X-Git-Url: http://git.osdn.net/view?p=pukiwiki%2Fpukiwiki_sandbox.git;a=blobdiff_plain;f=spam%2Fspam.ini.php;h=9feb2e78f7504131f7b11714b2d305383a57a343;hp=fc26eb1eb82629d6a370141f9efd15d6d25e356a;hb=8416229f47ede0f7fc6a8f5a017b1eb0d5257270;hpb=9edc45294acfcc17ee0741c9638cc0c1089a4282 diff --git a/spam/spam.ini.php b/spam/spam.ini.php index fc26eb1..9feb2e7 100644 --- a/spam/spam.ini.php +++ b/spam/spam.ini.php @@ -1,5 +1,5 @@ FALSE, +// 'official/dev' => FALSE, ); // 'list': Normal list @@ -57,29 +58,25 @@ $blocklist['list'] = array( // -------------------------------------------------- +// Ignorance list $blocklist['goodhost'] = array( - // Sample setting of ignorance list - 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#', +); +$blocklist['official/dev'] = array( // PukiWiki-official/dev specific - //'pukiwiki.sourceforge.jp', - //'pukiwiki.org', // Temporary - //'.logue.tk', // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01) - //'.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) - //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk - //'emasaka.blog65.fc2.com', // Text-to-Impress converter - //'ifastnet.com', // Server hosting - //'threefortune.ifastnet.com', // Server hosting - //'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker - //'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer - //'' - //'' - //'' - + 'pukiwiki.sourceforge.jp', + '.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) + '.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk + 'emasaka.blog65.fc2.com', // Text-to-Impress converter + 'ifastnet.com', // Server hosting + 'threefortune.ifastnet.com', // Server hosting + 'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker + 'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer ); + // -------------------------------------------------- // A: Sample setting of // Existing URI redirection or masking services @@ -94,15 +91,30 @@ $blocklist['A-1'] = array( // for spammers and affiliate users dazed by money. // // Messages from forerunners: + // idek.net + // "..., idek will stop accepting requests to + // create new urls. " // o-rly.net // "A URL REDIRECTION SERVICE GONE BAD" // "SORRY, TRULY" // smcurl.com // "Idiots were using smcURL to shrink URLs and // send them out via spam." + // symy.jp + // "One or more users are using our URL redirect + // service for spam/botnet. + // So we closed this service." // tinyclick.com // "...stop offering it's free services because // too many people were taking advantage of it" + // tr.im + // "The decision is based on waving the white + // flag on a never ending battle with spammers + // that relentlessly abuse tr.im." + // u.nu + // "Since the beginning, it has been plagued + // with abuse from spammers and other + // no-goodniks." // xjs.org // "We have been forced to close this facility // due to a minority of knuckle draggers who @@ -129,6 +141,7 @@ $blocklist['A-1'] = array( '1url.org', '1url.in', '1webspace.org', + '2am.jp', '2Ch.net' => array( 'ime.nu', 'ime.st', @@ -173,6 +186,7 @@ $blocklist['A-1'] = array( '*.ovp.pl', '*.6-6-6.pl', ), + 'babelfish.altavista.com', ///babelfish/trurl_pagecontent 'amoo.org', 'web.archive.org', ///web/2 'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net @@ -189,11 +203,16 @@ $blocklist['A-1'] = array( 'athomebiz.com', 'aukcje1.pl', 'beam.to', + '*.bebo.com', 'beermapping.com', 'besturl.in', 'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com 'biglnk.com', 'bingr.com', + 'bit.ly' => array( + 'bit.ly', + 'j.mp', + ), 'bittyurl.com', '*.bizz.cc', '*.blo.pl', @@ -212,6 +231,7 @@ $blocklist['A-1'] = array( ), 'budgethosts.org', 'budu.com', // by peter.eder at imcworld.com + 'budurl.com', '*.buzznet.com', '*.bydl.com', 'C-O.IN' => array( @@ -232,6 +252,7 @@ $blocklist['A-1'] = array( 'christopherleestreet.com', 'cintcm.com', '*.cjb.net', + 'cli.gs', 'clipurl.com', '*.co.nr', 'Comtech Enterprises ' => array( // comteche.com @@ -284,6 +305,7 @@ $blocklist['A-1'] = array( '.goshrink.com', 'ushrink.com', ), + '.eazylink.net', // 