X-Git-Url: http://git.osdn.net/view?p=pukiwiki%2Fpukiwiki_sandbox.git;a=blobdiff_plain;f=spam%2Fspam.ini.php;h=772ddc604106ca605c79750156d634fbd479290c;hp=adda51bb6ab24bbdf5790aabe96ea7a569dc4440;hb=b0cba496ceb4f866f4352e40c9d1ed2ff0ec95a5;hpb=1fbe135f76ce8bf6e5f738d14f7b1594bb6b39e1 diff --git a/spam/spam.ini.php b/spam/spam.ini.php index adda51b..772ddc6 100644 --- a/spam/spam.ini.php +++ b/spam/spam.ini.php @@ -1,5 +1,5 @@ FALSE, - 'A-1' => TRUE, - //'A-2' => TRUE, - 'B-1' => TRUE, - 'B-2' => TRUE, - 'C' => TRUE, - //'D' => TRUE, - 'E' => TRUE, - 'Z' => TRUE, +// 'official/dev' => FALSE, ); +// 'list': Normal list +$blocklist['list'] = array( + 'A-1' => TRUE, // General redirection services + //'A-2' => TRUE, // Dynamic DNS, Dynamic IP services, ... + 'B-1' => TRUE, // Web N.M spaces + 'B-2' => TRUE, // Jacked contents, something implanted + 'C' => TRUE, // Exclusive spam domains + //'D' => TRUE, // "Third party in good faith"s + 'E' => TRUE, // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ... + 'Z' => TRUE, // Yours +); -// ---- -$blocklist['goodhost'] = array( - // Sample setting of ignorance list +// -------------------------------------------------- +// Ignorance list +$blocklist['goodhost'] = array( 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#', +); +$blocklist['official/dev'] = array( // PukiWiki-official/dev specific - //'.logue.tk', // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01) - //'.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) - //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk - //'emasaka.blog65.fc2.com', // Text-to-Impress converter - //'ifastnet.com', // Server hosting - //'threefortune.ifastnet.com', // Server hosting - - // Yours - //'' - //'' - //'' - + 'pukiwiki.sourceforge.jp', + 'pukiwiki.org', // Temporary + '.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) + '.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk + 'emasaka.blog65.fc2.com', // Text-to-Impress converter + 'ifastnet.com', // Server hosting + 'threefortune.ifastnet.com', // Server hosting + 'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker + 'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer ); + +// -------------------------------------------------- // A: Sample setting of // Existing URI redirection or masking services @@ -90,6 +98,10 @@ $blocklist['A-1'] = array( // smcurl.com // "Idiots were using smcURL to shrink URLs and // send them out via spam." + // symy.jp + // "One or more users are using our URL redirect + // service for spam/botnet. + // So we closed this service." // tinyclick.com // "...stop offering it's free services because // too many people were taking advantage of it" @@ -132,7 +144,7 @@ $blocklist['A-1'] = array( '32url.com', '.3dg.de', '*.4bb.ru', - 'big5.51job.com', + 'big5.51job.com', ///gate/big5/ '5jp.net', '.6url.com', '*.6x.to', @@ -163,7 +175,9 @@ $blocklist['A-1'] = array( '*.ovp.pl', '*.6-6-6.pl', ), + 'babelfish.altavista.com', ///babelfish/trurl_pagecontent 'amoo.org', + 'web.archive.org', ///web/2 'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net 'jmp2.net', '2me.tw', @@ -178,10 +192,13 @@ $blocklist['A-1'] = array( 'athomebiz.com', 'aukcje1.pl', 'beam.to', + '*.bebo.com', 'beermapping.com', 'besturl.in', + 'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com 'biglnk.com', 'bingr.com', + 'bit.ly', 'bittyurl.com', '*.bizz.cc', '*.blo.pl', @@ -215,7 +232,7 @@ $blocklist['A-1'] = array( 'url.chefhost.com', '*.chicappa.jp', 'chilicity.com', - 'big5.china.com', + 'big5.china.com', ///gate/big5/ 'chopurl.com', 'christopherleestreet.com', 'cintcm.com', @@ -239,6 +256,7 @@ $blocklist['A-1'] = array( 'hardcore-porn.de', 'maschinen-bluten-nicht.de', ), + 'copyme.org', // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com 'cutalink.com', '*.da.cx', '*.da.ru', @@ -266,7 +284,20 @@ $blocklist['A-1'] = array( '*.dynu.ca', 'dwarf.name', '*.eadf.com', - '*.easyurl.net', + 'easyURL.net' => array( + '*.easyurl.net', + '.goshrink.com', + 'ushrink.com', + ), + 'easyurl.jp', // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com, + // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45 + // This service seems to be opened at 2007/08/23 with "beta" sign. + // easyurl.jp clearly point ascentnet.co.jp's 10 local rules: + // "Keep continuing to seek originality and contribute it to local, + // get/grow niche brands (in local), believe (local) people knows the answer, + // observe (local) rule, create nothing to infringe (local) rule, keep 70% of + // engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html + // I'm so much impressed of the situation around this imported one today. 'elfurl.com', 'eny.pl', 'eTechFocus LLC' => array( // by eTechFocus LLC (thomask at etechfocus.com) @@ -312,7 +343,6 @@ $blocklist['A-1'] = array( '*.fnbi.jp', 'forgeturl.com', '*.free.bg', - '*.freecities.com', 'Freeservers.com' => array( // United Online Web Services, Inc. '*.4mg.com', '*.4t.com', @@ -395,7 +425,6 @@ $blocklist['A-1'] = array( '*.zip.io', ), 'funkurl.com', // by Leonard Lyle (len at ballandchain.net) - '*.fw.bz', '*.fx.to', 'fyad.org', 'fype.com', @@ -412,10 +441,12 @@ $blocklist['A-1'] = array( '*.globalredirect.com', 'gnu.vu', '*.go.cc', + //'Google.com' => array( + // google.com/translate_c\?u=(?:http://)? + //), 'goonlink.com', '.gourl.org', '.greatitem.com', - '*.greatnow.com', // by Per Olof Sandholm (peo at peakspace.com) 'gzurl.com', 'url.grillsportverein.de', 'Harudake.net' => array('*.hyu.jp'), @@ -452,12 +483,17 @@ $blocklist['A-1'] = array( '*.zonehere.com', ), 'hotshorturl.com', + 'hotwebcomics.com', ///search_redirect.php 'hurl.to', '*.hux.de', '*.i89.us', 'iat.net', // 74.208.58.130 by Tony Carter - 'ibm.com', // Correct the /links + 'ibm.com', ///links (Correct it) '*.iceglow.com', + 'internetadresi.com' => array ( + 'rxbuycheap.com', + 'rxcheapwestern.com', + ), 'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info) 'Ideas para Nuevos Mercados SL' => array( // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com) @@ -549,6 +585,7 @@ $blocklist['A-1'] = array( 'ie.to', 'igoto.co.uk', 'ilook.tw', + 'indianpad.com', ///view/ 'iNetwork.co.il' => array( 'inetwork.co.il', // by NiL HeMo (exe at bezeqint.net) '.up2.co.il', // inetwork.co.il related, not classifiable, by roey blumshtein (roeyb76 at 017.net.il) @@ -581,6 +618,7 @@ $blocklist['A-1'] = array( '*.isfun.net', '*.tux.nu', ), + '*.jed.pl', 'JeremyJohnstone.com' => array('url.vg'), 'jemurl.com', 'jggj.net', @@ -823,6 +861,7 @@ $blocklist['A-1'] = array( 'linkezy.com', 'linkfrog.net', 'linkook.com', + 'linkyme.com', 'linkzip.net', 'lispurl.com', 'lnk.in', @@ -846,7 +885,7 @@ $blocklist['A-1'] = array( 'miniurl.pl', 'mixi.bz', 'mo-v.jp', - 'MoldData.md' => array( + 'MoldData.md' => array( // Note: Some parts of '.md' ccTLD '.com.md', '.co.md', '.org.md', @@ -878,6 +917,7 @@ $blocklist['A-1'] = array( 'palurl.com', '*.paulding.net', 'phpfaber.org', + 'pygmyurl.com', 'pnope.com', 'prettylink.com', 'PROXID.net' => array( // also xRelay.net @@ -888,11 +928,15 @@ $blocklist['A-1'] = array( '*.site.tc', '*.societe.st', ), + 'qqa.jp', 'qrl.jp', 'qurl.net', 'qwer.org', 'readthisurl.com', // 67.15.58.36(win2k3.tuserver.com) by Zhe Hong Lim (zhehonglim at gmail.com) 'radiobase.net', + 'Rakuten.co.jp' => array( + 'pt.afl.rakuten.co.jp', ///c/ + ), 'RedirectFree.com' => array( '*.red.tc', '*.redirectfree.com', @@ -906,10 +950,12 @@ $blocklist['A-1'] = array( 'rio.st', 'rlink.org', '*.rmcinfo.fr', + 'roo.to', // Seems closed, says "bye-bye" 'rubyurl.com', '*.runboard.com', 'runurl.com', 's-url.net', + 's1u.net', 'SG5.co.uk' => array( '*.sg5.co.uk', '*.sg5.info', @@ -923,6 +969,7 @@ $blocklist['A-1'] = array( '*.shim.net', '*.v9z.com', ), + 'big5.shippingchina.com', 'shorl.com', 'shortenurl.com', 'shorterlink.com', @@ -1011,7 +1058,6 @@ $blocklist['A-1'] = array( 'SURL.DK' => array('surl.dk'), // main page is: s-url.dk 'surl.se', 'surl.ws', - 'symy.jp', 'tdurl.com', 'tighturl.com', 'tiniuri.com', @@ -1037,10 +1083,10 @@ $blocklist['A-1'] = array( '*.toolbot.com', '*.torontonian.com', 'trimurl.com', - 'ttu.cc', + //'ttu.cc', // Seems closed 'turl.jp', '*.tz4.com', - 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster@gmail.com) = u.to master + 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master '*.1.to', '*.4.to', '*.5.to', @@ -1069,6 +1115,7 @@ $blocklist['A-1'] = array( '*.ever.to', '*.mini.to', ), + 'u-go.to', 'uchinoko.in', 'Ulimit.com' => array( '*.be.tf', @@ -1098,6 +1145,7 @@ $blocklist['A-1'] = array( '*.unixlover.com', '*.zik.mu', ), + 'urltea.com', '*.uni.cc', 'UNONIC.com' => array( '*.at.tf', // AlpenNIC @@ -1271,6 +1319,7 @@ $blocklist['A-1'] = array( ), 'venturenetworking.com', // by Katharine Barbieri (domains at spyforce.com) 'vgo2.com', + 'Voila.fr' => array('r.voila.fr'), // Fix it 'w3t.org', 'wapurl.co.uk', 'Wb.st' => array( @@ -1323,7 +1372,7 @@ $blocklist['A-1'] = array( '*.i50.de', '*.x50.us', ), - 'big5.xinhuanet.com', + 'big5.xinhuanet.com', ///gate/big5/ 'xhref.com', 'Xn6.net' => array( '*.9ax.net', @@ -1347,6 +1396,7 @@ $blocklist['A-1'] = array( 'zaable.com', 'zapurl.com', 'zarr.co.uk', + 'zerourl.com', 'ZeroWeb.org' => array( '*.80t.com', '*.firez.org', @@ -1365,6 +1415,7 @@ $blocklist['A-1'] = array( '*.zwap.to', ); +// -------------------------------------------------- $blocklist['A-2'] = array( @@ -1393,6 +1444,7 @@ $blocklist['A-2'] = array( ), '*.dtdns.net', // by jscott at sceiron.com '*.dynu.com', + '*.dynup.net', '*.fdns.net', 'J-Speed.net' => array( '*.bne.jp', @@ -1425,6 +1477,14 @@ $blocklist['A-2'] = array( '*.sytes.net', '*.zapto.org', ), + '*.opendns.be', + 'Yi.org' => array( // by dns at whyi.org + '*.yi.org', // 64.15.155.86(susicivus.crackerjack.net) + + // 72.55.129.46(redirect.yi.org) + '*.whyi.org', + '*.weedns.com', + ), '*.zenno.info', '.cm', // 'Cameroon' ccTLD, sometimes used as typo of '.com', // and all non-recorded domains redirect to 'agoga.com' now @@ -1432,6 +1492,7 @@ $blocklist['A-2'] = array( // http://agoga.com/aboutus.html ); +// -------------------------------------------------- // B: Sample setting of: // Jacked (taken advantage of) and cleaning-less sites @@ -1441,7 +1502,7 @@ $blocklist['A-2'] = array( $blocklist['B-1'] = array( - // B-1: Web spaces + // B-1: Web N.M spaces (N > 0, M >= 0) // // Messages from forerunners: // activefreehost.com @@ -1453,40 +1514,98 @@ $blocklist['B-1'] = array( // with server abuse, Spam advertisement and // fraud." // + '*.0000host.com', // 68.178.200.154, ns *.3-hosting.net + '*.007ihost.com', // 195.242.99.199(s199.softwarelibre.nl) + '*.007webpro.com', // by richord at ientry.com + '*.00bp.com', // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com + '*.0buckhost.com', // by tycho at e-lab.nl '0Catch.com related' => array( - '*.00freehost.com', // by David Mccall (superjeeves at yahoo.com), ns *.0catch.com - '*.0catch.com', // by Sam Parkinson (sam at 0catch.com), also zerocatch.com - '*.100freemb.com', // by Danny Ashworth (dan at 0catch.com), ns *.0catch.com - '*.1sweethost.com', // 209.63.57.10(www1.0catch.com) by whois at bluehost.com, ns *.0catch.com - '*.envy.nu', // by Dave Ellis (dave at larryblackandassoc.com), ns *.0catch.com - '*.galaxy99.net', // by Bagchi.Org (admin at bagchi.org), ns *.0catch.com - '*.zomi.net', // by sianpu at gmail.com, ns *.0catch.com - ), - '*.1asphost.com', // by domains at dotster.com - '100 Best Inc' => array( // by 100 Best Inc (info at 100best.com) - '*.0-st.com', - '*.150m.com', // by 100 Best, Inc., ns *.0catch.com + '*.0catch.com', // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com + + // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com + '*.100megsfree5.com', + + // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com + '*.100freemb.com', // by Danny Ashworth + '*.easyfreehosting.com', + '*.exactpages.com', + '*.fcpages.com', + '*.wtcsites.com', + + // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com + '*.741.com', + '*.freecities.com', + '*.freesite.org', + '*.freewebpages.org', + '*.freewebsitehosting.com', + '*.jvl.com', + + // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com + '*.freespaceusa.com', + '*.usafreespace.com', + + // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com + '*.dex1.com', + '*.questh.com', + + // 209.63.57.10(*snip*), ns *.0catch.com + '*.00freehost.com', // by David Mccall (superjeeves at yahoo.com) + '*.012webpages.com', // by support at 0catch.com + '*.150m.com', + '*.1sweethost.com', // by whois at bluehost.com + '*.250m.com', // by jason at fahlman.net + '*.9cy.com', // by paulw0t at gmail.com + '*.angelcities.com', // by cliff at eccentrix.com + '*.arcadepages.com', // by admin at site-see.com + '*.e-host.ws', // by dns at jomax.net + '*.envy.nu', // by Dave Ellis (dave at larryblackandassoc.com) + '*.fw.bz', // by ben at kuehl.as + '*.freewebportal.com', // by mmouneeb at hotmail.com + '*.g0g.net', // by domains at seem.co.uk + '*.galaxy99.net', // by admin at bagchi.org + '*.greatnow.com', // by peo at peakspace.com + '*.hautlynx.com', // by hlewis28 at juno.com + '*.ibnsites.com', // by cmrojas at mail.com + '*.just-allen.com', // by extremehype at msn.com + '*.kogaryu.com', // by angelguerra at msn.com + '*.maddsites.com', // by big.tone at maddhattentertainment.com + '*.mindnmagick.com', // by tim at mind-n-magick.com + '*.s4u.org', // by sung_wei_wang at yahoo.com + '*.s-enterprize.com', + '*.servetown.com', // by jonahbliss at earthlink.net + '*.stinkdot.org', // by bluedot at ziplip.com + '*.virtue.nu', // by dave at larryblackandassoc.com + '*.zomi.net', // by sianpu at gmail.com + ), + '*.1asphost.com', // 216.55.133.18(216-55-133-18.dedicated.abac.net) by domains at dotster.com + '100 Best Inc' => array( + // by 100 Best Inc (info at 100best.com) + + // 66.235.204.7(h204-007.bluefishhosting.com) '*.2-hi.com', '*.20fr.com', '*.20ii.com', '*.20is.com', '*.20it.com', '*.20m.com', // by jlee at 100bestinc.com - '*.20me.com', '*.20to.com', - '*.250m.com', // by Jason Fahlman (jason at fahlman.net), ns *.0catch.com '*.2u-2.com', '*.3-st.com', '*.fws1.com', '*.fw-2.com', '*.inc5.com', - '*.maddsites.com', // by Antonio Brice (big.tone at maddhattentertainment.com), ns *.0catch.com '*.on-4.com', '*.st-3.com', '*.st20.com', '*.up-a.com', + + // 216.40.33.252(www-pd.mdnsservice.com) + '*.0-st.com', + '*.20me.com', ), '*.100foros.com', + '*.101freehost.com', + '*.12gbfree.com', // 75.126.176.194 by ashphama at yahoo.com '20six Weblog Services' => array( '.20six.nl', // by 20six weblog services (postmaster at 20six.nl) '.20six.co.uk', @@ -1495,22 +1614,126 @@ $blocklist['B-1'] = array( 'myblog.es', ), '*.250free.com', // by Brian Salisbury (domains at 250host.com) + '*.275mb.com', // 204.15.10.144 by domains at febox.com + '2IP.com' => array( + // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com) + '*.2ip.jp', + '*.474.jp', + '*.consensus.jp', + '*.desyo.jp', + '*.dif.jp', + '*.pastels.jp', + '*.powerblogger.jp', + '*.vippers.jp', + '*.webpages.jp', + + // 205.209.97.56(non-existent) + '*.biografi.biz', + '*.biografi.info', + '*.biografi.org', + '*.biografi.us', + '*.datadiri.biz', + '*.datadiri.cc', + '*.datadiri.com', + '*.datadiri.info', + '*.datadiri.net', + '*.datadiri.org', + '*.datadiri.tv', + '*.datadiri.us', + '*.indo.bz', + '*.indo.cc', + '*.profil.bz', + '*.profil.cc', + '*.profil.cn', + '*.profil.in', + '*.profil.tv', + + // 