharedblogs.net',
2500                 '*.solideblog.com',
2501                 '*.systemeblog.com',
2502                 '*.talkmeblog.com',
2503                 '*.toolsblog.net',
2504                 '*.toxicplace.com',
2505                 '*.ufreeblog.com',
2506                 '*.uliveblog.com',
2507                 '*.ultratoxic.com',
2508                 '*.utilblog.com',
2509                 '*.utilblogs.com',
2510                 '*.utilsblog.com',
2511                 '*.utilsblogs.com',
2512                 '*.various-blog.com',
2513                 '*.various-blog.net',
2514                 '*.various-blogs.com',
2515                 '*.various-blogs.net',
2516                 '*.variusblog.com',
2517                 '*.versusblog.com',
2518                 '*.vieuxblog.com',
2519                 '*.web-day.net',
2520                 '*.whatsblog.net',
2521                 '*.woman-blog.net',
2522                 '*.woman-blogs.com',
2523                 '*.woman-blogs.net',
2524                 '*.womanblog.com',
2525                 '*.womanblog.org',
2526                 '*.womanblog.us',
2527                 '*.womanblogs.net',
2528                 '*.womansblogs.com',
2529                 '*.womansblogs.net',
2530                 '*.women-blog.net',
2531                 '*.women-blogs.com',
2532                 '*.women-blogs.net',
2533                 '*.womenblog.us',
2534                 '*.womenblogs.net',
2535                 '*.womensblog.net',
2536                 '*.womensblogs.net',
2537                 '*.youblog.net',
2538                 '*.yourliveblog.com',
2539                 '*.yourweblog.net',
2540         ),
2541         '*.forumcommunity.net',
2542         '*.forumer.com',
2543         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2544         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2545         'forumhosting.org',
2546         '*.forums.com',
2547         'forumbolt.com',
2548         'phpbb.forumgratis.com',
2549         'forumlari.net',
2550         '*.forumlivre.com',
2551         'forumnow.com.br',
2552         '*.forumppl.com',
2553         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2554         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2555                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2556                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2557                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2558         '*.fory.pl',
2559         'fotolog.com',
2560         '*.fr33webhost.com',
2561         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2562         '*.free-25.de',
2563         '*.free-bb.com',
2564         'Free-Blog-Hosting.com' => array(
2565                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2566                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2567                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2568                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2569                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2570         ),
2571         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2572         'free-guestbook.net',
2573         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2574         'freebb.nl',
2575         '*.freeclans.de',
2576         '*.freehostplace.com',  // by contact at keepclear.co.uk
2577         '*.freelinuxhost.com',  // by 100webspace.com
2578         '*.nofeehost.com',
2579         '*.freehyperspace.com',
2580         'freeforum.at',                 // by Sandro Wilhelmy
2581         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2582         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2583         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2584         '*.freewebhostingpro.com',
2585         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2586         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2587                 '*.6te.net',
2588                 '*.ueuo.com',
2589                 '*.orgfree.com',
2590         ),
2591         '*.freewebpage.org',
2592         'Freewebs.com' => array(        // by inquiries at freewebs.com
2593                 'freewebs.com',
2594                 'freewebsfarms.com',
2595         ),
2596         '*.freewebspace.net.au',
2597         'freewebtown.com',
2598         '*.freemyforum.com',    // by messahost at gmail.com
2599         'freepowerboards.com',
2600         '*.freepowerboards.com',
2601         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2602         'Funpic.de' => array(   // by alexander at liemen.net
2603                 '*.funpic.de',
2604                 '*.funpic.org',
2605         ),
2606         'gb-hoster.de',
2607         '*.genblogger.com',
2608         'GetBetterHosting.com' => array(
2609                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2610                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2611         ),
2612         '*.gexxe.com',
2613         '*.goodboard.de',
2614         'gossiping.net',
2615         '*.greatnuke.com',
2616         '*.guestbook.de',
2617         'gwebspace.de',
2618         'Google.com' => array(
2619                 '*.blogspot.com',
2620                 'docs.google.com',
2621                 '*.googlegroups.com',           ///web/
2622                 '*.googlepages.com',
2623                 'groups-beta.google.com',
2624                 'groups.google.*',       ///group/ Seems widely distributed
2625                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2626                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2627                         //'groups.google.it', ...
2628         ),
2629         'guestbook.at',
2630         'club.giovani.it',
2631         '*.gratis-server.de',
2632         'healthcaregroup.com',
2633         '*.heliohost.org',
2634         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2635                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2636                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2637                 '*.front.ru',           // (domain at hc.ru)
2638                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2639                 '*.hotbox.ru',          // (domain at hc.ru)
2640                 '*.hotmail.ru',         // (hosting at hc.ru)
2641                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2642                 '*.land.ru',            // (domain at hc.ru)
2643                 '*.mail15.com',         // (hosting at hc.ru)
2644                 '*.mail333.com',        // (hosting at hc.ru)
2645                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2646                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2647                 '*.pisem.net',          // (hosting at hc.ru)
2648                 '*.pochta.ru',          // (domain at hc.ru)
2649                 '*.pochtamt.ru',        // (domain at hc.ru)
2650                 '*.pop3.ru',            // (domain at hc.ru)
2651                 '*.rbcmail.ru',         // (domain at hc.ru)
2652                 '*.smtp.ru',            // (domain at hc.ru)
2653         ),
2654         '*.hiblogger.com',              // by chiaokin at gmail.com
2655         '*.hit.bg',                             // by forumup.com ??
2656         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2657         '*.host-page.com',
2658         '*.hostingclub.de',
2659         'forums.hspn.com',
2660         '*.httpsuites.com',
2661         '*.hut2.ru',
2662         'ibfree.org',                   // 208.101.45.88
2663         'IC.cz' => array(
2664                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2665                 '*.hu.cz',                      // internetcentrum at gmail.com
2666                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2667                 '*.ic.cz',                      // internetcentrum at gmail.com
2668                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2669                 '*.own.cz',                     // internetcentrum at gmail.com
2670                 '*.phorum.cz',          // internetcentrum at gmail.com
2671                 '*.tym.cz',                     // internetcentrum at gmail.com
2672                 '*.tym.sk',                     // jobot at ignum.cz
2673                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2674                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2675                 '*.yw.sk',                      // jobot at ignum.cz
2676         ),
2677         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2678                 '*.0moola.com',
2679                 '*.3000mb.com',
2680                 '.501megs.com',
2681                 '*.teracities.com',
2682                 '*.xoompages.com',
2683         ),
2684         '*.icspace.net',
2685         'iEUROP.net' => array(
2686                 '*.ibelgique.com',
2687                 '*.iespana.es',
2688                 '*.ifrance.com',
2689                 '*.iitalia.com',
2690                 '*.iquebec.com',
2691                 '*.isuisse.com',
2692         ),
2693         '*.ihateclowns.net',
2694         '*.ii55.com',
2695         '*.ipbfree.com',
2696         '*.iphorum.com',
2697         '*.blog.ijijiji.com',
2698         '*.info.com',
2699         '*.informe.com',
2700         'it168.com',
2701         '.iwannaforum.com',
2702         '*.jconserv.net',
2703         '*.jeeran.com',
2704         '*.jeun.fr',
2705         '*.joolo.com',
2706         '*.journalscape.com',
2707         '*.justfree.com',
2708         'kataweb.it' => array(          // kata-redir.kataweb.it
2709                 '*.blog.kataweb.it',
2710                 '*.repubblica.it',
2711         ),
2712         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2713         '*.kokoom.com',
2714         'koolpages.com',
2715         '*.kostenlose-foren.org',
2716         '*.ksiegagosci.info',
2717         'LaCoctelera.com' => array(
2718                 'lacoctelera.com',      // by alberto at the-cocktail.com
2719                 'espacioblog.com',      // by dominios at ferca.com
2720         ),
2721         'Lide.cz' => array(
2722                 '*.lide.cz',
2723                 '*.sblog.cz',
2724         ),
2725         '*.lioru.com',
2726         'limmon.net',
2727         'linkinn.com',
2728         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2729         'listible.com',                 ///list/
2730         'Livedoor.com' => array(
2731                 'blog.livedoor.jp',
2732                 '*.blog.livedoor.com',  // redirection
2733         ),
2734         '*.livejournal.com',
2735         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2736         '*.logme.nl',
2737         'lol.to',
2738         'ltss.luton.ac.uk',
2739         'Lycos.com' => array(
2740                 '.angelfire.com',       // angelfire.lycos.com
2741
2742                 '*.jubii.dk',   // search., medlem.
2743                 '*.jubiiblog.co.uk',
2744                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2745                 '*.jubiiblog.de',
2746                 '*.jubiiblog.dk',
2747                 '*.jubiiblog.fr',
2748                 '*.jubiiblog.it',
2749                 '*.jubiiblog.nl',
2750
2751                 '*.lycos.at',
2752                 '*.lycos.ch',
2753                 '*.lycos.co.uk',
2754                 'angelfire.lycos.com',
2755                 '*.lycos.de',
2756                 '*.lycos.es',
2757                 '*.lycos.fr',
2758                 '*.lycos.it',           // by Lycos Europe GmbH
2759                 '*.lycos.nl',
2760
2761                 '*.spray.se',
2762                 '*.sprayblog.se',
2763
2764                 '*.tripod.com',
2765         ),
2766         '*.mastertopforum.com',
2767         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2768         'meneame.net',
2769         '*.memebot.com',
2770         '*.messageboard.nl',
2771         'mokono GmbH' => array(
2772                 '*.blog.com.es',
2773                 '*.blog.de',
2774                 '*.blog.fr',
2775                 '*.blog.co.uk',
2776                 '*.blog.ca',
2777                 '*.blogs.se',
2778                 '*.blogs.fi',
2779                 '*.blogs.no',
2780                 '*.blogs.dk',
2781                 '*.blogs.ro',
2782                 '*.weblogs.pl',
2783                 '*.weblogs.cz',
2784                 '*.weblogs.hu',
2785         ),
2786         'mojklc.com',
2787         '*.mundoforo.com',
2788         '*.money-host.com',
2789         'MonForum.com' => array(
2790                 '*.monforum.com',
2791                 '*.monforum.fr',
2792         ),
2793         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2794         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2795         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2796         'myblog.is',
2797         'myblogma.com',
2798         '*.myblogvoice.com',
2799         'myblogwiki.com',
2800         '*.myforum.ro',
2801         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2802         '*.myfreewebs.net',
2803         '*.mysite.com',
2804         '*.myxhost.com',
2805         '*.netfast.org',
2806         'NetGears.com' => array(
2807                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2808                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2809                 '*.freewebspace.com',   // 64.49.236.72
2810         ),
2811         'Netscape.com' => array('*.netscape.com'),
2812         'users.newblog.com',
2813         'neweconomics.info',
2814         '*.newsit.es',                          // 75.126.252.108
2815         '*.nm.ru',
2816         '*.nmj.pl',
2817         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2818         'Northsky.com' => array(
2819                 // by hostmaster at northsky.com
2820                 // northsky.com redirects to communityarchitect.com
2821
2822                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2823                 '*.00author.com',
2824                 '*.00band.com',
2825                 '*.00books.com',
2826                 '*.00cash.com',
2827                 '*.00cd.com',
2828                 '*.00dvd.com',
2829                 '*.00family.com',
2830                 '*.00game.com',
2831                 '*.00home.com',
2832                 '*.00it.com',
2833                 '*.00me.com',
2834                 '*.00movies.com',
2835                 '*.00page.com',
2836                 '*.00politics.com',
2837                 '*.00sf.com',
2838                 '*.00show.com',
2839                 '*.00song.com',
2840                 '*.00trek.com',
2841                 '*.00video.com',
2842                 '*.0me.com',
2843                 '*.0pi.com',
2844                 '*.happy-couple.com',
2845                 '*.warp0.com',
2846
2847                 '*.50megs.com',         // 64.136.25.170
2848
2849                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2850                 '*.00server.com',
2851                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2852                 '*.fanspace.com',
2853
2854                 // 64.136.25.168 by Mark Bishop
2855                 '*.00go.com',
2856                 '*.00space.com',
2857                 '*.00sports.com',
2858         ),
2859         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2860         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2861         'onlyfree.de',
2862         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2863         '*.ohost.de',
2864         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2865                 '.friko.pl',
2866                 '.jak.pl',
2867                 '.nazwa.pl',
2868                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2869                 '.w8w.pl',
2870                 '.za.pl',
2871                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2872         ),
2873         'oyax.com',                             ///user_links.php
2874         '*.p2a.pl',
2875         '*.parlaris.com',
2876         '*.pathfinder.gr',
2877         '*.persianblog.com',
2878         '*.phorum.pl',
2879         'Phpbb24.com' => array( // by Daniel Eriksson
2880                 '*.createforum.us',     // registry at webbland.se
2881                 '*.forumportal.us',     // registry at webbland.se
2882                 '*.freeportal.us',      // registry at network24.se
2883                 '*.phpbb2.us',          // daniel at danielos.com
2884                 '*.phpbb24.com',        // daniel at danielos.com
2885                 '*.myforumportal.com',  // daniel at webbland.se
2886         ),
2887         'phpbb4you.com',
2888         'phpbbcommunity.com',
2889         '*.phpbbx.de',
2890         '*.pochta.ru',
2891         '*.portbb.com',
2892         '*.portcms.com',
2893         'powerwebmaster.de',
2894         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2895         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2896         '*.probook.de',
2897         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2898         '*.pun.pl',
2899         'putfile.com',
2900         '*.quickfreehost.com',
2901         'quizilla.com',
2902         '*.quotaless.com',
2903         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2904         'razyboard.com',
2905         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2906         'realhp.de',
2907         'reddit.com',           ///user/
2908         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2909                 '*.juicypornhost.com',
2910                 '*.pornzonehost.com',
2911                 '*.xhostar.com',
2912         ),
2913         'RIN.ru' => array(
2914                 '*.sbn.bz',
2915                 '*.wol.bz',
2916         ),
2917         '*.sayt.ws',
2918         'Seblg.com' => array(
2919                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2920                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2921         ),
2922         '*.seo-blog.org',
2923         '*.shoutpost.com',
2924         '*.siamforum.com',
2925         '*.siteburg.com',
2926         '*.sitehome.ru',
2927         '*.sitesfree.com',              // support at livesearching.com
2928         '*.sitesled.com',
2929         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2930         'SmarTrans.com' => array(
2931                 '.3w.to',
2932                 '.aim.to',
2933                 '.djmp.jp',
2934                 '.nihongourl.nu',
2935                 '.urljp.com',
2936                 '.www1.to',
2937                 '.www2.to',
2938                 '.www3.to',
2939         ),
2940         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2941         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2942         'members.spboards.com',
2943         'forums.speedguide.net',
2944         'Sphosting.com' => array(       // by admin at sphosting.com
2945                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2946                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2947                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2948                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2949                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2950         ),
2951         '*.spicyblogger.com',
2952         '*.spotbb.com',
2953         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2954         '*.squarespace.com',
2955         'stickypond.com',
2956         'stormloader.com',
2957         'strikebang.com',
2958         '*.sultryserver.com',
2959         '*.t35.com',
2960         '*.talks.at',
2961         'tabletpcbuzz.com',
2962         '*.talkthis.com',
2963         'tbns.net',
2964         'telasipforums.com',
2965         'theforumhub.com',
2966         'thestudentunderground.org',
2967         'think.ubc.ca',
2968         '*.thumblogger.com',
2969         'Topix.com' => array(
2970                 'topix.com',
2971                 'topix.net',
2972         ),
2973         'forum.tourism-talk.com.au',
2974         'tycho at e-lab.nl' => array(
2975                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2976                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2977         ),
2978         '*.tumblr.com',
2979         'UcoZ Web-Services' => array(
2980                 '*.3dn.ru',
2981                 '*.clan.su',
2982                 '*.moy.su',
2983                 '*.my1.ru',
2984                 '*.p0.ru',
2985                 '*.pp.net.ua',
2986                 '*.ucoz.co.uk',
2987                 '*.ucoz.com',
2988                 '*.ucoz.net',
2989                 '*.ucoz.org',
2990                 '*.ucoz.ru',
2991                 '*.ws.co.ua',
2992         ),
2993         '*.unforo.net',
2994         'veoh.com',
2995         '*.vdforum.ru',
2996         '*.vtost.com',
2997         '*.vidiac.com',
2998         'Voila.fr' => array('.site.voila.fr'),
2999         'volny.cz',
3000         'voy.com',
3001         '*.welover.org',
3002         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
3003                 '*.fasthost.tv',
3004                 '*.hothost.tv',
3005                 '*.isgreat.tv',
3006                 '*.issexy.tv',
3007                 '*.isterrible.tv',
3008                 '*.somegood.tv',
3009                 '*.adultnations.com',
3010                 '*.alladultfemale.com',
3011                 '*.alladultmale.com',
3012                 '*.allbisexual.com',
3013                 '*.allbreast.com',
3014                 '*.allfeminism.com',
3015                 '*.allmanpages.com',
3016                 '*.allmendirect.com',
3017                 '*.allphotoalbum.com',
3018                 '*.allsexpages.com',
3019                 '*.allwomanweb.com',
3020                 '*.attorney-site.com',
3021                 '*.bedclip.com',
3022                 '*.bestfamilysite.com',
3023                 '*.bestmusicpages.com',
3024                 '*.bigmoron.com',
3025                 '*.bourgeoisonline.com',
3026                 '*.candyfrom.us',
3027                 '*.cartoonhit.com',
3028                 '*.cat-on-line.com',
3029                 '*.chokesondick.com',
3030                 '*.closeupsof.us',
3031                 '*.cpa-site.com',
3032                 '*.dampgirl.com',
3033                 '*.dampgirls.com',
3034                 '*.deepestfetish.com',
3035                 '*.docspages.com',
3036                 '*.dog-on-line.com',
3037                 '*.dogcountries.com',
3038                 '*.dognations.com',
3039                 '*.doingitwith.us',
3040                 '*.drenchedface.com',
3041                 '*.drenchedlips.com',
3042                 '*.drspages.com',
3043                 '*.edogden.com',
3044                 '*.eroticountry.com',
3045                 '*.fasthost.tv',
3046                 '*.fineststars.com',
3047                 '*.foronlinegames.com',
3048                 '*.forplanetearth.com',
3049                 '*.freeadultparty.com',
3050                 '*.freespeechsite.com',
3051                 '*.gayadultxxx.com',
3052                 '*.gaytaboo.com',
3053                 '*.greatcookery.com',
3054                 '*.greatrecipepages.com',
3055                 '*.greatstreamingvideo.com',
3056                 '*.hatesit.com',
3057                 '*.hothost.tv',
3058                 '*.iscrappy.com',
3059                 '*.isgreat.tv',
3060                 '*.issexy.tv',
3061                 '*.isterrible.tv',
3062                 '*.itinto.us',
3063                 '*.japannudes.net',
3064                 '*.jesussave.us',
3065                 '*.jesussaveus.com',
3066                 '*.labialand.com',
3067                 '*.lettersfrom.us',
3068                 '*.lookingat.us',
3069                 '*.lunaticsworld.com',
3070                 '*.microphallus.com',
3071                 '*.mycatshow.com',
3072                 '*.mydogshow.com',
3073                 '*.myhardman.com',
3074                 '*.mylawsite.net',
3075                 '*.mylovething.com',
3076                 '*.onasoapbox.com',
3077                 '*.onlinepulpit.com',
3078                 '*.petitionthegovernment.com',
3079                 '*.photosfor.us',
3080                 '*.picturetrades.com',
3081                 '*.pleasekiss.us',
3082                 '*.politicalemergency.com',
3083                 '*.power-emergency.com',
3084                 '*.prayingfor.us',
3085                 '*.realbadidea.com',
3086                 '*.realisticpolitics.com',
3087                 '*.reallybites.com',
3088                 '*.reallypumping.us',
3089                 '*.reallyrules.com',
3090                 '*.reallysuckass.com',
3091                 '*.reallysucksass.com',
3092                 '*.realsweetheart.com',
3093                 '*.rottenass.com',
3094                 '*.schoolreference.com',
3095                 '*.sexheroes.com',
3096                 '*.sharewith.us',
3097                 '*.smutstars.com',
3098                 '*.soakinglips.com',
3099                 '*.somegood.tv',
3100                 '*.songsfrom.us',
3101                 '*.stinkingfart.com',
3102                 '*.stinkyhands.com',
3103                 '*.storiesfrom.us',
3104                 '*.taboocountry.com',
3105                 '*.television-series.com',
3106                 '*.thisbelongsto.us',
3107                 '*.totallyboning.us',
3108                 '*.vaginasisters.com',
3109                 '*.verydirtylaundry.com',
3110                 '*.videosfor.us',
3111                 '*.videosfrom.us',
3112                 '*.videosof.us',
3113                 '*.virtualdogshit.com',
3114                 '*.web1000.com',
3115                 '*.webpicturebook.com',
3116                 '*.wronger.com',
3117                 '*.xxxnations.com',
3118                 '*.yourwaywith.us',
3119         ),
3120         'webblog.ru',
3121         'weblogmaniacs.com',
3122         '.webng.com',                   // www.*, www3.*
3123         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3124         'websitetoolbox.com',
3125         '*.webtropia.com',
3126         'Welnet.de' => array(
3127                 'welnet.de',
3128                 'welnet4u.de',
3129         ),
3130         'wh-gb.de',
3131         '*.wikidot.com',
3132         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3133         '*.wmjblogs.ru',
3134         '*.wordpress.com',
3135         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3136         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3137         '*.xforum.se',
3138         'xfreeforum.com',
3139         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3140         '*.xoomwebs.com',
3141         '.xterm.org',
3142         '.freeblogs.xp.tl',
3143         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3144         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3145         'Yahoo.com' => array(
