<?php
-// $Id: spam.ini.php,v 1.172 2007/10/10 12:48:15 henoheno Exp $
+// $Id: spam.ini.php,v 1.180 2007/10/31 15:01:04 henoheno Exp $
// Spam-related setting
// NOTE FOR ADMINISTRATORS:
//'ifastnet.com', // Server hosting
//'threefortune.ifastnet.com', // Server hosting
//'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker
- // Yours
//''
//''
//''
'hardcore-porn.de',
'maschinen-bluten-nicht.de',
),
+ 'copyme.org', // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
'cutalink.com',
'*.da.cx',
'*.da.ru',
'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
'blinklist.com',
'Blog.com' => array(
+ // by admin.domains at co.blog.com
'*.blog.com',
- '*.blogandorra.com', // by admin.domains at co.blog.com
- '*.blogangola.com', // by admin.domains at co.blog.com
+ '*.blogandorra.com',
+ '*.blogangola.com',
+ '*.blogaruba.com',
),
'*.blog.com.es',
'*.blog.hr',
'.cute.cd', // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
),
'*.canalblog.com', // 195.137.184.103 by dns-admin at pinacolaweb.com
+ '*.cdnhost.cn', // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
'*.chueca.com',
'city-forum.com',
'*.craigslist.org',
'*.conforums.com', // by Roger Sutton (rogersutton at cox.net)
'connectedy.com', // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
'counterhit.de',
+ '*.createblog.com',
'*.createforum.net',
'*.creatuforo.com', // by Desafio Internet S.L. (david at soluwol.com)
'*.createmybb.com',
'del.icio.us',
'*.devil.it',
'*.diaryland.com',
+ 'diigo.com', ///user/
'digg.com',
'digstock.com',
'domains at galaxywave.net' => array(
'freewebsfarms.com',
),
'*.freewebspace.net.au',
+ 'freewebtown.com',
'*.freemyforum.com', // by messahost at gmail.com
'freepowerboards.com',
'*.freepowerboards.com',
'*.30mb.com', // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
'*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
),
+ '*.gexxe.com',
'*.goodboard.de',
'gossiping.net',
'*.greatnuke.com',
'Google.com' => array(
'*.blogspot.com',
'docs.google.com',
+ '*.googlegroups.com', ///web/
'*.googlepages.com',
'groups-beta.google.com',
),
'*.lide.cz',
'*.sblog.cz',
),
+ '*.lioru.com',
'limmon.net',
'lipstick.com', // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
'listible.com', ///list/
),
'mojklc.com',
'*.mundoforo.com',
+ '*.money-host.com',
'MonForum.com' => array(
'*.monforum.com',
'*.monforum.fr',
'*.talkthis.com',
'tbns.net',
'telasipforums.com',
+ 'theforumhub.com',
'thestudentunderground.org',
'think.ubc.ca',
'*.thumblogger.com',
'alwanforthearts.org',
'*.anchor.net.au',
'anewme.org',
+ 'arisedesign.net', //Portfolio/d981/
'internetyfamilia.asturiastelecentros.com',
'Ball State University' => array('web.bsu.edu'),
'btofaq.net', ///v3/forum
'blepharospasm.org',
'nyweb.bowlnfun.dk',
'*.buzznet.com',
+ 'Carroll College' => array(
+ 'carroll.edu', ///boards/
+ ),
'*.canberra.net.au',
'castus.com',
'Case Western Reserve University' => array('case.edu'),
'delayedreaction.org',
'deproduction.org',
'dc503.org',
+ 'dialadeck.com', ///images/
'dre-centro.pt',
'Duke University' => array('devel.linux.duke.edu'),
'*.esen.edu.sv',
'Harvard Law School' => array('blogs.law.harvard.edu'),
'helpiammoving.com',
'homepage-dienste.com',
+ '*.hostistry.com', // by support at hostistry.com, hostistry at gmail.com
'Howard University' => array('networks.howard.edu'),
'hullandhull.com',
'Huntington University' => array('huntington.edu'),
'huskerink.com',
'.hyba.info',
+ 'ideas4you.com', ///photos/
'inda.org',
'*.indymedia.org', // by abdecom at riseup.net
'instantbulletin.com',
'skkustp.itgozone.com', // hidden JavaScript
'jazz2online.com',
'.jloo.org',
+ '.juegohq.com', // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
+ 'kjon.com',
'Kazan State University' => array(
'dir.kzn.ru',
'sys.kcn.ru',
'Loyola Marymount University' => array('lmu.edu'),
'forum.lixium.fr',
'macfaq.net',
+ 'macvirus.org', ///board/
