修订版 | 74762edf02bcf49bb5b12012a826303c24d14e4c (tree) |
---|---|
时间 | 2011-01-25 00:34:39 |
作者 | henoheno <henoheno> |
Commiter | henoheno |
$Id: spam.php,v 1.221 2011/01/24 14:51:50 henoheno Exp $
$Id: spam_pickup.php,v 1.71 2009/01/04 08:56:07 henoheno Exp $
$Id: spam_util.php,v 1.4 2011/01/24 14:51:50 henoheno Exp $
$Id: spam.ini.php,v 1.202 2010/12/15 16:07:38 henoheno Exp $
@@ -1,6 +1,6 @@ | ||
1 | 1 | <?php |
2 | 2 | // PukiWiki - Yet another WikiWikiWeb clone. |
3 | -// $Id: pukiwiki.php,v 1.11.2.2 2007-08-15 15:32:13 henoheno Exp $ | |
3 | +// $Id: pukiwiki.php,v 1.11.2.3 2011-01-24 15:34:39 henoheno Exp $ | |
4 | 4 | // |
5 | 5 | // PukiWiki 1.4.* |
6 | 6 | // Copyright (C) 2002-2007 by PukiWiki Developers Team |
@@ -102,7 +102,7 @@ if ($spam && $method != 'GET') { | ||
102 | 102 | } |
103 | 103 | if ($_spam) { |
104 | 104 | require(LIB_DIR . 'spam.php'); |
105 | - require(LIB_DIR . 'spam_pickup.php'); | |
105 | + | |
106 | 106 | if (isset($spam['method'][$_plugin])) { |
107 | 107 | $_method = & $spam['method'][$_plugin]; |
108 | 108 | } else if (isset($spam['method']['_default'])) { |
@@ -1,275 +1,22 @@ | ||
1 | 1 | <?php |
2 | -// $Id: spam.php,v 1.31.2.2 2007-09-24 16:02:25 henoheno Exp $ | |
3 | -// Copyright (C) 2006-2007 PukiWiki Developers Team | |
2 | +// $Id: spam.php,v 1.31.2.3 2011-01-24 15:34:39 henoheno Exp $ | |
3 | +// Copyright (C) 2006-2009, 2011 PukiWiki Developers Team | |
4 | 4 | // License: GPL v2 or (at your option) any later version |
5 | 5 | // |
6 | 6 | // Functions for Concept-work of spam-uri metrics |
7 | 7 | // |
8 | 8 | // (PHP 4 >= 4.3.0): preg_match_all(PREG_OFFSET_CAPTURE): $method['uri_XXX'] related feature |
9 | 9 | |
10 | -if (! defined('SPAM_INI_FILE')) define('SPAM_INI_FILE', 'spam.ini.php'); | |
11 | -if (! defined('DOMAIN_INI_FILE')) define('DOMAIN_INI_FILE', 'domain.ini.php'); | |
12 | - | |
13 | -// --------------------- | |
14 | -// Compat etc | |
15 | - | |
16 | -// (PHP 4 >= 4.2.0): var_export(): mail-reporting and dump related | |
17 | -if (! function_exists('var_export')) { | |
18 | - function var_export() { | |
19 | - return 'var_export() is not found on this server' . "\n"; | |
20 | - } | |
21 | -} | |
22 | - | |
23 | -// (PHP 4 >= 4.2.0): preg_grep() enables invert option | |
24 | -function preg_grep_invert($pattern = '//', $input = array()) | |
25 | -{ | |
26 | - static $invert; | |
27 | - if (! isset($invert)) $invert = defined('PREG_GREP_INVERT'); | |
28 | - | |
29 | - if ($invert) { | |
30 | - return preg_grep($pattern, $input, PREG_GREP_INVERT); | |
31 | - } else { | |
32 | - $result = preg_grep($pattern, $input); | |
33 | - if ($result) { | |
34 | - return array_diff($input, preg_grep($pattern, $input)); | |
35 | - } else { | |
36 | - return $input; | |
37 | - } | |
38 | - } | |
39 | -} | |
40 | - | |
41 | - | |
42 | -// --------------------- | |
43 | -// Utilities | |
44 | - | |
45 | -// Very roughly, shrink the lines of var_export() | |
46 | -// NOTE: If the same data exists, it must be corrupted. | |
47 | -function var_export_shrink($expression, $return = FALSE, $ignore_numeric_keys = FALSE) | |
48 | -{ | |
49 | - $result = var_export($expression, TRUE); | |
50 | - | |
51 | - $result = preg_replace( | |
52 | - // Remove a newline and spaces | |
53 | - '# => \n *array \(#', ' => array (', | |
54 | - $result | |
55 | - ); | |
56 | - | |
57 | - if ($ignore_numeric_keys) { | |
58 | - $result =preg_replace( | |
59 | - // Remove numeric keys | |
60 | - '#^( *)[0-9]+ => #m', '$1', | |
61 | - $result | |
62 | - ); | |
63 | - } | |
64 | - | |
65 | - if ($return) { | |
66 | - return $result; | |
67 | - } else { | |
68 | - echo $result; | |
69 | - return NULL; | |
70 | - } | |
71 | -} | |
72 | - | |
73 | -// Reverse $string with specified delimiter | |
74 | -function delimiter_reverse($string = 'foo.bar.example.com', $from_delim = '.', $to_delim = '.') | |
75 | -{ | |
76 | - if (! is_string($string) || ! is_string($from_delim) || ! is_string($to_delim)) | |
77 | - return $string; | |
78 | - | |
79 | - // com.example.bar.foo | |
80 | - return implode($to_delim, array_reverse(explode($from_delim, $string))); | |
81 | -} | |
82 | - | |
83 | -// ksort() by domain | |
84 | -function ksort_by_domain(& $array) | |
85 | -{ | |
86 | - $sort = array(); | |
87 | - foreach(array_keys($array) as $key) { | |
88 | - $sort[delimiter_reverse($key)] = $key; | |
89 | - } | |
90 | - ksort($sort, SORT_STRING); | |
91 | - $result = array(); | |
92 | - foreach($sort as $key) { | |
93 | - $result[$key] = & $array[$key]; | |
94 | - } | |
95 | - $array = $result; | |
96 | -} | |
97 | - | |
98 | -// Roughly strings(1) using PCRE | |
99 | -// This function is useful to: | |
100 | -// * Reduce the size of data, from removing unprintable binary data | |
101 | -// * Detect _bare_strings_ from binary data | |
102 | -// References: | |
103 | -// http://www.freebsd.org/cgi/man.cgi?query=strings (Man-page of GNU strings) | |
104 | -// http://www.pcre.org/pcre.txt | |
105 | -// Note: mb_ereg_replace() is one of mbstring extension's functions | |
106 | -// and need to init its encoding. | |
107 | -function strings($binary = '', $min_len = 4, $ignore_space = FALSE, $multibyte = FALSE) | |
108 | -{ | |
109 | - // String only | |
110 | - $binary = (is_array($binary) || $binary === TRUE) ? '' : strval($binary); | |
111 | - | |
112 | - $regex = $ignore_space ? | |
113 | - '[^[:graph:] \t\n]+' : // Remove "\0" etc, and readable spaces | |
114 | - '[^[:graph:][:space:]]+'; // Preserve readable spaces if possible | |
115 | - | |
116 | - $binary = $multibyte ? | |
117 | - mb_ereg_replace($regex, "\n", $binary) : | |
118 | - preg_replace('/' . $regex . '/s', "\n", $binary); | |
119 | - | |
120 | - if ($ignore_space) { | |
121 | - $binary = preg_replace( | |
122 | - array( | |
123 | - '/[ \t]{2,}/', | |
124 | - '/^[ \t]/m', | |
125 | - '/[ \t]$/m', | |
126 | - ), | |
127 | - array( | |
128 | - ' ', | |
129 | - '', | |
130 | - '' | |
131 | - ), | |
132 | - $binary); | |
133 | - } | |
134 | - | |
135 | - if ($min_len > 1) { | |
136 | - // The last character seems "\n" or not | |
137 | - $br = (! empty($binary) && $binary[strlen($binary) - 1] == "\n") ? "\n" : ''; | |
138 | - | |
139 | - $min_len = min(1024, intval($min_len)); | |
140 | - $regex = '/^.{' . $min_len . ',}/S'; | |
141 | - $binary = implode("\n", preg_grep($regex, explode("\n", $binary))) . $br; | |
142 | - } | |
143 | - | |
144 | - return $binary; | |
145 | -} | |
146 | - | |
147 | - | |
148 | -// --------------------- | |
149 | -// Utilities: Arrays | |
150 | - | |
151 | -// Count leaves (A leaf = value that is not an array, or an empty array) | |
152 | -function array_count_leaves($array = array(), $count_empty = FALSE) | |
153 | -{ | |
154 | - if (! is_array($array) || (empty($array) && $count_empty)) return 1; | |
155 | - | |
156 | - // Recurse | |
157 | - $count = 0; | |
158 | - foreach ($array as $part) { | |
159 | - $count += array_count_leaves($part, $count_empty); | |
160 | - } | |
161 | - return $count; | |
162 | -} | |
163 | - | |
164 | -// Merge two leaves | |
165 | -// Similar to PHP array_merge_leaves(), except strictly preserving keys as string | |
166 | -function array_merge_leaves($array1, $array2, $sort_keys = TRUE) | |
167 | -{ | |
168 | - // Array(s) only | |
169 | - $is_array1 = is_array($array1); | |
170 | - $is_array2 = is_array($array2); | |
171 | - if ($is_array1) { | |
172 | - if ($is_array2) { | |
173 | - ; // Pass | |
174 | - } else { | |
175 | - return $array1; | |
176 | - } | |
177 | - } else if ($is_array2) { | |
178 | - return $array2; | |
179 | - } else { | |
180 | - return $array2; // Not array ($array1 is overwritten) | |
181 | - } | |
182 | - | |
183 | - $keys_all = array_merge(array_keys($array1), array_keys($array2)); | |
184 | - if ($sort_keys) sort($keys_all, SORT_STRING); | |
185 | - | |
186 | - $result = array(); | |
187 | - foreach($keys_all as $key) { | |
188 | - $isset1 = isset($array1[$key]); | |
189 | - $isset2 = isset($array2[$key]); | |
190 | - if ($isset1 && $isset2) { | |
191 | - // Recurse | |
192 | - $result[$key] = array_merge_leaves($array1[$key], $array2[$key], $sort_keys); | |
193 | - } else if ($isset1) { | |
194 | - $result[$key] = & $array1[$key]; | |
195 | - } else { | |
196 | - $result[$key] = & $array2[$key]; | |
197 | - } | |
198 | - } | |
199 | - return $result; | |
200 | -} | |
201 | - | |
202 | -// An array-leaves to a flat array | |
203 | -function array_flat_leaves($array, $unique = TRUE) | |
204 | -{ | |
205 | - if (! is_array($array)) return $array; | |
206 | - | |
207 | - $tmp = array(); | |
208 | - foreach(array_keys($array) as $key) { | |
209 | - if (is_array($array[$key])) { | |
210 | - // Recurse | |
211 | - foreach(array_flat_leaves($array[$key]) as $_value) { | |
212 | - $tmp[] = $_value; | |
213 | - } | |
214 | - } else { | |
215 | - $tmp[] = & $array[$key]; | |
216 | - } | |
217 | - } | |
218 | - | |
219 | - return $unique ? array_values(array_unique($tmp)) : $tmp; | |
220 | -} | |
221 | 10 | |
222 | -// $array['something'] => $array['wanted'] | |
223 | -function array_rename_keys(& $array, $keys = array('from' => 'to'), $force = FALSE, $default = '') | |
224 | -{ | |
225 | - if (! is_array($array) || ! is_array($keys)) return FALSE; | |
11 | +if (! defined('LIB_DIR')) define('LIB_DIR', './'); | |
12 | +require(LIB_DIR . 'spam_pickup.php'); | |
13 | +require(LIB_DIR . 'spam_util.php'); | |
226 | 14 | |
227 | - // Nondestructive test | |
228 | - if (! $force) { | |
229 | - foreach(array_keys($keys) as $from) { | |
230 | - if (! isset($array[$from])) { | |
231 | - return FALSE; | |
232 | - } | |
233 | - } | |
234 | - } | |
235 | - | |
236 | - foreach($keys as $from => $to) { | |
237 | - if ($from === $to) continue; | |
238 | - if (! $force || isset($array[$from])) { | |
239 | - $array[$to] = & $array[$from]; | |
240 | - unset($array[$from]); | |
241 | - } else { | |
242 | - $array[$to] = $default; | |
243 | - } | |
244 | - } | |
245 | - | |
246 | - return TRUE; | |
247 | -} | |
248 | - | |
249 | -// Remove redundant values from array() | |
250 | -function array_unique_recursive($array = array()) | |
251 | -{ | |
252 | - if (! is_array($array)) return $array; | |
253 | - | |
254 | - $tmp = array(); | |
255 | - foreach($array as $key => $value){ | |
256 | - if (is_array($value)) { | |
257 | - $array[$key] = array_unique_recursive($value); | |
258 | - } else { | |
259 | - if (isset($tmp[$value])) { | |
260 | - unset($array[$key]); | |
261 | - } else { | |
262 | - $tmp[$value] = TRUE; | |
263 | - } | |
264 | - } | |
265 | - } | |
266 | - | |
267 | - return $array; | |
268 | -} | |
15 | +if (! defined('SPAM_INI_FILE')) define('SPAM_INI_FILE', 'spam.ini.php'); | |
269 | 16 | |
270 | 17 | |
271 | 18 | // --------------------- |
272 | -// Part One : Checker | |
19 | +// Regex | |
273 | 20 | |
274 | 21 | // Rough implementation of globbing |
275 | 22 | // |
@@ -317,42 +64,34 @@ function generate_host_regex($string = '', $divider = '/') | ||
317 | 64 | { |
318 | 65 | if (! is_string($string)) return ''; |
319 | 66 | |
320 | - if (mb_strpos($string, '.') === FALSE) | |
321 | - return generate_glob_regex($string, $divider); | |
322 | - | |
323 | - if (is_ip($string)) { | |
324 | - // IPv4 | |
67 | + if (mb_strpos($string, '.') === FALSE || is_ip($string)) { | |
68 | + // "localhost", IPv4, etc | |
325 | 69 | return generate_glob_regex($string, $divider); |
326 | - } else { | |
327 | - // FQDN or something | |
328 | - $part = explode('.', $string, 2); | |
329 | - if ($part[0] == '') { | |
330 | - $part[0] = '(?:.*\.)?'; // And all related FQDN | |
331 | - } else if ($part[0] == '*') { | |
332 | - $part[0] = '.*\.'; // All subdomains/hosts only | |
333 | - } else { | |
334 | - return generate_glob_regex($string, $divider); | |
335 | - } | |
336 | - $part[1] = generate_glob_regex($part[1], $divider); | |
337 | - return implode('', $part); | |
338 | 70 | } |
339 | -} | |
340 | 71 | |
341 | -// Rough hostname checker | |
342 | -// [OK] 192.168. | |
343 | -// TODO: Strict digit, 0x, CIDR, IPv6 | |
344 | -function is_ip($string = '') | |
345 | -{ | |
346 | - if (preg_match('/^' . | |
347 | - '(?:[0-9]{1,3}\.){3}[0-9]{1,3}' . '|' . | |
348 | - '(?:[0-9]{1,3}\.){1,3}' . '$/', | |
349 | - $string)) { | |
350 | - return 4; // Seems IPv4(dot-decimal) | |
72 | + // FQDN or something | |
73 | + $part = explode('.', $string, 2); | |
74 | + if ($part[0] == '') { | |
75 | + // ".example.org" | |
76 | + $part[0] = '(?:.*\.)?'; | |
77 | + } else if ($part[0] == '*') { | |
78 | + // "*.example.org" | |
79 | + $part[0] = '.*\.'; | |
351 | 80 | } else { |
352 | - return 0; // Seems not IP | |
81 | + // example.org, etc | |
82 | + return generate_glob_regex($string, $divider); | |
353 | 83 | } |
84 | + | |
85 | + $part[1] = generate_glob_regex($part[1], $divider); | |
86 | + | |
87 | + return implode('', $part); | |
354 | 88 | } |
355 | 89 | |
90 | + | |
91 | +// --------------------- | |
92 | +// Load | |
93 | + | |
94 | +// Load SPAM_INI_FILE and return parsed one | |
356 | 95 | function get_blocklist($list = '') |
357 | 96 | { |
358 | 97 | static $regexes; |
@@ -366,6 +105,7 @@ function get_blocklist($list = '') | ||
366 | 105 | $regexes = array(); |
367 | 106 | if (file_exists(SPAM_INI_FILE)) { |
368 | 107 | $blocklist = array(); |
108 | + | |
369 | 109 | include(SPAM_INI_FILE); |
370 | 110 | // $blocklist['list'] = array( |
371 | 111 | // //'goodhost' => FALSE; |
@@ -375,11 +115,19 @@ function get_blocklist($list = '') | ||
375 | 115 | // '*.blogspot.com', // Blog services's subdomains (only) |
376 | 116 | // 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#', |
377 | 117 | // ); |
378 | - foreach(array('pre', 'list') as $special) { | |
118 | + | |
119 | + foreach(array( | |
120 | + 'pre', | |
121 | + 'list', | |
122 | + ) as $special) { | |
123 | + | |
379 | 124 | if (! isset($blocklist[$special])) continue; |
125 | + | |
380 | 126 | $regexes[$special] = $blocklist[$special]; |
127 | + | |
381 | 128 | foreach(array_keys($blocklist[$special]) as $_list) { |
382 | 129 | if (! isset($blocklist[$_list])) continue; |
130 | + | |
383 | 131 | foreach ($blocklist[$_list] as $key => $value) { |
384 | 132 | if (is_array($value)) { |
385 | 133 | $regexes[$_list][$key] = array(); |
@@ -390,6 +138,7 @@ function get_blocklist($list = '') | ||
390 | 138 | get_blocklist_add($regexes[$_list], $key, $value); |
391 | 139 | } |
392 | 140 | } |
141 | + | |
393 | 142 | unset($blocklist[$_list]); |
394 | 143 | } |
395 | 144 | } |
@@ -397,21 +146,24 @@ function get_blocklist($list = '') | ||
397 | 146 | } |
398 | 147 | |
399 | 148 | if ($list === '') { |
400 | - return $regexes; // ALL | |
149 | + return $regexes; // ALL of | |
401 | 150 | } else if (isset($regexes[$list])) { |
402 | - return $regexes[$list]; | |
151 | + return $regexes[$list]; // A part of | |
403 | 152 | } else { |
404 | - return array(); | |
153 | + return array(); // Found nothing | |
405 | 154 | } |
406 | 155 | } |
407 | 156 | |
408 | -// Subroutine of get_blocklist() | |
409 | -function get_blocklist_add(& $array, $key = 0, $value = '*.example.org') | |
157 | +// Subroutine of get_blocklist(): Add new regex to the $array | |
158 | +function get_blocklist_add(& $array, $key = 0, $value = '*.example.org/path/to/file.html') | |
410 | 159 | { |
411 | 160 | if (is_string($key)) { |
412 | - $array[$key] = & $value; // Treat $value as a regex | |
161 | + $array[$key] = & $value; // Treat $value as a regex for FQDN(host)s | |
413 | 162 | } else { |
414 | - $array[$value] = '/^' . generate_host_regex($value, '/') . '$/i'; | |
163 | + $regex = generate_host_regex($value, '#'); | |
164 | + if (! empty($regex)) { | |
165 | + $array[$value] = '#^' . $regex . '$#i'; | |
166 | + } | |
415 | 167 | } |
416 | 168 | } |
417 | 169 |
@@ -592,30 +344,37 @@ function check_uri_spam($target = '', $method = array()) | ||
592 | 344 | // ---------------------------------------- |
593 | 345 | // Area measure |
594 | 346 | |
595 | - // Area: There's HTML anchor tag | |
596 | - if ((! $asap || ! $is_spam) && isset($method['area_anchor'])) { | |
597 | - $key = 'area_anchor'; | |
598 | - $_asap = isset($method['asap']) ? array('asap' => TRUE) : array(); | |
599 | - $result = area_pickup($target, array($key => TRUE) + $_asap); | |
600 | - if ($result) { | |
601 | - $sum[$key] = $result[$key]; | |
602 | - if (isset($method[$key]) && $sum[$key] > $method[$key]) { | |
603 | - $is_spam[$key] = TRUE; | |
604 | - } | |
347 | + if (! $asap || ! $is_spam) { | |
348 | + | |
349 | + // Method pickup | |
350 | + $_method = array(); | |
351 | + foreach(array( | |
352 | + 'area_anchor', // There's HTML anchor tag | |
353 | + 'area_bbcode', // There's 'BBCode' linking tag | |
354 | + ) as $key) { | |
355 | + if (isset($method[$key])) $_method[$key] = TRUE; | |
605 | 356 | } |
606 | - } | |
607 | 357 | |
608 | - // Area: There's 'BBCode' linking tag | |
609 | - if ((! $asap || ! $is_spam) && isset($method['area_bbcode'])) { | |
610 | - $key = 'area_bbcode'; | |
611 | - $_asap = isset($method['asap']) ? array('asap' => TRUE) : array(); | |
612 | - $result = area_pickup($target, array($key => TRUE) + $_asap); | |
613 | - if ($result) { | |
614 | - $sum[$key] = $result[$key]; | |
615 | - if (isset($method[$key]) && $sum[$key] > $method[$key]) { | |
616 | - $is_spam[$key] = TRUE; | |
358 | + if ($_method) { | |
359 | + $_asap = isset($method['asap']) ? array('asap' => TRUE) : array(); | |
360 | + $_result = area_pickup($target, $_method + $_asap); | |
