forked from Stevie-Ray/referrer-spam-blocker
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathreferral-spam.vcl
2618 lines (2618 loc) · 125 KB
/
referral-spam.vcl
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# https://github.com/Stevie-Ray/referrer-spam-blocker
# Updated 2017-10-07 22:37:19
sub block_referral_spam {
if (
req.http.Referer ~ "(?i)000free\.us" ||
req.http.Referer ~ "(?i)00author\.com" ||
req.http.Referer ~ "(?i)00go\.com" ||
req.http.Referer ~ "(?i)00it\.com" ||
req.http.Referer ~ "(?i)0n\-line\.tv" ||
req.http.Referer ~ "(?i)1\-99seo\.com" ||
req.http.Referer ~ "(?i)1\-free\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)100dollars\-seo\.com" ||
req.http.Referer ~ "(?i)100searchengines\.com" ||
req.http.Referer ~ "(?i)101flag\.ru" ||
req.http.Referer ~ "(?i)11235813\.webzdarma\.cz" ||
req.http.Referer ~ "(?i)12masterov\.com" ||
req.http.Referer ~ "(?i)1hwy\.com" ||
req.http.Referer ~ "(?i)1kinobig\.ru" ||
req.http.Referer ~ "(?i)1pamm\.ru" ||
req.http.Referer ~ "(?i)1webmaster\.ml" ||
req.http.Referer ~ "(?i)2015god\.org" ||
req.http.Referer ~ "(?i)24videos\.tv" ||
req.http.Referer ~ "(?i)24x7\-server\-support\.site" ||
req.http.Referer ~ "(?i)256bit\.by" ||
req.http.Referer ~ "(?i)273\-fz\.ru" ||
req.http.Referer ~ "(?i)2ads\.co\.uk" ||
req.http.Referer ~ "(?i)2itech\.ru" ||
req.http.Referer ~ "(?i)2kata\.ru" ||
req.http.Referer ~ "(?i)2nt\.ru" ||
req.http.Referer ~ "(?i)2your\.site" ||
req.http.Referer ~ "(?i)3\-letter\-domains\.net" ||
req.http.Referer ~ "(?i)3dracergames\.com" ||
req.http.Referer ~ "(?i)45en\.ru" ||
req.http.Referer ~ "(?i)45tahunkhongguan\.com" ||
req.http.Referer ~ "(?i)4istoshop\.com" ||
req.http.Referer ~ "(?i)4webmasters\.com" ||
req.http.Referer ~ "(?i)4webmasters\.org" ||
req.http.Referer ~ "(?i)5\-steps\-to\-start\-business\.com" ||
req.http.Referer ~ "(?i)5elementov\.ru" ||
req.http.Referer ~ "(?i)5forex\.ru" ||
req.http.Referer ~ "(?i)6hopping\.com" ||
req.http.Referer ~ "(?i)76brighton\.co\.uk" ||
req.http.Referer ~ "(?i)76brighton\.com" ||
req.http.Referer ~ "(?i)7makemoneyonline\.com" ||
req.http.Referer ~ "(?i)7zap\.com" ||
req.http.Referer ~ "(?i)a\-hau\.mk" ||
req.http.Referer ~ "(?i)a14download\.com" ||
req.http.Referer ~ "(?i)abbanreddy\.com" ||
req.http.Referer ~ "(?i)abc\.xyz" ||
req.http.Referer ~ "(?i)abcdefh\.xyz" ||
req.http.Referer ~ "(?i)abcdeg\.xyz" ||
req.http.Referer ~ "(?i)abclauncher\.com" ||
req.http.Referer ~ "(?i)abiente\.ru" ||
req.http.Referer ~ "(?i)abovetherivernc\.com" ||
req.http.Referer ~ "(?i)abtasty\.com" ||
req.http.Referer ~ "(?i)academia\-nsk\.org" ||
req.http.Referer ~ "(?i)acads\.net" ||
req.http.Referer ~ "(?i)actata\.co" ||
req.http.Referer ~ "(?i)acunetix\-referrer\.com" ||
req.http.Referer ~ "(?i)adcash\.com" ||
req.http.Referer ~ "(?i)addblueoff\.com\.ua" ||
req.http.Referer ~ "(?i)addons\.mozilla\.org/en\-us/firefox/addon/ilovevitaly" ||
req.http.Referer ~ "(?i)adelly\.bg" ||
req.http.Referer ~ "(?i)adspart\.com" ||
req.http.Referer ~ "(?i)adtiger\.tk" ||
req.http.Referer ~ "(?i)adultfullhd\.com" ||
req.http.Referer ~ "(?i)adventureparkcostarica\.com" ||
req.http.Referer ~ "(?i)adviceforum\.info" ||
req.http.Referer ~ "(?i)advocatemsk\.ru" ||
req.http.Referer ~ "(?i)advokateg\.co" ||
req.http.Referer ~ "(?i)advokateg\.com" ||
req.http.Referer ~ "(?i)advokateg\.ru" ||
req.http.Referer ~ "(?i)advokateg\.xyz" ||
req.http.Referer ~ "(?i)aerogo\.com" ||
req.http.Referer ~ "(?i)affordablewebsitesandmobileapps\.com" ||
req.http.Referer ~ "(?i)afora\.ru" ||
req.http.Referer ~ "(?i)agreda\.pluto\.ro" ||
req.http.Referer ~ "(?i)akama\.com" ||
req.http.Referer ~ "(?i)akuhni\.by" ||
req.http.Referer ~ "(?i)akusherok\.ru" ||
req.http.Referer ~ "(?i)akvamaster\.dp\.ua" ||
req.http.Referer ~ "(?i)alborzan\.com" ||
req.http.Referer ~ "(?i)alert\-fdm\.xyz" ||
req.http.Referer ~ "(?i)alert\-fjg\.xyz" ||
req.http.Referer ~ "(?i)alert\-hgd\.xyz" ||
req.http.Referer ~ "(?i)alert\-jdh\.xyz" ||
req.http.Referer ~ "(?i)alessandraleone\.com" ||
req.http.Referer ~ "(?i)alfa\-medosmotr\.ru" ||
req.http.Referer ~ "(?i)alfa9\.com" ||
req.http.Referer ~ "(?i)alfabot\.xyz" ||
req.http.Referer ~ "(?i)alfapro\.ru" ||
req.http.Referer ~ "(?i)alibestsale\.com" ||
req.http.Referer ~ "(?i)aliexpress\.com" ||
req.http.Referer ~ "(?i)alif\-ba\-ta\.com" ||
req.http.Referer ~ "(?i)alive\-ua\.com" ||
req.http.Referer ~ "(?i)all4invest\.ru" ||
req.http.Referer ~ "(?i)allcredits\.su" ||
req.http.Referer ~ "(?i)alldownload\.pw" ||
req.http.Referer ~ "(?i)allforminecraft\.ru" ||
req.http.Referer ~ "(?i)allknow\.info" ||
req.http.Referer ~ "(?i)allkrim\.com" ||
req.http.Referer ~ "(?i)allmarketsnewdayli\.gdn" ||
req.http.Referer ~ "(?i)allnews\.md" ||
req.http.Referer ~ "(?i)allnews24\.in" ||
req.http.Referer ~ "(?i)allpdfmags\.net" ||
req.http.Referer ~ "(?i)allsilver925\.co\.il" ||
req.http.Referer ~ "(?i)alltheviews\.com" ||
req.http.Referer ~ "(?i)allwomen\.info" ||
req.http.Referer ~ "(?i)alot\.com" ||
req.http.Referer ~ "(?i)alphaforum\.ru" ||
req.http.Referer ~ "(?i)alpharma\.net" ||
req.http.Referer ~ "(?i)alpinaskate\.com" ||
req.http.Referer ~ "(?i)altermix\.ua" ||
req.http.Referer ~ "(?i)alveris\.ru" ||
req.http.Referer ~ "(?i)am\-se\.com" ||
req.http.Referer ~ "(?i)amanda\-porn\.ga" ||
req.http.Referer ~ "(?i)amazon\-seo\-service\.com" ||
req.http.Referer ~ "(?i)amoi\.tn" ||
req.http.Referer ~ "(?i)amoremio\.by" ||
req.http.Referer ~ "(?i)amospalla\.es" ||
req.http.Referer ~ "(?i)amt\-k\.ru" ||
req.http.Referer ~ "(?i)anal\-acrobats\.hol\.es" ||
req.http.Referer ~ "(?i)analytics\-ads\.xyz" ||
req.http.Referer ~ "(?i)anapa\-inns\.ru" ||
req.http.Referer ~ "(?i)android\-style\.com" ||
req.http.Referer ~ "(?i)android\-systems\.ru" ||
req.http.Referer ~ "(?i)android\-vsem\.org" ||
req.http.Referer ~ "(?i)android4fun\.org" ||
req.http.Referer ~ "(?i)androids\-store\.com" ||
req.http.Referer ~ "(?i)animebox\.com\.ua" ||
