// // PAC (Proxy Auto Configuration) Filter // Available at: // // http://www.hostsfile.org/pac.html // // Primary Code Author: // Danny R. Johnston // (REGEXP GURU) // Pattern, Tracker, and Malware Analyzer // David Alexander Harvey // alias Henry Hertz Hobbit // hhhobbit GNAT securemecca.net // Original List: // Eric Phelps // http://www.ericphelps.com/security/pac.htm // // Version: 7.3.2 // Release Date: Tuesday 17 April 2018 // // (C) Copyright 2006-2018 // David Alexander Harvey alias Henry Hertz Hobbit // Danny R Johnston // With contributions by Eric Phelps // With contributions by Rodney alias DomainAnalysis // With contributions by Elric Scott // With contributions by Stefan Welch // // http://www.gnu.org/licenses/lgpl.txt // // This program is free software; you can redistribute it and/or // modify it under the terms of the GNU General Public License // as published by the Free Software Foundation; either version 2 // of the License, or (at your option) any later version. // // This program is distributed in the hope that it will be // useful, but WITHOUT ANY WARRANTY; without even the implied // warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR // PURPOSE. See the GNU General Public License for more details. // // You should have received a copy of the GNU General Public // License along with this program; if not, write to the Free // Software Foundation, Inc., 59 Temple Place, Suite 330, // Boston, MA 02111-1307 USA // // If you normally use a proxy, replace "DIRECT" below with // "PROXY MACHINE:PORT" // where MACHINE is the IP address or host name of your proxy // server and PORT is the port number of your proxy server. var normal = "DIRECT"; var blackhole = "PROXY 127.0.0.1:80"; //var blackhole = "PROXY 0.0.0.0:80"; // Set debug to level you want status alerts for testing var debugNone = 0; // No debuging alerts. var debugGeneral = 1; // Show alert when file is loaded. var debugShowPass = 2; // Show all URLS that pass and why. var debugShowFail = 4; // Show all URLS that fail and why. var debugRegxGen = 8; // Show Regx expressions generated. var debugModURL = 16; // Show removal of CGI args and anchors from URL. var debugShowIP = 32; // Show when we find an IP numeric address. var debugNormal = debugGeneral | debugShowFail; var debugAll = debugGeneral | debugShowPass | debugShowFail | debugRegxGen | debugModURL | debugShowIP; // WARNING: Opera, Konqueror, AND Safari USERS MUST NEVER SET DEBUG TO // ANYTHING OTHER THAN debugNone. THE alert() CALL CAUSES THEM TO FAIL! var debug = debugNormal; var fullParse = 0; // Parse the whole thing. var pathParse = 1; // Parse the host & path but no CGI args or anchors. var parseURL = pathParse; // WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING // The arrays below are for words to disallow or allow host or URLS. Be // very carefull about adding things if you don't understand regular // expressions. They can be very tricky. Danny has set up a function to // escape periods so you don't have to worry about their special // meanings in regular expressions but all the other stuff works. One // handy regular expression you may need to use is the brackets [] and // the caret ^. When used in an expression like "[^c]lips" it will match // lips but not clips. Please note that you do not use something like // that in any of the following ways: // // GoodDomains at the end // BadDomains at the end // // BadURL_Parts okay anywhere // BadHostParts okay anywhere // // BadURL_WordStarts at the begining // BadHostWordStarts at the begining // // BadURL_WordEnds at the end // BadHostWordEnds at the end // // You MUST do it this way due to anchors in the regular expressions // that are generated from them. If you do use a character that is // used in regular expressions you must double backslash them to // escape them due to the way the regular expressions are generated // from the strings. One escape will be eaten by the string generation // and escape the second one that will be passed to the regular // expression parser. // // http://www.webreference.com/js/column5/ is a good site for learning // about regular expressions // Please also note that some words you may think are bad may be // embedded. For example "cheapornothing" has the word "porn" in it. // Likewise "stockmansexchange" has "sex" in it. Buried inside a phrase // like that, it might be okay. However, it's harder to imagine a // "good" phrase that starts or finishes with the word "sex" or "porn", // so you would not want to put it in the BadURL_Parts array but probably // would want it in one or both of the BadURL_WordStart or BadURL_WordEnd // arrays. Nevertheless, until a false positive shows up, the word // "porn" is not allowed anywhere in a URL. As soon as that rule elicits // a false positive, it will be downgraded to HOST, and the start and end // rules will be uncommented and activated for the URL. // Here are what the arrays do: // // GoodDomains Regular expressions that must match the end of // a host name to force a URL to pass. // GoodNetworks Network number followed by a netmask for ranges // of good networks // BadNetworks Network number followed by a netmask for ranges // of bad networks // BadDomains Regular expressions that must match the end of // a host name to force a URL to fail. // // BadURL_Parts Words that will cause blocking if they show up // anywhere in a URL. // BadHostParts Regular expressions the will cause a URL to fail // if found anywhere in the HOST name. // // BadURL_WordStarts Regular expressions that will cause a URL to // fail if they have a non alpha character before // them anywhere in a URL. // BadHostWordStarts Regular expressions that will cause a HOST to // fail if they have a non alpha character before // them in a HOST name or start the host name. // // BadURL_WordEnds Regular expressions that will cause a URL to // fail if they have a non alpha character following // them or are at the very end of a URL. // BadHostWordEnds Regular expressions that will cause a HOST to // fail if they have a non alpha character following // them or are at the very end of a HOST name. // // NOTE: Even if a URL fails it may still be passed if the IP is in RFC // reserved nets. This is because any thing that is behind your // firewall using these addresses are considered safe and should // never exist in the internet. These are defined at the very // bottom of the function FindProxyForURL and if you want to // modify them you must do it there. // Counter Variable to initalize the arrays. var i= 0; // If the host name ends in any of the following domains it will be passed // WARNING - DO NOT PUT REGEXPs AT THE *END* OF THIS ARRAY var GoodDomains = new Array(); i=0; GoodDomains[i++] = "aax-eu.amazon-adsystem.com"; // amazon.fr - 2018-03-31 GoodDomains[i++] = "aba.com"; // Phish - 2010-02-05 GoodDomains[i++] = "abcdelasecurite.free.fr"; // SECURITY - 2010-05-04 GoodDomains[i++] = ".ac.uk"; // EDU - 2010-05-04 GoodDomains[i++] = "accuweather-d.openx.net"; // openx.net - 2018-02-25 GoodDomains[i++] = "accuweather.com"; // 2018-03-02 GoodDomains[i++] = "adblockplus.org"; // block - 2009-04-18 GoodDomains[i++] = "adguard.com"; // SECURITY - 2014-05-12 GoodDomains[i++] = "admin.brightcove.com"; // AdvertisingModule.swf - 2013-02-22 GoodDomains[i++] = ".adobe.com"; // Phish - 2009-09-03 GoodDomains[i++] = "ads1.msn.com"; // ads1. - 2010-10-15 GoodDomains[i++] = "adsense.blogspot.com"; // adsense - 2010-01-12 GoodDomains[i++] = "agnitum.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "agnitum.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".akamai.net"; // VisaVerify - 2018-03-31 GoodDomains[i++] = "aladdin.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "aladdin.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".ally.com"; // Phish - 2009-11-30 GoodDomains[i++] = ".allybank.com"; // Phish - 2009-12-29 GoodDomains[i++] = "altavista.com"; // 2010-01-04 GoodDomains[i++] = ".americanexpress.com"; // Phish - 2009-12-06 GoodDomains[i++] = "anti-virus-software-review.toptenreviews.com"; // anti-vir - 2011-04-02 GoodDomains[i++] = "antivirus-alarm.ru"; // antivir - 2014-05-12 GoodDomains[i++] = "antivirus365.net"; // antivir - 2011-01-04 GoodDomains[i++] = "antivirus.about.com"; // antivir - 2010-04-24 GoodDomains[i++] = "anti-virus.by"; // SECURITY anti-vir - 2011-11-11 GoodDomains[i++] = ".antivirus.com"; // SECURITY - 2009-12-19 GoodDomains[i++] = "antivirusyellowpages.com"; // antivir - 2009-02-12 // less safe: "anz.co.nz" "anz.com" // see: "anz\.co" GoodDomains[i++] = ".anz.co.nz"; // YOUR CHOICE Phish - 2016-02-25 GoodDomains[i++] = ".anz.com"; // YOUR CHOICE Phish - 2016-02-25 GoodDomains[i++] = ".aol.com"; // Phish - 2010-02-05 GoodDomains[i++] = ".aolcdn.com"; // AOL - 2018-03-31 GoodDomains[i++] = "as-sec.casalemedia.com"; // casalemedia - 2018-03-02 GoodDomains[i++] = "assiste.com.free.fr"; // SECURITY - 2010-05-04 GoodDomains[i++] = "attservicesinc.tt.omtrdc.net"; // ATT Login - 2016-07-13 GoodDomains[i++] = "avast.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".avg.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "avgfrance.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "avira.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".avp.ru"; // SECURITY - 2009-08-18 GoodDomains[i++] = "banese.com.br"; // Phish - 2018-03-31 GoodDomains[i++] = "bankofamerica.com"; // Phish - 2010-10-16 GoodDomains[i++] = "banners.andomedia.com"; // AdServer - 2011-04-14 // GoodDomains[i++] = ".bbva.es"; // Phish - 2009-12-22 (necesidad www.) GoodDomains[i++] = "bbva.es"; // Phish - 2012-02-13 GoodDomains[i++] = "bengay.com"; // gay - 2011-08-27 GoodDomains[i++] = "biblescan.com"; // scan - 2018-04-03 GoodDomains[i++] = "bicycling.com"; // 2010-01-04 GoodDomains[i++] = "bitdefender.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "bitdefender.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "blockacountry.com"; // SECURITY - 2009-11-11 GoodDomains[i++] = ".bluecoat.com"; // SECURITY - 2010-05-04 GoodDomains[i++] = ".bp.blogspot.com"; // #.bp.blogspot.com - 2018-03-31 GoodDomains[i++] = "bradesco.com.br"; // Phish - 2018-03-31 GoodDomains[i++] = ".brassring.com"; // JOBS - 2011-03-09 GoodDomains[i++] = "bytecrime.org"; // SECURITY - 2010-05-04 GoodDomains[i++] = ".ca.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "cdc.gov"; // Phish - 2009-12-02 GoodDomains[i++] = "cdn.echoenabled.com"; // counter.js - 2012-01-02 GoodDomains[i++] = "cdn.optimizely.com"; // optimizely.com - 2015-09-25 GoodDomains[i++] = "cdn.tt.omtrdc.net"; // Verizon - 2015-04-25 GoodDomains[i++] = "cdn.visiblemeasures.com"; // collegehumor - 2011-09-30 GoodDomains[i++] = "celebrex.com"; // celeb - 2010-11-29 GoodDomains[i++] = "celebrity.yahoo.com"; // celeb - 2014-10-17 GoodDomains[i++] = ".celebros.com"; // celeb - 2011-04-01 GoodDomains[i++] = ".chase.com"; // Phish - 2009-11-30 GoodDomains[i++] = "checkpoint.com"; // SECURITY - 2009-08-18 GoodDomains[i++] = "checkpoint.com.cn"; // SECURITY - 2018-03-31 GoodDomains[i++] = "cialis.com"; // Spam - 2012-07-12 GoodDomains[i++] = ".cimbclicks.co.id"; // Phish - 2014-09-20 GoodDomains[i++] = ".cimbclicks.in.th"; // Phish - 2014-09-20 GoodDomains[i++] = ".cimbclicks.com.my"; // Phish - 2014-09-20 GoodDomains[i++] = ".cimbclicks.com.sg"; // Phish - 2014-09-20 GoodDomains[i++] = ".cisco.com"; // .bin - 2010-07-30 GoodDomains[i++] = "citibank.com"; // Phish - 2012-05-22 GoodDomains[i++] = "citibank.com.br"; // Phish - 2012-06-04 GoodDomains[i++] = "clamav.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "clamav.net"; // SECURITY - 2009-08-17 GoodDomains[i++] = "clamav.org"; // SECURITY - 2009-08-17 GoodDomains[i++] = "clamwin.com"; // SECURITY - 2018-03-31 GoodDomains[i++] = "clamwin.org"; // SECURITY - 2018-03-31 GoodDomains[i++] = "coast2coastrx.com"; // rx - 2013-12-31 GoodDomains[i++] = "collegeboard.org"; // "/webanalytics/"- 2016-07-13 GoodDomains[i++] = "comcast.com"; // 2009-12-02 GoodDomains[i++] = "comcast.net"; // 2009-12-02 GoodDomains[i++] = "comodo.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "contentpurity.com"; // porn - 2011-11-23 GoodDomains[i++] = "covergirl.com"; // girl - 2010-09-15 GoodDomains[i++] = "danskebank.co.uk"; // Phish - 2015-02-17 GoodDomains[i++] = "danskebank.com"; // Phish - 2015-02-17 GoodDomains[i++] = "danskebank.dk"; // Phish - 2015-02-17 GoodDomains[i++] = "danskebank.ee"; // Phish - 2015-02-17 GoodDomains[i++] = "dev.virtualearth.net"; // loggingservice.js? - 2016-08-06 GoodDomains[i++] = ".dhl.ca"; // Phish - 2011-05-23 GoodDomains[i++] = ".dhl.com"; // Phish - 2011-05-23 GoodDomains[i++] = ".dhl.fr"; // Phish - 2011-05-23 // Rules are stronger with leading dot but must use leading www. GoodDomains[i++] = "digid.nl"; // Phish - 2014-04-18 GoodDomains[i++] = "discovercard.com"; // Phish - 2009-11-23 GoodDomains[i++] = ".disney.com"; // Disney - PERSONAL RULE GoodDomains[i++] = "dl.google.com"; // bin - 2010-10-23 GoodDomains[i++] = ".dlink.com"; // bin - 2010-11-06 GoodDomains[i++] = "doctoroz.com"; // doctor - 2013-09-24 GoodDomains[i++] = "doctorswithoutborders.org"; // doctor - 2013-11-29 GoodDomains[i++] = "doctortrusted.org"; // doctor - 2015-01-02 GoodDomains[i++] = ".dot.tk"; // TK white - 2011-08-06 GoodDomains[i++] = "drweb-online.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "drweb.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "drweb.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "ebay.com"; // Phish - 2009-12-08 GoodDomains[i++] = "editorial.televisa.com"; // visa.com - 2012-04-28 GoodDomains[i++] = ".edu"; // EDU - 2010-05-04 GoodDomains[i++] = ".edu.cn"; // EDU - 2010-05-04 GoodDomains[i++] = ".edu.tw"; // EDU - 2010-05-04 GoodDomains[i++] = "emsisoft.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "emsisoft.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "escanav.com"; // SECURITY (scan) - 2013-09-07 GoodDomains[i++] = ".eset.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "eurotunnel.com"; // PROXY - 2010-05-07 GoodDomains[i++] = ".f-prot.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "f-secure.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "fdic.gov"; // Phish - 2009-11-15 GoodDomains[i++] = "filext.com"; // 2009-01-04 GoodDomains[i++] = "firstrepublic.com"; // Phish - 2011-01-04 GoodDomains[i++] = "foxitsoftware.com"; // flash-plugin - 2009-09-03 GoodDomains[i++] = "free-firewall.org"; // SECURITY - 2009-09-15 GoodDomains[i++] = "garwarner.blogspot.com"; // SECURITY - 2009-11-14 GoodDomains[i++] = "gasprices.mapquest.com"; // adswrapper. - 2011-08-09 GoodDomains[i++] = "gdata.de"; // SECURITY - 2009-08-17 GoodDomains[i++] = "gdata.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "geardogfirewall.com"; // SECURITY - 2014-07-14 GoodDomains[i++] = "geekgirlsguide.com"; // girls - 2010-01-01 GoodDomains[i++] = "get.geo.opera.com"; // "geo\." rule - 2014-02-11 GoodDomains[i++] = "gfx5.hotmail.com"; // clear.gif - 2012-10-19 GoodDomains[i++] = "gfx6.hotmail.com"; // clear.gif - 2012-10-19 GoodDomains[i++] = "girlscouts.org"; // girls - 2010-12-04 GoodDomains[i++] = "girlsense.com"; // girls - 2010-12-29 GoodDomains[i++] = "goodrx.com"; // rx - 2014-11-11 GoodDomains[i++] = "google.com"; // Phish - 2009-12-10 GoodDomains[i++] = "google.com.hk"; // Google - 2010-03-27 GoodDomains[i++] = "googleads.g.doubleclick.net"; // pics - 2011-10-10 GoodDomains[i++] = "googlepages.com"; // Phish - 2009-12-10 // GoodDomains[i++] = ".gov"; // YOUR CHOICE - 2014-05-13 GoodDomains[i++] = "haloscan.com"; // scan - 2009-08-03 GoodDomains[i++] = "hosts-file.net"; // 2009-08-03 GoodDomains[i++] = "hsbc.ca"; // Phish - 2011-06-16 GoodDomains[i++] = "hsbc.cl"; // Phish - 2012-05-14 GoodDomains[i++] = "hsbc.co.uk"; // Phish - 2011-05-16 GoodDomains[i++] = "hsbc.com"; // Phish - 2011-05-16 GoodDomains[i++] = "hsbc.com.ar"; // Phish - 2012-05-14 GoodDomains[i++] = "hsbc.com.br"; // Phish - 2011-05-16 GoodDomains[i++] = "hsbc.com.mx"; // Phish - 2018-04-28 GoodDomains[i++] = "hsbc.fr"; // Phish - 2011-06-16 GoodDomains[i++] = "hsbccreditcard.com"; // Phish - 2011-05-16 GoodDomains[i++] = "hsbcmortgageservices.com"; // Phish - 2011-05-16 GoodDomains[i++] = "hsbcusa.com"; // Phish - 2010-05-16 GoodDomains[i++] = "i.cdn.turner.com"; // TCM - 2015-04-25 GoodDomains[i++] = "iantivirus.com"; // antivir - 2010-11-04 GoodDomains[i++] = "ib.adnxs.com"; // adnxs.com - 2017-02-08 GoodDomains[i++] = "icons.duckduckgo.com"; // 2012-07-04 GoodDomains[i++] = "ikea.com"; // ad rules - 2014-05-12 GoodDomains[i++] = "images-na.ssl-images-amazon.com"; // pics - 2011-10-10 GoodDomains[i++] = "images.agoramedia.com"; // sexy - 2011-01-26 GoodDomains[i++] = "images10.newegg.com"; // general - 2018-04-03 GoodDomains[i++] = "imdb.com"; // general - 2010-05-07 GoodDomains[i++] = "img.constantcontact.com"; // Tracker - 2011-12-28 GoodDomains[i++] = ".imgix.net"; // proxy? - 2016-07-13 GoodDomains[i++] = "imgssl.constantcontact.com"; // Tracker - 2012-05-25 GoodDomains[i++] = "inxtracking01.inx1and1.de"; // Tracker - 2015-04-29 GoodDomains[i++] = "iocdn.coremetrics.com"; // coremetrics.com - 2018-04-28 GoodDomains[i++] = "irs.gov"; // Phish - 2009-11-15 GoodDomains[i++] = "itau.com.br"; // Phish - 2012-05-14 GoodDomains[i++] = "java.com"; // java_v - 2010-01-12 GoodDomains[i++] = "javacoolsoftware.com"; // SECURITY - 2010-05-04 GoodDomains[i++] = ".javafx.com"; // Java DL - 2011-09-30 GoodDomains[i++] = "jetico.