3146                 'flickr.com',
3147                 'geocities.com',
3148         ),
3149         'YANDEX, LLC.' => array(        // noc at yandex.net
3150                 '*.narod.ru',
3151                 'ya.ru',
3152                 'yandex.ru',
3153         ),
3154         '*.yeahost.com',
3155         'yourfreebb.de',
3156         'Your-Websites.com' => array(
3157                 '*.your-websites.net',
3158                 '*.web-space.ws',
3159         ),
3160
3161
3162         '*.heliohost.org',      // by ashoat at gmail.com
3163         'X10Hosting.com' => array(
3164                 // by support at clockworkcomputers.com
3165                 '*.x10hosting.com',
3166                 '*.elementfx.com',
3167                 '*.exofire.net',
3168                 '*.pcriot.com',
3169         ),
3170         '.zendurl.com',         // by ajcar1992 at gmail.com
3171 );
3172
3173 // --------------------------------------------------
3174
3175 $blocklist['B-2'] = array(
3176
3177         // B-2: Jacked contents, something implanted
3178         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3179         '*.3dm3.com',
3180         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3181         '*.1fr1.com',
3182         'a4aid.org',
3183         'aac.com',
3184         '*.aamad.org',
3185         'ad-pecjak.si',
3186         'agnt.org',
3187         'alwanforthearts.org',
3188         '*.anchor.net.au',
3189         'anewme.org',
3190         'arcrockett.com',               ///golf/excel/
3191         'arisedesign.net',              //Portfolio/d981/
3192         'internetyfamilia.asturiastelecentros.com',
3193         'ballblair.com',                ///images/thumbs/
3194         'Ball State University' => array('web.bsu.edu'),
3195         'btofaq.net',                   ///v3/forum
3196         'blepharospasm.org',
3197         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3198         'nyweb.bowlnfun.dk',
3199         '*.buzznet.com',
3200         'Carroll College' => array(
3201                 'carroll.edu',          ///boards/
3202         ),
3203         '*.canberra.net.au',
3204         'castus.com',
3205         'Case Western Reserve University' => array('case.edu'),
3206         'ceval.de',
3207         'chaco.gov.ar',
3208         'chasingrainbowsaustralia.com', ///geometry/
3209         'codespeak.net',
3210         'Colorado School of Mines' => array('ticc.mines.edu'),
3211         '*.colourware.co.uk',
3212         'cpuisp.com',
3213         'International Christian University' => array('icu.edu.ua'),
3214         '*.iphpbb.com',
3215         'board-z.de',
3216         '*.board-z.de',
3217         'California State University Stanislaus' => array('writing.csustan.edu'),
3218         'cannon.co.za',
3219         'columbosgarden.com',
3220         '*.communityhost.de',
3221         'connectionone.org',
3222         'deathwinds.com',
3223         'deforum.org',
3224         'delayedreaction.org',
3225         'deproduction.org',
3226         'dc503.org',
3227         'dialadeck.com',                ///images/
3228         'dre-centro.pt',
3229         'Duke University' => array('devel.linux.duke.edu'),
3230         '*.esen.edu.sv',
3231         'forums.drumcore.com',
3232         'dundeeunited.org',
3233         'energyglass.com.ua',
3234         'equitas.com.au',               ///images/mim3/, no index.html
3235         'exclusivehotels.com',
3236         'info.ems-rfid.com',
3237         'fairyfunkyard.com',    ///images_files/files/
3238         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3239         'fbwloc.com',
3240         '.fhmcsa.org.au',
3241         'findyourwave.co.uk',
3242         'frogcafe.net',
3243         'plone4.fnal.gov',
3244         'freeforen.com',
3245         'funkdoc.com',
3246         'funnyclipcentral.com',
3247         'gearseds.com',
3248         'generationrice.com',
3249         'ghettojava.com',
3250         'gnacademy.org',
3251         '*.goodboard.de',
3252         'GreenDayVideo.net' => array(
3253                 'greendayvideo.net',
3254                 'espanol.greendayvideo.net',
3255         ),
3256         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3257         'Harvard Law School' => array('blogs.law.harvard.edu'),
3258         'helpiammoving.com',
3259         'homepage-dienste.com',
3260         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3261         'Howard University' => array('networks.howard.edu'),
3262         'hullandhull.com',
3263         'Huntington University' => array('huntington.edu'),
3264         'huskerink.com',
3265         '.hyba.info',
3266         'ideas4you.com',        ///photos/
3267         'inda.org',
3268         '*.indymedia.org',      // by abdecom at riseup.net
3269         'instantbulletin.com',
3270         'internetincomeclub.com',
3271         '*.inventforum.com',
3272         'Iowa State University' => array('boole.cs.iastate.edu'),
3273         'ipwso.org',
3274         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3275         'ironmind.com',
3276         'skkustp.itgozone.com', // hidden JavaScript
3277         'jazz2online.com',
3278         '.jloo.org',
3279         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3280         'kjon.com',
3281         'Kazan State University' => array(
3282                 'dir.kzn.ru',
3283                 'sys.kcn.ru',
3284         ),
3285         'test.kernel.org',
3286         'kevindmurray.com',
3287         'kroegjesroutes.nl',
3288         '.legion.org',
3289         'Loyola Marymount University' => array('lmu.edu'),
3290         'forum.lixium.fr',
3291         'macfaq.net',
3292         'macvirus.org',         ///board/
3293         'me4x4.com',
3294         'microbial-ecology.net',
3295         'minsterscouts.org',
3296         'morallaw.org',
3297         'morerevealed.com',
3298         'macronet.org',
3299         'mamiya.co.uk',
3300         'vcd.mmvcd.com',
3301         'Monmouth College' => array('department.monm.edu'),
3302         'mountainjusticemedia.org',
3303         '*.mybbland.com',
3304         'mydlstore.com',
3305         '*.netboardz.com',
3306         'North Carolina A&T State University' => array(
3307                 'ncat.edu',
3308                 'my.ncat.edu',
3309                 'hlc.ncat.edu',
3310         ),
3311         'placetobe.org',
3312         'Naropa University' => array(
3313                 'naropa.edu',                   ///forum/
3314         ),
3315         'users.nethit.pl',
3316         'nightclubvip.net',
3317         'njbodybuilding.com',
3318         'nlen.org',
3319         'North Carolina School of Science and Mathematics' => array(
3320                 'neverland.ncssm.edu',  ///include/web/forum/
3321                 'grid.ncssm.edu',               ///ncssm_grid/
3322         ),
3323         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3324         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3325         'offtextbooks.com',
3326         'ofimatika.com',
3327         'olympiafoto.com',              ///images/
3328         'omakase-net',                  // iframe
3329         'omikudzi.ru',
3330         'openchemist.net',
3331         'palungjit.com',
3332         'pataphysics-lab.com',
3333         'paypaldev.org',
3334         'paullima.com',
3335         'perl.org.br',
3336         'pfff.co.uk',
3337         'pimpo.com',                    ///_old_site/
3338         'pix4online.co.uk',
3339         'plone.dk',
3340         'preform.dk',
3341         'privatforum.de',
3342         'publicityhound.net',
3343         'puppylinux.net',               ///news/content/counter/pages/
3344         'qea.com',
3345         'rbkdesign.com',
3346         'rehoboth.com',
3347         'rodee.org',
3348         'ryanclark.org',
3349         '*.reallifelog.com',
3350         'rkphunt.com',
3351         'rso-csp.org',                  ///bulletins/
3352         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3353         'sapphireblue.com',
3354         'saskchamber.com',
3355         'savevoorhees.org',
3356         'sdhmalenovice.cz',             //galerie/
3357         'selikoff.net',
3358         'serbisyopilipino.org',
3359         'setbb.com',
3360         'sharejesusinternational.com',
3361         'silver-tears.net',
3362         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3363         '.softpress.com',
3364         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3365         'fora.taniemilitaria.pl',       ///phpbb
3366         'tehudar.ru',
3367         'Tennessee Tech University' => array('manila.tntech.edu'),
3368         'thebluebird.ws',
3369         'theosis.org',
3370         '*.thoforum.com',
3371         'troms-slekt.com',
3372         'theedgeblueisland.com',
3373         'toyshop.com.tw',               // /images/sigui/
3374         'torontoplace.com',
3375         'chat.travlang.com',
3376         'trickropingbylassue.com',
3377         'Truman State University' => array('mathbio.truman.edu'),
3378         'tuathadedannan.org',
3379         'txgotg.com',
3380         'tzaneen.co.za',
3381         'ugeavisen.com',                ///style/
3382         'forums.ugo.com',
3383         'whole.cs.unibo.it',
3384         'The University of North Dakota' => array(
3385                 'learn.aero.und.edu',
3386                 'ez.asn.und.edu',
3387         ),
3388         'The University of Alabama' => array('bama.ua.edu'),
3389         'unisonscotlandlaw.co.uk',
3390         'University of California' => array('classes.design.ucla.edu'),
3391         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3392         'University of Northern Colorado' => array('unco.edu'),
3393         'University of North Carolina' => array(
3394                 'elm.cis.uncw.edu'      ///testBoinc/
3395         ),
3396         'University of Toronto' => array(
3397                 'environment.utoronto.ca',
3398                 'grail.oise.utoronto.ca',
3399                 'utsc.utoronto.ca',
3400         ),
3401         'University of Wisconsin' => array(
3402                 'einstein.phys.uwm.edu'
3403         ),
3404         'urgentclick.com',
3405         'vacant.org.uk',
3406         'Villa Julie College' => array('www4.vjc.edu'),
3407         'Vail Valley Foundation' => array('.vvf.org'),
3408         'wabson.org',
3409         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3410         'webarch.com',          // by WebArchitects (webarch at insync.net)
3411         'weehob.com',
3412         'West Virginia University Parkersburg' => array('wvup.edu'),
3413         'williamsburgrentals.com',
3414         'wolvas.org.uk',
3415         'wookiewiki.org',
3416         'xsgaming.com',                 // Jacked
3417         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3418         'Yahoo.com' => array(
3419                 'blog.360.yahoo.com',
3420                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3421         ),
3422         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3423         'youthpeer.org',
3424         '*.zenburger.com',
3425         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3426 );
3427
3428 // --------------------------------------------------
3429
3430 $blocklist['C'] = array(
3431
3432         // C: Sample setting of:
3433         // Exclusive spam domains
3434         //
3435         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3436         // affiliates, finance, sending viruses, malicious attacks to browsers,
3437         // and/or mixed ones
3438         //
3439         // Please notify us about this list with reason:
3440         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3441
3442         // C-1: Domain sets (seems to be) born to spam you
3443         //
3444         // All buziness-related spam
3445         //'.biz'
3446         //
3447         'admin at seekforweb.com' => array(
3448                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3449                 '.lovestoryx.com',
3450                 '.loveaffairx.com',
3451                 '.onmore.info',
3452                 '.scfind.info',
3453                 '.scinfo.info',
3454                 '.webwork88.info',
3455         ),
3456         'boss at bse-sofia.bg' => array(        // by Boris
3457                 '.htewbop.org',
3458                 '.kimm--d.org',
3459                 '.gtre--h.org',
3460                 '.npou--k.org',
3461                 '.bres--z.org',
3462                 '.berk--p.org',
3463                 '.bplo--s.org',
3464                 '.basdpo.org',
3465                 '.jisu--m.org',
3466                 '.kire--z.org',
3467                 '.mertnop.org',
3468                 '.mooa--c.org',
3469                 '.nake--h.org',
3470                 '.noov--b.org',
3471                 '.suke--y.org',
3472                 '.vasdipv.org',
3473                 '.vase--l.org',
3474                 '.vertinds.org',
3475         ),
3476         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3477                 '.aqq3.info',
3478                 '.axa00.info',
3479                 '.okweb11.org',
3480                 '.okweb12.org',
3481                 '.okweb13.org',
3482                 '.okweb14.org',
3483         ),
3484         'opezdol at gmail.com' => array(
3485                 '.informazionicentro.info',
3486                 '.notiziacentro.info',
3487         ),
3488         'SomethingGen' => array(
3489                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3490                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3491                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3492                 // by Lee Chang (nebucha at model-x.com)
3493                 '.adult-chat-world.info',       // by Lui
3494                 '.adult-chat-world.org',        // by Lui
3495                 '.adult-sex-chat.info',         // by Lui
3496                 '.adult-sex-chat.org',          // by Lui
3497                 '.adult-cam-chat.info',         // by Lui
3498                 '.adult-cam-chat.org',          // by Lui
3499                 '.dildo-chat.org',                      // by Lui
3500                 '.dildo-chat.info',                     // by Lui
3501                 // flirt-online.info is not CamsGen
3502                 '.flirt-online.org',            // by Lui
3503                 '.live-adult-chat.info',        // by Lui
3504                 '.live-adult-chat.org',         // by Lui
3505                 '.sexy-chat-rooms.info',        // by Lui
3506                 '.sexy-chat-rooms.org',         // by Lui
3507                 '.swinger-sex-chat.info',       // by Lui
3508                 '.swinger-sex-chat.org',        // by Lui
3509                 '.nasty-sex-chat.info',         // by Lui
3510                 '.nasty-sex-chat.org',          // by Lui
3511
3512                 '.camshost.info',                       // by Sergey
3513                 '.camdoors.info',                       // by Sergey
3514                 '.chatdoors.info',                      // by Sergey
3515
3516                 // 89.149.206.225 by Pronin
3517                 '.dorozhka.info',
3518                 '.kolonochka.info',
3519                 '.knizhechka.info',
3520                 '.krantik.info',
3521                 '.lebedi.info',
3522                 '.loshad.info',
3523                 '.pechenka.info',
3524                 '.porosenok.info',
3525                 '.indyushonok.info',
3526                 '.kotyonok.info',
3527                 '.kozlyonok.info',
3528                 '.magnoliya.info',
3529                 '.svinka.info',
3530                 '.svinya.info',
3531                 '.televizorchik.info',
3532                 '.tumbochka.info',
3533                 '.zherebyonok.info',
3534
3535                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3536
3537                 '.adult-cam-chat-sex.info',             // by Lee
3538                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3539                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3540                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3541                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3542                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3543                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3544                 '.sex-chat-porn-cam.info',              // by Lee
3545         ),
3546         'mital at topo20.org' => array( // by Marcello Italianore
3547                 '.trevisos.org',
3548                 '.topo20.org',
3549         ),
3550         'WellCams.com' => array(
3551                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3552                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3553                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3554         ),
3555         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3556                 '.besturgent.org',
3557                 '.googletalknow.org',
3558                 '.montypythonltd.org',
3559                 '.supersettlemet.org',
3560                 '.thepythonfoxy.org',
3561                 '.ukgamesyahoo.org',
3562                 '.youryahoochat.org',
3563         ),
3564         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3565                 '.dbsajax.org',
3566                 '.acgt2005.org',
3567                 '.gopikottoor.com',
3568                 '.koosx.org',
3569                 '.mmgz.org',
3570                 '.zhiyehua.net',
3571         ),
3572         'vdf at lovespb.com' => array(  // by Andrey
3573                 '.02psa.info',
3574                 '.1818u.org',
3575                 '.18ew.info',
3576                 '.43sexx.org',
3577                 '.56porn.org',
3578                 '.6discount.info',
3579                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3580                 '.78rus.info',
3581                 '.92ssex.org',          // "ForumGenerator"
3582                 '.93adult.org',         // "ForumGenerator"
3583                 '.aboutsr.info',
3584                 '.aboutzw.info',
3585                 '.all23.info',
3586                 '.allvdf.info',
3587                 '.buy-dge.info',
3588                 '.buypo.info',
3589                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3590                 '.cv83.info',
3591                 '.cvwifw.info',
3592                 '.dabouts.info',
3593                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3594                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3595                 '.free01sa.info',
3596                 '.frees1.info',
3597                 '.freexz.info',
3598                 '.ifree-search.org',
3599                 '.lovespb.info',
3600                 '.myso2.info',
3601                 '.nb74u.info',
3602                 '.ohhh2.info',
3603                 '.ol43.info',
3604                 '.olala18.info',
3605                 '.oursales.info',
3606                 '.pasian1.info',
3607                 '.pldk.info',
3608                 '.po473.info',
3609                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3610                 '.poz2.info',
3611                 '.qpf8j4d.info',
3612                 '.saleqw.info',
3613                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3614                 '.sexz18.info',
3615                 '.sexy69a.info',
3616                 '.shedikc.info',
3617                 '.spb78.info',
3618                 '.usacanadauk.info',
3619                 '.v782mks.info',
3620                 '.vny0.info',
3621                 '.wifes1.info',
3622                 '.xranvam.info',
3623                 '.zenitcx.info',
3624                 '.zxolala.info',
3625         ),
3626         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3627                 '.care01.info',
3628                 '.care02.info',
3629                 '.care03.info',
3630                 '.care04.info',
3631                 '.care05.info',
3632                 '.care06.info',
3633                 '.care07.info',
3634                 '.care08.info',
3635                 '.care09.info',
3636                 '.care10.info',
3637                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3638                 '.klastar01.info',
3639                 '.klastar02.info',
3640                 '.klastar03.info',
3641                 '.klastar04.info',
3642                 '.klastar05.info',
3643                 '.klastar06.info',
3644                 '.klastar07.info',
3645                 '.klastar08.info',
3646                 '.klastar09.info',
3647                 '.klastar10.info',
3648                 '.um20ax01.info',
3649                 '.um20ax02.info',
3650                 '.um20ax03.info',
3651                 '.um20ax04.info',
3652                 '.um20ax05.info',
3653                 '.um20ax06.info',
3654                 '.um20ax07.info',
3655                 '.um20ax08.info',
3656                 '.um20ax09.info',
3657                 '.um20ax10.info',
3658         ),
3659         'forrass at gmail.com' => array(        // by Ismail
3660                 '.zmh01.info',
3661                 '.zmh02.info',
3662                 '.zmh03.info',
3663                 '.zmh04.info',
3664                 '.zmh05.info',
3665                 '.zmh06.info',
3666                 '.zmh07.info',
3667                 '.zmh08.info',
3668                 '.zmh09.info',
3669                 '.zmh10.info',
3670         ),
3671         'Varsylenko Vladimir and family' => array(
3672                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3673                 // by David C. Lack (David.C.Lack at dodgeit.com)
3674                 // by Kuzma V Safonov (admin at irtes.ru)
3675                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3676                 // by LAURI FUNK (vvm_kz at rambler.ru)
3677
3678                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3679                 '.abrek.info',                          // by Petrov
3680                 '.allsexonline.info',           // by Varsylenko
3681                 '.d1rnow.info',                         // by Petrov
3682                 '.doxer.info',                          // Petrov
3683                 '.freeforworld.info',           // Varsylenko
3684                 '.goodworksite.info',           // Varsylenko
3685                 '.onall.info',                          // by Varsylenko
3686                 '.powersiteonline.info',        // by Varsylenko
3687                 '.rentmysite.info',                     // by Varsylenko
3688                 '.sexdrink.info',                       // by Petrov
3689                 '.siteszone.info',                      // by Varsylenko
3690                 '.sfup.info',                           // by Petrov
3691                 '.superfreedownload.info',      // by Varsylenko
3692                 '.superneeded.info',            // by Varsylenko
3693                 '.srup.info',                           // by Petrov
3694
3695                 // 66.235.185.143(*.svabuse.info)
3696                 '.accommodationwiltshire.com',  // by Petrov
3697                 '.levines.info',                        // by Petrov
3698                 '.sernost.info',                        // by Petrov
3699                 '.sexvideosite.info',           // by Petrov
3700                 '.vvsag.info',                          // by Petrov
3701
3702                 // 81.0.195.134
3703                 '.michost.info',                        // by LAURI
3704                 '.parther.info',                        // by LAURI
3705
3706                 // 88.214.202.100
3707                 '.gitsite.info',                        // by Petrov
3708                 '.organiq.info',                        // by Petrov
3709                 '.yoursitedh.info',                     // by Petrov
3710
3711                 // 217.11.233.58 by Petrov
3712                 '.mp3vault.info',
3713
3714                 // DNS time out or failed
3715                 '.bequeous.info',                       // by Davi
3716                 '.sopius.info',                         // by Kuzma
3717                 '.sovidopad.info',                      // by Kuzma
3718                 '.yerap.info',                          // by Kuzma
3719         ),
3720         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3721                 '.flywebs.com',
3722                 '.hostrim.com',
3723                 '.playbit.com',
3724         ),
3725         'webmaster at dgo3d.info' => array(     // by Son Dittman
3726                 '.bsb3b.info',
3727                 '.dgo3d.info',
3728                 '.dgo5d.info',
3729         ),
3730         'cooler.infomedia at gmail.com' => array(
3731                 '.diabetescarelink.com',
3732                 '.firstdebthelp.com',
3733         ),
3734         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3735                 '.pokah.lv',
3736                 '.astrons.com',
3737         ),
3738         'seocool at bk.ru' => array(    // by Skar
3739                 '.implex3.com',
3740                 '.implex6.info',
3741                 '.softprof.org',
3742         ),
3743         'Caslim.info' => array(
3744                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3745                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3746         ),
3747         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3748                 '.777-poker.biz',
3749                 '.porn-11.com',
3750         ),
3751         'Conto.pl' => array(
3752                 '.8x.pl',               // domena at az.pl
3753                 '.3x3.pl',              // by biuro at nazwa.pl
3754                 '.conto.pl',    // by biuro at nazwa.pl
3755                 '.guu.pl',              // by conto.pl (domena at az.pl)
3756                 '.xcx.pl',              // domena at az.pl
3757                 '.yo24.pl',             // domena at az.pl
3758         ),
3759         'mail at pcinc.cn' => array(
3760                 // Domains by Lin Zhi Qiang
3761                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3762
3763                 // 125.65.112.11
3764                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3765                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3766                 '.shoopivdoor.com',
3767
3768                 // 125.65.112.12
3769                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3770                 '.hosetaibei.com',
3771                 '.playsese.com',
3772
3773                 // 125.65.112.13
3774                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3775                 '.ahatena.com',
3776                 '.asdsdgh-jp.com',
3777                 '.conecojp.net',
3778                 '.game-oekakibbs.com',
3779                 '.geocitygame.com',
