spam/spam.ini.php

   1 <?php
   2 // $Id: spam.ini.php,v 1.190 2008/05/20 17:49:35 teanan Exp $
   3 // Spam-related setting
   4
   5 // NOTE FOR ADMINISTRATORS:
   6 //
   7 // Host selection:
   8 //   [1] '.example.org'  prohibits ALL "example.org"-related FQDN
   9 //   [2] '*.example.org' prohibits ONLY subdomains and hosts, EXCEPT "www.example.org"
  10 //   [3] 'example.org'   prohibits BOTH "example.org" and "www.example.org"
  11 //   (Now you know, [1] = [2] + [3])
  12 //
  13 // How to write multiple hosts as an group:
  14 //  'Group Name' => array('a.example.org', 'b.example.com', 'c.example.net'),
  15 //
  16 // How to write regular expression:
  17 //  'Group Name' => '#^(?:.*\.)?what-you-want\.com$#',
  18 //
  19 // Guideline to keep group names unique:
  20 //   - Using capitalized letters, spaces, commas (etc) may suggest you
  21 //     that probably be a group.
  22 //   - Unique word examples:
  23 //     [1] FQDN
  24 //     [2] Mail address of the domain-name owner
  25 //     [3] IP address, if these hosts have the same ones
  26 //     [4] Something unique idea of you
  27 //
  28 // Reference:
  29 //   http://en.wikipedia.org/wiki/Spamdexing
  30 //   http://en.wikipedia.org/wiki/Domainers
  31 //   http://en.wikipedia.org/wiki/Typosquatting
  32
  33
  34 // --------------------------------------------------
  35 // List of the lists
  36
  37 //  FALSE       = ignore them
  38 //  TRUE        = catch them
  39 //  Commented out of the line = do nothing about it
  40
  41 // 'pre': Before the other filters/checkers
  42 $blocklist['pre'] = array(
  43         'goodhost'      => FALSE,
  44 );
  45
  46 // 'list': Normal list
  47 $blocklist['list'] = array(
  48         'A-1'           => TRUE,        // General redirection services
  49         //'A-2'         => TRUE,        // Dynamic DNS, Dynamic IP services, ...
  50         'B-1'           => TRUE,        // Web N.M spaces
  51         'B-2'           => TRUE,        // Jacked contents, something implanted
  52         'C'                     => TRUE,        // Exclusive spam domains
  53         //'D'           => TRUE,        // "Third party in good faith"s
  54         'E'                     => TRUE,        // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
  55         'Z'                     => TRUE,        // Yours
  56 );
  57
  58
  59 // --------------------------------------------------
  60
  61 $blocklist['goodhost'] = array(
  62         // Sample setting of ignorance list
  63
  64         'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
  65
  66         // PukiWiki-official/dev specific
  67         //'pukiwiki.sourceforge.jp',
  68         //'pukiwiki.org',       // Temporary
  69         //'.logue.tk',  // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
  70         //'.nyaa.tk',   // (Paid *.tk domain, Expire on 2008-05-19)
  71         //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
  72         //'emasaka.blog65.fc2.com',     // Text-to-Impress converter
  73         //'ifastnet.com',                               // Server hosting
  74         //'threefortune.ifastnet.com',  // Server hosting
  75         //'sirakaba.s21.xrea.com',              // Ratbeta, known as PukiWiki hacker
  76         //'desperadoes.biz',                    // YEAR OF THE CAT, PukiWiki skin designer
  77         //''
  78         //''
  79         //''
  80
  81 );
  82
  83 // --------------------------------------------------
  84 // A: Sample setting of
  85 // Existing URI redirection or masking services
  86
  87 $blocklist['A-1'] = array(
  88
  89         // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
  90         // web-based proxy, DNS subdomains, etc
  91         // http://en.wikipedia.org/wiki/URL_redirection
  92         //
  93         // as known as cheap URI obscuring services today,
  94         // for spammers and affiliate users dazed by money.
  95         //
  96         //   Messages from forerunners:
  97         //     o-rly.net
  98         //       "A URL REDIRECTION SERVICE GONE BAD"
  99         //       "SORRY, TRULY"
 100         //     smcurl.com
 101         //       "Idiots were using smcURL to shrink URLs and
 102         //        send them out via spam."
 103         //     tinyclick.com
 104         //       "...stop offering it's free services because
 105         //        too many people were taking advantage of it"
 106         //     xjs.org
 107         //       "We have been forced to close this facility
 108         //        due to a minority of knuckle draggers who
 109         //        abused this web site."
 110         //
 111         // Please notify us about this list with reason:
 112         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/207
 113         //
 114         '0nz.org',
 115         '0rz.tw',
 116         '0url.com',
 117         '0zed.info',
 118         '*.110mb.com',  // by Speed Success, Inc. (110mb.server at gmail.com)
 119         '123.que.jp',
 120         '12url.org',
 121         '*.15h.com',
 122         '*.1dr.biz',
 123         '1K.pl' => array(
 124                 '*.1k.pl',
 125                 '*.5g.pl',
 126                 '*.orq.pl',
 127         ),
 128         '1nk.us',
 129         '1url.org',
 130         '1url.in',
 131         '1webspace.org',
 132         '2Ch.net' => array(
 133                 'ime.nu',
 134                 'ime.st',
 135         ),
 136         '2ch2.net',
 137         '2hop4.com',
 138         '2s.ca',
 139         '2site.com',
 140         '2url.org',
 141         '301url.com',
 142         '32url.com',
 143         '.3dg.de',
 144         '*.4bb.ru',
 145         'big5.51job.com',       ///gate/big5/
 146         '5jp.net',
 147         '.6url.com',
 148         '*.6x.to',
 149         '7ref.com',
 150         '82m.org',
 151         '*.8rf.com',
 152         '98.to',
 153         'abbrv.co.uk',
 154         '*.abwb.org',
 155         'acnw.de',
 156         'Active.ws' => array(
 157                 '*.321.cn',
 158                 '*.4x2.net',
 159                 'active.ws',
 160                 '*.better.ws',
 161                 '*.here.ws',
 162                 '*.mypiece.com',
 163                 '*.official.ws',
 164                 '*.ouch.ws',
 165                 '*.premium.ws',
 166                 '*.such.info',
 167                 '*.true.ws',
 168                 '*.visit.ws',
 169         ),
 170         'affilitool.com',               // 125.206.117.91(right-way.org) by noboru hamada (info at isosupport.net)
 171         'aifam.com',
 172         'All4WebMasters.pl' => array(
 173                 '*.ovp.pl',
 174                 '*.6-6-6.pl',
 175         ),
 176         'babelfish.altavista.com',      ///babelfish/trurl_pagecontent
 177         'amoo.org',
 178         'web.archive.org',              ///web/2
 179         'Arzy.net' => array(    // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
 180                 'jmp2.net',
 181                 '2me.tw',
 182         ),
 183         'ataja.es',
 184         'ATBHost.com' => array(
 185                 '*.atbhost.com',
 186                 '*.bzhost.net',
 187         ),
 188         'atk.jp',
 189         'clearp.ath.cx',
 190         'athomebiz.com',
 191         'aukcje1.pl',
 192         'beam.to',
 193         '*.bebo.com',
 194         'beermapping.com',
 195         'besturl.in',
 196         'bhomiyo.com',          ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
 197         'biglnk.com',
 198         'bingr.com',
 199         'bittyurl.com',
 200         '*.bizz.cc',
 201         '*.blo.pl',
 202         '*.bo.pl',
 203         'briefurl.com',
 204         'brokenscript.com',
 205         'BucksoGen.com' => array(
 206                 '*.bucksogen.com',
 207                 '*.bulochka.org',
 208                 '*.korzhik.org',
 209                 '*.kovrizhka.org',
 210                 '*.pirozhok.org',
 211                 '*.plushka.org',
 212                 '*.pryanik.org',
 213                 '*.sushka.org',
 214         ),
 215         'budgethosts.org',
 216         'budu.com',                             // by peter.eder at imcworld.com
 217         '*.buzznet.com',
 218         '*.bydl.com',
 219         'C-O.IN' => array(
 220                 '*.c-o.cc',
 221                 '*.c-o.in',
 222                 '*.coz.in',
 223                 '*.cq.bz',
 224         ),
 225         'c64.ch',
 226         'c711.com',
 227         '*.cej.pl',
 228         'checkasite.net',
 229         'url.chefhost.com',
 230         '*.chicappa.jp',
 231         'chilicity.com',
 232         'big5.china.com',               ///gate/big5/
 233         'chopurl.com',
 234         'christopherleestreet.com',
 235         'cintcm.com',
 236         '*.cjb.net',
 237         'clipurl.com',
 238         '*.co.nr',
 239         'Comtech Enterprises ' => array(        // comteche.com
 240                 'tinyurl.name',
 241                 'tinyurl.us',
 242         ),
 243         'Cool168.com' => array(
 244                 '*.cool158.com',
 245                 '*.cool168.com',
 246                 '*.ko168.com',
 247                 '*.ko188.com',
 248         ),
 249         'Coolurl.de' => array(
 250                 'coolurl.de',
 251                 'dornenboy.de',
 252                 'eyeqweb.com',
 253                 'hardcore-porn.de',
 254                 'maschinen-bluten-nicht.de',
 255         ),
 256         'copyme.org',           // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
 257         'cutalink.com',
 258         '*.da.cx',
 259         '*.da.ru',
 260         'dae2.com',
 261         'dephine.org',
 262         'desiurl.com',
 263         'dhurl.com',
 264         'digbig.com',
 265         'Digipills.com' => array(
 266                 '*.digipills.com',
 267                 'minilien.com',
 268                 'tinylink.com',
 269         ),
 270         '*.discutbb.com',
 271         'DL.AM' => array(
 272                 '*.cx.la',
 273                 '*.dl.am',
 274         ),
 275         '*.dl.pl',
 276         '*.dmdns.com',
 277         'doiop.com',
 278         'drlinky.com',
 279         'durl.us',
 280         '*.dvdonly.ru',
 281         '*.dynu.ca',
 282         'dwarf.name',
 283         '*.eadf.com',
 284         'easyURL.net' => array(
 285                 '*.easyurl.net',
 286                 '.goshrink.com',
 287                 'ushrink.com',
 288         ),
 289         'easyurl.jp',   // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
 290                 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
 291                 // This service seems to be opened at 2007/08/23 with "beta" sign.
 292                 // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
 293                 //   "Keep continuing to seek originality and contribute it to local,
 294                 //    get/grow niche brands (in local), believe (local) people knows the answer,
 295                 //    observe (local) rule, create nothing to infringe (local) rule, keep 70% of
 296                 //    engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
 297                 // I'm so much impressed of the situation around this imported one today.
 298         'elfurl.com',
 299         'eny.pl',
 300         'eTechFocus LLC' => array(      // by eTechFocus LLC (thomask at etechfocus.com)
 301                 '.mywiitime.com',
 302                 '.surfindark.com',              // webmaster at etechfocus.com
 303                 '.surfinshade.com',
 304                 '.surfinshadow.com',
 305                 '.surfinwind.com',
 306                 '.topsecretlive.com',
 307         ),
 308         '*.eu.org',
 309         'F2B.be' => array(
 310                 '*.f2b.be',
 311                 '*.freakz.eu',
 312                 '*.n0.be',
 313                 '*.n3t.nl',
 314                 '*.short.be',
 315                 '*.ssr.be',
 316                 '*.tweaker.eu',
 317         ),
 318         '*.fancyurl.com',
 319         'Fanznet.jp' => array(  // by takahashi nakaba (nakaba.takahashi at gmail.com)
 320                 'blue11.jp',
 321                 'fanznet.com',
 322                 'katou.in',
 323                 'mymap.in',
 324                 'saitou.in',
 325                 'satou.in',
 326                 'susan.in',
 327         ),
 328         '.fe.pl',                       // Redirection and subdomain
 329         'ffwd.to',
 330         'url.fibiger.org',
 331         'FireMe.to' => array(
 332                 'fireme.to',
 333                 'nextdoor.to',
 334                 'ontheway.to',
 335         ),
 336         'flingk.com',
 337         'flog.jp',                      // careless redirector and bbs
 338         'fm7.biz',
 339         'fnbi.jp',
 340         '*.fnbi.jp',
 341         'forgeturl.com',
 342         '*.free.bg',
 343         'Freeservers.com' => array(     // United Online Web Services, Inc.
 344                 '*.4mg.com',
 345                 '*.4t.com',
 346                 '*.8m.com',
 347                 '*.8m.net',
 348                 '*.8k.com',
 349                 '*.faithweb.com',
 350                 '*.freehosting.net',
 351                 '*.freeservers.com',
 352                 '*.gq.nu',
 353                 '*.htmlplanet.com',
 354                 '*.itgo.com',
 355                 '*.iwarp.com',
 356                 '*.s5.com',
 357                 '*.scriptmania.com',
 358                 '*.tvheaven.com',
 359         ),
 360         '*.freewebpages.com',
 361         'FreeWebServices.net' => array( // Host Department LLC
 362                 '*.about.gs',   // Dead?
 363                 '*.about.tc',
 364                 '*.about.vg',
 365                 '*.aboutus.gs',
 366                 '*.aboutus.ms',
 367                 '*.aboutus.tc',
 368                 '*.aboutus.vg',
 369                 '*.biografi.biz',
 370                 '*.biografi.info',
 371                 '*.biografi.org',
 372                 '*.biografi.us',
 373                 '*.datadiri.biz',
 374                 '*.datadiri.cc',
 375                 '*.datadiri.com',
 376                 '*.datadiri.info',
 377                 '*.datadiri.net',
 378                 '*.datadiri.org',
 379                 '*.datadiri.tv',
 380                 '*.datadiri.us',
 381                 '*.ecv.gs',
 382                 '*.ecv.ms',
 383                 '*.ecv.tc',
 384                 '*.ecv.vg',
 385                 '*.eprofile.us',
 386                 '*.go2net.ws',
 387                 '*.hits.io',
 388                 '*.hostingweb.us',
 389                 '*.hub.io',
 390                 '*.indo.bz',
 391                 '*.indo.cc',
 392                 '*.indo.gs',
 393                 '*.indo.ms',
 394                 '*.indo.tc',
 395                 '*.indo.vg',
 396                 '*.infinitehosting.net',
 397                 '*.infinites.net',
 398                 '*.lan.io',
 399                 '*.max.io',
 400                 '*.mycv.bz',
 401                 '*.mycv.nu',
 402                 '*.mycv.tv',
 403                 '*.myweb.io',
 404                 '*.ourprofile.biz',
 405                 '*.ourprofile.info',
 406                 '*.ourprofile.net',     // Dead?
 407                 '*.ourprofile.org',
 408                 '*.ourprofile.us',
 409                 '*.profil.bz',
 410                 '*.profil.cc',
 411                 '*.profil.cn',
 412                 '*.profil.gs',
 413                 '*.profil.in',
 414                 '*.profil.ms',
 415                 '*.profil.tc',
 416                 '*.profil.tv',
 417                 '*.profil.vg',  // ?
 418                 '*.site.io',
 419                 '*.wan.io',
 420                 '*.web-cam.ws',
 421                 '*.webs.io',
 422                 '*.zip.io',
 423         ),
 424         'funkurl.com',          // by Leonard Lyle (len at ballandchain.net)
 425         '*.fx.to',
 426         'fyad.org',
 427         'fype.com',
 428         'gentleurl.net',
 429         'Get2.us' => array(
 430                 '*.get2.us',
 431                 '*.hasballs.com',
 432                 '*.ismyidol.com',
 433                 '*.spotted.us',
 434                 '*.went2.us',
 435                 '*.wentto.us',
 436         ),
 437         'glinki.com',
 438         '*.globalredirect.com',
 439         'gnu.vu',
 440         '*.go.cc',
 441         //'Google.com' => array(
 442         //              google.com/translate_c\?u=(?:http://)?
 443         //),
 444         'goonlink.com',
 445         '.gourl.org',
 446         '.greatitem.com',
 447         'gzurl.com',
 448         'url.grillsportverein.de',
 449         'Harudake.net' => array('*.hyu.jp'),
 450         'Hattinger Linux User Group' => array('short.hatlug.de'),
 451         'Hexten.net' => array('lyxus.net'),
 452         'here.is',
 453         'HispaVista.com' => array(
 454                 '*.blogdiario.com',
 455                 '*.hispavista.com',
 456                 '.galeon.com',
 457         ),
 458         'Home.pl' => array(     // by Home.pl Sp. J. (info at home.pl), redirections and forums
 459                 '*.8l.pl',
 460                 '*.blg.pl',
 461                 '*.czytajto.pl',
 462                 '*.ryj.pl',
 463                 '*.xit.pl',
 464                 '*.xlc.pl',
 465                 '*.hk.pl',
 466                 '*.home.pl',
 467                 '*.of.pl',
 468         ),
 469         'hort.net',
 470         'free4.hostrocket.com',
 471         '*.hotindex.ru',
 472         'HotRedirect.com' => array(
 473                 '*.coolhere.com',
 474                 '*.homepagehere.com',
 475                 '*.hothere.com',
 476                 '*.mustbehere.com',
 477                 '*.onlyhere.net',
 478                 '*.pagehere.com',
 479                 '*.surfhere.net',
 480                 '*.zonehere.com',
 481         ),
 482         'hotshorturl.com',
 483         'hotwebcomics.com',     ///search_redirect.php
 484         'hurl.to',
 485         '*.hux.de',
 486         '*.i89.us',
 487         'iat.net',                      // 74.208.58.130 by Tony Carter
 488         'ibm.com',                      ///links (Correct it)
 489         '*.iceglow.com',
 490         'internetadresi.com' => array (
 491                 'rxbuycheap.com',
 492                 'rxcheapwestern.com',
 493         ),
 494         'go.id-tv.info',        // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
 495         'Ideas para Nuevos Mercados SL' => array(
 496                 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
 497                 // NOTE: 'dominiosfree.com' by 'Ideas para nuevos mercados,sl' (dominiosfree at i4nm.com)
 498                 // NOTE: 'red-es.com' by oscar florez (info at i4nm.com)
 499                 // by edgar bortolin (oscar at i4nm.com)
 500                 // by Edgar Bortolin  (oscar at i4nm.com)
 501                 // by oscar florez (oscar at i4nm.com)
 502                 // by Oscar Florez (oscar at red-es.com)
 503                 // by covadonga del valle (oscar at i4nm.com)
 504                 '*.ar.gd',
 505                 '*.ar.gs',      // ns *.nora.net
 506                 '*.ar.kz',      // by oscar
 507                 '*.ar.nu',      // by Edgar
 508                 '*.ar.tc',      // by oscar
 509                 '*.ar.vg',      // by oscar
 510                 '*.bo.kz',      // by oscar
 511                 '*.bo.nu',      // by covadonga
 512                 '*.bo.tc',      // by oscar
 513                 '*.bo.tf',      // by Oscar
 514                 '*.bo.vg',      // by oscar
 515                 '*.br.gd',
 516                 '*.br.gs',      // ns *.nora.net
 517                 '*.br.nu',      // by edgar
 518                 '*.br.vg',      // by oscar
 519                 '*.ca.gs',      // by oscar
 520                 '*.ca.kz',      // by oscar
 521                 '*.cl.gd',      // by oscar
 522                 '*.cl.kz',      // by oscar
 523                 '*.cl.nu',      // by edgar
 524                 '*.cl.tc',      // by oscar
 525                 '*.cl.tf',      // by Oscar
 526                 '*.cl.vg',      // by oscar
 527                 '*.col.nu',     // by Edgar
 528                 '*.cr.gs',      // ns *.nora.net
 529                 '*.cr.kz',      // by oscar
 530                 '*.cr.nu',      // by edgar
 531                 '*.cr.tc',      // by oscar
 532                 '*.cu.tc',      // by oscar
 533                 '*.do.kz',      // by oscar
 534                 '*.do.nu',      // by edgar
 535                 '*.ec.kz',      // by edgar
 536                 '*.ec.nu',      // by Edgar
 537                 '*.ec.tf',      // by Oscar
 538                 '*.es.kz',      // by oscar
 539                 '*.eu.kz',      // by oscar
 540                 '*.gt.gs',      // ns *.nora.net
 541                 '*.gt.tc',      // by oscar
 542                 '*.gt.tf',      // by Oscar
 543                 '*.gt.vg',      // by Oscar
 544                 '*.hn.gs',      // ns *.nora.net
 545                 '*.hn.tc',      // by oscar
 546                 '*.hn.tf',      // by Oscar
 547                 '*.hn.vg',      // by oscar
 548                 '*.mx.gd',
 549                 '*.mx.gs',      // ns *.nora.net
 550                 '*.mx.kz',      // by oscar
 551                 '*.mx.vg',      // by oscar
 552                 '*.ni.kz',      // by oscar
 553                 '*.pa.kz',      // by oscar
 554                 '*.pe.kz',      // by oscar
 555                 '*.pe.nu',      // by Edgar
 556                 '*.pr.kz',      // by oscar
 557                 '*.pr.nu',      // by edgar
 558                 '*.pt.gs',      // ns *.nora.net
 559                 '*.pt.kz',      // by edgar
 560                 '*.pt.nu',      // by edgar
 561                 '*.pt.tc',      // by oscar
 562                 '*.pt.tf',      // by Oscar
 563                 '*.py.gs',      // ns *.nora.net
 564                 '*.py.nu',      // by edgar
 565                 '*.py.tc',      // by oscar
 566                 '*.py.tf',      // by Oscar
 567                 '*.py.vg',      // by oscar
 568                 '*.sv.tc',      // by oscar
 569                 '*.usa.gs',     // ns *.nora.net
 570                 '*.uy.gs',      // ns *.nora.net
 571                 '*.uy.kz',      // by oscar
 572                 '*.uy.nu',      // by edgar
 573                 '*.uy.tc',      // by oscar
 574                 '*.uy.tf',      // by Oscar
 575                 '*.uy.vg',      // by oscar
 576                 '*.ve.gs',      // by oscar
 577                 '*.ve.tc',      // by oscar
 578                 '*.ve.tf',      // by Oscar
 579                 '*.ve.vg',      // by oscar
 580                 '*.ven.nu',     // by edgar
 581         ),
 582         'ie.to',
 583         'igoto.co.uk',
 584         'ilook.tw',
 585         'indianpad.com',                ///view/
 586         'iNetwork.co.il' => array(
 587                 'inetwork.co.il',       // by NiL HeMo (exe at bezeqint.net)
 588                 '.up2.co.il',           // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il)
 589                 '.dcn.co.il,',          // up2.co.il related, not classifiable, by daniel chechik (ns_daniel0 at bezeqint.net)
 590         ),
 591         '*.infogami.com',
 592         'infotop.jp',
 593         'ipoo.org',
 594         'IR.pl' => array(
 595                 '*.aj.pl',
 596                 '*.aliasy.org',
 597                 '*.gu.pl',
 598                 '*.hu.pl',
 599                 '*.ir.pl',
 600                 '*.jo.pl',
 601                 '*.su.pl',
 602                 '*.td.pl',
 603                 '*.uk.pl',
 604                 '*.uy.pl',
 605                 '*.xa.pl',
 606                 '*.zj.pl',
 607         ),
 608         'irotator.com',
 609         '.iwebtool.com',
 610         'j6.bz',
 611         'jeeee.net',
 612         'Jaze Redirect Services' => array(
 613                 '*.arecool.net',
 614                 '*.iscool.net',
 615                 '*.isfun.net',
 616                 '*.tux.nu',
 617         ),
 618         '*.jed.pl',
 619         'JeremyJohnstone.com' => array('url.vg'),
 620         'jemurl.com',
 621         'jggj.net',
 622         'jpan.jp',
 623         'josh.nu',
 624         'kat.cc',
 625         'Kickme.to' => array(
 626                 '.1024bit.at',
 627                 '.128bit.at',
 628                 '.16bit.at',
 629                 '.256bit.at',
 630                 '.32bit.at',
 631                 '.512bit.at',
 632                 '.64bit.at',
 633                 '.8bit.at',
 634                 '.adores.it',
 635                 '.again.at',
 636                 '.allday.at',
 637                 '.alone.at',
 638                 '.altair.at',
 639                 '.american.at',
 640                 '.amiga500.at',
 641                 '.ammo.at',
 642                 '.amplifier.at',
 643                 '.amstrad.at',
 644                 '.anglican.at',
 645                 '.angry.at',
 646                 '.around.at',
 647                 '.arrange.at',
 648                 '.australian.at',
 649                 '.baptist.at',
 650                 '.basque.at',
 651                 '.battle.at',
 652                 '.bazooka.at',
 653                 '.berber.at',
 654                 '.blackhole.at',
 655                 '.booze.at',
 656                 '.bosnian.at',
 657                 '.brainiac.at',
 658                 '.brazilian.at',
 659                 '.bummer.at',
 660                 '.burn.at',
 661                 '.c-64.at',
 662                 '.catalonian.at',
 663                 '.catholic.at',
 664                 '.chapel.at',
 665                 '.chills.it',
 666                 '.christiandemocrats.at',
 667                 '.cname.at',
 668                 '.colors.at',
 669                 '.commodore.at',
 670                 '.commodore64.at',
 671                 '.communists.at',
 672                 '.conservatives.at',
 673                 '.conspiracy.at',
 674                 '.cooldude.at',
 675                 '.craves.it',
 676                 '.croatian.at',
 677                 '.cuteboy.at',
 678                 '.dancemix.at',
 679                 '.danceparty.at',
 680                 '.dances.it',
 681                 '.danish.at',
 682                 '.dealing.at',
 683                 '.deep.at',
 684                 '.democrats.at',
 685                 '.digs.it',
 686                 '.divxlinks.at',
 687                 '.divxmovies.at',
 688                 '.divxstuff.at',
 689                 '.dizzy.at',
 690                 '.does.it',
 691                 '.dork.at',
 692                 '.drives.it',
 693                 '.dutch.at',
 694                 '.dvdlinks.at',
 695                 '.dvdmovies.at',
 696                 '.dvdstuff.at',
 697                 '.emulators.at',
 698                 '.end.at',
 699                 '.english.at',
 700                 '.eniac.at',
 701                 '.error403.at',
 702                 '.error404.at',
 703                 '.evangelism.at',
 704                 '.exhibitionist.at',
 705                 '.faith.at',
 706                 '.fight.at',
 707                 '.finish.at',
 708                 '.finnish.at',
 709                 '.forward.at',
 710                 '.freebie.at',
 711                 '.freemp3.at',
 712                 '.french.at',
 713                 '.graduatejobs.at',
 714                 '.greenparty.at',
 715                 '.grunge.at',
 716                 '.hacked.at',
 717                 '.hang.at',
 718                 '.hangup.at',
 719                 '.has.it',
 720                 '.hide.at',
 721                 '.hindu.at',
 722                 '.htmlpage.at',
 723                 '.hungarian.at',
 724                 '.icelandic.at',
 725                 '.independents.at',
 726                 '.invisible.at',
 727                 '.is-chillin.it',
 728                 '.is-groovin.it',
 729                 '.japanese.at',
 730                 '.jive.at',
 731                 '.kickass.at',
 732                 '.kickme.to',
 733                 '.kindergarden.at',
 734                 '.knows.it',
 735                 '.kurd.at',
 736                 '.labour.at',
 737                 '.leech.at',
 738                 '.liberals.at',
 739                 '.linuxserver.at',
 740                 '.liqour.at',
 741                 '.lovez.it',
 742                 '.makes.it',
 743                 '.maxed.at',
 744                 '.means.it',
 745                 '.meltdown.at',
 746                 '.methodist.at',
 747                 '.microcomputers.at',
 748                 '.mingle.at',
 749                 '.mirror.at',
 750                 '.moan.at',
 751                 '.mormons.at',
 752                 '.musicmix.at',
 753                 '.nationalists.at',
 754                 '.needz.it',
 755                 '.nerds.at',
 756                 '.neuromancer.at',
 757                 '.newbie.at',
 758                 '.nicepage.at',
 759                 '.ninja.at',
 760                 '.norwegian.at',
 761                 '.ntserver.at',
 762                 '.owns.it',
 763                 '.paint.at',
 764                 '.palestinian.at',
 765                 '.phoneme.at',
 766                 '.phreaking.at',
 767                 '.playz.it',
 768                 '.polish.at',
 769                 '.popmusic.at',
 770                 '.portuguese.at',
 771                 '.powermac.at',
 772                 '.processor.at',
 773                 '.prospects.at',
 774                 '.protestant.at',
 775                 '.rapmusic.at',
 776                 '.raveparty.at',
 777                 '.reachme.at',
 778                 '.reads.it',
 779                 '.reboot.at',
 780                 '.relaxed.at',
 781                 '.republicans.at',
 782                 '.researcher.at',
 783                 '.reset.at',
 784                 '.resolve.at',
 785                 '.retrocomputers.at',
 786                 '.rockparty.at',
 787                 '.rocks.it',
 788                 '.rollover.at',
 789                 '.rough.at',
 790                 '.rules.it',
 791                 '.rumble.at',
 792                 '.russian.at',
 793                 '.says.it',
 794                 '.scared.at',
 795                 '.seikh.at',
 796                 '.serbian.at',
 797                 '.short.as',
 798                 '.shows.it',
 799                 '.silence.at',
 800                 '.simpler.at',
 801                 '.sinclair.at',
 802                 '.singz.it',
 803                 '.slowdown.at',
 804                 '.socialists.at',
 805                 '.spanish.at',
 806                 '.split.at',
 807                 '.stand.at',
 808                 '.stoned.at',
 809                 '.stumble.at',
 810                 '.supercomputer.at',
 811                 '.surfs.it',
 812                 '.swedish.at',
 813                 '.swims.it',
 814                 '.synagogue.at',
 815                 '.syntax.at',
 816                 '.syntaxerror.at',
 817                 '.techie.at',
 818                 '.temple.at',
 819                 '.thinkbig.at',
 820                 '.thirsty.at',
 821                 '.throw.at',
 822                 '.toplist.at',
 823                 '.trekkie.at',
 824                 '.trouble.at',
 825                 '.turkish.at',
 826                 '.unexplained.at',
 827                 '.unixserver.at',
 828                 '.vegetarian.at',
 829                 '.venture.at',
 830                 '.verycool.at',
 831                 '.vic-20.at',
 832                 '.viewing.at',
 833                 '.vintagecomputers.at',
 834                 '.virii.at',
 835                 '.vodka.at',
 836                 '.wannabe.at',
 837                 '.webpagedesign.at',
 838                 '.wheels.at',
 839                 '.whisper.at',
 840                 '.whiz.at',
 841                 '.wonderful.at',
 842                 '.zor.org',
 843                 '.zx80.at',
 844                 '.zx81.at',
 845                 '.zxspectrum.at',
 846         ),
 847         'kisaweb.com',
 848         'krotki.pl',
 849         'kuerzer.de',
 850         '*.kupisz.pl',
 851         'kuso.cc',
 852         '*.l8t.com',
 853         'lame.name',
 854         'lediga.st',
 855         'liencourt.com',
 856         'liteurl.com',
 857         'linkachi.com',
 858         'linkezy.com',
 859         'linkfrog.net',
 860         'linkook.com',
 861         'linkyme.com',
 862         'linkzip.net',
 863         'lispurl.com',
 864         'lnk.in',
 865         'makeashorterlink.com',
 866         'MAX.ST' => array(      // by Guet Olivier (oliguet at club-internet.fr), frame
 867                 '*.3gp.fr',
 868                 '*.gtx.fr',
 869                 '*.ici.st',
 870                 '*.max.st',
 871                 '*.nn.cx',              // ns *.sivit.org
 872                 '*.site.cx',    // ns *.sivit.org
 873                 '*.user.fr',
 874                 '*.zxr.fr',
 875         ),
 876         'mcturl.com',
 877         'memurl.com',
 878         'Metamark.net' => array('xrl.us'),
 879         'midgeturl.com',
 880         'Minilink.org' => array('lnk.nu'),
 881         'miniurl.org',
 882         'miniurl.pl',
 883         'mixi.bz',
 884         'mo-v.jp',
 885         'MoldData.md' => array( // Note: Some parts of '.md' ccTLD
 886                 '.com.md',
 887                 '.co.md',
 888                 '.org.md',
 889                 '.info.md',
 890                 '.host.md',
 891         ),
 892         'monster-submit.com',
 893         'mooo.jp',
 894         'murl.net',
 895         'myactivesurf.net',
 896         'mytinylink.com',
 897         'myurl.in',
 898         'myurl.com.tw',
 899         'nanoref.com',
 900         'Ne1.net' => array(
 901                 '*.ne1.net',
 902                 '*.r8.org',
 903         ),
 904         'Nashville Linux Users Group' => array('nlug.org'),
 905         'not2long.net',
 906         '*.notlong.com',
 907         '*.nuv.pl',
 908         'ofzo.be',
 909         '*.ontheinter.net',
 910         'ourl.org',
 911         'ov2.net',                              // frame
 912         '*.ozonez.com',
 913         'pagebang.com',
 914         'palurl.com',
 915         '*.paulding.net',
 916         'phpfaber.org',
 917         'pygmyurl.com',
 918         'pnope.com',
 919         'prettylink.com',
 920         'PROXID.net' => array(  // also xRelay.net
 921                 '*.asso.ws',
 922                 '*.corp.st',
 923                 '*.euro.tm',
 924                 '*.perso.tc',
 925                 '*.site.tc',
 926                 '*.societe.st',
 927         ),
 928         'qrl.jp',
 929         'qurl.net',
 930         'qwer.org',
 931         'readthisurl.com',              // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com)
 932         'radiobase.net',
 933         'Rakuten.co.jp' => array(
 934                 'pt.afl.rakuten.co.jp', ///c/
 935         ),
 936         'RedirectFree.com' => array(
 937                 '*.red.tc',
 938                 '*.redirectfree.com',
 939                 '*.sky.tc',
 940                 '*.the.vg',
 941         ),
 942         'redirme.com',
 943         'redirectme.to',
 944         'relic.net',
 945         'rezma.info',
 946         'rio.st',
 947         'rlink.org',
 948         '*.rmcinfo.fr',
 949         'rubyurl.com',
 950         '*.runboard.com',
 951         'runurl.com',
 952         's-url.net',
 953         's1u.net',
 954         'SG5.co.uk' => array(
 955                 '*.sg5.co.uk',
 956                 '*.sg5.info',
 957         ),
 958         'Shim.net' => array(
 959                 '*.0kn.com',
 960                 '*.2cd.net',
 961                 '*.freebiefinders.net',
 962                 '*.freegaming.org',
 963                 '*.op7.net',
 964                 '*.shim.net',
 965                 '*.v9z.com',
 966         ),
 967         'big5.shippingchina.com',
 968         'shorl.com',
 969         'shortenurl.com',
 970         'shorterlink.com',
 971         'shortlinks.co.uk',
 972         'shorttext.com',
 973         'shorturl-accessanalyzer.com',
 974         'Shortify.com' => array(
 975                 '74678439.com',
 976                 'shortify.com',
 977         ),
 978         'shortlink.co.uk',
 979         'ShortURL.com' => array(
 980                 '*.1sta.com',
 981                 '*.24ex.com',
 982                 '*.2fear.com',
 983                 '*.2fortune.com',
 984                 '*.2freedom.com',
 985                 '*.2hell.com',
 986                 '*.2savvy.com',
 987                 '*.2truth.com',
 988                 '*.2tunes.com',
 989                 '*.2ya.com',
 990                 '*.alturl.com',
 991                 '*.antiblog.com',
 992                 '*.bigbig.com',
 993                 '*.dealtap.com',
 994                 '*.ebored.com',
 995                 '*.echoz.com',
 996                 '*.filetap.com',
 997                 '*.funurl.com',