205.209.101.47(non-existent) + '*.about.tc', + '*.about.vg', + '*.aboutus.gs', + '*.aboutus.ms', + '*.aboutus.tc', + '*.aboutus.vg', + '*.band.io', + '*.beijing.am', + '*.blogs.io', + '*.boke.am', + '*.clan.io', + '*.ecv.gs', + '*.ecv.ms', + '*.ecv.vg', + '*.freekong.cn', + '*.go2net.ws', + '*.hello.cn.com', + '*.hello.io', + '*.hits.io', + '*.hostingweb.us', + '*.hub.io', + '*.ide.am', + '*.inc.io', + '*.incn.in', + '*.indo.gs', + '*.indo.ms', + '*.indo.tc', + '*.indo.vg', + '*.infinitehosting.net', + '*.infinites.net', + '*.jushige.cn', + '*.jushige.com', + '*.kongjian.in', + '*.lan.io', + '*.llc.nu', + '*.maimai.in', + '*.max.io', + '*.musician.io', + '*.mycv.bz', + '*.mycv.nu', + '*.mycv.tv', + '*.myweb.io', + '*.ourprofile.biz', + '*.ourprofile.info', + '*.ourprofile.net', + '*.ourprofile.org', + '*.ourprofile.us', + '*.profil.gs', + '*.profil.ms', + '*.profil.tc', + '*.qiye.in', + '*.site.io', + '*.wan.io', + '*.web-cam.ws', + '*.webs.io', + '*.xixu.cc', + '*.zaici.am', + '*.zip.io', + '*.zuzhi.in', + + '*.profil.vg', // 205.209.101.67(non-existent) + '*.ecv.tc', // 208.73.212.12(sp19.information.com) + //'*.about.gs', // No record + //'*.eprofile.us', // non-existent + ), '2Page.de' => array( '.dreipage.de', '.2page.de', ), '*.3-hosting.net', - '*.30mb.com', // by 30MB Online (63681 at whois.gkg.net) - '*.50megs.com', // by hostmaster at northsky.com - '*.50webs.com', // by LiquidNet Ltd. (support at propersupport.com), redirect to mpage.jp - '*.5gbfree.com', - '*.789mb.com', // by Nicholas Long (nicolas.g.long at gmail.com) - '*.9999mb.com', // by allan Jerman (prodigy-airsoft at cox.net) + '*.5gbfree.com', // 75.126.153.58 by rob at roblist.co.uk + '*.789mb.com', // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com) + '*.8000web.com', // 75.126.189.45 + '*.9999mb.com', // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net) 'aeonity.com', // by Emocium Solutions (creativenospam at gmail.com) + 'Ai.NET' => array( + '*.100free.com', // 205.134.188.54(development54.ai.net -> Non-existent) by support at ai.net + '*.ai.net', // 205.134.163.4(aries.ai.net) by support at ai.net + ), '*.aimoo.com', '*.alkablog.com', '*.alluwant.de', '.amkbb.com', + 'answerbag.com', // 8.5.0.128 + 'anyboard.net', 'AOL.com' => // http://about.aol.com/international_services '/^(?:chezmoi|home|homes|hometown|journals|user)\.' . '(?:aol|americaonline)\.' . @@ -1518,7 +1741,7 @@ $blocklist['B-1'] = array( // Rough but works 'Apple.com' => array('idisk.mac.com'), '*.askfaq.org', - '*.atfreeforum.com', + '.atfreeforum.com', // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10) '*.atwiki.com', // by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp) '*.asphost4free.com', 'basenow.com', @@ -1527,17 +1750,26 @@ $blocklist['B-1'] = array( '.freehostpro.com', // 64.22.112.226 ), '*.bb-fr.com', + '.bbfast.com', // 72.52.135.174 by blogmaster2003 at gmail.com '*.beeplog.com', + 'beepworld.it', 'bestfreeforums.com', + 'bestvotexxx.com', 'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD + 'blinklist.com', 'Blog.com' => array( + // by admin.domains at co.blog.com '*.blog.com', - '*.blogandorra.com', // by admin.domains at co.blog.com - '*.blogangola.com', // by admin.domains at co.blog.com + '*.blogandorra.com', + '*.blogangola.com', + '*.blogaruba.com', + '*.blogaustria.at', ), '*.blog.com.es', '*.blog.hr', + '*.blog4ever.com', '*.blog-fx.com', + '*.blogbeee.com', 'blogas.lt', 'blogbud.com', '*.blogburkinafaso.com', @@ -1554,11 +1786,13 @@ $blocklist['B-1'] = array( '*.bloguj.eu', 'bloguitos.com', 'blogosfer.com', + '*.blogse.nl', // 85.17.41.16(srv1.blogse.nl) by ruben at mplay.nl '*.blogslive.net', - '*.blogspot.com', // by Google '*.blogsome.com', // by Roger Galligan (roger.galligan at browseireland.com) '*.blogstream.com', 'blogyaz.com', + 'bloodee.com', + 'bluedot.us', // 209.245.176.23 by mohitsriv at yahoo.com 'board-4you.de', 'boboard.com', // 66.29.54.116 by Excelsoft (shabiba at e4t.net) '*.boardhost.com', @@ -1566,42 +1800,57 @@ $blocklist['B-1'] = array( '*.bravenet.com', '*.bravehost.com', ), - '*.by.ru', // nthost.ru related? + '*.by.ru', // 217.16.29.50 by ag at near.ru, nthost.ru related? 'C2k.jp' => array( - '.081.in', // by Makoto Okuse (webmaster at 2style.net) - '.2st.jp', // by 2style, ns *.click2k.net, *.2style.net - '.2style.in', // by Makoto Okuse (webmaster at 2style.net) + // by Makoto Okuse (webmaster at 2style.net) + '.081.in', + '.2style.in', + '.bian.in', + '.curl.in', + '.ennui.in', + '.jinx.in', + '.loose.in', + '.mist.in', + '.muu.in', + '.naive.in', + '.panic.in', + '.slum.in', + + // by 2style, ns *.click2k.net, *.2style.net + '.2st.jp', + '.betty.jp', + '.cabin.jp', + '.cult.jp', + '.mippi.jp', + '.purety.jp', + '.rapa.jp', + '.side-b.jp', + '.web-box.jp', + '.yea.jp', + + // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net + '.2style.net', + '.click2k.net', + '.houka5.com', + + // by click2k, ns *.click2k.net, *.2style.net + '.psyco.jp', + '.sweety.jp', + '.2style.jp', // by click2k, ns *.2style.jp, *.2style.net - '.2style.net', // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.jp, *.2style.net - '.betty.jp', // by 2style, ns *.click2k.net, *.2style.net - '.bian.in', // by Makoto Okuse (webmaster at 2style.net) - '.cabin.jp', // by 2style, ns *.click2k.net, *.2style.net - '.click2k.net', // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net - '.cult.jp', // by 2style, ns *.click2k.net, *.2style.net - '.curl.in', // by Makoto Okuse (webmaster at 2style.net) '.cute.cd', // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net - '.ennui.in', // by Makoto Okuse (webmaster at 2style.net) - '.houka5.com', // by makoto okuse (webmaster at 2style.net), ns *.click2k.net, *.2style.net - '.jinx.in', // by Makoto Okuse (webmaster at 2style.net) - '.loose.in', // by Makoto Okuse (webmaster at 2style.net) - '.mippi.jp', // by 2style, ns *.click2k.net, *.2style.net - '.mist.in', // by Makoto Okuse (webmaster at 2style.net) - '.muu.in', // by Makoto Okuse (webmaster at 2style.net) - '.naive.in', // by Makoto Okuse (webmaster at 2style.net) - '.panic.in', // by Makoto Okuse (webmaster at 2style.net) - '.psyco.jp', // by click2k, ns *.click2k.net, *.2style.net - '.purety.jp', // by 2style, ns *.click2k.net, *.2style.net - '.rapa.jp', // by 2style, ns *.click2k.net, *.2style.net - '.side-b.jp', // by 2style, ns *.click2k.net, *.2style.net - '.slum.in', // by Makoto Okuse (webmaster at 2style.net) - '.sweety.jp', // by click2k, ns *.click2k.net, *.2style.net - '.web-box.jp', // by 2style, ns *.click2k.net, *.2style.net - '.yea.jp', // by 2style, ns *.click2k.net, *.2style.net ), + '*.canalblog.com', // 195.137.184.103 by dns-admin at pinacolaweb.com + '*.cdnhost.cn', // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html '*.chueca.com', + 'city-forum.com', + '*.clicdev.com', + '*.craigslist.org', 'concepts-mall.com', '*.conforums.com', // by Roger Sutton (rogersutton at cox.net) + 'connectedy.com', // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com 'counterhit.de', + '*.createblog.com', '*.createforum.net', '*.creatuforo.com', // by Desafio Internet S.L. (david at soluwol.com) '*.createmybb.com', @@ -1611,24 +1860,31 @@ $blocklist['B-1'] = array( ), 'dakrats.net', '*.dcswtech.com', + 'del.icio.us', '*.devil.it', - '*.dex1.com', '*.diaryland.com', + 'diigo.com', ///user/ + 'digg.com', + 'digstock.com', 'domains at galaxywave.net' => array( 'blogstation.net', '.phpbb-host.com', ), 'dotbb.be', '*.dox.hu', // dns at 1b.hu - '*.e-host.ws', // by dns at jomax.net, ns by 0catch.com '*.eadf.com', '*.eblog.com.au', '*.ekiwi.de', '*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com) '.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it) + '*.easyjournal.com', '*.ebloggy.com', 'enunblog.com', '*.epinoy.com', + '*.ez-sites.ws', + '*.ezbbforum.com', // 72.52.134.135 by blogmaster2003 at gmail.com + '*.fastsito.com', // 208.77.96.9 by info at top100italiana.com + '*.fathippohosting.com', // 208.101.3.192 'FC2.com' => array( 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR' // Many traps available: @@ -1646,19 +1902,656 @@ $blocklist['B-1'] = array( 'fingerprintmedia.com', '*.filelan.com', '*.fora.pl', + '*.forka.eu', '*.foren-city.de', 'foren-gratis.de', '*.foros.tv', + '*.forospace.com', 'foroswebgratis.com', '*.forum-on.de', '*.forum24.se', '*.forum5.com', // by Harry S (hsg944 at gmail.com) '.forum66.com', + 'Forumotion.com' => array( + '*.forumotion.com', // 75.126.156.15(s00.darkbb.com) + '*.forumactif.com', // 91.121.41.79 + '*.editboard.com', // 75.126.156.15 + '*.sosblog.com', // 74.86.25.140 + + // 75.126.156.15 Used: forumotion.com, forumactif.com, editboard.com + '*.0forum.biz', + '*.1forum.biz', + '*.1fr1.net', + '*.1talk.net', + '*.2forum.biz', + '*.3forum.biz', + '*.4forum.biz', + '*.4rumer.com', + '*.4rumer.net', + '*.4umer.com', + '*.4umer.net', + '*.5forum.biz', + '*.5forum.info', + '*.5forum.net', + '*.6forum.biz', + '*.6forum.info', + '*.77forum.com', + '*.7forum.biz', + '*.7forum.info', + '*.7forum.net', + '*.8forum.biz', + '*.8forum.info', + '*.8forum.net', + '*.9forum.biz', + '*.9forum.info', + '*.activebb.net', + '*.aforumfree.com', + '*.all-forum.net', + '*.all-up.com', + '*.alldiscussion.net', + '*.allgoo.net', + '*.allgoo.us', + '*.american-forum.net', + '*.americantalk.net', + '*.annuaire-forums.com', + '*.asiafreeforum.com', + '*.asianfreeforum.com', + '*.azureforum.com', + '*.azurforum.com', + '*.bestcheapforum.com', + '*.bestdiscussion.net', + '*.bestgoo.com', + '*.bestofforum.com', + '*.bestofforum.net', + '*.bestoforum.net', + '*.bforum.biz', + '*.big-forum.net', + '*.board-poster.com', + '*.board-realtors.com', + '*.boardonly.com', + '*.boardrealtors.net', + '*.boardsmessage.com', + '*.briceboard.com', + '*.bubblelol.com', + '*.buy-forum.com', + '*.buy-talk.com', + '*.buyforum.net', + '*.buygoo.net', + '*.buygoo.us', + '*.camelscrew.com', + '*.cheap-forum.com', + '*.cheapforum.net', + '*.chocoforum.com', + '*.chocoforum.net', + '*.clic-topic.com', + '*.clicboard.com', + '*.clictopic.com', + '*.clictopic.net', + '*.clictopics.com', + '*.clubdiscussion.net', + '*.coolbb.net', + '*.crazy4us.com', + '*.crazyfruits.net', + '*.createmyboard.com', + '*.crewcamel.com', + '*.cyberfreeforum.com', + '*.discutforum.com', + '*.discutfree.com', + '*.do-forum.com', + '*.do-goo.com', + '*.do-goo.net', + '*.do-talk.com', + '*.dodiscussion.com', + '*.dogoo.us', + '*.easydiscussion.net', + '*.easyforumlive.com', + '*.englishboard.net', + '*.englishboards.com', + '*.ephpbb.com', + '*.eraseboard.net', + '*.eraseboards.net', + '*.euro-talk.net', + '*.eurodiscussion.net', + '*.eurogoo.com', + '*.exchangesboard.com', + '*.exprimetoi.net', + '*.fairtopic.com', + '*.fforum.biz', + '*.fforumfree.com', + '*.first-forum.com', + '*.firstgoo.com', + '*.fororama.com', + '*.forum-2007.com', + '*.forum-actif.net', + '*.forum-free.biz', + '*.forum-free.org', + '*.forum-motion.com', + '*.forum0.biz', + '*.forum0.info', + '*.forum0.net', + '*.forum2.biz', + '*.forum3.biz', + '*.forum3.info', + '*.forum5.info', + '*.forum6.biz', + '*.forum6.info', + '*.forum7.biz', + '*.forum777.com', + '*.forum8.biz', + '*.forum9.biz', + '*.foruma.biz', + '*.forumactif.biz', + '*.forumactif.info', + '*.forumactif.name', + '*.forumactif.ws', + '*.forumaction.net', + '*.forumakers.com', + '*.forumandco.com', + '*.forumb.biz', + '*.forumc.biz', + '*.forumd.biz', + '*.forumdediscussions.com', + '*.forumdediscussions.net', + '*.forume.biz', + '*.forumeast.com', + '*.forumf.biz', + '*.forumfreek.com', + '*.forumfreez.com', + '*.forumg.biz', + '*.forumh.biz', + '*.forumh.net', + '*.forumhope.com', + '*.forumi.biz', + '*.forumice.net', + '*.foruminute.com', + '*.forumj.biz', + '*.forumj.net', + '*.forumjonction.com', + '*.forumk.biz', + '*.foruml.biz', + '*.forumm.biz', + '*.forummotion.com', + '*.forummotions.com', + '*.forumn.biz', + '*.forumn.net', + '*.forumo.biz', + '*.forumonline.biz', + '*.forumotions.com', + '*.forump.biz', + '*.forump.info', + '*.forumperso.com', + '*.forumpersos.com', + '*.forumplatinum.com', + '*.forumpro.fr', + '*.forumq.biz', + '*.forumr.biz', + '*.forumr.net', + '*.forumrama.com', + '*.forums-actifs.com', + '*.forums-actifs.net', + '*.forums1.net', + '*.forumsactifs.com', + '*.forumsactifs.net', + '*.forumsfree.org', + '*.forumsline.com', + '*.forumsmakers.com', + '*.forumsmotion.com', + '*.forumsmotions.com', + '*.forumt.biz', + '*.forumv.biz', + '*.forumvalue.com', + '*.forumw.biz', + '*.forumy.biz', + '*.free-boards.net', + '*.freediscussion.net', + '*.freediscussions.net', + '*.freeforum.me.uk', + '*.freeforumboard.net', + '*.freeforumfree.com', + '*.freevideotalk.com', + '*.frenchboard.com', + '*.fruitsandco.com', + '*.fullboards.com', + '*.fullsubject.com', + '*.fullsubject.net', + '*.get-forum.net', + '*.getdiscussion.com', + '*.getgoo.net', + '*.getgoo.us', + '*.gettalk.net', + '*.go-board.com', + '*.go-board.net', + '*.go-forum.net', + '*.go-ogler.com', + '*.gofreeforum.com', + '*.gogoo.us', + '*.goo-board.com', + '*.goo-boys.com', + '*.goo-dart.com', + '*.goo-dole.com', + '*.goo-done.com', + '*.gooboards.com', + '*.goodbb.net', + '*.goodearths.com', + '*.goodforum.net', + '*.goodoles.com', + '*.goodoolz.com', + '*.gooforum.com', + '*.gooforums.com', + '*.googoolz.com', + '*.great-forum.com', + '*.heavenforum.com', + '*.hforum.biz', + '*.high-forums.com', + '*.highbb.com', + '*.highforum.net', + '*.hightoxic.com', + '*.homediscussion.net', + '*.homegoo.com', + '*.hooxs.com', + '*.hot-me.com', + '*.hot4um.com', + '*.hotdiscussion.net', + '*.hotgoo.net', + '*.in-goo.com', + '*.in-goo.net', + '*.infodiscussion.net', + '*.ingoo.us', + '*.iowoi.com', + '*.jforum.biz', + '*.just-forum.net', + '*.justboard.net', + '*.justdiscussion.com', + '*.justforum.net', + '*.justgoo.com', + '*.keuf.net', + '*.lforum.biz', + '*.lifediscussion.net', + '*.lifeme.net', + '*.lightbb.com', + '*.logu2.com', + '*.longdomaine.com', + '*.lovediscussion.net', + '*.lowcostforum.com', + '*.make-free-forum.com', + '*.makeforumfree.com', + '*.makefreeforum.com', + '*.mam9.com', + '*.manageboard.com', + '*.max2forum.com', + '*.meabout.com', + '*.megabb.com', + '*.moncontact.com', + '*.moninter.net', + '*.motion-forum.net', + '*.motionforum.net', + '*.motionsforum.com', + '*.mrforum.net', + '*.msnboard.net', + '*.msnyou.com', + '*.my-free-board.com', + '*.my-free-boards.com', + '*.my-free-forum.com', + '*.my-free-forums.com', + '*.my-goo.com', + '*.my-goo.net', + '*.mydiscussionboard.com', + '*.myfreeboard.net', + '*.mygoo.org', + '*.myrealboard.com', + '*.netboarder.com', + '*.netdiscussion.net', + '*.netgoo.org', + '*.new-forum.net', + '*.newdiscussion.net', + '*.newgoo.net', + '*.nforum.biz', + '*.nice-album.com', + '*.nice-board.biz', + '*.nice-board.com', + '*.nice-board.net', + '*.nice-boards.com', + '*.nice-boards.net', + '*.nice-forum.com', + '*.nice-forum.net', + '*.nice-forums.com', + '*.nice-forums.net', + '*.nice-gallery.net', + '*.nice-subject.com', + '*.nice-subjects.com', + '*.nice-theme.com', + '*.nice-topic.com', + '*.nice-topics.com', + '*.nicealbums.com', + '*.niceboard.biz', + '*.niceboard.net', + '*.niceboards.net', + '*.nicegalleries.net', + '*.nicesubject.com', + '*.nicesubjects.com', + '*.nicetopic.net', + '*.nicetopics.com', + '*.nightforum.net', + '*.nocost-forum.com', + '*.nofeeforum.com', + '*.one-forum.net', + '*.onediscussion.net', + '*.onegoo.us', + '*.onlinegoo.com', + '*.onlyquery.com', + '*.open-board.com', + '*.openu2.com', + '*.othersboards.com', + '*.own0.com', + '*.pforum.biz', + '*.phpbb9.com', + '*.phpbbtest.com', + '*.positifforum.com', + '*.postalboard.com', + '*.prodiscussion.net', + '*.progoo.us', + '*.pureforum.net', + '*.qforum.biz', + '*.quickbb.net', + '*.realbb.net', + '*.realfreeforum.com', + '*.realmsn.com', + '*.rforum.biz', + '*.road2us.com', + '*.roomforum.com', + '*.saveboard.com', + '*.screwcamel.com', + '*.screwcamels.com', + '*.sendboard.com', + '*.sephorum.com', + '*.sforum.biz', + '*.shootboard.com', + '*.shop-forum.net', + '*.shopsubject.com', + '*.simpleboard.net', + '*.site-forums.com', + '*.smileyforum.net', + '*.sos-forum.net', + '*.sos4um.com', + '*.sos4um.net', + '*.sosforum.net', + '*.speedyforum.com', + '*.stationforum.com', + '*.subject-expert.com', + '*.subject-line.com', + '*.subject-tracer.com', + '*.subjectchange.com', + '*.subjectdeals.com', + '*.subjectdebate.com', + '*.subjectdone.com', + '*.subjectonline.com', + '*.subjectschange.com', + '*.subjectsecrets.com', + '*.super-forum.net', + '*.talk-forums.com', + '*.team-forum.net', + '*.team-talk.net', + '*.teamconvention.com', + '*.teamgoo.net', + '*.teensboards.com', + '*.the-talk.net', + '*.the-up.com', + '*.thegoo.us', + '*.thinksubject.com', + '*.top-board.com', + '*.top-forum.net', + '*.top-me.com', + '*.top-talk.net', + '*.topdiscussion.com', + '*.topgoo.net', + '*.topic-board.com', + '*.topic-board.net', + '*.topic-debate.com', + '*.topic-ideas.com', + '*.topic-mail.com', + '*.topic-zone.com', + '*.topicboard.net', + '*.topicboards.com', + '*.topicmanager.com', + '*.topicsolutions.net', + '*.toxicfarm.com', + '*.unlimitboard.com', + '*.unlimitedboard.com', + '*.unlimitedforum.com', + '*.up-with.com', + '*.up-your.com', + '*.urealboard.com', + '*.user-board.net', + '*.userboard.net', + '*.users-board.com', + '*.users-board.net', + '*.usersboard.com', + '*.usersboard.net', + '*.webgoo.us', + '*.withboards.com', + '*.withme.us', + '*.worldgoo.com', + '*.yahooboard.net', + '*.yforum.biz', + '*.yoo7.com', + '*.youneed.us', + '*.your-board.com', + '*.your-talk.com', + '*.yourme.net', + '*.zforum.biz', + + // 