├── lists ├── exploring.map ├── mxcheck_exclude.inc ├── tlds.txt ├── body-spam.map ├── subject-spam.map └── blacklisted-sender-strings.map ├── local.d ├── redis.conf ├── force_actions.conf ├── mx_check.conf ├── neural.conf └── multimap.conf ├── override.d ├── actions.conf └── metrics.conf ├── enable_rspamd.sh └── README.md /lists/exploring.map: -------------------------------------------------------------------------------- 1 | /geoterminatingpod\-ismobservationtpd/i 2 | -------------------------------------------------------------------------------- /local.d/redis.conf: -------------------------------------------------------------------------------- 1 | servers = "127.0.0.1"; 2 | write_servers = "127.0.0.1"; 3 | -------------------------------------------------------------------------------- /override.d/actions.conf: -------------------------------------------------------------------------------- 1 | reject = 25; 2 | add_header = 25; 3 | greylist = 40; 4 | -------------------------------------------------------------------------------- /local.d/force_actions.conf: -------------------------------------------------------------------------------- 1 | rules { 2 | NOMX { 3 | action = "reject"; 4 | expression = "MX_MISSING"; 5 | message = "Sending domain has no MX record"; 6 | } 7 | } 8 | -------------------------------------------------------------------------------- /local.d/mx_check.conf: -------------------------------------------------------------------------------- 1 | timeout = 5.0; 2 | symbol_bad_mx = "MX_INVALID"; 3 | symbol_no_mx = "MX_MISSING"; 4 | symbol_good_mx = "MX_GOOD"; 5 | expire = 86400; 6 | key_prefix = "rmx"; 7 | enabled = true; 8 | greylist_invalid = false; 9 | exclude_domains = [ 10 | "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/mxcheck_exclude.inc", 11 | ]; 12 | -------------------------------------------------------------------------------- /local.d/neural.conf: -------------------------------------------------------------------------------- 1 | servers = 127.0.0.1:6379; # Redis server to store learning data and ANN 2 | 3 | train { 4 | max_train = 1k; # Number of trains per epoch 5 | max_usages = 20; # Number of learn iterations while ANN data is valid 6 | spam_score = 8; # Score to learn spam 7 | ham_score = -2; # Score to learn ham 8 | learning_rate = 0.01; # Rate of learning (Torch only) 9 | max_iterations = 25; # Maximum iterations of learning (Torch only) 10 | } 11 | 12 | timeout = 20; # Increase redis timeout 13 | -------------------------------------------------------------------------------- /lists/mxcheck_exclude.inc: -------------------------------------------------------------------------------- 1 | wgfwd1.registrar-servers.com 2 | wgfwd2.registrar-servers.com 3 | eforward1b.registrar-servers.com 4 | campfirecollective.kinstamailservice.com 5 | tickets.icelandair.com 6 | mail.helcim.com 7 | mail.webbie.aty-group.com 8 | www.perfectcompliance.com 9 | fwd.regery.net 10 | auction.kenic.or.ke 11 | ecciewww4.amsnl.webair.com 12 | sg.campachim.com 13 | svbounce.freeconferencecall.com 14 | sv001.value-domain.com 15 | sv001new.value-domain.com 16 | mail5.akc.org 17 | mail.eroc.twai.gov 18 | kahaku.revn.jp 19 | host2078.hostmonster.com 20 | -------------------------------------------------------------------------------- /lists/tlds.txt: -------------------------------------------------------------------------------- 1 | # TLDs known to have a high probability of being spammers 2 | 3 | /\.bid$/i 4 | /\.club$/i 5 | /\.date$/i 6 | /\.download$/i 7 | /\.faith$/i 8 | /\.fun$/i 9 | /\.host$/i 10 | /\.icu$/i 11 | /\.kim$/i 12 | /\.loan$/i 13 | /\.monster$/i 14 | /\.online$/i 15 | /\.pet$/i 16 | /\.pro$/i 17 | /\.red$/i 18 | /\.review$/i 19 | /\.site$/i 20 | /\.space$/i 21 | /\.stream$/i 22 | /\.top$/i 23 | /\.trade$/i 24 | /\.vip$/i 25 | /\.website$/i 26 | /\.win$/i 27 | /\.world$/i 28 | /\.xyz$/i 29 | /\.casa$/i 30 | /\.cam$/i 31 | /\.cyou$/i 32 | /\.today$/i 33 | /\.digital$/i 34 | /\.work$/i 35 | /\.bar$/i 36 | /\.click$/i 37 | -------------------------------------------------------------------------------- /lists/body-spam.map: -------------------------------------------------------------------------------- 1 | /(chengfikokistewyj|recahisainbf|etroputelogvu|axelon\.com|hogarth\.allard|gantrack8\.com|9wyt\.mjt\.lu|flickhockey52041|fiets\.lt\.acemlnb\.com)/i 2 | /(3D7LRD3Z1HU7JUK8|Kabbalah\.info|rostrumlegal|dosejuice\.com|3DYg0ZQ_hMQKFJQPYi|vente\-du\-diable|Allepaznokcie|lnk\.smart\-goto\-c3\.tech|mollylac)/i 3 | /(u10378069|slori\.battletech\-newsletter\.de|redcodenetwork|ranking\ for\ all\ search\ engines|migrate\ the\ newest\ version\ of\ the\ webmail)/i 4 | /(tgjjxjegwbndiywtyqcp\.dynserv\.org|jcWuVdP\.png|OpinionPrice|manilla\.lt|radwebhosting|hitmailreview30|zip\ password|password\ zip|mapsregistration\.com)/i 5 | /(Receive\ Delayed\ Messages|domchkserverman|unreceived\ emails\ will\ be\ deleted|janicepaper|easyburnketo\.net|cakematernity)/i 6 | /testing\-mxroute\-filtering\-system/i 7 | -------------------------------------------------------------------------------- /enable_rspamd.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # Enable rspamd for all accounts 4 | 5 | # If they have no filters configured, give them a baseline 6 | for i in $(find /etc/virtual -name filter.conf) 7 | do 8 | if ! grep -q "high_score_block" $i; then 9 | echo "high_score=25" >> $i 10 | echo "high_score_block=yes" >> $i 11 | echo "where=delete" >> $i 12 | fi 13 | done 14 | 15 | # Rspamd configs won't be generated by DirectAdmin unless user_prefs exists, so handle it 16 | for username in $(ls /usr/local/directadmin/data/users); 17 | do 18 | DIR=/home/$username/.spamassassin 19 | mkdir -p $DIR 20 | UP=$DIR/user_prefs 21 | if [ ! -s ${UP} ]; then 22 | echo 'required_score 25.0' > ${UP} 23 | echo 'report_safe 1' >> ${UP} 24 | chown $username:$username ${UP} 25 | chmod 644 ${UP} 26 | fi 27 | chown ${username}:mail $DIR 28 | chmod 771 $DIR 29 | done 30 | 31 | # Rewrite Rspamd configs for users 32 | echo "action=rewrite&value=rspamd" >> /usr/local/directadmin/data/task.queue 33 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # rspamd_rules 2 | 3 | UPDATE August 01 2022: 4 | Our deployment of Rspamd has caused too much user confusion, and we are finally reverting it back to SpamAssassin. This repo will likely remain unaltered moving forward. 5 | 6 | When making edits to lists (maps), please follow the current syntax used, and avoid additional regex. The current method of capturing strings for each map is being taken and converted to SpamAssassin rules for our older servers automatically. This relies on continued consistency, for now. Adding new maps, however, may be appropriate if regex or more complex strings are needed. 7 | 8 | /lists/ 9 | body-spam.map = Text identified in email body that is known to be spam 10 | subject-spam.map = Text identified in email subject that is known to be spam 11 | tlds.txt = TLDs with high probability of being spam 12 | blacklisted-sender-strings.map = Strings in "From" header that should have zero false positives 13 | mxcheck_exclude.inc = Whitelisted domains that do not require MX records to pass our spam filter (their business domain and sending domain likely do not match) 14 | 15 | /local.d/ 16 | force_actions.conf = Override actions 17 | multimap.conf = Definitions for maps we use (See maps: https://rspamd.com/doc/modules/multimap.html ) 18 | mx_check.conf = Checking if sender has valid MX records 19 | neural.conf = Enabling rspamd neural learning 20 | redis.conf = Defining location of redis server 21 | 22 | /override.d/ 23 | actions.conf = Default actions 24 | metrics.conf = Defining or overriding scores. If we make our own rules we define their scores here. If we find a rule needs to have it's score increased or decreased, we re-define it here. 25 | 26 | These rspamd rules have no license because we do not consider it to in any way be intellectual property. Everything in this project is publicly available to anyone, it is merely lists of domains and phrases, none of which we can claim any ownership of. 27 | -------------------------------------------------------------------------------- /local.d/multimap.conf: -------------------------------------------------------------------------------- 1 | spammy_tld_env_from { 2 | type = "from"; 3 | filter = "email:domain:tld"; 4 | map = "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/tlds.txt"; 5 | symbol = "SPAMMY_TLD_ENVFROM"; 6 | description = "Sending TLD likely spam"; 7 | score = 3; 8 | regexp = true; 9 | } 10 | 11 | spammy_tld_from { 12 | type = "header"; 13 | header = "from"; 14 | filter = "email:domain:tld"; 15 | map = "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/tlds.txt"; 16 | symbol = "SPAMMY_TLD_FROM"; 17 | require_symbols = "!SPAMMY_TLD_ENVFROM"; 18 | description = "Sending TLD likely spam"; 19 | score = 1.5; 20 | regexp = true; 21 | } 22 | 23 | MXROUTE_BODY_SPAM { 24 | type = "content"; 25 | filter = "text"; 26 | map = "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/body-spam.map"; 27 | symbol = "MXROUTE_BODY_SPAM"; 28 | prefilter = true; 29 | action = "reject"; 30 | regexp = true; 31 | message = "The text of this email contained a string that we identified to be spam."; 32 | } 33 | 34 | SPAMMY_SUBJECT { 35 | type = "header"; 36 | header = "subject"; 37 | map = "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/subject-spam.map"; 38 | symbol = "SPAMMY_SUBJ"; 39 | prefilter = true; 40 | action = "reject"; 41 | regexp = true; 42 | } 43 | 44 | SENDER_FROM_BLACKLIST { 45 | type = "from"; 46 | map = "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/blacklisted-sender-strings.map"; 47 | regexp = true; 48 | description = "Blacklisted sender"; 49 | prefilter = true; 50 | filter = "email:addr" 51 | action = "reject"; 52 | message = "This sender has been blocked for matching a known spam trend"; 53 | } 54 | 55 | MXROUTE_EXPLORING { 56 | type = "content"; 57 | filter = "headers"; 58 | map = "https://raw.githubusercontent.com/mxroute/rspamd_rules/master/lists/exploring.map"; 59 | symbol = "MXROUTE_EXPLORING"; 60 | prefilter = true; 61 | action = "add_header"; 62 | regexp = true; 63 | message = "We are observing this data to see how many and what kind of data it returns."; 64 | } 65 | -------------------------------------------------------------------------------- /override.d/metrics.conf: -------------------------------------------------------------------------------- 1 | symbol "RECEIVED_SPAMHAUS_PBL" { 2 | weight = 2; 3 | description = "Received header contains IP listed on Spamhaus PBL"; 4 | } 5 | 6 | symbol "HFILTER_HELO_IP_A" { 7 | weight = 5; 8 | description = "Helo A IP != hostname IP"; 9 | } 10 | 11 | symbol "RBL_VIRUSFREE_BOTNET" { 12 | weight = 5; 13 | description = "Known to be part of a botnet"; 14 | } 15 | 16 | symbol "RBL_SENDERSCORE" { 17 | weight = 5; 18 | description = "On senderscore RBL"; 19 | } 20 | 21 | symbol "VIOLATED_DIRECT_SPF" { 22 | weight = 5; 23 | description = "Has no Received (or no trusted received relays) and SPF policy fails or soft fails"; 24 | } 25 | 26 | symbol "SEM_URIBL_FRESH15" { 27 | weight = 100; 28 | description = "Domain listed on fresh15.spameatingmonkey.net"; 29 | } 30 | 31 | symbol "LEAKED_PASSWORD_SCAM" { 32 | weight = 10; 33 | description = "Message identified as a password scam"; 34 | } 35 | 36 | symbol "BITCOIN_ADDR" { 37 | weight = 5; 38 | description = "Bitcoin address in message"; 39 | } 40 | 41 | symbol "RBL_MAILSPIKE_VERYBAD" { 42 | weight = 100; 43 | description = "Message identified by us as almost definitely spam"; 44 | } 45 | 46 | symbol "R_UNDISC_RCPT" { 47 | weight = 5; 48 | description = "Have not seen false positives with this rule yet"; 49 | } 50 | 51 | symbol "HFILTER_HELO_NORES_A_OR_MX" { 52 | weight = 3; 53 | description = "The HELO address given does not resolve"; 54 | } 55 | 56 | symbol "R_SPF_FAIL" { 57 | weight = 3; 58 | description = "The owners of this domain have specified that this IP is not allowed to send mail for the domain"; 59 | } 60 | 61 | symbol "MIME_BASE64_TEXT_BOGUS" { 62 | weight = 3; 63 | description = "Has text part encoded in base64 that does not contain any 8bit characters"; 64 | } 65 | 66 | symbol "DMARC_POLICY_REJECT" { 67 | weight = 100; 68 | description = "Domain owner requested this be rejected by DMARC"; 69 | } 70 | 71 | symbol "MXROUTE_BODY_SPAM" { 72 | weight = 100; 73 | description = "Message identified by us as likely spam"; 74 | } 75 | 76 | symbol "ONCE_RECEIVED_STRICT" { 77 | weight = 0; 78 | description = "Lets kill this rule"; 79 | } 80 | 81 | symbol "DBL_ABUSE" { 82 | weight = 100; 83 | description = "Email mentions domain listed at Spamhaus DBL"; 84 | } 85 | 86 | symbol "NO_BOUNCE" { 87 | weight = 100; 88 | description = "No bounce loops"; 89 | } 90 | 91 | symbol "FREEMAIL_TO" { 92 | weight = 0.0; 93 | description "Freemail recipients"; 94 | } 95 | 96 | symbol "SPAMMY_SUBJ" { 97 | weight = 100; 98 | description = "Email subject matches spam trend"; 99 | } 100 | 101 | symbol "IP_SCORE" { 102 | weight = 0.0; 103 | description = "IP reputation"; 104 | } 105 | 106 | symbol "FROM_NEQ_DISPLAY_NAME" { 107 | weight = 0.0; 108 | description = "Display name contains an email address different to the From address"; 109 | } 110 | 111 | symbol "R_SUSPICIOUS_URL" { 112 | weight = 3.0; 113 | description = "Suspicious URL"; 114 | } 115 | 116 | symbol "FORGED_SENDER" { 117 | weight = 1.5; 118 | description = "From address has been spoofed"; 119 | } 120 | 121 | symbol "FREEMAIL_FROM" { 122 | weight = 3.0; 123 | description = "From address has been spoofed"; 124 | } 125 | 126 | symbol "R_RATELIMIT" { 127 | weight = 9; 128 | description = "Rate limited"; 129 | } 130 | 131 | symbol "BROKEN_HEADERS" { 132 | weight = 0; 133 | description = "Header check"; 134 | } 135 | 136 | symbol "FORGED_RECIPIENTS" { 137 | weight = 0; 138 | description = "Recipient check"; 139 | } 140 | 141 | symbol "HAS_PHPMAILER_SIG" { 142 | weight = 2; 143 | description = "PHP Mailer header" 144 | } 145 | 146 | symbol "SPAM_FLAG" { 