X-Git-Url: http://git.osdn.net/view?p=pukiwiki%2Fpukiwiki_sandbox.git;a=blobdiff_plain;f=spam%2Fspam.ini.php;h=9feb2e78f7504131f7b11714b2d305383a57a343;hp=f02521ce6b8aa77274640e072392fc2473c24393;hb=8416229f47ede0f7fc6a8f5a017b1eb0d5257270;hpb=edfbe5a3abb4c91ea77d57242b6635449ff9c5cc diff --git a/spam/spam.ini.php b/spam/spam.ini.php index f02521c..9feb2e7 100644 --- a/spam/spam.ini.php +++ b/spam/spam.ini.php @@ -1,5 +1,5 @@ FALSE, +// 'official/dev' => FALSE, ); // 'list': Normal list $blocklist['list'] = array( 'A-1' => TRUE, // General redirection services //'A-2' => TRUE, // Dynamic DNS, Dynamic IP services, ... - 'B-1' => TRUE, // Web spaces + 'B-1' => TRUE, // Web N.M spaces 'B-2' => TRUE, // Jacked contents, something implanted 'C' => TRUE, // Exclusive spam domains //'D' => TRUE, // "Third party in good faith"s @@ -57,28 +58,25 @@ $blocklist['list'] = array( // -------------------------------------------------- +// Ignorance list $blocklist['goodhost'] = array( - // Sample setting of ignorance list - 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#', +); +$blocklist['official/dev'] = array( // PukiWiki-official/dev specific - //'pukiwiki.sourceforge.jp', - //'pukiwiki.org', // Temporary - //'.logue.tk', // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01) - //'.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) - //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk - //'emasaka.blog65.fc2.com', // Text-to-Impress converter - //'ifastnet.com', // Server hosting - //'threefortune.ifastnet.com', // Server hosting - //'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker - //'' - //'' - //'' - + 'pukiwiki.sourceforge.jp', + '.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) + '.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk + 'emasaka.blog65.fc2.com', // Text-to-Impress converter + 'ifastnet.com', // Server hosting + 'threefortune.ifastnet.com', // Server hosting + 'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker + 'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer ); + // -------------------------------------------------- // A: Sample setting of // Existing URI redirection or masking services @@ -93,15 +91,30 @@ $blocklist['A-1'] = array( // for spammers and affiliate users dazed by money. // // Messages from forerunners: + // idek.net + // "..., idek will stop accepting requests to + // create new urls. " // o-rly.net // "A URL REDIRECTION SERVICE GONE BAD" // "SORRY, TRULY" // smcurl.com // "Idiots were using smcURL to shrink URLs and // send them out via spam." + // symy.jp + // "One or more users are using our URL redirect + // service for spam/botnet. + // So we closed this service." // tinyclick.com // "...stop offering it's free services because // too many people were taking advantage of it" + // tr.im + // "The decision is based on waving the white + // flag on a never ending battle with spammers + // that relentlessly abuse tr.im." + // u.nu + // "Since the beginning, it has been plagued + // with abuse from spammers and other + // no-goodniks." // xjs.org // "We have been forced to close this facility // due to a minority of knuckle draggers who @@ -128,6 +141,7 @@ $blocklist['A-1'] = array( '1url.org', '1url.in', '1webspace.org', + '2am.jp', '2Ch.net' => array( 'ime.nu', 'ime.st', @@ -172,6 +186,7 @@ $blocklist['A-1'] = array( '*.ovp.pl', '*.6-6-6.pl', ), + 'babelfish.altavista.com', ///babelfish/trurl_pagecontent 'amoo.org', 'web.archive.org', ///web/2 'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net @@ -188,11 +203,16 @@ $blocklist['A-1'] = array( 'athomebiz.com', 'aukcje1.pl', 'beam.to', + '*.bebo.com', 'beermapping.com', 'besturl.in', 'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com 'biglnk.com', 'bingr.com', + 'bit.ly' => array( + 'bit.ly', + 'j.mp', + ), 'bittyurl.com', '*.bizz.cc', '*.blo.pl', @@ -211,6 +231,7 @@ $blocklist['A-1'] = array( ), 'budgethosts.org', 'budu.com', // by peter.eder at imcworld.com + 'budurl.com', '*.buzznet.com', '*.bydl.com', 'C-O.IN' => array( @@ -231,6 +252,7 @@ $blocklist['A-1'] = array( 'christopherleestreet.com', 'cintcm.com', '*.cjb.net', + 'cli.gs', 'clipurl.com', '*.co.nr', 'Comtech Enterprises ' => array( // comteche.com @@ -283,6 +305,7 @@ $blocklist['A-1'] = array( '.goshrink.com', 'ushrink.com', ), + '.eazylink.net', // 2010/08 by info at digitalinsights.biz 