3780                 '.gsisdokf.net',
3781                 '.korunowish.com',
3782                 '.netgamelivedoor.com',
3783                 '.soultakerbbs.net',
3784                 '.yahoo-gamebbs.com',
3785                 '.ywdgigkb-jp.com',
3786
3787                 // 125.65.112.14
3788                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3789                 '.acyberhome.com',
3790                 '.bbs-qrcode.com',
3791                 '.gamesroro.com',
3792                 '.gameyoou.com',
3793                 '.gangnu.com',
3794                 '.goodclup.com',
3795                 '.lineage321.com',
3796                 '.linkcetou.com',
3797                 '.love888888.com',
3798                 '.ragnarok-bbs.com',
3799                 '.ragnarok-game.com',
3800                 '.rmt-navip.com',
3801                 '.watcheimpress.com',
3802
3803                 // 125.65.112.15
3804                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3805                 '.18girl-av.com',
3806                 '.aurasoul-visjp.com',
3807                 '.gamaniaech.com',
3808                 '.game-mmobbs.com',
3809                 '.gameslin.net',
3810                 '.gemnnammobbs.com',
3811                 '.gogolineage.net',
3812                 '.grandchasse.com',
3813                 '.jpragnarokonline.com',
3814                 '.jprmthome.com',
3815                 '.maplestorfy.com',
3816                 '.netgamero.net',
3817                 '.nothing-wiki.com',
3818                 '.ourafamily.com',
3819                 '.ragnarok-sara.com',
3820                 '.rmt-lineagecanopus.com',
3821                 '.rmt-ranloki.com',
3822                 '.rogamesline.com',
3823                 '.roprice.com',
3824                 '.tuankong.com',
3825                 '.twreatch.com',
3826
3827                 // 125.65.112.22
3828                 // The same IP: web013.cdnhost.cn
3829                 '.lzy88588.com',
3830                 '.ragnaroklink.com',
3831
3832                 // 125.65.112.24
3833                 '.rmtfane.com',
3834                 '.fc2weday.com',
3835                 '.nlftweb.com',
3836
3837                 // 125.65.112.27
3838                 '.i520i.com',
3839                 '.sunwayto.com',
3840
3841                 // 125.65.112.31
3842                 // The same IP: web016.cdnhost.cn
3843                 '.twyaooplay.com',
3844
3845                 // 125.65.112.32
3846                 // The same IP: web037.cdnhost.cn
3847                 '.emeriss.com',
3848                 '.raginfoy.com',
3849                 '.ragnarokgvg.com',
3850                 '.rentalbbs-livedoor.com',
3851                 '.romaker.com',
3852                 '.sagewikoo.com',
3853                 '.samples112xrea.com',
3854                 '.wiki-house.com',
3855
3856                 // 125.65.112.49
3857                 '.chaosx0.com',
3858
3859                 // 125.65.112.88
3860                 // The same IP: web015.cdnhost.cn
3861                 '.a-hatena.com',
3862                 '.biglobe-ne.com',
3863                 '.blogplaync.com',
3864                 '.din-or.com',
3865                 '.dtg-gamania.com',
3866                 '.fcty-net.com',
3867                 '.game-fc2blog.com',
3868                 '.gameurdr.com',
3869                 '.getamped-garm.com',
3870                 '.interzq.com',
3871                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3872                 '.luobuogood.com',
3873                 '.ragnarok-search.com',
3874                 '.rinku-livedoor.com',
3875
3876                 // 125.65.112.90
3877                 '.gtvxi.com',
3878
3879                 // 125.65.112.91
3880                 // The same IP: web004.cdnhost.cn
3881                 '.6828teacup.com',
3882                 '.blog-livedoor.net',
3883                 '.cityblog-fc2web.com',
3884                 '.deco030-cscblog.com',
3885                 '.imbbs2t4u.com',
3886                 '.k5dionne.com',
3887                 '.lineagejp-game.com',
3888                 '.mbspro6uic.com',
3889                 '.slower-qth.com',
3890                 '.wikiwiki-game.com',
3891
3892                 // 125.65.112.93
3893                 // The same IP: web022.cdnhost.cn
3894                 '.aaa-livedoor.net',
3895                 '.cityhokkai.com',              // web022.cdnhost.cn
3896                 '.fanavier.net',
3897                 '.geocitylinks.com',    // web022.cdnhost.cn
3898                 '.kuronowish.net',              // web022.cdnhost.cn
3899                 '.ro-bot.net',
3900
3901                 // 125.65.112.95
3902                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3903                 '.23styles.com',
3904                 '.aehatena-jp.com',
3905                 '.ameblog-jp.net',
3906                 '.antuclt.com',
3907                 '.blog-ekndesign.com',
3908                 '.d-jamesinfo.com',
3909                 '.editco-jp.com',
3910                 '.ezbbsy.com',
3911                 '.extd-web.com',
3912                 '.fotblong.com',
3913                 '.game62chjp.net',
3914                 '.gamegohi.com',
3915                 '.gamesmusic-realcgi.net',
3916                 '.gamesragnaroklink.net',
3917                 '.homepage-nifty.com',
3918                 '.ie6xp.com',
3919                 '.irisdti-jp.com',
3920                 '.jklomo-jp.com',
3921                 '.jpxpie6-7net.com',
3922                 '.lian-game.com',
3923                 '.lineage-bbs.com',
3924                 '.lineage1bbs.com',
3925                 '.livedoor-game.com',
3926                 '.litcan.com',
3927                 '.lovejpjp.com',
3928                 '.m-phage.com',
3929                 '.muantang.com',
3930                 '.plusd-itmedia.com',
3931                 '.runbal-fc2web.com',
3932                 '.saussrea.com',
3933                 '.tooalt.com',
3934                 '.toriningena.net',
3935                 '.yahoodoor-blog.com',
3936                 '.yy14-kakiko.com',
3937
3938                 // 125.65.112.137
3939                 '.clublineage.com',
3940
3941                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3942                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3943                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3944
3945                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3946                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3947
3948                 '.games-nifty.com',             // 255.255.255.255 now
3949                 '.homepage3-nifty.com', // 255.255.255.255 now
3950         ),
3951         'caddd at 126.com' => array(
3952                 '.chengzhibing.com',    // by chen gzhibing
3953                 '.jplinux.com',                 // by lian liang
3954                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3955                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3956                 '.tooplogui.com',               // by zibing cai
3957                 '.twsunkom.com',                // by guo zhi wei
3958                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3959         ),
3960         'nuigiym2 at 163.com' => array( // by fly bg
3961                 '.linainfo.net',                // Seems IP not allocated now
3962                 '.lineagalink.com',             // 220.247.157.99
3963                 '.lineagecojp.com',             // 61.139.126.10
3964                 '.ragnarokonlina.com',  // 220.247.158.99
3965         ),
3966         'aakin at yandex.ru' => array(
3967                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3968                 '.entirestar.com',
3969                 '.joppperl.info',
3970                 '.onlinedrugsdirect.com',
3971                 '.pilkazen.info',
3972                 '.superbuycheap.com',
3973                 '.supersmartdrugs.com',
3974                 '.thecheappillspharmacy.com',
3975                 '.topdircet.com',
3976         ),
3977         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3978                 '.tianmieccp.com',
3979                 '.xianqiao.net',
3980         ),
3981         'm.frenzy at yahoo.com' => array(       // by Michael
3982                 '.p5v.org',
3983                 '.j111.net',
3984                 '.searchhunter.info',
3985                 '.soft2you.info',
3986                 '.top20health.info',
3987                 '.top20ringtones.info',
3988                 '.top20travels.info',
3989                 '.v09v.info',
3990                 '.x09x.info',
3991                 '.zb-1.com',
3992         ),
3993         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3994                 '.bingogoldenpalace.info',
3995                 '.ccarisoprodol.info',
3996                 '.ezxcv.info',
3997                 '.isuperdrug.com',
3998                 '.pharmacif.info',
3999                 '.pornsexteen.biz',
4000                 '.ugfds.info',
4001                 '.vviagra.info',
4002         ),
4003         'anatolsenator at gmail.com' => array(  // by Anatol
4004                 '.cheapestviagraonline.info',
4005                 '.buyphentermineworld.info'
4006         ),
4007         'webmaster at mederotica.com' => array(
4008                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
4009                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
4010                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4011                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4012         ),
4013         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4014                 '.auase.info',          // by ilemavyq7461 at techie.com
4015                 '.axeboxew.info',       // by zygeu220 at writeme.com
4016                 '.boluzuhy.info',       // by pikico5419 at post.com
4017                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4018                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4019                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4020                 '.exidiqe.info',        // by kufyca5475 at mail.com
4021                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4022                 '.gubiwu.info',         // by lywunef6532 at iname.com
4023                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4024                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4025                 '.jiuuz.info',          // by meqil6549 at mail.com
4026                 '.nudetar.info',        // by vohepafi3536 at techie.com
4027                 '.nipud.info',          // by bohox9872 at mindless.com
4028                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4029                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4030                 '.olasep.info',         // by lizon8506 at mail.com
4031                 '.oueuidop.info',       // by arytyb6913 at europe.com
4032                 '.oviravy.info',        // by amyuu3883 at london.com
4033                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4034                 '.ragibe.info',         // by ehome4458 at myself.com
4035                 '.ucazib.info',         // by gorare7222 at consultant.com
4036                 '.udaxu.info',          // by gubima4007 at usa.com
4037                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4038                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4039                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4040                 '.yvaxat.info',         // by koqun9660 at mindless.com
4041                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4042         ),
4043         'Carmodelrank.com etc' => array(
4044                 // by Brianna Dunlord (briasmi at yahoo.com)
4045                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4046                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4047                 '.carmodelrank.com',// by Brianna
4048                 '.cutestories.net',     // by Brianna
4049                 '.sturducs.com',
4050                 '.bestother.info',      // by Tim
4051                 '.premiumcasinogames.com',      // by Brianna)
4052                 '.yaahooo.info',        // by Alice
4053         ),
4054         'aliacsandr at yahoo.com' => array(
4055                 '.cubub.info',                          // "Free Web Hosting"
4056         ),
4057         'aliacsandr85 at yahoo.com' => array(
4058                 // by Dr. Portillo or Eva Sabina Lopez Castell
4059                 '.xoomer.alice.it',                     // "Free Web Hosting"
4060                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4061                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4062                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4063                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4064                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4065                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4066                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4067                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4068                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4069                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4070                 '.viagra-price.org',            // by Eva
4071                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4072                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4073         ),
4074         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4075         'Something-Gamble' => array(
4076                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4077                 '.atonlineroulette.com',                        // by Blaise Johns
4078                 '.atroulette.com',                                      // by Gino Sand
4079                 '.betting-123.com',                                     // by Joana Caceres
4080                 '.betting-i.biz',                                       // by Joaquina Angus
4081                 '.casino-challenge.com',                        // by Maren Camara
4082                 '.casino-gambling-i.biz',                       // by Giselle Nations
4083                 '.casino-italian.com',                          // by Holley Yan
4084                 '.casino123.net',                                       // by Ta Baines
4085                 '.casinohammamet.com',                          // by Inger Barhorst
4086                 '.casinoqz.com',                                        // by Berenice Snow
4087                 '.casinos-777.net',                                     // by Iona Ayotte
4088                 '.crapsok.com',                                         // by Devon Adair,
4089                 '.dcasinoa.com',                                        // by August Hawkinson
4090                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4091                 '.free-dvd-player.biz',                         // by Rosario Kidd
4092                 '.florida-lottery-01.com',                      // by Romeo Dillon
4093                 '.gaming-123.com',                                      // by Jennifer Byrne
4094                 '.kenogo.com',                                          // by Adriane Bell
4095                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4096                 '.onbaccarat.com',                                      // by Kassandra Dunn
4097                 '.online-experts.biz',                          // by Liberty Helmick
4098                 '.onlinepoker-123.com',                         // by Andrea Feaster
4099                 '.playpokeronline-123.com',                     // by Don Lenard
4100                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4101                 '.texasholdem123.com',                          // by Savion Lasseter
4102                 '.texasholdem-777.com',                         // by Savanna Lederman
4103                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4104                 '.the-craps-100.us',                            // by Lorrine Ripley
4105                 '.the-free-online-game-913.us',         // by Kanesha Clem
4106                 '.the-free-poker-1798.us',                      // by Elaina Witte
4107                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4108                 '.the-online-game-poker-1185.us',       // by Merna Bey
4109                 '.the-playing-black-jack.com',          // by Kristine Brinker
4110                 '.the-poker-1082.us',                           // by Kristofer Boldt
4111                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4112                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4113                 '.the-video-black-jack.com',            // by Jagger Godin
4114         ),
4115         'Something-Insurance' => array(
4116                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4117
4118                 // 0-9
4119                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4120                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4121                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4122                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4123                 '.18wkcf.com',                                  // by Lexy Bohannon
4124                 '.2001werm.org',                                // by Raphael Rayburn
4125                 '.2004heeparea1.org',                   // by Dinorah Andrews
4126                 '.21nt.net',                                    // by Jaida Estabrook
4127                 '.3finfo.com',                                  // by Damian Pearsall
4128                 '.3somes.org',                                  // by Mauro Tillett
4129                 '.453531.com',                                  // by Kurt Flannery
4130                 '.4freesay.com',                                // by Eloy Jones
4131                 '.5ssurvey.com',                                // by Annamarie Kowalski
4132                 '.8-f22.com',                                   // by Larraine Evers
4133                 '.9q.org',                                              // by Ami Boynton
4134
4135                 // A
4136                 '.a40infobahn.com',                             // by Amit Nguyen
4137                 '.a4h-squad.com',                               // by Ross Locklear
4138                 '.aac2000.org',                                 // by Randi Turner
4139                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4140                 '.acahost.com',                                 // by Milton Haberman
4141                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4142                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4143                 '.activel-learning-site.com',   // by Mateo Conn
4144                 '.ad-makers.com',                               // by Shemeka Arsenault
4145                 '.ada-information.org',                 // by Josef Osullivan
4146                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4147                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4148                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4149                 '.aerovac-hotpress.com',                // by Trey Marlow
4150                 '.agfbiosensors.com',                   // by Lionel Dempsey
4151                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4152                 '.affordablerealestate.net',    // by Season Otoole
4153                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4154                 '.ahouserefinance.com',                 // by Young Alley
4155                 '.akirasworld.com',                             // by Piper Sullivan
4156                 '.alderik-production.com',              // by Joan Stiles
4157                 '.alltechdata.com',                             // by Dom Laporte
4158                 '.amconllc.com',                                // by Syble Benjamin
4159                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4160                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4161                 '.angelandcrown.net',                   // by Claretta Najera
4162                 '.ankoralina.com',                              // by Eladia Demers
4163                 '.antiquegoldmine.com',                 // by Keena Marlow
4164                 '.aquinosotros.com',                    // by Nanci Prentice
4165                 '.architectionale.com',                 // by Wilbur Cornett
4166                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4167                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4168                 '.arefinancehome.com',                  // by Duane Doran
4169                 '.arefinancinghome.com',                // by Ike Laney
4170                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4171                 '.auction-emall-site.info',             // by Dayle Denman
4172                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4173                 '.auto-buy-rite.com',                   // by Asuncion Buie
4174                 '.axxinet.net',                                 // by Roberta Gasper
4175                 '.azimutservizi.com',                   // by Ethelene Brook
4176                 '.azstudies.org',                               // by Bernardina Walden
4177
4178                 // B
4179                 '.babtrek.com',                                 // by Simonette Mcbrayer
4180                 '.babycujo.com',                                // by Francisco Akers
4181                 '.bakeddelights.com',                   // by Dave Evenson
4182                 '.bbcart.com',                                  // by Lucio Hamlin
4183                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4184                 '.best-digital-phone.us',               // by Meghann Crockett
4185                 '.bjamusements.com',                    // by Lurlene Butz
4186                 '.blursgsu.com',                                // by Weston Killian
4187                 '.bookwide.net',                                // by Tequila Zacharias
4188                 '.boreholes.org',                               // by Flora Reed
4189                 '.breathingassociaiton.org',    // by Alfred Crayton
4190                 '.birdingnh.com',                               // by Donald Healy
4191                 '.bisdragons.org',                              // by Lupe Cassity
4192                 '.blcschools.net',                              // by Alycia Jolly
4193                 '.bronte-foods.com',                    // by Kary Pfeiffer
4194                 '.buckscountyneighbors.org',    // by Maile Gaffney
4195                 '.buffalofudge.com',                    // by Mable Whisenhunt
4196                 '.burlisonforcongress.com',             // by Luann King
4197                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4198                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4199
4200                 // C
4201                 '.cabanes-web.com',                             // by Vaughn Latham
4202                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4203                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4204                 '.checaloya.com',                               // by Susana Coburn
4205                 '.calvarychapelrgvt.org',               // by Karan Kittle
4206                 '.cameras-esite.info',                  // by Karlee Frisch
4207                 '.cancerkidsforum.org',                 // by Samson Constantino
4208                 '.ccchoices.org',                               // by Kenia Cranford
4209                 '.ccupca.org',                                  // by Evonne Serrano
4210                 '.celebratemehome.com',                 // by Soraya Tower
4211                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4212                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4213                 '.choose-shoes.net',                    // by Geoffrey Setser
4214                 '.churla.com',                                  // by Ollie Wolford
4215                 '.circuithorns.co.uk',                  // by Nathanial Halle
4216                 '.clanbov.com',                                 // by Donell Hozier
4217                 '.cnm-ok.org',                                  // by Thalia Moye
4218                 '.coalitioncoalition.org',              // by Ned Macklin
4219                 '.consoleaddicts.com',                  // by Dorla Hoy
4220                 '.counterclockwise.net',                // by Melynda Hartzell
4221                 '.codypub.com',                                 // by Mercedes Coffman
4222                 '.comedystore.net',                             // by Floy Donald
4223                 '.covsys.co.uk',                                // by Abby Jacey
4224                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4225                 '.craftybidders.com',                   // by Dannie Lazo
4226                 '.credit-card-finder.net',              // by Mellie Deherrera
4227                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4228                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4229                 '.ctwine.org',                                  // by Hailey Knox
4230
4231                 // D
4232                 '.dazyation.com',                               // by Louis Strasser
4233                 '.deepfoam.org',                                // by Ethelyn Southard
4234                 '.debt-fixing.com',                             // by Dagny Rickman
4235                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4236                 '.domainadoption.com',                  // by Breann Pappas
4237                 '.diannbomkamp.com',                    // by Russel Croteau
4238                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4239                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4240                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4241                 '.digital-cameras-esite.info',  // by Milan Jolin
4242                 '.dnstechnet.net',                              // by Tamera Oman
4243                 '.drivenbydata.org',                    // by Katherine Noyes
4244                 '.dtmf.net',                                    // by Micki Slayton
4245                 '.domainsfound.com',                    // by Blossom Lively
4246
