-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathreferral_spam.vcl
1858 lines (1858 loc) · 87.8 KB
/
referral_spam.vcl
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# https://github.com/DZetaDev/Blacklist-Alpha
# Updated 2018-02-08 17:51:23
sub block_referral_spam {
if (
req.http.Referer ~ "(?i)0akley\.cc" ||
req.http.Referer ~ "(?i)0n\-line\.tv" ||
req.http.Referer ~ "(?i)0x\.x\.gg" ||
req.http.Referer ~ "(?i)1\-99seo\.com" ||
req.http.Referer ~ "(?i)1\-free\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)100dollars\-seo\.com" ||
req.http.Referer ~ "(?i)100searchengines\.com" ||
req.http.Referer ~ "(?i)12masterov\.com" ||
req.http.Referer ~ "(?i)1pamm\.ru" ||
req.http.Referer ~ "(?i)1st\.technology" ||
req.http.Referer ~ "(?i)1t13\.com" ||
req.http.Referer ~ "(?i)1webmaster\.ml" ||
req.http.Referer ~ "(?i)2015scoretrackrassistn\.com" ||
req.http.Referer ~ "(?i)2345\.com" ||
req.http.Referer ~ "(?i)24x7\-server\-support\.site" ||
req.http.Referer ~ "(?i)2o2q\.com" ||
req.http.Referer ~ "(?i)2your\.site" ||
req.http.Referer ~ "(?i)3\-letter\-domains\.net" ||
req.http.Referer ~ "(?i)3g2upl4pq6kufc4m\.onion" ||
req.http.Referer ~ "(?i)3vzx\.com" ||
req.http.Referer ~ "(?i)3waynetworks\.com" ||
req.http.Referer ~ "(?i)45tahunkhongguan\.com" ||
req.http.Referer ~ "(?i)4cfa\.com" ||
req.http.Referer ~ "(?i)4istoshop\.com" ||
req.http.Referer ~ "(?i)4q5w\.com" ||
req.http.Referer ~ "(?i)4webmasters\.org" ||
req.http.Referer ~ "(?i)5\-steps\-to\-start\-business\.com" ||
req.http.Referer ~ "(?i)51cnss\.com" ||
req.http.Referer ~ "(?i)54\.186\.60\.77" ||
req.http.Referer ~ "(?i)5forex\.ru" ||
req.http.Referer ~ "(?i)5sc8\.com" ||
req.http.Referer ~ "(?i)61\-disposalbestsellers\.com" ||
req.http.Referer ~ "(?i)6hopping\.com" ||
req.http.Referer ~ "(?i)6pjddrtt7\.com" ||
req.http.Referer ~ "(?i)76brighton\.co\.uk" ||
req.http.Referer ~ "(?i)76brighton\.com" ||
req.http.Referer ~ "(?i)7makemoneyonline\.com" ||
req.http.Referer ~ "(?i)7zap\.com" ||
req.http.Referer ~ "(?i)8gfh\.com" ||
req.http.Referer ~ "(?i)8hah\.com" ||
req.http.Referer ~ "(?i)aajov\.us" ||
req.http.Referer ~ "(?i)abbasroshan\.info" ||
req.http.Referer ~ "(?i)abc\.xyz" ||
req.http.Referer ~ "(?i)abcdefh\.xyz" ||
req.http.Referer ~ "(?i)abcdeg\.xyz" ||
req.http.Referer ~ "(?i)abclauncher\.com" ||
req.http.Referer ~ "(?i)abovetherivernc\.com" ||
req.http.Referer ~ "(?i)acads\.net" ||
req.http.Referer ~ "(?i)accebuye\.com" ||
req.http.Referer ~ "(?i)acceec\.com" ||
req.http.Referer ~ "(?i)accounts\-management\.com" ||
req.http.Referer ~ "(?i)acds\-la\.com" ||
req.http.Referer ~ "(?i)achievement\-ballet\.com" ||
req.http.Referer ~ "(?i)acipm\.us" ||
req.http.Referer ~ "(?i)acorered\.com" ||
req.http.Referer ~ "(?i)acpaned\.com" ||
req.http.Referer ~ "(?i)acresand\.com" ||
req.http.Referer ~ "(?i)acunetix\-referrer\.com" ||
req.http.Referer ~ "(?i)adanih\.com" ||
req.http.Referer ~ "(?i)adcash\.com" ||
req.http.Referer ~ "(?i)addons\.mozilla\.org" ||
req.http.Referer ~ "(?i)adelly\.bg" ||
req.http.Referer ~ "(?i)adf\.ly" ||
req.http.Referer ~ "(?i)adowsafe\.com" ||
req.http.Referer ~ "(?i)adrianagussie\.com" ||
req.http.Referer ~ "(?i)adspart\.com" ||
req.http.Referer ~ "(?i)adtiger\.tk" ||
req.http.Referer ~ "(?i)aduih\.us" ||
req.http.Referer ~ "(?i)adventureparkcostarica\.com" ||
req.http.Referer ~ "(?i)adviceforum\.info" ||
req.http.Referer ~ "(?i)advokateg\.ru" ||
req.http.Referer ~ "(?i)advokateg\.xyz" ||
req.http.Referer ~ "(?i)ae37\.com" ||
req.http.Referer ~ "(?i)aekzo\.us" ||
req.http.Referer ~ "(?i)affordablewebsitesandmobileapps\.com" ||
req.http.Referer ~ "(?i)afora\.ru" ||
req.http.Referer ~ "(?i)agencia001\.com\.br" ||
req.http.Referer ~ "(?i)agial\.us" ||
req.http.Referer ~ "(?i)aimprospectus\.com" ||
req.http.Referer ~ "(?i)airyfro\.com" ||
req.http.Referer ~ "(?i)ajiif\.us" ||
req.http.Referer ~ "(?i)aktienexplorer\.com" ||
req.http.Referer ~ "(?i)akuhni\.by" ||
req.http.Referer ~ "(?i)akuwo\.us" ||
req.http.Referer ~ "(?i)alert\.scansafe\.net" ||
req.http.Referer ~ "(?i)alertmonitorscoreusa1\.com" ||
req.http.Referer ~ "(?i)alertscore3all\.com" ||
req.http.Referer ~ "(?i)alessandraleone\.com" ||
req.http.Referer ~ "(?i)alfa9\.com" ||
req.http.Referer ~ "(?i)alfabot\.xyz" ||
req.http.Referer ~ "(?i)alibestsale\.com" ||
req.http.Referer ~ "(?i)alice\.it" ||
req.http.Referer ~ "(?i)alidiamatilde\.com" ||
req.http.Referer ~ "(?i)alienpayday" ||
req.http.Referer ~ "(?i)alienrecbe\.com" ||
req.http.Referer ~ "(?i)aliexpress\.com" ||
req.http.Referer ~ "(?i)allknow\.info" ||
req.http.Referer ~ "(?i)allmarketsnewdayli\.gdn" ||
req.http.Referer ~ "(?i)allnews\.md" ||
req.http.Referer ~ "(?i)allnews24\.in" ||
req.http.Referer ~ "(?i)allwomen\.info" ||
req.http.Referer ~ "(?i)almscadet\.com" ||
req.http.Referer ~ "(?i)alpharma\.net" ||
req.http.Referer ~ "(?i)alshou\.com" ||
req.http.Referer ~ "(?i)altermix\.ua" ||
req.http.Referer ~ "(?i)amanda\-porn\.ga" ||
req.http.Referer ~ "(?i)amazon\-seo\-service\.com" ||
req.http.Referer ~ "(?i)american\-express\-r3ura\.com" ||
req.http.Referer ~ "(?i)amijaymee\.com" ||
req.http.Referer ~ "(?i)ammamm02\.in" ||
req.http.Referer ~ "(?i)amt\-k\.ru" ||
req.http.Referer ~ "(?i)anal\-acrobats\.hol\.es" ||
req.http.Referer ~ "(?i)analytics\-ads\.xyz" ||
req.http.Referer ~ "(?i)anapa\-inns\.ru" ||
req.http.Referer ~ "(?i)anatolamauremin\.com" ||
req.http.Referer ~ "(?i)anderedac\.com" ||
req.http.Referer ~ "(?i)android\-style\.com" ||
req.http.Referer ~ "(?i)anerazerel\.com" ||
req.http.Referer ~ "(?i)anghiarihotel\.com" ||
req.http.Referer ~ "(?i)animalphotos\.xyz" ||
req.http.Referer ~ "(?i)annicenessy\.com" ||
req.http.Referer ~ "(?i)annorajanean\.com" ||
req.http.Referer ~ "(?i)anonymous\-redirect\.com" ||
req.http.Referer ~ "(?i)anticipationtime\.net" ||
req.http.Referer ~ "(?i)anticrawler\.org" ||
req.http.Referer ~ "(?i)aosheng\-tech\.com" ||
req.http.Referer ~ "(?i)apaceburma\.com" ||
req.http.Referer ~ "(?i)app\-le\.biz" ||