361 | + $_asap = NULL; | |
362 | + } else { | |
363 | + $_result = FALSE; | |
364 | + } | |
365 | + | |
366 | + if ($_result) { | |
367 | + foreach(array_keys($_method) as $key) { | |
368 | + if (isset($_result[$key])) { | |
369 | + $sum[$key] = $_result[$key]; | |
370 | + if (isset($method[$key]) && $sum[$key] > $method[$key]) { | |
371 | + $is_spam[$key] = TRUE; | |
372 | + } | |
373 | + } | |
617 | 374 | } |
618 | 375 | } |
376 | + | |
377 | + unset($_asap, $_method, $_result); | |
619 | 378 | } |
620 | 379 | |
621 | 380 | // Return if ... |
@@ -624,22 +383,30 @@ function check_uri_spam($target = '', $method = array()) | ||
624 | 383 | // ---------------------------------------- |
625 | 384 | // URI: Pickup |
626 | 385 | |
627 | - $pickups = uri_pickup_normalize(spam_uri_pickup($target, $method)); | |
386 | + $pickups = spam_uri_pickup($target, $method); | |
387 | + | |
388 | + | |
389 | + // Return if ... | |
390 | + if (empty($pickups)) return $progress; | |
391 | + | |
392 | + // Normalize all | |
393 | + $pickups = uri_pickup_normalize($pickups); | |
394 | + | |
395 | + // ---------------------------------------- | |
396 | + // Pickup some part of URI | |
397 | + | |
628 | 398 | $hosts = array(); |
629 | 399 | foreach ($pickups as $key => $pickup) { |
630 | 400 | $hosts[$key] = & $pickup['host']; |
631 | 401 | } |
632 | 402 | |
633 | - // Return if ... | |
634 | - if (empty($pickups)) return $progress; | |
635 | - | |
636 | 403 | // ---------------------------------------- |
637 | 404 | // URI: Bad host <pre-filter> (Separate good/bad hosts from $hosts) |
638 | 405 | |
639 | 406 | if ((! $asap || ! $is_spam) && isset($method['badhost'])) { |
640 | 407 | $list = get_blocklist('pre'); |
641 | 408 | $blocked = blocklist_distiller($hosts, array_keys($list), $asap); |
642 | - foreach($list as $key=>$type){ | |
409 | + foreach($list as $key => $type){ | |
643 | 410 | if (! $type) unset($blocked[$key]); // Ignore goodhost etc |
644 | 411 | } |
645 | 412 | unset($list); |
@@ -859,9 +626,9 @@ function summarize_detail_newtral($progress = array()) | ||
859 | 626 | $subs = array(); |
860 | 627 | foreach(array_keys($trie[$key]) as $sub) { |
861 | 628 | if ($sub == '') { |
862 | - $subs[] = $key; | |
629 | + $subs[] = $key; // 'example.com' | |
863 | 630 | } else { |
864 | - $subs[] = $sub . '.' . $key; | |
631 | + $subs[] = $sub . '. '; // 'A.foo.bar. ' | |
865 | 632 | } |
866 | 633 | } |
867 | 634 | $result[] = ' \'' . $key . '\' => \'' . implode(', ', $subs) . '\','; |
@@ -875,59 +642,6 @@ function summarize_detail_newtral($progress = array()) | ||
875 | 642 | } |
876 | 643 | |
877 | 644 | |
878 | -// Check responsibility-root of the FQDN | |
879 | -// 'foo.bar.example.com' => 'example.com' (.com has the last whois for it) | |
880 | -// 'foo.bar.example.au' => 'example.au' (.au has the last whois for it) | |
881 | -// 'foo.bar.example.edu.au' => 'example.edu.au' (.edu.au has the last whois for it) | |
882 | -// 'foo.bar.example.act.edu.au' => 'example.act.edu.au' (.act.edu.au has the last whois for it) | |
883 | -function whois_responsibility($fqdn = 'foo.bar.example.com', $parent = FALSE, $implicit = TRUE) | |
884 | -{ | |
885 | - static $domain; | |
886 | - | |
887 | - if ($fqdn === NULL) { | |
888 | - $domain = NULL; // Unset | |
889 | - return ''; | |
890 | - } | |
891 | - if (! is_string($fqdn)) return ''; | |
892 | - | |
893 | - if (is_ip($fqdn)) return $fqdn; | |
894 | - | |
895 | - if (! isset($domain)) { | |
896 | - $domain = array(); | |
897 | - if (file_exists(DOMAIN_INI_FILE)) { | |
898 | - include(DOMAIN_INI_FILE); // Set | |
899 | - } | |
900 | - } | |
901 | - | |
902 | - $result = array(); | |
903 | - $dcursor = & $domain; | |
904 | - $array = array_reverse(explode('.', $fqdn)); | |
905 | - $i = 0; | |
906 | - while(TRUE) { | |
907 | - if (! isset($array[$i])) break; | |
908 | - $acursor = $array[$i]; | |
909 | - if (is_array($dcursor) && isset($dcursor[$acursor])) { | |
910 | - $result[] = & $array[$i]; | |
911 | - $dcursor = & $dcursor[$acursor]; | |
912 | - } else { | |
913 | - if (! $parent && isset($acursor)) { | |
914 | - $result[] = & $array[$i]; // Whois servers must know this subdomain | |
915 | - } | |
916 | - break; | |
917 | - } | |
918 | - ++$i; | |
919 | - } | |
920 | - | |
921 | - // Implicit responsibility: Top-Level-Domains must not be yours | |
922 | - // 'bar.foo.something' => 'foo.something' | |
923 | - if ($implicit && count($result) == 1 && count($array) > 1) { | |
924 | - $result[] = & $array[1]; | |
925 | - } | |
926 | - | |
927 | - return $result ? implode('.', array_reverse($result)) : ''; | |
928 | -} | |
929 | - | |
930 | - | |
931 | 645 | // --------------------- |
932 | 646 | // Exit |
933 | 647 |
@@ -950,7 +664,7 @@ function spam_exit($mode = '', $data = array()) | ||
950 | 664 | break; |
951 | 665 | case 'dump': |
952 | 666 | echo('<pre>' . "\n"); |
953 | - echo htmlspecialchars(var_export($data, TRUE)); | |
667 | + echo htmlsc(var_export($data, TRUE)); | |
954 | 668 | echo('</pre>' . "\n"); |
955 | 669 | break; |
956 | 670 | }; |
@@ -1,10 +1,14 @@ | ||
1 | 1 | <?php |
2 | -// $Id: spam_pickup.php,v 1.1.2.2 2007-09-24 16:03:35 henoheno Exp $ | |
3 | -// Copyright (C) 2006-2007 PukiWiki Developers Team | |
2 | +// $Id: spam_pickup.php,v 1.1.2.3 2011-01-24 15:34:39 henoheno Exp $ | |
3 | +// Copyright (C) 2006-2009 PukiWiki Developers Team | |
4 | 4 | // License: GPL v2 or (at your option) any later version |
5 | 5 | // |
6 | 6 | // Functions for Concept-work of spam-uri metrics |
7 | 7 | // |
8 | +// (PHP 4 >= 4.3.0): preg_match_all(PREG_OFFSET_CAPTURE): $method['uri_XXX'] related feature | |
9 | +// | |
10 | + | |
11 | +if (! defined('DOMAIN_INI_FILE')) define('DOMAIN_INI_FILE', 'domain.ini.php'); | |
8 | 12 | |
9 | 13 | // --------------------- |
10 | 14 | // URI pickup |
@@ -14,18 +18,18 @@ | ||
14 | 18 | // [OK] http://nasty.example.org:80/foo/xxx#nasty_string/bar |
15 | 19 | // [OK] ftp://nasty.example.org:80/dfsdfs |
16 | 20 | // [OK] ftp://cnn.example.com&story=breaking_news@10.0.0.1/top_story.htm (from RFC3986) |
21 | +// Not available for: IDN(ignored) | |
17 | 22 | function uri_pickup($string = '') |
18 | 23 | { |
19 | 24 | if (! is_string($string)) return array(); |
20 | 25 | |
21 | - // Not available for: IDN(ignored) | |
22 | 26 | $array = array(); |
23 | 27 | preg_match_all( |
24 | 28 | // scheme://userinfo@host:port/path/or/pathinfo/maybefile.and?query=string#fragment |
25 | 29 | // Refer RFC3986 (Regex below is not strict) |
26 | 30 | '#(\b[a-z][a-z0-9.+-]{1,8}):[/\\\]+' . // 1: Scheme |
27 | 31 | '(?:' . |
28 | - '([^\s<>"\'\[\]/\#?@]*)' . // 2: Userinfo (Username) | |
32 | + '([^\s<>"\'\[\]/\#?@]*)' . // 2: Userinfo (Username and/or password) | |
29 | 33 | '@)?' . |
30 | 34 | '(' . |
31 | 35 | // 3: Host |
@@ -34,7 +38,7 @@ function uri_pickup($string = '') | ||
34 | 38 | '[a-z0-9_-][a-z0-9_.-]+[a-z0-9_-]' . // hostname(FQDN) : foo.example.org |
35 | 39 | ')' . |
36 | 40 | '(?::([0-9]*))?' . // 4: Port |
37 | - '((?:/+[^\s<>"\'\[\]/\#]+)*/+)?' . // 5: Directory path or path-info | |
41 | + '((?:/+[^\s<>"\'\[\]/\#?]+)*/+)?' . // 5: Directory path | |
38 | 42 | '([^\s<>"\'\[\]\#?]+)?' . // 6: File? |
39 | 43 | '(?:\?([^\s<>"\'\[\]\#]+))?' . // 7: Query string |
40 | 44 | '(?:\#([a-z0-9._~%!$&\'()*+,;=:@-]*))?' . // 8: Fragment |
@@ -42,18 +46,18 @@ function uri_pickup($string = '') | ||
42 | 46 | $string, $array, PREG_SET_ORDER | PREG_OFFSET_CAPTURE |
43 | 47 | ); |
44 | 48 | |
45 | - // Format the $array | |
49 | + // Reformat the $array | |
46 | 50 | static $parts = array( |
47 | 51 | 1 => 'scheme', 2 => 'userinfo', 3 => 'host', 4 => 'port', |
48 | 52 | 5 => 'path', 6 => 'file', 7 => 'query', 8 => 'fragment' |
49 | 53 | ); |
50 | - $default = array(''); | |
54 | + $default = array(0 => '', 1 => -1); | |
51 | 55 | foreach(array_keys($array) as $uri) { |
52 | 56 | $_uri = & $array[$uri]; |
53 | 57 | array_rename_keys($_uri, $parts, TRUE, $default); |
54 | 58 | $offset = $_uri['scheme'][1]; // Scheme's offset = URI's offset |
55 | 59 | foreach(array_keys($_uri) as $part) { |
56 | - $_uri[$part] = & $_uri[$part][0]; // Remove offsets | |
60 | + $_uri[$part] = $_uri[$part][0]; // Remove offsets | |
57 | 61 | } |
58 | 62 | } |
59 | 63 |
@@ -86,27 +90,43 @@ function uri_pickup_implode($uri = array()) | ||
86 | 90 | $tmp[] = & $uri['scheme']; |
87 | 91 | $tmp[] = '://'; |
88 | 92 | } |
93 | + | |
89 | 94 | if (isset($uri['userinfo']) && $uri['userinfo'] !== '') { |
90 | 95 | $tmp[] = & $uri['userinfo']; |
91 | 96 | $tmp[] = '@'; |
97 | + } else if (isset($uri['user']) || isset($uri['pass'])) { | |
98 | + if (isset($uri['user']) && $uri['user'] !== '') { | |
99 | + $tmp[] = & $uri['user']; | |
100 | + } | |
101 | + $tmp[] = ':'; | |
102 | + if (isset($uri['pass']) && $uri['pass'] !== '') { | |
103 | + $tmp[] = & $uri['pass']; | |
104 | + } | |
105 | + $tmp[] = '@'; | |
92 | 106 | } |
107 | + | |
93 | 108 | if (isset($uri['host']) && $uri['host'] !== '') { |
94 | 109 | $tmp[] = & $uri['host']; |
95 | 110 | } |
111 | + | |
96 | 112 | if (isset($uri['port']) && $uri['port'] !== '') { |
97 | 113 | $tmp[] = ':'; |
98 | 114 | $tmp[] = & $uri['port']; |
99 | 115 | } |
116 | + | |
100 | 117 | if (isset($uri['path']) && $uri['path'] !== '') { |
101 | 118 | $tmp[] = & $uri['path']; |
102 | 119 | } |
120 | + | |
103 | 121 | if (isset($uri['file']) && $uri['file'] !== '') { |
104 | 122 | $tmp[] = & $uri['file']; |
105 | 123 | } |
124 | + | |
106 | 125 | if (isset($uri['query']) && $uri['query'] !== '') { |
107 | 126 | $tmp[] = '?'; |
108 | 127 | $tmp[] = & $uri['query']; |
109 | 128 | } |
129 | + | |
110 | 130 | if (isset($uri['fragment']) && $uri['fragment'] !== '') { |
111 | 131 | $tmp[] = '#'; |
112 | 132 | $tmp[] = & $uri['fragment']; |
@@ -115,12 +135,13 @@ function uri_pickup_implode($uri = array()) | ||
115 | 135 | return implode('', $tmp); |
116 | 136 | } |
117 | 137 | |
138 | + | |
118 | 139 | // --------------------- |
119 | 140 | // URI normalization |
120 | 141 | |
121 | 142 | // Normalize an array of URI arrays |
122 | 143 | // NOTE: Give me the uri_pickup() results |
123 | -function uri_pickup_normalize(& $pickups, $destructive = TRUE) | |
144 | +function uri_pickup_normalize(& $pickups, $destructive = TRUE, $pathfile = FALSE) | |
124 | 145 | { |
125 | 146 | if (! is_array($pickups)) return $pickups; |
126 | 147 |
@@ -145,6 +166,28 @@ function uri_pickup_normalize(& $pickups, $destructive = TRUE) | ||
145 | 166 | } |
146 | 167 | } |
147 | 168 | |
169 | + if ($pathfile) { | |
170 | + return uri_pickup_normalize_pathfile($pickups); | |
171 | + } else { | |
172 | + return $pickups; | |
173 | + } | |
174 | +} | |
175 | + | |
176 | +// Normalize: 'path' + 'file' = 'path' (Similar structure using PHP's "parse_url()" function) | |
177 | +// NOTE: In some case, 'file' DOES NOT mean _filename_. | |
178 | +// [EXAMPLE] http://example.com/path/to/directory-accidentally-not-ended-with-slash | |
179 | +function uri_pickup_normalize_pathfile(& $pickups) | |
180 | +{ | |
181 | + if (! is_array($pickups)) return $pickups; | |
182 | + | |
183 | + foreach (array_keys($pickups) as $key) { | |
184 | + $_key = & $pickups[$key]; | |
185 | + if (isset($_key['path'], $_key['file'])) { | |
186 | + $_key['path'] = $_key['path'] . $_key['file']; | |
187 | + unset($_key['file']); | |
188 | + } | |
189 | + } | |
190 | + | |
148 | 191 | return $pickups; |
149 | 192 | } |
150 | 193 |
@@ -188,13 +231,14 @@ function scheme_normalize($scheme = '', $abbrevs_harmfull = TRUE) | ||
188 | 231 | // www.foo.bar => foo.bar |
189 | 232 | // www.10.20 => www.10.20 (Invalid hostname) |
190 | 233 | // NOTE: |
191 | -// 'www' is mostly used as traditional hostname of WWW server. | |
192 | -// 'www.foo.bar' may be identical with 'foo.bar'. | |
234 | +// 'www' is basically traditional hostname for WWW server. | |
235 | +// In these case, 'www.foo.bar' MAY be identical with 'foo.bar'. | |
193 | 236 | function host_normalize($host = '') |
194 | 237 | { |
195 | 238 | if (! is_string($host)) return ''; |
196 | 239 | |
197 | 240 | $host = strtolower($host); |
241 | + | |
198 | 242 | $matches = array(); |
199 | 243 | if (preg_match('/^www\.(.+\.[a-z]+)$/', $host, $matches)) { |
200 | 244 | return $matches[1]; |
@@ -693,6 +737,9 @@ function spam_uri_pickup_preprocess($string = '', $method = array()) | ||
693 | 737 | $string = preg_replace( |
694 | 738 | '#h?ttp://' . |
695 | 739 | '(' . |
740 | + 'a9\.com/' . '|' . | |
741 | + 'aboutus\.org/' . '|' . | |
742 | + 'alexa\.com/data/details\?url=' . '|' . | |
696 | 743 | 'ime\.(?:nu|st)/' . '|' . // 2ch.net |
697 | 744 | 'link\.toolbot\.com/' . '|' . |
698 | 745 | 'urlx\.org/' . '|' . |
@@ -729,7 +776,8 @@ function spam_uri_pickup_preprocess($string = '', $method = array()) | ||
729 | 776 | // ... |
730 | 777 | ')' . |
731 | 778 | '/' . |
732 | - '([a-z0-9?=&.%_/\'\\\+-]+)' . // 3:path/?query=foo+bar+ | |
779 | + //TODO: Specify URL-enable characters | |
780 | + '([a-z0-9?=&.,%_/\'\\\+-]+)' . // 3:path/?query=foo+bar+ | |
733 | 781 | '(?:\b|%20)site:([a-z0-9.%_-]+\.[a-z0-9.%_-]+)' . // 4:site:nasty.example.com |
734 | 782 | '()' . // 5:Preserve or remove? |
735 | 783 | '#i', |
@@ -787,10 +835,83 @@ function spam_uri_pickup($string = '', $method = array()) | ||
787 | 835 | } |
788 | 836 | |
789 | 837 | // Remove 'offset's for area_measure() |
790 | - foreach(array_keys($array) as $key) | |
838 | + foreach(array_keys($array) as $key) { | |
791 | 839 | unset($array[$key]['area']['offset']); |
840 | + } | |
792 | 841 | |
793 | 842 | return $array; |
794 | 843 | } |
795 | 844 | |
845 | +// Rough hostname checker | |
846 | +// TODO: Strict digit, 0x, CIDR, '999.999.999.999', ':', '::G' | |
847 | +function is_ip($string = '') | |
848 | +{ | |
849 | + if (! is_string($string)) return FALSE; | |
850 | + | |
851 | + if (strpos($string, ':') !== FALSE) { | |
852 | + return 6; // Seems IPv6 | |
853 | + } | |
854 | + | |
855 | + if (preg_match('/^' . | |
856 | + '(?:[0-9]{1,3}\.){3}[0-9]{1,3}' . '|' . | |
857 | + '(?:[0-9]{1,3}\.){1,3}' . '$/', | |
858 | + $string)) { | |
859 | + return 4; // Seems IPv4(dot-decimal) | |
860 | + } | |
861 | + | |
862 | + return FALSE; // Seems not IP | |
863 | +} | |
864 | + | |
865 | +// Check responsibility-root of the FQDN | |
866 | +// 'foo.bar.example.com' => 'example.com' (.com has the last whois for it) | |
867 | +// 'foo.bar.example.au' => 'example.au' (.au has the last whois for it) | |
868 | +// 'foo.bar.example.edu.au' => 'example.edu.au' (.edu.au has the last whois for it) | |
869 | +// 'foo.bar.example.act.edu.au' => 'example.act.edu.au' (.act.edu.au has the last whois for it) | |
870 | +function whois_responsibility($fqdn = 'foo.bar.example.com', $parent = FALSE, $implicit = TRUE) | |
871 | +{ | |
872 | + static $domain; | |
873 | + | |
874 | + if ($fqdn === NULL) { | |
875 | + $domain = NULL; // Unset | |
876 | + return ''; | |
877 | + } | |
878 | + if (! is_string($fqdn)) return ''; | |
879 | + | |
880 | + if (is_ip($fqdn)) return $fqdn; | |
881 | + | |
882 | + if (! isset($domain)) { | |
883 | + $domain = array(); | |
884 | + if (file_exists(DOMAIN_INI_FILE)) { | |
885 | + include(DOMAIN_INI_FILE); // Set | |
886 | + } | |
887 | + } | |
888 | + | |
889 | + $result = array(); | |
890 | + $dcursor = & $domain; | |
891 | + $array = array_reverse(explode('.', $fqdn)); | |
892 | + $i = 0; | |
893 | + while(TRUE) { | |
894 | + if (! isset($array[$i])) break; | |
895 | + $acursor = $array[$i]; | |
896 | + if (is_array($dcursor) && isset($dcursor[$acursor])) { | |
897 | + $result[] = & $array[$i]; | |
898 | + $dcursor = & $dcursor[$acursor]; | |
899 | + } else { | |
900 | + if (! $parent && isset($acursor)) { | |
901 | + $result[] = & $array[$i]; // Whois servers must know this subdomain | |
902 | + } | |
903 | + break; | |
904 | + } | |
905 | + ++$i; | |
906 | + } | |
907 | + | |
908 | + // Implicit responsibility: Top-Level-Domains must not be yours | |
909 | + // 'bar.foo.something' => 'foo.something' | |
910 | + if ($implicit && count($result) == 1 && count($array) > 1) { | |
911 | + $result[] = & $array[1]; | |
912 | + } | |
913 | + | |
914 | + return $result ? implode('.', array_reverse($result)) : ''; | |
915 | +} | |
916 | + | |
796 | 917 | ?> |
@@ -1,5 +1,5 @@ | ||
1 | 1 | <?php |
2 | -// $Id: spam.ini.php,v 1.75.2.2 2007-09-24 16:01:10 henoheno Exp $ | |
2 | +// $Id: spam.ini.php,v 1.75.2.3 2011-01-24 15:34:39 henoheno Exp $ | |
3 | 3 | // Spam-related setting |
4 | 4 | |
5 | 5 | // NOTE FOR ADMINISTRATORS: |
@@ -41,13 +41,14 @@ | ||
41 | 41 | // 'pre': Before the other filters/checkers |
42 | 42 | $blocklist['pre'] = array( |
43 | 43 | 'goodhost' => FALSE, |
44 | +// 'official/dev' => FALSE, | |
44 | 45 | ); |
45 | 46 | |
46 | 47 | // 'list': Normal list |
47 | 48 | $blocklist['list'] = array( |
48 | 49 | 'A-1' => TRUE, // General redirection services |
49 | 50 | //'A-2' => TRUE, // Dynamic DNS, Dynamic IP services, ... |
50 | - 'B-1' => TRUE, // Web spaces | |
51 | + 'B-1' => TRUE, // Web N.M spaces | |
51 | 52 | 'B-2' => TRUE, // Jacked contents, something implanted |
52 | 53 | 'C' => TRUE, // Exclusive spam domains |
53 | 54 | //'D' => TRUE, // "Third party in good faith"s |
@@ -57,36 +58,32 @@ $blocklist['list'] = array( | ||
57 | 58 | |
58 | 59 | |
59 | 60 | // -------------------------------------------------- |
61 | +// Ignorance list | |
60 | 62 | |
61 | 63 | $blocklist['goodhost'] = array( |
62 | - // Sample setting of ignorance list | |
63 | - | |
