X-Git-Url: http://git.osdn.net/view?p=pukiwiki%2Fpukiwiki_sandbox.git;a=blobdiff_plain;f=spam%2Fspam.ini.php;h=772ddc604106ca605c79750156d634fbd479290c;hp=158130a3f765f59cf035407f3cf5bbd5159343de;hb=b0cba496ceb4f866f4352e40c9d1ed2ff0ec95a5;hpb=efb420ef4f6617471adda473995ea6b909e9905d diff --git a/spam/spam.ini.php b/spam/spam.ini.php index 158130a..772ddc6 100644 --- a/spam/spam.ini.php +++ b/spam/spam.ini.php @@ -1,5 +1,5 @@ FALSE, +// 'official/dev' => FALSE, ); // 'list': Normal list $blocklist['list'] = array( 'A-1' => TRUE, // General redirection services //'A-2' => TRUE, // Dynamic DNS, Dynamic IP services, ... - 'B-1' => TRUE, // Web spaces + 'B-1' => TRUE, // Web N.M spaces 'B-2' => TRUE, // Jacked contents, something implanted 'C' => TRUE, // Exclusive spam domains //'D' => TRUE, // "Third party in good faith"s @@ -57,28 +58,26 @@ $blocklist['list'] = array( // -------------------------------------------------- +// Ignorance list $blocklist['goodhost'] = array( - // Sample setting of ignorance list - 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#', +); +$blocklist['official/dev'] = array( // PukiWiki-official/dev specific - //'pukiwiki.sourceforge.jp', - //'pukiwiki.org', // Temporary - //'.logue.tk', // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01) - //'.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) - //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk - //'emasaka.blog65.fc2.com', // Text-to-Impress converter - //'ifastnet.com', // Server hosting - //'threefortune.ifastnet.com', // Server hosting - //'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker - //'' - //'' - //'' - + 'pukiwiki.sourceforge.jp', + 'pukiwiki.org', // Temporary + '.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) + '.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk + 'emasaka.blog65.fc2.com', // Text-to-Impress converter + 'ifastnet.com', // Server hosting + 'threefortune.ifastnet.com', // Server hosting + 'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker + 'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer ); + // -------------------------------------------------- // A: Sample setting of // Existing URI redirection or masking services @@ -99,6 +98,10 @@ $blocklist['A-1'] = array( // smcurl.com // "Idiots were using smcURL to shrink URLs and // send them out via spam." + // symy.jp + // "One or more users are using our URL redirect + // service for spam/botnet. + // So we closed this service." // tinyclick.com // "...stop offering it's free services because // too many people were taking advantage of it" @@ -172,6 +175,7 @@ $blocklist['A-1'] = array( '*.ovp.pl', '*.6-6-6.pl', ), + 'babelfish.altavista.com', ///babelfish/trurl_pagecontent 'amoo.org', 'web.archive.org', ///web/2 'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net @@ -188,11 +192,13 @@ $blocklist['A-1'] = array( 'athomebiz.com', 'aukcje1.pl', 'beam.to', + '*.bebo.com', 'beermapping.com', 'besturl.in', 'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com 'biglnk.com', 'bingr.com', + 'bit.ly', 'bittyurl.com', '*.bizz.cc', '*.blo.pl', @@ -484,6 +490,10 @@ $blocklist['A-1'] = array( 'iat.net', // 74.208.58.130 by Tony Carter 'ibm.com', ///links (Correct it) '*.iceglow.com', + 'internetadresi.com' => array ( + 'rxbuycheap.com', + 'rxcheapwestern.com', + ), 'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info) 'Ideas para Nuevos Mercados SL' => array( // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com) @@ -851,6 +861,7 @@ $blocklist['A-1'] = array( 'linkezy.com', 'linkfrog.net', 'linkook.com', + 'linkyme.com', 'linkzip.net', 'lispurl.com', 'lnk.in', @@ -906,6 +917,7 @@ $blocklist['A-1'] = array( 'palurl.com', '*.paulding.net', 'phpfaber.org', + 'pygmyurl.com', 'pnope.com', 'prettylink.com', 'PROXID.net' => array( // also xRelay.net @@ -916,6 +928,7 @@ $blocklist['A-1'] = array( '*.site.tc', '*.societe.st', ), + 'qqa.jp', 'qrl.jp', 'qurl.net', 'qwer.org', @@ -937,6 +950,7 @@ $blocklist['A-1'] = array( 'rio.st', 'rlink.org', '*.rmcinfo.fr', + 'roo.to', // Seems closed, says "bye-bye" 'rubyurl.com', '*.runboard.com', 'runurl.com', @@ -1044,7 +1058,6 @@ $blocklist['A-1'] = array( 'SURL.DK' => array('surl.dk'), // main page is: s-url.dk 'surl.se', 'surl.ws', - 'symy.jp', 'tdurl.com', 'tighturl.com', 'tiniuri.com', @@ -1070,7 +1083,7 @@ $blocklist['A-1'] = array( '*.toolbot.com', '*.torontonian.com', 'trimurl.com', - 'ttu.cc', + //'ttu.cc', // Seems closed 'turl.jp', '*.tz4.com', 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master @@ -1102,6 +1115,7 @@ $blocklist['A-1'] = array( '*.ever.to', '*.mini.to', ), + 'u-go.to', 'uchinoko.in', 'Ulimit.com' => array( '*.be.tf', @@ -1131,6 +1145,7 @@ $blocklist['A-1'] = array( '*.unixlover.com', '*.zik.mu', ), + 'urltea.com', '*.uni.cc', 'UNONIC.com' => array( '*.at.tf', // AlpenNIC @@ -1487,7 +1502,7 @@ $blocklist['A-2'] = array( $blocklist['B-1'] = array( - // B-1: Web spaces + // B-1: Web N.M spaces (N > 0, M >= 0) // // Messages from forerunners: // activefreehost.com @@ -1512,6 +1527,7 @@ $blocklist['B-1'] = array( // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com '*.100freemb.com', // by Danny Ashworth + '*.easyfreehosting.com', '*.exactpages.com', '*.fcpages.com', '*.wtcsites.com', @@ -1588,6 +1604,7 @@ $blocklist['B-1'] = array( '*.20me.com', ), '*.100foros.com', + '*.101freehost.com', '*.12gbfree.com', // 75.126.176.194 by ashphama at yahoo.com '20six Weblog Services' => array( '.20six.nl', // by 20six weblog services (postmaster at 20six.nl) @@ -1827,6 +1844,7 @@ $blocklist['B-1'] = array( '*.cdnhost.cn', // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html '*.chueca.com', 'city-forum.com', + '*.clicdev.com', '*.craigslist.org', 'concepts-mall.com', '*.conforums.com', // by Roger Sutton (rogersutton at cox.net) @@ -1859,6 +1877,7 @@ $blocklist['B-1'] = array( '*.ekiwi.de', '*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com) '.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it) + '*.easyjournal.com', '*.ebloggy.com', 'enunblog.com', '*.epinoy.com', @@ -2548,12 +2567,11 @@ $blocklist['B-1'] = array( '*.free-25.de', '*.free-bb.com', 'Free-Blog-Hosting.com' => array( - 'free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com - 'cheap-web-hosting-411.com', // by Robert Vigil, ns *.thisismyserver.net - 'blog-tonite.com', // ns *.phpwebhosting.com - 'blogznow.com', // ns *.phpwebhosting.com - 'myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com - 'blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com + '*.free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com + '*.blog-tonite.com', // ns *.phpwebhosting.com + '*.blogznow.com', // ns *.phpwebhosting.com + '*.myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com + '*.blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com ), '*.free-forums.org', // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro) 'free-guestbook.net', @@ -2608,6 +2626,10 @@ $blocklist['B-1'] = array( '*.googlegroups.com', ///web/ '*.googlepages.com', 'groups-beta.google.com', + 'groups.google.*', ///group/ Seems widely distributed + //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk', + //'groups.google.de', 'groups.google.es', 'groups.google.fr', + //'groups.google.it', ... ), 'guestbook.at', 'club.giovani.it', @@ -2688,18 +2710,26 @@ $blocklist['B-1'] = array( '*.joolo.com', '*.journalscape.com', '*.justfree.com', - '*.blog.kataweb.it', + 'kataweb.it' => array( // kata-redir.kataweb.it + '*.blog.kataweb.it', + '*.repubblica.it', + ), '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com '*.kokoom.com', 'koolpages.com', '*.kostenlose-foren.org', '*.ksiegagosci.info', + 'LaCoctelera.com' => array( + 'lacoctelera.com', // by alberto at the-cocktail.com + 'espacioblog.com', // by dominios at ferca.com + ), 'Lide.cz' => array( '*.lide.cz', '*.sblog.cz', ), '*.lioru.com', 'limmon.net', + 'linkinn.com', 'lipstick.com', // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com 'listible.com', ///list/ 'Livedoor.com' => array( @@ -2907,6 +2937,7 @@ $blocklist['B-1'] = array( '.aim.to', '.djmp.jp', '.nihongourl.nu', + '.url.sh', // Says SmarTrans '.urljp.com', '.www1.to', '.www2.to', @@ -3162,11 +3193,14 @@ $blocklist['B-2'] = array( 'alwanforthearts.org', '*.anchor.net.au', 'anewme.org', + 'arcrockett.com', ///golf/excel/ 'arisedesign.net', //Portfolio/d981/ 'internetyfamilia.asturiastelecentros.com', + 'ballblair.com', ///images/thumbs/ 'Ball State University' => array('web.bsu.edu'), 'btofaq.net', ///v3/forum 'blepharospasm.org', + 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net 'nyweb.bowlnfun.dk', '*.buzznet.com', 'Carroll College' => array( @@ -3177,6 +3211,7 @@ $blocklist['B-2'] = array( 'Case Western Reserve University' => array('case.edu'), 'ceval.de', 'chaco.gov.ar', + 'chasingrainbowsaustralia.com', ///geometry/ 'codespeak.net', 'Colorado School of Mines' => array('ticc.mines.edu'), '*.colourware.co.uk', @@ -3202,8 +3237,10 @@ $blocklist['B-2'] = array( 'forums.drumcore.com', 'dundeeunited.org', 'energyglass.com.ua', + 