req.http.Referer ~ "(?i)apple\-store\-iphone6\.ru" ||
req.http.Referer ~ "(?i)apple\-watch\-store\.ru" ||
req.http.Referer ~ "(?i)aprotme\.com" ||
req.http.Referer ~ "(?i)ardythrhetta\.com" ||
req.http.Referer ~ "(?i)arendakvartir\.kz" ||
req.http.Referer ~ "(?i)arendovalka\.xyz" ||
req.http.Referer ~ "(?i)arkkivoltti\.net" ||
req.http.Referer ~ "(?i)arshadcaf\.com" ||
req.http.Referer ~ "(?i)artparquet\.ru" ||
req.http.Referer ~ "(?i)aruplighting\.com" ||
req.http.Referer ~ "(?i)asacopaco\.tk" ||
req.http.Referer ~ "(?i)ashlanileane\.com" ||
req.http.Referer ~ "(?i)ask\.com" ||
req.http.Referer ~ "(?i)asosjt\.eu" ||
req.http.Referer ~ "(?i)astemwld\.com" ||
req.http.Referer ~ "(?i)atl4i3util01\.web\.web\.com" ||
req.http.Referer ~ "(?i)atmape\.ru" ||
req.http.Referer ~ "(?i)audiobangout\.com" ||
req.http.Referer ~ "(?i)aurorearleen\.com" ||
req.http.Referer ~ "(?i)autobrennero\.it" ||
req.http.Referer ~ "(?i)autoseo\-traffic\.com" ||
req.http.Referer ~ "(?i)autovideobroadcast\.com" ||
req.http.Referer ~ "(?i)aviva\-limoux\.com" ||
req.http.Referer ~ "(?i)avkzarabotok\.info" ||
req.http.Referer ~ "(?i)awency\.com" ||
req.http.Referer ~ "(?i)awnfreon\.com" ||
req.http.Referer ~ "(?i)awrybooks\.com" ||
req.http.Referer ~ "(?i)axisalternativementalhealth" ||
req.http.Referer ~ "(?i)axisalternativementalhealthsharebutton\.net" ||
req.http.Referer ~ "(?i)ayiqa\.us" ||
req.http.Referer ~ "(?i)azartclub\.org" ||
req.http.Referer ~ "(?i)azbukafree\.com" ||
req.http.Referer ~ "(?i)azlex\.uz" ||
req.http.Referer ~ "(?i)ba9n\.com" ||
req.http.Referer ~ "(?i)bablonow\.ru" ||
req.http.Referer ~ "(?i)backgroundpictures\.net" ||
req.http.Referer ~ "(?i)baixar\-musicas\-gratis\.com" ||
req.http.Referer ~ "(?i)baladur\.ru" ||
req.http.Referer ~ "(?i)balitouroffice\.com" ||
req.http.Referer ~ "(?i)bankuet\-paradise\.ru" ||
req.http.Referer ~ "(?i)baofinformatn\.com" ||
req.http.Referer ~ "(?i)baoshlda\.com" ||
req.http.Referer ~ "(?i)bard\-real\.com\.ua" ||
req.http.Referer ~ "(?i)barnspleb\.com" ||
req.http.Referer ~ "(?i)basementrefinishingsystem\.info" ||
req.http.Referer ~ "(?i)bausparen\.bz\.it" ||
req.http.Referer ~ "(?i)bbaom\.us" ||
req.http.Referer ~ "(?i)bbtec\.net" ||
req.http.Referer ~ "(?i)bc\-lass\.ru" ||
req.http.Referer ~ "(?i)bdoab\.us" ||
req.http.Referer ~ "(?i)bedroomlighting\.us" ||
req.http.Referer ~ "(?i)befitmalty\.com" ||
req.http.Referer ~ "(?i)befoggorge\.com" ||
req.http.Referer ~ "(?i)beintones\.com" ||
req.http.Referer ~ "(?i)bellyfries\.com" ||
req.http.Referer ~ "(?i)berthekaylee\.com" ||
req.http.Referer ~ "(?i)best\-seo\-offer\.com" ||
req.http.Referer ~ "(?i)best\-seo\-software\.xyz" ||
req.http.Referer ~ "(?i)best\-seo\-solution\.com" ||
req.http.Referer ~ "(?i)bestchlothinggift3\.com" ||
req.http.Referer ~ "(?i)bestchoice\.cf" ||
req.http.Referer ~ "(?i)bestdove\.in\.ua" ||
req.http.Referer ~ "(?i)bestmobilityscooterstoday\.com" ||
req.http.Referer ~ "(?i)bestofferswalkmydogouteveryday\.gq" ||
req.http.Referer ~ "(?i)bestofseason7produtcs\.com" ||
req.http.Referer ~ "(?i)bestproductof1hsharks\.com" ||
req.http.Referer ~ "(?i)bestvouchrsecrect2015\.com" ||
req.http.Referer ~ "(?i)bestwebsitesawards\.com" ||
req.http.Referer ~ "(?i)bethenextlottowinner\.com" ||
req.http.Referer ~ "(?i)betteeffie\.com" ||
req.http.Referer ~ "(?i)bif\-ru\.info" ||
req.http.Referer ~ "(?i)biglistofwebsites\.com" ||
req.http.Referer ~ "(?i)biketank\.ga" ||
req.http.Referer ~ "(?i)bild\-wurde\-freigeschaltet\.info" ||
req.http.Referer ~ "(?i)billiard\-classic\.com\.ua" ||
req.http.Referer ~ "(?i)bilvd\.com" ||
req.http.Referer ~ "(?i)bio\-market\.kz" ||
req.http.Referer ~ "(?i)bioca\.org" ||
req.http.Referer ~ "(?i)bionskit\.com" ||
req.http.Referer ~ "(?i)biteg\.xyz" ||
req.http.Referer ~ "(?i)bizness\-sity\.ru" ||
req.http.Referer ~ "(?i)bizru\.info" ||
req.http.Referer ~ "(?i)bkns\.vn" ||
req.http.Referer ~ "(?i)bl2k\.com" ||
req.http.Referer ~ "(?i)black\-friday\.ga" ||
req.http.Referer ~ "(?i)blackhatworth\.com" ||
req.http.Referer ~ "(?i)blakeleekendre\.com" ||
req.http.Referer ~ "(?i)blogtotal\.de" ||
req.http.Referer ~ "(?i)blue\-square\.biz" ||
req.http.Referer ~ "(?i)bluerobot\.info" ||
req.http.Referer ~ "(?i)bmaip\.us" ||
req.http.Referer ~ "(?i)bmw\.afora\.ru" ||
req.http.Referer ~ "(?i)boasaudesempre\.com\.br" ||
req.http.Referer ~ "(?i)bobbyyes\.com" ||
req.http.Referer ~ "(?i)boleznikogi\.com" ||
req.http.Referer ~ "(?i)boltalko\.xyz" ||
req.http.Referer ~ "(?i)bonitasophey\.com" ||
req.http.Referer ~ "(?i)bonycared\.com" ||
req.http.Referer ~ "(?i)bookmark4you\.com\.biz" ||
req.http.Referer ~ "(?i)boost\-my\-site\.com" ||
req.http.Referer ~ "(?i)boostmyppc\.com" ||
req.http.Referer ~ "(?i)boundpiety\.com" ||
req.http.Referer ~ "(?i)boutiquefavorable\.com" ||
req.http.Referer ~ "(?i)brakehawk\.com" ||
req.http.Referer ~ "(?i)braomed\.com" ||
req.http.Referer ~ "(?i)braraed\.com" ||
req.http.Referer ~ "(?i)braslet\-premium\-class\.ru" ||
req.http.Referer ~ "(?i)brateg\.xyz" ||
req.http.Referer ~ "(?i)break\-the\-chains\.com" ||
req.http.Referer ~ "(?i)bribecave\.com" ||
req.http.Referer ~ "(?i)bridgetjoanne\.com" ||
req.http.Referer ~ "(?i)briervim\.com" ||
req.http.Referer ~ "(?i)bristolhotel\.com\.ua" ||
req.http.Referer ~ "(?i)brk\-rti\.ru" ||
req.http.Referer ~ "(?i)brothers\-smaller\.ru" ||
req.http.Referer ~ "(?i)budilneg\.xyz" ||
req.http.Referer ~ "(?i)budmavtomatika\.com\.ua" ||
req.http.Referer ~ "(?i)buketeg\.xyz" ||
req.http.Referer ~ "(?i)bukleteg\.xyz" ||
req.http.Referer ~ "(?i)burger\-imperia\.com" ||
req.http.Referer ~ "(?i)burn\-fat\.ga" ||
req.http.Referer ~ "(?i)bursaindex\.com" ||
req.http.Referer ~ "(?i)busscom\.info" ||
req.http.Referer ~ "(?i)buttons\-for\-website\.com" ||
req.http.Referer ~ "(?i)buttons\-for\-your\-website\.com" ||
req.http.Referer ~ "(?i)bux\-soprovozdenie\.ru" ||
req.http.Referer ~ "(?i)buy\-cheap\-online\.info" ||
req.http.Referer ~ "(?i)buy\-cheap\-pills\-order\-online\.com" ||