4247                 // E
4248                 '.ecstacyabuse.net',                    // by Alana Knight
4249                 '.e-digital-camera-esite.info', // by Romaine Cress
4250                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4251                 '.eldorabusecenter.org',                // by Annabella Oneal
4252                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4253                 '.encaponline.com',                             // by Patrick Keel
4254                 '.ez-shopping-online.com',              // by Gail Bartlett
4255
4256                 // F
4257                 '.faithfulwordcf.com',                  // by Bart Weeks
4258                 '.fammedassoc.com',                             // by Joshua Nelson
4259                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4260                 '.f00k.org',                                    // by Leslie Chapman
4261                 '.foreignrealtions.org',                // by Krystal Hawley
4262                 '.fortwebsite.org',                             // by Kristina Motley
4263                 '.fotofirstdigital.com',                // by Tad Whitfield
4264                 '.foundationcommons.org',               // by Caryn Eskew
4265                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4266                 '.freaky-cheats.com',                   // by Al Klein
4267                 '.free--spyware.com',                   // by Nikki Contreras
4268                 '.french-home-finance-consultant.info', // by Santana Melton
4269                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4270
4271                 // G
4272                 '.gaintrafficfast.com',                 // by Lila Meekins
4273                 '.gaygain.org',                                 // by Shell Davila
4274                 '.gcaaa.com',                                   // by Vallie Jaworski
4275                 '.generalsysteme.com',                  // by Cale Vogel
4276                 '.generation4games.co.uk',              // by Sonya Graham
4277                 '.german-dictionary.us',                // by Rex Daniel
4278                 '.gilmerrec.com',                               // by Leighann Guillory
4279                 '.glenthuntly-athletics.com',   // by Julee Hair
4280                 '.glorybaskets.com',                    // by Lynette Lavelle
4281                 '.goconstructionloan.com',              // by Willis Monahan
4282                 '.gohireit.com',                                // by Bertha Metzger
4283                 '.godcenteredpeople.com',               // by Jaycee Coble
4284
4285                 // H
4286                 '.healthinsuranceem.com',               // by Justin Munson
4287                 '.hearthorizon.info',                   // by Kory Session
4288                 '.hegerindustrial.com',                 // by Toni Wesley
4289                 '.herzequip.com',                               // by Princess Dunkle
4290                 '.hglcms.org',                                  // by Gladwin Ng
4291                 '.hipanoempresa.com',                   // by Shannon Staub
4292                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4293                 '.horse-racing-result.com',             // by Rodney Reynolds
4294                 '.hueckerfamily.com',                   // by Hershel Sell
4295
4296                 // I
4297                 '.ilove2win.com',                               // by Lamont Dickerson
4298                 '.ilruralassistgrp.org',                // by Moises Hauser
4299                 '.imageonsolutions.com',                // by Porsche Dubois
4300                 '.infoanddatacenter.com',               // by Eva Okelley
4301                 '.islamfakta.org',                              // by Goldie Boykin
4302                 '.ithomemortgage.com',                  // by Adelaide Towers
4303                 '.iyoerg.com',                                  // by Madyson Gagliano
4304
4305                 // J
4306                 '.jeffaxelsen.com',                             // by Daphne William
4307                 '.jeffreyf.net',                                // by Vito Platt
4308                 '.johnmartinsreality.com',              // by Pamela Larry
4309                 '.johnsilvers.net',                             // by Silver Battaglia
4310
4311                 // K
4312                 '.kcgerbil.org',                                // by Marisa Thayer
4313                 '.kdc-phoenix.com',                             // by Salma Shoulders
4314                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4315                 '.kosove.org',                                  // by Darwin Schneider
4316
4317                 // L
4318                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4319                 '.letsgokayaking.net',                  // by Winnie Adair
4320                 '.libertycabs.com',                             // by Adela Bonds
4321                 '.liquor-store-cellar.info',    // by Hugh Pearson
4322                 '.locomojo.net',                                // by Marco Harmon
4323                 '.lodatissimo.com',                             // by Adrian Greeson
4324                 '.lsawc.org',                                   // by Lara Han
4325                 '.lycos-test.net',                              // by Rigoberto Oakley
4326
4327                 // M
4328                 '.macro-society.com',                   // by Venessa Hodgson
4329                 '.marthasflavorfest.com',               // by Ahmad Lau
4330                 '.martin-rank.com',                             // by Cathleen Crist
4331                 '.maryandfrank.org',                    // by Theodore Apodaca
4332                 '.masterkwonhapkido.com',               // by Misty Graham
4333                 '.maxrpm-demo.com',                             // by Cristal Cho
4334                 '.mechanomorphic.com',                  // by Stanford Crow
4335                 '.mepublishing.net',                    // by Karly Fleenor
4336                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4337                 '.metwahairports.com',                  // by Nan Kitchen
4338                 '.middle-eastnews.com',                 // by Tybalt Altmann
4339                 '.mikepelchy.com',                              // by Sherly Pearson
4340                 '.milpa.org',                                   // by Nelly Aguilera
4341                 '.modayun.com',                                 // by Camilla Velasco
4342                 '.moonstoneerp.com',                    // by Garret Salmon
4343                 '.morosozinho.com',                             // by Lenore Tovar
4344                 '.morphadox.com',                               // by Hung Zielinski
4345                 '.moscasenlared.com',                   // by Tera Gant
4346                 '.sdjavasig.com',                               // by Gia Swisher
4347                 '.mpeg-radio.com',                              // by Sincere Beebe
4348                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4349                 '.mtseniorcenter.org',                  // by Frederic Ortega
4350                 '.mysteryclips.com',                    // by Edward Ashford
4351
4352                 // N
4353                 '.naavs.org',                                   // by Yuridia Gandy
4354                 '.naval-aviation.org',                  // by Roselle Campo
4355                 '.navigare-ischia.com',                 // by Arielle Coons
4356                 '.ncredc.org',                                  // by Brenda Nye
4357                 '.neonmotorsports.com',                 // by Giovanna Vue
4358                 '.nf-ny.com',                                   // by Yadira Hibbard
4359                 '.ngfdyqva.com',                                // by Emiliano Samples
4360                 '.nicozone.com',                                // by Blaine Shell
4361                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4362                 '.npawny.org',                                  // by Willard Murphy
4363                 '.nysdoed.org',                                 // by Elric Delgadillo
4364                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4365                 '.nytech-ir.com',                               // by Adrien Beals
4366
4367                 // O
4368                 '.oadmidwest.com',                              // by Gavin Kaplan
4369                 '.oarauto.com',                                 // by Susann Merriman
4370                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4371                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4372                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4373                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4374                 '.online-pills-24x7.biz',               // by Aide Hallock
4375                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4376                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4377                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4378                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4379                 '.otterbayweb.com',                             // by Maxwell Irizarry
4380
4381                 // P
4382                 '.painting-technique.us',               // by Bryanna Tooley
4383                 '.pakamrcongress.com',                  // by Bryce Summerville
4384                 '.patabney.com',                                // by Kailyn Slone
4385                 '.parde.org',                                   // by Ellie Yates
4386                 '.participatingprofiles.com',   // by Jaelynn Meacham
4387                 '.partnershipconference.org',   // by Alla Floyd
4388                 '.pet-stars.com',                               // by Carmon Luevano
4389                 '.planning-law.org',                    // by Trista Holcombe
4390                 '.ppawa.com',                                   // by Evonne Scarlett
4391                 '.precisionfilters.net',                // by Faustina Fell
4392
4393                 // Q
4394                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4395                 '.quick-debt-consolidation.net',        // by Lala Marte
4396                 '.quicktvr.com',                                // by Vernell Crenshaw
4397
4398                 // R
4399                 '.radicalsolutions.org',                // by Reece Medlin
4400                 '.randallburgos.com',                   // by Bradly Villa
4401                 '.rcassel.com',                                 // by Janiah Gallant
4402                 '.rearchitect.org',                             // by Marcus Gaudet
4403                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4404                 '.reprisenashville.com',                // by Hester Khan
4405                 '.reptilemedia.com',                    // by Alicia Patel
4406                 '.resellers2000.com',                   // by Dedra Kennedy
4407                 '.reverse-billing.com',                 // by Lazaro Gluck
4408                 '.richcapaldi.com',                             // by Kya Haggard
4409                 '.richformissouri.com',                 // by Alanna Elston
4410                 '.robstraley.com',                              // by Leida Bartell
4411                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4412                 '.rpgbbs.com',                                  // by Leonel Peart
4413                 '.ruralbusinessonline.org',             // by Lynsey Watters
4414                 '.ruwomenscenter.org',                  // by Vince Mclemore
4415                 '.ryanjowens.com',                              // by Janine Smythe
4416
4417                 // S
4418                 '.sagarmathatv.org',                    // by Liam Funke
4419                 '.sakyathubtenling.org',                // by Liane Falgout
4420                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4421                 '.sandishaven.com',                             // by Lino Soloman
4422                 '.scienkeen.com',                               // by Liza Navarra
4423                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4424                 '.severios.com',                                // by Isa Steffen
4425                 '.sexual-hot-girls.com',                // by Viviana Bolton
4426                 '.shakespearelrc.com',                  // by Luciana Weaver
4427                 '.shashran.org',                                // by Adriel Humphries
4428                 '.shoes-shop.us',                               // by Austen Higginbotham
4429                 '.skagitvalleybassanglers.com', // by Necole Thiele
4430                 '.skinsciencesalon.com',                // by Nena Rook
4431                 '.smartalternative.net',                // by Nicki Lariviere
4432                 '.sml338.org',                                  // by Nickole Krol
4433                 '.smogfee.com',                                 // by Sienna Kimble
4434                 '.sneakers-e-shop.info',                // by Nikki Fye
4435                 '.spacewavemedia.com',                  // by Thanh Gast
4436                 '.softkernel.com',                              // by Nicol Hummer
4437                 '.stjoanmerrillville.com',              // by Hunter Beckham
4438                 '.strelinger.com',                              // by Arron Highsmith
4439                 '.striking-viking.com',                 // by Kylie Endsley
4440                 '.sunnydeception.org',                  // by Amaya Llora
4441                 '.sunzmicro.com',                               // by Goddard Arreola
4442                 '.sv-iabc.org',                                 // by Braden Buck
4443                 '.sykotick.com',                                // by Pierce Knecht
4444
4445                 // T
4446                 '.tbody.net',                                   // by Ormond Roman
4447                 '.the-pizzaman.com',                    // by Mario Ramsey
4448                 '.the-shoes.us',                                // by Alejandro Gaffney
4449                 '.theborneocompany.com',                // by Bryanna Tooley
4450                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4451                 '.thehomeschool.net',                   // by September Concepcio
4452                 '.thenewlywed.com',                             // by Allegra Marra
4453                 '.tigerspice.com',                              // by Denis Mosser
4454                 '.tnaa.net',                                    // by Jasmine Andress
4455                 '.top-finance-sites.com',               // by Maryann Doud
4456                 '.tradereport.org',                             // by Bettie Sisk
4457                 '.transmodeling.com',                   // by Martine Button
4458                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4459                 '.tsaoc.com',                                   // by Heriberto Mcfall
4460                 '.tsunamidinner.com',                   // by Nannie Richey
4461
4462                 // U
4463                 '.uhsaaa.com',                                  // by Risa Herbert
4464                 '.ultradeepfield.org',                  // by Bobby Ragland
4465                 '.umkclaw.info',                                // by Cammy Kern
4466                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4467                 '.usa-wolf.com',                                // by Jacklyn Morrill
4468                 '.usjobfair.com',                               // by Lorina Burchette
4469
4470                 // V
4471                 '.vacancesalouer.com',                  // by Loris Bergquist
4472                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4473                 '.valleylibertarians.org',              // by Lena Massengale
4474                 '.vanderbiltevents.com',                // by Gannon Krueger
4475                 '.vanwallree.com',                              // by Michelina Donahue
4476                 '.vcertificates.com',                   // by Hyun Lamp
4477                 '.vonormytexas.us',                             // by Suzette Waymire
4478
4479                 // W
4480                 '.washingtondc-areahomes.net',  // by Ailene Broome
4481                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4482                 '.wolsaoh.org',                                 // by Daniela English
4483                 '.worldpropertycatalog.com',    // by Aray Baxter
4484
4485                 // Y
4486                 '.yankee-merchants.com',                // by Jackson Hinojosa
4487                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4488                 '.yourdomainsource.com',                // by Deems Weingarten
4489
4490                 // Z
4491                 '.zkashan.com',                                 // by Evan Light
4492                 '.zockclock.com',                               // by Dorothea Guthrie
4493         ),
4494         'Something-Drugs' => array(
4495                 // Drugs / Pills / Diet
4496                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4497                 '.abdelghani-shady.com',                // by Elly Alton
4498                 '.bangbangfilm.com',                    // by Davin Chou
4499                 '.centroantequera.com',                 // by Keon Kwiatkowski
4500                 '.champagne-cellar.info',               // by Kandis Rizzo
4501                 '.chix0r.org',                                  // by Christoper Baird
4502                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4503                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4504                 '.fast-cash-01.com',                    // by Edgar Oliver
4505                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4506                 '.fn-nato.com',                                 // by Donny Dunlap
4507                 '.gqyinran.com',                                // by Alejandro Parks
4508                 '.juris-net.com',                               // by Rachelle Bravo
4509                 '.leftpencey.com',                              // by Aileen Ashby
4510                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4511                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4512                 '.palaceroyale.net',                    // by Brycen Stebbins
4513                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4514                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4515                 '.yukissushi.com',                              // by Donell Hozier
4516         ),
4517         'Something-Others' => array(
4518                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4519                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4520         ),
4521         'Something-NoApp' => array(
4522                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4523                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4524                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4525                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4526                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4527         ),
4528         'Cortez and family' => array(
4529                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4530                 '.dronadaarsujf.info',  // by Cortez
4531                 '.fromnananaref.info',  // by Cortez
4532                 '.goorkkjsaka.info',    // by Cortez
4533                 '.jkdfjjkkdfe.info',    // by Rico
4534                 '.jkllloldkjsa.info',   // by Cortez
4535                 '.nnjdksfornms.info',   // by Rico
4536                 '.mcmdkkksaoka.info',   // by Cortez
4537                 '.srattaragfon.info',   // by Cortez
4538                 '.yreifnnonoom.info',   // by Rico
4539                 '.zjajjsvgeuds.info',   // by Cortez
4540         ),
4541         'admin at ematuranza.com' => array(
4542                 '.ancorlontano.com',
4543                 '.dentroallago.com',
4544                 '.digiovinezza.com',
4545                 '.ematuranza.com',
4546                 '.ilfango.com',
4547                 '.nullarimane.com',
4548                 '.questaimmensa.com',
4549                 '.tentailvolo.com',
4550                 '.unatenerezza.com',
4551                 '.volgondilettose.com',
4552         ),
4553         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4554                 '.bid99df.info',
4555                 '.bj498uf.info',
4556                 '.edeuj84.info',
4557                 '.f4mfid.info',
4558                 '.g4vf03a.info',
4559                 '.j09j4r.info',
4560                 '.jv4r8hv.info',
4561                 '.k43sd3.info',
4562                 '.k4r84d.info',
4563                 '.k4rvda.info',
4564                 '.k4v0df.info',
4565                 '.k903os.info',
4566                 '.k9df93d.info',
4567                 '.kv94fd.info',
4568                 '.ksjs93.info',
4569                 '.l0ks03.info',
4570                 '.l9u3jc.info',
4571                 '.lv043a.info',
4572                 '.nh94h9.info',
4573                 '.m94r9d.info',
4574                 '.s87fvd.info',
4575                 '.v3k0d.info',
4576                 '.v4r8j4.info',
4577                 '.vf044s.info',
4578                 '.vj49rs.info',
4579                 '.vk498j.info',
4580                 '.u03jow.info',
4581         ),
4582         'Nikhil and Brian' => array(
4583                 // by Brian Dieckman (info at iudndjsdhgas.info)
4584                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4585                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4586                 '.ihfjeswouigf.info',   // by Brian, / was not found
4587                 '.iudndjsdhgas.info',   // by Brian, / was not found
4588                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4589                 '.jiatdbdisut.info',    // by Brian, / was not found
4590                 '.jkfierwoundhw.info',  // by Brian, / was not found
4591                 '.kfjeoutweh.info',             // by Brian, / was not found
4592                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4593                 '.oudjskdwibfm.info',   // by Brian, / was not found
4594                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4595                 '.itxbsjacun.info',             // by Nikhil, / was not found
4596                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4597                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4598                 '.najedncdcounrd.info', // by Nikhil, / was not found
4599                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4600                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4601                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4602                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4603                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4604                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4605                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4606                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4607                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4608         ),
4609         'wealth777 at gmail.com' => array(      // by Henry Ford
4610                 '.brutal-forced.com',
4611                 '.library-bdsm.com',
4612                 '.rape-fantasy.us',
4613         ),
4614         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4615                 '.purerotica.com',
4616                 '.richsex.com',
4617                 '.servik.net',
4618                 '.withsex.com',
4619         ),
4620         'dreamteammoney.com' => array(
4621                 '.dreamteammoney.com',  // dtmurl.com related
4622                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4623         ),
4624         'KLIK VIP Search and family' => array(
4625                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4626                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4627                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4628                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4629                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4630                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4631                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4632         ),
4633         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4634                 '.antivirs.info',
4635                 '.antivirus1.info',
4636                 '.antivirus2.info',
4637         ),
4638         'wasam at vangers.net and family' => array(
4639
4640                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4641                 '.bahatoca.org',
4642                 '.digestlycos.org',
4643                 '.educativaanale.info',
4644                 '.guildstuscan.org',
4645                 '.isaakrobbins.info',
4646                 '.isfelons.org',
4647                 '.lvwelevated.org',
4648                 '.macphersonaca.org',
4649                 '.markyaustrian.org',
4650                 '.michelepug.org',
4651                 '.opalbusy.info',
4652                 '.quijotebachata.info',
4653                 '.salthjc.info',
4654                 '.shogunnerd.info',
4655                 '.solarissean.org',
4656                 '.sparkgsx.info',
4657                 '.tarzanyearly.org',
4658                 '.tulabnsf.org',
4659                 '.vaccarinos.org',
4660
4661                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4662                 '.e2007.info',
4663                 '.cmoss.info',
4664
4665                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4666                 '.finddesk.org',
4667                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4668                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4669                 '.rcatalog.org',
4670                 '.sbitzone.org',
4671
4672                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4673                 '.cheapns.org',
4674                 '.my-top.net',
4675                 '.sfind.net',
4676                 '.sspot.net',
4677                 '.suvfind.info',
4678