req.http.Referer ~ "(?i)anticrawler\.org" ||
req.http.Referer ~ "(?i)aosheng\-tech\.com" ||
req.http.Referer ~ "(?i)apartmentbay\.ru" ||
req.http.Referer ~ "(?i)apartmentratings\.com" ||
req.http.Referer ~ "(?i)apishops\.ru" ||
req.http.Referer ~ "(?i)apxeo\.info" ||
req.http.Referer ~ "(?i)aramaicmedia\.org" ||
req.http.Referer ~ "(?i)arate\.ru" ||
req.http.Referer ~ "(?i)arcadepages\.com" ||
req.http.Referer ~ "(?i)architecturebest\.com" ||
req.http.Referer ~ "(?i)arendakvartir\.kz" ||
req.http.Referer ~ "(?i)arendas\.net" ||
req.http.Referer ~ "(?i)arendovalka\.xyz" ||
req.http.Referer ~ "(?i)arkartex\.ru" ||
req.http.Referer ~ "(?i)arkkivoltti\.net" ||
req.http.Referer ~ "(?i)arraty\.altervista\.org" ||
req.http.Referer ~ "(?i)artdeko\.info" ||
req.http.Referer ~ "(?i)artefakct\.com" ||
req.http.Referer ~ "(?i)artparquet\.ru" ||
req.http.Referer ~ "(?i)aruplighting\.com" ||
req.http.Referer ~ "(?i)asacopaco\.tk" ||
req.http.Referer ~ "(?i)asia\-forum\.ru" ||
req.http.Referer ~ "(?i)asmxsatadriverin\.aircus\.com" ||
req.http.Referer ~ "(?i)atlant\-auto\.info" ||
req.http.Referer ~ "(?i)atlasvkusov\.ru" ||
req.http.Referer ~ "(?i)atley\.eu\.pn" ||
req.http.Referer ~ "(?i)atmagroup\.ru" ||
req.http.Referer ~ "(?i)audiobangout\.com" ||
req.http.Referer ~ "(?i)ausergrubhof\.info" ||
req.http.Referer ~ "(?i)australia\-opening\-times\.com" ||
req.http.Referer ~ "(?i)auto\-moto\-elektronika\.cz" ||
req.http.Referer ~ "(?i)auto\-news\-digest\.ru" ||
req.http.Referer ~ "(?i)auto\-zapchasti\.org" ||
req.http.Referer ~ "(?i)auto\.rusvile\.lt" ||
req.http.Referer ~ "(?i)auto4style\.ru" ||
req.http.Referer ~ "(?i)autobrennero\.it" ||
req.http.Referer ~ "(?i)autobudpostach\.club" ||
req.http.Referer ~ "(?i)autoloans\.com" ||
req.http.Referer ~ "(?i)autolombard\-krasnodar\.ru" ||
req.http.Referer ~ "(?i)autonew\.biz" ||
req.http.Referer ~ "(?i)autoseo\-traffic\.com" ||
req.http.Referer ~ "(?i)autotop\.com\.ua" ||
req.http.Referer ~ "(?i)autovideobroadcast\.com" ||
req.http.Referer ~ "(?i)autowebmarket\.com\.ua" ||
req.http.Referer ~ "(?i)avek\.ru" ||
req.http.Referer ~ "(?i)aviapanda\.ru" ||
req.http.Referer ~ "(?i)aviav\.ru\.com" ||
req.http.Referer ~ "(?i)avitocars\.ru" ||
req.http.Referer ~ "(?i)aviva\-limoux\.com" ||
req.http.Referer ~ "(?i)avkzarabotok\.com" ||
req.http.Referer ~ "(?i)avkzarabotok\.info" ||
req.http.Referer ~ "(?i)avon\-severozapad\.ru" ||
req.http.Referer ~ "(?i)avtoarenda\.by" ||
req.http.Referer ~ "(?i)avtocredit\-legko\.ru" ||
req.http.Referer ~ "(?i)avtointeres\.ru" ||
req.http.Referer ~ "(?i)avtovolop\.ru" ||
req.http.Referer ~ "(?i)awency\.com" ||
req.http.Referer ~ "(?i)ayerbo\.xhost\.ro" ||
req.http.Referer ~ "(?i)azadnegar\.com" ||
req.http.Referer ~ "(?i)azartclub\.org" ||
req.http.Referer ~ "(?i)azartniy\-bonus\.com" ||
req.http.Referer ~ "(?i)azazu\.ru" ||
req.http.Referer ~ "(?i)azbuka\-mo\.ru" ||
req.http.Referer ~ "(?i)azbukadiets\.ru" ||
req.http.Referer ~ "(?i)azbukafree\.com" ||
req.http.Referer ~ "(?i)azlex\.uz" ||
req.http.Referer ~ "(?i)b\-buyeasy\.com" ||
req.http.Referer ~ "(?i)b2b\-lounge\.com" ||
req.http.Referer ~ "(?i)bablonow\.ru" ||
req.http.Referer ~ "(?i)backgroundpictures\.net" ||
req.http.Referer ~ "(?i)bag77\.ru" ||
req.http.Referer ~ "(?i)baixar\-musicas\-gratis\.com" ||
req.http.Referer ~ "(?i)baixar\-musicas\-gratis\.comsavetubevideo\.com" ||
req.http.Referer ~ "(?i)bala\.getenjoyment\.net" ||
req.http.Referer ~ "(?i)baladur\.ru" ||
req.http.Referer ~ "(?i)balitouroffice\.com" ||
req.http.Referer ~ "(?i)balkanfarma\.ru" ||
req.http.Referer ~ "(?i)balois\.worldbreak\.com" ||
req.http.Referer ~ "(?i)bambi\.ck\.ua" ||
req.http.Referer ~ "(?i)banan\.tv" ||
req.http.Referer ~ "(?i)bankcrediti\.ru" ||
req.http.Referer ~ "(?i)bankiem\.pl" ||
req.http.Referer ~ "(?i)bard\-real\.com\.ua" ||
req.http.Referer ~ "(?i)bashtime\.ru" ||
req.http.Referer ~ "(?i)basisches\-wasser\.net" ||
req.http.Referer ~ "(?i)bausparen\.bz\.it" ||
req.http.Referer ~ "(?i)bazaronline24\.ru" ||
req.http.Referer ~ "(?i)bbtec\.net" ||
req.http.Referer ~ "(?i)beamfall\.info" ||
req.http.Referer ~ "(?i)beauby\.ru" ||
req.http.Referer ~ "(?i)beauty\-clinic\.ru" ||
req.http.Referer ~ "(?i)begalka\.xyz" ||
req.http.Referer ~ "(?i)belinvestdom\.by" ||
req.http.Referer ~ "(?i)berdasovivan\.ru" ||
req.http.Referer ~ "(?i)berlininsl\.com" ||
req.http.Referer ~ "(?i)berrymall\.ru" ||
req.http.Referer ~ "(?i)best\-seo\-offer\.com" ||
req.http.Referer ~ "(?i)best\-seo\-software\.xyz" ||
req.http.Referer ~ "(?i)best\-seo\-solution\.com" ||
req.http.Referer ~ "(?i)bestchoice\.cf" ||
req.http.Referer ~ "(?i)bestempresas\.es" ||
req.http.Referer ~ "(?i)bestmobilityscooterstoday\.com" ||
req.http.Referer ~ "(?i)bestofferswalkmydogouteveryday\.gq" ||
req.http.Referer ~ "(?i)bestplacetobuyeriacta\.jw\.lt" ||
req.http.Referer ~ "(?i)bestwebsiteawards\.com" ||
req.http.Referer ~ "(?i)bestwebsitesawards\.com" ||
req.http.Referer ~ "(?i)bet\-prognoz\.com" ||
req.http.Referer ~ "(?i)betonka\.pro" ||
req.http.Referer ~ "(?i)betune\.onlinewebshop\.net" ||
req.http.Referer ~ "(?i)betwinservice\.com" ||
req.http.Referer ~ "(?i)beyan\.host\.sk" ||
req.http.Referer ~ "(?i)bezcmexa\.ru" ||
req.http.Referer ~ "(?i)bezlimitko\.xyz" ||
req.http.Referer ~ "(?i)bezsporno\.ru" ||
req.http.Referer ~ "(?i)beztuberkuleza\.ru" ||
req.http.Referer ~ "(?i)bif\-ru\.info" ||
req.http.Referer ~ "(?i)bigcities\.org" ||
req.http.Referer ~ "(?i)biglistofwebsites\.com" ||
req.http.Referer ~ "(?i)biketank\.ga" ||
req.http.Referer ~ "(?i)billiard\-classic\.com\.ua" ||
req.http.Referer ~ "(?i)billigerstrom\.co" ||
req.http.Referer ~ "(?i)bimatoprost\-careprost\.com" ||
req.http.Referer ~ "(?i)bimatoprost\-careprost\.com\.ua" ||
req.http.Referer ~ "(?i)binomo\.kz" ||
req.http.Referer ~ "(?i)bio\-japan\.net" ||
req.http.Referer ~ "(?i)bio\-market\.kz" ||
req.http.Referer ~ "(?i)bio\.trade\-jp\.net" ||
req.http.Referer ~ "(?i)bioca\.org" ||
