<?php
-// $Id: spam.ini.php,v 1.143 2007/08/04 13:44:37 henoheno Exp $
+// $Id: spam.ini.php,v 1.152 2007/08/12 01:22:20 henoheno Exp $
// Spam-related setting
// NOTE FOR ADMINISTRATORS:
'miniurl.pl',
'mixi.bz',
'mo-v.jp',
- 'MoldData.md' => array(
+ 'MoldData.md' => array( // Note: Some part of '.md' ccTLD
'.com.md',
'.co.md',
'.org.md',
'zaable.com',
'zapurl.com',
'zarr.co.uk',
+ 'zerourl.com',
'ZeroWeb.org' => array(
'*.80t.com',
'*.firez.org',
'*.zapto.org',
),
'*.zenno.info',
+ '*.opendns.be',
'.cm', // 'Cameroon' ccTLD, sometimes used as typo of '.com',
// and all non-recorded domains redirect to 'agoga.com' now
// http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
'freeforumshosting.com', // by Adam Roberts (admin at skaidon.co.uk)
'*.freeforums.org', // by 1&1 Internet, Inc. - 1and1.com
'*.freehostia.com',
+ '*.freewebhostingpro.com',
'*.freehostingz.com', // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
'FreeWebHostingArea.com' => array( // or www.freewha.com
'*.6te.net',
'freepowerboards.com',
'*.freepowerboards.com',
'*.fsphost.com', // by Michael Renz (michael at fsphost.com)
- '*.funpic.de',
+ 'Funpic.de' => array( // by alexander at liemen.net
+ '*.funpic.de',
+ '*.funpic.org',
+ ),
'*.genblogger.com',
'geocities.com',
'GetBetterHosting.com' => array(
'groups-beta.google.com', // by Google
'healthcaregroup.com',
'*.heliohost.org',
+ 'Halverston Holdings Limited' => array( // pochta.ru?lng=en
+ // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
+ '*.fromru.com', // by Lapeshkina Tatyana (noc at pochta.ru)
+ '*.front.ru', // (domain at hc.ru)
+ '*.hc.ru', // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
+ '*.hotbox.ru', // (domain at hc.ru)
+ '*.hotmail.ru', // (hosting at hc.ru)
+ '*.krovatka.su', // (domain at hc.ru, hosting at hc.ru)
+ '*.land.ru', // (domain at hc.ru)
+ '*.mail15.com', // (hosting at hc.ru)
+ '*.mail333.com', // (hosting at hc.ru)
+ '*.newmail.ru', // (domain at hc.ru, hosting at hc.ru)
+ '*.nightmail.ru', // (domain at hc.ru, hosting at hc.ru)
+ '*.pisem.net', // (hosting at hc.ru)
+ '*.pochta.ru', // (domain at hc.ru)
+ '*.pochtamt.ru', // (domain at hc.ru)
+ '*.pop3.ru', // (domain at hc.ru)
+ '*.rbcmail.ru', // (domain at hc.ru)
+ '*.smtp.ru', // (domain at hc.ru)
+ ),
'*.hit.bg', // by forumup.com ??