'easyurl.jp', // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com, // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45 // This service seems to be opened at 2007/08/23 with "beta" sign. @@ -435,9 +458,10 @@ $blocklist['A-1'] = array( '*.globalredirect.com', 'gnu.vu', '*.go.cc', - //'Google.com' => array( + 'Google.com' => array( // google.com/translate_c\?u=(?:http://)? - //), + 'goo.gl', // by (dns-admin at google.com) + ), 'goonlink.com', '.gourl.org', '.greatitem.com', @@ -484,6 +508,10 @@ $blocklist['A-1'] = array( 'iat.net', // 74.208.58.130 by Tony Carter 'ibm.com', ///links (Correct it) '*.iceglow.com', + 'internetadresi.com' => array ( + 'rxbuycheap.com', + 'rxcheapwestern.com', + ), 'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info) 'Ideas para Nuevos Mercados SL' => array( // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com) @@ -602,6 +630,7 @@ $blocklist['A-1'] = array( '.iwebtool.com', 'j6.bz', 'jeeee.net', + 'is.gd', 'Jaze Redirect Services' => array( '*.arecool.net', '*.iscool.net', @@ -851,6 +880,7 @@ $blocklist['A-1'] = array( 'linkezy.com', 'linkfrog.net', 'linkook.com', + 'linkyme.com', 'linkzip.net', 'lispurl.com', 'lnk.in', @@ -883,6 +913,7 @@ $blocklist['A-1'] = array( ), 'monster-submit.com', 'mooo.jp', + 'moourl.com', 'murl.net', 'myactivesurf.net', 'mytinylink.com', @@ -901,11 +932,13 @@ $blocklist['A-1'] = array( '*.ontheinter.net', 'ourl.org', 'ov2.net', // frame + 'ow.ly', '*.ozonez.com', 'pagebang.com', 'palurl.com', '*.paulding.net', 'phpfaber.org', + 'pygmyurl.com', 'pnope.com', 'prettylink.com', 'PROXID.net' => array( // also xRelay.net @@ -916,6 +949,7 @@ $blocklist['A-1'] = array( '*.site.tc', '*.societe.st', ), + 'qqa.jp', 'qrl.jp', 'qurl.net', 'qwer.org', @@ -937,6 +971,7 @@ $blocklist['A-1'] = array( 'rio.st', 'rlink.org', '*.rmcinfo.fr', + 'roo.to', // Seems closed, says "bye-bye" 'rubyurl.com', '*.runboard.com', 'runurl.com', @@ -1032,11 +1067,15 @@ $blocklist['A-1'] = array( 'slink.in', 'smallurl.eu', 'smurl.name', + 'sn.im', 'snipurl.com', 'sp-nov.net', 'splashblog.com', 'spod.cx', '*.spydar.com', + 'StumbleUpon.com' => array( + 'su.pr', // by (hostmaster at stumbleupon.com) + ), 'Subdomain.gr' => array( '*.p2p.gr', '*.subdomain.gr', @@ -1044,7 +1083,6 @@ $blocklist['A-1'] = array( 'SURL.DK' => array('surl.dk'), // main page is: s-url.dk 'surl.se', 'surl.ws', - 'symy.jp', 'tdurl.com', 'tighturl.com', 'tiniuri.com', @@ -1063,6 +1101,7 @@ $blocklist['A-1'] = array( 'titlien.com', '*.tlg.pl', 'tlurl.com', + 'twurl.nl', // 2010-09 87.255.53.196 (redirects tweetburner.com 87.255.53.196) 'link.toolbot.com', 'tnij.org', 'Tokelau ccTLD' => array('.tk'), @@ -1070,8 +1109,12 @@ $blocklist['A-1'] = array( '*.toolbot.com', '*.torontonian.com', 'trimurl.com', - 'ttu.cc', + //'ttu.cc', // Seems closed 'turl.jp', + 'Twitter' => array( + 't.co', // by (cofounders at cointernet.co) + 'twt.tl', + ), '*.tz4.com', 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master '*.1.to', @@ -1102,6 +1145,7 @@ $blocklist['A-1'] = array( '*.ever.to', '*.mini.to', ), + 'u-go.to', 'uchinoko.in', 'Ulimit.com' => array( '*.be.tf', @@ -1131,6 +1175,7 @@ $blocklist['A-1'] = array( '*.unixlover.com', '*.zik.mu', ), + 'urltea.com', '*.uni.cc', 'UNONIC.com' => array( '*.at.tf', // AlpenNIC @@ -1186,6 +1231,7 @@ $blocklist['A-1'] = array( ), '*.urlproxy.com', 'urlser.com', + 'urlshorteningservicefortwitter.com', 'urlsnip.com', 'urlzip.de', 'urlx.org', @@ -1365,13 +1411,19 @@ $blocklist['A-1'] = array( ), '*.xshorturl.com', // by Markus Lee (soul_s at list.ru) '.y11.net', + 'Yahoo.co.jp' => array( + 'wrs.search.yahoo.co.jp', + ), + 'Yahoo.com' => array( + 'rds.yahoo.com', + ), + 'yatuc.com', + 'yep.it', 'YESNS.com' => array( // by Jae-Hwan Kwon (kwonjhpd at kornet.net) '*.yesns.com', '*.srv4u.net', //blogne.com ), - 'yatuc.com', - 'yep.it', 'yumlum.com', 'yurel.com', 'Z.la' => array( @@ -1487,7 +1539,7 @@ $blocklist['A-2'] = array( $blocklist['B-1'] = array( - // B-1: Web spaces + // B-1: Web N.M spaces (N > 0, M >= 0) // // Messages from forerunners: // activefreehost.com @@ -1498,6 +1550,8 @@ $blocklist['B-1'] = array( // to take time for software improvement to fight // with server abuse, Spam advertisement and // fraud." + // wsboards.com + // had been removed due to spam (noticed by its domain owner) // '*.0000host.com', // 68.178.200.154, ns *.3-hosting.net '*.007ihost.com', // 195.242.99.199(s199.softwarelibre.nl) @@ -1507,13 +1561,17 @@ $blocklist['B-1'] = array( '0Catch.com related' => array( '*.0catch.com', // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com - // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com + // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com + '*.100megsfree5.com', + + // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com '*.100freemb.com', // by Danny Ashworth + '*.easyfreehosting.com', '*.exactpages.com', '*.fcpages.com', '*.wtcsites.com', - // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com + // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com '*.741.com', '*.freecities.com', '*.freesite.org', @@ -1521,15 +1579,15 @@ $blocklist['B-1'] = array( '*.freewebsitehosting.com', '*.jvl.com', - // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com + // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com '*.freespaceusa.com', '*.usafreespace.com', - // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com + // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com '*.dex1.com', '*.questh.com', - // 209.63.57.10(www1.0catch.com), ns *.0catch.com + // 209.63.57.10(*snip*), ns *.0catch.com '*.00freehost.com', // by David Mccall (superjeeves at yahoo.com) '*.012webpages.com', // by support at 0catch.com '*.150m.com', @@ -1585,6 +1643,7 @@ $blocklist['B-1'] = array( '*.20me.com', ), '*.100foros.com', + '*.101freehost.com', '*.12gbfree.com', // 75.126.176.194 by ashphama at yahoo.com '20six Weblog Services' => array( '.20six.nl', // by 20six weblog services (postmaster at 20six.nl) @@ -1743,6 +1802,7 @@ $blocklist['B-1'] = array( '*.blogandorra.com', '*.blogangola.com', '*.blogaruba.com', + '*.blogaustria.at', ), '*.blog.com.es', '*.blog.hr', @@ -1823,6 +1883,7 @@ $blocklist['B-1'] = array( '*.cdnhost.cn', // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html '*.chueca.com', 'city-forum.com', + '*.clicdev.com', '*.craigslist.org', 'concepts-mall.com', '*.conforums.com', // by Roger Sutton (rogersutton at cox.net) @@ -1855,6 +1916,7 @@ $blocklist['B-1'] = array( '*.ekiwi.de', '*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com) '.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it) + '*.easyjournal.com', '*.ebloggy.com', 'enunblog.com', '*.epinoy.com', @@ -2544,12 +2606,11 @@ $blocklist['B-1'] = array( '*.free-25.de', '*.free-bb.com', 'Free-Blog-Hosting.com' => array( - 'free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com - 'cheap-web-hosting-411.com', // by Robert Vigil, ns *.thisismyserver.net - 'blog-tonite.com', // ns *.phpwebhosting.com - 'blogznow.com', // ns *.phpwebhosting.com - 'myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com - 'blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com + '*.free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com + '*.blog-tonite.com', // ns *.phpwebhosting.com + '*.blogznow.com', // ns *.phpwebhosting.com + '*.myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com + '*.blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com ), '*.free-forums.org', // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro) 'free-guestbook.net', @@ -2604,6 +2665,10 @@ $blocklist['B-1'] = array( '*.googlegroups.com', ///web/ '*.googlepages.com', 'groups-beta.google.com', + 'groups.google.*', ///group/ Seems widely distributed + //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk', + //'groups.google.de', 'groups.google.es', 'groups.google.fr', + //'groups.google.it', ... ), 'guestbook.at', 'club.giovani.it', @@ -2684,18 +2749,26 @@ $blocklist['B-1'] = array( '*.joolo.com', '*.journalscape.com', '*.justfree.com', - '*.blog.kataweb.it', + 'kataweb.it' => array( // kata-redir.kataweb.it + '*.blog.kataweb.it', + '*.repubblica.it', + ), '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com '*.kokoom.com', 'koolpages.com', '*.kostenlose-foren.org', '*.ksiegagosci.info', + 'LaCoctelera.com' => array( + 'lacoctelera.com', // by alberto at the-cocktail.com + 'espacioblog.com', // by dominios at ferca.com + ), 'Lide.cz' => array( '*.lide.cz', '*.sblog.cz', ), '*.lioru.com', 'limmon.net', + 'linkinn.com', 'lipstick.com', // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com 'listible.com', ///list/ 'Livedoor.com' => array( @@ -2903,6 +2976,7 @@ $blocklist['B-1'] = array( '.aim.to', '.djmp.jp', '.nihongourl.nu', + '.url.sh', // Says