 998                 '*.headplug.com',
 999                 '*.hereweb.com',
1000                 '*.hitart.com',
1001                 '*.mirrorz.com',
1002                 '*.shorturl.com',
1003                 '*.spyw.com',
1004                 '*.vze.com',
1005         ),
1006         'shrinkalink.com',
1007         'shrinkthatlink.com',
1008         'shrinkurl.us',
1009         'shrt.org',
1010         'shrunkurl.com',
1011         'shurl.org',
1012         'shurl.net',
1013         'sid.to',
1014         'simurl.com',
1015         'sitefwd.com',
1016         'Sitelutions.com' => array(
1017                 '*.assexy.as',
1018                 '*.athersite.com',
1019                 '*.athissite.com',
1020                 '*.bestdeals.at',
1021                 '*.byinter.net',
1022                 '*.findhere.org',
1023                 '*.fw.nu',
1024                 '*.isgre.at',
1025                 '*.isthebe.st',
1026                 '*.kwik.to',
1027                 '*.lookin.at',
1028                 '*.lowestprices.at',
1029                 '*.onthenet.as',
1030                 '*.ontheweb.nu',
1031                 '*.pass.as',
1032                 '*.passingg.as',
1033                 '*.redirect.hm',
1034                 '*.rr.nu',
1035                 '*.ugly.as',
1036         ),
1037         '*.skracaj.pl',
1038         'skiltechurl.com',
1039         'skocz.pl',
1040         'slimurl.jp',
1041         'slink.in',
1042         'smallurl.eu',
1043         'smurl.name',
1044         'snipurl.com',
1045         'sp-nov.net',
1046         'splashblog.com',
1047         'spod.cx',
1048         '*.spydar.com',
1049         'Subdomain.gr' => array(
1050                 '*.p2p.gr',
1051                 '*.subdomain.gr',
1052         ),
1053         'SURL.DK' => array('surl.dk'),  // main page is: s-url.dk
1054         'surl.se',
1055         'surl.ws',
1056         'symy.jp',
1057         'tdurl.com',
1058         'tighturl.com',
1059         'tiniuri.com',
1060         'tiny.cc',
1061         'tiny.pl',
1062         'tiny2go.com',
1063         'tinylink.eu',
1064         'tinylinkworld.com',
1065         'tinypic.com',
1066         'tinyr.us',
1067         'TinyURL.com' => array(
1068                 'tinyurl.com',
1069                 'preview.tinyurl.com',
1070                 'tinyurl.co.uk',
1071         ),
1072         'titlien.com',
1073         '*.tlg.pl',
1074         'tlurl.com',
1075         'link.toolbot.com',
1076         'tnij.org',
1077         'Tokelau ccTLD' => array('.tk'),
1078         'toila.net',
1079         '*.toolbot.com',
1080         '*.torontonian.com',
1081         'trimurl.com',
1082         'ttu.cc',
1083         'turl.jp',
1084         '*.tz4.com',
1085         'U.TO' => array(        // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
1086                 '*.1.to',
1087                 '*.4.to',
1088                 '*.5.to',
1089                 '*.82.to',
1090                 '*.s.to',
1091                 '*.u.to',
1092                 '*.ce.to',
1093                 '*.cz.to',
1094                 '*.if.to',
1095                 '*.it.to',
1096                 '*.kp.to',
1097                 '*.ne.to',
1098                 '*.ok.to',
1099                 '*.pc.to',
1100                 '*.tv.to',
1101                 '*.dd.to',
1102                 '*.ee.to',
1103                 '*.hh.to',
1104                 '*.kk.to',
1105                 '*.mm.to',
1106                 '*.qq.to',
1107                 '*.xx.to',
1108                 '*.zz.to',
1109                 '*.ivy.to',
1110                 '*.joa.to',
1111                 '*.ever.to',
1112                 '*.mini.to',
1113         ),
1114         'uchinoko.in',
1115         'Ulimit.com' => array(
1116                 '*.be.tf',
1117                 '*.best.cd',
1118                 '*.bsd-fan.com',
1119                 '*.c0m.st',
1120                 '*.ca.tc',
1121                 '*.clan.st',
1122                 '*.com02.com',
1123                 '*.en.st',
1124                 '*.euro.st',
1125                 '*.fr.fm',
1126                 '*.fr.st',
1127                 '*.fr.vu',
1128                 '*.gr.st',
1129                 '*.ht.st',
1130                 '*.int.ms',
1131                 '*.it.st',
1132                 '*.java-fan.com',
1133                 '*.linux-fan.com',
1134                 '*.mac-fan.com',
1135                 '*.mp3.ms',
1136                 '*.qc.tc',
1137                 '*.sp.st',
1138                 '*.suisse.st',
1139                 '*.t2u.com',
1140                 '*.unixlover.com',
1141                 '*.zik.mu',
1142         ),
1143         '*.uni.cc',
1144         'UNONIC.com' => array(
1145                 '*.at.tf',      // AlpenNIC
1146                 '*.bg.tf',
1147                 '*.ca.tf',
1148                 '*.ch.tf',      // AlpenNIC
1149                 '*.cz.tf',
1150                 '*.de.tf',      // AlpenNIC
1151                 '*.edu.tf',
1152                 '*.eu.tf',
1153                 '*.int.tf',
1154                 '*.net.tf',
1155                 '*.pl.tf',
1156                 '*.ru.tf',
1157                 '*.sg.tf',
1158                 '*.us.tf',
1159         ),
1160         'Up.pl' => array(
1161                 '.69.pl',                       // by nsk101869
1162                 '.crack.pl',            // by nsk101869
1163                 '.film.pl',                     // by sibr19002
1164                 '.h2o.pl',                      // by nsk101869
1165                 '.hostessy.pl',         // by nsk101869
1166                 '.komis.pl',            // by nsk101869
1167                 '.laski.pl',            // by nsk101869
1168                 '.modelki.pl',          // by nsk101869
1169                 '.muzyka.pl',           // by sibr19002
1170                 '.nastolatki.pl',       // by nsk101869
1171                 '.obuwie.pl',           // by nsk101869
1172                 '.prezes.com',          // by Robert e (b2b at interia.pl)
1173                 '.prokuratura.com',     // by Robert Tofil (b2b at interia.pl)
1174                 '.sexchat.pl',          // by nsk101869
1175                 '.sexlive.pl',          // by nsk101869
1176                 '.tv.pl',                       // by nsk101869
1177                 '.up.pl',                       // by nsk101869
1178                 '.video.pl',            // by nsk101869
1179                 '.xp.pl',                       // nsk101869
1180         ),
1181         '*.uploadr.com',
1182         'url.ie',
1183         'url4.net',
1184         'url-c.com',
1185         'urlbee.com',
1186         'urlbounce.com',
1187         'urlcut.com',
1188         'urlcutter.com',
1189         'urlic.com',
1190         'urlin.it',
1191         'urlkick.com',
1192         'URLLogs.com' => array(
1193                 '*.urllogs.com',        // 67.15.219.253 by Javier Keeth (abuzant at gmail.com), ns *.pengs.com, 'Hosted by: Gossimer'
1194                 '.12w.net',                     // 67.15.219.253 by Marvin Dreyer (marvin.dreyer at pengs.com), ns *.gossimer.com
1195         ),
1196         '*.urlproxy.com',
1197         'urlser.com',
1198         'urlsnip.com',
1199         'urlzip.de',
1200         'urlx.org',
1201         'useurl.us',            // by Edward Beauchamp (mail at ebvk.com)
1202         'utun.jp',
1203         'uxxy.com',
1204         '*.v27.net',
1205         'V3.com by FortuneCity.com' => array(   // http://www.v3.com/sub-domain-list.shtml
1206                 '*.all.at',
1207                 '*.back.to',
1208                 '*.beam.at',
1209                 '*.been.at',
1210                 '*.bite.to',
1211                 '*.board.to',
1212                 '*.bounce.to',
1213                 '*.bowl.to',
1214                 '*.break.at',
1215                 '*.browse.to',
1216                 '*.change.to',
1217                 '*.chip.ms',
1218                 '*.connect.to',
1219                 '*.crash.to',
1220                 '*.cut.by',
1221                 '*.direct.at',
1222                 '*.dive.to',
1223                 '*.drink.to',
1224                 '*.drive.to',
1225                 '*.drop.to',
1226                 '*.easy.to',
1227                 '*.everything.at',
1228                 '*.fade.to',
1229                 '*.fanclub.ms',
1230                 '*.firstpage.de',
1231                 '*.fly.to',
1232                 '*.flying.to',
1233                 '*.fortunecity.co.uk',
1234                 '*.fortunecity.com',
1235                 '*.forward.to',
1236                 '*.fullspeed.to',
1237                 '*.fun.ms',
1238                 '*.gameday.de',
1239                 '*.germany.ms',
1240                 '*.get.to',
1241                 '*.getit.at',
1242                 '*.hard-ware.de',
1243                 '*.hello.to',
1244                 '*.hey.to',
1245                 '*.hop.to',
1246                 '*.how.to',
1247                 '*.hp.ms',
1248                 '*.jump.to',
1249                 '*.kiss.to',
1250                 '*.listen.to',
1251                 '*.mediasite.de',
1252                 '*.megapage.de',
1253                 '*.messages.to',
1254                 '*.mine.at',
1255                 '*.more.at',
1256                 '*.more.by',
1257                 '*.move.to',
1258                 '*.musicpage.de',
1259                 '*.mypage.org',
1260                 '*.mysite.de',
1261                 '*.nav.to',
1262                 '*.notrix.at',
1263                 '*.notrix.ch',
1264                 '*.notrix.de',
1265                 '*.notrix.net',
1266                 '*.on.to',
1267                 '*.page.to',
1268                 '*.pagina.de',
1269                 '*.played.by',
1270                 '*.playsite.de',
1271                 '*.privat.ms',
1272                 '*.quickly.to',
1273                 '*.redirect.to',
1274                 '*.rulestheweb.com',
1275                 '*.run.to',
1276                 '*.scroll.to',
1277                 '*.seite.ms',
1278                 '*.shortcut.to',
1279                 '*.skip.to snap.to',
1280                 '*.soft-ware.de',
1281                 '*.start.at',
1282                 '*.stick.by',
1283                 '*.surf.to',
1284                 '*.switch.to',
1285                 '*.talk.to',
1286                 '*.tip.nu',
1287                 '*.top.ms',
1288                 '*.transfer.to',
1289                 '*.travel.to',
1290                 '*.turn.to',
1291                 '*.vacations.to',
1292                 '*.videopage.de',
1293                 '*.virtualpage.de',
1294                 '*.w3.to',
1295                 '*.walk.to',
1296                 '*.warp9.to',
1297                 '*.window.to',
1298                 '*.yours.at',
1299                 '*.zap.to',
1300                 '*.zip.to',
1301         ),
1302         'VDirect.com' => array(
1303                 '*.emailme.net',
1304                 '*.getto.net',
1305                 '*.inetgames.com',
1306                 '*.netbounce.com',
1307                 '*.netbounce.net',
1308                 '*.oneaddress.net',
1309                 '*.snapto.net',
1310                 '*.vdirect.com',
1311                 '*.vdirect.net',
1312                 '*.webrally.net',
1313         ),
1314         'venturenetworking.com',        // by Katharine Barbieri (domains at spyforce.com)
1315         'vgo2.com',
1316         'Voila.fr' => array('r.voila.fr'),      // Fix it
1317         'w3t.org',
1318         'wapurl.co.uk',
1319         'Wb.st' => array(
1320                 '*.team.st',
1321                 '*.wb.st',
1322         ),
1323         'wbkt.net',
1324         'WebAlias.com' => array(
1325                 '*.andmuchmore.com',
1326                 '*.browser.to',
1327                 '*.escape.to',
1328                 '*.fornovices.com',
1329                 '*.fun.to',
1330                 '*.got.to',
1331                 '*.hottestpix.com',
1332                 '*.imegastores.com',
1333                 '*.latest-info.com',
1334                 '*.learn.to',
1335                 '*.moviefever.com',
1336                 '*.mp3-archives.com',
1337                 '*.myprivateidaho.com',
1338                 '*.radpages.com',
1339                 '*.remember.to',
1340                 '*.resourcez.com',
1341                 '*.return.to',
1342                 '*.sail.to',
1343                 '*.sports-reports.com',
1344                 '*.stop.to',
1345                 '*.thrill.to',
1346                 '*.tophonors.com',
1347                 '*.uncutuncensored.com',
1348                 '*.up.to',
1349                 '*.veryweird.com',
1350                 '*.way.to',
1351                 '*.web-freebies.com',
1352                 '.webalias.com',
1353                 '*.webdare.com',
1354                 '*.xxx-posed.com',
1355         ),
1356         'webmasterwise.com',
1357         'witherst at hotmail.com' => array(     // by Tim Withers
1358                 '*.associates-program.com',
1359                 '*.casinogopher.com',
1360                 '*.ezpagez.com',
1361                 '*.vgfaqs.com',
1362         ),
1363         'wittylink.com',
1364         'wiz.sc',                       // tiny.cc related
1365         'X50.us' => array(
1366                 '*.i50.de',
1367                 '*.x50.us',
1368         ),
1369         'big5.xinhuanet.com',   ///gate/big5/
1370         'xhref.com',
1371         'Xn6.net' => array(
1372                 '*.9ax.net',
1373                 '*.xn6.net',
1374         ),
1375         '*.xshorturl.com',              // by Markus Lee (soul_s at list.ru)
1376         '.y11.net',
1377         'YESNS.com' => array(   // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
1378                 '*.yesns.com',
1379                 '*.srv4u.net',
1380                 //blogne.com
1381         ),
1382         'yatuc.com',
1383         'yep.it',
1384         'yumlum.com',
1385         'yurel.com',
1386         'Z.la' => array(
1387                 'z.la',
1388                 't.z.la',
1389         ),
1390         'zaable.com',
1391         'zapurl.com',
1392         'zarr.co.uk',
1393         'zerourl.com',
1394         'ZeroWeb.org' => array(
1395                 '*.80t.com',
1396                 '*.firez.org',
1397                 '*.fizz.nu',
1398                 '*.ingame.org',
1399                 '*.irio.net',
1400                 '*.v33.org',
1401                 '*.zeroweb.org',
1402         ),
1403         'zhukcity.ru',
1404         'zippedurl.com',
1405         'zr5.us',
1406         '*.zs.pl',
1407         '*.zu5.net',
1408         'zuso.tw',
1409         '*.zwap.to',
1410 );
1411
1412 // --------------------------------------------------
1413
1414 $blocklist['A-2'] = array(
1415
1416         // A-2: Dynamic DNS, Dynamic IP services, DNS vulnerabilities, or another DNS cases
1417         //
1418         //'*.dyndns.*', // Wildcard for dyndns
1419         //
1420         '*.ddo.jp',                             // by Kiyoshi Furukawa (furu at furu.jp)
1421         'ddns.ru' => array('*.bpa.nu'),
1422         'Dhs.org' => array(
1423                 '*.2y.net',
1424                 '*.dhs.org',
1425         ),
1426         '*.dnip.net',
1427         '*.dyndns.co.za',
1428         '*.dyndns.dk',
1429         '*.dyndns.nemox.net',
1430         'DyDNS.com' => array(
1431                 '*.ath.cx',
1432                 '*.dnsalias.org',
1433                 '*.dyndns.org',
1434                 '*.homeip.net',
1435                 '*.homelinux.net',
1436                 '*.mine.nu',
1437                 '*.shacknet.nu',
1438         ),
1439         '*.dtdns.net',                  // by jscott at sceiron.com
1440         '*.dynu.com',
1441         '*.dynup.net',
1442         '*.fdns.net',
1443         'J-Speed.net' => array(
1444                 '*.bne.jp',
1445                 '*.ii2.cc',
1446                 '*.jdyn.cc',
1447                 '*.jspeed.jp',
1448         ),
1449         '*.mydyn.de',
1450         '*.nerdcamp.net',
1451         'No-IP.com' => array(
1452                         '*.bounceme.net',
1453                         '*.hopto.org',
1454                         '*.myftp.biz',
1455                         '*.myftp.org',
1456                         '*.myvnc.com',
1457                         '*.no-ip.biz',
1458                         '*.no-ip.info',
1459                         '*.no-ip.org',
1460                         '*.redirectme.net',
1461                         '*.servebeer.com',
1462                         '*.serveblog.net',
1463                         '*.servecounterstrike.com',
1464                         '*.serveftp.com',
1465                         '*.servegame.com',
1466                         '*.servehalflife.com',
1467                         '*.servehttp.com',
1468                         '*.servemp3.com',
1469                         '*.servepics.com',
1470                         '*.servequake.com',
1471                         '*.sytes.net',
1472                         '*.zapto.org',
1473         ),
1474         '*.opendns.be',
1475         'Yi.org' => array(      // by dns at whyi.org
1476                 '*.yi.org',             // 64.15.155.86(susicivus.crackerjack.net)
1477
1478                 // 72.55.129.46(redirect.yi.org)
1479                 '*.whyi.org',
1480                 '*.weedns.com',
1481         ),
1482         '*.zenno.info',
1483         '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
1484                         // and all non-recorded domains redirect to 'agoga.com' now
1485                         // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
1486                         // http://agoga.com/aboutus.html
1487 );
1488
1489 // --------------------------------------------------
1490
1491 // B: Sample setting of:
1492 // Jacked (taken advantage of) and cleaning-less sites
1493 //
1494 // Please notify us about this list with reason:
1495 // http://pukiwiki.sourceforge.jp/dev/?BugTrack2%2F208
1496
1497 $blocklist['B-1'] = array(
1498
1499         // B-1: Web N.M spaces (N > 0, M >= 0)
1500         //
1501         //   Messages from forerunners:
1502         //     activefreehost.com
1503         //       "We regret to inform you that ActiveFreeHost
1504         //        free hosting service has is now closed (as of
1505         //        September 18). We have been online for over
1506         //        two and half years, but have recently decided
1507         //        to take time for software improvement to fight
1508         //        with server abuse, Spam advertisement and
1509         //        fraud."
1510         //
1511         '*.0000host.com',               // 68.178.200.154, ns *.3-hosting.net
1512         '*.007ihost.com',               // 195.242.99.199(s199.softwarelibre.nl)
1513         '*.007webpro.com',              // by richord at ientry.com
1514         '*.00bp.com',                   // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1515         '*.0buckhost.com',              // by tycho at e-lab.nl
1516         '0Catch.com related' => array(
1517                 '*.0catch.com',         // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
1518
1519                 // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1520                 '*.100megsfree5.com',
1521
1522                 // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
1523                 '*.100freemb.com',              // by Danny Ashworth
1524                 '*.easyfreehosting.com',
1525                 '*.exactpages.com',
1526                 '*.fcpages.com',
1527                 '*.wtcsites.com',
1528
1529                 // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
1530                 '*.741.com',
1531                 '*.freecities.com',
1532                 '*.freesite.org',
1533                 '*.freewebpages.org',
1534                 '*.freewebsitehosting.com',
1535                 '*.jvl.com',
1536
1537                 // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
1538                 '*.freespaceusa.com',
1539                 '*.usafreespace.com',
1540
1541                 // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
1542                 '*.dex1.com',
1543                 '*.questh.com',
1544
1545                 // 209.63.57.10(*snip*), ns *.0catch.com
1546                 '*.00freehost.com',             // by David Mccall (superjeeves at yahoo.com)
1547                 '*.012webpages.com',    // by support at 0catch.com
1548                 '*.150m.com',
1549                 '*.1sweethost.com',             // by whois at bluehost.com
1550                 '*.250m.com',                   // by jason at fahlman.net
1551                 '*.9cy.com',                    // by paulw0t at gmail.com
1552                 '*.angelcities.com',    // by cliff at eccentrix.com
1553                 '*.arcadepages.com',    // by admin at site-see.com
1554                 '*.e-host.ws',                  // by dns at jomax.net
1555                 '*.envy.nu',                    // by Dave Ellis (dave at larryblackandassoc.com)
1556                 '*.fw.bz',                              // by ben at kuehl.as
1557                 '*.freewebportal.com',  // by mmouneeb at hotmail.com
1558                 '*.g0g.net',                    // by domains at seem.co.uk
1559                 '*.galaxy99.net',               // by admin at bagchi.org
1560                 '*.greatnow.com',               // by peo at peakspace.com
1561                 '*.hautlynx.com',               // by hlewis28 at juno.com
1562                 '*.ibnsites.com',               // by cmrojas at mail.com
1563                 '*.just-allen.com',             // by extremehype at msn.com
1564                 '*.kogaryu.com',                // by angelguerra at msn.com
1565                 '*.maddsites.com',              // by big.tone at maddhattentertainment.com
1566                 '*.mindnmagick.com',    // by tim at mind-n-magick.com
1567                 '*.s4u.org',                    // by sung_wei_wang at yahoo.com
1568                 '*.s-enterprize.com',
1569                 '*.servetown.com',              // by jonahbliss at earthlink.net
1570                 '*.stinkdot.org',               // by bluedot at ziplip.com
1571                 '*.virtue.nu',                  // by dave at larryblackandassoc.com
1572                 '*.zomi.net',                   // by sianpu at gmail.com
1573         ),
1574         '*.1asphost.com',               // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com
1575         '100 Best Inc' => array(
1576                 // by 100 Best Inc (info at 100best.com)
1577
1578                 // 66.235.204.7(h204-007.bluefishhosting.com)
1579                 '*.2-hi.com',
1580                 '*.20fr.com',
1581                 '*.20ii.com',
1582                 '*.20is.com',
1583                 '*.20it.com',
1584                 '*.20m.com',    // by jlee at 100bestinc.com
1585                 '*.20to.com',
1586                 '*.2u-2.com',
1587                 '*.3-st.com',
1588                 '*.fws1.com',
1589                 '*.fw-2.com',
1590                 '*.inc5.com',
1591                 '*.on-4.com',
1592                 '*.st-3.com',
1593                 '*.st20.com',
1594                 '*.up-a.com',
1595
1596                 // 216.40.33.252(www-pd.mdnsservice.com)
1597                 '*.0-st.com',
1598                 '*.20me.com',
1599         ),
1600         '*.100foros.com',
1601         '*.101freehost.com',
1602         '*.12gbfree.com',       // 75.126.176.194 by ashphama at yahoo.com
1603         '20six Weblog Services' => array(
1604                 '.20six.nl',                    // by 20six weblog services (postmaster at 20six.nl)
1605                 '.20six.co.uk',
1606                 '.20six.fr',
1607                 'myblog.de',
1608                 'myblog.es',
1609         ),
1610         '*.250free.com',        // by Brian Salisbury (domains at 250host.com)
1611         '*.275mb.com',          // 204.15.10.144 by domains at febox.com
1612         '2IP.com' => array(
1613                 // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1614                 '*.2ip.jp',
1615                 '*.474.jp',
1616                 '*.consensus.jp',
1617                 '*.desyo.jp',
1618                 '*.dif.jp',
1619                 '*.pastels.jp',
1620                 '*.powerblogger.jp',
1621                 '*.vippers.jp',
1622                 '*.webpages.jp',
1623
1624                 // 205.209.97.56(non-existent)
1625                 '*.biografi.biz',
1626                 '*.biografi.info',
1627                 '*.biografi.org',
1628                 '*.biografi.us',
1629                 '*.datadiri.biz',
1630                 '*.datadiri.cc',
1631                 '*.datadiri.com',
1632                 '*.datadiri.info',
1633                 '*.datadiri.net',
1634                 '*.datadiri.org',
1635                 '*.datadiri.tv',
1636                 '*.datadiri.us',
1637                 '*.indo.bz',
1638                 '*.indo.cc',
1639                 '*.profil.bz',
1640                 '*.profil.cc',
1641                 '*.profil.cn',
1642                 '*.profil.in',
1643                 '*.profil.tv',
1644
1645                 // 205.209.101.47(non-existent)
1646                 '*.about.tc',
1647                 '*.about.vg',
1648                 '*.aboutus.gs',
1649                 '*.aboutus.ms',
1650                 '*.aboutus.tc',
1651                 '*.aboutus.vg',
1652                 '*.band.io',
1653                 '*.beijing.am',
1654                 '*.blogs.io',
1655                 '*.boke.am',
1656                 '*.clan.io',
1657                 '*.ecv.gs',
1658                 '*.ecv.ms',
1659                 '*.ecv.vg',
1660                 '*.freekong.cn',
1661                 '*.go2net.ws',
1662                 '*.hello.cn.com',
1663                 '*.hello.io',
1664                 '*.hits.io',
1665                 '*.hostingweb.us',
1666                 '*.hub.io',
1667                 '*.ide.am',
1668                 '*.inc.io',
1669                 '*.incn.in',
1670                 '*.indo.gs',
1671                 '*.indo.ms',
1672                 '*.indo.tc',
1673                 '*.indo.vg',
1674                 '*.infinitehosting.net',
1675                 '*.infinites.net',
1676                 '*.jushige.cn',
1677                 '*.jushige.com',
1678                 '*.kongjian.in',
1679                 '*.lan.io',
1680                 '*.llc.nu',
1681                 '*.maimai.in',
1682                 '*.max.io',
1683                 '*.musician.io',
1684                 '*.mycv.bz',
1685                 '*.mycv.nu',
1686                 '*.mycv.tv',
1687                 '*.myweb.io',
1688                 '*.ourprofile.biz',
1689                 '*.ourprofile.info',
1690                 '*.ourprofile.net',
1691                 '*.ourprofile.org',
1692                 '*.ourprofile.us',
1693                 '*.profil.gs',
1694                 '*.profil.ms',
1695                 '*.profil.tc',
1696                 '*.qiye.in',
1697                 '*.site.io',
1698                 '*.wan.io',
1699                 '*.web-cam.ws',
1700                 '*.webs.io',
1701                 '*.xixu.cc',
1702                 '*.zaici.am',
1703                 '*.zip.io',
1704                 '*.zuzhi.in',
1705
1706                 '*.profil.vg',          // 205.209.101.67(non-existent)
1707                 '*.ecv.tc',                     // 208.73.212.12(sp19.information.com)
1708                 //'*.about.gs',         // No record
1709                 //'*.eprofile.us',      // non-existent
1710         ),
1711         '2Page.de' => array(
1712                 '.dreipage.de',
1713                 '.2page.de',
1714         ),
1715         '*.3-hosting.net',
1716         '*.5gbfree.com',        // 75.126.153.58 by rob at roblist.co.uk
1717         '*.789mb.com',          // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
1718         '*.8000web.com',        // 75.126.189.45
1719         '*.9999mb.com',         // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
1720         'aeonity.com',          // by Emocium Solutions (creativenospam at gmail.com)
1721         'Ai.NET' => array(
1722                 '*.100free.com',        // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net
1723                 '*.ai.net',                     // 205.134.163.4(aries.ai.net) by support at ai.net
1724         ),
1725         '*.aimoo.com',
1726         '*.alkablog.com',
1727         '*.alluwant.de',
1728         '.amkbb.com',
1729         'answerbag.com',        // 8.5.0.128
1730         'anyboard.net',
1731         'AOL.com' =>    // http://about.aol.com/international_services
1732                 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
1733                 '(?:aol|americaonline)\.' .
1734                 '(?:ca|co\.uk|com|com\.au|com.mx|de)$/',
1735                 // Rough but works
1736         'Apple.com' => array('idisk.mac.com'),
1737         '*.askfaq.org',
1738         '.atfreeforum.com',             // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
1739         '*.atwiki.com',                 //  by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
1740         '*.asphost4free.com',
1741         'basenow.com',
1742         'BatCave.net' => array(
1743                 '.batcave.net',                 // 64.22.112.226
1744                 '.freehostpro.com',             // 64.22.112.226
1745         ),
1746         '*.bb-fr.com',
1747         '.bbfast.com',                          // 72.52.135.174 by blogmaster2003 at gmail.com
1748         '*.beeplog.com',
1749         'beepworld.it',
1750         'bestfreeforums.com',
1751         'bestvotexxx.com',
1752         'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1753         'blinklist.com',
1754         'Blog.com' => array(
1755                 // by admin.domains at co.blog.com
1756                 '*.blog.com',
1757                 '*.blogandorra.com',
1758                 '*.blogangola.com',
1759                 '*.blogaruba.com',
1760                 '*.blogaustria.at',
1761         ),
1762         '*.blog.com.es',
1763         '*.blog.hr',
1764         '*.blog4ever.com',
1765         '*.blog-fx.com',
1766         '*.blogbeee.com',
1767         'blogas.lt',
1768         'blogbud.com',
1769         '*.blogburkinafaso.com',
1770         '*.blogcu.com',                 // by info at nokta.com
1771         'blogfreely.com',
1772         '*.blogdrive.com',
1773         '*.blogg.de',
1774         'bloggerblast.com',             // by B. Kadrie (domains at starwhitehosting.com)
1775         'bloggercrab.com',
1776         'bloggers.nl',
1777         '*.bloggingmylife.com',
1778         '*.bloggles.info',
1779         '*.blogharbor.com',
1780         '*.bloguj.eu',
1781         'bloguitos.com',
1782         'blogosfer.com',
1783         '*.blogse.nl',                  // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl
1784         '*.blogslive.net',
1785         '*.blogsome.com',               // by Roger Galligan (roger.galligan at browseireland.com)
1786         '*.blogstream.com',
1787         'blogyaz.com',
1788         'bloodee.com',
1789         'bluedot.us',                   // 209.245.176.23 by mohitsriv at yahoo.com
1790         'board-4you.de',
1791         'boboard.com',                  // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
1792         '*.boardhost.com',
1793         'Bravenet.com' => array(
1794                 '*.bravenet.com',
1795                 '*.bravehost.com',
1796         ),
1797         '*.by.ru',                              // 217.16.29.50 by ag at near.ru, nthost.ru related?
1798         'C2k.jp' => array(
1799                 // by Makoto Okuse (webmaster at 2style.net)
1800                 '.081.in',
1801                 '.2style.in',
1802                 '.bian.in',
1803                 '.curl.in',
1804                 '.ennui.in',
1805                 '.jinx.in',
1806                 '.loose.in',
1807                 '.mist.in',
1808                 '.muu.in',
1809                 '.naive.in',
1810                 '.panic.in',
1811                 '.slum.in',
1812
1813                 // by 2style, ns *.click2k.net, *.2style.net
1814                 '.2st.jp',
1815                 '.betty.jp',
1816                 '.cabin.jp',
1817                 '.cult.jp',
1818                 '.mippi.jp',
1819                 '.purety.jp',
1820                 '.rapa.jp',
1821                 '.side-b.jp',
1822                 '.web-box.jp',
1823                 '.yea.jp',
1824
1825                 // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net
1826                 '.2style.net',
1827                 '.click2k.net',
1828                 '.houka5.com',
1829
1830                 // by click2k, ns *.click2k.net, *.2style.net
1831                 '.psyco.jp',
1832                 '.sweety.jp',
1833
1834                 '.2style.jp',   // by click2k, ns *.2style.jp, *.2style.net
1835                 '.cute.cd',             // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
1836         ),
1837         '*.canalblog.com',              // 195.137.184.103 by dns-admin at pinacolaweb.com
1838         '*.cdnhost.cn',                 // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
1839         '*.chueca.com',
1840         'city-forum.com',
1841         '*.clicdev.com',
1842         '*.craigslist.org',
1843         'concepts-mall.com',
1844         '*.conforums.com',              // by Roger Sutton (rogersutton at cox.net)
1845         'connectedy.com',               // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
1846         'counterhit.de',
1847         '*.createblog.com',
1848         '*.createforum.net',
1849         '*.creatuforo.com',             // by Desafio Internet S.L. (david at soluwol.com)
1850         '*.createmybb.com',
1851         'CwCity.de' => array(
1852                 '.cwcity.de',
1853                 '.cwsurf.de',
1854         ),
1855         'dakrats.net',
1856         '*.dcswtech.com',
1857         'del.icio.us',
1858         '*.devil.it',
1859         '*.diaryland.com',
1860         'diigo.com',                    ///user/
1861         'digg.com',
1862         'digstock.com',
1863         'domains at galaxywave.net' => array(
1864                 'blogstation.net',
1865                 '.phpbb-host.com',
1866         ),
1867         'dotbb.be',
1868         '*.dox.hu',                             // dns at 1b.hu
1869         '*.eadf.com',
1870         '*.eblog.com.au',
1871         '*.ekiwi.de',
1872         '*.eamped.com',                 // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
1873         '.easyfreeforum.com',   // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1874         '*.easyjournal.com',
1875         '*.ebloggy.com',
1876         'enunblog.com',
1877         '*.epinoy.com',
1878         '*.ez-sites.ws',
1879         '*.ezbbforum.com',              // 72.52.134.135 by blogmaster2003 at gmail.com
1880         '*.fastsito.com',               // 208.77.96.9 by info at top100italiana.com
1881         '*.fathippohosting.com',        // 208.101.3.192
1882         'FC2.com' => array(
1883                 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
1884                         // Many traps available:
1885                         //      bqdr.blog98.fc2.com,       iframe
1886                         //      csfir.blog87.fc2.com,      iframe
1887                         //      pppgamesk.blog100.fc2.com, iframe, broken Japanese
1888                         //      sippou2006.blog60.fc2.com, iframe
1889                         // NOTE: 'blog.fc2.com' is not included
1890                 '*.h.fc2.com',  // Adult
1891         ),
1892         '*.fizwig.com',
1893         'forum.ezedia.net',
1894         '*.extra.hu',                   // angelo at jasmin.hu
1895         '*.fanforum.cc',
1896         'fingerprintmedia.com',
1897         '*.filelan.com',
1898         '*.fora.pl',
1899         '*.forka.eu',
1900         '*.foren-city.de',
1901         'foren-gratis.de',
1902         '*.foros.tv',
1903         '*.forospace.com',
1904         'foroswebgratis.com',
1905         '*.forum-on.de',
1906         '*.forum24.se',
1907         '*.forum5.com',                 // by Harry S (hsg944 at gmail.com)
1908         '.forum66.com',
1909         'Forumotion.com' => array(
1910                 '*.forumotion.com',     // 75.126.156.15(s00.darkbb.com)
1911                 '*.forumactif.com',     // 91.121.41.79
1912                 '*.editboard.com',      // 75.126.156.15
1913                 '*.sosblog.com',        // 74.86.25.140
1914
1915                 // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com
1916                 '*.0forum.biz',
1917                 '*.1forum.biz',
1918                 '*.1fr1.net',
1919                 '*.1talk.net',
1920                 '*.2forum.biz',
1921                 '*.3forum.biz',
1922                 '*.4forum.biz',
1923                 '*.4rumer.com',
1924                 '*.4rumer.net',
1925                 '*.4umer.com',
1926                 '*.4umer.net',
1927                 '*.5forum.biz',
1928                 '*.5forum.info',
1929                 '*.5forum.net',