'*.host-page.com',
'*.hostingclub.de',
'*.teracities.com',
'*.xoompages.com',
),
+ '*.icspace.net',
'iEUROP.net' => array(
'*.ibelgique.com',
'*.iespana.es',
'*.jeeran.com',
'*.jeun.fr',
'*.journalscape.com',
+ '*.justfree.com',
'*.blog.kataweb.it',
'*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com
'*.kokoom.com',
'*.tripod.com',
),
'mbga.jp', // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
+ '*.memebot.com',
'*.messageboard.nl',
'mokono GmbH' => array(
'*.blog.com.es',
'*.sbn.bz',
'*.wol.bz',
),
- 'Halverston Holdings Limited' => array( // pochta.ru?lng=en
- // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
- '*.fromru.com', // by Lapeshkina Tatyana (noc at pochta.ru)
- '*.front.ru', // (domain at hc.ru)
- '*.hc.ru', // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
- '*.hotbox.ru', // (domain at hc.ru)
- '*.hotmail.ru', // (hosting at hc.ru)
- '*.krovatka.su', // (domain at hc.ru, hosting at hc.ru)
- '*.land.ru', // (domain at hc.ru)
- '*.mail15.com', // (hosting at hc.ru)
- '*.mail333.com', // (hosting at hc.ru)
- '*.newmail.ru', // (domain at hc.ru, hosting at hc.ru)
- '*.nightmail.ru', // (domain at hc.ru, hosting at hc.ru)
- '*.pisem.net', // (hosting at hc.ru)
- '*.pochta.ru', // (domain at hc.ru)
- '*.pochtamt.ru', // (domain at hc.ru)
- '*.pop3.ru', // (domain at hc.ru)
- '*.rbcmail.ru', // (domain at hc.ru)
- '*.smtp.ru', // (domain at hc.ru)
- ),
'*.sayt.ws',
'Seblg.com' => array(
'*.seblg.com', // by Dao Lee (st at seblg.com)
'strikebang.com',
'*.sultryserver.com',
'*.t35.com',
+ '*.talks.at',
'tabletpcbuzz.com',
'*.talkthis.com',
'tbns.net',
),
'webblog.ru',
'weblogmaniacs.com',
+ '.webng.com', // www.*, www3.*
'*.webnow.biz', // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
'websitetoolbox.com',
'Welnet.de' => array(
'.freeforworld.info', // by Varsylenko
'.gitsite.info', // by Petrov
'.goodworksite.info', // by Varsylenko
- '.michost.info', // by LAURI FUNK
+ '.michost.info', // by LAURI
'.onall.info', // by Varsylenko
'.organiq.info', // by Petrov
- '.parther.info', // by LAURI FUNK
+ '.parther.info', // by LAURI
'.powersiteonline.info', // by Varsylenko
'.rentmysite.info', // by Varsylenko
'.levines.info', // by Petrov
+ '.modacha.info', // by LAURI
'.mp3vault.info', // by Petrov
'.sernost.info', // by Petrov
'.sexdrink.info', // by Petrov
'.antivirus1.info',
'.antivirus2.info',
),
- 'wasam at vangers.net' => array( // by Ashiksh Wasam
- '.290cabeza.org', // 69.31.91.226(colo-69-31-91-226.pilosoft.com)
+ 'wasam at vangers.net and family' => array(
+
+ // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
+ '.bahatoca.org',
+ '.digestlycos.org',
+ '.educativaanale.info',
+ '.guildstuscan.org',
+ '.isaakrobbins.info',
+ '.isfelons.org',
+ '.lvwelevated.org',
+ '.macphersonaca.org',
+ '.markyaustrian.org',
+ '.michelepug.org',
+ '.opalbusy.info',
+ '.quijotebachata.info',
+ '.salthjc.info',
+ '.solarissean.org',
+ '.tarzanyearly.org',
+ '.tulabnsf.org',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
+ '.e2007.info',
+ '.cmoss.info',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
+ '.finddesk.org',
+ '.gsfind.org', // You mean: sfind.net by tvaals at vangers.net
+ '.my-top.org', // You mean: my-top.net by tvaals at vangers.net
+ '.rcatalog.org',
+ '.sbitzone.org',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
+ '.cheapns.org',
+ '.my-top.net',
+ '.sfind.net',
+ '.sspot.net',
+ '.suvfind.info',
+
+ // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