'me4x4.com',
'microbial-ecology.net',
'minsterscouts.org',
'hlc.ncat.edu',
),
'placetobe.org',
+ 'Naropa University' => array(
+ 'naropa.edu', ///forum/
+ ),
'users.nethit.pl',
'nightclubvip.net',
'njbodybuilding.com',
'nlen.org',
+ 'North Carolina School of Science and Mathematics' => array(
+ 'neverland.ncssm.edu', ///include/web/forum/
+ 'grid.ncssm.edu', ///ncssm_grid/
+ ),
'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
+ 'ofcourseimright.com', ///cgi-bin/roundup/calsify/
'offtextbooks.com',
'ofimatika.com',
+ 'olympiafoto.com', ///images/
'omakase-net', // iframe
'omikudzi.ru',
'openchemist.net',
'preform.dk',
'privatforum.de',
'publicityhound.net',
+ 'puppylinux.net', ///news/content/counter/pages/
'qea.com',
'rbkdesign.com',
'rehoboth.com',
'sapphireblue.com',
'saskchamber.com',
'savevoorhees.org',
+ 'sdhmalenovice.cz', //galerie/
'selikoff.net',
'serbisyopilipino.org',
'setbb.com',
'tuathadedannan.org',
'txgotg.com',
'tzaneen.co.za',
+ 'ugeavisen.com', ///style/
'forums.ugo.com',
'whole.cs.unibo.it',
'The University of North Dakota' => array(
'University of California' => array('classes.design.ucla.edu'),
'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
'University of Northern Colorado' => array('unco.edu'),
+ 'University of North Carolina' => array(
+ 'elm.cis.uncw.edu' ///testBoinc/
+ ),
'University of Toronto' => array(
'environment.utoronto.ca',
'grail.oise.utoronto.ca',
'utsc.utoronto.ca',
),
+ 'University of Wisconsin' => array(
+ 'einstein.phys.uwm.edu'
+ ),
'urgentclick.com',
'vacant.org.uk',
'Villa Julie College' => array('www4.vjc.edu'),
'.camdoors.info', // by Sergey
'.chatdoors.info', // by Sergey
- '.lebedi.info', // by Pronin
- '.loshad.info', // by Pronin
- '.porosenok.info', // by Pronin
- '.indyushonok.info', // by Pronin
- '.kotyonok.info', // by Pronin
- '.kozlyonok.info', // by Pronin
- '.magnoliya.info', // by Pronin
- '.svinka.info', // by Pronin
- '.svinya.info', // by Pronin
- '.zherebyonok.info', // 89.149.206.225 by Pronin
+ // 89.149.206.225 by Pronin
+ '.dorozhka.info',
+ '.kolonochka.info',
+ '.knizhechka.info',
+ '.krantik.info',
+ '.lebedi.info',
+ '.loshad.info',
+ '.pechenka.info',
+ '.porosenok.info',
+ '.indyushonok.info',
+ '.kotyonok.info',
+ '.kozlyonok.info',
+ '.magnoliya.info',
+ '.svinka.info',
+ '.svinya.info',
+ '.televizorchik.info',
+ '.tumbochka.info',
+ '.zherebyonok.info',
'.medvezhonok.org', // 89.149.206.225 "BucksoGen 1.2b"
'.fateback.com',
'.undonet.com',
'.yoll.net',
+ '.sinfree.net', // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
// 50webs.com // 64.72.112.10
// dns2.50webs.com // 64.72.112.11
'.bovorup.cn',
'.litotar.cn',
'.nihydec.cn',
-
+
// 66.232.112.175 by bing-32 at ftunez.org
'.lasyxy.cn',
+ // by bing-65 at ftunez.org
+ '.coxyvuk.cn', // 66.232.120.111(non-existent)
+ '.comygyx.cn', // 66.232.120.112(non-existent)
+ '.gyqalec.cn', // 66.232.120.114(non-existent)
+ '.paluwir.cn', // 66.232.120.114(non-existent)
+ '.qunonid.cn', // 66.232.120.114(*snip*)
+ '.qupyvin.cn', // 66.232.120.115(non-existent)
+ '.ririjyz.cn', // 66.232.120.111(*snip*)
+ '.saralar.cn', // 66.232.120.113(non-existent)
+ '.vawomyl.cn', // 66.232.120.115(non-existent)
+
// 69.46.23.48 by clarkson-34 at ftunez.org
'.bumora.cn',
'.byxite.cn',
'.xizity.cn',
'.xuxusa.cn',
+ // by entretov-28 at ftunez.org
+ '.hotejen.cn', // 66.232.120.111(*snip*)
+ '.kyhadat.cn', // 66.232.120.115(*snip*)
+
// 69.46.23.48 by entretov-32 at ftunez.org
'.cihuji.cn',
'.deqyve.cn',
'.dozoda.cn',
'.nemipu.cn',
+ // entretov-84 at ftunez.org
+ '.muruvun.cn', // 66.232.120.114(*snip*)
+ '.favulol.cn', // 66.232.120.115(*snip*)
+ '.tixuqyx.cn', // 66.232.120.111(*snip*)
+
// 69.46.23.48 by jeremy-57 at ftunez.org
'.duzele.cn',
'.figede.cn',
'.wotyqo.cn',
'.xudoli.cn',
+ // entretov-28 at ftunez.org
+ '.xevavuv.cn', // 66.232.120.113(*snip*)
+