1930                 '*.6forum.biz',
1931                 '*.6forum.info',
1932                 '*.77forum.com',
1933                 '*.7forum.biz',
1934                 '*.7forum.info',
1935                 '*.7forum.net',
1936                 '*.8forum.biz',
1937                 '*.8forum.info',
1938                 '*.8forum.net',
1939                 '*.9forum.biz',
1940                 '*.9forum.info',
1941                 '*.activebb.net',
1942                 '*.aforumfree.com',
1943                 '*.all-forum.net',
1944                 '*.all-up.com',
1945                 '*.alldiscussion.net',
1946                 '*.allgoo.net',
1947                 '*.allgoo.us',
1948                 '*.american-forum.net',
1949                 '*.americantalk.net',
1950                 '*.annuaire-forums.com',
1951                 '*.asiafreeforum.com',
1952                 '*.asianfreeforum.com',
1953                 '*.azureforum.com',
1954                 '*.azurforum.com',
1955                 '*.bestcheapforum.com',
1956                 '*.bestdiscussion.net',
1957                 '*.bestgoo.com',
1958                 '*.bestofforum.com',
1959                 '*.bestofforum.net',
1960                 '*.bestoforum.net',
1961                 '*.bforum.biz',
1962                 '*.big-forum.net',
1963                 '*.board-poster.com',
1964                 '*.board-realtors.com',
1965                 '*.boardonly.com',
1966                 '*.boardrealtors.net',
1967                 '*.boardsmessage.com',
1968                 '*.briceboard.com',
1969                 '*.bubblelol.com',
1970                 '*.buy-forum.com',
1971                 '*.buy-talk.com',
1972                 '*.buyforum.net',
1973                 '*.buygoo.net',
1974                 '*.buygoo.us',
1975                 '*.camelscrew.com',
1976                 '*.cheap-forum.com',
1977                 '*.cheapforum.net',
1978                 '*.chocoforum.com',
1979                 '*.chocoforum.net',
1980                 '*.clic-topic.com',
1981                 '*.clicboard.com',
1982                 '*.clictopic.com',
1983                 '*.clictopic.net',
1984                 '*.clictopics.com',
1985                 '*.clubdiscussion.net',
1986                 '*.coolbb.net',
1987                 '*.crazy4us.com',
1988                 '*.crazyfruits.net',
1989                 '*.createmyboard.com',
1990                 '*.crewcamel.com',
1991                 '*.cyberfreeforum.com',
1992                 '*.discutforum.com',
1993                 '*.discutfree.com',
1994                 '*.do-forum.com',
1995                 '*.do-goo.com',
1996                 '*.do-goo.net',
1997                 '*.do-talk.com',
1998                 '*.dodiscussion.com',
1999                 '*.dogoo.us',
2000                 '*.easydiscussion.net',
2001                 '*.easyforumlive.com',
2002                 '*.englishboard.net',
2003                 '*.englishboards.com',
2004                 '*.ephpbb.com',
2005                 '*.eraseboard.net',
2006                 '*.eraseboards.net',
2007                 '*.euro-talk.net',
2008                 '*.eurodiscussion.net',
2009                 '*.eurogoo.com',
2010                 '*.exchangesboard.com',
2011                 '*.exprimetoi.net',
2012                 '*.fairtopic.com',
2013                 '*.fforum.biz',
2014                 '*.fforumfree.com',
2015                 '*.first-forum.com',
2016                 '*.firstgoo.com',
2017                 '*.fororama.com',
2018                 '*.forum-2007.com',
2019                 '*.forum-actif.net',
2020                 '*.forum-free.biz',
2021                 '*.forum-free.org',
2022                 '*.forum-motion.com',
2023                 '*.forum0.biz',
2024                 '*.forum0.info',
2025                 '*.forum0.net',
2026                 '*.forum2.biz',
2027                 '*.forum3.biz',
2028                 '*.forum3.info',
2029                 '*.forum5.info',
2030                 '*.forum6.biz',
2031                 '*.forum6.info',
2032                 '*.forum7.biz',
2033                 '*.forum777.com',
2034                 '*.forum8.biz',
2035                 '*.forum9.biz',
2036                 '*.foruma.biz',
2037                 '*.forumactif.biz',
2038                 '*.forumactif.info',
2039                 '*.forumactif.name',
2040                 '*.forumactif.ws',
2041                 '*.forumaction.net',
2042                 '*.forumakers.com',
2043                 '*.forumandco.com',
2044                 '*.forumb.biz',
2045                 '*.forumc.biz',
2046                 '*.forumd.biz',
2047                 '*.forumdediscussions.com',
2048                 '*.forumdediscussions.net',
2049                 '*.forume.biz',
2050                 '*.forumeast.com',
2051                 '*.forumf.biz',
2052                 '*.forumfreek.com',
2053                 '*.forumfreez.com',
2054                 '*.forumg.biz',
2055                 '*.forumh.biz',
2056                 '*.forumh.net',
2057                 '*.forumhope.com',
2058                 '*.forumi.biz',
2059                 '*.forumice.net',
2060                 '*.foruminute.com',
2061                 '*.forumj.biz',
2062                 '*.forumj.net',
2063                 '*.forumjonction.com',
2064                 '*.forumk.biz',
2065                 '*.foruml.biz',
2066                 '*.forumm.biz',
2067                 '*.forummotion.com',
2068                 '*.forummotions.com',
2069                 '*.forumn.biz',
2070                 '*.forumn.net',
2071                 '*.forumo.biz',
2072                 '*.forumonline.biz',
2073                 '*.forumotions.com',
2074                 '*.forump.biz',
2075                 '*.forump.info',
2076                 '*.forumperso.com',
2077                 '*.forumpersos.com',
2078                 '*.forumplatinum.com',
2079                 '*.forumpro.fr',
2080                 '*.forumq.biz',
2081                 '*.forumr.biz',
2082                 '*.forumr.net',
2083                 '*.forumrama.com',
2084                 '*.forums-actifs.com',
2085                 '*.forums-actifs.net',
2086                 '*.forums1.net',
2087                 '*.forumsactifs.com',
2088                 '*.forumsactifs.net',
2089                 '*.forumsfree.org',
2090                 '*.forumsline.com',
2091                 '*.forumsmakers.com',
2092                 '*.forumsmotion.com',
2093                 '*.forumsmotions.com',
2094                 '*.forumt.biz',
2095                 '*.forumv.biz',
2096                 '*.forumvalue.com',
2097                 '*.forumw.biz',
2098                 '*.forumy.biz',
2099                 '*.free-boards.net',
2100                 '*.freediscussion.net',
2101                 '*.freediscussions.net',
2102                 '*.freeforum.me.uk',
2103                 '*.freeforumboard.net',
2104                 '*.freeforumfree.com',
2105                 '*.freevideotalk.com',
2106                 '*.frenchboard.com',
2107                 '*.fruitsandco.com',
2108                 '*.fullboards.com',
2109                 '*.fullsubject.com',
2110                 '*.fullsubject.net',
2111                 '*.get-forum.net',
2112                 '*.getdiscussion.com',
2113                 '*.getgoo.net',
2114                 '*.getgoo.us',
2115                 '*.gettalk.net',
2116                 '*.go-board.com',
2117                 '*.go-board.net',
2118                 '*.go-forum.net',
2119                 '*.go-ogler.com',
2120                 '*.gofreeforum.com',
2121                 '*.gogoo.us',
2122                 '*.goo-board.com',
2123                 '*.goo-boys.com',
2124                 '*.goo-dart.com',
2125                 '*.goo-dole.com',
2126                 '*.goo-done.com',
2127                 '*.gooboards.com',
2128                 '*.goodbb.net',
2129                 '*.goodearths.com',
2130                 '*.goodforum.net',
2131                 '*.goodoles.com',
2132                 '*.goodoolz.com',
2133                 '*.gooforum.com',
2134                 '*.gooforums.com',
2135                 '*.googoolz.com',
2136                 '*.great-forum.com',
2137                 '*.heavenforum.com',
2138                 '*.hforum.biz',
2139                 '*.high-forums.com',
2140                 '*.highbb.com',
2141                 '*.highforum.net',
2142                 '*.hightoxic.com',
2143                 '*.homediscussion.net',
2144                 '*.homegoo.com',
2145                 '*.hooxs.com',
2146                 '*.hot-me.com',
2147                 '*.hot4um.com',
2148                 '*.hotdiscussion.net',
2149                 '*.hotgoo.net',
2150                 '*.in-goo.com',
2151                 '*.in-goo.net',
2152                 '*.infodiscussion.net',
2153                 '*.ingoo.us',
2154                 '*.iowoi.com',
2155                 '*.jforum.biz',
2156                 '*.just-forum.net',
2157                 '*.justboard.net',
2158                 '*.justdiscussion.com',
2159                 '*.justforum.net',
2160                 '*.justgoo.com',
2161                 '*.keuf.net',
2162                 '*.lforum.biz',
2163                 '*.lifediscussion.net',
2164                 '*.lifeme.net',
2165                 '*.lightbb.com',
2166                 '*.logu2.com',
2167                 '*.longdomaine.com',
2168                 '*.lovediscussion.net',
2169                 '*.lowcostforum.com',
2170                 '*.make-free-forum.com',
2171                 '*.makeforumfree.com',
2172                 '*.makefreeforum.com',
2173                 '*.mam9.com',
2174                 '*.manageboard.com',
2175                 '*.max2forum.com',
2176                 '*.meabout.com',
2177                 '*.megabb.com',
2178                 '*.moncontact.com',
2179                 '*.moninter.net',
2180                 '*.motion-forum.net',
2181                 '*.motionforum.net',
2182                 '*.motionsforum.com',
2183                 '*.mrforum.net',
2184                 '*.msnboard.net',
2185                 '*.msnyou.com',
2186                 '*.my-free-board.com',
2187                 '*.my-free-boards.com',
2188                 '*.my-free-forum.com',
2189                 '*.my-free-forums.com',
2190                 '*.my-goo.com',
2191                 '*.my-goo.net',
2192                 '*.mydiscussionboard.com',
2193                 '*.myfreeboard.net',
2194                 '*.mygoo.org',
2195                 '*.myrealboard.com',
2196                 '*.netboarder.com',
2197                 '*.netdiscussion.net',
2198                 '*.netgoo.org',
2199                 '*.new-forum.net',
2200                 '*.newdiscussion.net',
2201                 '*.newgoo.net',
2202                 '*.nforum.biz',
2203                 '*.nice-album.com',
2204                 '*.nice-board.biz',
2205                 '*.nice-board.com',
2206                 '*.nice-board.net',
2207                 '*.nice-boards.com',
2208                 '*.nice-boards.net',
2209                 '*.nice-forum.com',
2210                 '*.nice-forum.net',
2211                 '*.nice-forums.com',
2212                 '*.nice-forums.net',
2213                 '*.nice-gallery.net',
2214                 '*.nice-subject.com',
2215                 '*.nice-subjects.com',
2216                 '*.nice-theme.com',
2217                 '*.nice-topic.com',
2218                 '*.nice-topics.com',
2219                 '*.nicealbums.com',
2220                 '*.niceboard.biz',
2221                 '*.niceboard.net',
2222                 '*.niceboards.net',
2223                 '*.nicegalleries.net',
2224                 '*.nicesubject.com',
2225                 '*.nicesubjects.com',
2226                 '*.nicetopic.net',
2227                 '*.nicetopics.com',
2228                 '*.nightforum.net',
2229                 '*.nocost-forum.com',
2230                 '*.nofeeforum.com',
2231                 '*.one-forum.net',
2232                 '*.onediscussion.net',
2233                 '*.onegoo.us',
2234                 '*.onlinegoo.com',
2235                 '*.onlyquery.com',
2236                 '*.open-board.com',
2237                 '*.openu2.com',
2238                 '*.othersboards.com',
2239                 '*.own0.com',
2240                 '*.pforum.biz',
2241                 '*.phpbb9.com',
2242                 '*.phpbbtest.com',
2243                 '*.positifforum.com',
2244                 '*.postalboard.com',
2245                 '*.prodiscussion.net',
2246                 '*.progoo.us',
2247                 '*.pureforum.net',
2248                 '*.qforum.biz',
2249                 '*.quickbb.net',
2250                 '*.realbb.net',
2251                 '*.realfreeforum.com',
2252                 '*.realmsn.com',
2253                 '*.rforum.biz',
2254                 '*.road2us.com',
2255                 '*.roomforum.com',
2256                 '*.saveboard.com',
2257                 '*.screwcamel.com',
2258                 '*.screwcamels.com',
2259                 '*.sendboard.com',
2260                 '*.sephorum.com',
2261                 '*.sforum.biz',
2262                 '*.shootboard.com',
2263                 '*.shop-forum.net',
2264                 '*.shopsubject.com',
2265                 '*.simpleboard.net',
2266                 '*.site-forums.com',
2267                 '*.smileyforum.net',
2268                 '*.sos-forum.net',
2269                 '*.sos4um.com',
2270                 '*.sos4um.net',
2271                 '*.sosforum.net',
2272                 '*.speedyforum.com',
2273                 '*.stationforum.com',
2274                 '*.subject-expert.com',
2275                 '*.subject-line.com',
2276                 '*.subject-tracer.com',
2277                 '*.subjectchange.com',
2278                 '*.subjectdeals.com',
2279                 '*.subjectdebate.com',
2280                 '*.subjectdone.com',
2281                 '*.subjectonline.com',
2282                 '*.subjectschange.com',
2283                 '*.subjectsecrets.com',
2284                 '*.super-forum.net',
2285                 '*.talk-forums.com',
2286                 '*.team-forum.net',
2287                 '*.team-talk.net',
2288                 '*.teamconvention.com',
2289                 '*.teamgoo.net',
2290                 '*.teensboards.com',
2291                 '*.the-talk.net',
2292                 '*.the-up.com',
2293                 '*.thegoo.us',
2294                 '*.thinksubject.com',
2295                 '*.top-board.com',
2296                 '*.top-forum.net',
2297                 '*.top-me.com',
2298                 '*.top-talk.net',
2299                 '*.topdiscussion.com',
2300                 '*.topgoo.net',
2301                 '*.topic-board.com',
2302                 '*.topic-board.net',
2303                 '*.topic-debate.com',
2304                 '*.topic-ideas.com',
2305                 '*.topic-mail.com',
2306                 '*.topic-zone.com',
2307                 '*.topicboard.net',
2308                 '*.topicboards.com',
2309                 '*.topicmanager.com',
2310                 '*.topicsolutions.net',
2311                 '*.toxicfarm.com',
2312                 '*.unlimitboard.com',
2313                 '*.unlimitedboard.com',
2314                 '*.unlimitedforum.com',
2315                 '*.up-with.com',
2316                 '*.up-your.com',
2317                 '*.urealboard.com',
2318                 '*.user-board.net',
2319                 '*.userboard.net',
2320                 '*.users-board.com',
2321                 '*.users-board.net',
2322                 '*.usersboard.com',
2323                 '*.usersboard.net',
2324                 '*.webgoo.us',
2325                 '*.withboards.com',
2326                 '*.withme.us',
2327                 '*.worldgoo.com',
2328                 '*.yahooboard.net',
2329                 '*.yforum.biz',
2330                 '*.yoo7.com',
2331                 '*.youneed.us',
2332                 '*.your-board.com',
2333                 '*.your-talk.com',
2334                 '*.yourme.net',
2335                 '*.zforum.biz',
2336
2337                 // 75.126.156.15 redirect to forumactif.com
2338                 '*.actifforum.com',
2339                 '*.fr-bb.com',
2340                 '*.superforum.fr',
2341
2342                 // 75.126.156.15 redirect to editboard.com
2343                 '*.bbfr.net',
2344                 '*.bbgraf.com',
2345                 '*.cinebb.com',
2346                 '*.darkbb.com',
2347                 '*.dynamicbb.com',
2348                 '*.zikforum.com',
2349
2350                 // 74.86.25.140 Used: sosblog.com
2351                 '*.0-up.com',
2352                 '*.0-yo.com',
2353                 '*.04live.com',
2354                 '*.06fr.com',
2355                 '*.0fra.com',
2356                 '*.0jet.com',
2357                 '*.0yoo.com',
2358                 '*.1toxic.com',
2359                 '*.2k00.com',
2360                 '*.2xik.com',
2361                 '*.blog-2007.com',
2362                 '*.blog-2008.com',
2363                 '*.blog-2009.com',
2364                 '*.blog-2010.com',
2365                 '*.blog-actif.net',
2366                 '*.blog-marley.com',
2367                 '*.blog-talker.com',
2368                 '*.blog2009.com',
2369                 '*.blogactif.net',
2370                 '*.blogalbums.com',
2371                 '*.blogalerie.com',
2372                 '*.blogaleries.com',
2373                 '*.blogallerys.com',
2374                 '*.blogandme.com',
2375                 '*.blogandyou.com',
2376                 '*.blogbubble.net',
2377                 '*.blogdollz.com',
2378                 '*.bloggeuse.net',
2379                 '*.bloggeuses.com',
2380                 '*.bloginstinct.com',
2381                 '*.bloginternet.net',
2382                 '*.blogmakers.net',
2383                 '*.blogmarley.net',
2384                 '*.blogminister.net',
2385                 '*.blogmorane.com',
2386                 '*.blognboard.com',
2387                 '*.blogotek.net',
2388                 '*.blogpas.com',
2389                 '*.blogpublisher.net',
2390                 '*.blogsalbum.com',
2391                 '*.blogsalbums.com',
2392                 '*.blogsfan.net',
2393                 '*.blogsgallerys.com',
2394                 '*.blogsitephp.com',
2395                 '*.blogsland.net',
2396                 '*.blogsmaker.com',
2397                 '*.blogsmakers.com',
2398                 '*.blogspeed.net',
2399                 '*.blogsup.net',
2400                 '*.blogsutil.com',
2401                 '*.blogsutils.com',
2402                 '*.blogsystem.net',
2403                 '*.blogtalker.net',
2404                 '*.blogtheque.net',
2405                 '*.blogutil.com',
2406                 '*.blogvsboard.com',
2407                 '*.briceblog.com',
2408                 '*.cibleblog.com',
2409                 '*.cristalblog.com',
2410                 '*.crystalblog.net',
2411                 '*.dad-blog.com',
2412                 '*.daddy-blog.com',
2413                 '*.defaultblog.com',
2414                 '*.discussionsblog.com',
2415                 '*.dollzblog.com',
2416                 '*.dtoxic.com',
2417                 '*.easiestblog.net',
2418                 '*.espaceblog.net',
2419                 '*.exitblog.net',
2420                 '*.expensiveblog.com',
2421                 '*.extra-blog.net',
2422                 '*.extrablog.net',
2423                 '*.facileblog.com',
2424                 '*.forblogger.com',
2425                 '*.forumsblogs.com',
2426                 '*.freephpblog.com',
2427                 '*.fresh-blog.net',
2428                 '*.galleryblog.net',
2429                 '*.galleryblogs.net',
2430                 '*.gallerysblog.com',
2431                 '*.gallerysblogs.com',
2432                 '*.hyper-blog.net',
2433                 '*.hyper-blogger.com',
2434                 '*.hyper-blogger.net',
2435                 '*.hyperblogger.net',
2436                 '*.instinctblog.com',
2437                 '*.jeunblog.com',
2438                 '*.jeuneblog.com',
2439                 '*.judblog.com',
2440                 '*.makeblog.net',
2441                 '*.man-blog.net',
2442                 '*.man-blogs.com',
2443                 '*.man-blogs.net',
2444                 '*.manblog.net',
2445                 '*.manblog.org',
2446                 '*.manblog.us',
2447                 '*.manblogs.net',
2448                 '*.mansblog.net',
2449                 '*.mansblogs.com',
2450                 '*.mansblogs.net',
2451                 '*.meetingsblogs.com',
2452                 '*.men-blog.net',
2453                 '*.men-blogs.com',
2454                 '*.men-blogs.net',
2455                 '*.menblog.us',
2456                 '*.menblogs.net',
2457                 '*.mensblogs.net',
2458                 '*.messaginblog.com',
2459                 '*.monblogger.com',
2460                 '*.mum-blog.com',
2461                 '*.mummy-blog.com',
2462                 '*.mummyblog.com',
2463                 '*.myareablog.com',
2464                 '*.myblog-online.net',
2465                 '*.mybloginternet.com',
2466                 '*.myblogland.com',
2467                 '*.myblogmag.com',
2468                 '*.myfreshblog.com',
2469                 '*.myinternetblog.net',
2470                 '*.myoverblog.com',
2471                 '*.myoverblog.net',
2472                 '*.mysharedblog.com',
2473                 '*.nice-albums.com',
2474                 '*.nice-galleries.com',
2475                 '*.nicealbum.net',
2476                 '*.nicegallery.net',
2477                 '*.notreblogger.com',
2478                 '*.outilblog.com',
2479                 '*.over-blogger.com',
2480                 '*.overblogger.com',
2481                 '*.pasblog.com',
2482                 '*.pasblog.net',
2483                 '*.perfect-blog.net',
2484                 '*.perfectblog.net',
2485                 '*.phpblogsite.com',
2486                 '*.phpmyblog.net',
2487                 '*.plateformeblog.com',
2488                 '*.playblogger.com',
2489                 '*.publishmyblog.com',
2490                 '*.pulseblog.net',
2491                 '*.pulseblogs.com',
2492                 '*.puretoxic.com',
2493                 '*.reservedblog.com',
2494                 '*.shareblog.net',
2495                 '*.shareblogs.net',
2496                 '*.shared-blogs.com',
2497                 '*.sharedblog.net',
2498                 '*.sharedblogs.net',
2499                 '*.solideblog.com',
2500                 '*.systemeblog.com',
2501                 '*.talkmeblog.com',
2502                 '*.toolsblog.net',
2503                 '*.toxicplace.com',
2504                 '*.ufreeblog.com',
2505                 '*.uliveblog.com',
2506                 '*.ultratoxic.com',
2507                 '*.utilblog.com',
2508                 '*.utilblogs.com',
2509                 '*.utilsblog.com',
2510                 '*.utilsblogs.com',
2511                 '*.various-blog.com',
2512                 '*.various-blog.net',
2513                 '*.various-blogs.com',
2514                 '*.various-blogs.net',
2515                 '*.variusblog.com',
2516                 '*.versusblog.com',
2517                 '*.vieuxblog.com',
2518                 '*.web-day.net',
2519                 '*.whatsblog.net',
2520                 '*.woman-blog.net',
2521                 '*.woman-blogs.com',
2522                 '*.woman-blogs.net',
2523                 '*.womanblog.com',
2524                 '*.womanblog.org',
2525                 '*.womanblog.us',
2526                 '*.womanblogs.net',
2527                 '*.womansblogs.com',
2528                 '*.womansblogs.net',
2529                 '*.women-blog.net',
2530                 '*.women-blogs.com',
2531                 '*.women-blogs.net',
2532                 '*.womenblog.us',
2533                 '*.womenblogs.net',
2534                 '*.womensblog.net',
2535                 '*.womensblogs.net',
2536                 '*.youblog.net',
2537                 '*.yourliveblog.com',
2538                 '*.yourweblog.net',
2539         ),
2540         '*.forumcommunity.net',
2541         '*.forumer.com',
2542         'members.forumfree.com',        // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2543         '*.forumfree.net',                      // 74.53.57.70(*.static.theplanet.com)
2544         'forumhosting.org',
2545         '*.forums.com',
2546         'forumbolt.com',
2547         'phpbb.forumgratis.com',
2548         'forumlari.net',
2549         '*.forumlivre.com',
2550         'forumnow.com.br',
2551         '*.forumppl.com',
2552         'Forumprofi.de' => '#^(?:.*\.)?forumprofi[0-9]*\.de$#',
2553         'ForumUp' => '#^^(?:.*\.)?forumup\.' .
2554                 '(?:at|be|ca|ch|co\.nz|co\.uk|co\.za|com|com\.au|com\.mx|cn|' .
2555                 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' .
2556                 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#',
2557         '*.fory.pl',
2558         'fotolog.com',
2559         '*.fr33webhost.com',
2560         '*.free20.com',                 // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
2561         '*.free-25.de',
2562         '*.free-bb.com',
2563         'Free-Blog-Hosting.com' => array(
2564                 '*.free-blog-hosting.com',              // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2565                 '*.blog-tonite.com',                    // ns *.phpwebhosting.com
2566                 '*.blogznow.com',                               // ns *.phpwebhosting.com
2567                 '*.myblogstreet.com',                   // by Robert Vigil, ns *.phpwebhosting.com
2568                 '*.blogbeam.com',                               // by Robert Vigil, ns *.phpwebhosting.com
2569         ),
2570         '*.free-forums.org',            // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
2571         'free-guestbook.net',
2572         '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
2573         'freebb.nl',
2574         '*.freeclans.de',
2575         '*.freehostplace.com',  // by contact at keepclear.co.uk
2576         '*.freelinuxhost.com',  // by 100webspace.com
2577         '*.nofeehost.com',
2578         '*.freehyperspace.com',
2579         'freeforum.at',                 // by Sandro Wilhelmy
2580         'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
2581         '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
2582         '*.freemyforumadult.com',       // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com
2583         '*.freewebhostingpro.com',
2584         '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
2585         'FreeWebHostingArea.com' => array(      // or www.freewha.com
2586                 '*.6te.net',
2587                 '*.ueuo.com',
2588                 '*.orgfree.com',
2589         ),
2590         '*.freewebpage.org',
2591         'Freewebs.com' => array(        // by inquiries at freewebs.com
2592                 'freewebs.com',
2593                 'freewebsfarms.com',
2594         ),
2595         '*.freewebspace.net.au',
2596         'freewebtown.com',
2597         '*.freemyforum.com',    // by messahost at gmail.com
2598         'freepowerboards.com',
2599         '*.freepowerboards.com',
2600         '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
2601         'Funpic.de' => array(   // by alexander at liemen.net
2602                 '*.funpic.de',
2603                 '*.funpic.org',
2604         ),
2605         'gb-hoster.de',
2606         '*.genblogger.com',
2607         'GetBetterHosting.com' => array(
2608                 '*.30mb.com',   // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
2609                 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
2610         ),
2611         '*.gexxe.com',
2612         '*.goodboard.de',
2613         'gossiping.net',
2614         '*.greatnuke.com',
2615         '*.guestbook.de',
2616         'gwebspace.de',
2617         'Google.com' => array(
2618                 '*.blogspot.com',
2619                 'docs.google.com',
2620                 '*.googlegroups.com',           ///web/
2621                 '*.googlepages.com',
2622                 'groups-beta.google.com',
2623                 'groups.google.*',       ///group/ Seems widely distributed
2624                         //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2625                         //'groups.google.de', 'groups.google.es',  'groups.google.fr',
2626                         //'groups.google.it', ...
2627         ),
2628         'guestbook.at',
2629         'club.giovani.it',
2630         '*.gratis-server.de',
2631         'healthcaregroup.com',
2632         '*.heliohost.org',
2633         'Halverston Holdings Limited' => array( // pochta.ru?lng=en
2634                 // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
2635                 '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
2636                 '*.front.ru',           // (domain at hc.ru)
2637                 '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
2638                 '*.hotbox.ru',          // (domain at hc.ru)
2639                 '*.hotmail.ru',         // (hosting at hc.ru)
2640                 '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
2641                 '*.land.ru',            // (domain at hc.ru)
2642                 '*.mail15.com',         // (hosting at hc.ru)
2643                 '*.mail333.com',        // (hosting at hc.ru)
2644                 '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
2645                 '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
2646                 '*.pisem.net',          // (hosting at hc.ru)
2647                 '*.pochta.ru',          // (domain at hc.ru)
2648                 '*.pochtamt.ru',        // (domain at hc.ru)
2649                 '*.pop3.ru',            // (domain at hc.ru)
2650                 '*.rbcmail.ru',         // (domain at hc.ru)
2651                 '*.smtp.ru',            // (domain at hc.ru)
2652         ),
2653         '*.hiblogger.com',              // by chiaokin at gmail.com
2654         '*.hit.bg',                             // by forumup.com ??
2655         '*.homeblock.com',              // 72.55.141.237(*.static.privatedns.com)
2656         '*.host-page.com',
2657         '*.hostingclub.de',
2658         'forums.hspn.com',
2659         '*.httpsuites.com',
2660         '*.hut2.ru',
2661         'ibfree.org',                   // 208.101.45.88
2662         'IC.cz' => array(
2663                 '*.ezin.cz',            // internetcentrum at gmail.com, ns ignum.com, ignum.cz
2664                 '*.hu.cz',                      // internetcentrum at gmail.com
2665                 '*.hustej.net',         // baz at bluedot.cz, dom-reg-joker at ignum.cz
2666                 '*.ic.cz',                      // internetcentrum at gmail.com
2667                 '*.kx.cz',                      // jan at karabina.cz, info at ignum.cz
2668                 '*.own.cz',                     // internetcentrum at gmail.com
2669                 '*.phorum.cz',          // internetcentrum at gmail.com
2670                 '*.tym.cz',                     // internetcentrum at gmail.com
2671                 '*.tym.sk',                     // jobot at ignum.cz
2672                 '*.wu.cz',                      // jan at karabina.cz, info at ignum.cz
2673                 '*.yc.cz',                      // ivo at karabina.cz, jan at karabina.cz
2674                 '*.yw.sk',                      // jobot at ignum.cz
2675         ),
2676         'icedesigns at gmail.com' => array(     // by Boling Jiang (icedesigns at gmail.com)
2677                 '*.0moola.com',
2678                 '*.3000mb.com',
2679                 '.501megs.com',
2680                 '*.teracities.com',
2681                 '*.xoompages.com',
2682         ),
2683         '*.icspace.net',
2684         'iEUROP.net' => array(
2685                 '*.ibelgique.com',
2686                 '*.iespana.es',
2687                 '*.ifrance.com',
2688                 '*.iitalia.com',
2689                 '*.iquebec.com',
2690                 '*.isuisse.com',
2691         ),
2692         '*.ihateclowns.net',
2693         '*.ii55.com',
2694         '*.ipbfree.com',
2695         '*.iphorum.com',
2696         '*.blog.ijijiji.com',
2697         '*.info.com',
2698         '*.informe.com',
2699         'it168.com',
2700         '.iwannaforum.com',
2701         '*.jconserv.net',
2702         '*.jeeran.com',
2703         '*.jeun.fr',
2704         '*.joolo.com',
2705         '*.journalscape.com',
2706         '*.justfree.com',
2707         'kataweb.it' => array(          // kata-redir.kataweb.it
2708                 '*.blog.kataweb.it',
2709                 '*.repubblica.it',
2710         ),
2711         '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
2712         '*.kokoom.com',
2713         'koolpages.com',
2714         '*.kostenlose-foren.org',
2715         '*.ksiegagosci.info',
2716         'LaCoctelera.com' => array(
2717                 'lacoctelera.com',      // by alberto at the-cocktail.com
2718                 'espacioblog.com',      // by dominios at ferca.com
2719         ),
2720         'Lide.cz' => array(
2721                 '*.lide.cz',
2722                 '*.sblog.cz',
2723         ),
2724         '*.lioru.com',
2725         'limmon.net',
2726         'linkinn.com',
2727         'lipstick.com',                 // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
2728         'listible.com',                 ///list/
2729         'Livedoor.com' => array(
2730                 'blog.livedoor.jp',
2731                 '*.blog.livedoor.com',  // redirection
2732         ),
2733         '*.livejournal.com',
2734         '.load4.net',                   // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous
2735         '*.logme.nl',
2736         'lol.to',
2737         'ltss.luton.ac.uk',
2738         'Lycos.com' => array(
2739                 '.angelfire.com',       // angelfire.lycos.com
2740
2741                 '*.jubii.dk',   // search., medlem.
2742                 '*.jubiiblog.co.uk',
2743                 '*.jubiiblog.com.es',   // by Lycos Europe GmbH
2744                 '*.jubiiblog.de',
2745                 '*.jubiiblog.dk',
2746                 '*.jubiiblog.fr',
2747                 '*.jubiiblog.it',
2748                 '*.jubiiblog.nl',
2749
2750                 '*.lycos.at',
2751                 '*.lycos.ch',
2752                 '*.lycos.co.uk',
2753                 'angelfire.lycos.com',
2754                 '*.lycos.de',
2755                 '*.lycos.es',
2756                 '*.lycos.fr',
2757                 '*.lycos.it',           // by Lycos Europe GmbH
2758                 '*.lycos.nl',
2759
2760                 '*.spray.se',
2761                 '*.sprayblog.se',
2762
2763                 '*.tripod.com',
2764         ),
2765         '*.mastertopforum.com',
2766         'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2767         'meneame.net',
2768         '*.memebot.com',
2769         '*.messageboard.nl',
2770         'mokono GmbH' => array(
2771                 '*.blog.com.es',
2772                 '*.blog.de',
2773                 '*.blog.fr',
2774                 '*.blog.co.uk',
2775                 '*.blog.ca',
2776                 '*.blogs.se',
2777                 '*.blogs.fi',
2778                 '*.blogs.no',
2779                 '*.blogs.dk',
2780                 '*.blogs.ro',
2781                 '*.weblogs.pl',
2782                 '*.weblogs.cz',
2783                 '*.weblogs.hu',
2784         ),
2785         'mojklc.com',
2786         '*.mundoforo.com',
2787         '*.money-host.com',
2788         'MonForum.com' => array(
2789                 '*.monforum.com',
2790                 '*.monforum.fr',
2791         ),
2792         '*.multiforum.nl',              // by Ron Warris (info at phpbbhost.nl)
2793         '*.my3gb.com',                  // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2794         '*.my10gb.com',                 // by craig_gatenby at hotmail.com
2795         'myblog.is',
2796         'myblogma.com',
2797         '*.myblogvoice.com',
2798         'myblogwiki.com',
2799         '*.myforum.ro',
2800         '*.myfreewebhost.org',  // 216.32.73.163(*.static.reverse.ltdomains.com)
2801         '*.myfreewebs.net',
2802         '*.mysite.com',
2803         '*.myxhost.com',
2804         '*.netfast.org',
2805         'NetGears.com' => array(
2806                 // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related
2807                 '*.9k.com',                             // 64.39.31.55(netgears.com)
2808                 '*.freewebspace.com',   // 64.49.236.72
2809         ),
2810         'Netscape.com' => array('*.netscape.com'),
2811         'users.newblog.com',
2812         'neweconomics.info',
2813         '*.newsit.es',                          // 75.126.252.108
2814         '*.nm.ru',
2815         '*.nmj.pl',
2816         '*.nocatch.net',                        // 74.86.93.190(layeredpanel.com => ...)