64 | 64 | 'IANA-examples' => '#^(?:.*\.)?example\.(?:com|net|org)$#', |
65 | +); | |
65 | 66 | |
67 | +$blocklist['official/dev'] = array( | |
66 | 68 | // PukiWiki-official/dev specific |
67 | - //'pukiwiki.sourceforge.jp', | |
68 | - //'pukiwiki.org', // Temporary | |
69 | - //'.logue.tk', // Well-known PukiWiki heavy user, Logue (Paid *.tk domain, Expire on 2008-12-01) | |
70 | - //'.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) | |
71 | - //'.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk | |
72 | - //'emasaka.blog65.fc2.com', // Text-to-Impress converter | |
73 | - //'ifastnet.com', // Server hosting | |
74 | - //'threefortune.ifastnet.com', // Server hosting | |
75 | - | |
76 | - // Yours | |
77 | - //'' | |
78 | - //'' | |
79 | - //'' | |
80 | - | |
69 | + 'pukiwiki.sourceforge.jp', | |
70 | + '.nyaa.tk', // (Paid *.tk domain, Expire on 2008-05-19) | |
71 | + '.wanwan.tk', // (Paid *.tk domain, Expire on 2008-04-21) by nyaa.tk | |
72 | + 'emasaka.blog65.fc2.com', // Text-to-Impress converter | |
73 | + 'ifastnet.com', // Server hosting | |
74 | + 'threefortune.ifastnet.com', // Server hosting | |
75 | + 'sirakaba.s21.xrea.com', // Ratbeta, known as PukiWiki hacker | |
76 | + 'desperadoes.biz', // YEAR OF THE CAT, PukiWiki skin designer | |
81 | 77 | ); |
82 | 78 | |
79 | + | |
83 | 80 | // -------------------------------------------------- |
84 | 81 | // A: Sample setting of |
85 | 82 | // Existing URI redirection or masking services |
86 | 83 | |
87 | 84 | $blocklist['A-1'] = array( |
88 | 85 | |
89 | - // A-1: General redirection services -- by HTML meta, HTML frame, JavaScript, | |
86 | + // A-1: General redirection or masking services -- by HTML meta, HTML frame, JavaScript, | |
90 | 87 | // web-based proxy, DNS subdomains, etc |
91 | 88 | // http://en.wikipedia.org/wiki/URL_redirection |
92 | 89 | // |
@@ -94,15 +91,30 @@ $blocklist['A-1'] = array( | ||
94 | 91 | // for spammers and affiliate users dazed by money. |
95 | 92 | // |
96 | 93 | // Messages from forerunners: |
94 | + // idek.net | |
95 | + // "..., idek will stop accepting requests to | |
96 | + // create new urls. " | |
97 | 97 | // o-rly.net |
98 | 98 | // "A URL REDIRECTION SERVICE GONE BAD" |
99 | 99 | // "SORRY, TRULY" |
100 | 100 | // smcurl.com |
101 | 101 | // "Idiots were using smcURL to shrink URLs and |
102 | 102 | // send them out via spam." |
103 | + // symy.jp | |
104 | + // "One or more users are using our URL redirect | |
105 | + // service for spam/botnet. | |
106 | + // So we closed this service." | |
103 | 107 | // tinyclick.com |
104 | 108 | // "...stop offering it's free services because |
105 | 109 | // too many people were taking advantage of it" |
110 | + // tr.im | |
111 | + // "The decision is based on waving the white | |
112 | + // flag on a never ending battle with spammers | |
113 | + // that relentlessly abuse tr.im." | |
114 | + // u.nu | |
115 | + // "Since the beginning, it has been plagued | |
116 | + // with abuse from spammers and other | |
117 | + // no-goodniks." | |
106 | 118 | // xjs.org |
107 | 119 | // "We have been forced to close this facility |
108 | 120 | // due to a minority of knuckle draggers who |
@@ -129,6 +141,7 @@ $blocklist['A-1'] = array( | ||
129 | 141 | '1url.org', |
130 | 142 | '1url.in', |
131 | 143 | '1webspace.org', |
144 | + '2am.jp', | |
132 | 145 | '2Ch.net' => array( |
133 | 146 | 'ime.nu', |
134 | 147 | 'ime.st', |
@@ -173,6 +186,7 @@ $blocklist['A-1'] = array( | ||
173 | 186 | '*.ovp.pl', |
174 | 187 | '*.6-6-6.pl', |
175 | 188 | ), |
189 | + 'babelfish.altavista.com', ///babelfish/trurl_pagecontent | |
176 | 190 | 'amoo.org', |
177 | 191 | 'web.archive.org', ///web/2 |
178 | 192 | 'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net |
@@ -189,11 +203,16 @@ $blocklist['A-1'] = array( | ||
189 | 203 | 'athomebiz.com', |
190 | 204 | 'aukcje1.pl', |
191 | 205 | 'beam.to', |
206 | + '*.bebo.com', | |
192 | 207 | 'beermapping.com', |
193 | 208 | 'besturl.in', |
194 | 209 | 'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com |
195 | 210 | 'biglnk.com', |
196 | 211 | 'bingr.com', |
212 | + 'bit.ly' => array( | |
213 | + 'bit.ly', | |
214 | + 'j.mp', | |
215 | + ), | |
197 | 216 | 'bittyurl.com', |
198 | 217 | '*.bizz.cc', |
199 | 218 | '*.blo.pl', |
@@ -212,6 +231,7 @@ $blocklist['A-1'] = array( | ||
212 | 231 | ), |
213 | 232 | 'budgethosts.org', |
214 | 233 | 'budu.com', // by peter.eder at imcworld.com |
234 | + 'budurl.com', | |
215 | 235 | '*.buzznet.com', |
216 | 236 | '*.bydl.com', |
217 | 237 | 'C-O.IN' => array( |
@@ -232,6 +252,7 @@ $blocklist['A-1'] = array( | ||
232 | 252 | 'christopherleestreet.com', |
233 | 253 | 'cintcm.com', |
234 | 254 | '*.cjb.net', |
255 | + 'cli.gs', | |
235 | 256 | 'clipurl.com', |
236 | 257 | '*.co.nr', |
237 | 258 | 'Comtech Enterprises ' => array( // comteche.com |
@@ -251,6 +272,7 @@ $blocklist['A-1'] = array( | ||
251 | 272 | 'hardcore-porn.de', |
252 | 273 | 'maschinen-bluten-nicht.de', |
253 | 274 | ), |
275 | + 'copyme.org', // 80.93.82.40(sd14.efedus.com) by marian at mpgsi.com | |
254 | 276 | 'cutalink.com', |
255 | 277 | '*.da.cx', |
256 | 278 | '*.da.ru', |
@@ -278,7 +300,12 @@ $blocklist['A-1'] = array( | ||
278 | 300 | '*.dynu.ca', |
279 | 301 | 'dwarf.name', |
280 | 302 | '*.eadf.com', |
281 | - '*.easyurl.net', | |
303 | + 'easyURL.net' => array( | |
304 | + '*.easyurl.net', | |
305 | + '.goshrink.com', | |
306 | + 'ushrink.com', | |
307 | + ), | |
308 | + '.eazylink.net', // 2010/08 by info at digitalinsights.biz | |
282 | 309 | 'easyurl.jp', // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com, |
283 | 310 | // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45 |
284 | 311 | // This service seems to be opened at 2007/08/23 with "beta" sign. |
@@ -431,15 +458,19 @@ $blocklist['A-1'] = array( | ||
431 | 458 | '*.globalredirect.com', |
432 | 459 | 'gnu.vu', |
433 | 460 | '*.go.cc', |
434 | - //'Google.com' => array( | |
461 | + 'Google.com' => array( | |
435 | 462 | // google.com/translate_c\?u=(?:http://)? |
436 | - //), | |
463 | + 'goo.gl', // by (dns-admin at google.com) | |
464 | + ), | |
437 | 465 | 'goonlink.com', |
438 | 466 | '.gourl.org', |
439 | 467 | '.greatitem.com', |
440 | 468 | 'gzurl.com', |
441 | 469 | 'url.grillsportverein.de', |
442 | 470 | 'Harudake.net' => array('*.hyu.jp'), |
471 | + 'hatena.ne.jp related' => array( | |
472 | + 'htn.to', // 2010-09 59.106.108.106 (hatena.ne.jp is 59.106.108.106) | |
473 | + ), | |
443 | 474 | 'Hattinger Linux User Group' => array('short.hatlug.de'), |
444 | 475 | 'Hexten.net' => array('lyxus.net'), |
445 | 476 | 'here.is', |
@@ -480,6 +511,10 @@ $blocklist['A-1'] = array( | ||
480 | 511 | 'iat.net', // 74.208.58.130 by Tony Carter |
481 | 512 | 'ibm.com', ///links (Correct it) |
482 | 513 | '*.iceglow.com', |
514 | + 'internetadresi.com' => array ( | |
515 | + 'rxbuycheap.com', | |
516 | + 'rxcheapwestern.com', | |
517 | + ), | |
483 | 518 | 'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info) |
484 | 519 | 'Ideas para Nuevos Mercados SL' => array( |
485 | 520 | // NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com) |
@@ -598,6 +633,7 @@ $blocklist['A-1'] = array( | ||
598 | 633 | '.iwebtool.com', |
599 | 634 | 'j6.bz', |
600 | 635 | 'jeeee.net', |
636 | + 'is.gd', | |
601 | 637 | 'Jaze Redirect Services' => array( |
602 | 638 | '*.arecool.net', |
603 | 639 | '*.iscool.net', |
@@ -847,6 +883,7 @@ $blocklist['A-1'] = array( | ||
847 | 883 | 'linkezy.com', |
848 | 884 | 'linkfrog.net', |
849 | 885 | 'linkook.com', |
886 | + 'linkyme.com', | |
850 | 887 | 'linkzip.net', |
851 | 888 | 'lispurl.com', |
852 | 889 | 'lnk.in', |
@@ -879,6 +916,7 @@ $blocklist['A-1'] = array( | ||
879 | 916 | ), |
880 | 917 | 'monster-submit.com', |
881 | 918 | 'mooo.jp', |
919 | + 'moourl.com', | |
882 | 920 | 'murl.net', |
883 | 921 | 'myactivesurf.net', |
884 | 922 | 'mytinylink.com', |
@@ -897,11 +935,13 @@ $blocklist['A-1'] = array( | ||
897 | 935 | '*.ontheinter.net', |
898 | 936 | 'ourl.org', |
899 | 937 | 'ov2.net', // frame |
938 | + 'ow.ly', | |
900 | 939 | '*.ozonez.com', |
901 | 940 | 'pagebang.com', |
902 | 941 | 'palurl.com', |
903 | 942 | '*.paulding.net', |
904 | 943 | 'phpfaber.org', |
944 | + 'pygmyurl.com', | |
905 | 945 | 'pnope.com', |
906 | 946 | 'prettylink.com', |
907 | 947 | 'PROXID.net' => array( // also xRelay.net |
@@ -912,6 +952,7 @@ $blocklist['A-1'] = array( | ||
912 | 952 | '*.site.tc', |
913 | 953 | '*.societe.st', |
914 | 954 | ), |
955 | + 'qqa.jp', | |
915 | 956 | 'qrl.jp', |
916 | 957 | 'qurl.net', |
917 | 958 | 'qwer.org', |
@@ -933,6 +974,7 @@ $blocklist['A-1'] = array( | ||
933 | 974 | 'rio.st', |
934 | 975 | 'rlink.org', |
935 | 976 | '*.rmcinfo.fr', |
977 | + 'roo.to', // Seems closed, says "bye-bye" | |
936 | 978 | 'rubyurl.com', |
937 | 979 | '*.runboard.com', |
938 | 980 | 'runurl.com', |
@@ -1028,11 +1070,15 @@ $blocklist['A-1'] = array( | ||
1028 | 1070 | 'slink.in', |
1029 | 1071 | 'smallurl.eu', |
1030 | 1072 | 'smurl.name', |
1073 | + 'sn.im', | |
1031 | 1074 | 'snipurl.com', |
1032 | 1075 | 'sp-nov.net', |
1033 | 1076 | 'splashblog.com', |
1034 | 1077 | 'spod.cx', |
1035 | 1078 | '*.spydar.com', |
1079 | + 'StumbleUpon.com' => array( | |
1080 | + 'su.pr', // by (hostmaster at stumbleupon.com) | |
1081 | + ), | |
1036 | 1082 | 'Subdomain.gr' => array( |
1037 | 1083 | '*.p2p.gr', |
1038 | 1084 | '*.subdomain.gr', |
@@ -1040,7 +1086,6 @@ $blocklist['A-1'] = array( | ||
1040 | 1086 | 'SURL.DK' => array('surl.dk'), // main page is: s-url.dk |
1041 | 1087 | 'surl.se', |
1042 | 1088 | 'surl.ws', |
1043 | - 'symy.jp', | |
1044 | 1089 | 'tdurl.com', |
1045 | 1090 | 'tighturl.com', |
1046 | 1091 | 'tiniuri.com', |
@@ -1059,6 +1104,7 @@ $blocklist['A-1'] = array( | ||
1059 | 1104 | 'titlien.com', |
1060 | 1105 | '*.tlg.pl', |
1061 | 1106 | 'tlurl.com', |
1107 | + 'twurl.nl', // 2010-09 87.255.53.196 (redirects tweetburner.com 87.255.53.196) | |
1062 | 1108 | 'link.toolbot.com', |
1063 | 1109 | 'tnij.org', |
1064 | 1110 | 'Tokelau ccTLD' => array('.tk'), |
@@ -1066,8 +1112,12 @@ $blocklist['A-1'] = array( | ||
1066 | 1112 | '*.toolbot.com', |
1067 | 1113 | '*.torontonian.com', |
1068 | 1114 | 'trimurl.com', |
1069 | - 'ttu.cc', | |
1115 | + //'ttu.cc', // Seems closed | |
1070 | 1116 | 'turl.jp', |
1117 | + 'Twitter.com' => array( | |
1118 | + 't.co', // by (cofounders at cointernet.co) | |
1119 | + 'twt.tl', | |
1120 | + ), | |
1071 | 1121 | '*.tz4.com', |
1072 | 1122 | 'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master |
1073 | 1123 | '*.1.to', |
@@ -1098,6 +1148,7 @@ $blocklist['A-1'] = array( | ||
1098 | 1148 | '*.ever.to', |
1099 | 1149 | '*.mini.to', |
1100 | 1150 | ), |
1151 | + 'u-go.to', | |
1101 | 1152 | 'uchinoko.in', |
1102 | 1153 | 'Ulimit.com' => array( |
1103 | 1154 | '*.be.tf', |
@@ -1127,6 +1178,7 @@ $blocklist['A-1'] = array( | ||
1127 | 1178 | '*.unixlover.com', |
1128 | 1179 | '*.zik.mu', |
1129 | 1180 | ), |
1181 | + 'urltea.com', | |
1130 | 1182 | '*.uni.cc', |
1131 | 1183 | 'UNONIC.com' => array( |
1132 | 1184 | '*.at.tf', // AlpenNIC |
@@ -1182,12 +1234,14 @@ $blocklist['A-1'] = array( | ||
1182 | 1234 | ), |
1183 | 1235 | '*.urlproxy.com', |
1184 | 1236 | 'urlser.com', |
1237 | + 'urlshorteningservicefortwitter.com', | |
1185 | 1238 | 'urlsnip.com', |
1186 | 1239 | 'urlzip.de', |
1187 | 1240 | 'urlx.org', |
1188 | 1241 | 'useurl.us', // by Edward Beauchamp (mail at ebvk.com) |
1189 | 1242 | 'utun.jp', |
1190 | 1243 | 'uxxy.com', |
1244 | + 'uzo.in', // 2010-09 redirects, and subdomain | |
1191 | 1245 | '*.v27.net', |
1192 | 1246 | 'V3.com by FortuneCity.com' => array( // http://www.v3.com/sub-domain-list.shtml |
1193 | 1247 | '*.all.at', |
@@ -1361,13 +1415,19 @@ $blocklist['A-1'] = array( | ||
1361 | 1415 | ), |
1362 | 1416 | '*.xshorturl.com', // by Markus Lee (soul_s at list.ru) |
1363 | 1417 | '.y11.net', |
1418 | + 'Yahoo.co.jp' => array( | |
1419 | + 'wrs.search.yahoo.co.jp', | |
1420 | + ), | |
1421 | + 'Yahoo.com' => array( | |
1422 | + 'rds.yahoo.com', | |
1423 | + ), | |
1424 | + 'yatuc.com', | |
1425 | + 'yep.it', | |
1364 | 1426 | 'YESNS.com' => array( // by Jae-Hwan Kwon (kwonjhpd at kornet.net) |
1365 | 1427 | '*.yesns.com', |
1366 | 1428 | '*.srv4u.net', |
1367 | 1429 | //blogne.com |
1368 | 1430 | ), |
1369 | - 'yatuc.com', | |
1370 | - 'yep.it', | |
1371 | 1431 | 'yumlum.com', |
1372 | 1432 | 'yurel.com', |
1373 | 1433 | 'Z.la' => array( |
@@ -1483,7 +1543,7 @@ $blocklist['A-2'] = array( | ||
1483 | 1543 | |
1484 | 1544 | $blocklist['B-1'] = array( |
1485 | 1545 | |
1486 | - // B-1: Web spaces | |
1546 | + // B-1: Web N.M spaces (N > 0, M >= 0) | |
1487 | 1547 | // |
1488 | 1548 | // Messages from forerunners: |
1489 | 1549 | // activefreehost.com |
@@ -1494,20 +1554,28 @@ $blocklist['B-1'] = array( | ||
1494 | 1554 | // to take time for software improvement to fight |
1495 | 1555 | // with server abuse, Spam advertisement and |
1496 | 1556 | // fraud." |
1557 | + // wsboards.com | |
1558 | + // had been removed due to spam (noticed by its domain owner) | |
1497 | 1559 | // |
1498 | 1560 | '*.0000host.com', // 68.178.200.154, ns *.3-hosting.net |
1499 | 1561 | '*.007ihost.com', // 195.242.99.199(s199.softwarelibre.nl) |
1562 | + '*.007webpro.com', // by richord at ientry.com | |
1500 | 1563 | '*.00bp.com', // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com |
1564 | + '*.0buckhost.com', // by tycho at e-lab.nl | |
1501 | 1565 | '0Catch.com related' => array( |
1502 | 1566 | '*.0catch.com', // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com |
1503 | 1567 | |
1504 | - // 209.63.57.10(www1.0catch.com) by dan at 0catch.com, ns *.0catch.com | |
1568 | + // 209.63.57.10(www1.0catch.com) by owner at 100megswebhosting.com, ns *.0catch.com | |
1569 | + '*.100megsfree5.com', | |
1570 | + | |
1571 | + // 209.63.57.10(*snip*) by dan at 0catch.com, ns *.0catch.com | |
1505 | 1572 | '*.100freemb.com', // by Danny Ashworth |
1573 | + '*.easyfreehosting.com', | |
1506 | 1574 | '*.exactpages.com', |
1507 | 1575 | '*.fcpages.com', |
1508 | 1576 | '*.wtcsites.com', |
1509 | 1577 | |
1510 | - // 209.63.57.10(www1.0catch.com) by domains at netgears.com, ns *.0catch.com | |
1578 | + // 209.63.57.10(*snip*) by domains at netgears.com, ns *.0catch.com | |
1511 | 1579 | '*.741.com', |
1512 | 1580 | '*.freecities.com', |
1513 | 1581 | '*.freesite.org', |
@@ -1515,15 +1583,15 @@ $blocklist['B-1'] = array( | ||
1515 | 1583 | '*.freewebsitehosting.com', |
1516 | 1584 | '*.jvl.com', |
1517 | 1585 | |
1518 | - // 209.63.57.10(www1.0catch.com) by luke at dcpages.com, ns *.0catch.com | |
1586 | + // 209.63.57.10(*snip*) by luke at dcpages.com, ns *.0catch.com | |
1519 | 1587 | '*.freespaceusa.com', |
1520 | 1588 | '*.usafreespace.com', |
1521 | 1589 | |
1522 | - // 209.63.57.10(www1.0catch.com) by rickybrown at usa.com, ns *.0catch.com | |
1590 | + // 209.63.57.10(*snip*) by rickybrown at usa.com, ns *.0catch.com | |
1523 | 1591 | '*.dex1.com', |
1524 | 1592 | '*.questh.com', |
1525 | 1593 | |
1526 | - // 209.63.57.10(www1.0catch.com), ns *.0catch.com | |
1594 | + // 209.63.57.10(*snip*), ns *.0catch.com | |
1527 | 1595 | '*.00freehost.com', // by David Mccall (superjeeves at yahoo.com) |
1528 | 1596 | '*.012webpages.com', // by support at 0catch.com |
1529 | 1597 | '*.150m.com', |
@@ -1579,6 +1647,7 @@ $blocklist['B-1'] = array( | ||
1579 | 1647 | '*.20me.com', |
1580 | 1648 | ), |
1581 | 1649 | '*.100foros.com', |
1650 | + '*.101freehost.com', | |
1582 | 1651 | '*.12gbfree.com', // 75.126.176.194 by ashphama at yahoo.com |
1583 | 1652 | '20six Weblog Services' => array( |
1584 | 1653 | '.20six.nl', // by 20six weblog services (postmaster at 20six.nl) |
@@ -1589,6 +1658,105 @@ $blocklist['B-1'] = array( | ||
1589 | 1658 | ), |
1590 | 1659 | '*.250free.com', // by Brian Salisbury (domains at 250host.com) |
1591 | 1660 | '*.275mb.com', // 204.15.10.144 by domains at febox.com |
1661 | + '2IP.com' => array( | |
1662 | + // 205.209.97.53(non-existent) by Host Department LLC (registrar at hostdepartment.com) | |
1663 | + '*.2ip.jp', | |
1664 | + '*.474.jp', | |
1665 | + '*.consensus.jp', | |
1666 | + '*.desyo.jp', | |
1667 | + '*.dif.jp', | |
1668 | + '*.pastels.jp', | |
1669 | + '*.powerblogger.jp', | |
1670 | + '*.vippers.jp', | |
1671 | + '*.webpages.jp', | |
1672 | + | |
1673 | + // 205.209.97.56(non-existent) | |
1674 | + '*.biografi.biz', | |
1675 | + '*.biografi.info', | |
1676 | + '*.biografi.org', | |
1677 | + '*.biografi.us', | |
1678 | + '*.datadiri.biz', | |
1679 | + '*.datadiri.cc', | |
1680 | + '*.datadiri.com', | |
1681 | + '*.datadiri.info', | |
1682 | + '*.datadiri.net', | |
1683 | + '*.datadiri.org', | |
1684 | + '*.datadiri.tv', | |
1685 | + '*.datadiri.us', | |
1686 | + '*.indo.bz', | |
1687 | + '*.indo.cc', | |
1688 | + '*.profil.bz', | |
1689 | + '*.profil.cc', | |
1690 | + '*.profil.cn', | |
1691 | + '*.profil.in', | |
1692 | + '*.profil.tv', | |
1693 | + | |
1694 | + // 205.209.101.47(non-existent) | |
1695 | + '*.about.tc', | |
1696 | + '*.about.vg', | |
1697 | + '*.aboutus.gs', | |
1698 | + '*.aboutus.ms', | |
1699 | + '*.aboutus.tc', | |
1700 | + '*.aboutus.vg', | |
1701 | + '*.band.io', | |
1702 | + '*.beijing.am', | |
1703 | + '*.blogs.io', | |
1704 | + '*.boke.am', | |
1705 | + '*.clan.io', | |
1706 | + '*.ecv.gs', | |
1707 | + '*.ecv.ms', | |
1708 | + '*.ecv.vg', | |
1709 | + '*.freekong.cn', | |
1710 | + '*.go2net.ws', | |
1711 | + '*.hello.cn.com', | |
1712 | + '*.hello.io', | |
1713 | + '*.hits.io', | |