4679                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4680                 '.trumber.com',
4681
4682                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4683                 '.blogduet.org',
4684                 '.carelf.info',
4685                 '.cmagic.org',
4686                 '.cspell.org',
4687                 '.dspark.org',
4688                 '.dtonic.org',
4689                 '.mcharm.info',
4690                 '.mslook.info',
4691                 '.phpdinnerware.info',
4692                 '.rnation.org',
4693                 '.uzing.org',
4694
4695                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4696                 '.allbar.info',
4697                 '.allersearch.org',
4698                 '.allzoom.org',
4699                 '.dynall.org',
4700                 '.fastopia.org',
4701                 '.offasfast.info',
4702                 '.rblast.org',
4703                 '.rchistes.info',
4704                 '.rette.org',
4705                 '.shufflequince.org',
4706                 '.suvlook.org',
4707
4708                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4709                 '.290cabeza.org',
4710                 '.bossierpainted.org',
4711                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4712                 '.definekonica.info',   // Admin: tvaals at vangers.net
4713                 '.gradetelemundo.info',
4714                 '.hydraulickin.info',
4715                 '.indicadorestmj.info',
4716                 '.keeleykincaid.org',
4717                 '.kleenbowser.info',
4718                 '.pipnickname.info',
4719                 '.pacolily.org',
4720                 '.redeemtrabalho.info',
4721                 '.scanmakerchua.info',
4722                 '.titanmessina.info',
4723                 '.tragratuit.org',
4724                 '.yeareola.info',
4725         ),
4726         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4727                 '.canadianmedsworld.info',      // 84.252.133.112
4728                 '.tabsdrugstore.info',          // 84.252.133.114
4729                 '.tabsstore.info',                      // 84.252.133.114
4730                 '.topcholesterol.info',         // 84.252.133.132
4731         ),
4732         'be.cx' => array(
4733                 '.be.cx',
4734                 '.ca.cx',
4735         ),
4736         'john780321 at yahoo.com' => array(     // by John  Brown
4737                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4738                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4739                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4740         ),
4741         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4742                 '.bertela.info',
4743                 '.forblis.info',
4744                 '.frenallo.info',
4745                 '.goyahoo.info',
4746                 '.herbak.info',
4747                 '.kiokast.info',
4748                 '.nerenok.info',
4749                 '.pestgets.info',
4750                 '.snukker.info',
4751                 '.thegetspons.info',
4752         ),
4753         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4754                 '.bobop.info',
4755                 '.kwwwe.info',
4756                 '.piikz.info',
4757                 '.moosm.info',
4758                 '.vvvw.info',
4759         ),
4760         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4761                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4762                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4763                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4764                 '.jplingood.com',       // 125.65.112.15
4765                 '.linenew.com',         // 203.191.148.96
4766                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4767                 '.yzlin.com',           // 220.162.244.36
4768         ),
4769         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4770                 '.1111mb.com',
4771                 '.2sex18.com',
4772                 '.69porn1.com',
4773         ),
4774         'ECTechnology' => array(
4775                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4776                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4777                 '.automouse.jp',
4778         ),
4779         'lyqz at 21cn.com' => array(
4780                 '.japangame1.com',
4781                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4782                 '.livedoor1.com',
4783                 '.ragnarokonline1.com',
4784                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4785         ),
4786         'kingrou at hotmail.com' => array(      // by yangjianhe
4787                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4788                 '.453787.com',
4789         ),
4790         'anpaul541000 at 163.com' => array(     // by su qiuqing
4791                 '.cetname.com',                 // 222.77.185.87
4792                 '.jpgamer.net',                 // 220.247.157.106
4793                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4794                 '.lovejptt.com',                // 222.77.185.87
4795                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4796                 '.playncsoft.net',              // 220.247.157.106
4797         ),
4798         'abc00613 at 163.com' => array( // by guo yong
4799                 '.avtw1068.com',                // 64.74.223.11
4800                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4801                 '.djkkk66990.com',              // 68.178.232.99
4802                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4803         ),
4804         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4805                 '.cmonfofo.com',
4806                 '.discutbb.com',
4807         ),
4808         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4809                 '.preca.info',
4810                 '.skiaggi.info',
4811                 '.scrianal.info',
4812                 '.tageom.info',
4813         ),
4814         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4815                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4816                 '.inpros.net',                  // 202.181.98.79
4817                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4818         ),
4819         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4820                 '.ec51.com',
4821                 '.ec51.net',
4822         ),
4823         'abbevillelaties at yahoo.fr etc' => array(
4824                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4825                 '.ringtones-rate.com',
4826                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4827                 '.special-ringtones.net',
4828         ),
4829         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4830                 '.1sgsc.info',
4831                 '.3h4r89h.info',
4832                 '.3v44dd.info',
4833                 '.6rfuh6.info',
4834                 '.84hd8.info',
4835                 '.94bui89.info',
4836                 '.agysb3.info',
4837                 '.asdjhs.info',
4838                 '.bcvnrth.info',
4839                 '.bheb4r.info',
4840                 '.bhiuno.info',
4841                 '.biug7g.info',
4842                 '.bjb5f4.info',
4843                 '.bob8g7g.info',
4844                 '.br89bdd.info',
4845                 '.bsa3h.info',
4846                 '.bsieb8.info',
4847                 '.basbiubf.info',
4848                 '.bobwwfs2.info',
4849                 '.ciuv9t.info',
4850                 '.dbmdx4.info',
4851                 '.dbrjms.info',
4852                 '.dbtcm.info',
4853                 '.dff9ghu.info',
4854                 '.dfshbb.info',
4855                 '.dgd4ffdh.info',
4856                 '.dh3ge.info',
4857                 '.duc86jh.info',
4858                 '.ergth45.info',
4859                 '.f78bf7ffb.info',
4860                 '.gbdfbo4.info',
4861                 '.ger45.info',
4862                 '.gnvnrrg.info',
4863                 '.h47he7.info',
4864                 '.h488hbd4.info',
4865                 '.hd72b94.info',
4866                 '.he74b7.info',
4867                 '.hfujfnr.info',
4868                 '.husdhd42.info',
4869                 '.hbwje.info',
4870                 '.itg87gji.info',
4871                 '.iugiougiuh.info',
4872                 '.jhd4f4aa.info',
4873                 '.jshd73.info',
4874                 '.krhpgd.info',
4875                 '.lyihjn.info',
4876                 '.nfyjnfj.info',
4877                 '.oihbv.info',
4878                 '.os44fvs.info',
4879                 '.sdfsd3.info',
4880                 '.sdiug4.info',
4881                 '.sdkufhh.info',
4882                 '.sdugb4f.info',
4883                 '.skdbf.info',
4884                 '.sipiv78.info',
4885                 '.sudbfb.info',
4886                 '.tymbbmy.info',
4887                 '.uilhjk.info',
4888                 '.vi87vub.info',
4889                 '.vfuyf87f.info',
4890                 '.viyvvj877.info',
4891                 '.w7fc8eu.info',
4892                 '.wefg43g.info',
4893                 '.xbrch78e.info',
4894                 '.ywsfu.info',
4895                 '.zxcbiv.info',
4896         ),
4897         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4898                 '.abofios.info',
4899                 '.amlekfn.info',
4900                 '.amlkdoie.info',
4901                 '.amkslewq.info',
4902                 '.alemfu.info',
4903                 '.aloweks1.info',
4904                 '.alposd3.info',
4905                 '.bamhpb.info',
4906                 '.bhjkb.info',
4907                 '.bjqnj.info',
4908                 '.cvcxcbhpr.info',
4909                 '.czoypaiat.info',
4910                 '.dbpmgc.info',
4911                 '.dgvogrxs.info',
4912                 '.dldksf.info',
4913                 '.dlor6za.com',
4914                 '.dmkoiew.info',
4915                 '.eewrefr.info',
4916                 '.eladne.info',
4917                 '.elksem.info',
4918                 '.elwpod.info',
4919                 '.emlwkdnr.info',
4920                 '.esgmyqk.info',
4921                 '.fauqv.info',
4922                 '.fgxkgy.info',
4923                 '.fhryns.info',
4924                 '.fj38n4g.info',
4925                 '.fjnesal.info',
4926                 '.fmkfoe.info',
4927                 '.fqkcfldtr.info',
4928                 '.fwcigpdwz.info',
4929                 '.fyhik.info',
4930                 '.glrkje.info',
4931                 '.gwkslfq.info',
4932                 '.gwjracvh.info',
4933                 '.hihopepe.info',
4934                 '.hwlyggbkw.info',
4935                 '.hmwbfw.info',
4936                 '.hthyeb.info',
4937                 '.iaofkyaw.info',
4938                 '.uldkxuiw.info',
4939                 '.is7c6w4.info',
4940                 '.ivuddhdk.info',
4941                 '.jgfndjem.info',
4942                 '.jgmdlek.info',
4943                 '.jkrnvmpad.info',
4944                 '.jqujn.info',
4945                 '.jvgmmba.info',
4946                 '.kbaur.info',
4947                 '.kgjindptv.info',
4948                 '.kleo7s9.info',
4949                 '.lezfgam.info',
4950                 '.lfaasy.info',
4951                 '.ljpdjki.info',
4952                 '.lmnpis.info',
4953                 '.lpzcu2f.info',
4954                 '.lrptn.info',
4955                 '.lursqt.info',
4956                 '.mgkabviil.info',
4957                 '.mhtknjyt.info',
4958                 '.mksuuku.info',
4959                 '.mkyky.info',
4960                 '.mloaisn.com',
4961                 '.mlsiknd.info',
4962                 '.mthqz.info',
4963                 '.nnooq.info',
4964                 '.nohhylvc.info',
4965                 '.nuprndsye.info',
4966                 '.nsoelam.info',
4967                 '.nykobczv.info',
4968                 '.nzuhli.info',
4969                 '.odyqzgylr.info',
4970                 '.oidiau.info',
4971                 '.oitzkw.info',
4972                 '.okdmrpz.info',
4973                 '.ooinziti.info',
4974                 '.ortqr.info',
4975                 '.osmkpnekv.info',
4976                 '.ozkzfih.info',
4977                 '.p3ix8wc.com',
4978                 '.piwyt.info',
4979                 '.pfkijrm.info',
4980                 '.pjktcragi.info',
4981                 '.pleoz.info',
4982                 '.plvqm73.info',
4983                 '.pqyrem.info',
4984                 '.qipgqd.info',
4985                 '.qlewixu.com',
4986                 '.qmlskme.info',
4987                 '.qtuff.info',
4988                 '.quoga.info',
4989                 '.quqz.info',
4990                 '.qzxuw.info',
4991                 '.rcaidegp.info',
4992                 '.rlkmdi.info',
4993                 '.rnsoiov.info',
4994                 '.rnwlams.info',
4995                 '.rprgkgqld.info',
4996                 '.rubqvxrn.info',
4997                 '.spqxstl.info',
4998                 '.syckoqjql.info',
4999                 '.tbirb.info',
5000                 '.thalc34.info',
5001                 '.tiabq.info',
5002                 '.tszzpjr.info',
5003                 '.tyjdyn.info',
5004                 '.twgugpns.info',
5005                 '.uaezrqp.info',
5006                 '.udlkasu.info',
5007                 '.uejncyf.info',
5008                 '.ukvflb.info',
5009                 '.ugsuv.info',
5010                 '.ukhgpcp.info',
5011                 '.urprzn.info',
5012                 '.uuhememkw.info',
5013                 '.yalc7en.info',
5014                 '.ybuid.info',
5015                 '.yhdkgfob.info',
5016                 '.ymenq.info',
5017                 '.ynlyb.info',
5018                 '.vieatlubk.info',
5019                 '.vltcaho.info',
5020                 '.wlamsiek.info',
5021                 '.wlerp.info',
5022                 '.wlmtshzi.info',
5023                 '.wmlkams.info',
5024                 '.wprqd.info',
5025                 '.wpyspszi.info',
5026                 '.xdscc.info',
5027                 '.xdvy.info',
5028                 '.xeypku.info',
5029                 '.xsrxh.info',
5030                 '.xwjyrpfe.info',
5031                 '.yxcqw.info',
5032                 '.zhbktrh.info',
5033                 '.zspepn.info',
5034                 '.zsxtz.info',
5035         ),
5036         'survi at poczta.fm and smiley' => array(
5037                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5038                 '.ppert.info',
5039                 '.pperta.info',
5040                 '.pperts.info',
5041                 '.pprtuis.info',
5042                 '.13iuey.info',         // ":>"
5043                 '.13jkhs.info',
5044                 '.13lksa.info',
5045                 '.13rxtx.info',
5046                 '.13slkd.info',
5047                 '.13zaer.info',
5048         ),
5049         'admin at esemeski.com' => array(       // by Jan Kalka
5050                 '.kxils.info',
5051                 '.kuaph.info',
5052                 '.lncdc.info',
5053                 '.lsqpd.info',
5054                 '.mczed.info',
5055                 '.npous.info',
5056                 '.obgju.info',
5057         ),
5058         'LiquidNetLimited.com' => array(
5059                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5060
5061                 // FateBack.com related
5062                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5063                 '.bebto.com',
5064                 '.fateback.com',
5065                 '.undonet.com',
5066                 '.yoll.net',
5067                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5068
5069                 // 50webs.com                   // 64.72.112.10
5070                 // dns2.50webs.com              // 64.72.112.11
5071                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5072                 // dns2.freehostia.com  // 64.72.112.13
5073                 // serv3.freehostia.com // 64.72.112.14
5074                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5075                 // mail.50webs.com              // 64.72.112.26
5076                 // supremecenter41.com  // 64.72.112.52
5077                 // 50webs2.50webs.com   // 64.72.112.89
5078                 // supremecenter39.com  // 64.72.112.103
5079
5080                 // by LiquidNet Ltd. (support at propersupport.com)
5081                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5082                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5083                         'duoservers.com',               // 216.65.1.130
5084
5085                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5086         ),
5087         'domains at agava.com' => array(
5088                 '.h18.ru',
5089                 '.hut1.ru',
5090         ),
5091         'wlmx009 at hotmail.com' => array(
5092                 '.123lineage.com',
5093                 '.ff11-info.com',
5094                 '.lastlineage.com',
5095                 '.lineage2-ol.com',
5096                 '.lineage2006.com',
5097                 '.lineagefirst.com',
5098         ),
5099         'Zettahost.com' => array(
5100                 '.atspace.biz',         // sales at zettahost.com
5101                 '.atspace.com',         // abuse at zettahost.com
5102                 '.atspace.name',        // NS atspace.com
5103                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5104                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5105         ),
5106         'hlq9814 at 163.com' => array(
5107                 '.kotonohax.com',               // by ling bao
5108                 '.ragnarox.mobi',               // by lin bao, *.exe download
5109                 '.rokonline-jp.com',    // by hang long
5110         ),
5111         '77ch.jp' => array(
5112                 '.77ch.jp',
5113                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5114         ),
5115         'serchportal at mail.ru' => array(      // by Namu Adin
5116                 '.43fert.info',
5117                 '.belis.info',
5118                 '.bonu.info',
5119                 '.chelsite.info',
5120                 '.chparael.info',
5121                 '.cool9f.info',
5122                 '.dada2.info',
5123                 '.dorplanete.info',
5124                 '.dormonde.info',
5125                 '.dorprojet.info',
5126                 '.faciledor.info',
5127                 '.fastsearchgroup.info',
5128                 '.gerta0.info',
5129                 '.getse.info',
5130                 '.gopvl.info',
5131                 '.knopki.info',
5132                 '.propidor.info',
5133                 '.quicksearchnet.info',
5134                 '.ret5.info',
5135                 '.slimfastsearch.info',
5136                 '.virtualpvl.info',
5137                 '.vpvla.info',
5138                 '.xjdor.info',
5139                 '.zhopki.info',
5140         ),
5141         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5142                 '*.444mb.com',          // Free hosting
5143                 'urlnip.com',           // Redirection
5144         ),
5145         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5146                 '.1fasttimesatnau.info',
5147                 '.1freecybersex.info',
5148                 '.1freexxxcomics.info',
5149                 '.1fuckingmywife.info',
5150                 '.1pornpreview.info',
5151                 'www.ru',                                       // by (service at demos.ru), redirection
5152         ),
5153         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5154                 '.adultschat.info',
5155                 '.livecamonline.info',
5156                 '.webcam4u.info',
5157                 '.younghot.info',
5158         ),
5159         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5160                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5161
5162                 // 209.51.196.242
5163                 '.22web.net',
5164                 '.2kool4u.net',
5165                 '.9skul.com',
5166                 '.alojalo.info',
5167                 '.byet.net',
5168                 '.byethost2.com',
5169                 '.byethost3.com',
5170                 '.byethost4.com',
5171                 '.byethost5.com',
5172                 '.byethost6.com',
5173                 '.byethost7.com',
5174                 '.byethost8.com',
5175                 '.byethost9.com',
5176                 '.byethost10.com',
5177                 '.byethost11.com',
5178                 '.byethost12.com',
5179                 '.byethost13.com',
5180                 '.byethost14.com',
5181                 '.byethost15.com',
5182                 '.byethost16.com',
5183                 '.byethost17.com',
5184                 '.byethost18.com',
5185                 '.headshothost.net',
5186                 '.hostwq.net',
5187                 '.mega-file.net',
5188                 '.truefreehost.com',
5189
5190                 '.ifastnet.com',        // 209.51.196.243
5191
5192                 // 209.190.16.82(mx1.byet.org)
5193                 '.1sthost.org',
5194                 '.4sql.net',
5195                 '.byet.org',
5196                 '.hyperphp.com',
5197                 '.kwikphp.com',
5198                 '.my-php.net',
5199                 '.my-place.us',
5200                 '.my-webs.org',
5201                 '.netfast.org',
5202                 '.php0h.com',
5203                 '.php1h.com',
5204                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5205                 '.phpnet.us',
5206                 '.prohosts.org',
5207                 '.pro-php.org',
5208                 '.prophp.org',
5209                 '.sprinterweb.net',
5210                 '.swiftphp.com',
5211                 '.xlphp.net',
5212
5213                 // 209.190.16.83(mx2.byet.org)
5214                 '.instant-wiki.net',
5215
5216                 // 209.190.16.84(mx3.byet.org)
5217
5218                 // 209.190.16.85(mx4.byet.org)
5219                 '.instant-blog.net',
5220                 '.instant-forum.net',
5221
5222                 '.byethost.com',                        // 209.190.18.138
5223         ),
5224         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5225                 '.analmoviesite.info',
5226                 '.bestgirlssex.info',
5227                 '.boxvagina.info',
5228                 '.cyberlivegirls.info',
5229                 '.hotredgirls.info',
5230                 '.forsexlove.info',
5231                 '.hotnudezone.info',
5232                 '.hotredpussy.info',
5233                 '.lesbians-live.info',
5234                 '.lesbians-on-cam.info',
5235                 '.onlinegirlssite.info',
5236                 '.sexloveonline.info',
5237                 '.teensexcard.info',
5238                 '.teensexdirect.info',
5239                 '.topnudesite.info',
5240                 '.vaginafree.info',
5241                 '.webcam-show.info',
5242                 '.webcamshow.info',
5243                 '.youngsexchat.info',
5244                 '.yourcumshot.info',
5245         ),
5246         'stocking.club at gmail.com' => array(
5247                 '.adulthotmodels.com',          // by David Zajwzran
5248                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5249                 '.cash-call.info',                      // by David Theissen
5250                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5251                 '.cheap-online-viagra.info',    // by David Theissen
5252                 '.drugcleansing.net',           // by David Zajwzran
5253                 '.men-health-zone.com',         // by David Theissen
5254                 '.purchase-viagra.info',        // by David Theissen
5255                 '.realdrunkengirls.biz',        // by David Theissen
5256                 '.sextoyslife.com',                     // by David Zajwzran
5257                 '.sexysubjects.info',           // by David Zajwzran
5258                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5259                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5260                 '.travelcardsite.info',         // by David Theissen
5261         ),
5262         'lustiq at p5com.com' => array(
5263                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5264                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5265         ),
5266         'web at 6jy.com' => array(
5267                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5268                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5269         ),
5270         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5271                 '.auto-fgen.info',
5272                 '.fast-marketing.info',
5273                 '.from-usa.info',
5274                 '.generic-pharm.info',
5275                 '.pharm-directory.info',
5276                 '.popular-people.info',
5277                 '.safe-health.info',
5278                 '.star-celebrities.info',
5279                 '.super-home-biz.info',
5280                 '.top5-auto.info',
5281                 '.top5-cars.info',
5282                 '.vip-furniture.info',
5283                 '.vip-pc.info',
5284                 '.vip-pets.info',
5285         ),
5286         'abuse at search-store.org' => array(
5287                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5288         ),
5289         'Leading Edge Marketing Inc.' => array(
5290                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5291                 '.abemedical.com',
5292                 '.attractwomennow.com',
5293                 '.bettersexmall.com',
5294                 '.buymaxoderm.com',
5295                 '.buyvprx.com',
5296                 '.genf20.com',
5297                 '.infinityhealthnews.com',
5298                 '.istnewsletter.com',
5299                 '.leadingedgecash.com',
5300                 '.leadingedgeherbals.com',
5301                 '.leadingedgevipsonly.com',
5302                 '.lecash.com',
5303                 '.leminfo.com',
5304                 '.proextendersystem.com',
5305                 '.provestra.com',
5306                 '.semenax.com',
5307                 '.shavenomore.com',
5308                 '.theedgenewsletter.com',
5309                 '.vigorelle.com',
5310                 '.vigrx.com',
5311                 '.vigrxplus.com',
5312                 '.wbstnewsletter.com',
5313         ),
5314         'clickx at bk.ru' => array(     // by Alexey Enrertov
5315                 '.coolget*.info' =>
5316                         '#^(?:.*\.)?' . 'coolget' .