SmarTrans '.urljp.com', '.www1.to', '.www2.to', @@ -3103,7 +3177,7 @@ $blocklist['B-1'] = array( '*.wizhoo.com', // by Comp U Door (sales at comp-u-door.com) '*.wmjblogs.ru', '*.wordpress.com', - '.wsboards.com', // by Chris Breen (Cbween at gmail.com) + //'.wsboards.com', // Noticed this site had been removed due to spam 'xeboards.com', // by Brian Shea (bshea at xeservers.com) '*.xforum.se', 'xfreeforum.com', @@ -3158,11 +3232,14 @@ $blocklist['B-2'] = array( 'alwanforthearts.org', '*.anchor.net.au', 'anewme.org', + 'arcrockett.com', ///golf/excel/ 'arisedesign.net', //Portfolio/d981/ 'internetyfamilia.asturiastelecentros.com', + 'ballblair.com', ///images/thumbs/ 'Ball State University' => array('web.bsu.edu'), 'btofaq.net', ///v3/forum 'blepharospasm.org', + 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net 'nyweb.bowlnfun.dk', '*.buzznet.com', 'Carroll College' => array( @@ -3173,6 +3250,7 @@ $blocklist['B-2'] = array( 'Case Western Reserve University' => array('case.edu'), 'ceval.de', 'chaco.gov.ar', + 'chasingrainbowsaustralia.com', ///geometry/ 'codespeak.net', 'Colorado School of Mines' => array('ticc.mines.edu'), '*.colourware.co.uk', @@ -3198,8 +3276,10 @@ $blocklist['B-2'] = array( 'forums.drumcore.com', 'dundeeunited.org', 'energyglass.com.ua', + 'equitas.com.au', ///images/mim3/, no index.html 'exclusivehotels.com', 'info.ems-rfid.com', + 'fairyfunkyard.com', ///images_files/files/ 'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com) 'fbwloc.com', '.fhmcsa.org.au', @@ -3313,6 +3393,7 @@ $blocklist['B-2'] = array( 'ryanclark.org', '*.reallifelog.com', 'rkphunt.com', + 'rso-csp.org', ///bulletins/ '.saasmar.ru', // Jacked. iframe to banep.info on root, etc 'sapphireblue.com', 'saskchamber.com', @@ -3381,7 +3462,7 @@ $blocklist['B-2'] = array( '.xthost.info', // by Michael Renz (dhost at mykuhl.de) 'Yahoo.com' => array( 'blog.360.yahoo.com', - '*.groups.yahoo.com' + '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ... ), 'yasushi.site.ne.jp', // One of mixedmedia.net' 'youthpeer.org', @@ -3930,7 +4011,12 @@ $blocklist['C'] = array( 'aakin at yandex.ru' => array( // 89.149.206.225(*.internetserviceteam.com) by Baer '.entirestar.com', + '.joppperl.info', + '.onlinedrugsdirect.com', + '.pilkazen.info', '.superbuycheap.com', + '.supersmartdrugs.com', + '.thecheappillspharmacy.com', '.topdircet.com', ), 'newblog9 at gmail.com' => array( // by jiuhatu kou @@ -5324,6 +5410,8 @@ $blocklist['C'] = array( '.wifuj.com', '.xijyt.com', '.zuqyn.com', + + '.mosugy.com', ), 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru '.hitsearching.info', @@ -5338,6 +5426,8 @@ $blocklist['C'] = array( // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net) '.ligiwa.com', + + '.mubeho.com', ), 'ice--man at mail.ru related' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru @@ -5504,7 +5594,7 @@ $blocklist['C'] = array( '.wotyqo.cn', '.xudoli.cn', - // entretov-28 at ftunez.org + // by entretov-28 at ftunez.org '.xevavuv.cn', // 66.232.120.113(*snip*) // by entretov-37 at ftunez.org @@ -5544,6 +5634,9 @@ $blocklist['C'] = array( '.qiwysu.cn', '.tutysy.cn', + // by oker-74 at ftunez.org + '.navufol.cn', + // by oker-97 at ftunez.org '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com) '.mesyvuc.cn', // 66.232.120.111(*snip*) @@ -5691,6 +5784,8 @@ $blocklist['C'] = array( // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202) '.pufeqa.com', + + '.xehymi.com', ), 'niichka at hotmail.com' => array( // 66.232.113.44, the same approach and IP of clickx at bk.ru @@ -5739,6 +5834,8 @@ $blocklist['C'] = array( // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info '.new-greece-travel.com', '.peraonline.info', + + '.barkman.cn', ), 'aofa at vip.163.com' => array( @@ -5991,6 +6088,7 @@ $blocklist['C'] = array( '.govnosaklo.info', '.muflon.info', '.termitnik.info', + '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..) ), '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru) '.acronis-true-image.info', @@ -6093,17 +6191,24 @@ $blocklist['C'] = array( '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript '.ringtonecooler.com', // 217.11.233.34 ), - 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn) - // 220.166.64.44 + 'dfym at dfym.cn' => array( + // ANI, JavaScript, iframe + + // 220.166.64.44 by chen jinian (dfym