+ // by entretov-37 at ftunez.org
+ '.sadyroz.cn', // 66.232.120.114(*snip*)
+ '.zedutox.cn', // 66.232.120.112(non-existent)
+
// 66.232.112.175 by entretov-86 at ftunez.org
'.faweji.cn',
'.jypaci.cn',
'.qiwysu.cn',
'.tutysy.cn',
+ // by oker-97 at ftunez.org
+ '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com)
+ '.mesyvuc.cn', // 66.232.120.111(*snip*)
+ '.nyjyzup.cn', // 66.232.127.126(*snip*)
+ '.qagibit.cn', // 66.232.120.114(*snip*)
+ '.rovazaw.cn', // 66.232.120.112(*snip*)
+ '.tozojug.cn', // 66.232.120.111(*snip*)
+ '.xywataw.cn', // 66.232.120.112(*snip*)
+
+ // by polet-20 at ftunez.org
+ '.mopoxon.cn', // 66.232.127.126(*snip*)
+
// 66.232.112.175 by sabrosky-49 at ftunez.org
'.gywiqe.cn',
'.jotapo.cn',
'.jywixa.cn',
- // '69.46.23.48 by sabrosky-60 at ftunez.org
+ // 69.46.23.48 by sabrosky-60 at ftunez.org
'.bawegap.cn',
'.buremyl.cn',
'.cilybut.cn',
'.jytame.cn',
'.wygete.cn',
),
+ '74.50.97.*' => array(
+ '.kaqeje.com', // 74.50.97.51(non-existent) by abuse-here at inbox.ru
+ '.cumimo.com', // 74.50.97.51(non-existent) by olga at ike.com
+ '.kaxavo.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
+ '.hoheru.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
+ '.tyqoti.com', // 74.50.97.52(non-existent) by anna at hotmail.com
+ '.fupopu.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
+ '.poxupo.com', // 74.50.97.53(non-existent) by inna at gmail.com
+ '.kuluvo.com', // 74.50.97.53(non-existent) by gunter at ftunez.org
+ '.wugoba.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
+ '.civuhe.com', // 74.50.97.54(non-existent) by olga at ike.com
+ '.zasuly.com', // 74.50.97.54(non-existent) by olga at ike.com
+ '.liwowu.com', // 74.50.97.54(non-existent) by abuse-here at inbox.ru
+ '.vobime.com', // 74.50.97.55(non-existent) by inna at gmail.com
+ '.nyrive.com', // 74.50.97.55(non-existent) by anna at hotmail.com
+ '.hehepu.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
+ '.bynute.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
+
+ '.sevimy.com', // 66.232.124.12(time-out) by inna at gmail.com
+ '.gapubo.com', // 66.232.124.12(time-out) by gunter at ftunez.org
+ '.vejoku.com', // 66.232.124.12(time-out) by olga at ike.com
+ '.qysahu.com', // 66.232.124.12(time-out) by abuse-here at inbox.ru
+ '.hidolu.com', // 66.232.124.13(time-out) by inna at gmail.com
+ '.tetace.com', // 66.232.124.13(time-out) by gunter at ftunez.org
+ '.vuxilu.com', // 66.232.124.13(time-out) by olga at ike.com
+ '.teboca.com', // 66.232.124.13(time-out) by olga at ike.com
+ '.dizive.com', // 66.232.124.14(time-out) by olga at ike.com
+ '.peduxe.com', // 66.232.124.14(time-out) by gunter at ftunez.org
+ '.sybyna.com', // 66.232.124.14(time-out) by gunter at ftunez.org
+ '.bepofe.com', // 66.232.124.15(time-out) by anna at hotmail.com
+ '.kuloja.com', // 66.232.124.15(time-out) by gunter at ftunez.org
+ '.tetadu.com', // 66.232.124.15(time-out) by inna at gmail.com
+ '.qilato.com', // 66.232.124.15(time-out) by inna at gmail.com
+ '.lobimi.com', // 66.232.124.16(time-out) by olga at ike.com
+ '.tazuwe.com', // 66.232.124.16(time-out) by olga at ike.com
+ '.pihufo.com', // 66.232.124.16(time-out) by olga at ike.com
+ '.decewa.com', // 66.232.124.16(time-out) by gunter at ftunez.org
+
+ '.lynymu.com', // 206.51.226.194(time-out) by abuse-here at inbox.ru
+ '.saciqo.com', // 206.51.226.194(time-out) by olga at ike.com
+ '.zalajy.com', // 206.51.226.194(time-out) by inna at gmail.com
+ '.hisimy.com', // 206.51.226.194(time-out) by inna at gmail.com
+ '.qysowe.com', // 206.51.226.194(time-out) by olga at ike.com
+ ),
'nijeoi at hotmai.com' => array(
// 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
'.bowij.com',
'.tedstate.info', // "Free Web Hosting"
'.giftsee.com',
),
+ 'admin at pertol.info' => array(
+ // 81.0.195.189 "Free Web Hosting"
+ '.laparka.cn',
+ '.mirlos.cn',
+ '.oldmoms.cn',
+
