forked from Stevie-Ray/referrer-spam-blocker
-
Notifications
You must be signed in to change notification settings - Fork 0
/
referral-spam.vcl
4312 lines (4312 loc) · 205 KB
/
referral-spam.vcl
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# https://github.com/Stevie-Ray/referrer-spam-blocker
# Updated 2023-01-19 19:45:13
sub block_referral_spam {
if (
req.http.Referer ~ "(?i)0\-0\.fr" ||
req.http.Referer ~ "(?i)000free\.us" ||
req.http.Referer ~ "(?i)00author\.com" ||
req.http.Referer ~ "(?i)00go\.com" ||
req.http.Referer ~ "(?i)00it\.com" ||
req.http.Referer ~ "(?i)01casino\-x\.ru" ||
req.http.Referer ~ "(?i)033nachtvandeliteratuur\.nl" ||
req.http.Referer ~ "(?i)03e\.info" ||
req.http.Referer ~ "(?i)03p\.info" ||
req.http.Referer ~ "(?i)0n\-line\.tv" ||
req.http.Referer ~ "(?i)1\-99seo\.com" ||
req.http.Referer ~ "(?i)1\-best\-seo\.com" ||
req.http.Referer ~ "(?i)1\-free\-share\-buttons\.com" ||
req.http.Referer ~ "(?i)100\-reasons\-for\-seo\.com" ||
req.http.Referer ~ "(?i)100dollars\-seo\.com" ||
req.http.Referer ~ "(?i)100searchengines\.com" ||
req.http.Referer ~ "(?i)101flag\.ru" ||
req.http.Referer ~ "(?i)11235813\.webzdarma\.cz" ||
req.http.Referer ~ "(?i)12\-reasons\-for\-seo\.net" ||
req.http.Referer ~ "(?i)12masterov\.com" ||
req.http.Referer ~ "(?i)12u\.info" ||
req.http.Referer ~ "(?i)15\-reasons\-for\-seo\.com" ||
req.http.Referer ~ "(?i)1hwy\.com" ||
req.http.Referer ~ "(?i)1kinobig\.ru" ||
req.http.Referer ~ "(?i)1kreditzaim\.ru" ||
req.http.Referer ~ "(?i)1pamm\.ru" ||
req.http.Referer ~ "(?i)1st\-urist\.ru" ||
req.http.Referer ~ "(?i)1webmaster\.ml" ||
req.http.Referer ~ "(?i)1wek\.top" ||
req.http.Referer ~ "(?i)1winru\.ru" ||
req.http.Referer ~ "(?i)1x\-slot\.site" ||
req.http.Referer ~ "(?i)1x\-slots\.site" ||
req.http.Referer ~ "(?i)1xbet\-entry\.ru" ||
req.http.Referer ~ "(?i)1xbetcc\.com" ||
req.http.Referer ~ "(?i)1xbetonlines1\.ru" ||
req.http.Referer ~ "(?i)1xbetportugal\.com" ||
req.http.Referer ~ "(?i)1xbetts\.ru" ||
req.http.Referer ~ "(?i)1xslot\-casino\.online" ||
req.http.Referer ~ "(?i)1xslot\-casino\.ru" ||
req.http.Referer ~ "(?i)1xslot\-casino\.site" ||
req.http.Referer ~ "(?i)1xslot\.site" ||
req.http.Referer ~ "(?i)1xslots\-africa\.site" ||
req.http.Referer ~ "(?i)1xslots\-brasil\.site" ||
req.http.Referer ~ "(?i)1xslots\-casino\.site" ||
req.http.Referer ~ "(?i)1xslots\.africa" ||
req.http.Referer ~ "(?i)1xslots\.site" ||
req.http.Referer ~ "(?i)2\-best\-seo\.com" ||
req.http.Referer ~ "(?i)2\-easy\.xyz" ||
req.http.Referer ~ "(?i)2\-go\-now\.xyz" ||
req.http.Referer ~ "(?i)2015god\.org" ||
req.http.Referer ~ "(?i)24chasa\.bg" ||
req.http.Referer ~ "(?i)24h\.doctor" ||
req.http.Referer ~ "(?i)24videos\.tv" ||
req.http.Referer ~ "(?i)24x7\-server\-support\.site" ||
req.http.Referer ~ "(?i)256bit\.by" ||
req.http.Referer ~ "(?i)273\-fz\.ru" ||
req.http.Referer ~ "(?i)2ads\.co\.uk" ||
req.http.Referer ~ "(?i)2itech\.ru" ||
req.http.Referer ~ "(?i)2kata\.ru" ||
req.http.Referer ~ "(?i)2nt\.ru" ||
req.http.Referer ~ "(?i)2your\.site" ||
req.http.Referer ~ "(?i)3\-best\-seo\.com" ||
req.http.Referer ~ "(?i)3\-letter\-domains\.net" ||
req.http.Referer ~ "(?i)3dgame3d\.com" ||
req.http.Referer ~ "(?i)3dracergames\.com" ||
req.http.Referer ~ "(?i)3waynetworks\.com" ||
req.http.Referer ~ "(?i)4\-best\-seo\.com" ||
req.http.Referer ~ "(?i)40momporntube\.com" ||
req.http.Referer ~ "(?i)45en\.ru" ||
req.http.Referer ~ "(?i)45tahunkhongguan\.com" ||
req.http.Referer ~ "(?i)4inn\.ru" ||
req.http.Referer ~ "(?i)4ip\.su" ||
req.http.Referer ~ "(?i)4istoshop\.com" ||
req.http.Referer ~ "(?i)4webmasters\.com" ||
req.http.Referer ~ "(?i)4webmasters\.org" ||
req.http.Referer ~ "(?i)4xcasino\.ru" ||
req.http.Referer ~ "(?i)5\-best\-seo\.com" ||
req.http.Referer ~ "(?i)5\-steps\-to\-start\-business\.com" ||
req.http.Referer ~ "(?i)5elementov\.ru" ||
req.http.Referer ~ "(?i)5forex\.ru" ||
req.http.Referer ~ "(?i)6\-best\-seo\.com" ||
req.http.Referer ~ "(?i)69\-13\-59\.ru" ||
req.http.Referer ~ "(?i)6hopping\.com" ||
req.http.Referer ~ "(?i)7\-best\-seo\.com" ||
req.http.Referer ~ "(?i)70casino\.online" ||
req.http.Referer ~ "(?i)76brighton\.co\.uk" ||
req.http.Referer ~ "(?i)76brighton\.com" ||
req.http.Referer ~ "(?i)7kop\.ru" ||
req.http.Referer ~ "(?i)7makemoneyonline\.com" ||
req.http.Referer ~ "(?i)7milliondollars\.com" ||
req.http.Referer ~ "(?i)7ooo\.ru" ||
req.http.Referer ~ "(?i)7zap\.com" ||
req.http.Referer ~ "(?i)8\-best\-seo\.com" ||
req.http.Referer ~ "(?i)8xv8\.com" ||
req.http.Referer ~ "(?i)9\-best\-seo\.com" ||
req.http.Referer ~ "(?i)99\-reasons\-for\-seo\.com" ||
req.http.Referer ~ "(?i)QIWI\.xyz" ||
req.http.Referer ~ "(?i)a\-elita\.in\.ua" ||
req.http.Referer ~ "(?i)a\-hau\.mk" ||
req.http.Referer ~ "(?i)a14download\.com" ||
req.http.Referer ~ "(?i)abbanreddy\.com" ||
req.http.Referer ~ "(?i)abc\.xyz" ||
req.http.Referer ~ "(?i)abcdefh\.xyz" ||
req.http.Referer ~ "(?i)abcdeg\.xyz" ||
req.http.Referer ~ "(?i)abclauncher\.com" ||
req.http.Referer ~ "(?i)abiente\.ru" ||
req.http.Referer ~ "(?i)abovetherivernc\.com" ||
req.http.Referer ~ "(?i)abtasty\.com" ||
req.http.Referer ~ "(?i)abuser\.shop" ||
req.http.Referer ~ "(?i)academia\-nsk\.org" ||
req.http.Referer ~ "(?i)acads\.net" ||
req.http.Referer ~ "(?i)acarreo\.ru" ||
req.http.Referer ~ "(?i)account\-my1\.xyz" ||
req.http.Referer ~ "(?i)accs\-store\.ru" ||
req.http.Referer ~ "(?i)actata\.co" ||
req.http.Referer ~ "(?i)actualremont\.ru" ||
req.http.Referer ~ "(?i)acunetix\-referrer\.com" ||
req.http.Referer ~ "(?i)adanih\.com" ||
req.http.Referer ~ "(?i)adcash\.com" ||
req.http.Referer ~ "(?i)addblueoff\.com\.ua" ||
req.http.Referer ~ "(?i)adelachrist\.top" ||
req.http.Referer ~ "(?i)adelly\.bg" ||
req.http.Referer ~ "(?i)adpostmalta\.com" ||
req.http.Referer ~ "(?i)adrenalinebot\.net" ||