at dfym.cn) '.okwit.com', '.sakerver.com', '.motewiki.net', - '.8568985.com', // 61.139.126.10 ns *.myhostadmin.net - - // 61.139.126.47, ns *.myhostadmin.net + '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net + + '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net + + // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net + '.bbtv-chat.com', + '.ketubatle.com', '.playonlanei.com', '.rmtfcne.com', + ), 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com) '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net) @@ -6320,6 +6425,20 @@ $blocklist['C'] = array( '.xjvbunksa.cn', // 217.20.112.102(*snip*) // by roschem at sedns.info '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent) + // by op at sedns.info + '.bumfn.cn', + '.csmlu.cn', + '.epcwi.cn', + '.krwzn.cn', + '.lkvcp.cn', + '.mvmkh.cn', + '.nwpeg.cn', + '.rnqol.cn', + '.tyuaf.cn', + '.ucysa.cn', + '.vhyom.cn', + '.wtstu.cn', + '.zslxr.cn', ), 'gilvcta sy jilbertsbram.com' => array( // 206.53.51.126 @@ -6539,19 +6658,47 @@ $blocklist['C'] = array( '.tonoscelular.info', '.tonosmotorola.info', ), - '89.149.208.23' => array( + 'Anderson at extra.by' => array( + // Encoded JavaScript + + // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info + '.4cat.info', // by Anderson at extra.by, ns *.9upp.info + '.6dir.info', + '.8dir.info', + '.9dir.info', + '.2pro.info', + '.5pro.info', // by Anderson at extra.by, ns *.9upp.info + '.6pro.info', + '.7pro.info', + '.8pro.info', + '.9pro.info', + '.5sms.info', + '.6sms.info', + '.8sms.info', + '.9sms.info', + '.1upp.info', + '.2upp.info', + '.3upp.info', + '.4upp.info', + '.5upp.info', + '.6upp.info', + '.7upp.info', + '.8upp.info', + '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info + '.2vip.info', // by Anderson at extra.by + '.4vip.info', + '.5vip.info', + '.6vip.info', + '.7vip.info', + '.8vip.info', // ns *.9upp.info + '.9vip.info', + // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info '.w3rar.info', '.w3sex.info', '.w3zip.info', '.w3in.info', '.w3out.info', - - // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript - '.2vip.info', - '.4cat.info', - '.8vip.info', - '.9upp.info', ), 'zorkin87 at mail.ru' => array( // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com) @@ -6577,6 +6724,96 @@ $blocklist['C'] = array( '.lingage.com', // 8.15.231.118 '.puksins.com', // IP not allocated now ), + 'advertolog at gmail.com' => + // 81.0.250.86(network.upl.cz => non-existent) or + // 217.11.233.27 + '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030 + 'contact at aboutdomain.com' => array( + '.lopieur0.com', // Not match but used + '.lopieur1.com', // Not match but used + '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com + ), + 'info at cash4wm.biz related' => array( + // 84.16.233.12(*.internetserviceteam.com) + '.newsblogforu.com', + + // 84.16.235.141() + '.informator4you.com', + + // 84.16.240.68(*.internetserviceteam.com) + '.absolute-best-site.com', + '.new-blog-for-you.com', + + // 84.16.240.69(*.internetserviceteam.com) + '.best-sport-blog.com', + '.big-internet-site.com', + '.brendsite.com', + '.my-news-blog.com', + + // 84.16.242.123(*.internetserviceteam.com) + '.best-news-blog.com', + '.site-with-content.com', + + // The same method with info at cash4wm.biz + '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com), + '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com) + '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent) + '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..) + '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn + '.bloginfo4u.info', // 89.149.247.25 + ), + 'kerjy at yahoo.com' => array( + '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com + '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu + '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com + '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com + '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com + ), + 'vme at hotmail.ru' => array( + '.seoblack.net', // 216.195.33.112(non-exsistent) + '.seoblack.biz', // 216.195.33.113(non-exsistent) + ), + 'john at hellomyns.info' => array( + '.cuhdw.cn', // 217.20.113.27, / nothing + '.byouz.cn', // 89.149.247.24, / nothing + '.idghc.cn', + '.inxrj.cn', + '.jqzdf.cn', + '.vsxej.cn', + '.wkgnr.cn', + ), + '.CN spam payload' => array( + '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com + '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com + '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net + '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com + '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com + '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn + '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com + '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com + '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com + '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn + ), + 'Time2ns.info' => array( + // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58) + '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info + '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info + '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found + ), + 'Ilovemyns.info' => array( + // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info + ), + 'Freehostdns.info' => array( + // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private + '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info + '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info + ), + 'Newns4me.info' => array( + // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public + '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info + ), // C-2: Lonely domains (buddies not found yet) '.0721-4404.com', @@ -6589,6 +6826,7 @@ $blocklist['C'] = array( '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com) '.0annie.info', '.6i6.de', + '.77toperrwuter1.info', // by Roman '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript '.angioco.com', // 62.37.112.100, gamble '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com) @@ -6609,20 +6847,26 @@ $blocklist['C'] = array( '.auto-car-cheap.org', '.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site '.baurish.info', + '.bernardtomic21.info', // by filboj at hotmail.com '.bestop.name', '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru '.bestshopfinder.info', '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com + '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru) + '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au '.capital2u.info', // by Delbert.A.Henry at dodgeit.com '.casa-olympus.com', // "UcoZ WEB-SERVICES" + '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp '.catkittenmagazines.org', // 87.118.97.117 + '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com '.chatwalker.com', // 124.32.230.65 '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com '.covertarena.co.uk', // by Wayne Huxtable '.d999.info', // by Peter Vayner (peter.vayner at inbox.ru) + '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl '.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com @@ -6630,6 +6874,7 @@ $blocklist['C'] = array( '.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank '.drug-shop.us', // by Alexandr (matrixpro at mail.ru) '.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com + '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com '.easyshopusa.com', // by riter (riter at nm.ru) '.edjuego.com', // 85.92.70.253(non-existent), gamble @@ -6650,6 +6895,7 @@ $blocklist['C'] = array( '.freehost5.com', // 75.126.32.184(kosmohost.net), words only '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com) '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru) + '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79) '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com) '.game4egold.com', // by Filus Saifullin (ebay at soft-script.com) '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com) @@ -6673,6 +6919,7 @@ $blocklist['C'] = array( '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com) '.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp '.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info) + '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz '.infradoc.com', '.investorvillage.com', // by natalija puchkova (internet at internet.lv) '.ismarket.com', // Google-hiding. intercage.com related IP @@ -6680,9 +6927,11 @@ $blocklist['C'] = array( '.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru) '.itsexosit.net', '.itxxxit.net', + '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection '.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca) '.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet '.