• R/O
  • HTTP
  • SSH
  • HTTPS

Commit

Tags
No Tags

Frequently used words (click to add to your profile)

javac++androidlinuxc#windowsobjective-ccocoa誰得qtpythonphprubygameguibathyscaphec計画中(planning stage)翻訳omegatframeworktwitterdomtestvb.netdirectxゲームエンジンbtronarduinopreviewer

Commit MetaInfo

Revisióne8ea23178e89241056aea8cdc4fb8e8043cae65e (tree)
Tiempo2011-01-25 00:34:39
Autorhenoheno <henoheno>
Commiterhenoheno

Log Message

$Id: spam.php,v 1.221 2011/01/24 14:51:50 henoheno Exp $
$Id: spam_pickup.php,v 1.71 2009/01/04 08:56:07 henoheno Exp $
$Id: spam_util.php,v 1.4 2011/01/24 14:51:50 henoheno Exp $
$Id: spam.ini.php,v 1.202 2010/12/15 16:07:38 henoheno Exp $

Cambiar Resumen

Diferencia incremental

--- a/lib/pukiwiki.php
+++ b/lib/pukiwiki.php
@@ -1,6 +1,6 @@
11 <?php
22 // PukiWiki - Yet another WikiWikiWeb clone.
3-// $Id: pukiwiki.php,v 1.11.2.2 2007/08/15 15:32:13 henoheno Exp $
3+// $Id: pukiwiki.php,v 1.11.2.3 2011/01/24 15:34:39 henoheno Exp $
44 //
55 // PukiWiki 1.4.*
66 // Copyright (C) 2002-2007 by PukiWiki Developers Team
@@ -102,7 +102,7 @@ if ($spam && $method != 'GET') {
102102 }
103103 if ($_spam) {
104104 require(LIB_DIR . 'spam.php');
105- require(LIB_DIR . 'spam_pickup.php');
105+
106106 if (isset($spam['method'][$_plugin])) {
107107 $_method = & $spam['method'][$_plugin];
108108 } else if (isset($spam['method']['_default'])) {
--- a/lib/spam.php
+++ b/lib/spam.php
@@ -1,275 +1,22 @@
11 <?php
2-// $Id: spam.php,v 1.31.2.2 2007/09/24 16:02:25 henoheno Exp $
3-// Copyright (C) 2006-2007 PukiWiki Developers Team
2+// $Id: spam.php,v 1.31.2.3 2011/01/24 15:34:39 henoheno Exp $
3+// Copyright (C) 2006-2009, 2011 PukiWiki Developers Team
44 // License: GPL v2 or (at your option) any later version
55 //
66 // Functions for Concept-work of spam-uri metrics
77 //
88 // (PHP 4 >= 4.3.0): preg_match_all(PREG_OFFSET_CAPTURE): $method['uri_XXX'] related feature
99
10-if (! defined('SPAM_INI_FILE')) define('SPAM_INI_FILE', 'spam.ini.php');
11-if (! defined('DOMAIN_INI_FILE')) define('DOMAIN_INI_FILE', 'domain.ini.php');
12-
13-// ---------------------
14-// Compat etc
15-
16-// (PHP 4 >= 4.2.0): var_export(): mail-reporting and dump related
17-if (! function_exists('var_export')) {
18- function var_export() {
19- return 'var_export() is not found on this server' . "\n";
20- }
21-}
22-
23-// (PHP 4 >= 4.2.0): preg_grep() enables invert option
24-function preg_grep_invert($pattern = '//', $input = array())
25-{
26- static $invert;
27- if (! isset($invert)) $invert = defined('PREG_GREP_INVERT');
28-
29- if ($invert) {
30- return preg_grep($pattern, $input, PREG_GREP_INVERT);
31- } else {
32- $result = preg_grep($pattern, $input);
33- if ($result) {
34- return array_diff($input, preg_grep($pattern, $input));
35- } else {
36- return $input;
37- }
38- }
39-}
40-
41-
42-// ---------------------
43-// Utilities
44-
45-// Very roughly, shrink the lines of var_export()
46-// NOTE: If the same data exists, it must be corrupted.
47-function var_export_shrink($expression, $return = FALSE, $ignore_numeric_keys = FALSE)
48-{
49- $result = var_export($expression, TRUE);
50-
51- $result = preg_replace(
52- // Remove a newline and spaces
53- '# => \n *array \(#', ' => array (',
54- $result
55- );
56-
57- if ($ignore_numeric_keys) {
58- $result =preg_replace(
59- // Remove numeric keys
60- '#^( *)[0-9]+ => #m', '$1',
61- $result
62- );
63- }
64-
65- if ($return) {
66- return $result;
67- } else {
68- echo $result;
69- return NULL;
70- }
71-}
72-
73-// Reverse $string with specified delimiter
74-function delimiter_reverse($string = 'foo.bar.example.com', $from_delim = '.', $to_delim = '.')
75-{
76- if (! is_string($string) || ! is_string($from_delim) || ! is_string($to_delim))
77- return $string;
78-
79- // com.example.bar.foo
80- return implode($to_delim, array_reverse(explode($from_delim, $string)));
81-}
82-
83-// ksort() by domain
84-function ksort_by_domain(& $array)
85-{
86- $sort = array();
87- foreach(array_keys($array) as $key) {
88- $sort[delimiter_reverse($key)] = $key;
89- }
90- ksort($sort, SORT_STRING);
91- $result = array();
92- foreach($sort as $key) {
93- $result[$key] = & $array[$key];
94- }
95- $array = $result;
96-}
97-
98-// Roughly strings(1) using PCRE
99-// This function is useful to:
100-// * Reduce the size of data, from removing unprintable binary data
101-// * Detect _bare_strings_ from binary data
102-// References:
103-// http://www.freebsd.org/cgi/man.cgi?query=strings (Man-page of GNU strings)
104-// http://www.pcre.org/pcre.txt
105-// Note: mb_ereg_replace() is one of mbstring extension's functions
106-// and need to init its encoding.
107-function strings($binary = '', $min_len = 4, $ignore_space = FALSE, $multibyte = FALSE)
108-{
109- // String only
110- $binary = (is_array($binary) || $binary === TRUE) ? '' : strval($binary);
111-
112- $regex = $ignore_space ?
113- '[^[:graph:] \t\n]+' : // Remove "\0" etc, and readable spaces
114- '[^[:graph:][:space:]]+'; // Preserve readable spaces if possible
115-
116- $binary = $multibyte ?
117- mb_ereg_replace($regex, "\n", $binary) :
118- preg_replace('/' . $regex . '/s', "\n", $binary);
119-
120- if ($ignore_space) {
121- $binary = preg_replace(
122- array(
123- '/[ \t]{2,}/',
124- '/^[ \t]/m',
125- '/[ \t]$/m',
126- ),
127- array(
128- ' ',
129- '',
130- ''
131- ),
132- $binary);
133- }
134-
135- if ($min_len > 1) {
136- // The last character seems "\n" or not
137- $br = (! empty($binary) && $binary[strlen($binary) - 1] == "\n") ? "\n" : '';
138-
139- $min_len = min(1024, intval($min_len));
140- $regex = '/^.{' . $min_len . ',}/S';
141- $binary = implode("\n", preg_grep($regex, explode("\n", $binary))) . $br;
142- }
143-
144- return $binary;
145-}
146-
147-
148-// ---------------------
149-// Utilities: Arrays
150-
151-// Count leaves (A leaf = value that is not an array, or an empty array)
152-function array_count_leaves($array = array(), $count_empty = FALSE)
153-{
154- if (! is_array($array) || (empty($array) && $count_empty)) return 1;
155-
156- // Recurse
157- $count = 0;
158- foreach ($array as $part) {
159- $count += array_count_leaves($part, $count_empty);
160- }
161- return $count;
162-}
163-
164-// Merge two leaves
165-// Similar to PHP array_merge_leaves(), except strictly preserving keys as string
166-function array_merge_leaves($array1, $array2, $sort_keys = TRUE)
167-{
168- // Array(s) only
169- $is_array1 = is_array($array1);
170- $is_array2 = is_array($array2);
171- if ($is_array1) {
172- if ($is_array2) {
173- ; // Pass
174- } else {
175- return $array1;
176- }
177- } else if ($is_array2) {
178- return $array2;
179- } else {
180- return $array2; // Not array ($array1 is overwritten)
181- }
182-
183- $keys_all = array_merge(array_keys($array1), array_keys($array2));
184- if ($sort_keys) sort($keys_all, SORT_STRING);
185-
186- $result = array();
187- foreach($keys_all as $key) {
188- $isset1 = isset($array1[$key]);
189- $isset2 = isset($array2[$key]);
190- if ($isset1 && $isset2) {
191- // Recurse
192- $result[$key] = array_merge_leaves($array1[$key], $array2[$key], $sort_keys);
193- } else if ($isset1) {
194- $result[$key] = & $array1[$key];
195- } else {
196- $result[$key] = & $array2[$key];
197- }
198- }
199- return $result;
200-}
201-
202-// An array-leaves to a flat array
203-function array_flat_leaves($array, $unique = TRUE)
204-{
205- if (! is_array($array)) return $array;
206-
207- $tmp = array();
208- foreach(array_keys($array) as $key) {
209- if (is_array($array[$key])) {
210- // Recurse
211- foreach(array_flat_leaves($array[$key]) as $_value) {
212- $tmp[] = $_value;
213- }
214- } else {
215- $tmp[] = & $array[$key];
216- }
217- }
218-
219- return $unique ? array_values(array_unique($tmp)) : $tmp;
220-}
22110
222-// $array['something'] => $array['wanted']
223-function array_rename_keys(& $array, $keys = array('from' => 'to'), $force = FALSE, $default = '')
224-{
225- if (! is_array($array) || ! is_array($keys)) return FALSE;
11+if (! defined('LIB_DIR')) define('LIB_DIR', './');
12+require(LIB_DIR . 'spam_pickup.php');
13+require(LIB_DIR . 'spam_util.php');
22614
227- // Nondestructive test
228- if (! $force) {
229- foreach(array_keys($keys) as $from) {
230- if (! isset($array[$from])) {
231- return FALSE;
232- }
233- }
234- }
235-
236- foreach($keys as $from => $to) {
237- if ($from === $to) continue;
238- if (! $force || isset($array[$from])) {
239- $array[$to] = & $array[$from];
240- unset($array[$from]);
241- } else {
242- $array[$to] = $default;
243- }
244- }
245-
246- return TRUE;
247-}
248-
249-// Remove redundant values from array()
250-function array_unique_recursive($array = array())
251-{
252- if (! is_array($array)) return $array;
253-
254- $tmp = array();
255- foreach($array as $key => $value){
256- if (is_array($value)) {
257- $array[$key] = array_unique_recursive($value);
258- } else {
259- if (isset($tmp[$value])) {
260- unset($array[$key]);
261- } else {
262- $tmp[$value] = TRUE;
263- }
264- }
265- }
266-
267- return $array;
268-}
15+if (! defined('SPAM_INI_FILE')) define('SPAM_INI_FILE', 'spam.ini.php');
26916
27017
27118 // ---------------------
272-// Part One : Checker
19+// Regex
27320
27421 // Rough implementation of globbing
27522 //
@@ -317,42 +64,34 @@ function generate_host_regex($string = '', $divider = '/')
31764 {
31865 if (! is_string($string)) return '';
31966
320- if (mb_strpos($string, '.') === FALSE)
321- return generate_glob_regex($string, $divider);
322-
323- if (is_ip($string)) {
324- // IPv4
67+ if (mb_strpos($string, '.') === FALSE || is_ip($string)) {
68+ // "localhost", IPv4, etc
32569 return generate_glob_regex($string, $divider);
326- } else {
327- // FQDN or something
328- $part = explode('.', $string, 2);
329- if ($part[0] == '') {
330- $part[0] = '(?:.*\.)?'; // And all related FQDN
331- } else if ($part[0] == '*') {
332- $part[0] = '.*\.'; // All subdomains/hosts only
333- } else {
334- return generate_glob_regex($string, $divider);
335- }
336- $part[1] = generate_glob_regex($part[1], $divider);
337- return implode('', $part);
33870 }
339-}
34071
341-// Rough hostname checker
342-// [OK] 192.168.
343-// TODO: Strict digit, 0x, CIDR, IPv6
344-function is_ip($string = '')
345-{
346- if (preg_match('/^' .
347- '(?:[0-9]{1,3}\.){3}[0-9]{1,3}' . '|' .
348- '(?:[0-9]{1,3}\.){1,3}' . '$/',
349- $string)) {
350- return 4; // Seems IPv4(dot-decimal)
72+ // FQDN or something
73+ $part = explode('.', $string, 2);
74+ if ($part[0] == '') {
75+ // ".example.org"
76+ $part[0] = '(?:.*\.)?';
77+ } else if ($part[0] == '*') {
78+ // "*.example.org"
79+ $part[0] = '.*\.';
35180 } else {
352- return 0; // Seems not IP
81+ // example.org, etc
82+ return generate_glob_regex($string, $divider);
35383 }
84+
85+ $part[1] = generate_glob_regex($part[1], $divider);
86+
87+ return implode('', $part);
35488 }
35589
90+
91+// ---------------------
92+// Load
93+
94+// Load SPAM_INI_FILE and return parsed one
35695 function get_blocklist($list = '')
35796 {
35897 static $regexes;
@@ -366,6 +105,7 @@ function get_blocklist($list = '')
366105 $regexes = array();
367106 if (file_exists(SPAM_INI_FILE)) {
368107 $blocklist = array();
108+
369109 include(SPAM_INI_FILE);
370110 // $blocklist['list'] = array(
371111 // //'goodhost' => FALSE;
@@ -375,11 +115,19 @@ function get_blocklist($list = '')
375115 // '*.blogspot.com', // Blog services's subdomains (only)
376116 // 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
377117 // );
378- foreach(array('pre', 'list') as $special) {
118+
119+ foreach(array(
120+ 'pre',
121+ 'list',
122+ ) as $special) {
123+
379124 if (! isset($blocklist[$special])) continue;
125+
380126 $regexes[$special] = $blocklist[$special];
127+
381128 foreach(array_keys($blocklist[$special]) as $_list) {
382129 if (! isset($blocklist[$_list])) continue;
130+
383131 foreach ($blocklist[$_list] as $key => $value) {
384132 if (is_array($value)) {
385133 $regexes[$_list][$key] = array();
@@ -390,6 +138,7 @@ function get_blocklist($list = '')
390138 get_blocklist_add($regexes[$_list], $key, $value);
391139 }
392140 }
141+
393142 unset($blocklist[$_list]);
394143 }
395144 }
@@ -397,21 +146,24 @@ function get_blocklist($list = '')
397146 }
398147
399148 if ($list === '') {
400- return $regexes; // ALL
149+ return $regexes; // ALL of
401150 } else if (isset($regexes[$list])) {
402- return $regexes[$list];
151+ return $regexes[$list]; // A part of
403152 } else {
404- return array();
153+ return array(); // Found nothing
405154 }
406155 }
407156
408-// Subroutine of get_blocklist()
409-function get_blocklist_add(& $array, $key = 0, $value = '*.example.org')
157+// Subroutine of get_blocklist(): Add new regex to the $array
158+function get_blocklist_add(& $array, $key = 0, $value = '*.example.org/path/to/file.html')
410159 {
411160 if (is_string($key)) {
412- $array[$key] = & $value; // Treat $value as a regex
161+ $array[$key] = & $value; // Treat $value as a regex for FQDN(host)s
413162 } else {
414- $array[$value] = '/^' . generate_host_regex($value, '/') . '$/i';
163+ $regex = generate_host_regex($value, '#');
164+ if (! empty($regex)) {
165+ $array[$value] = '#^' . $regex . '$#i';
166+ }
415167 }
416168 }
417169
@@ -592,30 +344,37 @@ function check_uri_spam($target = '', $method = array())
592344 // ----------------------------------------
593345 // Area measure
594346
595- // Area: There's HTML anchor tag
596- if ((! $asap || ! $is_spam) && isset($method['area_anchor'])) {
597- $key = 'area_anchor';
598- $_asap = isset($method['asap']) ? array('asap' => TRUE) : array();
599- $result = area_pickup($target, array($key => TRUE) + $_asap);
600- if ($result) {
601- $sum[$key] = $result[$key];
602- if (isset($method[$key]) && $sum[$key] > $method[$key]) {
603- $is_spam[$key] = TRUE;
604- }
347+ if (! $asap || ! $is_spam) {
348+
349+ // Method pickup
350+ $_method = array();
351+ foreach(array(
352+ 'area_anchor', // There's HTML anchor tag
353+ 'area_bbcode', // There's 'BBCode' linking tag
354+ ) as $key) {
355+ if (isset($method[$key])) $_method[$key] = TRUE;
605356 }
606- }
607357
608- // Area: There's 'BBCode' linking tag
609- if ((! $asap || ! $is_spam) && isset($method['area_bbcode'])) {
610- $key = 'area_bbcode';
611- $_asap = isset($method['asap']) ? array('asap' => TRUE) : array();
612- $result = area_pickup($target, array($key => TRUE) + $_asap);
613- if ($result) {
614- $sum[$key] = $result[$key];
615- if (isset($method[$key]) && $sum[$key] > $method[$key]) {
616- $is_spam[$key] = TRUE;
358+ if ($_method) {
359+ $_asap = isset($method['asap']) ? array('asap' => TRUE) : array();
360+ $_result = area_pickup($target, $_method + $_asap);
361+ $_asap = NULL;
362+ } else {
363+ $_result = FALSE;
364+ }
365+
366+ if ($_result) {
367+ foreach(array_keys($_method) as $key) {
368+ if (isset($_result[$key])) {
369+ $sum[$key] = $_result[$key];
370+ if (isset($method[$key]) && $sum[$key] > $method[$key]) {
371+ $is_spam[$key] = TRUE;
372+ }
373+ }
617374 }
618375 }
376+
377+ unset($_asap, $_method, $_result);
619378 }
620379
621380 // Return if ...