req.http.Referer ~ "(?i)buy\-forum\.ru" ||
req.http.Referer ~ "(?i)buyantiviralwp\.com" ||
req.http.Referer ~ "(?i)buypharmacydrug\.com" ||
req.http.Referer ~ "(?i)buywheyprotein\.in" ||
req.http.Referer ~ "(?i)bylpr\.com" ||
req.http.Referer ~ "(?i)caebdu\.us" ||
req.http.Referer ~ "(?i)call\-of\-duty\.info" ||
req.http.Referer ~ "(?i)callejondelpozo\.es" ||
req.http.Referer ~ "(?i)canadianfaststore\.ru" ||
req.http.Referer ~ "(?i)capelata\.com" ||
req.http.Referer ~ "(?i)cardboardpapertrips\.info" ||
req.http.Referer ~ "(?i)cardiosport\.com\.ua" ||
req.http.Referer ~ "(?i)caritakattie\.com" ||
req.http.Referer ~ "(?i)cartechnic\.ru" ||
req.http.Referer ~ "(?i)cash4traffic\.xyz" ||
req.http.Referer ~ "(?i)cathaherta\.com" ||
req.http.Referer ~ "(?i)cbcseward\.com" ||
req.http.Referer ~ "(?i)cbox\.ws" ||
req.http.Referer ~ "(?i)celebrateinvesting\.com" ||
req.http.Referer ~ "(?i)cenokos\.ru" ||
req.http.Referer ~ "(?i)cenoval\.ru" ||
req.http.Referer ~ "(?i)centraldeindicacoes\.com\.br" ||
req.http.Referer ~ "(?i)cessenema\.com" ||
req.http.Referer ~ "(?i)cezartabac\.ro" ||
req.http.Referer ~ "(?i)championbft\.com" ||
req.http.Referer ~ "(?i)changeexchange2\.ru" ||
req.http.Referer ~ "(?i)chantalnesta\.com" ||
req.http.Referer ~ "(?i)chaseserver01\.com" ||
req.http.Referer ~ "(?i)chcu\.net" ||
req.http.Referer ~ "(?i)cheap\-trusted\-backlinks\.com" ||
req.http.Referer ~ "(?i)chegouweb\.com\.br" ||
req.http.Referer ~ "(?i)cherrypointplace\.ca" ||
req.http.Referer ~ "(?i)cherubinimobili\.it" ||
req.http.Referer ~ "(?i)chhager\.com" ||
req.http.Referer ~ "(?i)chideyew\.com" ||
req.http.Referer ~ "(?i)chinese\-amezon\.com" ||
req.http.Referer ~ "(?i)chrissyodelia\.com" ||
req.http.Referer ~ "(?i)ci\.ua" ||
req.http.Referer ~ "(?i)cialisfordailyuseprices\.us" ||
req.http.Referer ~ "(?i)cialiswithoutadoctor20mg\.us" ||
req.http.Referer ~ "(?i)circaion\.com" ||
req.http.Referer ~ "(?i)citeccl\.com" ||
req.http.Referer ~ "(?i)cityadspix\.com" ||
req.http.Referer ~ "(?i)civilwartheater\.com" ||
req.http.Referer ~ "(?i)clearanceinvincible\.com" ||
req.http.Referer ~ "(?i)clicksor\.com" ||
req.http.Referer ~ "(?i)clmforexeu\.com" ||
req.http.Referer ~ "(?i)clubfitness\-use\.com" ||
req.http.Referer ~ "(?i)cmaplzln\.ru" ||
req.http.Referer ~ "(?i)codedtunes\.zapto\.org" ||
req.http.Referer ~ "(?i)coderstate\.com" ||
req.http.Referer ~ "(?i)codysbbq\.com" ||
req.http.Referer ~ "(?i)comenents\.com" ||
req.http.Referer ~ "(?i)comkambasoft\.com" ||
req.http.Referer ~ "(?i)compcnet\.com" ||
req.http.Referer ~ "(?i)completepanel\.com" ||
req.http.Referer ~ "(?i)compliance\-alex\.xyz" ||
req.http.Referer ~ "(?i)compliance\-alexa\.xyz" ||
req.http.Referer ~ "(?i)compliance\-andrew\.xyz" ||
req.http.Referer ~ "(?i)compliance\-barak\.xyz" ||
req.http.Referer ~ "(?i)compliance\-brian\.xyz" ||
req.http.Referer ~ "(?i)compliance\-don\.xyz" ||
req.http.Referer ~ "(?i)compliance\-donald\.xyz" ||
req.http.Referer ~ "(?i)compliance\-elena\.xyz" ||
req.http.Referer ~ "(?i)compliance\-fred\.xyz" ||
req.http.Referer ~ "(?i)compliance\-george\.xyz" ||
req.http.Referer ~ "(?i)compliance\-irvin\.xyz" ||
req.http.Referer ~ "(?i)compliance\-ivan\.xyz" ||
req.http.Referer ~ "(?i)compliance\-john\.top" ||
req.http.Referer ~ "(?i)compliance\-julianna\.top" ||
req.http.Referer ~ "(?i)conciergegroup\.org" ||
req.http.Referer ~ "(?i)condominioinspire\.com\.br" ||
req.http.Referer ~ "(?i)connectikastudio\.com" ||
req.http.Referer ~ "(?i)constantaservice\.net" ||
req.http.Referer ~ "(?i)contentlook\.co" ||
req.http.Referer ~ "(?i)conteperilfutordinoi\.com" ||
req.http.Referer ~ "(?i)contextualyield\.com" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-aa\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-bb\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-cc\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-dd\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ee\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ff\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-gg\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-hh\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ii\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-jj\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-kk\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ll\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-mm\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-nn\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-oo\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-pp\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-qq\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-rr\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ss\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-tt\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-uu\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-vv\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ww\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-xx\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-yy\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-zz\.xyz" ||
req.http.Referer ~ "(?i)coolarchitecturalmodeling\.info" ||
req.http.Referer ~ "(?i)cooldomainname\.ws" ||
req.http.Referer ~ "(?i)copyrightclaims\.org" ||
req.http.Referer ~ "(?i)copyrightinstitute\.org" ||
req.http.Referer ~ "(?i)coratommie\.com" ||
req.http.Referer ~ "(?i)corinnaterrijo\.com" ||
req.http.Referer ~ "(?i)corpboston\.com" ||
req.http.Referer ~ "(?i)couple8lifeprodcrreview\.com" ||
req.http.Referer ~ "(?i)covadhosting\.biz" ||
req.http.Referer ~ "(?i)cowerchin\.com" ||
req.http.Referer ~ "(?i)cowjest\.com" ||
req.http.Referer ~ "(?i)csiny018\.com" ||
req.http.Referer ~ "(?i)csucri\.com" ||
req.http.Referer ~ "(?i)cubook\.supernew\.org" ||
req.http.Referer ~ "(?i)customsua\.com\.ua" ||
req.http.Referer ~ "(?i)cutalltheshit\.com" ||
req.http.Referer ~ "(?i)cutehookup\.ru" ||
req.http.Referer ~ "(?i)cutehookuprequest\.ru" ||