147 | weight = 7; 148 | description = "Identified as spam by previous server" 149 | } 150 | 151 | symbol "MIME_BAD_ATTACHMENT" { 152 | weight = 0; 153 | description = "Bad attachment" 154 | } 155 | 156 | symbol "BLACKLIST_DMARC" { 157 | weight = 0; 158 | description = "Mail comes from the whitelisted domain and has valid failed DMARC and DKIM policies"; 159 | } 160 | 161 | symbol "MX_INVALID" { 162 | weight = 0; 163 | description = "From domain has no valid MX records or this rule sucks"; 164 | } 165 | 166 | symbol "DBL_SPAM" { 167 | weight = 15; 168 | description = "Contains reference domain listed at SpamHaus"; 169 | } 170 | 171 | symbol "SPOOF_REPLYTO" { 172 | weight = 0; 173 | description = "Spoofing reply-to has valid use cases so setting score to 0"; 174 | } 175 | -------------------------------------------------------------------------------- /lists/subject-spam.map: -------------------------------------------------------------------------------- 1 | /(Linda Niece has|Obituary Notification Cambridge|Your 2022 debt|How To Rank|Offer 2015 CAT|Clear Vision in|This Tech Company|Is Vladimir Putin)/i 2 | /(March Meeting Invitation|Jobs were on|^_We|Superintendent Ybarra|The Great Spectacle|Enjoy this tea|Can AI Help|Update Your Bathroom|Fish and Game)/i 3 | /(Week 8 Legislative|Slices of life|SAVE MONEY In|Get your Free|March special sections|Nursing home leaders|Did you forget|Public health disaster)/i 4 | /(Idaho Public TV|Hargeli Hayrenakicner|Can Putin Honestly|What They Are|Poland Wants to|You can easily|Critics claim Stop|From the Desk)/i 5 | /(The Toothbrush Of|The Cindy Grosz|Back to the|Power Pod gives|Second annual K|Spring Prescribed Fire|These deals won|Smith Campaign Releases)/i 6 | /(Wehr elected to|RUIN premieres next|t get left|This email box|17 Things You|Tax rebates coming|Win a FREE|Typefi AutoFit for)/i 7 | /(Debunking Misconceptions Surrounding|Carl Crabtree Announces|MEDIA SALES SECRET|Conduct better remote|PARKING LOT SALE|11 Bundt Pan)/i 8 | /(unclaimed reward|to burn fat|language in seconds|constipation gone|at your door when|outreachbin|may have gutter damage)/i 9 | /(Incoming failed mails|Woodworking Plans|Woodworking Projects|Fw\: Message from|Mailbox Version Outdated)/i 10 | /(jedermann auf der ganzen Welt|More enquiries through your Website|digital marketing vendor|Dear Fund Beneficiary)/i 11 | /(Get Your Fun|daily habit|memory loss|AmazonTribesProducts|Profitable Funnels Easily|Project Funding Loan|Proforma Invoice PDF)/i 12 | /(You got notification from|Questions About CCPA Data Access Process|Approval notice for payments)/i 13 | /(VPS Suspended due to TOS|All kinds web solutions)/i 14 | /Article featuring your company/i 15 | /(ALERT SERVER UPDATE NOTIFICATION)/i 16 | /RE: Your Website/i 17 | /Your Account Is On Hold/i 18 | /(You have a new private message|Have you won a prize in our|wants to add you as a friend)/i 19 | /Waiting for the payment/i 20 | /(Home Warranty Plans|Free Home Protection|Home Protection Plan|Covered Home Repairs)/i 21 | /Is your website optimized/i 22 | /Los AirPods de Apple/i 23 | /^Business proposal/i 24 | /Low Storage Warning/i 25 | /(new video clip|Private video|private messaging|Accept voice call|Accept voice message|private pics|private albums|saw your profile|has granted you access|would like voice call|access your profile|private album|see her pictures|on your chat box|sex tape|Get in touch with|to share pictures|wants to see your details|Voice talk with|adult pics|Live chat with|private video|New clips with|You last video|New profile picture|for you only|New video release|New videos with|liked your pictures|photos is granted|your latest album|get in direct access)/i 26 | /(hook-up page|to find dates|hook up source|Locate your lady|for hookup|hometown matching source|online dating site|hook up site|turn their back on you|intended for dating|unmarried girls|available women|absolutely happy|seek out women|single singles|redecorate your own|learn you far better|a real lady|single adult females|come across love|single women|essential partnership|absolutely joyful|hook-up source|what most women|locate love|begin our acquaintance|seriously appreciate loyalty|interested to discover you|unmarried people|neighborhood matching|partner immediately)/i 27 | /(Perfect grownup|best hook-up|dating web pages|online dating sites|perfect hookup|matching webpages|mature matching pages|ladylove|hookup web sites|Get a woman today|Meet a babe|Meet a sweetheart|Find a woman partner|hookup pages|perfect dating|relationship sites|adult matching pages|ideal hook-up|Discover a sweetheart|Locate a woman|internet dating sites)/i 28 | /(Bored females|lady portal|Hook up ready|regional cuties|Hook-up ready|Top date club|local hookup|mature matching|Un-register from|adult hook-up|available girl list|Unsubscribe from a subscriber|local hotties|woman database|mature dating|finest gals|Like to stop alert|Ideal date resource|free grownup|hometown hook-up|These females|Single chicks|Like to end alert|regional dates|Delete your current address|available woman|Un-register your|Want to stop alerts|local hook-up|Bored gals|town mate|neighborhood date|Remove your address|neighborhood babes|favored sex|town gals|meet up club|discontinue subscription|finest babes|Lonely ladies|finest females|hometown dates|Want to end subscription|mature dating|Bored babes|Unsubscribe your personal|Erase your contact|mate site|Remove your contact|Need to stop subscription|Hook up available|Unsubscribe your current address|Wish to stop subscription|best hotties|Get rid of your own email|Available young|Wanna end alert|sex hook-up|Delete your current email|single sweetheart|single babe|available sweetheart|ready females|neighborhood girls|Single ladies|Lonely dates|finest girls|Lonely sweethearts|Unsubscribe from a emailing|local chicks|single lady|hometown girls|hometown hook up|Would like to end alerts|Erase your own personal|Remove your email address|Remove your current e-mail|Remove your current email|finest women|Un-register from a emailing|Delete your own personal|Wanna stop alerts|Lonely women|Lonely babes|Remove your own|Erase your current)/i 29 | /(diet or exercise|lose weight|trump-medicare|trump medicare|You got recorded|I recorded you|hidden pictures|hidden albums|private photos|socalhighdesertking|mcc has uploaded|private pictures|VPS Suspended|private album|hidden photos)/i 30 | /Invalid HTTP_HOST header/i 31 | /Payment Swift/i 32 | /payment copy of/i 33 | /Euro Payment Only/i 34 | /Verify your Contact Information/i 35 | /Viagra/i 36 | /(Military Grade Flashlight|Energy Efficient|Breng uw boodschap over met een unieke bedrijfsfilm|Heb je een website, maar geen of te weinig bezoekers)/i 37 | /Bear Grylls/i 38 | /(Invest In Bitcoin|You can earn|Bitcoin Investment|Commercial offer|Find Work from Home|Magic of Christmas|These are warmer)/i 39 | /(The Stock Set to Soar|Stock Market Millionaire Reveals|This tiny sector could skyrocket by|warning to all|This Tiny Tech Stock Could Pay Out Big|5G Stock to Own Today|Massive Wall Street Scam|Bitcoin supply shock sends price soaring|Backdoor Bitcoin Trade|Giving Every American a Fighting Chance to Get Wealthy)/i 40 | /DocuSign Signature Service/i 41 | /MOST STORES ARE OPEN/i 42 | /Guaranteed Earnings/i 43 | /Rank Your Website/i 44 | /Erectile Dysfunction/i 45 | /friends getting divorced/i 46 | /Licensed Star Wars/i 47 | /ChiliDogTags/i 48 | /fully customized website/i 49 | /Herpes Disappear/i 50 | /invoice from DocuSign/i 51 | /SEO WORK/i 52 | /lemwarm/i 53 | /Purchase malfunction/i 54 | /System wurde angegriffen/i 55 | /Your email account may be closed/i 56 | /Mikro Kapital/i 57 | /tienes correos entrantes pendientes/i 58 | /(secret to squirting|We got the deets|Stretch Marks|are selling fast|beat the rush|Skin Tag Remover|Shocking Video|Bring Your Doorbell|How To Get Hard|Stay Hard Naturally|Once a squirter|Women Burn Belly|Back And Arm Fat|latest features from a reliable brand|XWatch|Doctors Are Shocked|You need to see this|The front door trend|making a BIG comeback|Overcome the COVID|FREE ebook|We Want To Spoil YOU|Let's Take It Outside|car shopping made easy|Explore local this|Vehicles Promotion)/i 59 | /Spring Women Handbag/i 60 | /send you new clients/i 61 | /Bezahlung von Ihrem Konto/i 62 | /Powerful SEO/i 63 | /hacknuto/i 64 | /Notification of shipment for/i 65 | /chinese factory produce/i 66 | /(Website Development|Website Designing|Website Maintenance services)/i 67 | /pending mails/i 68 | /What the CDC says you/i 69 | /Confirm Deactivation request for/i 70 | /Lifetime Payment Processing at Cost/i 71 | /IRS Documentation Policies Modifications/i 72 | /FaceAPI/i 73 | /IRS Documentation Policies Renewal/i 74 | /The internet says you need these/i 75 | /The Gun Control Lobby says/i 76 | /(Lovely looking ladies in your area|True chicks with cock urges|Pussy of your desires in your city|Very best sex island|That girl lives in your area|Actual gals with sex urges|This lady lives in your own neighborhood|This gal lives in your neighborhood|Sex hook-up aid|Actual chicks with cock urges|Beaver lookup source|Interact with beautiful dates|Connect with horny dates|True ladies with sex cravings|Sex of your hopes close to you|Only lust No dedication|True babes with cock desires|That lady lives in your neighborhood|Incredible girls want some dick|This lady lives in your own neighborhood|Ass of your hopes close to you|Interact with attractive dates|Signup instantly and have sexual intercourse tonight|Incredible girlfriends demand love-making|Hot babes want your penis|No partnership Just hookups|See beaver from the community|Meet captivating women|Fantastic girlfriends need your cock|Lust of your hopes close by|That lady lives in your location|Sexual activity hook-up tool|Fantastic chicks need your bonner|Cooch of your hopes in your city|See attractive women|Pussy of your desires in your area|Pussy lookup stop|Beaver search spot|Register right now and obtain hook up tonite|This girl is from your own neighborhood|Just hook up No commitments|See beaver from the city|Sex hook up reference|This hottie lives in your location|Lovely looking femmes near your place|Get cooch from your town|Fantastic girlfriends demand your dick|Sex search place|Interact with hot girls|Register right now and get pussy 2night|Lust of your hopes in your area|Sign up instantly and have pussy tonight|Real chicks with cock cravings|Stunning looking ladies near your place|That woman is from your own location|Sexual activity hook up webpage|See pussy from your block|Amazing girlfriends need some cock|Stunning looking females in your city|Join today to get pussy tonite|Real females with dick cravings|Just lust Zero romance|Fantastic chicks need your dick|Real ladies with cock urges|No commitments Only hook ups|Signup right now and get sexual intercourse tonite|Wonderful girls demand your cock|Stunning looking women in your city|Real gals with sex urges|Hot chicks demand intercourse|Cooch browse area|Purchasing intercourse is antique|Only sex Absolutely no dedication|Only hookup Zero commitment|Sign up right now and find hook-up tonight|Sexual hookup aid|Awesome chicks need your dong|Incredible girlfriends want your dick|Pussy of your desires in your city|Beaver browse home|Find crazy women|Gorgeous looking gals near you|Buying intercourse is obsolete|Join today and find hook up tonight|Register instantly and get hookup tonight|Beaver browse location|Signup now and find lust tonight|Awesome girlfriends need your bonner|Real dates with cock cravings|Hot girls want love-making|Meet captivating girls|Join now and obtain hook up tonite|Ass lookup place|Fantastic girls demand your dong|Gorgeous looking ladies near you|Just hookup No relationship|Gorgeous looking ladies close by|Gorgeous looking gals near you|Wonderful chicks need intercourse|Sign up today and obtain pussy tonite|Find beautiful girls|Stunning looking females close by|Sign up instantly to get hook-up tonight|Find horny women|All you want is muschi|That gal lives in your community|Awesome babes demand your bonner|Finest hook-ups island|Fantastic girlfriends demand your cock|Register today to get lust tonite|Meet naughty dates|Actual babes with sex hungers|Fantastic girlfriends demand your penis|Ass lookup location|That babe lives in your own community|This hottie is from your neighborhood|Lust of your hopes in your city|Just hook up Zero relationship|Real babes with dick urges|Sign up instantly and have hookup 2night|This gal is from your own community|Beaver of your desires around you|That lady lives in your own neighborhood|Ass of your desires near you|Sexual activity dating resource|Only hookup Absolutely no relationship|Get ass from the block|Best sex haven|Signup right now and obtain intercourse tonite|Ass of your dreams close to you|View ass from your block|Interact with attractive dates|Lust search home|Join now to get intercourse tonight|View muschi from your block|Lovely looking ladies close to you|That lady lives in your own location|Ass browse source|Find muschi from the block|That babe lives in your area|Register right now and obtain hook up tonite|This girl is from your own location|Sign up instantly and have intercourse tonight|Interact with captivating women|Join right now and find hook up tonite|Signup now and obtain pussy tonight|Find sexy girls|Buying sex is obsolete|Find beaver from the block|Lust of your dreams in your area|Best hookup heaven|No partnership Just pick-up|Gorgeous looking gals close by|Hot chicks demand intercourse|That lady is from your area|Sex search spot|Incredible girls need your cock|Lust browse source|Spending money on sex is obsolete|Incredible babes want your bonner|This hottie lives in your location|Sexual hookup database|Lovely looking femmes close to you|Finest hookup heaven|Join now to get intercourse tonight|Awesome girlfriends want your dong|Beaver of your hopes close to you|No partnership Only hook ups|Actual females with sex hungers|Join now and get intercourse tonight|Fantastic