OSDN Git Service

Added
[pukiwiki/pukiwiki_sandbox.git] / spam / spam.ini.php
index adda51b..2f6ce0f 100644 (file)
@@ -1,5 +1,5 @@
 <?php
-// $Id: spam.ini.php,v 1.143 2007/08/04 13:44:37 henoheno Exp $
+// $Id: spam.ini.php,v 1.152 2007/08/12 01:22:20 henoheno Exp $
 // Spam-related setting
 
 // NOTE FOR ADMINISTRATORS:
@@ -846,7 +846,7 @@ $blocklist['A-1'] = array(
        'miniurl.pl',
        'mixi.bz',
        'mo-v.jp',
-       'MoldData.md' => array(
+       'MoldData.md' => array( // Note: Some part of '.md' ccTLD
                '.com.md',
                '.co.md',
                '.org.md',
@@ -1347,6 +1347,7 @@ $blocklist['A-1'] = array(
        'zaable.com',
        'zapurl.com',
        'zarr.co.uk',
+       'zerourl.com',
        'ZeroWeb.org' => array(
                '*.80t.com',
                '*.firez.org',
@@ -1426,6 +1427,7 @@ $blocklist['A-2'] = array(
                        '*.zapto.org',
        ),
        '*.zenno.info',
+       '*.opendns.be',
        '.cm',  // 'Cameroon' ccTLD, sometimes used as typo of '.com',
                        // and all non-recorded domains redirect to 'agoga.com' now
                        // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm
@@ -1690,6 +1692,7 @@ $blocklist['B-1'] = array(
        'freeforumshosting.com',        // by Adam Roberts (admin at skaidon.co.uk)
        '*.freeforums.org',             // by 1&1 Internet, Inc. - 1and1.com
        '*.freehostia.com',
+       '*.freewebhostingpro.com',
        '*.freehostingz.com',   // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com)
        'FreeWebHostingArea.com' => array(      // or www.freewha.com
                '*.6te.net',
@@ -1706,7 +1709,10 @@ $blocklist['B-1'] = array(
        'freepowerboards.com',
        '*.freepowerboards.com',
        '*.fsphost.com',                // by Michael Renz (michael at fsphost.com)
-       '*.funpic.de',
+       'Funpic.de' => array(   // by alexander at liemen.net
+               '*.funpic.de',
+               '*.funpic.org',
+       ),
        '*.genblogger.com',
        'geocities.com',
        'GetBetterHosting.com' => array(
@@ -1725,6 +1731,26 @@ $blocklist['B-1'] = array(
        'groups-beta.google.com',       // by Google
        'healthcaregroup.com',
        '*.heliohost.org',
+       'Halverston Holdings Limited' => array( // pochta.ru?lng=en
+               // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
+               '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
+               '*.front.ru',           // (domain at hc.ru)
+               '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
+               '*.hotbox.ru',          // (domain at hc.ru)
+               '*.hotmail.ru',         // (hosting at hc.ru)
+               '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
+               '*.land.ru',            // (domain at hc.ru)
+               '*.mail15.com',         // (hosting at hc.ru)
+               '*.mail333.com',        // (hosting at hc.ru)
+               '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
+               '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
+               '*.pisem.net',          // (hosting at hc.ru)
+               '*.pochta.ru',          // (domain at hc.ru)
+               '*.pochtamt.ru',        // (domain at hc.ru)
+               '*.pop3.ru',            // (domain at hc.ru)
+               '*.rbcmail.ru',         // (domain at hc.ru)
+               '*.smtp.ru',            // (domain at hc.ru)
+       ),
        '*.hit.bg',                             // by forumup.com ??