75.126.156.15 redirect to forumactif.com + '*.actifforum.com', + '*.fr-bb.com', + '*.superforum.fr', + + // 75.126.156.15 redirect to editboard.com + '*.bbfr.net', + '*.bbgraf.com', + '*.cinebb.com', + '*.darkbb.com', + '*.dynamicbb.com', + '*.zikforum.com', + + // 74.86.25.140 Used: sosblog.com + '*.0-up.com', + '*.0-yo.com', + '*.04live.com', + '*.06fr.com', + '*.0fra.com', + '*.0jet.com', + '*.0yoo.com', + '*.1toxic.com', + '*.2k00.com', + '*.2xik.com', + '*.blog-2007.com', + '*.blog-2008.com', + '*.blog-2009.com', + '*.blog-2010.com', + '*.blog-actif.net', + '*.blog-marley.com', + '*.blog-talker.com', + '*.blog2009.com', + '*.blogactif.net', + '*.blogalbums.com', + '*.blogalerie.com', + '*.blogaleries.com', + '*.blogallerys.com', + '*.blogandme.com', + '*.blogandyou.com', + '*.blogbubble.net', + '*.blogdollz.com', + '*.bloggeuse.net', + '*.bloggeuses.com', + '*.bloginstinct.com', + '*.bloginternet.net', + '*.blogmakers.net', + '*.blogmarley.net', + '*.blogminister.net', + '*.blogmorane.com', + '*.blognboard.com', + '*.blogotek.net', + '*.blogpas.com', + '*.blogpublisher.net', + '*.blogsalbum.com', + '*.blogsalbums.com', + '*.blogsfan.net', + '*.blogsgallerys.com', + '*.blogsitephp.com', + '*.blogsland.net', + '*.blogsmaker.com', + '*.blogsmakers.com', + '*.blogspeed.net', + '*.blogsup.net', + '*.blogsutil.com', + '*.blogsutils.com', + '*.blogsystem.net', + '*.blogtalker.net', + '*.blogtheque.net', + '*.blogutil.com', + '*.blogvsboard.com', + '*.briceblog.com', + '*.cibleblog.com', + '*.cristalblog.com', + '*.crystalblog.net', + '*.dad-blog.com', + '*.daddy-blog.com', + '*.defaultblog.com', + '*.discussionsblog.com', + '*.dollzblog.com', + '*.dtoxic.com', + '*.easiestblog.net', + '*.espaceblog.net', + '*.exitblog.net', + '*.expensiveblog.com', + '*.extra-blog.net', + '*.extrablog.net', + '*.facileblog.com', + '*.forblogger.com', + '*.forumsblogs.com', + '*.freephpblog.com', + '*.fresh-blog.net', + '*.galleryblog.net', + '*.galleryblogs.net', + '*.gallerysblog.com', + '*.gallerysblogs.com', + '*.hyper-blog.net', + '*.hyper-blogger.com', + '*.hyper-blogger.net', + '*.hyperblogger.net', + '*.instinctblog.com', + '*.jeunblog.com', + '*.jeuneblog.com', + '*.judblog.com', + '*.makeblog.net', + '*.man-blog.net', + '*.man-blogs.com', + '*.man-blogs.net', + '*.manblog.net', + '*.manblog.org', + '*.manblog.us', + '*.manblogs.net', + '*.mansblog.net', + '*.mansblogs.com', + '*.mansblogs.net', + '*.meetingsblogs.com', + '*.men-blog.net', + '*.men-blogs.com', + '*.men-blogs.net', + '*.menblog.us', + '*.menblogs.net', + '*.mensblogs.net', + '*.messaginblog.com', + '*.monblogger.com', + '*.mum-blog.com', + '*.mummy-blog.com', + '*.mummyblog.com', + '*.myareablog.com', + '*.myblog-online.net', + '*.mybloginternet.com', + '*.myblogland.com', + '*.myblogmag.com', + '*.myfreshblog.com', + '*.myinternetblog.net', + '*.myoverblog.com', + '*.myoverblog.net', + '*.mysharedblog.com', + '*.nice-albums.com', + '*.nice-galleries.com', + '*.nicealbum.net', + '*.nicegallery.net', + '*.notreblogger.com', + '*.outilblog.com', + '*.over-blogger.com', + '*.overblogger.com', + '*.pasblog.com', + '*.pasblog.net', + '*.perfect-blog.net', + '*.perfectblog.net', + '*.phpblogsite.com', + '*.phpmyblog.net', + '*.plateformeblog.com', + '*.playblogger.com', + '*.publishmyblog.com', + '*.pulseblog.net', + '*.pulseblogs.com', + '*.puretoxic.com', + '*.reservedblog.com', + '*.shareblog.net', + '*.shareblogs.net', + '*.shared-blogs.com', + '*.sharedblog.net', + '*.sharedblogs.net', + '*.solideblog.com', + '*.systemeblog.com', + '*.talkmeblog.com', + '*.toolsblog.net', + '*.toxicplace.com', + '*.ufreeblog.com', + '*.uliveblog.com', + '*.ultratoxic.com', + '*.utilblog.com', + '*.utilblogs.com', + '*.utilsblog.com', + '*.utilsblogs.com', + '*.various-blog.com', + '*.various-blog.net', + '*.various-blogs.com', + '*.various-blogs.net', + '*.variusblog.com', + '*.versusblog.com', + '*.vieuxblog.com', + '*.web-day.net', + '*.whatsblog.net', + '*.woman-blog.net', + '*.woman-blogs.com', + '*.woman-blogs.net', + '*.womanblog.com', + '*.womanblog.org', + '*.womanblog.us', + '*.womanblogs.net', + '*.womansblogs.com', + '*.womansblogs.net', + '*.women-blog.net', + '*.women-blogs.com', + '*.women-blogs.net', + '*.womenblog.us', + '*.womenblogs.net', + '*.womensblog.net', + '*.womensblogs.net', + '*.youblog.net', + '*.yourliveblog.com', + '*.yourweblog.net', + ), '*.forumcommunity.net', + '*.forumer.com', + 'members.forumfree.com', // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com + '*.forumfree.net', // 74.53.57.70(*.static.theplanet.com) 'forumhosting.org', '*.forums.com', 'forumbolt.com', 'phpbb.forumgratis.com', + 'forumlari.net', '*.forumlivre.com', 'forumnow.com.br', '*.forumppl.com', @@ -1668,28 +2561,32 @@ $blocklist['B-1'] = array( 'cz|de|dk|es|eu|fr|gr|hu|in|info|ir|it|jobs|jp|lt|' . 'lv|org|pl|name|net|nl|ro|ru|se|sk|tv|us|web\.tr)$#', '*.fory.pl', + 'fotolog.com', + '*.fr33webhost.com', + '*.free20.com', // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com '*.free-25.de', '*.free-bb.com', 'Free-Blog-Hosting.com' => array( - 'free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com - 'cheap-web-hosting-411.com', // by Robert Vigil, ns *.thisismyserver.net - 'blog-tonite.com', // ns *.phpwebhosting.com - 'blogznow.com', // ns *.phpwebhosting.com - 'myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com - 'blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com + '*.free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com + '*.blog-tonite.com', // ns *.phpwebhosting.com + '*.blogznow.com', // ns *.phpwebhosting.com + '*.myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com + '*.blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com ), '*.free-forums.org', // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro) 'free-guestbook.net', '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com) 'freebb.nl', '*.freeclans.de', + '*.freehostplace.com', // by contact at keepclear.co.uk '*.freelinuxhost.com', // by 100webspace.com '*.nofeehost.com', '*.freehyperspace.com', 'freeforum.at', // by Sandro Wilhelmy 'freeforumshosting.com', // by Adam Roberts (admin at skaidon.co.uk) '*.freeforums.org', // by 1&1 Internet, Inc. - 1and1.com - '*.freehostia.com', + '*.freemyforumadult.com', // 208.97.191.105(apache2-argon.willie.dreamhost.com) by sick at designsbysick.com + '*.freewebhostingpro.com', '*.freehostingz.com', // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com) 'FreeWebHostingArea.com' => array( // or www.freewha.com '*.6te.net', @@ -1702,35 +2599,72 @@ $blocklist['B-1'] = array( 'freewebsfarms.com', ), '*.freewebspace.net.au', + 'freewebtown.com', '*.freemyforum.com', // by messahost at gmail.com 'freepowerboards.com', '*.freepowerboards.com', '*.fsphost.com', // by Michael Renz (michael at fsphost.com) - '*.funpic.de', + 'Funpic.de' => array( // by alexander at liemen.net + '*.funpic.de', + '*.funpic.org', + ), + 'gb-hoster.de', '*.genblogger.com', - 'geocities.com', 'GetBetterHosting.com' => array( - '*.30mb.com', // by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com - '*.90megs.com', // by Get Better Hosting (admin at getbetterhosting.com) + '*.30mb.com', // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com + '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com) ), + '*.gexxe.com', + '*.goodboard.de', + 'gossiping.net', + '*.greatnuke.com', '*.guestbook.de', 'gwebspace.de', - 'gossiping.net', - 'gb-hoster.de', - '*.goodboard.de', - 'docs.google.com', // by Google + 'Google.com' => array( + '*.blogspot.com', + 'docs.google.com', + '*.googlegroups.com', ///web/ + '*.googlepages.com', + 'groups-beta.google.com', + 'groups.google.*', ///group/ Seems widely distributed + //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk', + //'groups.google.de', 'groups.google.es', 'groups.google.fr', + //'groups.google.it', ... + ), 'guestbook.at', 'club.giovani.it', '*.gratis-server.de', - 'groups-beta.google.com', // by Google 'healthcaregroup.com', '*.heliohost.org', + 'Halverston Holdings Limited' => array( // pochta.ru?lng=en + // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com) + '*.fromru.com', // by Lapeshkina Tatyana (noc at pochta.ru) + '*.front.ru', // (domain at hc.ru) + '*.hc.ru', // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru) + '*.hotbox.ru', // (domain at hc.ru) + '*.hotmail.ru', // (hosting at hc.ru) + '*.krovatka.su', // (domain at hc.ru, hosting at hc.ru) + '*.land.ru', // (domain at hc.ru) + '*.mail15.com', // (hosting at hc.ru) + '*.mail333.com', // (hosting at hc.ru) + '*.newmail.ru', // (domain at hc.ru, hosting at hc.ru) + '*.nightmail.ru', // (domain at hc.ru, hosting at hc.ru) + '*.pisem.net', // (hosting at hc.ru) + '*.pochta.ru', // (domain at hc.ru) + '*.pochtamt.ru', // (domain at hc.ru) + '*.pop3.ru', // (domain at hc.ru) + '*.rbcmail.ru', // (domain at hc.ru) + '*.smtp.ru', // (domain at hc.ru) + ), + '*.hiblogger.com', // by chiaokin at gmail.com '*.hit.bg', // by forumup.com ?? + '*.homeblock.com', // 72.55.141.237(*.static.privatedns.com) '*.host-page.com', '*.hostingclub.de', 'forums.hspn.com', '*.httpsuites.com', '*.hut2.ru', + 'ibfree.org', // 208.101.45.88 'IC.cz' => array( '*.ezin.cz', // internetcentrum at gmail.com, ns ignum.com, ignum.cz '*.hu.cz', // internetcentrum at gmail.com @@ -1752,6 +2686,7 @@ $blocklist['B-1'] = array( '*.teracities.com', '*.xoompages.com', ), + '*.icspace.net', 'iEUROP.net' => array( '*.ibelgique.com', '*.iespana.es', @@ -1772,17 +2707,31 @@ $blocklist['B-1'] = array( '*.jconserv.net', '*.jeeran.com', '*.jeun.fr', + '*.joolo.com', '*.journalscape.com', - '*.blog.kataweb.it', + '*.justfree.com', + 'kataweb.it' => array( // kata-redir.kataweb.it + '*.blog.kataweb.it', + '*.repubblica.it', + ), '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com '*.kokoom.com', 'koolpages.com', + '*.kostenlose-foren.org', '*.ksiegagosci.info', + 'LaCoctelera.com' => array( + 'lacoctelera.com', // by alberto at the-cocktail.com + 'espacioblog.com', // by dominios at ferca.com + ), 'Lide.cz' => array( '*.lide.cz', '*.sblog.cz', ), + '*.lioru.com', 'limmon.net', + 'linkinn.com', + 'lipstick.com', // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com + 'listible.com', ///list/ 'Livedoor.com' => array( 'blog.livedoor.jp', '*.blog.livedoor.com', // redirection @@ -1790,6 +2739,7 @@ $blocklist['B-1'] = array( '*.livejournal.com', '.load4.net', // 72.232.201.61(61.201.232.72.static.reverse.layeredtech.com), Says free web hosting but anonymous '*.logme.nl', + 'lol.to', 'ltss.luton.ac.uk', 'Lycos.com' => array( '.angelfire.com', // angelfire.lycos.com @@ -1818,7 +2768,10 @@ $blocklist['B-1'] = array( '*.tripod.com', ), + '*.mastertopforum.com', 'mbga.jp', // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp) + 'meneame.net', + '*.memebot.com', '*.messageboard.nl', 'mokono GmbH' => array( '*.blog.com.es', @@ -1836,33 +2789,80 @@ $blocklist['B-1'] = array( '*.weblogs.hu', ), 'mojklc.com', + '*.mundoforo.com', + '*.money-host.com', 'MonForum.com' => array( '*.monforum.com', '*.monforum.fr', ), '*.multiforum.nl', // by Ron Warris (info at phpbbhost.nl) - '*.my10gb.com', + '*.my3gb.com', // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de) + '*.my10gb.com', // by craig_gatenby at hotmail.com 'myblog.is', 'myblogma.com', '*.myblogvoice.com', 'myblogwiki.com', '*.myforum.ro', + '*.myfreewebhost.org', // 216.32.73.163(*.static.reverse.ltdomains.com) '*.myfreewebs.net', '*.mysite.com', '*.myxhost.com', '*.netfast.org', - 'NetGears.com' => array( // by domains at netgears.com - '*.9k.com', - '*.741.com', - '*.freewebsitehosting.com', - '*.freewebspace.com', - '*.freewebpages.org', + 'NetGears.com' => array( + // by domains at netgears.com, ns *.northsky.com, seems 0Catch.com and northsky.com related + '*.9k.com', // 64.39.31.55(netgears.com) + '*.freewebspace.com', // 64.49.236.72 ), - 'Netscape.com' => array('mywebpage.netscape.com'), + 'Netscape.com' => array('*.netscape.com'), 'users.newblog.com', 'neweconomics.info', + '*.newsit.es', // 75.126.252.108 '*.nm.ru', + '*.nmj.pl', + '*.nocatch.net', // 74.86.93.190(layeredpanel.com => ...) + 'Northsky.com' => array( + // by hostmaster at northsky.com + // northsky.com redirects to communityarchitect.com + + // 64.136.24.162(public-24-162.lax.ws.untd.com) by Mark Bishop + '*.00author.com', + '*.00band.com', + '*.00books.com', + '*.00cash.com', + '*.00cd.com', + '*.00dvd.com', + '*.00family.com', + '*.00game.com', + '*.00home.com', + '*.00it.com', + '*.00me.com', + '*.00movies.com', + '*.00page.com', + '*.00politics.com', + '*.00sf.com', + '*.00show.com', + '*.00song.com', + '*.00trek.com', + '*.00video.com', + '*.0me.com', + '*.0pi.com', + '*.happy-couple.com', + '*.warp0.com', + + '*.50megs.com', // 64.136.25.170 + + // 64.136.25.171(mail.50megs.com) by Mark Bishop + '*.00server.com', + '*.communityarchitect.com', // Only mysite.com has a link to communityarchitect.com + '*.fanspace.com', + + // 64.136.25.168 by Mark Bishop + '*.00go.com', + '*.00space.com', + '*.00sports.com', + ), '*.obm.cn', // by xiaobak at yahoo.com.cn + '*.ocom.pl', // 67.15.104.83(*.ev1servers.net) 'onlyfree.de', '*.ooblez.com', // by John Nolande (ooblez at hotmail.com) '*.ohost.de', @@ -1875,6 +2875,8 @@ $blocklist['B-1'] = array( '.za.pl', '.skysquad.net', // by Dorota Brzezinska (info at nazwa.pl) ), + 'oyax.com', ///user_links.php + '*.p2a.pl', '*.parlaris.com', '*.pathfinder.gr', '*.persianblog.com', @@ -1887,20 +2889,27 @@ $blocklist['B-1'] = array( '*.phpbb24.com', // daniel at danielos.com '*.myforumportal.com', // daniel at webbland.se ), + 'phpbb4you.com', + 'phpbbcommunity.com', '*.phpbbx.de', '*.pochta.ru', '*.portbb.com', + '*.portcms.com', 'powerwebmaster.de', 'pro-board.com', // by SEM Optimization Services Ltd (2485 at coverage1.com) 'ProBoards' => '#^.