5317                         '(?:bus|find|news|php|place|post|srch)' .
5318                         '\.info$#',
5319                 '.coolgirl*.info' =>
5320                         '#^(?:.*\.)?' . 'coolgirl' .
5321                         '(?:apple|fish|search)' .
5322                         '\.info$#',
5323                 '.coolmeet*.info' =>
5324                         '#^(?:.*\.)?' . 'coolmeet' .
5325                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5326                         '\.info$#',
5327                 '.cool**.info' =>
5328                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5329                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5330                         '\.info$#',
5331                 '.freseasy*.info' =>
5332                         '#^(?:.*\.)?' . 'freseasy' .
5333                         '(?:apple|click|find|fish|post|search)' .
5334                         '\.info$#',
5335                 '.fres**.info' =>
5336                         '#^(?:.*\.)?' .
5337                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5338                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5339                         '\.info$#',
5340                         // These are not found yet:
5341                         // fresgirlsrch.info
5342                         // fresadultapple.info
5343                         // fresadultclick.info
5344                         // frestheplace.info
5345
5346                 // 66.232.113.44
5347                 '.nuhost.info',
5348                 '.susearch.info',
5349
5350                 // 66.232.126.74(hv94.steephost.com)
5351                 '.dilej.com',
5352                 '.fyvij.com',
5353                 '.howus.com',
5354                 '.jisyn.com',
5355                 '.kaxem.com',
5356                 '.mihug.com',
5357                 '.mobyb.com',
5358                 '.qidat.com',
5359                 '.qihek.com',
5360                 '.ryzic.com',
5361                 '.sasuv.com',
5362                 '.tuquh.com',
5363                 '.vehyq.com',
5364                 '.wezid.com',
5365                 '.wifuj.com',
5366                 '.xijyt.com',
5367                 '.zuqyn.com',
5368
5369                 '.mosugy.com',
5370         ),
5371         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5372                 '.hitsearching.info',
5373                 '.hugeamountdata.info',
5374                 '.megafasthost.info',
5375                 '.real-big-host.info',
5376                 '.search4freez.info',
5377                 '.yasech.info',
5378
5379                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5380                 '.bymire.com',
5381
5382                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5383                 '.ligiwa.com',
5384
5385                 '.mubeho.com',
5386         ),
5387         'ice--man at mail.ru related' => array(
5388                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5389                 '.bestcreola.com',
5390                 '.crekatierra.com',
5391                 '.creolafire.com',
5392                 '.crolik.com',
5393                 '.croller.cn',
5394                 '.ecrmx.com',
5395                 '.eflashpoint.com',
5396                 '.exoticmed.com',
5397                 '.feelview.com',
5398                 '.greatexotic.com',
5399                 '.icrtx.com',
5400                 '.icyhip.com',
5401                 '.icyiceman.com',
5402                 '.icypopular.com',
5403                 '.iflashpoint.com',
5404                 '.justmdx.com',
5405                 '.kiliusgroup.com',
5406                 '.klickerr.com',
5407                 '.klickerrworld.com',
5408                 '.kreolic.com',
5409                 '.margansitio.com',
5410                 '.margantierra.com',
5411                 '.mimargan.com',
5412                 '.oilkeys.com',
5413                 '.planetmdx.com',
5414                 '.thekeyse.com',
5415                 '.viewgreat.com',
5416                 '.yourcreola.com',
5417
5418                 // 69.46.23.48
5419                 '.bestkilius.com',
5420                 '.crekadirecto.com',
5421                 '.getflashsite.com',
5422                 '.sucreka.com',
5423                 '.superkilius.com',
5424
5425                 // 69.46.23.48 by bing-16 at ftunez.org
5426                 '.bovorup.cn',
5427                 '.litotar.cn',
5428                 '.nihydec.cn',
5429
5430                 // 66.232.112.175 by bing-32 at ftunez.org
5431                 '.lasyxy.cn',
5432
5433                 // by bing-65 at ftunez.org
5434                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5435                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5436                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5437                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5438                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5439                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5440                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5441                 '.saralar.cn',          // 66.232.120.113(non-existent)
5442                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5443
5444                 // 69.46.23.48 by clarkson-34 at ftunez.org
5445                 '.bumora.cn',
5446                 '.byxite.cn',
5447                 '.byxuqu.cn',
5448                 '.jadama.cn',
5449                 '.kybope.cn',
5450                 '.mefeki.cn',
5451                 '.mokiso.cn',
5452                 '.niqeme.cn',
5453                 '.pukafo.cn',
5454                 '.qesaxa.cn',
5455                 '.toxezi.cn',
5456                 '.tujudy.cn',
5457                 '.tutike.cn',
5458
5459                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5460                 '.cabino.cn',
5461                 '.cuwace.cn',
5462                 '.ferazi.cn',
5463                 '.gigywy.cn',
5464                 '.lapype.cn',
5465                 '.mewabe.cn',
5466                 '.pezegy.cn',
5467                 '.pyzuza.cn',
5468                 '.qypony.cn',
5469                 '.ropesy.cn',
5470                 '.wadyfe.cn',
5471
5472                 // 69.46.23.48 clarkson-58 at ftunez.org
5473                 '.becabe.cn',
5474                 '.biciqy.cn',
5475                 '.bezymu.cn',
5476                 '.cifori.cn',
5477                 '.ciwyxi.cn',
5478                 '.dobari.cn',
5479                 '.dusofe.cn',
5480                 '.dutyda.cn',
5481                 '.dykanu.cn',
5482                 '.fakexu.cn',
5483                 '.fylema.cn',
5484                 '.godymo.cn',
5485                 '.hyhaxy.cn',
5486                 '.ganosi.cn',
5487                 '.kuxyju.cn',
5488                 '.lacezy.cn',
5489                 '.lonyru.cn',
5490                 '.lycato.cn',
5491                 '.nykyby.cn',
5492                 '.qyhuko.cn',
5493                 '.redere.cn',
5494                 '.riwimu.cn',
5495                 '.wopary.cn',
5496                 '.xizity.cn',
5497                 '.xuxusa.cn',
5498
5499                 // by entretov-28 at ftunez.org
5500                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5501                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5502
5503                 // 69.46.23.48 by entretov-32 at ftunez.org
5504                 '.cihuji.cn',
5505                 '.deqyve.cn',
5506                 '.genefa.cn',
5507                 '.gujyju.cn',
5508                 '.hasadu.cn',
5509                 '.hedomi.cn',
5510                 '.kecicy.cn',
5511                 '.kipabo.cn',
5512                 '.manunu.cn',
5513                 '.musoru.cn',
5514                 '.myvuna.cn',
5515                 '.pikybe.cn',
5516                 '.riqawo.cn',
5517                 '.rufuxy.cn',
5518                 '.vyfilu.cn',
5519                 '.xadule.cn',
5520                 '.zolaxe.cn',
5521                 '.zerixu.cn',
5522
5523                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5524                 '.dozoda.cn',
5525                 '.nemipu.cn',
5526
5527                 // entretov-84 at ftunez.org
5528                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5529                 '.favulol.cn',          // 66.232.120.115(*snip*)
5530                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5531
5532                 // 69.46.23.48 by jeremy-57 at ftunez.org
5533                 '.duzele.cn',
5534                 '.figede.cn',
5535                 '.fiwany.cn',
5536                 '.gyfalu.cn',
5537                 '.jepylo.cn',
5538                 '.nuqumy.cn',
5539
5540                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5541                 '.burahu.cn',
5542                 '.jydijy.cn',
5543                 '.komyby.cn',
5544                 '.najepa.cn',
5545                 '.pylobu.cn',
5546                 '.qofoly.cn',
5547                 '.sybuvi.cn',
5548                 '.vycexu.cn',
5549                 '.wotyqo.cn',
5550                 '.xudoli.cn',
5551
5552                 // by entretov-28 at ftunez.org
5553                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5554
5555                 // by entretov-37 at ftunez.org
5556                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5557                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5558
5559                 // 66.232.112.175 by entretov-86 at ftunez.org
5560                 '.faweji.cn',
5561                 '.jypaci.cn',
5562                 '.xozuso.cn',
5563
5564                 // 69.46.23.48 by miles-37 at ftunez.org
5565                 '.beqymo.cn',
5566                 '.ceqibi.cn',
5567                 '.dyraqo.cn',
5568                 '.qenedo.cn',
5569                 '.qurypa.cn',
5570                 '.siluvo.cn',
5571                 '.tujala.cn',
5572                 '.wukuwi.cn',
5573                 '.xenibo.cn',
5574                 '.xiculo.cn',
5575                 '.zabemu.cn',
5576
5577                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5578                 '.bevaka.cn',
5579                 '.fysyte.cn',
5580                 '.guxixu.cn',
5581                 '.hatoli.cn',
5582                 '.jitobu.cn',
5583                 '.juxeca.cn',
5584                 '.kifuhy.cn',
5585                 '.licila.cn',
5586                 '.mecomy.cn',
5587                 '.niryko.cn',
5588                 '.noxoco.cn',
5589                 '.qiwysu.cn',
5590                 '.tutysy.cn',
5591
5592                 // by oker-74 at ftunez.org
5593                 '.navufol.cn',
5594
5595                 // by oker-97 at ftunez.org
5596                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5597                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5598                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5599                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5600                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5601                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5602                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5603
5604                 // by polet-20 at ftunez.org
5605                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5606
5607                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5608                 '.gywiqe.cn',
5609                 '.jotapo.cn',
5610                 '.jywixa.cn',
5611
5612                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5613                 '.bawegap.cn',
5614                 '.buremyl.cn',
5615                 '.cilybut.cn',
5616                 '.cutufek.cn',
5617                 '.defypyr.cn',
5618                 '.femaxij.cn',
5619                 '.gelejo.cn',
5620                 '.gocylyv.cn',
5621                 '.kehiqaq.cn',
5622                 '.ninyjit.cn',
5623                 '.ruroruw.cn',
5624                 '.vetehow.cn',
5625
5626                 // 69.46.23.48 sabrosky-85 at ftunez.org
5627                 '.banyla.cn',
5628                 '.bubaqu.cn',
5629                 '.bygage.cn',
5630                 '.dafozy.cn',
5631                 '.kaxyjo.cn',
5632                 '.makyle.cn',
5633                 '.naleto.cn',
5634                 '.pidele.cn',
5635                 '.poqexa.cn',
5636                 '.pymaqo.cn',
5637                 '.qupiqy.cn',
5638                 '.reqefy.cn',
5639                 '.sopocy.cn',
5640                 '.vuhexo.cn',
5641                 '.weryso.cn',
5642                 '.wubula.cn',
5643                 '.xufuxy.cn',
5644                 '.zuhyxu.cn',
5645
5646                 // 69.46.23.48 by tribiani-97 at ftunez.org
5647                 '.dyxorod.cn',
5648                 '.firywoz.cn',
5649                 '.jixezyx.cn',
5650                 '.joveraw.cn',
5651                 '.jowaxup.cn',
5652                 '.nodarej.cn',
5653                 '.pimijom.cn',
5654                 '.tugupeg.cn',
5655
5656                 // 66.232.112.175 by abuse-here at inbox.ru
5657                 '.catybe.cn',
5658                 '.jytame.cn',
5659                 '.wygete.cn',
5660         ),
5661         '74.50.97.*' => array(
5662                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5663                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5664                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5665                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5666                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5667                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5668                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5669                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5670                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5671                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5672                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5673                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5674                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5675                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5676                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5677                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5678
5679                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5680                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5681                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5682                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5683                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5684                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5685                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5686                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5687                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5688                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5689                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5690                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5691                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5692                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5693                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5694                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5695                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5696                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5697                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5698
5699                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5700                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5701                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5702                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5703                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5704         ),
5705         'nijeoi at hotmai.com' => array(
5706                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5707                 '.bowij.com',
5708                 '.bozib.com',
5709                 '.cavux.com',
5710                 '.dipov.com',
5711                 '.gumoz.com',
5712                 '.hakyb.com',
5713                 '.hehyv.com',
5714                 '.hepyt.com',
5715                 '.howoj.com',
5716                 '.jywaz.com',
5717                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5718                 '.kyheq.com',
5719                 '.kyzad.com',
5720                 '.qicad.com',
5721                 '.qubyd.com',
5722                 '.mocyq.com',
5723                 '.muloq.com',
5724                 '.myxim.com',
5725                 '.nufyp.com',
5726                 '.waqog.com',
5727                 '.wyduc.com',
5728                 '.xefyv.com',
5729                 '.xomej.com',
5730                 '.xomip.com',
5731                 '.xykyl.com',
5732                 '.zakuw.com',
5733                 '.zeliw.com',
5734                 '.zimev.com',
5735                 '.zipif.com',
5736
5737                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5738                 '.tycoco.com',
5739
5740                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5741                 '.pufeqa.com',
5742
5743                 '.xehymi.com',
5744         ),
5745         'niichka at hotmail.com' => array(
5746                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5747                 '.aerosearch.info',
5748                 '.freader.info',
5749                 '.info4searchz.info',
5750                 '.nice-host.info',
5751                 '.realyfast.info',
5752                 '.resuts.info',
5753
5754                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5755                 '.bepoh.com',
5756                 '.gufiq.com',
5757                 '.kedyh.com',
5758                 '.pofyb.com',
5759                 '.rurid.com',
5760                 '.vucaj.com',
5761                 '.vuwir.com',
5762
5763                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5764                 '.bejefe.com',
5765
5766                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5767                 '.tidawu.com',
5768
5769                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5770                 '.rofuqa.com',
5771         ),
5772         'porychik at hot.ee' => array(  // by Igor
5773                 '.tedstate.info',       // "Free Web Hosting"
5774                 '.giftsee.com',
5775         ),
5776         'admin at pertol.info' => array(
5777                 // 81.0.195.189 "Free Web Hosting"
5778                 '.laparka.cn',
5779                 '.mirlos.cn',
5780                 '.oldmoms.cn',
5781
5782                 // 217.11.233.64(timed-out)
5783                 '.ejmpep.cn',   // by admin at pertol.info
5784                 '.ytere.cn',    // by admin at x2t.com
5785
5786                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5787                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5788
5789                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5790                 '.new-greece-travel.com',
5791                 '.peraonline.info',
5792
5793                 '.barkman.cn',
5794         ),
5795
5796         'aofa at vip.163.com' => array(
5797                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5798                 '.5944.net',
5799         ),
5800         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5801                 '.maxrentcar.info',
5802                 '.newsonyericsson.info',
5803                 '.pornositeworld.biz',
5804                 '.rentcarweb.info',
5805                 '.xxxdomainsex.biz',
5806         ),
5807         'kopper1970 at gmail.com' => array(
5808                 '.cardealerall.info',           // by Green
5809                 '.donatecarsales.info',         // by Sipil
5810                 '.ringtonewilly.info',          // by Sipil
5811                 '.travelstraveling.info',       // by Chinik
5812                 '.viagrabuyonline.org',         // by Sipil
5813                 '.viagraorderbuy.com',          // by Anatol
5814                 '.worldcuptourism.info',        // by Sipil
5815         ),
5816         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5817                 '.globalinfoland.info',
5818                 '.goodlifesearch.info',
5819                 '.hotnetinfo.info',
5820                 '.hotpornmovies.org',
5821                 '.infopilot.info',
5822         ),
5823         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5824                 '.bang-bro.org',
5825                 '.datinghost.info',
5826                 '.hello-craulers.info',
5827                 '.free-blog-host.info',
5828                 '.sucking-boobs.info',
5829         ),
5830         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5831                 '.allcamsguide.info',
5832                 '.camerascams.info',
5833                 '.camerasera.info',
5834                 '.girlcamsworld.info',
5835                 '.hiddenlimocams.info',
5836                 '.redlivecams.info',
5837                 '.spycamsgear.info',
5838                 '.spycamssite.info',
5839                 '.supercamsusa.info',
5840                 '.thecamsnow.info',
5841         ),
5842         '87.242.116.81' => array(
5843                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5844                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5845                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5846                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5847                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5848         ),
5849         '208.70.75.153' => array(
5850                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5851                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5852                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5853                 '.cerc-on.info',
5854                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5855                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5856                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5857                 '.cerc-tr.info',
5858                 '.cerc-tw.info',
5859                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5860                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5861                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5862                 '.cerc-on.org',         // by cerca-one at ya.ru
5863                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5864                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5865                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5866                 '.cerc-tr.org',         // by cerca-one at ya.ru
5867                 '.cerc-tw.org',         // by cerca-one at ya.ru
5868                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5869                 '.cerca-fo.info',
5870                 '.cerca-no.info',
5871                 '.cerca-on.info',
5872                 '.cerca-sv.info',
5873                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5874                 '.cerca-te.info',
5875                 '.cerca-tr.info',
5876                 '.cerca-sx.org',
5877                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5878                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5879                 '.ricerca-fo.info',
5880                 '.ricerca-one.org',
5881                 '.ricerca-sv.org',
5882                 '.ricerca-sx.org',
5883                 '.ricerca-te.org',
5884                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5885                 '.subit01.org',
5886                 '.subit02.org',
5887                 '.subit03.org',
5888                 '.subit04.org',
5889                 '.subit05.org',
5890                 '.subit06.org',
5891                 '.subit01.info',
5892                 '.subit02.info',
5893                 '.subit03.info',
5894                 '.subit04.info',
5895                 '.subit05.info',
5896                 '.subit06.info',
5897         ),
5898         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5899                 '.5-base.com',
5900                 '.pharmacy-style.com',
5901         ),
5902         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5903                 '.ista-2006.ru',
5904                 '.wefas.ru',
5905         ),
5906         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5907                 '.tourismworldsite.info',
5908                 '.yourtourismtravel.info',
5909         ),
5910         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5911                 '.easyfindcar.info',
5912                 '.siteinfosystems.info',
5913         ),
5914         'smesh1155 at gmail.com' => array(
5915                 '.hospitalforyou.info',                 // by Gimmi
5916                 '.thephentermineonline.info',   // by Kipola
5917         ),
5918         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5919                 '.kiski.net.in',
5920                 '.pipki.org.in',
5921                 '.popki.ind.in',
5922                 '.siski.co.in',
5923         ),
5924         'tiptronikmike at mail.com' => array(
5925                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5926                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5927                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5928                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5929                 //'.i0sex.info',                // Michael
5930                 //'.i1sex.info',                // Michael
5931                 //'.i2sex.info',                // Martin