        '*.host-page.com',
        '*.hostingclub.de',
@@ -1752,6 +1778,7 @@ $blocklist['B-1'] = array(
                '*.teracities.com',
                '*.xoompages.com',
        ),
+       '*.icspace.net',
        'iEUROP.net' => array(
                '*.ibelgique.com',
                '*.iespana.es',
@@ -1773,6 +1800,7 @@ $blocklist['B-1'] = array(
        '*.jeeran.com',
        '*.jeun.fr',
        '*.journalscape.com',
+       '*.justfree.com',
        '*.blog.kataweb.it',
        '*.kaixo.com',          // blogs.kaixo.com, blogak.kaixo.com
        '*.kokoom.com',
@@ -1819,6 +1847,7 @@ $blocklist['B-1'] = array(
                '*.tripod.com',
        ),
        'mbga.jp',                              // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
+       '*.memebot.com',
        '*.messageboard.nl',
        'mokono GmbH' => array(
                '*.blog.com.es',
@@ -1910,26 +1939,6 @@ $blocklist['B-1'] = array(
                '*.sbn.bz',
                '*.wol.bz',
        ),
-       'Halverston Holdings Limited' => array( // pochta.ru?lng=en
-               // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com)
-               '*.fromru.com',         // by Lapeshkina Tatyana (noc at pochta.ru)
-               '*.front.ru',           // (domain at hc.ru)
-               '*.hc.ru',                      // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru)
-               '*.hotbox.ru',          // (domain at hc.ru)
-               '*.hotmail.ru',         // (hosting at hc.ru)
-               '*.krovatka.su',        // (domain at hc.ru, hosting at hc.ru)
-               '*.land.ru',            // (domain at hc.ru)
-               '*.mail15.com',         // (hosting at hc.ru)
-               '*.mail333.com',        // (hosting at hc.ru)
-               '*.newmail.ru',         // (domain at hc.ru, hosting at hc.ru)
-               '*.nightmail.ru',       // (domain at hc.ru, hosting at hc.ru)
-               '*.pisem.net',          // (hosting at hc.ru)
-               '*.pochta.ru',          // (domain at hc.ru)
-               '*.pochtamt.ru',        // (domain at hc.ru)
-               '*.pop3.ru',            // (domain at hc.ru)
-               '*.rbcmail.ru',         // (domain at hc.ru)
-               '*.smtp.ru',            // (domain at hc.ru)
-       ),
        '*.sayt.ws',
        'Seblg.com' => array(
                '*.seblg.com',          // by Dao Lee (st at seblg.com)
@@ -1964,6 +1973,7 @@ $blocklist['B-1'] = array(
        'strikebang.com',
        '*.sultryserver.com',
        '*.t35.com',
+       '*.talks.at',
        'tabletpcbuzz.com',
        '*.talkthis.com',
        'tbns.net',
@@ -2115,6 +2125,7 @@ $blocklist['B-1'] = array(
        ),
        'webblog.ru',
        'weblogmaniacs.com',
+       '.webng.com',                   // www.*, www3.*
        '*.webnow.biz',                 // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc. 
        'websitetoolbox.com',
        'Welnet.de' => array(
@@ -2607,13 +2618,14 @@ $blocklist['C'] = array(
                '.freeforworld.info',           // by Varsylenko
                '.gitsite.info',                        // by Petrov
                '.goodworksite.info',           // by Varsylenko
-               '.michost.info',                        // by LAURI FUNK
+               '.michost.info',                        // by LAURI
                '.onall.info',                          // by Varsylenko
                '.organiq.info',                        // by Petrov
-               '.parther.info',                        // by LAURI FUNK
+               '.parther.info',                        // by LAURI
                '.powersiteonline.info',        // by Varsylenko
                '.rentmysite.info',                     // by Varsylenko
                '.levines.info',                        // by Petrov
+               '.modacha.info',                        // by LAURI
                '.mp3vault.info',                       // by Petrov
                '.sernost.info',                        // by Petrov
                '.sexdrink.info',                       // by Petrov
@@ -3540,71 +3552,90 @@ $blocklist['C'] = array(
                '.antivirus1.info',
                '.antivirus2.info',
        ),
-       'wasam at vangers.net' => array(        // by Ashiksh Wasam