*\.proboards[0-9]*\.com$#', '*.probook.de', '*.prohosting.com', // by Nick Wood (admin at dns-solutions.net) + '*.pun.pl', + 'putfile.com', '*.quickfreehost.com', 'quizilla.com', '*.quotaless.com', '*.qupis.com', // by Xisto Corporation (shridhar at xisto.com) 'razyboard.com', + '*.rbbloggers.com', // 88.85.78.82 by manager at vertona.com 'realhp.de', + 'reddit.com', ///user/ 'rgbdesign at gmail.com' => array( // by RB2 (rgbdesign at gmail.com) '*.juicypornhost.com', '*.pornzonehost.com', @@ -1910,26 +2919,6 @@ $blocklist['B-1'] = array( '*.sbn.bz', '*.wol.bz', ), - 'Halverston Holdings Limited' => array( // pochta.ru?lng=en - // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com) - '*.fromru.com', // by Lapeshkina Tatyana (noc at pochta.ru) - '*.front.ru', // (domain at hc.ru) - '*.hc.ru', // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru) - '*.hotbox.ru', // (domain at hc.ru) - '*.hotmail.ru', // (hosting at hc.ru) - '*.krovatka.su', // (domain at hc.ru, hosting at hc.ru) - '*.land.ru', // (domain at hc.ru) - '*.mail15.com', // (hosting at hc.ru) - '*.mail333.com', // (hosting at hc.ru) - '*.newmail.ru', // (domain at hc.ru, hosting at hc.ru) - '*.nightmail.ru', // (domain at hc.ru, hosting at hc.ru) - '*.pisem.net', // (hosting at hc.ru) - '*.pochta.ru', // (domain at hc.ru) - '*.pochtamt.ru', // (domain at hc.ru) - '*.pop3.ru', // (domain at hc.ru) - '*.rbcmail.ru', // (domain at hc.ru) - '*.smtp.ru', // (domain at hc.ru) - ), '*.sayt.ws', 'Seblg.com' => array( '*.seblg.com', // by Dao Lee (st at seblg.com) @@ -1948,26 +2937,38 @@ $blocklist['B-1'] = array( '.aim.to', '.djmp.jp', '.nihongourl.nu', + '.url.sh', // Says SmarTrans '.urljp.com', '.www1.to', '.www2.to', '.www3.to', ), - '*.spazioforum.it', + '*.spazioblog.it', // by Ivan Maria Spadacenta + '*.spazioforum.it', // by Ivan Maria Spadacenta 'members.spboards.com', 'forums.speedguide.net', + 'Sphosting.com' => array( // by admin at sphosting.com + '*.hostinplace.com', // 66.197.204.233(sp3.sphosting.net -> 66.197.204.229) + '*.sphosting.com', // 66.197.204.229(sp3.sphosting.net) + '*.sphosting.net', // 66.197.204.229(*snip*), redirect to sphosting.com + '*.spboards.com', // 66.197.146.104(sp2.sphosting.com -> Non-existent) + 'spweblog.com', // 66.197.146.101(sp2.sphosting.com -> Non-existent) + ), '*.spicyblogger.com', '*.spotbb.com', + '.squadz.net', // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com '*.squarespace.com', 'stickypond.com', 'stormloader.com', 'strikebang.com', '*.sultryserver.com', '*.t35.com', + '*.talks.at', 'tabletpcbuzz.com', '*.talkthis.com', 'tbns.net', 'telasipforums.com', + 'theforumhub.com', 'thestudentunderground.org', 'think.ubc.ca', '*.thumblogger.com', @@ -1975,6 +2976,12 @@ $blocklist['B-1'] = array( 'topix.com', 'topix.net', ), + 'forum.tourism-talk.com.au', + 'tycho at e-lab.nl' => array( + '*.234mb.com', // 195.242.99.206(s206.softwarelibre.nl -> 194.109.216.19) + '*.1234mb.com', // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl) + ), + '*.tumblr.com', 'UcoZ Web-Services' => array( '*.3dn.ru', '*.clan.su', @@ -1990,10 +2997,13 @@ $blocklist['B-1'] = array( '*.ws.co.ua', ), '*.unforo.net', + 'veoh.com', '*.vdforum.ru', '*.vtost.com', '*.vidiac.com', + 'Voila.fr' => array('.site.voila.fr'), 'volny.cz', + 'voy.com', '*.welover.org', 'Web1000.com' => array( // http://www.web1000.com/register_new2.php '*.fasthost.tv', @@ -2115,8 +3125,10 @@ $blocklist['B-1'] = array( ), 'webblog.ru', 'weblogmaniacs.com', + '.webng.com', // www.*, www3.* '*.webnow.biz', // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc. 'websitetoolbox.com', + '*.webtropia.com', 'Welnet.de' => array( 'welnet.de', 'welnet4u.de', @@ -2130,9 +3142,16 @@ $blocklist['B-1'] = array( 'xeboards.com', // by Brian Shea (bshea at xeservers.com) '*.xforum.se', 'xfreeforum.com', + '*.xhost.ro', // by domain-admin at listserv.rnc.ro + '*.xoomwebs.com', + '.xterm.org', '.freeblogs.xp.tl', '*.xphost.org', // by alex alex (alrusnac at hotmail.com) '*.ya.com', // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'... + 'Yahoo.com' => array( + 'flickr.com', + 'geocities.com', + ), 'YANDEX, LLC.' => array( // noc at yandex.net '*.narod.ru', 'ya.ru', @@ -2144,8 +3163,20 @@ $blocklist['B-1'] = array( '*.your-websites.net', '*.web-space.ws', ), + + + '*.heliohost.org', // by ashoat at gmail.com + 'X10Hosting.com' => array( + // by support at clockworkcomputers.com + '*.x10hosting.com', + '*.elementfx.com', + '*.exofire.net', + '*.pcriot.com', + ), + '.zendurl.com', // by ajcar1992 at gmail.com ); +// -------------------------------------------------- $blocklist['B-2'] = array( @@ -2162,15 +3193,25 @@ $blocklist['B-2'] = array( 'alwanforthearts.org', '*.anchor.net.au', 'anewme.org', + 'arcrockett.com', ///golf/excel/ + 'arisedesign.net', //Portfolio/d981/ 'internetyfamilia.asturiastelecentros.com', + 'ballblair.com', ///images/thumbs/ 'Ball State University' => array('web.bsu.edu'), + 'btofaq.net', ///v3/forum 'blepharospasm.org', + 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net 'nyweb.bowlnfun.dk', '*.buzznet.com', + 'Carroll College' => array( + 'carroll.edu', ///boards/ + ), '*.canberra.net.au', 'castus.com', 'Case Western Reserve University' => array('case.edu'), 'ceval.de', + 'chaco.gov.ar', + 'chasingrainbowsaustralia.com', ///geometry/ 'codespeak.net', 'Colorado School of Mines' => array('ticc.mines.edu'), '*.colourware.co.uk', @@ -2189,14 +3230,17 @@ $blocklist['B-2'] = array( 'delayedreaction.org', 'deproduction.org', 'dc503.org', + 'dialadeck.com', ///images/ 'dre-centro.pt', 'Duke University' => array('devel.linux.duke.edu'), '*.esen.edu.sv', 'forums.drumcore.com', 'dundeeunited.org', 'energyglass.com.ua', + 'equitas.com.au', ///images/mim3/, no index.html 'exclusivehotels.com', 'info.ems-rfid.com', + 'fairyfunkyard.com', ///images_files/files/ 'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com) 'fbwloc.com', '.fhmcsa.org.au', @@ -2219,11 +3263,13 @@ $blocklist['B-2'] = array( 'Harvard Law School' => array('blogs.law.harvard.edu'), 'helpiammoving.com', 'homepage-dienste.com', + '*.hostistry.com', // by support at hostistry.com, hostistry at gmail.com 'Howard University' => array('networks.howard.edu'), 'hullandhull.com', 'Huntington University' => array('huntington.edu'), 'huskerink.com', '.hyba.info', + 'ideas4you.com', ///photos/ 'inda.org', '*.indymedia.org', // by abdecom at riseup.net 'instantbulletin.com', @@ -2236,6 +3282,8 @@ $blocklist['B-2'] = array( 'skkustp.itgozone.com', // hidden JavaScript 'jazz2online.com', '.jloo.org', + '.juegohq.com', // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble + 'kjon.com', 'Kazan State University' => array( 'dir.kzn.ru', 'sys.kcn.ru', @@ -2247,6 +3295,7 @@ $blocklist['B-2'] = array( 'Loyola Marymount University' => array('lmu.edu'), 'forum.lixium.fr', 'macfaq.net', + 'macvirus.org', ///board/ 'me4x4.com', 'microbial-ecology.net', 'minsterscouts.org', @@ -2266,26 +3315,38 @@ $blocklist['B-2'] = array( 'hlc.ncat.edu', ), 'placetobe.org', + 'Naropa University' => array( + 'naropa.edu', ///forum/ + ), 'users.nethit.pl', 'nightclubvip.net', 'njbodybuilding.com', 'nlen.org', + 'North Carolina School of Science and Mathematics' => array( + 'neverland.ncssm.edu', ///include/web/forum/ + 'grid.ncssm.edu', ///ncssm_grid/ + ), 'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'), + 'ofcourseimright.com', ///cgi-bin/roundup/calsify/ 'offtextbooks.com', 'ofimatika.com', + 'olympiafoto.com', ///images/ 'omakase-net', // iframe 'omikudzi.ru', 'openchemist.net', 'palungjit.com', 'pataphysics-lab.com', + 'paypaldev.org', 'paullima.com', 'perl.org.br', 'pfff.co.uk', + 'pimpo.com', ///_old_site/ 'pix4online.co.uk', 'plone.dk', 'preform.dk', 'privatforum.de', 'publicityhound.net', + 'puppylinux.net', ///news/content/counter/pages/ 'qea.com', 'rbkdesign.com', 'rehoboth.com', @@ -2293,10 +3354,12 @@ $blocklist['B-2'] = array( 'ryanclark.org', '*.reallifelog.com', 'rkphunt.com', + 'rso-csp.org', ///bulletins/ '.saasmar.ru', // Jacked. iframe to banep.info on root, etc 'sapphireblue.com', 'saskchamber.com', 'savevoorhees.org', + 'sdhmalenovice.cz', //galerie/ 'selikoff.net', 'serbisyopilipino.org', 'setbb.com', @@ -2305,6 +3368,7 @@ $blocklist['B-2'] = array( 'Saint Martin\'s University' => array('homepages.stmartin.edu'), '.softpress.com', 'southbound-inc.com', // There is a .gif (img to it168.com) + 'fora.taniemilitaria.pl', ///phpbb 'tehudar.ru', 'Tennessee Tech University' => array('manila.tntech.edu'), 'thebluebird.ws', @@ -2320,6 +3384,9 @@ $blocklist['B-2'] = array( 'tuathadedannan.org', 'txgotg.com', 'tzaneen.co.za', + 'ugeavisen.com', ///style/ + 'forums.ugo.com', + 'whole.cs.unibo.it', 'The University of North Dakota' => array( 'learn.aero.und.edu', 'ez.asn.und.edu', @@ -2329,11 +3396,17 @@ $blocklist['B-2'] = array( 'University of California' => array('classes.design.ucla.edu'), 'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'), 'University of Northern Colorado' => array('unco.edu'), + 'University of North Carolina' => array( + 'elm.cis.uncw.edu' ///testBoinc/ + ), 'University of Toronto' => array( 'environment.utoronto.ca', 'grail.oise.utoronto.ca', 'utsc.utoronto.ca', ), + 'University of Wisconsin' => array( + 'einstein.phys.uwm.edu' + ), 'urgentclick.com', 'vacant.org.uk', 'Villa Julie College' => array('www4.vjc.edu'), @@ -2350,7 +3423,7 @@ $blocklist['B-2'] = array( '.xthost.info', // by Michael Renz (dhost at mykuhl.de) 'Yahoo.com' => array( 'blog.360.yahoo.com', - '*.groups.yahoo.com' + '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ... ), 'yasushi.site.ne.jp', // One of mixedmedia.net' 'youthpeer.org', @@ -2358,6 +3431,7 @@ $blocklist['B-2'] = array( 'Zope/Python Users Group of Washington, DC' => array('zpugdc.org'), ); +// -------------------------------------------------- $blocklist['C'] = array( @@ -2445,16 +3519,24 @@ $blocklist['C'] = array( '.camdoors.info', // by Sergey '.chatdoors.info', // by Sergey - '.lebedi.info', // by Pronin - '.loshad.info', // by Pronin - '.porosenok.info', // by Pronin - '.indyushonok.info', // by Pronin - '.kotyonok.info', // by Pronin - '.kozlyonok.info', // by Pronin - '.magnoliya.info', // by Pronin - '.svinka.info', // by Pronin - '.svinya.info', // by Pronin - '.zherebyonok.info', // 89.149.206.225 by Pronin + // 89.149.206.225 by Pronin + '.dorozhka.info', + '.kolonochka.info', + '.knizhechka.info', + '.krantik.info', + '.lebedi.info', + '.loshad.info', + '.pechenka.info', + '.porosenok.info', + '.indyushonok.info', + '.kotyonok.info', + '.kozlyonok.info', + '.magnoliya.info', + '.svinka.info', + '.svinya.info', + '.televizorchik.info', + '.tumbochka.info', + '.zherebyonok.info', '.medvezhonok.org', // 89.149.206.225 "BucksoGen 1.2b" @@ -2598,36 +3680,48 @@ $blocklist['C'] = array( // by Kuzma V Safonov (admin at irtes.ru) // by Petrov Vladimir (vvm_kz at rambler.ru) // by LAURI FUNK (vvm_kz at rambler.ru) + + // 64.92.162.210(*.static.reverse.ltdomains.com) '.abrek.info', // by Petrov - '.accommodationwiltshire.com', // by Petrov '.allsexonline.info', // by Varsylenko - '.bequeous.info', // by Davi '.d1rnow.info', // by Petrov - '.doxer.info', // by Petrov - '.freeforworld.info', // by Varsylenko - '.gitsite.info', // by Petrov - '.goodworksite.info', // by Varsylenko - '.michost.info', // by LAURI FUNK + '.doxer.info', // Petrov + '.freeforworld.info', // Varsylenko + '.goodworksite.info', // Varsylenko '.onall.info', // by Varsylenko - '.organiq.info', // by Petrov - '.parther.info', // by LAURI FUNK '.powersiteonline.info', // by Varsylenko '.rentmysite.info', // by Varsylenko - '.levines.info', // by Petrov - '.mp3vault.info', // by Petrov - '.sernost.info', // by Petrov '.sexdrink.info', // by Petrov - '.sexvideosite.info', // by Petrov '.siteszone.info', // by Varsylenko '.sfup.info', // by Petrov - '.sopius.info', // by Kuzma - '.sovidopad.info', // by Kuzma '.superfreedownload.info', // by Varsylenko '.superneeded.info', // by Varsylenko '.srup.info', // by Petrov + + // 66.235.185.143(*.svabuse.info) + '.accommodationwiltshire.com', // by Petrov + '.levines.info', // by Petrov + '.sernost.info', // by Petrov + '.sexvideosite.info', // by Petrov '.vvsag.info', // by Petrov - '.yerap.info', // by Kuzma + + // 81.0.195.134 + '.michost.info', // by LAURI + '.parther.info', // by LAURI + + // 88.214.202.100 + '.gitsite.info', // by Petrov + '.organiq.info', // by Petrov '.yoursitedh.info', // by Petrov + + // 217.11.233.58 by Petrov + '.mp3vault.info', + + // DNS time out or failed + '.bequeous.info', // by Davi + '.sopius.info', // by Kuzma + '.sovidopad.info', // by Kuzma + '.yerap.info', // by Kuzma ), 'zhu1313 at mail.ru' => array( // by Andrey Zhurikov '.flywebs.com', @@ -2875,9 +3969,15 @@ $blocklist['C'] = array( '.lineagecojp.com', // 61.139.126.10 '.ragnarokonlina.com', // 220.247.158.99 ), - 'aakin at yandex.ru' => array( // by Baer + 'aakin at yandex.ru' => array( + // 89.149.206.225(*.internetserviceteam.com) by Baer '.entirestar.com', + '.joppperl.info', + '.onlinedrugsdirect.com', + '.pilkazen.info', '.superbuycheap.com', + '.supersmartdrugs.com', + '.thecheappillspharmacy.com', '.topdircet.com', ), 'newblog9 at gmail.com' => array( // by jiuhatu kou @@ -2977,6 +4077,7 @@ $blocklist['C'] = array( '.vvsa.org', // "Free Web Hosting" by Eva '.free-webhosts.com', // "Free Web Hosting" by Free Webspace ), + '.onegoodauto.org', // "Free Web Hosting" by sqrtv2 at gmail.com 'Something-Gamble' => array( // Gamble: Roulette, Casino, Poker, Keno, Craps, Baccarat '.atonlineroulette.com', // by Blaise Johns @@ -3540,71 +4641,99 @@ $blocklist['C'] = array( '.antivirus1.info', '.antivirus2.info', ), - 'wasam at vangers.net' => array( // by Ashiksh Wasam - '.290cabeza.org', // 69.31.91.226(colo-69-31-91-226.pilosoft.com) + 'wasam at vangers.net and family' => array( + + // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net) + '.bahatoca.org', + '.digestlycos.org', + '.educativaanale.info', + '.guildstuscan.org', + '.isaakrobbins.info', + '.isfelons.org', + '.lvwelevated.org', + '.macphersonaca.org', + '.markyaustrian.org', + '.michelepug.org', + '.opalbusy.info', + '.quijotebachata.info', + '.salthjc.info', + '.shogunnerd.info', + '.solarissean.org', + '.sparkgsx.info', + '.tarzanyearly.org', + '.tulabnsf.org', + '.vaccarinos.org', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net) + '.e2007.info', + '.cmoss.info', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net) + '.finddesk.org', + '.gsfind.org', // You mean: sfind.net by tvaals at vangers.net + '.my-top.org', // You mean: my-top.net by tvaals at vangers.net + '.rcatalog.org', + '.sbitzone.org', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net) + '.cheapns.org', + '.my-top.net', + '.sfind.net', + '.sspot.net', + '.suvfind.info', + + // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net) + '.trumber.com', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net) '.blogduet.org', - '.bossierpainted.org', '.carelf.info', - '.cmagic.org', + '.cmagic.org', '.cspell.org', '.dspark.org', '.dtonic.org', - '.gradetelemundo.info', - '.indicadorestmj.info', - '.keeleykincaid.org', '.mcharm.info', '.mslook.info', '.phpdinnerware.info', - '.pipnickname.info', - '.pacolily.org', - '.redeemtrabalho.info', '.rnation.org', - '.titanmessina.info', - '.tragratuit.org', '.uzing.org', - '.yeareola.info', - ), - 'kadilk at vangers.net' => array( // by Kadil Kasekwam - '.allbar.info', // 69.31.91.226 + + // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net) + '.allbar.info', '.allersearch.org', + '.allzoom.org', '.dynall.org', - '.educativaanale.info', '.fastopia.org', - '.guildstuscan.org', - '.isfelons.org', - '.solarissean.org', - '.opalbusy.info', + '.offasfast.info', '.rblast.org', + '.rchistes.info', '.rette.org', - '.salthjc.info', + '.shufflequince.org', '.suvlook.org', - '.tarzanyearly.org', - '.tulabnsf.org', - ), - 'tvaals at vangers.net' => array( // by Thomas Vaals - '.cheapns.org', - '.my-top.net', - '.sfind.net', - '.sspot.net', - '.suvfind.info', - ), - 'kasturba at vangers.net' => array( // by Kasturba Nagari - '.finddesk.org', - '.gsfind.org', - '.my-top.org', - '.rcatalog.org', - '.sbitzone.org', - ), - 'bipik at vangers.net' => array( // by Bipik Joshu - '.e2007.info', - '.cmoss.info', + + // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net) + '.290cabeza.org', + '.bossierpainted.org', + '.connickkarel.info', // Admin: tvaals at vangers.net + '.definekonica.info', // Admin: tvaals at vangers.net + '.gradetelemundo.info', + '.hydraulickin.info', + '.indicadorestmj.info', + '.keeleykincaid.org', + '.kleenbowser.info', + '.pipnickname.info', + '.pacolily.org', + '.redeemtrabalho.info', + '.scanmakerchua.info', + '.titanmessina.info', + '.tragratuit.org', + '.yeareola.info', ), - 'marion at vangers.net' => array('.trumber.com'), // by Mariano Ciaramolo 'SearchHealtAdvCorpGb.com' => array( // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain) - '.canadianmedsworld.info', - '.tabsdrugstore.info', - '.tabsstore.info', - '.topcholesterol.info', + '.canadianmedsworld.info', // 84.252.133.112 + '.tabsdrugstore.info', // 84.252.133.114 + '.tabsstore.info', // 84.252.133.114 + '.topcholesterol.info', // 84.252.133.132 ), 'be.cx' => array( '.be.cx', @@ -3613,6 +4742,7 @@ $blocklist['C'] = array( 'john780321 at yahoo.com' => array( // by John Brown '.bestdiscountpharmacy.biz', // 2007-01-27, 61.144.122.45 '.drugs4all.us', // 2007-03-09, 202.67.150.250 + '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com) ), 'tremagl.freet at gmail.com' => array( // by Treman Eagles, redirect to searchadv.com '.bertela.info', @@ -3931,11 +5061,34 @@ $blocklist['C'] = array( '.npous.info', '.obgju.info', ), - 'FateBack.com' => array( // by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp + 'LiquidNetLimited.com' => array( + // liquidnetltd.net, // 216.65.1.131(duoservers.com) + + // FateBack.com related + // 216.65.1.201(fateback.com) by LiquidNet Ltd. (president at fateback.com), redirect to www.japan.jp '.bebto.com', '.fateback.com', '.undonet.com', '.yoll.net', + '.sinfree.net', // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp + + // 50webs.com // 64.72.112.10 + // dns2.50webs.com // 64.72.112.11 + '*.freehostia.com', // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..." + // dns2.freehostia.com // 64.72.112.13 + // serv3.freehostia.com // 64.72.112.14 + // hex12.freehostia.com // 64.72.112.19, 64.72.112.20 + // mail.50webs.com // 64.72.112.26 + // supremecenter41.com // 64.72.112.52 + // 50webs2.50webs.com // 64.72.112.89 + // supremecenter39.com // 64.72.112.103 + + // by LiquidNet Ltd. (support at propersupport.com) + '*.50webs.com', // 64.72.112.10, redirect to mpage.jp, listed in http://www.liquidnetlimited.com/services.html + // propersupport.com // 216.65.1.129(dns1.supremecenter.com) + 'duoservers.com', // 216.65.1.130 + + // 100ws.com // No-ip by LiquidNet Ltd. (ceo at propersupport.com) ), 'domains at agava.com' => array( '.h18.ru', @@ -4010,17 +5163,14 @@ $blocklist['C'] = array( '.younghot.info', ), 'hostorgadmin at googlemail.com' => array( // Byethost Internet Ltd. - '.1sthost.org', + '.yoursupportgroup.com', // 72.36.219.162(*.static.reverse.ltdomains.com) + + // 209.51.196.242 '.22web.net', '.2kool4u.net', - '.4sql.net', - '.php0h.com', - '.php1h.com', - '.php2h.com', // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org - '.phpnet.us', - '.prophp.org', // pro-php.org, - '.byethost.com', - //'byethost1.com' + '.9skul.com', + '.alojalo.info', + '.byet.net', '.byethost2.com', '.byethost3.com', '.byethost4.com', @@ -4038,18 +5188,44 @@ $blocklist['C'] = array( '.byethost16.com', '.byethost17.com', '.byethost18.com', - //'*.byethost19.com', // by Wan-Fu China, Ltd. (business at wanfuchina.com) - '.ifastnet.com', - '.kwikphp.com', + '.headshothost.net', + '.hostwq.net', '.mega-file.net', + '.truefreehost.com', + + '.ifastnet.com', // 209.51.196.243 + + // 209.190.16.82(mx1.byet.org) + '.1sthost.org', + '.4sql.net', + '.byet.org', + '.hyperphp.com', + '.kwikphp.com', '.my-php.net', '.my-place.us', '.my-webs.org', '.netfast.org', + '.php0h.com', + '.php1h.com', + '.php2h.com', // by Andrew Millar (asmillar at sir-millar.com), ns also *.byet.org + '.phpnet.us', '.prohosts.org', + '.pro-php.org', + '.prophp.org', '.sprinterweb.net', '.swiftphp.com', '.xlphp.net', + + // 209.190.16.83(mx2.byet.org) + '.instant-wiki.net', + + // 209.190.16.84(mx3.byet.org) + + // 209.190.16.85(mx4.byet.org) + '.instant-blog.net', + '.instant-forum.net', + + '.byethost.com', // 209.190.18.138 ), 'webmaster at bestgirlssex.info' => array( // by lemnaru ionut, ns *.hostgator.com '.analmoviesite.info', @@ -4184,6 +5360,7 @@ $blocklist['C'] = array( '.jisyn.com', '.kaxem.com', '.mihug.com', + '.mobyb.com', '.qidat.com', '.qihek.com', '.ryzic.com', @@ -4194,6 +5371,8 @@ $blocklist['C'] = array( '.wifuj.com', '.xijyt.com', '.zuqyn.com', + + '.mosugy.com', ), 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru '.hitsearching.info', @@ -4202,21 +5381,424 @@ $blocklist['C'] = array( '.real-big-host.info', '.search4freez.info', '.yasech.info', - ), - 'ice--man at mail.ru' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru + + // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202) + '.bymire.com', + + // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net) + '.ligiwa.com', + + '.mubeho.com', + ), + 'ice--man at mail.ru related' => array( + // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru + '.bestcreola.com', + '.crekatierra.com', + '.creolafire.com', + '.crolik.com', + '.croller.cn', + '.ecrmx.com', + '.eflashpoint.com', '.exoticmed.com', + '.feelview.com', '.greatexotic.com', + '.icrtx.com', + '.icyhip.com', '.icyiceman.com', + '.icypopular.com', + '.iflashpoint.com', + '.justmdx.com', + '.kiliusgroup.com', + '.klickerr.com', + '.klickerrworld.com', + '.kreolic.com', '.margansitio.com', '.margantierra.com', '.mimargan.com', '.oilkeys.com', + '.planetmdx.com', '.thekeyse.com', + '.viewgreat.com', + '.yourcreola.com', + + // 69.46.23.48 + '.bestkilius.com', + '.crekadirecto.com', + '.getflashsite.com', + '.sucreka.com', + '.superkilius.com', + + // 69.46.23.48 by bing-16 at ftunez.org + '.bovorup.cn', + '.litotar.cn', + '.nihydec.cn', + + // 66.232.112.175 by bing-32 at ftunez.org + '.lasyxy.cn', + + // by bing-65 at ftunez.org + '.coxyvuk.cn', // 66.232.120.111(non-existent) + '.comygyx.cn', // 66.232.120.112(non-existent) + '.gyqalec.cn', // 66.232.120.114(non-existent) + '.paluwir.cn', // 66.232.120.114(non-existent) + '.qunonid.cn', // 66.232.120.114(*snip*) + '.qupyvin.cn', // 66.232.120.115(non-existent) + '.ririjyz.cn', // 66.232.120.111(*snip*) + '.saralar.cn', // 66.232.120.113(non-existent) + '.vawomyl.cn', // 66.232.120.115(non-existent) + + // 69.46.23.48 by clarkson-34 at ftunez.org + '.bumora.cn', + '.byxite.cn', + '.byxuqu.cn', + '.jadama.cn', + '.kybope.cn', + '.mefeki.cn', + '.mokiso.cn', + '.niqeme.cn', + '.pukafo.cn', + '.qesaxa.cn', + '.toxezi.cn', + '.tujudy.cn', + '.tutike.cn', + + // NEUTRAL but dark: with clarkson-34 at ftunez.org, non-existent domain + '.cabino.cn', + '.cuwace.cn', + '.ferazi.cn', + '.gigywy.cn', + '.lapype.cn', + '.mewabe.cn', + '.pezegy.cn', + '.pyzuza.cn', + '.qypony.cn', + '.ropesy.cn', + '.wadyfe.cn', + + // 69.46.23.48 clarkson-58 at ftunez.org + '.becabe.cn', + '.biciqy.cn', + '.bezymu.cn', + '.cifori.cn', + '.ciwyxi.cn', + '.dobari.cn', + '.dusofe.cn', + '.dutyda.cn', + '.dykanu.cn', + '.fakexu.cn', + '.fylema.cn', + '.godymo.cn', + '.hyhaxy.cn', + '.ganosi.cn', + '.kuxyju.cn', + '.lacezy.cn', + '.lonyru.cn', + '.lycato.cn', + '.nykyby.cn', + '.qyhuko.cn', + '.redere.cn', + '.riwimu.cn', + '.wopary.cn', + '.xizity.cn', + '.xuxusa.cn', + + // by entretov-28 at ftunez.org + '.hotejen.cn', // 66.232.120.111(*snip*) + '.kyhadat.cn', // 66.232.120.115(*snip*) + + // 69.46.23.48 by entretov-32 at ftunez.org + '.cihuji.cn', + '.deqyve.cn', + '.genefa.cn', + '.gujyju.cn', + '.hasadu.cn', + '.hedomi.cn', + '.kecicy.cn', + '.kipabo.cn', + '.manunu.cn', + '.musoru.cn', + '.myvuna.cn', + '.pikybe.cn', + '.riqawo.cn', + '.rufuxy.cn', + '.vyfilu.cn', + '.xadule.cn', + '.zolaxe.cn', + '.zerixu.cn', + + // 66.232.112.242(hv78.steephost.com) by entretov-43 at ftunez.org + '.dozoda.cn', + '.nemipu.cn', + + // entretov-84 at ftunez.org + '.muruvun.cn', // 66.232.120.114(*snip*) + '.favulol.cn', // 66.232.120.115(*snip*) + '.tixuqyx.cn', // 66.232.120.111(*snip*) + + // 69.46.23.48 by jeremy-57 at ftunez.org + '.duzele.cn', + '.figede.cn', + '.fiwany.cn', + '.gyfalu.cn', + '.jepylo.cn', + '.nuqumy.cn', + + // NEUTRAL but dark: with jeremy-57 at ftunez.org, non-existent domain + '.burahu.cn', + '.jydijy.cn', + '.komyby.cn', + '.najepa.cn', + '.pylobu.cn', + '.qofoly.cn', + '.sybuvi.cn', + '.vycexu.cn', + '.wotyqo.cn', + '.xudoli.cn', + + // by entretov-28 at ftunez.org + '.xevavuv.cn', // 66.232.120.113(*snip*) + + // by entretov-37 at ftunez.org + '.sadyroz.cn', // 66.232.120.114(*snip*) + '.zedutox.cn', // 66.232.120.112(non-existent) + + // 66.232.112.175 by entretov-86 at ftunez.org + '.faweji.cn', + '.jypaci.cn', + '.xozuso.cn', + + // 69.46.23.48 by miles-37 at ftunez.org + '.beqymo.cn', + '.ceqibi.cn', + '.dyraqo.cn', + '.qenedo.cn', + '.qurypa.cn', + '.siluvo.cn', + '.tujala.cn', + '.wukuwi.cn', + '.xenibo.cn', + '.xiculo.cn', + '.zabemu.cn', + + // NEUTRAL but dark: with miles-37 at ftunez.org, non-existent domain + '.bevaka.cn', + '.fysyte.cn', + '.guxixu.cn', + '.hatoli.cn', + '.jitobu.cn', + '.juxeca.cn', + '.kifuhy.cn', + '.licila.cn', + '.mecomy.cn', + '.niryko.cn', + '.noxoco.cn', + '.qiwysu.cn', + '.tutysy.cn', + + // by oker-74 at ftunez.org + '.navufol.cn', + + // by oker-97 at ftunez.org + '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com) + '.mesyvuc.cn', // 66.232.120.111(*snip*) + '.nyjyzup.cn', // 66.232.127.126(*snip*) + '.qagibit.cn', // 66.232.120.114(*snip*) + '.rovazaw.cn', // 66.232.120.112(*snip*) + '.tozojug.cn', // 66.232.120.111(*snip*) + '.xywataw.cn', // 66.232.120.112(*snip*) + + // by polet-20 at ftunez.org + '.mopoxon.cn', // 66.232.127.126(*snip*) + + // 66.232.112.175 by sabrosky-49 at ftunez.org + '.gywiqe.cn', + '.jotapo.cn', + '.jywixa.cn', + + // 69.46.23.48 by sabrosky-60 at ftunez.org + '.bawegap.cn', + '.buremyl.cn', + '.cilybut.cn', + '.cutufek.cn', + '.defypyr.cn', + '.femaxij.cn', + '.gelejo.cn', + '.gocylyv.cn', + '.kehiqaq.cn', + '.ninyjit.cn', + '.ruroruw.cn', + '.vetehow.cn', + + // 69.46.23.48 sabrosky-85 at ftunez.org + '.banyla.cn', + '.bubaqu.cn', + '.bygage.cn', + '.dafozy.cn', + '.kaxyjo.cn', + '.makyle.cn', + '.naleto.cn', + '.pidele.cn', + '.poqexa.cn', + '.pymaqo.cn', + '.qupiqy.cn', + '.reqefy.cn', + '.sopocy.cn', + '.vuhexo.cn', + '.weryso.cn', + '.wubula.cn', + '.xufuxy.cn', + '.zuhyxu.cn', + + // 69.46.23.48 by tribiani-97 at ftunez.org + '.dyxorod.cn', + '.firywoz.cn', + '.jixezyx.cn', + '.joveraw.cn', + '.jowaxup.cn', + '.nodarej.cn', + '.pimijom.cn', + '.tugupeg.cn', + + // 66.232.112.175 by abuse-here at inbox.ru + '.catybe.cn', + '.jytame.cn', + '.wygete.cn', + ), + '74.50.97.*' => array( + '.kaqeje.com', // 74.50.97.51(non-existent) by abuse-here at inbox.ru + '.cumimo.com', // 74.50.97.51(non-existent) by olga at ike.com + '.kaxavo.com', // 74.50.97.52(non-existent) by gunter at ftunez.org + '.hoheru.com', // 74.50.97.52(non-existent) by gunter at ftunez.org + '.tyqoti.com', // 74.50.97.52(non-existent) by anna at hotmail.com + '.fupopu.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru + '.poxupo.com', // 74.50.97.53(non-existent) by inna at gmail.com + '.kuluvo.com', // 74.50.97.53(non-existent) by gunter at ftunez.org + '.wugoba.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru + '.civuhe.com', // 74.50.97.54(non-existent) by olga at ike.com + '.zasuly.com', // 74.50.97.54(non-existent) by olga at ike.com + '.liwowu.com', // 74.50.97.54(non-existent) by abuse-here at inbox.ru + '.vobime.com', // 74.50.97.55(non-existent) by inna at gmail.com + '.nyrive.com', // 74.50.97.55(non-existent) by anna at hotmail.com + '.hehepu.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru + '.bynute.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru + + '.sevimy.com', // 66.232.124.12(time-out) by inna at gmail.com + '.gapubo.com', // 66.232.124.12(time-out) by gunter at ftunez.org + '.vejoku.com', // 66.232.124.12(time-out) by olga at ike.com + '.qysahu.com', // 66.232.124.12(time-out) by abuse-here at inbox.ru + '.hidolu.com', // 66.232.124.13(time-out) by inna at gmail.com + '.tetace.com', // 66.232.124.13(time-out) by gunter at ftunez.org + '.vuxilu.com', // 66.232.124.13(time-out) by olga at ike.com + '.teboca.com', // 66.232.124.13(time-out) by olga at ike.com + '.dizive.com', // 66.232.124.14(time-out) by olga at ike.com + '.peduxe.com', // 66.232.124.14(time-out) by gunter at ftunez.org + '.sybyna.com', // 66.232.124.14(time-out) by gunter at ftunez.org + '.bepofe.com', // 66.232.124.15(time-out) by anna at hotmail.com + '.kuloja.com', // 66.232.124.15(time-out) by gunter at ftunez.org + '.tetadu.com', // 66.232.124.15(time-out) by inna at gmail.com + '.qilato.com', // 66.232.124.15(time-out) by inna at gmail.com + '.lobimi.com', // 66.232.124.16(time-out) by olga at ike.com + '.tazuwe.com', // 66.232.124.16(time-out) by olga at ike.com + '.pihufo.com', // 66.232.124.16(time-out) by olga at ike.com + '.decewa.com', // 66.232.124.16(time-out) by gunter at ftunez.org + + '.lynymu.com', // 206.51.226.194(time-out) by abuse-here at inbox.ru + '.saciqo.com', // 206.51.226.194(time-out) by olga at ike.com + '.zalajy.com', // 206.51.226.194(time-out) by inna at gmail.com + '.hisimy.com', // 206.51.226.194(time-out) by inna at gmail.com + '.qysowe.com', // 206.51.226.194(time-out) by olga at ike.com + ), + 'nijeoi at hotmai.com' => array( + // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru + '.bowij.com', + '.bozib.com', + '.cavux.com', + '.dipov.com', + '.gumoz.com', + '.hakyb.com', + '.hehyv.com', + '.hepyt.com', + '.howoj.com', + '.jywaz.com', + '.ka4search.info', // Found at faweji.cn/ and jytame.cn/, / forbidden + '.kyheq.com', + '.kyzad.com', + '.qicad.com', + '.qubyd.com', + '.mocyq.com', + '.muloq.com', + '.myxim.com', + '.nufyp.com', + '.waqog.com', + '.wyduc.com', + '.xefyv.com', + '.xomej.com', + '.xomip.com', + '.xykyl.com', + '.zakuw.com', + '.zeliw.com', + '.zimev.com', + '.zipif.com', + + // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202) + '.tycoco.com', + + // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202) + '.pufeqa.com', + + '.xehymi.com', + ), + 'niichka at hotmail.com' => array( + // 66.232.113.44, the same approach and IP of clickx at bk.ru + '.aerosearch.info', + '.freader.info', + '.info4searchz.info', + '.nice-host.info', + '.realyfast.info', + '.resuts.info', + + // 66.232.126.74, the same approach and IP of clickx at bk.ru + '.bepoh.com', + '.gufiq.com', + '.kedyh.com', + '.pofyb.com', + '.rurid.com', + '.vucaj.com', + '.vuwir.com', + + // 66.232.97.244(host2.blazegalaxy.com => 71.6.196.202 => fc6196202.aspadmin.net) + '.bejefe.com', + + // 66.232.97.245(host3.blazegalaxy.com => 71.6.196.202) + '.tidawu.com', + + // 66.232.97.247(host5.blazegalaxy.com => 71.6.196.202) + '.rofuqa.com', ), 'porychik at hot.ee' => array( // by Igor '.tedstate.info', // "Free Web Hosting" '.giftsee.com', ), + 'admin at pertol.info' => array( + // 81.0.195.189 "Free Web Hosting" + '.laparka.cn', + '.mirlos.cn', + '.oldmoms.cn', + + // 217.11.233.64(timed-out) + '.ejmpep.cn', // by admin at pertol.info + '.ytere.cn', // by admin at x2t.com + + '.pertol.info', // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com + '.pornography-world.com', // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info + + // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info + '.new-greece-travel.com', + '.peraonline.info', + + '.barkman.cn', + ), + 'aofa at vip.163.com' => array( '.bdjyw.net', // by gaoyun, infected images, iframe to 5944.net's VBScript '.5944.net', @@ -4224,7 +5806,9 @@ $blocklist['C'] = array( 'zerberster at gmail.com' => array( // by Curtis D. Pick, / not found '.maxrentcar.info', '.newsonyericsson.info', + '.pornositeworld.biz', '.rentcarweb.info', + '.xxxdomainsex.biz', ), 'kopper1970 at gmail.com' => array( '.cardealerall.info', // by