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript + '.jsyuanyang.com', // 58.211.0.23(non-existing) '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript '.kingtools.de', '.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252 @@ -6691,6 +6940,7 @@ $blocklist['C'] = array( '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript '.link-keeper.net', // 210.172.108.236 (257.xrea.com) '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com) + '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm) '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank @@ -6738,7 +6988,10 @@ $blocklist['C'] = array( '.rigame.info', // by debra_jordan07 at yahoo.com '.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt '.roin.info', // by Evgenius (roinse at yandex.ru) + '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) + '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru '.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com) + '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com '.searchadv.com', // by Jaan Randolph (searchadv at gmail.com) '.seek-www.com', // by Adam Smit (pingpong at mail.md) '.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com @@ -6799,18 +7052,189 @@ $blocklist['C'] = array( '.zyguo.info', // ns globoxhost.net '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com) - '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) - - // The same approach of 'acua at mail.ru' - '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found - '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com) - '.fwjjjtmrlr.cn', // TODO: - '.klmnei.cn', // TODO: - '.lumyjugmn.cn', // TODO: - '.lxwxjzpiy.cn', // TODO: - '.qyxswynd.cn', // TODO: - '.ugivorm.cn', // TODO: - '.uxmrscgdi.cn', // TODO: + + '.canada-grants.ca', // 173.193.6.128 link to grantsmoney.com + '.grantsmoney.com', // 72.26.207.6 + + 'admin at thumbset.net' => array( // 2010/08 207.7.82.170, Don Wilson (admin at thumbset.net) + // link to licensedrxpharm.com + '.avelocitoyens.com', + '.lzbps.com', + '.bittermonkeycomic.com', + '.estadiodeportivocali.com', + '.fb1177.com', + '.ghanabookpublishers.com', + '.greensagepage.com', + '.inlakech.com', + '.leungwingkei.net', + '.liberadea.org', + '.rocknrollgypsy.com', + '.su-om.com', + '.ymouk.org', // 2010/08 207.7.82.170, by (ymouk.org at contactprivacy.com) + + // link to oainternetservices.com + '.elpadraic.com', + '.fptpromo.com', + '.insidetheaf2.com', + + // link to pro-pay.net + '.movie-train.com', + + // link to vigrxplus.com + '.panatrog.org', + + // link to megarxsale.com + '.haberiniz.net', + '.obusilis.net', + ), + '.onlinecasinoinformation.com', // 2010/08 66.96.147.105 + '.onlinecasinoresources.com', // 2010/08 74.220.215.62 + 'mainalpha.com related' => array( + + // 2010/08 65.254.248.143 + '.archivecdbooksus.com', // by (offpista at gmail.com), "sports betting" + '.highrollersonlinecasinos.com', // casios + '.onlinecasinocenter.com', // casios + '.odinhosting.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + '.nycdivers.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.robertlhines.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com, etc + '.shadowsonmyshift.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com, etc + + // 2010/08 69.89.31.187 + '.bcsliding.com', // by Nahum, Moshe (moshenhm at gmail.com) + '.dinuzzollc.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.laruesbackdoor.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.msthirteen.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.okrenters.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.co + '.pandaitaid.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com, etc + '.vicariouscollection.com', // by Vishnu Prasath (info at dvishnu.com) + '.middlefingerproductions.net', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + + // 2010/08 74.53.239.27 + '.thetravelerscafe.com', // by Nahum, Moshe (moshenhm at gmail.com), cheap tickets + + // 2010/08 74.81.92.55 + '.2ndrose.com', // by Victor Zrovanov (victor3239 at gmail.com), link to mainalpha.com + '.ecoxfinancial.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.edgewatertowers.com', // by Victor Frankl (victor3239 at gmail.com), link to mainalpha.com + '.fightingspirit-comics.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.learntoplaythedobro.