-               '.290cabeza.org',       // 69.31.91.226(colo-69-31-91-226.pilosoft.com)
+       'wasam at vangers.net and family' => array(
+       
+               // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
+               '.bahatoca.org',
+               '.digestlycos.org',
+               '.educativaanale.info',
+               '.guildstuscan.org',
+               '.isaakrobbins.info',
+               '.isfelons.org',
+               '.lvwelevated.org',
+               '.macphersonaca.org',
+               '.markyaustrian.org',
+               '.michelepug.org',
+               '.opalbusy.info',
+               '.quijotebachata.info',
+               '.salthjc.info',
+               '.solarissean.org',
+               '.tarzanyearly.org',
+               '.tulabnsf.org',
+
+               // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net)
+               '.e2007.info',
+               '.cmoss.info',
+
+               // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net)
+               '.finddesk.org',
+               '.gsfind.org',  // You mean: sfind.net  by tvaals at vangers.net
+               '.my-top.org',  // You mean: my-top.net by tvaals at vangers.net
+               '.rcatalog.org',
+               '.sbitzone.org',
+
+               // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net)
+               '.cheapns.org',
+               '.my-top.net',
+               '.sfind.net',
+               '.sspot.net',
+               '.suvfind.info',
+
+               // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net)
+               '.trumber.com',
+
+               // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
                '.blogduet.org',
-               '.bossierpainted.org',
                '.carelf.info',
-               '.cmagic.org',
+               '.cmagic.org',  
                '.cspell.org',
                '.dspark.org',
                '.dtonic.org',
-               '.gradetelemundo.info',
-               '.indicadorestmj.info',
-               '.keeleykincaid.org',
                '.mcharm.info',
                '.mslook.info',
                '.phpdinnerware.info',
-               '.pipnickname.info',
-               '.pacolily.org',
-               '.redeemtrabalho.info',
                '.rnation.org',
-               '.titanmessina.info',
-               '.tragratuit.org',
                '.uzing.org',
-               '.yeareola.info',
-       ),
-       'kadilk at vangers.net' => array(       //  by Kadil Kasekwam
-               '.allbar.info',         // 69.31.91.226
+
+               // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net)
+               '.allbar.info',
                '.allersearch.org',
+               '.allzoom.org',
                '.dynall.org',
-               '.educativaanale.info',
                '.fastopia.org',
-               '.guildstuscan.org',
-               '.isfelons.org',
-               '.solarissean.org',
-               '.opalbusy.info',
                '.rblast.org',
                '.rette.org',
-               '.salthjc.info',
                '.suvlook.org',
-               '.tarzanyearly.org',
-               '.tulabnsf.org',
-       ),
-       'tvaals at vangers.net' => array(       // by Thomas Vaals
-               '.cheapns.org',
-               '.my-top.net',
-               '.sfind.net',
-               '.sspot.net',
-               '.suvfind.info',
-       ),
-       'kasturba at vangers.net' => array(     // by Kasturba Nagari
-               '.finddesk.org',
-               '.gsfind.org',
-               '.my-top.org',
-               '.rcatalog.org',
-               '.sbitzone.org',
-       ),
-       'bipik at vangers.net' => array(        // by Bipik Joshu
-               '.e2007.info',
-               '.cmoss.info',
+
+               // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net)
+               '.290cabeza.org',
+               '.bossierpainted.org',
+               '.connickkarel.info',   // Admin: tvaals at vangers.net
+               '.definekonica.info',   // Admin: tvaals at vangers.net
+               '.gradetelemundo.info',
+               '.indicadorestmj.info',
+               '.keeleykincaid.org',
+               '.pipnickname.info',
+               '.pacolily.org',
+               '.redeemtrabalho.info',
+               '.titanmessina.info',