1714 | + '*.hostingweb.us', | |
1715 | + '*.hub.io', | |
1716 | + '*.ide.am', | |
1717 | + '*.inc.io', | |
1718 | + '*.incn.in', | |
1719 | + '*.indo.gs', | |
1720 | + '*.indo.ms', | |
1721 | + '*.indo.tc', | |
1722 | + '*.indo.vg', | |
1723 | + '*.infinitehosting.net', | |
1724 | + '*.infinites.net', | |
1725 | + '*.jushige.cn', | |
1726 | + '*.jushige.com', | |
1727 | + '*.kongjian.in', | |
1728 | + '*.lan.io', | |
1729 | + '*.llc.nu', | |
1730 | + '*.maimai.in', | |
1731 | + '*.max.io', | |
1732 | + '*.musician.io', | |
1733 | + '*.mycv.bz', | |
1734 | + '*.mycv.nu', | |
1735 | + '*.mycv.tv', | |
1736 | + '*.myweb.io', | |
1737 | + '*.ourprofile.biz', | |
1738 | + '*.ourprofile.info', | |
1739 | + '*.ourprofile.net', | |
1740 | + '*.ourprofile.org', | |
1741 | + '*.ourprofile.us', | |
1742 | + '*.profil.gs', | |
1743 | + '*.profil.ms', | |
1744 | + '*.profil.tc', | |
1745 | + '*.qiye.in', | |
1746 | + '*.site.io', | |
1747 | + '*.wan.io', | |
1748 | + '*.web-cam.ws', | |
1749 | + '*.webs.io', | |
1750 | + '*.xixu.cc', | |
1751 | + '*.zaici.am', | |
1752 | + '*.zip.io', | |
1753 | + '*.zuzhi.in', | |
1754 | + | |
1755 | + '*.profil.vg', // 205.209.101.67(non-existent) | |
1756 | + '*.ecv.tc', // 208.73.212.12(sp19.information.com) | |
1757 | + //'*.about.gs', // No record | |
1758 | + //'*.eprofile.us', // non-existent | |
1759 | + ), | |
1592 | 1760 | '2Page.de' => array( |
1593 | 1761 | '.dreipage.de', |
1594 | 1762 | '.2page.de', |
@@ -1607,6 +1775,8 @@ $blocklist['B-1'] = array( | ||
1607 | 1775 | '*.alkablog.com', |
1608 | 1776 | '*.alluwant.de', |
1609 | 1777 | '.amkbb.com', |
1778 | + 'answerbag.com', // 8.5.0.128 | |
1779 | + 'anyboard.net', | |
1610 | 1780 | 'AOL.com' => // http://about.aol.com/international_services |
1611 | 1781 | '/^(?:chezmoi|home|homes|hometown|journals|user)\.' . |
1612 | 1782 | '(?:aol|americaonline)\.' . |
@@ -1625,16 +1795,22 @@ $blocklist['B-1'] = array( | ||
1625 | 1795 | '*.bb-fr.com', |
1626 | 1796 | '.bbfast.com', // 72.52.135.174 by blogmaster2003 at gmail.com |
1627 | 1797 | '*.beeplog.com', |
1798 | + 'beepworld.it', | |
1628 | 1799 | 'bestfreeforums.com', |
1629 | 1800 | 'bestvotexxx.com', |
1630 | 1801 | 'Bizcn.com' => '/.*\.w[0-9]+\.bizcn\.com$/', // XiaMen BizCn Computer & Network CO.,LTD |
1802 | + 'blinklist.com', | |
1631 | 1803 | 'Blog.com' => array( |
1804 | + // by admin.domains at co.blog.com | |
1632 | 1805 | '*.blog.com', |
1633 | - '*.blogandorra.com', // by admin.domains at co.blog.com | |
1634 | - '*.blogangola.com', // by admin.domains at co.blog.com | |
1806 | + '*.blogandorra.com', | |
1807 | + '*.blogangola.com', | |
1808 | + '*.blogaruba.com', | |
1809 | + '*.blogaustria.at', | |
1635 | 1810 | ), |
1636 | 1811 | '*.blog.com.es', |
1637 | 1812 | '*.blog.hr', |
1813 | + '*.blog4ever.com', | |
1638 | 1814 | '*.blog-fx.com', |
1639 | 1815 | '*.blogbeee.com', |
1640 | 1816 | 'blogas.lt', |
@@ -1659,6 +1835,7 @@ $blocklist['B-1'] = array( | ||
1659 | 1835 | '*.blogstream.com', |
1660 | 1836 | 'blogyaz.com', |
1661 | 1837 | 'bloodee.com', |
1838 | + 'bluedot.us', // 209.245.176.23 by mohitsriv at yahoo.com | |
1662 | 1839 | 'board-4you.de', |
1663 | 1840 | 'boboard.com', // 66.29.54.116 by Excelsoft (shabiba at e4t.net) |
1664 | 1841 | '*.boardhost.com', |
@@ -1707,12 +1884,16 @@ $blocklist['B-1'] = array( | ||
1707 | 1884 | '.cute.cd', // by Yuya Fukuda (count at kit.hi-ho.ne.jp), ns *.2style.jp, *.2style.net |
1708 | 1885 | ), |
1709 | 1886 | '*.canalblog.com', // 195.137.184.103 by dns-admin at pinacolaweb.com |
1887 | + '*.cdnhost.cn', // 125.65.112.8, 125.65.112.9, 125.91.1.71 "Content Delivery Network" related? by cc at 51web.cn, seems malware hosting. ns *.dnsfamily.com, no official index.html | |
1710 | 1888 | '*.chueca.com', |
1711 | 1889 | 'city-forum.com', |
1890 | + '*.clicdev.com', | |
1891 | + '*.craigslist.org', | |
1712 | 1892 | 'concepts-mall.com', |
1713 | 1893 | '*.conforums.com', // by Roger Sutton (rogersutton at cox.net) |
1714 | 1894 | 'connectedy.com', // 66.132.45.227(camilla.jtlnet.com) by astrader at insight.rr.com |
1715 | 1895 | 'counterhit.de', |
1896 | + '*.createblog.com', | |
1716 | 1897 | '*.createforum.net', |
1717 | 1898 | '*.creatuforo.com', // by Desafio Internet S.L. (david at soluwol.com) |
1718 | 1899 | '*.createmybb.com', |
@@ -1722,9 +1903,12 @@ $blocklist['B-1'] = array( | ||
1722 | 1903 | ), |
1723 | 1904 | 'dakrats.net', |
1724 | 1905 | '*.dcswtech.com', |
1906 | + 'del.icio.us', | |
1725 | 1907 | '*.devil.it', |
1726 | 1908 | '*.diaryland.com', |
1909 | + 'diigo.com', ///user/ | |
1727 | 1910 | 'digg.com', |
1911 | + 'digstock.com', | |
1728 | 1912 | 'domains at galaxywave.net' => array( |
1729 | 1913 | 'blogstation.net', |
1730 | 1914 | '.phpbb-host.com', |
@@ -1736,11 +1920,13 @@ $blocklist['B-1'] = array( | ||
1736 | 1920 | '*.ekiwi.de', |
1737 | 1921 | '*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com) |
1738 | 1922 | '.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it) |
1923 | + '*.easyjournal.com', | |
1739 | 1924 | '*.ebloggy.com', |
1740 | 1925 | 'enunblog.com', |
1741 | 1926 | '*.epinoy.com', |
1742 | 1927 | '*.ez-sites.ws', |
1743 | 1928 | '*.ezbbforum.com', // 72.52.134.135 by blogmaster2003 at gmail.com |
1929 | + '*.fastsito.com', // 208.77.96.9 by info at top100italiana.com | |
1744 | 1930 | '*.fathippohosting.com', // 208.101.3.192 |
1745 | 1931 | 'FC2.com' => array( |
1746 | 1932 | 'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR' |
@@ -2402,11 +2588,13 @@ $blocklist['B-1'] = array( | ||
2402 | 2588 | ), |
2403 | 2589 | '*.forumcommunity.net', |
2404 | 2590 | '*.forumer.com', |
2405 | - '*.forumfree.net', | |
2591 | + 'members.forumfree.com', // 91.121.4.44(ns37290.ovh.net) by dom at artmajeur.com | |
2592 | + '*.forumfree.net', // 74.53.57.70(*.static.theplanet.com) | |
2406 | 2593 | 'forumhosting.org', |
2407 | 2594 | '*.forums.com', |
2408 | 2595 | 'forumbolt.com', |
2409 | 2596 | 'phpbb.forumgratis.com', |
2597 | + 'forumlari.net', | |
2410 | 2598 | '*.forumlivre.com', |
2411 | 2599 | 'forumnow.com.br', |
2412 | 2600 | '*.forumppl.com', |
@@ -2418,21 +2606,22 @@ $blocklist['B-1'] = array( | ||
2418 | 2606 | '*.fory.pl', |
2419 | 2607 | 'fotolog.com', |
2420 | 2608 | '*.fr33webhost.com', |
2609 | + '*.free20.com', // 63.246.154.15(unknown.sagonet.net => non-existent) by do168 at 126.com | |
2421 | 2610 | '*.free-25.de', |
2422 | 2611 | '*.free-bb.com', |
2423 | 2612 | 'Free-Blog-Hosting.com' => array( |
2424 | - 'free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com | |
2425 | - 'cheap-web-hosting-411.com', // by Robert Vigil, ns *.thisismyserver.net | |
2426 | - 'blog-tonite.com', // ns *.phpwebhosting.com | |
2427 | - 'blogznow.com', // ns *.phpwebhosting.com | |
2428 | - 'myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com | |
2429 | - 'blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com | |
2613 | + '*.free-blog-hosting.com', // by Robert Vigil (ridgecrestdomains at yahoo.com), ns *.phpwebhosting.com | |
2614 | + '*.blog-tonite.com', // ns *.phpwebhosting.com | |
2615 | + '*.blogznow.com', // ns *.phpwebhosting.com | |
2616 | + '*.myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com | |
2617 | + '*.blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com | |
2430 | 2618 | ), |
2431 | 2619 | '*.free-forums.org', // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro) |
2432 | 2620 | 'free-guestbook.net', |
2433 | 2621 | '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com) |
2434 | 2622 | 'freebb.nl', |
2435 | 2623 | '*.freeclans.de', |
2624 | + '*.freehostplace.com', // by contact at keepclear.co.uk | |
2436 | 2625 | '*.freelinuxhost.com', // by 100webspace.com |
2437 | 2626 | '*.nofeehost.com', |
2438 | 2627 | '*.freehyperspace.com', |
@@ -2453,6 +2642,7 @@ $blocklist['B-1'] = array( | ||
2453 | 2642 | 'freewebsfarms.com', |
2454 | 2643 | ), |
2455 | 2644 | '*.freewebspace.net.au', |
2645 | + 'freewebtown.com', | |
2456 | 2646 | '*.freemyforum.com', // by messahost at gmail.com |
2457 | 2647 | 'freepowerboards.com', |
2458 | 2648 | '*.freepowerboards.com', |
@@ -2467,6 +2657,7 @@ $blocklist['B-1'] = array( | ||
2467 | 2657 | '*.30mb.com', // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com |
2468 | 2658 | '*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com) |
2469 | 2659 | ), |
2660 | + '*.gexxe.com', | |
2470 | 2661 | '*.goodboard.de', |
2471 | 2662 | 'gossiping.net', |
2472 | 2663 | '*.greatnuke.com', |
@@ -2475,7 +2666,13 @@ $blocklist['B-1'] = array( | ||
2475 | 2666 | 'Google.com' => array( |
2476 | 2667 | '*.blogspot.com', |
2477 | 2668 | 'docs.google.com', |
2669 | + '*.googlegroups.com', ///web/ | |
2670 | + '*.googlepages.com', | |
2478 | 2671 | 'groups-beta.google.com', |
2672 | + 'groups.google.*', ///group/ Seems widely distributed | |
2673 | + //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk', | |
2674 | + //'groups.google.de', 'groups.google.es', 'groups.google.fr', | |
2675 | + //'groups.google.it', ... | |
2479 | 2676 | ), |
2480 | 2677 | 'guestbook.at', |
2481 | 2678 | 'club.giovani.it', |
@@ -2556,16 +2753,27 @@ $blocklist['B-1'] = array( | ||
2556 | 2753 | '*.joolo.com', |
2557 | 2754 | '*.journalscape.com', |
2558 | 2755 | '*.justfree.com', |
2559 | - '*.blog.kataweb.it', | |
2756 | + 'kataweb.it' => array( // kata-redir.kataweb.it | |
2757 | + '*.blog.kataweb.it', | |
2758 | + '*.repubblica.it', | |
2759 | + ), | |
2560 | 2760 | '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com |
2561 | 2761 | '*.kokoom.com', |
2562 | 2762 | 'koolpages.com', |
2763 | + '*.kostenlose-foren.org', | |
2563 | 2764 | '*.ksiegagosci.info', |
2765 | + 'LaCoctelera.com' => array( | |
2766 | + 'lacoctelera.com', // by alberto at the-cocktail.com | |
2767 | + 'espacioblog.com', // by dominios at ferca.com | |
2768 | + ), | |
2564 | 2769 | 'Lide.cz' => array( |
2565 | 2770 | '*.lide.cz', |
2566 | 2771 | '*.sblog.cz', |
2567 | 2772 | ), |
2773 | + '*.lioru.com', | |
2568 | 2774 | 'limmon.net', |
2775 | + 'linkinn.com', | |
2776 | + 'lipstick.com', // 208.96.53.70(customer-reverse-entry.*) by domain_admin at advancemags.com | |
2569 | 2777 | 'listible.com', ///list/ |
2570 | 2778 | 'Livedoor.com' => array( |
2571 | 2779 | 'blog.livedoor.jp', |
@@ -2605,6 +2813,7 @@ $blocklist['B-1'] = array( | ||
2605 | 2813 | ), |
2606 | 2814 | '*.mastertopforum.com', |
2607 | 2815 | 'mbga.jp', // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp) |
2816 | + 'meneame.net', | |
2608 | 2817 | '*.memebot.com', |
2609 | 2818 | '*.messageboard.nl', |
2610 | 2819 | 'mokono GmbH' => array( |
@@ -2623,17 +2832,21 @@ $blocklist['B-1'] = array( | ||
2623 | 2832 | '*.weblogs.hu', |
2624 | 2833 | ), |
2625 | 2834 | 'mojklc.com', |
2835 | + '*.mundoforo.com', | |
2836 | + '*.money-host.com', | |
2626 | 2837 | 'MonForum.com' => array( |
2627 | 2838 | '*.monforum.com', |
2628 | 2839 | '*.monforum.fr', |
2629 | 2840 | ), |
2630 | 2841 | '*.multiforum.nl', // by Ron Warris (info at phpbbhost.nl) |
2631 | - '*.my10gb.com', | |
2842 | + '*.my3gb.com', // 74.86.20.235(layeredpanel.com => 213.239.213.90 => *.clients.your-server.de) | |
2843 | + '*.my10gb.com', // by craig_gatenby at hotmail.com | |
2632 | 2844 | 'myblog.is', |
2633 | 2845 | 'myblogma.com', |
2634 | 2846 | '*.myblogvoice.com', |
2635 | 2847 | 'myblogwiki.com', |
2636 | 2848 | '*.myforum.ro', |
2849 | + '*.myfreewebhost.org', // 216.32.73.163(*.static.reverse.ltdomains.com) | |
2637 | 2850 | '*.myfreewebs.net', |
2638 | 2851 | '*.mysite.com', |
2639 | 2852 | '*.myxhost.com', |
@@ -2647,6 +2860,9 @@ $blocklist['B-1'] = array( | ||
2647 | 2860 | 'users.newblog.com', |
2648 | 2861 | 'neweconomics.info', |
2649 | 2862 | '*.newsit.es', // 75.126.252.108 |
2863 | + '*.nm.ru', | |
2864 | + '*.nmj.pl', | |
2865 | + '*.nocatch.net', // 74.86.93.190(layeredpanel.com => ...) | |
2650 | 2866 | 'Northsky.com' => array( |
2651 | 2867 | // by hostmaster at northsky.com |
2652 | 2868 | // northsky.com redirects to communityarchitect.com |
@@ -2688,8 +2904,8 @@ $blocklist['B-1'] = array( | ||
2688 | 2904 | '*.00space.com', |
2689 | 2905 | '*.00sports.com', |
2690 | 2906 | ), |
2691 | - '*.nm.ru', | |
2692 | 2907 | '*.obm.cn', // by xiaobak at yahoo.com.cn |
2908 | + '*.ocom.pl', // 67.15.104.83(*.ev1servers.net) | |
2693 | 2909 | 'onlyfree.de', |
2694 | 2910 | '*.ooblez.com', // by John Nolande (ooblez at hotmail.com) |
2695 | 2911 | '*.ohost.de', |
@@ -2703,6 +2919,7 @@ $blocklist['B-1'] = array( | ||
2703 | 2919 | '.skysquad.net', // by Dorota Brzezinska (info at nazwa.pl) |
2704 | 2920 | ), |
2705 | 2921 | 'oyax.com', ///user_links.php |
2922 | + '*.p2a.pl', | |
2706 | 2923 | '*.parlaris.com', |
2707 | 2924 | '*.pathfinder.gr', |
2708 | 2925 | '*.persianblog.com', |
@@ -2720,11 +2937,13 @@ $blocklist['B-1'] = array( | ||
2720 | 2937 | '*.phpbbx.de', |
2721 | 2938 | '*.pochta.ru', |
2722 | 2939 | '*.portbb.com', |
2940 | + '*.portcms.com', | |
2723 | 2941 | 'powerwebmaster.de', |
2724 | 2942 | 'pro-board.com', // by SEM Optimization Services Ltd (2485 at coverage1.com) |
2725 | 2943 | 'ProBoards' => '#^.*\.proboards[0-9]*\.com$#', |
2726 | 2944 | '*.probook.de', |
2727 | 2945 | '*.prohosting.com', // by Nick Wood (admin at dns-solutions.net) |
2946 | + '*.pun.pl', | |
2728 | 2947 | 'putfile.com', |
2729 | 2948 | '*.quickfreehost.com', |
2730 | 2949 | 'quizilla.com', |
@@ -2761,12 +2980,14 @@ $blocklist['B-1'] = array( | ||
2761 | 2980 | '.aim.to', |
2762 | 2981 | '.djmp.jp', |
2763 | 2982 | '.nihongourl.nu', |
2983 | + '.url.sh', // Says SmarTrans | |
2764 | 2984 | '.urljp.com', |
2765 | 2985 | '.www1.to', |
2766 | 2986 | '.www2.to', |
2767 | 2987 | '.www3.to', |
2768 | 2988 | ), |
2769 | - '*.spazioforum.it', | |
2989 | + '*.spazioblog.it', // by Ivan Maria Spadacenta | |
2990 | + '*.spazioforum.it', // by Ivan Maria Spadacenta | |
2770 | 2991 | 'members.spboards.com', |
2771 | 2992 | 'forums.speedguide.net', |
2772 | 2993 | 'Sphosting.com' => array( // by admin at sphosting.com |
@@ -2778,6 +2999,7 @@ $blocklist['B-1'] = array( | ||
2778 | 2999 | ), |
2779 | 3000 | '*.spicyblogger.com', |
2780 | 3001 | '*.spotbb.com', |
3002 | + '.squadz.net', // 67.15.50.4(svr66.edns1.com) by info at ehostpros.com | |
2781 | 3003 | '*.squarespace.com', |
2782 | 3004 | 'stickypond.com', |
2783 | 3005 | 'stormloader.com', |
@@ -2789,6 +3011,7 @@ $blocklist['B-1'] = array( | ||
2789 | 3011 | '*.talkthis.com', |
2790 | 3012 | 'tbns.net', |
2791 | 3013 | 'telasipforums.com', |
3014 | + 'theforumhub.com', | |
2792 | 3015 | 'thestudentunderground.org', |
2793 | 3016 | 'think.ubc.ca', |
2794 | 3017 | '*.thumblogger.com', |
@@ -2817,6 +3040,7 @@ $blocklist['B-1'] = array( | ||
2817 | 3040 | '*.ws.co.ua', |
2818 | 3041 | ), |
2819 | 3042 | '*.unforo.net', |
3043 | + 'veoh.com', | |
2820 | 3044 | '*.vdforum.ru', |
2821 | 3045 | '*.vtost.com', |
2822 | 3046 | '*.vidiac.com', |
@@ -2947,6 +3171,7 @@ $blocklist['B-1'] = array( | ||
2947 | 3171 | '.webng.com', // www.*, www3.* |
2948 | 3172 | '*.webnow.biz', // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc. |
2949 | 3173 | 'websitetoolbox.com', |
3174 | + '*.webtropia.com', | |
2950 | 3175 | 'Welnet.de' => array( |
2951 | 3176 | 'welnet.de', |
2952 | 3177 | 'welnet4u.de', |
@@ -2956,12 +3181,13 @@ $blocklist['B-1'] = array( | ||
2956 | 3181 | '*.wizhoo.com', // by Comp U Door (sales at comp-u-door.com) |
2957 | 3182 | '*.wmjblogs.ru', |
2958 | 3183 | '*.wordpress.com', |
2959 | - '.wsboards.com', // by Chris Breen (Cbween at gmail.com) | |
3184 | + //'.wsboards.com', // Noticed this site had been removed due to spam | |
2960 | 3185 | 'xeboards.com', // by Brian Shea (bshea at xeservers.com) |
2961 | 3186 | '*.xforum.se', |
2962 | 3187 | 'xfreeforum.com', |
2963 | 3188 | '*.xhost.ro', // by domain-admin at listserv.rnc.ro |
2964 | 3189 | '*.xoomwebs.com', |
3190 | + '.xterm.org', | |
2965 | 3191 | '.freeblogs.xp.tl', |
2966 | 3192 | '*.xphost.org', // by alex alex (alrusnac at hotmail.com) |
2967 | 3193 | '*.ya.com', // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'... |
@@ -2980,6 +3206,17 @@ $blocklist['B-1'] = array( | ||
2980 | 3206 | '*.your-websites.net', |
2981 | 3207 | '*.web-space.ws', |
2982 | 3208 | ), |
3209 | + | |
3210 | + | |
3211 | + '*.heliohost.org', // by ashoat at gmail.com | |
3212 | + 'X10Hosting.com' => array( | |
3213 | + // by support at clockworkcomputers.com | |
3214 | + '*.x10hosting.com', | |
3215 | + '*.elementfx.com', | |
3216 | + '*.exofire.net', | |
3217 | + '*.pcriot.com', | |
3218 | + ), | |
3219 | + '.zendurl.com', // by ajcar1992 at gmail.com | |
2983 | 3220 | ); |
2984 | 3221 | |
2985 | 3222 | // -------------------------------------------------- |
@@ -2999,16 +3236,25 @@ $blocklist['B-2'] = array( | ||
2999 | 3236 | 'alwanforthearts.org', |
3000 | 3237 | '*.anchor.net.au', |
3001 | 3238 | 'anewme.org', |
3239 | + 'arcrockett.com', ///golf/excel/ | |
3240 | + 'arisedesign.net', //Portfolio/d981/ | |
3002 | 3241 | 'internetyfamilia.asturiastelecentros.com', |
3242 | + 'ballblair.com', ///images/thumbs/ | |
3003 | 3243 | 'Ball State University' => array('web.bsu.edu'), |
3004 | 3244 | 'btofaq.net', ///v3/forum |
3005 | 3245 | 'blepharospasm.org', |
3246 | + 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net | |
3006 | 3247 | 'nyweb.bowlnfun.dk', |
3007 | 3248 | '*.buzznet.com', |
3249 | + 'Carroll College' => array( | |
3250 | + 'carroll.edu', ///boards/ | |
3251 | + ), | |
3008 | 3252 | '*.canberra.net.au', |
3009 | 3253 | 'castus.com', |