+ // 217.11.233.64(timed-out)
+ '.ejmpep.cn', // by admin at pertol.info
+ '.ytere.cn', // by admin at x2t.com
+
+ '.pertol.info', // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
+ '.pornography-world.com', // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
+
+ // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
+ '.new-greece-travel.com',
+ '.peraonline.info',
+ ),
+
'aofa at vip.163.com' => array(
'.bdjyw.net', // by gaoyun, infected images, iframe to 5944.net's VBScript
'.5944.net',
'.wfe7nv.org',
'.xyr99yx.org',
),
- '203.171.230.39' => array( // registrar bizcn.com, iframe + cursor
+ '203.171.230.39' => array(
+ // by 51shell at 163.com
+ '.amatou-fc2.com',
+
+ // registrar bizcn.com, iframe + cursor
'.playonlinenc.com',
'.playboss-jp.com',
),
'.ringtonecooler.com', // 217.11.233.34
),
'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn)
- '.okwit.com', // 220.166.64.44
- '.sakerver.com', // 220.166.64.194
- '.motewiki.net', // 220.166.64.194
+ // 220.166.64.44
+ '.okwit.com',
+ '.sakerver.com',
+ '.motewiki.net',
+
+ '.8568985.com', // 61.139.126.10 ns *.myhostadmin.net
+
+ // 61.139.126.47, ns *.myhostadmin.net
+ '.playonlanei.com',
+ '.rmtfcne.com',
),
'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
'.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net)
'.pimpcupid.com', // 89.149.226.111(*.internetserviceteam.com)
),
'hosan by front.ru' => array(
- '.online-freesearch.com', // 206.53.51.155
- '.carsprojects.com', // 206.53.51.159
- '.sport-brands.com', // 206.53.51.167
- '.choosefinest.com', // 206.53.51.157
+ '.salihome.info', // 206.53.51.155(non-existent)
+ '.online-freesearch.com', // 206.53.51.155
+ '.choosefinest.com', // 206.53.51.157
+ '.carsprojects.com', // 206.53.51.159
+ '.sport-brands.com', // 206.53.51.167
'.online-pharmaceutics.com', // 206.53.51.168
),
'89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent)
+ '.canadians-health.com', // by andreyletov at yahoo.com
'.cialischeap.info',
'.superrv.info',
),
- '74.50.97.*' => array(
- '.kaqeje.com', // 74.50.97.51(non-existent) by abuse-here at inbox.ru
- '.cumimo.com', // 74.50.97.51(non-existent) by olga at ike.com
- '.kaxavo.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
- '.hoheru.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
- '.tyqoti.com', // 74.50.97.52(non-existent) by anna at hotmail.com
- '.fupopu.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
- '.poxupo.com', // 74.50.97.53(non-existent) by inna at gmail.com
- '.kuluvo.com', // 74.50.97.53(non-existent) by gunter at ftunez.org
- '.wugoba.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
- '.civuhe.com', // 74.50.97.54(non-existent) by olga at ike.com
- '.zasuly.com', // 74.50.97.54(non-existent) by olga at ike.com
- '.liwowu.com', // 74.50.97.54(non-existent) by abuse-here at inbox.ru
- '.vobime.com', // 74.50.97.55(non-existent) by inna at gmail.com
- '.nyrive.com', // 74.50.97.55(non-existent) by anna at hotmail.com
- '.hehepu.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
- '.bynute.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
- ),
'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
+ '.hatbi.com',
+ '.justrty.com',
'.kol2you.com',
'.kolplanet.com',
+ '.myrty.com',
+ '.officialrty.com',
'.pbaol.com',
'.planetkol.com',
),
+ 'Abra1.com' => array(
+ // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
+ '.abra1.com', // by info at maisontropicale.com
+ '.abra4.com', // by websites at caribbeanonlineinternational.com
+
+ // 209.85.51.238(*.opticaljungle.com -> non-existent)
+ '.abra2.com', // by domain at anondns.org
+ '.abra3.com', // by domain at anondns.org
+ ),
+ 'topdomainz at gmail.com' => array(
+ // 217.73.201.237 , ns *.parked.ru
+ '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info
+ '.aboutgooglegroup.info',
+ '.aboutgoogleimage.info',
+ '.aboutgooglemail.info',