req.http.Referer ~ "(?i)cwtearth\.com" ||
req.http.Referer ~ "(?i)cwthalt\.com" ||
req.http.Referer ~ "(?i)cyber\-monday\.ga" ||
req.http.Referer ~ "(?i)cyprusbuyproperties\.com" ||
req.http.Referer ~ "(?i)daciekristine\.com" ||
req.http.Referer ~ "(?i)dailyrank\.net" ||
req.http.Referer ~ "(?i)dallybelow\.com" ||
req.http.Referer ~ "(?i)dalystk\.com" ||
req.http.Referer ~ "(?i)dandi\.biz" ||
req.http.Referer ~ "(?i)danislenefc\.info" ||
req.http.Referer ~ "(?i)darbieelli\.com" ||
req.http.Referer ~ "(?i)darodar\.com" ||
req.http.Referer ~ "(?i)dau43vt5wtrd\.tk" ||
req.http.Referer ~ "(?i)daveenkassdeni\.com" ||
req.http.Referer ~ "(?i)day\-night\-hookups\.com" ||
req.http.Referer ~ "(?i)dazedminor\.pw" ||
req.http.Referer ~ "(?i)dbutton\.net" ||
req.http.Referer ~ "(?i)dcdcapital\.com" ||
req.http.Referer ~ "(?i)debeereba\.com" ||
req.http.Referer ~ "(?i)deladominica\.com" ||
req.http.Referer ~ "(?i)delfin\-aqua\.com\.ua" ||
req.http.Referer ~ "(?i)dellswum\.com" ||
req.http.Referer ~ "(?i)demenageur\.com" ||
req.http.Referer ~ "(?i)demurkids\.com" ||
req.http.Referer ~ "(?i)denaevejaney\.com" ||
req.http.Referer ~ "(?i)depositfiles\-porn\.com" ||
req.http.Referer ~ "(?i)depositfiles\-porn\.ga" ||
req.http.Referer ~ "(?i)dertii\.org" ||
req.http.Referer ~ "(?i)descargar\-musica\-gratis\.net" ||
req.http.Referer ~ "(?i)descontodeviagem\.com\.br" ||
req.http.Referer ~ "(?i)detroitaerotropolis\.com" ||
req.http.Referer ~ "(?i)detskie\-konstruktory\.ru" ||
req.http.Referer ~ "(?i)dev\-seo\.blog" ||
req.http.Referer ~ "(?i)deviceservicehelp\.info" ||
req.http.Referer ~ "(?i)devsrant\.com" ||
req.http.Referer ~ "(?i)devtily\.com" ||
req.http.Referer ~ "(?i)dhdyd\.com" ||
req.http.Referer ~ "(?i)diarcly\.com" ||
req.http.Referer ~ "(?i)dietcontrl\.org" ||
req.http.Referer ~ "(?i)digestivedestroyernows\.com" ||
req.http.Referer ~ "(?i)digitalhoneypothouse\.info" ||
req.http.Referer ~ "(?i)digitglobal\.top" ||
req.http.Referer ~ "(?i)diploed\.com" ||
req.http.Referer ~ "(?i)dipstar\.org" ||
req.http.Referer ~ "(?i)directrev\.com" ||
req.http.Referer ~ "(?i)discevege\.pw" ||
req.http.Referer ~ "(?i)disicivel\.com" ||
req.http.Referer ~ "(?i)disstionally\.com" ||
req.http.Referer ~ "(?i)disticrage\.com" ||
req.http.Referer ~ "(?i)dividendo\.ru" ||
req.http.Referer ~ "(?i)divulgaexpress\.com\.br" ||
req.http.Referer ~ "(?i)djekxa\.ru" ||
req.http.Referer ~ "(?i)djonwatch\.ru" ||
req.http.Referer ~ "(?i)djvirr\.eu" ||
req.http.Referer ~ "(?i)dktr\.ru" ||
req.http.Referer ~ "(?i)dnsrsearch\.com" ||
req.http.Referer ~ "(?i)does\.spacebarnot" ||
req.http.Referer ~ "(?i)dogsrun\.net" ||
req.http.Referer ~ "(?i)dojfuo\.us" ||
req.http.Referer ~ "(?i)dojki\-hd\.com" ||
req.http.Referer ~ "(?i)doktoronline\.no" ||
req.http.Referer ~ "(?i)domain\-tracker\.com" ||
req.http.Referer ~ "(?i)dominateforex\.ml" ||
req.http.Referer ~ "(?i)domination\.ml" ||
req.http.Referer ~ "(?i)donayam\.com" ||
req.http.Referer ~ "(?i)donedamns\.com" ||
req.http.Referer ~ "(?i)dorisecelisse\.com" ||
req.http.Referer ~ "(?i)doroteabibi\.com" ||
req.http.Referer ~ "(?i)doska\-vsem\.ru" ||
req.http.Referer ~ "(?i)dostavka\-v\-krym\.com" ||
req.http.Referer ~ "(?i)down4tonight\.ru" ||
req.http.Referer ~ "(?i)downypopes\.com" ||
req.http.Referer ~ "(?i)doyouknowtheword\-flummox\.ml" ||
req.http.Referer ~ "(?i)dpipa\.us" ||
req.http.Referer ~ "(?i)drinab\.tk" ||
req.http.Referer ~ "(?i)drtyrese\.org" ||
req.http.Referer ~ "(?i)drupa\.com" ||
req.http.Referer ~ "(?i)duffyupu\.com" ||
req.http.Referer ~ "(?i)dulcieherminia\.com" ||
req.http.Referer ~ "(?i)duniafaris\.com" ||
req.http.Referer ~ "(?i)duqxi\.us" ||
req.http.Referer ~ "(?i)dvouvrstva\-mapa\.info" ||
req.http.Referer ~ "(?i)dvr\.biz\.ua" ||
req.http.Referer ~ "(?i)dw2d\.com" ||
req.http.Referer ~ "(?i)dynawinnifred\.com" ||
req.http.Referer ~ "(?i)dzttugzqej\.cn" ||
req.http.Referer ~ "(?i)e\-buyeasy\.com" ||
req.http.Referer ~ "(?i)e\-commerce\-seo\.com" ||
req.http.Referer ~ "(?i)e\-commerce\-seo1\.com" ||
req.http.Referer ~ "(?i)e\-finanzas\.info" ||
req.http.Referer ~ "(?i)e\-kwiaciarz\.pl" ||
req.http.Referer ~ "(?i)e\-mf\-spb\.ru" ||
req.http.Referer ~ "(?i)e2click\.com" ||
req.http.Referer ~ "(?i)e6k6\.com" ||
req.http.Referer ~ "(?i)e77c\.com" ||
req.http.Referer ~ "(?i)earn\-from\-articles\.com" ||
req.http.Referer ~ "(?i)easy\-email\-assistance\.biz" ||
req.http.Referer ~ "(?i)easycommerce\.cf" ||
req.http.Referer ~ "(?i)easync\.io" ||
req.http.Referer ~ "(?i)eatallucanfor0onus\.com" ||
req.http.Referer ~ "(?i)eatallucanwi1hus\.com" ||
req.http.Referer ~ "(?i)eathappy24vouchr\.com" ||
req.http.Referer ~ "(?i)ecbuboe\.cn" ||
req.http.Referer ~ "(?i)ecommerce\-seo\.org" ||
req.http.Referer ~ "(?i)ecomp3\.ru" ||
req.http.Referer ~ "(?i)econom\.co" ||
req.http.Referer ~ "(?i)edakgfvwql\.ru" ||
req.http.Referer ~ "(?i)edelstahlschornstein\-123\.de" ||
req.http.Referer ~ "(?i)edfast\-medrx\.com" ||
req.http.Referer ~ "(?i)edge\.sharethis\.com" ||
req.http.Referer ~ "(?i)edrxnewmedfor\.com" ||
req.http.Referer ~ "(?i)education\-sense\.com" ||
req.http.Referer ~ "(?i)eefbe\.us" ||
req.http.Referer ~ "(?i)egovaleo\.it" ||
req.http.Referer ~ "(?i)eightythreesevendynamicvictors\.com" ||
req.http.Referer ~ "(?i)eijad\.us" ||
req.http.Referer ~ "(?i)ejglknvohcf\.com" ||
req.http.Referer ~ "(?i)ekatalog\.xyz" ||
req.http.Referer ~ "(?i)ekeoutdo\.com" ||
req.http.Referer ~ "(?i)ekto\.ee" ||
req.http.Referer ~ "(?i)elderczech\.com" ||
req.http.Referer ~ "(?i)elisabettasamara\.com" ||
req.http.Referer ~ "(?i)elitaelfrieda\.com" ||
req.http.Referer ~ "(?i)elitesportsadvisor\.com" ||
req.http.Referer ~ "(?i)elmifarhangi\.com" ||
req.http.Referer ~ "(?i)emaillifecoaching\.com\.au" ||
req.http.Referer ~ "(?i)emailsjet\.com" ||
req.http.Referer ~ "(?i)emailsold\.com" ||
req.http.Referer ~ "(?i)embedle\.com" ||
req.http.Referer ~ "(?i)emekonline\.tk" ||
req.http.Referer ~ "(?i)emerson\-rus\.ru" ||
req.http.Referer ~ "(?i)empresas\-brasileiras\.net" ||