@@ -624,22 +383,30 @@ function check_uri_spam($target = '', $method = array())
624383 // ----------------------------------------
625384 // URI: Pickup
626385
627- $pickups = uri_pickup_normalize(spam_uri_pickup($target, $method));
386+ $pickups = spam_uri_pickup($target, $method);
387+
388+
389+ // Return if ...
390+ if (empty($pickups)) return $progress;
391+
392+ // Normalize all
393+ $pickups = uri_pickup_normalize($pickups);
394+
395+ // ----------------------------------------
396+ // Pickup some part of URI
397+
628398 $hosts = array();
629399 foreach ($pickups as $key => $pickup) {
630400 $hosts[$key] = & $pickup['host'];
631401 }
632402
633- // Return if ...
634- if (empty($pickups)) return $progress;
635-
636403 // ----------------------------------------
637404 // URI: Bad host <pre-filter> (Separate good/bad hosts from $hosts)
638405
639406 if ((! $asap || ! $is_spam) && isset($method['badhost'])) {
640407 $list = get_blocklist('pre');
641408 $blocked = blocklist_distiller($hosts, array_keys($list), $asap);
642- foreach($list as $key=>$type){
409+ foreach($list as $key => $type){
643410 if (! $type) unset($blocked[$key]); // Ignore goodhost etc
644411 }
645412 unset($list);
@@ -859,9 +626,9 @@ function summarize_detail_newtral($progress = array())
859626 $subs = array();
860627 foreach(array_keys($trie[$key]) as $sub) {
861628 if ($sub == '') {
862- $subs[] = $key;
629+ $subs[] = $key; // 'example.com'
863630 } else {
864- $subs[] = $sub . '.' . $key;
631+ $subs[] = $sub . '. '; // 'A.foo.bar. '
865632 }
866633 }
867634 $result[] = ' \'' . $key . '\' => \'' . implode(', ', $subs) . '\',';
@@ -875,59 +642,6 @@ function summarize_detail_newtral($progress = array())
875642 }
876643
877644
878-// Check responsibility-root of the FQDN
879-// 'foo.bar.example.com' => 'example.com' (.com has the last whois for it)
880-// 'foo.bar.example.au' => 'example.au' (.au has the last whois for it)
881-// 'foo.bar.example.edu.au' => 'example.edu.au' (.edu.au has the last whois for it)
882-// 'foo.bar.example.act.edu.au' => 'example.act.edu.au' (.act.edu.au has the last whois for it)
883-function whois_responsibility($fqdn = 'foo.bar.example.com', $parent = FALSE, $implicit = TRUE)
884-{
885- static $domain;
886-
887- if ($fqdn === NULL) {
888- $domain = NULL; // Unset
889- return '';
890- }
891- if (! is_string($fqdn)) return '';
892-
893- if (is_ip($fqdn)) return $fqdn;
894-
895- if (! isset($domain)) {
896- $domain = array();
897- if (file_exists(DOMAIN_INI_FILE)) {
898- include(DOMAIN_INI_FILE); // Set
899- }
900- }
901-
902- $result = array();
903- $dcursor = & $domain;
904- $array = array_reverse(explode('.', $fqdn));
905- $i = 0;
906- while(TRUE) {
907- if (! isset($array[$i])) break;
908- $acursor = $array[$i];
909- if (is_array($dcursor) && isset($dcursor[$acursor])) {
910- $result[] = & $array[$i];
911- $dcursor = & $dcursor[$acursor];
912- } else {
913- if (! $parent && isset($acursor)) {
914- $result[] = & $array[$i]; // Whois servers must know this subdomain
915- }
916- break;
917- }
918- ++$i;
919- }
920-
921- // Implicit responsibility: Top-Level-Domains must not be yours
922- // 'bar.foo.something' => 'foo.something'
923- if ($implicit && count($result) == 1 && count($array) > 1) {
924- $result[] = & $array[1];
925- }
926-
927- return $result ? implode('.', array_reverse($result)) : '';
928-}
929-
930-
931645 // ---------------------
932646 // Exit
933647
@@ -950,7 +664,7 @@ function spam_exit($mode = '', $data = array())
950664 break;
951665 case 'dump':
952666 echo('<pre>' . "\n");
953- echo htmlspecialchars(var_export($data, TRUE));
667+ echo htmlsc(var_export($data, TRUE));
954668 echo('</pre>' . "\n");
955669 break;
956670 };
--- a/lib/spam_pickup.php
+++ b/lib/spam_pickup.php
@@ -1,10 +1,14 @@
11 <?php
2-// $Id: spam_pickup.php,v 1.1.2.2 2007/09/24 16:03:35 henoheno Exp $
3-// Copyright (C) 2006-2007 PukiWiki Developers Team
2+// $Id: spam_pickup.php,v 1.1.2.3 2011/01/24 15:34:39 henoheno Exp $
3+// Copyright (C) 2006-2009 PukiWiki Developers Team
44 // License: GPL v2 or (at your option) any later version
55 //
66 // Functions for Concept-work of spam-uri metrics
77 //
8+// (PHP 4 >= 4.3.0): preg_match_all(PREG_OFFSET_CAPTURE): $method['uri_XXX'] related feature
9+//
10+
11+if (! defined('DOMAIN_INI_FILE')) define('DOMAIN_INI_FILE', 'domain.ini.php');
812
913 // ---------------------
1014 // URI pickup
@@ -14,18 +18,18 @@
1418 // [OK] http://nasty.example.org:80/foo/xxx#nasty_string/bar
1519 // [OK] ftp://nasty.example.org:80/dfsdfs
1620 // [OK] ftp://cnn.example.com&story=breaking_news@10.0.0.1/top_story.htm (from RFC3986)
21+// Not available for: IDN(ignored)
1722 function uri_pickup($string = '')
1823 {
1924 if (! is_string($string)) return array();
2025
21- // Not available for: IDN(ignored)
2226 $array = array();
2327 preg_match_all(
2428 // scheme://userinfo@host:port/path/or/pathinfo/maybefile.and?query=string#fragment
2529 // Refer RFC3986 (Regex below is not strict)
2630 '#(\b[a-z][a-z0-9.+-]{1,8}):[/\\\]+' . // 1: Scheme
2731 '(?:' .
28- '([^\s<>"\'\[\]/\#?@]*)' . // 2: Userinfo (Username)
32+ '([^\s<>"\'\[\]/\#?@]*)' . // 2: Userinfo (Username and/or password)
2933 '@)?' .
3034 '(' .
3135 // 3: Host
@@ -34,7 +38,7 @@ function uri_pickup($string = '')
3438 '[a-z0-9_-][a-z0-9_.-]+[a-z0-9_-]' . // hostname(FQDN) : foo.example.org
3539 ')' .
3640 '(?::([0-9]*))?' . // 4: Port
37- '((?:/+[^\s<>"\'\[\]/\#]+)*/+)?' . // 5: Directory path or path-info
41+ '((?:/+[^\s<>"\'\[\]/\#?]+)*/+)?' . // 5: Directory path
3842 '([^\s<>"\'\[\]\#?]+)?' . // 6: File?
3943 '(?:\?([^\s<>"\'\[\]\#]+))?' . // 7: Query string
4044 '(?:\#([a-z0-9._~%!$&\'()*+,;=:@-]*))?' . // 8: Fragment
@@ -42,18 +46,18 @@ function uri_pickup($string = '')
4246 $string, $array, PREG_SET_ORDER | PREG_OFFSET_CAPTURE
4347 );
4448
45- // Format the $array
49+ // Reformat the $array
4650 static $parts = array(
4751 1 => 'scheme', 2 => 'userinfo', 3 => 'host', 4 => 'port',
4852 5 => 'path', 6 => 'file', 7 => 'query', 8 => 'fragment'
4953 );
50- $default = array('');
54+ $default = array(0 => '', 1 => -1);
5155 foreach(array_keys($array) as $uri) {
5256 $_uri = & $array[$uri];
5357 array_rename_keys($_uri, $parts, TRUE, $default);
5458 $offset = $_uri['scheme'][1]; // Scheme's offset = URI's offset
5559 foreach(array_keys($_uri) as $part) {
56- $_uri[$part] = & $_uri[$part][0]; // Remove offsets
60+ $_uri[$part] = $_uri[$part][0]; // Remove offsets
5761 }
5862 }
5963
@@ -86,27 +90,43 @@ function uri_pickup_implode($uri = array())
8690 $tmp[] = & $uri['scheme'];
8791 $tmp[] = '://';
8892 }
93+
8994 if (isset($uri['userinfo']) && $uri['userinfo'] !== '') {
9095 $tmp[] = & $uri['userinfo'];
9196 $tmp[] = '@';
97+ } else if (isset($uri['user']) || isset($uri['pass'])) {
98+ if (isset($uri['user']) && $uri['user'] !== '') {
99+ $tmp[] = & $uri['user'];
100+ }
101+ $tmp[] = ':';
102+ if (isset($uri['pass']) && $uri['pass'] !== '') {
103+ $tmp[] = & $uri['pass'];
104+ }
105+ $tmp[] = '@';
92106 }
107+
93108 if (isset($uri['host']) && $uri['host'] !== '') {
94109 $tmp[] = & $uri['host'];
95110 }
111+
96112 if (isset($uri['port']) && $uri['port'] !== '') {
97113 $tmp[] = ':';
98114 $tmp[] = & $uri['port'];
99115 }
116+
100117 if (isset($uri['path']) && $uri['path'] !== '') {
101118 $tmp[] = & $uri['path'];
102119 }
120+
103121 if (isset($uri['file']) && $uri['file'] !== '') {
104122 $tmp[] = & $uri['file'];
105123 }
124+
106125 if (isset($uri['query']) && $uri['query'] !== '') {
107126 $tmp[] = '?';
108127 $tmp[] = & $uri['query'];
109128 }
129+
110130 if (isset($uri['fragment']) && $uri['fragment'] !== '') {
111131 $tmp[] = '#';
112132 $tmp[] = & $uri['fragment'];
@@ -115,12 +135,13 @@ function uri_pickup_implode($uri = array())
115135 return implode('', $tmp);
116136 }
117137
138+
118139 // ---------------------
119140 // URI normalization
120141
121142 // Normalize an array of URI arrays
122143 // NOTE: Give me the uri_pickup() results
123-function uri_pickup_normalize(& $pickups, $destructive = TRUE)
144+function uri_pickup_normalize(& $pickups, $destructive = TRUE, $pathfile = FALSE)
124145 {
125146 if (! is_array($pickups)) return $pickups;
126147
@@ -145,6 +166,28 @@ function uri_pickup_normalize(& $pickups, $destructive = TRUE)
145166 }
146167 }
147168
169+ if ($pathfile) {
170+ return uri_pickup_normalize_pathfile($pickups);
171+ } else {
172+ return $pickups;
173+ }
174+}
175+
176+// Normalize: 'path' + 'file' = 'path' (Similar structure using PHP's "parse_url()" function)
177+// NOTE: In some case, 'file' DOES NOT mean _filename_.
178+// [EXAMPLE] http://example.com/path/to/directory-accidentally-not-ended-with-slash
179+function uri_pickup_normalize_pathfile(& $pickups)
180+{
181+ if (! is_array($pickups)) return $pickups;
182+
183+ foreach (array_keys($pickups) as $key) {
184+ $_key = & $pickups[$key];
185+ if (isset($_key['path'], $_key['file'])) {
186+ $_key['path'] = $_key['path'] . $_key['file'];
187+ unset($_key['file']);
188+ }
189+ }
190+
148191 return $pickups;
149192 }
150193
@@ -188,13 +231,14 @@ function scheme_normalize($scheme = '', $abbrevs_harmfull = TRUE)
188231 // www.foo.bar => foo.bar
189232 // www.10.20 => www.10.20 (Invalid hostname)
190233 // NOTE:
191-// 'www' is mostly used as traditional hostname of WWW server.
192-// 'www.foo.bar' may be identical with 'foo.bar'.
234+// 'www' is basically traditional hostname for WWW server.
235+// In these case, 'www.foo.bar' MAY be identical with 'foo.bar'.
193236 function host_normalize($host = '')
194237 {
195238 if (! is_string($host)) return '';
196239
197240 $host = strtolower($host);
241+
198242 $matches = array();
199243 if (preg_match('/^www\.(.+\.[a-z]+)$/', $host, $matches)) {
200244 return $matches[1];
@@ -693,6 +737,9 @@ function spam_uri_pickup_preprocess($string = '', $method = array())
693737 $string = preg_replace(
694738 '#h?ttp://' .
695739 '(' .
740+ 'a9\.com/' . '|' .
741+ 'aboutus\.org/' . '|' .
742+ 'alexa\.com/data/details\?url=' . '|' .
696743 'ime\.(?:nu|st)/' . '|' . // 2ch.net
697744 'link\.toolbot\.com/' . '|' .
698745 'urlx\.org/' . '|' .
@@ -729,7 +776,8 @@ function spam_uri_pickup_preprocess($string = '', $method = array())
729776 // ...
730777 ')' .
731778 '/' .
732- '([a-z0-9?=&.%_/\'\\\+-]+)' . // 3:path/?query=foo+bar+
779+ //TODO: Specify URL-enable characters
780+ '([a-z0-9?=&.,%_/\'\\\+-]+)' . // 3:path/?query=foo+bar+
733781 '(?:\b|%20)site:([a-z0-9.%_-]+\.[a-z0-9.%_-]+)' . // 4:site:nasty.example.com
734782 '()' . // 5:Preserve or remove?
735783 '#i',
@@ -787,10 +835,83 @@ function spam_uri_pickup($string = '', $method = array())
787835 }
788836
789837 // Remove 'offset's for area_measure()
790- foreach(array_keys($array) as $key)
838+ foreach(array_keys($array) as $key) {
791839 unset($array[$key]['area']['offset']);
840+ }
792841
793842 return $array;
794843 }
795844
845+// Rough hostname checker
846+// TODO: Strict digit, 0x, CIDR, '999.999.999.999', ':', '::G'
847+function is_ip($string = '')
848+{
849+ if (! is_string($string)) return FALSE;
850+
851+ if (strpos($string, ':') !== FALSE) {
852+ return 6; // Seems IPv6
853+ }
854+
855+ if (preg_match('/^' .
856+ '(?:[0-9]{1,3}\.){3}[0-9]{1,3}' . '|' .
857+ '(?:[0-9]{1,3}\.){1,3}' . '$/',
858+ $string)) {
859+ return 4; // Seems IPv4(dot-decimal)
860+ }
861+
862+ return FALSE; // Seems not IP
863+}
864+
865+// Check responsibility-root of the FQDN
866+// 'foo.bar.example.com' => 'example.com' (.com has the last whois for it)
867+// 'foo.bar.example.au' => 'example.au' (.au has the last whois for it)
868+// 'foo.bar.example.edu.au' => 'example.edu.au' (.edu.au has the last whois for it)
869+// 'foo.bar.example.act.edu.au' => 'example.act.edu.au' (.act.edu.au has the last whois for it)
870+function whois_responsibility($fqdn = 'foo.bar.example.com', $parent = FALSE, $implicit = TRUE)
871+{
872+ static $domain;
873+
874+ if ($fqdn === NULL) {
875+ $domain = NULL; // Unset
876+ return '';
877+ }
878+ if (! is_string($fqdn)) return '';
879+
880+ if (is_ip($fqdn)) return $fqdn;
881+
882+ if (! isset($domain)) {
883+ $domain = array();
884+ if (file_exists(DOMAIN_INI_FILE)) {
885+ include(DOMAIN_INI_FILE); // Set
886+ }
887+ }
888+
889+ $result = array();
890+ $dcursor = & $domain;
891+ $array = array_reverse(explode('.', $fqdn));
892+ $i = 0;
893+ while(TRUE) {
894+ if (! isset($array[$i])) break;
895+ $acursor = $array[$i];
896+ if (is_array($dcursor) && isset($dcursor[$acursor])) {
897+ $result[] = & $array[$i];
898+ $dcursor = & $dcursor[$acursor];
899+ } else {
900+ if (! $parent && isset($acursor)) {
901+ $result[] = & $array[$i]; // Whois servers must know this subdomain
902+ }
903+ break;
904+ }
905+ ++$i;
906+ }
907+
908+ // Implicit responsibility: Top-Level-Domains must not be yours
909+ // 'bar.foo.something' => 'foo.something'
910+ if ($implicit && count($result) == 1 && count($array) > 1) {
911+ $result[] = & $array[1];
912+ }
913+
914+ return $result ? implode('.', array_reverse($result)) : '';
915+}
916+
796917 ?>
--- a/spam.ini.php
+++ b/spam.ini.php
@@ -1,5 +1,5 @@
11 <?php
2-// $Id: spam.ini.php,v 1.75.2.2 2007/09/24 16:01:10 henoheno Exp $
2+// $Id: spam.ini.php,v 1.75.2.3 2011/01/24 15:34:39 henoheno Exp $
33 // Spam-related setting
44
55 // NOTE FOR ADMINISTRATORS:
@@ -41,13 +41,14 @@
4141 // 'pre': Before the other filters/checkers
4242 $blocklist['pre'] = array(
4343 'goodhost' => FALSE,
44+// 'official/dev' => FALSE,
4445 );
4546
4647 // 'list': Normal list
4748 $blocklist['list'] = array(
4849 'A-1' => TRUE, // General redirection services
4950 //'A-2' => TRUE, // Dynamic DNS, Dynamic IP services, ...