Green @@ -4340,6 +5924,7 @@ $blocklist['C'] = array( 'supermaster at pisem.net' => array( // by Aleksandr Krasnik (supermaster at pisem.net), ns *.msn-dns.com '.kiski.net.in', '.pipki.org.in', + '.popki.ind.in', '.siski.co.in', ), 'tiptronikmike at mail.com' => array( @@ -4396,7 +5981,8 @@ $blocklist['C'] = array( 'm_koz at mail.ru' => array( // 217.11.233.76 by Kozlov Maxim '.beta-google.com', '.tv-reklama.info', - '.ebooktradingpost.com', // Anonymous like 81.0.195.148 but 217.11.233.76 + '.ebooktradingpost.com', // Anonymous but 217.11.233.76, ns *.ruswm.com + '.constitutionpartyofwa.org', // Anonymous but 217.11.233.76, ns *.ruswm.com, "UcoZ WEB-SERVICES" ), '81.0.195.148' => array( // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found '.abobrinha.org', @@ -4406,8 +5992,10 @@ $blocklist['C'] = array( '.refugeeyouthinamerica.com', ), 'skip_20022 at yahoo.com' => array( + // 203.174.83.55 + '.a28hosting.info', // by Bill Jones '.besthealth06.org', // by yakon, "Free Web Hosting Services" but "BestHealth" - '.besthentai06.org', + '.besthentai06.org', // by yakon ), 'USFINE.com' => array( '.usfine.com', // 74.52.201.108 by Tang zaiping (tzpsky at gmail.com) @@ -4426,7 +6014,11 @@ $blocklist['C'] = array( '.wfe7nv.org', '.xyr99yx.org', ), - '203.171.230.39' => array( // registrar bizcn.com, iframe + cursor + '203.171.230.39' => array( + // by 51shell at 163.com + '.amatou-fc2.com', + + // registrar bizcn.com, iframe + cursor '.playonlinenc.com', '.playboss-jp.com', ), @@ -4439,11 +6031,14 @@ $blocklist['C'] = array( // "Actually, this site has been motivated by a desire to researching search-engine-rank of this site, and researching how the people place this site.". ), 'snap990 at yahoo.com' => array( // by John Glade (snap990 at yahoo.com) + '.date-x.info', // 208.73.34.48(support-office.hostican.com -> 208.79.200.16) + '.getrun.cn', // 208.73.34.48 '.ipod-application.info', // NO IP - '.love-total.net', // 74.50.97.136 - '.stonesex.info', // 74.50.97.136 + '.love-total.net', // 208.73.34.48, was 74.50.97.136(server.serveshare.com) + '.stonesex.info', // NO IP, was 74.50.97.136 ), - 'germerts at yandex.ru' => array( // by Sergey Marchenko (germerts at yandex.ru) + 'germerts at yandex.ru' => array( + // 89.188.112.64(allworldteam.com by aakin at yandex.ru) by Sergey Marchenko (germerts at yandex.ru) '.andatra.info', '.banchitos.info', '.batareya.info', @@ -4452,6 +6047,30 @@ $blocklist['C'] = array( '.gamadril.info', '.gipotenuza.info', '.govnosaklo.info', + '.muflon.info', + '.termitnik.info', + '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..) + ), + '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru) + '.acronis-true-image.info', + '.calcio-xp.info', + '.cosanova.info', + '.cose-rx.info', + '.dictip.info', + '.findig.info', + '.fotonow.info', + '.lavoro-tip.info', + '.loan-homes.info', + '.mionovita.info', + '.mustv.info', + '.newsnaked.info', + '.online-tod.info', + '.opakit.info', + '.opanow.info', + '.opriton.info', + '.porta-bl.info', + '.refdif.info', + '.xzmovie.info', ), '84.252.148.120 etc' => array( '.isurfind.ru', // 84.252.148.120 by Egor S Naumov (prpramer at narod.ru) @@ -4473,6 +6092,7 @@ $blocklist['C'] = array( 'infomed2004 at mail.ru' => array( // by Andrey Ushakov (infomed2004 at mail.ru) '.freeamateursexx.info', // 81.0.195.228 '.freeanalsexx.info', // 217.11.233.97 + '.freegaysexx.info', // 81.0.195.228 ), 'support at dns4me.biz' => array( // 89.149.228.237 by John Black (support at dns4me.biz) '.abbhi.info', @@ -4522,22 +6142,6 @@ $blocklist['C'] = array( '.xphighest.info', '.xptop.info', ), - '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru) - '.acronis-true-image.info', - '.calcio-xp.info', - '.cosanova.info', - '.cose-rx.info', - '.fotonow.info', - '.lavoro-tip.info', - '.loan-homes.info', - '.mionovita.info', - '.mustv.info', - '.newsnaked.info', - '.online-tod.info', - '.opakit.info', - '.opanow.info', - '.xzmovie.info', - ), 'info at thecanadianmeds.com' => array( // by Andrey Smirnov (info at thecanadianmeds.com) '.myviagrasite.com', // 80.74.153.2 '.thecanadianmeds.com', // 80.74.153.17 @@ -4548,10 +6152,24 @@ $blocklist['C'] = array( '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript '.ringtonecooler.com', // 217.11.233.34 ), - 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn) - '.okwit.com', // 220.166.64.44 - '.sakerver.com', // 220.166.64.194 - '.motewiki.net', // 220.166.64.194 + 'dfym at dfym.cn' => array( + // ANI, JavaScript, iframe + + // 220.166.64.44 by chen jinian (dfym at dfym.cn) + '.okwit.com', + '.sakerver.com', + '.motewiki.net', + + '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net + + '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net + + // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net + '.bbtv-chat.com', + '.ketubatle.com', + '.playonlanei.com', + '.rmtfcne.com', + ), 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com) '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net) @@ -4561,27 +6179,90 @@ $blocklist['C'] = array( '.worldsitesearch.info', // 209.8.40.59 ), 'lee.seery at gmail.com' => array( - '.lingvol.com', // 64.21.34.55(klikgoogle.com) + '.klikgoogle.com', // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com) + '.lingvol.com', // 64.21.34.55 '.micevol.com', // 64.21.34.55 + '.heyhey.info', // 64.21.34.55 by anonymous ), '69-64-64-71.dedicated.abac.net etc' => array( // ns *.trklink.com // 69-64-64-71.dedicated.abac.net + '.520-ard.info', + '.550bcards.info', + '.559-cads.info', + '.559caard.info', + '.565-caaard.info', + '.575cadr.info', + '.577cadrs.info', + '.590-acrds.info', + '.596-cadrs.info', + '.596caards.info', + '.596caaard.info', + '.asstablishingcads.info', + '.astablish-ard.info', + '.astablishcacrds.info', + '.begginers-acards.info', + '.begginersacrds.info', + '.beggingcaaard.info', + '.beginercacrds.info', '.cacrdscreating.info', '.caditbegging.info', + '.cadr-buildup.info', '.cadr-establilsh.info', '.cadrs-buildercredit.info', + '.cadrs570.info', '.cads-565.info', // 69-64-64-113.dedicated.abac.net '.interistacards.info', '.intrust-ards.info', '.intrustacrds.info', + '.lfixed-ard.info', '.lowerate-ard.info', + '.lowpercentage-ard.info', '.lowpercentageacrd.info', ), 'acua at mail.ru' => array( + + '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden + + // by adventurer at allmyns.info + '.zgyfubsvi.cn', // 84.16.251.218(*.internetserviceteam.com) + + // by webmaster at allmyns.info + '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS) + '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de) + '.lbtuo.cn', // 84.16.255.254(*.internetserviceteam.com) + '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net) + '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent) + '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de) + '.riumh.cn', // 84.16.226.28(*snip*) + '.zbtym.cn', // 84.16.251.219(*.internetserviceteam.com) + '.zjcgx.cn', // 217.20.112.102(*.internetserviceteam.com) + '.zxvlr.cn', // 84.16.255.253(*.internetserviceteam.com) + + // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found' + '.dns4babka.info', // by acua at mail.ru + + // by golubcov at dns4babka.info + '.toiulw.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200) + + // by webmaster at dns4babka.info + '.credh.cn', + '.fucfv.cn', + '.gdxnk.cn', + '.sqrrt.cn', + '.ywtmd.cn', + '.kncqy.cn', // by webmaster at allmyns.info + // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found' '.dedka2ns.info', // by acua at mail.ru + + // by chasik at dedka2ns.info + '.vlqnoj.cn', // 84.16.251.220(*.internetserviceteam.com) + + // by rochel at dedka2ns.info + '.fudhxjjqh.cn', + // by webmaster at dedka2ns.info '.ascpo.cn', '.jgycr.cn', @@ -4589,89 +6270,583 @@ $blocklist['C'] = array( '.oswde.cn', '.qeyig.cn', '.soqsx.cn', + '.ukncd.cn', + '.zijgb.cn', - // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found' + // 84.16.255.253(*snip*), / says 'noy found' '.dns4dedka.info', // by acua at mail.ru - // by webmaster at dns4dedka.info + + // by aleon at dns4dedka.info + '.afjjvumqa.cn', // 84.16.249.240(*snip*) + + // by dig at dns4dedka.info + '.bdnge.cn', // 84.16.226.28(*snip*) + '.dcdsu.cn', // 217.20.112.102(*snip*) + '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42) + '.frvdv.cn', // 84.16.226.28(*snip*) + '.heulw.cn', // 84.16.226.217(*snip*) + '.hissw.cn', // 84.16.249.240(*snip*) + '.lwqjr.cn', // 84.16.255.253(*snip*) + '.obwew.cn', // 84.16.251.218(*snip*) + '.otkiu.cn', // 84.16.255.254(*snip*) + '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com) + '.rgjcs.cn', // 84.16.251.219(*snip*) + '.rjskp.cn', // 84.16.249.241(*snip*) + '.sokrp.cn', // 84.16.226.217(*snip*) + '.ubtnp.cn', // 84.16.226.29(*snip*) + '.vdecc.cn', // 84.16.226.29(*snip*) + '.vgkkc.cn', // 89.149.196.72(*snip*) + '.vqsmy.cn', // 84.16.249.239(*snip*) + '.xcmsp.cn', // 84.16.251.223(freebsd .. what) + '.xiuky.cn', // 84.16.251.222(*snip*) + '.xrqcd.cn', // 89.149.196.19(*snip*) + + // by la at dns4dedka.info + '.aeyzf.cn', // 84.16.251.218(*snip*) + '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16 + '.bgslu.cn', // 89.149.228.163(*snip*) + '.dxouw.cn', // 84.16.255.253(*snip*) + '.ecsbe.cn', // 84.16.251.218(*snip*) + '.eothy.cn', // 84.16.249.241(*snip*) + '.epocy.cn', // 84.16.251.220(*snip*) + '.ewvjw.cn', // 89.149.196.72(*snip*) + '.faacz.cn', // 84.16.251.222(*snip*) + '.filun.cn', // 89.149.196.72(*snip*) + '.fzdpk.cn', // 84.16.249.239(*snip*) + '.hatyg.cn', // 84.16.251.223(*snip*) + '.hmtqn.cn', // 84.16.249.240(*snip*) + '.ibfte.cn', // 89.149.196.19(*snip*) + '.jcaym.cn', // 84.16.249.240(*snip*) + '.iqzaw.cn', // 84.16.255.254(*snip*) + '.jclsf.cn', // 84.16.249.240(*snip*) + '.jefdh.cn', // 84.16.249.240(*snip*) + '.kchjh.cn', // 84.16.251.219(*snip*) + '.krumo.cn', // 84.16.226.217(*snip*) + '.lbava.cn', // 217.20.112.102(*snip*) + '.mqrtw.cn', // 84.16.226.29(*snip*) + '.njpgv.cn', // 84.16.251.219(*snip*) + '.npovm.cn', // 84.16.226.28(*snip*) + '.nyobt.cn', // 89.149.196.19(*snip*) + '.ovxxt.cn', // 84.16.251.223(*snip*) + '.owhwz.cn', // 89.149.228.163(*snip*) + '.ozjyi.cn', // 84.16.249.241(*snip*) + '.pfnzj.cn', // 84.16.226.217(*snip*) + '.pixvf.cn', // 84.16.255.254(*snip*) + '.qydph.cn', // 89.149.228.163(*snip*) + '.rxens.cn', // 89.149.196.72(*snip*) + '.sojbp.cn', // 84.16.249.239(*snip*) + '.srths.cn', // 84.16.251.222(*snip*) + '.tdytc.cn', // 84.16.255.254(*snip*) + '.unquz.cn', // 84.16.251.223(*snip*) + '.uwcns.cn', // 89.149.196.19(*snip*) + '.vcbdm.cn', // 84.16.251.220(*snip*) + '.wnmat.cn', // 84.16.255.253(*snip*) + '.wttmr.cn', // 84.16.226.29(*snip*) + '.xpwib.cn', // 84.16.251.220(*snip*) + '.yrogt.cn', // 84.16.249.239(*snip*) + + // by le at dns4dedka.info + '.goslw.cn', // 84.16.251.220(*snip*) + '.hqbmh.cn', // 84.16.251.223(*snip*) + '.iewik.cn', // 84.16.255.254(*snip*) + '.jnkeh.cn', // 89.149.228.163(*snip*) + '.pifyp.cn', // 89.149.228.163(*snip*) + '.nohyl.cn', // 89.149.196.72(*snip*) + '.nvzvx.cn', // 84.16.255.254(*snip*) + '.uchoe.cn', // 84.16.249.239(*snip*) + '.ujoyf.cn', // 84.16.251.218(*snip*) + '.ulfqh.cn', // 89.149.196.19(*snip*) + '.vxugv.cn', // 84.16.251.223(*snip*) + '.dbgti.cn', // 84.16.249.240(*snip*) + '.oelmv.cn', // 84.16.226.28(*snip*) + '.qniww.cn', // 84.16.251.218(*snip*) + '.vtvyq.cn', // 84.16.251.219(*snip*) + '.zqonm.cn', // 84.16.249.241(*snip*) + + // by skspb at dns4dedka.info + '.hxkxkjy.cn', // 84.16.226.28(*snip*) + + // 84.16.255.253(*snip*) by webmaster at dns4dedka.info '.bcpnb.cn', '.cfbpr.cn', '.dnndb.cn', '.ekwme.cn', '.iutps.cn', '.ryftj.cn', + '.vxqcb.cn', - // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found' - '.dns4babka.info', // by acua at mail.ru - // by webmaster at dns4babka.info - '.credh.cn', - '.fucfv.cn', - '.gdxnk.cn', - '.sqrrt.cn', - '.ywtmd.cn', + '.ns2best.info', // 89.149.196.19(*snip*) by acua at mail.ru + // by apple at ns2best.info + '.ptiey.cn', // 84.16.252.80(*.internetserviceteam.com) + // by paulwolf at ns2best.info + '.ifytzq.cn', + + '.sedns.info', // 84.16.226.216(*snip*) by acua at mail.ru + // by pigato at sedns.info + '.xjvbunksa.cn', // 217.20.112.102(*snip*) + // by roschem at sedns.info + '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent) + // by op at sedns.info + '.bumfn.cn', + '.csmlu.cn', + '.epcwi.cn', + '.krwzn.cn', + '.lkvcp.cn', + '.mvmkh.cn', + '.nwpeg.cn', + '.rnqol.cn', + '.tyuaf.cn', + '.ucysa.cn', + '.vhyom.cn', + '.wtstu.cn', + '.zslxr.cn', + ), + 'gilvcta sy jilbertsbram.com' => array( + // 206.53.51.126 + '.dsfljkeilm1.cn', + '.dsfljkeilm2.cn', + '.dsfljkeilm3.cn', + '.dsfljkeilm4.cn', + '.dsfljkeilm5.cn', + '.dsfljkeilm6.cn', + '.dsfljkeilm7.cn', + '.dsfljkeilm8.cn', + '.dsfljkeilm9.cn', + '.dsfljkeilm10.cn', + ), + 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com) + + // 69.64.82.76(*.dedicated.abac.net) + '.bruised-criedit.info', + '.bruised-crtedit.info', + '.bruised-czrd.info', + '.bruisedcreditcars.info', + '.bruisedcreitcard.info', + '.bruisedcreitd.info', + '.buliderscreadet.info', + '.cleaningup-cdit.info', + '.cleaningup-cedict.info', + '.cleaningup-cerdic.info', + '.cleanup-crrd.info', + + // 69.64.82.77(*.dedicated.abac.net) + '.bruised-crediot.info', + '.bruised-credtid.info', + '.bruisedcriet.info', + '.bruisedredit.info', + '.buliders-crdt.info', + '.buliders-cre4dit.info', + '.buliders-creadt.info', + '.buliders-credcards.info', + '.buliders-credictcard.info', + '.cleaningupccreditcards.info', + '.cleaningupcdedit.info', + '.cleaningupcedirt.info', + '.cleaningupceidt.info', + '.cleaningupcrasd.info', + '.cleaningupcreait.info', + + // 69.64.82.78(*.dedicated.abac.net) + '.bruised-cridet.info', + '.bruised-drecit.info', + '.bruised-reditcards.info', + '.bruisedcredikt.info', + '.bruisedcredith.info', + '.bruisedcredtid.info', + '.cleanup-criet.info', + '.cleanup-csrds.info', + '.cleanup-dards.info', + + // 69.64.82.79(*.dedicated.abac.net) + '.bruised-crediotcards.info', + '.bruised-creditcar.info', + '.bruised-creid.info', + '.bruised-creidtcard.info', + '.buliders-crdit.info', + '.buliders-creadet.info', + '.cleaningup-ceridt.info', + '.cleaningupcrecit.info', + '.cleaningupccritcard.info', + '.cleanupdredit.info', + '.cleanupredit.info', + ), + '.malwarealarm.com', + // (206.161.201.216 -> 206-161-201-216.pccwglobal.net) + // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something + // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net) + '.viagraorder.org', // IP not allocated, ns *.heyhey.info(IP not allocated) => 89.248.99.110 + 'Inet-Traffic.com' => array( + // "The Inet-Traffic network offers over 6 million unique visitors a month." + //'.dcomm.com', // by D Communications Inc. S.A. + + '.freehomepages.com', // 205.237.204.51 by domains at inet-traffic.com, ns *.dcomm.com + '.inet-traffic.com', // 205.237.204.106(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com + // ... + // 205.237.204.114(www.searchit.com -> 205.237.204.151) + // ... + '.homepagez.com', // 205.237.204.118 by domainadmin at navigationcatalyst.com, ns *.dnsnameserver.org + // ... + '.pagerealm.com', // 205.237.204.121 by domains at inet-traffic.com, ns *.dcomm.com + '.koolpages.com', // 205.237.204.122 by domains at inet-traffic.com, ns *.dcomm.com + '.oddworldz.com', // 205.237.204.123 by domains at inet-traffic.com, ns *.dcomm.com + '.cybcity.com', // 205.237.204.124 by domains at inet-traffic.com, ns *.dcomm.com + '.cybamall.com', // 205.237.204.125 by domains at inet-traffic.com, ns *.dcomm.com + '.haywired.com', // 205.237.204.126 by domains at inet-traffic.com, ns *.dcomm.com + '.cyberturf.com', // 205.237.204.127 by domains at inet-traffic.com, ns *.dcomm.com + '.dazzled.com', // 205.237.204.128 by domains at inet-traffic.com, ns *.dcomm.com + '.megaone.com', // 205.237.204.129 