+               '.tragratuit.org',
+               '.yeareola.info',
        ),
-       'marion at vangers.net' => array('.trumber.com'),       // by Mariano Ciaramolo
        'SearchHealtAdvCorpGb.com' => array(    // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain)
-               '.canadianmedsworld.info',
-               '.tabsdrugstore.info',
-               '.tabsstore.info',
-               '.topcholesterol.info',
+               '.canadianmedsworld.info',      // 84.252.133.112
+               '.tabsdrugstore.info',          // 84.252.133.114
+               '.tabsstore.info',                      // 84.252.133.114
+               '.topcholesterol.info',         // 84.252.133.132
        ),
        'be.cx' => array(
                '.be.cx',
@@ -3613,6 +3644,7 @@ $blocklist['C'] = array(
        'john780321 at yahoo.com' => array(     // by John  Brown
                '.bestdiscountpharmacy.biz',    // 2007-01-27, 61.144.122.45
                '.drugs4all.us',                                // 2007-03-09, 202.67.150.250
+               '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com)
        ),
        'tremagl.freet at gmail.com' => array(  // by Treman Eagles, redirect to searchadv.com
                '.bertela.info',
@@ -4205,13 +4237,38 @@ $blocklist['C'] = array(
        ),
        'ice--man at mail.ru' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
                '.exoticmed.com',
+               '.feelview.com',
                '.greatexotic.com',
+               '.icyhip.com',
                '.icyiceman.com',
                '.margansitio.com',
                '.margantierra.com',
                '.mimargan.com',
                '.oilkeys.com',
                '.thekeyse.com',
+               '.viewgreat.com',
+       ),
+       'nijeoi at hotmai.com' => array(
+               //by  66.232.126.74 Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
+               '.bowij.com',
+               '.bozib.com',
+               '.cavux.com',
+               '.dipov.com',
+               '.gumoz.com',
+               '.hepyt.com',
+               '.kyheq.com',
+               '.kyzad.com',
+               '.qicad.com',
+               '.qubyd.com',
+               '.mocyq.com',
+               '.muloq.com',
+               '.myxim.com',
+               '.nufyp.com',
+               '.xomej.com',
+               '.xykyl.com',
+               '.zakuw.com',
+               '.zeliw.com',
+               '.zimev.com',
        ),
        'porychik at hot.ee' => array(  // by Igor
                '.tedstate.info',       // "Free Web Hosting"
@@ -4561,8 +4618,10 @@ $blocklist['C'] = array(
                '.worldsitesearch.info',        // 209.8.40.59
        ),
        'lee.seery at gmail.com' => array(
-               '.lingvol.com',         // 64.21.34.55(klikgoogle.com)
+               '.klikgoogle.com',      // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com)
+               '.lingvol.com',         // 64.21.34.55
                '.micevol.com',         // 64.21.34.55
+               '.heyhey.info',         // 64.21.34.55  by anonymous
        ),
        '69-64-64-71.dedicated.abac.net etc' => array(  // ns *.trklink.com
                // 69-64-64-71.dedicated.abac.net
@@ -4580,6 +4639,17 @@ $blocklist['C'] = array(
                '.lowpercentageacrd.info',
        ),
        'acua at mail.ru' => array(
+
+               // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
+               '.dns4babka.info',      // by acua at mail.ru
+                       // by webmaster at dns4babka.info
+                       '.credh.cn',
+                       '.fucfv.cn',
+                       '.gdxnk.cn',
+                       '.sqrrt.cn',
+                       '.ywtmd.cn',
+                       '.kncqy.cn',    // by webmaster at allmyns.info
+
                // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
                '.dedka2ns.info',       // by acua at mail.ru
                        // by webmaster at dedka2ns.info
@@ -4589,6 +4659,8 @@ $blocklist['C'] = array(
                        '.oswde.cn',
                        '.qeyig.cn',
                        '.soqsx.cn',
+                       '.ukncd.cn',
+                       '.zijgb.cn',
 
                // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found'