2010/08 by info at digitalinsights.biz 'easyurl.jp', // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com, // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45 // This service seems to be opened at 2007/08/23 with "beta" sign. @@ -436,9 +458,10 @@ $blocklist['A-1'] = array( '*.globalredirect.com', 'gnu.vu', '*.go.cc', - //'Google.com' => array( + 'Google.com' => array( // google.com/translate_c\?u=(?:http://)? - //), + 'goo.gl', // by (dns-admin at google.com) + ), 'goonlink.com', '.gourl.org', '.greatitem.com', @@ -485,6 +508,10 @@ $blocklist['A-1'] = array( 'iat.net', // 74.208.58.130 by Tony Carter 'ibm.com', ///links (Correct it) '*.iceglow.com', + 'internetadresi.com' => array ( + 'rxbuycheap.com', + 'rxcheapwestern.com', + ), 'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info) 'Ideas para Nuevos Mercados SL' => array( // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com) @@ -603,6 +630,7 @@ $blocklist['A-1'] = array( '.iwebtool.com', 'j6.bz', 'jeeee.net', + 'is.gd', 'Jaze Redirect Services' => array( '*.arecool.net', '*.iscool.net', @@ -885,6 +913,7 @@ $blocklist['A-1'] = array( ), 'monster-submit.com', 'mooo.jp', + 'moourl.com', 'murl.net', 'myactivesurf.net', 'mytinylink.com', @@ -903,6 +932,7 @@ $blocklist['A-1'] = array( '*.ontheinter.net', 'ourl.org', 'ov2.net', // frame + 'ow.ly', '*.ozonez.com', 'pagebang.com', 'palurl.com', @@ -919,6 +949,7 @@ $blocklist['A-1'] = array( '*.site.tc', '*.societe.st', ), + 'qqa.jp', 'qrl.jp', 'qurl.net', 'qwer.org', @@ -940,6 +971,7 @@ $blocklist['A-1'] = array( 'rio.st', 'rlink.org', '*.rmcinfo.fr', + 'roo.to', // Seems closed, says "bye-bye" 'rubyurl.com', '*.runboard.com', 'runurl.com', @@ -1035,11 +1067,15 @@ $blocklist['A-1'] = array( 'slink.in', 'smallurl.eu', 'smurl.name', + 'sn.im', 'snipurl.com', 'sp-nov.net', 'splashblog.com', 'spod.cx', '*.spydar.com', + 'StumbleUpon.com' => array( + 'su.pr', // by (hostmaster at stumbleupon.com) + ), 'Subdomain.gr' => array( '*.p2p.gr', '*.subdomain.gr', @@ -1047,7 +1083,6 @@ $blocklist['A-1'] = array( 'SURL.DK' => array('surl.dk'), // main page is: s-url.dk 'surl.se', 'surl.ws', - 'symy.jp', 'tdurl.com', 'tighturl.com', 'tiniuri.com', @@ -1066,6 +1101,7 @@ $blocklist['A-1'] = array( 'titlien.com', '*.tlg.pl', 'tlurl.com', + 'twurl.nl', // 2010-09 87.255.53.196 (redirects tweetburner.com 87.255.53.196) 'link.toolbot.com', 'tnij.org', 'Tokelau ccTLD' => array('.tk'), @@ -1073,8 +1109,12 @@ $blocklist['A-1'] = array( '*.toolbot.com', '*.torontonian.com', 'trimurl.com', - 'ttu.cc', + //'ttu.cc', // Seems closed 'turl.jp', + 'Twitter' => array( + 't.co', // by (cofounders at cointernet.co) + 'twt.tl', + ), '*.tz4.com', 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master '*.1.to', @@ -1105,6 +1145,7 @@ $blocklist['A-1'] = array( '*.ever.to', '*.mini.to', ), + 'u-go.to', 'uchinoko.in', 'Ulimit.com' => array( '*.be.tf', @@ -1134,6 +1175,7 @@ $blocklist['A-1'] = array( '*.unixlover.com', '*.zik.mu', ), + 'urltea.com', '*.uni.cc', 'UNONIC.com' => array( '*.at.tf', // AlpenNIC @@ -1189,6 +1231,7 @@ $blocklist['A-1'] = array( ), '*.urlproxy.com', 'urlser.com', + 'urlshorteningservicefortwitter.com', 'urlsnip.com', 'urlzip.de', 'urlx.org', @@ -1368,13 +1411,19 @@ $blocklist['A-1'] = array( ), '*.xshorturl.com', // by Markus Lee (soul_s at list.ru) '.y11.net', + 'Yahoo.co.jp' => array( + 'wrs.search.yahoo.co.jp', + ), + 'Yahoo.com' => array( + 'rds.yahoo.com', + ), + 'yatuc.com', + 'yep.it', 'YESNS.com' => array( // by Jae-Hwan Kwon (kwonjhpd at kornet.net) '*.yesns.com', '*.srv4u.net', //blogne.com ), - 'yatuc.com', - 'yep.it', 'yumlum.com', 'yurel.com', 'Z.la' => array( @@ -1490,7 +1539,7 @@ $blocklist['A-2'] = array( $blocklist['B-1'] = array( - // B-1: Web N.M spaces (N > 0, M > 0) + // B-1: Web N.M spaces (N > 0, M >= 0) // // Messages from forerunners: // activefreehost.com @@ -1501,6 +1550,8 @@ $blocklist['B-1'] = array( // to take time for software improvement to fight // with server abuse, Spam advertisement and // fraud." + // wsboards.com + // had been removed due to spam (noticed by its domain owner) // '*.0000host.com', // 68.178.200.154, ns *.3-hosting.net '*.007ihost.com', // 195.242.99.199(s199.softwarelibre.nl) @@ -1865,6 +1916,7 @@ $blocklist['B-1'] = array( '*.ekiwi.de', '*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com) '.