req.http.Referer ~ "(?i)encouragingguidance\.com" ||
req.http.Referer ~ "(?i)enemysmug\.com" ||
req.http.Referer ~ "(?i)enpue\.us" ||
req.http.Referer ~ "(?i)entrepreneursinfo\.net" ||
req.http.Referer ~ "(?i)envoijour\.info" ||
req.http.Referer ~ "(?i)eowcaaiyus\.it" ||
req.http.Referer ~ "(?i)eredijovon\.com" ||
req.http.Referer ~ "(?i)eresimgbo\.com" ||
req.http.Referer ~ "(?i)ergo\-zoom\.ru" ||
req.http.Referer ~ "(?i)erot\.co" ||
req.http.Referer ~ "(?i)erynvicki\.com" ||
req.http.Referer ~ "(?i)escewfnc\.ru" ||
req.http.Referer ~ "(?i)escoesco\.info" ||
req.http.Referer ~ "(?i)escolamd\.info" ||
req.http.Referer ~ "(?i)escort\-russian\.com" ||
req.http.Referer ~ "(?i)esopad\.info" ||
req.http.Referer ~ "(?i)esrivrji\.ru" ||
req.http.Referer ~ "(?i)este\-line\.com\.ua" ||
req.http.Referer ~ "(?i)esupportkyc\.info" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement\-4\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement\-5\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement1\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\-enforcement2\.xyz" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\.blogspot\.com" ||
req.http.Referer ~ "(?i)eu\-cookie\-law\.info" ||
req.http.Referer ~ "(?i)eu\-web0\-ssl\.com" ||
req.http.Referer ~ "(?i)euhli\.us" ||
req.http.Referer ~ "(?i)euromasterclass\.ru" ||
req.http.Referer ~ "(?i)europages\.com\.ru" ||
req.http.Referer ~ "(?i)eurosamodelki\.ru" ||
req.http.Referer ~ "(?i)event\-tracking\.com" ||
req.http.Referer ~ "(?i)everysingletitle112\.info" ||
req.http.Referer ~ "(?i)evesbatty\.com" ||
req.http.Referer ~ "(?i)excelenteideia\.com\.br" ||
req.http.Referer ~ "(?i)exchangeit\.gq" ||
req.http.Referer ~ "(?i)exnoous\.com" ||
req.http.Referer ~ "(?i)extener\.com" ||
req.http.Referer ~ "(?i)extrahost\.info" ||
req.http.Referer ~ "(?i)extremez\.net" ||
req.http.Referer ~ "(?i)eyato\.us" ||
req.http.Referer ~ "(?i)eyes\-on\-you\.ga" ||
req.http.Referer ~ "(?i)eywords\-monitoring\-your\-success\.com" ||
req.http.Referer ~ "(?i)ezfag\.us" ||
req.http.Referer ~ "(?i)f1nder\.org" ||
req.http.Referer ~ "(?i)f3ckbuddyalert\.ru" ||
req.http.Referer ~ "(?i)facebook\-mobile\.xyz" ||
req.http.Referer ~ "(?i)family1st\.ca" ||
req.http.Referer ~ "(?i)fast\-wordpress\-start\.com" ||
req.http.Referer ~ "(?i)fastfuckmessage\.ru" ||
req.http.Referer ~ "(?i)fastfucknow\.ru" ||
req.http.Referer ~ "(?i)fastfucktonight\.ru" ||
req.http.Referer ~ "(?i)fasth00kupalert\.ru" ||
req.http.Referer ~ "(?i)fatione\.com" ||
req.http.Referer ~ "(?i)fb\-europa\.info" ||
req.http.Referer ~ "(?i)fbdownloader\.com" ||
req.http.Referer ~ "(?i)fbfreegifts\.com" ||
req.http.Referer ~ "(?i)fdi2\.com" ||
req.http.Referer ~ "(?i)fearkong\.com" ||
req.http.Referer ~ "(?i)feasiblesoil\.com" ||
req.http.Referer ~ "(?i)feedouble\.com" ||
req.http.Referer ~ "(?i)feedouble\.net" ||
req.http.Referer ~ "(?i)ferieboligkbh\.dk" ||
req.http.Referer ~ "(?i)fes5\.com" ||
req.http.Referer ~ "(?i)fexciz\.us" ||
req.http.Referer ~ "(?i)ffkaynihxun\.au" ||
req.http.Referer ~ "(?i)fhefa\.us" ||
req.http.Referer ~ "(?i)figedit\.com" ||
req.http.Referer ~ "(?i)fileserver03\.com" ||
req.http.Referer ~ "(?i)filmetricsasia\.com" ||
req.http.Referer ~ "(?i)findercarphotos\.com" ||
req.http.Referer ~ "(?i)findfuckfriends\.ru" ||
req.http.Referer ~ "(?i)findfuckhookup\.ru" ||
req.http.Referer ~ "(?i)findgirl\.tapeb\.su" ||
req.http.Referer ~ "(?i)finsolutions\.top" ||
req.http.Referer ~ "(?i)fitness\-video\.net" ||
req.http.Referer ~ "(?i)fiverr\.com" ||
req.http.Referer ~ "(?i)fix\-website\-errors\.com" ||
req.http.Referer ~ "(?i)floating\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)fo72\.com" ||
req.http.Referer ~ "(?i)fo93\.com" ||
req.http.Referer ~ "(?i)foend\.com" ||
req.http.Referer ~ "(?i)for\-your\.website" ||
req.http.Referer ~ "(?i)forex\-procto\.ru" ||
req.http.Referer ~ "(?i)forex\-webinar\.info" ||
req.http.Referer ~ "(?i)forsex\.info" ||
req.http.Referer ~ "(?i)fortwosmartcar\.pw" ||
req.http.Referer ~ "(?i)fortynineeightdelightfulselections\.com" ||
req.http.Referer ~ "(?i)forum\.darodar\.com" ||
req.http.Referer ~ "(?i)forum\.smailik\.org" ||
req.http.Referer ~ "(?i)forum\.topic66706143\.6hopping\.com" ||
req.http.Referer ~ "(?i)forum20\.smailik\.org" ||
req.http.Referer ~ "(?i)forum69\.info" ||
req.http.Referer ~ "(?i)foto\-markierung\.info" ||
req.http.Referer ~ "(?i)foundparch\.com" ||
req.http.Referer ~ "(?i)foxload\.in\.net" ||
req.http.Referer ~ "(?i)foxtechfpv\.com" ||
req.http.Referer ~ "(?i)foxweber\.com" ||
req.http.Referer ~ "(?i)fqpphgmm\.ru" ||
req.http.Referer ~ "(?i)frediabbiecyb\.com" ||
req.http.Referer ~ "(?i)free\-fb\-traffic\.com" ||
req.http.Referer ~ "(?i)free\-fbook\-traffic\.com" ||
req.http.Referer ~ "(?i)free\-floating\-buttons\.com" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-aaa\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-bbb\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-ccc\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-ddd\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-eee\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\-fff\.xyz" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.blogspot\.com" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)free\-share\-buttons\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-aaa\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-bbb\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-ccc\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-ddd\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-eee\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-fff\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-hhh\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\-iii\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons\.com" ||
req.http.Referer ~ "(?i)free\-social\-buttons\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons1\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons6\.xyz" ||