'equitas.com.au', ///images/mim3/, no index.html 'exclusivehotels.com', 'info.ems-rfid.com', + 'fairyfunkyard.com', ///images_files/files/ 'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com) 'fbwloc.com', '.fhmcsa.org.au', @@ -3317,6 +3354,7 @@ $blocklist['B-2'] = array( 'ryanclark.org', '*.reallifelog.com', 'rkphunt.com', + 'rso-csp.org', ///bulletins/ '.saasmar.ru', // Jacked. iframe to banep.info on root, etc 'sapphireblue.com', 'saskchamber.com', @@ -3385,7 +3423,7 @@ $blocklist['B-2'] = array( '.xthost.info', // by Michael Renz (dhost at mykuhl.de) 'Yahoo.com' => array( 'blog.360.yahoo.com', - '*.groups.yahoo.com' + '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ... ), 'yasushi.site.ne.jp', // One of mixedmedia.net' 'youthpeer.org', @@ -3934,7 +3972,12 @@ $blocklist['C'] = array( 'aakin at yandex.ru' => array( // 89.149.206.225(*.internetserviceteam.com) by Baer '.entirestar.com', + '.joppperl.info', + '.onlinedrugsdirect.com', + '.pilkazen.info', '.superbuycheap.com', + '.supersmartdrugs.com', + '.thecheappillspharmacy.com', '.topdircet.com', ), 'newblog9 at gmail.com' => array( // by jiuhatu kou @@ -5328,6 +5371,8 @@ $blocklist['C'] = array( '.wifuj.com', '.xijyt.com', '.zuqyn.com', + + '.mosugy.com', ), 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru '.hitsearching.info', @@ -5342,6 +5387,8 @@ $blocklist['C'] = array( // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net) '.ligiwa.com', + + '.mubeho.com', ), 'ice--man at mail.ru related' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru @@ -5508,7 +5555,7 @@ $blocklist['C'] = array( '.wotyqo.cn', '.xudoli.cn', - // entretov-28 at ftunez.org + // by entretov-28 at ftunez.org '.xevavuv.cn', // 66.232.120.113(*snip*) // by entretov-37 at ftunez.org @@ -5548,6 +5595,9 @@ $blocklist['C'] = array( '.qiwysu.cn', '.tutysy.cn', + // by oker-74 at ftunez.org + '.navufol.cn', + // by oker-97 at ftunez.org '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com) '.mesyvuc.cn', // 66.232.120.111(*snip*) @@ -5695,6 +5745,8 @@ $blocklist['C'] = array( // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202) '.pufeqa.com', + + '.xehymi.com', ), 'niichka at hotmail.com' => array( // 66.232.113.44, the same approach and IP of clickx at bk.ru @@ -5743,6 +5795,8 @@ $blocklist['C'] = array( // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info '.new-greece-travel.com', '.peraonline.info', + + '.barkman.cn', ), 'aofa at vip.163.com' => array( @@ -5995,6 +6049,7 @@ $blocklist['C'] = array( '.govnosaklo.info', '.muflon.info', '.termitnik.info', + '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..) ), '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru) '.acronis-true-image.info', @@ -6097,17 +6152,24 @@ $blocklist['C'] = array( '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript '.ringtonecooler.com', // 217.11.233.34 ), - 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn) - // 220.166.64.44 + 'dfym at dfym.cn' => array( + // ANI, JavaScript, iframe + + // 220.166.64.44 by chen jinian (dfym at dfym.cn) '.okwit.com', '.sakerver.com', '.motewiki.net', - '.8568985.com', // 61.139.126.10 ns *.myhostadmin.net - - // 61.139.126.47, ns *.myhostadmin.net + '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net + + '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net + + // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net + '.bbtv-chat.com', + '.ketubatle.com', '.playonlanei.com', '.rmtfcne.com', + ), 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com) '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net) @@ -6324,6 +6386,20 @@ $blocklist['C'] = array( '.xjvbunksa.cn', // 217.20.112.102(*snip*) // by roschem at sedns.info '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent) + // by op at sedns.info + '.bumfn.cn', + '.csmlu.cn', + '.epcwi.cn', + '.krwzn.cn', + '.lkvcp.cn', + '.mvmkh.cn', + '.nwpeg.cn', + '.rnqol.cn', + '.tyuaf.cn', + '.ucysa.cn', + '.vhyom.cn', + '.wtstu.cn', + '.zslxr.cn', ), 'gilvcta sy jilbertsbram.com' => array( // 206.53.51.126 @@ -6543,19 +6619,47 @@ $blocklist['C'] = array( '.tonoscelular.info', '.tonosmotorola.info', ), - '89.149.208.23' => array( + 'Anderson at extra.by' => array( + // Encoded JavaScript + + // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info + '.4cat.info', // by Anderson at extra.by, ns *.9upp.info + '.6dir.info', + '.8dir.info', + '.9dir.info', + '.2pro.info', + '.5pro.info', // by Anderson at extra.by, ns *.9upp.info + '.6pro.info', + '.7pro.info', + '.8pro.info', + '.9pro.info', + '.5sms.info', + '.6sms.info', + '.8sms.info', + '.9sms.info', + '.1upp.info', + '.2upp.info', + '.3upp.info', + '.4upp.info', + '.5upp.info', + '.6upp.info', + '.7upp.info', + '.8upp.info', + '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info + '.2vip.info', // by Anderson at extra.by + '.4vip.info', + '.5vip.info', + '.6vip.info', + '.7vip.info', + '.8vip.info', // ns *.9upp.info + '.9vip.info', + // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info '.w3rar.info', '.w3sex.info', '.w3zip.info', '.w3in.info', '.w3out.info', - - // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript - '.2vip.info', - '.4cat.info', - '.8vip.info', - '.9upp.info', ), 'zorkin87 at mail.ru' => array( // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com) @@ -6590,6 +6694,87 @@ $blocklist['C'] = array( '.lopieur1.com', // Not match but used '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com ), + 'info at cash4wm.biz related' => array( + // 84.16.233.12(*.internetserviceteam.com) + '.newsblogforu.com', + + // 84.16.235.141() + '.informator4you.com', + + // 84.16.240.68(*.internetserviceteam.com) + '.absolute-best-site.com', + '.new-blog-for-you.com', + + // 84.16.240.69(*.internetserviceteam.com) + '.best-sport-blog.com', + '.big-internet-site.com', + '.brendsite.com', + '.my-news-blog.com', + + // 84.16.242.123(*.internetserviceteam.com) + '.best-news-blog.com', + '.site-with-content.com', + + // The same method with info at cash4wm.biz + '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com), + '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com) + '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent) + '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..) + '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn + '.bloginfo4u.info', // 89.149.247.25 + ), + 'kerjy at yahoo.com' => array( + '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com + '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu + '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com + '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com + '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com + ), + 'vme at hotmail.ru' => array( + '.seoblack.net', // 216.195.33.112(non-exsistent) + '.seoblack.biz', // 216.195.33.113(non-exsistent) + ), + 'john at hellomyns.info' => array( + '.cuhdw.cn', // 217.20.113.27, / nothing + '.byouz.cn', // 89.149.247.24, / nothing + '.idghc.cn', + '.inxrj.cn', + '.jqzdf.cn', + '.vsxej.cn', + '.wkgnr.cn', + ), + '.CN spam payload' => array( + '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com + '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com + '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net + '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com + '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com + '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn + '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com + '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com + '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com + '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn + ), + 'Time2ns.info' => array( + // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58) + '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info + '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info + '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found + ), + 'Ilovemyns.info' => array( + // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info + ), + 'Freehostdns.info' => array( + // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private + '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info + '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info + ), + 'Newns4me.info' => array( + // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public + '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info + ), // C-2: Lonely domains (buddies not found yet) '.0721-4404.com', @@ -6602,6 +6787,7 @@ $blocklist['C'] = array( '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com) '.0annie.info', '.6i6.de', + '.77toperrwuter1.info', // by Roman '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript '.angioco.com', // 62.37.112.100, gamble '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com) @@ -6622,20 +6808,26 @@ $blocklist['C'] = array( '.auto-car-cheap.org', '.