babes want your bonner|Ass search source|Pussy lookup place|View ass from your community|Fantastic chicks want your bonner|Investing in sex is outdated|Finest hook-ups island|Connect with attractive women|Sign up now to get intercourse 2night|That babe is from your community|Join right now and get pussy tonite|Only lust Absolutely no commitments|See horny girls|Real females with cock cravings|Wonderful chicks want love-making|Lovely looking ladies near you|Sexual dating webpage|All you want is ass|Amazing chicks need intercourse|View ass from your city|That gal is from your own community|Signup today and obtain intercourse 2night|Spending money on sex is outdated|See crazy dates|Connect with sexy dates|Cooch of your dreams around you|Amazing babes want sex|Actual chicks with sex desires|That lady is from your own neighborhood|Finest hook ups paradise|Join today and find hook up tonight|Real girls with dick cravings|Lust of your dreams around you|Connect with sexxy girls|Signup right now to get sex tonite|Register today and find sex tonite|No partnership Just hook ups|Meet sexxy singles|Perfect pick-up haven|Fantastic babes demand your dong|Just sex Absolutely no commitments|Beaver research spot|Hot chicks demand sex|Hot girlfriends demand your bonner|View muschi from your location|Actual ladies with cock desires|Amazing babes want sex|Lovely looking ladies in your neighborhood)/i 77 | /Your shipment address is invalid/i 78 | /New bank withdraw/i 79 | /Top rank on Google/i 80 | /Hacker haben Zugang/i 81 | /Attract Potentially Local/i 82 | /injection mould/i 83 | /(Veterans Dental|Your 2021 Transunion|Fannie Mae just|what tomatoes do|Open immediately|Free Dewalt Samples|VPS Hacked|Vivint Home Security)/i 84 | /Canceallation-Notification/i 85 | /1st Page On Google/i 86 | /what are people watching/i 87 | /Log voortaan in met een QR-code/i 88 | /Host Martio/i 89 | /Your account is Hold/i 90 | /Email Removal Notification Alert/i 91 | /Installed a New Security Features/i 92 | /With reference to your cloud storage/i 93 | /clipperpro/i 94 | /TENDER REQUIREMENTS/i 95 | /30 days left in your free trial/i 96 | /REQUIREMENT FOR QUOTATION TO SUPPLY/i 97 | /You Have Pending Emails/i 98 | /Important Fax /i 99 | /(Perhaps you will come into rage|will we schedule a meeting|could you help me|What will you do today|remember the weekend|What are your plans for today|What are your plans for tomorrow|what are you going to do on the weekend|but it was worth it to see your reaction|what a handsome|tomorrow is also possible|If all men were the same as you)/i 100 | /cnc machining/i 101 | /(Free Audit Report|Google Free Report)/i 102 | /Outlook Security Notice/i 103 | /With reference to your cloud storage/i 104 | /Money Transfer Confirmation/i 105 | /you pervert/i 106 | /World Company Register/i 107 | /(Need a website services|Get Guaranteed Traffic for your Website)/i 108 | /(Charming Russian Girls|Partnership Inquiry|Collaboration Inquiry|Business Proposal)/i 109 | -------------------------------------------------------------------------------- /lists/blacklisted-sender-strings.map: -------------------------------------------------------------------------------- 1 | /(jimmyjohnson3a|buymidtext\.online|frontendleads|lrjpto\@tin\.it|clubshatz\.click|bayareavistas\.com|radwebhosting|webbolt\.tech|nakakawachristine02)/i 2 | /(health4apps\.com|nightbuddy\-headlamp|nightbuddy\.headlamp|hashtagpromo|romanelli\.store|klaviyomail|amybrown525|eternals\.cash)/i 3 | /(lesciseauxmagiques|agrifournitures|smaaart\.fr|nowaveofficial|biehler\-equip|secretodigital|dopplermta|redcodenetwork|bet4g\.com)/i 4 | /(solarbrightflood|home-warranty|home\.warranty|home_warranty|dailybriefing\.info|gigmine\.co|mailzila|metaux\-detection|adextim\.live)/i 5 | /(american-home-shield|american_home_shield|american\.home\.shield|asterian\.dev|usamarketingsolution|ranventures\.biz|calvinkohl\.com)/i 6 | /(hemmings555sdd55|benshines\.com|thecheckingaccountzippers|mikepospro|thehubgamingnetwork|promorom\.eu|ofer\.club|own2021\.org)/i 7 | /(howeasyy\.com|rmcybernetics|renderbot|angelocomputers|prevert-bio|bncBC477B4XSMFBBJVV7OGAMGQETHEOKBA|jchri09|meggnoapps|whitedogdesign\.co\.uk)/i 8 | /(beverly\.es|mkt\.serviremseguranca\.pt|bounce\.r\.groupon\.com|email\.louis-herboristerie\.com|newsletter\.franceinter\.fr|soundest\.email|email\.yogasearcher\.com|fitstore\.es|newsletter\.linkware\.it| legal\.libromar\.cl|nl\.themuse\.com|abcled\.ee|email\.julesb\.com|email\.searchman\.com|mails\.antinfortunisticagrilca\.com|comunicacion\.tiendapatriciamiller\.com)/i 9 | /(tirol\.at|editorcontent\.com|outreach\.beststartup\.asia|welpmagazine\.com|threat\.technology|pr\.expert|futurology\.life|estateinnovation\.com|engineeringness\.com|datamagazine\.co\.uk|businessofshopping\.com|beststartup\.us|beststartup\.eu|beststartup\.co\.uk|beststartup\.ca|beststartup\.asia|startupill\.com|df\.media)/i 10 | /(hitmail\.com|vnnic\.vn|mailspons\.com|enterprise\.ca|esbpl\.service|zrenjaninski|send360|britannica|Goodtimez022|stelladowson57)/i 11 | /(auchan\.lu|email\.lf-marketing\.com|alexthomas\.uk|magentoexpert|pestan\.net|platformsyria\.com|gerryweb|lawebdemonterrey)/i 12 | /(westernrate\.com|systemsfocus\.net|dealclosersnow|bounce\.finfitnow\.com|FICCOB\.COM|ultramaxsports|stratagemfinanceinc\.com|thinkdev2020)/i 13 | /(taitanqyun5382|ovillos\.com|onlinemarketing|iphqo\.com|prettyballerinas|deadline\.com|parfumerie-en-ligne|onlyfeds\.cc|zohosurvey)/i 14 | /(mathiasmamsch|mmamsch|deinuniversum|infolifepitt50|footwearnews\.com|ndearenas\.com|promo-optique\.com|webbooster\.info|guideposts\.org|trucco\.es|beverlyeurope|abbacino\.es)/i 15 | /(monarobase|brooksbrothers|dziennikwschodni|sendsay\.ru|labconnections|pixologic|mailing\.wp\.de|mailing\.nrz\.de|mailing\.waz\.de|fluentin3months|nubiles\.net|nubilefilms\.com|anilos\.com)/i 16 | /(ponyfoo\.com|pinlap\.com|the-house\.com|ckespa\.ui\.dev|kieskeurig\.nl|zagg\.com|match\.com|rseq\.org|maxforlive\.com|xmail\.square-enix\.com|insper\.edu\.br|golearnportal|picoworkers|db4free|businessoffers|u-tec\.com|champshow|twotails\.fr|quizlet\.com|iversity\.org|question\.com|windscribe\.com|iiita\.ac\.in|intermedia\.ru|povar\.ru|mail-oyli\.ru|theverge\.com|email-telekom\.de|springernature|latribune\.fr|free-ebooks\.net|oxfordlanes)/i 17 | /(ginalasko|resdindepo|jackdarko|maxxerutt|ennovsoftsolution|proaccudata\.com|wapiti\.digital|globaldatablog\.com|Rudra66|oiloncanvas)/i 18 | /(american-home-warranty|bloglovin\.com|proformaci|befriendyourdoc\.org|lora352pok|constantine\.hadis|constantinehadis|cstoneholdingsllc)/i 19 | /(baroniosunix|ctvnews|perfumesyaromas|rescuetime|betoorourke|sebasscorda|tikamoon|oiloncanvas|boirebon\.fr|donsam\@gmail\.com|faithworld\.tech)/i 20 | /(monotix\.eu|lynmaelucero|slinky\.agency|vegetus\.ua|nguyenhaidang1903|cp20\.com|rebote\.matiz\.cl|sophiafeliciano999|mercadolivre\.com\.br)/i 21 | /(stavrgrad|gottfried\.class|ods2\.net|meetapollo\.io|apollo\.io|bookyaara|mariejeanne|mutual\_of\_omaha\_mortgage|g\-s\.dk|bambooleadgen)/i 22 | /(sangishop\.com|shoppinginibiza|amrfq\.com|nurick\.com|monsterfx|vesicapiscisfootwear|jbdigital|simplywall\.st|d0ntreply\.com)/i 23 | /(americanexpresss\.com|clinkard\.co\.uk|audilo\.com|clockingit\.com|wewe\.global|movistar\.ru\.com|peyrouse\-hair\-shop|erinmorris2414)/i 24 | /(corrie\-maccoll\.com\.de|novayasdescalzo|cube\-protection\.fr|advrider\.com|unige\.it|globaldatamarketing|estore\.nu|mhmehadi\@gmail\.com|dozehost)/i 25 | /(rucolas\.com|projectcamelot\.tv|krishnaamotors\.com|chasebanking\.com|RebeccaHomko9|k48dtvt|caffeine\.tv|getgitguardian\.com)/i 26 | /(blessthestress|clediabete\.net|diet\-health\-food|healthtipproviders|healthyeatingsource|ilowercholesterol|medicalsnewstoday|naturalketo)/i 27 | /(perfectvisionpro|restorebloodsugar|thesecret2health|year2020vision|datastabilitysolutions|infotechpad\.com|infotechprime|solutionbriefings)/i 28 | /(tomandersonconsultant|youritnetworkcompany|nnapolistowtruck|b1\.ms00\.net|PerfectSearch|grow\-business\.co\.uk|wellslife\.com)/i 29 | /(ttag\.ir|gmtls\.nl|bestsoftwaredevelopmentcompany\.com|santosh\.sharma01|lindaking211|shared\.systeme\.io|bounce\.e\.biossance\.com)/i 30 | /(charliewhite3259|mapsregistration\.com)/i 31 | /(localdatemails\.com|midnightwatch\.xyz|ywhaank\.com|webdev\.ro)/i 32 | /(list\.theintercept\.com|wholesaleclothingoutlet|etradesupply\.com|rana7080bd|foxf\.net|nyakunga\.aloyce|eduyear\.com|esbpl\.service|olumide\.onabanjo|yoibu\.com|halovi\.nhan|biztime\.com)/i 33 | /(motor-agro\.com|e\.ikeobi|curbcoventures\.com)/i 34 | /americanhomewarranty/i 35 | /developyourperception\.com/i 36 | /pcdoctorsnet/i 37 | /(internationalfleetsales|etc-meisai\.jp|evenkon\.com)/i 38 | /(freshmail\.mx|halalpointer\.com|chiaraconsiglia\.it|crtv1987|inia\.cl|supercp\.com|sztafeta\.pl|acambaz\.com|beachcoders\.com|tr345t\.name|sacrarium24|platinorum\.com|universalvlr21|warc\.com|agroinformacion\.com|wekinfolk\.com|myraidbox\.de|gruposolder\.com\.mx|birdinflight\.com|lojainterativa\.com|itwilldone\.com|sacrarium24|advancedhosters\.com|heartbest\.co|Samyky588893|grupogen\.com\.br|omeca\.it|praveen\.kumar\.bishnoi\.029|ebooksgo\.org|keroxtv1|nyakunga\.aloyce|sectoresproductivozch\.com|midiasocial\.tech|acrhdvideo|aszakallas|esencialred|motoscroll001|camexstore\.com|borimachann|mjordan\.dev|sivaldoba|performaca\.com|banahosting\.com|cursosrecomendados\.com|mannyfaboya|Mysexlu|ritz888999|clickgrape2020|olumide\.onabanjo|pdn1891|emidanstudio|alextugani|mailtosuperbaker|superbaker\.ru|davezdesignz\.com|hostingspace\.ro|arf-ghassen|halovi\.nhan|chemport\.ru|maestrokbu|cintv024|halovi\.nhan|keroxtv1)/i 39 | /(all4affiliates\.com|main-hosting\.eu|shopon\.hu|communication-fanavenue\.com|loginbangladesh71|lalvolin\.com|endeavor\.org\.br|intermaco\.pt|sgvps\.net|godanserwis\.pl|foodmarket\.com\.ua|herbad\.hu|siteprotect\.com|siteground\.biz|ijert\.org|agnieszkamaciag\.pl|editingcorp\.com|matteogracis\.it|foxf\.net|promorapid\.com|snapigram\.com|worlegram\.com|loginbangladesh71|thanushpen|insper\.edu\.br|militant-blog\.org|buvidi\.com|habbodm01|desarrolladorlibelula|siteground\.eu|meridosti\.com|nabalada\.online|no1friend\.com|kojobrasi|jovanto\.com|iswift\.org|yogesh01bohra|kothabook|dostally\.com|chatri08|royertapiab|cliqafriq\.com|thanushpen|eduyear\.com|gasape\.com|buvidi\.com|bbseguros\.com\.br|wekinfolk\.com|herovired\.net|nakupledky\.cz|appraisercore\.com|independentsentinel\.com)/i 40 | /matthew\.larweh/i 41 | /bellmedia-ctv/i 42 | /yutikanatural\.com/i 43 | /(sentinbox\.com|yourhealthylife\.io|biotrustnews\.com|thegreatcourses\.com|kalymnas\.work)/i 44 | /deli-hemp-news\.com/i 45 | /revisilpro\.us/i 46 | /xtremesuccesstechnology/i 47 | /collectiveweb/i 48 | /espmaillist/i 49 | /anabolizzant/i 50 | /useofsteroid/i 51 | /pmstps/i 52 | /constantinlupescu/i 53 | /losddmail/i 54 | /(alumaic|alumal)/i 55 | /covoco/i 56 | /starsupial/i 57 | /searchranknow/i 58 | /compratest/i 59 | /knitinfotech/i 60 | /megabytenow/i 61 | /mob-dom-up/i 62 | /jj361\.top/i 63 | /american-merchant-services\.com/i 64 | /intuitsolutions\.com/i 65 | /feetshoesbolivia/i 66 | /fullspectrum\.com/i 67 | /salesflowinc/i 68 | /thelegalusa/i 69 | /shower-cubicles/i 70 | /8020prosperity/i 71 | /pot-profiteer\.com/i 72 | /investingdomination\.com/i 73 | /dayonwallstreet\.com/i 74 | /365trader\.co/i 75 | /traderlife\.org/i 76 | /yourinvestments\.co/i 77 | /(home113\.co|home114\.co|home115\.co|home05\.co)/i 78 | /ultahost/i 79 | /ssewv\.com/i 80 | /deltrolcorp/i 81 | /(intuit\.notification\.com|intuitsecurity)/i 82 | /partikraft\.com/i 83 | /masterost/i 84 | /seoppcworld/i 85 | /charaicter\.work/i 86 | /ihtgr\.com/i 87 | /villetee\.com/i 88 | /l2k2\.org/i 89 | /8pay\.network/i 90 | /intuitverify\.com/i 91 | /bigleaguepolitics/i 92 | /marketingsconsulting\.com/i 93 | /anyedm\.com/i 94 | /partikraft\.com/i 95 | /khuyendoc/i 96 | /i-ssd\.ru/i 97 | /gunrunnerthreat\.top/i 98 | /(weige1\.com|weige2\.com|weige3\.com|weige4\.com|weige5\.com)/i 99 | /(aevp\.net|barcodetrashcan\.tech|bestweboffers\.online|cityhunter\.tech|coopersolutions\.online|darkgrace\.online|darkorchidout\.online|digihelp\.online|feelbest\.online|gaptech\.online|garbagepin\.tech|gerilonse-hopeu\.com\.se|getgeorge\.online|getstarwarsclub\.online|globalneil\.online|grablne\.online|happybeam\.tech|hcjbuj\.net|hostmail\.online|ironfest\.online|ironhousecrossfit\.online|jacksparrow\.website|legoelektronik\.se|monstercompany\.online|msrq\.com|murgistudio\.online|prosleague\.online|realpepsi\.online|rma\.uk\.com|taillagakerhkna\.online|takshatikaaaj\.com|technodots\.online|teknotherm\.no|thekinkysecrets\.com|topendcloud\.online|topmasala\.online|ufokate\.online|webmurgi\.online|yacuboo\.online|yourbusinessgroup\.online|yourecotree\.online|yourfreewebranking\.online|yoursantee\.online)/i 100 | /yudiip/i 101 | /vinratechdigitalsolutions/i 102 | /sonntag-consulting\.com/i 103 | /lunahamblinexpert/i 104 | /(addictedspread\.cam|gradualfailure\.cam|opposefantasy\.cam|nailtalk\.cam|clockfar\.cam|recruitstart|thinkdevstudios|groundprove\.cam)/i 105 | /(codingbackyard|articlesonrelationships|stategenie\.com)/i 106 | /(bionentum\.today|wrennes\.today)/i 107 | /smmgiants/i 108 | /bloggersconnected/i 109 | /pc-cloud\.org/i 110 | /richa\.businessexpert/i 111 | /mentiondressing\.com/i 112 | /jdle25/i 113 | /personmuggy/i 114 | /thegloballearning/i 115 | /realdebtadvise/i 116 | /(sixth-degree|lifestandard\.net)/i 117 | /citymall\.co\.tz/i 118 | /(forwinningnow|easycanvasprints|chooseyourmortgage)/i 119 | /ticantsots/i 120 | /customhkaman/i 121 | /potaari\.cam/i 122 | /lastminuteloan/i 123 | /dissidentnetwork\.com/i 124 | /eprofitlabs/i 125 | /fix-domain/i 126 | /insignia\.co\.tz/i 127 | /opm01\.com/i 128 | /chinesedomain/i 129 | /syedabid\.pvtltdd/i 130 | /leesutherland\.com/i 131 | /sendblaster/i 132 | /786xk\.com/i 133 | /hostmartio\.com/i 134 | /linodecom\.com/i 135 | /digitalbizland/i 136 | /reeleffect\.co\.uk/i 137 | /statesidesmart/i 138 | /sendmailmaster/i 139 | /sheertex\.com\.au/i 140 | /(mixreports\.com|directlinerewards)/i 141 | /striker\.ottawa\.on\.ca/i 