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "jotti.org"; // scan - 2009-05-07 GoodDomains[i++] = "junesuckerrecovery.org"; // suck - 2011-06-16 // Add your country Kaspersky domain here. GoodDomains[i++] = "kaspersky.ca"; // SECURITY - 2014-11-11 GoodDomains[i++] = "kaspersky.co.uk"; // SECURITY - 2014-11-11 GoodDomains[i++] = "kaspersky.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "kaspersky.com.cn"; // SECURITY - 2009-08-18 GoodDomains[i++] = "kaspersky.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "kaspersky.ru"; // SECURITY - 2009-08-18 GoodDomains[i++] = "kerio.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "kerio.eu"; // SECURITY - 2009-08-17 GoodDomains[i++] = "kerio.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "lavasoftusa.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "levitra.com"; // Spam - 2012-07-12 GoodDomains[i++] = "libs.coremetrics.com"; // coremetrics.com - 2015-06-01 GoodDomains[i++] = "lifescan.archercorporateservices.com"; // scan - 2012-09-03 GoodDomains[i++] = "linkedin.com"; // Phish - 2010-10-11 GoodDomains[i++] = "linksysbycisco.com"; // cisco.com - 2011-07-28 GoodDomains[i++] = ".live.com"; // general - 2010-03-30 GoodDomains[i++] = "lloydstsb.com"; // Phish - 2011-04-02 GoodDomains[i++] = "macromedia.com"; // flash - 2010-10-23 GoodDomains[i++] = "malwaredatabase.net"; // 2009-07-17 GoodDomains[i++] = "malwaredomainlist.com"; // 2009-07-17 GoodDomains[i++] = ".mastercard.com"; // Phish - 2009-12-08 GoodDomains[i++] = "mcafee.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "mcafee.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "medopinions.com"; // 2010-01-04 GoodDomains[i++] = "merriam-webster.com"; // MANY words - 2011-09-26 GoodDomains[i++] = "metrics.ancestry.co.uk"; // *2o7.net & *.omtrdc.net - 2015-09-25 GoodDomains[i++] = "metrics.ancestry.com"; // *2o7.net & *.omtrdc.net - 2015-09-25 GoodDomains[i++] = "metrics.consumerreports.org"; // *2o7.net & *.omtrdc.net - 2015-09-25 GoodDomains[i++] = "metrics.apple.com"; // block - 2013-07-05 GoodDomains[i++] = "metrics1.citibank.com"; // CitiBank login - 2015-04-25 GoodDomains[i++] = "microsoft.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "missingkids.org"; // SECURITY - 2018-04-28 GoodDomains[i++] = ".mozdev.org"; // block - 2009-10-30 GoodDomains[i++] = "mozilla.com"; // 2009-12-02 GoodDomains[i++] = "mozilla.org"; // 2009-12-02 // GoodDomains[i++] = ".msn.com"; // hot - 2011-10-10 GoodDomains[i++] = "msmvps.com"; // SECURITY - 2010-03-30 GoodDomains[i++] = "mvps.org"; // SECURITY - 2010-03-30 GoodDomains[i++] = "myantispyware.com"; // SECURITY - 2010-03-30 GoodDomains[i++] = "myspace.com"; // Phish - 2018-04-28 GoodDomains[i++] = "myspacecdn.com"; // Phish - 2018-04-28 GoodDomains[i++] = "mywot.com"; // SECURITY - 2010-01-28 GoodDomains[i++] = "nacha.org"; // Phish - 2009-11-15 GoodDomains[i++] = "nationalgeographic.com"; // 2010-01-04 GoodDomains[i++] = "netfilter.org"; // SECURITY - 2009-11-25 GoodDomains[i++] = "netsafeutah.org"; // PERSONAL RULE GoodDomains[i++] = "networkscanning.com"; // scan - 2009-05-07 GoodDomains[i++] = "newscancook.com"; // scan - 2011-02-02 GoodDomains[i++] = "nissanusa.112.2o7.net"; // Trackers & Ads - 2011-10-05 GoodDomains[i++] = "nissanusa.com"; // Trackers & Ads - 2011-10-04 GoodDomains[i++] = "norton.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "npr.org"; // general - 2010-03-30 GoodDomains[i++] = "nydailynews.servedbyopenx.com"; // white - 2018-04-28 GoodDomains[i++] = "officemax.com"; // general - 2010-03-30 GoodDomains[i++] = "onlinelinkscan.com"; // SECURITY - 2014-06-27 GoodDomains[i++] = "opendns.com"; // adult GoodDomains[i++] = "openoffice.org"; // general - 2010-03-30 GoodDomains[i++] = "openx.zomoto.nl"; // openx - 2010-01-20 GoodDomains[i++] = "optumrx.com"; // "rx" - 2018-01-20 GoodDomains[i++] = "osnews.com"; // 2010-01-04 GoodDomains[i++] = "pac-12.com"; // ".pac" - 2012-08-25 GoodDomains[i++] = "pamelapaul.com"; // porn - 2010-12-11 GoodDomains[i++] = "pandaguard.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "pandasecurity.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "partner.googleadservices.com"; // 2010-08-17 // GoodDomains[i++] = ".passport.com"; // hot - 2011-10-10 // GoodDomains[i++] = ".passport.net"; // hot - 2011-10-10 GoodDomains[i++] = ".paypal.com"; // Phish - 2009-12-08 GoodDomains[i++] = ".paypal.de"; // Phish - 2011-10-24 GoodDomains[i++] = ".paypal.fr"; // Phish - 2011-10-24 GoodDomains[i++] = "paypalobjects.com"; // Phish - 2011-04-23 GoodDomains[i++] = "pcantivirusreviews.com"; // 2009-03-11 GoodDomains[i++] = "pctools.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "pointsmartclicksafe.org"; // Advertising - 2018-04-28 GoodDomains[i++] = "privacydigest.com"; // SECURITY - 2010-05-07 GoodDomains[i++] = "proxify.com"; // Au Revoir PAC - 2009-04-26 GoodDomains[i++] = "proxy.duckduckgo.com"; // Au Revoir PAC - 2018-01-20 GoodDomains[i++] = "proxy.org"; // Au Revoir PAC - 2009-04-11 GoodDomains[i++] = "r.ddmcdn.com"; // hardcore - 2014-10-15 GoodDomains[i++] = "rajshri.com"; // Zedo - 2010-05-01 GoodDomains[i++] = "randmcnally.com"; // ally.com - 2010-03-19 GoodDomains[i++] = "reliantrxwa.com"; // Spam - 2009-12-22 GoodDomains[i++] = "rlwpx.free.fr"; // Airelle - 2008-06-30 GoodDomains[i++] = "rocking.gr"; // jquery.dfp.min.js - 2016-03-12 GoodDomains[i++] = "rsbac.org"; // 2010-01-04 GoodDomains[i++] = "runescape.com"; // Phish - 2012-05-14 GoodDomains[i++] = "rxcareercenter.com"; // Spam - 2009-12-22 GoodDomains[i++] = "rxgenesys.com"; // rx - 2015-12-05 GoodDomains[i++] = "s.go-mpulse.net"; // go-mpulse.net - 2018-03-02 GoodDomains[i++] = "safebrowsing-cache.google.com"; // MANY words - 2010-08-26 GoodDomains[i++] = ".sans.org"; // SECURITY - 2011-09-26 GoodDomains[i++] = "santander.com"; // Phish - 2012-05-14 GoodDomains[i++] = "santander.com.br"; // Phish - 2012-05-14 GoodDomains[i++] = "sarc.com"; // Symantec - 2008-06-30 GoodDomains[i++] = ".scanalert.com"; // scan - 2009-05-21 GoodDomains[i++] = "securityprivacyandthelaw.com"; // SECURITY - 2011-08-10 GoodDomains[i++] = "secuser.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "sentryfirewall.com"; // SECURITY - 2011-04-01 GoodDomains[i++] = "siteadvisor.com"; // SECURITY - 2018-04-28 GoodDomains[i++] = "siteadvisor.cn"; // SECURITY - 2018-04-28 GoodDomains[i++] = "skype.cn"; // Phish - 2012-05-22 GoodDomains[i++] = "skype.com"; // Phish - 2011-06-17 GoodDomains[i++] = "skype.info"; // Phish - 2012-05-22 GoodDomains[i++] = "skype.jp"; // Phish - 2012-05-22 GoodDomains[i++] = "snowleopard.org"; // 2010-01-04 GoodDomains[i++] = "sophos.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "sourceforge.net"; // SECURITY - 2009-08-17 GoodDomains[i++] = "spywareremove.com"; // SECURITY - 2010-05-07 GoodDomains[i++] = "ssa.gov"; // Phish - 2009-11-26 GoodDomains[i++] = "static-cisco.com"; // cisco.com - 2018-04-28 GoodDomains[i++] = "stock-anal.com"; // anal - 2009-10-28 GoodDomains[i++] = "sunbeltsoftware.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "superantispyware.com"; // SECURITY - 2011-03-23 GoodDomains[i++] = "surfcanyon.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "swscan.apple.com"; // scan - 2017-02-08 GoodDomains[i++] = "symantec.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "symantec.com.cn"; // SECURITY - 2009-08-18 GoodDomains[i++] = "symantec.com.ru"; // SECURITY - 2009-08-18 GoodDomains[i++] = "symantec.ru"; // SECURITY - 2009-08-18 GoodDomains[i++] = "symantecliveupdate.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "tags.tiqcdn.com"; // Intel.com - 2015-04-25 GoodDomains[i++] = ".taleo.net"; // general - 2011-12-07 GoodDomains[i++] = ".tbs.com"; // general - 2010-05-07 GoodDomains[i++] = ".techguy.org"; // 2009-02-23 GoodDomains[i++] = ".technet.com"; // 2009-06-13 GoodDomains[i++] = "thecodingstudio.com"; // adsense - 2010-01-12 // GoodDomains[i++] = "thefacebookforum.net"; // YOUR CHOICE facebook - 2011-05-24 GoodDomains[i++] = "tiaa-cref.org"; // 2010-01-04 GoodDomains[i++] = "tinyurl.com"; // SECURITY - 2013-09-17 GoodDomains[i++] = "treasury.gov"; // Phish - 2012-03-10 GoodDomains[i++] = "trendmicro.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".trrsf.com"; // http://www.terra.com/ GoodDomains[i++] = ".trrsf.com.br"; // http://www.terra.com.br/ GoodDomains[i++] = "tsbbank.co.nz"; // Phish - 2011-04-02 GoodDomains[i++] = "tsb.co.nz"; // Phish - 2011-04-02 GoodDomains[i++] = "ubs.com"; // Phish - 2011-10-24 GoodDomains[i++] = "usaa.com"; // Phish - 2011-10-22 GoodDomains[i++] = "usbank.com"; // Phish - 2009-12-14 GoodDomains[i++] = "ustreas.gov"; // Phish - 2009-11-30 GoodDomains[i++] = "verifiedbyvisa.com"; // Phish - 2010-07-30 GoodDomains[i++] = "viagra.com"; // Spam - 2011-07-18 GoodDomains[i++] = "video.nbcuni.com"; // white - 2018-04-28 GoodDomains[i++] = "video.visiblemeasures.com"; // white - 2018-04-03 GoodDomains[i++] = "vipreantivirus.com"; // Phish - 2011-04-15 GoodDomains[i++] = "virscan.org"; // SECURITY - 2009-08-17 GoodDomains[i++] = "virus.org"; // SECURITY - 2009-08-17 GoodDomains[i++] = "virustotal.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".visa.com"; // Phish - 2009-12-08 GoodDomains[i++] = "visnetic.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "w88.go.com"; // BadNetworks - 2015-09-19 GoodDomains[i++] = "wachovia.com"; // Phish - 2011-07-24 GoodDomains[i++] = "walmart-careers.scdn3.secure.raxcdn.com"; // 2018-03-15 GoodDomains[i++] = "washingtonpost.com"; // 2010-01-04 GoodDomains[i++] = "webroot.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "webroot.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = ".websense.com"; // SECURITY - 2011-10-28 GoodDomains[i++] = ".wellsfargo.com"; // Phish - 2009-12-08 GoodDomains[i++] = "wepawet.iseclab.org"; // SECURITY - 2014-07-24 GoodDomains[i++] = "westernunion.ca"; // Phish - 2012-06-04 GoodDomains[i++] = "westernunion.com"; // Phish - 2012-06-04 GoodDomains[i++] = "westernunion.de"; // Phish - 2012-06-04 GoodDomains[i++] = "westernunion.fr"; // Phish - 2012-06-04 GoodDomains[i++] = "whattoexpect.com"; // omniture - 2011-08-27 GoodDomains[i++] = "wikimedia.org"; // general - 2010-05-07 GoodDomains[i++] = "wikipedia.org"; // general - 2010-05-07 GoodDomains[i++] = "windowsupdate.com"; // Phish - 2015-02-19 GoodDomains[i++] = "wpengine.netdna-cdn.com"; // 3x - 2015-08-18 GoodDomains[i++] = "ww9.kohls.com"; // omtrdc.net - 2016-04-12 GoodDomains[i++] = "zonealarm.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "zonealarm.fr"; // SECURITY - 2009-08-17 GoodDomains[i++] = "zonelabs.com"; // SECURITY - 2009-08-17 GoodDomains[i++] = "zyppahrx.com"; // rx - 2012-01-12 // Add any good networks here. Format is network folowed by a comma and // optional white space, and then the netmask. var GoodNetworks = new Array(); i=0; GoodNetworks[i++] = "10.0.0.0, 255.0.0.0"; // NRIP GoodNetworks[i++] = "65.52.0.0, 255.255.252.0"; // Microsoft GoodNetworks[i++] = "192.168.0.0, 255.255.0.0"; // NRIP GoodNetworks[i++] = "169.254.0.0, 255.255.0.0"; // APIPA GoodNetworks[i++] = "127.0.0.0, 255.0.0.0"; // LOOPBACK GoodNetworks[i++] = "172.16.0.0, 255.240.0.0"; // NRIP // Add any bad networks here. Format is network folowed by a comma and // optional white space, and then the netmask. var BadNetworks = new Array(); i=0; BadNetworks[i++] = "66.150.161.32, 255.255.255.224"; // PARKFUNNEL - 2010-04-20 // 66.235.134.192 ... 66.235.134.197 (2o7 & omtrdc) - 2018-02-12 BadNetworks[i++] = "66.235.134.192, 255.255.255.252"; // 2018-02-12 BadNetworks[i++] = "66.235.134.196, 255.255.255.254"; // 2018-02-12 // 66.235.138.0 ... 66.235.139.255 (DNSWCD 2o7) - 2016-02-23 BadNetworks[i++] = "66.235.138.0, 255.255.254.0"; // DNSWCD 2o7 // 66.235.141.0 ... 66.235.141.255 (DNSWCD 2o7 & omtrdc) - 2016-02-23 BadNetworks[i++] = "66.235.141.0, 255.255.255.0"; // DNSWCD 2o7 & omtrdc BadNetworks[i++] = "69.25.47.160, 255.255.255.224"; // PARKFUNNEL - 2010-04-20 BadNetworks[i++] = "81.31.38.0, 255.255.255.128"; // PORN exmasters.com-1 - 2009-06-19 BadNetworks[i++] = "82.98.86.160, 255.255.255.240"; // PARKFUNNEL - 2011-03-29 BadNetworks[i++] = "82.98.86.176, 255.255.255.248"; // PARKFUNNEL - 2011-03-29 BadNetworks[i++] = "89.185.228.0, 255.255.254.0"; // PORN exmasters.com-2 - 2009-06-19 // If the host name ends with any of the following domains the // FindProxyForURL function will reject it unless it was previously // matched by any of the GoodDomains or the IP is in a safe range. // WARNING - DO NOT PUT REGEXPs AT THE *END* OF THIS ARRAY var BadDomains = new Array(); i=0; BadDomains[i++] = ".2o7.net"; // Tracker - 2010-03-12 BadDomains[i++] = ".302br.net"; // DNSWCD WebBug - 2016-02-23 BadDomains[i++] = "33across.com"; // Tracker - 2011-01-01 BadDomains[i++] = ".360tag.com"; // Tracker - 2013-01-09 BadDomains[i++] = ".51yes.com"; // Tracker - 2008-06-30 BadDomains[i++] = ".acecounter.com"; // Tracker - 2012-06-22 BadDomains[i++] = ".ad-gbn.com"; // AdServer - 2013-04-09 BadDomains[i++] = "ad6media.fr"; // AdServer - 2010-09-15 BadDomains[i++] = ".adblade.com"; // AdServer - 2011-05-16 BadDomains[i++] = ".adc-serv.net"; // Tracker - 2014-03-10 BadDomains[i++] = ".adclick.lv"; // AdServer - 2013-07-29 BadDomains[i++] = "adclickmedia.com"; // AdServer - 2013-04-10 BadDomains[i++] = "addynamo.net"; // AdServer - 2012-03-10 BadDomains[i++] = "adengage.com"; // AdServer - 2011-09-26 BadDomains[i++] = "adfeedstrk.com"; // AdServer - 2014-02-10 BadDomains[i++] = "adform.net"; // Tracker - 2018-03-31 BadDomains[i++] = "adframesrc.com"; // AdServer - 2013-04-15 BadDomains[i++] = "adfusion.com"; // AdServer - 2010-12-16 BadDomains[i++] = "adgtracker.com"; // DNSWCD WebBug - 2014-05-12 BadDomains[i++] = ".adhese.com"; // AdServer - 2012-06-22 BadDomains[i++] = "adinterax.com"; // AdServer - 2010-09-15 BadDomains[i++] = ".adition.com"; // AdServer - 2012-01-02 BadDomains[i++] = ".adk2.com"; // AdServer - 2012-07-12 BadDomains[i++] = "adlooxtracking.com"; // Tracker - 2014-03-10 BadDomains[i++] = "admarketplace.net"; // AdServer - 2013-11-29 BadDomains[i++] = ".admedia.com"; // AdServer - 2012-06-22 BadDomains[i++] = ".admulti.com"; // DNSWCD AdServer - 2012-01-16 BadDomains[i++] = ".adnxs.com"; // DNSWCD Tracker - 2015-06-24 BadDomains[i++] = "adobetag.com"; // Tracker - 2013-02-22 BadDomains[i++] = ".adocean.pl"; // AdServer - 2011-05-16 BadDomains[i++] = ".adprotect.net"; // WebBug - 2014-04-18 BadDomains[i++] = "adsafeprotected.com"; // AdServer - 2013-04-10 BadDomains[i++] = ".adsbookie.com"; // AdServer - 2013-04-10 BadDomains[i++] = "adservinginternational.com"; // DNSWCD AdServer - 2014-05-12 BadDomains[i++] = ".adskape.ru"; // DNSWCD AdServer - 2009-01-26 BadDomains[i++] = ".adsonar.com"; // AdServer - 2018-03-31 BadDomains[i++] = ".adsrvr.org"; // AdServer - 2012-06-23 BadDomains[i++] = "adsymptotic.com"; // Tracker - 2014-02-10 BadDomains[i++] = ".adtech.de"; // AdServer - 2008-06-30 BadDomains[i++] = ".adtechus.com"; // AdServer - 2010-08-19 BadDomains[i++] = ".adtrk.biz"; // Tracker - 2015-04-25 BadDomains[i++] = "advertstream.com"; // AdServer - 2013-08-19 BadDomains[i++] = "advertise.com"; // AdServer - 2011-11-24 BadDomains[i++] = ".advertising.com"; // AdServer - 2011-07-18 BadDomains[i++] = ".affinity.com"; // AdServer - 2013-04-10 BadDomains[i++] = "afftrack.com"; // DNSWCD Tracker - 2016-06-07 BadDomains[i++] = ".agcdn.com"; // AdServer - 2012-06-04 BadDomains[i++] = "aggregateknowledge.com"; // Tracker - 2012-06-23 BadDomains[i++] = ".agkn.com"; // Tracker - 2018-03-31 BadDomains[i++] = "amazingcounters.com"; // Tracker - 2012-04-19 BadDomains[i++] = ".amazon-adsystem.com"; // AdServer - 2018-03-31 BadDomains[i++] = ".amgdgt.com"; // AdServer - 2018-03-31 BadDomains[i++] = "ampxchange.com"; // DNSWCD Tracker - 2014-02-21 BadDomains[i++] = "amung.us"; // Tracker - 2010-09-01 BadDomains[i++] = "analytics-egain.com"; // Tracker - 2015-08-26 BadDomains[i++] = "analytics.edgekey.net"; // DNSWCD Tracker - 2018-03-31 BadDomains[i++] = "analytics.edgesuite.net"; // Tracker - 2018-03-31 BadDomains[i++] = "analytics.go.com"; // DNSWCD Tracker - 2014-05-12 BadDomains[i++] = "angelfishstats.com"; // Tracker - 2013-04-10 BadDomains[i++] = "assoc-amazon.com"; // AdServer - 2010-08-03 BadDomains[i++] = ".atomex.net"; // AdServer - 2013-04-10 BadDomains[i++] = ".avazutracking.net"; // AdServer - 2011-08-23 BadDomains[i++] = "acxiom-online.com"; // Tracker - 2014-10-25 BadDomains[i++] = ".axf8.net"; // DNSWCD Tracker - 2018-03-31 BadDomains[i++] = "behavioralengine.com"; // Tracker - 2014-03-10 BadDomains[i++] = ".betrad.com"; // AdServer - 2011-06-16 BadDomains[i++] = ".bidvertiser.com"; // AdServer - 2011-03-14 BadDomains[i++] = ".bigmir.net"; // AdServer - WebBug BadDomains[i++] = ".binlayer.com"; // DNSWCD AdServer - 2012-06-23 BadDomains[i++] = "bizible.com"; // Tracker - 2014-08-21 BadDomains[i++] = ".bizographics.com"; // Tracker - 2018-03-31 BadDomains[i++] = "blockmetrics.com"; // Tracker - 2013-07-05 BadDomains[i++] = ".blogads.com"; // AdServer - 2010-06-19 BadDomains[i++] = "blogtoplist.com"; // Tracker - 2010-10-15 BadDomains[i++] = "blueadvertise.com"; // AdServer - 2013-04-10 BadDomains[i++] = "bluekai.com"; // Tracker - 2010-08-09 BadDomains[i++] = ".blueseek.com"; // DNSWCD - WebBug - 2009-01-22 BadDomains[i++] = ".bm23.com"; // Tracker - 2015-02-28 BadDomains[i++] = "boomtrain.com"; // Tracker - 2015-04-25 BadDomains[i++] = ".brandreachsys.com"; // AdServer - 2011-05-16 BadDomains[i++] = ".bravenet.com"; // Tracker - 2008-06-30 BadDomains[i++] = ".btrll.com"; // DNSWCD AdServer - 2018-03-31 BadDomains[i++] = ".burt.io"; // Tracker - 2014-05-12 BadDomains[i++] = "buysellads.com"; // AdServer - 2011-06-17 BadDomains[i++] = "c3metrics.com"; // Tracker - 2011-04-19 BadDomains[i++] = "c3tag.com"; // DNSWCD Tracker - 2014-05-12 BadDomains[i++] = ".cam-content.com"; // AdServer - 2012-10-29 BadDomains[i++] = ".cam4.com"; // DNSWCD WebBug - 2011-07-25 BadDomains[i++] = ".carbonads.com"; // AdServer - 2013-07-29 BadDomains[i++] = ".ccbill.com"; // DNSWCD Tracker - 2009-03-30 BadDomains[i++] = "cedexis.com"; // Tracker - 2010-08-24 BadDomains[i++] = ".chango.com"; // Tracker - 2011-04-02 BadDomains[i++] = ".chartbeat.com"; // Tracker - 2010-07-12 BadDomains[i++] = ".chartbeat.net"; // Tracker - 2010-12-07 BadDomains[i++] = ".checkm8.com"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = ".cjb.net"; // MalWare - 2010-05-23 BadDomains[i++] = ".clickability.com"; // Tracker - 2009-01-30 BadDomains[i++] = ".clickbank.net"; // DNSWCD REDIR - 2011-07-23 BadDomains[i++] = "clickbooth.com"; // AdServer - 2010-12-08 BadDomains[i++] = "clickdensity.com"; // Tracker - 2011-01-21 BadDomains[i++] = ".clickintext.net"; // DNSWCD Tracker - 2009-05-19 BadDomains[i++] = "clickon.co.il"; // Tracker - 2012-11-07 BadDomains[i++] = "clickprotects.com"; // WebBug - 2014-12-25 BadDomains[i++] = "clicksagent.com"; // Tracker - 2010-11-25 BadDomains[i++] = ".clickshield.net"; // DNSWCD Tracker - 2010-01-09 BadDomains[i++] = "clicksor.com"; // YOUR CHOICE AdServer - 2010-09-17 BadDomains[i++] = ".clicksor.net"; // Tracker - 2012-06-23 BadDomains[i++] = "clicktracks.com"; // Tracker - 2010-09-15 BadDomains[i++] = ".clickzs.com"; // Tracker - 2008-06-30 BadDomains[i++] = "clickzzs.nl"; // Tracker - 2012-08-25 BadDomains[i++] = "clustrmaps.com"; // Tracker - 2010-11-27 BadDomains[i++] = ".cnzz.com"; // Tracker - 2008-06-30 BadDomains[i++] = "collect.igodigital.com"; // Tracker - 2013-09-18 BadDomains[i++] = ".collserve.com"; // Tracker - 2013-04-10 BadDomains[i++] = ".comclick.com"; // Tracker - 2011-11-05 BadDomains[i++] = "company-target.com"; // Tracker - 2014-04-18 BadDomains[i++] = ".comscore.com"; // Tracker - 2010-11-29 BadDomains[i++] = "contextly.com"; // DNSWCD AdServer - 2012-04-20 BadDomains[i++] = "contextweb.com"; // AdServer - 2010-06-19 BadDomains[i++] = "convertexperiments.com"; // Tracker - 2014-12-25 BadDomains[i++] = "convertglobal.com"; // Tracker - 2013-11-02 BadDomains[i++] = ".convertro.com"; // Tracker - 2011-03-13 BadDomains[i++] = ".coremetrics.com"; // Tracker - 2011-03-13 BadDomains[i++] = "counter.hackers.lv"; // DNSWCD Tracker - 2012-07-12 BadDomains[i++] = "counter.rambler.ru"; // Tracker - 2010-08-28 BadDomains[i++] = "counter.yadro.ru"; // Tracker - 2010-08-28 BadDomains[i++] = ".cpa.clicksure.com"; // DNSWCD Tracker - 2016-01-15 BadDomains[i++] = ".cqcounter.com"; // DNSWCD Tracker - 2008-12-18 BadDomains[i++] = "crazyegg.com"; // Tracker - 2015-04-25 BadDomains[i++] = "creative-serving.com"; // AdServer - 2013-01-09 BadDomains[i++] = ".criteo.com"; // Tracker - 2011-03-13 BadDomains[i++] = ".crsspxl.com"; // Tracker - 2018-03-31 BadDomains[i++] = ".crwdcntrl.net"; // DNSWCD AdServer - 2018-02-25 BadDomains[i++] = "cxense.com"; // Tracker - 2012-01-06 BadDomains[i++] = ".cxt.ms"; // Tracker - 2014-03-10 BadDomains[i++] = ".d41.co"; // Tracker - 2018-02-13 BadDomains[i++] = ".deepmetrix.com"; // Tracker - 2010-08-03 BadDomains[i++] = "demdex.net"; // Tracker - 2018-04-28 BadDomains[i++] = "digitaldesire.com"; // AdServer - 2012-06-23 BadDomains[i++] = "directadvert.ru"; // AdServer - 2013-04-10 BadDomains[i++] = ".directrdr.com"; // Tracker - 2013-04-10 BadDomains[i++] = ".directtrack.com"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = "dmtracker.com"; // Tracker - 2018-03-31 BadDomains[i++] = ".dmtry.com"; // YOUR CHOICE Tracker - 2016-01-15 BadDomains[i++] = ".domainsponsor.com"; // Parker - 2010-05-01 BadDomains[i++] = "dotmetrics.net"; // Tracker - 2013-12-17 BadDomains[i++] = ".dotomi.com"; // AdServer - 2010-06-05 BadDomains[i++] = "doublepimp.com"; // AdServer - 2012-07-12 BadDomains[i++] = "doubleverify.com"; // AdServer - 2011-02-12 BadDomains[i++] = ".dt.mydas.mobi"; // YOUR CHOICE AdServer - 2013-10-22 BadDomains[i++] = ".easy.lv"; // Tracker - 2013-04-15 BadDomains[i++] = "easyresearch.se"; // Tracker - 2013-07-29 BadDomains[i++] = "effectivemeasure.net"; // Tracker - 2011-05-16 BadDomains[i++] = ".eloqua.com"; // Tracker - 2014-04-18 BadDomains[i++] = ".emediate.eu"; // AdServer - 2012-08-25 BadDomains[i++] = ".en25.com"; // Tracker - 2014-04-18 BadDomains[i++] = "ero-advertising.com"; // AdServer - 2012-08-25 BadDomains[i++] = ".esomniture.com"; // DNSWCD Tracker - 2012-03-24 BadDomains[i++] = ".etargetnet.com"; // AdServer - 2011-09-30 BadDomains[i++] = ".everesttech.net"; // DNSWCD Tracker - 2013-11-02 BadDomains[i++] = ".evergage.com"; // Tracker - 2014-03-10 BadDomains[i++] = ".evyy.net"; // Tracker - 2013-07-29 BadDomains[i++] = "exactag.com"; // Tracker - 2014-04-18 BadDomains[i++] = "exacttarget.com"; // Tracker - 2012-08-13 BadDomains[i++] = ".exelator.com"; // Tracker - 2011-03-13 BadDomains[i++] = ".exmasters.com"; // PORN - MalWare - 2008-06-30 BadDomains[i++] = "exoclick.com"; // AdServer - 2011-01-21 BadDomains[i++] = ".extole.com"; // Tracker - 2013-01-09 BadDomains[i++] = ".extreme-dm.com"; // Tracker - 2008-06-30 BadDomains[i++] = ".eyeota.net"; // Tracker - 2013-04-15 BadDomains[i++] = "eyereturn.com"; // AdServer - 2012-01-28 BadDomains[i++] = "ezakus.net"; // Tracker - 2013-02-22 BadDomains[i++] = "feedjit.com"; // Tracker - 2013-02-22 BadDomains[i++] = ".flagcounter.com"; // Tracker - 2011-05-16 BadDomains[i++] = ".fls.doubleclick.net"; // DNSWCD AdServer - 2013-09-07 BadDomains[i++] = "flxpxl.com"; // Tracker - 2013-07-29 BadDomains[i++] = ".fmpub.net"; // AdServer - 2010-06-19 BadDomains[i++] = "footprintlive.com"; // Tracker - 2011-10-28 BadDomains[i++] = "formalyzer.com"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = ".freelogs.com"; // DNSWCD Tracker - 2011-04-13 BadDomains[i++] = ".frosmo.com"; // Tracker - 2013-04-15 BadDomains[i++] = "fwdservice.com"; // DNSWCD Tracker - 2016-06-07 BadDomains[i++] = "gaug.es"; // Tracker - 2015-04-25 BadDomains[i++] = ".gemius.pl"; // WebBug - 2008-06-30 BadDomains[i++] = "geobytes.com"; // Tracker - 2012-04-20 BadDomains[i++] = "geoplugin.net"; // Tracker - 2015-04-25 BadDomains[i++] = "geovisite.com"; // DNSWCD Tracker - 2011-11-28 BadDomains[i++] = ".getclicky.com"; // Tracker - 2010-05-29 BadDomains[i++] = ".glam.com"; // AdServer - 2011-05-16 BadDomains[i++] = "globalmailer.com"; // AdServer - 2013-04-15 BadDomains[i++] = ".go-mpulse.net"; // Tracker - 2014-03-10 BadDomains[i++] = ".go2jump.org"; // DNSWCD Spam REDIR 2011-02-05 BadDomains[i++] = ".gosquared.com"; // Tracker - 2014-03-10 BadDomains[i++] = ".gostats.com"; // Tracker - 2008-06-30 BadDomains[i++] = "gostats.ru"; // Tracker - 2010-09-15 BadDomains[i++] = ".grapeshot.co.uk"; // YOUR CHOICE Tracker - 2010-01-14 BadDomains[i++] = ".gumgum.com"; // AdServer - 2011-04-18 BadDomains[i++] = ".gwallet.com"; // AdServer - 2011-05-16 BadDomains[i++] = ".heapanalytics.com"; // Tracker - 2013-11-02 BadDomains[i++] = ".hiconversion.com"; // Tracker - 2013-11-02 BadDomains[i++] = ".histats.com"; // Tracker - 2010-09-15 BadDomains[i++] = ".hit.bg"; // YOUR CHOICE porn - 2014-07-14 BadDomains[i++] = ".hitslink.com"; // DNSWCD Tracker - 2014-12-25 BadDomains[i++] = ".hittail.com"; // DNSWCD Tracker - 2009-06-19 BadDomains[i++] = ".hopto.org"; // REDIR - 2011-10-04 BadDomains[i++] = ".hotlog.ru"; // DNSWCD Tracker - 2008-12-18 BadDomains[i++] = "hs-analytics.net"; // Tracker - 2014-05-12 BadDomains[i++] = "hubspot.com"; // DNSWCD Tracker - 2010-12-13 BadDomains[i++] = "hxtrack.com"; // Tracker - 2015-08-19 BadDomains[i++] = "idtargeting.com"; // Tracker - 2014-08-25 BadDomains[i++] = "imiclk.com"; // AdServer - 2010-06-05 BadDomains[i++] = ".imlive.com"; // Tracker - 2010-10-16 BadDomains[i++] = "impresionesweb.com"; // AdServer - 2012-06-23 BadDomains[i++] = "impressiondesk.com"; // Tracker - 2013-07-05 BadDomains[i++] = ".imrworldwide.com"; // Tracker - 2018-04-28 BadDomains[i++] = ".industrybrains.com"; // Tracker - 2010-05-08 BadDomains[i++] = ".infolinks.com"; // AdServer - 2010-08-26 BadDomains[i++] = ".inpwrd.com"; // Tracker - 2013-10-22 BadDomains[i++] = ".insightexpressai.com"; // Tracker - 2008-06-30 BadDomains[i++] = "intelliad.de"; // AdServer - 2012-03-10 BadDomains[i++] = ".intellitxt.com"; // Tracker - 2008-06-30 BadDomains[i++] = "interia.pl"; // Tracker - 2014-12-25 BadDomains[i++] = "intermarkets.net"; // AdServer - 2013-04-10 BadDomains[i++] = ".interpolls.com"; // AdServer - 2011-05-23 BadDomains[i++] = ".intextad.net"; // AdServer - 2013-04-15 BadDomains[i++] = "investingchannel.com"; // AdServer - 2010-10-18 BadDomains[i++] = ".invitemedia.com"; // Tracker - 2010-08-26 BadDomains[i++] = "inviziads.com"; // AdServer - 2012-06-23 BadDomains[i++] = "invoc.us"; // Tracker - 2015-04-25 BadDomains[i++] = "invodo.com"; // Tracker - 2014-10-25 BadDomains[i++] = "ip-api.com"; // Tracker - 2015-04-25 BadDomains[i++] = ".ip-label.net"; // Tracker - 2011-07-14 BadDomains[i++] = ".iperceptions.com"; // Tracker - 2009-09-07 BadDomains[i++] = "ipinfodb.com"; // Tracker - 2015-04-25 BadDomains[i++] = "iwanttodeliver.com"; // DNSWCD Tracker - 2016-09-22 BadDomains[i++] = ".jirafe.com"; // Tracker - 2013-04-10 BadDomains[i++] = "juicyads.com"; // AdServer - 2012-08-25 BadDomains[i++] = "jumptap.com"; // DNSWCD AdServer - 2015-08-19 BadDomains[i++] = "jumptime.com"; // Tracker - 2013-11-02 BadDomains[i++] = "kameleoon.com"; // Tracker - 2015-08-19 BadDomains[i++] = "keywordmax.com"; // Tracker - 2011-04-18 BadDomains[i++] = "klikbonus.com"; // DNSWCD WebBug - 2015-09-19 BadDomains[i++] = "komoona.com"; // AdServer - 2013-07-05 BadDomains[i++] = "korrelate.net"; // DNSWCD Tracker - 2016-03-12 BadDomains[i++] = ".krxd.net"; // Tracker - 2018-04-28 BadDomains[i++] = "leadforensics.com"; // Tracker - 2013-02-22 BadDomains[i++] = "levexis.com"; // Tracker - 2018-04-28 BadDomains[i++] = "liadm.com"; // Tracker - 2015-02-19 BadDomains[i++] = "liftdna.com"; // Tracker - 2014-12-31 BadDomains[i++] = "lijit.com"; // AdServer - 2011-11-14 BadDomains[i++] = ".linkbucks.com"; // DNSWCD WebBug - 2009-11-20 BadDomains[i++] = ".linkpulse.com"; // Tracker - 2012-01-16 BadDomains[i++] = ".loggly.com"; // Tracker - 2013-01-10 BadDomains[i++] = "lognormal.net"; // Tracker - 2013-07-29 BadDomains[i++] = ".lphbs.com"; // Tracker - 2013-07-29 BadDomains[i++] = "luckyorange.com"; // DNSWCD Tracker - 2014-11-11 BadDomains[i++] = ".luxup.ru"; // DNSWCD AdServer - 2012-01-16 BadDomains[i++] = ".lytics.io"; // Tracker - 2018-02-13 BadDomains[i++] = "m-pathy.com"; // Tracker - 2015-04-25 BadDomains[i++] = "magnify360.com"; // DNSWCD Tracker - 2016-06-07 BadDomains[i++] = "marinsm.com"; // Tracker - 2010-08-03 BadDomains[i++] = ".mathtag.com"; // Tracker - 2010-08-09 BadDomains[i++] = "matheranalytics.com"; // Tracker - 2015-04-25 BadDomains[i++] = "mdotlabs.com"; // Tracker - 2014-08-25 BadDomains[i++] = "media6degrees.com"; // AdServer - 2010-08-03 BadDomains[i++] = ".mediaforge.com"; // AdServer - 2012-03-24 BadDomains[i++] = ".mediatraffic.com"; // AdServer - 2011-05-16 BadDomains[i++] = "meetrics.net"; // Tracker - 2013-02-22 BadDomains[i++] = ".met.vgwort.de"; // Tracker - 2014-03-10 BadDomains[i++] = "metalyzer.com"; // Tracker - 2013-04-10 BadDomains[i++] = "metric.gstatic.com"; // Tracker - 2014-02-10 BadDomains[i++] = ".metrigo.com"; // Tracker - 2013-01-10 BadDomains[i++] = ".micpn.com"; // DNSWCD Tracker - 2018-02-13 BadDomains[i++] = ".misstrends.com"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = ".miva.com"; // AdServer - 2010-10-15 BadDomains[i++] = ".mkt51.net"; // Tracker - 2012-05-23 BadDomains[i++] = ".mlstat.com"; // Tracker - 2013-04-10 BadDomains[i++] = ".mmstat.com"; // Tracker - 2013-01-17 BadDomains[i++] = "moatads.com"; // DNSWCD AdServer - 2018-02-25 BadDomains[i++] = "mobify.com"; // Tracker - 2013-07-05 BadDomains[i++] = "monetate.net"; // Tracker - 2018-04-28 BadDomains[i++] = ".mookie1.com"; // AdServer - 2018-04-28 BadDomains[i++] = "motorpresse-statistik.de"; // Tracker - 2014-10-25 BadDomains[i++] = ".mp.mydas.mobi"; // AdServer - 2013-10-22 BadDomains[i++] = "mplxtms.com"; // Tracker - 2014-08-04 BadDomains[i++] = ".msads.net"; // AdServer - 2018-04-28 BadDomains[i++] = ".mtree.com"; // Tracker - 2011-01-13 BadDomains[i++] = ".mxcdn.net"; // DNSWCD Tracker - 2016-04-12 BadDomains[i++] = "myomnistar.com"; // Tracker - 2014-10-22 BadDomains[i++] = "myroitracking.com"; // Tracker - 2012-06-23 BadDomains[i++] = "mysearch.com"; // DNSWCD Malware - 2014-07-14 BadDomains[i++] = ".mystat-in.net"; // DNSWCD - Tracker - 2008-06-30 BadDomains[i++] = ".mystats.nl"; // Tracker - 2014-07-14 BadDomains[i++] = ".mythings.com"; // AdServer - 2013-02-22 BadDomains[i++] = "neodatagroup.com"; // AdServer - 2013-07-29 BadDomains[i++] = ".netlog.com"; // DNSWCD - Tracker - 2009-04-26 BadDomains[i++] = ".netmining.com"; // DNSWCD Tracker - 2012-06-23 BadDomains[i++] = ".netmng.com"; // Tracker - 2010-11-28 BadDomains[i++] = ".netshelter.net"; // Tracker - 2010-09-16 BadDomains[i++] = "newrelic.com"; // Tracker - 2012-06-04 BadDomains[i++] = "newsanalytics.com.au"; // Tracker - 2014-05-12 BadDomains[i++] = "newstogram.com"; // Tracker - 2010-11-28 BadDomains[i++] = ".nexac.com"; // AdServer - 2010-11-28 BadDomains[i++] = ".notlong.com"; // YOUR CHOICE DNSWCD Spam - 2011-04-18 BadDomains[i++] = ".nrelate.com"; // Tracker - 2014-12-25 BadDomains[i++] = ".nuggad.net"; // Tracker - 2010-11-25 BadDomains[i++] = ".nxtck.com"; // Tracker - 2015-02-19 BadDomains[i++] = ".o-oe.com"; // Malware - 2014-05-12 BadDomains[i++] = ".offermatica.com"; // Tracker - 2008-06-30 BadDomains[i++] = "ojolink.fr"; // YOUR CHOICE Malware - 2014-12-25 BadDomains[i++] = ".ojrq.net"; // Tracker - 2013-06-25 BadDomains[i++] = ".olark.com"; // Tracker - 2011-05-16 BadDomains[i++] = ".omtrdc.net"; // DNSWCD Tracker - 2012-03-12 BadDomains[i++] = "online-metrix.net"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = "onscroll.com"; // AdServer - 2018-02-13 BadDomains[i++] = ".opentracker.net"; // Tracker - 2008-06-30 BadDomains[i++] = ".openx.com"; // AdServer - 2011-05-16 BadDomains[i++] = ".openx.net"; // Tracker - 2010-01-20 