BEWARE: this *may* cause false positives - YMMV after the required rule addition: if (version >= 3.004000) blacklist_uri_host pink endif domains seen lately: http://pastebin.com/uH4YfVXR same may apply to the red TLD BEWARE: this *may* cause false positives - YMMV