2817         'Northsky.com' => array(
2818                 // by hostmaster at northsky.com
2819                 // northsky.com redirects to communityarchitect.com
2820
2821                 // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop
2822                 '*.00author.com',
2823                 '*.00band.com',
2824                 '*.00books.com',
2825                 '*.00cash.com',
2826                 '*.00cd.com',
2827                 '*.00dvd.com',
2828                 '*.00family.com',
2829                 '*.00game.com',
2830                 '*.00home.com',
2831                 '*.00it.com',
2832                 '*.00me.com',
2833                 '*.00movies.com',
2834                 '*.00page.com',
2835                 '*.00politics.com',
2836                 '*.00sf.com',
2837                 '*.00show.com',
2838                 '*.00song.com',
2839                 '*.00trek.com',
2840                 '*.00video.com',
2841                 '*.0me.com',
2842                 '*.0pi.com',
2843                 '*.happy-couple.com',
2844                 '*.warp0.com',
2845
2846                 '*.50megs.com',         // 64.136.25.170
2847
2848                 // 64.136.25.171(mail.50megs.com) by Mark Bishop
2849                 '*.00server.com',
2850                 '*.communityarchitect.com',             // Only mysite.com has a link to communityarchitect.com
2851                 '*.fanspace.com',
2852
2853                 // 64.136.25.168 by Mark Bishop
2854                 '*.00go.com',
2855                 '*.00space.com',
2856                 '*.00sports.com',
2857         ),
2858         '*.obm.cn',                             // by xiaobak at yahoo.com.cn
2859         '*.ocom.pl',                    // 67.15.104.83(*.ev1servers.net)
2860         'onlyfree.de',
2861         '*.ooblez.com',                 // by John Nolande (ooblez at hotmail.com)
2862         '*.ohost.de',
2863         'Osemka.pl' => array(   // by Osemka Internet Media (biuro at nazwa.pl)
2864                 '.friko.pl',
2865                 '.jak.pl',
2866                 '.nazwa.pl',
2867                 '*.prv.pl',                     // by NetArt (biuro at nazwa.pl)
2868                 '.w8w.pl',
2869                 '.za.pl',
2870                 '.skysquad.net',        // by Dorota Brzezinska (info at nazwa.pl)
2871         ),
2872         'oyax.com',                             ///user_links.php
2873         '*.p2a.pl',
2874         '*.parlaris.com',
2875         '*.pathfinder.gr',
2876         '*.persianblog.com',
2877         '*.phorum.pl',
2878         'Phpbb24.com' => array( // by Daniel Eriksson
2879                 '*.createforum.us',     // registry at webbland.se
2880                 '*.forumportal.us',     // registry at webbland.se
2881                 '*.freeportal.us',      // registry at network24.se
2882                 '*.phpbb2.us',          // daniel at danielos.com
2883                 '*.phpbb24.com',        // daniel at danielos.com
2884                 '*.myforumportal.com',  // daniel at webbland.se
2885         ),
2886         'phpbb4you.com',
2887         'phpbbcommunity.com',
2888         '*.phpbbx.de',
2889         '*.pochta.ru',
2890         '*.portbb.com',
2891         '*.portcms.com',
2892         'powerwebmaster.de',
2893         'pro-board.com',                // by SEM Optimization Services Ltd (2485 at coverage1.com)
2894         'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
2895         '*.probook.de',
2896         '*.prohosting.com',     // by Nick Wood (admin at dns-solutions.net)
2897         '*.pun.pl',
2898         'putfile.com',
2899         '*.quickfreehost.com',
2900         'quizilla.com',
2901         '*.quotaless.com',
2902         '*.qupis.com',          // by Xisto Corporation (shridhar at xisto.com)
2903         'razyboard.com',
2904         '*.rbbloggers.com',     // 88.85.78.82 by manager at vertona.com
2905         'realhp.de',
2906         'reddit.com',           ///user/
2907         'rgbdesign at gmail.com' => array(      // by RB2 (rgbdesign at gmail.com)
2908                 '*.juicypornhost.com',
2909                 '*.pornzonehost.com',
2910                 '*.xhostar.com',
2911         ),
2912         'RIN.ru' => array(
2913                 '*.sbn.bz',
2914                 '*.wol.bz',
2915         ),
2916         '*.sayt.ws',
2917         'Seblg.com' => array(
2918                 '*.seblg.com',          // by Dao Lee (st at seblg.com)
2919                 '*.xshorturl.org',      // by Tonny Lee (admin at seblg.com)
2920         ),
2921         '*.seo-blog.org',
2922         '*.shoutpost.com',
2923         '*.siamforum.com',
2924         '*.siteburg.com',
2925         '*.sitehome.ru',
2926         '*.sitesfree.com',              // support at livesearching.com
2927         '*.sitesled.com',
2928         'skinnymoose.com',              // by Steven Remington (admin at outdoorwebhosting.com)
2929         'SmarTrans.com' => array(
2930                 '.3w.to',
2931                 '.aim.to',
2932                 '.djmp.jp',
2933                 '.nihongourl.nu',
2934                 '.urljp.com',
2935                 '.www1.to',
2936                 '.www2.to',
2937                 '.www3.to',
2938         ),
2939         '*.spazioblog.it',                      // by Ivan Maria Spadacenta
2940         '*.spazioforum.it',                     // by Ivan Maria Spadacenta
2941         'members.spboards.com',
2942         'forums.speedguide.net',
2943         'Sphosting.com' => array(       // by admin at sphosting.com
2944                 '*.hostinplace.com',    // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229)
2945                 '*.sphosting.com',              // 66.197.204.229(sp3.sphosting.net)
2946                 '*.sphosting.net',              // 66.197.204.229(*snip*), redirect to sphosting.com
2947                 '*.spboards.com',               // 66.197.146.104(sp2.sphosting.com -> Non-existent)
2948                 'spweblog.com',                 // 66.197.146.101(sp2.sphosting.com -> Non-existent)
2949         ),
2950         '*.spicyblogger.com',
2951         '*.spotbb.com',
2952         '.squadz.net',                          // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
2953         '*.squarespace.com',
2954         'stickypond.com',
2955         'stormloader.com',
2956         'strikebang.com',
2957         '*.sultryserver.com',
2958         '*.t35.com',
2959         '*.talks.at',
2960         'tabletpcbuzz.com',
2961         '*.talkthis.com',
2962         'tbns.net',
2963         'telasipforums.com',
2964         'theforumhub.com',
2965         'thestudentunderground.org',
2966         'think.ubc.ca',
2967         '*.thumblogger.com',
2968         'Topix.com' => array(
2969                 'topix.com',
2970                 'topix.net',
2971         ),
2972         'forum.tourism-talk.com.au',
2973         'tycho at e-lab.nl' => array(
2974                 '*.234mb.com',          // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19)
2975                 '*.1234mb.com',         // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl)
2976         ),
2977         '*.tumblr.com',
2978         'UcoZ Web-Services' => array(
2979                 '*.3dn.ru',
2980                 '*.clan.su',
2981                 '*.moy.su',
2982                 '*.my1.ru',
2983                 '*.p0.ru',
2984                 '*.pp.net.ua',
2985                 '*.ucoz.co.uk',
2986                 '*.ucoz.com',
2987                 '*.ucoz.net',
2988                 '*.ucoz.org',
2989                 '*.ucoz.ru',
2990                 '*.ws.co.ua',
2991         ),
2992         '*.unforo.net',
2993         'veoh.com',
2994         '*.vdforum.ru',
2995         '*.vtost.com',
2996         '*.vidiac.com',
2997         'Voila.fr' => array('.site.voila.fr'),
2998         'volny.cz',
2999         'voy.com',
3000         '*.welover.org',
3001         'Web1000.com' => array( // http://www.web1000.com/register_new2.php
3002                 '*.fasthost.tv',
3003                 '*.hothost.tv',
3004                 '*.isgreat.tv',
3005                 '*.issexy.tv',
3006                 '*.isterrible.tv',
3007                 '*.somegood.tv',
3008                 '*.adultnations.com',
3009                 '*.alladultfemale.com',
3010                 '*.alladultmale.com',
3011                 '*.allbisexual.com',
3012                 '*.allbreast.com',
3013                 '*.allfeminism.com',
3014                 '*.allmanpages.com',
3015                 '*.allmendirect.com',
3016                 '*.allphotoalbum.com',
3017                 '*.allsexpages.com',
3018                 '*.allwomanweb.com',
3019                 '*.attorney-site.com',
3020                 '*.bedclip.com',
3021                 '*.bestfamilysite.com',
3022                 '*.bestmusicpages.com',
3023                 '*.bigmoron.com',
3024                 '*.bourgeoisonline.com',
3025                 '*.candyfrom.us',
3026                 '*.cartoonhit.com',
3027                 '*.cat-on-line.com',
3028                 '*.chokesondick.com',
3029                 '*.closeupsof.us',
3030                 '*.cpa-site.com',
3031                 '*.dampgirl.com',
3032                 '*.dampgirls.com',
3033                 '*.deepestfetish.com',
3034                 '*.docspages.com',
3035                 '*.dog-on-line.com',
3036                 '*.dogcountries.com',
3037                 '*.dognations.com',
3038                 '*.doingitwith.us',
3039                 '*.drenchedface.com',
3040                 '*.drenchedlips.com',
3041                 '*.drspages.com',
3042                 '*.edogden.com',
3043                 '*.eroticountry.com',
3044                 '*.fasthost.tv',
3045                 '*.fineststars.com',
3046                 '*.foronlinegames.com',
3047                 '*.forplanetearth.com',
3048                 '*.freeadultparty.com',
3049                 '*.freespeechsite.com',
3050                 '*.gayadultxxx.com',
3051                 '*.gaytaboo.com',
3052                 '*.greatcookery.com',
3053                 '*.greatrecipepages.com',
3054                 '*.greatstreamingvideo.com',
3055                 '*.hatesit.com',
3056                 '*.hothost.tv',
3057                 '*.iscrappy.com',
3058                 '*.isgreat.tv',
3059                 '*.issexy.tv',
3060                 '*.isterrible.tv',
3061                 '*.itinto.us',
3062                 '*.japannudes.net',
3063                 '*.jesussave.us',
3064                 '*.jesussaveus.com',
3065                 '*.labialand.com',
3066                 '*.lettersfrom.us',
3067                 '*.lookingat.us',
3068                 '*.lunaticsworld.com',
3069                 '*.microphallus.com',
3070                 '*.mycatshow.com',
3071                 '*.mydogshow.com',
3072                 '*.myhardman.com',
3073                 '*.mylawsite.net',
3074                 '*.mylovething.com',
3075                 '*.onasoapbox.com',
3076                 '*.onlinepulpit.com',
3077                 '*.petitionthegovernment.com',
3078                 '*.photosfor.us',
3079                 '*.picturetrades.com',
3080                 '*.pleasekiss.us',
3081                 '*.politicalemergency.com',
3082                 '*.power-emergency.com',
3083                 '*.prayingfor.us',
3084                 '*.realbadidea.com',
3085                 '*.realisticpolitics.com',
3086                 '*.reallybites.com',
3087                 '*.reallypumping.us',
3088                 '*.reallyrules.com',
3089                 '*.reallysuckass.com',
3090                 '*.reallysucksass.com',
3091                 '*.realsweetheart.com',
3092                 '*.rottenass.com',
3093                 '*.schoolreference.com',
3094                 '*.sexheroes.com',
3095                 '*.sharewith.us',
3096                 '*.smutstars.com',
3097                 '*.soakinglips.com',
3098                 '*.somegood.tv',
3099                 '*.songsfrom.us',
3100                 '*.stinkingfart.com',
3101                 '*.stinkyhands.com',
3102                 '*.storiesfrom.us',
3103                 '*.taboocountry.com',
3104                 '*.television-series.com',
3105                 '*.thisbelongsto.us',
3106                 '*.totallyboning.us',
3107                 '*.vaginasisters.com',
3108                 '*.verydirtylaundry.com',
3109                 '*.videosfor.us',
3110                 '*.videosfrom.us',
3111                 '*.videosof.us',
3112                 '*.virtualdogshit.com',
3113                 '*.web1000.com',
3114                 '*.webpicturebook.com',
3115                 '*.wronger.com',
3116                 '*.xxxnations.com',
3117                 '*.yourwaywith.us',
3118         ),
3119         'webblog.ru',
3120         'weblogmaniacs.com',
3121         '.webng.com',                   // www.*, www3.*
3122         '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
3123         'websitetoolbox.com',
3124         '*.webtropia.com',
3125         'Welnet.de' => array(
3126                 'welnet.de',
3127                 'welnet4u.de',
3128         ),
3129         'wh-gb.de',
3130         '*.wikidot.com',
3131         '*.wizhoo.com',                 // by Comp U Door (sales at comp-u-door.com)
3132         '*.wmjblogs.ru',
3133         '*.wordpress.com',
3134         '.wsboards.com',                // by Chris Breen (Cbween at gmail.com)
3135         'xeboards.com',                 // by Brian Shea (bshea at xeservers.com)
3136         '*.xforum.se',
3137         'xfreeforum.com',
3138         '*.xhost.ro',                   // by domain-admin at listserv.rnc.ro
3139         '*.xoomwebs.com',
3140         '.xterm.org',
3141         '.freeblogs.xp.tl',
3142         '*.xphost.org',                 // by alex alex (alrusnac at hotmail.com)
3143         '*.ya.com',                             // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
3144         'Yahoo.com' => array(
3145                 'flickr.com',
3146                 'geocities.com',
3147         ),
3148         'YANDEX, LLC.' => array(        // noc at yandex.net
3149                 '*.narod.ru',
3150                 'ya.ru',
3151                 'yandex.ru',
3152         ),
3153         '*.yeahost.com',
3154         'yourfreebb.de',
3155         'Your-Websites.com' => array(
3156                 '*.your-websites.net',
3157                 '*.web-space.ws',
3158         ),
3159
3160
3161         '*.heliohost.org',      // by ashoat at gmail.com
3162         'X10Hosting.com' => array(
3163                 // by support at clockworkcomputers.com
3164                 '*.x10hosting.com',
3165                 '*.elementfx.com',
3166                 '*.exofire.net',
3167                 '*.pcriot.com',
3168         ),
3169         '.zendurl.com',         // by ajcar1992 at gmail.com
3170 );
3171
3172 // --------------------------------------------------
3173
3174 $blocklist['B-2'] = array(
3175
3176         // B-2: Jacked contents, something implanted
3177         // (e.g. some sort of blog comments, BBSes, forums, wikis)
3178         '*.3dm3.com',
3179         '3gmicro.com',                  // by Dean Anderson (dean at nobullcomputing.com)
3180         '*.1fr1.com',
3181         'a4aid.org',
3182         'aac.com',
3183         '*.aamad.org',
3184         'ad-pecjak.si',
3185         'agnt.org',
3186         'alwanforthearts.org',
3187         '*.anchor.net.au',
3188         'anewme.org',
3189         'arcrockett.com',               ///golf/excel/
3190         'arisedesign.net',              //Portfolio/d981/
3191         'internetyfamilia.asturiastelecentros.com',
3192         'ballblair.com',                ///images/thumbs/
3193         'Ball State University' => array('web.bsu.edu'),
3194         'btofaq.net',                   ///v3/forum
3195         'blepharospasm.org',
3196         'brettforrest.com',             // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
3197         'nyweb.bowlnfun.dk',
3198         '*.buzznet.com',
3199         'Carroll College' => array(
3200                 'carroll.edu',          ///boards/
3201         ),
3202         '*.canberra.net.au',
3203         'castus.com',
3204         'Case Western Reserve University' => array('case.edu'),
3205         'ceval.de',
3206         'chaco.gov.ar',
3207         'chasingrainbowsaustralia.com', ///geometry/
3208         'codespeak.net',
3209         'Colorado School of Mines' => array('ticc.mines.edu'),
3210         '*.colourware.co.uk',
3211         'cpuisp.com',
3212         'International Christian University' => array('icu.edu.ua'),
3213         '*.iphpbb.com',
3214         'board-z.de',
3215         '*.board-z.de',
3216         'California State University Stanislaus' => array('writing.csustan.edu'),
3217         'cannon.co.za',
3218         'columbosgarden.com',
3219         '*.communityhost.de',
3220         'connectionone.org',
3221         'deathwinds.com',
3222         'deforum.org',
3223         'delayedreaction.org',
3224         'deproduction.org',
3225         'dc503.org',
3226         'dialadeck.com',                ///images/
3227         'dre-centro.pt',
3228         'Duke University' => array('devel.linux.duke.edu'),
3229         '*.esen.edu.sv',
3230         'forums.drumcore.com',
3231         'dundeeunited.org',
3232         'energyglass.com.ua',
3233         'equitas.com.au',               ///images/mim3/, no index.html
3234         'exclusivehotels.com',
3235         'info.ems-rfid.com',
3236         'fairyfunkyard.com',    ///images_files/files/
3237         'farrowhosting.com',    // by Paul Farrow (postmaster at farrowcomputing.com)
3238         'fbwloc.com',
3239         '.fhmcsa.org.au',
3240         'findyourwave.co.uk',
3241         'frogcafe.net',
3242         'plone4.fnal.gov',
3243         'freeforen.com',
3244         'funkdoc.com',
3245         'funnyclipcentral.com',
3246         'gearseds.com',
3247         'generationrice.com',
3248         'ghettojava.com',
3249         'gnacademy.org',
3250         '*.goodboard.de',
3251         'GreenDayVideo.net' => array(
3252                 'greendayvideo.net',
3253                 'espanol.greendayvideo.net',
3254         ),
3255         'Hampton University' => array('calipsovalidation.hamptonu.edu'),
3256         'Harvard Law School' => array('blogs.law.harvard.edu'),
3257         'helpiammoving.com',
3258         'homepage-dienste.com',
3259         '*.hostistry.com',              // by support at hostistry.com, hostistry at gmail.com
3260         'Howard University' => array('networks.howard.edu'),
3261         'hullandhull.com',
3262         'Huntington University' => array('huntington.edu'),
3263         'huskerink.com',
3264         '.hyba.info',
3265         'ideas4you.com',        ///photos/
3266         'inda.org',
3267         '*.indymedia.org',      // by abdecom at riseup.net
3268         'instantbulletin.com',
3269         'internetincomeclub.com',
3270         '*.inventforum.com',
3271         'Iowa State University' => array('boole.cs.iastate.edu'),
3272         'ipwso.org',
3273         'irha.info',            // by David Rosenberg (drosen3 at luc.edu),
3274         'ironmind.com',
3275         'skkustp.itgozone.com', // hidden JavaScript
3276         'jazz2online.com',
3277         '.jloo.org',
3278         '.juegohq.com',                         // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3279         'kjon.com',
3280         'Kazan State University' => array(
3281                 'dir.kzn.ru',
3282                 'sys.kcn.ru',
3283         ),
3284         'test.kernel.org',
3285         'kevindmurray.com',
3286         'kroegjesroutes.nl',
3287         '.legion.org',
3288         'Loyola Marymount University' => array('lmu.edu'),
3289         'forum.lixium.fr',
3290         'macfaq.net',
3291         'macvirus.org',         ///board/
3292         'me4x4.com',
3293         'microbial-ecology.net',
3294         'minsterscouts.org',
3295         'morallaw.org',
3296         'morerevealed.com',
3297         'macronet.org',
3298         'mamiya.co.uk',
3299         'vcd.mmvcd.com',
3300         'Monmouth College' => array('department.monm.edu'),
3301         'mountainjusticemedia.org',
3302         '*.mybbland.com',
3303         'mydlstore.com',
3304         '*.netboardz.com',
3305         'North Carolina A&T State University' => array(
3306                 'ncat.edu',
3307                 'my.ncat.edu',
3308                 'hlc.ncat.edu',
3309         ),
3310         'placetobe.org',
3311         'Naropa University' => array(
3312                 'naropa.edu',                   ///forum/
3313         ),
3314         'users.nethit.pl',
3315         'nightclubvip.net',
3316         'njbodybuilding.com',
3317         'nlen.org',
3318         'North Carolina School of Science and Mathematics' => array(
3319                 'neverland.ncssm.edu',  ///include/web/forum/
3320                 'grid.ncssm.edu',               ///ncssm_grid/
3321         ),
3322         'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3323         'ofcourseimright.com',  ///cgi-bin/roundup/calsify/
3324         'offtextbooks.com',
3325         'ofimatika.com',
3326         'olympiafoto.com',              ///images/
3327         'omakase-net',                  // iframe
3328         'omikudzi.ru',
3329         'openchemist.net',
3330         'palungjit.com',
3331         'pataphysics-lab.com',
3332         'paypaldev.org',
3333         'paullima.com',
3334         'perl.org.br',
3335         'pfff.co.uk',
3336         'pimpo.com',                    ///_old_site/
3337         'pix4online.co.uk',
3338         'plone.dk',
3339         'preform.dk',
3340         'privatforum.de',
3341         'publicityhound.net',
3342         'puppylinux.net',               ///news/content/counter/pages/
3343         'qea.com',
3344         'rbkdesign.com',
3345         'rehoboth.com',
3346         'rodee.org',
3347         'ryanclark.org',
3348         '*.reallifelog.com',
3349         'rkphunt.com',
3350         'rso-csp.org',                  ///bulletins/
3351         '.saasmar.ru',                  // Jacked. iframe to banep.info on root, etc
3352         'sapphireblue.com',
3353         'saskchamber.com',
3354         'savevoorhees.org',
3355         'sdhmalenovice.cz',             //galerie/
3356         'selikoff.net',
3357         'serbisyopilipino.org',
3358         'setbb.com',
3359         'sharejesusinternational.com',
3360         'silver-tears.net',
3361         'Saint Martin\'s University' => array('homepages.stmartin.edu'),
3362         '.softpress.com',
3363         'southbound-inc.com',   // There is a <html>.gif (img to it168.com)
3364         'fora.taniemilitaria.pl',       ///phpbb
3365         'tehudar.ru',
3366         'Tennessee Tech University' => array('manila.tntech.edu'),
3367         'thebluebird.ws',
3368         'theosis.org',
3369         '*.thoforum.com',
3370         'troms-slekt.com',
3371         'theedgeblueisland.com',
3372         'toyshop.com.tw',               // /images/sigui/
3373         'torontoplace.com',
3374         'chat.travlang.com',
3375         'trickropingbylassue.com',
3376         'Truman State University' => array('mathbio.truman.edu'),
3377         'tuathadedannan.org',
3378         'txgotg.com',
3379         'tzaneen.co.za',
3380         'ugeavisen.com',                ///style/
3381         'forums.ugo.com',
3382         'whole.cs.unibo.it',
3383         'The University of North Dakota' => array(
3384                 'learn.aero.und.edu',
3385                 'ez.asn.und.edu',
3386         ),
3387         'The University of Alabama' => array('bama.ua.edu'),
3388         'unisonscotlandlaw.co.uk',
3389         'University of California' => array('classes.design.ucla.edu'),
3390         'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
3391         'University of Northern Colorado' => array('unco.edu'),
3392         'University of North Carolina' => array(
3393                 'elm.cis.uncw.edu'      ///testBoinc/
3394         ),
3395         'University of Toronto' => array(
3396                 'environment.utoronto.ca',
3397                 'grail.oise.utoronto.ca',
3398                 'utsc.utoronto.ca',
3399         ),
3400         'University of Wisconsin' => array(
3401                 'einstein.phys.uwm.edu'
3402         ),
3403         'urgentclick.com',
3404         'vacant.org.uk',
3405         'Villa Julie College' => array('www4.vjc.edu'),
3406         'Vail Valley Foundation' => array('.vvf.org'),
3407         'wabson.org',
3408         'warping.to',           // Seems (a redirection site, but now) taken advantage of
3409         'webarch.com',          // by WebArchitects (webarch at insync.net)
3410         'weehob.com',
3411         'West Virginia University Parkersburg' => array('wvup.edu'),
3412         'williamsburgrentals.com',
3413         'wolvas.org.uk',
3414         'wookiewiki.org',
3415         'xsgaming.com',                 // Jacked
3416         '.xthost.info',                 // by Michael Renz (dhost at mykuhl.de)
3417         'Yahoo.com' => array(
3418                 'blog.360.yahoo.com',
3419                 '*.groups.yahoo.com',   ///group/ * = es, finance, fr, games, lauch, ...
3420         ),
3421         'yasushi.site.ne.jp',   // One of mixedmedia.net'
3422         'youthpeer.org',
3423         '*.zenburger.com',
3424         'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'),
3425 );
3426
3427 // --------------------------------------------------
3428
3429 $blocklist['C'] = array(
3430
3431         // C: Sample setting of:
3432         // Exclusive spam domains
3433         //
3434         // Seems to have flavor of links, pills, gamble, online-games, erotic,
3435         // affiliates, finance, sending viruses, malicious attacks to browsers,
3436         // and/or mixed ones
3437         //
3438         // Please notify us about this list with reason:
3439         // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/208
3440
3441         // C-1: Domain sets (seems to be) born to spam you
3442         //
3443         // All buziness-related spam
3444         //'.biz'
3445         //
3446         'admin at seekforweb.com' => array(
3447                 // by Boris (admin at seekforweb.com, bbmfree at yahoo.com)
3448                 '.lovestoryx.com',
3449                 '.loveaffairx.com',
3450                 '.onmore.info',
3451                 '.scfind.info',
3452                 '.scinfo.info',
3453                 '.webwork88.info',
3454         ),
3455         'boss at bse-sofia.bg' => array(        // by Boris
3456                 '.htewbop.org',
3457                 '.kimm--d.org',
3458                 '.gtre--h.org',
3459                 '.npou--k.org',
3460                 '.bres--z.org',
3461                 '.berk--p.org',
3462                 '.bplo--s.org',
3463                 '.basdpo.org',
3464                 '.jisu--m.org',
3465                 '.kire--z.org',
3466                 '.mertnop.org',
3467                 '.mooa--c.org',
3468                 '.nake--h.org',
3469                 '.noov--b.org',
3470                 '.suke--y.org',
3471                 '.vasdipv.org',
3472                 '.vase--l.org',
3473                 '.vertinds.org',
3474         ),
3475         'pokurim at gamebox.net' => array(      // by Thai Dong Changli
3476                 '.aqq3.info',
3477                 '.axa00.info',
3478                 '.okweb11.org',
3479                 '.okweb12.org',
3480                 '.okweb13.org',
3481                 '.okweb14.org',
3482         ),
3483         'opezdol at gmail.com' => array(
3484                 '.informazionicentro.info',
3485                 '.notiziacentro.info',
3486         ),
3487         'SomethingGen' => array(
3488                 // 'CamsGen' by Lui Xeng Shou (camsgen at model-x.com)
3489                 // 'CamsGen' by Sergey (buckster at hotpop.com)
3490                 // 'BucksoGen', by Pronin Sergey (buckster at list.ru)
3491                 // by Lee Chang (nebucha at model-x.com)
3492                 '.adult-chat-world.info',       // by Lui
3493                 '.adult-chat-world.org',        // by Lui
3494                 '.adult-sex-chat.info',         // by Lui
3495                 '.adult-sex-chat.org',          // by Lui
3496                 '.adult-cam-chat.info',         // by Lui
3497                 '.adult-cam-chat.org',          // by Lui
3498                 '.dildo-chat.org',                      // by Lui
3499                 '.dildo-chat.info',                     // by Lui
3500                 // flirt-online.info is not CamsGen
3501                 '.flirt-online.org',            // by Lui
3502                 '.live-adult-chat.info',        // by Lui
3503                 '.live-adult-chat.org',         // by Lui
3504                 '.sexy-chat-rooms.info',        // by Lui
3505                 '.sexy-chat-rooms.org',         // by Lui
3506                 '.swinger-sex-chat.info',       // by Lui
3507                 '.swinger-sex-chat.org',        // by Lui
3508                 '.nasty-sex-chat.info',         // by Lui
3509                 '.nasty-sex-chat.org',          // by Lui
3510
3511                 '.camshost.info',                       // by Sergey
3512                 '.camdoors.info',                       // by Sergey
3513                 '.chatdoors.info',                      // by Sergey
3514
3515                 // 89.149.206.225 by Pronin
3516                 '.dorozhka.info',
3517                 '.kolonochka.info',
3518                 '.knizhechka.info',
3519                 '.krantik.info',
3520                 '.lebedi.info',
3521                 '.loshad.info',
3522                 '.pechenka.info',
3523                 '.porosenok.info',
3524                 '.indyushonok.info',
3525                 '.kotyonok.info',
3526                 '.kozlyonok.info',
3527                 '.magnoliya.info',
3528                 '.svinka.info',
3529                 '.svinya.info',
3530                 '.televizorchik.info',
3531                 '.tumbochka.info',
3532                 '.zherebyonok.info',
3533
3534                 '.medvezhonok.org',                     // 89.149.206.225 "BucksoGen 1.2b"
3535
3536                 '.adult-cam-chat-sex.info',             // by Lee
3537                 '.adult-chat-sex-cam.info',             // 'CamsGen' by Lee
3538                 '.live-chat-cam-sex.info',              // 'CamsGen' by Lee
3539                 '.live-nude-cam-chat.info',             // 'CamsGen' by Lee
3540                 '.live-sex-cam-nude-chat.info', // 'CamsGen' by Lee
3541                 '.sex-cam-live-chat-web.info',  // 'CamsGen' by Lee
3542                 '.sex-chat-live-cam-nude.info', // 'CamsGen' by Lee
3543                 '.sex-chat-porn-cam.info',              // by Lee
3544         ),
3545         'mital at topo20.org' => array( // by Marcello Italianore
3546                 '.trevisos.org',
3547                 '.topo20.org',
3548         ),
3549         'WellCams.com' => array(
3550                 '.j8v9.info',           // by Boris Moiseev (borka at 132moiseev.com)
3551                 '.wellcams.com',        // by Sergey Sergiyenko (studioboss at gmail.com)
3552                 '.wellcams.biz',        // by Sergey Sergiyenko (studioboss at gmail.com)
3553         ),
3554         'graz at rubli.biz' => array(   // by Chinu Hua Dzin
3555                 '.besturgent.org',
3556                 '.googletalknow.org',
3557                 '.montypythonltd.org',
3558                 '.supersettlemet.org',
3559                 '.thepythonfoxy.org',
3560                 '.ukgamesyahoo.org',
3561                 '.youryahoochat.org',
3562         ),
3563         'kikimas at mail.net' => array( // Redirect to nb717.com etc
3564                 '.dbsajax.org',
3565                 '.acgt2005.org',
3566                 '.gopikottoor.com',
3567                 '.koosx.org',
3568                 '.mmgz.org',
3569                 '.zhiyehua.net',
3570         ),
3571         'vdf at lovespb.com' => array(  // by Andrey
3572                 '.02psa.info',
3573                 '.1818u.org',
3574                 '.18ew.info',
3575                 '.43sexx.org',
3576                 '.56porn.org',
3577                 '.6discount.info',
3578                 '.78porn.org',          // "UcoZ WEB-SERVICES"
3579                 '.78rus.info',
3580                 '.92ssex.org',          // "ForumGenerator"
3581                 '.93adult.org',         // "ForumGenerator"
3582                 '.aboutsr.info',
3583                 '.aboutzw.info',
3584                 '.all23.info',
3585                 '.allvdf.info',
3586                 '.buy-dge.info',
3587                 '.buypo.info',
3588                 '.canadausa.info',      // "UcoZ WEB-SERVICES"
3589                 '.cv83.info',
3590                 '.cvwifw.info',
3591                 '.dabouts.info',
3592                 '.eplot.info',          // by Beatrice C. Anderson (Beatrice.C.Anderson at spambob.com)
3593                 '.fuck2z.info',         // "UcoZ WEB-SERVICES"-like design
3594                 '.free01sa.info',
3595                 '.frees1.info',
3596                 '.freexz.info',
3597                 '.ifree-search.org',
3598                 '.lovespb.info',
3599                 '.myso2.info',
3600                 '.nb74u.info',
3601                 '.ohhh2.info',
3602                 '.ol43.info',
3603                 '.olala18.info',
3604                 '.oursales.info',
3605                 '.pasian1.info',
3606                 '.pldk.info',
3607                 '.po473.info',
3608                 '.pornr.info',          // "UcoZ WEB-SERVICES"
3609                 '.poz2.info',
3610                 '.qpf8j4d.info',
3611                 '.saleqw.info',
3612                 '.sexof.info',          // "UcoZ WEB-SERVICES"
3613                 '.sexz18.info',
3614                 '.sexy69a.info',
3615                 '.shedikc.info',
3616                 '.spb78.info',
3617                 '.usacanadauk.info',
3618                 '.v782mks.info',
3619                 '.vny0.info',
3620                 '.wifes1.info',
3621                 '.xranvam.info',
3622                 '.zenitcx.info',
3623                 '.zxolala.info',
3624         ),
3625         'nike.borzoff at gmail.com' => array(   // by Nike Borzoff, 'vdf at lovespb.com'-related
3626                 '.care01.info',
3627                 '.care02.info',
3628                 '.care03.info',
3629                 '.care04.info',
3630                 '.care05.info',
3631                 '.care06.info',
3632                 '.care07.info',
3633                 '.care08.info',
3634                 '.care09.info',
3635                 '.care10.info',
3636                 '.kra1906.info',        // "UcoZ WEB-SERVICES"
3637                 '.klastar01.info',
3638                 '.klastar02.info',
3639                 '.klastar03.info',
3640                 '.klastar04.info',
3641                 '.klastar05.info',
3642                 '.klastar06.info',
3643                 '.klastar07.info',
3644                 '.klastar08.info',
3645                 '.klastar09.info',
3646                 '.klastar10.info',
3647                 '.um20ax01.info',
3648                 '.um20ax02.info',
3649                 '.um20ax03.info',
3650                 '.um20ax04.info',
3651                 '.um20ax05.info',
3652                 '.um20ax06.info',
3653                 '.um20ax07.info',
3654                 '.um20ax08.info',
3655                 '.um20ax09.info',
3656                 '.um20ax10.info',
3657         ),
3658         'forrass at gmail.com' => array(        // by Ismail
3659                 '.zmh01.info',
3660                 '.zmh02.info',
3661                 '.zmh03.info',
3662                 '.zmh04.info',
3663                 '.zmh05.info',
3664                 '.zmh06.info',
3665                 '.zmh07.info',
3666                 '.zmh08.info',
3667                 '.zmh09.info',
3668                 '.zmh10.info',
3669         ),
3670         'Varsylenko Vladimir and family' => array(
3671                 // by Varsylenko Vladimir (vvm_kz at rambler.ru)
3672                 // by David C. Lack (David.C.Lack at dodgeit.com)
3673                 // by Kuzma V Safonov (admin at irtes.ru)
3674                 // by Petrov Vladimir (vvm_kz at rambler.ru)
3675                 // by LAURI FUNK (vvm_kz at rambler.ru)
3676
3677                 // 64.92.162.210(*.static.reverse.ltdomains.com)
3678                 '.abrek.info',                          // by Petrov
3679                 '.allsexonline.info',           // by Varsylenko
3680                 '.d1rnow.info',                         // by Petrov
3681                 '.doxer.info',                          // Petrov
3682                 '.freeforworld.info',           // Varsylenko
3683                 '.goodworksite.info',           // Varsylenko
3684                 '.onall.info',                          // by Varsylenko
3685                 '.powersiteonline.info',        // by Varsylenko
3686                 '.rentmysite.info',                     // by Varsylenko
3687                 '.sexdrink.info',                       // by Petrov
3688                 '.siteszone.info',                      // by Varsylenko
3689                 '.sfup.info',                           // by Petrov
3690                 '.superfreedownload.info',      // by Varsylenko
3691                 '.superneeded.info',            // by Varsylenko
3692                 '.srup.info',                           // by Petrov
3693
3694                 // 66.235.185.143(*.svabuse.info)
3695                 '.accommodationwiltshire.com',  // by Petrov
3696                 '.levines.info',                        // by Petrov
3697                 '.sernost.info',                        // by Petrov
3698                 '.sexvideosite.info',           // by Petrov
3699                 '.vvsag.info',                          // by Petrov
3700
3701                 // 81.0.195.134
3702                 '.michost.info',                        // by LAURI
3703                 '.parther.info',                        // by LAURI
3704
3705                 // 88.214.202.100
3706                 '.gitsite.info',                        // by Petrov
3707                 '.organiq.info',                        // by Petrov
3708                 '.yoursitedh.info',                     // by Petrov
3709
3710                 // 217.11.233.58 by Petrov
3711                 '.mp3vault.info',
3712
3713                 // DNS time out or failed
3714                 '.bequeous.info',                       // by Davi
3715                 '.sopius.info',                         // by Kuzma
3716                 '.sovidopad.info',                      // by Kuzma
3717                 '.yerap.info',                          // by Kuzma
3718         ),
3719         'zhu1313 at mail.ru' => array(  // by Andrey Zhurikov
3720                 '.flywebs.com',
3721                 '.hostrim.com',
3722                 '.playbit.com',
3723         ),
3724         'webmaster at dgo3d.info' => array(     // by Son Dittman
3725                 '.bsb3b.info',
3726                 '.dgo3d.info',
3727                 '.dgo5d.info',
3728         ),
3729         'cooler.infomedia at gmail.com' => array(
3730                 '.diabetescarelink.com',
3731                 '.firstdebthelp.com',
3732         ),
3733         'hostmaster at astrons.com' => array(   // by Nikolajs Karpovs
3734                 '.pokah.lv',
3735                 '.astrons.com',
3736         ),
3737         'seocool at bk.ru' => array(    // by Skar
3738                 '.implex3.com',
3739                 '.implex6.info',
3740                 '.softprof.org',
3741         ),
3742         'Caslim.info' => array(
3743                 '.caslim.info',         // by jonn22 (jonnmarker at yandex.ru)
3744                 '.tops.gen.in',         // by Kosare (billing at caslim.info)
3745         ),
3746         'foxwar at foxwar.ispvds.com' => array( // by Alexandr, Hiding google?q=
3747                 '.777-poker.biz',
3748                 '.porn-11.com',
3749         ),
3750         'Conto.pl' => array(
3751                 '.8x.pl',               // domena at az.pl
3752                 '.3x3.pl',              // by biuro at nazwa.pl
3753                 '.conto.pl',    // by biuro at nazwa.pl
3754                 '.guu.pl',              // by conto.pl (domena at az.pl)
3755                 '.xcx.pl',              // domena at az.pl
3756                 '.yo24.pl',             // domena at az.pl
3757         ),
3758         'mail at pcinc.cn' => array(
3759                 // Domains by Lin Zhi Qiang
3760                 // NOTE: pcinc.cn -- 125.65.112.13 by Lin Zhi Qiang (lin80 at 21cn.com)
3761
3762                 // 125.65.112.11
3763                 // The same IP: web001.cdnhost.cn, *.w19.cdnhost.cn
3764                 'shoopivdoor.w19.cdnhost.cn',   // web001.cdnhost.cn
3765                 '.shoopivdoor.com',
3766
3767                 // 125.65.112.12
3768                 // The same IP: web003.cdnhost.cn, *.w16.cdnhost.cn
3769                 '.hosetaibei.com',
3770                 '.playsese.com',
3771
3772                 // 125.65.112.13
3773                 // The same IP: web006.cdnhost.cn, *.w9.cdnhost.cn
3774                 '.ahatena.com',
3775                 '.asdsdgh-jp.com',
3776                 '.conecojp.net',
3777                 '.game-oekakibbs.com',
3778                 '.geocitygame.com',
3779                 '.gsisdokf.net',
3780                 '.korunowish.com',
3781                 '.netgamelivedoor.com',
3782                 '.soultakerbbs.net',
3783                 '.yahoo-gamebbs.com',
3784                 '.ywdgigkb-jp.com',
3785
3786                 // 125.65.112.14
3787                 // The same IP: web007.cdnhost.cn, *.w12.cdnhost.cn
3788                 '.acyberhome.com',
3789                 '.bbs-qrcode.com',
3790                 '.gamesroro.com',
3791                 '.gameyoou.com',
3792                 '.gangnu.com',
3793                 '.goodclup.com',
3794                 '.lineage321.com',
3795                 '.linkcetou.com',
3796                 '.love888888.com',
3797                 '.ragnarok-bbs.com',
3798                 '.ragnarok-game.com',
3799                 '.rmt-navip.com',
3800                 '.watcheimpress.com',
3801
3802                 // 125.65.112.15
3803                 // The same IP: web008.cdnhost.cn, *.w11.cdnhost.cn
3804                 '.18girl-av.com',
3805                 '.aurasoul-visjp.com',
3806                 '.gamaniaech.com',
3807                 '.game-mmobbs.com',
3808                 '.gameslin.net',
3809                 '.gemnnammobbs.com',
3810                 '.gogolineage.net',
3811                 '.grandchasse.com',
3812                 '.jpragnarokonline.com',
3813                 '.jprmthome.com',
3814                 '.maplestorfy.com',
3815                 '.netgamero.net',
3816                 '.nothing-wiki.com',
3817                 '.ourafamily.com',
3818                 '.ragnarok-sara.com',
3819                 '.rmt-lineagecanopus.com',
3820                 '.rmt-ranloki.com',
3821                 '.rogamesline.com',
3822                 '.roprice.com',
3823                 '.tuankong.com',
3824                 '.twreatch.com',
3825
3826                 // 125.65.112.22
3827                 // The same IP: web013.cdnhost.cn
3828                 '.lzy88588.com',
3829                 '.ragnaroklink.com',
3830
3831                 // 125.65.112.24
3832                 '.rmtfane.com',
3833                 '.fc2weday.com',
3834                 '.nlftweb.com',
3835
3836                 // 125.65.112.27
3837                 '.i520i.com',
3838                 '.sunwayto.com',
3839
3840                 // 125.65.112.31
3841                 // The same IP: web016.cdnhost.cn
3842                 '.twyaooplay.com',
3843
3844                 // 125.65.112.32
3845                 // The same IP: web037.cdnhost.cn
3846                 '.emeriss.com',
3847                 '.raginfoy.com',
3848                 '.ragnarokgvg.com',
3849                 '.rentalbbs-livedoor.com',
3850                 '.romaker.com',
3851                 '.sagewikoo.com',
3852                 '.samples112xrea.com',
3853                 '.wiki-house.com',
3854
3855                 // 125.65.112.49
3856                 '.chaosx0.com',
3857
3858                 // 125.65.112.88
3859                 // The same IP: web015.cdnhost.cn
3860                 '.a-hatena.com',
3861                 '.biglobe-ne.com',
3862                 '.blogplaync.com',
3863                 '.din-or.com',
3864                 '.dtg-gamania.com',
3865                 '.fcty-net.com',
3866                 '.game-fc2blog.com',
3867                 '.gameurdr.com',
3868                 '.getamped-garm.com',
3869                 '.interzq.com',
3870                 '.linbbs.com',                  // by zeng xianming (qqvod at qq.com). www.linbbs.com is the same ip of www.game-fc2blog.com(222.77.185.101) at 2007/03/11
3871                 '.luobuogood.com',
3872                 '.ragnarok-search.com',
3873                 '.rinku-livedoor.com',
3874
3875                 // 125.65.112.90
3876                 '.gtvxi.com',
3877
3878                 // 125.65.112.91
3879                 // The same IP: web004.cdnhost.cn
3880                 '.6828teacup.com',
3881                 '.blog-livedoor.net',
3882                 '.cityblog-fc2web.com',
3883                 '.deco030-cscblog.com',
3884                 '.imbbs2t4u.com',
3885                 '.k5dionne.com',
3886                 '.lineagejp-game.com',
3887                 '.mbspro6uic.com',
3888                 '.slower-qth.com',
3889                 '.wikiwiki-game.com',
3890
3891                 // 125.65.112.93
3892                 // The same IP: web022.cdnhost.cn
3893                 '.aaa-livedoor.net',
3894                 '.cityhokkai.com',              // web022.cdnhost.cn
3895                 '.fanavier.net',
3896                 '.geocitylinks.com',    // web022.cdnhost.cn
3897                 '.kuronowish.net',              // web022.cdnhost.cn
3898                 '.ro-bot.net',
3899
3900                 // 125.65.112.95
3901                 // The same IP: web035.cdnhost.cn, web039.cdnhost.cn
3902                 '.23styles.com',
3903                 '.aehatena-jp.com',
3904                 '.ameblog-jp.net',
3905                 '.antuclt.com',
3906                 '.blog-ekndesign.com',
3907                 '.d-jamesinfo.com',
3908                 '.editco-jp.com',
3909                 '.ezbbsy.com',
3910                 '.extd-web.com',
3911                 '.fotblong.com',
3912                 '.game62chjp.net',
3913                 '.gamegohi.com',
3914                 '.gamesmusic-realcgi.net',
3915                 '.gamesragnaroklink.net',
3916                 '.homepage-nifty.com',
3917                 '.ie6xp.com',
3918                 '.irisdti-jp.com',
3919                 '.jklomo-jp.com',
3920                 '.jpxpie6-7net.com',
3921                 '.lian-game.com',
3922                 '.lineage-bbs.com',
3923                 '.lineage1bbs.com',
3924                 '.livedoor-game.com',
3925                 '.litcan.com',
3926                 '.lovejpjp.com',
3927                 '.m-phage.com',
3928                 '.muantang.com',
3929                 '.plusd-itmedia.com',
3930                 '.runbal-fc2web.com',
3931                 '.saussrea.com',
3932                 '.tooalt.com',
3933                 '.toriningena.net',
3934                 '.yahoodoor-blog.com',
3935                 '.yy14-kakiko.com',
3936
3937                 // 125.65.112.137
3938                 '.clublineage.com',
3939
3940                 // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn
3941                 '.kaukoo.com',                  // 219.153.14.228, by zeng xianming (expshell at 163.com)
3942                 '.linrmb.com',                  // 219.153.14.228, by zeng xianming (qqvod at qq.com)
3943
3944                 '.ptxk.com',                    // 222.73.236.239, by zeng xianming (zxmdiy at gmail.com)
3945                 '.rormb.com',                   // 222.73.236.239, by zeng xianming (qqvod at qq.com)
3946
3947                 '.games-nifty.com',             // 255.255.255.255 now
3948                 '.homepage3-nifty.com', // 255.255.255.255 now
3949         ),
3950         'caddd at 126.com' => array(
3951                 '.chengzhibing.com',    // by chen gzhibing
3952                 '.jplinux.com',                 // by lian liang
3953                 '.lineageink.com',              // by cai zibing, iframe to goodclup.com
3954                 '.lineagekin.com',              // by cai zibing, iframe to goodclup.com
3955                 '.tooplogui.com',               // by zibing cai
3956                 '.twsunkom.com',                // by guo zhi wei
3957                 '.twmsn-ga.com',                // by guo zhi wei, iframe to grandchasse.com
3958         ),
3959         'nuigiym2 at 163.com' => array( // by fly bg
3960                 '.linainfo.net',                // Seems IP not allocated now
3961                 '.lineagalink.com',             // 220.247.157.99
3962                 '.lineagecojp.com',             // 61.139.126.10
3963                 '.ragnarokonlina.com',  // 220.247.158.99
3964         ),
3965         'aakin at yandex.ru' => array(
3966                 // 89.149.206.225(*.internetserviceteam.com) by Baer
3967                 '.entirestar.com',
3968                 '.joppperl.info',
3969                 '.onlinedrugsdirect.com',
3970                 '.pilkazen.info',
3971                 '.superbuycheap.com',
3972                 '.supersmartdrugs.com',
3973                 '.thecheappillspharmacy.com',
3974                 '.topdircet.com',
3975         ),
3976         'newblog9 at gmail.com' => array(       // by jiuhatu kou
3977                 '.tianmieccp.com',
3978                 '.xianqiao.net',
3979         ),
3980         'm.frenzy at yahoo.com' => array(       // by Michael
3981                 '.p5v.org',
3982                 '.j111.net',
3983                 '.searchhunter.info',
3984                 '.soft2you.info',
3985                 '.top20health.info',
3986                 '.top20ringtones.info',
3987                 '.top20travels.info',
3988                 '.v09v.info',
3989                 '.x09x.info',
3990                 '.zb-1.com',
3991         ),
3992         'serega555serega555 at yandex.ru' => array(     // by Lebedev Sergey
3993                 '.bingogoldenpalace.info',
3994                 '.ccarisoprodol.info',
3995                 '.ezxcv.info',
3996                 '.isuperdrug.com',
3997                 '.pharmacif.info',
3998                 '.pornsexteen.biz',
3999                 '.ugfds.info',
4000                 '.vviagra.info',
4001         ),
4002         'anatolsenator at gmail.com' => array(  // by Anatol
4003                 '.cheapestviagraonline.info',
4004                 '.buyphentermineworld.info'
4005         ),
4006         'webmaster at mederotica.com' => array(
4007                 '.listsitepro.com',             // by VO Entertainment Inc (webmaster at mederotica.com)
4008                 '.testviagra.org',              // by Chong Li (chongli at mederotica.com)
4009                 '.viagra-best.org',             // by Chong Li (chongli at mederotica.com)
4010                 '.viagra-kaufen.org',   // by Chong Li (chongli at mederotica.com)
4011         ),
4012         'gray at trafic.name' => array( // by Billing Name:Gray, Billing Email:gray at trafic.name
4013                 '.auase.info',          // by ilemavyq7461 at techie.com
4014                 '.axeboxew.info',       // by zygeu220 at writeme.com
4015                 '.boluzuhy.info',       // by pikico5419 at post.com
4016                 '.ekafoloz.info',       // by nuzunyly8401 at techie.com
4017                 '.ejixyzeh.info',       // by vubulyma5163 at consultant.com
4018                 '.emyfyr.info',         // by osiqabu9669 at writeme.com
4019                 '.exidiqe.info',        // by kufyca5475 at mail.com
4020                 '.gerucovo.info',       // by apegityk7224 at writeme.com
4021                 '.gubiwu.info',         // by lywunef6532 at iname.com
4022                 '.ijizauax.info',       // by ysauuz2341 at iname.com
4023                 '.ixahagi.info',        // 70.47.89.60 by famevi9827 at email.com
4024                 '.jiuuz.info',          // by meqil6549 at mail.com
4025                 '.nudetar.info',        // by vohepafi3536 at techie.com
4026                 '.nipud.info',          // by bohox9872 at mindless.com
4027                 '.mejymik.info',        // by fiqiji3529 at cheerful.com
4028                 '.mylexus.info',        // Billing Email is simhomer12300 at mail.com, but posted at the same time, and ns *.grayreseller.com
4029                 '.olasep.info',         // by lizon8506 at mail.com
4030                 '.oueuidop.info',       // by arytyb6913 at europe.com
4031                 '.oviravy.info',        // by amyuu3883 at london.com
4032                 '.ovuri.info',          // by exumaxyt1371 at consultant.com
4033                 '.ragibe.info',         // by ehome4458 at myself.com
4034                 '.ucazib.info',         // by gorare7222 at consultant.com
4035                 '.udaxu.info',          // by gubima4007 at usa.com
4036                 '.ulycigop.info',       // by unodyqil6241 at mindless.com
4037                 '.vubiheq.info',        // by uisujih5849 at hotmail.com
4038                 '.xyloq.info',          // 70.47.89.60 by yuunehi8586 at myself.com
4039                 '.yvaxat.info',         // by koqun9660 at mindless.com
4040                 '.yxyzauiq.info',       // by robemuq8455 at cheerful.com
4041         ),
4042         'Carmodelrank.com etc' => array(
4043                 // by Brianna Dunlord (briasmi at yahoo.com)
4044                 // by Tim Rennei (TimRennei at yahoo.com), redirect to amaena.com (fake-antivirus)
4045                 // by Alice T. Horst (Alice.T.Horst at pookmail.com)
4046                 '.carmodelrank.com',// by Brianna
4047                 '.cutestories.net',     // by Brianna
4048                 '.sturducs.com',
4049                 '.bestother.info',      // by Tim
4050                 '.premiumcasinogames.com',      // by Brianna)
4051                 '.yaahooo.info',        // by Alice
4052         ),
4053         'aliacsandr at yahoo.com' => array(
4054                 '.cubub.info',                          // "Free Web Hosting"
4055         ),
4056         'aliacsandr85 at yahoo.com' => array(
4057                 // by Dr. Portillo or Eva Sabina Lopez Castell
4058                 '.xoomer.alice.it',                     // "Free Web Hosting"
4059                 '.freebloghost.org',            // "Free Web Hosting" by Dr.