+ '.aboutgooglemap.info',
+ '.aboutgooglenews.info',
+ '.aboutgooglevideo.info',
+ '.bestgoogleearth.info',
+ '.magicgoogleearth.info',
+ '.magicgooglemap.info',
+ '.magicgooglevideo.info',
+
+ // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
+ '.slajzer.info',
+ '.tonoscelular.info',
+ '.tonosmotorola.info',
+ ),
+ '89.149.208.23' => array(
+ // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
+ '.w3rar.info',
+ '.w3sex.info',
+ '.w3zip.info',
+ '.w3in.info',
+ '.w3out.info',
+
+ // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript
+ '.2vip.info',
+ '.4cat.info',
+ '.8vip.info',
+ '.9upp.info',
+ ),
+ 'zorkin87 at mail.ru' => array(
+ // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
+ '.ruqore.com',
+ '.goxama.com',
+ '.cazebi.com',
+ '.fukeqa.com',
+ '.fydoge.com',
+ '.jukaly.com',
+ '.jumoga.com',
+ '.jumuxo.com',
+ '.tyriva.com',
+ '.vudyho.com'
+ ),
+ 'jessicaeagloff at yahoo.co.uk' => array(
+ '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
+ '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com
+ '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
+ '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk
+ ),
+ 'qbbs at xinoffice.com' => array(
+ // ns *.name-services.com
+ '.lingage.com', // 8.15.231.118
+ '.puksins.com', // IP not allocated now
+ ),
// C-2: Lonely domains (buddies not found yet)
'.0721-4404.com',
'.0nline-porno.info', // by Timyr (timyr at narod.ru)
+ '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
'.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
'.19cellar.info', // by Eduardo Guro (boomouse at gmail.com)
'.1gangmu.com', // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
'.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com)
'.0annie.info',
'.6i6.de',
+ '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
+ '.angioco.com', // 62.37.112.100, gamble
'.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com)
'.adult-master-club.com', // by Alehander (mazyrkevich at cosmostv.by)
'.adultpersonalsclubs.com', // by Peter (vaspet34 at yahoo.com)
+ '.akalukseree.com', // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
'.akgame.com', // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
+ '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
'.alfanetwork.info', // by dante (dantequick at gmail.com)
'.allworlddirect.info', // Forbidden
'.amoreitsex.com',
+ '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
+ '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com
'.approved-medication.com', // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
'.areahomeinfo.info', // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
'.areaseo.com', // by Antony Carpito (xcentr at lycos.com)
+ '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
'.auto-car-cheap.org',
'.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
'.baurish.info',
'.capital2u.info', // by Delbert.A.Henry at dodgeit.com
'.casa-olympus.com', // "UcoZ WEB-SERVICES"
'.catkittenmagazines.org', // 87.118.97.117
+ '.chatwalker.com', // 124.32.230.65
+ '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com
'.covertarena.co.uk', // by Wayne Huxtable
'.d999.info', // by Peter Vayner (peter.vayner at inbox.ru)
'.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
'.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
+ '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
'.dlekei.info', // by Maxima Bucaro (webmaster at tts2f.info)
'.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
'.drug-shop.us', // by Alexandr (matrixpro at mail.ru)
'.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
+ '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
'.easyshopusa.com', // by riter (riter at nm.ru)
+ '.edjuego.com', // 85.92.70.253(non-existent), gamble
'.edu.ph', // "philippine network foundation inc"
+ '.eec.mn', // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