req.http.Referer ~ "(?i)free\-social\-buttons7\.xyz" ||
req.http.Referer ~ "(?i)free\-traffic\.xyz" ||
req.http.Referer ~ "(?i)free\-video\-tool\.com" ||
req.http.Referer ~ "(?i)freenode\.info" ||
req.http.Referer ~ "(?i)freeseedsonline\.com" ||
req.http.Referer ~ "(?i)freewhatsappload\.com" ||
req.http.Referer ~ "(?i)freewlan\.info" ||
req.http.Referer ~ "(?i)freyatenor\.com" ||
req.http.Referer ~ "(?i)fronty2073\.net" ||
req.http.Referer ~ "(?i)fryertiler\.com" ||
req.http.Referer ~ "(?i)fsalas\.com" ||
req.http.Referer ~ "(?i)ftns\.ru" ||
req.http.Referer ~ "(?i)ftozi\.us" ||
req.http.Referer ~ "(?i)fuck\-paid\-share\-buttons\.xyz" ||
req.http.Referer ~ "(?i)fungirlsgames\.net" ||
req.http.Referer ~ "(?i)funnypica\.com" ||
req.http.Referer ~ "(?i)futebolminhapaixao\.com" ||
req.http.Referer ~ "(?i)futon\-bunk\-bed\.info" ||
req.http.Referer ~ "(?i)fuuza\.us" ||
req.http.Referer ~ "(?i)fx\-webinar\.info" ||
req.http.Referer ~ "(?i)fxwebinar\.info" ||
req.http.Referer ~ "(?i)g6gym\.com" ||
req.http.Referer ~ "(?i)gasb53\.com" ||
req.http.Referer ~ "(?i)gaylenekala\.com" ||
req.http.Referer ~ "(?i)gdeze\.br" ||
req.http.Referer ~ "(?i)gearcraft\.us" ||
req.http.Referer ~ "(?i)gearsadspromo\.club" ||
req.http.Referer ~ "(?i)gemporsche\.com" ||
req.http.Referer ~ "(?i)generalporn\.org" ||
req.http.Referer ~ "(?i)genmjob3\.ru" ||
req.http.Referer ~ "(?i)gepardtransru\.ru" ||
req.http.Referer ~ "(?i)germes\-trans\.com" ||
req.http.Referer ~ "(?i)get\-free\-social\-traffic\.com" ||
req.http.Referer ~ "(?i)get\-free\-traffic\-now\.com" ||
req.http.Referer ~ "(?i)get\-your\-social\-buttons\.info" ||
req.http.Referer ~ "(?i)getlamborghini\.ga" ||
req.http.Referer ~ "(?i)getoutofdebtfree\.org" ||
req.http.Referer ~ "(?i)getprismatic\.com" ||
req.http.Referer ~ "(?i)getrichquick\.ml" ||
req.http.Referer ~ "(?i)getrichquickly\.info" ||
req.http.Referer ~ "(?i)ghazel\.ru" ||
req.http.Referer ~ "(?i)ghostvisitor\.com" ||
req.http.Referer ~ "(?i)giahungcoltd\.com" ||
req.http.Referer ~ "(?i)gigapeta\.com" ||
req.http.Referer ~ "(?i)girlporn\.ru" ||
req.http.Referer ~ "(?i)gjiayimeiya\.com" ||
req.http.Referer ~ "(?i)gkvector\.ru" ||
req.http.Referer ~ "(?i)glamourshotsfromtheair\.net" ||
req.http.Referer ~ "(?i)glavprofit\.ru" ||
req.http.Referer ~ "(?i)gmctae\.com" ||
req.http.Referer ~ "(?i)go\.ekatalog\.xyz" ||
req.http.Referer ~ "(?i)goagroup\.ru" ||
req.http.Referer ~ "(?i)gobongo\.info" ||
req.http.Referer ~ "(?i)goerssaves\.com" ||
req.http.Referer ~ "(?i)goldicaressa\.com" ||
req.http.Referer ~ "(?i)goodprotein\.ru" ||
req.http.Referer ~ "(?i)google\-liar\.ru" ||
req.http.Referer ~ "(?i)googlemare\.com" ||
req.http.Referer ~ "(?i)googlsucks\.com" ||
req.http.Referer ~ "(?i)gorainbowzone\.tk" ||
req.http.Referer ~ "(?i)gototal\.co\.nz" ||
req.http.Referer ~ "(?i)gowkban\.com" ||
req.http.Referer ~ "(?i)gprjex\.fr" ||
req.http.Referer ~ "(?i)greatjoboffrsnow\.com" ||
req.http.Referer ~ "(?i)greentradespace\.com" ||
req.http.Referer ~ "(?i)greentradespace2\.com" ||
req.http.Referer ~ "(?i)grotpvztt\.info" ||
req.http.Referer ~ "(?i)growlbind\.com" ||
req.http.Referer ~ "(?i)grupodeempresas\.com\.br" ||
req.http.Referer ~ "(?i)gruzovie\-gazeli\-zakaz\.ru" ||
req.http.Referer ~ "(?i)gs09\.com" ||
req.http.Referer ~ "(?i)guardlink\.org" ||
req.http.Referer ~ "(?i)gvgsksbvk\.org" ||
req.http.Referer ~ "(?i)gvo1\.com" ||
req.http.Referer ~ "(?i)gwenniardeen\.com" ||
req.http.Referer ~ "(?i)gxqhsdz\.au" ||
req.http.Referer ~ "(?i)h2monline\.com" ||
req.http.Referer ~ "(?i)h3k3\.com" ||
req.http.Referer ~ "(?i)h6kj\.com" ||
req.http.Referer ~ "(?i)haizq\.us" ||
req.http.Referer ~ "(?i)halloweengivawykols2015\.com" ||
req.http.Referer ~ "(?i)handicapvantoday\.com" ||
req.http.Referer ~ "(?i)handy\-nachrichten\-zustellung\.info" ||
req.http.Referer ~ "(?i)happy\.new\.yeartwit\.com" ||
req.http.Referer ~ "(?i)havepussy\.com" ||
req.http.Referer ~ "(?i)hawaiisurf\.com" ||
req.http.Referer ~ "(?i)hazardky\.net" ||
req.http.Referer ~ "(?i)hdmoviecamera\.net" ||
req.http.Referer ~ "(?i)hdmoviecams\.com" ||
req.http.Referer ~ "(?i)heedspeter\.com" ||
req.http.Referer ~ "(?i)heloisecheri\.com" ||
req.http.Referer ~ "(?i)help\.tpu\.ru" ||
req.http.Referer ~ "(?i)hettiraynell\.com" ||
req.http.Referer ~ "(?i)hexedbulks\.com" ||
req.http.Referer ~ "(?i)hhhlatfq\.ru" ||
req.http.Referer ~ "(?i)hillseerie\.com" ||
req.http.Referer ~ "(?i)himon\.us" ||
req.http.Referer ~ "(?i)hlcwnts\.co\.uk" ||
req.http.Referer ~ "(?i)hmmm\.cz" ||
req.http.Referer ~ "(?i)hockefell\.pw" ||
req.http.Referer ~ "(?i)hollyanneberenice\.com" ||
req.http.Referer ~ "(?i)homeafrikalike\.tk" ||
req.http.Referer ~ "(?i)homemypicture\.tk" ||
req.http.Referer ~ "(?i)honeyanitra\.com" ||
req.http.Referer ~ "(?i)hongfanji\.com" ||
req.http.Referer ~ "(?i)honyaku\.yahoofs\.jp" ||
req.http.Referer ~ "(?i)hope\-found\-now\.net" ||
req.http.Referer ~ "(?i)hosestues\.pw" ||
req.http.Referer ~ "(?i)hostcritique\.com" ||
req.http.Referer ~ "(?i)hosting\-tracker\.com" ||
req.http.Referer ~ "(?i)hostingclub\.lk" ||
req.http.Referer ~ "(?i)hotelavalon\.org" ||