3010 | 3254 | 'Case Western Reserve University' => array('case.edu'), |
3011 | 3255 | 'ceval.de', |
3256 | + 'chaco.gov.ar', | |
3257 | + 'chasingrainbowsaustralia.com', ///geometry/ | |
3012 | 3258 | 'codespeak.net', |
3013 | 3259 | 'Colorado School of Mines' => array('ticc.mines.edu'), |
3014 | 3260 | '*.colourware.co.uk', |
@@ -3027,14 +3273,17 @@ $blocklist['B-2'] = array( | ||
3027 | 3273 | 'delayedreaction.org', |
3028 | 3274 | 'deproduction.org', |
3029 | 3275 | 'dc503.org', |
3276 | + 'dialadeck.com', ///images/ | |
3030 | 3277 | 'dre-centro.pt', |
3031 | 3278 | 'Duke University' => array('devel.linux.duke.edu'), |
3032 | 3279 | '*.esen.edu.sv', |
3033 | 3280 | 'forums.drumcore.com', |
3034 | 3281 | 'dundeeunited.org', |
3035 | 3282 | 'energyglass.com.ua', |
3283 | + 'equitas.com.au', ///images/mim3/, no index.html | |
3036 | 3284 | 'exclusivehotels.com', |
3037 | 3285 | 'info.ems-rfid.com', |
3286 | + 'fairyfunkyard.com', ///images_files/files/ | |
3038 | 3287 | 'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com) |
3039 | 3288 | 'fbwloc.com', |
3040 | 3289 | '.fhmcsa.org.au', |
@@ -3057,11 +3306,13 @@ $blocklist['B-2'] = array( | ||
3057 | 3306 | 'Harvard Law School' => array('blogs.law.harvard.edu'), |
3058 | 3307 | 'helpiammoving.com', |
3059 | 3308 | 'homepage-dienste.com', |
3309 | + '*.hostistry.com', // by support at hostistry.com, hostistry at gmail.com | |
3060 | 3310 | 'Howard University' => array('networks.howard.edu'), |
3061 | 3311 | 'hullandhull.com', |
3062 | 3312 | 'Huntington University' => array('huntington.edu'), |
3063 | 3313 | 'huskerink.com', |
3064 | 3314 | '.hyba.info', |
3315 | + 'ideas4you.com', ///photos/ | |
3065 | 3316 | 'inda.org', |
3066 | 3317 | '*.indymedia.org', // by abdecom at riseup.net |
3067 | 3318 | 'instantbulletin.com', |
@@ -3074,6 +3325,8 @@ $blocklist['B-2'] = array( | ||
3074 | 3325 | 'skkustp.itgozone.com', // hidden JavaScript |
3075 | 3326 | 'jazz2online.com', |
3076 | 3327 | '.jloo.org', |
3328 | + '.juegohq.com', // 62.37.117.18(*.static.abi.uni2.es) by admin at juegohq.com, gamble | |
3329 | + 'kjon.com', | |
3077 | 3330 | 'Kazan State University' => array( |
3078 | 3331 | 'dir.kzn.ru', |
3079 | 3332 | 'sys.kcn.ru', |
@@ -3085,6 +3338,7 @@ $blocklist['B-2'] = array( | ||
3085 | 3338 | 'Loyola Marymount University' => array('lmu.edu'), |
3086 | 3339 | 'forum.lixium.fr', |
3087 | 3340 | 'macfaq.net', |
3341 | + 'macvirus.org', ///board/ | |
3088 | 3342 | 'me4x4.com', |
3089 | 3343 | 'microbial-ecology.net', |
3090 | 3344 | 'minsterscouts.org', |
@@ -3104,13 +3358,22 @@ $blocklist['B-2'] = array( | ||
3104 | 3358 | 'hlc.ncat.edu', |
3105 | 3359 | ), |
3106 | 3360 | 'placetobe.org', |
3361 | + 'Naropa University' => array( | |
3362 | + 'naropa.edu', ///forum/ | |
3363 | + ), | |
3107 | 3364 | 'users.nethit.pl', |
3108 | 3365 | 'nightclubvip.net', |
3109 | 3366 | 'njbodybuilding.com', |
3110 | 3367 | 'nlen.org', |
3368 | + 'North Carolina School of Science and Mathematics' => array( | |
3369 | + 'neverland.ncssm.edu', ///include/web/forum/ | |
3370 | + 'grid.ncssm.edu', ///ncssm_grid/ | |
3371 | + ), | |
3111 | 3372 | 'Sacred Heart Catholic Primary School' => array('sacredheartpymble.nsw.edu.au'), |
3373 | + 'ofcourseimright.com', ///cgi-bin/roundup/calsify/ | |
3112 | 3374 | 'offtextbooks.com', |
3113 | 3375 | 'ofimatika.com', |
3376 | + 'olympiafoto.com', ///images/ | |
3114 | 3377 | 'omakase-net', // iframe |
3115 | 3378 | 'omikudzi.ru', |
3116 | 3379 | 'openchemist.net', |
@@ -3120,11 +3383,13 @@ $blocklist['B-2'] = array( | ||
3120 | 3383 | 'paullima.com', |
3121 | 3384 | 'perl.org.br', |
3122 | 3385 | 'pfff.co.uk', |
3386 | + 'pimpo.com', ///_old_site/ | |
3123 | 3387 | 'pix4online.co.uk', |
3124 | 3388 | 'plone.dk', |
3125 | 3389 | 'preform.dk', |
3126 | 3390 | 'privatforum.de', |
3127 | 3391 | 'publicityhound.net', |
3392 | + 'puppylinux.net', ///news/content/counter/pages/ | |
3128 | 3393 | 'qea.com', |
3129 | 3394 | 'rbkdesign.com', |
3130 | 3395 | 'rehoboth.com', |
@@ -3132,10 +3397,12 @@ $blocklist['B-2'] = array( | ||
3132 | 3397 | 'ryanclark.org', |
3133 | 3398 | '*.reallifelog.com', |
3134 | 3399 | 'rkphunt.com', |
3400 | + 'rso-csp.org', ///bulletins/ | |
3135 | 3401 | '.saasmar.ru', // Jacked. iframe to banep.info on root, etc |
3136 | 3402 | 'sapphireblue.com', |
3137 | 3403 | 'saskchamber.com', |
3138 | 3404 | 'savevoorhees.org', |
3405 | + 'sdhmalenovice.cz', //galerie/ | |
3139 | 3406 | 'selikoff.net', |
3140 | 3407 | 'serbisyopilipino.org', |
3141 | 3408 | 'setbb.com', |
@@ -3144,6 +3411,7 @@ $blocklist['B-2'] = array( | ||
3144 | 3411 | 'Saint Martin\'s University' => array('homepages.stmartin.edu'), |
3145 | 3412 | '.softpress.com', |
3146 | 3413 | 'southbound-inc.com', // There is a <html>.gif (img to it168.com) |
3414 | + 'fora.taniemilitaria.pl', ///phpbb | |
3147 | 3415 | 'tehudar.ru', |
3148 | 3416 | 'Tennessee Tech University' => array('manila.tntech.edu'), |
3149 | 3417 | 'thebluebird.ws', |
@@ -3159,6 +3427,9 @@ $blocklist['B-2'] = array( | ||
3159 | 3427 | 'tuathadedannan.org', |
3160 | 3428 | 'txgotg.com', |
3161 | 3429 | 'tzaneen.co.za', |
3430 | + 'ugeavisen.com', ///style/ | |
3431 | + 'forums.ugo.com', | |
3432 | + 'whole.cs.unibo.it', | |
3162 | 3433 | 'The University of North Dakota' => array( |
3163 | 3434 | 'learn.aero.und.edu', |
3164 | 3435 | 'ez.asn.und.edu', |
@@ -3168,11 +3439,17 @@ $blocklist['B-2'] = array( | ||
3168 | 3439 | 'University of California' => array('classes.design.ucla.edu'), |
3169 | 3440 | 'University of Nebraska Lincoln' => array('ftp.ianr.unl.edu'), |
3170 | 3441 | 'University of Northern Colorado' => array('unco.edu'), |
3442 | + 'University of North Carolina' => array( | |
3443 | + 'elm.cis.uncw.edu' ///testBoinc/ | |
3444 | + ), | |
3171 | 3445 | 'University of Toronto' => array( |
3172 | 3446 | 'environment.utoronto.ca', |
3173 | 3447 | 'grail.oise.utoronto.ca', |
3174 | 3448 | 'utsc.utoronto.ca', |
3175 | 3449 | ), |
3450 | + 'University of Wisconsin' => array( | |
3451 | + 'einstein.phys.uwm.edu' | |
3452 | + ), | |
3176 | 3453 | 'urgentclick.com', |
3177 | 3454 | 'vacant.org.uk', |
3178 | 3455 | 'Villa Julie College' => array('www4.vjc.edu'), |
@@ -3189,7 +3466,7 @@ $blocklist['B-2'] = array( | ||
3189 | 3466 | '.xthost.info', // by Michael Renz (dhost at mykuhl.de) |
3190 | 3467 | 'Yahoo.com' => array( |
3191 | 3468 | 'blog.360.yahoo.com', |
3192 | - '*.groups.yahoo.com' | |
3469 | + '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ... | |
3193 | 3470 | ), |
3194 | 3471 | 'yasushi.site.ne.jp', // One of mixedmedia.net' |
3195 | 3472 | 'youthpeer.org', |
@@ -3285,16 +3562,24 @@ $blocklist['C'] = array( | ||
3285 | 3562 | '.camdoors.info', // by Sergey |
3286 | 3563 | '.chatdoors.info', // by Sergey |
3287 | 3564 | |
3288 | - '.lebedi.info', // by Pronin | |
3289 | - '.loshad.info', // by Pronin | |
3290 | - '.porosenok.info', // by Pronin | |
3291 | - '.indyushonok.info', // by Pronin | |
3292 | - '.kotyonok.info', // by Pronin | |
3293 | - '.kozlyonok.info', // by Pronin | |
3294 | - '.magnoliya.info', // by Pronin | |
3295 | - '.svinka.info', // by Pronin | |
3296 | - '.svinya.info', // by Pronin | |
3297 | - '.zherebyonok.info', // 89.149.206.225 by Pronin | |
3565 | + // 89.149.206.225 by Pronin | |
3566 | + '.dorozhka.info', | |
3567 | + '.kolonochka.info', | |
3568 | + '.knizhechka.info', | |
3569 | + '.krantik.info', | |
3570 | + '.lebedi.info', | |
3571 | + '.loshad.info', | |
3572 | + '.pechenka.info', | |
3573 | + '.porosenok.info', | |
3574 | + '.indyushonok.info', | |
3575 | + '.kotyonok.info', | |
3576 | + '.kozlyonok.info', | |
3577 | + '.magnoliya.info', | |
3578 | + '.svinka.info', | |
3579 | + '.svinya.info', | |
3580 | + '.televizorchik.info', | |
3581 | + '.tumbochka.info', | |
3582 | + '.zherebyonok.info', | |
3298 | 3583 | |
3299 | 3584 | '.medvezhonok.org', // 89.149.206.225 "BucksoGen 1.2b" |
3300 | 3585 |
@@ -3730,7 +4015,12 @@ $blocklist['C'] = array( | ||
3730 | 4015 | 'aakin at yandex.ru' => array( |
3731 | 4016 | // 89.149.206.225(*.internetserviceteam.com) by Baer |
3732 | 4017 | '.entirestar.com', |
4018 | + '.joppperl.info', | |
4019 | + '.onlinedrugsdirect.com', | |
4020 | + '.pilkazen.info', | |
3733 | 4021 | '.superbuycheap.com', |
4022 | + '.supersmartdrugs.com', | |
4023 | + '.thecheappillspharmacy.com', | |
3734 | 4024 | '.topdircet.com', |
3735 | 4025 | ), |
3736 | 4026 | 'newblog9 at gmail.com' => array( // by jiuhatu kou |
@@ -4823,6 +5113,7 @@ $blocklist['C'] = array( | ||
4823 | 5113 | '.fateback.com', |
4824 | 5114 | '.undonet.com', |
4825 | 5115 | '.yoll.net', |
5116 | + '.sinfree.net', // 216.65.1.201 by LiquidNet Ltd. (support at propersupport.com), redirect to www.japan.jp | |
4826 | 5117 | |
4827 | 5118 | // 50webs.com // 64.72.112.10 |
4828 | 5119 | // dns2.50webs.com // 64.72.112.11 |
@@ -5123,6 +5414,8 @@ $blocklist['C'] = array( | ||
5123 | 5414 | '.wifuj.com', |
5124 | 5415 | '.xijyt.com', |
5125 | 5416 | '.zuqyn.com', |
5417 | + | |
5418 | + '.mosugy.com', | |
5126 | 5419 | ), |
5127 | 5420 | 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru |
5128 | 5421 | '.hitsearching.info', |
@@ -5137,6 +5430,8 @@ $blocklist['C'] = array( | ||
5137 | 5430 | |
5138 | 5431 | // 66.232.120.98(host.radiantdomain.com => 71.6.196.202 => fc6196202.aspadmin.net) |
5139 | 5432 | '.ligiwa.com', |
5433 | + | |
5434 | + '.mubeho.com', | |
5140 | 5435 | ), |
5141 | 5436 | 'ice--man at mail.ru related' => array( |
5142 | 5437 | // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru |
@@ -5180,10 +5475,21 @@ $blocklist['C'] = array( | ||
5180 | 5475 | '.bovorup.cn', |
5181 | 5476 | '.litotar.cn', |
5182 | 5477 | '.nihydec.cn', |
5183 | - | |
5478 | + | |
5184 | 5479 | // 66.232.112.175 by bing-32 at ftunez.org |
5185 | 5480 | '.lasyxy.cn', |
5186 | 5481 | |
5482 | + // by bing-65 at ftunez.org | |
5483 | + '.coxyvuk.cn', // 66.232.120.111(non-existent) | |
5484 | + '.comygyx.cn', // 66.232.120.112(non-existent) | |
5485 | + '.gyqalec.cn', // 66.232.120.114(non-existent) | |
5486 | + '.paluwir.cn', // 66.232.120.114(non-existent) | |
5487 | + '.qunonid.cn', // 66.232.120.114(*snip*) | |
5488 | + '.qupyvin.cn', // 66.232.120.115(non-existent) | |
5489 | + '.ririjyz.cn', // 66.232.120.111(*snip*) | |
5490 | + '.saralar.cn', // 66.232.120.113(non-existent) | |
5491 | + '.vawomyl.cn', // 66.232.120.115(non-existent) | |
5492 | + | |
5187 | 5493 | // 69.46.23.48 by clarkson-34 at ftunez.org |
5188 | 5494 | '.bumora.cn', |
5189 | 5495 | '.byxite.cn', |
@@ -5239,6 +5545,10 @@ $blocklist['C'] = array( | ||
5239 | 5545 | '.xizity.cn', |
5240 | 5546 | '.xuxusa.cn', |
5241 | 5547 | |
5548 | + // by entretov-28 at ftunez.org | |
5549 | + '.hotejen.cn', // 66.232.120.111(*snip*) | |
5550 | + '.kyhadat.cn', // 66.232.120.115(*snip*) | |
5551 | + | |
5242 | 5552 | // 69.46.23.48 by entretov-32 at ftunez.org |
5243 | 5553 | '.cihuji.cn', |
5244 | 5554 | '.deqyve.cn', |
@@ -5263,6 +5573,11 @@ $blocklist['C'] = array( | ||
5263 | 5573 | '.dozoda.cn', |
5264 | 5574 | '.nemipu.cn', |
5265 | 5575 | |
5576 | + // entretov-84 at ftunez.org | |
5577 | + '.muruvun.cn', // 66.232.120.114(*snip*) | |
5578 | + '.favulol.cn', // 66.232.120.115(*snip*) | |
5579 | + '.tixuqyx.cn', // 66.232.120.111(*snip*) | |
5580 | + | |
5266 | 5581 | // 69.46.23.48 by jeremy-57 at ftunez.org |
5267 | 5582 | '.duzele.cn', |
5268 | 5583 | '.figede.cn', |
@@ -5283,6 +5598,13 @@ $blocklist['C'] = array( | ||
5283 | 5598 | '.wotyqo.cn', |
5284 | 5599 | '.xudoli.cn', |
5285 | 5600 | |
5601 | + // by entretov-28 at ftunez.org | |
5602 | + '.xevavuv.cn', // 66.232.120.113(*snip*) | |
5603 | + | |
5604 | + // by entretov-37 at ftunez.org | |
5605 | + '.sadyroz.cn', // 66.232.120.114(*snip*) | |
5606 | + '.zedutox.cn', // 66.232.120.112(non-existent) | |
5607 | + | |
5286 | 5608 | // 66.232.112.175 by entretov-86 at ftunez.org |
5287 | 5609 | '.faweji.cn', |
5288 | 5610 | '.jypaci.cn', |
@@ -5316,12 +5638,27 @@ $blocklist['C'] = array( | ||
5316 | 5638 | '.qiwysu.cn', |
5317 | 5639 | '.tutysy.cn', |
5318 | 5640 | |
5641 | + // by oker-74 at ftunez.org | |
5642 | + '.navufol.cn', | |
5643 | + | |
5644 | + // by oker-97 at ftunez.org | |
5645 | + '.dohakot.cn', // 66.232.127.126(yourbusiness.ME-127.com) | |
5646 | + '.mesyvuc.cn', // 66.232.120.111(*snip*) | |
5647 | + '.nyjyzup.cn', // 66.232.127.126(*snip*) | |
5648 | + '.qagibit.cn', // 66.232.120.114(*snip*) | |
5649 | + '.rovazaw.cn', // 66.232.120.112(*snip*) | |
5650 | + '.tozojug.cn', // 66.232.120.111(*snip*) | |
5651 | + '.xywataw.cn', // 66.232.120.112(*snip*) | |
5652 | + | |
5653 | + // by polet-20 at ftunez.org | |
5654 | + '.mopoxon.cn', // 66.232.127.126(*snip*) | |
5655 | + | |
5319 | 5656 | // 66.232.112.175 by sabrosky-49 at ftunez.org |
5320 | 5657 | '.gywiqe.cn', |
5321 | 5658 | '.jotapo.cn', |
5322 | 5659 | '.jywixa.cn', |
5323 | 5660 | |
5324 | - // '69.46.23.48 by sabrosky-60 at ftunez.org | |
5661 | + // 69.46.23.48 by sabrosky-60 at ftunez.org | |
5325 | 5662 | '.bawegap.cn', |
5326 | 5663 | '.buremyl.cn', |
5327 | 5664 | '.cilybut.cn', |
@@ -5370,6 +5707,50 @@ $blocklist['C'] = array( | ||
5370 | 5707 | '.jytame.cn', |
5371 | 5708 | '.wygete.cn', |
5372 | 5709 | ), |
5710 | + '74.50.97.*' => array( | |
5711 | + '.kaqeje.com', // 74.50.97.51(non-existent) by abuse-here at inbox.ru | |
5712 | + '.cumimo.com', // 74.50.97.51(non-existent) by olga at ike.com | |
5713 | + '.kaxavo.com', // 74.50.97.52(non-existent) by gunter at ftunez.org | |
5714 | + '.hoheru.com', // 74.50.97.52(non-existent) by gunter at ftunez.org | |
5715 | + '.tyqoti.com', // 74.50.97.52(non-existent) by anna at hotmail.com | |
5716 | + '.fupopu.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru | |
5717 | + '.poxupo.com', // 74.50.97.53(non-existent) by inna at gmail.com | |
5718 | + '.kuluvo.com', // 74.50.97.53(non-existent) by gunter at ftunez.org | |
5719 | + '.wugoba.com', // 74.50.97.53(non-existent) by abuse-here at inbox.ru | |
5720 | + '.civuhe.com', // 74.50.97.54(non-existent) by olga at ike.com | |
5721 | + '.zasuly.com', // 74.50.97.54(non-existent) by olga at ike.com | |
5722 | + '.liwowu.com', // 74.50.97.54(non-existent) by abuse-here at inbox.ru | |
5723 | + '.vobime.com', // 74.50.97.55(non-existent) by inna at gmail.com | |
5724 | + '.nyrive.com', // 74.50.97.55(non-existent) by anna at hotmail.com | |
5725 | + '.hehepu.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru | |
5726 | + '.bynute.com', // 74.50.99.245(non-existent) by abuse-here at inbox.ru | |
5727 | + | |
5728 | + '.sevimy.com', // 66.232.124.12(time-out) by inna at gmail.com | |
5729 | + '.gapubo.com', // 66.232.124.12(time-out) by gunter at ftunez.org | |
5730 | + '.vejoku.com', // 66.232.124.12(time-out) by olga at ike.com | |
5731 | + '.qysahu.com', // 66.232.124.12(time-out) by abuse-here at inbox.ru | |
5732 | + '.hidolu.com', // 66.232.124.13(time-out) by inna at gmail.com | |
5733 | + '.tetace.com', // 66.232.124.13(time-out) by gunter at ftunez.org | |
5734 | + '.vuxilu.com', // 66.232.124.13(time-out) by olga at ike.com | |
5735 | + '.teboca.com', // 66.232.124.13(time-out) by olga at ike.com | |
5736 | + '.dizive.com', // 66.232.124.14(time-out) by olga at ike.com | |
5737 | + '.peduxe.com', // 66.232.124.14(time-out) by gunter at ftunez.org | |
5738 | + '.sybyna.com', // 66.232.124.14(time-out) by gunter at ftunez.org | |
5739 | + '.bepofe.com', // 66.232.124.15(time-out) by anna at hotmail.com | |
5740 | + '.kuloja.com', // 66.232.124.15(time-out) by gunter at ftunez.org | |
5741 | + '.tetadu.com', // 66.232.124.15(time-out) by inna at gmail.com | |
5742 | + '.qilato.com', // 66.232.124.15(time-out) by inna at gmail.com | |
5743 | + '.lobimi.com', // 66.232.124.16(time-out) by olga at ike.com | |
5744 | + '.tazuwe.com', // 66.232.124.16(time-out) by olga at ike.com | |
5745 | + '.pihufo.com', // 66.232.124.16(time-out) by olga at ike.com | |
5746 | + '.decewa.com', // 66.232.124.16(time-out) by gunter at ftunez.org | |
5747 | + | |
5748 | + '.lynymu.com', // 206.51.226.194(time-out) by abuse-here at inbox.ru | |
5749 | + '.saciqo.com', // 206.51.226.194(time-out) by olga at ike.com | |
5750 | + '.zalajy.com', // 206.51.226.194(time-out) by inna at gmail.com | |
5751 | + '.hisimy.com', // 206.51.226.194(time-out) by inna at gmail.com | |
5752 | + '.qysowe.com', // 206.51.226.194(time-out) by olga at ike.com | |
5753 | + ), | |
5373 | 5754 | 'nijeoi at hotmai.com' => array( |
5374 | 5755 | // 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru |
5375 | 5756 | '.bowij.com', |
@@ -5407,6 +5788,8 @@ $blocklist['C'] = array( | ||
5407 | 5788 | |
5408 | 5789 | // 66.232.97.246(host4.blazegalaxy.com => 71.6.196.202) |
5409 | 5790 | '.pufeqa.com', |
5791 | + | |
5792 | + '.xehymi.com', | |
5410 | 5793 | ), |
5411 | 5794 | 'niichka at hotmail.com' => array( |
5412 | 5795 | // 66.232.113.44, the same approach and IP of clickx at bk.ru |
@@ -5439,6 +5822,26 @@ $blocklist['C'] = array( | ||
5439 | 5822 | '.tedstate.info', // "Free Web Hosting" |
5440 | 5823 | '.giftsee.com', |
5441 | 5824 | ), |
5825 | + 'admin at pertol.info' => array( | |
5826 | + // 81.0.195.189 "Free Web Hosting" | |
5827 | + '.laparka.cn', | |
5828 | + '.mirlos.cn', | |
5829 | + '.oldmoms.cn', | |
5830 | + | |
5831 | + // 217.11.233.64(timed-out) | |
5832 | + '.ejmpep.cn', // by admin at pertol.info | |
5833 | + '.ytere.cn', // by admin at x2t.com | |
5834 | + | |
5835 | + '.pertol.info', // 72.232.246.202(*.static.reverse.ltdomains.com) by partner at pornography-world.com | |