'.ex-web.net', // RMT by ex co,ltd (rmt at ex-web.net)
'.extracheapmeds.com', // "freexxxmovies" by John Smith (89 at bite.to)
'.fantasy-handjob-ra.com', // by Hose Pedro (hosepedro at gmail.com)
'.fastppc.info', // by peter conor (fastppc at msn.com)
'.ffxiforums.net', // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
- '*.filthserver.com', // sales at onlinemarketingservices.biz
+ '.filthserver.com', // sales at onlinemarketingservices.biz
'.find-stuff.org', // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
'.firstdrugstorezone.info', // by Goose (boris208 at yandex.ru)
'.free-finding.com', // by Ny hom (nyhom at yahoo.com)
'.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com)
'.game4egold.com', // by Filus Saifullin (ebay at soft-script.com)
'.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
+ '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
'.gomeodc.com', // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
'.ganecity.com', // by shao tian (huangjinqiang at sina.com)
'.gm-exchange.jp', // 210.188.216.49 RMT
'.hostuju.cz', // ns banan.cz, banan.it
'.hot4buy.org', // by Hot Maker (jot at hot4buy.org)
'.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
+ '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com)
'.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp
'.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
'.infradoc.com',
'.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca)
'.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet
'.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript
+ '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
'.kingtools.de',
'.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
'.leucainfo.com',
'.library-blogs.net', // by Peter Scott (pscontent at gmail.com)
- '.lingage.com', // by huan bing (qbbs at xinoffice.com)
+ '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
'.link-keeper.net', // 210.172.108.236 (257.xrea.com)
'.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com)
'.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
'.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
+ '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
'.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md)
'.medpharmaworldguide.com', // by Nick Ivchenkov (signmark at gmail.com), / not found
'.megvideochatlive.info', // Bad seo
'.milfxxxpass.com', // by Morozov Pavlik (rulets at gmail.com)
+ '.mncxvsm.info', // 217.11.233.105, / blank
'.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
+ '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
'.myfgj.info', // by Filus (softscript at gmail.com)
'.mujiki.com', // by Mila Contora (ebumsn at ngs.ru)
'.mxsupportmailer.com',
'.next-moneylife.com', // RMT
'.newalandirect.com', // by Alnoor Hirji, ns *.sablehost.com
'.ngfu2.info', // by Tara Lagrant (webmaster at ngfu2.info)
+ '.northwestradiator.com', // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
'.nucked-sex.com', // 203.223.150.222 by lis (noidlis2 at yahoo.com)
'.ok10000.com', // by zipeng hu (ldcs350003 at hotmail.com)
'.olimpmebel.info', // by pol (pauk_life at mail.ru), frame to bettersexmall.com
'.onlinetert.info', // by Jarod Hyde (grigorysch at gmail.com)
'.onlin-casino.com', // by Lomis Konstantinos (businessline3000 at gmx.de)
'.onlineviagra.de',
+ '.oppe.biz', // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
'.ornit.info', // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
'.ozomw.info',
'.pahuist.info', // by Yura (yuralg2005 at yandex.ru)
'.portaldiscount.com', // by Mark Tven (bestsaveup at gmail.com)
'.powerlevelingweb.com', // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
'.prama.info', // by Juan.Kang at mytrashmail.com
+ '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
',pulsar.net', // by TheBuzz Int. (theboss at tfcclion.com)