req.http.Referer ~ "(?i)adrenalinebot\.ru" ||
req.http.Referer ~ "(?i)adspart\.com" ||
req.http.Referer ~ "(?i)adtiger\.tk" ||
req.http.Referer ~ "(?i)adult\-video\-chat\.ru" ||
req.http.Referer ~ "(?i)adultfullhd\.com" ||
req.http.Referer ~ "(?i)adventureparkcostarica\.com" ||
req.http.Referer ~ "(?i)advertisefree\.co\.uk" ||
req.http.Referer ~ "(?i)adviceforum\.info" ||
req.http.Referer ~ "(?i)advocatemsk\.ru" ||
req.http.Referer ~ "(?i)advokateg\.co" ||
req.http.Referer ~ "(?i)advokateg\.com" ||
req.http.Referer ~ "(?i)advokateg\.ru" ||
req.http.Referer ~ "(?i)advokateg\.xyz" ||
req.http.Referer ~ "(?i)aerodizain\.com" ||
req.http.Referer ~ "(?i)aerogo\.com" ||
req.http.Referer ~ "(?i)aerotour\.ru" ||
req.http.Referer ~ "(?i)affiliate\-programs\.biz" ||
req.http.Referer ~ "(?i)affordablewebsitesandmobileapps\.com" ||
req.http.Referer ~ "(?i)afora\.ru" ||
req.http.Referer ~ "(?i)agreda\.pluto\.ro" ||
req.http.Referer ~ "(?i)agro\-gid\.com" ||
req.http.Referer ~ "(?i)agtl\.com\.ua" ||
req.http.Referer ~ "(?i)ahhjf\.com" ||
req.http.Referer ~ "(?i)ahrefs\.com" ||
req.http.Referer ~ "(?i)ai\-seo\-services\.com" ||
req.http.Referer ~ "(?i)aibolita\.com" ||
req.http.Referer ~ "(?i)aidarmebel\.kz" ||
req.http.Referer ~ "(?i)aimiot\.net" ||
req.http.Referer ~ "(?i)aitiman\.ae" ||
req.http.Referer ~ "(?i)akama\.com" ||
req.http.Referer ~ "(?i)akuhni\.by" ||
req.http.Referer ~ "(?i)akusherok\.ru" ||
req.http.Referer ~ "(?i)akvamaster\.dp\.ua" ||
req.http.Referer ~ "(?i)alborzan\.com" ||
req.http.Referer ~ "(?i)albuteroli\.com" ||
req.http.Referer ~ "(?i)alcobutik24\.com" ||
req.http.Referer ~ "(?i)alert\-fdm\.xyz" ||
req.http.Referer ~ "(?i)alert\-fjg\.xyz" ||
req.http.Referer ~ "(?i)alert\-hgd\.xyz" ||
req.http.Referer ~ "(?i)alert\-jdh\.xyz" ||
req.http.Referer ~ "(?i)alessandraleone\.com" ||
req.http.Referer ~ "(?i)alexsander\.ch" ||
req.http.Referer ~ "(?i)alfa\-medosmotr\.ru" ||
req.http.Referer ~ "(?i)alfa9\.com" ||
req.http.Referer ~ "(?i)alfabot\.xyz" ||
req.http.Referer ~ "(?i)alfapro\.ru" ||
req.http.Referer ~ "(?i)alibestsale\.com" ||
req.http.Referer ~ "(?i)aliexpress\.com" ||
req.http.Referer ~ "(?i)aliexsale\.ru" ||
req.http.Referer ~ "(?i)alif\-ba\-ta\.com" ||
req.http.Referer ~ "(?i)alinabaniecka\.pl" ||
req.http.Referer ~ "(?i)alive\-ua\.com" ||
req.http.Referer ~ "(?i)alkanfarma\.org" ||
req.http.Referer ~ "(?i)all\-news\.kz" ||
req.http.Referer ~ "(?i)all4bath\.ru" ||
req.http.Referer ~ "(?i)all4invest\.ru" ||
req.http.Referer ~ "(?i)allcredits\.su" ||
req.http.Referer ~ "(?i)allcryptonews\.com" ||
req.http.Referer ~ "(?i)alldownload\.pw" ||
req.http.Referer ~ "(?i)allergick\.com" ||
req.http.Referer ~ "(?i)allergija\.com" ||
req.http.Referer ~ "(?i)allfan\.ru" ||
req.http.Referer ~ "(?i)allforminecraft\.ru" ||
req.http.Referer ~ "(?i)allknow\.info" ||
req.http.Referer ~ "(?i)allkrim\.com" ||
req.http.Referer ~ "(?i)allmarketsnewdayli\.gdn" ||
req.http.Referer ~ "(?i)allnews\.md" ||
req.http.Referer ~ "(?i)allnews24\.in" ||
req.http.Referer ~ "(?i)allpdfmags\.net" ||
req.http.Referer ~ "(?i)allproblog\.com" ||
req.http.Referer ~ "(?i)allsilver925\.co\.il" ||
req.http.Referer ~ "(?i)alltheviews\.com" ||
req.http.Referer ~ "(?i)allvacancy\.ru" ||
req.http.Referer ~ "(?i)allwomen\.info" ||
req.http.Referer ~ "(?i)allwrighter\.ru" ||
req.http.Referer ~ "(?i)alma\-mramor\.com\.ua" ||
req.http.Referer ~ "(?i)alot\.com" ||
req.http.Referer ~ "(?i)alp\-rk\.ru" ||
req.http.Referer ~ "(?i)alphaforum\.ru" ||
req.http.Referer ~ "(?i)alphaopt24\.ru" ||
req.http.Referer ~ "(?i)alpharma\.net" ||
req.http.Referer ~ "(?i)alpinaskate\.com" ||
req.http.Referer ~ "(?i)altermix\.ua" ||
req.http.Referer ~ "(?i)alveris\.ru" ||
req.http.Referer ~ "(?i)am\-se\.com" ||
req.http.Referer ~ "(?i)amanda\-porn\.ga" ||
req.http.Referer ~ "(?i)amatocanizalez\.net" ||
req.http.Referer ~ "(?i)amazon\-seo\-service\.com" ||
req.http.Referer ~ "(?i)amoi\.tn" ||
req.http.Referer ~ "(?i)amoremio\.by" ||
req.http.Referer ~ "(?i)amos\-kids\.ru" ||
req.http.Referer ~ "(?i)amospalla\.es" ||
req.http.Referer ~ "(?i)amp\-project\.pro" ||
req.http.Referer ~ "(?i)amt\-k\.ru" ||
req.http.Referer ~ "(?i)amtel\-vredestein\.com" ||
req.http.Referer ~ "(?i)amylynnandrews\.xyz" ||
req.http.Referer ~ "(?i)anabolics\.shop" ||
req.http.Referer ~ "(?i)anal\-acrobats\.hol\.es" ||
req.http.Referer ~ "(?i)analytics\-ads\.xyz" ||
req.http.Referer ~ "(?i)analyze\-best\-copywriting\-services\.party" ||
req.http.Referer ~ "(?i)analyze\-extra\-analytic\-service\.stream" ||
req.http.Referer ~ "(?i)ananumous\.ru" ||
req.http.Referer ~ "(?i)anapa\-inns\.ru" ||
req.http.Referer ~ "(?i)andrewancheta\.com" ||
req.http.Referer ~ "(?i)android\-style\.com" ||
req.http.Referer ~ "(?i)android\-systems\.ru" ||
req.http.Referer ~ "(?i)android\-vsem\.org" ||
req.http.Referer ~ "(?i)android4fun\.org" ||
req.http.Referer ~ "(?i)androids\-store\.com" ||
req.http.Referer ~ "(?i)animalphotos\.xyz" ||
req.http.Referer ~ "(?i)animebox\.com\.ua" ||
req.http.Referer ~ "(?i)animenime\.ru" ||
req.http.Referer ~ "(?i)annaeydlish\.top" ||
req.http.Referer ~ "(?i)anti\-crisis\-seo\.com" ||
req.http.Referer ~ "(?i)anticrawler\.org" ||
req.http.Referer ~ "(?i)antiguabarbuda\.ru" ||
req.http.Referer ~ "(?i)antonovich\-design\.com\.ua" ||
req.http.Referer ~ "(?i)anydesk\.site" ||
req.http.Referer ~ "(?i)aosheng\-tech\.com" ||
req.http.Referer ~ "(?i)aoul\.top" ||
req.http.Referer ~ "(?i)apartmentbay\.ru" ||
req.http.Referer ~ "(?i)apartmentratings\.com" ||
req.http.Referer ~ "(?i)apishops\.ru" ||
req.http.Referer ~ "(?i)apollon\-market\-url\.org" ||
req.http.Referer ~ "(?i)applepharma\.ru" ||
req.http.Referer ~ "(?i)apteka\-doc\.ru" ||
req.http.Referer ~ "(?i)apteka\-pharm\.ru" ||
req.http.Referer ~ "(?i)apteka\.info" ||
req.http.Referer ~ "(?i)apxeo\.info" ||