+ '.trumber.com',
+
+ // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
'.blogduet.org',
- '.bossierpainted.org',
'.carelf.info',
- '.cmagic.org',
+ '.cmagic.org',
'.cspell.org',
'.dspark.org',
'.dtonic.org',
- '.gradetelemundo.info',
- '.indicadorestmj.info',
- '.keeleykincaid.org',
'.mcharm.info',
'.mslook.info',
'.phpdinnerware.info',
- '.pipnickname.info',
- '.pacolily.org',
- '.redeemtrabalho.info',
'.rnation.org',
- '.titanmessina.info',
- '.tragratuit.org',
'.uzing.org',
- '.yeareola.info',
- ),
- 'kadilk at vangers.net' => array( // by Kadil Kasekwam
- '.allbar.info', // 69.31.91.226
+
+ // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
+ '.allbar.info',
'.allersearch.org',
+ '.allzoom.org',
'.dynall.org',
- '.educativaanale.info',
'.fastopia.org',
- '.guildstuscan.org',
- '.isfelons.org',
- '.solarissean.org',
- '.opalbusy.info',
'.rblast.org',
'.rette.org',
- '.salthjc.info',
'.suvlook.org',
- '.tarzanyearly.org',
- '.tulabnsf.org',
- ),
- 'tvaals at vangers.net' => array( // by Thomas Vaals
- '.cheapns.org',
- '.my-top.net',
- '.sfind.net',
- '.sspot.net',
- '.suvfind.info',
- ),
- 'kasturba at vangers.net' => array( // by Kasturba Nagari
- '.finddesk.org',
- '.gsfind.org',
- '.my-top.org',
- '.rcatalog.org',
- '.sbitzone.org',
- ),
- 'bipik at vangers.net' => array( // by Bipik Joshu
- '.e2007.info',
- '.cmoss.info',
+
+ // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
+ '.290cabeza.org',
+ '.bossierpainted.org',
+ '.connickkarel.info', // Admin: tvaals at vangers.net
+ '.definekonica.info', // Admin: tvaals at vangers.net
+ '.gradetelemundo.info',
+ '.indicadorestmj.info',
+ '.keeleykincaid.org',
+ '.pipnickname.info',
+ '.pacolily.org',
+ '.redeemtrabalho.info',
+ '.titanmessina.info',
+ '.tragratuit.org',
+ '.yeareola.info',
),
- 'marion at vangers.net' => array('.trumber.com'), // by Mariano Ciaramolo
'SearchHealtAdvCorpGb.com' => array( // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
- '.canadianmedsworld.info',
- '.tabsdrugstore.info',
- '.tabsstore.info',
- '.topcholesterol.info',
+ '.canadianmedsworld.info', // 84.252.133.112
+ '.tabsdrugstore.info', // 84.252.133.114
+ '.tabsstore.info', // 84.252.133.114
+ '.topcholesterol.info', // 84.252.133.132
),
'be.cx' => array(
'.be.cx',
'john780321 at yahoo.com' => array( // by John Brown
'.bestdiscountpharmacy.biz', // 2007-01-27, 61.144.122.45
'.drugs4all.us', // 2007-03-09, 202.67.150.250
+ '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
),
'tremagl.freet at gmail.com' => array( // by Treman Eagles, redirect to searchadv.com
'.bertela.info',
),
'ice--man at mail.ru' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
'.exoticmed.com',
+ '.feelview.com',
'.greatexotic.com',
+ '.icyhip.com',
'.icyiceman.com',
'.margansitio.com',
'.margantierra.com',
'.mimargan.com',
'.oilkeys.com',
'.thekeyse.com',
+ '.viewgreat.com',
+ ),
+ 'nijeoi at hotmai.com' => array(
+ //by 66.232.126.74 Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
+ '.bowij.com',
+ '.bozib.com',
+ '.cavux.com',
+ '.dipov.com',
+ '.gumoz.com',
+ '.hepyt.com',
+ '.kyheq.com',
+ '.kyzad.com',
+ '.qicad.com',
+ '.qubyd.com',
+ '.mocyq.com',
+ '.muloq.com',
+ '.myxim.com',
+ '.nufyp.com',
+ '.xomej.com',
+ '.xykyl.com',
+ '.zakuw.com',
+ '.zeliw.com',
+ '.zimev.com',
),
'porychik at hot.ee' => array( // by Igor
'.tedstate.info', // "Free Web Hosting"
'.worldsitesearch.info', // 209.8.40.59
),
'lee.seery at gmail.com' => array(