req.http.Referer ~ "(?i)birzha\-truda\.eu" ||
req.http.Referer ~ "(?i)bisign\.info" ||
req.http.Referer ~ "(?i)bitcoins\-live\.ru" ||
req.http.Referer ~ "(?i)biteg\.xyz" ||
req.http.Referer ~ "(?i)biznesluxe\.ru" ||
req.http.Referer ~ "(?i)biznesrealnost\.ru" ||
req.http.Referer ~ "(?i)biznesschat\.net" ||
req.http.Referer ~ "(?i)bizru\.info" ||
req.http.Referer ~ "(?i)bkns\.vn" ||
req.http.Referer ~ "(?i)black\-friday\.ga" ||
req.http.Referer ~ "(?i)blackhatworth\.com" ||
req.http.Referer ~ "(?i)blackle\.com" ||
req.http.Referer ~ "(?i)blackplanet\.com" ||
req.http.Referer ~ "(?i)blackwitchcraft\.ru" ||
req.http.Referer ~ "(?i)blavia\.00author\.com" ||
req.http.Referer ~ "(?i)bleacherreport\.com" ||
req.http.Referer ~ "(?i)blockworld\.ru" ||
req.http.Referer ~ "(?i)blog\.f00kclan\.de" ||
req.http.Referer ~ "(?i)blog\.koorg\.ru" ||
req.http.Referer ~ "(?i)blog\.latuti\.net" ||
req.http.Referer ~ "(?i)blog\.remote\-computer\.de" ||
req.http.Referer ~ "(?i)blog\.yam\.com" ||
req.http.Referer ~ "(?i)blogarun\.co" ||
req.http.Referer ~ "(?i)bloggen\.be" ||
req.http.Referer ~ "(?i)bloggers\.nl" ||
req.http.Referer ~ "(?i)blogig\.org" ||
req.http.Referer ~ "(?i)blogos\.kz" ||
req.http.Referer ~ "(?i)blogs\.rediff\.com" ||
req.http.Referer ~ "(?i)blogster\.com" ||
req.http.Referer ~ "(?i)blogtotal\.de" ||
req.http.Referer ~ "(?i)blue\-square\.biz" ||
req.http.Referer ~ "(?i)bluerobot\.info" ||
req.http.Referer ~ "(?i)board\.f00d\.de" ||
req.http.Referer ~ "(?i)bobba\.dzaba\.com" ||
req.http.Referer ~ "(?i)bodybuilding\-shop\.biz" ||
req.http.Referer ~ "(?i)boleznikogi\.com" ||
req.http.Referer ~ "(?i)bolezniorganov\.ru" ||
req.http.Referer ~ "(?i)boltalko\.xyz" ||
req.http.Referer ~ "(?i)bombla\.org" ||
req.http.Referer ~ "(?i)bonux\.nextview\.ru" ||
req.http.Referer ~ "(?i)bookmaker\-bet\.com" ||
req.http.Referer ~ "(?i)bookmark4you\.biz" ||
req.http.Referer ~ "(?i)bookmark4you\.com" ||
req.http.Referer ~ "(?i)bookmark4you\.com\.biz" ||
req.http.Referer ~ "(?i)boole\.onlinewebshop\.net" ||
req.http.Referer ~ "(?i)boost\-my\-site\.com" ||
req.http.Referer ~ "(?i)boostmyppc\.com" ||
req.http.Referer ~ "(?i)bosefux\.esy\.es" ||
req.http.Referer ~ "(?i)bosman\.pluto\.ro" ||
req.http.Referer ~ "(?i)bouda\.kvalitne\.cz" ||
req.http.Referer ~ "(?i)brains2\.biz" ||
req.http.Referer ~ "(?i)brakehawk\.com" ||
req.http.Referer ~ "(?i)brandov\.ru" ||
req.http.Referer ~ "(?i)brateg\.xyz" ||
req.http.Referer ~ "(?i)break\-the\-chains\.com" ||
req.http.Referer ~ "(?i)breget74\.ru" ||
req.http.Referer ~ "(?i)brendbutik\.ru" ||
req.http.Referer ~ "(?i)bristolhostel\.com" ||
req.http.Referer ~ "(?i)bristolhotel\.com" ||
req.http.Referer ~ "(?i)bristolhotel\.com\.ua" ||
req.http.Referer ~ "(?i)brk\-rti\.ru" ||
req.http.Referer ~ "(?i)brokergid\.ru" ||
req.http.Referer ~ "(?i)brooklyn\-ads\.com" ||
req.http.Referer ~ "(?i)brothers\-smaller\.ru" ||
req.http.Referer ~ "(?i)brus\-vsem\.ru" ||
req.http.Referer ~ "(?i)brus\.city" ||
req.http.Referer ~ "(?i)budilneg\.xyz" ||
req.http.Referer ~ "(?i)budmavtomatika\.com\.ua" ||
req.http.Referer ~ "(?i)budpost\.com\.ua" ||
req.http.Referer ~ "(?i)bugof\.gq" ||
req.http.Referer ~ "(?i)buigas\.00it\.com" ||
req.http.Referer ~ "(?i)buketeg\.xyz" ||
req.http.Referer ~ "(?i)bukleteg\.xyz" ||
req.http.Referer ~ "(?i)buqayy0\.livejournal\.com" ||
req.http.Referer ~ "(?i)burger\-imperia\.com" ||
req.http.Referer ~ "(?i)burn\-fat\.ga" ||
req.http.Referer ~ "(?i)buttons\-for\-website\.com" ||
req.http.Referer ~ "(?i)buttons\-for\-your\-website\.com" ||
req.http.Referer ~ "(?i)buy\-cheap\-online\.info" ||
req.http.Referer ~ "(?i)buy\-cheap\-pills\-order\-online\.com" ||
req.http.Referer ~ "(?i)buy\-forum\.ru" ||
req.http.Referer ~ "(?i)buyantiviralwp\.com" ||
req.http.Referer ~ "(?i)buyessay3\.blogspot\.ru" ||
req.http.Referer ~ "(?i)buyessaynow\.biz" ||
req.http.Referer ~ "(?i)buyessayonline19\.blogspot\.ru" ||
req.http.Referer ~ "(?i)buyfriend\.ru" ||
req.http.Referer ~ "(?i)buyk\.host\.sk" ||
req.http.Referer ~ "(?i)buynorxx\.com" ||
req.http.Referer ~ "(?i)buypharmacydrug\.com" ||
req.http.Referer ~ "(?i)buypillsorderonline\.com" ||
req.http.Referer ~ "(?i)buyscabiescream\.com" ||
req.http.Referer ~ "(?i)buytizanidineonline\.blogspot\.com" ||
req.http.Referer ~ "(?i)buytizanidineonlinenoprescription\.blogspot\.com" ||
req.http.Referer ~ "(?i)buyviagraa\.blogspot\.com" ||
req.http.Referer ~ "(?i)bvps8\.com" ||
req.http.Referer ~ "(?i)bycontext\.com" ||
req.http.Referer ~ "(?i)byme\.se" ||
req.http.Referer ~ "(?i)bytimedance\.ru" ||
req.http.Referer ~ "(?i)c\-english\.ru" ||
req.http.Referer ~ "(?i)californianews\.cf" ||
req.http.Referer ~ "(?i)call\-of\-duty\.info" ||
req.http.Referer ~ "(?i)callejondelpozo\.es" ||
req.http.Referer ~ "(?i)calvet\.altervista\.org" ||
req.http.Referer ~ "(?i)canoncdriverq3\.pen\.io" ||
req.http.Referer ~ "(?i)canyougethighofftizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)canzoni\.ru" ||
req.http.Referer ~ "(?i)carabela\.com\.do" ||
req.http.Referer ~ "(?i)cardiosport\.com\.ua" ||
req.http.Referer ~ "(?i)cardsharp1\.ru" ||
req.http.Referer ~ "(?i)cardul\.ru" ||
req.http.Referer ~ "(?i)carfax\.com\.ua" ||
req.http.Referer ~ "(?i)carloans\.com" ||
req.http.Referer ~ "(?i)carsdined\.org" ||
req.http.Referer ~ "(?i)carsnumber\.com" ||
req.http.Referer ~ "(?i)carson\.getenjoyment\.net" ||
req.http.Referer ~ "(?i)carsoncitypizza\.com" ||
req.http.Referer ~ "(?i)cartechnic\.ru" ||
req.http.Referer ~ "(?i)casablancamanor\.co\.za" ||
req.http.Referer ~ "(?i)castingbank\.ru" ||
req.http.Referer ~ "(?i)catalogs\-parts\.com" ||
req.http.Referer ~ "(?i)cayado\.snn\.gr" ||
req.http.Referer ~ "(?i)cbcseward\.com" ||
req.http.Referer ~ "(?i)cbox\.ws" ||
req.http.Referer ~ "(?i)celldog\.ru" ||
req.http.Referer ~ "(?i)cenokos\.ru" ||
req.http.Referer ~ "(?i)cenoval\.ru" ||
req.http.Referer ~ "(?i)centre\-indigo\.org\.ua" ||
req.http.Referer ~ "(?i)centrumcoachingu\.com" ||