50- 'B-1' => TRUE, // Web spaces
51+ 'B-1' => TRUE, // Web N.M spaces
5152 'B-2' => TRUE, // Jacked contents, something implanted
5253 'C' => TRUE, // Exclusive spam domains
5354 //'D' => TRUE, // "Third party in good faith"s
@@ -57,36 +58,32 @@ $blocklist['list'] = array(
5758
5859
5960 // --------------------------------------------------
61+// Ignorance list
6062
6163 $blocklist['goodhost'] = array(
62- // Sample setting of ignorance list
63-
6464 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#',
65+);
6566
67+$blocklist['official/dev'] = array(
6668 // PukiWiki-official/dev specific
67- //'pukiwiki.sourceforge.jp',
68- //'pukiwiki.org', // Temporary
69- //'.logue.tk', // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01)
70- //'.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19)
71- //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
72- //'emasaka.blog65.fc2.com', // Text-to-Impress converter
73- //'ifastnet.com', // Server hosting
74- //'threefortune.ifastnet.com', // Server hosting
75-
76- // Yours
77- //''
78- //''
79- //''
80-
69+ 'pukiwiki.sourceforge.jp',
70+ '.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19)
71+ '.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk
72+ 'emasaka.blog65.fc2.com', // Text-to-Impress converter
73+ 'ifastnet.com', // Server hosting
74+ 'threefortune.ifastnet.com', // Server hosting
75+ 'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker
76+ 'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer
8177 );
8278
79+
8380 // --------------------------------------------------
8481 // A: Sample setting of
8582 // Existing URI redirection or masking services
8683
8784 $blocklist['A-1'] = array(
8885
89- // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript,
86+ // A-1: General redirection or masking services -- by HTML meta, HTML frame, JavaScript,
9087 // web-based proxy, DNS subdomains, etc
9188 // http://en.wikipedia.org/wiki/URL_redirection
9289 //
@@ -94,15 +91,30 @@ $blocklist['A-1'] = array(
9491 // for spammers and affiliate users dazed by money.
9592 //
9693 // Messages from forerunners:
94+ // idek.net
95+ // "..., idek will stop accepting requests to
96+ // create new urls. "
9797 // o-rly.net
9898 // "A URL REDIRECTION SERVICE GONE BAD"
9999 // "SORRY, TRULY"
100100 // smcurl.com
101101 // "Idiots were using smcURL to shrink URLs and
102102 // send them out via spam."
103+ // symy.jp
104+ // "One or more users are using our URL redirect
105+ // service for spam/botnet.
106+ // So we closed this service."
103107 // tinyclick.com
104108 // "...stop offering it's free services because
105109 // too many people were taking advantage of it"
110+ // tr.im
111+ // "The decision is based on waving the white
112+ // flag on a never ending battle with spammers
113+ // that relentlessly abuse tr.im."
114+ // u.nu
115+ // "Since the beginning, it has been plagued
116+ // with abuse from spammers and other
117+ // no-goodniks."
106118 // xjs.org
107119 // "We have been forced to close this facility
108120 // due to a minority of knuckle draggers who
@@ -129,6 +141,7 @@ $blocklist['A-1'] = array(
129141 '1url.org',
130142 '1url.in',
131143 '1webspace.org',
144+ '2am.jp',
132145 '2Ch.net' => array(
133146 'ime.nu',
134147 'ime.st',
@@ -173,6 +186,7 @@ $blocklist['A-1'] = array(
173186 '*.ovp.pl',
174187 '*.6-6-6.pl',
175188 ),
189+ 'babelfish.altavista.com', ///babelfish/trurl_pagecontent
176190 'amoo.org',
177191 'web.archive.org', ///web/2
178192 'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
@@ -189,11 +203,16 @@ $blocklist['A-1'] = array(
189203 'athomebiz.com',
190204 'aukcje1.pl',
191205 'beam.to',
206+ '*.bebo.com',
192207 'beermapping.com',
193208 'besturl.in',
194209 'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
195210 'biglnk.com',
196211 'bingr.com',
212+ 'bit.ly' => array(
213+ 'bit.ly',
214+ 'j.mp',
215+ ),
197216 'bittyurl.com',
198217 '*.bizz.cc',
199218 '*.blo.pl',
@@ -212,6 +231,7 @@ $blocklist['A-1'] = array(
212231 ),
213232 'budgethosts.org',
214233 'budu.com', // by peter.eder at imcworld.com
234+ 'budurl.com',
215235 '*.buzznet.com',
216236 '*.bydl.com',
217237 'C-O.IN' => array(
@@ -232,6 +252,7 @@ $blocklist['A-1'] = array(
232252 'christopherleestreet.com',
233253 'cintcm.com',
234254 '*.cjb.net',
255+ 'cli.gs',
235256 'clipurl.com',
236257 '*.co.nr',
237258 'Comtech Enterprises ' => array( // comteche.com
@@ -251,6 +272,7 @@ $blocklist['A-1'] = array(
251272 'hardcore-porn.de',
252273 'maschinen-bluten-nicht.de',
253274 ),
275+ 'copyme.org', // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com
254276 'cutalink.com',
255277 '*.da.cx',
256278 '*.da.ru',
@@ -278,7 +300,12 @@ $blocklist['A-1'] = array(
278300 '*.dynu.ca',
279301 'dwarf.name',
280302 '*.eadf.com',
281- '*.easyurl.net',
303+ 'easyURL.net' => array(
304+ '*.easyurl.net',
305+ '.goshrink.com',
306+ 'ushrink.com',
307+ ),
308+ '.eazylink.net', // 2010/08 by info at digitalinsights.biz
282309 'easyurl.jp', // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
283310 // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
284311 // This service seems to be opened at 2007/08/23 with "beta" sign.
@@ -431,15 +458,19 @@ $blocklist['A-1'] = array(
431458 '*.globalredirect.com',
432459 'gnu.vu',
433460 '*.go.cc',
434- //'Google.com' => array(
461+ 'Google.com' => array(
435462 // google.com/translate_c\?u=(?:http://)?
436- //),
463+ 'goo.gl', // by (dns-admin at google.com)
464+ ),
437465 'goonlink.com',
438466 '.gourl.org',
439467 '.greatitem.com',
440468 'gzurl.com',
441469 'url.grillsportverein.de',
442470 'Harudake.net' => array('*.hyu.jp'),
471+ 'hatena.ne.jp related' => array(
472+ 'htn.to', // 2010-09 59.106.108.106 (hatena.ne.jp is 59.106.108.106)
473+ ),
443474 'Hattinger Linux User Group' => array('short.hatlug.de'),
444475 'Hexten.net' => array('lyxus.net'),
445476 'here.is',
@@ -480,6 +511,10 @@ $blocklist['A-1'] = array(
480511 'iat.net', // 74.208.58.130 by Tony Carter
481512 'ibm.com', ///links (Correct it)
482513 '*.iceglow.com',
514+ 'internetadresi.com' => array (
515+ 'rxbuycheap.com',
516+ 'rxcheapwestern.com',
517+ ),
483518 'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
484519 'Ideas para Nuevos Mercados SL' => array(
485520 // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
@@ -598,6 +633,7 @@ $blocklist['A-1'] = array(
598633 '.iwebtool.com',
599634 'j6.bz',
600635 'jeeee.net',
636+ 'is.gd',
601637 'Jaze Redirect Services' => array(
602638 '*.arecool.net',
603639 '*.iscool.net',
@@ -847,6 +883,7 @@ $blocklist['A-1'] = array(
847883 'linkezy.com',
848884 'linkfrog.net',
849885 'linkook.com',
886+ 'linkyme.com',
850887 'linkzip.net',
851888 'lispurl.com',
852889 'lnk.in',
@@ -879,6 +916,7 @@ $blocklist['A-1'] = array(
879916 ),
880917 'monster-submit.com',
881918 'mooo.jp',
919+ 'moourl.com',
882920 'murl.net',
883921 'myactivesurf.net',
884922 'mytinylink.com',
@@ -897,11 +935,13 @@ $blocklist['A-1'] = array(
897935 '*.ontheinter.net',
898936 'ourl.org',
899937 'ov2.net', // frame
938+ 'ow.ly',
900939 '*.ozonez.com',
901940 'pagebang.com',
902941 'palurl.com',
903942 '*.paulding.net',
904943 'phpfaber.org',
944+ 'pygmyurl.com',
905945 'pnope.com',
906946 'prettylink.com',
907947 'PROXID.net' => array( // also xRelay.net
@@ -912,6 +952,7 @@ $blocklist['A-1'] = array(
912952 '*.site.tc',
913953 '*.societe.st',
914954 ),
955+ 'qqa.jp',
915956 'qrl.jp',
916957 'qurl.net',
917958 'qwer.org',
@@ -933,6 +974,7 @@ $blocklist['A-1'] = array(
933974 'rio.st',
934975 'rlink.org',
935976 '*.rmcinfo.fr',
977+ 'roo.to', // Seems closed, says "bye-bye"
936978 'rubyurl.com',
937979 '*.runboard.com',
938980 'runurl.com',
@@ -1028,11 +1070,15 @@ $blocklist['A-1'] = array(
10281070 'slink.in',
10291071 'smallurl.eu',
10301072 'smurl.name',
1073+ 'sn.im',
10311074 'snipurl.com',
10321075 'sp-nov.net',
10331076 'splashblog.com',
10341077 'spod.cx',
10351078 '*.spydar.com',
1079+ 'StumbleUpon.com' => array(
1080+ 'su.pr', // by (hostmaster at stumbleupon.com)
1081+ ),
10361082 'Subdomain.gr' => array(
10371083 '*.p2p.gr',
10381084 '*.subdomain.gr',
@@ -1040,7 +1086,6 @@ $blocklist['A-1'] = array(
10401086 'SURL.DK' => array('surl.dk'), // main page is: s-url.dk
10411087 'surl.se',
10421088 'surl.ws',
1043- 'symy.jp',
10441089 'tdurl.com',
10451090 'tighturl.com',
10461091 'tiniuri.com',
@@ -1059,6 +1104,7 @@ $blocklist['A-1'] = array(
10591104 'titlien.com',
10601105 '*.tlg.pl',
10611106 'tlurl.com',
1107+ 'twurl.nl', // 2010-09 87.255.53.196 (redirects tweetburner.com 87.255.53.196)
10621108 'link.toolbot.com',
10631109 'tnij.org',
10641110 'Tokelau ccTLD' => array('.tk'),
@@ -1066,8 +1112,12 @@ $blocklist['A-1'] = array(
10661112 '*.toolbot.com',
10671113 '*.torontonian.com',
10681114 'trimurl.com',
1069- 'ttu.cc',
1115+ //'ttu.cc', // Seems closed
10701116 'turl.jp',
1117+ 'Twitter.com' => array(
1118+ 't.co', // by (cofounders at cointernet.co)
1119+ 'twt.tl',
1120+ ),
10711121 '*.tz4.com',
10721122 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
10731123 '*.1.to',
@@ -1098,6 +1148,7 @@ $blocklist['A-1'] = array(
10981148 '*.ever.to',
10991149 '*.mini.to',
11001150 ),
1151+ 'u-go.to',
11011152 'uchinoko.in',
11021153 'Ulimit.com' => array(
11031154 '*.be.tf',
@@ -1127,6 +1178,7 @@ $blocklist['A-1'] = array(
11271178 '*.unixlover.com',
11281179 '*.zik.mu',
11291180 ),
1181+ 'urltea.com',
11301182 '*.uni.cc',
11311183 'UNONIC.com' => array(
11321184 '*.at.tf', // AlpenNIC
@@ -1182,12 +1234,14 @@ $blocklist['A-1'] = array(
11821234 ),
11831235 '*.urlproxy.com',
11841236 'urlser.com',
1237+ 'urlshorteningservicefortwitter.com',
11851238 'urlsnip.com',
11861239 'urlzip.de',
11871240 'urlx.org',
11881241 'useurl.us', // by Edward Beauchamp (mail at ebvk.com)
11891242 'utun.jp',
11901243 'uxxy.com',
1244+ 'uzo.in', // 2010-09 redirects, and subdomain
11911245 '*.v27.net',
11921246 'V3.com by FortuneCity.com' => array( // http://www.v3.com/sub-domain-list.shtml
11931247 '*.all.at',
@@ -1361,13 +1415,19 @@ $blocklist['A-1'] = array(
13611415 ),
13621416 '*.xshorturl.com', // by Markus Lee (soul_s at list.ru)
13631417 '.y11.net',
1418+ 'Yahoo.co.jp' => array(
1419+ 'wrs.search.yahoo.co.jp',
1420+ ),
1421+ 'Yahoo.com' => array(
1422+ 'rds.yahoo.com',
1423+ ),
1424+ 'yatuc.com',
1425+ 'yep.it',
13641426 'YESNS.com' => array( // by Jae-Hwan Kwon (kwonjhpd at kornet.net)
13651427 '*.yesns.com',
13661428 '*.srv4u.net',
13671429 //blogne.com
13681430 ),
1369- 'yatuc.com',
1370- 'yep.it',
13711431 'yumlum.com',
13721432 'yurel.com',
13731433 'Z.la' => array(
@@ -1483,7 +1543,7 @@ $blocklist['A-2'] = array(
14831543
14841544 $blocklist['B-1'] = array(
14851545
1486- // B-1: Web spaces
1546+ // B-1: Web N.M spaces (N > 0, M >= 0)
14871547 //
14881548 // Messages from forerunners:
14891549 // activefreehost.com
@@ -1494,20 +1554,28 @@ $blocklist['B-1'] = array(
14941554 // to take time for software improvement to fight
14951555 // with server abuse, Spam advertisement and
14961556 // fraud."