5932                 //'.i3sex.info',                // Martin
5933                 //'.i4sex.info',                // Adulterra
5934                 //'.i5sex.info',                // Adulterra
5935                 //[irvyz]6sex.info not found
5936                 '.i8sex.info',                  // by Martin
5937         ),
5938         'skuarlytronald at mail.com' => array(
5939                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5940                 '.girlsgoingmad.info',          // 64.27.13.120
5941                 '.girlsgonewildside.info',      // 64.27.13.120
5942         ),
5943         '66.232.109.250' => array(
5944                 '.1626pornporno.info',
5945                 '.1851pornporno.info',
5946                 '.1876pornporno.info',
5947                 '.476pornporno.info',
5948         ),
5949         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5950                 '.compactxxx.com',
5951                 '.eadulthost.com',
5952                 '.eadultview.com',
5953                 '.eroticpool.net',
5954                 '.ipornservice.com',
5955                 '.liveadulthost.com',
5956                 '.nudepal.com',
5957                 '.sweetservers.com',
5958         ),
5959         'support at orgija.org' => array(
5960                 '.assfuckporn.org',
5961                 '.dosugmos.org',
5962                 '.fuckporn.org',
5963                 '.girlsdosug.org',
5964                 '.girlsporno.org',
5965                 '.moscowintim.org',
5966                 '.pornass.org',
5967                 '.pornopussy.org',
5968                 '.progirlsporn.org',
5969                 '.pussypornogirls.org',
5970         ),
5971         '125.65.112.93' => array(
5972                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5973                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5974         ),
5975         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5976                 '.beta-google.com',
5977                 '.tv-reklama.info',
5978                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5979                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5980         ),
5981         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5982                 '.abobrinha.org',
5983                 '.aneurysmic.com',              // / not found
5984                 '.physcomp.org',                // / not found
5985                 '.seriedelcaribe2006.org',
5986                 '.refugeeyouthinamerica.com',
5987         ),
5988         'skip_20022 at yahoo.com' => array(
5989                 // 203.174.83.55
5990                 '.a28hosting.info',             // by Bill Jones
5991                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5992                 '.besthentai06.org',    // by yakon
5993         ),
5994         'USFINE.com' => array(
5995                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5996                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5997         ),
5998         '68.178.211.57' => array(
5999                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
6000                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
6001         ),
6002         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
6003                 '.google-yahoo-msn.org',
6004                 '.expedia-travel.org',
6005         ),
6006         'admin at newestsearch.com' => array(   // by Gibrel Sitce
6007                 '.emr5ce.org',
6008                 '.wfe7nv.org',
6009                 '.xyr99yx.org',
6010         ),
6011         '203.171.230.39' => array(
6012                 // by 51shell at 163.com
6013                 '.amatou-fc2.com',
6014
6015                 // registrar bizcn.com, iframe + cursor
6016                 '.playonlinenc.com',
6017                 '.playboss-jp.com',
6018         ),
6019         'Digi-Rock.com' => array(
6020                 '.rom776.com',
6021                 // owner-organization: DIGIROCK, INC.
6022                 // owner-email: domain-contact at digi-rock.com
6023                 // with an external ad-and-JavaScript,
6024                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6025                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6026         ),
6027         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6028                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6029                 '.getrun.cn',                           // 208.73.34.48
6030                 '.ipod-application.info',       // NO IP
6031                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6032                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6033         ),
6034         'germerts at yandex.ru' => array(
6035                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6036                 '.andatra.info',
6037                 '.banchitos.info',
6038                 '.batareya.info',
6039                 '.blevota.info',
6040                 '.broneslon.info',
6041                 '.gamadril.info',
6042                 '.gipotenuza.info',
6043                 '.govnosaklo.info',
6044                 '.muflon.info',
6045                 '.termitnik.info',
6046                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6047         ),
6048         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6049                 '.acronis-true-image.info',
6050                 '.calcio-xp.info',
6051                 '.cosanova.info',
6052                 '.cose-rx.info',
6053                 '.dictip.info',
6054                 '.findig.info',
6055                 '.fotonow.info',
6056                 '.lavoro-tip.info',
6057                 '.loan-homes.info',
6058                 '.mionovita.info',
6059                 '.mustv.info',
6060                 '.newsnaked.info',
6061                 '.online-tod.info',
6062                 '.opakit.info',
6063                 '.opanow.info',
6064                 '.opriton.info',
6065                 '.porta-bl.info',
6066                 '.refdif.info',
6067                 '.xzmovie.info',
6068         ),
6069         '84.252.148.120 etc' => array(
6070                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6071                 '.planetavilton.info',  // 84.252.148.120
6072                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6073         ),
6074         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6075                 '.99jk.com',
6076                 '.99jk.com.cn',
6077                 '.99jk.cn',
6078         ),
6079         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6080                 '.kliktop.biz',
6081                 '.kliktop.org',
6082                 '.pharmatop.us',
6083                 '.supertop.us',
6084                 '.supervaizer.info',
6085         ),
6086         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6087                 '.freeamateursexx.info',        // 81.0.195.228
6088                 '.freeanalsexx.info',           // 217.11.233.97
6089                 '.freegaysexx.info',            // 81.0.195.228
6090         ),
6091         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6092                 '.abbhi.info',
6093                 '.gayblogguide.biz',
6094                 '.huope.info',
6095                 '.thebdsmday.info',
6096                 '.zioprt.info',                 // 89.149.228.237
6097         ),
6098         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6099                 '.boblisk.info',
6100                 '.factyri.info',
6101                 '.jorge1.info',
6102         ),
6103         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6104                 '.bestmindstorm.org',
6105                 '.redstoreonline.org',
6106         ),
6107         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6108                 '.8e8ae.net',
6109                 '.c-cock.com',
6110                 '.fa59eaf.com',
6111                 '.set-place.net',
6112                 '.sex-beauty.net',
6113         ),
6114         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6115                 '.tomdir.info',
6116                 '.tomdirdirect.info',
6117                 '.tomdirworld.info',
6118                 '.treton.info',
6119                 '.trefas.info',
6120                 '.tretonmondo.info',
6121                 '.unefout.info',
6122                 '.unefoutprojet.info',
6123                 '.unitfree.info',
6124                 '.vilret.info',
6125                 '.vilttown.info',
6126                 '.votrefout.info',
6127                 '.warmfind.info',
6128                 '.warptop.info',
6129                 '.wildtram.info',
6130                 '.xofind.info',
6131                 '.xopdiscover.info',
6132                 '.xopfind.info',
6133                 '.xoplocate.info',
6134                 '.xopseek.info',
6135                 '.xpfirst.info',
6136                 '.xphighest.info',
6137                 '.xptop.info',
6138         ),
6139         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6140                 '.myviagrasite.com',    // 80.74.153.2
6141                 '.thecanadianmeds.com', // 80.74.153.17
6142         ),
6143         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6144                 '.bigemot.com',                         // 217.11.233.34, / not found
6145                 '.espharmacy.com',                      // 217.11.233.34
6146                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6147                 '.ringtonecooler.com',          // 217.11.233.34
6148         ),
6149         'dfym at dfym.cn' => array(
6150                 // ANI, JavaScript, iframe
6151
6152                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6153                 '.okwit.com',
6154                 '.sakerver.com',
6155                 '.motewiki.net',
6156
6157                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6158
6159                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6160
6161                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6162                 '.bbtv-chat.com',
6163                 '.ketubatle.com',
6164                 '.playonlanei.com',
6165                 '.rmtfcne.com',
6166
6167         ),
6168         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6169                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6170                 '.lookmedicine.info',           // 206.161.205.22
6171                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6172                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6173                 '.worldsitesearch.info',        // 209.8.40.59
6174         ),
6175         'lee.seery at gmail.com' => array(
6176                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6177                 '.lingvol.com',         // 64.21.34.55
6178                 '.micevol.com',         // 64.21.34.55
6179                 '.heyhey.info',         // 64.21.34.55  by anonymous
6180         ),
6181         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6182                 // 69-64-64-71.dedicated.abac.net
6183                 '.520-ard.info',
6184                 '.550bcards.info',
6185                 '.559-cads.info',
6186                 '.559caard.info',
6187                 '.565-caaard.info',
6188                 '.575cadr.info',
6189                 '.577cadrs.info',
6190                 '.590-acrds.info',
6191                 '.596-cadrs.info',
6192                 '.596caards.info',
6193                 '.596caaard.info',
6194                 '.asstablishingcads.info',
6195                 '.astablish-ard.info',
6196                 '.astablishcacrds.info',
6197                 '.begginers-acards.info',
6198                 '.begginersacrds.info',
6199                 '.beggingcaaard.info',
6200                 '.beginercacrds.info',
6201                 '.cacrdscreating.info',
6202                 '.caditbegging.info',
6203                 '.cadr-buildup.info',
6204                 '.cadr-establilsh.info',
6205                 '.cadrs-buildercredit.info',
6206                 '.cadrs570.info',
6207                 '.cads-565.info',
6208
6209                 // 69-64-64-113.dedicated.abac.net
6210                 '.interistacards.info',
6211                 '.intrust-ards.info',
6212                 '.intrustacrds.info',
6213                 '.lfixed-ard.info',
6214                 '.lowerate-ard.info',
6215                 '.lowpercentage-ard.info',
6216                 '.lowpercentageacrd.info',
6217         ),
6218         'acua at mail.ru' => array(
6219
6220                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6221
6222                         // by adventurer at allmyns.info
6223                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6224
6225                         // by webmaster at allmyns.info
6226                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6227                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6228                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6229                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6230                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6231                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6232                         '.riumh.cn',    // 84.16.226.28(*snip*)
6233                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6234                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6235                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6236
6237                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6238                 '.dns4babka.info',      // by acua at mail.ru
6239
6240                         // by golubcov at dns4babka.info
6241                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6242
6243                         // by webmaster at dns4babka.info
6244                         '.credh.cn',
6245                         '.fucfv.cn',
6246                         '.gdxnk.cn',
6247                         '.sqrrt.cn',
6248                         '.ywtmd.cn',
6249                         '.kncqy.cn',    // by webmaster at allmyns.info
6250
6251                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6252                 '.dedka2ns.info',       // by acua at mail.ru
6253
6254                         // by chasik at dedka2ns.info
6255                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6256
6257                         // by rochel at dedka2ns.info
6258                         '.fudhxjjqh.cn',
6259
6260                         // by webmaster at dedka2ns.info
6261                         '.ascpo.cn',
6262                         '.jgycr.cn',
6263                         '.nqdtt.cn',
6264                         '.oswde.cn',
6265                         '.qeyig.cn',
6266                         '.soqsx.cn',
6267                         '.ukncd.cn',
6268                         '.zijgb.cn',
6269
6270                 // 84.16.255.253(*snip*), / says 'noy found'
6271                 '.dns4dedka.info',      // by acua at mail.ru
6272
6273                         // by aleon at dns4dedka.info
6274                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6275
6276                         // by dig at dns4dedka.info
6277                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6278                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6279                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6280                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6281                         '.heulw.cn',    // 84.16.226.217(*snip*)
6282                         '.hissw.cn',    // 84.16.249.240(*snip*)
6283                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6284                         '.obwew.cn',    // 84.16.251.218(*snip*)
6285                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6286                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6287                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6288                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6289                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6290                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6291                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6292                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6293                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6294                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6295                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6296                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6297
6298                         // by la at dns4dedka.info
6299                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6300                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6301                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6302                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6303                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6304                         '.eothy.cn',    // 84.16.249.241(*snip*)
6305                         '.epocy.cn',    // 84.16.251.220(*snip*)
6306                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6307                         '.faacz.cn',    // 84.16.251.222(*snip*)
6308                         '.filun.cn',    // 89.149.196.72(*snip*)
6309                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6310                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6311                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6312                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6313                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6314                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6315                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6316                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6317                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6318                         '.krumo.cn',    // 84.16.226.217(*snip*)
6319                         '.lbava.cn',    // 217.20.112.102(*snip*)
6320                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6321                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6322                         '.npovm.cn',    // 84.16.226.28(*snip*)
6323                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6324                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6325                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6326                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6327                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6328                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6329                         '.qydph.cn',    // 89.149.228.163(*snip*)
6330                         '.rxens.cn',    // 89.149.196.72(*snip*)
6331                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6332                         '.srths.cn',    // 84.16.251.222(*snip*)
6333                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6334                         '.unquz.cn',    // 84.16.251.223(*snip*)
6335                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6336                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6337                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6338                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6339                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6340                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6341
6342                         // by le at dns4dedka.info
6343                         '.goslw.cn',    // 84.16.251.220(*snip*)
6344                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6345                         '.iewik.cn',    // 84.16.255.254(*snip*)
6346                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6347                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6348                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6349                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6350                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6351                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6352                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6353                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6354                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6355                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6356                         '.qniww.cn',    // 84.16.251.218(*snip*)
6357                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6358                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6359
6360                         // by skspb at dns4dedka.info
6361                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6362
6363                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6364                         '.bcpnb.cn',
6365                         '.cfbpr.cn',
6366                         '.dnndb.cn',
6367                         '.ekwme.cn',
6368                         '.iutps.cn',
6369                         '.ryftj.cn',
6370                         '.vxqcb.cn',
6371
6372                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6373                         // by apple at ns2best.info
6374                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6375                         // by paulwolf at ns2best.info
6376                         '.ifytzq.cn',
6377
6378                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6379                         // by pigato at sedns.info
6380                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6381                         // by roschem at sedns.info
6382                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6383                         // by op at sedns.info
6384                         '.bumfn.cn',
6385                         '.csmlu.cn',
6386                         '.epcwi.cn',
6387                         '.krwzn.cn',
6388                         '.lkvcp.cn',
6389                         '.mvmkh.cn',
6390                         '.nwpeg.cn',
6391                         '.rnqol.cn',
6392                         '.tyuaf.cn',
6393                         '.ucysa.cn',
6394                         '.vhyom.cn',
6395                         '.wtstu.cn',
6396                         '.zslxr.cn',
6397         ),
6398         'gilvcta sy jilbertsbram.com' => array(
6399                 // 206.53.51.126
6400                 '.dsfljkeilm1.cn',
6401                 '.dsfljkeilm2.cn',
6402                 '.dsfljkeilm3.cn',
6403                 '.dsfljkeilm4.cn',
6404                 '.dsfljkeilm5.cn',
6405                 '.dsfljkeilm6.cn',
6406                 '.dsfljkeilm7.cn',
6407                 '.dsfljkeilm8.cn',
6408                 '.dsfljkeilm9.cn',
6409                 '.dsfljkeilm10.cn',
6410         ),
6411         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6412
6413                 // 69.64.82.76(*.dedicated.abac.net)
6414                 '.bruised-criedit.info',
6415                 '.bruised-crtedit.info',
6416                 '.bruised-czrd.info',
6417                 '.bruisedcreditcars.info',
6418                 '.bruisedcreitcard.info',
6419                 '.bruisedcreitd.info',
6420                 '.buliderscreadet.info',
6421                 '.cleaningup-cdit.info',
6422                 '.cleaningup-cedict.info',
6423                 '.cleaningup-cerdic.info',
6424                 '.cleanup-crrd.info',
6425
6426                 // 69.64.82.77(*.dedicated.abac.net)
6427                 '.bruised-crediot.info',
6428                 '.bruised-credtid.info',
6429                 '.bruisedcriet.info',
6430                 '.bruisedredit.info',
6431                 '.buliders-crdt.info',
6432                 '.buliders-cre4dit.info',
6433                 '.buliders-creadt.info',
6434                 '.buliders-credcards.info',
6435                 '.buliders-credictcard.info',
6436                 '.cleaningupccreditcards.info',
6437                 '.cleaningupcdedit.info',
6438                 '.cleaningupcedirt.info',
6439                 '.cleaningupceidt.info',
6440                 '.cleaningupcrasd.info',
6441                 '.cleaningupcreait.info',
6442
6443                 // 69.64.82.78(*.dedicated.abac.net)
6444                 '.bruised-cridet.info',
6445                 '.bruised-drecit.info',
6446                 '.bruised-reditcards.info',
6447                 '.bruisedcredikt.info',
6448                 '.bruisedcredith.info',
6449                 '.bruisedcredtid.info',
6450                 '.cleanup-criet.info',
6451                 '.cleanup-csrds.info',
6452                 '.cleanup-dards.info',
6453
6454                 // 69.64.82.79(*.dedicated.abac.net)
6455                 '.bruised-crediotcards.info',
6456                 '.bruised-creditcar.info',
6457                 '.bruised-creid.info',
6458                 '.bruised-creidtcard.info',
6459                 '.buliders-crdit.info',
6460                 '.buliders-creadet.info',
6461                 '.cleaningup-ceridt.info',
6462                 '.cleaningupcrecit.info',
6463                 '.cleaningupccritcard.info',
6464                 '.cleanupdredit.info',
6465                 '.cleanupredit.info',
6466         ),
6467         '.malwarealarm.com',
6468                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6469                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6470                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6471         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6472         'Inet-Traffic.com' => array(
6473                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6474                 //'.dcomm.com',         // by D Communications Inc. S.A.