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it) + '*.easyjournal.com', '*.ebloggy.com', 'enunblog.com', '*.epinoy.com', @@ -2613,6 +2665,10 @@ $blocklist['B-1'] = array( '*.googlegroups.com', ///web/ '*.googlepages.com', 'groups-beta.google.com', + 'groups.google.*', ///group/ Seems widely distributed + //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk', + //'groups.google.de', 'groups.google.es', 'groups.google.fr', + //'groups.google.it', ... ), 'guestbook.at', 'club.giovani.it', @@ -2693,12 +2749,19 @@ $blocklist['B-1'] = array( '*.joolo.com', '*.journalscape.com', '*.justfree.com', - '*.blog.kataweb.it', + 'kataweb.it' => array( // kata-redir.kataweb.it + '*.blog.kataweb.it', + '*.repubblica.it', + ), '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com '*.kokoom.com', 'koolpages.com', '*.kostenlose-foren.org', '*.ksiegagosci.info', + 'LaCoctelera.com' => array( + 'lacoctelera.com', // by alberto at the-cocktail.com + 'espacioblog.com', // by dominios at ferca.com + ), 'Lide.cz' => array( '*.lide.cz', '*.sblog.cz', @@ -2913,6 +2976,7 @@ $blocklist['B-1'] = array( '.aim.to', '.djmp.jp', '.nihongourl.nu', + '.url.sh', // Says SmarTrans '.urljp.com', '.www1.to', '.www2.to', @@ -3113,7 +3177,7 @@ $blocklist['B-1'] = array( '*.wizhoo.com', // by Comp U Door (sales at comp-u-door.com) '*.wmjblogs.ru', '*.wordpress.com', - '.wsboards.com', // by Chris Breen (Cbween at gmail.com) + //'.wsboards.com', // Noticed this site had been removed due to spam 'xeboards.com', // by Brian Shea (bshea at xeservers.com) '*.xforum.se', 'xfreeforum.com', @@ -3168,11 +3232,14 @@ $blocklist['B-2'] = array( 'alwanforthearts.org', '*.anchor.net.au', 'anewme.org', + 'arcrockett.com', ///golf/excel/ 'arisedesign.net', //Portfolio/d981/ 'internetyfamilia.asturiastelecentros.com', + 'ballblair.com', ///images/thumbs/ 'Ball State University' => array('web.bsu.edu'), 'btofaq.net', ///v3/forum 'blepharospasm.org', + 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net 'nyweb.bowlnfun.dk', '*.buzznet.com', 'Carroll College' => array( @@ -3183,6 +3250,7 @@ $blocklist['B-2'] = array( 'Case Western Reserve University' => array('case.edu'), 'ceval.de', 'chaco.gov.ar', + 'chasingrainbowsaustralia.com', ///geometry/ 'codespeak.net', 'Colorado School of Mines' => array('ticc.mines.edu'), '*.colourware.co.uk', @@ -3208,8 +3276,10 @@ $blocklist['B-2'] = array( 'forums.drumcore.com', 'dundeeunited.org', 'energyglass.com.ua', + 'equitas.com.au', ///images/mim3/, no index.html 'exclusivehotels.com', 'info.ems-rfid.com', + 'fairyfunkyard.com', ///images_files/files/ 'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com) 'fbwloc.com', '.fhmcsa.org.au', @@ -3323,6 +3393,7 @@ $blocklist['B-2'] = array( 'ryanclark.org', '*.reallifelog.com', 'rkphunt.com', + 'rso-csp.org', ///bulletins/ '.saasmar.ru', // Jacked. iframe to banep.info on root, etc 'sapphireblue.com', 'saskchamber.com', @@ -3391,7 +3462,7 @@ $blocklist['B-2'] = array( '.xthost.info', // by Michael Renz (dhost at mykuhl.de) 'Yahoo.com' => array( 'blog.360.yahoo.com', - '*.groups.yahoo.com' + '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ... ), 'yasushi.site.ne.jp', // One of mixedmedia.net' 'youthpeer.org', @@ -3940,7 +4011,12 @@ $blocklist['C'] = array( 'aakin at yandex.ru' => array( // 89.149.206.225(*.internetserviceteam.com) by Baer '.entirestar.com', + '.joppperl.info', + '.onlinedrugsdirect.com', + '.pilkazen.info', '.superbuycheap.com', + '.supersmartdrugs.com', + '.thecheappillspharmacy.com', '.topdircet.com', ), 'newblog9 at gmail.com' => array( // by jiuhatu kou @@ -5758,6 +5834,8 @@ $blocklist['C'] = array( // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info '.new-greece-travel.com', '.peraonline.info', + + '.barkman.cn', ), 