req.http.Referer ~ "(?i)hotgirls\-albuquerque\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-anchorage\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-annapolis\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-atlanta\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-augusta\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-baton\-rouge\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-batonrouge\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-bismarck\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-boise\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-bridgeport\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-carsoncity\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-chicago\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-columbia\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-columbus\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-concord\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-denver\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-des\-moines\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-dover\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-fargo\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-frankfort\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-harrisburg\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-hillsboro\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-honolulu\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-houston\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-indianapolis\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-jefferson\-city\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-jeffersoncity\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-juneau\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-little\-rock\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-littlerock\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-louisville\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-madison\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-manchester\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-minneapolis\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-montpelier\.net" ||
req.http.Referer ~ "(?i)hotgirls\-nashville\.net" ||
req.http.Referer ~ "(?i)hotgirls\-nashville\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-newyork\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-oklahomacity\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-omaha\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-pierre\.net" ||
req.http.Referer ~ "(?i)hotgirls\-raleigh\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-richmond\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-sacramento\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-salem\.net" ||
req.http.Referer ~ "(?i)hotgirls\-salem\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-salt\-lake\-city\.net" ||
req.http.Referer ~ "(?i)hotgirls\-salt\-lake\-city\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-saltlake\-city\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-santafe\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-sioux\-falls\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-st\-paul\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-topeka\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-trenton\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-vermont\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-wichita\.ru" ||
req.http.Referer ~ "(?i)hotgirls\-wilmington\.ru" ||
req.http.Referer ~ "(?i)hotherbssale\.ru" ||
req.http.Referer ~ "(?i)housediz\.com" ||
req.http.Referer ~ "(?i)houseofrose\.com" ||
req.http.Referer ~ "(?i)how\-to\-earn\-quick\-money\.com" ||
req.http.Referer ~ "(?i)howopen\.ru" ||
req.http.Referer ~ "(?i)howtostopreferralspam\.eu" ||
req.http.Referer ~ "(?i)hqefowzsoqzi\.cn" ||
req.http.Referer ~ "(?i)hruner\.com" ||
req.http.Referer ~ "(?i)hui\-ain\-apparel\.tk" ||
req.http.Referer ~ "(?i)hulfingtonpost\.com" ||
req.http.Referer ~ "(?i)humanorightswatch\.org" ||
req.http.Referer ~ "(?i)hundejo\.com" ||
req.http.Referer ~ "(?i)hunthillfarmtrust\.org" ||
req.http.Referer ~ "(?i)hvd\-store\.com" ||
req.http.Referer ~ "(?i)hxfajnpdoka\.ru" ||
req.http.Referer ~ "(?i)hyaiika\.co\.uk" ||
req.http.Referer ~ "(?i)hzjnm\.com" ||
req.http.Referer ~ "(?i)ibagat\.com" ||
req.http.Referer ~ "(?i)ice\.ip64\.net" ||
req.http.Referer ~ "(?i)icginur\.com" ||
req.http.Referer ~ "(?i)ico\.re" ||
req.http.Referer ~ "(?i)iedit\.ilovevitaly\.com" ||
req.http.Referer ~ "(?i)ierecheeraoggic\.com" ||
req.http.Referer ~ "(?i)igadgetsworld\.com" ||
req.http.Referer ~ "(?i)igru\-xbox\.net" ||
req.http.Referer ~ "(?i)igyhuqxtelm\.info" ||
req.http.Referer ~ "(?i)ihre\-kommende\-tarifumstellung\.info" ||
req.http.Referer ~ "(?i)iizyi\.us" ||
req.http.Referer ~ "(?i)ikvoe\.us" ||
req.http.Referer ~ "(?i)ileanefredelia\.com" ||
req.http.Referer ~ "(?i)ilikevitaly\.com" ||
req.http.Referer ~ "(?i)iloveitaly\.ro" ||
req.http.Referer ~ "(?i)iloveitaly\.ru" ||
req.http.Referer ~ "(?i)ilovelbd\.com" ||
req.http.Referer ~ "(?i)ilovevitaly\.co" ||
req.http.Referer ~ "(?i)ilovevitaly\.com" ||
req.http.Referer ~ "(?i)ilovevitaly\.info" ||
req.http.Referer ~ "(?i)ilovevitaly\.org" ||
req.http.Referer ~ "(?i)ilovevitaly\.ro" ||
req.http.Referer ~ "(?i)ilovevitaly\.ru" ||
req.http.Referer ~ "(?i)ilovevitaly\.xyz" ||
req.http.Referer ~ "(?i)ilsoltantoperfutordelpost\.com" ||
req.http.Referer ~ "(?i)imediadesk\.com" ||
req.http.Referer ~ "(?i)iminent\.com" ||
req.http.Referer ~ "(?i)imperiafilm\.ru" ||
req.http.Referer ~ "(?i)impianoffshore\.com" ||
req.http.Referer ~ "(?i)in\-30\-tagen\-schlank\.info" ||
req.http.Referer ~ "(?i)inboxdollars\.com" ||
req.http.Referer ~ "(?i)incaltic\.com" ||
req.http.Referer ~ "(?i)incemorcomp\.com" ||
req.http.Referer ~ "(?i)inceorred\.com" ||
req.http.Referer ~ "(?i)increasewwwtraffic\.info" ||
req.http.Referer ~ "(?i)inerred\.com" ||
req.http.Referer ~ "(?i)inesant\.com" ||
req.http.Referer ~ "(?i)infaovourbusinessrt\.info" ||
req.http.Referer ~ "(?i)infstrctr\.com" ||
req.http.Referer ~ "(?i)ingoer\.com" ||
req.http.Referer ~ "(?i)inlockred\.com" ||
req.http.Referer ~ "(?i)innermostlabs\.com" ||
req.http.Referer ~ "(?i)insider\.pro" ||
req.http.Referer ~ "(?i)insrckesuou\.br" ||
req.http.Referer ~ "(?i)int\.search\.mywebsearch\.com" ||
req.http.Referer ~ "(?i)int\.search\.tb\.ask\.com" ||
req.http.Referer ~ "(?i)interferencer\.ru" ||
req.http.Referer ~ "(?i)inventionpartscorners111\.info" ||
req.http.Referer ~ "(?i)investorsend\.info" ||
req.http.Referer ~ "(?i)investpamm\.ru" ||
req.http.Referer ~ "(?i)invivo\.hu" ||
req.http.Referer ~ "(?i)ionatishkora\.com" ||
req.http.Referer ~ "(?i)iowatele\.com" ||
req.http.Referer ~ "(?i)iphone6\-apple\-store\.ru" ||