142 | /plasticpack\.top/i 143 | /bestsecret\.com/i 144 | /beon1st/i 145 | /lethibinh189/i 146 | /consultant\.qatar22/i 147 | /rosanna\.tipsd/i 148 | /cabanga\.com/i 149 | /testsendblaster/i 150 | /askcac\.com/i 151 | /sasolsupplys\.com/i 152 | /miraclecartes/i 153 | /(fitsaudavel|vipcomunica|maisaudebr)/i 154 | /creditural\.com/i 155 | /robet_27/i 156 | /crispwp\.com/i 157 | /demiurgedesigns\.com/i 158 | /toolsbox\.club/i 159 | /bestseosolution/i 160 | /sparkglobal\.io/i 161 | /polishpotteryhouse\.com/i 162 | /paragfran\.cam/i 163 | /psdbrasil\.com\.br/i 164 | /waltonalice951/i 165 | /sebpo\.com/i 166 | /dellcanom\.com/i 167 | /(newsingletip|getloveconnection|equalmate|imadultxxx|zebra\.lt|caringsingles)/i 168 | /phpmatrix/i 169 | /rabiebouhouti1996/i 170 | /(activecampaign\.pro|autobodymarketingexpert\.com|binnovatedigital\.net|bndemail\.xyz|callbmc\.com|candysignals\.co|citycoupons\.ca|cloothy\.com|co2-boerse\.ch|contact\.amairendigital\.com|dropflo\.info|email\.microguard\.com\.br|essentialblockmail\.com|getgreenlightcommunications\.com|getsmartwriter\.co|haidiswiss\.ch|healthiersimply\.com|hockeystack\.com|leadmate\.online|levelupreality\.ca|locallivechat\.net|megaschooling\.com|newsletter\.dewsofhope\.ca|nws\.mediadoer\.se|ofrp\.mailswp\.com|ogmapartners\.com|punch\.cool|puzzleunlimited\.com|raised\.studio|recruiterly\.com|remoteconnections\.co\.in|reviewidget\.com|sixxpaxx\.de|sphere\.com\.ai|surepass\.io|tezisto\.com|thedaryls\.com|thosewhodream\.co|toplinemediagroup\.net|treeala\.com|trisolaris\.world|trygr\.io|tunereel\.com|upliftbeyondblog\.com|verificadordehospedes\.com|widgetforreviews\.com|yourvapartner\.net)/i 171 | /bidsestimating/i 172 | /lalamove/i 173 | /fairwood\.com\.hk/i 174 | /cztrade\.space/i 175 | /fuse\.net/i 176 | /italiaspezie\.com/i 177 | /robot-polska\.pl/i 178 | /(Vivekbhatt97|datasalesprospect\.com)/i 179 | /(termet\.fr|amocrmmail\.com|metagrowth\.ventures)/i 180 | /(success-toolkit\.com|xtreme-tech\.co|xtrememarketing\.io)/i 181 | /(vtexperts\.com|jaydenwebsitedesigner|dikatcdmx)/i 182 | /(pdavid0|dxrk_694202|bytefend|guaguagua123)/i 183 | /(mascotaplanet\.com|hairshop\.lu|zmescience\.com|streetammo\.dk|ctmirror\.org|boomerang\.family13|philantologie\.fr|carillohome\.com|cbsendmail\.com|news\.maison-du-savon-de-marseille\.fr|actualidadliteratura\.com|carredeboeuf\.com|chiaracolombini\.com|chaussureslepacha\.ca|eqwholesale\.co\.uk|cimalp\.com|puravidaclothes\.com|farmaciaimperial\.es|salesianos\.edu|nin-nin\.fr|jolimoi\.com|rostrumlegal\.com|lastijerasmagicas\.com|fashionmafia\.sk|justineclenquet\.com|kiosclub\.com|bicimarket\.com|prospektde\.com|fancyfashion\.pl|lesciseauxmagiques\.fr|cielitocolombia\.co)/i 184 | /(playskateshop\.com|mieux-voir\.fr|ewine\.cl|puravidaclothes\.com|alimentatorishop\.com|salesianos\.edu|fashionmafia\.sk|justineclenquet\.com|printu\.co|particolarifranchising\.com|fancyfashion\.pl|particolarifranchising\.com)/i 185 | /(therealnews\.com|acheter-rubio\.fr|cucinaevolution\.it|antoineetlili\.com|bieres\.com|imakr\.com|puyricard\.fr|lebeaumasque\.fr|spice-italy\.com|cimalp\.com|aurubis\.ch|ubitennis\.com|rs-barcelona\.com|rumblebikes\.com|aime\.co)/i 186 | /(beauxarts\.fr|louisherboristerie|printulogo\.com|livelyluxx\.nl|news\.laventananatural\.com|particolarifranchising\.com|audley\.es|lamallorquina\.es|tocampaigns\.com|armoniabio\.com)/i 187 | /(103-50-161-171\.cprapid\.com|14950\.bigscoots-wpo\.com|1orijin\.com|2awomansheart\.org|3dxr\.co\.uk|42195\.by|536306\.cloudwaysapps\.com|66-226-74-96\.phx\.dedicated\.codero\.com|80scasualclassics\.co\.uk|90ie\.ru|a2plcpnl0650\.prod\.iad2\.secureserver\.net|a2plcpnl0660\.prod\.iad2\.secureserver\.net|a2plcpnl0837\.prod\.iad2\.secureserver\.net|a2plvcpnl385247\.prod\.iad2\.secureserver\.net|aa-team\.com|accentclothing\.com|activeweargroup\.com|adgblog\.it|adultgamescollector\.com|afroid\.net|agrifarming\.in|alborz\.pws-dns\.net|americafirstpatriot\.org|amsr100\.websitehostserver\.net|antiguafreespeech\.com|appsolufit\.com|aqueenofmagic\.com|archee\.qc\.ca|arquilog\.com\.br|ashfootwear\.co\.uk|astrojyoti\.com|atraves-editora\.com|avant-ski\.de|b819\.gconex\.com|bahraincinema\.com|ballyclarelimited\.com|bandhob\.com|bandhu\.icu|bansinthai\.fr|bastidoresdatv\.com\.br|b\.atomicsites\.net|bauorden\.eu|bekhoun\.com|beloyar\.net|bentleys-banchory\.co\.uk|bestriders\.com\.br|besttohave\.com|bewusst\.tv|bigastyl\.pl|bitrix372\.timeweb\.ru|bk\.ru|black-by-design\.co\.uk|blackwoodproductions\.com|blastfmsocial\.media|bloha\.info|bobblume\.de|bodandted\.co\.uk|bond\.herosite\.pro|box2005\.bluehost\.com|box2080\.bluehost\.com|box2292\.bluehost\.com|box2325\.bluehost\.com|box5116\.bluehost\.com|box5232\.bluehost\.com|box5264\.bluehost\.com|box5698\.bluehost\.com|boxers-and-briefs\.net|br256\.hostgator\.com\.br|br574\.hostgator\.com\.br|br64\.hostgator\.com\.br|bracz\.edu\.pl|bue\.edu\.eg|business30\.web-hosting\.com|business-swiss\.ch|bustedwalletcom\.kinstamailservice\.com|buzzmytech\.com|cahayapengharapan\.org|cakecraftcompany\.com|camelbak\.com\.de|camelbak\.co\.uk|camelbak-europe\.com|campingandcaravandirect\.co\.uk|canterburynz\.com\.au|cardiologynownews\.org|carmelitaniscalzi\.com|cegst\.com|cepsos\.com|cfrcalatori\.ro|chclt\.net|chef\.diskstation\.eu|chvl-hlx-cfp1\.localdomain|cielo\.com|cife-fuenlabrada\.es|circe\.localdomain|civilkontroll\.com|clanbay\.com|clayton\.dreamhost\.com|clivio\.pl|cloud\.foodfromportugal\.com|cluesfashion\.co\.uk|colegioingenieros\.org\.ar|competitions\.archi|completesafetysupplies\.co\.uk|comprancha\.com|connelly\.lndo\.site|consultua\.com|cooshti\.com|cosmopharm\.eu|cotswoldcountry\.co\.uk|cp26\.g-dns\.com|cp3\.hosterdam\.com|cp593\.webempresa\.eu|cpanel19\.d\.fozzy\.com|cpanel4\.vhosting-it\.com|cpanel\.downloadsmiles\.com|cplights\.com|craftycrocodiles\.co\.uk|creasedcards\.com|crs4\.it|cultfurniture\.com|cultfurniture\.de|curia\.op\.org|curiosityinteriors\.co\.uk|cvjm-herne\.de|cyberon\.home\.pl|daaam\.info|dailygrail\.com|danielstores\.co\.uk|dates\.7ho\.st|david-qian\.com|debka\.com|dedi-3714877\.reinnocomunicacao\.com\.br|dedicated\.sysarabs-server\.com|dedivirt304\.your-server\.de|dena\.r1host\.com|dermainzer\.net|devaka\.ru|dgfk\.net|diario-octubre\.com|digital-nirvana\.com|displaysense\.co\.uk|dissidentvoice\.org|don1n2004\.servwingu\.mx|doppler\.at|dp-28d6e377f8\.dreamhostps\.com|dprhcp204\.doteasy\.com|dsmedical\.co\.uk|dyne\.org|eaobservatory\.org|earlyyearsresources\.co\.uk|easyengine\.io|easyres-project\.eu|easyservice\.gr|ecbiz171\.inmotionhosting\.com|editionsamsterdam\.fr|educationmalaysia\.gov\.my|edu\.mos\.ru|eglise\.sonnerat\.fr|eg-webst-05\.localdomain|ekonty\.com|elcinedeloqueyotediga\.net|electrictobacconist\.co\.uk|electronics\.ca|elista\.footholds\.net|ellam\.net|elmhurstinn\.com|em1102\.printview\.in|em1365\.swinternalmedicine\.com|em2359\.entej\.com|em3828\.koinoniaorthodoxias\.org|em512\.novapago\.com|em5591\.theatrenerds\.com|em9226\.mimea\.co|em9897\.hydegram\.com|em9985\.finelittleday\.com|email\.julesb\.com|e\.nocroom\.com|epodravina\.hr|epsilon1\.beget\.ru|equipashop\.com|equipashop\.ie|erotismosexual\.com|eu\.hosting-webspace\.io|eurocom-info\.de|europaincanto\.com|europskenoviny\.sk|evangelici\.net|evil-genius\.us|eye-square\.com|fabricake\.co\.uk|fantasyfootball247\.co\.uk|fanypage\.com|fasnacht\.ch|federicogardenghi\.com|fh-joanneum\.at|first4magnets\.com|fisicaquantistica\.it|fkvojvodina\.rs|fleeped\.com|foehnrecords\.com|forju\.tk|fossils-uk\.com|foxylocks\.com|funkifabrics\.co\.uk|furnitureinstore\.co\.uk|fusionliving\.co\.uk|gadwoman\.com|gaiaose\.com|galeriakosice\.sk|gamingaccess\.intel\.com|ganggoo\.com|garden-camping\.com|garden-shopping\.co\.uk|gasthaus-wild\.at|gator3092\.hostgator\.com|gator3095\.hostgator\.com|gator3181\.hostgator\.com|gator3277\.hostgator\.com|gator3278\.hostgator\.com|gator4170\.hostgator\.com|geniessertouren\.org|geocaching-franken\.de|germanische-heilkunde\.at|gg4home\.com|ghiamenswear\.com|giaophanbaria\.org|giro\.co\.uk|globalizationpartners\.com|glutenvrijkookhoekje\.nl|gobiernolocal\.es|gola\.co\.uk|golausa\.com|googleonline\.com|gorillaworkwear\.co\.uk|greavessports\.com|groomers-online\.com|gross\.snositesaso2\.com|guenstige-webseite-erstellen-lassen\.de|guezouri\.org|gurumakeupemporium\.com|gwegner\.de|gwhs-03\.dict\.gov\.ph|gwleader\.co\.uk|hadesnyc\.com|hadis\.uk|haipo\.co\.il|handcraft-studio\.com|hayatbilgileri\.net|headsem\.com|healthoxygen\.com|hillshornets\.com\.au|historiadelnuevomundo\.com|hoerspielprojekt\.de|hogl\.co\.uk|hoid\.co|homeandgardenextras\.com|home-brew-online\.co\.uk|homesdirect365\.co\.uk|honeyslingerieboutique\.com|hortanoticias\.es|host1\.simcohosts\.com|host2074\.hostmonster\.com|host5100\.hostmonster\.com|host\.allclienthosting\.com|host\.awa-con\.com|hosting160410\.ae81c\.netcup\.net|host\.larazon\.co|host\.turbodispute\.com|hotdiamonds\.com|hotelreconquista\.es|hotspur1364\.co\.uk|houseofslippers\.co\.uk|icc\.ferme-icc\.com|iconfronti\.it|igero\.com|ihreservicenummer\.de|ildiariodellavoro\.it|imaginaction\.com|indiasocialbook\.com|inmegh\.com|insper\.edu\.br|inta-audio\.com|intercanada\.ru|inventiva\.co\.in|ip-172-31-21-250\.eu-west-1\.compute\.internal|ip-172-31-30-209\.ap-south-1\.compute\.internal|ip-72-167-39-90\.ip\.secureserver\.net|ir1\.aliwebhosting\.com|ishq\.de|islametinfo\.fr|isw\.org\.pl|italtel\.com|itsgoingdown\.org|izumisushi\.eu|jackstonehouse\.com|jaqqed\.com|jayley\.com|jillaactive\.com|jobcallme\.com|jumbliesmodels\.com|just2026\.justhost\.com|jwsuperthemes\.com|katohika\.gr|kca\.ac\.ke|kontras\.org|kosherwine\.co\.uk|kracken\.com\.mx|krishnasarees\.com|krisp\.co\.uk|kt26-r35\.mojohost\.eu|kwave\.ai|lakesdistillery\.com|latina-press\.com|laughbeijing\.com|laweekly\.com|lecames\.org|lederwaren\.nl|ledsupplyandfit\.co\.uk|lelibrepenseur\.org|lendenclub\.com|lenottidimilano\.com|lesahel\.org|lesla\.com|lesmoutonsenrages\.fr|lhcp1118\.webapps\.net|lhcp2035\.webapps\.net|libreriadistoria\.it|lichtblick-foto\.de|lin43\.mojsite\.com|linuxtemp\.iranhost\.com|livelygram\.com|liwastores\.com|localhost\.com|localhost\.localdomain|logicno\.com|lona\.vn|lonly\.club|loofes-clothing\.com|lotusshoes\.co\.uk|lowryjewellers\.com|lrtimelapse\.com|ls24\.server\.ly|lsh1005\.lsh\.siteprotect\.com|lunarshoesonline\.co\.uk|lusso-life\.co\.uk|lussostone\.com|lvps92-51-131-100\.dedicated\.hosteurope\.de|lzb\.lt|machinimatrix\.org|mahirlondon\.com|mahoor\.r1host\.com|mailer\.dellentconsulting\.com|mail\.grad-petrov\.ru|mail\.putovanja\.info|mail\.s070070\.furanet\.com|mail\.talkingtrendo\.com|mamboserver\.com|maquillage\.com|margit\.cz|marine\.dreamhost\.com|master-forum\.ru|matiere-grise\.fr|mazefashion\.co\.uk|m\.blindwave\.net|mcu\.com\.br|mdb-klaus-ernst\.de|medguru\.lt|medijuana\.eu|med\.lu\.se|melaninbook\.com|mg\.fintechtime\.com|mg\.heruliastockerau\.at|mg\.meetyou\.social|mgorod\.kz|michelehope\.com|miguelgarciavega\.com|milano-pro-sport\.com|mim\.self-assurance\.fr|minregion\.gov\.ua|missfoxy\.co\.uk|ml\.qualenergia\.it|mms\.cz|mobilealgerie\.com|modainpelle\.com|mousoulis\.gr|mozimo\.co\.uk|mr-shoes\.co\.uk|msh\.de|mumblit\.com|munirkhanani\.com|mutoh\.com|myfacemsg\.com|myfanmale\.com|my-friend\.me|myusemuse\.com|myvybz\.com|nanobiotix\.com|nativespecial\.com|natterjacks\.com|naturesaid\.co\.uk|nckcn\.com|netcurtainsdirect\.com|netsolhost\.com|newhost\.albaraka-bank\.org|new-kent\.dreamhost\.com|news\.gazetaesportiva\.com|newsletters\.visualsoft\.co\.uk|nidavellir\.from\.sh|nikosxeiladakis\.gr|nlserver\.biz-tutorial\.com|nobodysplace\.nl|noreply\.vhearts\.net|norn\.from\.sh|noticiasdiaadia\.com|novus\.one|ns1004834\.ip-92-204-133\.us|ns1\.yenimakale\.com|ns3159855\.ip-51-91-131\.eu|ns575579\.ip-54-39-243\.net|nsz\.hr|obee\.info|obzorkuhni\.ru|ocbutcher\.co\.uk|offgridsurvival\.com|omitro\.com|on1shelf\.com|onlineshoe\.co\.uk|onlyhome\.co\.uk|onudesignerwear\.com|opus02\.register\.it|orc\.boxsecured\.com|original-antike-moebel\.de|osim\.ro|otsglobal\.org|otterburnmill\.co\.uk|oursecretlifestyle\.com|outsidebcn\.com|p3plcpnl0870\.prod\.phx3\.secureserver\.net|p3plvcpnl454964\.prod\.phx3\.secureserver\.net|p3\.server\.hostpoint\.ch|pablitoescort\.info|packagingenvironmental\.co\.uk|pajarorojo\.com\.ar|panathinaikoskosmos\.com|pandnhomewares\.com|paperpage\.in|papersera\.net|parkinsonslifestyle\.com|parrotsays\.com|parssood\.com|pasgr\.org|passion-astrologue\.com|paymon\.fr|payntr\.com|pc4\.muksolutions\.com|peremeny\.ru|petitemafalda\.com|piarim\.biz|pickandprofit\.com|pisf\.pl|pm-bounces\.brodyneuenschwander\.com|pm-bounces\.musicplay\.ca|podelki-doma\.ru|poreskaupravars\.org|portal\.museums\.or\.ke|post\.webmailer\.de|premium49\.web-hosting\.com|prikol\.ru|promostars\.pl|proriderleisure\.com|proridermobility\.com|ps631735\.dreamhostps\.com|psrp\.grupoemprega\.com\.br|punkfootball\.com|purewell\.co\.uk|qtolk\.com|qtorb\.com|raazs\.com|radioiskatel\.ru|radionewsletter\.pl|ragnaroek-festival\.com|rama\.com\.ua|rbtwelve\.com|rcentral500\.webserversystems\.com|readoptics\.com|readytec\.it|rehabilitace\.info|rentjewels\.com|rentmydate\.com|repertoirefashion\.co\.uk|res259\.servconfig\.com|return-path\.pirateship\.com|revolvermenswear\.co\.uk|ringtons\.co\.uk|rixo\.o2switch\.net|roadrunner-card\.com|rocket-cp3\.hostsila\.org|rockharz\.com|rogaska-resort\.com|roxycast\.com|s076\.onlinenow\.com\.ar|s10\.wpxhosting\.com|s1\.11dds\.ro|s111\.linuxpl\.com|s123\.cyber-folks\.pl|s125\.cyber-folks\.pl|s131\.syd2\.hostingplatform\.net\.au|s13\.wpxhosting\.com|s146\.cyber-folks\.pl|s166-62-84-170\.secureserver\.net|s192-169-216-144\.secureserver\.net|s2\.softkade\.com|s636831\.dedi\.leaseweb\.net|s903\.nty\.uy|sarahlayton\.co\.uk|sariska\.co\.uk|scsr\.nevada\.edu|sea-business-14\.hostwindsdns\.com|sellbroke\.com|sentieo\.com|serenitystore\.com|serv1knit\.knitulator\.com|server1\.6inch\.net|server1\.avanzaeninternet\.com|server1\.droosonline\.com|server1\.ps4iso\.net|server1\.sovereigngracesingles\.com|server260\.web-hosting\.com|server2\.server-sz\.com|server57ir\.irwebspace\.com|server63r\.irwebspace\.com|server68fi\.axspace\.com|server\.cameroonintelligencereport\.com|server\.germanhost\.net|server