'aofa at vip.163.com' => array( @@ -6113,17 +6191,24 @@ $blocklist['C'] = array( '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript '.ringtonecooler.com', // 217.11.233.34 ), - 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn) - // 220.166.64.44 + 'dfym at dfym.cn' => array( + // ANI, JavaScript, iframe + + // 220.166.64.44 by chen jinian (dfym at dfym.cn) '.okwit.com', '.sakerver.com', '.motewiki.net', - '.8568985.com', // 61.139.126.10 ns *.myhostadmin.net - - // 61.139.126.47, ns *.myhostadmin.net + '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net + + '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net + + // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net + '.bbtv-chat.com', + '.ketubatle.com', '.playonlanei.com', '.rmtfcne.com', + ), 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com) '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net) @@ -6573,19 +6658,47 @@ $blocklist['C'] = array( '.tonoscelular.info', '.tonosmotorola.info', ), - '89.149.208.23' => array( + 'Anderson at extra.by' => array( + // Encoded JavaScript + + // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info + '.4cat.info', // by Anderson at extra.by, ns *.9upp.info + '.6dir.info', + '.8dir.info', + '.9dir.info', + '.2pro.info', + '.5pro.info', // by Anderson at extra.by, ns *.9upp.info + '.6pro.info', + '.7pro.info', + '.8pro.info', + '.9pro.info', + '.5sms.info', + '.6sms.info', + '.8sms.info', + '.9sms.info', + '.1upp.info', + '.2upp.info', + '.3upp.info', + '.4upp.info', + '.5upp.info', + '.6upp.info', + '.7upp.info', + '.8upp.info', + '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info + '.2vip.info', // by Anderson at extra.by + '.4vip.info', + '.5vip.info', + '.6vip.info', + '.7vip.info', + '.8vip.info', // ns *.9upp.info + '.9vip.info', + // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info '.w3rar.info', '.w3sex.info', '.w3zip.info', '.w3in.info', '.w3out.info', - - // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript - '.2vip.info', - '.4cat.info', - '.8vip.info', - '.9upp.info', ), 'zorkin87 at mail.ru' => array( // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com) @@ -6660,6 +6773,47 @@ $blocklist['C'] = array( '.seoblack.net', // 216.195.33.112(non-exsistent) '.seoblack.biz', // 216.195.33.113(non-exsistent) ), + 'john at hellomyns.info' => array( + '.cuhdw.cn', // 217.20.113.27, / nothing + '.byouz.cn', // 89.149.247.24, / nothing + '.idghc.cn', + '.inxrj.cn', + '.jqzdf.cn', + '.vsxej.cn', + '.wkgnr.cn', + ), + '.CN spam payload' => array( + '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com + '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com + '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net + '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com + '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com + '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn + '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com + '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com + '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com + '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn + ), + 'Time2ns.info' => array( + // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58) + '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info + '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info + '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found + ), + 'Ilovemyns.info' => array( + // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private + '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info + ), + 'Freehostdns.info' => array( + // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private + '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info + '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info + ), + 'Newns4me.info' => array( + // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public + '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info + ), // C-2: Lonely domains (buddies not found yet) '.0721-4404.com', @@ -6672,6 +6826,7 @@ $blocklist['C'] = array( '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com) '.0annie.info', '.6i6.de', + '.77toperrwuter1.info', // by Roman '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript '.angioco.com', // 62.37.112.100, gamble '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com) @@ -6692,20 +6847,26 @@ $blocklist['C'] = array( '.auto-car-cheap.org', '.