req.http.Referer ~ "(?i)cercacamion\.it" ||
req.http.Referer ~ "(?i)cezartabac\.ro" ||
req.http.Referer ~ "(?i)cfsrating\.sonicwall\.com" ||
req.http.Referer ~ "(?i)cgi2\.nintendo\.co\.jp" ||
req.http.Referer ~ "(?i)chastnoeporno\.com" ||
req.http.Referer ~ "(?i)chat\.ru" ||
req.http.Referer ~ "(?i)chcu\.net" ||
req.http.Referer ~ "(?i)cheap\-trusted\-backlinks\.com" ||
req.http.Referer ~ "(?i)chee\-by\.biz" ||
req.http.Referer ~ "(?i)chelyabinsk\.xrus\.org" ||
req.http.Referer ~ "(?i)cherrypointplace\.ca" ||
req.http.Referer ~ "(?i)cherubinimobili\.it" ||
req.http.Referer ~ "(?i)chimiver\.info" ||
req.http.Referer ~ "(?i)chinese\-amezon\.com" ||
req.http.Referer ~ "(?i)choosecuisine\.com" ||
req.http.Referer ~ "(?i)ci\.ua" ||
req.http.Referer ~ "(?i)cigarpass\.com" ||
req.http.Referer ~ "(?i)cinemaenergy\-hd\.ru" ||
req.http.Referer ~ "(?i)ciproandtizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)citizenclsdriveri7\.pen\.io" ||
req.http.Referer ~ "(?i)cityadspix\.com" ||
req.http.Referer ~ "(?i)civilwartheater\.com" ||
req.http.Referer ~ "(?i)clarithromycin500mg\.com" ||
req.http.Referer ~ "(?i)clash\-clans\.ru" ||
req.http.Referer ~ "(?i)classicakuhni\.ru" ||
req.http.Referer ~ "(?i)clicksor\.com" ||
req.http.Referer ~ "(?i)clmforexeu\.com" ||
req.http.Referer ~ "(?i)club\-musics\.ru" ||
req.http.Referer ~ "(?i)club\-samodelkin\.ru" ||
req.http.Referer ~ "(?i)cmd\.kz" ||
req.http.Referer ~ "(?i)cobaltpro\.ru" ||
req.http.Referer ~ "(?i)cocyq\.inwtrade\.com" ||
req.http.Referer ~ "(?i)coderstate\.com" ||
req.http.Referer ~ "(?i)codq\.info" ||
req.http.Referer ~ "(?i)codysbbq\.com" ||
req.http.Referer ~ "(?i)coldfilm\.ru" ||
req.http.Referer ~ "(?i)collegeessay19\.blogspot\.ru" ||
req.http.Referer ~ "(?i)cometorussia\.net" ||
req.http.Referer ~ "(?i)comissionka\.net" ||
req.http.Referer ~ "(?i)compliance\-alex\.top" ||
req.http.Referer ~ "(?i)compliance\-alex\.xyz" ||
req.http.Referer ~ "(?i)compliance\-alexa\.top" ||
req.http.Referer ~ "(?i)compliance\-alexa\.xyz" ||
req.http.Referer ~ "(?i)compliance\-andrew\.top" ||
req.http.Referer ~ "(?i)compliance\-andrew\.xyz" ||
req.http.Referer ~ "(?i)compliance\-barak\.top" ||
req.http.Referer ~ "(?i)compliance\-barak\.xyz" ||
req.http.Referer ~ "(?i)compliance\-brian\.top" ||
req.http.Referer ~ "(?i)compliance\-brian\.xyz" ||
req.http.Referer ~ "(?i)compliance\-checker\-7\.info" ||
req.http.Referer ~ "(?i)compliance\-don\.top" ||
req.http.Referer ~ "(?i)compliance\-don\.xyz" ||
req.http.Referer ~ "(?i)compliance\-donald\.xyz" ||
req.http.Referer ~ "(?i)compliance\-elena\.top" ||
req.http.Referer ~ "(?i)compliance\-elena\.xyz" ||
req.http.Referer ~ "(?i)compliance\-fred\.top" ||
req.http.Referer ~ "(?i)compliance\-fred\.xyz" ||
req.http.Referer ~ "(?i)compliance\-george\.top" ||
req.http.Referer ~ "(?i)compliance\-george\.xyz" ||
req.http.Referer ~ "(?i)compliance\-irvin\.top" ||
req.http.Referer ~ "(?i)compliance\-irvin\.xyz" ||
req.http.Referer ~ "(?i)compliance\-ivan\.top" ||
req.http.Referer ~ "(?i)compliance\-ivan\.xyz" ||
req.http.Referer ~ "(?i)compliance\-jack\.top" ||
req.http.Referer ~ "(?i)compliance\-jane\.top" ||
req.http.Referer ~ "(?i)compliance\-jess\.top" ||
req.http.Referer ~ "(?i)compliance\-jessica\.top" ||
req.http.Referer ~ "(?i)compliance\-john\.top" ||
req.http.Referer ~ "(?i)compliance\-josh\.top" ||
req.http.Referer ~ "(?i)compliance\-julia\.top" ||
req.http.Referer ~ "(?i)compliance\-julianna\.top" ||
req.http.Referer ~ "(?i)compliance\-margo\.top" ||
req.http.Referer ~ "(?i)compliance\-mark\.top" ||
req.http.Referer ~ "(?i)compliance\-mary\.top" ||
req.http.Referer ~ "(?i)compliance\-nelson\.top" ||
req.http.Referer ~ "(?i)compliance\-olga\.top" ||
req.http.Referer ~ "(?i)compliance\-viktor\.top" ||
req.http.Referer ~ "(?i)compliance\-walt\.top" ||
req.http.Referer ~ "(?i)compliance\-walter\.top" ||
req.http.Referer ~ "(?i)compliance\-willy\.top" ||
req.http.Referer ~ "(?i)conciergegroup\.org" ||
req.http.Referer ~ "(?i)connectikastudio\.com" ||
req.http.Referer ~ "(?i)constantaservice\.net" ||
req.http.Referer ~ "(?i)construmac\.com\.mx" ||
req.http.Referer ~ "(?i)contextualyield\.com" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-aa\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-bb\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-cc\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-dd\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ee\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ff\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-gg\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-hh\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ii\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-jj\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-kk\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ll\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-mm\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-nn\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-oo\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-pp\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-qq\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-rr\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ss\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-tt\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-uu\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-vv\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ww\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-xx\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-yy\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-zz\.xyz" ||
req.http.Referer ~ "(?i)cookielawblog\.wordpress\.com" ||
req.http.Referer ~ "(?i)cookingmeat\.ru" ||
req.http.Referer ~ "(?i)cool\-wedding\.net" ||
req.http.Referer ~ "(?i)coop\-gamers\.ru" ||
req.http.Referer ~ "(?i)copblock\.org" ||
req.http.Referer ~ "(?i)copyrightclaims\.org" ||