BadDomains[i++] = "optimizely.com"; // Tracker - 2011-02-21 BadDomains[i++] = ".optimost.com"; // Tracker - 2018-04-28 BadDomains[i++] = ".outster.com"; // AdServer - 2012-06-23 BadDomains[i++] = "p-td.com"; // Tracker - 2014-06-10 BadDomains[i++] = ".pages05.net"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = ".paperg.com"; // AdServer - 2013-07-29 BadDomains[i++] = ".pardot.com"; // Tracker - 2011-05-02 BadDomains[i++] = "parkingcrew.net"; // DNSWCD WebBug - 2015-02-19 BadDomains[i++] = "pay-click.ru"; // AdServer - 2012-01-16 BadDomains[i++] = ".peerius.com"; // Tracker - 2013-01-10 BadDomains[i++] = "perfectaudience.com"; // Tracker - 2013-07-29 BadDomains[i++] = "pingdom.net"; // Tracker - 2013-07-29 BadDomains[i++] = "pixel.parsely.com"; // DNSWCD Tracker - 2015-09-19 BadDomains[i++] = "plugrush.com"; // AdServer - 2012-06-23 BadDomains[i++] = ".po.st"; // Tracker - 2014-02-10 BadDomains[i++] = ".pocitadlo.cz"; // DNSWCD Tracker - 2012-07-12 BadDomains[i++] = "pointroll.com"; // Tracker - 2010-09-15 BadDomains[i++] = ".popunder.ru"; // DNSWCD - WebBug - 2008-06-30 BadDomains[i++] = "predictad.com"; // AdServer - 2012-06-23 BadDomains[i++] = "predictiveresponse.net"; // Tracker - 2013-07-18 BadDomains[i++] = ".primosearch.com"; // DNSWCD - WebBug - 2009-01-22 BadDomains[i++] = ".prnx.net"; // DNSWCD Tracker - 2012-01-02 BadDomains[i++] = "program3.com"; // AdServer - 2013-04-10 BadDomains[i++] = "proxad.net"; // Tracker - 2012-06-23 BadDomains[i++] = "proximic.com"; // Tracker - 2014-12-25 BadDomains[i++] = "pubmatic.com"; // AdServer - 2010-08-24 BadDomains[i++] = ".puhtml.com"; // DNSWCD AdServer - 2015-12-24 BadDomains[i++] = ".puls.lv"; // Tracker - 2014-10-25 BadDomains[i++] = ".pulsemgr.com"; // Tracker - 2018-04-28 BadDomains[i++] = ".puserving.com"; // DNSWCD AdServer - 2017-02-10 BadDomains[i++] = ".q1media.com"; // AdServer - 2013-01-10 BadDomains[i++] = ".qbaka.net"; // Tracker - 2014-03-10 BadDomains[i++] = ".qnsr.com"; // AdServer - 2011-02-14 BadDomains[i++] = ".quantserve.com"; // YOUR CHOICE - WebBug - 2009-12-03 BadDomains[i++] = "qubitproducts.com"; // Tracker - 2015-02-28 BadDomains[i++] = ".quebec-bin.com"; // WebBug - 2016-12-30 BadDomains[i++] = ".r.msn.com"; // DNSWCD Tracker - 2011-10-22 BadDomains[i++] = "reachjunction.com"; // AdServer - 2013-04-15 BadDomains[i++] = ".readnotify.com"; // DNSWCD Tracker - 2014-07-14 BadDomains[i++] = "realclick.co.kr"; // AdServer - 2012-04-20 BadDomains[i++] = "realist.gen.tr"; // Tracker - 2012-06-23 BadDomains[i++] = ".realtracker.com"; // Tracker - 2008-06-30 BadDomains[i++] = ".rediff.com"; // Tracker - 2015-08-26 BadDomains[i++] = ".redirectme.net"; // REDIR - 2011-10-04 BadDomains[i++] = ".reporo.net"; // DNSWCD AdServer - 2014-05-12 BadDomains[i++] = "research.de.com"; // Tracker - 2013-02-22 BadDomains[i++] = "revenuewire.net"; // Tracker - 2014-12-25 BadDomains[i++] = "rfihub.com"; // DNSWCD Tracker - 2015-06-01 BadDomains[i++] = "rfihub.net"; // DNSWCD AdServer - 2015-06-01 BadDomains[i++] = "richmetrics.com"; // DNSWCD Tracker - 2014-05-12 BadDomains[i++] = ".ringrevenue.com"; // DNSWCD AdServer - 2012-01-16 BadDomains[i++] = ".rkdms.com"; // Tracker - 2013-11-02 BadDomains[i++] = ".rlcdn.com"; // Tracker - 2012-08-25 BadDomains[i++] = ".rubiconproject.com"; // AdServer - 2010-08-10 BadDomains[i++] = ".runadtag.com"; // AdServer - 2013-07-29 BadDomains[i++] = "sancdn.net"; // AdServer - 2013-04-15 BadDomains[i++] = ".scanscout.com"; // Tracker - 2014-02-10 BadDomains[i++] = "scoutanalytics.net"; // Tracker - 2013-04-10 BadDomains[i++] = "securetracking2.com"; // DNSWCD WebBug - 2014-06-27 BadDomains[i++] = "segment.com"; // Tracker - 2015-09-25 BadDomains[i++] = ".segment.io"; // Tracker - 2014-07-28 BadDomains[i++] = "sellpoint.net"; // Tracker - 2012-02-28 BadDomains[i++] = ".sendori.com"; // YOUR CHOICE DNSWCD REDIR - 2010-05-05 BadDomains[i++] = ".servedbyopenx.com"; // AdServer - 2018-04-28 BadDomains[i++] = ".serving-sys.com"; // YOUR CHOICE Tracker - 2018-04-28 BadDomains[i++] = "sexcounter.com"; // DNSWCD Tracker - 2012-06-23 BadDomains[i++] = "sharpspring.com"; // DNSWCD Tracker - 2016-06-07 BadDomains[i++] = "shinystat.com"; // Tracker - 2010-12-29 BadDomains[i++] = "shinystat.it"; // Tracker - 2010-12-29 BadDomains[i++] = "simplereach.com"; // Tracker - 2012-04-20 BadDomains[i++] = "simpli.fi"; // Tracker - 2014-11-11 BadDomains[i++] = "site50.net"; // DNSWCD WebBug - 2014-12-25 BadDomains[i++] = "siteimprove.com"; // Tracker - 2014-08-04 BadDomains[i++] = ".sitemeter.com"; // WebBug - Tracker - 2008-06-30 BadDomains[i++] = ".sitescout.com"; // AdServer - 2012-06-23 BadDomains[i++] = ".sitestat.com"; // Tracker - 2008-06-30 BadDomains[i++] = "skimlinks.com"; // DNSWCD AdServer - 2014-07-14 BadDomains[i++] = "skimresources.com"; // AdServer - 2010-10-16 BadDomains[i++] = ".smartadserver.com"; // YOUR CHOICE AdServer - 2010-09-16 BadDomains[i++] = "smartclick.net"; // Tracker - 2014-02-10 BadDomains[i++] = "softonicads.com"; // AdServer - 2011-11-24 BadDomains[i++] = "sojern.com"; // Tracker - 2015-02-28 BadDomains[i++] = "sonobi.com"; // AdServer - 2015-04-25 BadDomains[i++] = "sophus3.com"; // Tracker - 2011-11-24 BadDomains[i++] = "soundsecureredir.com"; // DNSWCD WebBug - 2014-12-25 BadDomains[i++] = ".specificclick.net"; // Tracker - 2018-04-28 BadDomains[i++] = "specificmedia.com"; // AdServer - 2010-08-28 BadDomains[i++] = "splittag.com"; // Tracker - 2013-04-15 BadDomains[i++] = "spongecell.com"; // AdServer - 2011-05-16 BadDomains[i++] = "spring-tns.net"; // Tracker - 2013-04-10 BadDomains[i++] = "springmetrics.com"; // Tracker - 2014-07-14 BadDomains[i++] = ".spylog.com"; // Tracker - WebBug - 2008-06-30 BadDomains[i++] = ".spylog.ru"; // Tracker - 2010-05-01 BadDomains[i++] = ".stat24.com"; // Tracker - 2011-01-08 BadDomains[i++] = "statcounter.com"; // Tracker - 2010-09-23 BadDomains[i++] = "stathat.com"; // Tracker - 2013-12-17 BadDomains[i++] = "stats.magnify.net"; // Tracker - 2010-08-30 BadDomains[i++] = "stats.wordpress.com"; // Tracker - 2010-08-14 BadDomains[i++] = "steelhousemedia.com"; // Tracker - 2014-03-10 BadDomains[i++] = "stormiq.com"; // Tracker - 2014-05-12 BadDomains[i++] = "sub2tech.com"; // Tracker - 2014-04-18 BadDomains[i++] = "sumome.com"; // Tracker - 2015-05-04 BadDomains[i++] = "supercounters.com"; // Tracker - 2013-04-15 BadDomains[i++] = ".superstats.com"; // Tracker - 2008-06-30 BadDomains[i++] = ".sv2.biz"; // Tracker - 2012-07-23 BadDomains[i++] = ".sytes.net"; // Malware - 2013-11-02 BadDomains[i++] = "tagsrvcs.com"; // Tracker - 2015-08-19 BadDomains[i++] = "tailsweep.com"; // AdServer - 2011-05-16 BadDomains[i++] = "tailtarget.com"; // Tracker - 2013-12-17 BadDomains[i++] = "targetfuel.com"; // Tracker - 2012-07-12 BadDomains[i++] = "telemetryverification.net"; // DNSWCD AdServer - 2012-06-23 BadDomains[i++] = "tentaculos.net"; // Tracker - 2014-04-18 BadDomains[i++] = "thesearchagency.net"; // Tracker - 2011-03-13 BadDomains[i++] = ".tidaltv.com"; // AdServer - 2011-03-13 BadDomains[i++] = ".tk"; // YOUR CHOICE Malware - 2010-12-06 BadDomains[i++] = ".tns-cs.net"; // Tracker - 2018-04-28 BadDomains[i++] = ".toboads.com"; // AdServer - 2012-06-23 BadDomains[i++] = "toolbar.com"; // DNSWCDs - *.*toolbar.com - 2018-04-28 BadDomains[i++] = "toplist.cz"; // Tracker - 2010-09-15 BadDomains[i++] = ".tradedoubler.com"; // Tracker - WebBug - 2008-06-30 BadDomains[i++] = "tracemyip.org"; // Tracker - 2013-04-10 BadDomains[i++] = ".track.clicksure.com"; // DNSWCD Tracker - 2016-01-15 BadDomains[i++] = ".trackalyzer.com"; // Tracker - 2009-11-30 BadDomains[i++] = "trackedlink.net"; // Tracker - 2014-10-25 BadDomains[i++] = "tracking.searchmarketing.com"; // Tracker - 2010-08-03 BadDomains[i++] = "tracking202.com"; // Tracker - 2012-06-04 BadDomains[i++] = "traffichaus.com"; // AdServer - 2011-08-06 BadDomains[i++] = "trafficjunky.net"; // AdServer - 2013-04-15 BadDomains[i++] = ".tribalfusion.com"; // Tracker - 2008-06-30 BadDomains[i++] = "triplequadturbo.com"; // YOUR CHOICE Malware - 2014-12-26 BadDomains[i++] = ".trk4.com"; // DNSWCD Tracker - 2012-11-07 BadDomains[i++] = "trkme.net"; // Tracker - 2013-02-22 BadDomains[i++] = "truehits.in.th"; // Tracker - 2010-10-15 BadDomains[i++] = "truehits.net"; // Tracker - 2010-10-15 BadDomains[i++] = ".trw12.com"; // DNSWCD AdServer - 2013-04-15 BadDomains[i++] = ".turn.com"; // Tracker - 2010-08-09 BadDomains[i++] = ".tvsquared.com"; // DNSWCD Tracker - 2016-07-14 BadDomains[i++] = ".tynt.com"; // Tracker - 2010-06-24 BadDomains[i++] = ".tyxo.bg"; // Tracker - 2013-02-22 BadDomains[i++] = "ugdturner.com"; // Tracker - 2014-06-10 BadDomains[i++] = ".uimserv.net"; // Tracker - 2018-04-28 BadDomains[i++] = ".umbel.com"; // Tracker - 2013-07-29 BadDomains[i++] = "undertone.com"; // AdServer - 2012-01-21 BadDomains[i++] = ".unicast.com"; // AdServer - 2011-07-25 BadDomains[i++] = "unrulymedia.com"; // AdServer - 2010-11-25 BadDomains[i++] = "up.nytimes.com"; // Tracker - 2010-08-14 BadDomains[i++] = "usabilla.com"; // Tracker - 2014-05-12 BadDomains[i++] = "usabilitytools.com"; // Tracker - 2015-06-01 BadDomains[i++] = "usercash.com"; // DNSWCD AdServer - 2011-01-13 BadDomains[i++] = "userreport.com"; // Tracker - 2012-01-16 BadDomains[i++] = ".users.51.la"; // Tracker - 2018-04-28 BadDomains[i++] = ".veinteractive.com"; // Tracker - 2012-06-04 BadDomains[i++] = "ventivmedia.com"; // Tracker - 2012-07-12 BadDomains[i++] = "verticalscope.com"; // Tracker - 2013-11-02 BadDomains[i++] = ".vindicosuite.com"; // Tracker - 2014-07-28 BadDomains[i++] = "vinsight.de"; // Tracker - 2014-04-18 BadDomains[i++] = "visiblemeasures.com"; // YOUR CHOICE Tracker - 2010-09-15 BadDomains[i++] = ".visistat.com"; // Tracker - 2010-07-20 BadDomains[i++] = "visitor-track.com"; // Tracker - 2010-09-16 BadDomains[i++] = ".voicefive.com"; // Tracker - 2010-07-19 BadDomains[i++] = "voluumtrk.com"; // DNSWCD Tracker - 2015-09-01 BadDomains[i++] = ".voodoo.com"; // DNSWCD AdServer - 2013-09-17 BadDomains[i++] = ".w55c.net"; // Tracker - 2010-11-25 BadDomains[i++] = "way2traffic.com"; // Tracker - 2013-04-15 BadDomains[i++] = "web-stat.com"; // Tracker - 2010-08-03 BadDomains[i++] = "webeffective.keynote.com"; // Tracker - 2010-08-03 BadDomains[i++] = ".weborama.fr"; // AdServer - 2010-11-29 BadDomains[i++] = "webspectator.com"; // Tracker - 2012-08-25 BadDomains[i++] = "webstats4u.com"; // Tracker - 2010-09-16 BadDomains[i++] = "webtrekk.net"; // DNSWCD Tracker - 2018-04-28 BadDomains[i++] = ".webtrends.com"; // Tracker - 2010-11-25 BadDomains[i++] = ".webtrendslive.com"; // Tracker - 2010-05-23 BadDomains[i++] = ".wemfbox.ch"; // WebBug - 2010-01-12 BadDomains[i++] = "whoson.com"; // Tracker - 2012-04-20 BadDomains[i++] = ".wiredminds.de"; // Tracker - 2013-11-02 BadDomains[i++] = ".x-traceur.com"; // Tracker - 2008-06-30 BadDomains[i++] = ".x0.nl"; // DNSWCD WebBug - 2015-09-19 BadDomains[i++] = "xblasterads1.com"; // DNSWCD AdServer - 2016-06-07 BadDomains[i++] = "xg4ken.com"; // DNSWCD Tracker - 2012-04-24 BadDomains[i++] = ".xiti.com"; // Tracker - 2012-07-12 BadDomains[i++] = ".xorg.pl"; // DNSWCD Malware - 2010-03-31 BadDomains[i++] = ".xplosion.de"; // Tracker - 2014-05-12 BadDomains[i++] = ".xtendmedia.com"; // AdServer - 2018-04-28 BadDomains[i++] = "yesmessenger.com"; // DNSWCD AdServer - 2012-07-23 BadDomains[i++] = ".yieldmanager.net"; // AdServer - 2010-08-10 BadDomains[i++] = "yumenetworks.com"; // AdServer - 2013-07-29 BadDomains[i++] = ".z5x.net"; // WebBug - 2014-02-10 BadDomains[i++] = "zanox.com"; // AdServer - 2012-04-20 BadDomains[i++] = ".zapto.org"; // REDIR - 2011-10-04 BadDomains[i++] = ".zdbb.net"; // Tracker - 2013-04-10 BadDomains[i++] = ".zebestof.com"; // Tracker - 2014-03-10 BadDomains[i++] = ".zedo.com"; // Tracker - 2008-06-30 BadDomains[i++] = "zergnet.com"; // Tracker - 2016-04-12 BadDomains[i++] = ".zqtk.net"; // Tracker - 2015-02-19 // If any of the following BadURL_Parts show up anywhere in the URL // the FindProxyForURL will reject it unless the resulting IP is // in a safe range. You can put REGEXPs anywhere you want here. var BadURL_Parts = new Array(); i=0; BadURL_Parts[i++] = "3rabnaar"; // Malware - 2010-05-07 BadURL_Parts[i++] = "-ad-resize-"; // AdServer - 2016-07-14 BadURL_Parts[i++] = "_adbanner_"; // AdServer - 2011-03-13 BadURL_Parts[i++] = "[(a-z)]\.pagevisitcounter"; // Tracker - 2015-08-20 BadURL_Parts[i++] = "_ad_choices_"; // AdServer - 2014-08-21 BadURL_Parts[i++] = "addthis.com\/at\/"; // Tracker - 2010-09-04 BadURL_Parts[i++] = "addthis.com\/live\/"; // Tracker - 2010-09-04 BadURL_Parts[i++] = "\.adforge\."; // AdServer - 2016-01-15 BadURL_Parts[i++] = "\/admin\/banners\/"; // AdServer - 2016-06-07 BadURL_Parts[i++] = "adobe-update"; // Malware - 2010-11-08 BadURL_Parts[i++] = "adobe_update"; // Malware - 2010-11-08 BadURL_Parts[i++] = "adobeflashplayer"; // Malware - 2010-11-06 BadURL_Parts[i++] = "adrevolver"; // AdServer - 2009-04-27 BadURL_Parts[i++] = "\/ads\/proximic\."; // AdServer - 2016-03-12 BadURL_Parts[i++] = "\/affiliate_base\/banners\/"; // AdServer - 2016-04-12 BadURL_Parts[i++] = "amazon-affiliate-"; // Tracker - 2016-02-27 BadURL_Parts[i++] = "\/analysis-logger\/"; // Tracker - 2016-04-12 BadURL_Parts[i++] = "analytics\.sol"; // Tracker - 2010-01-12 BadURL_Parts[i++] = "analytics\/tracking\."; // Tracker - 2014-08-28 BadURL_Parts[i++] = "assets\/ads\/"; // AdServer - 2016-02-24 BadURL_Parts[i++] = "assets\/ads_"; // AdServer - 2016-02-24 BadURL_Parts[i++] = "awempire\."; // AdServer - 2012-06-23 BadURL_Parts[i++] = "babes"; // Malware - 2010-04-20 BadURL_Parts[i++] = "baise"; // Malware - 2010-04-20 BadURL_Parts[i++] = "behaviorads"; // AdServer - 2009-12-17 BadURL_Parts[i++] = "bigtit[^l]"; // Malware - 2010-04-20 BadURL_Parts[i++] = "bing\.com\/bat\.js"; // Tracker - 2015-08-20 BadURL_Parts[i++] = "bing\.com\/fd\/ls\/"; // Tracker - 2015-04-25 BadURL_Parts[i++] = "bit\.ly\/stats"; // Tracker - 2010-09-15 BadURL_Parts[i++] = "blowjob"; // Malware - 2010-04-20 BadURL_Parts[i++] = "bondage"; // Malware - 2010-04-20 BadURL_Parts[i++] = "boobs"; // Malware - 2010-04-20 BadURL_Parts[i++] = "burningcamel"; // Malware - 2010-12-01 BadURL_Parts[i++] = "cardstatement\.exe"; // Phish - 2009-12-22 BadURL_Parts[i++] = "chartbeat_"; // Tracker - 2015-02-28 BadURL_Parts[i++] = "chicks"; // Malware - 2010-04-20 BadURL_Parts[i++] = "chloroform"; // YOUR CHOICE Malware - 2010-12-01 BadURL_Parts[i++] = "click\.php"; // Tracker - 2012-01-28 BadURL_Parts[i++] = "cloudfront.net\/sentinel.js"; // Tracker - 2015-06-24 BadURL_Parts[i++] = "[^aehn]cock[^aprt]"; // Malware - 2014-08-28 BadURL_Parts[i++] = "\.com\/js\/ga\.js"; // Tracker - 2016-07-14 BadURL_Parts[i++] = "content-tracking\.js"; // Tracker - 2015-01-02 BadURL_Parts[i++] = "cumshot"; // Malware - 2010-04-20 BadURL_Parts[i++] = "[(a-z)]\.dartconfig\.js"; // AdServer - 2015-02-19 BadURL_Parts[i++] = "dblclick"; // AdServer - 2009-09-04 BadURL_Parts[i++] = "defaultimpression"; // Tracker (fwmrm.net) - 2014-05-12 BadURL_Parts[i++] = "directnews.co.uk\/feedtrack\/"; // Tracker - 2010-05-23 BadURL_Parts[i++] = "doubleclick"; // YOUR CHOICE AdServer - 2009-09-04 BadURL_Parts[i++] = "doubleclick.net\/activity"; // Tracker - 2015-02-19 BadURL_Parts[i++] = "ecos_surveycode_"; // Tracker - 2015-08-20 BadURL_Parts[i++] = "ero-advertising"; // AdServer - 2011-07-18 BadURL_Parts[i++] = "eroadvertising"; // AdServer - 2011-09-08 BadURL_Parts[i++] = "eroti"; // Malware - 2010-04-20 BadURL_Parts[i++] = "\/event\.gif"; // Tracker - 2015-05-09 BadURL_Parts[i++] = "fb-ga-track-"; // Tracker - 2016-07-14 BadURL_Parts[i++] = "ficken"; // Malware - 2010-04-20 BadURL_Parts[i++] = "firstrepublic\.com"; // Phish - 2011-01-04 BadURL_Parts[i++] = "flash-update"; // YOUR CHOICE Malware - 2011-04-02 BadURL_Parts[i++] = "flash_update"; // YOUR CHOICE Malware - 2011-04-02 BadURL_Parts[i++] = "flashplayer[^d]"; // YOUR CHOICE Malware - 2011-05-23 BadURL_Parts[i++] = "fuck"; // Malware - 2010-04-20 BadURL_Parts[i++] = "gecock"; // Malware - 2009-12-02 BadURL_Parts[i++] = "gemius\.js"; // Tracker - 2010-03-26 BadURL_Parts[i++] = "google-adsense-"; // AdServer - 2010-06-03 BadURL_Parts[i++] = "googlead"; // YOUR CHOICE AdServer - 2009-11-16 BadURL_Parts[i++] = "gravity-beacon-"; // Tracker - 2016-07-14 BadURL_Parts[i++] = "hardcore"; // Malware - 2010-04-20 BadURL_Parts[i++] = "hentai"; // Malware - 2010-04-20 BadURL_Parts[i++] = "_house_ad_"; // AdServer - 2015-06-24 