4060                 '.freeprohosting.org',          // "Free Web Hosting" by Dr.
4061                 '.googlebot-welcome.org',       // "Free Web Hosting" by Dr.
4062                 '.icesearch.org',                       // "Free Web Hosting" by Eva
4063                 '.phpfreehosting.org',          // "Free Web Hosting" by Dr.
4064                 '.sashawww.info',                       // "Free Web Hosting" by Dr.
4065                 '.sashawww-vip-vip.org',        // "Free Web Hosting" by Dr.
4066                 '.topadult10.org',                      // "Free Web Hosting" by Eva
4067                 '.xer-vam.org',                         // "Ongline Catalog" by Dr.
4068                 '.xxxse.info',                          // "Free Web Hosting" by Eva
4069                 '.viagra-price.org',            // by Eva
4070                 '.vvsa.org',                            // "Free Web Hosting" by Eva
4071                 '.free-webhosts.com',           // "Free Web Hosting" by Free Webspace
4072         ),
4073         '.onegoodauto.org',                             // "Free Web Hosting" by sqrtv2 at gmail.com
4074         'Something-Gamble' => array(
4075                 // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat
4076                 '.atonlineroulette.com',                        // by Blaise Johns
4077                 '.atroulette.com',                                      // by Gino Sand
4078                 '.betting-123.com',                                     // by Joana Caceres
4079                 '.betting-i.biz',                                       // by Joaquina Angus
4080                 '.casino-challenge.com',                        // by Maren Camara
4081                 '.casino-gambling-i.biz',                       // by Giselle Nations
4082                 '.casino-italian.com',                          // by Holley Yan
4083                 '.casino123.net',                                       // by Ta Baines
4084                 '.casinohammamet.com',                          // by Inger Barhorst
4085                 '.casinoqz.com',                                        // by Berenice Snow
4086                 '.casinos-777.net',                                     // by Iona Ayotte
4087                 '.crapsok.com',                                         // by Devon Adair,
4088                 '.dcasinoa.com',                                        // by August Hawkinson
4089                 '.e-poker-4u.com',                                      // by Issac Leibowitz
4090                 '.free-dvd-player.biz',                         // by Rosario Kidd
4091                 '.florida-lottery-01.com',                      // by Romeo Dillon
4092                 '.gaming-123.com',                                      // by Jennifer Byrne
4093                 '.kenogo.com',                                          // by Adriane Bell
4094                 '.mycaribbeanpoker.com',                        // by Andy Mullis
4095                 '.onbaccarat.com',                                      // by Kassandra Dunn
4096                 '.online-experts.biz',                          // by Liberty Helmick
4097                 '.onlinepoker-123.com',                         // by Andrea Feaster
4098                 '.playpokeronline-123.com',                     // by Don Lenard
4099                 '.poker-123.com',                                       // by Mallory Patrick (Mallory_Patrick at marketing-support.info)
4100                 '.texasholdem123.com',                          // by Savion Lasseter
4101                 '.texasholdem-777.com',                         // by Savanna Lederman
4102                 '.the-casino-directory-1715.us',        // by Thora Oldenburg
4103                 '.the-craps-100.us',                            // by Lorrine Ripley
4104                 '.the-free-online-game-913.us',         // by Kanesha Clem
4105                 '.the-free-poker-1798.us',                      // by Elaina Witte
4106                 '.the-las-vegas-gambling-939.us',       // by Jesusita Hageman
4107                 '.the-online-game-poker-1185.us',       // by Merna Bey
4108                 '.the-playing-black-jack.com',          // by Kristine Brinker
4109                 '.the-poker-1082.us',                           // by Kristofer Boldt
4110                 '.the-rule-texas-hold-em-2496.us',      // by Melvina Stamper
4111                 '.the-texas-strategy-holdem-1124.us',   // by Neda Frantz
4112                 '.the-video-black-jack.com',            // by Jagger Godin
4113         ),
4114         'Something-Insurance' => array(
4115                 // Car / Home / Life / Health / Travel insurance, Loan finance, Mortgage refinance
4116
4117                 // 0-9
4118                 '.0q.org',                                              // by Shamika Curtin, "Online car insurance information"
4119                 '.1-bookmark.com',                              // by Sonia Snyder, "Titan auto insurance information"
4120                 '.1day-insurance.com',                  // by Kelsie Strouse, "Car insurance costs"
4121                 '.1upinof.com',                                 // by Diego Johnson, "Car insurance quote online uk resource"
4122                 '.18wkcf.com',                                  // by Lexy Bohannon
4123                 '.2001werm.org',                                // by Raphael Rayburn
4124                 '.2004heeparea1.org',                   // by Dinorah Andrews
4125                 '.21nt.net',                                    // by Jaida Estabrook
4126                 '.3finfo.com',                                  // by Damian Pearsall
4127                 '.3somes.org',                                  // by Mauro Tillett
4128                 '.453531.com',                                  // by Kurt Flannery
4129                 '.4freesay.com',                                // by Eloy Jones
4130                 '.5ssurvey.com',                                // by Annamarie Kowalski
4131                 '.8-f22.com',                                   // by Larraine Evers
4132                 '.9q.org',                                              // by Ami Boynton
4133
4134                 // A
4135                 '.a40infobahn.com',                             // by Amit Nguyen
4136                 '.a4h-squad.com',                               // by Ross Locklear
4137                 '.aac2000.org',                                 // by Randi Turner
4138                 '.aaadvertisingjobs.com',               // by Luciano Frisbie
4139                 '.acahost.com',                                 // by Milton Haberman
4140                 '.aconspiracyofmountains.com',  // by Lovell Gaines
4141                 '.acornwebdesign.co.uk',                // by Uriel Dorian
4142                 '.activel-learning-site.com',   // by Mateo Conn
4143                 '.ad-makers.com',                               // by Shemeka Arsenault
4144                 '.ada-information.org',                 // by Josef Osullivan
4145                 '.adelawarerefinance.com',              // by Particia Mcmillan, "Delaware refinance advisor"
4146                 '.adult-personal-ads-e-site.info',      // by Nery Ainsworth
4147                 '.aequityrefinance.com',                // by Jadwiga Duckworth
4148                 '.aerovac-hotpress.com',                // by Trey Marlow
4149                 '.agfbiosensors.com',                   // by Lionel Dempsey
4150                 '.ahomeloanrefinance.com',              // by Leslie Kinser
4151                 '.affordablerealestate.net',    // by Season Otoole
4152                 '.ahomerefinancingloans.com',   // by Julie Buck, "Home refinancing loans guide"
4153                 '.ahouserefinance.com',                 // by Young Alley
4154                 '.akirasworld.com',                             // by Piper Sullivan
4155                 '.alderik-production.com',              // by Joan Stiles
4156                 '.alltechdata.com',                             // by Dom Laporte
4157                 '.amconllc.com',                                // by Syble Benjamin
4158                 '.amobilehomerefinancing.com',  // by Clyfland Buckley, "Mobile home refinancing"
4159                 '.amortgagerefinancepennsylvania.com',  // by Richard Battle, "Mortgage refinance pennsylvania articles"
4160                 '.angelandcrown.net',                   // by Claretta Najera
4161                 '.ankoralina.com',                              // by Eladia Demers
4162                 '.antiquegoldmine.com',                 // by Keena Marlow
4163                 '.aquinosotros.com',                    // by Nanci Prentice
4164                 '.architectionale.com',                 // by Wilbur Cornett
4165                 '.arcreditcards.com',                   // by Ecgbeorht Stokes, "Ameriquest credit cards articles"
4166                 '.arefinancebadcredit.com',             // by Isaac Mejia, "Refinance bad credit"
4167                 '.arefinancehome.com',                  // by Duane Doran
4168                 '.arefinancinghome.com',                // by Ike Laney
4169                 '.athletic-shoes-e-shop.info',  // by Romelia Money
4170                 '.auction-emall-site.info',             // by Dayle Denman
4171                 '.auctions-site.info',                  // by Cammie Chiu, "Online loan mortgage info"
4172                 '.auto-buy-rite.com',                   // by Asuncion Buie
4173                 '.axxinet.net',                                 // by Roberta Gasper
4174                 '.azimutservizi.com',                   // by Ethelene Brook
4175                 '.azstudies.org',                               // by Bernardina Walden
4176
4177                 // B
4178                 '.babtrek.com',                                 // by Simonette Mcbrayer
4179                 '.babycujo.com',                                // by Francisco Akers
4180                 '.bakeddelights.com',                   // by Dave Evenson
4181                 '.bbcart.com',                                  // by Lucio Hamlin
4182                 '.berlin-hotel-4u.com',                 // by Grisel Tillotson
4183                 '.best-digital-phone.us',               // by Meghann Crockett
4184                 '.bjamusements.com',                    // by Lurlene Butz
4185                 '.blursgsu.com',                                // by Weston Killian
4186                 '.bookwide.net',                                // by Tequila Zacharias
4187                 '.boreholes.org',                               // by Flora Reed
4188                 '.breathingassociaiton.org',    // by Alfred Crayton
4189                 '.birdingnh.com',                               // by Donald Healy
4190                 '.bisdragons.org',                              // by Lupe Cassity
4191                 '.blcschools.net',                              // by Alycia Jolly
4192                 '.bronte-foods.com',                    // by Kary Pfeiffer
4193                 '.buckscountyneighbors.org',    // by Maile Gaffney
4194                 '.buffalofudge.com',                    // by Mable Whisenhunt
4195                 '.burlisonforcongress.com',             // by Luann King
4196                 '.byairlinecreditcard.com',             // by Cali Stevenson, "Airline credit card search"
4197                 '.byplatinumcard.com',                  // by Pearl Cross, "Discover platinum card info"
4198
4199                 // C
4200                 '.cabanes-web.com',                             // by Vaughn Latham
4201                 '.cardko.com',                                  // by Terris Cain, "Chase visa card search"
4202                 '.cardpose.com',                                // by Deerward Gross, "Gm mastercard articles"
4203                 '.checaloya.com',                               // by Susana Coburn
4204                 '.calvarychapelrgvt.org',               // by Karan Kittle
4205                 '.cameras-esite.info',                  // by Karlee Frisch
4206                 '.cancerkidsforum.org',                 // by Samson Constantino
4207                 '.ccchoices.org',                               // by Kenia Cranford
4208                 '.ccupca.org',                                  // by Evonne Serrano
4209                 '.celebratemehome.com',                 // by Soraya Tower
4210                 '.centerfornourishingthefuture.org',    // by Elisa Wilt
4211                 '.chelseaartmmuseum.org',               // by Kayla Vanhorn
4212                 '.choose-shoes.net',                    // by Geoffrey Setser
4213                 '.churla.com',                                  // by Ollie Wolford
4214                 '.circuithorns.co.uk',                  // by Nathanial Halle
4215                 '.clanbov.com',                                 // by Donell Hozier
4216                 '.cnm-ok.org',                                  // by Thalia Moye
4217                 '.coalitioncoalition.org',              // by Ned Macklin
4218                 '.consoleaddicts.com',                  // by Dorla Hoy
4219                 '.counterclockwise.net',                // by Melynda Hartzell
4220                 '.codypub.com',                                 // by Mercedes Coffman
4221                 '.comedystore.net',                             // by Floy Donald
4222                 '.covsys.co.uk',                                // by Abby Jacey
4223                 '.cpusa364-northsacramento.com',        // by Dannette Lejeune
4224                 '.craftybidders.com',                   // by Dannie Lazo
4225                 '.credit-card-finder.net',              // by Mellie Deherrera
4226                 '.credit-cards-4u.info',                // by Antonina Hil, "Credit cards info"
4227                 '.creditcardstot.com',                  // by Bobby Alvarado, "Shell credit cards"
4228                 '.ctwine.org',                                  // by Hailey Knox
4229
4230                 // D
4231                 '.dazyation.com',                               // by Louis Strasser
4232                 '.deepfoam.org',                                // by Ethelyn Southard
4233                 '.debt-fixing.com',                             // by Dagny Rickman
4234                 '.dgmarketingwebdesign.com',    // by Nubia Lea
4235                 '.domainadoption.com',                  // by Breann Pappas
4236                 '.diannbomkamp.com',                    // by Russel Croteau
4237                 '.dictionary-spanish.us',               // by Jacki Gilbreath
4238                 '.dictionary-yahoo.us',                 // by Lili Mitchem
4239                 '.digital-camera-review-esite.info',    // by Milagros Jowers
4240                 '.digital-cameras-esite.info',  // by Milan Jolin
4241                 '.dnstechnet.net',                              // by Tamera Oman
4242                 '.drivenbydata.org',                    // by Katherine Noyes
4243                 '.dtmf.net',                                    // by Micki Slayton
4244                 '.domainsfound.com',                    // by Blossom Lively
4245
4246                 // E
4247                 '.ecstacyabuse.net',                    // by Alana Knight
4248                 '.e-digital-camera-esite.info', // by Romaine Cress
4249                 '.eda-aahperd.org',                             // by Kaliyah Hammonds
4250                 '.eldorabusecenter.org',                // by Annabella Oneal
4251                 '.emicorporation.com',                  // by (Deangelo_Mikayla at marketing-support.info)
4252                 '.encaponline.com',                             // by Patrick Keel
4253                 '.ez-shopping-online.com',              // by Gail Bartlett
4254
4255                 // F
4256                 '.faithfulwordcf.com',                  // by Bart Weeks
4257                 '.fammedassoc.com',                             // by Joshua Nelson
4258                 '.federalministryoffinance.net',        // by Jeffry Mcmillan
4259                 '.f00k.org',                                    // by Leslie Chapman
4260                 '.foreignrealtions.org',                // by Krystal Hawley
4261                 '.fortwebsite.org',                             // by Kristina Motley
4262                 '.fotofirstdigital.com',                // by Tad Whitfield
4263                 '.foundationcommons.org',               // by Caryn Eskew
4264                 '.fraisierest-alexandre.com',   // by Dwayne Douglas
4265                 '.freaky-cheats.com',                   // by Al Klein
4266                 '.free--spyware.com',                   // by Nikki Contreras
4267                 '.french-home-finance-consultant.info', // by Santana Melton
4268                 '.fuel-tax-software-advisor.info',      // by Derrick Snyder
4269
4270                 // G
4271                 '.gaintrafficfast.com',                 // by Lila Meekins
4272                 '.gaygain.org',                                 // by Shell Davila
4273                 '.gcaaa.com',                                   // by Vallie Jaworski
4274                 '.generalsysteme.com',                  // by Cale Vogel
4275                 '.generation4games.co.uk',              // by Sonya Graham
4276                 '.german-dictionary.us',                // by Rex Daniel
4277                 '.gilmerrec.com',                               // by Leighann Guillory
4278                 '.glenthuntly-athletics.com',   // by Julee Hair
4279                 '.glorybaskets.com',                    // by Lynette Lavelle
4280                 '.goconstructionloan.com',              // by Willis Monahan
4281                 '.gohireit.com',                                // by Bertha Metzger
4282                 '.godcenteredpeople.com',               // by Jaycee Coble
4283
4284                 // H
4285                 '.healthinsuranceem.com',               // by Justin Munson
4286                 '.hearthorizon.info',                   // by Kory Session
4287                 '.hegerindustrial.com',                 // by Toni Wesley
4288                 '.herzequip.com',                               // by Princess Dunkle
4289                 '.hglcms.org',                                  // by Gladwin Ng
4290                 '.hipanoempresa.com',                   // by Shannon Staub
4291                 '.hitempfurnaces.com',                  // by Rebbeca Jaeger
4292                 '.horse-racing-result.com',             // by Rodney Reynolds
4293                 '.hueckerfamily.com',                   // by Hershel Sell
4294
4295                 // I
4296                 '.ilove2win.com',                               // by Lamont Dickerson
4297                 '.ilruralassistgrp.org',                // by Moises Hauser
4298                 '.imageonsolutions.com',                // by Porsche Dubois
4299                 '.infoanddatacenter.com',               // by Eva Okelley
4300                 '.islamfakta.org',                              // by Goldie Boykin
4301                 '.ithomemortgage.com',                  // by Adelaide Towers
4302                 '.iyoerg.com',                                  // by Madyson Gagliano
4303
4304                 // J
4305                 '.jeffaxelsen.com',                             // by Daphne William
4306                 '.jeffreyf.net',                                // by Vito Platt
4307                 '.johnmartinsreality.com',              // by Pamela Larry
4308                 '.johnsilvers.net',                             // by Silver Battaglia
4309
4310                 // K
4311                 '.kcgerbil.org',                                // by Marisa Thayer
4312                 '.kdc-phoenix.com',                             // by Salma Shoulders
4313                 '.kingscreditcard.com',                 // by Sean Parsons, "Credit card info"
4314                 '.kosove.org',                                  // by Darwin Schneider
4315
4316                 // L
4317                 '.leading-digital-camera-esite.info',   // by Charles Moore, "Online home loan articles"
4318                 '.letsgokayaking.net',                  // by Winnie Adair
4319                 '.libertycabs.com',                             // by Adela Bonds
4320                 '.liquor-store-cellar.info',    // by Hugh Pearson
4321                 '.locomojo.net',                                // by Marco Harmon
4322                 '.lodatissimo.com',                             // by Adrian Greeson
4323                 '.lsawc.org',                                   // by Lara Han
4324                 '.lycos-test.net',                              // by Rigoberto Oakley
4325
4326                 // M
4327                 '.macro-society.com',                   // by Venessa Hodgson
4328                 '.marthasflavorfest.com',               // by Ahmad Lau
4329                 '.martin-rank.com',                             // by Cathleen Crist
4330                 '.maryandfrank.org',                    // by Theodore Apodaca
4331                 '.masterkwonhapkido.com',               // by Misty Graham
4332                 '.maxrpm-demo.com',                             // by Cristal Cho
4333                 '.mechanomorphic.com',                  // by Stanford Crow
4334                 '.mepublishing.net',                    // by Karly Fleenor
4335                 '.meyerlanguageservices.co.uk', // by Breana Kennedy
4336                 '.metwahairports.com',                  // by Nan Kitchen
4337                 '.middle-eastnews.com',                 // by Tybalt Altmann
4338                 '.mikepelchy.com',                              // by Sherly Pearson
4339                 '.milpa.org',                                   // by Nelly Aguilera
4340                 '.modayun.com',                                 // by Camilla Velasco
4341                 '.moonstoneerp.com',                    // by Garret Salmon
4342                 '.morosozinho.com',                             // by Lenore Tovar
4343                 '.morphadox.com',                               // by Hung Zielinski
4344                 '.moscasenlared.com',                   // by Tera Gant
4345                 '.sdjavasig.com',                               // by Gia Swisher
4346                 '.mpeg-radio.com',                              // by Sincere Beebe
4347                 '.mrg-now-yes.com',                             // by Sparkle Gallegos
4348                 '.mtseniorcenter.org',                  // by Frederic Ortega
4349                 '.mysteryclips.com',                    // by Edward Ashford
4350
4351                 // N
4352                 '.naavs.org',                                   // by Yuridia Gandy
4353                 '.naval-aviation.org',                  // by Roselle Campo
4354                 '.navigare-ischia.com',                 // by Arielle Coons
4355                 '.ncredc.org',                                  // by Brenda Nye
4356                 '.neonmotorsports.com',                 // by Giovanna Vue
4357                 '.nf-ny.com',                                   // by Yadira Hibbard
4358                 '.ngfdyqva.com',                                // by Emiliano Samples
4359                 '.nicozone.com',                                // by Blaine Shell
4360                 '.nmbusinessroundtable.org',    // by Chantel Mccourt
4361                 '.npawny.org',                                  // by Willard Murphy
4362                 '.nysdoed.org',                                 // by Elric Delgadillo
4363                 '.nyswasteless.org',                    // by Shaylee Moskowitz
4364                 '.nytech-ir.com',                               // by Adrien Beals
4365
4366                 // O
4367                 '.oadmidwest.com',                              // by Gavin Kaplan
4368                 '.oarauto.com',                                 // by Susann Merriman
4369                 '.onairmilescard.com',                  // by Tomoko Hart, "Air miles card information"
4370                 '.onbusinesscard.com',                  // by Farris Lane, "Gm business card"
4371                 '.oncashbackcreditcard.com',    // by Ida Willis, "Cash back credit card articles"
4372                 '.onimagegoldcard.com',                 // by Roxanna Sims, "Imagine gold mastercard information"
4373                 '.online-pills-24x7.biz',               // by Aide Hallock
4374                 '.online-shopping-site-24x7.info',      // by Stacy Ricketts
4375                 '.onlinehomeloanrefinance.com', // by Chaz Lynch
4376                 '.onlinehomeloanfinancing.com', // by Humbert Eldridge
4377                 '.onunicarehealthinsurance.com',        // by  Lawerence Paredes
4378                 '.otterbayweb.com',                             // by Maxwell Irizarry
4379
4380                 // P
4381                 '.painting-technique.us',               // by Bryanna Tooley
4382                 '.pakamrcongress.com',                  // by Bryce Summerville
4383                 '.patabney.com',                                // by Kailyn Slone
4384                 '.parde.org',                                   // by Ellie Yates
4385                 '.participatingprofiles.com',   // by Jaelynn Meacham
4386                 '.partnershipconference.org',   // by Alla Floyd
4387                 '.pet-stars.com',                               // by Carmon Luevano
4388                 '.planning-law.org',                    // by Trista Holcombe
4389                 '.ppawa.com',                                   // by Evonne Scarlett
4390                 '.precisionfilters.net',                // by Faustina Fell
4391
4392                 // Q
4393                 '.qacards.com',                                 // by Perye Estrada, "Citi visa cards"
4394                 '.quick-debt-consolidation.net',        // by Lala Marte
4395                 '.quicktvr.com',                                // by Vernell Crenshaw
4396
4397                 // R
4398                 '.radicalsolutions.org',                // by Reece Medlin
4399                 '.randallburgos.com',                   // by Bradly Villa
4400                 '.rcassel.com',                                 // by Janiah Gallant
4401                 '.rearchitect.org',                             // by Marcus Gaudet
4402                 '.rent-an-mba.com',                             // by Valentina Mcdermott
4403                 '.reprisenashville.com',                // by Hester Khan
4404                 '.reptilemedia.com',                    // by Alicia Patel
4405                 '.resellers2000.com',                   // by Dedra Kennedy
4406                 '.reverse-billing.com',                 // by Lazaro Gluck
4407                 '.richcapaldi.com',                             // by Kya Haggard
4408                 '.richformissouri.com',                 // by Alanna Elston
4409                 '.robstraley.com',                              // by Leida Bartell
4410                 '.rollingprairie-candlecompany.com',    // by Leigha Aker
4411                 '.rpgbbs.com',                                  // by Leonel Peart
4412                 '.ruralbusinessonline.org',             // by Lynsey Watters
4413                 '.ruwomenscenter.org',                  // by Vince Mclemore
4414                 '.ryanjowens.com',                              // by Janine Smythe
4415
4416                 // S
4417                 '.sagarmathatv.org',                    // by Liam Funke
4418                 '.sakyathubtenling.org',                // by Liane Falgout
4419                 '.sandiegolawyer.net',                  // by Linnie Sommervill
4420                 '.sandishaven.com',                             // by Lino Soloman
4421                 '.scienkeen.com',                               // by Liza Navarra
4422                 '.seimenswestinghouse.com',             // by Teresa Benedetto
4423                 '.severios.com',                                // by Isa Steffen
4424                 '.sexual-hot-girls.com',                // by Viviana Bolton
4425                 '.shakespearelrc.com',                  // by Luciana Weaver
4426                 '.shashran.org',                                // by Adriel Humphries
4427                 '.shoes-shop.us',                               // by Austen Higginbotham
4428                 '.skagitvalleybassanglers.com', // by Necole Thiele
4429                 '.skinsciencesalon.com',                // by Nena Rook
4430                 '.smartalternative.net',                // by Nicki Lariviere
4431                 '.sml338.org',                                  // by Nickole Krol
4432                 '.smogfee.com',                                 // by Sienna Kimble
4433                 '.sneakers-e-shop.info',                // by Nikki Fye
4434                 '.spacewavemedia.com',                  // by Thanh Gast
4435                 '.softkernel.com',                              // by Nicol Hummer
4436                 '.stjoanmerrillville.com',              // by Hunter Beckham
4437                 '.strelinger.com',                              // by Arron Highsmith
4438                 '.striking-viking.com',                 // by Kylie Endsley
4439                 '.sunnydeception.org',                  // by Amaya Llora
4440                 '.sunzmicro.com',                               // by Goddard Arreola
4441                 '.sv-iabc.org',                                 // by Braden Buck
4442                 '.sykotick.com',                                // by Pierce Knecht
4443
4444                 // T
4445                 '.tbody.net',                                   // by Ormond Roman
4446                 '.the-pizzaman.com',                    // by Mario Ramsey
4447                 '.the-shoes.us',                                // by Alejandro Gaffney
4448                 '.theborneocompany.com',                // by Bryanna Tooley
4449                 '.theflashchannel.com',                 // by Terrilyn Tam, "Loan financing info"
4450                 '.thehomeschool.net',                   // by September Concepcio
4451                 '.thenewlywed.com',                             // by Allegra Marra
4452                 '.tigerspice.com',                              // by Denis Mosser
4453                 '.tnaa.net',                                    // by Jasmine Andress
4454                 '.top-finance-sites.com',               // by Maryann Doud
4455                 '.tradereport.org',                             // by Bettie Sisk
4456                 '.transmodeling.com',                   // by Martine Button
4457                 '.travel-01.net',                               // by Jay Kim, "Refinance on line"
4458                 '.tsaoc.com',                                   // by Heriberto Mcfall
4459                 '.tsunamidinner.com',                   // by Nannie Richey
4460
4461                 // U
4462                 '.uhsaaa.com',                                  // by Risa Herbert
4463                 '.ultradeepfield.org',                  // by Bobby Ragland
4464                 '.umkclaw.info',                                // by Cammy Kern
4465                 '.unitedsafetycontainer.com',   // by Shreya Heckendora
4466                 '.usa-wolf.com',                                // by Jacklyn Morrill
4467                 '.usjobfair.com',                               // by Lorina Burchette
4468
4469                 // V
4470                 '.vacancesalouer.com',                  // by Loris Bergquist
4471                 '.vagents.com',                                 // by Lorna Beaudette, "Refinancing home loan info"
4472                 '.valleylibertarians.org',              // by Lena Massengale
4473                 '.vanderbiltevents.com',                // by Gannon Krueger
4474                 '.vanwallree.com',                              // by Michelina Donahue
4475                 '.vcertificates.com',                   // by Hyun Lamp
4476                 '.vonormytexas.us',                             // by Suzette Waymire
4477
4478                 // W
4479                 '.washingtondc-areahomes.net',  // by Ailene Broome
4480                 '.web-hosting-forum.net',               // by Deedra Breen, "Mortgage information"
4481                 '.wolsaoh.org',                                 // by Daniela English
4482                 '.worldpropertycatalog.com',    // by Aray Baxter
4483
4484                 // Y
4485                 '.yankee-merchants.com',                // by Jackson Hinojosa
4486                 '.yourbeachhouse.com',                  // by Dedrian Ryals
4487                 '.yourdomainsource.com',                // by Deems Weingarten
4488
4489                 // Z
4490                 '.zkashan.com',                                 // by Evan Light
4491                 '.zockclock.com',                               // by Dorothea Guthrie
4492         ),
4493         'Something-Drugs' => array(
4494                 // Drugs / Pills / Diet
4495                 '.adult-dvd-rental-top-shop.info',      // by Gregoria Keating
4496                 '.abdelghani-shady.com',                // by Elly Alton
4497                 '.bangbangfilm.com',                    // by Davin Chou
4498                 '.centroantequera.com',                 // by Keon Kwiatkowski
4499                 '.champagne-cellar.info',               // by Kandis Rizzo
4500                 '.chix0r.org',                                  // by Christoper Baird
4501                 '.discout-watches-deals.info',  // by Taunya Limon, Insurance -> Drugs?
4502                 '.fantasticbooks-shop.com',             // by Kermit Ashley
4503                 '.fast-cash-01.com',                    // by Edgar Oliver
4504                 '.ficeb.info',                                  // by Vaughn Jacobson, "Phentermine news"
4505                 '.fn-nato.com',                                 // by Donny Dunlap
4506                 '.gqyinran.com',                                // by Alejandro Parks
4507                 '.juris-net.com',                               // by Rachelle Bravo
4508                 '.leftpencey.com',                              // by Aileen Ashby
4509                 '.miamicaribbeancarnival.com',  // by Herminia Barrios
4510                 '.nike-shoes-e-shop.info',              // by Machelle Groce, "Phentermine"
4511                 '.palaceroyale.net',                    // by Brycen Stebbins
4512                 '.pocket-watches-deals.info',   // by Dorinda Stromberg
4513                 '.regresiones.net',                             // by Lauralee Smtih, "Online phentermine updates"
4514                 '.yukissushi.com',                              // by Donell Hozier
4515         ),
4516         'Something-Others' => array(
4517                 '.consulting-cu.com',                   // by Albina Rauch, 404 not found
4518                 '.dvd-rentals-top-shop.info',   // by Lashunda Pettway, 404 not found
4519         ),
4520         'Something-NoApp' => array(
4521                 '.auctioncarslisting.com',      // "No application configured at this url." by John Davis
4522                 '.buy-cheap-hardware.com',      // "No application configured at this url." by Tim Morison (domains at sunex.ru)
4523                 '.carsgarage.net',                      // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4524                 '.digitshopping.net',           // "No application configured at this url." by Zonen Herms, and Jimmy Todessky (seomate at gmail.com)
4525                 '.your-insurance.biz',          // "No application configured at this url." by Jimmy Todessky (seomate at gmail.com)
4526         ),
4527         'Cortez and family' => array(
4528                 // by Cortez Shinn (info at goorkkjsaka.info), or Rico Laplant (info at nnjdksfornms.info)
4529                 '.dronadaarsujf.info',  // by Cortez
4530                 '.fromnananaref.info',  // by Cortez
4531                 '.goorkkjsaka.info',    // by Cortez
4532                 '.jkdfjjkkdfe.info',    // by Rico
4533                 '.jkllloldkjsa.info',   // by Cortez
4534                 '.nnjdksfornms.info',   // by Rico
4535                 '.mcmdkkksaoka.info',   // by Cortez
4536                 '.srattaragfon.info',   // by Cortez
4537                 '.yreifnnonoom.info',   // by Rico
4538                 '.zjajjsvgeuds.info',   // by Cortez
4539         ),
4540         'admin at ematuranza.com' => array(
4541                 '.ancorlontano.com',
4542                 '.dentroallago.com',
4543                 '.digiovinezza.com',
4544                 '.ematuranza.com',
4545                 '.ilfango.com',
4546                 '.nullarimane.com',
4547                 '.questaimmensa.com',
4548                 '.tentailvolo.com',
4549                 '.unatenerezza.com',
4550                 '.volgondilettose.com',
4551         ),
4552         'admin at edeuj84.info' => array(       // by Cornelius Boyers
4553                 '.bid99df.info',
4554                 '.bj498uf.info',
4555                 '.edeuj84.info',
4556                 '.f4mfid.info',
4557                 '.g4vf03a.info',
4558                 '.j09j4r.info',
4559                 '.jv4r8hv.info',
4560                 '.k43sd3.info',
4561                 '.k4r84d.info',
4562                 '.k4rvda.info',
4563                 '.k4v0df.info',
4564                 '.k903os.info',
4565                 '.k9df93d.info',
4566                 '.kv94fd.info',
4567                 '.ksjs93.info',
4568                 '.l0ks03.info',
4569                 '.l9u3jc.info',
4570                 '.lv043a.info',
4571                 '.nh94h9.info',
4572                 '.m94r9d.info',
4573                 '.s87fvd.info',
4574                 '.v3k0d.info',
4575                 '.v4r8j4.info',
4576                 '.vf044s.info',
4577                 '.vj49rs.info',
4578                 '.vk498j.info',
4579                 '.u03jow.info',
4580         ),
4581         'Nikhil and Brian' => array(
4582                 // by Brian Dieckman (info at iudndjsdhgas.info)
4583                 // by Nikhil Swafford (info at jhcjdnbkrfo.info)
4584                 // by Gerardo Figueiredo (info at jikpbtjiougje.info)
4585                 '.ihfjeswouigf.info',   // by Brian, / was not found
4586                 '.iudndjsdhgas.info',   // by Brian, / was not found
4587                 '.iufbsehxrtcd.info',   // by Brian, / was not found
4588                 '.jiatdbdisut.info',    // by Brian, / was not found
4589                 '.jkfierwoundhw.info',  // by Brian, / was not found
4590                 '.kfjeoutweh.info',             // by Brian, / was not found
4591                 '.ncjsdhjahsjendl.info',// by Brian, / was not found
4592                 '.oudjskdwibfm.info',   // by Brian, / was not found
4593                 '.cnewuhkqnfke.info',   // by Nikhil, / was not found
4594                 '.itxbsjacun.info',             // by Nikhil, / was not found
4595                 '.jahvjrijvv.info',             // by Nikhil (info at jikpbtjiougje.info), / was not found
4596                 '.jhcjdnbkrfo.info',    // by Nikhil, / was not found
4597                 '.najedncdcounrd.info', // by Nikhil, / was not found
4598                 '.mcsjjaouvd.info',             // by Nikhil, / was not found
4599                 '.oujvjfdndl.info',             // by Nikhil, / was not found
4600                 '.uodncnewnncds.info',  // by Nikhil, / was not found
4601                 '.jikpbtjiougje.info',  // by Julio Mccaughey (info at jikpbtjiougje.info), / was not found
4602                 '.cijkalvcjirem.info',  // by Gerardo, / was not found
4603                 '.nkcjfkvnvpow.info',   // by Gerardo, / was not found
4604                 '.nmiiamfoujvnme.info', // by Gerardo, / was not found
4605                 '.nxuwnkajgufvl.info',  // by Gerardo, / was not found
4606                 '.mkjajkfoejvnm.info',  // by Gerardo, / was not found
4607         ),
4608         'wealth777 at gmail.com' => array(      // by Henry Ford
4609                 '.brutal-forced.com',
4610                 '.library-bdsm.com',
4611                 '.rape-fantasy.us',
4612         ),
4613         'Croesus International Inc.' => array(  // by Croesus International Inc. (olex at okhei.net)
4614                 '.purerotica.com',
4615                 '.richsex.com',
4616                 '.servik.net',
4617                 '.withsex.com',
4618         ),
4619         'dreamteammoney.com' => array(
4620                 '.dreamteammoney.com',  // dtmurl.com related
4621                 '.dtmurl.com',                  // by dreamteammoney.com, redirection service
4622         ),
4623         'KLIK VIP Search and family' => array(
4624                 '.cheepmed.org',                // "KLIK VIP Search" by petro (petrotsap1 at gmail.com)
4625                 '.fastearning.net',             // "KlikVIPsearch.com" by Matthew  Parry        (fastearning at mail.ru)
4626                 '.klikvipsearch.com',   // "KLIKVIPSEARCH.COM" by Adrian Monterra (support at searchservices.info)
4627                 '.looked-for.info',             // "MFeed Search" now, by johnson (edu2006alabama at hotmail.com)
4628                 '.mnepoxuy.info',               // "KlikVIPsearch.com" by DEREK MIYAMOTO (grosmeba at ukr.net)
4629                 '.searchservices.info', // 403 Forbidden now, by Adrian Monterra (support at searchservices.info)
4630                 '.visabiz.net',                 // "Visabiz-Katalog-Home" now, by Natalja Estrina (m.estrin at post.skynet.lt)
4631         ),
4632         'vasyapupkin78 at bk.ru' => array(      // by Andrey Kozlov
4633                 '.antivirs.info',
4634                 '.antivirus1.info',
4635                 '.antivirus2.info',
4636         ),
4637         'wasam at vangers.net and family' => array(
4638
4639                 // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4640                 '.bahatoca.org',
4641                 '.digestlycos.org',
4642                 '.educativaanale.info',
4643                 '.guildstuscan.org',
4644                 '.isaakrobbins.info',
4645                 '.isfelons.org',
4646                 '.lvwelevated.org',
4647                 '.macphersonaca.org',
4648                 '.markyaustrian.org',
4649                 '.michelepug.org',
4650                 '.opalbusy.info',
4651                 '.quijotebachata.info',
4652                 '.salthjc.info',
4653                 '.shogunnerd.info',
4654                 '.solarissean.org',
4655                 '.sparkgsx.info',
4656                 '.tarzanyearly.org',
4657                 '.tulabnsf.org',
4658                 '.vaccarinos.org',
4659
4660                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
4661                 '.e2007.info',
4662                 '.cmoss.info',
4663
4664                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
4665                 '.finddesk.org',
4666                 '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
4667                 '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
4668                 '.rcatalog.org',
4669                 '.sbitzone.org',
4670
4671                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
4672                 '.cheapns.org',
4673                 '.my-top.net',
4674                 '.sfind.net',
4675                 '.sspot.net',
4676                 '.suvfind.info',
4677
4678                 // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
4679                 '.trumber.com',
4680
4681                 // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4682                 '.blogduet.org',
4683                 '.carelf.info',
4684                 '.cmagic.org',
4685                 '.cspell.org',
4686                 '.dspark.org',
4687                 '.dtonic.org',
4688                 '.mcharm.info',
4689                 '.mslook.info',
4690                 '.phpdinnerware.info',
4691                 '.rnation.org',
4692                 '.uzing.org',
4693
4694                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
4695                 '.allbar.info',
4696                 '.allersearch.org',
4697                 '.allzoom.org',
4698                 '.dynall.org',
4699                 '.fastopia.org',
4700                 '.offasfast.info',
4701                 '.rblast.org',
4702                 '.rchistes.info',
4703                 '.rette.org',
4704                 '.shufflequince.org',
4705                 '.suvlook.org',
4706
4707                 // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
4708                 '.290cabeza.org',
4709                 '.bossierpainted.org',
4710                 '.connickkarel.info',   // Admin: tvaals at vangers.net
4711                 '.definekonica.info',   // Admin: tvaals at vangers.net
4712                 '.gradetelemundo.info',
4713                 '.hydraulickin.info',
4714                 '.indicadorestmj.info',
4715                 '.keeleykincaid.org',
4716                 '.kleenbowser.info',
4717                 '.pipnickname.info',
4718                 '.pacolily.org',
4719                 '.redeemtrabalho.info',
4720                 '.scanmakerchua.info',
4721                 '.titanmessina.info',
4722                 '.tragratuit.org',
4723                 '.yeareola.info',
4724         ),
4725         'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
4726                 '.canadianmedsworld.info',      // 84.252.133.112
4727                 '.tabsdrugstore.info',          // 84.252.133.114
4728                 '.tabsstore.info',                      // 84.252.133.114
4729                 '.topcholesterol.info',         // 84.252.133.132
4730         ),
4731         'be.cx' => array(
4732                 '.be.cx',
4733                 '.ca.cx',
4734         ),
4735         'john780321 at yahoo.com' => array(     // by John  Brown
4736                 '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
4737                 '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
4738                 '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
4739         ),
4740         'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
4741                 '.bertela.info',
4742                 '.forblis.info',
4743                 '.frenallo.info',
4744                 '.goyahoo.info',
4745                 '.herbak.info',
4746                 '.kiokast.info',
4747                 '.nerenok.info',
4748                 '.pestgets.info',
4749                 '.snukker.info',
4750                 '.thegetspons.info',
4751         ),
4752         '2xxc at 2xxc.net' => array(    // by 2xxc, 404 not found
4753                 '.bobop.info',
4754                 '.kwwwe.info',
4755                 '.piikz.info',
4756                 '.moosm.info',
4757                 '.vvvw.info',
4758         ),
4759         'support at 51g.net' => array(  // iframe www.lovetw.webnow.biz
4760                 '.ftplin.com',          // 125.65.112.15, by Yongchun Liao
4761                 '.jplin.com',           // 125.65.112.15, by Yongchun Liao
4762                 '.jplineage.com',       // 221.238.195.113, by Yongchun Liao
4763                 '.jplingood.com',       // 125.65.112.15
4764                 '.linenew.com',         // 203.191.148.96
4765                 '.lyftp.com',           // 218.5.77.17,   by Yongchun Liao (weboy at 51g.net)
4766                 '.yzlin.com',           // 220.162.244.36
4767         ),
4768         'Betty.J.Pelletier at pookmail.com' => array(   // by Betty J. Pelletier
4769                 '.1111mb.com',
4770                 '.2sex18.com',
4771                 '.69porn1.com',
4772         ),
4773         'ECTechnology' => array(
4774                 '.atmouse.co.kr',               // by EG gisul (kpgak at hanmail.net)
4775                 '.auto-mouse.com',              // "Copyright Ò$ 2007 www.automouse.jp" by ECTechnology (help at atmouse.co.kr)
4776                 '.automouse.jp',
4777         ),
4778         'lyqz at 21cn.com' => array(
4779                 '.japangame1.com',
4780                 '.lineinfo-jp.com',             // www.lineinfo-jp.com is 61.139.126.10
4781                 '.livedoor1.com',
4782                 '.ragnarokonline1.com',
4783                 '.zhangweijp.com',              // by qiu wang hao (qq.lilac at eyou.com), *.exe, hidden JavaScripts, the same IP of www.lineinfo-jp.com
4784         ),
4785         'kingrou at hotmail.com' => array(      // by yangjianhe
4786                 '.youshini.com',                // Two iframe to 453787.com's *.exe
4787                 '.453787.com',
4788         ),
4789         'anpaul541000 at 163.com' => array(     // by su qiuqing
4790                 '.cetname.com',                 // 222.77.185.87
4791                 '.jpgamer.net',                 // 220.247.157.106
4792                 '.jpplay.net',                  // 222.77.185.87, iframe www.lovetw.webnow.biz
4793                 '.lovejptt.com',                // 222.77.185.87
4794                 '.pangzigame.com',              // 220.247.134.136, by qiuqingshan
4795                 '.playncsoft.net',              // 220.247.157.106
4796         ),
4797         'abc00613 at 163.com' => array( // by guo yong
4798                 '.avtw1068.com',                // 64.74.223.11
4799                 '.dj5566.org',                  // Seems IP not allocated now, by yongchao li
4800                 '.djkkk66990.com',              // 68.178.232.99
4801                 '.lingamesjp.com',              // 219.153.13.23(8.myadmin.cn),  by guo jinlong
4802         ),
4803         'thomas.jsp at libertysurf.fr' => array(        // by Perez Thomas
4804                 '.cmonfofo.com',
4805                 '.discutbb.com',
4806         ),
4807         'Dorothy.D.Adams at mailinator.com' => array(   // by Dorothy D. Adams
4808                 '.preca.info',
4809                 '.skiaggi.info',
4810                 '.scrianal.info',
4811                 '.tageom.info',
4812         ),
4813         'Inpros.net' => array(  // by Hayato Hikari (hikari at t-dm.co.jp)
4814                 '.inpros.biz',                  // 38.99.91.137, redirect to inpros.net
4815                 '.inpros.net',                  // 202.181.98.79
4816                 '.gametradeonline.jp',  // 210.188.204.233, by Hayato Hikari, RMT
4817         ),
4818         'szczffhh_sso at 21cn.net' => array(    // by zhenfei chen
4819                 '.ec51.com',
4820                 '.ec51.net',
4821         ),
4822         'abbevillelaties at yahoo.fr etc' => array(
4823                 // by Mahat Ashat, JavaScript may mocks "ACCOUNT TERMINATE", or "Domain deleted Reason: ABUSE" but ...