5836 | + '.pornography-world.com', // 72.232.246.205(*.static.reverse.ltdomains.com) by admin at pornography-world.com, ns *.pertol.info | |
5837 | + | |
5838 | + // 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info | |
5839 | + '.new-greece-travel.com', | |
5840 | + '.peraonline.info', | |
5841 | + | |
5842 | + '.barkman.cn', | |
5843 | + ), | |
5844 | + | |
5442 | 5845 | 'aofa at vip.163.com' => array( |
5443 | 5846 | '.bdjyw.net', // by gaoyun, infected images, iframe to 5944.net's VBScript |
5444 | 5847 | '.5944.net', |
@@ -5654,7 +6057,11 @@ $blocklist['C'] = array( | ||
5654 | 6057 | '.wfe7nv.org', |
5655 | 6058 | '.xyr99yx.org', |
5656 | 6059 | ), |
5657 | - '203.171.230.39' => array( // registrar bizcn.com, iframe + cursor | |
6060 | + '203.171.230.39' => array( | |
6061 | + // by 51shell at 163.com | |
6062 | + '.amatou-fc2.com', | |
6063 | + | |
6064 | + // registrar bizcn.com, iframe + cursor | |
5658 | 6065 | '.playonlinenc.com', |
5659 | 6066 | '.playboss-jp.com', |
5660 | 6067 | ), |
@@ -5685,6 +6092,7 @@ $blocklist['C'] = array( | ||
5685 | 6092 | '.govnosaklo.info', |
5686 | 6093 | '.muflon.info', |
5687 | 6094 | '.termitnik.info', |
6095 | + '.tugosos.info', // 206.53.51.77(www.bmezine.com -> ..) | |
5688 | 6096 | ), |
5689 | 6097 | '84.252.148.80' => array( // 84.252.148.80(heimdall.mchost.ru) |
5690 | 6098 | '.acronis-true-image.info', |
@@ -5787,10 +6195,24 @@ $blocklist['C'] = array( | ||
5787 | 6195 | '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript |
5788 | 6196 | '.ringtonecooler.com', // 217.11.233.34 |
5789 | 6197 | ), |
5790 | - 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn) | |
5791 | - '.okwit.com', // 220.166.64.44 | |
5792 | - '.sakerver.com', // 220.166.64.194 | |
5793 | - '.motewiki.net', // 220.166.64.194 | |
6198 | + 'dfym at dfym.cn' => array( | |
6199 | + // ANI, JavaScript, iframe | |
6200 | + | |
6201 | + // 220.166.64.44 by chen jinian (dfym at dfym.cn) | |
6202 | + '.okwit.com', | |
6203 | + '.sakerver.com', | |
6204 | + '.motewiki.net', | |
6205 | + | |
6206 | + '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net | |
6207 | + | |
6208 | + '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net | |
6209 | + | |
6210 | + // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net | |
6211 | + '.bbtv-chat.com', | |
6212 | + '.ketubatle.com', | |
6213 | + '.playonlanei.com', | |
6214 | + '.rmtfcne.com', | |
6215 | + | |
5794 | 6216 | ), |
5795 | 6217 | 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com) |
5796 | 6218 | '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net) |
@@ -5844,8 +6266,29 @@ $blocklist['C'] = array( | ||
5844 | 6266 | ), |
5845 | 6267 | 'acua at mail.ru' => array( |
5846 | 6268 | |
6269 | + '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden | |
6270 | + | |
6271 | + // by adventurer at allmyns.info | |
6272 | + '.zgyfubsvi.cn', // 84.16.251.218(*.internetserviceteam.com) | |
6273 | + | |
6274 | + // by webmaster at allmyns.info | |
6275 | + '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS) | |
6276 | + '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de) | |
6277 | + '.lbtuo.cn', // 84.16.255.254(*.internetserviceteam.com) | |
6278 | + '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net) | |
6279 | + '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent) | |
6280 | + '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de) | |
6281 | + '.riumh.cn', // 84.16.226.28(*snip*) | |
6282 | + '.zbtym.cn', // 84.16.251.219(*.internetserviceteam.com) | |
6283 | + '.zjcgx.cn', // 217.20.112.102(*.internetserviceteam.com) | |
6284 | + '.zxvlr.cn', // 84.16.255.253(*.internetserviceteam.com) | |
6285 | + | |
5847 | 6286 | // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found' |
5848 | 6287 | '.dns4babka.info', // by acua at mail.ru |
6288 | + | |
6289 | + // by golubcov at dns4babka.info | |
6290 | + '.toiulw.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200) | |
6291 | + | |
5849 | 6292 | // by webmaster at dns4babka.info |
5850 | 6293 | '.credh.cn', |
5851 | 6294 | '.fucfv.cn', |
@@ -5856,6 +6299,13 @@ $blocklist['C'] = array( | ||
5856 | 6299 | |
5857 | 6300 | // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found' |
5858 | 6301 | '.dedka2ns.info', // by acua at mail.ru |
6302 | + | |
6303 | + // by chasik at dedka2ns.info | |
6304 | + '.vlqnoj.cn', // 84.16.251.220(*.internetserviceteam.com) | |
6305 | + | |
6306 | + // by rochel at dedka2ns.info | |
6307 | + '.fudhxjjqh.cn', | |
6308 | + | |
5859 | 6309 | // by webmaster at dedka2ns.info |
5860 | 6310 | '.ascpo.cn', |
5861 | 6311 | '.jgycr.cn', |
@@ -5866,9 +6316,100 @@ $blocklist['C'] = array( | ||
5866 | 6316 | '.ukncd.cn', |
5867 | 6317 | '.zijgb.cn', |
5868 | 6318 | |
5869 | - // 84.16.255.253(*.internetserviceteam.com), / says 'noy found' | |
6319 | + // 84.16.255.253(*snip*), / says 'noy found' | |
5870 | 6320 | '.dns4dedka.info', // by acua at mail.ru |
5871 | - // by webmaster at dns4dedka.info | |
6321 | + | |
6322 | + // by aleon at dns4dedka.info | |
6323 | + '.afjjvumqa.cn', // 84.16.249.240(*snip*) | |
6324 | + | |
6325 | + // by dig at dns4dedka.info | |
6326 | + '.bdnge.cn', // 84.16.226.28(*snip*) | |
6327 | + '.dcdsu.cn', // 217.20.112.102(*snip*) | |
6328 | + '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42) | |
6329 | + '.frvdv.cn', // 84.16.226.28(*snip*) | |
6330 | + '.heulw.cn', // 84.16.226.217(*snip*) | |
6331 | + '.hissw.cn', // 84.16.249.240(*snip*) | |
6332 | + '.lwqjr.cn', // 84.16.255.253(*snip*) | |
6333 | + '.obwew.cn', // 84.16.251.218(*snip*) | |
6334 | + '.otkiu.cn', // 84.16.255.254(*snip*) | |
6335 | + '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com) | |
6336 | + '.rgjcs.cn', // 84.16.251.219(*snip*) | |
6337 | + '.rjskp.cn', // 84.16.249.241(*snip*) | |
6338 | + '.sokrp.cn', // 84.16.226.217(*snip*) | |
6339 | + '.ubtnp.cn', // 84.16.226.29(*snip*) | |
6340 | + '.vdecc.cn', // 84.16.226.29(*snip*) | |
6341 | + '.vgkkc.cn', // 89.149.196.72(*snip*) | |
6342 | + '.vqsmy.cn', // 84.16.249.239(*snip*) | |
6343 | + '.xcmsp.cn', // 84.16.251.223(freebsd .. what) | |
6344 | + '.xiuky.cn', // 84.16.251.222(*snip*) | |
6345 | + '.xrqcd.cn', // 89.149.196.19(*snip*) | |
6346 | + | |
6347 | + // by la at dns4dedka.info | |
6348 | + '.aeyzf.cn', // 84.16.251.218(*snip*) | |
6349 | + '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16 | |
6350 | + '.bgslu.cn', // 89.149.228.163(*snip*) | |
6351 | + '.dxouw.cn', // 84.16.255.253(*snip*) | |
6352 | + '.ecsbe.cn', // 84.16.251.218(*snip*) | |
6353 | + '.eothy.cn', // 84.16.249.241(*snip*) | |
6354 | + '.epocy.cn', // 84.16.251.220(*snip*) | |
6355 | + '.ewvjw.cn', // 89.149.196.72(*snip*) | |
6356 | + '.faacz.cn', // 84.16.251.222(*snip*) | |
6357 | + '.filun.cn', // 89.149.196.72(*snip*) | |
6358 | + '.fzdpk.cn', // 84.16.249.239(*snip*) | |
6359 | + '.hatyg.cn', // 84.16.251.223(*snip*) | |
6360 | + '.hmtqn.cn', // 84.16.249.240(*snip*) | |
6361 | + '.ibfte.cn', // 89.149.196.19(*snip*) | |
6362 | + '.jcaym.cn', // 84.16.249.240(*snip*) | |
6363 | + '.iqzaw.cn', // 84.16.255.254(*snip*) | |
6364 | + '.jclsf.cn', // 84.16.249.240(*snip*) | |
6365 | + '.jefdh.cn', // 84.16.249.240(*snip*) | |
6366 | + '.kchjh.cn', // 84.16.251.219(*snip*) | |
6367 | + '.krumo.cn', // 84.16.226.217(*snip*) | |
6368 | + '.lbava.cn', // 217.20.112.102(*snip*) | |
6369 | + '.mqrtw.cn', // 84.16.226.29(*snip*) | |
6370 | + '.njpgv.cn', // 84.16.251.219(*snip*) | |
6371 | + '.npovm.cn', // 84.16.226.28(*snip*) | |
6372 | + '.nyobt.cn', // 89.149.196.19(*snip*) | |
6373 | + '.ovxxt.cn', // 84.16.251.223(*snip*) | |
6374 | + '.owhwz.cn', // 89.149.228.163(*snip*) | |
6375 | + '.ozjyi.cn', // 84.16.249.241(*snip*) | |
6376 | + '.pfnzj.cn', // 84.16.226.217(*snip*) | |
6377 | + '.pixvf.cn', // 84.16.255.254(*snip*) | |
6378 | + '.qydph.cn', // 89.149.228.163(*snip*) | |
6379 | + '.rxens.cn', // 89.149.196.72(*snip*) | |
6380 | + '.sojbp.cn', // 84.16.249.239(*snip*) | |
6381 | + '.srths.cn', // 84.16.251.222(*snip*) | |
6382 | + '.tdytc.cn', // 84.16.255.254(*snip*) | |
6383 | + '.unquz.cn', // 84.16.251.223(*snip*) | |
6384 | + '.uwcns.cn', // 89.149.196.19(*snip*) | |
6385 | + '.vcbdm.cn', // 84.16.251.220(*snip*) | |
6386 | + '.wnmat.cn', // 84.16.255.253(*snip*) | |
6387 | + '.wttmr.cn', // 84.16.226.29(*snip*) | |
6388 | + '.xpwib.cn', // 84.16.251.220(*snip*) | |
6389 | + '.yrogt.cn', // 84.16.249.239(*snip*) | |
6390 | + | |
6391 | + // by le at dns4dedka.info | |
6392 | + '.goslw.cn', // 84.16.251.220(*snip*) | |
6393 | + '.hqbmh.cn', // 84.16.251.223(*snip*) | |
6394 | + '.iewik.cn', // 84.16.255.254(*snip*) | |
6395 | + '.jnkeh.cn', // 89.149.228.163(*snip*) | |
6396 | + '.pifyp.cn', // 89.149.228.163(*snip*) | |
6397 | + '.nohyl.cn', // 89.149.196.72(*snip*) | |
6398 | + '.nvzvx.cn', // 84.16.255.254(*snip*) | |
6399 | + '.uchoe.cn', // 84.16.249.239(*snip*) | |
6400 | + '.ujoyf.cn', // 84.16.251.218(*snip*) | |
6401 | + '.ulfqh.cn', // 89.149.196.19(*snip*) | |
6402 | + '.vxugv.cn', // 84.16.251.223(*snip*) | |
6403 | + '.dbgti.cn', // 84.16.249.240(*snip*) | |
6404 | + '.oelmv.cn', // 84.16.226.28(*snip*) | |
6405 | + '.qniww.cn', // 84.16.251.218(*snip*) | |
6406 | + '.vtvyq.cn', // 84.16.251.219(*snip*) | |
6407 | + '.zqonm.cn', // 84.16.249.241(*snip*) | |
6408 | + | |
6409 | + // by skspb at dns4dedka.info | |
6410 | + '.hxkxkjy.cn', // 84.16.226.28(*snip*) | |
6411 | + | |
6412 | + // 84.16.255.253(*snip*) by webmaster at dns4dedka.info | |
5872 | 6413 | '.bcpnb.cn', |
5873 | 6414 | '.cfbpr.cn', |
5874 | 6415 | '.dnndb.cn', |
@@ -5876,116 +6417,45 @@ $blocklist['C'] = array( | ||
5876 | 6417 | '.iutps.cn', |
5877 | 6418 | '.ryftj.cn', |
5878 | 6419 | '.vxqcb.cn', |
5879 | - '.zxvlr.cn', // by webmaster at allmyns.info | |
5880 | - | |
5881 | - // by dig at dns4dedka.info | |
5882 | - '.bdnge.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de) | |
5883 | - '.dcdsu.cn', // 217.20.112.102(*.internetserviceteam.com) | |
5884 | - '.fhgdp.cn', // 84.16.249.239(euro.lotgd.pl -> 88.198.6.42) | |
5885 | - '.frvdv.cn', // 84.16.226.28(*snip*) | |
5886 | - '.heulw.cn', // 84.16.226.217(mand.zapto.org -- Non-existent) | |
5887 | - '.hissw.cn', // 84.16.249.240(*snip*) | |
5888 | - '.lwqjr.cn', // 84.16.255.253(*snip*) | |
5889 | - '.obwew.cn', // 84.16.251.218(*.internetserviceteam.com) | |
5890 | - '.otkiu.cn', // 84.16.255.254(*.internetserviceteam.com) | |
5891 | - '.pztkq.cn', // 89.149.228.163(*.internetserviceteam.com) | |
5892 | - '.rgjcs.cn', // 84.16.251.219(*.internetserviceteam.com) | |
5893 | - '.rjskp.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net) | |
5894 | - '.sokrp.cn', // 84.16.226.217(*snip*) | |
5895 | - '.ubtnp.cn', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) | |
5896 | - '.vdecc.cn', // 84.16.226.29(*snip*) | |
5897 | - '.vgkkc.cn', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> 72.9.144.200) | |
5898 | - '.vqsmy.cn', // 84.16.249.239(*snip*) | |
5899 | - '.xcmsp.cn', // 84.16.251.223(freebsd .. what) | |
5900 | - '.xiuky.cn', // 84.16.251.222(*snip*) | |
5901 | - '.xrqcd.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de) | |
5902 | - | |
5903 | - // by la at dns4dedka.info | |
5904 | - '.aeyzf.cn', // 84.16.251.218(*snip*) | |
5905 | - '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16 | |
5906 | - '.bgslu.cn', // 89.149.228.163(*snip*) | |
5907 | - '.dxouw.cn', // 84.16.255.253(*snip*) | |
5908 | - '.ecsbe.cn', // 84.16.251.218(*snip*) | |
5909 | - '.eothy.cn', // 84.16.249.241(*snip*) | |
5910 | - '.epocy.cn', // 84.16.251.220(*.internetserviceteam.com) | |
5911 | - '.ewvjw.cn', // 89.149.196.72(*snip*) | |
5912 | - '.faacz.cn', // 84.16.251.222(*snip*) | |
5913 | - '.filun.cn', // 89.149.196.72(*snip*) | |
5914 | - '.fzdpk.cn', // 84.16.249.239(*snip*) | |
5915 | - '.hatyg.cn', // 84.16.251.223(*snip*) | |
5916 | - '.hmtqn.cn', // 84.16.249.240(*snip*) | |
5917 | - '.ibfte.cn', // 89.149.196.19(*snip*) | |
5918 | - '.jcaym.cn', // 84.16.249.240(*snip*) | |
5919 | - '.iqzaw.cn', // 84.16.255.254(*snip*) | |
5920 | - '.jclsf.cn', // 84.16.249.240(*snip*) | |
5921 | - '.jefdh.cn', // 84.16.249.240(*snip*) | |
5922 | - '.kchjh.cn', // 84.16.251.219(*snip*) | |
5923 | - '.krumo.cn', // 84.16.226.217(*snip*) | |
5924 | - '.lbava.cn', // 217.20.112.102(*snip*) | |
5925 | - '.mqrtw.cn', // 84.16.226.29(*snip*) | |
5926 | - '.njpgv.cn', // 84.16.251.219(*snip*) | |
5927 | - '.npovm.cn', // 84.16.226.28(*snip*) | |
5928 | - '.nyobt.cn', // 89.149.196.19(*snip*) | |
5929 | - '.ovxxt.cn', // 84.16.251.223(*snip*) | |
5930 | - '.owhwz.cn', // 89.149.228.163(*snip*) | |
5931 | - '.ozjyi.cn', // 84.16.249.241(*snip*) | |
5932 | - '.pfnzj.cn', // 84.16.226.217(*snip*) | |
5933 | - '.pixvf.cn', // 84.16.255.254(*snip*) | |
5934 | - '.qydph.cn', // 89.149.228.163(*snip*) | |
5935 | - '.rxens.cn', // 89.149.196.72(*snip*) | |
5936 | - '.sojbp.cn', // 84.16.249.239(*snip*) | |
5937 | - '.srths.cn', // 84.16.251.222(*snip*) | |
5938 | - '.tdytc.cn', // 84.16.255.254(*snip*) | |
5939 | - '.unquz.cn', // 84.16.251.223(*snip*) | |
5940 | - '.uwcns.cn', // 89.149.196.19(*snip*) | |
5941 | - '.vcbdm.cn', // 84.16.251.220(*snip*) | |
5942 | - '.wnmat.cn', // 84.16.255.253(*snip*) | |
5943 | - '.wttmr.cn', // 84.16.226.29(*snip*) | |
5944 | - '.xpwib.cn', // 84.16.251.220(*snip*) | |
5945 | - '.yrogt.cn', // 84.16.249.239(*snip*) | |
5946 | - | |
5947 | - // by le at dns4dedka.info | |
5948 | - '.goslw.cn', // 84.16.251.220(*snip*) | |
5949 | - '.hqbmh.cn', // 84.16.251.223(*snip*) | |
5950 | - '.iewik.cn', // 84.16.255.254(*snip*) | |
5951 | - '.jnkeh.cn', // 89.149.228.163(*snip*) | |
5952 | - '.pifyp.cn', // 89.149.228.163(*snip*) | |
5953 | - '.nohyl.cn', // 89.149.196.72(*snip*) | |
5954 | - '.nvzvx.cn', // 84.16.255.254(*snip*) | |
5955 | - '.uchoe.cn', // 84.16.249.239(*snip*) | |
5956 | - '.ujoyf.cn', // 84.16.251.218(*snip*) | |
5957 | - '.ulfqh.cn', // 89.149.196.19(*snip*) | |
5958 | - '.vxugv.cn', // 84.16.251.223(*snip*) | |
5959 | - | |
5960 | - '.dbgti.cn', // 84.16.249.240(*snip*) | |
5961 | - '.oelmv.cn', // 84.16.226.28(*snip*) | |
5962 | - '.qniww.cn', // 84.16.251.218(*snip*) | |
5963 | - '.vtvyq.cn', // 84.16.251.219(*snip*) | |
5964 | - '.zqonm.cn', // 84.16.249.241(*snip*) | |
5965 | 6420 | |
5966 | - '.allmyns.info', // 84.16.226.29 by acua at mail.ru, / forbidden | |
5967 | - // by webmaster at allmyns.info | |
5968 | - '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS) | |
5969 | - '.ihpvy.cn', // 84.16.226.28(*snip*) | |
5970 | - '.lbtuo.cn', // 84.16.255.254(*snip*) | |
5971 | - '.liunc.cn', // 84.16.249.241(*snip*) | |
5972 | - '.rcyqr.cn', // 84.16.226.217(*snip*) | |
5973 | - '.rekth.cn', // 89.149.196.19(*snip*) | |
5974 | - '.riumh.cn', // 84.16.226.28(*snip*) | |
5975 | - '.zbtym.cn', // 84.16.251.219(*snip*) | |
5976 | - '.zjcgx.cn', // 217.20.112.102(*snip*) | |
6421 | + '.ns2best.info', // 89.149.196.19(*snip*) by acua at mail.ru | |
6422 | + // by apple at ns2best.info | |
6423 | + '.ptiey.cn', // 84.16.252.80(*.internetserviceteam.com) | |
6424 | + // by paulwolf at ns2best.info | |
6425 | + '.ifytzq.cn', | |
6426 | + | |
6427 | + '.sedns.info', // 84.16.226.216(*snip*) by acua at mail.ru | |
6428 | + // by pigato at sedns.info | |
6429 | + '.xjvbunksa.cn', // 217.20.112.102(*snip*) | |
6430 | + // by roschem at sedns.info | |
6431 | + '.ilzelqvmoa.cn', // 84.16.243.170(*.fixshell.com -> Non-existent) | |
6432 | + // by op at sedns.info | |
6433 | + '.bumfn.cn', | |
6434 | + '.csmlu.cn', | |
6435 | + '.epcwi.cn', | |
6436 | + '.krwzn.cn', | |
6437 | + '.lkvcp.cn', | |
6438 | + '.mvmkh.cn', | |
6439 | + '.nwpeg.cn', | |
6440 | + '.rnqol.cn', | |
6441 | + '.tyuaf.cn', | |
6442 | + '.ucysa.cn', | |
6443 | + '.vhyom.cn', | |
6444 | + '.wtstu.cn', | |
6445 | + '.zslxr.cn', | |
5977 | 6446 | ), |
5978 | 6447 | 'gilvcta sy jilbertsbram.com' => array( |
5979 | - '.dsfljkeilm1.cn', // 206.53.51.126 | |
5980 | - '.dsfljkeilm2.cn', // 206.53.51.126 | |
5981 | - '.dsfljkeilm3.cn', // IP not allocated now | |
5982 | - '.dsfljkeilm4.cn', // IP not allocated now | |
5983 | - '.dsfljkeilm5.cn', // IP not allocated now | |
5984 | - '.dsfljkeilm6.cn', // IP not allocated now | |
5985 | - '.dsfljkeilm7.cn', // IP not allocated now | |
5986 | - '.dsfljkeilm8.cn', // IP not allocated now | |
5987 | - '.dsfljkeilm9.cn', // IP not allocated now | |
5988 | - '.dsfljkeilm10.cn', // IP not allocated now | |
6448 | + // 206.53.51.126 | |
6449 | + '.dsfljkeilm1.cn', | |
6450 | + '.dsfljkeilm2.cn', | |
6451 | + '.dsfljkeilm3.cn', | |
6452 | + '.dsfljkeilm4.cn', | |
6453 | + '.dsfljkeilm5.cn', | |
6454 | + '.dsfljkeilm6.cn', | |
6455 | + '.dsfljkeilm7.cn', | |
6456 | + '.dsfljkeilm8.cn', | |
6457 | + '.dsfljkeilm9.cn', | |
6458 | + '.dsfljkeilm10.cn', | |
5989 | 6459 | ), |
5990 | 6460 | 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com) |
5991 | 6461 |
@@ -6142,16 +6612,217 @@ $blocklist['C'] = array( | ||
6142 | 6612 | '.pimpcupid.com', // 89.149.226.111(*.internetserviceteam.com) |
6143 | 6613 | ), |
6144 | 6614 | 'hosan by front.ru' => array( |
6145 | - '.online-freesearch.com', // 206.53.51.155 | |
6146 | - '.carsprojects.com', // 206.53.51.159 | |
6147 | - '.sport-brands.com', // 206.53.51.167 | |
6148 | - '.choosefinest.com', // 206.53.51.157 | |
6615 | + '.salihome.info', // 206.53.51.155(non-existent) | |
6616 | + '.online-freesearch.com', // 206.53.51.155 | |
6617 | + '.choosefinest.com', // 206.53.51.157 | |