BadURL_Parts[i++] = "hugedomains.com\/metrics\/"; // Tracker - 2015-02-19 BadURL_Parts[i++] = "incest"; // Malware - 2010-04-20 BadURL_Parts[i++] = "indextools\.js"; // Tracker - 2009-09-11 BadURL_Parts[i++] = "iperceptions_"; // Tracker - 2015-08-20 BadURL_Parts[i++] = "jquery\.dfp\.js"; // AdServer - 2016-03-12 BadURL_Parts[i++] = "jquery\.dfp\.min\.js"; // AdServer - 2016-03-12 BadURL_Parts[i++] = "keezmovies"; // Malware - 2010-12-01 BadURL_Parts[i++] = "keygen"; // YOUR CHOICE Malware - 2011-05-23 BadURL_Parts[i++] = "\.lazyload-ad-"; // AdServer - 2016-03-12 BadURL_Parts[i++] = "lesbi"; // Malware - 2010-04-20 BadURL_Parts[i++] = "[^i]litas"; // YOUR CHOICE Malware - 2012-07-16 BadURL_Parts[i++] = "livejasmin"; // Malware - 2011-07-25 BadURL_Parts[i++] = "_loghuman="; // Tracker - 2015-12-24 BadURL_Parts[i++] = "loglib\.js"; // YOUR CHOICE Tracker - 2009-11-16 BadURL_Parts[i++] = "lolita"; // Malware - 2010-04-20 BadURL_Parts[i++] = "madisonlogic.com\/jsc"; // Tracker - 2014-08-21 BadURL_Parts[i++] = "mcc.godaddy.com\/park\/"; // AdServer - 2015-10-02 BadURL_Parts[i++] = "milf[^o]"; // Malware - 2009-05-24 BadURL_Parts[i++] = "naked"; // Malware - 2010-04-20 BadURL_Parts[i++] = "[^-y]nasty"; // Malware - 2014-12-26 BadURL_Parts[i++] = "\/nettracker\/"; // Tracker - 2015-05-06 BadURL_Parts[i++] = "ntpagetag"; // Tracker - 2009-10-05 BadURL_Parts[i++] = "\.nz\/ads\/"; // AdServer - 2011-11-25 BadURL_Parts[i++] = "okcupid.com\/poststat"; // Tracker - 2014-08-04 BadURL_Parts[i++] = "orgy"; // Malware - 2010-03-31 BadURL_Parts[i++] = "pagespeed_beacon"; // Tracker - 2015-02-19 BadURL_Parts[i++] = "paypal\.com"; // YOUR CHOICE Phish - 2011-12-27 BadURL_Parts[i++] = "paypal\.de"; // YOUR CHOICE Phish - 2011-12-27 BadURL_Parts[i++] = "paypal\.fr"; // YOUR CHOICE Phish - 2011-12-27 BadURL_Parts[i++] = "pissing"; // Malware - 2010-03-31 BadURL_Parts[i++] = "\/piwik\/"; // Tracker - 2018-02-25 BadURL_Parts[i++] = "popunder\.js"; // Tracker - 2015-02-19 BadURL_Parts[i++] = "porn"; // Malware - 2010-03-31 BadURL_Parts[i++] = "proxysignature"; // YOUR CHOICE Tracker - 2010-01-07 BadURL_Parts[i++] = "pussy"; // Malware - 2010-03-31 BadURL_Parts[i++] = "quantcast\.swf"; // Tracker - 2010-10-18 BadURL_Parts[i++] = "_radio_ad_"; // AdServer - 2012-01-16 BadURL_Parts[i++] = "remote-desktop"; // YOUR CHOICE Malware - 2014-08-28 BadURL_Parts[i++] = "remotedesktop"; // YOUR CHOICE Malware - 2014-08-28 BadURL_Parts[i++] = "-scroll-tracker\.js"; // Tracker - 2016-03-12 BadURL_Parts[i++] = "seostats\.php"; // Tracker - 2009-06-26 BadURL_Parts[i++] = "sesso"; // Malware - 2010-03-31 BadURL_Parts[i++] = "_setanalyticsfields"; // Tracker - 2016-02-24 BadURL_Parts[i++] = "sexvideo"; // Malware - 2010-03-31 BadURL_Parts[i++] = "sexy"; // Malware - 2010-03-31 BadURL_Parts[i++] = "site_stats"; // Tracker - 2009-06-26 BadURL_Parts[i++] = "skimlinks\.js"; // Tracker - 2015-04-25 BadURL_Parts[i++] = "\/slimstat\/"; // Tracker - 2016-09-06 BadURL_Parts[i++] = "slotimpression"; // Tracker (fwmrm.net) - 2014-05-12 BadURL_Parts[i++] = "slut[^n]"; // Malware - 2010-03-31 BadURL_Parts[i++] = "-small-ad\."; // AdServer - 2016-04-12 BadURL_Parts[i++] = "smartertravel.com\/ext\/pixel\/"; // Tracker - 2015-06-01 BadURL_Parts[i++] = "social-tracking\."; // Tracker - 2014-08-08 BadURL_Parts[i++] = "sportingnews.com\/fantasy\/"; // Casino - 2016-06-07 BadURL_Parts[i++] = "sports.yahoo.com\/dailyfantasy\/"; // Casino - 2016-06-07 BadURL_Parts[i++] = "\/subnavads\/"; // AdServer - 2016-06-07 BadURL_Parts[i++] = "tacoda"; // AdServer - 2009-08-24 BadURL_Parts[i++] = "tecock"; // Malware - 2009-12-02 BadURL_Parts[i++] = "[^aeo]tits"; // Malware - 2013-01-10 BadURL_Parts[i++] = "tracking_pixel"; // Tracker - 2011-12-27 BadURL_Parts[i++] = "transparent-pixel"; // YOUR CHOICE Tracker - 2009-12-27 BadURL_Parts[i++] = "trial\.exe"; // Malware - 2009-04-21 BadURL_Parts[i++] = "tripadvisor.com\/pagemoniker"; // Tracker - 2015-06-01 BadURL_Parts[i++] = "tripadvisor.de\/pagemoniker"; // Tracker - 2015-06-01 BadURL_Parts[i++] = "tripadvisor.fr\/pagemoniker"; // Tracker - 2015-06-01 BadURL_Parts[i++] = "tripadvisor.it\/pagemoniker"; // Tracker - 2015-06-01 BadURL_Parts[i++] = "\/uds\/stats"; // Tracker - 2018-04-03 BadURL_Parts[i++] = "uniregistry.com\/return_js\.php"; // Tracker - 2018-01-25 BadURL_Parts[i++] = "_url_tracking\."; // Tracker - 2015-08-20 BadURL_Parts[i++] = "utm\.gif"; // Tracker - 2009-11-02 BadURL_Parts[i++] = "utm\.js"; // YOUR CHOICE Tracker - 2009-11-16 BadURL_Parts[i++] = "vecock"; // Malware - 2009-12-02 BadURL_Parts[i++] = "videoarab"; // Malware - 2010-12-02 BadURL_Parts[i++] = "voyeur"; // Malware - 2010-04-20 BadURL_Parts[i++] = "warez[^o]"; // Malware 2009-04-02 BadURL_Parts[i++] = "\/webads\/"; // AdServer - 2015-08-20 BadURL_Parts[i++] = "\/webanalytics\/"; // Tracker - 2016-07-14 BadURL_Parts[i++] = "webiqonline"; // DNSWCD Tracker - 2009-11-05 BadURL_Parts[i++] = "webtrekk\.js"; // YOUR CHOICE Tracker - 2009-11-16 BadURL_Parts[i++] = "wijittrack\.gif"; // Tracker - 2010-08-14 BadURL_Parts[i++] = "\/wp-stat\/"; // Tracker - 2015-09-19 // If the HOST name has any of the following words in it the // FindProxyForURL function will reject it unless it matched any // of the GoodDomains or the IP is in a safe range. // You can put REGEXPs anywhere you want here. var BadHostParts = new Array(); i=0; BadHostParts[i++] = "-----"; // illegal name - 2013-10-09 BadHostParts[i++] = "-asset-tag\."; // Tracker - 2018-04-28 BadHostParts[i++] = "[^05vw]3x"; // Malware - 2016-06-07 BadHostParts[i++] = "aba\.com"; // Phish - 2010-02-05 BadHostParts[i++] = "adobe\.com"; // Phish - 2010-02-15 BadHostParts[i++] = "[^e]adult"; // Malware - 2010-02-25 BadHostParts[i++] = "aggregateknowledge"; // Tracker - 2010-09-15 BadHostParts[i++] = "ally\.com"; // YOUR CHOICE Phish - 2009-12-03 BadHostParts[i++] = "allybank\.com"; // Phish - 2009-12-29 BadHostParts[i++] = "amateur"; // Malware - 2010-02-13 BadHostParts[i++] = "americanexpress\.com"; // Phish - 2009-12-06 BadHostParts[i++] = "analytics.gorillanation.com"; // Tracker - 2010-10-15 BadHostParts[i++] = "anti-vir"; // YOUR CHOICE - 2009-12-31 BadHostParts[i++] = "antispy"; // YOUR CHOICE - 2008-12-01 BadHostParts[i++] = "antivir"; // YOUR CHOICE - 2008-12-01 // see: anz.co.nz anz.com BadHostParts[i++] = "anz\.co"; // YOUR CHOICE Phish - 2016-02-25 BadHostParts[i++] = "aol\.com"; // Phish - 2010-02-05 BadHostParts[i++] = "asian"; // Malware - 2010-04-20 BadHostParts[i++] = "avast.com"; // Phish - 2010-06-08 BadHostParts[i++] = "banese\.com"; // Phish - 2018-03-31 BadHostParts[i++] = "bankofamerica"; // Phish - 2010-10-16 BadHostParts[i++] = "bbva\.es"; // Phish - 2009-12-22 BadHostParts[i++] = "bitch"; // YOUR CHOICE Malware - 2010-10-23 BadHostParts[i++] = "blackapplehost"; // WebBug - 2011-09-26 BadHostParts[i++] = "[^m}boob"; // Malware - 2016-09-23 BadHostParts[i++] = "bradesco\.com"; // Phish - 2018-03-31 BadHostParts[i++] = "casalemedia"; // AdServer - 2009-04-27 BadHostParts[i++] = "casino"; // Casino - 2008-06-30 BadHostParts[i++] = "cdc\.gov"; // Phish - 2009-12-03 BadHostParts[i++] = "cdna\.tremormedia\.com"; // AdServer - 2010-12-08 BadHostParts[i++] = "celeb"; // YOUR CHOICE Malware - 2014-10-15 BadHostParts[i++] = "chase\.com"; // YOUR CHOICE Phish - 2009-12-03 BadHostParts[i++] = "chaseonline\.chase\.com"; // Phish - 2009-11-30 BadHostParts[i++] = "cialis"; // Spam - 2012-07-12 BadHostParts[i++] = "cimbclicks\.co\.id"; // Phish - 2014-09-20 BadHostParts[i++] = "cimbclicks\.in\.th"; // Phish - 2014-09-20 BadHostParts[i++] = "cimbclicks\.com\.my"; // Phish - 2014-09-20 BadHostParts[i++] = "cimbclicks\.com\.sg"; // Phish - 2014-09-20 BadHostParts[i++] = "cisco\.com"; // .bin - 2010-07-30 BadHostParts[i++] = "citibank\.com"; // Phish - 2012-05-24 BadHostParts[i++] = "cloak"; // PROXY - 2008-06-30 BadHostParts[i++] = "danskebank"; // Phish - 2015-02-17 BadHostParts[i++] = "dc\.tremormedia\.com"; // Tracker - 2010-12-08 BadHostParts[i++] = "dhl\.ca"; // Phish - 2011-05-23 BadHostParts[i++] = "dhl\.com"; // Phish - 2011-05-23 BadHostParts[i++] = "dhl\.fr"; // Phish - 2011-05-23 BadHostParts[i++] = "digid\.nl"; // Phish - 2014-04-18 BadHostParts[i++] = "discovercard"; // Phish - 2009-11-23 BadHostParts[i++] = "ebay\.com"; // Phish - 2009-12-08 BadHostParts[i++] = "exponential"; // AdServer - 2009-04-27 // BadHostParts[i++] = "facebook"; // optional block - 2015-08-28 BadHostParts[i++] = "fdic\.gov"; // YOUR CHOICE Phish - 2009-12-03 BadHostParts[i++] = "freestats"; // DNSWCD Trackers - 2011-01-26 BadHostParts[i++] = "gay"; // Malware - 2010-04-20 BadHostParts[i++] = "getpast"; // PROXY - 2008-06-30 BadHostParts[i++] = "girls"; // Malware - 2010-04-20 BadHostParts[i++] = "glamour"; // YOUR CHOICE Malware - 2014-10-17 BadHostParts[i++] = "google\.com"; // Phish - 2009-12-10 BadHostParts[i++] = "googlepages\.com"; // Phish - 2009-12-10 BadHostParts[i++] = "googletagservices"; // AdServer - 2018-04-28 BadHostParts[i++] = "garcinia"; // DNSWCD Spam - 2013-09-17 BadHostParts[i++] = "greencoffe"; // DNSWCD Spam - 2013-06-14 BadHostParts[i++] = "hidden"; // PROXY - 2008-06-30 BadHostParts[i++] = "hide"; // PROXY YOUR CHOICE - 2008-06-30 BadHostParts[i++] = "hsbc"; // Phish - 2018-04-28 BadHostParts[i++] = "invisible"; // PROXY - 2008-06-30 BadHostParts[i++] = "irs\.gov"; // YOUR CHOICE Phish - 2009-12-03 BadHostParts[i++] = "itau\.com"; // Phish - 2012-05-14 // Add your domain in the good domains section to counter this rule. BadHostParts[i++] = "kaspersky"; // Phish - 2018-04-28 BadHostParts[i++] = "kazaa"; // P2P YOUR CHOICE - 2008-06-30 BadHostParts[i++] = "levitra"; // Spam - 2012-07-12 BadHostParts[i++] = "linkedin\.com"; // Phish - 2010-10-11 BadHostParts[i++] = "lloydstsb\.com"; // Phish - 2011-04-02 BadHostParts[i++] = "[^cl]lust"; // Malware - 2010-04-20 BadHostParts[i++] = "macromedia\.com"; // Phish - 2010-10-23 BadHostParts[i++] = "mastercard\.com"; // Phish - 2009-12-08 BadHostParts[i++] = "mature"; // Malware - 2010-04-20 BadHostParts[i++] = "maximumslim"; // DNSWCD Spam - 2013-07-15 BadHostParts[i++] = "microsoft\.com"; // SpearPhish - 2010-01-19 BadHostParts[i++] = "myspace"; // Phish - 2018-04-28 BadHostParts[i++] = "nacha\.org"; // YOUR CHOICE Phish - 2009-12-03 BadHostParts[i++] = "nude"; // Malware - 2010-04-20 BadHostParts[i++] = "oasc[(0|1|e)]"; // AdServer - 2010-03-01 BadHostParts[i++] = "objects\.tremormedia\.com"; // AdServer - 2010-12-08 BadHostParts[i++] = "paypal\.com"; // Phish - 2009-12-08 BadHostParts[i++] = "paypal\.de"; // Phish - 2011-10-24 BadHostParts[i++] = "paypal\.fr"; // Phish - 2011-10-24 BadHostParts[i++] = "paypalobjects"; // Phish - 2011-04-23 BadHostParts[i++] = "penis"; // YOUR CHOICE Spam - 2011-12-27 BadHostParts[i++] = "pills"; // YOUR CHOICE Spam - 2012-07-16 BadHostParts[i++] = "poker"; // Casino - 2008-06-30 BadHostParts[i++] = "prok[(c|s)]"; // PROXY YOUR CHOICE - 2009-04-18 BadHostParts[i++] = "prox"; // PROXY - 2008-06-30 BadHostParts[i++] = "runescape"; // Phish - 2012-05-14 BadHostParts[i++] = "[^aeo]rx[^c]"; // YOUR CHOICE Spam - 2011-08-09 BadHostParts[i++] = "santander\.com"; // Phish - 2012-05-14 BadHostParts[i++] = "[^i]scan[^dy]"; // Malware - 2016-08-06 // BadHostParts[i++] = "secret"; // YOUR CHOICE PROXY - 2010-08-02 BadHostParts[i++] = "secure\.ally\.com"; // Phish - 2009-11-30 BadHostParts[i++] = "sextracker"; // Tracker - 2010-04-20 BadHostParts[i++] = "skype"; // YOUR CHOICE Phish - 2011-10-18 BadHostParts[i++] = "skype\.com"; // Phish - 2011-06-17 BadHostParts[i++] = "slimbody"; // DNSWCD Spam - 2013-07-17 BadHostParts[i++] = "slimfast"; // DNSWCD Spam - 2013-07-18 BadHostParts[i++] = "ssa\.gov"; // Phish - 2009-11-26 BadHostParts[i++] = "stats\.rbl\.ms"; // Tracker - 2014-05-12 BadHostParts[i++] = "[^sy]suck"; // Malware - 2010-01-12 BadHostParts[i++] = "symantec"; // Phish - 2011-09-05 BadHostParts[i++] = "toolbar"; // YOUR CHOICE Tracker - 2018-04-28 BadHostParts[i++] = "traveladvertising"; // Tracker - 2018-04-28 BadHostParts[i++] = "treasury\.gov"; // Phish - 2012-03-10 BadHostParts[i++] = "triggertag.gorillanation.com"; // Tracker - 2010-10-15 BadHostParts[i++] = "tsbbank\.co\.nz"; // Phish - 2011-04-02 BadHostParts[i++] = "tsb\.co\.nz"; // Phish - 2011-04-02 BadHostParts[i++] = "tunnel"; // PROXY - 2008-06-30 BadHostParts[i++] = "ubs\.com"; // Phish - 2011-10-24 BadHostParts[i++] = "unblock"; // PROXY - 2008-06-30 BadHostParts[i++] = "unlock"; // PROXY - 2008-06-30 BadHostParts[i++] = "usaa\.com"; // Phish - 2010-01-19 BadHostParts[i++] = "usbank\.com"; // Phish - 2009-12-14 BadHostParts[i++] = "ustreas\.gov"; // Phish - 2012-03-06 BadHostParts[i++] = "ustreasury"; // YOUR CHOICE Phish - 2009-12-03 BadHostParts[i++] = "verifiedbyvisa\.com"; // Phish - 2012-03-06 BadHostParts[i++] = "viagra"; // Spam - 2011-07-18 BadHostParts[i++] = "vipreantivirus"; // Phish - 2011-04-15 BadHostParts[i++] = "visa\.com"; // Phish - 2009-12-08 BadHostParts[i++] = "vmp\.boldchat\.com"; // Tracker - 2010-12-16 BadHostParts[i++] = "vms\.boldchat\.com"; // Tracker - 2010-12-16 BadHostParts[i++] = "vmss\.boldchat\.com"; // Tracker - 2015-06-24 BadHostParts[i++] = "wachovia"; // Phish - 2011-07-24 BadHostParts[i++] = "wellsfargo.com"; // Phish - 2010-02-25 BadHostParts[i++] = "westernunion\.ca"; // Phish - 2012-06-04 BadHostParts[i++] = "westernunion\.com"; // Phish - 2012-06-04 BadHostParts[i++] = "westernunion\.de"; // Phish - 2012-06-04 BadHostParts[i++] = "westernunion\.fr"; // Phish - 2012-06-04 BadHostParts[i++] = "windowsupdate\.com"; // Phish - 2015-02-19 BadHostParts[i++] = "xxx"; // Malware - 2010-01-28 BadHostParts[i++] = "zeroredirect"; // WebBug - 2014-04-19 BadHostParts[i++] = "zonealarm\.com"; // Phish - 2012-06-04 BadHostParts[i++] = "zonealarm\.fr"; // Phish - 2012-06-04 BadHostParts[i++] = "zonelabs\.com"; // Phish - 2012-06-04 // If any of the following BadURL_WordStarts show up at the start of a // word in the URL the FindProxyForURL will reject it unless the // resulting IP is in a safe range. // WARNING - DO NOT PUT REGEXPs AT THE *START* OF THIS ARRAY var BadURL_WordStarts = new Array(); i=0; BadURL_WordStarts[i++] = "activexsetup"; // Malware - 2011-01-26 BadURL_WordStarts[i++] = "ad_banner_"; // AdServer - 2011-07-28 BadURL_WordStarts[i++] = "ad_iframe_"; // AdServer - 2011-04-19 BadURL_WordStarts[i++] = "ad_label_"; // AdServer - 2009-11-23 BadURL_WordStarts[i++] = "ad_legend_"; // AdServer - 2011-04-02 BadURL_WordStarts[i++] = "ad_manager"; // AdServer - 2010-07-19 BadURL_WordStarts[i++] = "adframe_"; // AdServer - 2010-12-16 BadURL_WordStarts[i++] = "adengage_"; // AdServer - 2011-10-31 BadURL_WordStarts[i++] = "adserver_"; // AdServer - 2012-07-24 BadURL_WordStarts[i++] = "adsyndication"; // AdServer - 2010-06-05 BadURL_WordStarts[i++] = "advert_"; // AdServer - 2010-12-16 BadURL_WordStarts[i++] = "ajrotator"; // AdServer - 2009-11-28 BadURL_WordStarts[i++] = "bannerads-"; // AdServer - 2010-05-04 BadURL_WordStarts[i++] = "client_pathlog.asp"; // Tracker - 2018-02-14 BadURL_WordStarts[i++] = "competetracking"; // Tracker - 2010-01-12 BadURL_WordStarts[i++] = "cxense-candy.js"; // Tracker - 2018-02-14 BadURL_WordStarts[i++] = "dynatracemonitor"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "filezilla_3.7.3_setup.exe"; // Malware - 2014-02-10 BadURL_WordStarts[i++] = "flash-plugin"; // Malware - 2009-09-03 BadURL_WordStarts[i++] = "flash-hq-plugin"; // Malware - 2009-11-07 BadURL_WordStarts[i++] = "flash-video-plugin"; // Malware - 2010-05-07 BadURL_WordStarts[i++] = "flashinstaller"; // Malware - 2009-11-23 BadURL_WordStarts[i++] = "footer-ad-"; // AdServer - 2011-01-26 // BadURL_WordStarts[i++] = "gay"; // Malware - 2014-10-15 BadURL_WordStarts[i++] = "generate_204"; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "google_analytics"; // Tracker - 2010-11-18 BadURL_WordStarts[i++] = "google_page_track"; // Tracker - 2012-01-28 BadURL_WordStarts[i++] = "houseads"; // AdServer - 2010-11-18 BadURL_WordStarts[i++] = "install_activex"; // YOUR CHOICE Malware - 2010-02-08 BadURL_WordStarts[i++] = "log_interaction"; // Tracker - 2018-03-12 BadURL_WordStarts[i++] = "mature"; // YOUR CHOICE Malware - 2010-03-31 BadURL_WordStarts[i++] = "mtvi_reporting"; // Tracker - 2009-12-03 BadURL_WordStarts[i++] = "nude"; // YOUR CHOICE Malware - 2010-03-31 BadURL_WordStarts[i++] = "omnidiggthis"; // Tracker - 2009-08-19 BadURL_WordStarts[i++] = "openads"; // Tracker - 2010-01-12 BadURL_WordStarts[i++] = "optimost_"; // Tracker - 2018-04-28 