1557+ // wsboards.com
1558+ // had been removed due to spam (noticed by its domain owner)
14971559 //
14981560 '*.0000host.com', // 68.178.200.154, ns *.3-hosting.net
14991561 '*.007ihost.com', // 195.242.99.199(s199.softwarelibre.nl)
1562+ '*.007webpro.com', // by richord at ientry.com
15001563 '*.00bp.com', // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
1564+ '*.0buckhost.com', // by tycho at e-lab.nl
15011565 '0Catch.com related' => array(
15021566 '*.0catch.com', // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
15031567
1504- // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com
1568+ // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com
1569+ '*.100megsfree5.com',
1570+
1571+ // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com
15051572 '*.100freemb.com', // by Danny Ashworth
1573+ '*.easyfreehosting.com',
15061574 '*.exactpages.com',
15071575 '*.fcpages.com',
15081576 '*.wtcsites.com',
15091577
1510- // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com
1578+ // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com
15111579 '*.741.com',
15121580 '*.freecities.com',
15131581 '*.freesite.org',
@@ -1515,15 +1583,15 @@ $blocklist['B-1'] = array(
15151583 '*.freewebsitehosting.com',
15161584 '*.jvl.com',
15171585
1518- // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com
1586+ // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com
15191587 '*.freespaceusa.com',
15201588 '*.usafreespace.com',
15211589
1522- // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com
1590+ // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com
15231591 '*.dex1.com',
15241592 '*.questh.com',
15251593
1526- // 209.63.57.10(www1.0catch.com), ns *.0catch.com
1594+ // 209.63.57.10(*snip*), ns *.0catch.com
15271595 '*.00freehost.com', // by David Mccall (superjeeves at yahoo.com)
15281596 '*.012webpages.com', // by support at 0catch.com
15291597 '*.150m.com',
@@ -1579,6 +1647,7 @@ $blocklist['B-1'] = array(
15791647 '*.20me.com',
15801648 ),
15811649 '*.100foros.com',
1650+ '*.101freehost.com',
15821651 '*.12gbfree.com', // 75.126.176.194 by ashphama at yahoo.com
15831652 '20six Weblog Services' => array(
15841653 '.20six.nl', // by 20six weblog services (postmaster at 20six.nl)
@@ -1589,6 +1658,105 @@ $blocklist['B-1'] = array(
15891658 ),
15901659 '*.250free.com', // by Brian Salisbury (domains at 250host.com)
15911660 '*.275mb.com', // 204.15.10.144 by domains at febox.com
1661+ '2IP.com' => array(
1662+ // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com)
1663+ '*.2ip.jp',
1664+ '*.474.jp',
1665+ '*.consensus.jp',
1666+ '*.desyo.jp',
1667+ '*.dif.jp',
1668+ '*.pastels.jp',
1669+ '*.powerblogger.jp',
1670+ '*.vippers.jp',
1671+ '*.webpages.jp',
1672+
1673+ // 205.209.97.56(non-existent)
1674+ '*.biografi.biz',
1675+ '*.biografi.info',
1676+ '*.biografi.org',
1677+ '*.biografi.us',
1678+ '*.datadiri.biz',
1679+ '*.datadiri.cc',
1680+ '*.datadiri.com',
1681+ '*.datadiri.info',
1682+ '*.datadiri.net',
1683+ '*.datadiri.org',
1684+ '*.datadiri.tv',
1685+ '*.datadiri.us',
1686+ '*.indo.bz',
1687+ '*.indo.cc',
1688+ '*.profil.bz',
1689+ '*.profil.cc',
1690+ '*.profil.cn',
1691+ '*.profil.in',
1692+ '*.profil.tv',
1693+
1694+ // 205.209.101.47(non-existent)
1695+ '*.about.tc',
1696+ '*.about.vg',
1697+ '*.aboutus.gs',
1698+ '*.aboutus.ms',
1699+ '*.aboutus.tc',
1700+ '*.aboutus.vg',
1701+ '*.band.io',
1702+ '*.beijing.am',
1703+ '*.blogs.io',
1704+ '*.boke.am',
1705+ '*.clan.io',
1706+ '*.ecv.gs',
1707+ '*.ecv.ms',
1708+ '*.ecv.vg',
1709+ '*.freekong.cn',
1710+ '*.go2net.ws',
1711+ '*.hello.cn.com',
1712+ '*.hello.io',
1713+ '*.hits.io',
1714+ '*.hostingweb.us',
1715+ '*.hub.io',
1716+ '*.ide.am',
1717+ '*.inc.io',
1718+ '*.incn.in',
1719+ '*.indo.gs',
1720+ '*.indo.ms',
1721+ '*.indo.tc',
1722+ '*.indo.vg',
1723+ '*.infinitehosting.net',
1724+ '*.infinites.net',
1725+ '*.jushige.cn',
1726+ '*.jushige.com',
1727+ '*.kongjian.in',
1728+ '*.lan.io',
1729+ '*.llc.nu',
1730+ '*.maimai.in',
1731+ '*.max.io',
1732+ '*.musician.io',
1733+ '*.mycv.bz',
1734+ '*.mycv.nu',
1735+ '*.mycv.tv',
1736+ '*.myweb.io',
1737+ '*.ourprofile.biz',
1738+ '*.ourprofile.info',
1739+ '*.ourprofile.net',
1740+ '*.ourprofile.org',
1741+ '*.ourprofile.us',
1742+ '*.profil.gs',
1743+ '*.profil.ms',
1744+ '*.profil.tc',
1745+ '*.qiye.in',
1746+ '*.site.io',
1747+ '*.wan.io',
1748+ '*.web-cam.ws',
1749+ '*.webs.io',
1750+ '*.xixu.cc',
1751+ '*.zaici.am',
1752+ '*.zip.io',
1753+ '*.zuzhi.in',
1754+
1755+ '*.profil.vg', // 205.209.101.67(non-existent)
1756+ '*.ecv.tc', // 208.73.212.12(sp19.information.com)
1757+ //'*.about.gs', // No record
1758+ //'*.eprofile.us', // non-existent
1759+ ),
15921760 '2Page.de' => array(
15931761 '.dreipage.de',
15941762 '.2page.de',
@@ -1607,6 +1775,8 @@ $blocklist['B-1'] = array(
16071775 '*.alkablog.com',
16081776 '*.alluwant.de',
16091777 '.amkbb.com',
1778+ 'answerbag.com', // 8.5.0.128
1779+ 'anyboard.net',
16101780 'AOL.com' => // http://about.aol.com/international_services
16111781 '/^(?:chezmoi|home|homes|hometown|journals|user)\.' .
16121782 '(?:aol|americaonline)\.' .
@@ -1625,16 +1795,22 @@ $blocklist['B-1'] = array(
16251795 '*.bb-fr.com',
16261796 '.bbfast.com', // 72.52.135.174 by blogmaster2003 at gmail.com
16271797 '*.beeplog.com',
1798+ 'beepworld.it',
16281799 'bestfreeforums.com',
16291800 'bestvotexxx.com',
16301801 'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD
1802+ 'blinklist.com',
16311803 'Blog.com' => array(
1804+ // by admin.domains at co.blog.com
16321805 '*.blog.com',
1633- '*.blogandorra.com', // by admin.domains at co.blog.com
1634- '*.blogangola.com', // by admin.domains at co.blog.com
1806+ '*.blogandorra.com',
1807+ '*.blogangola.com',
1808+ '*.blogaruba.com',
1809+ '*.blogaustria.at',
16351810 ),
16361811 '*.blog.com.es',
16371812 '*.blog.hr',
1813+ '*.blog4ever.com',
16381814 '*.blog-fx.com',
16391815 '*.blogbeee.com',
16401816 'blogas.lt',
@@ -1659,6 +1835,7 @@ $blocklist['B-1'] = array(
16591835 '*.blogstream.com',
16601836 'blogyaz.com',
16611837 'bloodee.com',
1838+ 'bluedot.us', // 209.245.176.23 by mohitsriv at yahoo.com
16621839 'board-4you.de',
16631840 'boboard.com', // 66.29.54.116 by Excelsoft (shabiba at e4t.net)
16641841 '*.boardhost.com',
@@ -1707,12 +1884,16 @@ $blocklist['B-1'] = array(
17071884 '.cute.cd', // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net
17081885 ),
17091886 '*.canalblog.com', // 195.137.184.103 by dns-admin at pinacolaweb.com
1887+ '*.cdnhost.cn', // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html
17101888 '*.chueca.com',
17111889 'city-forum.com',
1890+ '*.clicdev.com',
1891+ '*.craigslist.org',
17121892 'concepts-mall.com',
17131893 '*.conforums.com', // by Roger Sutton (rogersutton at cox.net)
17141894 'connectedy.com', // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com
17151895 'counterhit.de',
1896+ '*.createblog.com',
17161897 '*.createforum.net',
17171898 '*.creatuforo.com', // by Desafio Internet S.L. (david at soluwol.com)
17181899 '*.createmybb.com',
@@ -1722,9 +1903,12 @@ $blocklist['B-1'] = array(
17221903 ),
17231904 'dakrats.net',
17241905 '*.dcswtech.com',
1906+ 'del.icio.us',
17251907 '*.devil.it',
17261908 '*.diaryland.com',
1909+ 'diigo.com', ///user/
17271910 'digg.com',
1911+ 'digstock.com',
17281912 'domains at galaxywave.net' => array(
17291913 'blogstation.net',
17301914 '.phpbb-host.com',
@@ -1736,11 +1920,13 @@ $blocklist['B-1'] = array(
17361920 '*.ekiwi.de',
17371921 '*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
17381922 '.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
1923+ '*.easyjournal.com',
17391924 '*.ebloggy.com',
17401925 'enunblog.com',
17411926 '*.epinoy.com',
17421927 '*.ez-sites.ws',
17431928 '*.ezbbforum.com', // 72.52.134.135 by blogmaster2003 at gmail.com
1929+ '*.fastsito.com', // 208.77.96.9 by info at top100italiana.com
17441930 '*.fathippohosting.com', // 208.101.3.192
17451931 'FC2.com' => array(
17461932 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
@@ -2402,11 +2588,13 @@ $blocklist['B-1'] = array(
24022588 ),
24032589 '*.forumcommunity.net',
24042590 '*.forumer.com',
2405- '*.forumfree.net',
2591+ 'members.forumfree.com', // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com
2592+ '*.forumfree.net', // 74.53.57.70(*.static.theplanet.com)
24062593 'forumhosting.org',
24072594 '*.forums.com',
24082595 'forumbolt.com',
24092596 'phpbb.forumgratis.com',
2597+ 'forumlari.net',
24102598 '*.forumlivre.com',
24112599 'forumnow.com.br',
24122600 '*.forumppl.com',
@@ -2418,21 +2606,22 @@ $blocklist['B-1'] = array(
24182606 '*.fory.pl',
24192607 'fotolog.com',
24202608 '*.fr33webhost.com',
2609+ '*.free20.com', // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com
24212610 '*.free-25.de',
24222611 '*.free-bb.com',
24232612 'Free-Blog-Hosting.com' => array(
2424- 'free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2425- 'cheap-web-hosting-411.com', // by Robert Vigil, ns *.thisismyserver.net
2426- 'blog-tonite.com', // ns *.phpwebhosting.com
2427- 'blogznow.com', // ns *.phpwebhosting.com
2428- 'myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com
2429- 'blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com
2613+ '*.free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com
2614+ '*.blog-tonite.com', // ns *.phpwebhosting.com
2615+ '*.blogznow.com', // ns *.phpwebhosting.com
2616+ '*.myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com
2617+ '*.blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com
24302618 ),
24312619 '*.free-forums.org', // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro)
24322620 'free-guestbook.net',
24332621 '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com)
24342622 'freebb.nl',
24352623 '*.freeclans.de',
2624+ '*.freehostplace.com', // by contact at keepclear.co.uk
24362625 '*.freelinuxhost.com', // by 100webspace.com
24372626 '*.nofeehost.com',
24382627 '*.freehyperspace.com',
@@ -2453,6 +2642,7 @@ $blocklist['B-1'] = array(
24532642 'freewebsfarms.com',
24542643 ),
24552644 '*.freewebspace.net.au',
2645+ 'freewebtown.com',
24562646 '*.freemyforum.com', // by messahost at gmail.com
24572647 'freepowerboards.com',
24582648 '*.freepowerboards.com',
@@ -2467,6 +2657,7 @@ $blocklist['B-1'] = array(
24672657 '*.30mb.com', // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
24682658 '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
24692659 ),
2660+ '*.gexxe.com',
24702661 '*.goodboard.de',
24712662 'gossiping.net',
24722663 '*.greatnuke.com',
@@ -2475,7 +2666,13 @@ $blocklist['B-1'] = array(
24752666 'Google.com' => array(
24762667 '*.blogspot.com',
24772668 'docs.google.com',
2669+ '*.googlegroups.com', ///web/
2670+ '*.googlepages.com',
24782671 'groups-beta.google.com',
2672+ 'groups.google.*', ///group/ Seems widely distributed
2673+ //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
2674+ //'groups.google.de', 'groups.google.es', 'groups.google.fr',
2675+ //'groups.google.it', ...
24792676 ),
24802677 'guestbook.at',
24812678 'club.giovani.it',
@@ -2556,16 +2753,27 @@ $blocklist['B-1'] = array(
25562753 '*.joolo.com',
25572754 '*.journalscape.com',
25582755 '*.justfree.com',
2559- '*.blog.kataweb.it',
2756+ 'kataweb.it' => array( // kata-redir.kataweb.it
2757+ '*.blog.kataweb.it',
2758+ '*.repubblica.it',
2759+ ),
25602760 '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com
25612761 '*.kokoom.com',
25622762 'koolpages.com',
2763+ '*.kostenlose-foren.org',
25632764 '*.ksiegagosci.info',
2765+ 'LaCoctelera.com' => array(
2766+ 'lacoctelera.com', // by alberto at the-cocktail.com
2767+ 'espacioblog.com', // by dominios at ferca.com
2768+ ),
25642769 'Lide.cz' => array(
25652770 '*.lide.cz',
25662771 '*.sblog.cz',
25672772 ),
2773+ '*.lioru.com',
25682774 'limmon.net',
2775+ 'linkinn.com',
2776+ 'lipstick.com', // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com
25692777 'listible.com', ///list/
25702778 'Livedoor.com' => array(
25712779 'blog.livedoor.jp',
@@ -2605,6 +2813,7 @@ $blocklist['B-1'] = array(
26052813 ),
26062814 '*.mastertopforum.com',
26072815 'mbga.jp', // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp)
2816+ 'meneame.net',
26082817 '*.memebot.com',
26092818 '*.messageboard.nl',
26102819 'mokono GmbH' => array(
@@ -2623,17 +2832,21 @@ $blocklist['B-1'] = array(
26232832 '*.weblogs.hu',
26242833 ),
26252834 'mojklc.com',
2835+ '*.mundoforo.com',
2836+ '*.money-host.com',
26262837 'MonForum.com' => array(
26272838 '*.monforum.com',
26282839 '*.monforum.fr',
26292840 ),
26302841 '*.multiforum.nl', // by Ron Warris (info at phpbbhost.nl)
2631- '*.my10gb.com',
2842+ '*.my3gb.com', // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de)
2843+ '*.my10gb.com', // by craig_gatenby at hotmail.com
26322844 'myblog.is',
26332845 'myblogma.com',
26342846 '*.myblogvoice.com',
26352847 'myblogwiki.com',
26362848 '*.myforum.ro',
2849+ '*.myfreewebhost.org', // 216.32.73.163(*.static.reverse.ltdomains.com)
26372850 '*.myfreewebs.net',
26382851 '*.mysite.com',
26392852 '*.myxhost.com',
@@ -2647,6 +2860,9 @@ $blocklist['B-1'] = array(
26472860 'users.newblog.com',
26482861 'neweconomics.info',
26492862 '*.newsit.es', // 75.126.252.108
2863+ '*.nm.ru',
2864+ '*.nmj.pl',
2865+ '*.nocatch.net', // 74.86.93.190(layeredpanel.com => ...)
26502866 'Northsky.com' => array(
26512867 // by hostmaster at northsky.com
26522868 // northsky.com redirects to communityarchitect.com
@@ -2688,8 +2904,8 @@ $blocklist['B-1'] = array(
26882904 '*.00space.com',
26892905 '*.00sports.com',
26902906 ),
2691- '*.nm.ru',
26922907 '*.obm.cn', // by xiaobak at yahoo.com.cn
2908+ '*.ocom.pl', // 67.15.104.83(*.ev1servers.net)
26932909 'onlyfree.de',
26942910 '*.ooblez.com', // by John Nolande (ooblez at hotmail.com)
26952911 '*.ohost.de',
@@ -2703,6 +2919,7 @@ $blocklist['B-1'] = array(
27032919 '.skysquad.net', // by Dorota Brzezinska (info at nazwa.pl)
27042920 ),
27052921 'oyax.com', ///user_links.php
2922+ '*.p2a.pl',
27062923 '*.parlaris.com',
27072924 '*.pathfinder.gr',
27082925 '*.persianblog.com',
@@ -2720,11 +2937,13 @@ $blocklist['B-1'] = array(
27202937 '*.phpbbx.de',
27212938 '*.pochta.ru',
27222939 '*.portbb.com',
2940+ '*.portcms.com',
27232941 'powerwebmaster.de',
27242942 'pro-board.com', // by SEM Optimization Services Ltd (2485 at coverage1.com)
27252943 'ProBoards' => '#^.*\.proboards[0-9]*\.com$#',
27262944 '*.probook.de',
27272945 '*.prohosting.com', // by Nick Wood (admin at dns-solutions.net)
2946+ '*.pun.pl',
27282947 'putfile.com',
27292948 '*.quickfreehost.com',
27302949 'quizilla.com',
@@ -2761,12 +2980,14 @@ $blocklist['B-1'] = array(
27612980 '.aim.to',
27622981 '.djmp.jp',
27632982 '.nihongourl.nu',
2983+ '.url.sh', // Says SmarTrans
27642984 '.urljp.com',
27652985 '.www1.to',
27662986 '.www2.to',
27672987 '.www3.to',
27682988 ),
2769- '*.spazioforum.it',
2989+ '*.spazioblog.it', // by Ivan Maria Spadacenta
2990+ '*.spazioforum.it', // by Ivan Maria Spadacenta
27702991 'members.spboards.com',
27712992 'forums.speedguide.net',
27722993 'Sphosting.com' => array( // by admin at sphosting.com
@@ -2778,6 +2999,7 @@ $blocklist['B-1'] = array(
27782999 ),
27793000 '*.spicyblogger.com',
27803001 '*.spotbb.com',
3002+ '.squadz.net', // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com
27813003 '*.squarespace.com',
27823004 'stickypond.com',
27833005 'stormloader.com',
@@ -2789,6 +3011,7 @@ $blocklist['B-1'] = array(
27893011 '*.talkthis.com',
27903012 'tbns.net',
27913013 'telasipforums.com',
3014+ 'theforumhub.com',
27923015 'thestudentunderground.org',
27933016 'think.ubc.ca',
27943017 '*.thumblogger.com',
@@ -2817,6 +3040,7 @@ $blocklist['B-1'] = array(
28173040 '*.ws.co.ua',
28183041 ),
28193042 '*.unforo.net',
3043+ 'veoh.com',
28203044 '*.vdforum.ru',
28213045 '*.vtost.com',
28223046 '*.vidiac.com',
@@ -2947,6 +3171,7 @@ $blocklist['B-1'] = array(
29473171 '.webng.com', // www.*, www3.*
29483172 '*.webnow.biz', // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc.