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site '.baurish.info', + '.bernardtomic21.info', // by filboj at hotmail.com '.bestop.name', '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru '.bestshopfinder.info', '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com + '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru) + '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au '.capital2u.info', // by Delbert.A.Henry at dodgeit.com '.casa-olympus.com', // "UcoZ WEB-SERVICES" + '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp '.catkittenmagazines.org', // 87.118.97.117 + '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com '.chatwalker.com', // 124.32.230.65 '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com '.covertarena.co.uk', // by Wayne Huxtable '.d999.info', // by Peter Vayner (peter.vayner at inbox.ru) + '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl '.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com @@ -6713,6 +6874,7 @@ $blocklist['C'] = array( '.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank '.drug-shop.us', // by Alexandr (matrixpro at mail.ru) '.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com + '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com '.easyshopusa.com', // by riter (riter at nm.ru) '.edjuego.com', // 85.92.70.253(non-existent), gamble @@ -6733,6 +6895,7 @@ $blocklist['C'] = array( '.freehost5.com', // 75.126.32.184(kosmohost.net), words only '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com) '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru) + '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79) '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com) '.game4egold.com', // by Filus Saifullin (ebay at soft-script.com) '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com) @@ -6756,6 +6919,7 @@ $blocklist['C'] = array( '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com) '.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp '.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info) + '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz '.infradoc.com', '.investorvillage.com', // by natalija puchkova (internet at internet.lv) '.ismarket.com', // Google-hiding. intercage.com related IP @@ -6763,9 +6927,11 @@ $blocklist['C'] = array( '.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru) '.itsexosit.net', '.itxxxit.net', + '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection '.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca) '.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet '.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript + '.jsyuanyang.com', // 58.211.0.23(non-existing) '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript '.kingtools.de', '.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252 @@ -6774,6 +6940,7 @@ $blocklist['C'] = array( '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript '.link-keeper.net', // 210.172.108.236 (257.xrea.com) '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com) + '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm) '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank @@ -6821,7 +6988,10 @@ $blocklist['C'] = array( '.rigame.info', // by debra_jordan07 at yahoo.com '.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt '.roin.info', // by Evgenius (roinse at yandex.ru) + '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) + '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru '.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com) + '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com '.searchadv.com', // by Jaan Randolph (searchadv at gmail.com) '.seek-www.com', // by Adam Smit (pingpong at mail.md) '.