req.http.Referer ~ "(?i)countravel\.net" ||
req.http.Referer ~ "(?i)covadhosting\.biz" ||
req.http.Referer ~ "(?i)covetnica\.com" ||
req.http.Referer ~ "(?i)cowblog\.fr" ||
req.http.Referer ~ "(?i)cranly\.net" ||
req.http.Referer ~ "(?i)crd\.clan\.su" ||
req.http.Referer ~ "(?i)creams\.makeforum\.eu" ||
req.http.Referer ~ "(?i)creditmoney\.com\.ua" ||
req.http.Referer ~ "(?i)crest\-poloski\.ru" ||
req.http.Referer ~ "(?i)crest3d\.ru" ||
req.http.Referer ~ "(?i)crirussian\.ru" ||
req.http.Referer ~ "(?i)cruiseraf\.net" ||
req.http.Referer ~ "(?i)crystalslot\.com" ||
req.http.Referer ~ "(?i)cubook\.supernew\.org" ||
req.http.Referer ~ "(?i)customsua\.com\.ua" ||
req.http.Referer ~ "(?i)cutalltheshit\.com" ||
req.http.Referer ~ "(?i)cvety24\.by" ||
req.http.Referer ~ "(?i)cxpromote\.com" ||
req.http.Referer ~ "(?i)cyber\-monday\.ga" ||
req.http.Referer ~ "(?i)cyclobenzaprinevstizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)cymbaltaandtizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)cyprusbuyproperties\.com" ||
req.http.Referer ~ "(?i)dailyrank\.net" ||
req.http.Referer ~ "(?i)dailystrength\.org" ||
req.http.Referer ~ "(?i)dame\-ns\.kz" ||
req.http.Referer ~ "(?i)damedingel\.ya\.ru" ||
req.http.Referer ~ "(?i)danashop\.ru" ||
req.http.Referer ~ "(?i)danceuniverse\.ru" ||
req.http.Referer ~ "(?i)daptravel\.com" ||
req.http.Referer ~ "(?i)darkbooks\.org" ||
req.http.Referer ~ "(?i)darodar\.com" ||
req.http.Referer ~ "(?i)datsun\-do\.com" ||
req.http.Referer ~ "(?i)dbmkfhqk\.bloger\.index\.hr" ||
req.http.Referer ~ "(?i)dbutton\.net" ||
req.http.Referer ~ "(?i)ddlmega\.net" ||
req.http.Referer ~ "(?i)ddpills\.com" ||
req.http.Referer ~ "(?i)de\.zapmeta\.com" ||
req.http.Referer ~ "(?i)dear\-diary\.ru" ||
req.http.Referer ~ "(?i)deda\-moroza\-zakaz\.ru" ||
req.http.Referer ~ "(?i)dekorkeramik\.ru" ||
req.http.Referer ~ "(?i)delayreferat\.ru" ||
req.http.Referer ~ "(?i)delfin\-aqua\.com\.ua" ||
req.http.Referer ~ "(?i)demenageur\.com" ||
req.http.Referer ~ "(?i)den\-noch24\.ru" ||
req.http.Referer ~ "(?i)deniven\.1bb\.ru" ||
req.http.Referer ~ "(?i)depositfiles\-porn\.com" ||
req.http.Referer ~ "(?i)depositfiles\-porn\.ga" ||
req.http.Referer ~ "(?i)descargar\-musica\-gratis\.net" ||
req.http.Referer ~ "(?i)descargar\-musicas\-gratis\.com" ||
req.http.Referer ~ "(?i)design\-lands\.ru" ||
req.http.Referer ~ "(?i)designdevise\.com" ||
req.http.Referer ~ "(?i)detalizaciya\-tut\.biz" ||
req.http.Referer ~ "(?i)detective01\.ru" ||
req.http.Referer ~ "(?i)detki\-opt\.ru" ||
req.http.Referer ~ "(?i)detskie\-konstruktory\.ru" ||
req.http.Referer ~ "(?i)detskie\-zabavi\.ru" ||
req.http.Referer ~ "(?i)dev\-seo\.blog" ||
req.http.Referer ~ "(?i)diarioaconcagua\.com" ||
req.http.Referer ~ "(?i)diebesten\.co" ||
req.http.Referer ~ "(?i)diesel\-parts28\.ru" ||
req.http.Referer ~ "(?i)digest\-project\.ru" ||
req.http.Referer ~ "(?i)digilander\.libero\.it" ||
req.http.Referer ~ "(?i)digital\-video\-processing\.com" ||
req.http.Referer ~ "(?i)digitalfaq\.com" ||
req.http.Referer ~ "(?i)dimkino\.ru" ||
req.http.Referer ~ "(?i)dinkolove\.ya\.ru" ||
req.http.Referer ~ "(?i)diplom\-nk\.com" ||
req.http.Referer ~ "(?i)dipstar\.org" ||
req.http.Referer ~ "(?i)directrev\.com" ||
req.http.Referer ~ "(?i)dividendo\.ru" ||
req.http.Referer ~ "(?i)diy\-handmade\-ideas\.com" ||
req.http.Referer ~ "(?i)djekxa\.ru" ||
req.http.Referer ~ "(?i)djonwatch\.ru" ||
req.http.Referer ~ "(?i)djstools\.com" ||
req.http.Referer ~ "(?i)dktr\.ru" ||
req.http.Referer ~ "(?i)dlya\-android\.org" ||
req.http.Referer ~ "(?i)dms\-sw\.ru" ||
req.http.Referer ~ "(?i)dnepr\-avtospar\.com\.ua" ||
req.http.Referer ~ "(?i)dneprsvet\.com\.ua" ||
req.http.Referer ~ "(?i)docstoc\.com" ||
req.http.Referer ~ "(?i)doeco\.ru" ||
req.http.Referer ~ "(?i)dogshowsonice\.com" ||
req.http.Referer ~ "(?i)dogsrun\.net" ||
req.http.Referer ~ "(?i)dojki\-hd\.com" ||
req.http.Referer ~ "(?i)doktoronline\.no" ||
req.http.Referer ~ "(?i)dokumentalkino\.net" ||
req.http.Referer ~ "(?i)domain\-tracker\.com" ||
req.http.Referer ~ "(?i)domashneeruporno\.com" ||
req.http.Referer ~ "(?i)domcran\.net" ||
req.http.Referer ~ "(?i)domik\-derevne\.ru" ||
req.http.Referer ~ "(?i)dominateforex\.ml" ||
req.http.Referer ~ "(?i)domination\.ml" ||
req.http.Referer ~ "(?i)dominterior\.org" ||
req.http.Referer ~ "(?i)domoysshop\.ru" ||
req.http.Referer ~ "(?i)donvito\.unas\.cz" ||
req.http.Referer ~ "(?i)doska\-vsem\.ru" ||
req.http.Referer ~ "(?i)dostavka\-v\-krym\.com" ||
req.http.Referer ~ "(?i)dostavka\-v\-ukrainu\.ru" ||
req.http.Referer ~ "(?i)dosug\-lux\.ru" ||
req.http.Referer ~ "(?i)download\-of\-the\-warez\.blogspot\.com" ||
req.http.Referer ~ "(?i)downloadkakaotalk\.com" ||
req.http.Referer ~ "(?i)downloadmefiranaratb1972\.xpg\.com\.br" ||
req.http.Referer ~ "(?i)doyouknowtheword\-flummox\.ml" ||
req.http.Referer ~ "(?i)dprkboards\.com" ||
req.http.Referer ~ "(?i)driving\.kiev\.ua" ||
req.http.Referer ~ "(?i)drugspowerstore\.com" ||
req.http.Referer ~ "(?i)drugstoreforyou\.com" ||
req.http.Referer ~ "(?i)drupa\.com" ||
req.http.Referer ~ "(?i)druzhbany\.ru" ||
req.http.Referer ~ "(?i)druzhininevgeniy63\.blogspot\.com" ||
req.http.Referer ~ "(?i)dstroy\.su" ||
req.http.Referer ~ "(?i)dvd\-famille\.com" ||
req.http.Referer ~ "(?i)dvr\.biz\.ua" ||
req.http.Referer ~ "(?i)e\-avon\.ru" ||
req.http.Referer ~ "(?i)e\-buyeasy\.com" ||
req.http.Referer ~ "(?i)e\-collantes\.com" ||
req.http.Referer ~ "(?i)e\-commerce\-seo\.com" ||
req.http.Referer ~ "(?i)e\-commerce\-seo1\.com" ||
req.http.Referer ~ "(?i)e\-kwiaciarz\.pl" ||
req.http.Referer ~ "(?i)e2click\.com" ||
req.http.Referer ~ "(?i)eandsgallery\.com" ||
req.http.Referer ~ "(?i)eaplay\.ru/a00af605" ||
req.http.Referer ~ "(?i)earn\-from\-articles\.com" ||
req.http.Referer ~ "(?i)easycommerce\.cf" ||
req.http.Referer ~ "(?i)easync\.io" ||
req.http.Referer ~ "(?i)easytuningshop\.ru" ||
req.http.Referer ~ "(?i)ecommerce\-seo\.com" ||