by domains at inet-traffic.com, ns *.dcomm.com + // ... + // 205.237.204.131(www.powow.com -> 205.237.204.136) + // 205.237.204.132(www.pcpages.com -> 205.237.204.135) + // ... + '.pcpages.com', // 205.237.204.135(reverse.dcomm.com) by domains at inet-traffic.com, ns *.addplace.com + '.powow.com', // 205.237.204.136 by domains at inet-traffic.com, ns *.dcomm.com + // ... + // 205.237.204.143(gameroom.com -> 72.32.22.210) + // ... + '.searchit.com', // 205.237.204.151(reverse.dcomm.com) by domains at inet-traffic.com, ns *.dcomm.com + // http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW_SOFTOMATE.A + // ... + '.gameroom.com', // 72.32.22.210 by julieisbusy at yahoo.com, listed at inet-traffic.com and freehomepages.com + ), + 'andreyletov at yahoo.com related' => array( + '.180haifa.com', // 82.103.128.177(e82-103-128-177s.easyspeedy.com) by Andrey Letov + '.mens-medication.com', // 89.248.99.118 by Boris Rabinovich + '.pills-supplier.com', // 89.248.99.118 by Boris Rabinovich + + // 89.248.99.118 by anonymous + '.lpgpharmacy.com', + '.onlybestgalleries.com', + '.viagrabest.info', + '.viagrabestprice.info', + '.viagratop.info', + + '.canadians-medication.com', // 89.248.99.118 by beseo at bk.ru + '.absulutepills.com', // 216.40.236.58(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com + '.eyzempills.com', // 216.40.236.59(*.ev1servers.net) by bulka at skyhaifa.com, redirect to canadians-medication.com + ), + 'alrusnac at hotmail.com' => array( + '.122mb.com', // 209.67.214.122 by Alexandru Rusnac (alrusnac at hotmail.com) + //'.cigarettesportal.com', // 72.36.211.194(*.static.reverse.ltdomains.com) + ), + '203.116.63.123' => array( + '.fast4me.info', // by Hakan Durov (poddubok at inbox.ru), / is blank + '.fastmoms.info', // by Pavel Golyshev (pogol at walla.com), / is blank + ), + 'goodwin77 at bk.ru' => array( // ns *.petterhill.ru + '.autotowncar.cn', // 69.73.146.184 + '.badgirlhome.cn', // 69.73.146.186 + ), + 'Wmp.co.jp' => array( + // 219.94.134.208, ns *.dns.ne.jp, adult + '.celebe.net', // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp" + '.kousyunyu.com', // Admin/Billing/Tech Email: * at wmp.co.jp + // online-support.jp // 202.222.19.81(sv70.lolipop.jp), / blank + ), + 'Macherie.tv' => array( + '.macherie.tv', // 124.32.230.31, pr to himehime.com + '.himehime.com', // 124.32.230.94(recruit.macherie.tv) + '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv + ), + 'admin at fr4f3ds.info' => array( // 217.11.233.54, / forbidden + '.yemine.info', + '.fr4f3ds.info', + ), + '75.126.129.222' => array( + // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...) + '.viagrabuycheap.info', // ns *.advernsserver.com + '.viagrageneric.org', // IP not allocated, ns *.heyhey.info(IP not allocated) => 75.126.129.222 + ), + 'sqr at bk.ru' => array( + // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com) + '.masserch.info', // "Free Web Hosting", spam + '.miserch.info', + ), + 'gangstadra at hotmail.com' => array( + '.kenrucky.com', // 82.98.86.167(*.sedoparking.com) + '.michigab.com', // 82.98.86.175(*.sedoparking.com) + '.pimperos.com', // 82.98.86.163(*.sedoparking.com) + '.pimpcupid.com', // 89.149.226.111(*.internetserviceteam.com) + ), + 'hosan by front.ru' => array( + '.salihome.info', // 206.53.51.155(non-existent) + '.online-freesearch.com', // 206.53.51.155 + '.choosefinest.com', // 206.53.51.157 + '.carsprojects.com', // 206.53.51.159 + '.sport-brands.com', // 206.53.51.167 + '.online-pharmaceutics.com', // 206.53.51.168 + ), + '89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent) + '.canadians-health.com', // by andreyletov at yahoo.com + '.cialischeap.info', + '.superrv.info', + ), + 'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...) + '.hatbi.com', + '.justrty.com', + '.kol2you.com', + '.kolplanet.com', + '.myrty.com', + '.officialrty.com', + '.pbaol.com', + '.planetkol.com', + ), + 'Abra1.com' => array( + // 66.45.254.244(non-existent), 66.45.254.245(non-existent) + '.abra1.com', // by info at maisontropicale.com + '.abra4.com', // by websites at caribbeanonlineinternational.com + + // 209.85.51.238(*.opticaljungle.com -> non-existent) + '.abra2.com', // by domain at anondns.org + '.abra3.com', // by domain at anondns.org + ), + 'topdomainz at gmail.com' => array( + // 217.73.201.237 , ns *.parked.ru + '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info + '.aboutgooglegroup.info', + '.aboutgoogleimage.info', + '.aboutgooglemail.info', + '.aboutgooglemap.info', + '.aboutgooglenews.info', + '.aboutgooglevideo.info', + '.bestgoogleearth.info', + '.magicgoogleearth.info', + '.magicgooglemap.info', + '.magicgooglevideo.info', + + // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info + '.slajzer.info', + '.tonoscelular.info', + '.tonosmotorola.info', ), - 'ganzer3' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com) - '.bruised-cridet.info', // 69.64.82.78(*.dedicated.abac.net) - '.bruised-criedit.info', // 69.64.82.76(*.dedicated.abac.net) - '.bruised-drecit.info', // 69.64.82.78(*.dedicated.abac.net) - '.bruised-reditcards.info', // 69.64.82.78(*.dedicated.abac.net) - '.cleaningupcedirt.info', // 69.64.82.77(*.dedicated.abac.net) - '.cleaningupcrecit.info', // 69.64.82.79(*.dedicated.abac.net) + 'Anderson at extra.by' => array( + // Encoded JavaScript + + // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info + '.4cat.info', // by Anderson at extra.by, ns *.9upp.info + '.6dir.info', + '.8dir.info', + '.9dir.info', + '.2pro.info', + '.5pro.info', // by Anderson at extra.by, ns *.9upp.info + '.6pro.info', + '.7pro.info', + '.8pro.info', + '.9pro.info', + '.5sms.info', + '.6sms.info', + '.8sms.info', + '.9sms.info', + '.1upp.info', + '.2upp.info', + '.3upp.info', + '.4upp.info', + '.5upp.info', + '.6upp.info', + '.7upp.info', + '.8upp.info', + '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info + '.2vip.info', // by Anderson at extra.by + '.4vip.info', + '.5vip.info', + '.6vip.info', + '.7vip.info', + '.8vip.info', // ns *.9upp.info + '.9vip.info', + + // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info + '.w3rar.info', + '.w3sex.info', + '.w3zip.info', + '.w3in.info', + '.w3out.info', + ), + 'zorkin87 at mail.ru' => array( + // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com) + '.ruqore.com', + '.goxama.com', + '.cazebi.com', + '.fukeqa.com', + '.fydoge.com', + '.jukaly.com', + '.jumoga.com', + '.jumuxo.com', + '.tyriva.com', + '.vudyho.com' + ), + 'jessicaeagloff at yahoo.co.uk' => array( + '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com + '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com + '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com + '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk + ), + 'qbbs at xinoffice.com' => array( + // ns *.name-services.com + '.lingage.com', // 8.15.231.118 + '.puksins.com', // IP not allocated now + ), + 'advertolog at gmail.com' => + // 81.0.250.86(network.upl.cz => non-existent) or + // 217.11.233.27 + '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030 + 'contact at aboutdomain.com' => array( + '.lopieur0.com', // Not match but used + '.lopieur1.com', // Not match but used + '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com + ), + 'info at cash4wm.biz related' => array( + // 84.16.233.12(*.internetserviceteam.com) + '.newsblogforu.com', + + // 84.16.235.141() + '.informator4you.com', + + // 84.16.240.68(*.internetserviceteam.com) + '.absolute-best-site.com', + '.new-blog-for-you.com', + + // 84.16.240.69(*.internetserviceteam.com) + '.best-sport-blog.com', + '.big-internet-site.com', + '.brendsite.com', + '.my-news-blog.com', + + // 84.16.242.123(*.internetserviceteam.com) + '.best-news-blog.com', + '.site-with-content.com', + + // The same method with info at cash4wm.biz + '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com), + '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com) + '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent) + '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..) + '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn + '.bloginfo4u.info', // 89.149.247.25 + ), + 'kerjy at yahoo.com' => array( + '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com + '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu + '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com + '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com + '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com + ), + 'vme at hotmail.ru' => array( + '.seoblack.net', // 216.195.33.112(non-exsistent) + '.seoblack.biz', // 216.195.33.113(non-exsistent) + ), + 'john at hellomyns.info' => array( + '.cuhdw.cn', // 217.20.113.27, / nothing + '.byouz.cn', // 89.149.247.24, / nothing + '.idghc.cn', + '.inxrj.cn', + '.jqzdf.cn', + '.vsxej.cn', + '.wkgnr.cn', + ), + '.CN spam payload' => array( + '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com + '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com + '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net + '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com + '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com + '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn + '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com + '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com + '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com + '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn + ), + 'Time2ns.info' => array( + // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58) + '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info + '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info + '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found + ), + 'Ilovemyns.info' => array( + // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info + ), + 'Freehostdns.info' => array( + // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private + '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info + '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info + ), + 'Newns4me.info' => array( + // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public + '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info ), // C-2: Lonely domains (buddies not found yet) '.0721-4404.com', '.0nline-porno.info', // by Timyr (timyr at narod.ru) + '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com) - '.122mb.com', // by Alexandru Rusnac (alrusnac at hotmail.com) - '.180haifa.com', // by Andrey Letov (andreyletov at yahoo.com) '.19cellar.info', // by Eduardo Guro (boomouse at gmail.com) '.1gangmu.com', // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com '.1gb.cc', // by Hakan us (hakanus at mail.com) '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com) '.0annie.info', '.6i6.de', + '.77toperrwuter1.info', // by Roman + '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript + '.angioco.com', // 62.37.112.100, gamble '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com) '.adult-master-club.com', // by Alehander (mazyrkevich at cosmostv.by) '.adultpersonalsclubs.com', // by Peter (vaspet34 at yahoo.com) + '.akalukseree.com', // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript '.akgame.com', // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl + '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be '.alfanetwork.info', // by dante (dantequick at gmail.com) '.allworlddirect.info', // Forbidden '.amoreitsex.com', + '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com + '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com + '.approved-medication.com', // 208.109.181.53(p3slh079.shr.phx3.secureserver.net) '.areahomeinfo.info', // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com '.areaseo.com', // by Antony Carpito (xcentr at lycos.com) + '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com '.auto-car-cheap.org', '.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site '.baurish.info', + '.bernardtomic21.info', // by filboj at hotmail.com '.bestop.name', '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru '.bestshopfinder.info', '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com + '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru) + '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au '.capital2u.info', // by Delbert.A.Henry at dodgeit.com '.casa-olympus.com', // "UcoZ WEB-SERVICES" + '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp '.catkittenmagazines.org', // 87.118.97.117 - '.constitutionpartyofwa.org', // "UcoZ WEB-SERVICES" + '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com + '.chatwalker.com', // 124.32.230.65 + '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com '.covertarena.co.uk', // by Wayne Huxtable '.d999.info', // by Peter Vayner (peter.vayner at inbox.ru) - '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. - //'.wow-gold.dinmo.cn', // 125.65.76.59, pl + '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance + '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl '.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo + '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com '.dlekei.info', // by Maxima Bucaro (webmaster at tts2f.info) '.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank '.drug-shop.us', // by Alexandr (matrixpro at mail.ru) '.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com + '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript + '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com '.easyshopusa.com', // by riter (riter at nm.ru) + '.edjuego.com', // 85.92.70.253(non-existent), gamble '.edu.ph', // "philippine network foundation inc" + '.eec.mn', // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript '.ex-web.net', // RMT by ex co,ltd (rmt at ex-web.net) '.extracheapmeds.com', // "freexxxmovies" by John Smith (89 at bite.to) '.fantasy-handjob-ra.com', // by Hose Pedro (hosepedro at gmail.com) - '.fast4me.info', // by Hakan Durov (poddubok at inbox.ru), / is blank - '.fastmoms.info', // by Pavel Golyshev (pogol at walla.com), / is blank '.fastppc.info', // by peter conor (fastppc at msn.com) - '.ffxiforums.net', // by Zhang xiaolong (mail at 33986.com), hidden VBScript - '*.filthserver.com', // sales at onlinemarketingservices.biz + '.ffxiforums.net', // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript + '.filthserver.com', // sales at onlinemarketingservices.biz '.find-stuff.org', // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found '.firstdrugstorezone.info', // by Goose (boris208 at yandex.ru) '.free-finding.com', // by Ny hom (nyhom at yahoo.com) @@ -4681,17 +6856,20 @@ $blocklist['C'] = array( '.freehost5.com', // 75.126.32.184(kosmohost.net), words only '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com) '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru) + '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79) '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com) '.game4egold.com', // by Filus Saifullin (ebay at soft-script.com) '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com) - '.gomeodc.com', // by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com + '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru + '.gomeodc.com', // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com '.ganecity.com', // by shao tian (huangjinqiang at sina.com) - '.gm-exchange.jp', // RMT + '.gm-exchange.jp', // 210.188.216.49 RMT '.goamoto.ru', // by Dmitry E Kotchnev (z2archive at gmail.com) '.good1688.com', // by Wen Chien Lunz (wzk1219 at yahoo.com.tw), one of them frame to , and whoop.to '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc '.greatbestwestern.org',// by gao.wungao at gmail.com '.greatsexdate.com', // by Andreas Crablo (crablo at hotmail.com) + '.guesttext.info', // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null '.guild-wars-online.com', // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com) '.happyhost.org', // by Paul Zamnov (paul at zamnov.be) '.hloris.com', // by Wilshi Jamil (ixisus at front.ru) @@ -4699,9 +6877,10 @@ $blocklist['C'] = array( '.hostuju.cz', // ns banan.cz, banan.it '.hot4buy.org', // by Hot Maker (jot at hot4buy.org) '.hotscriptonline.info',// by Psy Search (admin at psysearch.com) + '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com) '.