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com @@ -6882,25 +7052,189 @@ $blocklist['C'] = array( '.zyguo.info', // ns globoxhost.net '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com) - - '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp - '.jsyuanyang.com', // 58.211.0.23(non-existing) - '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP - '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru - '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) - - // The same approach of 'acua at mail.ru' - '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found - '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com) - '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info - '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info - '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info - '.lxwxjzpiy.cn', // TODO: - '.qyxswynd.cn', // TODO: - '.ugivorm.cn', // TODO: - '.uxmrscgdi.cn', // TODO: - - '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz + + '.canada-grants.ca', // 173.193.6.128 link to grantsmoney.com + '.grantsmoney.com', // 72.26.207.6 + + 'admin at thumbset.net' => array( // 2010/08 207.7.82.170, Don Wilson (admin at thumbset.net) + // link to licensedrxpharm.com + '.avelocitoyens.com', + '.lzbps.com', + '.bittermonkeycomic.com', + '.estadiodeportivocali.com', + '.fb1177.com', + '.ghanabookpublishers.com', + '.greensagepage.com', + '.inlakech.com', + '.leungwingkei.net', + '.liberadea.org', + '.rocknrollgypsy.com', + '.su-om.com', + '.ymouk.org', // 2010/08 207.7.82.170, by (ymouk.org at contactprivacy.com) + + // link to oainternetservices.com + '.elpadraic.com', + '.fptpromo.com', + '.insidetheaf2.com', + + // link to pro-pay.net + '.movie-train.com', + + // link to vigrxplus.com + '.panatrog.org', + + // link to megarxsale.com + '.haberiniz.net', + '.obusilis.net', + ), + '.onlinecasinoinformation.com', // 2010/08 66.96.147.105 + '.onlinecasinoresources.com', // 2010/08 74.220.215.62 + 'mainalpha.com related' => array( + + // 2010/08 65.254.248.143 + '.archivecdbooksus.com', // by (offpista at gmail.com), "sports betting" + '.highrollersonlinecasinos.com', // casios + '.onlinecasinocenter.com', // casios + '.odinhosting.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + '.nycdivers.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.robertlhines.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com, etc + '.shadowsonmyshift.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com, etc + + // 2010/08 69.89.31.187 + '.bcsliding.com', // by Nahum, Moshe (moshenhm at gmail.com) + '.dinuzzollc.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.laruesbackdoor.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.msthirteen.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.okrenters.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.co + '.pandaitaid.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com, etc + '.vicariouscollection.com', // by Vishnu Prasath (info at dvishnu.com) + '.middlefingerproductions.net', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + + // 2010/08 74.53.239.27 + '.thetravelerscafe.com', // by Nahum, Moshe (moshenhm at gmail.com), cheap tickets + + // 2010/08 74.81.92.55 + '.2ndrose.com', // by Victor Zrovanov (victor3239 at gmail.com), link to mainalpha.com + '.ecoxfinancial.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.edgewatertowers.com', // by Victor Frankl (victor3239 at gmail.com), link to mainalpha.com + '.fightingspirit-comics.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.learntoplaythedobro.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.montcalm4hfair.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.oaads.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.pabloblum.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.renaissancequartet.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.sbi-limited.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.showeroffire.