29493173 'websitetoolbox.com',
3174+ '*.webtropia.com',
29503175 'Welnet.de' => array(
29513176 'welnet.de',
29523177 'welnet4u.de',
@@ -2956,12 +3181,13 @@ $blocklist['B-1'] = array(
29563181 '*.wizhoo.com', // by Comp U Door (sales at comp-u-door.com)
29573182 '*.wmjblogs.ru',
29583183 '*.wordpress.com',
2959- '.wsboards.com', // by Chris Breen (Cbween at gmail.com)
3184+ //'.wsboards.com', // Noticed this site had been removed due to spam
29603185 'xeboards.com', // by Brian Shea (bshea at xeservers.com)
29613186 '*.xforum.se',
29623187 'xfreeforum.com',
29633188 '*.xhost.ro', // by domain-admin at listserv.rnc.ro
29643189 '*.xoomwebs.com',
3190+ '.xterm.org',
29653191 '.freeblogs.xp.tl',
29663192 '*.xphost.org', // by alex alex (alrusnac at hotmail.com)
29673193 '*.ya.com', // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
@@ -2980,6 +3206,17 @@ $blocklist['B-1'] = array(
29803206 '*.your-websites.net',
29813207 '*.web-space.ws',
29823208 ),
3209+
3210+
3211+ '*.heliohost.org', // by ashoat at gmail.com
3212+ 'X10Hosting.com' => array(
3213+ // by support at clockworkcomputers.com
3214+ '*.x10hosting.com',
3215+ '*.elementfx.com',
3216+ '*.exofire.net',
3217+ '*.pcriot.com',
3218+ ),
3219+ '.zendurl.com', // by ajcar1992 at gmail.com
29833220 );
29843221
29853222 // --------------------------------------------------
@@ -2999,16 +3236,25 @@ $blocklist['B-2'] = array(
29993236 'alwanforthearts.org',
30003237 '*.anchor.net.au',
30013238 'anewme.org',
3239+ 'arcrockett.com', ///golf/excel/
3240+ 'arisedesign.net', //Portfolio/d981/
30023241 'internetyfamilia.asturiastelecentros.com',
3242+ 'ballblair.com', ///images/thumbs/
30033243 'Ball State University' => array('web.bsu.edu'),
30043244 'btofaq.net', ///v3/forum
30053245 'blepharospasm.org',
3246+ 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
30063247 'nyweb.bowlnfun.dk',
30073248 '*.buzznet.com',
3249+ 'Carroll College' => array(
3250+ 'carroll.edu', ///boards/
3251+ ),
30083252 '*.canberra.net.au',
30093253 'castus.com',
30103254 'Case Western Reserve University' => array('case.edu'),
30113255 'ceval.de',
3256+ 'chaco.gov.ar',
3257+ 'chasingrainbowsaustralia.com', ///geometry/
30123258 'codespeak.net',
30133259 'Colorado School of Mines' => array('ticc.mines.edu'),
30143260 '*.colourware.co.uk',
@@ -3027,14 +3273,17 @@ $blocklist['B-2'] = array(
30273273 'delayedreaction.org',
30283274 'deproduction.org',
30293275 'dc503.org',
3276+ 'dialadeck.com', ///images/
30303277 'dre-centro.pt',
30313278 'Duke University' => array('devel.linux.duke.edu'),
30323279 '*.esen.edu.sv',
30333280 'forums.drumcore.com',
30343281 'dundeeunited.org',
30353282 'energyglass.com.ua',
3283+ 'equitas.com.au', ///images/mim3/, no index.html
30363284 'exclusivehotels.com',
30373285 'info.ems-rfid.com',
3286+ 'fairyfunkyard.com', ///images_files/files/
30383287 'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com)
30393288 'fbwloc.com',
30403289 '.fhmcsa.org.au',
@@ -3057,11 +3306,13 @@ $blocklist['B-2'] = array(
30573306 'Harvard Law School' => array('blogs.law.harvard.edu'),
30583307 'helpiammoving.com',
30593308 'homepage-dienste.com',
3309+ '*.hostistry.com', // by support at hostistry.com, hostistry at gmail.com
30603310 'Howard University' => array('networks.howard.edu'),
30613311 'hullandhull.com',
30623312 'Huntington University' => array('huntington.edu'),
30633313 'huskerink.com',
30643314 '.hyba.info',
3315+ 'ideas4you.com', ///photos/
30653316 'inda.org',
30663317 '*.indymedia.org', // by abdecom at riseup.net
30673318 'instantbulletin.com',
@@ -3074,6 +3325,8 @@ $blocklist['B-2'] = array(
30743325 'skkustp.itgozone.com', // hidden JavaScript
30753326 'jazz2online.com',
30763327 '.jloo.org',
3328+ '.juegohq.com', // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble
3329+ 'kjon.com',
30773330 'Kazan State University' => array(
30783331 'dir.kzn.ru',
30793332 'sys.kcn.ru',
@@ -3085,6 +3338,7 @@ $blocklist['B-2'] = array(
30853338 'Loyola Marymount University' => array('lmu.edu'),
30863339 'forum.lixium.fr',
30873340 'macfaq.net',
3341+ 'macvirus.org', ///board/
30883342 'me4x4.com',
30893343 'microbial-ecology.net',
30903344 'minsterscouts.org',
@@ -3104,13 +3358,22 @@ $blocklist['B-2'] = array(
31043358 'hlc.ncat.edu',
31053359 ),
31063360 'placetobe.org',
3361+ 'Naropa University' => array(
3362+ 'naropa.edu', ///forum/
3363+ ),
31073364 'users.nethit.pl',
31083365 'nightclubvip.net',
31093366 'njbodybuilding.com',
31103367 'nlen.org',
3368+ 'North Carolina School of Science and Mathematics' => array(
3369+ 'neverland.ncssm.edu', ///include/web/forum/
3370+ 'grid.ncssm.edu', ///ncssm_grid/
3371+ ),
31113372 'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'),
3373+ 'ofcourseimright.com', ///cgi-bin/roundup/calsify/
31123374 'offtextbooks.com',
31133375 'ofimatika.com',
3376+ 'olympiafoto.com', ///images/
31143377 'omakase-net', // iframe
31153378 'omikudzi.ru',
31163379 'openchemist.net',
@@ -3120,11 +3383,13 @@ $blocklist['B-2'] = array(
31203383 'paullima.com',
31213384 'perl.org.br',
31223385 'pfff.co.uk',
3386+ 'pimpo.com', ///_old_site/
31233387 'pix4online.co.uk',
31243388 'plone.dk',
31253389 'preform.dk',
31263390 'privatforum.de',
31273391 'publicityhound.net',
3392+ 'puppylinux.net', ///news/content/counter/pages/
31283393 'qea.com',
31293394 'rbkdesign.com',
31303395 'rehoboth.com',
@@ -3132,10 +3397,12 @@ $blocklist['B-2'] = array(
31323397 'ryanclark.org',
31333398 '*.reallifelog.com',
31343399 'rkphunt.com',
3400+ 'rso-csp.org', ///bulletins/
31353401 '.saasmar.ru', // Jacked. iframe to banep.info on root, etc
31363402 'sapphireblue.com',
31373403 'saskchamber.com',
31383404 'savevoorhees.org',
3405+ 'sdhmalenovice.cz', //galerie/
31393406 'selikoff.net',
31403407 'serbisyopilipino.org',
31413408 'setbb.com',
@@ -3144,6 +3411,7 @@ $blocklist['B-2'] = array(
31443411 'Saint Martin\'s University' => array('homepages.stmartin.edu'),
31453412 '.softpress.com',
31463413 'southbound-inc.com', // There is a <html>.gif (img to it168.com)
3414+ 'fora.taniemilitaria.pl', ///phpbb
31473415 'tehudar.ru',
31483416 'Tennessee Tech University' => array('manila.tntech.edu'),
31493417 'thebluebird.ws',
@@ -3159,6 +3427,9 @@ $blocklist['B-2'] = array(
31593427 'tuathadedannan.org',
31603428 'txgotg.com',
31613429 'tzaneen.co.za',
3430+ 'ugeavisen.com', ///style/
3431+ 'forums.ugo.com',
3432+ 'whole.cs.unibo.it',
31623433 'The University of North Dakota' => array(
31633434 'learn.aero.und.edu',
31643435 'ez.asn.und.edu',
@@ -3168,11 +3439,17 @@ $blocklist['B-2'] = array(
31683439 'University of California' => array('classes.design.ucla.edu'),
31693440 'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'),
31703441 'University of Northern Colorado' => array('unco.edu'),
3442+ 'University of North Carolina' => array(
3443+ 'elm.cis.uncw.edu' ///testBoinc/
3444+ ),
31713445 'University of Toronto' => array(
31723446 'environment.utoronto.ca',
31733447 'grail.oise.utoronto.ca',
31743448 'utsc.utoronto.ca',
31753449 ),
3450+ 'University of Wisconsin' => array(
3451+ 'einstein.phys.uwm.edu'
3452+ ),
31763453 'urgentclick.com',
31773454 'vacant.org.uk',
31783455 'Villa Julie College' => array('www4.vjc.edu'),
@@ -3189,7 +3466,7 @@ $blocklist['B-2'] = array(
31893466 '.xthost.info', // by Michael Renz (dhost at mykuhl.de)
31903467 'Yahoo.com' => array(
31913468 'blog.360.yahoo.com',
3192- '*.groups.yahoo.com'
3469+ '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ...
31933470 ),
31943471 'yasushi.site.ne.jp', // One of mixedmedia.net'
31953472 'youthpeer.org',
@@ -3285,16 +3562,24 @@ $blocklist['C'] = array(
32853562 '.camdoors.info', // by Sergey
32863563 '.chatdoors.info', // by Sergey
32873564
3288- '.lebedi.info', // by Pronin
3289- '.loshad.info', // by Pronin
3290- '.porosenok.info', // by Pronin
3291- '.indyushonok.info', // by Pronin
3292- '.kotyonok.info', // by Pronin
3293- '.kozlyonok.info', // by Pronin
3294- '.magnoliya.info', // by Pronin
3295- '.svinka.info', // by Pronin
3296- '.svinya.info', // by Pronin
3297- '.zherebyonok.info', // 89.149.206.225 by Pronin
3565+ // 89.149.206.225 by Pronin
3566+ '.dorozhka.info',
3567+ '.kolonochka.info',
3568+ '.knizhechka.info',
3569+ '.krantik.info',
3570+ '.lebedi.info',
3571+ '.loshad.info',
3572+ '.pechenka.info',
3573+ '.porosenok.info',
3574+ '.indyushonok.info',
3575+ '.kotyonok.info',
3576+ '.kozlyonok.info',
3577+ '.magnoliya.info',
3578+ '.svinka.info',
3579+ '.svinya.info',
3580+ '.televizorchik.info',
3581+ '.tumbochka.info',
3582+ '.zherebyonok.info',
32983583
32993584 '.medvezhonok.org', // 89.149.206.225 "BucksoGen 1.2b"
33003585
@@ -3730,7 +4015,12 @@ $blocklist['C'] = array(
37304015 'aakin at yandex.ru' => array(
37314016 // 89.149.206.225(*.internetserviceteam.com) by Baer
37324017 '.entirestar.com',
4018+ '.joppperl.info',
4019+ '.onlinedrugsdirect.com',
4020+ '.pilkazen.info',
37334021 '.superbuycheap.com',
4022+ '.supersmartdrugs.com',
4023+ '.thecheappillspharmacy.com',
37344024 '.topdircet.com',
37354025 ),
37364026 'newblog9 at gmail.com' => array( // by jiuhatu kou
@@ -4823,6 +5113,7 @@ $blocklist['C'] = array(
48235113 '.fateback.com',
48245114 '.undonet.com',
48255115 '.yoll.net',
5116+ '.sinfree.net', // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp
48265117
48275118 // 50webs.com // 64.72.112.10
48285119 // dns2.50webs.com // 64.72.112.11
@@ -5123,6 +5414,8 @@ $blocklist['C'] = array(
51235414 '.wifuj.com',
51245415 '.xijyt.com',
51255416 '.zuqyn.com',
5417+
5418+ '.mosugy.com',
51265419 ),
51275420 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru
51285421 '.hitsearching.info',
@@ -5137,6 +5430,8 @@ $blocklist['C'] = array(
51375430
51385431 // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net)
51395432 '.ligiwa.com',
5433+
5434+ '.mubeho.com',
51405435 ),
51415436 'ice--man at mail.ru related' => array(
51425437 // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
@@ -5180,10 +5475,21 @@ $blocklist['C'] = array(
51805475 '.bovorup.cn',
51815476 '.litotar.cn',
51825477 '.nihydec.cn',
5183-
5478+
51845479 // 66.232.112.175 by bing-32 at ftunez.org
51855480 '.lasyxy.cn',
51865481
5482+ // by bing-65 at ftunez.org
5483+ '.coxyvuk.cn', // 66.232.120.111(non-existent)
5484+ '.comygyx.cn', // 66.232.120.112(non-existent)
5485+ '.gyqalec.cn', // 66.232.120.114(non-existent)
5486+ '.paluwir.cn', // 66.232.120.114(non-existent)
5487+ '.qunonid.cn', // 66.232.120.114(*snip*)
5488+ '.qupyvin.cn', // 66.232.120.115(non-existent)
5489+ '.ririjyz.cn', // 66.232.120.111(*snip*)
5490+ '.saralar.cn', // 66.232.120.113(non-existent)
5491+ '.vawomyl.cn', // 66.232.120.115(non-existent)
5492+
51875493 // 69.46.23.48 by clarkson-34 at ftunez.org
51885494 '.bumora.cn',
51895495 '.byxite.cn',
@@ -5239,6 +5545,10 @@ $blocklist['C'] = array(
52395545 '.xizity.cn',
52405546 '.xuxusa.cn',
52415547
5548+ // by entretov-28 at ftunez.org
5549+ '.hotejen.cn', // 66.232.120.111(*snip*)
5550+ '.kyhadat.cn', // 66.232.120.115(*snip*)
5551+
52425552 // 69.46.23.48 by entretov-32 at ftunez.org
52435553 '.cihuji.cn',
52445554 '.deqyve.cn',
@@ -5263,6 +5573,11 @@ $blocklist['C'] = array(
52635573 '.dozoda.cn',
52645574 '.nemipu.cn',
52655575
5576+ // entretov-84 at ftunez.org
5577+ '.muruvun.cn', // 66.232.120.114(*snip*)
5578+ '.favulol.cn', // 66.232.120.115(*snip*)
5579+ '.tixuqyx.cn', // 66.232.120.111(*snip*)
5580+
52665581 // 69.46.23.48 by jeremy-57 at ftunez.org
52675582 '.duzele.cn',
52685583 '.figede.cn',
@@ -5283,6 +5598,13 @@ $blocklist['C'] = array(
52835598 '.wotyqo.cn',
52845599 '.xudoli.cn',
52855600
5601+ // by entretov-28 at ftunez.org
5602+ '.xevavuv.cn', // 66.232.120.113(*snip*)
5603+
5604+ // by entretov-37 at ftunez.org
5605+ '.sadyroz.cn', // 66.232.120.114(*snip*)
5606+ '.zedutox.cn', // 66.232.120.112(non-existent)
5607+
52865608 // 66.232.112.175 by entretov-86 at ftunez.org
52875609 '.faweji.cn',
52885610 '.jypaci.cn',
@@ -5316,12 +5638,27 @@ $blocklist['C'] = array(
53165638 '.qiwysu.cn',
53175639 '.tutysy.cn',
53185640
5641+ // by oker-74 at ftunez.org
5642+ '.navufol.cn',
5643+
5644+ // by oker-97 at ftunez.org
5645+ '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com)
5646+ '.mesyvuc.cn', // 66.232.120.111(*snip*)
5647+ '.nyjyzup.cn', // 66.232.127.126(*snip*)
5648+ '.qagibit.cn', // 66.232.120.114(*snip*)
5649+ '.rovazaw.cn', // 66.232.120.112(*snip*)
5650+ '.tozojug.cn', // 66.232.120.111(*snip*)
5651+ '.xywataw.cn', // 66.232.120.112(*snip*)
5652+
5653+ // by polet-20 at ftunez.org
5654+ '.mopoxon.cn', // 66.232.127.126(*snip*)
5655+
53195656 // 66.232.112.175 by sabrosky-49 at ftunez.org
53205657 '.gywiqe.cn',
53215658 '.jotapo.cn',
53225659 '.jywixa.cn',
53235660
5324- // '69.46.23.48 by sabrosky-60 at ftunez.org
5661+ // 69.46.23.48 by sabrosky-60 at ftunez.org
53255662 '.bawegap.cn',
53265663 '.buremyl.cn',
53275664 '.cilybut.cn',
@@ -5370,6 +5707,50 @@ $blocklist['C'] = array(
53705707 '.jytame.cn',
53715708 '.wygete.cn',
53725709 ),
5710+ '74.50.97.*' => array(
5711+ '.kaqeje.com', // 74.50.97.51(non-existent) by abuse-here at inbox.ru
5712+ '.cumimo.com', // 74.50.97.51(non-existent) by olga at ike.com
5713+ '.kaxavo.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
5714+ '.hoheru.com', // 74.50.97.52(non-existent) by gunter at ftunez.org
5715+ '.tyqoti.com', // 74.50.97.52(non-existent) by anna at hotmail.com
5716+ '.fupopu.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5717+ '.poxupo.com', // 74.50.97.53(non-existent) by inna at gmail.com
5718+ '.kuluvo.com', // 74.50.97.53(non-existent) by gunter at ftunez.org
5719+ '.wugoba.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru
5720+ '.civuhe.com', // 74.50.97.54(non-existent) by olga at ike.com
5721+ '.zasuly.com', // 74.50.97.54(non-existent) by olga at ike.com
5722+ '.liwowu.com', // 74.50.97.54(non-existent) by abuse-here at inbox.ru
5723+ '.vobime.com', // 74.50.97.55(non-existent) by inna at gmail.com
5724+ '.nyrive.com', // 74.50.97.55(non-existent) by anna at hotmail.com
5725+ '.hehepu.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5726+ '.bynute.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru
5727+
5728+ '.sevimy.com', // 66.232.124.12(time-out) by inna at gmail.com
5729+ '.gapubo.com', // 66.232.124.12(time-out) by gunter at ftunez.org
5730+ '.vejoku.com', // 66.232.124.12(time-out) by olga at ike.com
5731+ '.qysahu.com', // 66.232.124.12(time-out) by abuse-here at inbox.ru
5732+ '.hidolu.com', // 66.232.124.13(time-out) by inna at gmail.com
5733+ '.tetace.com', // 66.232.124.13(time-out) by gunter at ftunez.org
5734+ '.vuxilu.com', // 66.232.124.13(time-out) by olga at ike.com
5735+ '.teboca.com', // 66.232.124.13(time-out) by olga at ike.com
5736+ '.dizive.com', // 66.232.124.14(time-out) by olga at ike.com
5737+ '.peduxe.com', // 66.232.124.14(time-out) by gunter at ftunez.org
5738+ '.sybyna.com', // 66.232.124.14(time-out) by gunter at ftunez.org
5739+ '.bepofe.com', // 66.232.124.15(time-out) by anna at hotmail.com
5740+ '.kuloja.com', // 66.232.124.15(time-out) by gunter at ftunez.org
5741+ '.tetadu.com', // 66.232.124.15(time-out) by inna at gmail.com
5742+ '.qilato.com', // 66.232.124.15(time-out) by inna at gmail.com
5743+ '.lobimi.com', // 66.232.124.16(time-out) by olga at ike.com
5744+ '.tazuwe.com', // 66.232.124.16(time-out) by olga at ike.com
5745+ '.pihufo.com', // 66.232.124.16(time-out) by olga at ike.com
5746+ '.decewa.com', // 66.232.124.16(time-out) by gunter at ftunez.org
5747+
5748+ '.lynymu.com', // 206.51.226.194(time-out) by abuse-here at inbox.ru
5749+ '.saciqo.com', // 206.51.226.194(time-out) by olga at ike.com
5750+ '.zalajy.com', // 206.51.226.194(time-out) by inna at gmail.com
5751+ '.hisimy.com', // 206.51.226.194(time-out) by inna at gmail.com
5752+ '.qysowe.com', // 206.51.226.194(time-out) by olga at ike.com
5753+ ),
53735754 'nijeoi at hotmai.com' => array(
53745755 // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
53755756 '.bowij.com',
@@ -5407,6 +5788,8 @@ $blocklist['C'] = array(
54075788
54085789 // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202)
54095790 '.pufeqa.com',
5791+
5792+ '.xehymi.com',
54105793 ),
54115794 'niichka at hotmail.com' => array(
54125795 // 66.232.113.44, the same approach and IP of clickx at bk.ru
@@ -5439,6 +5822,26 @@ $blocklist['C'] = array(
54395822 '.tedstate.info', // "Free Web Hosting"
54405823 '.giftsee.com',
54415824 ),
5825+ 'admin at pertol.info' => array(
5826+ // 81.0.195.189 "Free Web Hosting"
5827+ '.laparka.cn',
5828+ '.mirlos.cn',
5829+ '.oldmoms.cn',
5830+
5831+ // 217.11.233.64(timed-out)
5832+ '.ejmpep.cn', // by admin at pertol.info
5833+ '.ytere.cn', // by admin at x2t.com
5834+
5835+ '.pertol.info', // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com
5836+ '.pornography-world.com', // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info
5837+
5838+ // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
5839+ '.new-greece-travel.com',
5840+ '.peraonline.info',
5841+
5842+ '.barkman.cn',
5843+ ),
5844+
54425845 'aofa at vip.163.com' => array(
54435846 '.bdjyw.net', // by gaoyun, infected images, iframe to 5944.net's VBScript
54445847 '.5944.net',
@@ -5654,7 +6057,11 @@ $blocklist['C'] = array(
56546057 '.wfe7nv.org',
56556058 '.xyr99yx.org',
56566059 ),
5657- '203.171.230.39' => array( // registrar bizcn.com, iframe + cursor
6060+ '203.171.230.39' => array(
6061+ // by 51shell at 163.com
6062+ '.amatou-fc2.com',
6063+
6064+ // registrar bizcn.com, iframe + cursor
56586065 '.playonlinenc.com',
56596066 '.playboss-jp.com',
56606067 ),
@@ -5685,6 +6092,7 @@ $blocklist['C'] = array(
56856092 '.govnosaklo.info',
56866093 '.muflon.info',
56876094 '.termitnik.info',
6095+ '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..)