req.http.Referer ~ "(?i)ecommerce\-seo\.org" ||
req.http.Referer ~ "(?i)ecomp3\.ru" ||
req.http.Referer ~ "(?i)econom\.co" ||
req.http.Referer ~ "(?i)ecookna\.com\.ua" ||
req.http.Referer ~ "(?i)edakgfvwql\.ru" ||
req.http.Referer ~ "(?i)edelstahlschornstein\-123\.de" ||
req.http.Referer ~ "(?i)editmedios\.com" ||
req.http.Referer ~ "(?i)edshopping\.net" ||
req.http.Referer ~ "(?i)education\-cz\.ru" ||
req.http.Referer ~ "(?i)egovaleo\.it" ||
req.http.Referer ~ "(?i)egvar\.net" ||
req.http.Referer ~ "(?i)ekatalog\.xyz" ||
req.http.Referer ~ "(?i)ekaterinburg\.xrus\.org" ||
req.http.Referer ~ "(?i)ekobata\.ru" ||
req.http.Referer ~ "(?i)ekspertmed\.com" ||
req.http.Referer ~ "(?i)ekto\.ee" ||
req.http.Referer ~ "(?i)el\-nation\.com" ||
req.http.Referer ~ "(?i)election\.interferencer\.ru" ||
req.http.Referer ~ "(?i)electricwheelchairsarea\.com" ||
req.http.Referer ~ "(?i)electro\-prom\.com" ||
req.http.Referer ~ "(?i)elektrischezi\.canalblog\.com" ||
req.http.Referer ~ "(?i)elektrischeziga\.livejournal\.com" ||
req.http.Referer ~ "(?i)elektrischezigarette1\.blog\.pl" ||
req.http.Referer ~ "(?i)elektrischezigarette1\.onsugar\.com" ||
req.http.Referer ~ "(?i)elektrischezigarette2\.devhub\.com" ||
req.http.Referer ~ "(?i)elektrischezigarette2\.onsugar\.com" ||
req.http.Referer ~ "(?i)elektrischezigarettekaufen2\.cowblog\.fr" ||
req.http.Referer ~ "(?i)elektrischezigaretten1\.blogse\.nl" ||
req.http.Referer ~ "(?i)elektrischezigaretten2\.beeplog\.com" ||
req.http.Referer ~ "(?i)elektronischezi\.livejournal\.com" ||
req.http.Referer ~ "(?i)elektronischezigarette2\.mex\.tl" ||
req.http.Referer ~ "(?i)elektronischezigarettekaufen1\.beeplog\.com" ||
req.http.Referer ~ "(?i)elektronischezigarettekaufen1\.myblog\.de" ||
req.http.Referer ~ "(?i)elektronischezigarettekaufen2\.tumblr\.com" ||
req.http.Referer ~ "(?i)elektrozigarette1\.dreamwidth\.org" ||
req.http.Referer ~ "(?i)elektrozigarette2\.webs\.com" ||
req.http.Referer ~ "(?i)elektrozigarette2\.wordpressy\.pl" ||
req.http.Referer ~ "(?i)elektrozigarettekaufen1\.devhub\.com" ||
req.http.Referer ~ "(?i)elektrozigarettekaufen2\.blogse\.nl" ||
req.http.Referer ~ "(?i)elektrozigaretten1\.postbit\.com" ||
req.http.Referer ~ "(?i)elektrozigaretten1\.tumblr\.com" ||
req.http.Referer ~ "(?i)elektrozigaretten1\.webs\.com" ||
req.http.Referer ~ "(?i)elektrozigaretten2\.yn\.lt" ||
req.http.Referer ~ "(?i)elidelcream\.weebly\.com" ||
req.http.Referer ~ "(?i)elitesportsadvisor\.com" ||
req.http.Referer ~ "(?i)elkacentr\.ru" ||
req.http.Referer ~ "(?i)elmifarhangi\.com" ||
req.http.Referer ~ "(?i)eloconcream\.blogspot\.com" ||
req.http.Referer ~ "(?i)eloxal\.ru" ||
req.http.Referer ~ "(?i)elvel\.com\.ua" ||
req.http.Referer ~ "(?i)embedle\.com" ||
req.http.Referer ~ "(?i)emerson\-rus\.ru" ||
req.http.Referer ~ "(?i)empis\.magix\.net" ||
req.http.Referer ~ "(?i)energy\-ua\.com" ||
req.http.Referer ~ "(?i)energydiet\-info\.ru" ||
req.http.Referer ~ "(?i)energydiet24\.ru" ||
req.http.Referer ~ "(?i)enginebay\.ru" ||
req.http.Referer ~ "(?i)englishdictionaryfree\.com" ||
req.http.Referer ~ "(?i)eonpal\.com" ||
req.http.Referer ~ "(?i)erank\.eu" ||
req.http.Referer ~ "(?i)eredijovon\.com" ||
req.http.Referer ~ "(?i)ereko\.ru" ||
req.http.Referer ~ "(?i)erot\.co" ||
req.http.Referer ~ "(?i)erotikstories\.ru" ||
req.http.Referer ~ "(?i)es5\.com" ||
req.http.Referer ~ "(?i)escort\-russian\.com" ||
req.http.Referer ~ "(?i)escortplius\.com" ||
req.http.Referer ~ "(?i)eshop\.md" ||
req.http.Referer ~ "(?i)esnm\.ru" ||
req.http.Referer ~ "(?i)este\-line\.com\.ua" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement\-4\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement\-5\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement\-6\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement\-7\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement1\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement2\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\.blogspot\.com" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\.info" ||
req.http.Referer ~ "(?i)euromasterclass\.ru" ||
req.http.Referer ~ "(?i)euronis\-free\.com" ||
req.http.Referer ~ "(?i)europages\.com\.ru" ||
req.http.Referer ~ "(?i)europeanwatches\.ru" ||
req.http.Referer ~ "(?i)eurosamodelki\.ru" ||
req.http.Referer ~ "(?i)euroskat\.ru" ||
req.http.Referer ~ "(?i)evaashop\.ru" ||
req.http.Referer ~ "(?i)event\-tracking\.com" ||
req.http.Referer ~ "(?i)exchangeit\.gq" ||
req.http.Referer ~ "(?i)exchanges\-bet\.com" ||
req.http.Referer ~ "(?i)executehosting\.com" ||
req.http.Referer ~ "(?i)expdom\.com" ||
req.http.Referer ~ "(?i)expertnaya\-ocenka\.ru" ||
req.http.Referer ~ "(?i)expresstoplivo\.ru" ||
req.http.Referer ~ "(?i)extener\.com" ||
req.http.Referer ~ "(?i)extener\.org" ||
req.http.Referer ~ "(?i)extrabot\.com" ||
req.http.Referer ~ "(?i)extremez\.net" ||
req.http.Referer ~ "(?i)eyes\-on\-you\.ga" ||
req.http.Referer ~ "(?i)eyessurgery\.ru" ||
req.http.Referer ~ "(?i)ez8motelseaworldsandiego\.com" ||
req.http.Referer ~ "(?i)ezigarettekaufen\.myblog\.de" ||
req.http.Referer ~ "(?i)ezigarettekaufen1\.hpage\.com" ||
req.http.Referer ~ "(?i)ezigarettekaufen2\.blox\.pl" ||
req.http.Referer ~ "(?i)ezigarettekaufen2\.mpbloggar\.se" ||
req.http.Referer ~ "(?i)ezigarettekaufen2\.yolasite\.com" ||
req.http.Referer ~ "(?i)ezigarettenkaufen1\.deviantart\.com" ||
req.http.Referer ~ "(?i)ezigarettenkaufen1\.pagina\.gr" ||
req.http.Referer ~ "(?i)ezigarettenkaufen2\.dreamwidth\.org" ||
req.http.Referer ~ "(?i)ezigarettenshop1\.yolasite\.com" ||
req.http.Referer ~ "(?i)ezigarettenshop2\.myblog\.de" ||
req.http.Referer ~ "(?i)ezigarettenshop2\.postbit\.com" ||
req.http.Referer ~ "(?i)ezigaretteshop\.webs\.com" ||
req.http.Referer ~ "(?i)ezigaretteshop2\.mywapblog\.com" ||
req.http.Referer ~ "(?i)ezigaretteshop2\.vefblog\.net" ||
req.http.Referer ~ "(?i)ezofest\.sk" ||
req.http.Referer ~ "(?i)ezrvrentals\.com" ||