BadURL_WordStarts[i++] = "page-peel"; // AdServer - 2015-04-25 BadURL_WordStarts[i++] = "pageear"; // Tracker - 2010-01-19 BadURL_WordStarts[i++] = "performancingads"; // YOUR CHOICE AdServer - 2011-09-26 BadURL_WordStarts[i++] = "pixeltracking"; // Tracker - 2010-10-15 BadURL_WordStarts[i++] = "recordhit"; // Tracker - 2014-10-18 BadURL_WordStarts[i++] = "redirectexittrack"; // Tracker - 2009-11-23 BadURL_WordStarts[i++] = "touchclarity"; // Tracker - 2010-01-19 BadURL_WordStarts[i++] = "tracking_frame_"; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "tradead_"; // AdServer - 2010-09-16 BadURL_WordStarts[i++] = "urlsplittrack"; // Tracker - 2011-03-13 BadURL_WordStarts[i++] = "vtracker_"; // Tracker - 2013-06-14 BadURL_WordStarts[i++] = "yahoo-ad-"; // AdServer - 2015-04-25 BadURL_WordStarts[i++] = "1pix\.gif"; // Tracker - 2012-06-04 BadURL_WordStarts[i++] = "1x1_trans\.gif"; // Tracker - 2010-02-13 BadURL_WordStarts[i++] = "4info.com\/alert\/listeners\/"; // Tracker - 2012-01-30 BadURL_WordStarts[i++] = "5min.com\/flashcookie\/storagecookieswf"; // Tracker - 2013-08-20 BadURL_WordStarts[i++] = "abm\.asp"; // AdServer - 2012-04-20 BadURL_WordStarts[i++] = "abmw\.aspx"; // AdServer - 2010-08-24 BadURL_WordStarts[i++] = "_ad\.aspx"; // AdServer - 2010-05-04 BadURL_WordStarts[i++] = "ad\.aspx"; // AdServer - 2010-05-04 BadURL_WordStarts[i++] = "ad_banner\."; // AdServer - 2011-07-28 BadURL_WordStarts[i++] = "ad_banner\/"; // AdServer - 2011-07-28 BadURL_WordStarts[i++] = "ad_counter\."; // AdServer - 2016-07-14 BadURL_WordStarts[i++] = "ad_frame\."; // AdServer - 2016-03-12 BadURL_WordStarts[i++] = "ad_iframe\."; // AdServer - 2011-04-19 BadURL_WordStarts[i++] = "ad_rotation\."; // AdServer - 2014-09-20 BadURL_WordStarts[i++] = "ad_tpl\."; // AdServer - 2012-04-20 BadURL_WordStarts[i++] = "adap\.tv\/redir\/plugins\/"; // AdServer - 2011-09-26 BadURL_WordStarts[i++] = "adap\.tv\/redir\/plugins3\/"; // AdServer - 2011-09-26 BadURL_WordStarts[i++] = "adap\.tv\/redir\/plugins\/banner\/"; // AdServer - 2011-09-26 BadURL_WordStarts[i++] = "adaptive\.php"; // YOUR CHOICE Tracker - 2010-11-19 BadURL_WordStarts[i++] = "_ad_code\."; // AdServer - 2011-03-13 BadURL_WordStarts[i++] = "adbanner\."; // AdServer - 2018-04-28 BadURL_WordStarts[i++] = "adcalloverride\."; // AdServer - 2015-06-03 BadURL_WordStarts[i++] = "adchoice\.js"; // AdServer - 2013-07-18 BadURL_WordStarts[i++] = "adchoices\."; // AdServer - 2011-05-24 BadURL_WordStarts[i++] = "addyn\/"; // AdServer - 2012-07-16 BadURL_WordStarts[i++] = "adfile\/"; // AdServer - 2010-09-01 BadURL_WordStarts[i++] = "adheader\."; // AdServer - 2011-12-27 BadURL_WordStarts[i++] = "adhese\."; // AdServer - 2014-08-25 BadURL_WordStarts[i++] = "adimage\."; // AdServer - 2011-05-23 BadURL_WordStarts[i++] = "adimages\."; // AdServer - 2010-08-03 BadURL_WordStarts[i++] = "adindex\/"; // AdServer - 2010-08-10 BadURL_WordStarts[i++] = "adinjector\."; // AdServer - 2010-12-16 BadURL_WordStarts[i++] = "adjs\.php"; // AdServer - 2010-11-19 BadURL_WordStarts[i++] = "adlinks\.[(j|p)]"; // AdServer - 2010-01-14 BadURL_WordStarts[i++] = "adloader\."; // AdServer - 2011-12-07 BadURL_WordStarts[i++] = "adlog\.php"; // AdServer - 2011-05-23 BadURL_WordStarts[i++] = "admanager\."; // Tracker - 2010-01-15 BadURL_WordStarts[i++] = "admantx\/"; // AdServer - 2014-12-26 BadURL_WordStarts[i++] = "admarker_"; // AdServer - 2011-09-08 BadURL_WordStarts[i++] = "admarker\."; // AdServer - 2011-09-08 BadURL_WordStarts[i++] = "adobject\."; // AdServer - 2015-08-20 BadURL_WordStarts[i++] = "adpage\."; // AdServer - 2015-06-24 BadURL_WordStarts[i++] = "adpeeps\."; // AdServer - 2011-12-27 BadURL_WordStarts[i++] = "adpeeps\/"; // AdServer - 2011-12-27 BadURL_WordStarts[i++] = "adproxy\/"; // AdServer - 2011-11-11 BadURL_WordStarts[i++] = "adrelated\."; // AdServer - 2010-02-05 BadURL_WordStarts[i++] = "adrevenue\/"; // AdServer - 2011-09-26 BadURL_WordStarts[i++] = "adrollpixel\."; // AdServer - 2011-07-04 BadURL_WordStarts[i++] = "adrum-"; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "adrum\."; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "[^o]ads\.js"; // Tracker - 2010-08-20 BadURL_WordStarts[i++] = "[^o]ads\.php"; // YOUR CHOICE Tracker - 2010-06-09 BadURL_WordStarts[i++] = "ads\/freewheel\/"; // AdServer - 2012-01-16 BadURL_WordStarts[i++] = "ads\/load\."; // AdServer - 2011-09-30 BadURL_WordStarts[i++] = "ads\/rail-"; // AdServer - 2011-12-27 BadURL_WordStarts[i++] = "adsales\/"; // AdServer - 2011-05-24 BadURL_WordStarts[i++] = "adsatt\."; // AdServer - 2010-03-26 BadURL_WordStarts[i++] = "adsbanner\/"; // AdServer - 2012-07-12 BadURL_WordStarts[i++] = "adscript\."; // AdServer - 2011-05-23 BadURL_WordStarts[i++] = "adscroll\."; // AdServer - 2016-06-07 BadURL_WordStarts[i++] = "[^-]adsense"; // AdServer - 2010-02-12 BadURL_WordStarts[i++] = "adsense\/"; // AdServer - 2012-01-20 BadURL_WordStarts[i++] = "adserv\."; // AdServer - 2012-07-12 BadURL_WordStarts[i++] = "adsfac\."; // AdServer - 2010-08-03 BadURL_WordStarts[i++] = "adsonar\."; // AdServer - 2018-03-31 BadURL_WordStarts[i++] = "adsremote\."; // AdServer - 2010-08-03 BadURL_WordStarts[i++] = "adsrotate\."; // AdServer - 2011-03-09 BadURL_WordStarts[i++] = "adsrv\."; // AdServer - 2014-02-11 BadURL_WordStarts[i++] = "adssrv\."; // AdServer - 2009-12-17 BadURL_WordStarts[i++] = "adstream\.[(j|p)]"; // AdServer - 2010-01-14 BadURL_WordStarts[i++] = "adstream_"; // AdServer - 2011-05-23 BadURL_WordStarts[i++] = "adswrapper\."; // AdServer - 2011-08-09 BadURL_WordStarts[i++] = "adswrapper3\."; // AdServer - 2012-05-24 BadURL_WordStarts[i++] = "adtag\."; // AdServer - 2011-08-27 BadURL_WordStarts[i++] = "adtags\."; // AdServer - 2011-04-13 BadURL_WordStarts[i++] = "adtext\."; // AdServer - 2011-07-04 BadURL_WordStarts[i++] = "adtext2\."; // AdServer - 2011-07-04 BadURL_WordStarts[i++] = "adtext4\."; // AdServer - 2011-07-04 BadURL_WordStarts[i++] = "adtools\."; // AdServur - 2018-04-28 BadURL_WordStarts[i++] = "adtools2\."; // AdServur - 2018-04-28 BadURL_WordStarts[i++] = "adtrack\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "adunit\."; // AdServer - 2011-01-21 BadURL_WordStarts[i++] = "adunits\/"; // AdServer - 2011-01-21 BadURL_WordStarts[i++] = "adv\.li\/ads\/"; // AdServer - 2013-07-29 BadURL_WordStarts[i++] = "advertisement\."; // AdServer - 2010-11-19 BadURL_WordStarts[i++] = "advertisement_"; // AdServer - 2011-03-13 BadURL_WordStarts[i++] = "_advertisement_"; // AdServer - 2010-11-19 BadURL_WordStarts[i++] = "_advertisement\."; // AdServer - 2010-11-19 BadURL_WordStarts[i++] = "advertisement2\."; // AdServer - 2012-09-13 BadURL_WordStarts[i++] = "advertisements\/"; // AdServer - 2011-09-26 BadURL_WordStarts[i++] = "_advertising\/"; // AdServer - 2010-11-25 BadURL_WordStarts[i++] = "advertising\."; // AdServer - 2010-11-25 BadURL_WordStarts[i++] = "advertisingmodule\."; // AdServer - 2010-09-01 BadURL_WordStarts[i++] = "advert\."; // AdServer - 2010-08-10 BadURL_WordStarts[i++] = "advert\/"; // AdServer - 2010-08-10 BadURL_WordStarts[i++] = "adverts\."; // AdServer - 2010-08-10 BadURL_WordStarts[i++] = "adverts\/"; // AdServer - 2010-08-10 BadURL_WordStarts[i++] = "adview\."; // AdServer - 2010-12-08 BadURL_WordStarts[i++] = "[(a|d|e|m|n|s|t|u|z)]\/adx\.js"; // AdServer - 2010-11-06 BadURL_WordStarts[i++] = "affiliate_show_banner\."; // AdServer - 2011-03-13 BadURL_WordStarts[i++] = "affiliates\/banner"; // AdServer - 2010-08-14 BadURL_WordStarts[i++] = "afr\.php"; // AdServer - 2010-12-07 BadURL_WordStarts[i++] = "amazonaws.com\/cdn.barilliance.com\/"; // Tracker - 2015-04-25 BadURL_WordStarts[i++] = "amazonaws.com\/initialize\/"; // Tracker - 2013-09-17 BadURL_WordStarts[i++] = "amazonaws.com\/ki\.js\/"; // Tracker - 2011-08-09 BadURL_WordStarts[i++] = "amazonaws.com\/publishflow\/"; // AdServer - 2011-07-14 BadURL_WordStarts[i++] = "analytics\.js"; // YOUR CHOICE Tracker - 2012-02-28 BadURL_WordStarts[i++] = "analytics\.php"; // YOUR CHOICE Tracker - 2012-02-28 BadURL_WordStarts[i++] = "analytics\/mbox.js"; // Tracker - 2015-09-19 BadURL_WordStarts[i++] = "analytics\/track"; // Tracker - 2010-08-14 BadURL_WordStarts[i++] = "analyticsextension\."; // Tracker (fwmrm.net) - 2014-05-12 BadURL_WordStarts[i++] = "anal[^_oy]"; // Malware - 2011-07-24 BadURL_WordStarts[i++] = "api\/analytics\/"; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "article_counter\.php"; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "aspenanalytics\."; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "assets\/ad\/"; // AdServer - 2015-02-19 BadURL_WordStarts[i++] = "\/assets\/tracking-"; // Tracker - 2018-02-16 BadURL_WordStarts[i++] = "atapixel\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "atdmt.com\/action\/"; // Tracker - 2015-02-28 BadURL_WordStarts[i++] = "atdmt.com\/faction\/"; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "atdmt.com\/iaction\/"; // Tracker - 2015-02-28 BadURL_WordStarts[i++] = "atdmt.com\/jaction\/"; // Tracker - 2015-02-28 BadURL_WordStarts[i++] = "atdmt.com\/mstag\/"; // Tracker - 2015-02-28 BadURL_WordStarts[i++] = "autotag\."; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "avmws_"; // Tracker - 2016-06-07 BadURL_WordStarts[i++] = "baidu\.com\/h\.js"; // Tracker - 2012-04-20 BadURL_WordStarts[i++] = "baidu.com\/js\/log.js"; // Tracker - 2013-07-05 BadURL_WordStarts[i++] = "baidu.com\/js\/m.js"; // Tracker - 2013-07-05 BadURL_WordStarts[i++] = "_bannerad\."; // AdServer - 2010-05-04 BadURL_WordStarts[i++] = "bannerad\."; // AdServer - 2010-05-04 BadURL_WordStarts[i++] = "bannerads\."; // AdServer - 2014-05-13 BadURL_WordStarts[i++] = "bannerads\/"; // AdServer - 2010-05-04 BadURL_WordStarts[i++] = "banners-stat\."; // Tracker - 2010-11-06 BadURL_WordStarts[i++] = "betrad\.js"; // AdServer - 2011-06-17 BadURL_WordStarts[i++] = "bh_counter\.js"; // Tracker - 2010-05-22 BadURL_WordStarts[i++] = "biz\/pop\.js"; // WebBug - 2016-06-07 BadURL_WordStarts[i++] = "blekko.com\/a\/track"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "blockadblock\.js"; // Tracker - 2016-07-14 BadURL_WordStarts[i++] = "blogoas-"; // AdServer - 2010-12-17 BadURL_WordStarts[i++] = "bluekai\."; // Tracker - 2011-11-14 BadURL_WordStarts[i++] = "bluekaianalytics\."; // Tracker - 2011-11-14 BadURL_WordStarts[i++] = "bluekaicookieinfo\."; // Tracker - 2011-11-14 BadURL_WordStarts[i++] = "bluekaipixel\/"; // Tracker - 2011-11-14 BadURL_WordStarts[i++] = "botd\.gif"; // Tracker - 2015-02-19 BadURL_WordStarts[i++] = "bottom_ad\."; // AdServer - 2010-12-16 BadURL_WordStarts[i++] = "brandanalytics\.js"; // Tracker - 2015-06-03 BadURL_WordStarts[i++] = "brazzers.com\/ads\/"; // AdServer - 2013-04-10 BadURL_WordStarts[i++] = "breath\.gif"; // YOUR CHOICE Tracker - 2010-10-18 BadURL_WordStarts[i++] = "brightedge\.js"; // Tracker - 2012-03-10 BadURL_WordStarts[i++] = "britannica.com\/webstats\/"; // Tracker - 2012-04-20 BadURL_WordStarts[i++] = "bugsnag-"; // Tracker - 2015-06-03 BadURL_WordStarts[i++] = "carbonads\/"; // AdServer - 2013-07-29 BadURL_WordStarts[i++] = "cbs1x1\.gif"; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "cdn5\.js"; // Tracker - 2010-12-08 BadURL_WordStarts[i++] = "cdx\.gif"; // Tracker - 2010-08-28 BadURL_WordStarts[i++] = "cedexis\/"; // Tracker - 2011-07-14 BadURL_WordStarts[i++] = "certona\/"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "cfformprotect\/"; // Tracker - 2014-08-25 BadURL_WordStarts[i++] = "chartbeat\.js"; // Tracker - 2010-10-14 BadURL_WordStarts[i++] = "clear\.gif"; // YOUR CHOICE Tracker - 2010-02-13 BadURL_WordStarts[i++] = "click_tracking\.js"; // Tracker - 2010-06-19 BadURL_WordStarts[i++] = "clickheat\.js"; // Tracker - 2010-08-28 BadURL_WordStarts[i++] = "clickheat\/"; // Tracker - 2010-08-28 BadURL_WordStarts[i++] = "clickjs\.php"; // Tracker - 2009-11-30 BadURL_WordStarts[i++] = "click_stats\."; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "clickstream\.js"; // Tracker - 2016-07-14 BadURL_WordStarts[i++] = "clicktracking\/"; // Tracker - 2010-06-05 BadURL_WordStarts[i++] = "cloudfront.net\/analytics.js"; // Tracker - 2014-08-21 BadURL_WordStarts[i++] = "cloudfront.net\/atrk\.gif"; // Tracker - 2014-10-22 BadURL_WordStarts[i++] = "cloudfront.net\/atrk\.js"; // Tracker - 2014-10-22 BadURL_WordStarts[i++] = "cloudfront.net\/esf\.js"; // Tracker - 2016-06-07 BadURL_WordStarts[i++] = "cloudfront.net\/js\/reach.js"; // Tracker - 2014-06-27 BadURL_WordStarts[i++] = "cloudfront.net\/sp\.js"; // Tracker - 2015-02-19 BadURL_WordStarts[i++] = "cloudfront.net\/sso\.js"; // Tracker - 2016-03-12 BadURL_WordStarts[i++] = "cloudfront.net\/tracker.js"; // Tracker - 2013-08-05 BadURL_WordStarts[i++] = "cloudfront.net\/vis_opt\.js"; // Tracker - 2011-02-26 BadURL_WordStarts[i++] = "com\/t\.gif"; // Tracker - 2016-06-07 BadURL_WordStarts[i++] = "com\/v\.gif"; // Tracker - 2016-06-07 BadURL_WordStarts[i++] = "com_joomlawatch\/"; // Tracker - 2010-12-30 BadURL_WordStarts[i++] = "common\/ads\/"; // AdServer - 2012-07-12 BadURL_WordStarts[i++] = "comscore\."; // Tracker - 2011-05-02 BadURL_WordStarts[i++] = "comscoreplugin\."; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "comscoreswf\."; // Tracker - 2016-04-12 BadURL_WordStarts[i++] = "conversionruler\."; // Tracker - 2012-04-02 BadURL_WordStarts[i++] = "cookie-id\.js"; // Tracker - 2014-08-04 BadURL_WordStarts[i++] = "cookie\.crumb"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "coradiant\.js"; // Tracker - 2016-02-27 BadURL_WordStarts[i++] = "coremetrics\."; // Tracker - 2011-05-02 BadURL_WordStarts[i++] = "counter\.js"; // Tracker - 2010-05-28 BadURL_WordStarts[i++] = "counter\.php"; // Tracker - 2010-05-28 BadURL_WordStarts[i++] = "criteo_"; // Tracker - 2011-03-13 BadURL_WordStarts[i++] = "criteo\."; // Tracker - 2011-03-13 BadURL_WordStarts[i++] = "criteo\/"; // Tracker - 2011-03-13 BadURL_WordStarts[i++] = "cubead\."; // AdServer - 2011-09-30 BadURL_WordStarts[i++] = "curveball\/ads\/"; // AdServer - 2014-12-26 BadURL_WordStarts[i++] = "custom-tracking\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "dailymotion.com\/logger\/"; // Tracker - 2012-03-24 BadURL_WordStarts[i++] = "dclk\/dfp\/"; // AdServer - 2015-06-24 BadURL_WordStarts[i++] = "dcs\.gif"; // Tracker - 2009-10-26 BadURL_WordStarts[i++] = "demdex\.js"; // Tracker - 2018-04-28 BadURL_WordStarts[i++] = "descpopup\.js"; // AdServer - 2016-04-12 BadURL_WordStarts[i++] = "disqus.com\/api\/ping"; // Tracker - 2013-06-14 BadURL_WordStarts[i++] = "disqus.com\/listpromoted"; // AdServer - 2015-02-20 BadURL_WordStarts[i++] = "doors\/ads\/"; // AdServer - 2010-09-01 BadURL_WordStarts[i++] = "dotclear\.[(g|j)]"; // YOUR CHOICE Tracker - 2010-01-09 BadURL_WordStarts[i++] = "\/dtagent_"; // Tracker - 2018-02-16 BadURL_WordStarts[i++] = "dtmtag\.js"; // Tracker - 2011-04-23 BadURL_WordStarts[i++] = "dw\.com\.com\/js\/dw\.js"; // Tracker - 2011-05-23 BadURL_WordStarts[i++] = "dwanalytics\."; // Tracker - 2012-12-15 BadURL_WordStarts[i++] = "eae-logger\/"; // Tracker - 2011-02-21 BadURL_WordStarts[i++] = "eas_tag\."; // Tracker - 2014-07-14 BadURL_WordStarts[i++] = "ecom\/status\.jsp"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "ecos-surveycode\."; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "edigitalsurvey\."; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "edigitalsurvey_"; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "elqcfg\.js"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "elqimg\.[(g|j|p)]"; // Tracker - 2010-02-13 BadURL_WordStarts[i++] = "elqcfg\.min\.js"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "elqnow\/"; // Tracker - 2010-06-05 BadURL_WordStarts[i++] = "emos2\.js"; // YOUR CHOICE Tracker - 2012-05-24 BadURL_WordStarts[i++] = "emstrack\."; // Tracker - 2015-04-25 BadURL_WordStarts[i++] = "epimg.net\/js\/pbs\/"; // AdServer - 2016-04-12 BadURL_WordStarts[i++] = "epimg.net\/js\/vr\/vrs\."; // Tracker - 2016-04-12 BadURL_WordStarts[i++] = "eros[^ei]"; // Malware - 2015-08-20 BadURL_WordStarts[i++] = "eventtracker\.js"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "eweek\.com\/images\/stories\/marketing\/"; // AdServer - 2010-10-18 BadURL_WordStarts[i++] = "extendedanalytics\."; // Tracker - 2014-08-21 BadURL_WordStarts[i++] = "fb-tracking\.js"; // Tracker - 2016-04-12 BadURL_WordStarts[i++] = "files\/ads\/"; // AdServer - 2010-08-03 BadURL_WordStarts[i++] = "finalizestats\."; // Tracker - 2011-08-27 BadURL_WordStarts[i++] = "flash_player"; // YOUR CHOICE Malware - 2010-10-23 BadURL_WordStarts[i++] = "flashget\.exe"; // YOUR CHOICE Malware - 2010-10-23 BadURL_WordStarts[i++] = "fonts.com\/t\/trackingcode.