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp '.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info) - '.infocart.jp', // Trying to earn money easily by selling 'earn-money-easiliy' tips + '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz '.infradoc.com', '.investorvillage.com', // by natalija puchkova (internet at internet.lv) '.ismarket.com', // Google-hiding. intercage.com related IP @@ -4709,33 +6888,44 @@ $blocklist['C'] = array( '.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru) '.itsexosit.net', '.itxxxit.net', + '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection '.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca) '.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet '.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript + '.jsyuanyang.com', // 58.211.0.23(non-existing) + '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript '.kingtools.de', '.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252 '.leucainfo.com', '.library-blogs.net', // by Peter Scott (pscontent at gmail.com) - '.lingage.com', // by huan bing (qbbs at xinoffice.com) + '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript '.link-keeper.net', // 210.172.108.236 (257.xrea.com) '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com) + '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm) + '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank + '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md) '.medpharmaworldguide.com', // by Nick Ivchenkov (signmark at gmail.com), / not found '.megvideochatlive.info', // Bad seo '.milfxxxpass.com', // by Morozov Pavlik (rulets at gmail.com) + '.mncxvsm.info', // 217.11.233.105, / blank + '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com) + '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org '.myfgj.info', // by Filus (softscript at gmail.com) '.mujiki.com', // by Mila Contora (ebumsn at ngs.ru) '.mxsupportmailer.com', '.next-moneylife.com', // RMT '.newalandirect.com', // by Alnoor Hirji, ns *.sablehost.com '.ngfu2.info', // by Tara Lagrant (webmaster at ngfu2.info) + '.northwestradiator.com', // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript '.nucked-sex.com', // 203.223.150.222 by lis (noidlis2 at yahoo.com) '.ok10000.com', // by zipeng hu (ldcs350003 at hotmail.com) '.olimpmebel.info', // by pol (pauk_life at mail.ru), frame to bettersexmall.com '.onlinetert.info', // by Jarod Hyde (grigorysch at gmail.com) '.onlin-casino.com', // by Lomis Konstantinos (businessline3000 at gmx.de) '.onlineviagra.de', + '.oppe.biz', // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com '.ornit.info', // by Victoria C. Frey (Victoria.C.Frey at pookmail.com) '.ozomw.info', '.pahuist.info', // by Yura (yuralg2005 at yandex.ru) @@ -4744,13 +6934,13 @@ $blocklist['C'] = array( '.pharmacy2online.com', // by Mike Hiliok (bbong80 at yahoo.com) '.pills-storage.com', // by '.plusintedia.com', // by g yk (abc00623 at 163.com), seems not used now - '.popki.ind.in', // by Aleksandr Krasnik (supermaster at pisem.net) '.porkyhost.com', // 79965 at whois.gkg.net '.porno-babe.info', // by Peter (asdas at mail.ru), redirect to Google '.pornesc.com', // by Xpeople (suppij atmail.ru) '.portaldiscount.com', // by Mark Tven (bestsaveup at gmail.com) '.powerlevelingweb.com', // 68.178.211.9 by jun zhang (huanbing at 126.com), pl '.prama.info', // by Juan.Kang at mytrashmail.com + '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts ',pulsar.net', // by TheBuzz Int. (theboss at tfcclion.com) '.qoclick.net', // by DMITRIY SOLDATENKO '.quality-teen-porn-photo.com', // by info at densa.info @@ -4759,10 +6949,13 @@ $blocklist['C'] = array( '.rigame.info', // by debra_jordan07 at yahoo.com '.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt '.roin.info', // by Evgenius (roinse at yandex.ru) + '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) + '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru '.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com) + '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com '.searchadv.com', // by Jaan Randolph (searchadv at gmail.com) '.seek-www.com', // by Adam Smit (pingpong at mail.md) - '.sessocities.net', // by info at secureserver3.com + '.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com '.seven-pharmacy.com', // 83.138.176.247 by Justin Timberlake (preved at gmail.com) '.sexamoreit.com', '.sexforit.com', @@ -4773,22 +6966,33 @@ $blocklist['C'] = array( '.sepcn.info', // / not found '.sslcp.com', // by shufang zhou (info at 6come.com), dns *.hichina.com '.sticy.info', // by Richard D. Mccall (richardmccall at yahoo.com) + '.stordproduksjonslag.no', // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript + '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales '.superrwm.info', // by Dark Dux (duxdark at yahoo.com) + '.superverizonringtones.com', // by joshua at list.ru + '.teriak.cn', // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank + '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com '.thehostcity.com', // Domains by Proxy + '.thesuperxxx.com', // 81.29.249.27(non-existent) '.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank '.thetrendy.info', // by Harold (Harold.J.Craft at pookmail.com), / is blank '.theusapills.com', // by Dr. Zarman (contactus at theusapills.com) '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com) '.topmeds10.com', + '.tschofenig.com', // 213.239.234.98(*.clients.your-server.de), port 8080 + '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net) '.twabout.com', // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net '.uaro.info', // by Neru Pioner (neru at smtp.ru) '.unctad.net', // by gfdogfd at lovespb.com '.vacant.org.uk', - '.vip-get.info', // by Jhon Craig (bartes1992 at mail.ru), / forbidden + '.viagrausaonline.com', // 85.17.52.139(non-existent) + '.vip-get.info', // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden '.virtualsystem.de', '.vdxhost.com', - '.vviccd520.com', // by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript + '.vodkaporn.com', // 67.19.116.83(non-existent) by green at gmx.co.uk + '.vviccd520.com', // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript '.homes.com.au', // 139.134.5.124 by wongcr at bigpond.net.au, / meanless, + '.wbtechs.us', // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com '.webnow.biz', // by Hsien I Fan (admin at servcomputing.com) '.webtools24.net', // by Michael Helminger (info at ishelminger.de) '.wer3.info', // by Martin Gundel (Martin at mail.com), 404 not found @@ -4797,22 +7001,18 @@ $blocklist['C'] = array( '.womasia.info', // by Mark Fidele (markfidele at yahoo.com) '.worldinsurance.info', // by Alexander M. Brown (Alex_Brown at yahoo.com), fake-antivirus '.wow-powerleveling-wow.com', // 63.223.77.112 by dingmengxl at 126.com, pl - '.wowgoldweb.com', // by lei chen (dreamice at yeah.net), rmt & pl + '.wowgoldweb.com', // 64.202.189.111(winhostecn28.prod.mesa1.secureserver.net) by lei chen (dreamice at yeah.net), rmt & pl '.wwwna.info', // / 404 Not Found '.xpacificpoker.com', // by Hubert Hoffman (support at xpacificpoker.com) '.xamorexxx.net', '.xn--gmqt9gewhdnlyq9c.net', // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp '.xsessox.com', + '.xxxmpegs.biz', // 217.11.233.65, redirect to *.malwarealarm.com, / null '.yoi4.net', // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here. '.zlocorp.com', // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/" '.zyguo.info', // ns globoxhost.net '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com) - '.guesttext.info', // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null - '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md) - '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com) - '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com) - '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net) // C-3: Not classifiable (information wanted) // @@ -4823,9 +7023,11 @@ $blocklist['C'] = array( ), ); +// -------------------------------------------------- + $blocklist['D'] = array( // D: Sample setting of - // "third party in good faith"s + // "Third party in good faith"s // // Hosts shown inside of the implanted contents, // not used via spam, but maybe useful to detect these contents @@ -4833,10 +7035,16 @@ $blocklist['D'] = array( // 'RESERVED', ); +// -------------------------------------------------- $blocklist['E'] = array( // E: Sample setting of - // Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers, Ads + // Promoters + // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers, + // Ads, Business promotions, SEO, etc) + // + // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc. + // Sometimes they may promote each other '15-Mail.com related' => array( '.15-mail.com', // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp) @@ -4876,7 +7084,7 @@ $blocklist['E'] = array( '.internetmarketinggorinjyu.com', // by Masatoshi '.marketing-force-japan.com', // by Fujio '.masatoshikobayashi.com', // by Fujio - '.profitsinstigator.com', // by Masatoshi Kobayashi (akada@e-brainers.com) + '.profitsinstigator.com', // by Masatoshi Kobayashi (akada at e-brainers.com) '.replytomatt.com', // by Fujio '.santa-deal.com', // by Fujio '.santa-deal-summer.com', // by Fujio @@ -4888,7 +7096,7 @@ $blocklist['E'] = array( '.viralarticle.com', // by Fujio '.wowhoken.com', // by Fujio - // 202.212.14.104 by Fujio Iwasaki (domain@sppd.co.jp) + // 202.212.14.104 by Fujio Iwasaki (domain at sppd.co.jp) '.brainerstelevision.com', '.demosite4you.com', '.keywordcatcherpro.com', @@ -4914,17 +7122,74 @@ $blocklist['E'] = array( '.e2996.com', // 202.181.105.241(sv261.lolipop.jp) 'ezinearticles.com', // 216.235.79.13 by C Knight (opensrs at sparknet.net) '.fx4rich.com', // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com) + 'gonz-style.com', // 210.251.253.242(s187.xrea.com) by arai at p-cafe.net, reseller + 'Hokuken.com' => array( // Bisuness promotion, affiliate about QHM + '.hokuken.com', // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com) + '.1st-easy-hp.com', // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com) + '.open-qhm.net', // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken" + + // Redirects and affiliates: + // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp) + // yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX redirects to www.1st-easy-hp.com/index.php?iInfoCart + // info.mizo3.com/fwd/qhm redirects to (*snip*)af=moukaru88y(*snip*) + // sanpei.vc/fwd/startkit redirects to (*snip*)af=katosanpe(*snip*) + // ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*) + // qhm.kikikan.com points several links to (*snip*)af=kikikan(*snip*) + // www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*) + // ... + + // Other suggestions: + // info.mizo3.com says: "Owners who bought QHM from MY site..." + + // Blog posting at the same time + // 2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html + // 2007/06/13 e123.info/archives/76 + // 2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html + // 2007/06/25 ichibankantan.seesaa.net/article/52650651.html + // 2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php + ), 'info at kobeweb.jp' => array( '.soholife.jp', // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp) '.kobeweb.jp', // 59.106.13.51(www421.sakura.ne.jp) '.sloters.tv', // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp) ), '.info-affiliate.net', // 219.94.148.8(sv41.chicappa.jp) + 'Infocart.jp' => array( // by wai at infocart.jp + // Trying to earn money easily by selling 'earn-money-easiliy' tips + //descr: INFOMAG (Shimooka,Yasuyoshi) + '.infocart.jp', // 60.32.154.171, by Hawaiikigyo, affiliate + + //inetnum: 60.32.154.176 - 60.32.154.183 + // descr: HAWAII KIGYO.COM (Shimooka,Yasuyoshi) + '.infomag.jp', // 60.32.154.179, by Infocart, business promotion + ), + 'Info-sniper.com' => array( + '.1koibana.com', // 59.106.12.162(sv265.lolipop.jp), says "Info-sniper presents" + '.info-sniper.com', // 202.222.18.25(sv37.lolipop.jp) + '.mailjoho.com', // 202.222.19.81(sv70.lolipop.jp), says "Info-sniper", link to info-sniper.com and 2muryoureport.com + ), '.infostore.jp', // 216.255.235.45, ns *.estore.co.jp + '.junquito55.com', // 59.106.12.213(sv281.lolipop.jp) 'JunSuzuki.com' => array( // e-brainers.com related '.junsuzuki.com', // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net) '.globalswing.biz', // 210.188.217.109(sv27.xserverzero.net) ), + 'Natsukih.net' => array( + '.natsukih.net', // 210.188.245.5(sv04.futurismworks.jp) by natsuki hayashi(ii at leo.bekkoame.ne.jp) + '.1seikou.biz', // 221.186.251.73(s68.xrea.com), says "by natsuki hayashi", "Heisei natsuki project" + '.oniblog.net', // 210.251.253.242(s187.xrea.com), says "Heisei natsuki project", see also blog.1seikou.biz + '.muryoureport.com', // 210.188.205.58(sv311.lolipop.jp), redirect to 2muryoureport.com + + // by info at natsukih.net + '.1muryoureport.com', // 222.227.75.40(s162.xrea.com), says "Heisei natsuki project" + '.2muryoureport.com', // 59.139.29.227(s233.xrea.com), says "Heisei natsuki project" + '.3muryoureport.com', // 222.227.75.45(s167.xrea.com) + '.4muryoureport.com', // 202.222.31.77(sakura1.digi-rock.com) + '.5muryoureport.com', // 210.251.253.230 + '.6muryoureport.com', // 202.222.31.77(*snip*) + '.7muryoureport.com', // 202.222.31.77(*snip*) + '.muryouaff.com', // 210.251.253.238(s183.xrea.com) + ), 'Point-park.com' => array( // Tadahiro Ogawa (domain at wide.ne.jp) '.11kanji.com', // 211.10.131.88 '.mlmsupport.jp', // 211.10.131.108 by info at point-park.com @@ -4932,7 +7197,20 @@ $blocklist['E'] = array( '.point-park.jp', // 43.244.140.160(160.140.244.43.ap.yournet.ne.jp) ), '.potitto.info', // 219.94.132.89(sv450.lolipop.jp) - '.sedori-data.com', // + 'PRJAPAN.co.jp' => array( + //'.prjapan.co.jp', // 211.10.20.143(sv.prjapan.co.jp) + 'go.prjapan.co.jp', // 210.189.72.220(sv.webstars.jp) + '.bestsale.jp', // 210.189.77.143 "Public Relations Inc." by info at prjapan.co.jp, kamita at prjapan.co.jp, nakade at prjapan.co.jp + '.hyouka-navi.jp', // 202.218.52.63(sv.numberzoo.jp) by kamita at i-say.net + '.sugowaza.jp', // 210.189.77.143(sv.bestsale.jp) by kamita at i-say.net, + //'.webstars.jp', // 210.189.72.220 by info at prjapan.co.jp + ), + 'Rakuten.co.jp' => array( + 'hb.afl.rakuten.co.jp', ///hsc/ 203.190.60.104 redirect to rakuten.co.jp + 'hbb.afl.rakuten.co.jp', ///hsb/ 203.190.60.105 image server? + ), + '.sedori-data.com', // 210.188.205.7(sv03.lolipop.jp) + '.seozone.jp', // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn '.tool4success.com', // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com) 'tera at kirinn.com' => array( // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com) '.e123.info', @@ -4940,10 +7218,14 @@ $blocklist['E'] = array( '.j012.net', '.xn--yckc2auxd4b6564dogvcf7g.biz', ), + 'Viscose.jp' => array( + '.web-navi21.com', // 202.222.30.12 by kazuhiro shikano(shikano at guitar.ocn.ne.jp) + '.viscose.jp', ///link/ 210.188.205.205(sv370.lolipop.jp) by kazuhiro shikano + ), '.zakkuzaku.com', // 210.188.201.44(sv83.xserver.jp) ); - +// -------------------------------------------------- $blocklist['Z'] = array( // Z: Yours @@ -4952,4 +7234,5 @@ $blocklist['Z'] = array( //'', //'', ); + ?>