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.montcalm4hfair.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.oaads.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.pabloblum.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.renaissancequartet.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.sbi-limited.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.showeroffire.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.soccerfestcolumbus.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.sonicparthenon.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.staroftheevening.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + + // 2010/08 173.45.103.74 + '.digitalexperts.com', // by Nahum, Moshe (moshenhm at gmail.com) + + // 2010/08 173.236.48.82 + '.anniedguesthouse.com', // by Vishnu Prasath (info dvishnu.com), link to mainalpha.com + '.ciprogram.com', // link to mainalpha.com + '.finnfest2009.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.hietalasoldworldmeats.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.splendoreimport.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.sunshinetesting.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.sports-and-concert-tickets.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + + // 2010/08 174.120.82.124 + '.blueysretreat.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + '.jenurbanandthebox.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.lamborghinidenveronline.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + '.buckandbb.net', // by Nahum, Moshe (moshenhm at gmail.com), link to kqzyfj.com + + // 2010/08 174.132.149.98 + '.2008-national-n-scale-convention.com', // by Moshe Nahum (moshenhm at gmail.com), link to mainalpha.com + '.msgulfcoastbnbs.com', // by Michael John (cpajourney at yahoo.com), link to mainalpha.com etc + '.segwaybykar.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.creativejuicecompetition.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + + // 2010/08 216.119.132.2 + '.kennybrown.net', // by Moshe Nahum (moshenhm at gmail.com), + + // 2010/08 no address today + '.bestblackdatingonline.com', // by Nahum, Moshe (moshenhm at gmail.com) + ), + 'kouvald at gmail.com' => array( // by Vlad Kouvaldin (kouvald at gmail.com) + + // 2010/08 91.205.156.73 + '.newvibesmedia.com', + '.pacarts.org', + '.peruanosenbarcelona.com', + '.ronnievon.com', + '.savewilson.org', + '.sawanmall.com', + '.sickpowder.com', + '.theblogproject.com', + '.thenewswalk.com', + '.wilsonhillstables.com', + + // 2010/08 91.205.156.77 + '.chaironwheels.com', + '.countrylegends943.com', + '.daytonapridefest.com', + '.funposal.org', + '.mfshou.com', + '.mtskrilla.com', + + // 2010/08 173.45.96.176 + '.prematuretreatments.com', + + // 2010/09 173.83.127.79 + '.bluebirdsdownunder.com', + + // 2010/09 173.83.127.80 + '.briancallphoto.com', + ), + + 'freelanceblogger at gmail.com' => array( + '.geniusroulette.com', // 2010/08 216.86.146.16 by Raj Dash (freelanceblogger at gmail.com) + '.geniussportsbetting.com', // 2010/08 66.40.52.146 by Raj Dash (freelanceblogger at gmail.com) + ), + + '.ramapowatershed.com', // + 'purplefarm at gmail.com' => array( + // 2010/08 208.71.128.6 + '.123dollie.com', // by marc jones (purplefarm at gmail.com) + '.451jokes.com', // by Joshua gardiner (purplefarm at gmail.com) + '.skidsteersonsale.com', // by Joshua gardiner (purplefarm at gmail.com) + ), + + '.freelivemodels.com', // 2010/08 207.246.153.228, 207.246.153.229 + '173.236.25.210 related' => array( + // 2010/08 173.236.25.210 + '.ibd-treatment-blog.com', + '.my247weightlossblog.com', + '.yoursexualhealthblog.com', + + // 2010/08 174.120.171.94 + '.adhdbesttreatments.com', + '.bipolardisordertreatmentsblog.com', + '.diabetestype2answers.com', + ), + '68.232.186.54 related' => array( + '.amateurxxxtube247.com', // 2010/08 68.232.186.54 + '.asiansextube247.com', // 2010/08 68.232.186.54 + '.analsextube247.com', // 2010/08 99.192.176.58 + '.eroticandy.com', // 2010/08 99.192.176.54 + ), + 'nikiforov501@mail.ru' => array( + // 2010/09 91.205.156.74 + '.211park.com', + '.atlantajuniorthrashers.com', + '.jensenwoods.com', + + // 2010/09 91.205.156.75 + '.ltaadventure.com', + '.oshareo.com', + '.pillthrillow.com', + '.redaphrodite.com', + '.marching-season.net', + ), // C-3: Not classifiable (information wanted) //