- '.lingvol.com', // 64.21.34.55(klikgoogle.com)
+ '.klikgoogle.com', // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
+ '.lingvol.com', // 64.21.34.55
'.micevol.com', // 64.21.34.55
+ '.heyhey.info', // 64.21.34.55 by anonymous
),
'69-64-64-71.dedicated.abac.net etc' => array( // ns *.trklink.com
// 69-64-64-71.dedicated.abac.net
'.lowpercentageacrd.info',
),
'acua at mail.ru' => array(
+
+ // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
+ '.dns4babka.info', // by acua at mail.ru
+ // by webmaster at dns4babka.info
+ '.credh.cn',
+ '.fucfv.cn',
+ '.gdxnk.cn',
+ '.sqrrt.cn',
+ '.ywtmd.cn',
+ '.kncqy.cn', // by webmaster at allmyns.info
+
// 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
'.dedka2ns.info', // by acua at mail.ru
// by webmaster at dedka2ns.info
'.oswde.cn',
'.qeyig.cn',
'.soqsx.cn',
+ '.ukncd.cn',
+ '.zijgb.cn',
// 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
'.dns4dedka.info', // by acua at mail.ru
'.ekwme.cn',
'.iutps.cn',
'.ryftj.cn',
+ '.vxqcb.cn',
+ '.zxvlr.cn', // by webmaster at allmyns.info
+
+ '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden
+ // by webmaster at allmyns.info
+ '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS)
+ '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
+ '.lbtuo.cn', // 84.16.255.254(84-16-255-254.internetserviceteam.com)
+ '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net)
+ '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent)
+ '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
+ '.riumh.cn', // 84.16.226.28
+ '.zbtym.cn', // 84.16.251.219(84-16-251-219.internetserviceteam.com)
+ '.zjcgx.cn', // 217.20.112.102(217-20-112-102.internetserviceteam.com)
- // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
- '.dns4babka.info', // by acua at mail.ru
- // by webmaster at dns4babka.info
- '.credh.cn',
- '.fucfv.cn',
- '.gdxnk.cn',
- '.sqrrt.cn',
- '.ywtmd.cn',
- ),
- 'ganzer3' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com)
- '.bruised-cridet.info', // 69.64.82.78(*.dedicated.abac.net)
- '.bruised-criedit.info', // 69.64.82.76(*.dedicated.abac.net)
- '.bruised-drecit.info', // 69.64.82.78(*.dedicated.abac.net)
- '.bruised-reditcards.info', // 69.64.82.78(*.dedicated.abac.net)
- '.cleaningupcedirt.info', // 69.64.82.77(*.dedicated.abac.net)
- '.cleaningupcrecit.info', // 69.64.82.79(*.dedicated.abac.net)
),
+ 'gilvcta sy jilbertsbram.com' => array(
+ '.dsfljkeilm1.cn', // 206.53.51.126
+ '.dsfljkeilm2.cn', // 206.53.51.126
+ '.dsfljkeilm3.cn', // IP not allocated now
+ '.dsfljkeilm4.cn', // IP not allocated now
+ '.dsfljkeilm5.cn', // IP not allocated now
+ '.dsfljkeilm6.cn', // IP not allocated now
+ '.dsfljkeilm7.cn', // IP not allocated now
+ '.dsfljkeilm8.cn', // IP not allocated now
+ '.dsfljkeilm9.cn', // IP not allocated now
+ '.dsfljkeilm10.cn', // IP not allocated now
+ ),
+ 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com)
+
+ // 69.64.82.76(*.dedicated.abac.net)
+ '.bruised-criedit.info',
+ '.bruised-crtedit.info',
+ '.bruised-czrd.info',
+ '.bruisedcreitcard.info',
+ '.bruisedcreitd.info',
+ '.cleaningup-cerdic.info',
+ '.cleanup-crrd.info',
+
+ // 69.64.82.77(*.dedicated.abac.net)
+ '.bruised-credtid.info',
+ '.bruisedcriet.info',
+ '.bruisedredit.info',
+ '.cleaningupccreditcards.info',
+ '.cleaningupcedirt.info',
+ '.cleaningupceidt.info',
+ '.cleaningupcreait.info',
+
+ // 69.64.82.78(*.dedicated.abac.net)
+ '.bruised-cridet.info',
+ '.bruised-drecit.info',