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site '.baurish.info', + '.bernardtomic21.info', // by filboj at hotmail.com '.bestop.name', '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru '.bestshopfinder.info', '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com + '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru) + '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au '.capital2u.info', // by Delbert.A.Henry at dodgeit.com '.casa-olympus.com', // "UcoZ WEB-SERVICES" + '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp '.catkittenmagazines.org', // 87.118.97.117 + '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com '.chatwalker.com', // 124.32.230.65 '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com '.covertarena.co.uk', // by Wayne Huxtable '.d999.info', // by Peter Vayner (peter.vayner at inbox.ru) + '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl '.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com @@ -6643,6 +6835,7 @@ $blocklist['C'] = array( '.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank '.drug-shop.us', // by Alexandr (matrixpro at mail.ru) '.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com + '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com '.easyshopusa.com', // by riter (riter at nm.ru) '.edjuego.com', // 85.92.70.253(non-existent), gamble @@ -6663,6 +6856,7 @@ $blocklist['C'] = array( '.freehost5.com', // 75.126.32.184(kosmohost.net), words only '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com) '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru) + '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79) '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com) '.game4egold.com', // by Filus Saifullin (ebay at soft-script.com) '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com) @@ -6686,6 +6880,7 @@ $blocklist['C'] = array( '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com) '.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp '.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info) + '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz '.infradoc.com', '.investorvillage.com', // by natalija puchkova (internet at internet.lv) '.ismarket.com', // Google-hiding. intercage.com related IP @@ -6693,9 +6888,11 @@ $blocklist['C'] = array( '.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru) '.itsexosit.net', '.itxxxit.net', + '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection '.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca) '.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet '.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript + '.jsyuanyang.com', // 58.211.0.23(non-existing) '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript '.kingtools.de', '.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252 @@ -6704,6 +6901,7 @@ $blocklist['C'] = array( '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript '.link-keeper.net', // 210.172.108.236 (257.xrea.com) '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com) + '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm) '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank @@ -6751,7 +6949,10 @@ $blocklist['C'] = array( '.rigame.info', // by debra_jordan07 at yahoo.com '.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt '.roin.info', // by Evgenius (roinse at yandex.ru) + '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) + '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru '.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com) + '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com '.searchadv.com', // by Jaan Randolph (searchadv at gmail.com) '.seek-www.com', // by Adam Smit (pingpong at mail.md) '.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com @@ -6812,23 +7013,6 @@ $blocklist['C'] = array( '.zyguo.info', // ns globoxhost.net '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com) - '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200 -> www.omni-forums.net) - '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com) - - '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) - - // The same approach of 'acua at mail.ru' - '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found - '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com) - '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info - '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info - '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info - '.lxwxjzpiy.cn', // TODO: - '.qyxswynd.cn', // TODO: - '.ugivorm.cn', // TODO: - '.uxmrscgdi.cn', // TODO: - - '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz // C-3: Not classifiable (information wanted) //