req.http.Referer ~ "(?i)arabic\-poetry\.com" ||
req.http.Referer ~ "(?i)aramaicmedia\.org" ||
req.http.Referer ~ "(?i)arate\.ru" ||
req.http.Referer ~ "(?i)arcadepages\.com" ||
req.http.Referer ~ "(?i)architecturebest\.com" ||
req.http.Referer ~ "(?i)arendadogovor\.ru" ||
req.http.Referer ~ "(?i)arendakvartir\.kz" ||
req.http.Referer ~ "(?i)arendas\.net" ||
req.http.Referer ~ "(?i)arendovalka\.xyz" ||
req.http.Referer ~ "(?i)argo\-visa\.ru" ||
req.http.Referer ~ "(?i)arkartex\.ru" ||
req.http.Referer ~ "(?i)arkkivoltti\.net" ||
req.http.Referer ~ "(?i)arpe\.top" ||
req.http.Referer ~ "(?i)arraty\.altervista\.org" ||
req.http.Referer ~ "(?i)artblog\.top" ||
req.http.Referer ~ "(?i)artclipart\.ru" ||
req.http.Referer ~ "(?i)artdeko\.info" ||
req.http.Referer ~ "(?i)artefakct\.com" ||
req.http.Referer ~ "(?i)artpaint\-market\.ru" ||
req.http.Referer ~ "(?i)artparquet\.ru" ||
req.http.Referer ~ "(?i)artpress\.top" ||
req.http.Referer ~ "(?i)arturs\.moscow" ||
req.http.Referer ~ "(?i)aruplighting\.com" ||
req.http.Referer ~ "(?i)asacopaco\.tk" ||
req.http.Referer ~ "(?i)asia\-forum\.ru" ||
req.http.Referer ~ "(?i)ask\-yug\.com" ||
req.http.Referer ~ "(?i)asmxsatadriverin\.aircus\.com" ||
req.http.Referer ~ "(?i)asupro\.com" ||
req.http.Referer ~ "(?i)asynt\.net" ||
req.http.Referer ~ "(?i)atlant\-auto\.info" ||
req.http.Referer ~ "(?i)atlasvkusov\.ru" ||
req.http.Referer ~ "(?i)atleticpharm\.org" ||
req.http.Referer ~ "(?i)atley\.eu\.pn" ||
req.http.Referer ~ "(?i)atmagroup\.ru" ||
req.http.Referer ~ "(?i)atoblog\.online" ||
req.http.Referer ~ "(?i)atyks\.ru" ||
req.http.Referer ~ "(?i)aucoinhomes\.com" ||
req.http.Referer ~ "(?i)audiobangout\.com" ||
req.http.Referer ~ "(?i)ausergrubhof\.info" ||
req.http.Referer ~ "(?i)australia\-opening\-times\.com" ||
req.http.Referer ~ "(?i)auto\-b2b\-seo\-service\.com" ||
req.http.Referer ~ "(?i)auto\-complex\.by" ||
req.http.Referer ~ "(?i)auto\-kia\-fulldrive\.ru" ||
req.http.Referer ~ "(?i)auto\-moto\-elektronika\.cz" ||
req.http.Referer ~ "(?i)auto\-news\-digest\.ru" ||
req.http.Referer ~ "(?i)auto\-seo\-service\.com" ||
req.http.Referer ~ "(?i)auto\-seo\-service\.org" ||
req.http.Referer ~ "(?i)auto\-zapchasti\.org" ||
req.http.Referer ~ "(?i)auto\.rusvile\.lt" ||
req.http.Referer ~ "(?i)auto4style\.ru" ||
req.http.Referer ~ "(?i)autoblog\.org\.ua" ||
req.http.Referer ~ "(?i)autobrennero\.it" ||
req.http.Referer ~ "(?i)autobudpostach\.club" ||
req.http.Referer ~ "(?i)autofuct\.ru" ||
req.http.Referer ~ "(?i)autoloans\.com" ||
req.http.Referer ~ "(?i)autolombard\-krasnodar\.ru" ||
req.http.Referer ~ "(?i)automate\-amazon\-affiliation\.com" ||
req.http.Referer ~ "(?i)automobile\-spec\.com" ||
req.http.Referer ~ "(?i)autonew\.biz" ||
req.http.Referer ~ "(?i)autoseo\-service\.org" ||
req.http.Referer ~ "(?i)autoseo\-traffic\.com" ||
req.http.Referer ~ "(?i)autoseo\-trial\-for\-1\.com" ||
req.http.Referer ~ "(?i)autoseoservice\.org" ||
req.http.Referer ~ "(?i)autoseotips\.com" ||
req.http.Referer ~ "(?i)autoservic\.by" ||
req.http.Referer ~ "(?i)autotop\.com\.ua" ||
req.http.Referer ~ "(?i)autovideobroadcast\.com" ||
req.http.Referer ~ "(?i)autowebmarket\.com\.ua" ||
req.http.Referer ~ "(?i)avcoast\.com" ||
req.http.Referer ~ "(?i)avek\.ru" ||
req.http.Referer ~ "(?i)aviapanda\.ru" ||
req.http.Referer ~ "(?i)aviaseller\.su" ||
req.http.Referer ~ "(?i)aviav\.ru\.com" ||
req.http.Referer ~ "(?i)avitocars\.ru" ||
req.http.Referer ~ "(?i)aviva\-limoux\.com" ||
req.http.Referer ~ "(?i)avkzarabotok\.com" ||
req.http.Referer ~ "(?i)avkzarabotok\.info" ||
req.http.Referer ~ "(?i)avon\-severozapad\.ru" ||
req.http.Referer ~ "(?i)avtoarenda\.by" ||
req.http.Referer ~ "(?i)avtocredit\-legko\.ru" ||
req.http.Referer ~ "(?i)avtointeres\.ru" ||
req.http.Referer ~ "(?i)avtorskoe\-vino\.ru" ||
req.http.Referer ~ "(?i)avtovolop\.ru" ||
req.http.Referer ~ "(?i)avtovykup\.kz" ||
req.http.Referer ~ "(?i)awency\.com" ||
req.http.Referer ~ "(?i)aworlds\.com" ||
req.http.Referer ~ "(?i)axcus\.top" ||
req.http.Referer ~ "(?i)ayerbo\.xhost\.ro" ||
req.http.Referer ~ "(?i)azadnegar\.com" ||
req.http.Referer ~ "(?i)azartclub\.org" ||
req.http.Referer ~ "(?i)azartniy\-bonus\.com" ||
req.http.Referer ~ "(?i)azazu\.ru" ||
req.http.Referer ~ "(?i)azbuka\-mo\.ru" ||
req.http.Referer ~ "(?i)azbukadiets\.ru" ||
req.http.Referer ~ "(?i)azbukafree\.com" ||
req.http.Referer ~ "(?i)azlex\.uz" ||
req.http.Referer ~ "(?i)b\-buyeasy\.com" ||
req.http.Referer ~ "(?i)b2b\-lounge\.com" ||
req.http.Referer ~ "(?i)bablonow\.ru" ||
req.http.Referer ~ "(?i)backgroundpictures\.net" ||
req.http.Referer ~ "(?i)backlinks\-fast\-top\.com" ||
req.http.Referer ~ "(?i)bag77\.ru" ||
req.http.Referer ~ "(?i)bahisgunceladresi\.com" ||
req.http.Referer ~ "(?i)baixar\-musicas\-gratis\.com" ||
req.http.Referer ~ "(?i)bala\.getenjoyment\.net" ||
req.http.Referer ~ "(?i)baladur\.ru" ||
req.http.Referer ~ "(?i)balakhna\.online" ||
req.http.Referer ~ "(?i)balayazh\.com" ||
req.http.Referer ~ "(?i)balitouroffice\.com" ||
req.http.Referer ~ "(?i)balkanfarma\.org" ||
req.http.Referer ~ "(?i)balkanfarma\.ru" ||
req.http.Referer ~ "(?i)balois\.worldbreak\.com" ||
req.http.Referer ~ "(?i)bambi\.ck\.ua" ||
req.http.Referer ~ "(?i)banan\.tv" ||
req.http.Referer ~ "(?i)bankcrediti\.ru" ||
req.http.Referer ~ "(?i)bankhummer\.co" ||
req.http.Referer ~ "(?i)bankiem\.pl" ||
req.http.Referer ~ "(?i)barbarahome\.top" ||
req.http.Referer ~ "(?i)bard\-real\.com\.ua" ||
req.http.Referer ~ "(?i)bashtime\.ru" ||
req.http.Referer ~ "(?i)basisches\-wasser\.net" ||
req.http.Referer ~ "(?i)batietiket\.com" ||
req.http.Referer ~ "(?i)batut\-fun\.ru" ||
req.http.Referer ~ "(?i)bausparen\.bz\.it" ||
req.http.Referer ~ "(?i)bavariagid\.de" ||
req.http.Referer ~ "(?i)bavsac\.com" ||
req.http.Referer ~ "(?i)bazaronline24\.ru" ||
req.http.Referer ~ "(?i)bbtec\.net" ||