+ '.bruised-reditcards.info',
+ '.bruisedcredikt.info',
+ '.bruisedcredith.info',
+ '.bruisedcredtid.info',
+ '.cleanup-criet.info',
+ '.cleanup-dards.info',
+
+ // 69.64.82.79(*.dedicated.abac.net)
+ '.bruised-crediotcards.info',
+ '.bruised-creid.info',
+ '.cleaningup-ceridt.info',
+ '.cleaningupcrecit.info',
+ '.cleanupdredit.info',
+ ),
+ '.malwarealarm.com',
+ // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
+ // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
+ // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
+ '.viagrageneric.org', // IP not allocated, ns *.heyhey.info(IP not allocated)
+ '.viagraorder.org', // IP not allocated, ns *.heyhey.info(IP not allocated)
+
// C-2: Lonely domains (buddies not found yet)
'.0721-4404.com',
'.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
'.greatbestwestern.org',// by gao.wungao at gmail.com
'.greatsexdate.com', // by Andreas Crablo (crablo at hotmail.com)
+ '.guesttext.info', // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
'.guild-wars-online.com', // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
'.happyhost.org', // by Paul Zamnov (paul at zamnov.be)
'.hloris.com', // by Wilshi Jamil (ixisus at front.ru)
'.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com)
'.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
'.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
+ '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md)
'.medpharmaworldguide.com', // by Nick Ivchenkov (signmark at gmail.com), / not found
'.megvideochatlive.info', // Bad seo
'.milfxxxpass.com', // by Morozov Pavlik (rulets at gmail.com)
+ '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
'.myfgj.info', // by Filus (softscript at gmail.com)
'.mujiki.com', // by Mila Contora (ebumsn at ngs.ru)
'.mxsupportmailer.com',
'.sslcp.com', // by shufang zhou (info at 6come.com), dns *.hichina.com
'.sticy.info', // by Richard D. Mccall (richardmccall at yahoo.com)
'.superrwm.info', // by Dark Dux (duxdark at yahoo.com)
+ '.superverizonringtones.com', // by joshua at list.ru
'.thehostcity.com', // Domains by Proxy
'.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
'.thetrendy.info', // by Harold (Harold.J.Craft at pookmail.com), / is blank
'.theusapills.com', // by Dr. Zarman (contactus at theusapills.com)
'.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
'.topmeds10.com',
+ '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
'.twabout.com', // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
'.uaro.info', // by Neru Pioner (neru at smtp.ru)
'.unctad.net', // by gfdogfd at lovespb.com
'.xamorexxx.net',
'.xn--gmqt9gewhdnlyq9c.net', // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
'.xsessox.com',
+ '.xxxmpegs.biz', // 217.11.233.65, redirect to *.malwarealarm.com, / null
'.yoi4.net', // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
'.zlocorp.com', // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
'.zyguo.info', // ns globoxhost.net
'.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com)
- '.guesttext.info', // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
- '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md)
- '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
- '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
- '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
-
// C-3: Not classifiable (information wanted)
//
// Something incoming to pukiwiki related sites
OSDN Git Service