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "foresee\/"; // Tracker - 2010-05-28 BadURL_WordStarts[i++] = "fp\/clear\.png"; // Tracker - 2015-09-19 BadURL_WordStarts[i++] = "fpcount\.exe"; // Tracker - 2011-08-15 BadURL_WordStarts[i++] = "ft-tracking\."; // Tracker - 2011-08-11 BadURL_WordStarts[i++] = "fttrack2\.js"; // Tracker (ft.com) - 2010-06-05 BadURL_WordStarts[i++] = "ga-custom-tracking\."; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "ga_link_tracker_"; // Tracker - 2013-02-22 BadURL_WordStarts[i++] = "ga_social_tracking\.js"; // Tracker - 2011-09-26 BadURL_WordStarts[i++] = "ga_tracker\."; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "gaaddons-"; // Tracker - 2015-02-20 BadURL_WordStarts[i++] = "gaaddons\.js"; // Tracker - 2010-07-20 BadURL_WordStarts[i++] = "gafc\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "gatag\.js"; // Tracker - 2010-09-15 BadURL_WordStarts[i++] = "_gate\.php"; // YOUR CHOICE Malware - 2010-10-23 BadURL_WordStarts[i++] = "gate\.php"; // YOUR CHOICE Malware - 2010-01-08 BadURL_WordStarts[i++] = "gemius\/"; // Tracker - 2012-07-24 BadURL_WordStarts[i++] = "geoip_cc"; // Tracker - 2013-12-31 BadURL_WordStarts[i++] = "geoip_script"; // Tracker - 2013-12-31 BadURL_WordStarts[i++] = "geoip\.js"; // Tracker - 2011-09-26 BadURL_WordStarts[i++] = "geoipapi\.js"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "getad\."; // AdServer - 2012-07-12 BadURL_WordStarts[i++] = "getads\/"; // AdServer - 2012-07-12 BadURL_WordStarts[i++] = "getbanner\.cfm"; // AdServer - 2010-09-01 BadURL_WordStarts[i++] = "getclicky\."; // Tracker - 2012-02-28 BadURL_WordStarts[i++] = "getclicky_"; // Tracker - 2012-02-28 BadURL_WordStarts[i++] = "gigya.com\/js\/gigyagaintegration.js"; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "gn_tracking\."; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "go2cloud.org\/aff_i"; // Tracker - 2013-03-09 BadURL_WordStarts[i++] = "gomez\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "googleads-"; // AdServer - 2012-05-24 BadURL_WordStarts[i++] = "google-analyticator\/"; // Tracker - 2010-09-01 BadURL_WordStarts[i++] = "google-analytics\."; // Tracker - 2010-11-06 BadURL_WordStarts[i++] = "google_ad_"; // AdServer - 2011-06-17 BadURL_WordStarts[i++] = "google_ads\."; // AdServer - 2011-02-12 BadURL_WordStarts[i++] = "google_ads_"; // AdServer - 2011-02-12 BadURL_WordStarts[i++] = "google-ads\/"; // AdServer - 2014-08-08 BadURL_WordStarts[i++] = "google_ads\/"; // AdServer - 2011-02-12 BadURL_WordStarts[i++] = "google_adsense\."; // AdServer - 2011-02-12 BadURL_WordStarts[i++] = "google_adsense_"; // AdServer - 2011-02-12 BadURL_WordStarts[i++] = "google_caf\.js"; // AdServer - 2015-09-01 BadURL_WordStarts[i++] = "googleads\."; // AdServer - 2010-12-16 BadURL_WordStarts[i++] = "googleads2\."; // AdServer - 2010-11-25 BadURL_WordStarts[i++] = "googleanalytics\/"; // Tracker - 2014-04-24 BadURL_WordStarts[i++] = "googleanalytics1\."; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "googleanalyticsbc3\."; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "googleusercontent.com\/tracker"; // Tracker - 2010-08-03 BadURL_WordStarts[i++] = "googlytics-"; // Tracker - 2012-01-30 BadURL_WordStarts[i++] = "gotmojo.com\/track\/"; // Tracker - 2016-07-15 BadURL_WordStarts[i++] = "gravity-beacon\.js"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "gscounters\."; // Tracker - 2016-06-07 BadURL_WordStarts[i++] = "heatmap\.js"; // Tracker - 2013-04-10 BadURL_WordStarts[i++] = "heatmap_log\.js"; // Tracker - 2013-04-10 BadURL_WordStarts[i++] = "hellobar\.com\/ping"; // Tracker - 2012-06-04 BadURL_WordStarts[i++] = "homepage-ads\/"; // AdServer - 2018-02-16 BadURL_WordStarts[i++] = "homepixeltracking\."; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "house-ads\/"; // AdServer - 2011-09-26 BadURL_WordStarts[i++] = "hrblock.com\/includes\/pixel\/"; // Tracker - 2014-12-29 BadURL_WordStarts[i++] = "hs_track\."; // Tracker - 2012-12-10 BadURL_WordStarts[i++] = "huffingtonpost.com/include/geopromo.php"; // Tracker - 2015-06-24 BadURL_WordStarts[i++] = "i2a\.js"; // Tracker - 2013-09-25 BadURL_WordStarts[i++] = "iframe\/ad\/"; // AdServer - 2012-05-24 BadURL_WordStarts[i++] = "iframe\/ads\/"; // AdServer - 2012-05-24 BadURL_WordStarts[i++] = "iframe_ads\/"; // AdServer - 2010-10-15 BadURL_WordStarts[i++] = "image.providesupport.com\/cmd\/"; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "images\/ad_"; // AdServer - 2010-04-21 BadURL_WordStarts[i++] = "images\/ad-"; // AdServer - 2010-04-21 BadURL_WordStarts[i++] = "images\/ads-"; // AdServer - 2010-04-21 BadURL_WordStarts[i++] = "images\/ads\/"; // AdServer - 2010-04-21 BadURL_WordStarts[i++] = "imawebcookie\."; // Tracker - 2013-06-25 BadURL_WordStarts[i++] = "imdbads\/js\/beacon-"; // Tracker - 2015-02-20 BadURL_WordStarts[i++] = "img\/ad_"; // AdServer - 2010-11-19 BadURL_WordStarts[i++] = "img\/ads\/"; // AdServer - 2010-11-19 BadURL_WordStarts[i++] = "impression\.ashx"; // Tracker - 2010-12-08 BadURL_WordStarts[i++] = "impression\.gif"; // Tracker - 2010-12-08 BadURL_WordStarts[i++] = "impression\.js"; // Tracker - 2010-12-08 BadURL_WordStarts[i++] = "includes\/ads\/"; // AdServer - 2011-02-21 BadURL_WordStarts[i++] = "indeed\.com\/ads\/"; // AdServer - 2012-05-14 BadURL_WordStarts[i++] = "installflashplay\.exe"; // Malware - 2010-11-25 BadURL_WordStarts[i++] = "installflashplayer\.exe"; // Malware - 2010-11-25 BadURL_WordStarts[i++] = "instanttracking\."; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "internads\."; // AdServer - 2014-09-20 BadURL_WordStarts[i++] = "iperceptions\."; // Tracker - 2018-04-03 BadURL_WordStarts[i++] = "iperceptions\/"; // Tracker - 2014-08-21 BadURL_WordStarts[i++] = "ixs1.net\/s\/"; // Tracker - 2013-04-15 BadURL_WordStarts[i++] = "javascripts\/ga\.js"; // Tracker - 2014-08-30 BadURL_WordStarts[i++] = "js\/dart\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "js\/nielsen\/"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "js\/oas-"; // AdServer - 2014-05-12 BadURL_WordStarts[i++] = "js\/track\.js"; // Tracker - 2011-01-21 BadURL_WordStarts[i++] = "jsadscripts\/"; // AdServer - 2011-05-23 BadURL_WordStarts[i++] = "jupdate\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "keen-tracker\."; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "keywee\.min\.js"; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "kissmetrics\."; // Tracker - 2010-12-01 BadURL_WordStarts[i++] = "kissmetrics\/"; // Tracker - 2010-12-01 BadURL_WordStarts[i++] = "krux\.js"; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "\/lib\/tracking\/"; // Tracker - 2018-02-14 BadURL_WordStarts[i++] = "link_track\."; // Tracker - 2014-11-11 BadURL_WordStarts[i++] = "list-manage.com\/track\/"; // Tracker - 2013-12-21 BadURL_WordStarts[i++] = "livefyre.com\/libs\/tracker\/"; // Tracker - 2014-09-20 BadURL_WordStarts[i++] = "livefyre.com\/livecountping\/"; // Tracker - 2013-08-05 BadURL_WordStarts[i++] = "livefyre.com\/v3\/tracking\/"; // Tracker - 2014-09-20 BadURL_WordStarts[i++] = "\.lms-analytics\/"; // Tracker - 2018-02-14 BadURL_WordStarts[i++] = "loadad\.aspx"; // AdServer - 2010-05-24 BadURL_WordStarts[i++] = "loadads\."; // AdServer - 2012-03-10 BadURL_WordStarts[i++] = "loader\.exe"; // Malware - 2010-01-07 BadURL_WordStarts[i++] = "log_view\."; // Tracker - 2015-06-24 BadURL_WordStarts[i++] = "loganalysistracker\/"; // Tracker - 2015-12-24 BadURL_WordStarts[i++] = "logger\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "logger\/p\.gif"; // Tracker - 2012-07-12 BadURL_WordStarts[i++] = "logging\.js"; // Tracker - 2012-03-10 BadURL_WordStarts[i++] = "loggingservice\/"; // Tracker - 2012-06-04 BadURL_WordStarts[i++] = "loggingservice\.js"; // Tracker - 2012-06-04 BadURL_WordStarts[i++] = "magpie\.js"; // Tracker - 2014-07-28 BadURL_WordStarts[i++] = "mail\.ru\/counter"; // Tracker - 2011-02-26 BadURL_WordStarts[i++] = "medium.com\/_\/stat"; // Tracker - 2015-06-05 BadURL_WordStarts[i++] = "mendelstats\."; // Tracker - 2018-02-16 BadURL_WordStarts[i++] = "mm-metrics\."; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "mobify_ga\.gif"; // Tracker - 2013-07-05 BadURL_WordStarts[i++] = "modules\/ad\/"; // AdServer - 2011-03-13 BadURL_WordStarts[i++] = "modules\/ads\/"; // AdServer - 2011-03-13 BadURL_WordStarts[i++] = "moneyball\/ads\/"; // AdServer - 2015-05-04 BadURL_WordStarts[i++] = "mpel\/mpel\.js"; // Tracker - 2013-02-22 BadURL_WordStarts[i++] = "mylife.com\/partner\/"; // Tracker - 2016-12-30 BadURL_WordStarts[i++] = "nativead\/"; // AdServer - 2018-02-14 BadURL_WordStarts[i++] = "nativead\.js"; // AdServer - 2018-02-14 BadURL_WordStarts[i++] = "nbcudigitaladops.com\/hosted\/housepix.gif"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "neonbctracker\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "net\/pop\.js"; // WebBug - 2016-06-07 BadURL_WordStarts[i++] = "netseerads\."; // AdServer - 2018-02-25 BadURL_WordStarts[i++] = "new\.cetrk\.com\/"; // Tracker - 2010-11-25 BadURL_WordStarts[i++] = "news\/ber\/"; // Spam - 2013-02-25 BadURL_WordStarts[i++] = "news\/ras\/"; // Spam - 2013-02-25 BadURL_WordStarts[i++] = "news\/via\/"; // Spam - 2013-02-25 BadURL_WordStarts[i++] = "nielsen\.js"; // Tracker - 2011-05-02 BadURL_WordStarts[i++] = "nircmd\.chm"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "nircmd\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "nircmdc\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "nyt\.com\/js\/mtr\.js"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "nytimes\.com\/js\/mtr\.js"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "oas_analytics\."; // Tracker - 2018-04-28 BadURL_WordStarts[i++] = "oas\/oas-"; // AdServer - 2014-05-12 BadURL_WordStarts[i++] = "offers.keynote.com\/wt\/"; // Tracker - 2010-08-03 BadURL_WordStarts[i++] = "oiopub-direct\/"; // AdServer - 2011-12-07 BadURL_WordStarts[i++] = "opentag-"; // Tracker - 2015-02-20 BadURL_WordStarts[i++] = "openx_[^g]"; // AdServer - 2011-08-12 BadURL_WordStarts[i++] = "optimost\."; // Tracker - 2018-04-28 BadURL_WordStarts[i++] = "optimost\/"; // Tracker - 2018-04-28 BadURL_WordStarts[i++] = "org\/pop\.js"; // WebBug - 2016-06-07 BadURL_WordStarts[i++] = "osgoogleanalytics\."; // Tracker - 2015-06-24 BadURL_WordStarts[i++] = "pbstrackingplugin\."; // Tracker - 2013-02-23 BadURL_WordStarts[i++] = "perfectmarket.com\/pm\/track"; // Tracker - 2013-04-15 BadURL_WordStarts[i++] = "permalink-tracker\.html"; // Tracker - 2010-10-25 BadURL_WordStarts[i++] = "persadpub\/"; // AdServer - 2018-02-14 BadURL_WordStarts[i++] = "php-stats\.js"; // Tracker - 2012-04-20 BadURL_WordStarts[i++] = "php-stats\.php"; // Tracker - 2012-04-20 BadURL_WordStarts[i++] = "phpmyvisites\.js"; // Tracker - 2010-09-06 BadURL_WordStarts[i++] = "ping\.gif"; // Tracker - 2014-03-11 BadURL_WordStarts[i++] = "ping\.html"; // Tracker - 2010-09-01 BadURL_WordStarts[i++] = "piwik\."; // Tracker - 2015-10-03 BadURL_WordStarts[i++] = "pix\.gif"; // YOUR CHOICE Tracker - 2011-08-12 BadURL_WordStarts[i++] = "pixall\.min\.js"; // Tracker - 2016-01-15 BadURL_WordStarts[i++] = "pixel\.gif"; // YOUR CHOICE Tracker - 2010-02-13 BadURL_WordStarts[i++] = "pixel\.png"; // YOUR CHOICE Tracker - 2010-11-13 BadURL_WordStarts[i++] = "pixel-page\.html"; // Tracker - 2016-07-15 BadURL_WordStarts[i++] = "pixeltrack\.php"; // YOUR CHOICE Tracker - 2010-06-19 BadURL_WordStarts[i++] = "platform.twitter.com\/impressions.js"; // Tracker - 2016-08-06 BadURL_WordStarts[i++] = "player.ooyala.com\/errors\/report"; // Tracker - 2011-06-17 BadURL_WordStarts[i++] = "popunder\."; // AdServer - 2010-01-20 BadURL_WordStarts[i++] = "postprocad\."; // AdServer - 2014-08-21 BadURL_WordStarts[i++] = "prnx_track\."; // DNSWCD Tracker - 2012-01-02 BadURL_WordStarts[i++] = "pubads\.js"; // AdServer - 2016-06-07 BadURL_WordStarts[i++] = "public\/visitor\/create"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "publicbroadcasting.net\/analytics"; // Tracker - 2016-01-15 BadURL_WordStarts[i++] = "publicidad\/"; // AdServer - 2011-09-30 BadURL_WordStarts[i++] = "pxa\.min\.js"; // Tracker - 2016-01-15 BadURL_WordStarts[i++] = "quant\.js"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "quantcast_"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "quantcast\.js"; // Tracker - 2010-08-28 BadURL_WordStarts[i++] = "ra_track\."; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "rcom-ads\."; // AdServer - 2010-10-18 BadURL_WordStarts[i++] = "rcom-wt-mlt\.js"; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "readme\.exe"; // Malware - 2012-04-20 BadURL_WordStarts[i++] = "refreshads-"; // AdServer - 2010-10-25 BadURL_WordStarts[i++] = "reklama\/"; // AdServer - 2012-07-24 BadURL_WordStarts[i++] = "reklama2\."; // AdServer - 2012-07-24 BadURL_WordStarts[i++] = "related-ads\."; // AdServer - 2012-02-09 BadURL_WordStarts[i++] = "resxclsa\."; // Tracker - 2014-05-13 BadURL_WordStarts[i++] = "resxclsx\."; // Tracker - 2014-05-13 BadURL_WordStarts[i++] = "reuters.com\/pulse\/"; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "reuters.com\/reuters_bootstrap"; // AdServer - 2016-03-12 BadURL_WordStarts[i++] = "reuters.com\/reuters_gpt_bootstrap"; // AdServer - 2016-03-12 BadURL_WordStarts[i++] = "revtracking\/"; // Tracker - 2016-02-27 BadURL_WordStarts[i++] = "rg-rlog\.php"; // WebBug - 2012-04-20 BadURL_WordStarts[i++] = "rightad\."; // AdServer - 2010-12-30 BadURL_WordStarts[i++] = "rodale.com\/ga\/"; // Tracker - 2018-02-16 BadURL_WordStarts[i++] = "ru\/pop\.js"; // WebBug - 2016-06-07 BadURL_WordStarts[i++] = "rum\/bacon\.min\.js"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "s\/hbx\.js"; // YOUR CHOICE Tracker - 2014-02-11 BadURL_WordStarts[i++] = "sailthru\.js"; // Tracker - 2013-10-09 BadURL_WordStarts[i++] = "salesforce\.com\/sfga\.js"; // Tracker - 2012-05-24 BadURL_WordStarts[i++] = "scanscout\."; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "scanscoutplugin\."; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "scripts\/ga\.js"; // Tracker - 2014-08-30 BadURL_WordStarts[i++] = "scripts\/xiti\/"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "search.usa.gov\/javascripts\/stats.js"; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "servead\."; // AdServer - 2011-04-13 BadURL_WordStarts[i++] = "serveads\."; // AdServer - 2011-04-13 BadURL_WordStarts[i++] = "session-hit\."; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "setsabreanalyticscookie\."; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "shareaholic\.js"; // Tracker - 2018-02-16 BadURL_WordStarts[i++] = "shell\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "shinystat\."; // Tracker - 2018-04-28 BadURL_WordStarts[i++] = "shop\.pe\/widget\/"; // AdServer - 2013-11-29 BadURL_WordStarts[i++] = "shopify_stats\.js"; // Tracker - 2014-07-28 BadURL_WordStarts[i++] = "showad\."; // AdServer - 2010-03-26 BadURL_WordStarts[i++] = "showads\.