req.http.Referer ~ "(?i)bdf\-tracker\.top" ||
req.http.Referer ~ "(?i)beachtoday\.ru" ||
req.http.Referer ~ "(?i)beamfall\.info" ||
req.http.Referer ~ "(?i)beauby\.ru" ||
req.http.Referer ~ "(?i)beauty\-clinic\.ru" ||
req.http.Referer ~ "(?i)beauty\-lesson\.com" ||
req.http.Referer ~ "(?i)beclean\-nn\.ru" ||
req.http.Referer ~ "(?i)bedroomlighting\.us" ||
req.http.Referer ~ "(?i)begalka\.xyz" ||
req.http.Referer ~ "(?i)belinvestdom\.by" ||
req.http.Referer ~ "(?i)belreferatov\.net" ||
req.http.Referer ~ "(?i)berdasovivan\.ru" ||
req.http.Referer ~ "(?i)beremenyashka\.com" ||
req.http.Referer ~ "(?i)berglion\.com" ||
req.http.Referer ~ "(?i)berlininsl\.com" ||
req.http.Referer ~ "(?i)berrymall\.ru" ||
req.http.Referer ~ "(?i)best\-deal\-hdd\.pro" ||
req.http.Referer ~ "(?i)best\-mam\.ru" ||
req.http.Referer ~ "(?i)best\-offer\-hdd\-1\.info" ||
req.http.Referer ~ "(?i)best\-offer\-hdd\-1\.space" ||
req.http.Referer ~ "(?i)best\-offer\-hdd\-1\.top" ||
req.http.Referer ~ "(?i)best\-offer\-hdd\.pro" ||
req.http.Referer ~ "(?i)best\-offer\-hdd\.xyz" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\-1\.info" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\-1\.space" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\-1\.top" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\.blue" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\.me" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\.space" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\.top" ||
req.http.Referer ~ "(?i)best\-ping\-service\-usa\.xyz" ||
req.http.Referer ~ "(?i)best\-printmsk\.ru" ||
req.http.Referer ~ "(?i)best\-seo\-offer\.com" ||
req.http.Referer ~ "(?i)best\-seo\-service\.tk" ||
req.http.Referer ~ "(?i)best\-seo\-software\.xyz" ||
req.http.Referer ~ "(?i)best\-seo\-solution\.com" ||
req.http.Referer ~ "(?i)bestbookclub\.ru" ||
req.http.Referer ~ "(?i)bestchoice\.cf" ||
req.http.Referer ~ "(?i)bestempresas\.es" ||
req.http.Referer ~ "(?i)bestfortraders\.com" ||
req.http.Referer ~ "(?i)bestleofferhdd\.info" ||
req.http.Referer ~ "(?i)bestmobilityscooterstoday\.com" ||
req.http.Referer ~ "(?i)bestofferfyhdd\.info" ||
req.http.Referer ~ "(?i)bestofferhddacy\.info" ||
req.http.Referer ~ "(?i)bestofferhddbyt\.info" ||
req.http.Referer ~ "(?i)bestofferhddeed\.info" ||
req.http.Referer ~ "(?i)bestofferhddity\.info" ||
req.http.Referer ~ "(?i)bestofferifyhdd\.info" ||
req.http.Referer ~ "(?i)bestofferswalkmydogouteveryday\.gq" ||
req.http.Referer ~ "(?i)bestorofferhdd\.info" ||
req.http.Referer ~ "(?i)bestplacetobuyeriacta\.jw\.lt" ||
req.http.Referer ~ "(?i)bestvpnrating\.com" ||
req.http.Referer ~ "(?i)bestwebsiteawards\.com" ||
req.http.Referer ~ "(?i)bestwebsitesawards\.com" ||
req.http.Referer ~ "(?i)bet\-prognoz\.com" ||
req.http.Referer ~ "(?i)bet\-winner1\.ru" ||
req.http.Referer ~ "(?i)bet2much\.ru" ||
req.http.Referer ~ "(?i)betonka\.pro" ||
req.http.Referer ~ "(?i)betslive\.ru" ||
req.http.Referer ~ "(?i)betterhealthbeauty\.com" ||
req.http.Referer ~ "(?i)bettorschool\.ru" ||
req.http.Referer ~ "(?i)betune\.onlinewebshop\.net" ||
req.http.Referer ~ "(?i)betwinservice\.com" ||
req.http.Referer ~ "(?i)beyan\.host\.sk" ||
req.http.Referer ~ "(?i)bez\-zabora\.ru" ||
req.http.Referer ~ "(?i)bezcmexa\.ru" ||
req.http.Referer ~ "(?i)bezlimitko\.xyz" ||
req.http.Referer ~ "(?i)bezprostatita\.com" ||
req.http.Referer ~ "(?i)bezsporno\.ru" ||
req.http.Referer ~ "(?i)beztuberkuleza\.ru" ||
req.http.Referer ~ "(?i)bhf\.vc" ||
req.http.Referer ~ "(?i)bif\-ru\.info" ||
req.http.Referer ~ "(?i)bigcities\.org" ||
req.http.Referer ~ "(?i)biglistofwebsites\.com" ||
req.http.Referer ~ "(?i)biketank\.ga" ||
req.http.Referer ~ "(?i)billiard\-classic\.com\.ua" ||
req.http.Referer ~ "(?i)billigerstrom\.co" ||
req.http.Referer ~ "(?i)billyblog\.online" ||
req.http.Referer ~ "(?i)bimatoprost\-careprost\.com" ||
req.http.Referer ~ "(?i)bimatoprost\-careprost\.com\.ua" ||
req.http.Referer ~ "(?i)bin\-brokers\.com" ||
req.http.Referer ~ "(?i)binokna\.ru" ||
req.http.Referer ~ "(?i)binomo\.kz" ||
req.http.Referer ~ "(?i)bio\-japan\.net" ||
req.http.Referer ~ "(?i)bio\-market\.kz" ||
req.http.Referer ~ "(?i)bio\.trade\-jp\.net" ||
req.http.Referer ~ "(?i)bioca\.org" ||
req.http.Referer ~ "(?i)biplanecentre\.ru" ||
req.http.Referer ~ "(?i)bird1\.ru" ||
req.http.Referer ~ "(?i)birzha\-truda\.eu" ||
req.http.Referer ~ "(?i)bisign\.info" ||
req.http.Referer ~ "(?i)bitcoin\-ua\.top" ||
req.http.Referer ~ "(?i)bitcoins\-forum\.club" ||
req.http.Referer ~ "(?i)bitcoins\-forum\.info" ||
req.http.Referer ~ "(?i)bitcoins\-forum\.online" ||
req.http.Referer ~ "(?i)bitcoins\-forum\.pro" ||
req.http.Referer ~ "(?i)bitcoins\-live\.ru" ||
req.http.Referer ~ "(?i)biteg\.xyz" ||
req.http.Referer ~ "(?i)bitniex\.com" ||
req.http.Referer ~ "(?i)biz\-law\.ru" ||
req.http.Referer ~ "(?i)biznesluxe\.ru" ||
req.http.Referer ~ "(?i)biznesrealnost\.ru" ||
req.http.Referer ~ "(?i)biznesschat\.net" ||
req.http.Referer ~ "(?i)bizru\.info" ||
req.http.Referer ~ "(?i)bki24\.info" ||
req.http.Referer ~ "(?i)bkns\.vn" ||
req.http.Referer ~ "(?i)black\-friday\.ga" ||
req.http.Referer ~ "(?i)black\-tip\.top" ||
req.http.Referer ~ "(?i)blackhatworth\.com" ||
req.http.Referer ~ "(?i)blackle\.com" ||
req.http.Referer ~ "(?i)blackplanet\.com" ||
req.http.Referer ~ "(?i)blackwitchcraft\.ru" ||
req.http.Referer ~ "(?i)blavia\.00author\.com" ||
req.http.Referer ~ "(?i)bleacherreport\.com" ||
req.http.Referer ~ "(?i)blockchaintop\.nl" ||
req.http.Referer ~ "(?i)blockworld\.ru" ||
req.http.Referer ~ "(?i)blog\.f00kclan\.de" ||
req.http.Referer ~ "(?i)blog\.koorg\.ru" ||
req.http.Referer ~ "(?i)blog\.latuti\.net" ||
req.http.Referer ~ "(?i)blog\.remote\-computer\.de" ||
req.http.Referer ~ "(?i)blog\.xsk\.in" ||
req.http.Referer ~ "(?i)blog\.yam\.com" ||