'.qoclick.net', // by DMITRIY SOLDATENKO
'.quality-teen-porn-photo.com', // by info at densa.info
'.sepcn.info', // / not found
'.sslcp.com', // by shufang zhou (info at 6come.com), dns *.hichina.com
'.sticy.info', // by Richard D. Mccall (richardmccall at yahoo.com)
+ '.stordproduksjonslag.no', // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
+ '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
'.superrwm.info', // by Dark Dux (duxdark at yahoo.com)
'.superverizonringtones.com', // by joshua at list.ru
+ '.teriak.cn', // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
+ '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
'.thehostcity.com', // Domains by Proxy
+ '.thesuperxxx.com', // 81.29.249.27(non-existent)
'.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
'.thetrendy.info', // by Harold (Harold.J.Craft at pookmail.com), / is blank
'.theusapills.com', // by Dr. Zarman (contactus at theusapills.com)
'.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
'.topmeds10.com',
+ '.tschofenig.com', // 213.239.234.98(*.clients.your-server.de), port 8080
'.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
'.twabout.com', // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
'.uaro.info', // by Neru Pioner (neru at smtp.ru)
'.unctad.net', // by gfdogfd at lovespb.com
'.vacant.org.uk',
+ '.viagrausaonline.com', // 85.17.52.139(non-existent)
'.vip-get.info', // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
'.virtualsystem.de',
'.vdxhost.com',
+ '.vodkaporn.com', // 67.19.116.83(non-existent) by green at gmx.co.uk
'.vviccd520.com', // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
'.homes.com.au', // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
+ '.wbtechs.us', // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
'.webnow.biz', // by Hsien I Fan (admin at servcomputing.com)
'.webtools24.net', // by Michael Helminger (info at ishelminger.de)
'.wer3.info', // by Martin Gundel (Martin at mail.com), 404 not found
'.zyguo.info', // ns globoxhost.net
'.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com)
- '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
- '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
- '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
-
- '.chatwalker.com', // 124.32.230.65
- '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
- '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com
-
- '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
- '.mncxvsm.info', // 217.11.233.105, / blank
- '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
- '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
- '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com)
- '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
- '.wbtechs.us', // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
- '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
- '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com
-
- '.oppe.biz', // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
- '.thesuperxxx.com', // 81.29.249.27(non-existent)
+ '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
// The same approach of 'acua at mail.ru'
'.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
// E: Sample setting of
// Promoters
// (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
- // Ads, Business promotions)
+ // Ads, Business promotions, SEO, etc)
//
// They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
// Sometimes they may promote each other
'hbb.afl.rakuten.co.jp', ///hsb/ 203.190.60.105 image server?
),
'.sedori-data.com', // 210.188.205.7(sv03.lolipop.jp)
+ '.seozone.jp', // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
'.tool4success.com', // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
'tera at kirinn.com' => array( // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
'.e123.info',
OSDN Git Service