6475
6476                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6477                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6478                 // ...
6479                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6480                 // ...
6481                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6482                 // ...
6483                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6484                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6485                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6486                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6487                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6488                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6489                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6490                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6491                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6492                 // ...
6493                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6494                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6495                 // ...
6496                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6497                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6498                 // ...
6499                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6500                 // ...
6501                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6502                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6503                 // ...
6504                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6505         ),
6506         'andreyletov at yahoo.com related' => array(
6507                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6508                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6509                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6510
6511                 // 89.248.99.118 by anonymous
6512                 '.lpgpharmacy.com',
6513                 '.onlybestgalleries.com',
6514                 '.viagrabest.info',
6515                 '.viagrabestprice.info',
6516                 '.viagratop.info',
6517
6518                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6519                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6520                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6521         ),
6522         'alrusnac at hotmail.com' => array(
6523                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6524                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6525         ),
6526         '203.116.63.123' => array(
6527                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6528                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6529         ),
6530         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6531                 '.autotowncar.cn',              // 69.73.146.184
6532                 '.badgirlhome.cn',              // 69.73.146.186
6533         ),
6534         'Wmp.co.jp' => array(
6535                 // 219.94.134.208, ns *.dns.ne.jp, adult
6536                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6537                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6538                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6539         ),
6540         'Macherie.tv' => array(
6541                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6542                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6543                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6544         ),
6545         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6546                 '.yemine.info',
6547                 '.fr4f3ds.info',
6548         ),
6549         '75.126.129.222' => array(
6550                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6551                 '.viagrabuycheap.info', // ns *.advernsserver.com
6552                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6553         ),
6554         'sqr at bk.ru' => array(
6555                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6556                 '.masserch.info',               // "Free Web Hosting", spam
6557                 '.miserch.info',
6558         ),
6559         'gangstadra at hotmail.com' => array(
6560                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6561                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6562                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6563                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6564         ),
6565         'hosan by front.ru' => array(
6566                 '.salihome.info',                               // 206.53.51.155(non-existent)
6567                 '.online-freesearch.com',               // 206.53.51.155
6568                 '.choosefinest.com',                    // 206.53.51.157
6569                 '.carsprojects.com',                    // 206.53.51.159
6570                 '.sport-brands.com',                    // 206.53.51.167
6571                 '.online-pharmaceutics.com',    // 206.53.51.168
6572         ),
6573         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6574                 '.canadians-health.com',        // by andreyletov at yahoo.com
6575                 '.cialischeap.info',
6576                 '.superrv.info',
6577         ),
6578         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6579                 '.hatbi.com',
6580                 '.justrty.com',
6581                 '.kol2you.com',
6582                 '.kolplanet.com',
6583                 '.myrty.com',
6584                 '.officialrty.com',
6585                 '.pbaol.com',
6586                 '.planetkol.com',
6587         ),
6588         'Abra1.com' => array(
6589                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6590                 '.abra1.com',           // by info at maisontropicale.com
6591                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6592
6593                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6594                 '.abra2.com',           // by domain at anondns.org
6595                 '.abra3.com',           // by domain at anondns.org
6596         ),
6597         'topdomainz at gmail.com' => array(
6598                 // 217.73.201.237 , ns *.parked.ru
6599                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6600                 '.aboutgooglegroup.info',
6601                 '.aboutgoogleimage.info',
6602                 '.aboutgooglemail.info',
6603                 '.aboutgooglemap.info',
6604                 '.aboutgooglenews.info',
6605                 '.aboutgooglevideo.info',
6606                 '.bestgoogleearth.info',
6607                 '.magicgoogleearth.info',
6608                 '.magicgooglemap.info',
6609                 '.magicgooglevideo.info',
6610
6611                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6612                 '.slajzer.info',
6613                 '.tonoscelular.info',
6614                 '.tonosmotorola.info',
6615         ),
6616         'Anderson at extra.by' => array(
6617                 // Encoded JavaScript
6618
6619                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6620                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6621                 '.6dir.info',
6622                 '.8dir.info',
6623                 '.9dir.info',
6624                 '.2pro.info',
6625                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6626                 '.6pro.info',
6627                 '.7pro.info',
6628                 '.8pro.info',
6629                 '.9pro.info',
6630                 '.5sms.info',
6631                 '.6sms.info',
6632                 '.8sms.info',
6633                 '.9sms.info',
6634                 '.1upp.info',
6635                 '.2upp.info',
6636                 '.3upp.info',
6637                 '.4upp.info',
6638                 '.5upp.info',
6639                 '.6upp.info',
6640                 '.7upp.info',
6641                 '.8upp.info',
6642                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6643                 '.2vip.info',   // by Anderson at extra.by
6644                 '.4vip.info',
6645                 '.5vip.info',
6646                 '.6vip.info',
6647                 '.7vip.info',
6648                 '.8vip.info',   // ns *.9upp.info
6649                 '.9vip.info',
6650
6651                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6652                 '.w3rar.info',
6653                 '.w3sex.info',
6654                 '.w3zip.info',
6655                 '.w3in.info',
6656                 '.w3out.info',
6657         ),
6658         'zorkin87 at mail.ru' => array(
6659                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6660                 '.ruqore.com',
6661                 '.goxama.com',
6662                 '.cazebi.com',
6663                 '.fukeqa.com',
6664                 '.fydoge.com',
6665                 '.jukaly.com',
6666                 '.jumoga.com',
6667                 '.jumuxo.com',
6668                 '.tyriva.com',
6669                 '.vudyho.com'
6670         ),
6671         'jessicaeagloff at yahoo.co.uk' => array(
6672                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6673                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6674                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6675                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6676         ),
6677         'qbbs at xinoffice.com' => array(
6678                 // ns *.name-services.com
6679                 '.lingage.com',         // 8.15.231.118
6680                 '.puksins.com',         // IP not allocated now
6681         ),
6682         'advertolog at gmail.com' =>
6683                 // 81.0.250.86(network.upl.cz => non-existent) or
6684                 // 217.11.233.27
6685                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6686         'contact at aboutdomain.com' => array(
6687                 '.lopieur0.com',        // Not match but used
6688                 '.lopieur1.com',        // Not match but used
6689                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6690         ),
6691         'info at cash4wm.biz related' => array(
6692                 // 84.16.233.12(*.internetserviceteam.com)
6693                 '.newsblogforu.com',
6694
6695                 // 84.16.235.141()
6696                 '.informator4you.com',
6697
6698                 // 84.16.240.68(*.internetserviceteam.com)
6699                 '.absolute-best-site.com',
6700                 '.new-blog-for-you.com',
6701
6702                 // 84.16.240.69(*.internetserviceteam.com)
6703                 '.best-sport-blog.com',
6704                 '.big-internet-site.com',
6705                 '.brendsite.com',
6706                 '.my-news-blog.com',
6707
6708                 // 84.16.242.123(*.internetserviceteam.com)
6709                 '.best-news-blog.com',
6710                 '.site-with-content.com',
6711
6712                 // The same method with info at cash4wm.biz
6713                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6714                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6715                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6716                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6717                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6718                 '.bloginfo4u.info',             // 89.149.247.25
6719         ),
6720         'kerjy at yahoo.com' => array(
6721                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6722                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6723                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6724                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6725                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6726         ),
6727         'vme at hotmail.ru' => array(
6728                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6729                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6730         ),
6731         'john at hellomyns.info' => array(
6732                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6733                 '.byouz.cn',            // 89.149.247.24, / nothing
6734                 '.idghc.cn',
6735                 '.inxrj.cn',
6736                 '.jqzdf.cn',
6737                 '.vsxej.cn',
6738                 '.wkgnr.cn',
6739         ),
6740         '.CN spam payload' => array(
6741                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6742                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6743                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6744                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6745                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6746                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6747                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6748                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6749                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6750                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6751         ),
6752         'Time2ns.info' => array(
6753                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6754                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6755                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6756                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6757                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6758         ),
6759         'Ilovemyns.info' => array(
6760                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6761                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6762         ),
6763         'Freehostdns.info' => array(
6764                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6765                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6766                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6767         ),
6768         'Newns4me.info' => array(
6769                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6770                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6771         ),
6772
6773         // C-2: Lonely domains (buddies not found yet)
6774         '.0721-4404.com',
6775         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6776         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6777         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6778         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6779         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6780         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6781         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6782         '.0annie.info',
6783         '.6i6.de',
6784         '.77toperrwuter1.info', // by Roman
6785         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6786         '.angioco.com',                 // 62.37.112.100, gamble
6787         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6788         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6789         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6790         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6791         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6792         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6793         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6794         '.allworlddirect.info', // Forbidden
6795         '.amoreitsex.com',
6796         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6797         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6798         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6799         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6800         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6801         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6802         '.auto-car-cheap.org',
6803         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6804         '.baurish.info',
6805         '.bernardtomic21.info', // by filboj at hotmail.com
6806         '.bestop.name',
6807         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6808         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6809         '.bestshopfinder.info',
6810         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6811         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6812         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6813         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6814         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6815         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6816         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6817         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6818         '.catkittenmagazines.org',              // 87.118.97.117
6819         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6820         '.chatwalker.com',              // 124.32.230.65
6821         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6822         '.covertarena.co.uk',   // by Wayne Huxtable
6823         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6824         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6825         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6826         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6827         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6828         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6829         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6830         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6831         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6832         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6833         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6834         '.easyshopusa.com',             // by riter (riter at nm.ru)
6835         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6836         '.edu.ph',                              // "philippine network foundation inc"
6837         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6838         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6839         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6840         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6841         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6842         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6843         '.filthserver.com',             // sales at onlinemarketingservices.biz
6844         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6845         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6846         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6847         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6848         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6849         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6850         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6851         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6852         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6853         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6854         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6855         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6856         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6857         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6858         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6859         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6860         '.gm-exchange.jp',              // 210.188.216.49 RMT
6861         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6862         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6863         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6864         '.greatbestwestern.org',// by gao.wungao at gmail.com
6865         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6866         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6867         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6868         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6869         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6870         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6871         '.hostuju.cz',                  // ns banan.cz, banan.it
6872         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6873         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6874         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6875         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6876         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6877         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6878         '.infradoc.com',
6879         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6880         '.ismarket.com',                // Google-hiding. intercage.com related IP
6881         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6882         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6883         '.itsexosit.net',
6884         '.itxxxit.net',
6885         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6886         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6887         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6888         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6889         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6890         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6891         '.kingtools.de',
6892         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6893         '.leucainfo.com',
6894         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6895         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6896         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6897         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6898         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6899         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6900         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6901         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6902         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6903         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6904         '.megvideochatlive.info',       // Bad seo
6905         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6906         '.mncxvsm.info',                // 217.11.233.105, / blank
6907         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6908         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6909         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6910         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6911         '.mxsupportmailer.com',
6912         '.next-moneylife.com',  // RMT
6913         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6914         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6915         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6916         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6917         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6918         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6919         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6920         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6921         '.onlineviagra.de',
6922         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6923         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6924         '.ozomw.info',
6925         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6926         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6927         '.perevozka777.ru',             // by witalik at gmail.com
6928         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6929         '.pills-storage.com',   // by
6930         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6931         '.porkyhost.com',               // 79965 at whois.gkg.net
6932         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6933         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6934         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6935         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6936         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6937         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6938         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6939         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6940         '.quality-teen-porn-photo.com', // by info at densa.info
6941         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6942         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6943         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6944         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6945         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6946         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6947         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6948         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6949         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6950         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6951         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6952         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6953         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6954         '.sexamoreit.com',
6955         '.sexforit.com',
6956         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6957         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6958         '.sirlook.com',
6959         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6960         '.sepcn.info',                  // / not found
6961         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6962         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6963         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6964         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6965         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6966         '.superverizonringtones.com',   // by joshua at list.ru
6967         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6968         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6969         '.thehostcity.com',             // Domains by Proxy
6970         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6971         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6972         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6973         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6974         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6975         '.topmeds10.com',
6976         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6977         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6978         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6979         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6980         '.unctad.net',                  // by gfdogfd at lovespb.com
6981         '.vacant.org.uk',
6982         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6983         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6984         '.virtualsystem.de',
6985         '.vdxhost.com',
6986         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6987         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6988         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6989         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6990         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6991         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6992         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6993         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6994         '.whoop.to',                    // RMT
6995         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6996         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6997         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6998         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6999         '.wwwna.info',                  // / 404 Not Found
7000         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
7001         '.xamorexxx.net',
7002         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
7003         '.xsessox.com',
7004         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
7005         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
7006         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
7007         '.zyguo.info',                  // ns globoxhost.net
7008         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
7009
7010
7011         // C-3: Not classifiable (information wanted)
7012         //
7013         // Something incoming to pukiwiki related sites
7014         'nana.co.il related' => array(
7015                 '.planetnana.co.il',
7016                 '.nana.co.il',
7017         ),
7018 );
7019
7020 // --------------------------------------------------
7021
7022 $blocklist['D'] = array(
7023         // D: Sample setting of
7024         // "Third party in good faith"s
7025         //
7026         // Hosts shown inside of the implanted contents,
7027         // not used via spam, but maybe useful to detect these contents
7028         //
7029         // 'RESERVED',
7030 );
7031
7032 // --------------------------------------------------
7033
7034 $blocklist['E'] = array(
7035         // E: Sample setting of
7036         // Promoters
7037         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7038         //  Ads, Business promotions, SEO, etc)
7039         //
7040         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7041         // Sometimes they may promote each other
7042
7043         '15-Mail.com related' => array(
7044                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7045                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7046                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7047                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7048                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7049         ),
7050         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7051         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7052         'E-brainers.com related' => array(
7053                 // 202.212.14.101
7054                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7055                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7056                 '.my-tune.jp',                                  // by brainers Inc.
7057                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7058                 '.weekle.jp',                                   // by brainers Inc.
7059
7060                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7061                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7062                 '.3minutes-marketing-club.com', // by Fujio
7063                 '.affiliate-vampire.com',               // by Masatoshi
7064                 '.article-site-power-package.com',      // by Masatoshi
7065                 '.audio-marketing-club.com',    // by Fujio
7066                 '.brainers-task-manager.com',   // by Masatoshi
7067                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7068                 '.brainersbuzz.com',                    // by Masatoshi
7069                 '.den4renz-marketing-club.com', // by Fujio
7070                 '.english-contents-club.com',   // by Masatoshi
7071                 '.fly-in-ads-japan.com',                // by Fujio
7072                 '.free-resalerights-giveaway.com',      // by Fujio
7073                 '.freegiveawaysecret.com',              // by Masatoshi
7074                 '.guaranteedvisitorpro.com',    // by Masatoshi
7075                 '.havads-japan.com',                    // by Masatoshi
7076                 '.info-business123.com',                // by Fujio
7077                 '.instant-marketing-club.com',  // by Fujio
7078                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7079                 '.marketing-force-japan.com',   // by Fujio
7080                 '.masatoshikobayashi.com',              // by Fujio
7081                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7082                 '.replytomatt.com',                             // by Fujio
7083                 '.santa-deal.com',                              // by Fujio
7084                 '.santa-deal-summer.com',               // by Fujio
7085                 '.scratch-card-factory.com',    // by Masatoshi
7086                 '.script4you-japan.com',                // by Fujio
7087                 '.sell1000000dollarinjapan.com',// by Fujio
7088                 '.squeeze-page-secret.com',             // by Masatoshi
7089                 '.viral-blog-square.com',               // by Fujio
7090                 '.viralarticle.com',                    // by Fujio
7091                 '.wowhoken.com',                                // by Fujio
7092
7093                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7094                 '.brainerstelevision.com',
7095                 '.demosite4you.com',
7096                 '.keywordcatcherpro.com',
7097                 '.script-marketing-club.com',
7098
7099                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7100                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7101                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7102                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7103                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7104                 '.brainerscode.com',    // by akada
7105                 '.brainerslive.com',    // by domain
7106                 '.brainersreview.com',  // by domain
7107                 '.brainerstest.com',    // by akada
7108                 '.otosecret.com',               // by domain
7109                 '.ultimate-marketing-weapon.com',       // by akada
7110                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7111                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7112
7113                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7114                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7115         ),
7116         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7117         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7118         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7119         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7120         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7121                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7122                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7123                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7124
7125                 // Redirects and affiliates:
7126                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7127                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7128                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7129                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7130                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7131                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7132                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7133                 //   ...
7134
7135                 // Other suggestions:
7136                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7137
7138                 // Blog posting at the same time
7139                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7140                 //   2007/06/13 e123.info/archives/76
7141                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7142                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7143                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7144         ),
7145         'info at kobeweb.jp' => array(
7146                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7147                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7148                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7149         ),
7150         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7151         'Infocart.jp' => array(         // by wai at infocart.jp
7152                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7153                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7154                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7155
7156                 //inetnum:      60.32.154.176 - 60.32.154.183
7157                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7158                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7159         ),
7160         'Info-sniper.com' => array(
7161                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7162                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7163                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7164         ),
7165         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7166         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7167         'JunSuzuki.com' => array(       // e-brainers.com related
7168                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7169                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7170         ),
7171         'Natsukih.net' => array(
7172                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7173                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7174                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7175                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7176
7177                 // by info at natsukih.net
7178                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7179                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7180                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7181                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7182                 '.5muryoureport.com',   // 210.251.253.230
7183                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7184                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7185                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7186         ),
7187         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7188                 '.11kanji.com',         // 211.10.131.88
7189                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7190                 '.point-park.com',      // 211.10.131.88
7191                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7192         ),
7193         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7194         'PRJAPAN.co.jp' => array(
7195                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7196                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7197                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7198                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7199                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7200                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7201         ),
7202         'Rakuten.co.jp' => array(
7203                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7204                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7205         ),
7206         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7207         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7208         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7209         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7210                 '.e123.info',
7211                 '.ialchemist.net',
7212                 '.j012.net',
7213                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7214         ),
7215         'Viscose.jp' => array(
7216                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7217                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7218         ),
7219         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7220 );
7221
7222 // --------------------------------------------------
7223
7224 $blocklist['Z'] = array(
7225         // Z: Yours
7226         //
7227         //'',
7228         //'',
7229         //'',
7230 );
7231
7232 ?>