req.http.Referer ~ "(?i)blog100\.org" ||
req.http.Referer ~ "(?i)blog2019\.top" ||
req.http.Referer ~ "(?i)blog2019\.xyz" ||
req.http.Referer ~ "(?i)blog4u\.top" ||
req.http.Referer ~ "(?i)blogarun\.co" ||
req.http.Referer ~ "(?i)bloggen\.be" ||
req.http.Referer ~ "(?i)bloggers\.nl" ||
req.http.Referer ~ "(?i)blogig\.org" ||
req.http.Referer ~ "(?i)blogking\.top" ||
req.http.Referer ~ "(?i)bloglag\.com" ||
req.http.Referer ~ "(?i)blognet\.top" ||
req.http.Referer ~ "(?i)blogos\.kz" ||
req.http.Referer ~ "(?i)blogping\.xyz" ||
req.http.Referer ~ "(?i)blogs\.rediff\.com" ||
req.http.Referer ~ "(?i)blogseo\.xyz" ||
req.http.Referer ~ "(?i)blogstar\.fun" ||
req.http.Referer ~ "(?i)blogster\.com" ||
req.http.Referer ~ "(?i)blogtotal\.de" ||
req.http.Referer ~ "(?i)blogua\.org" ||
req.http.Referer ~ "(?i)blue\-square\.biz" ||
req.http.Referer ~ "(?i)bluerobot\.info" ||
req.http.Referer ~ "(?i)bo\-vtb24\.ru" ||
req.http.Referer ~ "(?i)board\.f00d\.de" ||
req.http.Referer ~ "(?i)bobba\.dzaba\.com" ||
req.http.Referer ~ "(?i)bodybuilding\-shop\.biz" ||
req.http.Referer ~ "(?i)boleznikogi\.com" ||
req.http.Referer ~ "(?i)bolezniorganov\.ru" ||
req.http.Referer ~ "(?i)boltalko\.xyz" ||
req.http.Referer ~ "(?i)boltushkiclub\.ru" ||
req.http.Referer ~ "(?i)bombla\.org" ||
req.http.Referer ~ "(?i)bonkers\.name" ||
req.http.Referer ~ "(?i)bonus\-betting\.ru" ||
req.http.Referer ~ "(?i)bonus\-spasibo\-sberbank\.ru" ||
req.http.Referer ~ "(?i)bonus\-vtb\.ru" ||
req.http.Referer ~ "(?i)bonux\.nextview\.ru" ||
req.http.Referer ~ "(?i)bookmaker\-bet\.com" ||
req.http.Referer ~ "(?i)bookmark4you\.biz" ||
req.http.Referer ~ "(?i)bookmark4you\.com" ||
req.http.Referer ~ "(?i)bookmark4you\.com\.biz" ||
req.http.Referer ~ "(?i)books\-top\.com" ||
req.http.Referer ~ "(?i)boole\.onlinewebshop\.net" ||
req.http.Referer ~ "(?i)boost\-my\-site\.com" ||
req.http.Referer ~ "(?i)boost24\.biz" ||
req.http.Referer ~ "(?i)boostmyppc\.com" ||
req.http.Referer ~ "(?i)bosefux\.esy\.es" ||
req.http.Referer ~ "(?i)bosman\.pluto\.ro" ||
req.http.Referer ~ "(?i)bot\-traffic\.icu" ||
req.http.Referer ~ "(?i)bot\-traffic\.xyz" ||
req.http.Referer ~ "(?i)botamycos\.fr" ||
req.http.Referer ~ "(?i)bottraffic\.live" ||
req.http.Referer ~ "(?i)bottraffic143\.xyz" ||
req.http.Referer ~ "(?i)bottraffic329\.xyz" ||
req.http.Referer ~ "(?i)bottraffic4free\.club" ||
req.http.Referer ~ "(?i)bottraffic4free\.host" ||
req.http.Referer ~ "(?i)bottraffic999\.xyz" ||
req.http.Referer ~ "(?i)bouda\.kvalitne\.cz" ||
req.http.Referer ~ "(?i)bpro1\.top" ||
req.http.Referer ~ "(?i)bradleylive\.xyz" ||
req.http.Referer ~ "(?i)brains2\.biz" ||
req.http.Referer ~ "(?i)brakehawk\.com" ||
req.http.Referer ~ "(?i)brandov\.ru" ||
req.http.Referer ~ "(?i)brateg\.xyz" ||
req.http.Referer ~ "(?i)brauni\.com\.ua" ||
req.http.Referer ~ "(?i)bravica\.biz" ||
req.http.Referer ~ "(?i)bravica\.com" ||
req.http.Referer ~ "(?i)bravica\.me" ||
req.http.Referer ~ "(?i)bravica\.net" ||
req.http.Referer ~ "(?i)bravica\.news" ||
req.http.Referer ~ "(?i)bravica\.online" ||
req.http.Referer ~ "(?i)bravica\.pro" ||
req.http.Referer ~ "(?i)bravica\.ru" ||
req.http.Referer ~ "(?i)bravica\.su" ||
req.http.Referer ~ "(?i)break\-the\-chains\.com" ||
req.http.Referer ~ "(?i)breget74\.ru" ||
req.http.Referer ~ "(?i)brendbutik\.ru" ||
req.http.Referer ~ "(?i)briankatrine\.top" ||
req.http.Referer ~ "(?i)brickmaster\.pro" ||
req.http.Referer ~ "(?i)brillianty\.info" ||
req.http.Referer ~ "(?i)bristolhostel\.com" ||
req.http.Referer ~ "(?i)bristolhotel\.com" ||
req.http.Referer ~ "(?i)bristolhotel\.com\.ua" ||
req.http.Referer ~ "(?i)brk\-rti\.ru" ||
req.http.Referer ~ "(?i)brokergid\.ru" ||
req.http.Referer ~ "(?i)brooklyn\-ads\.com" ||
req.http.Referer ~ "(?i)brooklynsays\.com" ||
req.http.Referer ~ "(?i)brothers\-smaller\.ru" ||
req.http.Referer ~ "(?i)brus\-vsem\.ru" ||
req.http.Referer ~ "(?i)brus\.city" ||
req.http.Referer ~ "(?i)brusilov\.ru" ||
req.http.Referer ~ "(?i)bsell\.ru" ||
req.http.Referer ~ "(?i)btcnix\.com" ||
req.http.Referer ~ "(?i)btt\-club\.pro" ||
req.http.Referer ~ "(?i)budilneg\.xyz" ||
req.http.Referer ~ "(?i)budmavtomatika\.com\.ua" ||
req.http.Referer ~ "(?i)budpost\.com\.ua" ||
req.http.Referer ~ "(?i)bufetout\.ru" ||
req.http.Referer ~ "(?i)bugof\.gq" ||
req.http.Referer ~ "(?i)buhproffi\.ru" ||
req.http.Referer ~ "(?i)buigas\.00it\.com" ||
req.http.Referer ~ "(?i)buildnw\.ru" ||
req.http.Referer ~ "(?i)buildwithwendy\.com" ||
req.http.Referer ~ "(?i)buketeg\.xyz" ||
req.http.Referer ~ "(?i)bukleteg\.xyz" ||
req.http.Referer ~ "(?i)bulgaria\-web\-developers\.com" ||
req.http.Referer ~ "(?i)buqayy0\.livejournal\.com" ||
req.http.Referer ~ "(?i)bur\-rk\.ru" ||
req.http.Referer ~ "(?i)burger\-imperia\.com" ||
req.http.Referer ~ "(?i)burn\-fat\.ga" ||
req.http.Referer ~ "(?i)business\-online\-sberbank\.ru" ||
req.http.Referer ~ "(?i)buttons\-for\-website\.com" ||
req.http.Referer ~ "(?i)buttons\-for\-your\-website\.com" ||
req.http.Referer ~ "(?i)buy\-cheap\-online\.info" ||
req.http.Referer ~ "(?i)buy\-cheap\-pills\-order\-online\.com" ||
req.http.Referer ~ "(?i)buy\-forum\.ru" ||
req.http.Referer ~ "(?i)buy\-meds24\.com" ||
req.http.Referer ~ "(?i)buyantiviralwp\.com" ||
req.http.Referer ~ "(?i)buyessay3\.blogspot\.ru" ||
req.http.Referer ~ "(?i)buyessaynow\.biz" ||
req.http.Referer ~ "(?i)buyessayonline19\.blogspot\.ru" ||
req.http.Referer ~ "(?i)buyfriend\.ru" ||
req.http.Referer ~ "(?i)buyk\.host\.sk" ||
req.http.Referer ~ "(?i)buynorxx\.com" ||
req.http.Referer ~ "(?i)buypharmacydrug\.com" ||
req.http.Referer ~ "(?i)buypillsonline24h\.com" ||
req.http.Referer ~ "(?i)buypillsorderonline\.com" ||
req.http.Referer ~ "(?i)buypuppies\.ca" ||
req.http.Referer ~ "(?i)buyscabiescream\.com" ||
req.http.Referer ~ "(?i)buytizanidineonline\.blogspot\.com" ||