\.incestvidz\.com|server\.iq-hosting\.net|server\.kitsguru\.com|server\.silveristhenew\.com|server\.strathmore\.edu|server\.suatmm\.com|server\.thirdmonk\.net|server\.zakibook\.com|serv-wp\.aftoo\.com|sezime\.club|sfm\.scot|sg3plcpnl0197\.prod\.sin3\.secureserver\.net|shockdom\.com|shop-wonderland\.com|shuperb\.co\.uk|sith\.hostdroid\.com\.br|skymaster\.dreamhost\.com|slavka\.optic\.net|slutever\.kinstamailservice\.com|smartstartinc\.com|sociedadeonline\.com|sofasbysaxon\.com|solidarita\.net|something-for-me\.co\.uk|sriramanamaharshi\.org|srv01\.aloojamiento\.com|srv434\.main-hosting\.eu|srv472\.main-hosting\.eu|srv480\.main-hosting\.eu|srv7\.hosting99\.eu|srv\.bestconstruct\.ro|srv\.jgandhi\.com|srv\.luxlounge\.org|srv\.portaldoaz\.net|ssc\.gov\.jo|stabletransit\.com|steeldeck\.com|sterlingshelter\.org|stonemaiergames\.com|stuartslondon\.com|studentprojectguide\.com|studio32\.cz|studiorighetti\.it|stylerave\.com|sue-parkinson\.com|sugarshack\.co\.uk|summitconnect\.bi|sun-hands\.ru|sv69\.ifastnet\.com|swinnertoncycles\.co\.uk|sxb1plzcpnl486888\.prod\.sxb1\.secureserver\.net|syd1\.dejanseo\.andyt\.co|synergycosmetic\.cz|taetigkeitswechsel\.de|talawas\.org|tamrino\.ir|tanake\.pl|taracittamani\.it|teinar\.from\.sh|telebari\.it|ten\.media|tere\.ozguryazilim\.com\.tr|test3\.solutionnews\.it|thebasketcompany\.com|the-beadshop\.co\.uk|thechildrensfurniturecompany\.com|thedailychrenk\.com|theedge-sports\.com|thehealthbridges\.com|thehomelightingcentre\.co\.uk|themidfield\.com|theshirtstore\.co\.uk|thewhiskyworld\.com|ticwatches\.co\.uk|tifosi-optics\.co\.uk|tightsandmore\.com|timelesschesterfields\.com|tir\.serverenv\.com|toanksjm\.org|todays-woman\.net|tradesuppliesonline\.com|tragicomico\.it|tripodart\.net|triyoga-akademie\.de|tshirtgrill\.com|tuchel\.com|tukshoes\.co\.uk|twitback\.com|tygerspace\.com|tylkopilka\.pl|uader\.edu\.ar|ucavila\.es|uft\.me|uisu\.ac\.id|unionjackwear\.co\.uk|unisson-online\.com|upr\.fr|urbaboxx\.co\.uk|urbansurfer\.co\.uk|usasports\.co\.uk|uvs\.edu\.sn|vapekit\.co\.uk|vectraklub\.pl|veggieboogie\.com|veilcovercream\.com|vh240\.timeweb\.ru|vibus\.in|vip\.net|virtualbusinessgrid\.org|vivienofholloway\.com|vl20961\.dns-privadas\.es|vm-9dcc02c5\.netangels\.ru|vmhsdcos01\.proecuador\.gob\.ec|voltbkk\.com|voxvix\.com|vps1282|vps213408\.ovh\.net|vps-28655\.vps-default-host\.net|vps44246\.inmotionhosting\.com|vps65793\.inmotionhosting\.com|vps\.automaticgatesolutions\.com\.au|vps-cinephiliabeyond2\.s4w\.com\.hr|vps-glas-koncila\.s4w\.com\.hr|vps\.heromachine\.com|vrfocus\.com|vsetip\.top|wallchimp\.co\.uk|wdmusic\.co\.uk|wds\.de|weare-aka\.com|web108\.easyname\.com|web348\.c16\.webspace-verkauf\.de|web4\.colnodo\.apc\.org|webhosting\.be|web\.sbipensionfunds\.com|webxc20s05\.ad\.aruba\.it|webxc215s02\.ad\.aruba\.it|webxc236s01\.ad\.aruba\.it|webxc286s06\.ad\.aruba\.it|webxc305s01\.ad\.aruba\.it|webxc315s01\.ad\.aruba\.it|webxc37s01\.ad\.aruba\.it|welovelinen\.com|wesleydosanjos\.com|whiskykingdom\.com|whiteribbonboutique\.co\.uk|whwatts\.co\.uk|windkraft-journal\.de|witcheslore\.com|wonderbra\.co\.uk|wonkerme\.ml|wp1021\.hostgator\.com|wpdatacenter\.com|wps25-pri\.phpnet\.org|www2750\.sakura\.ne\.jp|www68\.world4you\.com|www\.ber-ticket\.de|www\.leipzig-leben\.de|x\.fw-mail\.com|xpertyst\.com|x-sensors\.ch|yaaqsa\.com|youngideasfashion\.com|yourdogsclub\.co\.uk|yourhostingaccount\.com|zagros\.pws-dns\.net|zaychat\.co|zimowynarodowy\.pl|zintv\.org|zo-oikologika\.gr|zrenjaninski\.com)/i 188 | /(6g6s\.xyz|anticheat\.pizza|bloxcrusher\.com|bobux\.life|bytefend\.com|complexity\.shop|dark-hub\.xyz|defnotaniplogger\.com|demonsmm\.net|dorkgg\.club|doxbin\.org|exodusalts\.com|funnyblocks\.xyz|funnyscripts\.xyz|indigosb\.xyz|jokerhub\.xyz|lby\.rocks|lhcdn\.cloud|littleyoder\.dev|malwareforums\.com|mmdevservices\.xyz|rblx-tools\.com|script-ware\.com|sirmemehub\.com|spdmteam\.com|stonkinu\.com|swevikings\.club|synapseblue\.xyz|tweakcentral\.net|verifying\.website|vpsnet\.cloud|vvsaio\.com|1000000dollarpaintings\.com|sonderborgby\.com)/i 189 | /(1000podlog\.pl|1001coffres\.com|1001maquettes\.fr|100x100fitness\.com|101-multimedia\.com|103-50-161-171\.cprapid\.com|13vip\.pl|14950\.bigscoots-wpo\.com|1mnetwork\.com|1orijin\.com|2alianzas\.es|2awomansheart\.org|2wayradionline\.co\.uk|3abn\.org|3d-services\.eu|3dtech\.com\.tr|43service\.com|4elementos\.es|4x4woman\.com|536306\.cloudwaysapps\.com|5tobuy\.com|66-226-74-96\.phx\.dedicated\.codero\.com|7starsq8\.com|a2plcpnl0412\.prod\.iad2\.secureserver\.net|a2plcpnl0650\.prod\.iad2\.secureserver\.net|a2plcpnl0660\.prod\.iad2\.secureserver\.net|a2plcpnl0837\.prod\.iad2\.secureserver\.net|a2plvcpnl385247\.prod\.iad2\.secureserver\.net|aabc\.dk|aa-team\.com|abarcashoes\.com|abasist\.com|abc-karry\.fi|abcled\.ee|abctoz\.co\.za|abelsonsa\.com\.ar|abrahamnaturlevek\.hu|acana\.com\.pl|access360\.africa|access-medic\.com|accessoires4x4-store\.com|account\.dakonda\.com|aceiteolivam\.com|aceitepatucoche\.com|achile\.com|acierdistribution\.com|acquerello\.it|acquolinafoodbox\.com|acrochat\.com|acsreuse\.es|actimac\.fr|actuelb\.com|addasatkhira\.xyz|adgblog\.it|adma\.lt|adnparfums\.fr|adultgamescollector\.com|adultlove\.in|adultsextoyindia\.com|adultvibes\.in|adzaagt\.nl|afdf\.fr|affoxy\.com|afrangwood\.com|africaimagery\.eu|afroid\.net|agostinimandello\.com|agrifarming\.in|agrifournitures\.fr|agrigardenstore\.com|agrinoble\.com|agroan\.es|agromax\.ro|agropataki\.ro|agropex\.es|agyflex\.fr|ahorraclima\.es|ahorroimprimiendo\.com|ailnoir-billom\.fr|aim\.com\.ua|airefriocalor\.es|akmerkeztobacco\.com|akuna\.es|alaena-cosmetique\.com|alarmepenet\.fr|alazzam\.com|albayyinah\.fr|alberti\.it|alborz\.pws-dns\.net|alchemygroup\.com|aleekeuniformes\.com|alelua\.com|alexgyver\.ru|alfareriaduero\.es|alganatura\.it|alibaksh\.com|alimentatorishop\.com|alinderi\.com\.tr|allnewrock\.com|almacendemascotas\.cl|almaenpena\.es|alpinaintimo\.it|alponabytek\.cz|alsem\.nl|altermove-marketing\.com|altrostile\.it|altruu\.com|alux\.pl|amareparfum\.com\.tr|amarillasvirtual\.com|amazonillo\.com|ameeni\.com|americanadebaterias\.com|amourduvin\.com|amperoff\.by|amsr100\.websitehostserver\.net|anandlee\.com|andcamicie\.shop|angelocomputers\.nl|animalshop\.ma|anime-on-line\.com|annelisemichelson\.com|annetspoppenmode\.nl|antaresartsperu\.com|antisocialsocialclub\.it|appsolufit\.com|a-propos\.be|aquariumshop\.gr|aquarius-prolife\.com|aquazon\.es|aqueenofmagic\.com|arbuuz\.pl|archee\.qc\.ca|ardoiz\.fr|areapadel\.com|armoniabio\.com|arp-czesci\.pl|arquilog\.com\.br|arredailtuobagno\.it|arredobagnoitaliano\.com|arrigonisrl\.com|arrow1851\.fr|artepirlanta\.com|artesanialatina\.net|artgaudi\.com|artimestieri\.com|arvalargenti\.com|asdecarreaux\.com|aspiradorarobot\.es|astrogrowshop\.cl|astrojyoti\.com|ataf\.pl|atavik\.fr|atelierboivin\.com|ateliers-marinette\.fr|atraves-editora\.com|atrium-concept\.fr|attmail\.pl|audioforum\.eu|audley\.es|audreylab\.com|aurubis\.ch|autoricambirao\.it|autoserviciomotorista\.com|auvillage\.fr|avandeza\.com|avant-ski\.de|awak-studio\.fr|axessorize\.com|axrotoosh\.com|aybshop\.com|azaqua\.nl|azialo\.com|azulisimo\.com|b2b-negocios\.com|b2b-schilder\.de|b819\.gconex\.com|baat\.online|babasucco\.com|babusciogioielli\.it|babyswagstore\.fr|back2car\.Fr|badkamermateriaal\.nl|baffoitalia\.com|bagsandmore\.si|bahraincinema\.com|balanzasyregistradoras\.com|balkanb\.com|balt\.net|balzatex\.com|bamboli\.pl|banda\.shop|bandhob\.com|bandhu\.icu|bankoffootball\.com|bastidoresdatv\.com\.br|b\.atomicsites\.net|batteryset\.com|bauorden\.eu|bazin-moto-enduro\.fr|beadsland\.co\.nz|beautybox\.ro|beautystock\.es|beautystore\.tn|bedland\.es|beehivemonitoring\.com|beerbank\.mx|beisat\.com|bekhoun\.com|belletica\.com|belltec\.com\.co|beloyar\.net|belstone\.at|belveo\.com|benoit-constant\.fr|berkey-france-millenium\.fr|bermud\.az|bestmobilier\.com|bestoftv\.fr|bestriders\.com\.br|bestteachersupply\.com|bestvibe\.com|betsiplateria\.es|betterstyle\.pl|beverly\.es|bewusst\.tv|bexbeauty\.com|bezpieczenstwo-bhp\.pl|bianchistore\.cl|biba\.es|bicimar\.cl|bicimarket\.com|bidoluhobi\.com|bieres\.com|bigastyl\.pl|bighive\.one|bigos\.cl|bigserver\.host\.com\.pk|bijoux-totem\.fr|bikateliershop\.com|bikerepublic\.be|bikestore\.one|bikuva\.lt|bilardshop\.pl|billowy\.es|bimilboutiqueonline\.com|biofitus\.lt|bio\.lv|biomus\.eu|bionatural\.it|bitmobile\.pt|bitrix372\.timeweb\.ru|bk\.ru|blackhorsemachinery\.com|blackindustry\.fr|blackocity\.com|blackroseworld\.com|blackup\.com|blackwoodproductions\.com|blanchevetements\.com|blastfmsocial\.media|bleuze\.be|blindsbypost\.co\.uk|blite\.dk|blockpartyforums\.net|bloha\.info|blue138\.dnsmisitio\.net|blueconfig\.fr|bluefilters\.com|bluepeardigital\.com|bm-services\.com|bnc3\.vibratec\.it|boardwalkarmagh\.com|bobblume\.de|bobozakupy\.pl|bodanidance\.nl|bodegasagarna\.com|bodegasgargallo\.com|bohemianrose\.es|bolivianswingers\.com|bollnasbilvard\.se|boluciftligi\.com\.tr|bomenweb\.nl|bonair\.es|bonbon-foliz\.com|bond\.herosite\.pro|bonisimo\.es|bookmarkwebs\.com|bookspace\.tn|bounces\.elasticemail\.net|bouquetbrands\.com|bouquetsdumonde\.com|boutiqueintuitive\.com|boutiquenirvana\.com|boutiques-sevens\.com|bows-n-ties\.com|box2292\.bluehost\.com|box2325\.bluehost\.com|box5116\.bluehost\.com|box5232\.bluehost\.com|box5264\.bluehost\.com|boxofcolor\.com|bracz\.edu\.pl|braloy\.cl|braun-phototechnik\.de|bremer-sitzbezuege\.de|briboutique\.com|brooklynbutik\.pl|bruleursdeloups\.fr|bruyeresnegoce\.com|bshopbasketball\.fr|bsp-shop\.ch|bssd06\.octosquid\.com|bstore\.tn|btb\.swiss|bubo\.es|budnik\.cl|bue\.edu\.eg|buhobcn\.com|buhobike\.com|bureau-vallee\.com|burgherd\.com|business30\.web-hosting\.com|bustedwalletcom\.kinstamailservice\.com|buyfarma\.it|buzzmytech\.com|bvantilles\.com|bypeppas\.es|cabinet-pottier\.net|cable-fibra-optica\.es|cafecoton\.fr|cafemalin\.com|cafescaracas\.com|cahayapengharapan\.org|cakeitalia\.it|caliendosport\.com|caliston\.gr|calzadoscomodos\.com|calzadoshermi\.com|calzadosrosi\.com|calzadosrosso\.com|calzaturificiomarcos\.it|cam-alarme\.fr|cambili\.es|camboxmeca\.us|camping-megastore\.gr|campingsport\.es|candy\.com\.sg|candysan\.com|caneva937\.com|caprese\.shop|capsulastupinamba\.com|caravanas-evasion\.com|cardiologynownews\.org|careerlancer\.net|carel\.fr|carioca\.it|cariope\.com|carmelitaniscalzi\.com|carmenvazquez\.es|caroutuning\.fr|carrefour\.com|cartorque\.co|casadejade\.com|casadelaestilografica\.com|casaitaliabiancheria\.it|castellanagolf\.com|cave-spirituelle\.com|cazcarra\.com|cbddispensary\.com|cbd-grams\.com|cbdpascher\.com|cdcshop\.com\.mx|ceartshop\.it|cebitgroup\.pl|cegst\.com|ceiling-fan\.co\.uk|celosie\.ch|centrale-brico\.com|cepsos\.com|ceremonyshop\.sk|cesartrade\.cz|cfrcalatori\.ro|chaba\.pl|chachifarma\.com|chaisier\.fr|changermesverres\.com|chanvroom\.fr|charoruiz\.com|chassisparts\.fr|chatdanslaiguille\.fr|chateaudebrossay\.fr|chaussures-lachapelle\.be|chaussureslepacha\.ca|chavedigital\.pt|chayishop\.com\.ua|chclt\.net|cheap-neckties\.com|chef\.diskstation\.eu|chibi-akihabara\.com|chicoracao\.com|chicshoes\.eu|chief-ai\.com|chinanoobwatch\.io|chocolaterielandry\.com|chocopost\.de|chocosport\.es|christianeboutique\.com|chunichicomics\.com|chvl-hlx-cfp1\.localdomain|cielito\.co|cielo\.com|cien\.ma|cife-fuenlabrada\.es|cimagear\.com|cinelleparis\.com|cintegral\.cl|circe\.localdomain|CLASSE\.IT|classequine\.com|clayton\.dreamhost\.com|clessidrajewels\.com|cle-usb-fun\.fr|clickandtoner\.es|click-stop\.ro|climacondens\.it|climahostel\.com|climaidraulica\.it|climamarket\.eu|climaxsextoy\.in|clinicahogar\.com|clivio\.pl|cloritodesodio\.eu|cloud79\.hostgator\.com|cloud\.foodfromportugal\.com|clubbez\.com|cmail20\.com|cnc1\.lv|cochecitosrc\.com|code-agri\.fr|colegioingenieros\.org\.ar|coloresaustrales\.com\.ar|coltrades\.com|combishop\.dk|comercialblanquezloaisa\.com|comercialmatiner\.com|comfortklimaat\.nl|commontimes\.com\.au|communications\.karinejeff\.us|como-ceramique\.com|compagnie-coloniale\.com|competitions\.archi|complementosdelcafe\.com|comprancha\.com|compuscience\.com\.eg|confetiscrap\.com|confirm\.freshmail\.mx|connelly\.lndo\.site|conservasserrano\.es|consultorweb\.es|consultua\.com|continuousinksupplysystem\.com\.au|cookme-shop\.com|coolminiprix\.com|cool-shoe\.com|cooperativatoral\.es|copiscan\.com)/i 190 | /(coques-iphone\.com|corebit\.es|cosijeans\.gr|cosme-literie\.com|cosmeticosdelarosa\.com|cosmopharm\.eu|cosy-elephant\.de|cosy-home-design\.fr|cottet\.net|coturnostore\.com|coverpigtou\.it|covid19\.groupedlg\.fr|covid19infusion\.pl|covid19xtest\.com|cp26\.g-dns\.com|cp3\.hosterdam\.com|cp586\.webempresa\.eu|cp593\.webempresa\.eu|cp611\.webempresa\.eu|cp634\.webempresa\.eu|cp736\.webempresa\.eu|cp746\.webempresa\.eu|cp781\.webempresa\.eu|cp807\.webempresa\.eu|cpalanco\.com|cpanel19\.d\.fozzy\.com|cpanel4\.vhosting-it\.com|cpanel\.downloadsmiles\.com|craftinence\.com|creatingbags\.com|creation\.info|crochetstores\.com|crs4\.it|crystalnails4u\.co\.uk|cuchilleriaelartesano\.com|cuirtissu\.com|cultfurniture\.com|cultfurniture\.de|cupidonlingerie\.fr|curaden\.ch|curaprox\.at|curaprox\.pl|curaprox\.pt|curaprox\.us|curia\.op\.org|currus\.fr|cusa\.canon\.com|cuttingtools\.se|cvjm-herne\.de|cyan-teak-furniture\.com|cyberon\.home\.pl|daaam\.info|daewoo-international\.es|dailygrail\.com|daiwasoba\.com|danceshop-melimelo\.fr|danipeuss\.de|daniseotec\.com|danzashop\.com|daoodi\.com|daphbio\.fr|das-Lederhalsband\.de|datema-amsterdam\.nl|dates\.7ho\.st|davidodesign\.ro|david-qian\.com|daybydaycartoon\.com|daytona73\.com|dayvo\.com|dblanco\.shop|dealproffsen\.se|debka\.com|debommel\.com|decathloniran\.ir|declicfitness\.com|decoboutique\.com|decoracionesconchocolate\.com|decoration-dautrefois\.com|dedi-3714877\.reinnocomunicacao\.com\.br|dedicated\.sysarabs-server\.com|dedivirt304\.your-server\.de|deepersonar\.com\.ua|defotobeeldbank\.nl|degami\.fr|degoedekeus\.nl|degriffmac\.com|deguiz-fetes\.fr|delightchile\.cl|deli-hemp\.fr|demarques\.es|demo\.com|dena\.r1host\.com|deparis\.me|departementfeminin\.com|depoort\.com|deportesdecampo\.com|deportesucha\.es|deprit\.be|derks-wielersport\.nl|dermainzer\.net|dermunkavedelem\.hu|derna\.it|detectorshop\.it|detoujours\.com|devacademy\.de|devaka\.ru|devidlabel\.it|dev\.infra\.fr|dgfk\.net|dialcom\.sk|diario-octubre\.com|di-athos\.be|diccor\.es|digishots\.pl|dijiprint\.fr|dikat\.mx|dilipa\.com\.ec|dimobasuministros\.com|dinamitek\.com|diosaplanta\.com|diputaciolleida\.cat|discorosa\.it|discountdevices\.co\.uk|discountshop-online\.com|disfrazmania\.com|displaysense\.co\.uk|dissidentvoice\.org|distrimarine\.com|disumtec\.com|divatosruhazat\.hu|dladzidzi\.pl|dns91131\.phdns17\.es|docmero\.com|dodirnime\.net|domaine-terres-rouges\.net|domori\.com|domyou\.pl|don1n2004\.servwingu\.mx|donacarmen\.es|donipreziosi\.com|donovillo\.com|dopazo\.es|doppler\.at|doro4u\.nl|dorotech\.pl|dostcicekcilik\.com\.tr|dotilos\.com|double-entry-bookkeeping\.com|dp-28d6e377f8\.dreamhostps\.com|dpoczta\.pl|dprhcp204\.doteasy\.com|dracotienda\.com|drap-house\.fr|drberg\.eu|dreambike\.es|driveonly\.fr|drj\.lt|drkh\.hu|dronai\.lt|dropshot\.es|drprivacy\.it|drumcity\.es|dthomeshopping\.nl|dubaibesharam\.com|dubalcosmetics\.com|ducatillon\.com|duchess\.pl|duepidistribuzione\.it|dungeondice\.it|durandal-cuisine\.fr|dutch-passion\.com|dutchwebplaza\.nl|dvdstorespain\.es|dwear\.it|dwprint\.it|dyne\.org|dza-dza\.ru|eaobservatory\.org|easycloture\.com|easyengine\.io|easyres-project\.eu|easytampon\.com|easywatch\.gr|ebarf\.de|ebelle\.com\.co|e-bettenshop\.ch|e\.bleuforet\.com|ebmia\.pl|ecbiz171\.inmotionhosting\.com|ecobaby\.it|ecobalkanfoods\.com|ecodair\.org|ecolemsf\.com|econatur-elles\.com|economatoiberico\.es|ecool\.es|ecosa\.com\.hk|ecotiendanatural\.cl|ecuadorianhands\.com|ecuskids\.com|edicola30\.it|edificor\.com\.ar|editionsamsterdam\.fr|edmnations\.com|edouard-rousseau\.fr|edoutfittersonline\.com|edpnet\.be|eduardorivera\.es|educationalmaterial\.com|edu\.mos\.ru|e-farsh\.com|efendimciftligi\.com|eg-cm\.com|eglise\.sonnerat\.fr|eg-webst-05\.localdomain|ehs\.tv|ekcochat\.com|e-kociky\.sk|ekonty\.com|e-laziostore\.it|elbazarnatural\.com|elcinedeloqueyotediga\.net|electrobeko\.com|electroeuro\.com|electro-fun\.de|electromueble\.es|electronicavicente\.com|electronic-doc\.de|electronics\.ca|electropescador\.pt|electroventas\.cl|elektrocomp\.sk|elektromoskonvektorok\.hu|elementalbotica\.com|eleonore-deco\.com|elettroaffare\.it|elettronew\.com|elettroweb\.net|elevatestyles\.com|elgamusino\.es|elista\.footholds\.net|elite-ticket\.com|ellam\.net|ellicat\.com\.tr|elmo-casque\.com|eloma\.pl|eloroverde\.com|elovebook\.com|elrincondemama3\.com|elsa-boutique\.it|elsykkelbutikken\.no|em1102\.printview\.in|em1365\.swinternalmedicine\.com|em143\.mdl-int\.com|em2071\.santarrufina\.com|em2359\.entej\.com|em2750\.insumoscerveceros\.mx|em2873\.thehardwoodoutlet\.ca|em2\.remarkety\.com|em3401\.villars\.com|em3413\.lizenzworld\.de|em3587\.platform\.sh|em3828\.koinoniaorthodoxias\.org|em4153\.atelierparticulier\.com|em4629\.defabrica\.cl|em4941\.motorcycleshop\.pk|em5106\.tomandco\.com|em5201\.kuikmeal\.com|em5567\.107daily\.com|em5591\.theatrenerds\.com|em7435\.delta-fitness\.com|em8227\.edro\.io|em8273\.bigjuiceuk\.co\.uk|em8426\.farmasmart\.com|em9186\.uconnect\.ae|em9226\.mimea\.co|em9466\.papiertigre\.fr|em9897\.hydegram\.com|em9985\.finelittleday\.com|email-cabriole-bebe\.com|email\.dosfarma\.com|email\.etilika\.it|email\.lesraffineurs\.com|email\.louis-herboristerie\.com|emailmarketing\.up3up\.it|email\.planetdem\.it|e-materac\.pl|emballage-sous-vide\.fr|emindbooks\.com|emlgrid\.com|emploinet\.net|emporioorganicoverde\.cl|emprelude\.fr|em\.reico-vital\.com|emsgrid\.com|e-napolistore\.it|enchanted-interiors\.co\.uk|englishshop\.at|e\.nocroom\.com|envoile\.com|epiceriedemadagascar\.com|epithetes\.com|epodravina\.hr|epsilon1\.beget\.ru|equineequip\.com|ereperez\.mx|ergo-corner\.com|ergold\.pl|erotismosexual\.com|es-billar\.com|escapade-chaussures\.be|esenzzia\.com|eshoppers\.shop|espace-ombrage\.com|espaciel\.com|esschoolsupply\.com|essenzaltro\.it|essenzetotalstyle\.com|esteban\.fr|esthima\.fr|estudiosdurero\.com|esvshop\.nl|etpiscestbien\.com|etwow\.net|etxeondo\.com|eudoxiainternational\.com|eu\.hosting-webspace\.io|eurocellular\.it|euroconti\.com|euroline\.pro|europaband\.es|europaincanto\.com|europe-hygiene-service\.com|europskenoviny\.sk|eurovideo\.es|evil-genius\.us|evolutionrc\.nl|exagonshop\.it|example\.com|exclusivasdelbebe\.com|exclusivecarpets\.pl|exon\.cl|expedition\.lt|expertclima\.es|expertsnu\.pl|extreme-tennis\.fr|eyeshop\.com|eye-square\.com|f1\.web\.tr|faimed\.it|fame\.lt|famgroup\.co\.za|familiam\.es|fancyfashion\.pl|fantasianorth\.com|fantasmagoria\.shop|fantasyfootball247\.co\.uk|fanypage\.com|farmaciabolos\.com|farmaciagt\.com|farmaciaimperial\.es|farmacialomelino\.com|farmacianovadamaia\.pt|farmaciasdirect\.com|farmacosmo\.it|farmainstant\.com|farmalisto\.com\.mx|farmasconto\.com|farmaspanama\.com|farrutx\.com|fashionmafia\.sk|fashionmood\.org|fast-solutions\.org|fedrizzimoda\.it|feedally\.com|feelfreekayak\.eu|feragiyim\.com|feroshop\.ro|ferreteriasindustriales\.es|fershop\.it|ffme\.fr|fh-joanneum\.at|fiizon\.com|filla\.es|filtres2spa\.com|final-track\.com|fireland\.co\.uk|firstimagedemo\.info|firstshop\.dk|fitandshape\.nl|fkvojvodina\.rs|flackle\.com|flagonsworkshop\.net|flickli\.de|flico\.pl|floreoffice\.fr|floridastyle\.it|foampartyhats\.com|foehnrecords\.com|fongrisan\.com|fontenille-pataud\.com|footachat\.com|forju\.tk|formula12\.it|formyanmarbymyanmar\.com)/i 191 | /(forseti\.net\.pl|fossil\.com\.co|foto-groep\.nl|framexx\.de|france-automatismes\.com|francetrialclassic\.com|freespeak\.me|frenchys-distribution\.com|frezzo\.ch|friendlyfoodshop\.pl|friendxone\.com|frogpro\.it|frontroom\.link|frostvik-drift\.no|frsgames\.com|frutaselmoje\.es|fulldance\.net|fumisan\.es|funethic\.bio|funkami\.es|funkihomes\.com|funstep\.es|fustaiferro\.com|futbolmega\.es|futur3000events\.be|gabrielrivaz\.com|gadwoman\.com|gaec-de-la-graffardiere\.fr|gaiaose\.com|galaxykayaks\.eu|galeriakosice\.sk|galileo61\.com|gallerysport\.it|gama\.al|game-fisher\.com|gameproducts\.nl|gamesfree\.ca|gamil\.com|gamingstore\.ma|gamrentals\.com|garden\.com\.bd|garhis\.es|gaschoolsupply\.com|gastrodomus\.it|gastronomicspain\.com|gator3092\.hostgator\.com|gator3095\.hostgator\.com|gator3277\.hostgator\.com|gator3278\.hostgator\.com|gator4024\.hostgator\.com|gator4170\.hostgator\.com|gavinox\.es|gdh-yale\.es|geekmygoodies\.com|GeekPoint\.Club|gekosmart\.com|geldesinfectantemanos\.com|gemimarket\.it|gemini2\.be|geniessertouren\.org|geocaching-franken\.de|germanische-heilkunde\.at|getlow\.se|getsmartcatalog\.com|getyourfun\.it|gex\.co\.uk|giftgallery\.ir|giftsandcare\.com|gintarobaldai\.lt|gioelaura\.it|gioiababy\.com|giottoservice\.it|girbau\.com|girlsup\.fr|gitarren\.se|glas\.webhostingireland\.ie|glingerie\.com\.tr|globalizationpartners\.com|gloriashoponline\.it|glowrias\.com|glutenvrijkookhoekje\.nl|goldbeaute\.fr|goldensubmarine\.com|goldentist\.com|gold-money\.pl|goldsport\.pl|golosielongevi\.it|gomezoviedo\.com|good-d\.de|goodfel\.com|goodhealthnaturally\.com|goodhealthusa\.com|googleonline\.com|got-ya\.nl|goudwisselkantoor\.be|goyvi\.es|grandeszapatos\.com|granfarma\.it|grat\.dk|gratepic\.com|greendrive-accessories\.com|grosfillex\.com|gross\.snositesaso2\.com|groupehylton\.fr|groupsumi\.com|growbarato\.net|growseed\.co\.uk|grubelolo\.pl|grupocrv\.cl|grupodocu\.com|grupo-hispa\.com|gruporp\.es|grupotpma\.com|grupovarpa\.com|grupoxpl\.com|gsm-clinique\.com|gsmobile\.pt|guenstige-webseite-erstellen-lassen\.de|guiltypleasureclub\.be|gwegner\.de|gwhs-03\.dict\.gov\.ph|gwschool\.com|gymsportz\.sg|hadis\.uk|hagertycare\.com|haipo\.co\.il|hairandbeautyshop\.it|hairshop\.lu|hanbiotech\.com|handcraft-studio\.com|happyideas\.com|harmonysex\.it|hartkorn-gewuerze\.de|hasster\.com|hatland\.nl|hazerbaba\.com\.tr|hdland\.fr|headsem\.com|healthoxygen\.com|hebergement-et-domaine\.com|helia2\.netaram\.com|heliumballoner\.dk|henaffandco\.fr|herbolariodeconfianza\.es|herbolariomedicinal\.com|herbolistique\.com|hero\.lt|herpac\.com|herramientas-madera\.net|hetkruideniertje\.com|heve\.es|hexagona\.com|hexamobile\.fr|hexo-store\.fr|heydudeshoes\.es|heyspor\.com\.com|hidrobrico\.it|hificonnect\.com|hifimarket\.cl|higienaverslui\.lt|hillshornets\.com\.au|hipanema\.com|hipertextilcavero\.com|historiadelnuevomundo\.com|hoerspielprojekt\.de|hollishop\.com|hollywooddream\.pl|host1\.simcohosts\.com|host2074\.hostmonster\.com|host5100\.hostmonster\.com|host\.awa-con\.com|ho-stile\.com|hosting160410\.ae81c\.netcup\.net|host\.turbodispute\.com|hotelreconquista\.es|hotelys\.fr|houseofpriscilla\.com\.au|hstpr251\.host\.it|hstpr304\.host\.it|hub\.com\.ng|hubun\.pl|humydry\.com|hv35svg134\.neubox\.net|hwesta\.eu|hyale\.net|hydroponic\.ro|hydro-shop\.eu|hysterya\.com|hyundaizubehoer\.de|iacono\.fr|ibanezfarmacia\.com|ibericomio\.es|iberomed\.es|ibrio\.it|icc\.ferme-icc\.com|ich-will-zu-nagel\.de|iconfronti\.it|icosmic\.com|i-c-t\.org|idconline\.es|idealcosmeticos\.pt|idealuce\.it|idroclic\.it|idzifpro\.com|ife\.pt|igan-iluminacion\.com|igropar\.com|ildiariodellavoro\.it|illinoisblacksmith\.org|image-de-marques\.com|images-atmospheres\.ch|imaginaction\.com|imagirly\.com|i-mate\.org|immaginadecor\.com|importaexpertos\.com|incarsolution\.com|indalaqua\.es|indiasocialbook\.com|indickynabytok\.sk|indies\.fr|indigo-sevilla-cordoba\.es|indigo-zuidholland\.nl|info-jaher\.com|info\.just-green\.fr|info\.mademoiselle-bio\.com|info\.masmusculo\.com|info\.passagedudesir\.fr|informatica-barata\.com|infronttech\.com\.au|ini\.chat|inktshopbelgie\.be|inmegh\.com|innfinest\.com|inside-shops\.com|insperio\.pl|instanet\.live|interactivaclic\.com|intercanada\.ru|intgez\.com|inty\.ma|iorisparmioenergia\.com|ip10\.tpm02\.net|ip16\.tpm02\.net|ip-72-167-39-90\.ip\.secureserver\.net|i-parts\.it|iqraafashion\.com|ir1\.aliwebhosting\.com|iranhumanrights\.org|iriport\.com|irya\.com|ishq\.de|iskadini\.net|islametinfo\.fr|islamstores\.fr|isolmant\.it|isw\.org\.pl|italiaspezie\.com|italtel\.com|itar\.be|itsgoingdown\.org|izumisushi\.eu|jacydetail\.com|jaher\.com\.ec|jakublesinski\.me|jamonpasion\.com|jamonpurobellota\.com|janod\.com|japanphonezap\.com|jaqqed\.com|jardincouvert\.com|jardinerietarnaise\.fr|jati\.co\.uk|jazon\.com\.pl|jeandestreesparis\.com|jejaringsosial\.com|jersey53\.de|jetprimeshop\.it|jetsomarket\.com|jeyashriskitchen-com|jinsa\.com\.mx|jmrtgroup\.com|john-woodbridge\.com|jokerscompany\.com|jonssheds\.direct|joomic\.com|joursheureux\.com|joutech\.ma|joyeriapato\.com|juanamadrid\.com|juguar\.ro|juguetestiosam\.com|jujusmoda\.com|julielingerie\.nl|just2026\.justhost\.com|just-car\.pl|justlads\.net|jwsuperthemes\.com|jygastore\.com|kadosh\.eu|kaffeboen\.dk|kajgana\.com|kaleidoscopebabycare\.com|kamalubagno\.it|kanela\.ch|kasa-store\.com|katohika\.gr|kca\.ac\.ke|kedak\.online|keeklove\.com|kentuckyschoolservice\.com|kenza\.re|keramics\.com|ketabaro\.com|khama\.es|khlfan\.shop|kiefergarden\.com|kimochiishop\.com|kimondo\.es|kindy\.fr|kiosclub\.com|kivie\.sg|kleaning\.es|klimaexpress\.hu|k-nis\.com|knoweats\.com|koalabay\.com|koblenz\.com|koffie-loods\.nl|kokosoel\.com|kontaktowe\.pl|kontras\.org|konzept24\.ch|koons\.co\.kr|kossmetics\.es|kotfish\.com|kpopmart\.com|kracken\.com\.mx|krasnal\.sklep\.pl|kreaservice\.eu|kridtvejsplanter\.dk|krilloil\.ro|krix\.ch|ksl\.eu|kt26-r35\.mojohost\.eu|kulte\.fr|kusskuss-lio\.es|laboratoriumpanidomu\.pl|laboutiqueduportail\.com|laboutique-solaire\.com|lacasa\.es|lacestitadelbebe\.es|lacocinadesenen\.com|lafabriquedespieds\.com|lafalque\.fr|lafemme\.es|lafermedeborie\.com|lafrancaisedupoele\.fr|lagarzarara\.com|lagoonatelecom\.com|lagranbota\.com|lahabitacionmisteriosa\.com|lainsrl\.it|laktotrio\.ro|lamadeleine-deco\.com|lamarine\.fr|lampdecor\.es|lanabok\.com|lancezvotreaffaire\.com|landbys\.se|land-service\.com|laneperfumy\.pl|lapanaceabio\.com|la-petite-epicerie\.fr|lareposterita\.com\.ar|lasamazonas\.ch|lasermarketonline\.com|lastijerasmagicas\.com|la-teapot-du-web\.fr|latiendadelapicultor\.com|latramuntana\.store|laughbeijing\.com|laventananatural\.com|lavoz\.es|laweekly\.com|leaflyvip\.com|lebigdeal\.shop|lebonemballage\.com|lecafe-alainducasse\.com|lecames\.org|lecigare\.ch|lecomptoirdemathilde-sendmail\.com|lecoqsportif\.com\.co|lederwaren\.nl)/i 192 | /(legamigioielli\.it|legavenue\.eu|lejardinretrouve\.com|lelibrepenseur\.org|lempiredutapis\.com|lendenclub\.com|lenottidimilano\.com|leoetugo\.fr|leonardo\.com\.ro|leonfargues\.fr|leonleds\.com|leonthebaker\.com|lepage\.fr|lepaturon\.com|lesahel\.org|lesciseauxmagiques\.fr|lescolisduboucher\.com|lesla\.com|lesvilainesfilles\.fr|letsmakeconjureblackagain\.com|levendiguitgever\.nl|LF-equipement\.fr|lhcp1118\.webapps\.net|li496-179\.members\.linode\.com|liabel\.it|liahstore\.com|liatrosrecycling\.co\.za|libertyfoods\.ca|librairie-sana\.com|librairie-voltairenet\.org|libra\.it|libreriadistoria\.it|libromar\.cl|lichtblick-foto\.de|lifeboxsecurity\.com|lightingspain\.com|ligne-et-proteines\.com|likekaba\.com|lileam\.fr|limepack\.eu|linc046\.arubabusiness\.it|linder-shop\.fr|link3\.net|linoricci\.com|linuxtemp\.iranhost\.com|lips-france\.com|littlebigsteps\.org\.au|livealgae\.co\.uk|livelygram\.com|livelyluxx\.nl|liveshop\.es|livingroc\.com|loading\.es|lobles\.cz|loboairguns\.com|logicno\.com|lojalvm\.pt|lojas\.science4you\.pt|loka-vaisselle\.com|lolistore\.cz|lona\.vn|lonly\.club|lovemeifrance\.com|love-radius\.com|lpacademytorino\.com|lrtimelapse\.com|ls24\.server\.ly|lsh1005\.lsh\.siteprotect\.com|luba\.com\.ar|lucesledcoche\.es|lucgel\.it|luciamipediatra\.com|lucienlelong\.com|luck-bike\.es|ludeco-lighting\.co\.uk|lueli\.es|luminaire-center\.com|luongofashionstore\.it|luppologioiellieri\.it|luxbryle\.cz|luxlounge\.org|lyninails\.de|lzb\.lt|m11418\.contaboserver\.net|m4tuning\.com|maboutiquechretienne\.com|macarte-grise\.fr|macchinegarden\.it|machinimatrix\.org|macmaniack\.com|mactraderfrance\.com|magazinulinstalatiilor\.ro|magic\.si|magmac\.pl|magomerino\.it|mahimahitoledo\.it|mahoor\.r1host\.com|mail114\.suw11\.mcdlv\.net|mail124\.suw11\.mcdlv\.net|mail1\.blaze-milano\.com|mail1\.wpengine\.com|mail231\.suw12\.mcsv\.net|mail239\.suw12\.mcsv\.net|mail33\.suw11\.mcdlv\.net|mail\.allaboutyou\.co\.th|mail\.comms\.uol\.edu\.pk|mail\.extradingue\.com|mail\.futurartshop\.com|mail\.grad-petrov\.ru|mail-gw\.thundermail\.uk|mailhub\.numeezy\.com|mail\.incomm\.fr|mailing\.domomat\.com|mailing\.pranarom\.com|mailings\.footballamerica\.co\.uk|mail\.leonardoshoes\.com|mail-out\.cluster002\.hosting\.ovh\.net|mail-out\.cluster003\.hosting\.ovh\.net|mail-out\.cluster005\.hosting\.ovh\.net|mail-out\.cluster006\.hosting\.ovh\.net|mail-out\.cluster007\.hosting\.ovh\.net|mail-out\.cluster010\.hosting\.ovh\.net|mail-out\.cluster011\.hosting\.ovh\.net|mail-out\.cluster013\.hosting\.ovh\.net|mail-out\.cluster014\.hosting\.ovh\.net|mail-out\.cluster015\.hosting\.ovh\.net|mail-out\.cluster017\.hosting\.ovh\.net|mail-out\.cluster020\.hosting\.ovh\.net|mail-out\.cluster021\.hosting\.ovh\.net|mail-out\.cluster023\.hosting\.ovh\.net|mail-out\.cluster024\.hosting\.ovh\.net|mail-out\.cluster026\.hosting\.ovh\.net|mail-out\.cluster027\.hosting\.ovh\.net|mail-out\.cluster028\.hosting\.ovh\.net|mail-out\.cluster029\.hosting\.ovh\.net|mail-out\.cluster030\.hosting\.ovh\.net|mail-out\.cluster031\.hosting\.ovh\.net|mail\.philantologie\.fr|mail\.prod\.browseandgo\.fr|mail\.putovanja\.info|mail\.s070070\.furanet\.com|mails\.antinfortunisticagrilca\.com|mailsdb\.maurysonline\.it|mails\.meublerdesign\.com|mail\.talkingtrendo\.com|mail\.univack\.fr|maisoncatanzaro\.com|maisondeladetection\.com|maison-du-savon\.com|makadamia\.pl|maktotal\.cl|maletastony\.com|mallhabana\.com|mamboserver\.com|mancodareiafoodservice\.com|mandaladistribuciones\.es|mangosdelcielo\.com|mania-concept\.net|mania\.tn|manilla\.lt|maquillage\.com|maquinariadejardineria\.net|maquinasdejardim\.com|maquinaskebab\.com|maquituls\.es|marbleceramiccorp\.com\.au|marcella\.ir|marciano\.pl|margit\.cz|marideruta\.com|marine\.dreamhost\.com|marjolaine\.fr|marjoya\.com|marketing\.emaillabs\.net\.pl|marketmoveis\.pt|marlonkart\.com|marseille\.stilla-laboratoire\.com|marshallspetzone\.com|martinvalen\.com|masquesonido\.com|masque-tissus-covid19\.fr|masterofficedeco\.sn|maszapatillas\.com|materiels-electriques\.fr|matkavaruste\.fi|matprosec\.fr|mattconcept\.se|maximo-moto\.com|maxims-shop\.com|mayempire\.com|mayoristamexico\.com|maysange\.com|mazda\.ch|mazzo\.pl|m\.blindwave\.net|mcu\.com\.br|mdb-klaus-ernst\.de|meaweb\.it|meblekukulka\.pl|mecamedia\.it|medallasreligiosas\.es|medaz\.ro|medguru\.lt|mediafarma\.it|mediastar\.it|mediclinics\.ecommercecloud\.es|medijuana\.eu|medim24\.pl|medinapiel\.es|medistellar\.ru|med\.lu\.se|medvetsrl\.it|megagrow\.es|megasilvita\.com|meheaven\.com|melaninbook\.com|melimelek\.com\.tr|memeduquercy\.com|mensstyle\.de|mercapool\.com|merinusshop\.ir|merkado\.tn|metalmark\.it|metaux-detection\.fr|meublesatlas\.fr|mg-boutique\.fr|mg\.contrapunto\.cl|mg\.direct-abris\.com|mg\.flowersandplantsco\.com|mgfood\.it|mg\.grandearmazem\.pt|mg\.heruliastockerau\.at|mg\.infomaxparis\.com|mg\.jsbtik\.com|mg\.ledroitdeperdre\.com|mg\.livoo\.fr|mg\.meetyou\.social|mg\.nocosi\.com|mg\.piranha\.cl|mg\.powerlab\.fr|mg\.vspieces\.com|microfluo\.net|mieux-voir\.fr|miguelgarciavega\.com|miin-cosmetics\.com|milatrans\.pl|millelucistones\.com|millevolts\.fr|mim\.self-assurance\.fr|mineralevivo\.com|minesup\.gov\.cm|minicool\.pt|minishoes\.es|minregion\.gov\.ua|mipuntomovil\.com|miraherba\.de|mirebotica\.es|miroytengo\.es|mirra-shop\.com|mister-battery\.be|mister-robot51\.fr|mistertecno\.com|mixbeauty\.com|mj-pieces\.fr|mkfgabon\.com|ml\.qualenergia\.it|mobbareuzai\.com|mobbec\.com|mobelcenter\.es|mobilavento\.ro|mobilealgerie\.com|mobilecaraibe\.com|mocksonline\.com|modeldesignconstruction\.co\.uk|modischesachen\.de|moira\.cz|mojaapteka\.pl|moj-esklep\.pl|mollylac\.com|momentar\.es|moncanape\.com|moncoinsante\.com|mondego\.lt|mondialshop\.it|mon-gazon-synthetique\.com|monkitsolaire\.fr|monserrato\.it|mooblimaja\.ee|moodscentbar\.com|moondreamwebstore\.com|motoaxxeconnect\.ch|motocross-soul\.com|motomaniashop\.com|motoracingburgos\.net|motorbikeitalia\.com|motoshopoutlet\.it|moustaches\.fr|moveis-sofas\.eu|movilescomponentes\.com|mrjchaussures\.com|mrpaper\.es|msh\.de|mu001052\.arubabiz\.net|mu001100\.arubabiz\.net|mubak\.com|mueblesdeoficina\.com|muebleslufe\.com|muebleslufe\.fr|muellerglas\.at|muevetulengua\.com|mumblit\.com|mumit\.com|mumyroom\.com|munecadetrapo\.es|munirkhanani\.com|munprotect\.com|murs-3d\.fr|musicopolix\.com|mustelashop\.it|mxgames\.es|myaeroluft\.com|mybodygenius\.com|myfanmale\.com|myfishroom\.es|my-friend\.me|myglowyshop\.fr|myL2\.ro|mynewtel\.fr|mytechtrade\.gr|myusemuse\.com|myvybz\.com|mywool\.es|naaimachines\.frl|naftie\.de|nanetes\.com|nanny-care\.fr|nanobiotix\.com|nanu\.md|narayaniremedies\.com|nativespecial\.com|naturabotanics\.com|naturalclick\.gr|natural\.pl|naturlich\.ro)/i 193 | /(naturversand24\.ch|nauticashop\.nl|nauticmar\.com|nect-art\.com|nenupharsdumonde\.fr|neolius\.ovh|neosino\.at|neo-sport\.com\.tn|netcurtainsdirect\.com|net-espresso\.com|neverbroke\.club|new-and-vintage\.com|newhost\.albaraka-bank\.org|new-kent\.dreamhost\.com|newmartina\.it|news\.emaillabs\.co|news\.gazetaesportiva\.com|news\.ilcaffeitaliano\.com|newsletter1\.sagacosmetics\.com|newsletter\.energyson\.fr|newsletter\.europe-moto\.com|newsletter\.hircus\.fr|newsletter\.itcollection\.fr|newsletter\.lautrethe\.com|newsletter\.manelli\.fr|newsletter\.marketcaffe\.com|newsletter\.vo7\.com|newsl\.granfarma\.it|news\.mustang-online\.fr|news\.oviala\.com|nexial\.es|nextbestplayer\.com|neyleen\.com|ngcastillos\.com|nichiseijo\.com|nickel\.cloudhosting\.co\.uk|nicols\.es|nietomartin\.es|nikosxeiladakis\.gr|nin-nin\.fr|nkd-puzzle\.com|nlserver\.biz-tutorial\.com|nmfhome\.lt|noberplast\.com|nobiliswildlife\.dk|nobodysplace\.nl|nonamesport\.com|norayseafood\.es|norcineriadicintio\.it|nordikwein\.com|noreply\.vhearts\.net|norrison\.ee|norwayshop\.sk|nosdelicessucressales\.fr|noticiasdiaadia\.com|nouvellelune\.fr|noviasdelsur\.es|novintechnic\.com|noviostores\.nl|novus\.one|nowavefficial\.com|ns1004834\.ip-92-204-133\.us|ns1\.yenimakale\.com|ns3159855\.ip-51-91-131\.eu|ns575579\.ip-54-39-243\.net|nsi\.ir|nsz\.hr|nubiansmeet\.com|nuevecitas\.com|nutricare\.es|nutriplanet\.es|oalacubunatati\.ro|obee\.info|obserwatorfinansowy\.pl|obzorkuhni\.ru|occultationcomposite\.com|ofertadeportes\.com|ofertaspc\.com|offgridsurvival\.com|offkharid\.com|offshoes\.fr|ofichairs\.com|oficinasmontiel\.com|ofiprix\.com|ohbutik\.pl|ohmymail2\.ohmyweb\.fr|ohmymail\.ohmyweb\.fr|okatlarayakkabi\.com\.tr|oldsilver\.ru|olirupestredelcogul\.es|omitro\.com|onlineducha\.com|onlinetopgarden\.com|onlyroots-reggae-news\.com|ontargetmall\.com|opandaxenagiseis\.gr|openimpulse\.com|optiveropticos\.com|optomod\.com\.tr|opus56\.register\.it|or3moda\.com|orc\.boxsecured\.com|ordi-solidaire\.fr|original-antike-moebel\.de|orion91\.com|osim\.ro|otakucenter\.es|otsglobal\.org|oursecretlifestyle\.com|outlawaudio\.com|outlet-pc\.es|outletsofadirect\.fr|outsidebcn\.com|overoutlets\.com|ozonohogar\.com|ozonolda\.com|p3nlwpweb100\.shr\.prod\.phx3\.secureserver\.net|p3plcpnl0870\.prod\.phx3\.secureserver\.net|p3plvcpnl454964\.prod\.phx3\.secureserver\.net|pablitoescort\.info|packzypack\.com|padisl5r\.com|paidikafolitsa\.gr|pajarorojo\.com\.ar|panafricandialogue\.com|panathinaikoskosmos\.com|pandaluxuryshop\.cc|panoteq\.fr|panre\.com|paperpage\.in|papersera\.net|parashop\.com|parasport\.it|paratureforma\.com|parentteachertools\.com|parfumuriarabesti\.ro|parrotsays\.com|pasgr\.org|passion-astrologue\.com|passion-genealogie\.fr|patisseriecreative\.fr|patriotplace\.us|patternpile\.com|paulaurban\.com|paylesscolombia\.co|paymon\.fr|p-boisdechauffage\.fr|pc4\.muksolutions\.com|pcgamer\.ma|pckuban\.ru|pcmu000059\.arubabiz\.net|pcsalesonline\.com|pegashoes\.com|penneshop\.com|peralimonerashop\.com|peremeny\.ru|perfumeriascoqueteo\.com|personaldrones\.it|peruzzosrl\.it|petatet\.org|petit-bateau\.cz|petit-bateau\.pl|petitemafalda\.com|petittrop\.com|ph-archeryshop\.ch|pharmacymagou\.gr|phonedepot\.ch|piarim\.biz|pickandprofit\.com|piecesautoweb\.gp|pincay\.es|pinturashermanosrodriguez\.com|pisandofuerte\.as|pkgfood\.fr|placedessalaries\.com|planetfarm\.it|planetongames\.com|plants-truffiers\.ch|plastem\.com|plasticosyafines\.com|plotteralia\.es|plurata\.pt|pm-bounces\.brodyneuenschwander\.com|pm-bounces\.espacemode\.be|pochta\.plus|politichatter\.com|polytems\.com|polytrucks\.fr|poppers-aromas\.eu|poppers-rapide\.eu|poppyseeddreams\.com|portables\.org|portal\.museums\.or\.ke|portmanntabak\.ch|postelerosty\.sk|post\.webmailer\.de|powersport\.lv|pppcayman\.com|premium49\.web-hosting\.com|prescription\.ro|presentesmiguel\.pt|prevenciopatika\.hu|prezziclimatizzatori\.it|prijssnijder\.nl|prikol\.ru|primeshop\.ro|printu\.co|printulogo\.com|privileges-perso\.com|prixoriginal\.fr|prmail\.ir|probeauty\.nl|proenutrition\.es|profumeriacauli\.com|promarineshop\.it|promostars\.pl|prplus-paris\.com|ps631735\.dreamhostps\.com|psrp\.grupoemprega\.com\.br|ps-stage\.com|puntoblanco\.com|puntorigenera\.it|puravidaclothes\.com|puuvirrat\.fi|puyricard\.fr|pyme83\.pymedns\.net|pyramidsp\.com|qaol\.uk|qiriness\.com|qr-facture\.store|qspproducts\.com|qtolk\.com|qtorb\.com|quantumspain\.es|raazs\.com|rademi\.hu|radiantcheats\.net|radioiskatel\.ru|radionewsletter\.pl|rafanadalacademy\.com|ragnaroek-festival\.com|rameluxury\.com|ranaco\.com|rapid-pieces-volet\.com|raquelperezshoes\.com|rasshoes\.com|rattatanshop\.mt|rayart\.com\.tn|rayondor-bagages\.fr|rcentral500\.webserversystems\.com|rcprogranada\.com|readytec\.it|readytosew\.fr|reallynicethings\.es|realmallorca\.tienda|realservice\.com\.pe|recambioclasico\.com|recycletek\.fr|redman\.es|redsocialgoool\.com|reference-cbd\.com|refividrio\.com\.mx|regalosgourmetonline\.com|regalosoriginales\.com\.es|regalosvarios\.com|regulat-usa\.com|rehabilitace\.info|reinodejuguetes\.com|reizentolo\.es|rejuvi-co\.fr|relay\.juguetesfantasia\.com|religion-rugby\.com|relojesmania\.com|relojitos\.com|rembowscy\.pl|rentmydate\.com|reparomaquinas-repuestos\.com|repuestostic\.com|res17-93\.cp\.htz\.privatedns\.biz|reseauinternational\.net|retrofutur\.fr|retrogamescorner\.com|retrogaming\.ch|revesdelibellule\.com|richard-diffusion\.com|riegopro\.com|rimagservice\.it|ripperseeds\.com|rister\.com|rixo\.o2switch\.net|roadrunner-card\.com|robdunn\.us|robinsonpetshop\.it|robot-polska\.pl|rock-creek\.de|rocket-cp3\.hostsila\.org|rockharz\.com|rocknrollstore\.net|rodica\.nl|rope-master\.com|roseaccessories\.gr|roxycast\.com|royalairsoft\.fr|royaleclairage\.fr|royaleshoop\.com|royalties-paris\.com|rozana\.nu|rpmdermatologie\.com|rrally\.com|rrnetwork\.io|rs-barcelona\.com|rtr-modelismo\.com|rubanek\.pl|rugidgear\.com|rumblebikes\.com|runningzgz\.com|run-n-trail\.com|russafasingluten\.com|s076\.onlinenow\.com\.ar|s10\.wpxhosting\.com|s125\.cyber-folks\.pl|s131\.syd2\.hostingplatform\.net\.au)/i 194 | /(s13\.mediacenter\.hu|s13\.wpxhosting\.com|s146\.cyber-folks\.pl|s166-62-84-170\.secureserver\.net|s192-169-216-144\.secureserver\.net|s192-169-243-69\.secureserver\.net|s903\.nty\.uy|sabanasblancas\.es|saddleonline\.com|safevisor\.ch|sagaza\.com|sailteknoloji\.com|saldoscanarias\.com|salonsnu\.pl|salpa\.com\.ar|saltedspace\.com|salvadori\.it|samsonite\.lt|sandshop\.it|sands\.ro|sangiorgiomerate\.it|sanificashop\.com|sanihaus\.ch|sanovita\.ro|saralashay\.com|satsanleon\.com|sauce-piquante\.fr|sauna-hammam\.fr|saveurs-cbd\.fr|savifoot\.net|savijeans\.com|sax-on\.com|sayez\.com|scissorfoxes\.com|scrolllink\.com|scr-wear\.com|scsr\.nevada\.edu|scuoladelcuoio\.com|scv\.va|sea-business-14\.hostwindsdns\.com|seasons-store\.com|sebinho\.com\.br|securitegooddeal\.com|security-service\.cz|seeds-bank\.cz|seedstockers\.com|selfpharma\.com|semillasbaratas\.com|semillasvivas\.bio|send\.boardgamer\.ie|sender\.overly\.it|send\.ksd1\.klaviyomail\.com|send\.ksd2\.klaviyomail\.com|send\.ksdn\.klaviyomail\.com|sensimilla\.shop|senti2delicatessen\.es|sentieo\.com|sergnese\.it|serie-noire\.com|serv1knit\.knitulator\.com|server16f\.axspace\.com|server1\.avanzaeninternet\.com|server1\.droosonline\.com|server1\.ps4iso\.net|server1\.sovereigngracesingles\.com|server260\.web-hosting\.com|server2\.romania-webhosting\.com|server57ir\.irwebspace\.com|server59\.romania-webhosting\.com|server63r\.irwebspace\.com|server63\.romania-webhosting\.com|server64\.romania-webhosting\.com|server68fi\.axspace\.com|server\.anjezweb\.net|server\.cameroonintelligencereport\.com|server\.incestvidz\.com|server\.iq-hosting\.net|server\.kitsguru\.com|server\.silveristhenew\.com|server\.strathmore\.edu|server\.suatmm\.com|server\.thevirtualtouch\.com|server\.thirdmonk\.net|serviceanzeigen\.com|service-sav-pat\.com|servistores-sud\.com|ses\.fatburnersonly\.com\.au|ses-mx\.cocina-familiar\.com|seveneast\.se|seventeenst\.com\.co|sevenwatches\.ru|sexplace\.es|sextoybazaar\.in|sezime\.club|sfm\.scot|sfpteam\.eu|sg1-ts3\.a2hosting\.com|sg3plcpnl0197\.prod\.sin3\.secureserver\.net|shakepleasure\.com|shaposh\.pk|shermansurvival\.com|shifstore\.com|shiftdigital\.ma|shockdom\.com|shoeplace\.ng|shoesandmorebdn\.com|shootingstore\.at|shopdisplaydirect\.co\.uk|shopemail\.it|shoponderdeel\.nl|shoppyssimo\.it|shop-wonderland\.com|shoutout\.ga|showroomvip\.com|SICHERunterwiesen\.at|siciliabeddashop\.com|sickboards\.nl|sicurezzatoscana\.com|sicurform\.net|sidabriniai\.lt|siliad\.gr|sillagesparis\.com|sim\.cl|si-parts\.com|sites\.nearlyfreespeech\.net|sith\.hostdroid\.com\.br|sizesprestashop\.com|sk8hiskateuk\.com|skarbymurano\.pl|skinfinity\.es|skydriver\.com\.br|skymaster\.dreamhost\.com|slkon\.fr|slon\.kylos\.net\.pl|slutever\.kinstamailservice\.com|smaaart\.fr|smalandsmusik\.se|smally\.ro|smartmobile\.pt|smartstartinc\.com|smati-paris\.fr|smgrid\.pl|smokemarket\.ir|smtp\.ipunkt\.cloud|smtpsmart\.forpsi\.com|snapbbm\.com|Sneakylinks\.net|snoepservice\.be|snowpass\.com|sociedadeonline\.com|socisell\.com|socistate\.com|sofia\.sklep\.pl|soft99\.eu|softcontrols\.es|softtouchtechnologies\.net|solarguat\.com|soleildesames\.re|solidarita\.net|solucionestecnicosanitarias\.com|somosfruta\.es|sosenergia\.es|soulnatura\.es|soymanualidades\.com|soytuhogar\.com|spacenet\.tn|spinfood\.es|sprecords\.pl|spremipiu\.com|springwall\.com\.ar|spshop\.it|srtanaif\.com|srv01\.aloojamiento\.com|srv152\.main-hosting\.eu|srv161\.main-hosting\.eu|srv168\.main-hosting\.eu|srv175\.main-hosting\.eu|srv181\.main-hosting\.eu|srv223\.main-hosting\.eu|srv224\.main-hosting\.eu|srv226\.main-hosting\.eu|srv264\.main-hosting\.eu|srv288\.main-hosting\.eu|srv307\.main-hosting\.eu|srv407\.main-hosting\.eu|srv419\.main-hosting\.eu|srv451\.main-hosting\.eu|srv472\.main-hosting\.eu|srv514\.main-hosting\.eu|srv522\.main-hosting\.eu|srv7\.hosting99\.eu|srv\.bestconstruct\.ro|srvc119\.turhost\.com|srvc159\.turhost\.com|srv\.jgandhi\.com|srv\.portaldoaz\.net|ssc\.gov\.jo|sselec\.com|sspl20\.com|stabletransit\.com|staltieses\.lt|stampaperfetta\.it|stargadgets\.net|starkservice\.it|starmann\.pl|starsamstickers\.com|staszewscy\.pl|stay-store\.com|steag\.ro|steeldeck\.com|sterlingshelter\.org|stockpadel\.com|stonemaiergames\.com|stopcrazy\.com|storagebox\.co\.nz|storkoksbutiken\.se|storytellerspotlight\.com|stsklep\.pl|studentprojectguide\.com|studio32\.cz|studioitc\.com|studiolala\.be|studiorighetti\.it|studiosounds\.ch|stylerave\.com|stylion\.pl|sulion\.es|summitconnect\.bi|sun-hands\.ru|sunmusic\.cl|supermaty\.pl|superparts\.es|superpet\.club|superpet\.pe|super-store\.pl|suppsit\.com|surdiscount\.com|susanaferrada\.com|sv69\.ifastnet\.com|svapoebasta\.com|swapland\.fr|sweetpoison\.es|s-wind\.by|swingee\.com|syd1\.dejanseo\.andyt\.co|synergycosmetic\.cz|sypialniaplus\.pl|t3dcomputer\.com|tactac\.es|takanap\.com|talawas\.org|TalkNChat\.net|talla100\.com|tamrino\.ir|tanake\.pl|tanexpert24\.pl|tangamaniaonline\.com|tangerois\.ma|taracittamani\.it|tatlilimon\.com\.tr|tattoobrands\.de|taurosfactory\.com|tcgcenter\.nl|tdiscount\.tn|teamcajarural-segurosrga\.com|teamfit\.fr|techberry\.it|technopro-online\.com)/i 