                '.dns4dedka.info',      // by acua at mail.ru
@@ -4599,24 +4671,78 @@ $blocklist['C'] = array(
                        '.ekwme.cn',
                        '.iutps.cn',
                        '.ryftj.cn',
+                       '.vxqcb.cn',
+                       '.zxvlr.cn',    // by webmaster at allmyns.info
+
+               '.allmyns.info',        // 84.16.226.29(www.billago.de -> 80.244.243.173 ->  billago.de) by acua at mail.ru, / forbidden
+                       // by webmaster at allmyns.info
+                       '.degvc.cn',    // 84.16.226.216(s3an.ath.cx -- DyDNS)
+                       '.ihpvy.cn',    // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
+                       '.lbtuo.cn',    // 84.16.255.254(84-16-255-254.internetserviceteam.com)
+                       '.liunc.cn',    // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 ->  frankfurt.mabako.net)
+                       '.rcyqr.cn',    // 84.16.226.217(mand.zapto.org -- Non-existent)
+                       '.rekth.cn',    // 89.149.196.19(www.kosmetik-eshop.de ->  80.244.243.181 -> ip1.rumsoft-webhosting.de)
+                       '.riumh.cn',    // 84.16.226.28
+                       '.zbtym.cn',    // 84.16.251.219(84-16-251-219.internetserviceteam.com)
+                       '.zjcgx.cn',    // 217.20.112.102(217-20-112-102.internetserviceteam.com)
 
-               // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
-               '.dns4babka.info',      // by acua at mail.ru
-                       // by webmaster at dns4babka.info
-                       '.credh.cn',
-                       '.fucfv.cn',
-                       '.gdxnk.cn',
-                       '.sqrrt.cn',
-                       '.ywtmd.cn',
-       ),
-       'ganzer3' => array(     // by Roman Shteynshlyuger (ganzer3 at gmail.com)
-               '.bruised-cridet.info',         // 69.64.82.78(*.dedicated.abac.net)
-               '.bruised-criedit.info',        // 69.64.82.76(*.dedicated.abac.net)
-               '.bruised-drecit.info',         // 69.64.82.78(*.dedicated.abac.net)
-               '.bruised-reditcards.info',     // 69.64.82.78(*.dedicated.abac.net)
-               '.cleaningupcedirt.info',       // 69.64.82.77(*.dedicated.abac.net)
-               '.cleaningupcrecit.info',       // 69.64.82.79(*.dedicated.abac.net)
        ),
+       'gilvcta sy jilbertsbram.com' => array(
+               '.dsfljkeilm1.cn',      //  206.53.51.126
+               '.dsfljkeilm2.cn',      //  206.53.51.126
+               '.dsfljkeilm3.cn',      // IP not allocated now
+               '.dsfljkeilm4.cn',      // IP not allocated now
+               '.dsfljkeilm5.cn',      // IP not allocated now
+               '.dsfljkeilm6.cn',      // IP not allocated now
+               '.dsfljkeilm7.cn',      // IP not allocated now
+               '.dsfljkeilm8.cn',      // IP not allocated now
+               '.dsfljkeilm9.cn',      // IP not allocated now
+               '.dsfljkeilm10.cn',     // IP not allocated now
+       ),
+       'ganzer3 at gmail.com' => array(        // by Roman Shteynshlyuger (ganzer3 at gmail.com)
+
+               // 69.64.82.76(*.dedicated.abac.net)
+               '.bruised-criedit.info',
+               '.bruised-crtedit.info',
+               '.bruised-czrd.info',
+               '.bruisedcreitcard.info',
+               '.bruisedcreitd.info',
+               '.cleaningup-cerdic.info',
+               '.cleanup-crrd.info',
+
+               // 69.64.82.77(*.dedicated.abac.net)
+               '.bruised-credtid.info',
+               '.bruisedcriet.info',
+               '.bruisedredit.info',
+               '.cleaningupccreditcards.info',
+               '.cleaningupcedirt.info',
+               '.cleaningupceidt.info',
+               '.cleaningupcreait.info',
+
+               // 69.64.82.78(*.dedicated.abac.net)
+               '.bruised-cridet.info',
+               '.bruised-drecit.info',
+               '.bruised-reditcards.info',
+               '.bruisedcredikt.info',
+               '.bruisedcredith.info',
+               '.bruisedcredtid.info',
+               '.cleanup-criet.info',
+               '.cleanup-dards.info',
+
+               // 69.64.82.79(*.dedicated.abac.net)
+               '.bruised-crediotcards.info',
+               '.bruised-creid.info',
+               '.cleaningup-ceridt.info',