req.http.Referer ~ "(?i)buytizanidineonlinenoprescription\.blogspot\.com" ||
req.http.Referer ~ "(?i)buyviagraa\.blogspot\.com" ||
req.http.Referer ~ "(?i)bvps8\.com" ||
req.http.Referer ~ "(?i)bycontext\.com" ||
req.http.Referer ~ "(?i)byme\.se" ||
req.http.Referer ~ "(?i)bytimedance\.ru" ||
req.http.Referer ~ "(?i)c\-english\.ru" ||
req.http.Referer ~ "(?i)c2bit\.hk" ||
req.http.Referer ~ "(?i)californianews\.cf" ||
req.http.Referer ~ "(?i)call\-of\-duty\.info" ||
req.http.Referer ~ "(?i)callejondelpozo\.es" ||
req.http.Referer ~ "(?i)calvet\.altervista\.org" ||
req.http.Referer ~ "(?i)cancerfungus\.com" ||
req.http.Referer ~ "(?i)candida\-international\.blogspot\.com" ||
req.http.Referer ~ "(?i)candida\-society\.org\.uk" ||
req.http.Referer ~ "(?i)cannazon\-market\.org" ||
req.http.Referer ~ "(?i)canoncdriverq3\.pen\.io" ||
req.http.Referer ~ "(?i)canyougethighofftizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)canzoni\.ru" ||
req.http.Referer ~ "(?i)carabela\.com\.do" ||
req.http.Referer ~ "(?i)carbon\-linger\-hierarchy\-suntan\.top" ||
req.http.Referer ~ "(?i)carder\.me" ||
req.http.Referer ~ "(?i)carder\.tv" ||
req.http.Referer ~ "(?i)carders\.ug" ||
req.http.Referer ~ "(?i)cardiosport\.com\.ua" ||
req.http.Referer ~ "(?i)cardsdumps\.com" ||
req.http.Referer ~ "(?i)cardsharp1\.ru" ||
req.http.Referer ~ "(?i)cardul\.ru" ||
req.http.Referer ~ "(?i)carezi\.com" ||
req.http.Referer ~ "(?i)carfax\.com\.ua" ||
req.http.Referer ~ "(?i)carivka\.com\.ua" ||
req.http.Referer ~ "(?i)carloans\.com" ||
req.http.Referer ~ "(?i)carscrim\.com" ||
req.http.Referer ~ "(?i)carsdined\.org" ||
req.http.Referer ~ "(?i)carsnumber\.com" ||
req.http.Referer ~ "(?i)carson\.getenjoyment\.net" ||
req.http.Referer ~ "(?i)carsoncitypizza\.com" ||
req.http.Referer ~ "(?i)cartechnic\.ru" ||
req.http.Referer ~ "(?i)casablancamanor\.co\.za" ||
req.http.Referer ~ "(?i)cashforum\.cc" ||
req.http.Referer ~ "(?i)casino\-top3\.fun" ||
req.http.Referer ~ "(?i)casino\-top3\.online" ||
req.http.Referer ~ "(?i)casino\-top3\.ru" ||
req.http.Referer ~ "(?i)casino\-top3\.site" ||
req.http.Referer ~ "(?i)casino\-top3\.space" ||
req.http.Referer ~ "(?i)casino\-top3\.website" ||
req.http.Referer ~ "(?i)casino\-v\.site" ||
req.http.Referer ~ "(?i)casino\-vulkane\.com" ||
req.http.Referer ~ "(?i)casino\-x\-now\.ru" ||
req.http.Referer ~ "(?i)casino\-x\.host" ||
req.http.Referer ~ "(?i)casinosbewertung\.de" ||
req.http.Referer ~ "(?i)casinox\-jp\.com" ||
req.http.Referer ~ "(?i)castingbank\.ru" ||
req.http.Referer ~ "(?i)catalogs\-parts\.com" ||
req.http.Referer ~ "(?i)catherinemill\.xyz" ||
req.http.Referer ~ "(?i)catterybengal\.com" ||
req.http.Referer ~ "(?i)cattyhealth\.com" ||
req.http.Referer ~ "(?i)cayado\.snn\.gr" ||
req.http.Referer ~ "(?i)cazino\-v\.online" ||
req.http.Referer ~ "(?i)cazino\-v\.ru" ||
req.http.Referer ~ "(?i)cbcseward\.com" ||
req.http.Referer ~ "(?i)cbox\.ws" ||
req.http.Referer ~ "(?i)ccfullzshop\.com" ||
req.http.Referer ~ "(?i)celestepage\.xyz" ||
req.http.Referer ~ "(?i)celldog\.ru" ||
req.http.Referer ~ "(?i)cenokos\.ru" ||
req.http.Referer ~ "(?i)cenoval\.ru" ||
req.http.Referer ~ "(?i)centre\-indigo\.org\.ua" ||
req.http.Referer ~ "(?i)centrumcoachingu\.com" ||
req.http.Referer ~ "(?i)cercacamion\.it" ||
req.http.Referer ~ "(?i)certifywebsite\.win" ||
req.http.Referer ~ "(?i)cezartabac\.ro" ||
req.http.Referer ~ "(?i)cfsrating\.sonicwall\.com" ||
req.http.Referer ~ "(?i)cgi2\.nintendo\.co\.jp" ||
req.http.Referer ~ "(?i)chainii\.ru" ||
req.http.Referer ~ "(?i)channel\-badge\-betray\-volcanic\.com" ||
req.http.Referer ~ "(?i)chastnoeporno\.com" ||
req.http.Referer ~ "(?i)chat\.ru" ||
req.http.Referer ~ "(?i)chatrazvrat\.ru" ||
req.http.Referer ~ "(?i)chatroulette\.life" ||
req.http.Referer ~ "(?i)chcu\.net" ||
req.http.Referer ~ "(?i)cheap\-trusted\-backlinks\.com" ||
req.http.Referer ~ "(?i)cheapkeys\.ovh" ||
req.http.Referer ~ "(?i)cheappills24h\.com" ||
req.http.Referer ~ "(?i)chee\-by\.biz" ||
req.http.Referer ~ "(?i)chelyabinsk\.dienai\.ru" ||
req.http.Referer ~ "(?i)chelyabinsk\.xrus\.org" ||
req.http.Referer ~ "(?i)cherrypointplace\.ca" ||
req.http.Referer ~ "(?i)cherubinimobili\.it" ||
req.http.Referer ~ "(?i)chimiver\.info" ||
req.http.Referer ~ "(?i)chinese\-amezon\.com" ||
req.http.Referer ~ "(?i)chip35\.ru" ||
req.http.Referer ~ "(?i)chipmp3\.ru" ||
req.http.Referer ~ "(?i)chizhik\-2\.ru" ||
req.http.Referer ~ "(?i)choosecuisine\.com" ||
req.http.Referer ~ "(?i)ci\.ua" ||
req.http.Referer ~ "(?i)cigarpass\.com" ||
req.http.Referer ~ "(?i)cinemaenergy\-hd\.ru" ||
req.http.Referer ~ "(?i)ciproandtizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)citizenclsdriveri7\.pen\.io" ||
req.http.Referer ~ "(?i)cityadspix\.com" ||
req.http.Referer ~ "(?i)citybur\.ru" ||
req.http.Referer ~ "(?i)cityreys\.ru" ||
req.http.Referer ~ "(?i)civilwartheater\.com" ||
req.http.Referer ~ "(?i)clarithromycin500mg\.com" ||
req.http.Referer ~ "(?i)clash\-clans\.ru" ||
req.http.Referer ~ "(?i)classicakuhni\.ru" ||
req.http.Referer ~ "(?i)cleandom\.in\.ua" ||
req.http.Referer ~ "(?i)cleaningservices\.kiev\.ua" ||
req.http.Referer ~ "(?i)clicksor\.com" ||
req.http.Referer ~ "(?i)climate\.by" ||
req.http.Referer ~ "(?i)clmforexeu\.com" ||
req.http.Referer ~ "(?i)clothing\-deal\.club" ||
req.http.Referer ~ "(?i)cloudsendchef\.com" ||
req.http.Referer ~ "(?i)club\-lukojl\.ru" ||
req.http.Referer ~ "(?i)club\-musics\.ru" ||
req.http.Referer ~ "(?i)club\-samodelkin\.ru" ||
req.http.Referer ~ "(?i)cmd\.kz" ||
req.http.Referer ~ "(?i)cobaltpro\.ru" ||
req.http.Referer ~ "(?i)cocyq\.inwtrade\.com" ||
req.http.Referer ~ "(?i)coderstate\.com" ||
req.http.Referer ~ "(?i)codq\.info" ||
req.http.Referer ~ "(?i)codysbbq\.com" ||
req.http.Referer ~ "(?i)coeus\-solutions\.de" ||
req.http.Referer ~ "(?i)coffeemashiny\.ru" ||