195 | /(teeglobal\.com|tekworld\.it|telason\.com|telebari\.it|tempelgroup\.com|tenaxlederwaren\.nl|ten\.media|tennisdeals\.be|tere\.ozguryazilim\.com\.tr|termometrosenventa\.com|tessiland\.com|test3\.solutionnews\.it|teste-covid19\.ro|thebaggingco\.com|thebeautyband\.com|thecleverowl\.com\.au|thedailychrenk\.com|thedailysheeple|thedevilhouse\.fr|thegoldenlion\.com|thehealthbridges\.com|thehouseoftheboot\.com|thelearninghousecatalog\.com|themerchantofvenice\.it|themidfield\.com|theparfumcompany\.com|thesdelapagode\.com|thesocialpatriot\.com|thetribeconcept\.com|thyo\.fr|ticketsymas\.com|tiendaazul\.com|tiendabellasartesjer\.com|tiendadebellezaonline\.com|tiendamispain\.es|tiendamundolaboral\.net|tiendascedecasa\.com|tiendaselectron\.com|tiendasmgi\.es|tiptopface\.com|tirolshop\.com|tiross\.com|tir\.serverenv\.com|tkdesign\.se|toctoc\.bonjourmaurice\.be|todays-woman\.net|todoelectro\.es|todoespecias\.com|todogrowled\.com|todoparahosteleria\.com|todoparatucoche\.com|tokyogames\.com|toomanytools\.com|topboden\.de|torros\.fr|torros\.nl|tortorasport\.it|tortuedemer\.com|totamona\.com|totenser\.com|touchindya\.com|touteslesbatteries\.com|toutpourlejeu\.com|toutpourlesvolets\.com|toyota\.cl|trackers-cam\.com|track\.lacitedesnuages\.be|traditionsduperigord\.com|trafika\.pl|tragicomico\.it|traktors\.ro|tramasmas\.com|transactional\.emaillabs\.net\.pl|transactional\.freshmail\.mx|trans-europe\.hu|trellisonline\.co\.nz|trendyelements\.com|tresordupatrimoine\.fr|tresorsdesregions\.com|tribune\.pe|triola\.cz|triyoga-akademie\.de|trockit\.com|tropicaflore\.com|trottet\.ch|trozosytelas\.com|truccos\.com\.co|truefanlove\.com|trumpeter-models\.ru|ttinshop\.com|tucanousa\.com|tuchel\.com|tuimeilibre\.com|tunisianet\.com\.tn|tunisiatech\.tn|turatars\.com|turboswim\.com|tutallernatural\.com|tut\.by|tuttoarmiesport\.com|tuttologistica\.it|tuttoperlapiscina\.com|tuttosport\.tn|tvstuff\.com|twin-shop\.be|tygerspace\.com|tylkopilka\.pl|ucavila\.es|ufesa\.es|uft\.me|uisu\.ac\.id|ujorja\.com|ukrbee\.ua|ulyces\.com|umall\.hk|umbrarimorchi\.it|umma\.life|unicornwal\.com|unisson-online\.com|uphairs\.com|upr\.fr|uprint\.uy|uptodogood\.nl|upyourmail\.fr|urbancreedbcn\.com|urbanfun\.es|urbanhello\.com|urbankingstore\.com|USA\.Life|usedlaptopdubai\.com|us\.hosting-webspace\.io|utcr\.live|uvs\.edu\.sn|uzbekvibes\.com|v142\.webindex\.ro|valoret\.de|vanniniaquaepool\.it|vapingstock\.com|vauvatalojohanna\.fi|veeid\.io|vegacylinders\.it|veggieboogie\.com|verycook\.com|verysmartphones\.com|vestiario\.pl|vestilafamiglia\.it|vh240\.timeweb\.ru|vibus\.in|vicionet\.com|vienna-marathon\.com|vietnamobile\.com\.vn|vikme\.uz|vilaboral\.es|villarrealcf\.es|vinciguerrashop\.com|vinotecacollado\.com|viphogar\.es|virtualbusinessgrid\.org|visionoptimum\.ca|vistete\.net|vitagomitas\.co|vitis\.lt|vitray\.market|vivacosmetic\.com|vivaria\.es|vivasan\.bg|viveroscastro\.es|vl20961\.dns-privadas\.es|vmcreativo\.com|vmhsdcos01\.proecuador\.gob\.ec|voderi\.com|voletshop\.fr|voltbkk\.com|vonavysvet\.sk|voxvix\.com|vps1282|vps-1519966-x\.dattaweb\.com|vps-1569258-x\.dattaweb\.com|vps213408\.ovh\.net|vps-28655\.vps-default-host\.net|vps44246\.inmotionhosting\.com|vps65793\.inmotionhosting\.com|vps9536\.inmotionhosting\.com|vps\.automaticgatesolutions\.com\.au|vps-cinephiliabeyond2\.s4w\.com\.hr|vps-glas-koncila\.s4w\.com\.hr|vps\.heromachine\.com|vp\.technica\.com\.ng|vrakking-tires\.com|vray\.us|vsetip\.top|vybavenie-hotelov\.sk|vyrobkyzovcivlny\.cz|waamcosmetics\.com|waf\.bz|wanczykowka\.pl|wapalli\.com|waterpikukonline\.co\.uk|web18\.com\.es|web348\.c16\.webspace-verkauf\.de|web3\.kikxxl\.net|web44\.level27\.be|web4\.colnodo\.apc\.org|webhosting\.be|webmoveisonline\.pt|webpreneursclub\.com|web\.sbipensionfunds\.com|webxc19s08\.ad\.aruba\.it|webxc236s02\.ad\.aruba\.it|webxc286s05\.ad\.aruba\.it|webxc305s04\.ad\.aruba\.it|webxc315s06\.ad\.aruba\.it|wegett\.de|wendyspa\.com|wesleydosanjos\.com|wholesalesecurity\.africa|whszerszam\.hu|wiautomation\.com|wildlense\.com|windcenterdenia\.com|windkraft-journal\.de|wisbig\.com|witcheslore\.com|woodbe\.ro|wookah\.pl|WordPress1a41a6jkns20181003e8ea30|wp1021\.hostgator\.com|wpdatacenter\.com|wps25-pri\.phpnet\.org|wrozkacycuszka\.pl|www2750\.sakura\.ne\.jp|www68\.world4you\.com|www\.ber-ticket\.de|www\.leipzig-leben\.de|www\.personalisedog\.com|www\.tiberius\.at|wydawnictwolinia\.pl|xblitz\.pl|xenonhuset\.se|x\.fw-mail\.com|xmail-1\.com|xn--nda\.fr|xn--p1dt\.com|xpertyst\.com|x-sensors\.ch|xtg\.es|xtrems\.ro|yaban-racing\.com|yalesklep\.pl|yarbook\.com|ya\.ru|yashfi\.com|yespshop\.com|yogaessential\.com|yonhoo\.es|youme\.mx|yourhostingaccount\.com|youshopyam\.fr|yukselyapi\.com\.tr|yzelok\.com\.ua|zabarno\.com|zagros\.pws-dns\.net|zapatillassancho\.com|zapatosvas\.com|zarhaltekstil\.com\.tr|zarrinac\.com|zaychat\.co|zechats\.com|zeina\.fr|zenoweb\.it|zimmermann\.fr|zimowynarodowy\.pl|zirvede\.net|zoli99\.com|zona-design\.pl|zonawellness\.it|zoo24\.pl|zoocolor\.fr|zooexpert\.it|zo-oikologika\.gr|zrenjaninski\.com|zuhaus\.cl)/i 196 | /(realnewsfeed\.com|38dns\.com|helicopteranswers\.com |absolutaseguridad\.com|academiamoviles\.com|acomo\.com\.pe|agarrate\.pe|akribisweb\.ccsend\.com|alqcorp\.com\.pe|anura\.pe|arsitisac\.com|bestbikes\.com\.pe|bienesraicess\.com|boletinempresarial\.net|businessreports\.net\.pe|caddin\.com|caplae\.net|caribbeanpacificcorp\.com|ceramicoscaceres\.com|cmspeople\.com|conocecapacitacion\.com|contactus\.ccsend\.com|corsurp\.com\.pe|creativaseo\.com|cymedia\.net\.pe|dcordesigns\.com|durdurtv\.net|easytobook\.org|ematefinal\.com|endeavant\.com|enfoquecomunicaciones\.com|extintoresyseguridad\.com|eye-equip\.com|gasnaturalcontratista\.com|gestionmodular\.com|gisoft\.net|graduationportraits\.com|hosting\.creativaperu\.com|iberianmedical\.es|ilcoinperu\.com|impactocorp\.com|inforguia\.pe|inspireapi\.live|interandean\.com|kickky\.com|laibid\.com|liceo\.org|limsacpe\.com|mdnicaragua\.com|mlsend2\.com|mrk\.com\.pe|partifasli\.com|pe\.tuv\.com|peruviantravelservice\.com|playhouse\.net\.pe|pmediastudio\.com|poplarblufflions\.org|propuestaunica\.com|qhse\.com\.pe|radgroups\.org|seivolt\.com|seowebperu\.info|sesmaconsultores\.com|skills-landing\.com|staples\.ccmpeu\.net|starfishtour\.org|tanzaniaonline\.org|telmark\.pe|thevoiceblog\.org|tourism-turkey\.net|transportationholding\.com|yolou\.com|384group\.com|93423\.senders\.goto-9\.net|ablaw\.ae|adduni\.com|adrianelyperu\.com|altenia\.org|ampellconsultores\.com|angerfre\.com|antryx\.net\.pe|anunciacuba\.com|anunciaelsalvador\.com|anuncianicaragua\.com|anunciaparaguay\.com|anunciapuertorico\.com|anunciavenezuela\.com|anutoberfest\.com|arazi\.com\.ar|arquienlaces\.com|asistentesdegerencia\.org|aulatributaria\.com|barassoc\.com|benet\.ru|best-fair\.com|bizlinks\.la|bodhi\.pe|bodytomind\.org|boletinesenlima\.com|bsconsulting\.pe|caesso\.com|ccsend\.com|cdlconsultores\.com|ceditedv\.com\.pe|chinabit\.co|coginto\.org|compipro\.net|compipro\.tk|conastec\.com\.pe|consultingti\.pe|contacto-proveedores\.com|contadoresyperitos\.com|contasic\.org|coopacnsr\.com\.pe|corporacionesmeralda\.com|cperu\.org|creasolucionesperu\.com|creativaperu\.com|cursosgratisperu\.com|cursosgratisperu\.org|cutl\.in|cymedia\.ccsend\.com|ddideaspublicitarias\.com|dnp\.com\.pe|drjenespanol\.ccsend\.com|duckiez\.com|easeus\.com|ebis\.conastec\.com\.pe|ebr-register\.org|ecovis-info\.com\.pe|edipesa\.com\.pe|ejecutivasperuanas\.org|email\.shoplazza\.com|entrenamientocerteromail\.com|escueladeespecializacionprofesional\.com|euroavisos\.com|euroavisos\.org|evaconsultingperu\.com|events-logistics\.com|fabicu\.com|fasionmagazine\.com|fastestfax\.com|fehlmex\.mx|ferlog\.com|fonoamerica\.com|frontpagexpert\.com|gamingakhada\.com|gcbglobal\.com|generaltecperu\.com|getresponse-mail\.com|goldenprime\.la|good-neighbours\.com|gostate\.org|grupoburmester\.com|grupocastaneda\.com\.pe|grupogaviria\.pe|grupohammersac\.com|grupopylperu\.com|gruporeparto\.pe|grupovidal\.online|gth-peru\.com|gypsolution\.pe|hae\.com\.pe|hardrental\.com|helpnet\.cl|herramientasperu\.com|hi-me\.org|hidri\.org|historiasrealescovid\.com|hmsmakine\.com|hpinvestigaciones\.com|icdshua\.com|identityurl\.com|igc\.pe|im-consultores\.com|imagoimpresiones\.pe|imesac\.com\.pe|industriaalimentaria\.org|industriasmega\.com|info\.com\.pe|info\.securex\.pe|informatica-ocasion\.eu|ingeasoto\.com|intelidata\.cl|inter-pymes\.com|inventivaperu\.com|inversionesayelen\.com)/i 197 | /(itrabajo\.pe|ivankastyles\.pe|jkimperu\.com|jonconrad\.com|knetek\.com|komperu\.com|kunaq\.com\.pe|lausehume\.com|limacallcenter\.com|limapositiva\.com|liquidsnake\.com|llorente\.cl|mailingperu2020\.com|mailingtopp\.info|manplag\.com\.pe|mbs-kb\.com|mecxhost\.com|megafabricas\.com|mercadeo-logyca\.com|merchandisingold\.com\.pe|metconsul\.pe|mk-sg\.com|modeststream\.com|mp3ice\.com|mwtoolsind\.com|naiperu\.com|njaa\.r3og2\.cn|nuevavidaconsultores\.com|nutoberfest\.com|oceanbridgecargo\.com|oistudio\.pe|okapygroup\.com|okcomputer\.com\.pe|oncoplastico\.pe|optifarmasalud\.com\.pe|p2tp\.org|paisperu\.com|pakusstan\.com|parker-peru\.com|pedidoscorporativos\.com|pedidoscorporativos\.org|peruavisos\.org|perueficaz\.com|peruenmovimiento\.com|peruleadership\.com|peruprospero\.com|pkr\.pe|plandecrecimiento\.com|pls-peru\.ne|pls-peru\.net|principal-leadership\.com|procuradurias\.com|prodsol\.org|promotrader\.es|proservv\.com|publikado\.net\.pe|publimerch\.com\.pe|referix\.net|representacioneslim\.com|rhdexecutive\.net\.pe|ribeiroymdl\.pe|rtmperu\.com|salicru\.com\.pe|sandler\.com|saunasteam\.com\.mx|shalatinoamerica\.com|sielagroup\.com|singular4\.ccsend\.com|sixan\.pe|smacentral\.org|ssc\.pe|stofjassen\.org|suziesgourmetgifts\.com|tamwien\.com|techmastersperu\.com|tetsuco\.com|thefederalinvestigator\.com|thinkmiami\.ccsend\.com|ticnegocio\.com|tnempresastn\.fr-mdirector\.com|tnempresastn1\.fr-mdirector\.com|tntelec\.fr-mdirector\.com|toomuchtalking\.com|trytdd\.org|tuproyecto\.net\.pe|turuncuholding\.com|tusuministro\.pe|uberbride\.com|unibag\.com\.pe|update\.gamingakhada\.com|utilsupply\.com\.pe|vcanocompany\.com|vcnhome\.com|verisure\.pe|vesacorp\.com|virtualesonline\.net\.pe|vpintegral\.com|werkschoen\.org|winaytel\.com|wobi\.com|zenfoliomail\.com|t-krea\.pe|phprecord\.com|javaspictures\.com|farsna\.com|publicidadpremier\.fun|eyemystuff\.org|metabbo\.org|sparelec\.com|aqphost\.org|hoph\.org|pintorya\.com|harmandirsahib\.org|bepranh\.com|wantedglobal\.com|analoblog\.com|delfin\.com\.pe|wigsok\.com|axenenergy\.com|corporacionesenperu\.com|mcdanielsco\.com|apneadr\.com|anunciauruguay\.com|brawago\.com|digital-studio\.org|dir\.pe|redexpertos\.com|flkta\.com|aatoplist\.org|sendingservice\.net|spidypeter\.com|fiestaslima\.com|jaxonmta\.com|tgwizard\.com|envios-cistronixperu\.com|bksistemas\.com|grupocreativorom\.com|marketofperu\.com|toneer\.org|ecotoschool\.org|lolindo\.org|tuquellevas\.com|gwsunday\.com|bana4slim\.com|chicladiesbags\.com|limoncreativo\.com|purefruit\.org|chrisanderrolflynn\.com|ok4ya\.com|4tickets\.org|volpessagroup\.com|studio4host\.com|micrpay\.org|managementreputation\.org|bbcsindhi\.com|certifyyouremail\.com|garygaoblog\.com|itmra\.com|echohomeschool\.net|premsager\.com|ankaraahsapev\.com|istanbul-ilan\.com|seddaa\.com|riamob\.com|dynforms\.com|expoeverything\.org|cperu\.net|rajcomforts\.com|buildawn\.com|geniusys\.org|racebooktrader\.com|itmra\.org|designchina\.org|fact\.net\.pe|regalospublicitariosperu\.com|eurasianstudies\.org|robotbureau\.org|itmrastuff\.com|inextinfo\.com|nycmetro\.org|scedo\.org|tvcskyshoopbd\.com|dubaifootwear\.com|aperhu\.com|roysg\.com|myhealthsupport\.net|abuckatime\.org|pressplace\.net|publishmatic\.com|omjworld\.com|luck3d\.org|aicaimm\.org|robotconference\.org|benglebay\.com|bogamarketsac\.com|forexent\.com|batgioi\.com|ambit-customers\.com|thedigiweek\.com|dbazz\.com|skysport-iq\.com|arixas\.com|eogrenme\.org|industriasmerk\.com|wildrosemanor\.org|laundraholic\.com|mopuri\.org|ribsrim\.com|broad-alliance\.org|luclaro\.com|saasnola\.com|youcanweb\.net|ateneacrea\.com|shidane\.org|barak1605\.com|principal-goal\.com|niyoshi-david\.com|md-line\.com)/i 198 | /(hoorayworld\.net|happyeve\.net|brightandblossom\.com|tripserved\.net|joyfullyjournal\.com|yooconnection\.com|timeowned\.xyz|thewiredeffect\.com|guidelikes\.click|perfectsearchmedia\.info|optimhires\.com)/i 199 | --------------------------------------------------------------------------------