56886096 ),
56896097 '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru)
56906098 '.acronis-true-image.info',
@@ -5787,10 +6195,24 @@ $blocklist['C'] = array(
57876195 '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript
57886196 '.ringtonecooler.com', // 217.11.233.34
57896197 ),
5790- 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn)
5791- '.okwit.com', // 220.166.64.44
5792- '.sakerver.com', // 220.166.64.194
5793- '.motewiki.net', // 220.166.64.194
6198+ 'dfym at dfym.cn' => array(
6199+ // ANI, JavaScript, iframe
6200+
6201+ // 220.166.64.44 by chen jinian (dfym at dfym.cn)
6202+ '.okwit.com',
6203+ '.sakerver.com',
6204+ '.motewiki.net',
6205+
6206+ '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
6207+
6208+ '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
6209+
6210+ // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
6211+ '.bbtv-chat.com',
6212+ '.ketubatle.com',
6213+ '.playonlanei.com',
6214+ '.rmtfcne.com',
6215+
57946216 ),
57956217 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
57966218 '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net)
@@ -5844,8 +6266,29 @@ $blocklist['C'] = array(
58446266 ),
58456267 'acua at mail.ru' => array(
58466268
6269+ '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden
6270+
6271+ // by adventurer at allmyns.info
6272+ '.zgyfubsvi.cn', // 84.16.251.218(*.internetserviceteam.com)
6273+
6274+ // by webmaster at allmyns.info
6275+ '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS)
6276+ '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
6277+ '.lbtuo.cn', // 84.16.255.254(*.internetserviceteam.com)
6278+ '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net)
6279+ '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent)
6280+ '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
6281+ '.riumh.cn', // 84.16.226.28(*snip*)
6282+ '.zbtym.cn', // 84.16.251.219(*.internetserviceteam.com)
6283+ '.zjcgx.cn', // 217.20.112.102(*.internetserviceteam.com)
6284+ '.zxvlr.cn', // 84.16.255.253(*.internetserviceteam.com)
6285+
58476286 // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found'
58486287 '.dns4babka.info', // by acua at mail.ru
6288+
6289+ // by golubcov at dns4babka.info
6290+ '.toiulw.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
6291+
58496292 // by webmaster at dns4babka.info
58506293 '.credh.cn',
58516294 '.fucfv.cn',
@@ -5856,6 +6299,13 @@ $blocklist['C'] = array(
58566299
58576300 // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found'
58586301 '.dedka2ns.info', // by acua at mail.ru
6302+
6303+ // by chasik at dedka2ns.info
6304+ '.vlqnoj.cn', // 84.16.251.220(*.internetserviceteam.com)
6305+
6306+ // by rochel at dedka2ns.info
6307+ '.fudhxjjqh.cn',
6308+
58596309 // by webmaster at dedka2ns.info
58606310 '.ascpo.cn',
58616311 '.jgycr.cn',
@@ -5866,9 +6316,100 @@ $blocklist['C'] = array(
58666316 '.ukncd.cn',
58676317 '.zijgb.cn',
58686318
5869- // 84.16.255.253(*.internetserviceteam.com), / says 'noy found'
6319+ // 84.16.255.253(*snip*), / says 'noy found'
58706320 '.dns4dedka.info', // by acua at mail.ru
5871- // by webmaster at dns4dedka.info
6321+
6322+ // by aleon at dns4dedka.info
6323+ '.afjjvumqa.cn', // 84.16.249.240(*snip*)
6324+
6325+ // by dig at dns4dedka.info
6326+ '.bdnge.cn', // 84.16.226.28(*snip*)
6327+ '.dcdsu.cn', // 217.20.112.102(*snip*)
6328+ '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
6329+ '.frvdv.cn', // 84.16.226.28(*snip*)
6330+ '.heulw.cn', // 84.16.226.217(*snip*)
6331+ '.hissw.cn', // 84.16.249.240(*snip*)
6332+ '.lwqjr.cn', // 84.16.255.253(*snip*)
6333+ '.obwew.cn', // 84.16.251.218(*snip*)
6334+ '.otkiu.cn', // 84.16.255.254(*snip*)
6335+ '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com)
6336+ '.rgjcs.cn', // 84.16.251.219(*snip*)
6337+ '.rjskp.cn', // 84.16.249.241(*snip*)
6338+ '.sokrp.cn', // 84.16.226.217(*snip*)
6339+ '.ubtnp.cn', // 84.16.226.29(*snip*)
6340+ '.vdecc.cn', // 84.16.226.29(*snip*)
6341+ '.vgkkc.cn', // 89.149.196.72(*snip*)
6342+ '.vqsmy.cn', // 84.16.249.239(*snip*)
6343+ '.xcmsp.cn', // 84.16.251.223(freebsd .. what)
6344+ '.xiuky.cn', // 84.16.251.222(*snip*)
6345+ '.xrqcd.cn', // 89.149.196.19(*snip*)
6346+
6347+ // by la at dns4dedka.info
6348+ '.aeyzf.cn', // 84.16.251.218(*snip*)
6349+ '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
6350+ '.bgslu.cn', // 89.149.228.163(*snip*)
6351+ '.dxouw.cn', // 84.16.255.253(*snip*)
6352+ '.ecsbe.cn', // 84.16.251.218(*snip*)
6353+ '.eothy.cn', // 84.16.249.241(*snip*)
6354+ '.epocy.cn', // 84.16.251.220(*snip*)
6355+ '.ewvjw.cn', // 89.149.196.72(*snip*)
6356+ '.faacz.cn', // 84.16.251.222(*snip*)
6357+ '.filun.cn', // 89.149.196.72(*snip*)
6358+ '.fzdpk.cn', // 84.16.249.239(*snip*)
6359+ '.hatyg.cn', // 84.16.251.223(*snip*)
6360+ '.hmtqn.cn', // 84.16.249.240(*snip*)
6361+ '.ibfte.cn', // 89.149.196.19(*snip*)
6362+ '.jcaym.cn', // 84.16.249.240(*snip*)
6363+ '.iqzaw.cn', // 84.16.255.254(*snip*)
6364+ '.jclsf.cn', // 84.16.249.240(*snip*)
6365+ '.jefdh.cn', // 84.16.249.240(*snip*)
6366+ '.kchjh.cn', // 84.16.251.219(*snip*)
6367+ '.krumo.cn', // 84.16.226.217(*snip*)
6368+ '.lbava.cn', // 217.20.112.102(*snip*)
6369+ '.mqrtw.cn', // 84.16.226.29(*snip*)
6370+ '.njpgv.cn', // 84.16.251.219(*snip*)
6371+ '.npovm.cn', // 84.16.226.28(*snip*)
6372+ '.nyobt.cn', // 89.149.196.19(*snip*)
6373+ '.ovxxt.cn', // 84.16.251.223(*snip*)
6374+ '.owhwz.cn', // 89.149.228.163(*snip*)
6375+ '.ozjyi.cn', // 84.16.249.241(*snip*)
6376+ '.pfnzj.cn', // 84.16.226.217(*snip*)
6377+ '.pixvf.cn', // 84.16.255.254(*snip*)
6378+ '.qydph.cn', // 89.149.228.163(*snip*)
6379+ '.rxens.cn', // 89.149.196.72(*snip*)
6380+ '.sojbp.cn', // 84.16.249.239(*snip*)
6381+ '.srths.cn', // 84.16.251.222(*snip*)
6382+ '.tdytc.cn', // 84.16.255.254(*snip*)
6383+ '.unquz.cn', // 84.16.251.223(*snip*)
6384+ '.uwcns.cn', // 89.149.196.19(*snip*)
6385+ '.vcbdm.cn', // 84.16.251.220(*snip*)
6386+ '.wnmat.cn', // 84.16.255.253(*snip*)
6387+ '.wttmr.cn', // 84.16.226.29(*snip*)
6388+ '.xpwib.cn', // 84.16.251.220(*snip*)
6389+ '.yrogt.cn', // 84.16.249.239(*snip*)
6390+
6391+ // by le at dns4dedka.info
6392+ '.goslw.cn', // 84.16.251.220(*snip*)
6393+ '.hqbmh.cn', // 84.16.251.223(*snip*)
6394+ '.iewik.cn', // 84.16.255.254(*snip*)
6395+ '.jnkeh.cn', // 89.149.228.163(*snip*)
6396+ '.pifyp.cn', // 89.149.228.163(*snip*)
6397+ '.nohyl.cn', // 89.149.196.72(*snip*)
6398+ '.nvzvx.cn', // 84.16.255.254(*snip*)
6399+ '.uchoe.cn', // 84.16.249.239(*snip*)
6400+ '.ujoyf.cn', // 84.16.251.218(*snip*)
6401+ '.ulfqh.cn', // 89.149.196.19(*snip*)
6402+ '.vxugv.cn', // 84.16.251.223(*snip*)
6403+ '.dbgti.cn', // 84.16.249.240(*snip*)
6404+ '.oelmv.cn', // 84.16.226.28(*snip*)
6405+ '.qniww.cn', // 84.16.251.218(*snip*)
6406+ '.vtvyq.cn', // 84.16.251.219(*snip*)
6407+ '.zqonm.cn', // 84.16.249.241(*snip*)
6408+
6409+ // by skspb at dns4dedka.info
6410+ '.hxkxkjy.cn', // 84.16.226.28(*snip*)
6411+
6412+ // 84.16.255.253(*snip*) by webmaster at dns4dedka.info
58726413 '.bcpnb.cn',
58736414 '.cfbpr.cn',
58746415 '.dnndb.cn',
@@ -5876,116 +6417,45 @@ $blocklist['C'] = array(
58766417 '.iutps.cn',
58776418 '.ryftj.cn',
58786419 '.vxqcb.cn',
5879- '.zxvlr.cn', // by webmaster at allmyns.info
5880-
5881- // by dig at dns4dedka.info
5882- '.bdnge.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de)
5883- '.dcdsu.cn', // 217.20.112.102(*.internetserviceteam.com)
5884- '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42)
5885- '.frvdv.cn', // 84.16.226.28(*snip*)
5886- '.heulw.cn', // 84.16.226.217(mand.zapto.org -- Non-existent)
5887- '.hissw.cn', // 84.16.249.240(*snip*)
5888- '.lwqjr.cn', // 84.16.255.253(*snip*)
5889- '.obwew.cn', // 84.16.251.218(*.internetserviceteam.com)
5890- '.otkiu.cn', // 84.16.255.254(*.internetserviceteam.com)
5891- '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com)
5892- '.rgjcs.cn', // 84.16.251.219(*.internetserviceteam.com)
5893- '.rjskp.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net)
5894- '.sokrp.cn', // 84.16.226.217(*snip*)
5895- '.ubtnp.cn', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de)
5896- '.vdecc.cn', // 84.16.226.29(*snip*)
5897- '.vgkkc.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200)
5898- '.vqsmy.cn', // 84.16.249.239(*snip*)
5899- '.xcmsp.cn', // 84.16.251.223(freebsd .. what)
5900- '.xiuky.cn', // 84.16.251.222(*snip*)
5901- '.xrqcd.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
5902-
5903- // by la at dns4dedka.info
5904- '.aeyzf.cn', // 84.16.251.218(*snip*)
5905- '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
5906- '.bgslu.cn', // 89.149.228.163(*snip*)
5907- '.dxouw.cn', // 84.16.255.253(*snip*)
5908- '.ecsbe.cn', // 84.16.251.218(*snip*)
5909- '.eothy.cn', // 84.16.249.241(*snip*)
5910- '.epocy.cn', // 84.16.251.220(*.internetserviceteam.com)
5911- '.ewvjw.cn', // 89.149.196.72(*snip*)
5912- '.faacz.cn', // 84.16.251.222(*snip*)
5913- '.filun.cn', // 89.149.196.72(*snip*)
5914- '.fzdpk.cn', // 84.16.249.239(*snip*)
5915- '.hatyg.cn', // 84.16.251.223(*snip*)
5916- '.hmtqn.cn', // 84.16.249.240(*snip*)
5917- '.ibfte.cn', // 89.149.196.19(*snip*)
5918- '.jcaym.cn', // 84.16.249.240(*snip*)
5919- '.iqzaw.cn', // 84.16.255.254(*snip*)
5920- '.jclsf.cn', // 84.16.249.240(*snip*)
5921- '.jefdh.cn', // 84.16.249.240(*snip*)
5922- '.kchjh.cn', // 84.16.251.219(*snip*)
5923- '.krumo.cn', // 84.16.226.217(*snip*)
5924- '.lbava.cn', // 217.20.112.102(*snip*)
5925- '.mqrtw.cn', // 84.16.226.29(*snip*)
5926- '.njpgv.cn', // 84.16.251.219(*snip*)
5927- '.npovm.cn', // 84.16.226.28(*snip*)
5928- '.nyobt.cn', // 89.149.196.19(*snip*)
5929- '.ovxxt.cn', // 84.16.251.223(*snip*)
5930- '.owhwz.cn', // 89.149.228.163(*snip*)
5931- '.ozjyi.cn', // 84.16.249.241(*snip*)
5932- '.pfnzj.cn', // 84.16.226.217(*snip*)
5933- '.pixvf.cn', // 84.16.255.254(*snip*)
5934- '.qydph.cn', // 89.149.228.163(*snip*)
5935- '.rxens.cn', // 89.149.196.72(*snip*)
5936- '.sojbp.cn', // 84.16.249.239(*snip*)
5937- '.srths.cn', // 84.16.251.222(*snip*)
5938- '.tdytc.cn', // 84.16.255.254(*snip*)
5939- '.unquz.cn', // 84.16.251.223(*snip*)
5940- '.uwcns.cn', // 89.149.196.19(*snip*)
5941- '.vcbdm.cn', // 84.16.251.220(*snip*)
5942- '.wnmat.cn', // 84.16.255.253(*snip*)
5943- '.wttmr.cn', // 84.16.226.29(*snip*)
5944- '.xpwib.cn', // 84.16.251.220(*snip*)
5945- '.yrogt.cn', // 84.16.249.239(*snip*)
5946-
5947- // by le at dns4dedka.info
5948- '.goslw.cn', // 84.16.251.220(*snip*)
5949- '.hqbmh.cn', // 84.16.251.223(*snip*)
5950- '.iewik.cn', // 84.16.255.254(*snip*)
5951- '.jnkeh.cn', // 89.149.228.163(*snip*)
5952- '.pifyp.cn', // 89.149.228.163(*snip*)
5953- '.nohyl.cn', // 89.149.196.72(*snip*)
5954- '.nvzvx.cn', // 84.16.255.254(*snip*)
5955- '.uchoe.cn', // 84.16.249.239(*snip*)
5956- '.ujoyf.cn', // 84.16.251.218(*snip*)
5957- '.ulfqh.cn', // 89.149.196.19(*snip*)
5958- '.vxugv.cn', // 84.16.251.223(*snip*)
5959-
5960- '.dbgti.cn', // 84.16.249.240(*snip*)
5961- '.oelmv.cn', // 84.16.226.28(*snip*)
5962- '.qniww.cn', // 84.16.251.218(*snip*)
5963- '.vtvyq.cn', // 84.16.251.219(*snip*)
5964- '.zqonm.cn', // 84.16.249.241(*snip*)
59656420
5966- '.allmyns.info', // 84.16.226.29 by acua at mail.ru, / forbidden
5967- // by webmaster at allmyns.info
5968- '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS)
5969- '.ihpvy.cn', // 84.16.226.28(*snip*)
5970- '.lbtuo.cn', // 84.16.255.254(*snip*)
5971- '.liunc.cn', // 84.16.249.241(*snip*)
5972- '.rcyqr.cn', // 84.16.226.217(*snip*)
5973- '.rekth.cn', // 89.149.196.19(*snip*)
5974- '.riumh.cn', // 84.16.226.28(*snip*)
5975- '.zbtym.cn', // 84.16.251.219(*snip*)
5976- '.zjcgx.cn', // 217.20.112.102(*snip*)
6421+ '.ns2best.info', // 89.149.196.19(*snip*) by acua at mail.ru
6422+ // by apple at ns2best.info
6423+ '.ptiey.cn', // 84.16.252.80(*.internetserviceteam.com)
6424+ // by paulwolf at ns2best.info
6425+ '.ifytzq.cn',
6426+
6427+ '.sedns.info', // 84.16.226.216(*snip*) by acua at mail.ru
6428+ // by pigato at sedns.info
6429+ '.xjvbunksa.cn', // 217.20.112.102(*snip*)
6430+ // by roschem at sedns.info
6431+ '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent)
6432+ // by op at sedns.info
6433+ '.bumfn.cn',
6434+ '.csmlu.cn',
6435+ '.epcwi.cn',
6436+ '.krwzn.cn',
6437+ '.lkvcp.cn',
6438+ '.mvmkh.cn',
6439+ '.nwpeg.cn',
6440+ '.rnqol.cn',
6441+ '.tyuaf.cn',
6442+ '.ucysa.cn',
6443+ '.vhyom.cn',
6444+ '.wtstu.cn',
6445+ '.zslxr.cn',
59776446 ),
59786447 'gilvcta sy jilbertsbram.com' => array(
5979- '.dsfljkeilm1.cn', // 206.53.51.126
5980- '.dsfljkeilm2.cn', // 206.53.51.126
5981- '.dsfljkeilm3.cn', // IP not allocated now
5982- '.dsfljkeilm4.cn', // IP not allocated now
5983- '.dsfljkeilm5.cn', // IP not allocated now
5984- '.dsfljkeilm6.cn', // IP not allocated now
5985- '.dsfljkeilm7.cn', // IP not allocated now
5986- '.dsfljkeilm8.cn', // IP not allocated now
5987- '.dsfljkeilm9.cn', // IP not allocated now
5988- '.dsfljkeilm10.cn', // IP not allocated now
6448+ // 206.53.51.126
6449+ '.dsfljkeilm1.cn',
6450+ '.dsfljkeilm2.cn',
6451+ '.dsfljkeilm3.cn',
6452+ '.dsfljkeilm4.cn',
6453+ '.dsfljkeilm5.cn',
6454+ '.dsfljkeilm6.cn',
6455+ '.dsfljkeilm7.cn',
6456+ '.dsfljkeilm8.cn',
6457+ '.dsfljkeilm9.cn',
6458+ '.dsfljkeilm10.cn',
59896459 ),
59906460 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com)
59916461
@@ -6142,16 +6612,217 @@ $blocklist['C'] = array(
61426612 '.pimpcupid.com', // 89.149.226.111(*.internetserviceteam.com)
61436613 ),
61446614 'hosan by front.ru' => array(
6145- '.online-freesearch.com', // 206.53.51.155
6146- '.carsprojects.com', // 206.53.51.159
6147- '.sport-brands.com', // 206.53.51.167
6148- '.choosefinest.com', // 206.53.51.157
6615+ '.salihome.info', // 206.53.51.155(non-existent)
6616+ '.online-freesearch.com', // 206.53.51.155
6617+ '.choosefinest.com', // 206.53.51.157
6618+ '.carsprojects.com', // 206.53.51.159
6619+ '.sport-brands.com', // 206.53.51.167
61496620 '.online-pharmaceutics.com', // 206.53.51.168
61506621 ),
6622+ '89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent)
6623+ '.canadians-health.com', // by andreyletov at yahoo.com
6624+ '.cialischeap.info',
6625+ '.superrv.info',
6626+ ),
6627+ 'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...)
6628+ '.hatbi.com',
6629+ '.justrty.com',
6630+ '.kol2you.com',