req.http.Referer ~ "(?i)coinswitch\.cash" ||
req.http.Referer ~ "(?i)coldfilm\.ru" ||
req.http.Referer ~ "(?i)coleso\.md" ||
req.http.Referer ~ "(?i)collectinviolity\.com" ||
req.http.Referer ~ "(?i)collegeessay19\.blogspot\.ru" ||
req.http.Referer ~ "(?i)columb\.net\.ua" ||
req.http.Referer ~ "(?i)cometorussia\.net" ||
req.http.Referer ~ "(?i)comissionka\.net" ||
req.http.Referer ~ "(?i)commentag\.com" ||
req.http.Referer ~ "(?i)commerage\.ru" ||
req.http.Referer ~ "(?i)comp\-pomosch\.ru" ||
req.http.Referer ~ "(?i)compliance\-alex\.top" ||
req.http.Referer ~ "(?i)compliance\-alex\.xyz" ||
req.http.Referer ~ "(?i)compliance\-alexa\.top" ||
req.http.Referer ~ "(?i)compliance\-alexa\.xyz" ||
req.http.Referer ~ "(?i)compliance\-andrew\.top" ||
req.http.Referer ~ "(?i)compliance\-andrew\.xyz" ||
req.http.Referer ~ "(?i)compliance\-barak\.top" ||
req.http.Referer ~ "(?i)compliance\-barak\.xyz" ||
req.http.Referer ~ "(?i)compliance\-brian\.top" ||
req.http.Referer ~ "(?i)compliance\-brian\.xyz" ||
req.http.Referer ~ "(?i)compliance\-checker\-7\.info" ||
req.http.Referer ~ "(?i)compliance\-don\.top" ||
req.http.Referer ~ "(?i)compliance\-don\.xyz" ||
req.http.Referer ~ "(?i)compliance\-donald\.xyz" ||
req.http.Referer ~ "(?i)compliance\-elena\.top" ||
req.http.Referer ~ "(?i)compliance\-elena\.xyz" ||
req.http.Referer ~ "(?i)compliance\-fred\.top" ||
req.http.Referer ~ "(?i)compliance\-fred\.xyz" ||
req.http.Referer ~ "(?i)compliance\-george\.top" ||
req.http.Referer ~ "(?i)compliance\-george\.xyz" ||
req.http.Referer ~ "(?i)compliance\-irvin\.top" ||
req.http.Referer ~ "(?i)compliance\-irvin\.xyz" ||
req.http.Referer ~ "(?i)compliance\-ivan\.top" ||
req.http.Referer ~ "(?i)compliance\-ivan\.xyz" ||
req.http.Referer ~ "(?i)compliance\-jack\.top" ||
req.http.Referer ~ "(?i)compliance\-jane\.top" ||
req.http.Referer ~ "(?i)compliance\-jess\.top" ||
req.http.Referer ~ "(?i)compliance\-jessica\.top" ||
req.http.Referer ~ "(?i)compliance\-john\.top" ||
req.http.Referer ~ "(?i)compliance\-josh\.top" ||
req.http.Referer ~ "(?i)compliance\-julia\.top" ||
req.http.Referer ~ "(?i)compliance\-julianna\.top" ||
req.http.Referer ~ "(?i)compliance\-margo\.top" ||
req.http.Referer ~ "(?i)compliance\-mark\.top" ||
req.http.Referer ~ "(?i)compliance\-mary\.top" ||
req.http.Referer ~ "(?i)compliance\-nelson\.top" ||
req.http.Referer ~ "(?i)compliance\-olga\.top" ||
req.http.Referer ~ "(?i)compliance\-viktor\.top" ||
req.http.Referer ~ "(?i)compliance\-walt\.top" ||
req.http.Referer ~ "(?i)compliance\-walter\.top" ||
req.http.Referer ~ "(?i)compliance\-willy\.top" ||
req.http.Referer ~ "(?i)computer\-remont\.ru" ||
req.http.Referer ~ "(?i)conciergegroup\.org" ||
req.http.Referer ~ "(?i)concretepol\.com" ||
req.http.Referer ~ "(?i)connectikastudio\.com" ||
req.http.Referer ~ "(?i)constanceonline\.top" ||
req.http.Referer ~ "(?i)constantaservice\.net" ||
req.http.Referer ~ "(?i)construmac\.com\.mx" ||
req.http.Referer ~ "(?i)contextualyield\.com" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-aa\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-bb\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-cc\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-dd\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ee\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ff\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-gg\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-hh\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ii\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-jj\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-kk\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ll\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-mm\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-nn\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-oo\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-pp\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-qq\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-rr\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ss\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-tt\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-uu\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-vv\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-ww\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-xx\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-yy\.xyz" ||
req.http.Referer ~ "(?i)cookie\-law\-enforcement\-zz\.xyz" ||
req.http.Referer ~ "(?i)cookielawblog\.wordpress\.com" ||
req.http.Referer ~ "(?i)cookingmeat\.ru" ||
req.http.Referer ~ "(?i)cool\-mining\.com" ||
req.http.Referer ~ "(?i)cool\-wedding\.net" ||
req.http.Referer ~ "(?i)coop\-gamers\.ru" ||
req.http.Referer ~ "(?i)copblock\.org" ||
req.http.Referer ~ "(?i)copyrightclaims\.org" ||
req.http.Referer ~ "(?i)copyrightinstitute\.org" ||
req.http.Referer ~ "(?i)coral\-info\.com" ||
req.http.Referer ~ "(?i)cosmediqueresults\.com" ||
req.http.Referer ~ "(?i)countravel\.net" ||
req.http.Referer ~ "(?i)covadhosting\.biz" ||
req.http.Referer ~ "(?i)covblog\.top" ||
req.http.Referer ~ "(?i)coverage\-my\.com" ||
req.http.Referer ~ "(?i)covetnica\.com" ||
req.http.Referer ~ "(?i)covid\-schutzmasken\.de" ||
req.http.Referer ~ "(?i)cowblog\.fr" ||
req.http.Referer ~ "(?i)cp24\.com\.ua" ||
req.http.Referer ~ "(?i)cranly\.net" ||
req.http.Referer ~ "(?i)crazy\-mining\.org" ||
req.http.Referer ~ "(?i)crd\.clan\.su" ||
req.http.Referer ~ "(?i)creams\.makeforum\.eu" ||
req.http.Referer ~ "(?i)credit\-card\-tinkoff\.ru" ||
req.http.Referer ~ "(?i)credit\-cards\-online24\.ru" ||
req.http.Referer ~ "(?i)credit\.co\.ua" ||
req.http.Referer ~ "(?i)creditmoney\.com\.ua" ||
req.http.Referer ~ "(?i)crest\-poloski\.ru" ||
req.http.Referer ~ "(?i)crest3d\.ru" ||
req.http.Referer ~ "(?i)crirussian\.ru" ||