req.http.Referer ~ "(?i)iphone6s\-shop\.ru" ||
req.http.Referer ~ "(?i)ipkaeq\.us" ||
req.http.Referer ~ "(?i)iqharrpsb\.eu" ||
req.http.Referer ~ "(?i)iqsmtp\.com" ||
req.http.Referer ~ "(?i)iskalko\.ru" ||
req.http.Referer ~ "(?i)isnomi\.com" ||
req.http.Referer ~ "(?i)isotoner\.com" ||
req.http.Referer ~ "(?i)ispaniya\-costa\-blanca\.ru" ||
req.http.Referer ~ "(?i)istanbulit\.com" ||
req.http.Referer ~ "(?i)it\-max\.com\.ua" ||
req.http.Referer ~ "(?i)it\-specialists\.ru" ||
req.http.Referer ~ "(?i)itrevolution\.cf" ||
req.http.Referer ~ "(?i)itronics\.ca" ||
req.http.Referer ~ "(?i)itsdp3\.com" ||
req.http.Referer ~ "(?i)ituutrust\.com" ||
req.http.Referer ~ "(?i)jaglcva\.it" ||
req.http.Referer ~ "(?i)janotcynde\.com" ||
req.http.Referer ~ "(?i)jasminagui\.com" ||
req.http.Referer ~ "(?i)jasonpartington\.com" ||
req.http.Referer ~ "(?i)jaydias\.com" ||
req.http.Referer ~ "(?i)jazzstyle4us\.com" ||
req.http.Referer ~ "(?i)jd\-link\.net" ||
req.http.Referer ~ "(?i)jehjump\.com" ||
req.http.Referer ~ "(?i)jestsgulls\.com" ||
req.http.Referer ~ "(?i)jettyhoofs\.com" ||
req.http.Referer ~ "(?i)jewvuu\.us" ||
req.http.Referer ~ "(?i)jilliegenia\.com" ||
req.http.Referer ~ "(?i)jjbabskoe\.ru" ||
req.http.Referer ~ "(?i)jkujyjdo\.us" ||
req.http.Referer ~ "(?i)jlasfdas\.pw" ||
req.http.Referer ~ "(?i)jnhihzsvtggx\.br" ||
req.http.Referer ~ "(?i)joa\-news\.com" ||
req.http.Referer ~ "(?i)jockinga\.com" ||
req.http.Referer ~ "(?i)joellphebe\.com" ||
req.http.Referer ~ "(?i)joeyrace\.com" ||
req.http.Referer ~ "(?i)johannahdelphine\.com" ||
req.http.Referer ~ "(?i)joinandplay\.me" ||
req.http.Referer ~ "(?i)joingames\.org" ||
req.http.Referer ~ "(?i)jomo\.in\.ua" ||
req.http.Referer ~ "(?i)joonea\.us" ||
req.http.Referer ~ "(?i)jpr5\.com" ||
req.http.Referer ~ "(?i)jurneirah\.com" ||
req.http.Referer ~ "(?i)justkillingti\.me" ||
req.http.Referer ~ "(?i)justkit\.net" ||
req.http.Referer ~ "(?i)justprofit\.xyz" ||
req.http.Referer ~ "(?i)k1dy\.com" ||
req.http.Referer ~ "(?i)kabbalah\-red\-bracelets\.com" ||
req.http.Referer ~ "(?i)kambasoft\.com" ||
req.http.Referer ~ "(?i)kameski\-katalog\.ru" ||
req.http.Referer ~ "(?i)kanistra\-66\.ru" ||
req.http.Referer ~ "(?i)karolevirginia\.com" ||
req.http.Referer ~ "(?i)kazrent\.com" ||
req.http.Referer ~ "(?i)kcozcnya\.co\.uk" ||
req.http.Referer ~ "(?i)kelciejenica\.com" ||
req.http.Referer ~ "(?i)kerrillangy\.com" ||
req.http.Referer ~ "(?i)kesikelyaf\.com" ||
req.http.Referer ~ "(?i)keywords\-monitoring\-success\.com" ||
req.http.Referer ~ "(?i)keywords\-monitoring\-your\-success\.com" ||
req.http.Referer ~ "(?i)khhfzhluoln\.br" ||
req.http.Referer ~ "(?i)kids\-ks\.com" ||
req.http.Referer ~ "(?i)kimberlidelcina\.com" ||
req.http.Referer ~ "(?i)kinnablondie\.com" ||
req.http.Referer ~ "(?i)kino\-fun\.ru" ||
req.http.Referer ~ "(?i)kino\-key\.info" ||
req.http.Referer ~ "(?i)kinopolet\.net" ||
req.http.Referer ~ "(?i)kiwe\-analytics\.com" ||
req.http.Referer ~ "(?i)kiwi237au\.tk" ||
req.http.Referer ~ "(?i)knigonosha\.net" ||
req.http.Referer ~ "(?i)knowsitall\.info" ||
req.http.Referer ~ "(?i)komhd\.com" ||
req.http.Referer ~ "(?i)komlit\.com" ||
req.http.Referer ~ "(?i)konkursov\.net" ||
req.http.Referer ~ "(?i)kosova\.de" ||
req.http.Referer ~ "(?i)krankenkasse\-beitragserstattung\.info" ||
req.http.Referer ~ "(?i)krasnodar\-mir\-syshi\.ru" ||
req.http.Referer ~ "(?i)kriofesse\.com" ||
req.http.Referer ~ "(?i)kvest\-forever\.ru" ||
req.http.Referer ~ "(?i)kyaccizy\.org" ||
req.http.Referer ~ "(?i)lacroa\.com\.br" ||
req.http.Referer ~ "(?i)lampshine\.com" ||
req.http.Referer ~ "(?i)landoftracking\.com" ||
req.http.Referer ~ "(?i)langteife\.com" ||
req.http.Referer ~ "(?i)laptop\-4\-less\.com" ||
req.http.Referer ~ "(?i)larger\.io" ||
req.http.Referer ~ "(?i)lasolutionentreprise\.info" ||
req.http.Referer ~ "(?i)lauraleetatiania\.com" ||
req.http.Referer ~ "(?i)laurelnomi\.com" ||
req.http.Referer ~ "(?i)law\-check\-two\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-aa\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bb\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-aa\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-bb\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-cc\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-dd\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-ee\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-ff\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-hh\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-bot\-ii\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-cc\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-eight\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-five\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-four\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-nine\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-one\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-six\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-three\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-check\-two\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-dd\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-ee\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-eight\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-ff\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-five\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-four\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-gg\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-hh\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-one\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-seven\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-three\.xyz" ||
req.http.Referer ~ "(?i)law\-enforcement\-two\.xyz" ||
req.http.Referer ~ "(?i)law\-five\.xyz" ||
req.http.Referer ~ "(?i)law\-four\.xyz" ||
req.http.Referer ~ "(?i)law\-one\.xyz" ||
req.http.Referer ~ "(?i)law\-six\.xyz" ||
req.http.Referer ~ "(?i)law\-three\.xyz" ||