4824                 '.ringtones-rate.com',
4825                 '.ringtones-dir.net',   // by Alex Maklayt (maklayt at ringtones-dir.net), hidden JavaScript
4826                 '.special-ringtones.net',
4827         ),
4828         'gibson or gibs0n at skysquad.net' => array(    // by Brzezinski Bartosz (gibson at skysquad.net), redirect to find.fm
4829                 '.1sgsc.info',
4830                 '.3h4r89h.info',
4831                 '.3v44dd.info',
4832                 '.6rfuh6.info',
4833                 '.84hd8.info',
4834                 '.94bui89.info',
4835                 '.agysb3.info',
4836                 '.asdjhs.info',
4837                 '.bcvnrth.info',
4838                 '.bheb4r.info',
4839                 '.bhiuno.info',
4840                 '.biug7g.info',
4841                 '.bjb5f4.info',
4842                 '.bob8g7g.info',
4843                 '.br89bdd.info',
4844                 '.bsa3h.info',
4845                 '.bsieb8.info',
4846                 '.basbiubf.info',
4847                 '.bobwwfs2.info',
4848                 '.ciuv9t.info',
4849                 '.dbmdx4.info',
4850                 '.dbrjms.info',
4851                 '.dbtcm.info',
4852                 '.dff9ghu.info',
4853                 '.dfshbb.info',
4854                 '.dgd4ffdh.info',
4855                 '.dh3ge.info',
4856                 '.duc86jh.info',
4857                 '.ergth45.info',
4858                 '.f78bf7ffb.info',
4859                 '.gbdfbo4.info',
4860                 '.ger45.info',
4861                 '.gnvnrrg.info',
4862                 '.h47he7.info',
4863                 '.h488hbd4.info',
4864                 '.hd72b94.info',
4865                 '.he74b7.info',
4866                 '.hfujfnr.info',
4867                 '.husdhd42.info',
4868                 '.hbwje.info',
4869                 '.itg87gji.info',
4870                 '.iugiougiuh.info',
4871                 '.jhd4f4aa.info',
4872                 '.jshd73.info',
4873                 '.krhpgd.info',
4874                 '.lyihjn.info',
4875                 '.nfyjnfj.info',
4876                 '.oihbv.info',
4877                 '.os44fvs.info',
4878                 '.sdfsd3.info',
4879                 '.sdiug4.info',
4880                 '.sdkufhh.info',
4881                 '.sdugb4f.info',
4882                 '.skdbf.info',
4883                 '.sipiv78.info',
4884                 '.sudbfb.info',
4885                 '.tymbbmy.info',
4886                 '.uilhjk.info',
4887                 '.vi87vub.info',
4888                 '.vfuyf87f.info',
4889                 '.viyvvj877.info',
4890                 '.w7fc8eu.info',
4891                 '.wefg43g.info',
4892                 '.xbrch78e.info',
4893                 '.ywsfu.info',
4894                 '.zxcbiv.info',
4895         ),
4896         'info at infooracle.com' => array(      // by Marek Luto Marek Luto
4897                 '.abofios.info',
4898                 '.amlekfn.info',
4899                 '.amlkdoie.info',
4900                 '.amkslewq.info',
4901                 '.alemfu.info',
4902                 '.aloweks1.info',
4903                 '.alposd3.info',
4904                 '.bamhpb.info',
4905                 '.bhjkb.info',
4906                 '.bjqnj.info',
4907                 '.cvcxcbhpr.info',
4908                 '.czoypaiat.info',
4909                 '.dbpmgc.info',
4910                 '.dgvogrxs.info',
4911                 '.dldksf.info',
4912                 '.dlor6za.com',
4913                 '.dmkoiew.info',
4914                 '.eewrefr.info',
4915                 '.eladne.info',
4916                 '.elksem.info',
4917                 '.elwpod.info',
4918                 '.emlwkdnr.info',
4919                 '.esgmyqk.info',
4920                 '.fauqv.info',
4921                 '.fgxkgy.info',
4922                 '.fhryns.info',
4923                 '.fj38n4g.info',
4924                 '.fjnesal.info',
4925                 '.fmkfoe.info',
4926                 '.fqkcfldtr.info',
4927                 '.fwcigpdwz.info',
4928                 '.fyhik.info',
4929                 '.glrkje.info',
4930                 '.gwkslfq.info',
4931                 '.gwjracvh.info',
4932                 '.hihopepe.info',
4933                 '.hwlyggbkw.info',
4934                 '.hmwbfw.info',
4935                 '.hthyeb.info',
4936                 '.iaofkyaw.info',
4937                 '.uldkxuiw.info',
4938                 '.is7c6w4.info',
4939                 '.ivuddhdk.info',
4940                 '.jgfndjem.info',
4941                 '.jgmdlek.info',
4942                 '.jkrnvmpad.info',
4943                 '.jqujn.info',
4944                 '.jvgmmba.info',
4945                 '.kbaur.info',
4946                 '.kgjindptv.info',
4947                 '.kleo7s9.info',
4948                 '.lezfgam.info',
4949                 '.lfaasy.info',
4950                 '.ljpdjki.info',
4951                 '.lmnpis.info',
4952                 '.lpzcu2f.info',
4953                 '.lrptn.info',
4954                 '.lursqt.info',
4955                 '.mgkabviil.info',
4956                 '.mhtknjyt.info',
4957                 '.mksuuku.info',
4958                 '.mkyky.info',
4959                 '.mloaisn.com',
4960                 '.mlsiknd.info',
4961                 '.mthqz.info',
4962                 '.nnooq.info',
4963                 '.nohhylvc.info',
4964                 '.nuprndsye.info',
4965                 '.nsoelam.info',
4966                 '.nykobczv.info',
4967                 '.nzuhli.info',
4968                 '.odyqzgylr.info',
4969                 '.oidiau.info',
4970                 '.oitzkw.info',
4971                 '.okdmrpz.info',
4972                 '.ooinziti.info',
4973                 '.ortqr.info',
4974                 '.osmkpnekv.info',
4975                 '.ozkzfih.info',
4976                 '.p3ix8wc.com',
4977                 '.piwyt.info',
4978                 '.pfkijrm.info',
4979                 '.pjktcragi.info',
4980                 '.pleoz.info',
4981                 '.plvqm73.info',
4982                 '.pqyrem.info',
4983                 '.qipgqd.info',
4984                 '.qlewixu.com',
4985                 '.qmlskme.info',
4986                 '.qtuff.info',
4987                 '.quoga.info',
4988                 '.quqz.info',
4989                 '.qzxuw.info',
4990                 '.rcaidegp.info',
4991                 '.rlkmdi.info',
4992                 '.rnsoiov.info',
4993                 '.rnwlams.info',
4994                 '.rprgkgqld.info',
4995                 '.rubqvxrn.info',
4996                 '.spqxstl.info',
4997                 '.syckoqjql.info',
4998                 '.tbirb.info',
4999                 '.thalc34.info',
5000                 '.tiabq.info',
5001                 '.tszzpjr.info',
5002                 '.tyjdyn.info',
5003                 '.twgugpns.info',
5004                 '.uaezrqp.info',
5005                 '.udlkasu.info',
5006                 '.uejncyf.info',
5007                 '.ukvflb.info',
5008                 '.ugsuv.info',
5009                 '.ukhgpcp.info',
5010                 '.urprzn.info',
5011                 '.uuhememkw.info',
5012                 '.yalc7en.info',
5013                 '.ybuid.info',
5014                 '.yhdkgfob.info',
5015                 '.ymenq.info',
5016                 '.ynlyb.info',
5017                 '.vieatlubk.info',
5018                 '.vltcaho.info',
5019                 '.wlamsiek.info',
5020                 '.wlerp.info',
5021                 '.wlmtshzi.info',
5022                 '.wmlkams.info',
5023                 '.wprqd.info',
5024                 '.wpyspszi.info',
5025                 '.xdscc.info',
5026                 '.xdvy.info',
5027                 '.xeypku.info',
5028                 '.xsrxh.info',
5029                 '.xwjyrpfe.info',
5030                 '.yxcqw.info',
5031                 '.zhbktrh.info',
5032                 '.zspepn.info',
5033                 '.zsxtz.info',
5034         ),
5035         'survi at poczta.fm and smiley' => array(
5036                 '.pperd.info',          // "main site :>" by Domagala Andrzej (survi at poczta.fm)
5037                 '.ppert.info',
5038                 '.pperta.info',
5039                 '.pperts.info',
5040                 '.pprtuis.info',
5041                 '.13iuey.info',         // ":>"
5042                 '.13jkhs.info',
5043                 '.13lksa.info',
5044                 '.13rxtx.info',
5045                 '.13slkd.info',
5046                 '.13zaer.info',
5047         ),
5048         'admin at esemeski.com' => array(       // by Jan Kalka
5049                 '.kxils.info',
5050                 '.kuaph.info',
5051                 '.lncdc.info',
5052                 '.lsqpd.info',
5053                 '.mczed.info',
5054                 '.npous.info',
5055                 '.obgju.info',
5056         ),
5057         'LiquidNetLimited.com' => array(
5058                 // liquidnetltd.net,    // 216.65.1.131(duoservers.com)
5059
5060                 // FateBack.com related
5061                 // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp
5062                 '.bebto.com',
5063                 '.fateback.com',
5064                 '.undonet.com',
5065                 '.yoll.net',
5066                 '.sinfree.net',         // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
5067
5068                 // 50webs.com                   // 64.72.112.10
5069                 // dns2.50webs.com              // 64.72.112.11
5070                 '*.freehostia.com',             // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
5071                 // dns2.freehostia.com  // 64.72.112.13
5072                 // serv3.freehostia.com // 64.72.112.14
5073                 // hex12.freehostia.com // 64.72.112.19, 64.72.112.20
5074                 // mail.50webs.com              // 64.72.112.26
5075                 // supremecenter41.com  // 64.72.112.52
5076                 // 50webs2.50webs.com   // 64.72.112.89
5077                 // supremecenter39.com  // 64.72.112.103
5078
5079                 // by LiquidNet Ltd. (support at propersupport.com)
5080                         '*.50webs.com',                 // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html
5081                         // propersupport.com    // 216.65.1.129(dns1.supremecenter.com)
5082                         'duoservers.com',               // 216.65.1.130
5083
5084                 // 100ws.com                    // No-ip by LiquidNet Ltd. (ceo at propersupport.com)
5085         ),
5086         'domains at agava.com' => array(
5087                 '.h18.ru',
5088                 '.hut1.ru',
5089         ),
5090         'wlmx009 at hotmail.com' => array(
5091                 '.123lineage.com',
5092                 '.ff11-info.com',
5093                 '.lastlineage.com',
5094                 '.lineage2-ol.com',
5095                 '.lineage2006.com',
5096                 '.lineagefirst.com',
5097         ),
5098         'Zettahost.com' => array(
5099                 '.atspace.biz',         // sales at zettahost.com
5100                 '.atspace.com',         // abuse at zettahost.com
5101                 '.atspace.name',        // NS atspace.com
5102                 '.awardspace.com',      // by abuse at awardspace.com, no DirectoryIndex, 70.86.228.149
5103                 '.awardspace.us',       // by Dimitar Dimitrov (sales at zettahost.com), 70.86.228.149
5104         ),
5105         'hlq9814 at 163.com' => array(
5106                 '.kotonohax.com',               // by ling bao
5107                 '.ragnarox.mobi',               // by lin bao, *.exe download
5108                 '.rokonline-jp.com',    // by hang long
5109         ),
5110         '77ch.jp' => array(
5111                 '.77ch.jp',
5112                 '.gamorimori.net',      // by ryo takami (infomation at 77ch.jp)
5113         ),
5114         'serchportal at mail.ru' => array(      // by Namu Adin
5115                 '.43fert.info',
5116                 '.belis.info',
5117                 '.bonu.info',
5118                 '.chelsite.info',
5119                 '.chparael.info',
5120                 '.cool9f.info',
5121                 '.dada2.info',
5122                 '.dorplanete.info',
5123                 '.dormonde.info',
5124                 '.dorprojet.info',
5125                 '.faciledor.info',
5126                 '.fastsearchgroup.info',
5127                 '.gerta0.info',
5128                 '.getse.info',
5129                 '.gopvl.info',
5130                 '.knopki.info',
5131                 '.propidor.info',
5132                 '.quicksearchnet.info',
5133                 '.ret5.info',
5134                 '.slimfastsearch.info',
5135                 '.virtualpvl.info',
5136                 '.vpvla.info',
5137                 '.xjdor.info',
5138                 '.zhopki.info',
5139         ),
5140         'SoniqHost.com' => array(       // by Stanley Gutowski (support at soniqhost.com)
5141                 '*.444mb.com',          // Free hosting
5142                 'urlnip.com',           // Redirection
5143         ),
5144         'WWW.RU' => array(              // by Angela (abuse at www.ru)
5145                 '.1fasttimesatnau.info',
5146                 '.1freecybersex.info',
5147                 '.1freexxxcomics.info',
5148                 '.1fuckingmywife.info',
5149                 '.1pornpreview.info',
5150                 'www.ru',                                       // by (service at demos.ru), redirection
5151         ),
5152         '65.90.250.10' => array(        // IP seems the same (65.90.250.10)
5153                 '.adultschat.info',
5154                 '.livecamonline.info',
5155                 '.webcam4u.info',
5156                 '.younghot.info',
5157         ),
5158         'hostorgadmin at googlemail.com' => array(      // Byethost Internet Ltd.
5159                 '.yoursupportgroup.com',        // 72.36.219.162(*.static.reverse.ltdomains.com)
5160
5161                 // 209.51.196.242
5162                 '.22web.net',
5163                 '.2kool4u.net',
5164                 '.9skul.com',
5165                 '.alojalo.info',
5166                 '.byet.net',
5167                 '.byethost2.com',
5168                 '.byethost3.com',
5169                 '.byethost4.com',
5170                 '.byethost5.com',
5171                 '.byethost6.com',
5172                 '.byethost7.com',
5173                 '.byethost8.com',
5174                 '.byethost9.com',
5175                 '.byethost10.com',
5176                 '.byethost11.com',
5177                 '.byethost12.com',
5178                 '.byethost13.com',
5179                 '.byethost14.com',
5180                 '.byethost15.com',
5181                 '.byethost16.com',
5182                 '.byethost17.com',
5183                 '.byethost18.com',
5184                 '.headshothost.net',
5185                 '.hostwq.net',
5186                 '.mega-file.net',
5187                 '.truefreehost.com',
5188
5189                 '.ifastnet.com',        // 209.51.196.243
5190
5191                 // 209.190.16.82(mx1.byet.org)
5192                 '.1sthost.org',
5193                 '.4sql.net',
5194                 '.byet.org',
5195                 '.hyperphp.com',
5196                 '.kwikphp.com',
5197                 '.my-php.net',
5198                 '.my-place.us',
5199                 '.my-webs.org',
5200                 '.netfast.org',
5201                 '.php0h.com',
5202                 '.php1h.com',
5203                 '.php2h.com',           // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org
5204                 '.phpnet.us',
5205                 '.prohosts.org',
5206                 '.pro-php.org',
5207                 '.prophp.org',
5208                 '.sprinterweb.net',
5209                 '.swiftphp.com',
5210                 '.xlphp.net',
5211
5212                 // 209.190.16.83(mx2.byet.org)
5213                 '.instant-wiki.net',
5214
5215                 // 209.190.16.84(mx3.byet.org)
5216
5217                 // 209.190.16.85(mx4.byet.org)
5218                 '.instant-blog.net',
5219                 '.instant-forum.net',
5220
5221                 '.byethost.com',                        // 209.190.18.138
5222         ),
5223         'webmaster at bestgirlssex.info' => array(      // by lemnaru ionut, ns *.hostgator.com
5224                 '.analmoviesite.info',
5225                 '.bestgirlssex.info',
5226                 '.boxvagina.info',
5227                 '.cyberlivegirls.info',
5228                 '.hotredgirls.info',
5229                 '.forsexlove.info',
5230                 '.hotnudezone.info',
5231                 '.hotredpussy.info',
5232                 '.lesbians-live.info',
5233                 '.lesbians-on-cam.info',
5234                 '.onlinegirlssite.info',
5235                 '.sexloveonline.info',
5236                 '.teensexcard.info',
5237                 '.teensexdirect.info',
5238                 '.topnudesite.info',
5239                 '.vaginafree.info',
5240                 '.webcam-show.info',
5241                 '.webcamshow.info',
5242                 '.youngsexchat.info',
5243                 '.yourcumshot.info',
5244         ),
5245         'stocking.club at gmail.com' => array(
5246                 '.adulthotmodels.com',          // by David Zajwzran
5247                 '.aretheshit.info',                     // by David Theissen (zjwzra at mail.ru)
5248                 '.cash-call.info',                      // by David Theissen
5249                 '.cialis-compare-levitra-viagra.info',  // by David Theissen
5250                 '.cheap-online-viagra.info',    // by David Theissen
5251                 '.drugcleansing.net',           // by David Zajwzran
5252                 '.men-health-zone.com',         // by David Theissen
5253                 '.purchase-viagra.info',        // by David Theissen
5254                 '.realdrunkengirls.biz',        // by David Theissen
5255                 '.sextoyslife.com',                     // by David Zajwzran
5256                 '.sexysubjects.info',           // by David Zajwzran
5257                 '.shithotsex.info',                     // by David Theissen (zjwzra at mail.ru)
5258                 '.stocks-trader.info',          // by David Theissen (zjwzra at mail.ru)
5259                 '.travelcardsite.info',         // by David Theissen
5260         ),
5261         'lustiq at p5com.com' => array(
5262                 '.wonkalook.com',               // ns *.willywonka.co.in, 85.255.117.226
5263                 '.willywonka.co.in',    // by Nick Priest (lustiq at p5com.com), 85.255.117.226
5264         ),
5265         'web at 6jy.com' => array(
5266                 '.micro36.com',                 // by Teng Zhang, content from lineage.jp, post with 'lineage1bbs.com'
5267                 '.movie1945.com',               // by Zhang Teng, content from lineage.jp, hidden JavaScript
5268         ),
5269         'mk_slowman at yahoo.com' => array(     // by Mike Slowman (mk_slowman at yahoo.com)
5270                 '.auto-fgen.info',
5271                 '.fast-marketing.info',
5272                 '.from-usa.info',
5273                 '.generic-pharm.info',
5274                 '.pharm-directory.info',
5275                 '.popular-people.info',
5276                 '.safe-health.info',
5277                 '.star-celebrities.info',
5278                 '.super-home-biz.info',
5279                 '.top5-auto.info',
5280                 '.top5-cars.info',
5281                 '.vip-furniture.info',
5282                 '.vip-pc.info',
5283                 '.vip-pets.info',
5284         ),
5285         'abuse at search-store.org' => array(
5286                 '.travel-gen.info',             // by Mike Slowman (abuse at search-store.org)
5287         ),
5288         'Leading Edge Marketing Inc.' => array(
5289                 // by Leading Edge Marketing Inc. (domains at leminternet.com), seems an advertiser
5290                 '.abemedical.com',
5291                 '.attractwomennow.com',
5292                 '.bettersexmall.com',
5293                 '.buymaxoderm.com',
5294                 '.buyvprx.com',
5295                 '.genf20.com',
5296                 '.infinityhealthnews.com',
5297                 '.istnewsletter.com',
5298                 '.leadingedgecash.com',
5299                 '.leadingedgeherbals.com',
5300                 '.leadingedgevipsonly.com',
5301                 '.lecash.com',
5302                 '.leminfo.com',
5303                 '.proextendersystem.com',
5304                 '.provestra.com',
5305                 '.semenax.com',
5306                 '.shavenomore.com',
5307                 '.theedgenewsletter.com',
5308                 '.vigorelle.com',
5309                 '.vigrx.com',
5310                 '.vigrxplus.com',
5311                 '.wbstnewsletter.com',
5312         ),
5313         'clickx at bk.ru' => array(     // by Alexey Enrertov
5314                 '.coolget*.info' =>
5315                         '#^(?:.*\.)?' . 'coolget' .
5316                         '(?:bus|find|news|php|place|post|srch)' .
5317                         '\.info$#',
5318                 '.coolgirl*.info' =>
5319                         '#^(?:.*\.)?' . 'coolgirl' .
5320                         '(?:apple|fish|search)' .
5321                         '\.info$#',
5322                 '.coolmeet*.info' =>
5323                         '#^(?:.*\.)?' . 'coolmeet' .
5324                         '(?:apple|click|find|fish|news|php|place|post|srch|search)' .
5325                         '\.info$#',
5326                 '.cool**.info' =>
5327                         '#^(?:.*\.)?' . 'cool' . '(?:strong|the)' .
5328                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5329                         '\.info$#',
5330                 '.freseasy*.info' =>
5331                         '#^(?:.*\.)?' . 'freseasy' .
5332                         '(?:apple|click|find|fish|post|search)' .
5333                         '\.info$#',
5334                 '.fres**.info' =>
5335                         '#^(?:.*\.)?' .
5336                         'fres' . '(?:adult|boy|get|girl|meet|new|real|strong|the)' .
5337                         '(?:apple|bus|click|find|fish|news|php|place|post|srch|search)' .