req.http.Referer ~ "(?i)cruiseraf\.net" ||
req.http.Referer ~ "(?i)crypto\-bear\.com" ||
req.http.Referer ~ "(?i)crypto\-bears\.com" ||
req.http.Referer ~ "(?i)crypto\-mining\.club" ||
req.http.Referer ~ "(?i)crypto\-wallets\.org" ||
req.http.Referer ~ "(?i)crypto1x1\.com" ||
req.http.Referer ~ "(?i)crystalslot\.com" ||
req.http.Referer ~ "(?i)cubook\.supernew\.org" ||
req.http.Referer ~ "(?i)curenaturalicancro\.com" ||
req.http.Referer ~ "(?i)curenaturalicancro\.nl" ||
req.http.Referer ~ "(?i)customsua\.com\.ua" ||
req.http.Referer ~ "(?i)cutalltheshit\.com" ||
req.http.Referer ~ "(?i)cvety24\.by" ||
req.http.Referer ~ "(?i)cvta\.xyz" ||
req.http.Referer ~ "(?i)cxpromote\.com" ||
req.http.Referer ~ "(?i)cyber\-monday\.ga" ||
req.http.Referer ~ "(?i)cyclobenzaprinevstizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)cymbaltaandtizanidine\.blogspot\.com" ||
req.http.Referer ~ "(?i)cyprusbuyproperties\.com" ||
req.http.Referer ~ "(?i)czcedu\.com" ||
req.http.Referer ~ "(?i)dacha\-svoimi\-rukami\.com" ||
req.http.Referer ~ "(?i)dailyblog\.xyz" ||
req.http.Referer ~ "(?i)dailyrank\.net" ||
req.http.Referer ~ "(?i)dailyseo\.xyz" ||
req.http.Referer ~ "(?i)dailystorm\.ru" ||
req.http.Referer ~ "(?i)dailystrength\.org" ||
req.http.Referer ~ "(?i)dailytraffic\.shop" ||
req.http.Referer ~ "(?i)dame\-ns\.kz" ||
req.http.Referer ~ "(?i)damedingel\.ya\.ru" ||
req.http.Referer ~ "(?i)damianis\.ru" ||
req.http.Referer ~ "(?i)danashop\.ru" ||
req.http.Referer ~ "(?i)danceuniverse\.ru" ||
req.http.Referer ~ "(?i)danhale\.xyz" ||
req.http.Referer ~ "(?i)dantk\.kz" ||
req.http.Referer ~ "(?i)daptravel\.com" ||
req.http.Referer ~ "(?i)darcysassoon\.top" ||
req.http.Referer ~ "(?i)darkbooks\.org" ||
req.http.Referer ~ "(?i)darknet\-hydra\-onion\.biz" ||
req.http.Referer ~ "(?i)darknet\.sb" ||
req.http.Referer ~ "(?i)darknetsitesguide\.com" ||
req.http.Referer ~ "(?i)darleneblog\.online" ||
req.http.Referer ~ "(?i)darodar\.com" ||
req.http.Referer ~ "(?i)datsun\-do\.com" ||
req.http.Referer ~ "(?i)dav\.kz" ||
req.http.Referer ~ "(?i)dawlenie\.com" ||
req.http.Referer ~ "(?i)dbmkfhqk\.bloger\.index\.hr" ||
req.http.Referer ~ "(?i)dbutton\.net" ||
req.http.Referer ~ "(?i)dcdcapital\.com" ||
req.http.Referer ~ "(?i)ddlmega\.net" ||
req.http.Referer ~ "(?i)ddpills\.com" ||
req.http.Referer ~ "(?i)de\.zapmeta\.com" ||
req.http.Referer ~ "(?i)dear\-diary\.ru" ||
req.http.Referer ~ "(?i)deart\-13\.ru" ||
req.http.Referer ~ "(?i)deda\-moroza\-zakaz\.ru" ||
req.http.Referer ~ "(?i)deirdre\.top" ||
req.http.Referer ~ "(?i)dekorkeramik\.ru" ||
req.http.Referer ~ "(?i)delayreferat\.ru" ||
req.http.Referer ~ "(?i)delfin\-aqua\.com\.ua" ||
req.http.Referer ~ "(?i)delo\.fund" ||
req.http.Referer ~ "(?i)deluxewatch\.su" ||
req.http.Referer ~ "(?i)demenageur\.com" ||
req.http.Referer ~ "(?i)den\-noch24\.ru" ||
req.http.Referer ~ "(?i)dengi\-v\-kredit\.in\.ua" ||
req.http.Referer ~ "(?i)denisecarey\.top" ||
req.http.Referer ~ "(?i)deniseconnie\.top" ||
req.http.Referer ~ "(?i)deniven\.1bb\.ru" ||
req.http.Referer ~ "(?i)dent\-home\.ru" ||
req.http.Referer ~ "(?i)dentuled\.net" ||
req.http.Referer ~ "(?i)depositfiles\-porn\.com" ||
req.http.Referer ~ "(?i)depositfiles\-porn\.ga" ||
req.http.Referer ~ "(?i)dermatovenerologiya\.com" ||
req.http.Referer ~ "(?i)deryie\.com" ||
req.http.Referer ~ "(?i)descargar\-musica\-gratis\.net" ||
req.http.Referer ~ "(?i)descargar\-musicas\-gratis\.com" ||
req.http.Referer ~ "(?i)design\-lands\.ru" ||
req.http.Referer ~ "(?i)designdevise\.com" ||
req.http.Referer ~ "(?i)detailedvideos\.com" ||
req.http.Referer ~ "(?i)detalizaciya\-tut\.biz" ||
req.http.Referer ~ "(?i)detective01\.ru" ||
req.http.Referer ~ "(?i)detki\-opt\.ru" ||
req.http.Referer ~ "(?i)detskie\-konstruktory\.ru" ||
req.http.Referer ~ "(?i)detskie\-zabavi\.ru" ||
req.http.Referer ~ "(?i)deutsche\-poesie\.com" ||
req.http.Referer ~ "(?i)dev\-seo\.blog" ||
req.http.Referer ~ "(?i)devochki\-video\.ru" ||
req.http.Referer ~ "(?i)diarioaconcagua\.com" ||
req.http.Referer ~ "(?i)diatelier\.ru" ||
req.http.Referer ~ "(?i)dicru\.info" ||
req.http.Referer ~ "(?i)diebesten\.co" ||
req.http.Referer ~ "(?i)dienai\.ru" ||
req.http.Referer ~ "(?i)diesel\-parts28\.ru" ||
req.http.Referer ~ "(?i)digest\-project\.ru" ||
req.http.Referer ~ "(?i)digilander\.libero\.it" ||
req.http.Referer ~ "(?i)digital\-video\-processing\.com" ||
req.http.Referer ~ "(?i)digitalfaq\.com" ||
req.http.Referer ~ "(?i)dimkino\.ru" ||
req.http.Referer ~ "(?i)dinkolove\.ya\.ru" ||
req.http.Referer ~ "(?i)diplom\-nk\.com" ||
req.http.Referer ~ "(?i)diplomas\-ru\.com" ||
req.http.Referer ~ "(?i)dipstar\.org" ||
req.http.Referer ~ "(?i)directrev\.com" ||
req.http.Referer ~ "(?i)discounttaxi\.kz" ||
req.http.Referer ~ "(?i)discover\-prior\-full\-stack\-services\.party" ||
req.http.Referer ~ "(?i)discover\-prior\-ppc\-service\.party" ||
req.http.Referer ~ "(?i)discover\-top\-seo\-service\.review" ||
req.http.Referer ~ "(?i)distonija\.com" ||
req.http.Referer ~ "(?i)divan\-dekor\.com\.ua" ||
req.http.Referer ~ "(?i)dividendo\.ru" ||
req.http.Referer ~ "(?i)diy\-handmade\-ideas\.com" ||
req.http.Referer ~ "(?i)djekxa\.ru" ||
req.http.Referer ~ "(?i)djonwatch\.ru" ||
req.http.Referer ~ "(?i)djstools\.com" ||
req.http.Referer ~ "(?i)dktr\.ru" ||
req.http.Referer ~ "(?i)dlya\-android\.org" ||
req.http.Referer ~ "(?i)dms\-sw\.ru" ||
req.http.Referer ~ "(?i)dna\-sklad\.ru" ||
req.http.Referer ~ "(?i)dnepr\-avtospar\.com\.ua" ||
req.http.Referer ~ "(?i)dneprsvet\.com\.ua" ||
req.http.Referer ~ "(?i)dnmetall\.ru" ||
req.http.Referer ~ "(?i)docs4all\.com" ||
req.http.Referer ~ "(?i)docsarchive\.net" ||
req.http.Referer ~ "(?i)docsportal\.net" ||
req.http.Referer ~ "(?i)docstoc\.com" ||
req.http.Referer ~ "(?i)doctornadezhda\.ru" ||
req.http.Referer ~ "(?i)documentbase\.net" ||