req.http.Referer ~ "(?i)f\-loaded\.de" ||
req.http.Referer ~ "(?i)f\-online\.de" ||
req.http.Referer ~ "(?i)f00kclan\.de" ||
req.http.Referer ~ "(?i)f012\.de" ||
req.http.Referer ~ "(?i)f07\.de" ||
req.http.Referer ~ "(?i)f0815\.de" ||
req.http.Referer ~ "(?i)f1nder\.org" ||
req.http.Referer ~ "(?i)facebook\-mobile\.xyz" ||
req.http.Referer ~ "(?i)family1st\.ca" ||
req.http.Referer ~ "(?i)familyholiday\.ml" ||
req.http.Referer ~ "(?i)familyphysician\.ru" ||
req.http.Referer ~ "(?i)fanoboi\.com" ||
req.http.Referer ~ "(?i)fashion\-mk\.net" ||
req.http.Referer ~ "(?i)fashionindeed\.ml" ||
req.http.Referer ~ "(?i)fast\-wordpress\-start\.com" ||
req.http.Referer ~ "(?i)favorcosmetics\.com" ||
req.http.Referer ~ "(?i)favoritemoney\.ru" ||
req.http.Referer ~ "(?i)favornews\.com" ||
req.http.Referer ~ "(?i)fba\-mexico\.com" ||
req.http.Referer ~ "(?i)fbdownloader\.com" ||
req.http.Referer ~ "(?i)fbfreegifts\.com" ||
req.http.Referer ~ "(?i)fc\-007\.com" ||
req.http.Referer ~ "(?i)fealq\.com" ||
req.http.Referer ~ "(?i)feargames\.ru" ||
req.http.Referer ~ "(?i)feedback\.sharemyfile\.ru" ||
req.http.Referer ~ "(?i)feedouble\.com" ||
req.http.Referer ~ "(?i)feedouble\.net" ||
req.http.Referer ~ "(?i)feel\-planet\.com" ||
req.http.Referer ~ "(?i)feeriaclub\.ru" ||
req.http.Referer ~ "(?i)femmesdenudees\.com" ||
req.http.Referer ~ "(?i)fenoyl\.batcave\.net" ||
req.http.Referer ~ "(?i)ferieboligkbh\.dk" ||
req.http.Referer ~ "(?i)fermersovet\.ru" ||
req.http.Referer ~ "(?i)fetishinside\.com" ||
req.http.Referer ~ "(?i)filesvine\.com" ||
req.http.Referer ~ "(?i)film\-one\.ru" ||
req.http.Referer ~ "(?i)filmetricsasia\.com" ||
req.http.Referer ~ "(?i)filmgo\.ru" ||
req.http.Referer ~ "(?i)filmidivx\.com" ||
req.http.Referer ~ "(?i)findacheaplawyers\.com" ||
req.http.Referer ~ "(?i)finstroy\.net" ||
req.http.Referer ~ "(?i)finteks\.ru" ||
req.http.Referer ~ "(?i)firma\-legion\.ru" ||
req.http.Referer ~ "(?i)fitness\-video\.net" ||
req.http.Referer ~ "(?i)fiuxy\.com" ||
req.http.Referer ~ "(?i)fiverr\.com" ||
req.http.Referer ~ "(?i)fix\-website\-errors\.com" ||
req.http.Referer ~ "(?i)fizika\.tv" ||
req.http.Referer ~ "(?i)flash4fun\.com" ||
req.http.Referer ~ "(?i)flavors\.me" ||
req.http.Referer ~ "(?i)flex4launch\.ru" ||
req.http.Referer ~ "(?i)floating\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)flooringinstallation\-edmonton\.com" ||
req.http.Referer ~ "(?i)flowersbazar\.com" ||
req.http.Referer ~ "(?i)flowwwers\.com" ||
req.http.Referer ~ "(?i)flprog\.com" ||
req.http.Referer ~ "(?i)flytourisme\.org" ||
req.http.Referer ~ "(?i)fm\-upgrade\.ru" ||
req.http.Referer ~ "(?i)fmgrupe\.it" ||
req.http.Referer ~ "(?i)for\-your\.website" ||
req.http.Referer ~ "(?i)forensicpsychiatry\.ru" ||
req.http.Referer ~ "(?i)forex\-indextop20\.ru" ||
req.http.Referer ~ "(?i)forex\-procto\.ru" ||
req.http.Referer ~ "(?i)forex\.osobye\.ru" ||
req.http.Referer ~ "(?i)forex21\.ru" ||
req.http.Referer ~ "(?i)forexgb\.ru" ||
req.http.Referer ~ "(?i)forexunion\.net" ||
req.http.Referer ~ "(?i)forminecrafters\.ru" ||
req.http.Referer ~ "(?i)forms\-mtm\.ru" ||
req.http.Referer ~ "(?i)forpostlock\.ru" ||
req.http.Referer ~ "(?i)forsex\.info" ||
req.http.Referer ~ "(?i)fortwosmartcar\.pw" ||
req.http.Referer ~ "(?i)forum\-engineering\.ru" ||
req.http.Referer ~ "(?i)forum\.poker4life\.ru" ||
req.http.Referer ~ "(?i)forum\.tvmir\.org" ||
req.http.Referer ~ "(?i)forum20\.smailik\.org" ||
req.http.Referer ~ "(?i)forum69\.info" ||
req.http.Referer ~ "(?i)forums\.toucharcade\.com" ||
req.http.Referer ~ "(?i)fotoxxxru\.com" ||
req.http.Referer ~ "(?i)foxinsocks\.ru" ||
req.http.Referer ~ "(?i)foxtechfpv\.com" ||
req.http.Referer ~ "(?i)foxweber\.com" ||
req.http.Referer ~ "(?i)fr\.netlog\.com" ||
req.http.Referer ~ "(?i)free\-fb\-traffic\.com" ||
req.http.Referer ~ "(?i)free\-fbook\-traffic\.com" ||
req.http.Referer ~ "(?i)free\-floating\-buttons\.com" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-aaa\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-bbb\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-ccc\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-ddd\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-eee\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-fff\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.blogspot\.com" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.co" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.top" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-aaa\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-bbb\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-ccc\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-ddd\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-eee\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-fff\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-hhh\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-iii\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\.com" ||
req.http.Referer ~ "(?i)free\-social\-buttons\.org" ||
req.http.Referer ~ "(?i)free\-social\-buttons\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons1\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons2\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons3\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons4\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons5\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons6\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons7\.xyz" ||
req.http.Referer ~ "(?i)free\-traffic\.xyz" ||
req.http.Referer ~ "(?i)free\-video\-tool\.com" ||
req.http.Referer ~ "(?i)freeasecret\.com" ||
req.http.Referer ~ "(?i)freenode\.info" ||
req.http.Referer ~ "(?i)freeseedsonline\.com" ||
req.http.Referer ~ "(?i)freetangodownload\.com" ||
req.http.Referer ~ "(?i)freewebs\.com" ||
req.http.Referer ~ "(?i)freewhatsappload\.com" ||
req.http.Referer ~ "(?i)freshberry\.com\.ua" ||
req.http.Referer ~ "(?i)front\.ru" ||