5338                         '\.info$#',
5339                         // These are not found yet:
5340                         // fresgirlsrch.info
5341                         // fresadultapple.info
5342                         // fresadultclick.info
5343                         // frestheplace.info
5344
5345                 // 66.232.113.44
5346                 '.nuhost.info',
5347                 '.susearch.info',
5348
5349                 // 66.232.126.74(hv94.steephost.com)
5350                 '.dilej.com',
5351                 '.fyvij.com',
5352                 '.howus.com',
5353                 '.jisyn.com',
5354                 '.kaxem.com',
5355                 '.mihug.com',
5356                 '.mobyb.com',
5357                 '.qidat.com',
5358                 '.qihek.com',
5359                 '.ryzic.com',
5360                 '.sasuv.com',
5361                 '.tuquh.com',
5362                 '.vehyq.com',
5363                 '.wezid.com',
5364                 '.wifuj.com',
5365                 '.xijyt.com',
5366                 '.zuqyn.com',
5367
5368                 '.mosugy.com',
5369         ),
5370         'jakaj ay hotmail.com' => array(        // 66.232.113.46, the same approach and timing of clickx at bk.ru
5371                 '.hitsearching.info',
5372                 '.hugeamountdata.info',
5373                 '.megafasthost.info',
5374                 '.real-big-host.info',
5375                 '.search4freez.info',
5376                 '.yasech.info',
5377
5378                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5379                 '.bymire.com',
5380
5381                 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
5382                 '.ligiwa.com',
5383
5384                 '.mubeho.com',
5385         ),
5386         'ice--man at mail.ru related' => array(
5387                 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
5388                 '.bestcreola.com',
5389                 '.crekatierra.com',
5390                 '.creolafire.com',
5391                 '.crolik.com',
5392                 '.croller.cn',
5393                 '.ecrmx.com',
5394                 '.eflashpoint.com',
5395                 '.exoticmed.com',
5396                 '.feelview.com',
5397                 '.greatexotic.com',
5398                 '.icrtx.com',
5399                 '.icyhip.com',
5400                 '.icyiceman.com',
5401                 '.icypopular.com',
5402                 '.iflashpoint.com',
5403                 '.justmdx.com',
5404                 '.kiliusgroup.com',
5405                 '.klickerr.com',
5406                 '.klickerrworld.com',
5407                 '.kreolic.com',
5408                 '.margansitio.com',
5409                 '.margantierra.com',
5410                 '.mimargan.com',
5411                 '.oilkeys.com',
5412                 '.planetmdx.com',
5413                 '.thekeyse.com',
5414                 '.viewgreat.com',
5415                 '.yourcreola.com',
5416
5417                 // 69.46.23.48
5418                 '.bestkilius.com',
5419                 '.crekadirecto.com',
5420                 '.getflashsite.com',
5421                 '.sucreka.com',
5422                 '.superkilius.com',
5423
5424                 // 69.46.23.48 by bing-16 at ftunez.org
5425                 '.bovorup.cn',
5426                 '.litotar.cn',
5427                 '.nihydec.cn',
5428
5429                 // 66.232.112.175 by bing-32 at ftunez.org
5430                 '.lasyxy.cn',
5431
5432                 // by bing-65 at ftunez.org
5433                 '.coxyvuk.cn',          // 66.232.120.111(non-existent)
5434                 '.comygyx.cn',          // 66.232.120.112(non-existent)
5435                 '.gyqalec.cn',          // 66.232.120.114(non-existent)
5436                 '.paluwir.cn',          // 66.232.120.114(non-existent)
5437                 '.qunonid.cn',          // 66.232.120.114(*snip*)
5438                 '.qupyvin.cn',          // 66.232.120.115(non-existent)
5439                 '.ririjyz.cn',          // 66.232.120.111(*snip*)
5440                 '.saralar.cn',          // 66.232.120.113(non-existent)
5441                 '.vawomyl.cn',          // 66.232.120.115(non-existent)
5442
5443                 // 69.46.23.48 by clarkson-34 at ftunez.org
5444                 '.bumora.cn',
5445                 '.byxite.cn',
5446                 '.byxuqu.cn',
5447                 '.jadama.cn',
5448                 '.kybope.cn',
5449                 '.mefeki.cn',
5450                 '.mokiso.cn',
5451                 '.niqeme.cn',
5452                 '.pukafo.cn',
5453                 '.qesaxa.cn',
5454                 '.toxezi.cn',
5455                 '.tujudy.cn',
5456                 '.tutike.cn',
5457
5458                 // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain
5459                 '.cabino.cn',
5460                 '.cuwace.cn',
5461                 '.ferazi.cn',
5462                 '.gigywy.cn',
5463                 '.lapype.cn',
5464                 '.mewabe.cn',
5465                 '.pezegy.cn',
5466                 '.pyzuza.cn',
5467                 '.qypony.cn',
5468                 '.ropesy.cn',
5469                 '.wadyfe.cn',
5470
5471                 // 69.46.23.48 clarkson-58 at ftunez.org
5472                 '.becabe.cn',
5473                 '.biciqy.cn',
5474                 '.bezymu.cn',
5475                 '.cifori.cn',
5476                 '.ciwyxi.cn',
5477                 '.dobari.cn',
5478                 '.dusofe.cn',
5479                 '.dutyda.cn',
5480                 '.dykanu.cn',
5481                 '.fakexu.cn',
5482                 '.fylema.cn',
5483                 '.godymo.cn',
5484                 '.hyhaxy.cn',
5485                 '.ganosi.cn',
5486                 '.kuxyju.cn',
5487                 '.lacezy.cn',
5488                 '.lonyru.cn',
5489                 '.lycato.cn',
5490                 '.nykyby.cn',
5491                 '.qyhuko.cn',
5492                 '.redere.cn',
5493                 '.riwimu.cn',
5494                 '.wopary.cn',
5495                 '.xizity.cn',
5496                 '.xuxusa.cn',
5497
5498                 // by entretov-28 at ftunez.org
5499                 '.hotejen.cn',          // 66.232.120.111(*snip*)
5500                 '.kyhadat.cn',          // 66.232.120.115(*snip*)
5501
5502                 // 69.46.23.48 by entretov-32 at ftunez.org
5503                 '.cihuji.cn',
5504                 '.deqyve.cn',
5505                 '.genefa.cn',
5506                 '.gujyju.cn',
5507                 '.hasadu.cn',
5508                 '.hedomi.cn',
5509                 '.kecicy.cn',
5510                 '.kipabo.cn',
5511                 '.manunu.cn',
5512                 '.musoru.cn',
5513                 '.myvuna.cn',
5514                 '.pikybe.cn',
5515                 '.riqawo.cn',
5516                 '.rufuxy.cn',
5517                 '.vyfilu.cn',
5518                 '.xadule.cn',
5519                 '.zolaxe.cn',
5520                 '.zerixu.cn',
5521
5522                 // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org
5523                 '.dozoda.cn',
5524                 '.nemipu.cn',
5525
5526                 // entretov-84 at ftunez.org
5527                 '.muruvun.cn',          // 66.232.120.114(*snip*)
5528                 '.favulol.cn',          // 66.232.120.115(*snip*)
5529                 '.tixuqyx.cn',          // 66.232.120.111(*snip*)
5530
5531                 // 69.46.23.48 by jeremy-57 at ftunez.org
5532                 '.duzele.cn',
5533                 '.figede.cn',
5534                 '.fiwany.cn',
5535                 '.gyfalu.cn',
5536                 '.jepylo.cn',
5537                 '.nuqumy.cn',
5538
5539                 // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain
5540                 '.burahu.cn',
5541                 '.jydijy.cn',
5542                 '.komyby.cn',
5543                 '.najepa.cn',
5544                 '.pylobu.cn',
5545                 '.qofoly.cn',
5546                 '.sybuvi.cn',
5547                 '.vycexu.cn',
5548                 '.wotyqo.cn',
5549                 '.xudoli.cn',
5550
5551                 // by entretov-28 at ftunez.org
5552                 '.xevavuv.cn',          // 66.232.120.113(*snip*)
5553
5554                 // by entretov-37 at ftunez.org
5555                 '.sadyroz.cn',          // 66.232.120.114(*snip*)
5556                 '.zedutox.cn',          //  66.232.120.112(non-existent)
5557
5558                 // 66.232.112.175 by entretov-86 at ftunez.org
5559                 '.faweji.cn',
5560                 '.jypaci.cn',
5561                 '.xozuso.cn',
5562
5563                 // 69.46.23.48 by miles-37 at ftunez.org
5564                 '.beqymo.cn',
5565                 '.ceqibi.cn',
5566                 '.dyraqo.cn',
5567                 '.qenedo.cn',
5568                 '.qurypa.cn',
5569                 '.siluvo.cn',
5570                 '.tujala.cn',
5571                 '.wukuwi.cn',
5572                 '.xenibo.cn',
5573                 '.xiculo.cn',
5574                 '.zabemu.cn',
5575
5576                 // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain
5577                 '.bevaka.cn',
5578                 '.fysyte.cn',
5579                 '.guxixu.cn',
5580                 '.hatoli.cn',
5581                 '.jitobu.cn',
5582                 '.juxeca.cn',
5583                 '.kifuhy.cn',
5584                 '.licila.cn',
5585                 '.mecomy.cn',
5586                 '.niryko.cn',
5587                 '.noxoco.cn',
5588                 '.qiwysu.cn',
5589                 '.tutysy.cn',
5590
5591                 // by oker-74 at ftunez.org
5592                 '.navufol.cn',
5593
5594                 // by oker-97 at ftunez.org
5595                 '.dohakot.cn',          // 66.232.127.126(yourbusiness.ME-127.com)
5596                 '.mesyvuc.cn',          // 66.232.120.111(*snip*)
5597                 '.nyjyzup.cn',          // 66.232.127.126(*snip*)
5598                 '.qagibit.cn',          // 66.232.120.114(*snip*)
5599                 '.rovazaw.cn',          // 66.232.120.112(*snip*)
5600                 '.tozojug.cn',          // 66.232.120.111(*snip*)
5601                 '.xywataw.cn',          // 66.232.120.112(*snip*)
5602
5603                 // by polet-20 at ftunez.org
5604                 '.mopoxon.cn',          // 66.232.127.126(*snip*)
5605
5606                 // 66.232.112.175 by sabrosky-49 at ftunez.org
5607                 '.gywiqe.cn',
5608                 '.jotapo.cn',
5609                 '.jywixa.cn',
5610
5611                 // 69.46.23.48 by sabrosky-60 at ftunez.org
5612                 '.bawegap.cn',
5613                 '.buremyl.cn',
5614                 '.cilybut.cn',
5615                 '.cutufek.cn',
5616                 '.defypyr.cn',
5617                 '.femaxij.cn',
5618                 '.gelejo.cn',
5619                 '.gocylyv.cn',
5620                 '.kehiqaq.cn',
5621                 '.ninyjit.cn',
5622                 '.ruroruw.cn',
5623                 '.vetehow.cn',
5624
5625                 // 69.46.23.48 sabrosky-85 at ftunez.org
5626                 '.banyla.cn',
5627                 '.bubaqu.cn',
5628                 '.bygage.cn',
5629                 '.dafozy.cn',
5630                 '.kaxyjo.cn',
5631                 '.makyle.cn',
5632                 '.naleto.cn',
5633                 '.pidele.cn',
5634                 '.poqexa.cn',
5635                 '.pymaqo.cn',
5636                 '.qupiqy.cn',
5637                 '.reqefy.cn',
5638                 '.sopocy.cn',
5639                 '.vuhexo.cn',
5640                 '.weryso.cn',
5641                 '.wubula.cn',
5642                 '.xufuxy.cn',
5643                 '.zuhyxu.cn',
5644
5645                 // 69.46.23.48 by tribiani-97 at ftunez.org
5646                 '.dyxorod.cn',
5647                 '.firywoz.cn',
5648                 '.jixezyx.cn',
5649                 '.joveraw.cn',
5650                 '.jowaxup.cn',
5651                 '.nodarej.cn',
5652                 '.pimijom.cn',
5653                 '.tugupeg.cn',
5654
5655                 // 66.232.112.175 by abuse-here at inbox.ru
5656                 '.catybe.cn',
5657                 '.jytame.cn',
5658                 '.wygete.cn',
5659         ),
5660         '74.50.97.*' => array(
5661                 '.kaqeje.com',                  // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5662                 '.cumimo.com',                  // 74.50.97.51(non-existent) by olga at ike.com
5663                 '.kaxavo.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5664                 '.hoheru.com',                  // 74.50.97.52(non-existent) by gunter at ftunez.org
5665                 '.tyqoti.com',                  // 74.50.97.52(non-existent) by anna at hotmail.com
5666                 '.fupopu.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5667                 '.poxupo.com',                  // 74.50.97.53(non-existent) by inna at gmail.com
5668                 '.kuluvo.com',                  // 74.50.97.53(non-existent) by gunter at ftunez.org
5669                 '.wugoba.com',                  // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5670                 '.civuhe.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5671                 '.zasuly.com',                  // 74.50.97.54(non-existent) by olga at ike.com
5672                 '.liwowu.com',                  // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5673                 '.vobime.com',                  // 74.50.97.55(non-existent) by inna at gmail.com
5674                 '.nyrive.com',                  // 74.50.97.55(non-existent) by anna at hotmail.com
5675                 '.hehepu.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5676                 '.bynute.com',                  // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5677
5678                 '.sevimy.com',                  // 66.232.124.12(time-out) by inna at gmail.com
5679                 '.gapubo.com',                  // 66.232.124.12(time-out) by gunter at ftunez.org
5680                 '.vejoku.com',                  // 66.232.124.12(time-out) by olga at ike.com
5681                 '.qysahu.com',                  // 66.232.124.12(time-out) by abuse-here at inbox.ru
5682                 '.hidolu.com',                  // 66.232.124.13(time-out) by inna at gmail.com
5683                 '.tetace.com',                  // 66.232.124.13(time-out) by gunter at ftunez.org
5684                 '.vuxilu.com',                  // 66.232.124.13(time-out) by olga at ike.com
5685                 '.teboca.com',                  // 66.232.124.13(time-out) by olga at ike.com
5686                 '.dizive.com',                  // 66.232.124.14(time-out) by olga at ike.com
5687                 '.peduxe.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5688                 '.sybyna.com',                  // 66.232.124.14(time-out) by gunter at ftunez.org
5689                 '.bepofe.com',                  // 66.232.124.15(time-out) by anna at hotmail.com
5690                 '.kuloja.com',                  // 66.232.124.15(time-out) by gunter at ftunez.org
5691                 '.tetadu.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5692                 '.qilato.com',                  // 66.232.124.15(time-out) by inna at gmail.com
5693                 '.lobimi.com',                  // 66.232.124.16(time-out) by olga at ike.com
5694                 '.tazuwe.com',                  // 66.232.124.16(time-out) by olga at ike.com
5695                 '.pihufo.com',                  // 66.232.124.16(time-out) by olga at ike.com
5696                 '.decewa.com',                  // 66.232.124.16(time-out) by gunter at ftunez.org
5697
5698                 '.lynymu.com',                  // 206.51.226.194(time-out) by abuse-here at inbox.ru
5699                 '.saciqo.com',                  // 206.51.226.194(time-out) by olga at ike.com
5700                 '.zalajy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5701                 '.hisimy.com',                  // 206.51.226.194(time-out) by inna at gmail.com
5702                 '.qysowe.com',                  // 206.51.226.194(time-out) by olga at ike.com
5703         ),
5704         'nijeoi at hotmai.com' => array(
5705                 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
5706                 '.bowij.com',
5707                 '.bozib.com',
5708                 '.cavux.com',
5709                 '.dipov.com',
5710                 '.gumoz.com',
5711                 '.hakyb.com',
5712                 '.hehyv.com',
5713                 '.hepyt.com',
5714                 '.howoj.com',
5715                 '.jywaz.com',
5716                 '.ka4search.info',      // Found at faweji.cn/ and jytame.cn/, / forbidden
5717                 '.kyheq.com',
5718                 '.kyzad.com',
5719                 '.qicad.com',
5720                 '.qubyd.com',
5721                 '.mocyq.com',
5722                 '.muloq.com',
5723                 '.myxim.com',
5724                 '.nufyp.com',
5725                 '.waqog.com',
5726                 '.wyduc.com',
5727                 '.xefyv.com',
5728                 '.xomej.com',
5729                 '.xomip.com',
5730                 '.xykyl.com',
5731                 '.zakuw.com',
5732                 '.zeliw.com',
5733                 '.zimev.com',
5734                 '.zipif.com',
5735
5736                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202)
5737                 '.tycoco.com',
5738
5739                 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
5740                 '.pufeqa.com',
5741
5742                 '.xehymi.com',
5743         ),
5744         'niichka at hotmail.com' => array(
5745                 // 66.232.113.44, the same approach and IP of clickx at bk.ru
5746                 '.aerosearch.info',
5747                 '.freader.info',
5748                 '.info4searchz.info',
5749                 '.nice-host.info',
5750                 '.realyfast.info',
5751                 '.resuts.info',
5752
5753                 // 66.232.126.74, the same approach and IP of clickx at bk.ru
5754                 '.bepoh.com',
5755                 '.gufiq.com',
5756                 '.kedyh.com',
5757                 '.pofyb.com',
5758                 '.rurid.com',
5759                 '.vucaj.com',
5760                 '.vuwir.com',
5761
5762                 // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net)
5763                 '.bejefe.com',
5764
5765                 // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202)
5766                 '.tidawu.com',
5767
5768                 // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202)
5769                 '.rofuqa.com',
5770         ),
5771         'porychik at hot.ee' => array(  // by Igor
5772                 '.tedstate.info',       // "Free Web Hosting"
5773                 '.giftsee.com',
5774         ),
5775         'admin at pertol.info' => array(
5776                 // 81.0.195.189 "Free Web Hosting"
5777                 '.laparka.cn',
5778                 '.mirlos.cn',
5779                 '.oldmoms.cn',
5780
5781                 // 217.11.233.64(timed-out)
5782                 '.ejmpep.cn',   // by admin at pertol.info
5783                 '.ytere.cn',    // by admin at x2t.com
5784
5785                 '.pertol.info',                         // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5786                 '.pornography-world.com',       // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5787
5788                 // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5789                 '.new-greece-travel.com',
5790                 '.peraonline.info',
5791
5792                 '.barkman.cn',
5793         ),
5794
5795         'aofa at vip.163.com' => array(
5796                 '.bdjyw.net',           // by gaoyun, infected images, iframe to 5944.net's VBScript
5797                 '.5944.net',
5798         ),
5799         'zerberster at gmail.com' => array(     // by Curtis D. Pick, / not found
5800                 '.maxrentcar.info',
5801                 '.newsonyericsson.info',
5802                 '.pornositeworld.biz',
5803                 '.rentcarweb.info',
5804                 '.xxxdomainsex.biz',
5805         ),
5806         'kopper1970 at gmail.com' => array(
5807                 '.cardealerall.info',           // by Green
5808                 '.donatecarsales.info',         // by Sipil
5809                 '.ringtonewilly.info',          // by Sipil
5810                 '.travelstraveling.info',       // by Chinik
5811                 '.viagrabuyonline.org',         // by Sipil
5812                 '.viagraorderbuy.com',          // by Anatol
5813                 '.worldcuptourism.info',        // by Sipil
5814         ),
5815         'lisaedwards at ledw.th' => array(      // by Lisa Edwards
5816                 '.globalinfoland.info',
5817                 '.goodlifesearch.info',
5818                 '.hotnetinfo.info',
5819                 '.hotpornmovies.org',
5820                 '.infopilot.info',
5821         ),
5822         'iisuse at gmail.com' => array( // by vladislav morozov (iisuse at gmail.com). / is spam
5823                 '.bang-bro.org',
5824                 '.datinghost.info',
5825                 '.hello-craulers.info',
5826                 '.free-blog-host.info',
5827                 '.sucking-boobs.info',
5828         ),
5829         'chub at seznam.cz' => array(   // "CamsGen 1.0" by Lee Chen Ho
5830                 '.allcamsguide.info',
5831                 '.camerascams.info',
5832                 '.camerasera.info',
5833                 '.girlcamsworld.info',
5834                 '.hiddenlimocams.info',
5835                 '.redlivecams.info',
5836                 '.spycamsgear.info',
5837                 '.spycamssite.info',
5838                 '.supercamsusa.info',
5839                 '.thecamsnow.info',
5840         ),
5841         '87.242.116.81' => array(
5842                 '.axit.ru',                     // by Sergej L Ivanov (deeeport at yandex.ru)
5843                 '.bilbidon.ru',         // by Ilya S Vorobiyov (reginamedom at yandex.ru)
5844                 '.flating.ru',          // by Sergej L Ivanov (deeeport at yandex.ru)
5845                 '.kalisto.ru',          // by Vladimir I Sokolov (azimut at gmail.ru)
5846                 '.sanartuk.ru',         // by Vladimir I Noskov (hoskv2003 at gmail.ru)
5847         ),
5848         '208.70.75.153' => array(
5849                 '.cerc-fi.info',        // by Kon Bi (cerca-two at ya.ru)
5850                 '.cerc-fo.info',        // by Kon Bi (cerca-two at ya.ru)
5851                 '.cerc-no.info',        // by Ru Lee (cerca-tree at ya.ru)
5852                 '.cerc-on.info',
5853                 '.cerc-sv.info',        // by Ru Lee (cerca-tree at ya.ru)
5854                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5855                 '.cerc-te.info',        // by Ru Lee (cerca-tree at ya.ru)
5856                 '.cerc-tr.info',
5857                 '.cerc-tw.info',
5858                 '.cerc-fi.org',         // by Kon Bi (cerca-two at ya.ru)
5859                 '.cerc-fo.org',         // by Kon Bi (cerca-two at ya.ru)
5860                 '.cerc-no.org',         // by Ru Lee (cerca-tree at ya.ru)
5861                 '.cerc-on.org',         // by cerca-one at ya.ru
5862                 '.cerc-sv.org',         // by Ru Lee (cerca-tree at ya.ru)
5863                 '.cerc-sx.org',         // by Kon Bi (cerca-two at ya.ru)
5864                 '.cerc-te.org',         // by Ru Lee (cerca-tree at ya.ru)
5865                 '.cerc-tr.org',         // by cerca-one at ya.ru
5866                 '.cerc-tw.org',         // by cerca-one at ya.ru
5867                 '.cerca-fi.org',        // by orgitaly1 at ya.ru
5868                 '.cerca-fo.info',
5869                 '.cerca-no.info',
5870                 '.cerca-on.info',
5871                 '.cerca-sv.info',
5872                 '.cerca-sx.org',        // by orgitaly2 at ya.ru
5873                 '.cerca-te.info',
5874                 '.cerca-tr.info',
5875                 '.cerca-sx.org',
5876                 '.cerca-tr.org',        // orgitaly1 at ya.ru
5877                 '.ricerca-fiv.org',     // orgitaly1 at ya.ru
5878                 '.ricerca-fo.info',
5879                 '.ricerca-one.org',
5880                 '.ricerca-sv.org',
5881                 '.ricerca-sx.org',
5882                 '.ricerca-te.org',
5883                 '.ricerca-tw.org',      // orgitaly1 at ya.ru
5884                 '.subit01.org',
5885                 '.subit02.org',
5886                 '.subit03.org',
5887                 '.subit04.org',
5888                 '.subit05.org',
5889                 '.subit06.org',
5890                 '.subit01.info',
5891                 '.subit02.info',
5892                 '.subit03.info',
5893                 '.subit04.info',
5894                 '.subit05.info',
5895                 '.subit06.info',
5896         ),
5897         'ernestppc at yahoo.com' => array(      // by Anrey Markov (ernestppc at yahoo.com)
5898                 '.5-base.com',
5899                 '.pharmacy-style.com',
5900         ),
5901         'snmaster at yandex.ru' => array(       // by Andrey M Somov (snmaster at yandex.ru)
5902                 '.ista-2006.ru',
5903                 '.wefas.ru',
5904         ),
5905         'sidor2 at gmail.com' => array( // by Sipiki (sidor2 at gmail.com)
5906                 '.tourismworldsite.info',
5907                 '.yourtourismtravel.info',
5908         ),
5909         'x-mail007 at mail.ru' => array(        // by Boris britva (x-mail007 at mail.ru)
5910                 '.easyfindcar.info',
5911                 '.siteinfosystems.info',
5912         ),
5913         'smesh1155 at gmail.com' => array(
5914                 '.hospitalforyou.info',                 // by Gimmi
5915                 '.thephentermineonline.info',   // by Kipola
5916         ),
5917         'supermaster at pisem.net' => array(    // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com
5918                 '.kiski.net.in',
5919                 '.pipki.org.in',
5920                 '.popki.ind.in',
5921                 '.siski.co.in',
5922         ),
5923         'tiptronikmike at mail.com' => array(
5924                 'tiptronikmike at mail.com' => '#^(?:.*\.)?[irvyz][0-5]sex\.info$#',
5925                 // by Michael Tronik (tiptronikmike at mail.com), e.g.
5926                 // by Martin Brest (brestmartinjan at yahoo.com), e.g. 74.52.150.242
5927                 // by Adulterra Inkognita (inkognitaadulterra at yahoo.com), e.g. 74.52.150.244
5928                 //'.i0sex.info',                // Michael
5929                 //'.i1sex.info',                // Michael
5930                 //'.i2sex.info',                // Martin
5931                 //'.i3sex.info',                // Martin
5932                 //'.i4sex.info',                // Adulterra
5933                 //'.i5sex.info',                // Adulterra
5934                 //[irvyz]6sex.info not found
5935                 '.i8sex.info',                  // by Martin
5936         ),
5937         'skuarlytronald at mail.com' => array(
5938                 '.girlsfreewild.info',          // by Ronald Skuarlyt (skuarlytronald at mail.com), the same / with i4sex.info, post with z2sex.info, 64.27.13.120
5939                 '.girlsgoingmad.info',          // 64.27.13.120
5940                 '.girlsgonewildside.info',      // 64.27.13.120
5941         ),
5942         '66.232.109.250' => array(
5943                 '.1626pornporno.info',
5944                 '.1851pornporno.info',
5945                 '.1876pornporno.info',
5946                 '.476pornporno.info',
5947         ),
5948         'LiveAdultHost.com' => array(   // by Daniel Simeonov (dsim at mbox.contact.bg)
5949                 '.compactxxx.com',
5950                 '.eadulthost.com',
5951                 '.eadultview.com',
5952                 '.eroticpool.net',
5953                 '.ipornservice.com',
5954                 '.liveadulthost.com',
5955                 '.nudepal.com',
5956                 '.sweetservers.com',
5957         ),
5958         'support at orgija.org' => array(
5959                 '.assfuckporn.org',
5960                 '.dosugmos.org',
5961                 '.fuckporn.org',
5962                 '.girlsdosug.org',
5963                 '.girlsporno.org',
5964                 '.moscowintim.org',
5965                 '.pornass.org',
5966                 '.pornopussy.org',
5967                 '.progirlsporn.org',
5968                 '.pussypornogirls.org',
5969         ),
5970         '125.65.112.93' => array(
5971                 '.gamanir.com',         // by yangjianhe (upload888 at 126.com), malicious file
5972                 '.twurbbs.com',         // by mingzhong ni (ggyydiy at 163.com)
5973         ),
5974         'm_koz at mail.ru' => array(    // 217.11.233.76 by Kozlov Maxim
5975                 '.beta-google.com',
5976                 '.tv-reklama.info',
5977                 '.ebooktradingpost.com',                // Anonymous but 217.11.233.76, ns *.ruswm.com
5978                 '.constitutionpartyofwa.org',   // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES"
5979         ),
5980         '81.0.195.148' => array(        // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found
5981                 '.abobrinha.org',
5982                 '.aneurysmic.com',              // / not found
5983                 '.physcomp.org',                // / not found
5984                 '.seriedelcaribe2006.org',
5985                 '.refugeeyouthinamerica.com',
5986         ),
5987         'skip_20022 at yahoo.com' => array(
5988                 // 203.174.83.55
5989                 '.a28hosting.info',             // by Bill Jones
5990                 '.besthealth06.org',    // by yakon, "Free Web Hosting Services" but "BestHealth"
5991                 '.besthentai06.org',    // by yakon
5992         ),
5993         'USFINE.com' => array(
5994                 '.usfine.com',                  // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com)
5995                 '.usfine.net',                  // 74.52.201.109 by zaiping tang (zppsky at gmail.com)
5996         ),
5997         '68.178.211.57' => array(
5998                 '.igsstar.com',                         // 68.178.211.57 by igsstar at hotmail.com, PARK31.SECURESERVER.NET, pl
5999                 '.powerleveling-wow.com',       // 68.178.211.57 by zhang jun (zpq689 at 163.com)
6000         ),
6001         'rambap at yandex.ru' => array( // by Equipe Tecnica Ajato (rambap at yandex.ru)
6002                 '.google-yahoo-msn.org',
6003                 '.expedia-travel.org',
6004         ),
6005         'admin at newestsearch.com' => array(   // by Gibrel Sitce
6006                 '.emr5ce.org',
6007                 '.wfe7nv.org',
6008                 '.xyr99yx.org',
6009         ),
6010         '203.171.230.39' => array(
6011                 // by 51shell at 163.com
6012                 '.amatou-fc2.com',
6013
6014                 // registrar bizcn.com, iframe + cursor
6015                 '.playonlinenc.com',
6016                 '.playboss-jp.com',
6017         ),
6018         'Digi-Rock.com' => array(
6019                 '.rom776.com',
6020                 // owner-organization: DIGIROCK, INC.
6021                 // owner-email: domain-contact at digi-rock.com
6022                 // with an external ad-and-JavaScript,
6023                 // says "This site introduces rom776."(Note: Actual rom776 is the another site, http://776.netgamers.jp/ro/ , says s/he don't own rom776.com)
6024                 // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.".
6025         ),
6026         'snap990 at yahoo.com' => array(        // by John Glade (snap990 at yahoo.com)
6027                 '.date-x.info',                         // 208.73.34.48(support-office.hostican.com -> 208.79.200.16)
6028                 '.getrun.cn',                           // 208.73.34.48
6029                 '.ipod-application.info',       // NO IP
6030                 '.love-total.net',                      // 208.73.34.48, was 74.50.97.136(server.serveshare.com)
6031                 '.stonesex.info',                       // NO IP, was 74.50.97.136
6032         ),
6033         'germerts at yandex.ru' => array(
6034                 // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru)
6035                 '.andatra.info',
6036                 '.banchitos.info',
6037                 '.batareya.info',
6038                 '.blevota.info',
6039                 '.broneslon.info',
6040                 '.gamadril.info',
6041                 '.gipotenuza.info',
6042                 '.govnosaklo.info',
6043                 '.muflon.info',
6044                 '.termitnik.info',
6045                 '.tugosos.info',                // 206.53.51.77(www.bmezine.com -> ..)
6046         ),
6047         '84.252.148.80' => array(       //  84.252.148.80(heimdall.mchost.ru)
6048                 '.acronis-true-image.info',
6049                 '.calcio-xp.info',
6050                 '.cosanova.info',
6051                 '.cose-rx.info',
6052                 '.dictip.info',
6053                 '.findig.info',
6054                 '.fotonow.info',
6055                 '.lavoro-tip.info',
6056                 '.loan-homes.info',
6057                 '.mionovita.info',
6058                 '.mustv.info',
6059                 '.newsnaked.info',
6060                 '.online-tod.info',
6061                 '.opakit.info',
6062                 '.opanow.info',
6063                 '.opriton.info',
6064                 '.porta-bl.info',
6065                 '.refdif.info',
6066                 '.xzmovie.info',
6067         ),
6068         '84.252.148.120 etc' => array(
6069                 '.isurfind.ru',                 // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru)
6070                 '.planetavilton.info',  // 84.252.148.120
6071                 '.softfind.info',               // 84.252.148.80 by Dmitriy (dimamcd at yandex.ru)
6072         ),
6073         'cxh at 99jk.com' => array(     // by xinghao chen (cxh at 99jk.com), ns *.hichina.com, health care
6074                 '.99jk.com',
6075                 '.99jk.com.cn',
6076                 '.99jk.cn',
6077         ),
6078         'kiler81 at yandex.ru' => array(        // by Vasiliy (kiler81 at yandex.ru)
6079                 '.kliktop.biz',
6080                 '.kliktop.org',
6081                 '.pharmatop.us',
6082                 '.supertop.us',
6083                 '.supervaizer.info',
6084         ),
6085         'infomed2004 at mail.ru' => array(      // by Andrey Ushakov (infomed2004 at mail.ru)
6086                 '.freeamateursexx.info',        // 81.0.195.228
6087                 '.freeanalsexx.info',           // 217.11.233.97
6088                 '.freegaysexx.info',            // 81.0.195.228
6089         ),
6090         'support at dns4me.biz' => array(       // 89.149.228.237 by John Black (support at dns4me.biz)
6091                 '.abbhi.info',
6092                 '.gayblogguide.biz',
6093                 '.huope.info',
6094                 '.thebdsmday.info',
6095                 '.zioprt.info',                 // 89.149.228.237
6096         ),
6097         'dzheker at yandex.ru' => array(        // by dzheker at yandex.ru
6098                 '.boblisk.info',
6099                 '.factyri.info',
6100                 '.jorge1.info',
6101         ),
6102         'lichincool at gmail.com' => array(     // 72.232.229.115 by lichincool at gmail.com, / meanless
6103                 '.bestmindstorm.org',
6104                 '.redstoreonline.org',
6105         ),
6106         '59.106.24.2' => array( // 59.106.24.2, sakagutiryouta at yahoo.co.jp
6107                 '.8e8ae.net',
6108                 '.c-cock.com',
6109                 '.fa59eaf.com',
6110                 '.set-place.net',
6111                 '.sex-beauty.net',
6112         ),
6113         '84.252.148.140' => array(      // 84.252.148.140(kratos.mchost.ru)
6114                 '.tomdir.info',
6115                 '.tomdirdirect.info',
6116                 '.tomdirworld.info',
6117                 '.treton.info',
6118                 '.trefas.info',
6119                 '.tretonmondo.info',
6120                 '.unefout.info',
6121                 '.unefoutprojet.info',
6122                 '.unitfree.info',
6123                 '.vilret.info',
6124                 '.vilttown.info',
6125                 '.votrefout.info',
6126                 '.warmfind.info',
6127                 '.warptop.info',
6128                 '.wildtram.info',
6129                 '.xofind.info',
6130                 '.xopdiscover.info',
6131                 '.xopfind.info',
6132                 '.xoplocate.info',
6133                 '.xopseek.info',
6134                 '.xpfirst.info',
6135                 '.xphighest.info',
6136                 '.xptop.info',
6137         ),
6138         'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com)
6139                 '.myviagrasite.com',    // 80.74.153.2
6140                 '.thecanadianmeds.com', // 80.74.153.17
6141         ),
6142         'sania at zmail.ru' => array(   // by Mark Williams (sania at zmail.ru)
6143                 '.bigemot.com',                         // 217.11.233.34, / not found
6144                 '.espharmacy.com',                      // 217.11.233.34
6145                 '.pharmacyonlinenet.com',       // 216.195.51.59, hidden JavaScript
6146                 '.ringtonecooler.com',          // 217.11.233.34
6147         ),
6148         'dfym at dfym.cn' => array(
6149                 // ANI, JavaScript, iframe
6150
6151                 // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6152                 '.okwit.com',
6153                 '.sakerver.com',
6154                 '.motewiki.net',
6155
6156                 '.caremoon.net',        // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6157
6158                 '.8568985.com',         // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6159
6160                 // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6161                 '.bbtv-chat.com',
6162                 '.ketubatle.com',
6163                 '.playonlanei.com',
6164                 '.rmtfcne.com',
6165
6166         ),
6167         'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
6168                 '.findcraft.info',                      // 209.8.28.11(209-8-28-11.pccwglobal.net)
6169                 '.lookmedicine.info',           // 206.161.205.22
6170                 '.lookshop.info',                       // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us)
6171                 '.searchhealth.info',           // 206.161.205.30(seg.fau.lt)
6172                 '.worldsitesearch.info',        // 209.8.40.59
6173         ),
6174         'lee.seery at gmail.com' => array(
6175                 '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
6176                 '.lingvol.com',         // 64.21.34.55
6177                 '.micevol.com',         // 64.21.34.55
6178                 '.heyhey.info',         // 64.21.34.55  by anonymous
6179         ),
6180         '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
6181                 // 69-64-64-71.dedicated.abac.net
6182                 '.520-ard.info',
6183                 '.550bcards.info',
6184                 '.559-cads.info',
6185                 '.559caard.info',
6186                 '.565-caaard.info',
6187                 '.575cadr.info',
6188                 '.577cadrs.info',
6189                 '.590-acrds.info',
6190                 '.596-cadrs.info',
6191                 '.596caards.info',
6192                 '.596caaard.info',
6193                 '.asstablishingcads.info',
6194                 '.astablish-ard.info',
6195                 '.astablishcacrds.info',
6196                 '.begginers-acards.info',
6197                 '.begginersacrds.info',
6198                 '.beggingcaaard.info',
6199                 '.beginercacrds.info',
6200                 '.cacrdscreating.info',
6201                 '.caditbegging.info',
6202                 '.cadr-buildup.info',
6203                 '.cadr-establilsh.info',
6204                 '.cadrs-buildercredit.info',
6205                 '.cadrs570.info',
6206                 '.cads-565.info',
6207
6208                 // 69-64-64-113.dedicated.abac.net
6209                 '.interistacards.info',
6210                 '.intrust-ards.info',
6211                 '.intrustacrds.info',
6212                 '.lfixed-ard.info',
6213                 '.lowerate-ard.info',
6214                 '.lowpercentage-ard.info',
6215                 '.lowpercentageacrd.info',
6216         ),
6217         'acua at mail.ru' => array(
6218
6219                 '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
6220
6221                         // by adventurer at allmyns.info
6222                         '.zgyfubsvi.cn',        // 84.16.251.218(*.internetserviceteam.com)
6223
6224                         // by webmaster at allmyns.info
6225                         '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
6226                         '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6227                         '.lbtuo.cn',    // 84.16.255.254(*.internetserviceteam.com)
6228                         '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
6229                         '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
6230                         '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
6231                         '.riumh.cn',    // 84.16.226.28(*snip*)
6232                         '.zbtym.cn',    // 84.16.251.219(*.internetserviceteam.com)
6233                         '.zjcgx.cn',    // 217.20.112.102(*.internetserviceteam.com)
6234                         '.zxvlr.cn',    // 84.16.255.253(*.internetserviceteam.com)
6235
6236                 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
6237                 '.dns4babka.info',      // by acua at mail.ru
6238
6239                         // by golubcov at dns4babka.info
6240                         '.toiulw.cn',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6241
6242                         // by webmaster at dns4babka.info
6243                         '.credh.cn',
6244                         '.fucfv.cn',
6245                         '.gdxnk.cn',
6246                         '.sqrrt.cn',
6247                         '.ywtmd.cn',
6248                         '.kncqy.cn',    // by webmaster at allmyns.info
6249
6250                 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
6251                 '.dedka2ns.info',       // by acua at mail.ru
6252
6253                         // by chasik at dedka2ns.info
6254                         '.vlqnoj.cn',   // 84.16.251.220(*.internetserviceteam.com)
6255
6256                         // by rochel at dedka2ns.info
6257                         '.fudhxjjqh.cn',
6258
6259                         // by webmaster at dedka2ns.info
6260                         '.ascpo.cn',
6261                         '.jgycr.cn',
6262                         '.nqdtt.cn',
6263                         '.oswde.cn',
6264                         '.qeyig.cn',
6265                         '.soqsx.cn',
6266                         '.ukncd.cn',
6267                         '.zijgb.cn',
6268
6269                 // 84.16.255.253(*snip*), / says 'noy found'
6270                 '.dns4dedka.info',      // by acua at mail.ru
6271
6272                         // by aleon at dns4dedka.info
6273                         '.afjjvumqa.cn',        // 84.16.249.240(*snip*)
6274
6275                         // by dig at dns4dedka.info
6276                         '.bdnge.cn',    // 84.16.226.28(*snip*)
6277                         '.dcdsu.cn',    // 217.20.112.102(*snip*)
6278                         '.fhgdp.cn',    // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6279                         '.frvdv.cn',    // 84.16.226.28(*snip*)
6280                         '.heulw.cn',    // 84.16.226.217(*snip*)
6281                         '.hissw.cn',    // 84.16.249.240(*snip*)
6282                         '.lwqjr.cn',    // 84.16.255.253(*snip*)
6283                         '.obwew.cn',    // 84.16.251.218(*snip*)
6284                         '.otkiu.cn',    // 84.16.255.254(*snip*)
6285                         '.pztkq.cn',    // 89.149.228.163(*.internetserviceteam.com)
6286                         '.rgjcs.cn',    // 84.16.251.219(*snip*)
6287                         '.rjskp.cn',    // 84.16.249.241(*snip*)
6288                         '.sokrp.cn',    // 84.16.226.217(*snip*)
6289                         '.ubtnp.cn',    // 84.16.226.29(*snip*)
6290                         '.vdecc.cn',    // 84.16.226.29(*snip*)
6291                         '.vgkkc.cn',    // 89.149.196.72(*snip*)
6292                         '.vqsmy.cn',    // 84.16.249.239(*snip*)
6293                         '.xcmsp.cn',    // 84.16.251.223(freebsd .. what)
6294                         '.xiuky.cn',    // 84.16.251.222(*snip*)
6295                         '.xrqcd.cn',    // 89.149.196.19(*snip*)
6296
6297                         // by la at dns4dedka.info
6298                         '.aeyzf.cn',    // 84.16.251.218(*snip*)
6299                         '.blvqo.cn',    // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6300                         '.bgslu.cn',    // 89.149.228.163(*snip*)
6301                         '.dxouw.cn',    // 84.16.255.253(*snip*)
6302                         '.ecsbe.cn',    // 84.16.251.218(*snip*)
6303                         '.eothy.cn',    // 84.16.249.241(*snip*)
6304                         '.epocy.cn',    // 84.16.251.220(*snip*)
6305                         '.ewvjw.cn',    // 89.149.196.72(*snip*)
6306                         '.faacz.cn',    // 84.16.251.222(*snip*)
6307                         '.filun.cn',    // 89.149.196.72(*snip*)
6308                         '.fzdpk.cn',    // 84.16.249.239(*snip*)
6309                         '.hatyg.cn',    // 84.16.251.223(*snip*)
6310                         '.hmtqn.cn',    // 84.16.249.240(*snip*)
6311                         '.ibfte.cn',    // 89.149.196.19(*snip*)
6312                         '.jcaym.cn',    // 84.16.249.240(*snip*)
6313                         '.iqzaw.cn',    // 84.16.255.254(*snip*)
6314                         '.jclsf.cn',    // 84.16.249.240(*snip*)
6315                         '.jefdh.cn',    // 84.16.249.240(*snip*)
6316                         '.kchjh.cn',    // 84.16.251.219(*snip*)
6317                         '.krumo.cn',    // 84.16.226.217(*snip*)
6318                         '.lbava.cn',    // 217.20.112.102(*snip*)
6319                         '.mqrtw.cn',    // 84.16.226.29(*snip*)
6320                         '.njpgv.cn',    // 84.16.251.219(*snip*)
6321                         '.npovm.cn',    // 84.16.226.28(*snip*)
6322                         '.nyobt.cn',    // 89.149.196.19(*snip*)
6323                         '.ovxxt.cn',    // 84.16.251.223(*snip*)
6324                         '.owhwz.cn',    // 89.149.228.163(*snip*)
6325                         '.ozjyi.cn',    // 84.16.249.241(*snip*)
6326                         '.pfnzj.cn',    // 84.16.226.217(*snip*)
6327                         '.pixvf.cn',    // 84.16.255.254(*snip*)
6328                         '.qydph.cn',    // 89.149.228.163(*snip*)
6329                         '.rxens.cn',    // 89.149.196.72(*snip*)
6330                         '.sojbp.cn',    // 84.16.249.239(*snip*)
6331                         '.srths.cn',    // 84.16.251.222(*snip*)
6332                         '.tdytc.cn',    // 84.16.255.254(*snip*)
6333                         '.unquz.cn',    // 84.16.251.223(*snip*)
6334                         '.uwcns.cn',    // 89.149.196.19(*snip*)
6335                         '.vcbdm.cn',    // 84.16.251.220(*snip*)
6336                         '.wnmat.cn',    // 84.16.255.253(*snip*)
6337                         '.wttmr.cn',    // 84.16.226.29(*snip*)
6338                         '.xpwib.cn',    // 84.16.251.220(*snip*)
6339                         '.yrogt.cn',    // 84.16.249.239(*snip*)
6340
6341                         // by le at dns4dedka.info
6342                         '.goslw.cn',    // 84.16.251.220(*snip*)
6343                         '.hqbmh.cn',    // 84.16.251.223(*snip*)
6344                         '.iewik.cn',    // 84.16.255.254(*snip*)
6345                         '.jnkeh.cn',    // 89.149.228.163(*snip*)
6346                         '.pifyp.cn',    // 89.149.228.163(*snip*)
6347                         '.nohyl.cn',    // 89.149.196.72(*snip*)
6348                         '.nvzvx.cn',    // 84.16.255.254(*snip*)
6349                         '.uchoe.cn',    // 84.16.249.239(*snip*)
6350                         '.ujoyf.cn',    // 84.16.251.218(*snip*)
6351                         '.ulfqh.cn',    // 89.149.196.19(*snip*)
6352                         '.vxugv.cn',    // 84.16.251.223(*snip*)
6353                         '.dbgti.cn',    // 84.16.249.240(*snip*)
6354                         '.oelmv.cn',    // 84.16.226.28(*snip*)
6355                         '.qniww.cn',    // 84.16.251.218(*snip*)
6356                         '.vtvyq.cn',    // 84.16.251.219(*snip*)
6357                         '.zqonm.cn',    // 84.16.249.241(*snip*)
6358
6359                         // by skspb at dns4dedka.info
6360                         '.hxkxkjy.cn',  // 84.16.226.28(*snip*)
6361
6362                         // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
6363                         '.bcpnb.cn',
6364                         '.cfbpr.cn',
6365                         '.dnndb.cn',
6366                         '.ekwme.cn',
6367                         '.iutps.cn',
6368                         '.ryftj.cn',
6369                         '.vxqcb.cn',
6370
6371                 '.ns2best.info',        // 89.149.196.19(*snip*) by acua at mail.ru
6372                         // by apple at ns2best.info
6373                         '.ptiey.cn',    // 84.16.252.80(*.internetserviceteam.com)
6374                         // by paulwolf at ns2best.info
6375                         '.ifytzq.cn',
6376
6377                 '.sedns.info',          // 84.16.226.216(*snip*) by acua at mail.ru
6378                         // by pigato at sedns.info
6379                         '.xjvbunksa.cn',        // 217.20.112.102(*snip*)
6380                         // by roschem at sedns.info
6381                         '.ilzelqvmoa.cn',       // 84.16.243.170(*.fixshell.com -> Non-existent)
6382                         // by op at sedns.info
6383                         '.bumfn.cn',
6384                         '.csmlu.cn',
6385                         '.epcwi.cn',
6386                         '.krwzn.cn',
6387                         '.lkvcp.cn',
6388                         '.mvmkh.cn',
6389                         '.nwpeg.cn',
6390                         '.rnqol.cn',
6391                         '.tyuaf.cn',
6392                         '.ucysa.cn',
6393                         '.vhyom.cn',
6394                         '.wtstu.cn',
6395                         '.zslxr.cn',
6396         ),
6397         'gilvcta sy jilbertsbram.com' => array(
6398                 // 206.53.51.126
6399                 '.dsfljkeilm1.cn',
6400                 '.dsfljkeilm2.cn',
6401                 '.dsfljkeilm3.cn',
6402                 '.dsfljkeilm4.cn',
6403                 '.dsfljkeilm5.cn',
6404                 '.dsfljkeilm6.cn',
6405                 '.dsfljkeilm7.cn',
6406                 '.dsfljkeilm8.cn',
6407                 '.dsfljkeilm9.cn',
6408                 '.dsfljkeilm10.cn',
6409         ),
6410         'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
6411
6412                 // 69.64.82.76(*.dedicated.abac.net)
6413                 '.bruised-criedit.info',
6414                 '.bruised-crtedit.info',
6415                 '.bruised-czrd.info',
6416                 '.bruisedcreditcars.info',
6417                 '.bruisedcreitcard.info',
6418                 '.bruisedcreitd.info',
6419                 '.buliderscreadet.info',
6420                 '.cleaningup-cdit.info',
6421                 '.cleaningup-cedict.info',
6422                 '.cleaningup-cerdic.info',
6423                 '.cleanup-crrd.info',
6424
6425                 // 69.64.82.77(*.dedicated.abac.net)
6426                 '.bruised-crediot.info',
6427                 '.bruised-credtid.info',
6428                 '.bruisedcriet.info',
6429                 '.bruisedredit.info',
6430                 '.buliders-crdt.info',
6431                 '.buliders-cre4dit.info',
6432                 '.buliders-creadt.info',
6433                 '.buliders-credcards.info',
6434                 '.buliders-credictcard.info',
6435                 '.cleaningupccreditcards.info',
6436                 '.cleaningupcdedit.info',
6437                 '.cleaningupcedirt.info',
6438                 '.cleaningupceidt.info',
6439                 '.cleaningupcrasd.info',
6440                 '.cleaningupcreait.info',
6441
6442                 // 69.64.82.78(*.dedicated.abac.net)
6443                 '.bruised-cridet.info',
6444                 '.bruised-drecit.info',
6445                 '.bruised-reditcards.info',
6446                 '.bruisedcredikt.info',
6447                 '.bruisedcredith.info',
6448                 '.bruisedcredtid.info',
6449                 '.cleanup-criet.info',
6450                 '.cleanup-csrds.info',
6451                 '.cleanup-dards.info',
6452
6453                 // 69.64.82.79(*.dedicated.abac.net)
6454                 '.bruised-crediotcards.info',
6455                 '.bruised-creditcar.info',
6456                 '.bruised-creid.info',
6457                 '.bruised-creidtcard.info',
6458                 '.buliders-crdit.info',
6459                 '.buliders-creadet.info',
6460                 '.cleaningup-ceridt.info',
6461                 '.cleaningupcrecit.info',
6462                 '.cleaningupccritcard.info',
6463                 '.cleanupdredit.info',
6464                 '.cleanupredit.info',
6465         ),
6466         '.malwarealarm.com',
6467                 // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
6468                 // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
6469                 // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
6470         '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110
6471         'Inet-Traffic.com' => array(
6472                 // "The Inet-Traffic network offers over 6 million unique visitors a month."