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.soccerfestcolumbus.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.sonicparthenon.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.staroftheevening.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + + // 2010/08 173.45.103.74 + '.digitalexperts.com', // by Nahum, Moshe (moshenhm at gmail.com) + + // 2010/08 173.236.48.82 + '.anniedguesthouse.com', // by Vishnu Prasath (info dvishnu.com), link to mainalpha.com + '.ciprogram.com', // link to mainalpha.com + '.finnfest2009.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.hietalasoldworldmeats.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com etc + '.splendoreimport.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.sunshinetesting.com', // by Nahum, Moshe (moshenhm at gmail.com), link to mainalpha.com + '.sports-and-concert-tickets.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + + // 2010/08 174.120.82.124 + '.blueysretreat.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + '.jenurbanandthebox.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.lamborghinidenveronline.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + '.buckandbb.net', // by Nahum, Moshe (moshenhm at gmail.com), link to kqzyfj.com + + // 2010/08 174.132.149.98 + '.2008-national-n-scale-convention.com', // by Moshe Nahum (moshenhm at gmail.com), link to mainalpha.com + '.msgulfcoastbnbs.com', // by Michael John (cpajourney at yahoo.com), link to mainalpha.com etc + '.segwaybykar.com', // by Vishnu Prasath (info at dvishnu.com), link to mainalpha.com + '.creativejuicecompetition.com', // by Nahum, Moshe (moshenhm at gmail.com), seems no link today + + // 2010/08 216.119.132.2 + '.kennybrown.net', // by Moshe Nahum (moshenhm at gmail.com), + + // 2010/08 no address today + '.bestblackdatingonline.com', // by Nahum, Moshe (moshenhm at gmail.com) + ), + 'kouvald at gmail.com' => array( // by Vlad Kouvaldin (kouvald at gmail.com) + + // 2010/08 91.205.156.73 + '.newvibesmedia.com', + '.pacarts.org', + '.peruanosenbarcelona.com', + '.ronnievon.com', + '.savewilson.org', + '.sawanmall.com', + '.sickpowder.com', + '.theblogproject.com', + '.thenewswalk.com', + '.wilsonhillstables.com', + + // 2010/08 91.205.156.77 + '.chaironwheels.com', + '.countrylegends943.com', + '.daytonapridefest.com', + '.funposal.org', + '.mfshou.com', + '.mtskrilla.com', + + // 2010/08 173.45.96.176 + '.prematuretreatments.com', + + // 2010/09 173.83.127.79 + '.bluebirdsdownunder.com', + + // 2010/09 173.83.127.80 + '.briancallphoto.com', + ), + + 'freelanceblogger at gmail.com' => array( + '.geniusroulette.com', // 2010/08 216.86.146.16 by Raj Dash (freelanceblogger at gmail.com) + '.geniussportsbetting.com', // 2010/08 66.40.52.146 by Raj Dash (freelanceblogger at gmail.com) + ), + + '.ramapowatershed.com', // + 'purplefarm at gmail.com' => array( + // 2010/08 208.71.128.6 + '.123dollie.com', // by marc jones (purplefarm at gmail.com) + '.451jokes.com', // by Joshua gardiner (purplefarm at gmail.com) + '.skidsteersonsale.com', // by Joshua gardiner (purplefarm at gmail.com) + ), + + '.freelivemodels.com', // 2010/08 207.246.153.228, 207.246.153.229 + '173.236.25.210 related' => array( + // 2010/08 173.236.25.210 + '.ibd-treatment-blog.com', + '.my247weightlossblog.com', + '.yoursexualhealthblog.com', + + // 2010/08 174.120.171.94 + '.adhdbesttreatments.com', + '.bipolardisordertreatmentsblog.com', + '.diabetestype2answers.com', + ), + '68.232.186.54 related' => array( + '.amateurxxxtube247.com', // 2010/08 68.232.186.54 + '.asiansextube247.com', // 2010/08 68.232.186.54 + '.analsextube247.com', // 2010/08 99.192.176.58 + '.eroticandy.com', // 2010/08 99.192.176.54 + ), + 'nikiforov501@mail.ru' => array( + // 2010/09 91.205.156.74 + '.211park.com', + '.atlantajuniorthrashers.com', + '.jensenwoods.com', + + // 2010/09 91.205.156.75 + '.ltaadventure.com', + '.oshareo.com', + '.pillthrillow.com', + '.redaphrodite.com', + '.marching-season.net', + ), // C-3: Not classifiable (information wanted) //