req.http.Referer ~ "(?i)front\.to" ||
req.http.Referer ~ "(?i)fsalas\.com" ||
req.http.Referer ~ "(?i)ftns\.ru" ||
req.http.Referer ~ "(?i)fuck\-paid\-share\-buttons\.xyz" ||
req.http.Referer ~ "(?i)fuel\-gas\.com" ||
req.http.Referer ~ "(?i)fungirlsgames\.net" ||
req.http.Referer ~ "(?i)funnypica\.com" ||
req.http.Referer ~ "(?i)furniture\-ukraine\.com" ||
req.http.Referer ~ "(?i)futbolkisales\.ru" ||
req.http.Referer ~ "(?i)fxtips\.ru" ||
req.http.Referer ~ "(?i)g7m\.pl" ||
req.http.Referer ~ "(?i)gabeshop\.ru" ||
req.http.Referer ~ "(?i)gael\-s\.ru" ||
req.http.Referer ~ "(?i)gagrasector\.ru" ||
req.http.Referer ~ "(?i)galaxy\-family\.ru" ||
req.http.Referer ~ "(?i)galaxyflowers\.ru" ||
req.http.Referer ~ "(?i)galeon\.com" ||
req.http.Referer ~ "(?i)game\-mmorpg\.net" ||
req.http.Referer ~ "(?i)game\-top\.su" ||
req.http.Referer ~ "(?i)games\.kolossale\.ru" ||
req.http.Referer ~ "(?i)gap\-search\.com" ||
req.http.Referer ~ "(?i)gardene\.ru" ||
req.http.Referer ~ "(?i)gaz\-voshod\.ru" ||
req.http.Referer ~ "(?i)gazobeton\-p\.com\.ua" ||
req.http.Referer ~ "(?i)gazoblok\.net\.ua" ||
req.http.Referer ~ "(?i)gcup\.ru" ||
req.http.Referer ~ "(?i)gdcentre\.ru" ||
req.http.Referer ~ "(?i)gearcraft\.us" ||
req.http.Referer ~ "(?i)gearsadspromo\.club" ||
req.http.Referer ~ "(?i)gelezki\.com" ||
req.http.Referer ~ "(?i)generalporn\.org" ||
req.http.Referer ~ "(?i)genericlowlatencyasiodriverhq\.aircus\.com" ||
req.http.Referer ~ "(?i)gentamicineyedrops\.blogspot\.com" ||
req.http.Referer ~ "(?i)germes\-trans\.com" ||
req.http.Referer ~ "(?i)get\-free\-social\-traffic\.com" ||
req.http.Referer ~ "(?i)get\-free\-traffic\-now\.com" ||
req.http.Referer ~ "(?i)get\-your\-social\-buttons\.info" ||
req.http.Referer ~ "(?i)getlamborghini\.ga" ||
req.http.Referer ~ "(?i)getoutofdebtfree\.org" ||
req.http.Referer ~ "(?i)getprismatic\.com" ||
req.http.Referer ~ "(?i)getrichquick\.ml" ||
req.http.Referer ~ "(?i)getrichquickly\.info" ||
req.http.Referer ~ "(?i)getyourprofit\.net" ||
req.http.Referer ~ "(?i)gfaq\.ru" ||
req.http.Referer ~ "(?i)ghazel\.ru" ||
req.http.Referer ~ "(?i)ghernnqr\.skyrock\.com" ||
req.http.Referer ~ "(?i)gheus\.altervista\.org" ||
req.http.Referer ~ "(?i)ghostvisitor\.com" ||
req.http.Referer ~ "(?i)girlporn\.ru" ||
req.http.Referer ~ "(?i)girls\-ufa\.ru" ||
req.http.Referer ~ "(?i)girlsatgames\.ru" ||
req.http.Referer ~ "(?i)gk\-atlant\.info" ||
req.http.Referer ~ "(?i)gkvector\.ru" ||
req.http.Referer ~ "(?i)glall\.ru" ||
req.http.Referer ~ "(?i)glass\-msk\.ru" ||
req.http.Referer ~ "(?i)glavprofit\.ru" ||
req.http.Referer ~ "(?i)glcomputers\.ru" ||
req.http.Referer ~ "(?i)globalscam\.ga" ||
req.http.Referer ~ "(?i)globatur\.ru" ||
req.http.Referer ~ "(?i)globetrotting\-culture\.ru" ||
req.http.Referer ~ "(?i)glogow\.pl" ||
req.http.Referer ~ "(?i)glopages\.ru" ||
req.http.Referer ~ "(?i)go2album\.com" ||
req.http.Referer ~ "(?i)gobongo\.info" ||
req.http.Referer ~ "(?i)goforexvps\.com" ||
req.http.Referer ~ "(?i)gogps\.me" ||
req.http.Referer ~ "(?i)gojiberriess\.apishops\.ru" ||
req.http.Referer ~ "(?i)gok\-kasten\.net" ||
req.http.Referer ~ "(?i)goldandcard\.ru" ||
req.http.Referer ~ "(?i)golden\-catalog\.pro" ||
req.http.Referer ~ "(?i)golden\-praga\.ru" ||
req.http.Referer ~ "(?i)goldenggames\.com" ||
req.http.Referer ~ "(?i)golmau\.host\.sk" ||
req.http.Referer ~ "(?i)gonextmedia\.com" ||
req.http.Referer ~ "(?i)goodnightjournal\.com" ||
req.http.Referer ~ "(?i)goodprotein\.ru" ||
req.http.Referer ~ "(?i)google\-liar\.ru" ||
req.http.Referer ~ "(?i)googlefeud\.com" ||
req.http.Referer ~ "(?i)googlemare\.com" ||
req.http.Referer ~ "(?i)googlsucks\.com" ||
req.http.Referer ~ "(?i)gorabagrata\.ru" ||
req.http.Referer ~ "(?i)goroda\-vsego\-mira\.ru" ||
req.http.Referer ~ "(?i)gorodservis\.ru" ||
req.http.Referer ~ "(?i)gosreg\.amchs\.ru" ||
req.http.Referer ~ "(?i)gototal\.co\.nz" ||
req.http.Referer ~ "(?i)gourcy\.altervista\.org" ||
req.http.Referer ~ "(?i)gq\-catalog\.gq" ||
req.http.Referer ~ "(?i)grand\-chlen\.ru" ||
req.http.Referer ~ "(?i)graphid\.com" ||
req.http.Referer ~ "(?i)gratuitbaise\.com" ||
req.http.Referer ~ "(?i)greatgrace\.ru" ||
req.http.Referer ~ "(?i)grizzlysgrill\.com" ||
req.http.Referer ~ "(?i)groupmoney\.ru" ||
req.http.Referer ~ "(?i)growmyfunds\.ca" ||
req.http.Referer ~ "(?i)growshop\.es" ||
req.http.Referer ~ "(?i)grupografico\-pilar\.com\.ar" ||
req.http.Referer ~ "(?i)gsbs\.com\.ua" ||
req.http.Referer ~ "(?i)gsmlab\.pl" ||
req.http.Referer ~ "(?i)gsmtlf\.ru" ||
req.http.Referer ~ "(?i)gta\-club\.ru" ||
req.http.Referer ~ "(?i)gta\-top\.ru" ||
req.http.Referer ~ "(?i)guardlink\.com" ||
req.http.Referer ~ "(?i)guardlink\.org" ||
req.http.Referer ~ "(?i)guge\.io" ||
req.http.Referer ~ "(?i)gungamesz\.com" ||
req.http.Referer ~ "(?i)guruofcasino\.com" ||
req.http.Referer ~ "(?i)gwhwpxbw\.bloger\.index\.hr" ||
req.http.Referer ~ "(?i)h2monline\.com" ||
req.http.Referer ~ "(?i)hacktougroup\.ru" ||
req.http.Referer ~ "(?i)hahashka\.ru" ||
req.http.Referer ~ "(?i)haikuware\.com" ||
req.http.Referer ~ "(?i)handicapvansarea\.com" ||
req.http.Referer ~ "(?i)handicapvantoday\.com" ||
req.http.Referer ~ "(?i)handsandlegs\.ru" ||
req.http.Referer ~ "(?i)hanink\.biz\.ly" ||
req.http.Referer ~ "(?i)hardcore\.anzwers\.net" ||
req.http.Referer ~ "(?i)havepussy\.com" ||
req.http.Referer ~ "(?i)hawaiisurf\.com" ||
req.http.Referer ~ "(?i)hazardky\.net" ||
req.http.Referer ~ "(?i)hd720kino\.ru" ||
req.http.Referer ~ "(?i)hdfreeporno\.net" ||
req.http.Referer ~ "(?i)hdmoviecamera\.net" ||
req.http.Referer ~ "(?i)hdmoviecams\.com" ||
req.http.Referer ~ "(?i)hdmoviecams\.net" ||
req.http.Referer ~ "(?i)healbio\.ru" ||
req.http.Referer ~ "(?i)healing\-dysplasia\.ru" ||
req.http.Referer ~ "(?i)healmytrauma\.info" ||
req.http.Referer ~ "(?i)hem\.passagen\.se" ||
req.http.Referer ~ "(?i)hifidesign\.ru" ||
req.http.Referer ~ "(?i)hitsbox\.info" ||
req.http.Referer ~ "(?i)hiwibyh\.bugs3\.com" ||