+               '.cleaningupcrecit.info',
+               '.cleanupdredit.info',
+       ),
+       '.malwarealarm.com',
+               // (206.161.201.216 -> 206-161-201-216.pccwglobal.net)
+               // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something
+               // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net)
+       '.viagrageneric.org',   // IP not allocated, ns *.heyhey.info(IP not allocated)
+       '.viagraorder.org',             // IP not allocated, ns *.heyhey.info(IP not allocated)
+
 
        // C-2: Lonely domains (buddies not found yet)
        '.0721-4404.com',
@@ -4692,6 +4818,7 @@ $blocklist['C'] = array(
        '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc
        '.greatbestwestern.org',// by gao.wungao at gmail.com
        '.greatsexdate.com',    // by Andreas Crablo (crablo at hotmail.com)
+       '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
        '.guild-wars-online.com',       // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com)
        '.happyhost.org',               // by Paul Zamnov (paul at zamnov.be)
        '.hloris.com',                  // by Wilshi Jamil (ixisus at front.ru)
@@ -4721,9 +4848,11 @@ $blocklist['C'] = array(
        '.ls.la',                               // by Milton McLellan (McLellanMilton at yahoo.com)
        '.mamaha.info',                 // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
        '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
+       '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
        '.medpharmaworldguide.com',     // by Nick Ivchenkov (signmark at gmail.com), / not found
        '.megvideochatlive.info',       // Bad seo
        '.milfxxxpass.com',             // by Morozov Pavlik (rulets at gmail.com)
+       '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
        '.myfgj.info',                  // by Filus (softscript at gmail.com)
        '.mujiki.com',                  // by Mila Contora (ebumsn at ngs.ru)
        '.mxsupportmailer.com',
@@ -4774,12 +4903,14 @@ $blocklist['C'] = array(
        '.sslcp.com',                   // by shufang zhou (info at 6come.com), dns *.hichina.com
        '.sticy.info',                  // by Richard D. Mccall (richardmccall at yahoo.com)
        '.superrwm.info',               // by Dark Dux (duxdark at yahoo.com)
+       '.superverizonringtones.com',   // by joshua at list.ru
        '.thehostcity.com',             // Domains by Proxy
        '.thetinyurl.com',              // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
        '.thetrendy.info',              // by Harold (Harold.J.Craft at pookmail.com), / is blank
        '.theusapills.com',             // by Dr. Zarman (contactus at theusapills.com)
        '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
        '.topmeds10.com',
+       '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
        '.twabout.com',                 // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
        '.uaro.info',                   // by Neru Pioner (neru at smtp.ru)
        '.unctad.net',                  // by gfdogfd at lovespb.com
@@ -4803,17 +4934,12 @@ $blocklist['C'] = array(
        '.xamorexxx.net',
        '.xn--gmqt9gewhdnlyq9c.net',    // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp
        '.xsessox.com',
+       '.xxxmpegs.biz',                // 217.11.233.65, redirect to *.malwarealarm.com, / null
        '.yoi4.net',                    // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here.
        '.zlocorp.com',                 // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/"
        '.zyguo.info',                  // ns globoxhost.net
        '.zhuyiw.com',                  // by zhou yuntao (whzyt0122 at sohu.com)
 
-       '.guesttext.info',              // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null
-       '.medicineonlinestore.com',     // Alexander Korovin (domains at molddata.md)
-       '.moremu.com',                  // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
-       '.tingstock.info',              // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
-       '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
-
        // C-3: Not classifiable (information wanted)
        //
        // Something incoming to pukiwiki related sites