6473                 //'.dcomm.com',         // by D Communications Inc. S.A.
6474
6475                 '.freehomepages.com',   // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com
6476                 '.inet-traffic.com',    // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6477                 // ...
6478                 // 205.237.204.114(www.searchit.com -> 205.237.204.151)
6479                 // ...
6480                 '.homepagez.com',               // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org
6481                 // ...
6482                 '.pagerealm.com',       // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com
6483                 '.koolpages.com',       // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com
6484                 '.oddworldz.com',       // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com
6485                 '.cybcity.com',         // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com
6486                 '.cybamall.com',        // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com
6487                 '.haywired.com',        // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com
6488                 '.cyberturf.com',       // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com
6489                 '.dazzled.com',         // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com
6490                 '.megaone.com',         // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com
6491                 // ...
6492                 // 205.237.204.131(www.powow.com -> 205.237.204.136)
6493                 // 205.237.204.132(www.pcpages.com ->  205.237.204.135)
6494                 // ...
6495                 '.pcpages.com',         // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com
6496                 '.powow.com',           // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com
6497                 // ...
6498                 // 205.237.204.143(gameroom.com -> 72.32.22.210)
6499                 // ...
6500                 '.searchit.com',        // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com
6501                                         // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A
6502                 // ...
6503                 '.gameroom.com',        // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com
6504         ),
6505         'andreyletov at yahoo.com related' => array(
6506                 '.180haifa.com',                // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov
6507                 '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich
6508                 '.pills-supplier.com',  // 89.248.99.118 by Boris Rabinovich
6509
6510                 // 89.248.99.118 by anonymous
6511                 '.lpgpharmacy.com',
6512                 '.onlybestgalleries.com',
6513                 '.viagrabest.info',
6514                 '.viagrabestprice.info',
6515                 '.viagratop.info',
6516
6517                 '.canadians-medication.com',    // 89.248.99.118 by beseo at bk.ru
6518                 '.absulutepills.com',                   // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6519                 '.eyzempills.com',                              // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com
6520         ),
6521         'alrusnac at hotmail.com' => array(
6522                 '.122mb.com',                   // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com)
6523                 //'.cigarettesportal.com',      // 72.36.211.194(*.static.reverse.ltdomains.com)
6524         ),
6525         '203.116.63.123' => array(
6526                 '.fast4me.info',                // by Hakan Durov (poddubok at inbox.ru), / is blank
6527                 '.fastmoms.info',               // by Pavel Golyshev (pogol at walla.com), / is blank
6528         ),
6529         'goodwin77 at bk.ru' => array(  // ns *.petterhill.ru
6530                 '.autotowncar.cn',              // 69.73.146.184
6531                 '.badgirlhome.cn',              // 69.73.146.186
6532         ),
6533         'Wmp.co.jp' => array(
6534                 // 219.94.134.208, ns *.dns.ne.jp, adult
6535                 '.celebe.net',                  // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
6536                 '.kousyunyu.com',               // Admin/Billing/Tech Email: * at wmp.co.jp
6537                 // online-support.jp    // 202.222.19.81(sv70.lolipop.jp), / blank
6538         ),
6539         'Macherie.tv' => array(
6540                 '.macherie.tv',                 // 124.32.230.31, pr to himehime.com
6541                 '.himehime.com',                // 124.32.230.94(recruit.macherie.tv)
6542                 '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
6543         ),
6544         'admin at fr4f3ds.info' => array(       // 217.11.233.54, / forbidden
6545                 '.yemine.info',
6546                 '.fr4f3ds.info',
6547         ),
6548         '75.126.129.222' => array(
6549                 // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...)
6550                 '.viagrabuycheap.info', // ns *.advernsserver.com
6551                 '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222
6552         ),
6553         'sqr at bk.ru' => array(
6554                 // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com)
6555                 '.masserch.info',               // "Free Web Hosting", spam
6556                 '.miserch.info',
6557         ),
6558         'gangstadra at hotmail.com' => array(
6559                 '.kenrucky.com',                // 82.98.86.167(*.sedoparking.com)
6560                 '.michigab.com',                // 82.98.86.175(*.sedoparking.com)
6561                 '.pimperos.com',                // 82.98.86.163(*.sedoparking.com)
6562                 '.pimpcupid.com',               // 89.149.226.111(*.internetserviceteam.com)
6563         ),
6564         'hosan by front.ru' => array(
6565                 '.salihome.info',                               // 206.53.51.155(non-existent)
6566                 '.online-freesearch.com',               // 206.53.51.155
6567                 '.choosefinest.com',                    // 206.53.51.157
6568                 '.carsprojects.com',                    // 206.53.51.159
6569                 '.sport-brands.com',                    // 206.53.51.167
6570                 '.online-pharmaceutics.com',    // 206.53.51.168
6571         ),
6572         '89.248.107.118' => array(      // "Canadian Pharmacy" 89.248.107.118(non-existent)
6573                 '.canadians-health.com',        // by andreyletov at yahoo.com
6574                 '.cialischeap.info',
6575                 '.superrv.info',
6576         ),
6577         'zinerit4 at gmail.com' => array(       // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6578                 '.hatbi.com',
6579                 '.justrty.com',
6580                 '.kol2you.com',
6581                 '.kolplanet.com',
6582                 '.myrty.com',
6583                 '.officialrty.com',
6584                 '.pbaol.com',
6585                 '.planetkol.com',
6586         ),
6587         'Abra1.com' => array(
6588                 // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6589                 '.abra1.com',           // by info at maisontropicale.com
6590                 '.abra4.com',           // by websites at caribbeanonlineinternational.com
6591
6592                 // 209.85.51.238(*.opticaljungle.com -> non-existent)
6593                 '.abra2.com',           // by domain at anondns.org
6594                 '.abra3.com',           // by domain at anondns.org
6595         ),
6596         'topdomainz at gmail.com' => array(
6597                 // 217.73.201.237 , ns *.parked.ru
6598                 '.aboutgoogleearth.info',       // IP timed-out, ns *.aboutgoogleearth.info
6599                 '.aboutgooglegroup.info',
6600                 '.aboutgoogleimage.info',
6601                 '.aboutgooglemail.info',
6602                 '.aboutgooglemap.info',
6603                 '.aboutgooglenews.info',
6604                 '.aboutgooglevideo.info',
6605                 '.bestgoogleearth.info',
6606                 '.magicgoogleearth.info',
6607                 '.magicgooglemap.info',
6608                 '.magicgooglevideo.info',
6609
6610                 // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6611                 '.slajzer.info',
6612                 '.tonoscelular.info',
6613                 '.tonosmotorola.info',
6614         ),
6615         'Anderson at extra.by' => array(
6616                 // Encoded JavaScript
6617
6618                 // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6619                 '.4cat.info',   // by Anderson at extra.by, ns *.9upp.info
6620                 '.6dir.info',
6621                 '.8dir.info',
6622                 '.9dir.info',
6623                 '.2pro.info',
6624                 '.5pro.info',   // by Anderson at extra.by, ns *.9upp.info
6625                 '.6pro.info',
6626                 '.7pro.info',
6627                 '.8pro.info',
6628                 '.9pro.info',
6629                 '.5sms.info',
6630                 '.6sms.info',
6631                 '.8sms.info',
6632                 '.9sms.info',
6633                 '.1upp.info',
6634                 '.2upp.info',
6635                 '.3upp.info',
6636                 '.4upp.info',
6637                 '.5upp.info',
6638                 '.6upp.info',
6639                 '.7upp.info',
6640                 '.8upp.info',
6641                 '.9upp.info',   // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6642                 '.2vip.info',   // by Anderson at extra.by
6643                 '.4vip.info',
6644                 '.5vip.info',
6645                 '.6vip.info',
6646                 '.7vip.info',
6647                 '.8vip.info',   // ns *.9upp.info
6648                 '.9vip.info',
6649
6650                 // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6651                 '.w3rar.info',
6652                 '.w3sex.info',
6653                 '.w3zip.info',
6654                 '.w3in.info',
6655                 '.w3out.info',
6656         ),
6657         'zorkin87 at mail.ru' => array(
6658                 // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6659                 '.ruqore.com',
6660                 '.goxama.com',
6661                 '.cazebi.com',
6662                 '.fukeqa.com',
6663                 '.fydoge.com',
6664                 '.jukaly.com',
6665                 '.jumoga.com',
6666                 '.jumuxo.com',
6667                 '.tyriva.com',
6668                 '.vudyho.com'
6669         ),
6670         'jessicaeagloff at yahoo.co.uk' => array(
6671                 '.pilltrade.com',               // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6672                 '.rxrxrxrx.com',                // IP not allocated by postmaster at cialischoice.com
6673                 '.cialischoice.com',    // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6674                 '.rxp-hosting.com',             // IP not allocated by jessicaeagloff at yahoo.co.uk
6675         ),
6676         'qbbs at xinoffice.com' => array(
6677                 // ns *.name-services.com
6678                 '.lingage.com',         // 8.15.231.118
6679                 '.puksins.com',         // IP not allocated now
6680         ),
6681         'advertolog at gmail.com' =>
6682                 // 81.0.250.86(network.upl.cz => non-existent) or
6683                 // 217.11.233.27
6684                 '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#',       // 001-030
6685         'contact at aboutdomain.com' => array(
6686                 '.lopieur0.com',        // Not match but used
6687                 '.lopieur1.com',        // Not match but used
6688                 '.lopieur2.com',        // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6689         ),
6690         'info at cash4wm.biz related' => array(
6691                 // 84.16.233.12(*.internetserviceteam.com)
6692                 '.newsblogforu.com',
6693
6694                 // 84.16.235.141()
6695                 '.informator4you.com',
6696
6697                 // 84.16.240.68(*.internetserviceteam.com)
6698                 '.absolute-best-site.com',
6699                 '.new-blog-for-you.com',
6700
6701                 // 84.16.240.69(*.internetserviceteam.com)
6702                 '.best-sport-blog.com',
6703                 '.big-internet-site.com',
6704                 '.brendsite.com',
6705                 '.my-news-blog.com',
6706
6707                 // 84.16.242.123(*.internetserviceteam.com)
6708                 '.best-news-blog.com',
6709                 '.site-with-content.com',
6710
6711                 // The same method with info at cash4wm.biz
6712                 '.coolnews-4u.com',             // 217.20.123.122(*.internetserviceteam.com),
6713                 '.bestnews-4u.com',             // 84.16.227.135(*.internetserviceteam.com)
6714                 '.big-site-news.com',   // 84.16.243.168(*.fixshell.com -> non-existent)
6715                 '.good-news-4u.info',   // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6716                 '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6717                 '.bloginfo4u.info',             // 89.149.247.25
6718         ),
6719         'kerjy at yahoo.com' => array(
6720                 '.wibek.com',   // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6721                 '.hehik.com',   // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6722                 '.mynyh.com',   // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6723                 '.mabej.com',   // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6724                 '.qanom.com',   // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6725         ),
6726         'vme at hotmail.ru' => array(
6727                 '.seoblack.net',        // 216.195.33.112(non-exsistent)
6728                 '.seoblack.biz',        // 216.195.33.113(non-exsistent)
6729         ),
6730         'john at hellomyns.info' => array(
6731                 '.cuhdw.cn',            // 217.20.113.27, / nothing
6732                 '.byouz.cn',            // 89.149.247.24, / nothing
6733                 '.idghc.cn',
6734                 '.inxrj.cn',
6735                 '.jqzdf.cn',
6736                 '.vsxej.cn',
6737                 '.wkgnr.cn',
6738         ),
6739         '.CN spam payload' => array(
6740                 '.i3sa.cn',                     // by varra6yu4lt8607 at yahoo.com
6741                 '.bjlzhh.cn',           // 210.51.162.236(non-existent) by bjlzhh at 163.com
6742                 '.iactive.com.cn',      // 60.28.204.205(non-existent) by buggd at 263.net
6743                 '.njss.com.cn',         // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6744                 '.qimo.com.cn',         // 219.235.228.55(non-existent) by baojieshuma at 163.com
6745                 '.wzhj.com.cn',         // 218.244.136.78 by nemesisxue at yahoo.com.cn
6746                 '.ytbaixin.com.cn',     // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6747                 '.tj-008.cn',           // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6748                 '.xglzl.cn',            // 60.215.129.74(non-existent) by 148044648 at 163.com
6749                 '.xixii.cn',            // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6750         ),
6751         'Time2ns.info' => array(
6752                 // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6753                 '.klmnei.cn',           // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6754                 '.lumyjugmn.cn',        // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6755                 '.uxmrscgdi.cn',        // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6756                 '.iblcqms.cn',          // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6757         ),
6758         'Ilovemyns.info' => array(
6759                 // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6760                 '.aasghwf.cn',          // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6761         ),
6762         'Freehostdns.info' => array(
6763                 // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6764                 '.qyxswynd.cn',         // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6765                 '.ugivorm.cn',          // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6766         ),
6767         'Newns4me.info' => array(
6768                 // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6769                 '.lxwxjzpiy.cn',        // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6770         ),
6771
6772         // C-2: Lonely domains (buddies not found yet)
6773         '.0721-4404.com',
6774         '.0nline-porno.info',   // by Timyr (timyr at narod.ru)
6775         '.101010.ru',                   // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6776         '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
6777         '.19cellar.info',               // by Eduardo Guro (boomouse at gmail.com)
6778         '.1gangmu.com',                 // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
6779         '.1gb.cc',                              // by Hakan us (hakanus at mail.com)
6780         '.1gb.in',                              // by Sergius Mixman (lancelot.denis at gmail.com)
6781         '.0annie.info',
6782         '.6i6.de',
6783         '.77toperrwuter1.info', // by Roman
6784         '.99-idea.com',                 // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6785         '.angioco.com',                 // 62.37.112.100, gamble
6786         '.advancediet.com',             // by Shonta Mojica (hostadmin at advancediet.com)
6787         '.adult-master-club.com',       // by Alehander (mazyrkevich at cosmostv.by)
6788         '.adultpersonalsclubs.com',     // by Peter (vaspet34 at yahoo.com)
6789         '.akalukseree.com',                     // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
6790         '.akgame.com',                  // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6791         '.alasex.info',                 // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6792         '.alfanetwork.info',    // by dante (dantequick at gmail.com)
6793         '.allworlddirect.info', // Forbidden
6794         '.amoreitsex.com',
6795         '.angel-live.com',              // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6796         '.angelkiss.jp',                // 59.106.45.50, pr to himehime.com and chatwalker.com
6797         '.approved-medication.com',     // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
6798         '.areahomeinfo.info',   // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
6799         '.areaseo.com',                 // by Antony Carpito (xcentr at lycos.com)
6800         '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
6801         '.auto-car-cheap.org',
6802         '.banep.info',                  // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
6803         '.baurish.info',
6804         '.bernardtomic21.info', // by filboj at hotmail.com
6805         '.bestop.name',
6806         '.betmmo.com',                  // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
6807         '.bestrademark.info',   // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
6808         '.bestshopfinder.info',
6809         '.blogest.org',                 // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
6810         '.bookblogsite.org',    // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6811         '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
6812         '.businessplace.biz',   // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6813         '.buyshaliflute.com',   // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
6814         '.capital2u.info',              // by Delbert.A.Henry at dodgeit.com
6815         '.casa-olympus.com',    // "UcoZ WEB-SERVICES"
6816         '.cashing-view.com',    // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
6817         '.catkittenmagazines.org',              // 87.118.97.117
6818         '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6819         '.chatwalker.com',              // 124.32.230.65
6820         '.cosamoza.com',                // 216.195.51.62 by travelwins at yahoo.com
6821         '.covertarena.co.uk',   // by Wayne Huxtable
6822         '.d999.info',                   // by Peter Vayner (peter.vayner at inbox.ru)
6823         '.dance-ithaca.com',    // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
6824         '.dinmo.cn',                    // 218.30.96.149 by dinso at 163.com, seo etc.  //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
6825         '.dinmoseo.com',                // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6826         '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
6827         '.dlekei.info',                 // by Maxima Bucaro (webmaster at tts2f.info)
6828         '.dollar4u.info',               // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
6829         '.drug-shop.us',                        // by Alexandr (matrixpro at mail.ru)
6830         '.drugs-usa.info',              // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6831         '.dssoaps.com',                 // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6832         '.easypharmsite.com',   // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
6833         '.easyshopusa.com',             // by riter (riter at nm.ru)
6834         '.edjuego.com',                 // 85.92.70.253(non-existent), gamble
6835         '.edu.ph',                              // "philippine network foundation inc"
6836         '.eec.mn',                                      // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
6837         '.ex-web.net',                  // RMT by ex co,ltd (rmt at ex-web.net)
6838         '.extracheapmeds.com',  // "freexxxmovies" by John Smith (89 at bite.to)
6839         '.fantasy-handjob-ra.com',      // by Hose Pedro (hosepedro at gmail.com)
6840         '.fastppc.info',                // by peter conor (fastppc at msn.com)
6841         '.ffxiforums.net',              // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6842         '.filthserver.com',             // sales at onlinemarketingservices.biz
6843         '.find-stuff.org',              // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
6844         '.firstdrugstorezone.info',     // by Goose (boris208 at yandex.ru)
6845         '.free-finding.com',    // by Ny hom (nyhom at yahoo.com)
6846         '.free-rx.net',                 // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com
6847         '.free-sex-movie-net.info',     // by vitas61 at yahoo.com
6848         '.freeblog.ru',                 // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru
6849         '.freehost5.com',               // 75.126.32.184(kosmohost.net), words only
6850         '.freeliveringtones.com',       // by Silan (lippe1988 at gmail.com)
6851         '.freemobilephonesworld.info',  // by andresid (andresid1 at yandex.ru)
6852         '.fwjjjtmrlr.cn',               // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
6853         '.game4enjoy.net',              // by huang jinglong (fenlin231 at sina.com)
6854         '.game4egold.com',              // by Filus Saifullin (ebay at soft-script.com)
6855         '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6856         '.golden-keys.net',             // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
6857         '.gomeodc.com',                 // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6858         '.ganecity.com',                // by shao tian (huangjinqiang at sina.com)
6859         '.gm-exchange.jp',              // 210.188.216.49 RMT
6860         '.goamoto.ru',                  // by Dmitry E Kotchnev (z2archive at gmail.com)
6861         '.good1688.com',                // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to
6862         '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
6863         '.greatbestwestern.org',// by gao.wungao at gmail.com
6864         '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
6865         '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
6866         '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
6867         '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
6868         '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
6869         '.honda168.net',                // by tan tianfu (xueyihua at gmail.com), seems not used now
6870         '.hostuju.cz',                  // ns banan.cz, banan.it
6871         '.hot4buy.org',                 // by Hot Maker (jot at hot4buy.org)
6872         '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6873         '.hostzerocost.com',    // server failed, by Gokhan Yildirim (gokhany at gmail.com)
6874         '.iinaa.net',                   // domain at ml.ninja.co.jp, ns *.shinobi.jp
6875         '.incbuy.info',                 // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6876         '.informator4you.com',  // 84.16.235.141 by info at cash4wm.biz
6877         '.infradoc.com',
6878         '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
6879         '.ismarket.com',                // Google-hiding. intercage.com related IP
6880         '.italialiveonline.info',       // by Silvio Cataloni (segooglemsn at yahoo.com), redirect to activefreehost.com
6881         '.italy-search.org',    // by Alex Yablin (zaharov-alex at yandex.ru)
6882         '.itsexosit.net',
6883         '.itxxxit.net',
6884         '.hostsy.us',                   // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
6885         '.jimmys21.com',                // by Klen Kudryavii (telvid at shaw.ca)
6886         '.jimka-mmsa.com',              // by Alex Covax (c0vax at mail.ru), seems not used yet
6887         '.joynu.com',                   // by lei wang (93065 at qq.com), hidden JavaScript
6888         '.jsyuanyang.com',              // 58.211.0.23(non-existing)
6889         '.karasikov.net',                       // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
6890         '.kingtools.de',
6891         '.kymon.org',                   // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
6892         '.leucainfo.com',
6893         '.library-blogs.net',   // by Peter Scott (pscontent at gmail.com)
6894         '.lightyearmedia.com',  // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
6895         '.link-keeper.net',             // 210.172.108.236 (257.xrea.com)
6896         '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
6897         '.m-sr.net',                    // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
6898         '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
6899         '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6900         '.mdjadozone.org',              // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
6901         '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
6902         '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
6903         '.megvideochatlive.info',       // Bad seo
6904         '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
6905         '.mncxvsm.info',                // 217.11.233.105, / blank
6906         '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6907         '.morfolojna.cn',               // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6908         '.myfgj.info',                  // by Filus (softscript at gmail.com)
6909         '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
6910         '.mxsupportmailer.com',
6911         '.next-moneylife.com',  // RMT
6912         '.newalandirect.com',   // by Alnoor Hirji, ns *.sablehost.com
6913         '.ngfu2.info',                  // by Tara Lagrant (webmaster at ngfu2.info)
6914         '.northwestradiator.com',       // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
6915         '.nucked-sex.com',              // 203.223.150.222 by lis (noidlis2 at yahoo.com)
6916         '.ok10000.com',                 // by zipeng hu (ldcs350003 at hotmail.com)
6917         '.olimpmebel.info',             // by pol (pauk_life at mail.ru), frame to bettersexmall.com
6918         '.onlinetert.info',             // by Jarod Hyde (grigorysch at gmail.com)
6919         '.onlin-casino.com',    // by Lomis Konstantinos (businessline3000 at gmx.de)
6920         '.onlineviagra.de',
6921         '.oppe.biz',                    // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
6922         '.ornit.info',                  // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
6923         '.ozomw.info',
6924         '.pahuist.info',                // by Yura (yuralg2005 at yandex.ru)
6925         '.pelican-bulletin.info',       // by Elizabeth K. Perry (redmonk at mail.ru)
6926         '.perevozka777.ru',             // by witalik at gmail.com
6927         '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com)
6928         '.pills-storage.com',   // by
6929         '.plusintedia.com',             // by g yk (abc00623 at 163.com), seems not used now
6930         '.porkyhost.com',               // 79965 at whois.gkg.net
6931         '.porno-babe.info',             // by Peter (asdas at mail.ru), redirect to Google
6932         '.pornesc.com',                 // by Xpeople (suppij atmail.ru)
6933         '.portaldiscount.com',  // by Mark Tven (bestsaveup at gmail.com)
6934         '.powerlevelingweb.com',        // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
6935         '.prama.info',                  // by Juan.Kang at mytrashmail.com
6936         '.privatedns.com',              // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
6937         ',pulsar.net',                  // by TheBuzz Int. (theboss at tfcclion.com)
6938         '.qoclick.net',                 // by DMITRIY SOLDATENKO
6939         '.quality-teen-porn-photo.com', // by info at densa.info
6940         '.relurl.com',                  // tiny-like. by Grzes Tlalka (grzes1111 at interia.pl)
6941         '.replicaswatch.org',   // by Replin (admin at furnitureblog.org)
6942         '.rigame.info',                 // by debra_jordan07 at yahoo.com
6943         '.rmt-trade.com',               // by wang chun (dlxykj at 126.com), rmt
6944         '.roin.info',                   // by Evgenius (roinse at yandex.ru)
6945         '.rpz3zmr75a.com',              // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6946         '.rutewqsfrt10.cn',             // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
6947         '.save-darina.org',             // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6948         '.search99top.info',    // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
6949         '.searchadv.com',               // by Jaan Randolph (searchadv at gmail.com)
6950         '.seek-www.com',                // by Adam Smit (pingpong at mail.md)
6951         '.sessocities.net',             // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
6952         '.seven-pharmacy.com',  // 83.138.176.247 by Justin Timberlake (preved at gmail.com)
6953         '.sexamoreit.com',
6954         '.sexforit.com',
6955         '.sexmaniacs.org',              // by Yang Chong (chong at x-india.com)
6956         '.sexsmovies.info',             // 203.174.83.22 by dima (vitas at vitas-k.com)
6957         '.sirlook.com',
6958         '.so-net.ws',                   // by Todaynic.com Inc, seems a physing site for so-net.jp
6959         '.sepcn.info',                  // / not found
6960         '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
6961         '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
6962         '.stordproduksjonslag.no',      // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
6963         '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6964         '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
6965         '.superverizonringtones.com',   // by joshua at list.ru
6966         '.teriak.cn',                   // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
6967         '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
6968         '.thehostcity.com',             // Domains by Proxy
6969         '.thesuperxxx.com',             // 81.29.249.27(non-existent)
6970         '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
6971         '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
6972         '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
6973         '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
6974         '.topmeds10.com',
6975         '.tschofenig.com',                      // 213.239.234.98(*.clients.your-server.de), port 8080
6976         '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
6977         '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
6978         '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
6979         '.unctad.net',                  // by gfdogfd at lovespb.com
6980         '.vacant.org.uk',
6981         '.viagrausaonline.com', // 85.17.52.139(non-existent)
6982         '.vip-get.info',                // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
6983         '.virtualsystem.de',
6984         '.vdxhost.com',
6985         '.vodkaporn.com',               // 67.19.116.83(non-existent) by green at gmx.co.uk
6986         '.vviccd520.com',               // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
6987         '.homes.com.au',                // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
6988         '.wbtechs.us',                  // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
6989         '.webnow.biz',                  // by Hsien I Fan (admin at servcomputing.com)
6990         '.webtools24.net',              // by Michael Helminger (info at ishelminger.de)
6991         '.wer3.info',                   // by Martin Gundel (Martin at mail.com), 404 not found
6992         '.withsex.net',                 // by C.W.Jang (jangcw1204 at naver.com)
6993         '.whoop.to',                    // RMT
6994         '.womasia.info',                // by Mark Fidele (markfidele at yahoo.com)
6995         '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus
6996         '.wow-powerleveling-wow.com',   // 63.223.77.112 by dingmengxl at 126.com, pl
6997         '.wowgoldweb.com',              // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl
6998         '.wwwna.info',                  // / 404 Not Found
6999         '.xpacificpoker.com',   // by Hubert Hoffman (support at xpacificpoker.com)
7000         '.xamorexxx.net',
7001         '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
7002         '.xsessox.com',
7003         '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
7004         '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
7005         '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
7006         '.zyguo.info',                  // ns globoxhost.net
7007         '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
7008
7009
7010         // C-3: Not classifiable (information wanted)
7011         //
7012         // Something incoming to pukiwiki related sites
7013         'nana.co.il related' => array(
7014                 '.planetnana.co.il',
7015                 '.nana.co.il',
7016         ),
7017 );
7018
7019 // --------------------------------------------------
7020
7021 $blocklist['D'] = array(
7022         // D: Sample setting of
7023         // "Third party in good faith"s
7024         //
7025         // Hosts shown inside of the implanted contents,
7026         // not used via spam, but maybe useful to detect these contents
7027         //
7028         // 'RESERVED',
7029 );
7030
7031 // --------------------------------------------------
7032
7033 $blocklist['E'] = array(
7034         // E: Sample setting of
7035         // Promoters
7036         // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7037         //  Ads, Business promotions, SEO, etc)
7038         //
7039         // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7040         // Sometimes they may promote each other
7041
7042         '15-Mail.com related' => array(
7043                 '.15-mail.com',                         // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
7044                 '.1bloglog.com',                        // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7045                 '.investment-school.com',       // 210.253.115.159 by Yukiyo Yamamoto (info at 15-mail.com)
7046                 '.breakjuku.com',                       // 210.253.115.159 (service provider bet.co.jp = xserver.jp)
7047                 '.nambara.biz',                         // by Yukiyo Yamamoto (info at 15-mail.com)
7048         ),
7049         '.all-affiliater.com',                  // 202.222.30.18(sv125.lolipop.jp), ns *.lolipop.jp
7050         '.chachai.com',                                 // 210.188.205.161(sv339.lolipop.jp) by tetsuo ihira (chachai at hida-kawai.jp)
7051         'E-brainers.com related' => array(
7052                 // 202.212.14.101
7053                 '.cyoto-morketing-club.com',    // by Fujio Iwasaki (domain at sppd.co.jp)
7054                 '.e-brainers.com',                              // by Fujio Iwasaki (domain at sppd.co.jp)
7055                 '.my-tune.jp',                                  // by brainers Inc.
7056                 '.technical-support-center.com',// by Fujio Iwasaki (domain at sppd.co.jp)
7057                 '.weekle.jp',                                   // by brainers Inc.
7058
7059                 // 210.136.111.56 by Masatoshi Kobayashi (domain at e-brainers.com)
7060                 // 210.136.111.56 by Fujio Iwasaki (domain at sppd.co.jp)
7061                 '.3minutes-marketing-club.com', // by Fujio
7062                 '.affiliate-vampire.com',               // by Masatoshi
7063                 '.article-site-power-package.com',      // by Masatoshi
7064                 '.audio-marketing-club.com',    // by Fujio
7065                 '.brainers-task-manager.com',   // by Masatoshi
7066                 '.brainers-troubleshooter-generator.com',       // by Masatoshi
7067                 '.brainersbuzz.com',                    // by Masatoshi
7068                 '.den4renz-marketing-club.com', // by Fujio
7069                 '.english-contents-club.com',   // by Masatoshi
7070                 '.fly-in-ads-japan.com',                // by Fujio
7071                 '.free-resalerights-giveaway.com',      // by Fujio
7072                 '.freegiveawaysecret.com',              // by Masatoshi
7073                 '.guaranteedvisitorpro.com',    // by Masatoshi
7074                 '.havads-japan.com',                    // by Masatoshi
7075                 '.info-business123.com',                // by Fujio
7076                 '.instant-marketing-club.com',  // by Fujio
7077                 '.internetmarketinggorinjyu.com',       // by Masatoshi
7078                 '.marketing-force-japan.com',   // by Fujio
7079                 '.masatoshikobayashi.com',              // by Fujio
7080                 '.profitsinstigator.com',               // by Masatoshi Kobayashi (akada at e-brainers.com)
7081                 '.replytomatt.com',                             // by Fujio
7082                 '.santa-deal.com',                              // by Fujio
7083                 '.santa-deal-summer.com',               // by Fujio
7084                 '.scratch-card-factory.com',    // by Masatoshi
7085                 '.script4you-japan.com',                // by Fujio
7086                 '.sell1000000dollarinjapan.com',// by Fujio
7087                 '.squeeze-page-secret.com',             // by Masatoshi
7088                 '.viral-blog-square.com',               // by Fujio
7089                 '.viralarticle.com',                    // by Fujio
7090                 '.wowhoken.com',                                // by Fujio
7091
7092                 // 202.212.14.104 by Fujio Iwasaki  (domain at sppd.co.jp)
7093                 '.brainerstelevision.com',
7094                 '.demosite4you.com',
7095                 '.keywordcatcherpro.com',
7096                 '.script-marketing-club.com',
7097
7098                 // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com)
7099                 // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com)
7100                 // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp)
7101                 '.1sap.com',                    // by Naoki, ns *.ultimate-marketing-weapon.com
7102                 '.brainers.ws',                 // by info at key-systems.net, ns *.ultimate-marketing-weapon.com
7103                 '.brainerscode.com',    // by akada
7104                 '.brainerslive.com',    // by domain
7105                 '.brainersreview.com',  // by domain
7106                 '.brainerstest.com',    // by akada
7107                 '.otosecret.com',               // by domain
7108                 '.ultimate-marketing-weapon.com',       // by akada
7109                 '.planet-club.net',             // 202.228.204.141(server.ultimate-marketing-weapon.com)
7110                 '.terk.jp',                             // by Tsuyoshi Tsukada, QHM
7111
7112                 '.samuraiautoresponder.com',    // 211.125.179.75(bq1.mm22.jp) by Masatoshi Kobayashi (kobayashi at wowhoken.com)
7113                 '.sppd.co.jp',          // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam
7114         ),
7115         '.e2996.com',                   // 202.181.105.241(sv261.lolipop.jp)
7116         'ezinearticles.com',    // 216.235.79.13 by C Knight (opensrs at sparknet.net)
7117         '.fx4rich.com',                 // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
7118         'gonz-style.com',               // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller
7119         'Hokuken.com' => array(         // Bisuness promotion, affiliate about QHM
7120                 '.hokuken.com',         // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
7121                 '.1st-easy-hp.com',     // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
7122                 '.open-qhm.net',        // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
7123
7124                 // Redirects and affiliates:
7125                 // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
7126                 //   yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX    redirects to www.1st-easy-hp.com/index.php?iInfoCart
7127                 //   info.mizo3.com/fwd/qhm  redirects to (*snip*)af=moukaru88y(*snip*)
7128                 //   sanpei.vc/fwd/startkit  redirects to (*snip*)af=katosanpe(*snip*)
7129                 //   ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
7130                 //   qhm.kikikan.com        points several links to (*snip*)af=kikikan(*snip*)
7131                 //   www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
7132                 //   ...
7133
7134                 // Other suggestions:
7135                 //   info.mizo3.com says: "Owners who bought QHM from MY site..."
7136
7137                 // Blog posting at the same time
7138                 //   2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
7139                 //   2007/06/13 e123.info/archives/76
7140                 //   2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
7141                 //   2007/06/25 ichibankantan.seesaa.net/article/52650651.html
7142                 //   2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
7143         ),
7144         'info at kobeweb.jp' => array(
7145                 '.soholife.jp',         // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
7146                 '.kobeweb.jp',          // 59.106.13.51(www421.sakura.ne.jp)
7147                 '.sloters.tv',          // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
7148         ),
7149         '.info-affiliate.net',  // 219.94.148.8(sv41.chicappa.jp)
7150         'Infocart.jp' => array(         // by wai at infocart.jp
7151                 // Trying to earn money easily by selling 'earn-money-easiliy' tips
7152                 //descr:        INFOMAG (Shimooka,Yasuyoshi)
7153                 '.infocart.jp',                 // 60.32.154.171, by Hawaiikigyo, affiliate
7154
7155                 //inetnum:      60.32.154.176 - 60.32.154.183
7156                 // descr:        HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
7157                 '.infomag.jp',                  // 60.32.154.179, by Infocart,  business promotion
7158         ),
7159         'Info-sniper.com' => array(
7160                 '.1koibana.com',                // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents"
7161                 '.info-sniper.com',             // 202.222.18.25(sv37.lolipop.jp)
7162                 '.mailjoho.com',                // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com
7163         ),
7164         '.infostore.jp',                // 216.255.235.45, ns *.estore.co.jp
7165         '.junquito55.com',              // 59.106.12.213(sv281.lolipop.jp)
7166         'JunSuzuki.com' => array(       // e-brainers.com related
7167                 '.junsuzuki.com',               // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)
7168                 '.globalswing.biz',             // 210.188.217.109(sv27.xserverzero.net)
7169         ),
7170         'Natsukih.net' => array(
7171                 '.natsukih.net',                // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp)
7172                 '.1seikou.biz',                 // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project"
7173                 '.oniblog.net',                 // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz
7174                 '.muryoureport.com',    // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com
7175
7176                 // by info at natsukih.net
7177                 '.1muryoureport.com',   // 222.227.75.40(s162.xrea.com), says  "Heisei natsuki project"
7178                 '.2muryoureport.com',   // 59.139.29.227(s233.xrea.com), says  "Heisei natsuki project"
7179                 '.3muryoureport.com',   // 222.227.75.45(s167.xrea.com)
7180                 '.4muryoureport.com',   // 202.222.31.77(sakura1.digi-rock.com)
7181                 '.5muryoureport.com',   // 210.251.253.230
7182                 '.6muryoureport.com',   // 202.222.31.77(*snip*)
7183                 '.7muryoureport.com',   // 202.222.31.77(*snip*)
7184                 '.muryouaff.com',               // 210.251.253.238(s183.xrea.com)
7185         ),
7186         'Point-park.com' => array(      // Tadahiro Ogawa (domain at wide.ne.jp)
7187                 '.11kanji.com',         // 211.10.131.88
7188                 '.mlmsupport.jp',       // 211.10.131.108 by info at point-park.com
7189                 '.point-park.com',      // 211.10.131.88
7190                 '.point-park.jp',       // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp)
7191         ),
7192         '.potitto.info',                // 219.94.132.89(sv450.lolipop.jp)
7193         'PRJAPAN.co.jp' => array(
7194                 //'.prjapan.co.jp',             // 211.10.20.143(sv.prjapan.co.jp)
7195                 'go.prjapan.co.jp',             // 210.189.72.220(sv.webstars.jp)
7196                 '.bestsale.jp',                 // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp
7197                 '.hyouka-navi.jp',              // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net
7198                 '.sugowaza.jp',                 // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net,
7199                 //'.webstars.jp',               // 210.189.72.220  by info at prjapan.co.jp
7200         ),
7201         'Rakuten.co.jp' => array(
7202                 'hb.afl.rakuten.co.jp',         ///hsc/ 203.190.60.104 redirect to rakuten.co.jp
7203                 'hbb.afl.rakuten.co.jp',        ///hsb/ 203.190.60.105 image server?
7204         ),
7205         '.sedori-data.com',             // 210.188.205.7(sv03.lolipop.jp)
7206         '.seozone.jp',                  // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
7207         '.tool4success.com',    // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
7208         'tera at kirinn.com' => array(  // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
7209                 '.e123.info',
7210                 '.ialchemist.net',
7211                 '.j012.net',
7212                 '.xn--yckc2auxd4b6564dogvcf7g.biz',
7213         ),
7214         'Viscose.jp' => array(
7215                 '.web-navi21.com',      // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp)
7216                 '.viscose.jp',          ///link/ 210.188.205.205(sv370.lolipop.jp) by  kazuhiro shikano
7217         ),
7218         '.zakkuzaku.com',               // 210.188.201.44(sv83.xserver.jp)
7219 );
7220
7221 // --------------------------------------------------
7222
7223 $blocklist['Z'] = array(
7224         // Z: Yours
7225         //
7226         //'',
7227         //'',
7228         //'',
7229 );
7230
7231 ?>