6631+ '.kolplanet.com',
6632+ '.myrty.com',
6633+ '.officialrty.com',
6634+ '.pbaol.com',
6635+ '.planetkol.com',
6636+ ),
6637+ 'Abra1.com' => array(
6638+ // 66.45.254.244(non-existent), 66.45.254.245(non-existent)
6639+ '.abra1.com', // by info at maisontropicale.com
6640+ '.abra4.com', // by websites at caribbeanonlineinternational.com
6641+
6642+ // 209.85.51.238(*.opticaljungle.com -> non-existent)
6643+ '.abra2.com', // by domain at anondns.org
6644+ '.abra3.com', // by domain at anondns.org
6645+ ),
6646+ 'topdomainz at gmail.com' => array(
6647+ // 217.73.201.237 , ns *.parked.ru
6648+ '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info
6649+ '.aboutgooglegroup.info',
6650+ '.aboutgoogleimage.info',
6651+ '.aboutgooglemail.info',
6652+ '.aboutgooglemap.info',
6653+ '.aboutgooglenews.info',
6654+ '.aboutgooglevideo.info',
6655+ '.bestgoogleearth.info',
6656+ '.magicgoogleearth.info',
6657+ '.magicgooglemap.info',
6658+ '.magicgooglevideo.info',
6659+
6660+ // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info
6661+ '.slajzer.info',
6662+ '.tonoscelular.info',
6663+ '.tonosmotorola.info',
6664+ ),
6665+ 'Anderson at extra.by' => array(
6666+ // Encoded JavaScript
6667+
6668+ // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
6669+ '.4cat.info', // by Anderson at extra.by, ns *.9upp.info
6670+ '.6dir.info',
6671+ '.8dir.info',
6672+ '.9dir.info',
6673+ '.2pro.info',
6674+ '.5pro.info', // by Anderson at extra.by, ns *.9upp.info
6675+ '.6pro.info',
6676+ '.7pro.info',
6677+ '.8pro.info',
6678+ '.9pro.info',
6679+ '.5sms.info',
6680+ '.6sms.info',
6681+ '.8sms.info',
6682+ '.9sms.info',
6683+ '.1upp.info',
6684+ '.2upp.info',
6685+ '.3upp.info',
6686+ '.4upp.info',
6687+ '.5upp.info',
6688+ '.6upp.info',
6689+ '.7upp.info',
6690+ '.8upp.info',
6691+ '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
6692+ '.2vip.info', // by Anderson at extra.by
6693+ '.4vip.info',
6694+ '.5vip.info',
6695+ '.6vip.info',
6696+ '.7vip.info',
6697+ '.8vip.info', // ns *.9upp.info
6698+ '.9vip.info',
6699+
6700+ // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
6701+ '.w3rar.info',
6702+ '.w3sex.info',
6703+ '.w3zip.info',
6704+ '.w3in.info',
6705+ '.w3out.info',
6706+ ),
6707+ 'zorkin87 at mail.ru' => array(
6708+ // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
6709+ '.ruqore.com',
6710+ '.goxama.com',
6711+ '.cazebi.com',
6712+ '.fukeqa.com',
6713+ '.fydoge.com',
6714+ '.jukaly.com',
6715+ '.jumoga.com',
6716+ '.jumuxo.com',
6717+ '.tyriva.com',
6718+ '.vudyho.com'
6719+ ),
6720+ 'jessicaeagloff at yahoo.co.uk' => array(
6721+ '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com
6722+ '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com
6723+ '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com
6724+ '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk
6725+ ),
6726+ 'qbbs at xinoffice.com' => array(
6727+ // ns *.name-services.com
6728+ '.lingage.com', // 8.15.231.118
6729+ '.puksins.com', // IP not allocated now
6730+ ),
6731+ 'advertolog at gmail.com' =>
6732+ // 81.0.250.86(network.upl.cz => non-existent) or
6733+ // 217.11.233.27
6734+ '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030
6735+ 'contact at aboutdomain.com' => array(
6736+ '.lopieur0.com', // Not match but used
6737+ '.lopieur1.com', // Not match but used
6738+ '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com
6739+ ),
6740+ 'info at cash4wm.biz related' => array(
6741+ // 84.16.233.12(*.internetserviceteam.com)
6742+ '.newsblogforu.com',
6743+
6744+ // 84.16.235.141()
6745+ '.informator4you.com',
6746+
6747+ // 84.16.240.68(*.internetserviceteam.com)
6748+ '.absolute-best-site.com',
6749+ '.new-blog-for-you.com',
6750+
6751+ // 84.16.240.69(*.internetserviceteam.com)
6752+ '.best-sport-blog.com',
6753+ '.big-internet-site.com',
6754+ '.brendsite.com',
6755+ '.my-news-blog.com',
6756+
6757+ // 84.16.242.123(*.internetserviceteam.com)
6758+ '.best-news-blog.com',
6759+ '.site-with-content.com',
6760+
6761+ // The same method with info at cash4wm.biz
6762+ '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com),
6763+ '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com)
6764+ '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent)
6765+ '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..)
6766+ '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn
6767+ '.bloginfo4u.info', // 89.149.247.25
6768+ ),
6769+ 'kerjy at yahoo.com' => array(
6770+ '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com
6771+ '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu
6772+ '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com
6773+ '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com
6774+ '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com
6775+ ),
6776+ 'vme at hotmail.ru' => array(
6777+ '.seoblack.net', // 216.195.33.112(non-exsistent)
6778+ '.seoblack.biz', // 216.195.33.113(non-exsistent)
6779+ ),
6780+ 'john at hellomyns.info' => array(
6781+ '.cuhdw.cn', // 217.20.113.27, / nothing
6782+ '.byouz.cn', // 89.149.247.24, / nothing
6783+ '.idghc.cn',
6784+ '.inxrj.cn',
6785+ '.jqzdf.cn',
6786+ '.vsxej.cn',
6787+ '.wkgnr.cn',
6788+ ),
6789+ '.CN spam payload' => array(
6790+ '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com
6791+ '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com
6792+ '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net
6793+ '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
6794+ '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com
6795+ '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn
6796+ '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
6797+ '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com
6798+ '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com
6799+ '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
6800+ ),
6801+ 'Time2ns.info' => array(
6802+ // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6803+ '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
6804+ '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
6805+ '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
6806+ '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
6807+ ),
6808+ 'Ilovemyns.info' => array(
6809+ // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
6810+ '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
6811+ ),
6812+ 'Freehostdns.info' => array(
6813+ // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
6814+ '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
6815+ '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
6816+ ),
6817+ 'Newns4me.info' => array(
6818+ // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
6819+ '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
6820+ ),
61516821
61526822 // C-2: Lonely domains (buddies not found yet)
61536823 '.0721-4404.com',
61546824 '.0nline-porno.info', // by Timyr (timyr at narod.ru)
6825+ '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
61556826 '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com)
61566827 '.19cellar.info', // by Eduardo Guro (boomouse at gmail.com)
61576828 '.1gangmu.com', // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com
@@ -6159,45 +6830,66 @@ $blocklist['C'] = array(
61596830 '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com)
61606831 '.0annie.info',
61616832 '.6i6.de',
6833+ '.77toperrwuter1.info', // by Roman
6834+ '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
6835+ '.angioco.com', // 62.37.112.100, gamble
61626836 '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com)
61636837 '.adult-master-club.com', // by Alehander (mazyrkevich at cosmostv.by)
61646838 '.adultpersonalsclubs.com', // by Peter (vaspet34 at yahoo.com)
6839+ '.akalukseree.com', // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript
61656840 '.akgame.com', // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl
6841+ '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
61666842 '.alfanetwork.info', // by dante (dantequick at gmail.com)
61676843 '.allworlddirect.info', // Forbidden
61686844 '.amoreitsex.com',
6845+ '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6846+ '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com
61696847 '.approved-medication.com', // 208.109.181.53(p3slh079.shr.phx3.secureserver.net)
61706848 '.areahomeinfo.info', // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com
61716849 '.areaseo.com', // by Antony Carpito (xcentr at lycos.com)
6850+ '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com
61726851 '.auto-car-cheap.org',
61736852 '.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
61746853 '.baurish.info',
6854+ '.bernardtomic21.info', // by filboj at hotmail.com
61756855 '.bestop.name',
61766856 '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
61776857 '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
61786858 '.bestshopfinder.info',
61796859 '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
61806860 '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com
6861+ '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
61816862 '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
6863+ '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
61826864 '.capital2u.info', // by Delbert.A.Henry at dodgeit.com
61836865 '.casa-olympus.com', // "UcoZ WEB-SERVICES"
6866+ '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
61846867 '.catkittenmagazines.org', // 87.118.97.117
6868+ '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
6869+ '.chatwalker.com', // 124.32.230.65
6870+ '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com
61856871 '.covertarena.co.uk', // by Wayne Huxtable
61866872 '.d999.info', // by Peter Vayner (peter.vayner at inbox.ru)
6873+ '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
61876874 '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
61886875 '.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
6876+ '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
61896877 '.dlekei.info', // by Maxima Bucaro (webmaster at tts2f.info)
61906878 '.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
61916879 '.drug-shop.us', // by Alexandr (matrixpro at mail.ru)
61926880 '.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
6881+ '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
6882+ '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
61936883 '.easyshopusa.com', // by riter (riter at nm.ru)
6884+ '.edjuego.com', // 85.92.70.253(non-existent), gamble
61946885 '.edu.ph', // "philippine network foundation inc"
6886+ '.eec.mn', // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript
61956887 '.ex-web.net', // RMT by ex co,ltd (rmt at ex-web.net)
61966888 '.extracheapmeds.com', // "freexxxmovies" by John Smith (89 at bite.to)
61976889 '.fantasy-handjob-ra.com', // by Hose Pedro (hosepedro at gmail.com)
61986890 '.fastppc.info', // by peter conor (fastppc at msn.com)
61996891 '.ffxiforums.net', // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript
6200- '*.filthserver.com', // sales at onlinemarketingservices.biz
6892+ '.filthserver.com', // sales at onlinemarketingservices.biz
62016893 '.find-stuff.org', // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found
62026894 '.firstdrugstorezone.info', // by Goose (boris208 at yandex.ru)
62036895 '.free-finding.com', // by Ny hom (nyhom at yahoo.com)
@@ -6207,12 +6899,12 @@ $blocklist['C'] = array(
62076899 '.freehost5.com', // 75.126.32.184(kosmohost.net), words only
62086900 '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com)
62096901 '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru)
6902+ '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
62106903 '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com)
62116904 '.game4egold.com', // by Filus Saifullin (ebay at soft-script.com)
62126905 '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
6213-
6906+ '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
62146907 '.gomeodc.com', // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com
6215-
62166908 '.ganecity.com', // by shao tian (huangjinqiang at sina.com)
62176909 '.gm-exchange.jp', // 210.188.216.49 RMT
62186910 '.goamoto.ru', // by Dmitry E Kotchnev (z2archive at gmail.com)
@@ -6228,8 +6920,10 @@ $blocklist['C'] = array(
62286920 '.hostuju.cz', // ns banan.cz, banan.it
62296921 '.hot4buy.org', // by Hot Maker (jot at hot4buy.org)
62306922 '.hotscriptonline.info',// by Psy Search (admin at psysearch.com)
6923+ '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com)
62316924 '.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp
62326925 '.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
6926+ '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz
62336927 '.infradoc.com',
62346928 '.investorvillage.com', // by natalija puchkova (internet at internet.lv)
62356929 '.ismarket.com', // Google-hiding. intercage.com related IP
@@ -6237,35 +6931,44 @@ $blocklist['C'] = array(
62376931 '.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru)
62386932 '.itsexosit.net',
62396933 '.itxxxit.net',
6934+ '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
62406935 '.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca)
62416936 '.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet
62426937 '.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript
6938+ '.jsyuanyang.com', // 58.211.0.23(non-existing)
6939+ '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
62436940 '.kingtools.de',
62446941 '.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
62456942 '.leucainfo.com',
62466943 '.library-blogs.net', // by Peter Scott (pscontent at gmail.com)
6247- '.lingage.com', // by huan bing (qbbs at xinoffice.com)
6944+ '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
62486945 '.link-keeper.net', // 210.172.108.236 (257.xrea.com)
62496946 '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com)
6947+ '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
62506948 '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
62516949 '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
6950+ '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
62526951 '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md)
62536952 '.medpharmaworldguide.com', // by Nick Ivchenkov (signmark at gmail.com), / not found