6618 | + '.carsprojects.com', // 206.53.51.159 | |
6619 | + '.sport-brands.com', // 206.53.51.167 | |
6149 | 6620 | '.online-pharmaceutics.com', // 206.53.51.168 |
6150 | 6621 | ), |
6622 | + '89.248.107.118' => array( // "Canadian Pharmacy" 89.248.107.118(non-existent) | |
6623 | + '.canadians-health.com', // by andreyletov at yahoo.com | |
6624 | + '.cialischeap.info', | |
6625 | + '.superrv.info', | |
6626 | + ), | |
6627 | + 'zinerit4 at gmail.com' => array( // 69.46.29.149(hv37.steephost.com => 72.232.191.50 ...) | |
6628 | + '.hatbi.com', | |
6629 | + '.justrty.com', | |
6630 | + '.kol2you.com', | |
6631 | + '.kolplanet.com', | |
6632 | + '.myrty.com', | |
6633 | + '.officialrty.com', | |
6634 | + '.pbaol.com', | |
6635 | + '.planetkol.com', | |
6636 | + ), | |
6637 | + 'Abra1.com' => array( | |
6638 | + // 66.45.254.244(non-existent), 66.45.254.245(non-existent) | |
6639 | + '.abra1.com', // by info at maisontropicale.com | |
6640 | + '.abra4.com', // by websites at caribbeanonlineinternational.com | |
6641 | + | |
6642 | + // 209.85.51.238(*.opticaljungle.com -> non-existent) | |
6643 | + '.abra2.com', // by domain at anondns.org | |
6644 | + '.abra3.com', // by domain at anondns.org | |
6645 | + ), | |
6646 | + 'topdomainz at gmail.com' => array( | |
6647 | + // 217.73.201.237 , ns *.parked.ru | |
6648 | + '.aboutgoogleearth.info', // IP timed-out, ns *.aboutgoogleearth.info | |
6649 | + '.aboutgooglegroup.info', | |
6650 | + '.aboutgoogleimage.info', | |
6651 | + '.aboutgooglemail.info', | |
6652 | + '.aboutgooglemap.info', | |
6653 | + '.aboutgooglenews.info', | |
6654 | + '.aboutgooglevideo.info', | |
6655 | + '.bestgoogleearth.info', | |
6656 | + '.magicgoogleearth.info', | |
6657 | + '.magicgooglemap.info', | |
6658 | + '.magicgooglevideo.info', | |
6659 | + | |
6660 | + // 84.16.251.248(*.internetserviceteam.com), ns *.aboutgoogleearth.info | |
6661 | + '.slajzer.info', | |
6662 | + '.tonoscelular.info', | |
6663 | + '.tonosmotorola.info', | |
6664 | + ), | |
6665 | + 'Anderson at extra.by' => array( | |
6666 | + // Encoded JavaScript | |
6667 | + | |
6668 | + // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info | |
6669 | + '.4cat.info', // by Anderson at extra.by, ns *.9upp.info | |
6670 | + '.6dir.info', | |
6671 | + '.8dir.info', | |
6672 | + '.9dir.info', | |
6673 | + '.2pro.info', | |
6674 | + '.5pro.info', // by Anderson at extra.by, ns *.9upp.info | |
6675 | + '.6pro.info', | |
6676 | + '.7pro.info', | |
6677 | + '.8pro.info', | |
6678 | + '.9pro.info', | |
6679 | + '.5sms.info', | |
6680 | + '.6sms.info', | |
6681 | + '.8sms.info', | |
6682 | + '.9sms.info', | |
6683 | + '.1upp.info', | |
6684 | + '.2upp.info', | |
6685 | + '.3upp.info', | |
6686 | + '.4upp.info', | |
6687 | + '.5upp.info', | |
6688 | + '.6upp.info', | |
6689 | + '.7upp.info', | |
6690 | + '.8upp.info', | |
6691 | + '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info | |
6692 | + '.2vip.info', // by Anderson at extra.by | |
6693 | + '.4vip.info', | |
6694 | + '.5vip.info', | |
6695 | + '.6vip.info', | |
6696 | + '.7vip.info', | |
6697 | + '.8vip.info', // ns *.9upp.info | |
6698 | + '.9vip.info', | |
6699 | + | |
6700 | + // 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info | |
6701 | + '.w3rar.info', | |
6702 | + '.w3sex.info', | |
6703 | + '.w3zip.info', | |
6704 | + '.w3in.info', | |
6705 | + '.w3out.info', | |
6706 | + ), | |
6707 | + 'zorkin87 at mail.ru' => array( | |
6708 | + // 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com) | |
6709 | + '.ruqore.com', | |
6710 | + '.goxama.com', | |
6711 | + '.cazebi.com', | |
6712 | + '.fukeqa.com', | |
6713 | + '.fydoge.com', | |
6714 | + '.jukaly.com', | |
6715 | + '.jumoga.com', | |
6716 | + '.jumuxo.com', | |
6717 | + '.tyriva.com', | |
6718 | + '.vudyho.com' | |
6719 | + ), | |
6720 | + 'jessicaeagloff at yahoo.co.uk' => array( | |
6721 | + '.pilltrade.com', // 91.196.219.81(non-existent) by jessicaeagloff at yahoo.co.uk, ns *.rxrxrxrx.com | |
6722 | + '.rxrxrxrx.com', // IP not allocated by postmaster at cialischoice.com | |
6723 | + '.cialischoice.com', // 81.29.249.88(non-existent) by postmaster at cialischoice.com, ns *.rxp-hosting.com | |
6724 | + '.rxp-hosting.com', // IP not allocated by jessicaeagloff at yahoo.co.uk | |
6725 | + ), | |
6726 | + 'qbbs at xinoffice.com' => array( | |
6727 | + // ns *.name-services.com | |
6728 | + '.lingage.com', // 8.15.231.118 | |
6729 | + '.puksins.com', // IP not allocated now | |
6730 | + ), | |
6731 | + 'advertolog at gmail.com' => | |
6732 | + // 81.0.250.86(network.upl.cz => non-existent) or | |
6733 | + // 217.11.233.27 | |
6734 | + '#^(?:.*\.)?download-mp3-music-0(?:[0-2][0-9]|30)\.cn$#', // 001-030 | |
6735 | + 'contact at aboutdomain.com' => array( | |
6736 | + '.lopieur0.com', // Not match but used | |
6737 | + '.lopieur1.com', // Not match but used | |
6738 | + '.lopieur2.com', // 209.62.21.228(*.ev1servers.net => non-existent) by contact at aboutdomain.com | |
6739 | + ), | |
6740 | + 'info at cash4wm.biz related' => array( | |
6741 | + // 84.16.233.12(*.internetserviceteam.com) | |
6742 | + '.newsblogforu.com', | |
6743 | + | |
6744 | + // 84.16.235.141() | |
6745 | + '.informator4you.com', | |
6746 | + | |
6747 | + // 84.16.240.68(*.internetserviceteam.com) | |
6748 | + '.absolute-best-site.com', | |
6749 | + '.new-blog-for-you.com', | |
6750 | + | |
6751 | + // 84.16.240.69(*.internetserviceteam.com) | |
6752 | + '.best-sport-blog.com', | |
6753 | + '.big-internet-site.com', | |
6754 | + '.brendsite.com', | |
6755 | + '.my-news-blog.com', | |
6756 | + | |
6757 | + // 84.16.242.123(*.internetserviceteam.com) | |
6758 | + '.best-news-blog.com', | |
6759 | + '.site-with-content.com', | |
6760 | + | |
6761 | + // The same method with info at cash4wm.biz | |
6762 | + '.coolnews-4u.com', // 217.20.123.122(*.internetserviceteam.com), | |
6763 | + '.bestnews-4u.com', // 84.16.227.135(*.internetserviceteam.com) | |
6764 | + '.big-site-news.com', // 84.16.243.168(*.fixshell.com -> non-existent) | |
6765 | + '.good-news-4u.info', // 89.149.196.72(mendoi.fansubs.omni-forums.net -> ..) | |
6766 | + '.super-blog-here.com', // 89.149.247.25, the same IP with iblcqms.cn | |
6767 | + '.bloginfo4u.info', // 89.149.247.25 | |
6768 | + ), | |
6769 | + 'kerjy at yahoo.com' => array( | |
6770 | + '.wibek.com', // 66.232.126.212(hv71.steephost.com -> ..) by boldalex at yahoo.com | |
6771 | + '.hehik.com', // 66.232.126.213(hv71.steephost.com -> ..) by kerovska at mail.nu | |
6772 | + '.mynyh.com', // 66.232.126.214(hv71.steephost.com -> ..) by kerjy at yahoo.com | |
6773 | + '.mabej.com', // 66.232.126.215(hv71.steephost.com -> ..) by jeffy at hotmail.com | |
6774 | + '.qanom.com', // 66.232.126.216(hv71.steephost.com -> ..) by kerjy at yahoo.com | |
6775 | + ), | |
6776 | + 'vme at hotmail.ru' => array( | |
6777 | + '.seoblack.net', // 216.195.33.112(non-exsistent) | |
6778 | + '.seoblack.biz', // 216.195.33.113(non-exsistent) | |
6779 | + ), | |
6780 | + 'john at hellomyns.info' => array( | |
6781 | + '.cuhdw.cn', // 217.20.113.27, / nothing | |
6782 | + '.byouz.cn', // 89.149.247.24, / nothing | |
6783 | + '.idghc.cn', | |
6784 | + '.inxrj.cn', | |
6785 | + '.jqzdf.cn', | |
6786 | + '.vsxej.cn', | |
6787 | + '.wkgnr.cn', | |
6788 | + ), | |
6789 | + '.CN spam payload' => array( | |
6790 | + '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com | |
6791 | + '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com | |
6792 | + '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net | |
6793 | + '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com | |
6794 | + '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com | |
6795 | + '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn | |
6796 | + '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com | |
6797 | + '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com | |
6798 | + '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com | |
6799 | + '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn | |
6800 | + ), | |
6801 | + 'Time2ns.info' => array( | |
6802 | + // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private | |
6803 | + '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58) | |
6804 | + '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info | |
6805 | + '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info | |
6806 | + '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found | |
6807 | + ), | |
6808 | + 'Ilovemyns.info' => array( | |
6809 | + // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private | |
6810 | + '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info | |
6811 | + ), | |
6812 | + 'Freehostdns.info' => array( | |
6813 | + // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private | |
6814 | + '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info | |
6815 | + '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info | |
6816 | + ), | |
6817 | + 'Newns4me.info' => array( | |
6818 | + // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public | |
6819 | + '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info | |
6820 | + ), | |
6151 | 6821 | |
6152 | 6822 | // C-2: Lonely domains (buddies not found yet) |
6153 | 6823 | '.0721-4404.com', |
6154 | 6824 | '.0nline-porno.info', // by Timyr (timyr at narod.ru) |
6825 | + '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden | |
6155 | 6826 | '.1-click-clipart.com', // by Big Resources, Inc. (hostmaster at bigresources.com) |
6156 | 6827 | '.19cellar.info', // by Eduardo Guro (boomouse at gmail.com) |
6157 | 6828 | '.1gangmu.com', // by gangmutangyaoju (wlmx009 at hotmail.com), Seems physing site for ff11-jp.com |
@@ -6159,45 +6830,66 @@ $blocklist['C'] = array( | ||
6159 | 6830 | '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com) |
6160 | 6831 | '.0annie.info', |
6161 | 6832 | '.6i6.de', |
6833 | + '.77toperrwuter1.info', // by Roman | |
6834 | + '.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript | |
6835 | + '.angioco.com', // 62.37.112.100, gamble | |
6162 | 6836 | '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com) |
6163 | 6837 | '.adult-master-club.com', // by Alehander (mazyrkevich at cosmostv.by) |
6164 | 6838 | '.adultpersonalsclubs.com', // by Peter (vaspet34 at yahoo.com) |
6839 | + '.akalukseree.com', // 202.44.52.54(*.worldinternetworkcorporation.com) by nantachit at yahoo.com, encoded JavaScript | |
6165 | 6840 | '.akgame.com', // 72.32.79.100 by Howard Ke (gmtbank at gmail.com), rmt & pl |
6841 | + '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be | |
6166 | 6842 | '.alfanetwork.info', // by dante (dantequick at gmail.com) |
6167 | 6843 | '.allworlddirect.info', // Forbidden |
6168 | 6844 | '.amoreitsex.com', |
6845 | + '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com | |
6846 | + '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com | |
6169 | 6847 | '.approved-medication.com', // 208.109.181.53(p3slh079.shr.phx3.secureserver.net) |
6170 | 6848 | '.areahomeinfo.info', // by Andrus (ffastenergy at yahoo.com), republishing articlealley.com |
6171 | 6849 | '.areaseo.com', // by Antony Carpito (xcentr at lycos.com) |
6850 | + '.ascotstationers.com', // 89.149.228.164(*.internetserviceteam.com) by hoopeer at gmail.com | |
6172 | 6851 | '.auto-car-cheap.org', |
6173 | 6852 | '.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site |
6174 | 6853 | '.baurish.info', |
6854 | + '.bernardtomic21.info', // by filboj at hotmail.com | |
6175 | 6855 | '.bestop.name', |
6176 | 6856 | '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl |
6177 | 6857 | '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru |
6178 | 6858 | '.bestshopfinder.info', |
6179 | 6859 | '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank |
6180 | 6860 | '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com |
6861 | + '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing | |
6181 | 6862 | '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru) |
6863 | + '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au | |
6182 | 6864 | '.capital2u.info', // by Delbert.A.Henry at dodgeit.com |
6183 | 6865 | '.casa-olympus.com', // "UcoZ WEB-SERVICES" |
6866 | + '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp | |
6184 | 6867 | '.catkittenmagazines.org', // 87.118.97.117 |
6868 | + '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com | |
6869 | + '.chatwalker.com', // 124.32.230.65 | |
6870 | + '.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com | |
6185 | 6871 | '.covertarena.co.uk', // by Wayne Huxtable |
6186 | 6872 | '.d999.info', // by Peter Vayner (peter.vayner at inbox.ru) |
6873 | + '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance | |
6187 | 6874 | '.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl |
6188 | 6875 | '.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo |
6876 | + '.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com | |
6189 | 6877 | '.dlekei.info', // by Maxima Bucaro (webmaster at tts2f.info) |
6190 | 6878 | '.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank |
6191 | 6879 | '.drug-shop.us', // by Alexandr (matrixpro at mail.ru) |
6192 | 6880 | '.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com |
6881 | + '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript | |
6882 | + '.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com | |
6193 | 6883 | '.easyshopusa.com', // by riter (riter at nm.ru) |
6884 | + '.edjuego.com', // 85.92.70.253(non-existent), gamble | |
6194 | 6885 | '.edu.ph', // "philippine network foundation inc" |
6886 | + '.eec.mn', // 208.109.203.142(*.ip.secureserver.net), encoded JavaScript | |
6195 | 6887 | '.ex-web.net', // RMT by ex co,ltd (rmt at ex-web.net) |
6196 | 6888 | '.extracheapmeds.com', // "freexxxmovies" by John Smith (89 at bite.to) |
6197 | 6889 | '.fantasy-handjob-ra.com', // by Hose Pedro (hosepedro at gmail.com) |
6198 | 6890 | '.fastppc.info', // by peter conor (fastppc at msn.com) |
6199 | 6891 | '.ffxiforums.net', // 204.16.199.105 by Zhang xiaolong (mail at 33986.com), hidden VBScript |
6200 | - '*.filthserver.com', // sales at onlinemarketingservices.biz | |
6892 | + '.filthserver.com', // sales at onlinemarketingservices.biz | |
6201 | 6893 | '.find-stuff.org', // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found |
6202 | 6894 | '.firstdrugstorezone.info', // by Goose (boris208 at yandex.ru) |
6203 | 6895 | '.free-finding.com', // by Ny hom (nyhom at yahoo.com) |
@@ -6207,12 +6899,12 @@ $blocklist['C'] = array( | ||
6207 | 6899 | '.freehost5.com', // 75.126.32.184(kosmohost.net), words only |
6208 | 6900 | '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com) |
6209 | 6901 | '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru) |
6902 | + '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79) | |
6210 | 6903 | '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com) |
6211 | 6904 | '.game4egold.com', // by Filus Saifullin (ebay at soft-script.com) |
6212 | 6905 | '.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com) |
6213 | - | |
6906 | + '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru | |
6214 | 6907 | '.gomeodc.com', // 125.65.112.49 by wang meili (gannipo at yahoo.com.cn), iframe to vviccd520.com |
6215 | - | |
6216 | 6908 | '.ganecity.com', // by shao tian (huangjinqiang at sina.com) |
6217 | 6909 | '.gm-exchange.jp', // 210.188.216.49 RMT |
6218 | 6910 | '.goamoto.ru', // by Dmitry E Kotchnev (z2archive at gmail.com) |
@@ -6228,8 +6920,10 @@ $blocklist['C'] = array( | ||
6228 | 6920 | '.hostuju.cz', // ns banan.cz, banan.it |
6229 | 6921 | '.hot4buy.org', // by Hot Maker (jot at hot4buy.org) |
6230 | 6922 | '.hotscriptonline.info',// by Psy Search (admin at psysearch.com) |
6923 | + '.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com) | |
6231 | 6924 | '.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp |
6232 | 6925 | '.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info) |
6926 | + '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz | |
6233 | 6927 | '.infradoc.com', |
6234 | 6928 | '.investorvillage.com', // by natalija puchkova (internet at internet.lv) |
6235 | 6929 | '.ismarket.com', // Google-hiding. intercage.com related IP |
@@ -6237,35 +6931,44 @@ $blocklist['C'] = array( | ||
6237 | 6931 | '.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru) |
6238 | 6932 | '.itsexosit.net', |
6239 | 6933 | '.itxxxit.net', |
6934 | + '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection | |
6240 | 6935 | '.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca) |
6241 | 6936 | '.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet |
6242 | 6937 | '.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript |
6938 | + '.jsyuanyang.com', // 58.211.0.23(non-existing) | |
6939 | + '.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript | |
6243 | 6940 | '.kingtools.de', |
6244 | 6941 | '.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252 |
6245 | 6942 | '.leucainfo.com', |
6246 | 6943 | '.library-blogs.net', // by Peter Scott (pscontent at gmail.com) |
6247 | - '.lingage.com', // by huan bing (qbbs at xinoffice.com) | |
6944 | + '.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript | |
6248 | 6945 | '.link-keeper.net', // 210.172.108.236 (257.xrea.com) |
6249 | 6946 | '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com) |
6947 | + '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP | |
6250 | 6948 | '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong |
6251 | 6949 | '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm) |
6950 | + '.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank | |
6252 | 6951 | '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md) |
6253 | 6952 | '.medpharmaworldguide.com', // by Nick Ivchenkov (signmark at gmail.com), / not found |
6254 | 6953 | '.megvideochatlive.info', // Bad seo |
6255 | 6954 | '.milfxxxpass.com', // by Morozov Pavlik (rulets at gmail.com) |
6955 | + '.mncxvsm.info', // 217.11.233.105, / blank | |
6256 | 6956 | '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com) |
6957 | + '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org | |
6257 | 6958 | '.myfgj.info', // by Filus (softscript at gmail.com) |
6258 | 6959 | '.mujiki.com', // by Mila Contora (ebumsn at ngs.ru) |
6259 | 6960 | '.mxsupportmailer.com', |
6260 | 6961 | '.next-moneylife.com', // RMT |
6261 | 6962 | '.newalandirect.com', // by Alnoor Hirji, ns *.sablehost.com |
6262 | 6963 | '.ngfu2.info', // by Tara Lagrant (webmaster at ngfu2.info) |
6964 | + '.northwestradiator.com', // 66.206.12.166(caudill.cc -> 63.115.2.1 -> ...) by nwradiator at qwest.net, encoded JavaScript | |
6263 | 6965 | '.nucked-sex.com', // 203.223.150.222 by lis (noidlis2 at yahoo.com) |
6264 | 6966 | '.ok10000.com', // by zipeng hu (ldcs350003 at hotmail.com) |
6265 | 6967 | '.olimpmebel.info', // by pol (pauk_life at mail.ru), frame to bettersexmall.com |
6266 | 6968 | '.onlinetert.info', // by Jarod Hyde (grigorysch at gmail.com) |
6267 | 6969 | '.onlin-casino.com', // by Lomis Konstantinos (businessline3000 at gmx.de) |
6268 | 6970 | '.onlineviagra.de', |
6971 | + '.oppe.biz', // 81.0.195.241(non-existent) by Nellie.J.Gonzalez at mailinator.com, / blank, redirect to thesuperxxx.com | |
6269 | 6972 | '.ornit.info', // by Victoria C. Frey (Victoria.C.Frey at pookmail.com) |
6270 | 6973 | '.ozomw.info', |
6271 | 6974 | '.pahuist.info', // by Yura (yuralg2005 at yandex.ru) |
@@ -6280,6 +6983,7 @@ $blocklist['C'] = array( | ||
6280 | 6983 | '.portaldiscount.com', // by Mark Tven (bestsaveup at gmail.com) |
6281 | 6984 | '.powerlevelingweb.com', // 68.178.211.9 by jun zhang (huanbing at 126.com), pl |
6282 | 6985 | '.prama.info', // by Juan.Kang at mytrashmail.com |
6986 | + '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts | |
6283 | 6987 | ',pulsar.net', // by TheBuzz Int. (theboss at tfcclion.com) |
6284 | 6988 | '.qoclick.net', // by DMITRIY SOLDATENKO |
6285 | 6989 | '.quality-teen-porn-photo.com', // by info at densa.info |
@@ -6288,7 +6992,10 @@ $blocklist['C'] = array( | ||
6288 | 6992 | '.rigame.info', // by debra_jordan07 at yahoo.com |
6289 | 6993 | '.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt |
6290 | 6994 | '.roin.info', // by Evgenius (roinse at yandex.ru) |
6995 | + '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235) | |
6996 | + '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru | |
6291 | 6997 | '.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com) |
6998 | + '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com | |
6292 | 6999 | '.searchadv.com', // by Jaan Randolph (searchadv at gmail.com) |
6293 | 7000 | '.seek-www.com', // by Adam Smit (pingpong at mail.md) |
6294 | 7001 | '.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com |
@@ -6302,24 +7009,33 @@ $blocklist['C'] = array( | ||
6302 | 7009 | '.sepcn.info', // / not found |
6303 | 7010 | '.sslcp.com', // by shufang zhou (info at 6come.com), dns *.hichina.com |
6304 | 7011 | '.sticy.info', // by Richard D. Mccall (richardmccall at yahoo.com) |
7012 | + '.stordproduksjonslag.no', // 81.27.32.152(wh42.webhuset.no) by helgatun at mail.com, encoded JavaScript | |
7013 | + '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales | |
6305 | 7014 | '.superrwm.info', // by Dark Dux (duxdark at yahoo.com) |
6306 | 7015 | '.superverizonringtones.com', // by joshua at list.ru |
7016 | + '.teriak.cn', // 83.69.224.82(non-existent) by sto_xyev at yahoo.com, / blank | |
7017 | + '.thebest-penis-enlargement-pills.com', // 209.59.142.226(host.gudzonserver.com) by sergey.xoxlov at gmail.com | |
6307 | 7018 | '.thehostcity.com', // Domains by Proxy |
7019 | + '.thesuperxxx.com', // 81.29.249.27(non-existent) | |
6308 | 7020 | '.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank |
6309 | 7021 | '.thetrendy.info', // by Harold (Harold.J.Craft at pookmail.com), / is blank |
6310 | 7022 | '.theusapills.com', // by Dr. Zarman (contactus at theusapills.com) |
6311 | 7023 | '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com) |
6312 | 7024 | '.topmeds10.com', |
7025 | + '.tschofenig.com', // 213.239.234.98(*.clients.your-server.de), port 8080 | |
6313 | 7026 | '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net) |
6314 | 7027 | '.twabout.com', // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net |
6315 | 7028 | '.uaro.info', // by Neru Pioner (neru at smtp.ru) |
6316 | 7029 | '.unctad.net', // by gfdogfd at lovespb.com |
6317 | 7030 | '.vacant.org.uk', |
7031 | + '.viagrausaonline.com', // 85.17.52.139(non-existent) | |
6318 | 7032 | '.vip-get.info', // 203.223.150.222 by Jhon Craig (bartes1992 at mail.ru), / forbidden |
6319 | 7033 | '.virtualsystem.de', |
6320 | 7034 | '.vdxhost.com', |
7035 | + '.vodkaporn.com', // 67.19.116.83(non-existent) by green at gmx.co.uk | |
6321 | 7036 | '.vviccd520.com', // 202.75.219.217 by kuang zhang (oulingfeng66 at 163.com), encoded JavaScript |
6322 | 7037 | '.homes.com.au', // 139.134.5.124 by wongcr at bigpond.net.au, / meanless, |
7038 | + '.wbtechs.us', // 68.178.232.100(parkwebwin-v01.prod.mesa1.secureserver.net) by westbabylon at aol.com | |
6323 | 7039 | '.webnow.biz', // by Hsien I Fan (admin at servcomputing.com) |
6324 | 7040 | '.webtools24.net', // by Michael Helminger (info at ishelminger.de) |
6325 | 7041 | '.wer3.info', // by Martin Gundel (Martin at mail.com), 404 not found |
@@ -6340,18 +7056,216 @@ $blocklist['C'] = array( | ||
6340 | 7056 | '.zyguo.info', // ns globoxhost.net |
6341 | 7057 | '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com) |
6342 | 7058 | |
6343 | - '.101010.ru', // 72.232.246.178(spirit.intellovations.com -> 207.218.230.66) by gkrg94g at mail.ru, / forbidden | |
6344 | - '.alasex.info', // 'UcoZ web-services' 216.32.81.234(server.isndns.net) by yx0 at yx0.be | |
6345 | - '.golden-keys.net', // 89.149.205.146(unknown.vectoral.info) by aktitol at list.ru | |
7059 | + | |
7060 | + '.canada-grants.ca', // 173.193.6.128 link to grantsmoney.com | |
7061 | + '.grantsmoney.com', // 72.26.207.6 | |
7062 | + | |
7063 | + 'admin at thumbset.net' => array( // 2010/08 207.7.82.170, Don Wilson (admin at thumbset.net) | |
7064 | + // link to licensedrxpharm.com | |
7065 | + '.avelocitoyens.com', | |
7066 | + '.lzbps.com', | |
7067 | + '.bittermonkeycomic.com', | |
7068 | + '.estadiodeportivocali.com', | |
7069 | + '.fb1177.com', | |
7070 | + '.ghanabookpublishers.com', | |
7071 | + '.greensagepage.com', | |
7072 | + '.inlakech.com', | |
7073 | + '.leungwingkei.net', | |
7074 | + '.liberadea.org', | |
7075 | + '.rocknrollgypsy.com', | |
7076 | + '.su-om.com', | |
7077 | + '.ymouk.org', // 2010/08 207.7.82.170, by (ymouk.org at contactprivacy.com) | |
7078 | + | |
7079 | + // link to oainternetservices.com | |
7080 | + '.elpadraic.com', | |
7081 | + '.fptpromo.com', | |
7082 | + '.insidetheaf2.com', | |
7083 | + | |
7084 | + // link to pro-pay.net | |
7085 | + '.movie-train.com', | |
7086 | + | |
7087 | + // link to vigrxplus.com | |
7088 | + '.panatrog.org', | |
7089 | + | |
7090 | + // link to megarxsale.com | |
7091 | + '.haberiniz.net', | |
7092 | + '.obusilis.net', | |
7093 | + ), | |
7094 | + '.onlinecasinoinformation.com', // 2010/08 66.96.147.105 | |
7095 | + '.onlinecasinoresources.com', // 2010/08 74.220.215.62 | |
6346 | 7096 | |
6347 | - '.chatwalker.com', // 124.32.230.65 | |
6348 | - '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com | |
6349 | - '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com | |
7097 | + 'moshenhm at gmail.com' => array( // by Nahum, Moshe (moshenhm at gmail.com) | |
6350 | 7098 | |
6351 | - '.morfolojna.cn', // 206.53.51.126, by gilserta at jilbertsabram.com, Using web.archive.org | |
6352 | - '.mncxvsm.info', // 217.11.233.105, / blank | |
6353 | - '.super-discount.sakura.ne.jp', // 59.106.19.206(www756.sakura.ne.jp), sales | |
6354 | - '.privatedns.com', // 209.172.41.50(sebulba.privatedns.com), encoded JavaScript, root of various posts | |
7099 | + // 2010/08 65.254.248.143 | |
7100 | + '.odinhosting.com', // seems no link today | |
7101 | + '.nycdivers.com', // link to mainalpha.com | |
7102 | + '.robertlhines.com', // link to mainalpha.com, etc | |
7103 | + '.shadowsonmyshift.com', // link to mainalpha.com, etc | |
7104 | + | |
7105 | + // 2010/08 69.89.31.187 | |
7106 | + '.bcsliding.com', // | |
7107 | + '.msthirteen.com', // link to mainalpha.com | |
7108 | + // 2010/08 74.53.239.27 | |
7109 | + '.thetravelerscafe.com', // cheap tickets | |
7110 | + | |
7111 | + // 2010/08 74.81.92.55 | |
7112 | + '.sonicparthenon.com', // link to mainalpha.com | |
7113 | + '.staroftheevening.com', // link to mainalpha.com | |
7114 | + '.sanjosecosmeticdental.com', | |
7115 | + | |
7116 | + // 2010/08 173.45.103.74 | |
7117 | + '.digitalexperts.com', | |
7118 | + | |
7119 | + // 2010/08 173.236.48.82 | |
7120 | + '.sunshinetesting.com', // link to mainalpha.com | |
7121 | + '.sports-and-concert-tickets.com', // seems no link today | |
7122 | + | |
7123 | + // 2010/08 174.120.82.124 | |
7124 | + '.blueysretreat.com', // seems no link today | |
7125 | + '.lamborghinidenveronline.com', // seems no link today | |
7126 | + '.buckandbb.net', // link to kqzyfj.com | |
7127 | + | |
7128 | + // 2010/08 174.132.149.98 | |
7129 | + '.2008-national-n-scale-convention.com', // link to mainalpha.com | |
7130 | + '.creativejuicecompetition.com', // seems no link today | |
7131 | + | |
7132 | + // 2010/08 216.119.132.2 | |
7133 | + '.kennybrown.net', | |
7134 | + | |
7135 | + // 2010/08 no address today | |
7136 | + '.bestblackdatingonline.com', | |
7137 | + ), | |
7138 | + | |
7139 | + 'info at dvishnu.com' => array( // by Vishnu Prasath (info at dvishnu.com) | |
7140 | + | |
7141 | + // 2010/08 69.89.31.187 | |
7142 | + '.dinuzzollc.com', // link to mainalpha.com etc | |
7143 | + '.laruesbackdoor.com', // link to mainalpha.com etc | |
7144 | + '.okrenters.com', // link to mainalpha.co | |
7145 | + '.pandaitaid.com', // link to mainalpha.com, etc | |
7146 | + '.vicariouscollection.com', // by Vishnu Prasath (info at dvishnu.com) | |
7147 | + '.middlefingerproductions.net', // link to mainalpha.com | |
7148 | + | |
7149 | + // 2010/08 74.81.92.55 | |
7150 | + '.ecoxfinancial.com', // link to mainalpha.com etc | |
7151 | + '.fightingspirit-comics.com', // link to mainalpha.com etc | |
7152 | + '.learntoplaythedobro.com', // link to mainalpha.com etc | |
7153 | + '.montcalm4hfair.com', // link to mainalpha.com etc | |
7154 | + '.oaads.com', // link to mainalpha.com etc | |
7155 | + '.pabloblum.com', // link to mainalpha.com | |
7156 | + '.renaissancequartet.com', // link to mainalpha.com | |
7157 | + '.sbi-limited.com', // link to mainalpha.com | |
7158 | + '.showeroffire.com', // link to mainalpha.com | |
7159 | + '.soccerfestcolumbus.com', // link to mainalpha.com | |
7160 | + | |
7161 | + // 2010/08 173.236.48.82 | |
7162 | + '.anniedguesthouse.com', // link to mainalpha.com | |
7163 | + '.finnfest2009.com', // link to mainalpha.com | |
7164 | + '.hietalasoldworldmeats.com', // link to mainalpha.com etc | |
7165 | + '.splendoreimport.com', // link to mainalpha.com | |
7166 | + | |
7167 | + // 2010/08 174.120.82.124 | |
7168 | + '.jenurbanandthebox.com', // link to mainalpha.com | |
7169 | + | |
7170 | + // 2010/08 174.132.149.98 | |
7171 | + '.segwaybykar.com', // link to mainalpha.com | |
7172 | + ), | |
7173 | + | |
7174 | + 'mainalpha.com related' => array( | |
7175 | + | |
7176 | + // 2010/08 65.254.248.143 | |
7177 | + '.archivecdbooksus.com', // by (offpista at gmail.com), "sports betting" | |
7178 | + '.highrollersonlinecasinos.com', // casios | |
7179 | + '.onlinecasinocenter.com', // casios | |
7180 | + | |
7181 | + | |
7182 | + // 2010/08 74.81.92.55 | |
7183 | + '.2ndrose.com', // by Victor Zrovanov (victor3239 at gmail.com), link to mainalpha.com | |
7184 | + '.edgewatertowers.com', // by Victor Frankl (victor3239 at gmail.com), link to mainalpha.com | |
7185 | + | |
7186 | + // 2010/08 173.236.48.82 | |
7187 | + '.ciprogram.com', // link to mainalpha.com | |
7188 | + | |
7189 | + // 2010/08 174.132.149.98 | |
7190 | + '.msgulfcoastbnbs.com', // by Michael John (cpajourney at yahoo.com), link to mainalpha.com etc | |
7191 | + ), | |
7192 | + | |
7193 | + 'kouvald at gmail.com' => array( // by Vlad Kouvaldin (kouvald at gmail.com) | |
7194 | + | |
7195 | + // 2010/08 91.205.156.73 | |
7196 | + '.newvibesmedia.com', | |
7197 | + '.pacarts.org', | |
7198 | + '.peruanosenbarcelona.com', | |
7199 | + '.ronnievon.com', | |
7200 | + '.savewilson.org', | |
7201 | + '.sawanmall.com', | |
7202 | + '.sickpowder.com', | |
7203 | + '.theblogproject.com', | |
7204 | + '.thenewswalk.com', | |
7205 | + '.wilsonhillstables.com', | |
7206 | + | |
7207 | + // 2010/08 91.205.156.77 | |
7208 | + '.chaironwheels.com', | |
7209 | + '.countrylegends943.com', | |
7210 | + '.daytonapridefest.com', | |
7211 | + '.funposal.org', | |
7212 | + '.mfshou.com', | |
7213 | + '.mtskrilla.com', | |
7214 | + | |
7215 | + // 2010/08 173.45.96.176 | |
7216 | + '.prematuretreatments.com', | |
7217 | + | |
7218 | + // 2010/09 173.83.127.79 | |
7219 | + '.bluebirdsdownunder.com', | |
7220 | + | |
7221 | + // 2010/09 173.83.127.80 | |
7222 | + '.briancallphoto.com', | |
7223 | + ), | |
7224 | + | |
7225 | + 'freelanceblogger at gmail.com' => array( | |
7226 | + '.geniusroulette.com', // 2010/08 216.86.146.16 by Raj Dash (freelanceblogger at gmail.com) | |
7227 | + '.geniussportsbetting.com', // 2010/08 66.40.52.146 by Raj Dash (freelanceblogger at gmail.com) | |
7228 | + ), | |
7229 | + | |
7230 | + '.ramapowatershed.com', // | |
7231 | + 'purplefarm at gmail.com' => array( | |
7232 | + // 2010/08 208.71.128.6 | |
7233 | + '.123dollie.com', // by marc jones (purplefarm at gmail.com) | |
7234 | + '.451jokes.com', // by Joshua gardiner (purplefarm at gmail.com) | |
7235 | + '.skidsteersonsale.com', // by Joshua gardiner (purplefarm at gmail.com) | |
7236 | + ), | |
7237 | + | |
7238 | + '.freelivemodels.com', // 2010/08 207.246.153.228, 207.246.153.229 | |
7239 | + '173.236.25.210 related' => array( | |
7240 | + // 2010/08 173.236.25.210 | |
7241 | + '.ibd-treatment-blog.com', | |
7242 | + '.my247weightlossblog.com', | |
7243 | + '.yoursexualhealthblog.com', | |
7244 | + | |
7245 | + // 2010/08 174.120.171.94 | |
7246 | + '.adhdbesttreatments.com', | |
7247 | + '.bipolardisordertreatmentsblog.com', | |
7248 | + '.diabetestype2answers.com', | |
7249 | + ), | |
7250 | + '68.232.186.54 related' => array( | |
7251 | + '.amateurxxxtube247.com', // 2010/08 68.232.186.54 | |
7252 | + '.asiansextube247.com', // 2010/08 68.232.186.54 | |
7253 | + '.analsextube247.com', // 2010/08 99.192.176.58 | |
7254 | + '.eroticandy.com', // 2010/08 99.192.176.54 | |
7255 | + ), | |
7256 | + 'nikiforov501 at mail.ru' => array( | |
7257 | + // 2010/09 91.205.156.74 | |
7258 | + '.211park.com', | |
7259 | + '.atlantajuniorthrashers.com', | |
7260 | + '.jensenwoods.com', | |
7261 | + | |
7262 | + // 2010/09 91.205.156.75 | |
7263 | + '.ltaadventure.com', | |
7264 | + '.oshareo.com', | |
7265 | + '.pillthrillow.com', | |
7266 | + '.redaphrodite.com', | |
7267 | + '.marching-season.net', | |
7268 | + ), | |
6355 | 7269 | |
6356 | 7270 | // C-3: Not classifiable (information wanted) |
6357 | 7271 | // |
@@ -6378,12 +7292,15 @@ $blocklist['D'] = array( | ||
6378 | 7292 | |
6379 | 7293 | $blocklist['E'] = array( |
6380 | 7294 | // E: Sample setting of |
6381 | - // Promoters | |
6382 | - // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers, | |
6383 | - // Ads, Business promotions) | |
7295 | + // Promotions | |
7296 | + // (Phenomenons with Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers, | |
7297 | + // Ads, Business promotions, SEO, etc) | |
6384 | 7298 | // |
6385 | - // They often promotes near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc. | |
7299 | + // Promotions near you using blog article, mail-magazines, tools(search engines, blogs, etc), etc. | |
6386 | 7300 | // Sometimes they may promote each other |
7301 | + // | |
7302 | + // Please notify us about this list with reason: | |
7303 | + // http://pukiwiki.sourceforge.jp/dev/?BugTrack2/342 | |
6387 | 7304 | |
6388 | 7305 | '15-Mail.com related' => array( |
6389 | 7306 | '.15-mail.com', // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp) |
@@ -6549,6 +7466,7 @@ $blocklist['E'] = array( | ||
6549 | 7466 | 'hbb.afl.rakuten.co.jp', ///hsb/ 203.190.60.105 image server? |
6550 | 7467 | ), |
6551 | 7468 | '.sedori-data.com', // 210.188.205.7(sv03.lolipop.jp) |
7469 | + '.seozone.jp', // 211.133.134.77(sv27.wadax.ne.jp) by blue_whale20002004 at yahoo.com.cn | |
6552 | 7470 | '.tool4success.com', // 210.188.201.31(sv70.xserver.jp) by Yukihiro Akada (ml at original-ehon.com) |
6553 | 7471 | 'tera at kirinn.com' => array( // 59.139.29.234(s240.xrea.com) by Naohsi Terada (tera at kirinn.com) |
6554 | 7472 | '.e123.info', |