62546953 '.megvideochatlive.info', // Bad seo
62556954 '.milfxxxpass.com', // by Morozov Pavlik (rulets at gmail.com)
6955+ '.mncxvsm.info', // 217.11.233.105, / blank
62566956 '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com)
6957+ '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
62576958 '.myfgj.info', // by Filus (softscript at gmail.com)
62586959 '.mujiki.com', // by Mila Contora (ebumsn at ngs.ru)
62596960 '.mxsupportmailer.com',
62606961 '.next-moneylife.com', // RMT
62616962 '.newalandirect.com', // by Alnoor Hirji, ns *.sablehost.com
62626963 '.ngfu2.info', // by Tara Lagrant (webmaster at ngfu2.info)
6964+ '.northwestradiator.com', // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript
62636965 '.nucked-sex.com', // 203.223.150.222 by lis (noidlis2 at yahoo.com)
62646966 '.ok10000.com', // by zipeng hu (ldcs350003 at hotmail.com)
62656967 '.olimpmebel.info', // by pol (pauk_life at mail.ru), frame to bettersexmall.com
62666968 '.onlinetert.info', // by Jarod Hyde (grigorysch at gmail.com)
62676969 '.onlin-casino.com', // by Lomis Konstantinos (businessline3000 at gmx.de)
62686970 '.onlineviagra.de',
6971+ '.oppe.biz', // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com
62696972 '.ornit.info', // by Victoria C. Frey (Victoria.C.Frey at pookmail.com)
62706973 '.ozomw.info',
62716974 '.pahuist.info', // by Yura (yuralg2005 at yandex.ru)
@@ -6280,6 +6983,7 @@ $blocklist['C'] = array(
62806983 '.portaldiscount.com', // by Mark Tven (bestsaveup at gmail.com)
62816984 '.powerlevelingweb.com', // 68.178.211.9 by jun zhang (huanbing at 126.com), pl
62826985 '.prama.info', // by Juan.Kang at mytrashmail.com
6986+ '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
62836987 ',pulsar.net', // by TheBuzz Int. (theboss at tfcclion.com)
62846988 '.qoclick.net', // by DMITRIY SOLDATENKO
62856989 '.quality-teen-porn-photo.com', // by info at densa.info
@@ -6288,7 +6992,10 @@ $blocklist['C'] = array(
62886992 '.rigame.info', // by debra_jordan07 at yahoo.com
62896993 '.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt
62906994 '.roin.info', // by Evgenius (roinse at yandex.ru)
6995+ '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
6996+ '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
62916997 '.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
6998+ '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
62926999 '.searchadv.com', // by Jaan Randolph (searchadv at gmail.com)
62937000 '.seek-www.com', // by Adam Smit (pingpong at mail.md)
62947001 '.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
@@ -6302,24 +7009,33 @@ $blocklist['C'] = array(
63027009 '.sepcn.info', // / not found
63037010 '.sslcp.com', // by shufang zhou (info at 6come.com), dns *.hichina.com
63047011 '.sticy.info', // by Richard D. Mccall (richardmccall at yahoo.com)
7012+ '.stordproduksjonslag.no', // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript
7013+ '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
63057014 '.superrwm.info', // by Dark Dux (duxdark at yahoo.com)
63067015 '.superverizonringtones.com', // by joshua at list.ru
7016+ '.teriak.cn', // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank
7017+ '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com
63077018 '.thehostcity.com', // Domains by Proxy
7019+ '.thesuperxxx.com', // 81.29.249.27(non-existent)
63087020 '.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank
63097021 '.thetrendy.info', // by Harold (Harold.J.Craft at pookmail.com), / is blank
63107022 '.theusapills.com', // by Dr. Zarman (contactus at theusapills.com)
63117023 '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com)
63127024 '.topmeds10.com',
7025+ '.tschofenig.com', // 213.239.234.98(*.clients.your-server.de), port 8080
63137026 '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net)
63147027 '.twabout.com', // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net
63157028 '.uaro.info', // by Neru Pioner (neru at smtp.ru)
63167029 '.unctad.net', // by gfdogfd at lovespb.com
63177030 '.vacant.org.uk',
7031+ '.viagrausaonline.com', // 85.17.52.139(non-existent)
63187032 '.vip-get.info', // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden
63197033 '.virtualsystem.de',
63207034 '.vdxhost.com',
7035+ '.vodkaporn.com', // 67.19.116.83(non-existent) by green at gmx.co.uk
63217036 '.vviccd520.com', // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript
63227037 '.homes.com.au', // 139.134.5.124 by wongcr at bigpond.net.au, / meanless,
7038+ '.wbtechs.us', // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com
63237039 '.webnow.biz', // by Hsien I Fan (admin at servcomputing.com)
63247040 '.webtools24.net', // by Michael Helminger (info at ishelminger.de)
63257041 '.wer3.info', // by Martin Gundel (Martin at mail.com), 404 not found
@@ -6340,18 +7056,216 @@ $blocklist['C'] = array(
63407056 '.zyguo.info', // ns globoxhost.net
63417057 '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com)
63427058
6343- '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden
6344- '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be
6345- '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru
7059+
7060+ '.canada-grants.ca', // 173.193.6.128 link to grantsmoney.com
7061+ '.grantsmoney.com', // 72.26.207.6
7062+
7063+ 'admin at thumbset.net' => array( // 2010/08 207.7.82.170, Don Wilson (admin at thumbset.net)
7064+ // link to licensedrxpharm.com
7065+ '.avelocitoyens.com',
7066+ '.lzbps.com',
7067+ '.bittermonkeycomic.com',
7068+ '.estadiodeportivocali.com',
7069+ '.fb1177.com',
7070+ '.ghanabookpublishers.com',
7071+ '.greensagepage.com',
7072+ '.inlakech.com',
7073+ '.leungwingkei.net',
7074+ '.liberadea.org',
7075+ '.rocknrollgypsy.com',
7076+ '.su-om.com',
7077+ '.ymouk.org', // 2010/08 207.7.82.170, by (ymouk.org at contactprivacy.com)
7078+
7079+ // link to oainternetservices.com
7080+ '.elpadraic.com',
7081+ '.fptpromo.com',
7082+ '.insidetheaf2.com',
7083+
7084+ // link to pro-pay.net
7085+ '.movie-train.com',
7086+
7087+ // link to vigrxplus.com
7088+ '.panatrog.org',
7089+
7090+ // link to megarxsale.com
7091+ '.haberiniz.net',
7092+ '.obusilis.net',
7093+ ),
7094+ '.onlinecasinoinformation.com', // 2010/08 66.96.147.105
7095+ '.onlinecasinoresources.com', // 2010/08 74.220.215.62
63467096
6347- '.chatwalker.com', // 124.32.230.65
6348- '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
6349- '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com
7097+ 'moshenhm at gmail.com' => array( // by Nahum, Moshe (moshenhm at gmail.com)
63507098
6351- '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org
6352- '.mncxvsm.info', // 217.11.233.105, / blank
6353- '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales
6354- '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts
7099+ // 2010/08 65.254.248.143
7100+ '.odinhosting.com', // seems no link today
7101+ '.nycdivers.com', // link to mainalpha.com
7102+ '.robertlhines.com', // link to mainalpha.com, etc
7103+ '.shadowsonmyshift.com', // link to mainalpha.com, etc
7104+
7105+ // 2010/08 69.89.31.187
7106+ '.bcsliding.com', //
7107+ '.msthirteen.com', // link to mainalpha.com
7108+ // 2010/08 74.53.239.27
7109+ '.thetravelerscafe.com', // cheap tickets
7110+
7111+ // 2010/08 74.81.92.55
7112+ '.sonicparthenon.com', // link to mainalpha.com
7113+ '.staroftheevening.com', // link to mainalpha.com
7114+ '.sanjosecosmeticdental.com',
7115+
7116+ // 2010/08 173.45.103.74
7117+ '.digitalexperts.com',
7118+
7119+ // 2010/08 173.236.48.82
7120+ '.sunshinetesting.com', // link to mainalpha.com
7121+ '.sports-and-concert-tickets.com', // seems no link today
7122+
7123+ // 2010/08 174.120.82.124
7124+ '.blueysretreat.com', // seems no link today
7125+ '.lamborghinidenveronline.com', // seems no link today
7126+ '.buckandbb.net', // link to kqzyfj.com
7127+
7128+ // 2010/08 174.132.149.98
7129+ '.2008-national-n-scale-convention.com', // link to mainalpha.com
7130+ '.creativejuicecompetition.com', // seems no link today
7131+
7132+ // 2010/08 216.119.132.2
7133+ '.kennybrown.net',
7134+
7135+ // 2010/08 no address today
7136+ '.bestblackdatingonline.com',
7137+ ),
7138+
7139+ 'info at dvishnu.com' => array( // by Vishnu Prasath (info at dvishnu.com)
7140+
7141+ // 2010/08 69.89.31.187
7142+ '.dinuzzollc.com', // link to mainalpha.com etc
7143+ '.laruesbackdoor.com', // link to mainalpha.com etc
7144+ '.okrenters.com', // link to mainalpha.co
7145+ '.pandaitaid.com', // link to mainalpha.com, etc
7146+ '.vicariouscollection.com', // by Vishnu Prasath (info at dvishnu.com)
7147+ '.middlefingerproductions.net', // link to mainalpha.com
7148+
7149+ // 2010/08 74.81.92.55
7150+ '.ecoxfinancial.com', // link to mainalpha.com etc
7151+ '.fightingspirit-comics.com', // link to mainalpha.com etc
7152+ '.learntoplaythedobro.com', // link to mainalpha.com etc
7153+ '.montcalm4hfair.com', // link to mainalpha.com etc
7154+ '.oaads.com', // link to mainalpha.com etc
7155+ '.pabloblum.com', // link to mainalpha.com
7156+ '.renaissancequartet.com', // link to mainalpha.com
7157+ '.sbi-limited.com', // link to mainalpha.com
7158+ '.showeroffire.com', // link to mainalpha.com
7159+ '.soccerfestcolumbus.com', // link to mainalpha.com
7160+
7161+ // 2010/08 173.236.48.82
7162+ '.anniedguesthouse.com', // link to mainalpha.com
7163+ '.finnfest2009.com', // link to mainalpha.com
7164+ '.hietalasoldworldmeats.com', // link to mainalpha.com etc
7165+ '.splendoreimport.com', // link to mainalpha.com
7166+
7167+ // 2010/08 174.120.82.124
7168+ '.jenurbanandthebox.com', // link to mainalpha.com
7169+
7170+ // 2010/08 174.132.149.98
7171+ '.segwaybykar.com', // link to mainalpha.com
7172+ ),
7173+
7174+ 'mainalpha.com related' => array(
7175+
7176+ // 2010/08 65.254.248.143
7177+ '.archivecdbooksus.com', // by (offpista at gmail.com), "sports betting"
7178+ '.highrollersonlinecasinos.com', // casios
7179+ '.onlinecasinocenter.com', // casios
7180+
7181+
7182+ // 2010/08 74.81.92.55
7183+ '.2ndrose.com', // by Victor Zrovanov (victor3239 at gmail.com), link to mainalpha.com
7184+ '.edgewatertowers.com', // by Victor Frankl (victor3239 at gmail.com), link to mainalpha.com
7185+
7186+ // 2010/08 173.236.48.82
7187+ '.ciprogram.com', // link to mainalpha.com
7188+
7189+ // 2010/08 174.132.149.98
7190+ '.msgulfcoastbnbs.com', // by Michael John (cpajourney at yahoo.com), link to mainalpha.com etc
7191+ ),
7192+
7193+ 'kouvald at gmail.com' => array( // by Vlad Kouvaldin (kouvald at gmail.com)
7194+
7195+ // 2010/08 91.205.156.73
7196+ '.newvibesmedia.com',
7197+ '.pacarts.org',
7198+ '.peruanosenbarcelona.com',
7199+ '.ronnievon.com',
7200+ '.savewilson.org',
7201+ '.sawanmall.com',
7202+ '.sickpowder.com',
7203+ '.theblogproject.com',
7204+ '.thenewswalk.com',
7205+ '.wilsonhillstables.com',
7206+
7207+ // 2010/08 91.205.156.77
7208+ '.chaironwheels.com',
7209+ '.countrylegends943.com',
7210+ '.daytonapridefest.com',
7211+ '.funposal.org',
7212+ '.mfshou.com',
7213+ '.mtskrilla.com',
7214+
7215+ // 2010/08 173.45.96.176
7216+ '.prematuretreatments.com',
7217+
7218+ // 2010/09 173.83.127.79
7219+ '.bluebirdsdownunder.com',
7220+
7221+ // 2010/09 173.83.127.80
7222+ '.briancallphoto.com',
7223+ ),
7224+
7225+ 'freelanceblogger at gmail.com' => array(
7226+ '.geniusroulette.com', // 2010/08 216.86.146.16 by Raj Dash (freelanceblogger at gmail.com)
7227+ '.geniussportsbetting.com', // 2010/08 66.40.52.146 by Raj Dash (freelanceblogger at gmail.com)
7228+ ),
7229+
7230+ '.ramapowatershed.com', //
7231+ 'purplefarm at gmail.com' => array(
7232+ // 2010/08 208.71.128.6
7233+ '.123dollie.com', // by marc jones (purplefarm at gmail.com)
7234+ '.451jokes.com', // by Joshua gardiner (purplefarm at gmail.com)
7235+ '.skidsteersonsale.com', // by Joshua gardiner (purplefarm at gmail.com)
7236+ ),
7237+
7238+ '.freelivemodels.com', // 2010/08 207.246.153.228, 207.246.153.229
7239+ '173.236.25.210 related' => array(
7240+ // 2010/08 173.236.25.210
7241+ '.ibd-treatment-blog.com',
7242+ '.my247weightlossblog.com',
7243+ '.yoursexualhealthblog.com',
7244+
7245+ // 2010/08 174.120.171.94
7246+ '.adhdbesttreatments.com',
7247+ '.bipolardisordertreatmentsblog.com',
7248+ '.diabetestype2answers.com',
7249+ ),
7250+ '68.232.186.54 related' => array(
7251+ '.amateurxxxtube247.com', // 2010/08 68.232.186.54
7252+ '.asiansextube247.com', // 2010/08 68.232.186.54
7253+ '.analsextube247.com', // 2010/08 99.192.176.58
7254+ '.eroticandy.com', // 2010/08 99.192.176.54
7255+ ),
7256+ 'nikiforov501 at mail.ru' => array(
7257+ // 2010/09 91.205.156.74
7258+ '.211park.com',
7259+ '.atlantajuniorthrashers.com',
7260+ '.jensenwoods.com',
7261+
7262+ // 2010/09 91.205.156.75
7263+ '.ltaadventure.com',
7264+ '.oshareo.com',
7265+ '.pillthrillow.com',
7266+ '.redaphrodite.com',
7267+ '.marching-season.net',
7268+ ),
63557269
63567270 // C-3: Not classifiable (information wanted)
63577271 //
@@ -6378,12 +7292,15 @@ $blocklist['D'] = array(
63787292
63797293 $blocklist['E'] = array(
63807294 // E: Sample setting of
6381- // Promoters
6382- // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
6383- // Ads, Business promotions)
7295+ // Promotions
7296+ // (Phenomenons with Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
7297+ // Ads, Business promotions, SEO, etc)
63847298 //
6385- // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
7299+ // Promotions near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc.
63867300 // Sometimes they may promote each other
7301+ //
7302+ // Please notify us about this list with reason:
7303+ // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/342
63877304
63887305 '15-Mail.com related' => array(
63897306 '.15-mail.com', // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
@@ -6549,6 +7466,7 @@ $blocklist['E'] = array(
65497466 'hbb.afl.rakuten.co.jp', ///hsb/ 203.190.60.105 image server?
65507467 ),
65517468 '.sedori-data.com', // 210.188.205.7(sv03.lolipop.jp)
7469+ '.seozone.jp', // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn
65527470 '.tool4success.com', // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com)
65537471 'tera at kirinn.com' => array( // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com)
65547472 '.e123.info',