[(j|p)]"; // Tracker - 2010-01-12 BadURL_WordStarts[i++] = "silverpop\/"; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "simple-google-analytics"; // Tracker - 2013-02-22 BadURL_WordStarts[i++] = "simplereach_counts\/"; // Tracker - 2016-03-12 BadURL_WordStarts[i++] = "siteads\/"; // AdServer - 2011-05-23 BadURL_WordStarts[i++] = "siteanalytics\."; // Tracker - 2015-06-05 BadURL_WordStarts[i++] = "sitecatalyst\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "sitecrm\.js"; // Tracker - 2014-06-11 BadURL_WordStarts[i++] = "sitecrm2\.js"; // Tracker - 2014-06-11 BadURL_WordStarts[i++] = "sitestat\.js"; // Tracker - 2010-05-01 BadURL_WordStarts[i++] = "sitestats\.gif"; // Tracker - 2010-05-01 BadURL_WordStarts[i++] = "skstats_"; // Tracker - 2012-03-24 BadURL_WordStarts[i++] = "spc_trans\.gif"; // Tracker - 2010-02-13 BadURL_WordStarts[i++] = "__ssobj\/core\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "stat\.php"; // Tracker - 2010-12-07 BadURL_WordStarts[i++] = "statcounter\.js"; // Tracker - 2010-05-22 BadURL_WordStarts[i++] = "statistics\.php"; // Tracker - 2010-12-07 BadURL_WordStarts[i++] = "stats\/tracker\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "supercookie\."; // Tracker - 2014-08-21 BadURL_WordStarts[i++] = "surveymonkey.com\/jspop\.aspx"; // AdServer - 2012-01-28 BadURL_WordStarts[i++] = "swf\/ad-"; // Tracker - 2010-09-01 BadURL_WordStarts[i++] = "swfbin\/ad-"; // AdServer - 2012-03-24 BadURL_WordStarts[i++] = "swfbin\/ad3-"; // AdServer - 2012-03-24 BadURL_WordStarts[i++] = "tagcdn.com\/pix\/"; // Tracker - 2015-06-05 BadURL_WordStarts[i++] = "tagomnitureengine\.js"; // Tracker - 2016-06-07 BadURL_WordStarts[i++] = "taxonomy-ads\."; // AdServer - 2011-03-13 BadURL_WordStarts[i++] = "tc_targeting\.html"; // Tracker - 2010-09-15 BadURL_WordStarts[i++] = "tc_throttle\.js"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "tealeaf\.js"; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "tealeafsdk\.js"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "tealium\.js"; // Tracker - 2012-03-10 BadURL_WordStarts[i++] = "techweb.com\/adblocktrack"; // AdServer - 2018-02-14 BadURL_WordStarts[i++] = "techweb.com\/beacon\/"; // Tracker - 2018-02-14 BadURL_WordStarts[i++] = "thirdpartycookie\."; // Tracker - 2014-05-12 BadURL_WordStarts[i++] = "timeslog\."; // Tracker - 2013-03-07 BadURL_WordStarts[i++] = "tncms\/ads\/"; // AdServer - 2015-06-25 BadURL_WordStarts[i++] = "tncms\/tracking\."; // Tracker - 2015-06-25 BadURL_WordStarts[i++] = "top_ad\."; // AdServer - 2010-12-16 BadURL_WordStarts[i++] = "topads\."; // AdServer - 2012-06-25 BadURL_WordStarts[i++] = "_topic_stats"; // Tracker - 2013-08-19 BadURL_WordStarts[i++] = "touchcommerce.com\/tagserver\/logging\/"; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "tout.com\/tracker\.js"; // Tracker - 2016-07-15 BadURL_WordStarts[i++] = "track\/event\/"; // Tracker - 2018-02-25 BadURL_WordStarts[i++] = "tracker_activitystream\."; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "tracker_article"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "tracker\.js\.php"; // Tracker - 2015-02-20 BadURL_WordStarts[i++] = "tracker\.min\.js"; // Tracker - 2014-08-21 BadURL_WordStarts[i++] = "tracker\.php"; // Tracker - 2016-03-12 BadURL_WordStarts[i++] = "trackevent\.js"; // Tracker - 2013-11-02 BadURL_WordStarts[i++] = "tracking\/tynt_"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "tracking202\/"; // Tracker - 2015-04-25 BadURL_WordStarts[i++] = "trackinghandler\."; // Tracker - 2012-03-10 BadURL_WordStarts[i++] = "trackingservice\.min\.js"; // Tracker - 2015-02-20 BadURL_WordStarts[i++] = "trackingtags"; // Tracker - 2011-02-14 BadURL_WordStarts[i++] = "trackjs\."; // Tracker - 2014-10-25 BadURL_WordStarts[i++] = "trafic\.js"; // Tracker - 2014-07-14 BadURL_WordStarts[i++] = "trans_pixel"; // Tracker - 2009-12-29 (ASP) BadURL_WordStarts[i++] = "transparent\.gif"; // YOUR CHOICE Tracker - 2011-05-23 BadURL_WordStarts[i++] = "triggit-analytics\."; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "trustpilot.com\/stats\/"; // Tracker - 2018-04-03 BadURL_WordStarts[i++] = "turner.com\/analytics\/"; // Tracker - 2014-04-18 BadURL_WordStarts[i++] = "turnsocial.com\/track\/"; // Tracker - 2014-12-26 BadURL_WordStarts[i++] = "twitter\.com\/abacus"; // Tracker - 2011-02-14 BadURL_WordStarts[i++] = "twitter.com\/oct.js"; // Tracker - 2014-09-20 BadURL_WordStarts[i++] = "twitter\.com\/scribe"; // Tracker - 2011-02-14 BadURL_WordStarts[i++] = "twitter.com\/[(e|f|t)]\.gif"; // Tracker - 2013-01-10 BadURL_WordStarts[i++] = "twitter.com\/i\/jot"; // Tracker - 2013-11-29 BadURL_WordStarts[i++] = "tynt\.js"; // Tracker - 2011-04-13 BadURL_WordStarts[i++] = "typepad\.com\/t\/stats"; // Tracker - 2010-08-14 BadURL_WordStarts[i++] = "ucoz.com\/stat\/"; // Tracker - 2013-11-02 BadURL_WordStarts[i++] = "unica_[(n|o|t)]"; // Tracker - 2014-12-27 BadURL_WordStarts[i++] = "update\.exe"; // YOUR CHOICE Malware - 2011-05-23 BadURL_WordStarts[i++] = "updateflashplayer\.exe"; // Malware - 2012-09-28 BadURL_WordStarts[i++] = "uploads\/ads\/"; // AdServer - 2016-02-24 BadURL_WordStarts[i++] = "utag\.ga\."; // Tracker - 2013-09-17 BadURL_WordStarts[i++] = "utag\.js"; // Tracker - 2013-09-17 BadURL_WordStarts[i++] = "utag\.loader\.js"; // Tracker - 2014-04-19 BadURL_WordStarts[i++] = "veapianalytics\.js"; // Tracker - 2014-04-24 BadURL_WordStarts[i++] = "vertical-stats\."; // Tracker - 2010-10-25 BadURL_WordStarts[i++] = "vfxdsys\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "vfxdsys\.zip"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "vfxdsysadm\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "vglnk\.js"; // Tracker - 2015-08-20 BadURL_WordStarts[i++] = "visit\.gif"; // Tracker - 2013-09-25 BadURL_WordStarts[i++] = "visitorapi\.js"; // Tracker - 2018-02-16 BadURL_WordStarts[i++] = "visitor\.gif"; // Tracker - 2015-06-25 BadURL_WordStarts[i++] = "voxmedia.com\/beacon-min.js"; // Tracker - 2016-03-12 BadURL_WordStarts[i++] = "vtrack\.php"; // Tracker - 2009-11-23 BadURL_WordStarts[i++] = "w3track.com\/newtrk\/"; // Tracker - 2015-04-25 BadURL_WordStarts[i++] = "web_ads\/"; // AdServer - 2012-02-13 BadURL_WordStarts[i++] = "webads\."; // AdServer - 2014-05-13 BadURL_WordStarts[i++] = "webads_"; // AdServer - 2012-02-13 BadURL_WordStarts[i++] = "webtrekk_"; // Tracker - 2014-05-13 BadURL_WordStarts[i++] = "webtrendsap_hosted\.js"; // Tracker - 2014-02-10 BadURL_WordStarts[i++] = "wget\.exe"; // Malware - 2012-03-12 BadURL_WordStarts[i++] = "widgetserver.com\/metrics\/"; // Tracker - 2010-08-31 BadURL_WordStarts[i++] = "widgetserver.com\/t\/"; // Tracker - 2010-08-31 BadURL_WordStarts[i++] = "winstart\.exe"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "winstart\.zip"; // Malware - 2010-11-06 BadURL_WordStarts[i++] = "wired\.com\/tracker\.js"; // Tracker - 2010-10-18 BadURL_WordStarts[i++] = "wrb\.js"; // Tracker - 2013-11-29 BadURL_WordStarts[i++] = "ws.amazon.com\/widgets\/"; // Tracker - 2010-08-28 BadURL_WordStarts[i++] = "wsj.net\/mw5\/content\/analytics\/hooks.js"; // Tracker - 2015-02-28 BadURL_WordStarts[i++] = "wtbase\.js"; // Tracker - 2009-09-19 BadURL_WordStarts[i++] = "wtcore\.js"; // Tracker - 2010-09-15 BadURL_WordStarts[i++] = "wtid\.js"; // Tracker - 2009-09-19 BadURL_WordStarts[i++] = "wtinit\.js"; // Tracker - 2009-09-19 BadURL_WordStarts[i++] = "wx-a21-plugthis-"; // AdServer - 2016-06-07 BadURL_WordStarts[i++] = "wx-a21-plugthis\.js"; // AdServer - 2016-06-07 BadURL_WordStarts[i++] = "xiti\.js"; // Tracker - 2010-07-12 BadURL_WordStarts[i++] = "xgemius\.js"; // Tracker - 2010-11-25 BadURL_WordStarts[i++] = "xn_track\."; // Tracker - 2015-02-20 BadURL_WordStarts[i++] = "xtcore\.[(j|p)]"; // Tracker - 2010-01-14 BadURL_WordStarts[i++] = "xtrack\.php"; // Tracker - 2013-04-27 BadURL_WordStarts[i++] = "yahoo-beacon\.js"; // Tracker - 2015-04-25 BadURL_WordStarts[i++] = "yandex\.ru\/cycounter"; // Tracker - 2012-05-24 BadURL_WordStarts[i++] = "ybn_pixel\/"; // Tracker - 2013-11-02 BadURL_WordStarts[i++] = "yimg.com\/uq\/syndication\/yad.js"; // Tracker - 2014-08-21 BadURL_WordStarts[i++] = "yimg.com\/wi\/ytc.js"; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "youtube.com\/api\/stats\/qoe"; // Tracker - 2018-03-12 BadURL_WordStarts[i++] = "youtube.com\/player_204"; // Tracker - 2013-08-08 BadURL_WordStarts[i++] = "youtube.com\/ptracking"; // Tracker - 2012-08-06 BadURL_WordStarts[i++] = "youtube-nocookie.com\/gen_204"; // Tracker - 2013-06-25 BadURL_WordStarts[i++] = "youtube-nocookie.com\/robots.txt"; // Tracker - 2013-06-25 BadURL_WordStarts[i++] = "ywxi.net\/meter\/"; // Tracker - 2016-02-24 BadURL_WordStarts[i++] = "zag\.gif"; // Tracker - 2010-09-15 BadURL_WordStarts[i++] = "zaguk\.gif"; // Tracker - 2010-11-19 BadURL_WordStarts[i++] = "zdnet\.com\/wi"; // Tracker - 2010-11-06 BadURL_WordStarts[i++] = "zwshell\.exe"; // Malware - 2011-02-14 BadURL_WordStarts[i++] = "zwshellx\.exe"; // Malware - 2011-02-14 BadURL_WordStarts[i++] = "!crd_prm!\."; // Tracker - 2015-06-25 // If any of the following BadHostWordStarts show up at the start of a // word in the HOST the FindProxyForURL will reject it unless the // resulting IP is in a safe range. // WARNING - DO NOT PUT REGEXPs AT THE *START* OF THIS ARRAY var BadHostWordStarts = new Array(); i=0; BadHostWordStarts[i++] = "adserver"; // YOUR CHOICE AdServer - 2009-10-06 BadHostWordStarts[i++] = "cheapwatch"; // Spam - 2011-07-18 BadHostWordStarts[i++] = "dating"; // Spam - 2013-04-15 BadHostWordStarts[i++] = "finewatch"; // Spam - 2011-07-18 BadHostWordStarts[i++] = "girl"; // Malware - 2010-04-22 BadHostWordStarts[i++] = "hide"; // PROXY - 2008-06-30 BadHostWordStarts[i++] = "replicawatch"; // Spam - 2011-07-18 BadHostWordStarts[i++] = "rx[^fls]"; // YOUR CHOICE Spam - 2016-06-07 BadHostWordStarts[i++] = "sex"; // Malware - 2010-04-22 BadHostWordStarts[i++] = "superwatch"; // Spam - 2011-07-18 BadHostWordStarts[i++] = "swisswatch"; // Spam - 2011-07-18 BadHostWordStarts[i++] = "ustreasury"; // Phish - 2009-11-30 BadHostWordStarts[i++] = "watchreplica"; // Spam - 2011-07-18 // BadHostWordStarts[i++] = "ad\."; // Bad AdServer - 2010-10-11 BadHostWordStarts[i++] = "adimg\."; // AdServer - 2010-01-14 BadHostWordStarts[i++] = "ads\."; // YOUR CHOICE AdServer - 2009-04-02 BadHostWordStarts[i++] = "ads-pd\."; // AdServer - 2014-08-21 BadHostWordStarts[i++] = "ads1\."; // YOUR CHOICE AdServer - 2009-06-21 BadHostWordStarts[i++] = "ads2\."; // YOUR CHOICE AdServer - 2014-02-11 BadHostWordStarts[i++] = "ads3\."; // AdServer - 2012-07-04 BadHostWordStarts[i++] = "adsys\."; // YOUR CHOICE AdServer - 2009-05-28 BadHostWordStarts[i++] = "adv\."; // AdServer - 2012-07-12 BadHostWordStarts[i++] = "advertiser\."; // AdServer - 2010-09-01 BadHostWordStarts[i++] = "ally\.com"; // Phish - 2009-11-30 BadHostWordStarts[i++] = "bstats\."; // Tracker - 2013-09-07 BadHostWordStarts[i++] = "chase\.com"; // Phish - 2009-11-30 BadHostWordStarts[i++] = "content\.mkt"; // AdServer - 2014-02-11 BadHostWordStarts[i++] = "crack[^l]"; // YOUR CHOICE Malware - 2010-11-19 BadHostWordStarts[i++] = "ebay\.com"; // Phish - 2009-12-08 BadHostWordStarts[i++] = "fdic\.gov"; // Phish - 2009-11-15 BadHostWordStarts[i++] = "gdyn\."; // Tracker - 2011-01-26 BadHostWordStarts[i++] = "geoip\."; // YOUR CHOICE Tracker - 2010-11-13 BadHostWordStarts[i++] = "geoiplookup\."; // YOUR CHOICE Tracker - 2010-11-13 BadHostWordStarts[i++] = "gostats\."; // Tracker - 2014-12-27 BadHostWordStarts[i++] = "hard[(b|c|e|p|s)]"; // Malware - 2010-04-22 BadHostWordStarts[i++] = "id\.google\."; // Tracker - 2011-05-23 BadHostWordStarts[i++] = "irs\.gov"; // Phish - 2009-11-15 BadHostWordStarts[i++] = "nacha\.org"; // Phish - 2009-11-15 BadHostWordStarts[i++] = "oas\."; // AdServer - 2012-05-24 BadHostWordStarts[i++] = "openx\."; // Tracker - 2010-01-20 BadHostWordStarts[i++] = "ox-d\."; // AdServer - 2012-11-07 BadHostWordStarts[i++] = "pills"; // YOUR CHOICE SPAM - 2012-05-24 BadHostWordStarts[i++] = "piwik\."; // Tracker - 2012-03-10 BadHostWordStarts[i++] = "reklama\."; // AdServer - 2012-07-24 BadHostWordStarts[i++] = "sdc\."; // Tracker - 2012-02-09 BadHostWordStarts[i++] = "secure\.signup"; // Phish - 2011-09-26 BadHostWordStarts[i++] = "ssdc\."; // Tracker - 2014-07-28 BadHostWordStarts[i++] = "tit[^abhilmou]"; // Malware - 2013-12-18 BadHostWordStarts[i++] = "utm\."; // Tracker - 2009-09-27 BadHostWordStarts[i++] = "visa\.com"; // Phish - 2009-12-08 // If any of the following BadURL_WordEnds show up at the end of a // word in the URL the FindProxyForURL will reject it unless the // resulting IP is in a safe range. // WARNING - DO NOT PUT REGEXPs AT THE *END* OF THIS ARRAY var BadURL_WordEnds = new Array(); i=0; BadURL_WordEnds[i++] = "-ad-manager"; // AdServer - 2011-05-16 BadURL_WordEnds[i++] = "_ad_engine\/helpers"; // AdServer - 2011-05-16 BadURL_WordEnds[i++] = "adx\.js"; // AdServer - 2011-08-12 // BadURL_WordEnds[i++] = "\.bat"; // Malware - 2010-01-27 // BadURL_WordEnds[i++] = "\.bin"; // YOUR CHOICE Malware - 2011-08-11 BadURL_WordEnds[i++] = "[^0-9]\.bin"; // YOUR CHOICE Malware - 2011-08-11 BadURL_WordEnds[i++] = "[^ck]anal[^_]"; // Malware - 2011-07-24 BadURL_WordEnds[i++] = "\.com\/a\.gif"; // Tracker - 2014-10-18 BadURL_WordEnds[i++] = "\.com\/p\.gif"; // Tracker - 2014-05-13 BadURL_WordEnds[i++] = "\.com\.au\/ads"; // AdServer - 2011-08-09 // BadURL_WordEnds[i++] = "\.cpl"; // YOUR CHOICE Malware - 2014-05-13 BadURL_WordEnds[i++] = "[^bhmz]eros"; // Malware - 2012-06-25 // BadURL_WordEnds[i++] = "\.exe"; // Malware - 2010-01-27 BadURL_WordEnds[i++] = "exe\.exe"; // YOUR CHOICE Malware - 2010-10-23 // BadURL_WordEnds[i++] = "\.msi"; // Malware - 2011-02-21 BadURL_WordEnds[i++] = "\.net\/p\.gif"; // Tracker - 2014-05-13 BadURL_WordEnds[i++] = "\.pac"; // Malware - 2010-05-23 // BadURL_WordEnds[i++] = "\.pdf"; // Malware - 2010-01-27 BadURL_WordEnds[i++] = "\.pdf\.exe"; // Malware - 2011-10-28 // BadURL_WordEnds[i++] = "\.rar"; // Malware - 2014-10-18 // BadURL_WordEnds[i++] = "\.scr"; // Malware - 2011-02-21 BadURL_WordEnds[i++] = "\.sh"; // Malware - 2010-01-27 BadURL_WordEnds[i++] = "transparent1x1\.gif"; // Tracker - 2012-03-10 BadURL_WordEnds[i++] = "__utm\.js"; // Tracker - 2014-06-11 BadURL_WordEnds[i++] = "whv2_001\.js"; // Tracker - 2012-02-06 BadURL_WordEnds[i++] = "xtcore\.js"; // Tracker - 2011-05-02 // BadURL_WordEnds[i++] = "\.zip"; // Malware - 2014-10-18 BadURL_WordEnds[i++] = "babe[^-]"; // Malware - 2018-03-12 // BadURL_WordEnds[i++] = "beacon"; // YOUR CHOICE AdServer - 2011-08-12 // BadURL_WordEnds[i++] = "gay"; // Malware - 2014-10-15 BadURL_WordEnds[i++] = "mature"; // Malware - 2010-04-22 BadURL_WordEnds[i++] = "nude"; // Malware - 2010-04-22 BadURL_WordEnds[i++] = "wachovia"; // YOUR CHOICE Phish - 2011-07-24 // If any of the following BadHostWordEnds show up at the end of a // word in the HOST the FindProxyForURL will reject it unless the // resulting IP is in a safe range. // WARNING - DO NOT PUT REGEXPs AT THE *END* OF THIS ARRAY var BadHostWordEnds = new Array(); i=0; BadHostWordEnds[i++] = "analytics\.live\.com"; // Tracker - 2011-02-26 BadHostWordEnds[i++] = "dnn506yrbagrg.cloudfront.net"; // Tracker - 2011-02-26 BadHostWordEnds[i++] = "doug1izaerwt3.cloudfront.net"; // Tracker - 2011-02-26 BadHostWordEnds[i++] = "[^cs]hard"; // Malware - 2010-04-22 BadHostWordEnds[i++] = "[^i]crack"; // YOUR CHOICE Malware - 2010-11-19 BadHostWordEnds[i++] = "virgins\.com"; // Malware - 2011-10-10 BadHostWordEnds[i++] = "\.xyz"; // YOUR CHOICE Phish & Spam - 2016-02-24 BadHostWordEnds[i++] = "cracks"; // YOUR CHOICE Malware - 2010-11-19 BadHostWordEnds[i++] = "geo.yahoo.com"; // Tracker - 2015-04-25 BadHostWordEnds[i++] = "girl"; // Malware - 2010-04-22 BadHostWordEnds[i++] = "girls"; // Malware - 2010-04-22 BadHostWordEnds[i++] = "hide"; // PROXY - 2008-06-30 BadHostWordEnds[i++] = "pills"; // YOUR CHOICE SPAM - 2012-05-24 BadHostWordEnds[i++] = "providence.voxmedia.com"; // Tracker - 2015-04-25 BadHostWordEnds[i++] = "sex"; // Malware - 2010-04-22 BadHostWordEnds[i++] = "shareasale.com"; // AdServer - 2012-01-28 BadHostWordEnds[i++] = "tracker.financialcontent.com"; // Tracker - 2011-02-21 /////////////////////////// // Set up GoodDomainRegx // /////////////////////////// for(i in GoodDomains) { GoodDomains[i] = GoodDomains[i].split(/\./).join("\\."); } var GoodDomainRegx = new RegExp("(" + GoodDomains.join("|") + ")$", "i"); if (debug & debugRegxGen) { alert("GoodDomainRegx = " + GoodDomainRegx); } ////////////////////////// // Set up BadDomainRegx // ////////////////////////// for(i in BadDomains) { BadDomains[i] = BadDomains[i].split(/\./).join("\\."); } var BadDomainRegx = new RegExp("(" + BadDomains.join("|") + ")$", "i"); if (debug & debugRegxGen) { alert("BadDomainRegx = " + BadDomainRegx); } /////////////////////////// // Set up BadHostPartRegx // /////////////////////////// for(i in BadHostParts) { BadHostParts[i] = BadHostParts[i].split(/\./).join("\\."); } var BadHostPartRegx = new RegExp(BadHostParts.join("|"), "i"); if (debug & debugRegxGen) { alert("BadHostPartRegx = " + BadHostPartRegx); } ///////////////////////////////// // Set up BadHostWordStartRegx // ///////////////////////////////// for(i in BadHostWordStarts) { BadHostWordStarts[i] = BadHostWordStarts[i].split(/\./).join("\\."); } var BadHostWordStartRegx = new RegExp("(^|[^a-z0-9])(" + BadHostWordStarts.join("|") + ")", "i"); if (debug & debugRegxGen) { alert("BadHostWordStartRegx = " + BadHostWordStartRegx); } /////////////////////////////// // Set up BadHostWordEndRegx // /////////////////////////////// for(i in BadHostWordEnds) { BadHostWordEnds[i] = BadHostWordEnds[i].split(/\./).join("\\."); } var BadHostWordEndRegx = new RegExp("(" + BadHostWordEnds.join("|") + ")([^a-z0-9]|$)", "i"); if (debug & debugRegxGen) { alert("BadHostWordEndRegx = " + BadHostWordEndRegx); } //////////////////////////// // SET UP BadURL_PartRegx // //////////////////////////// for(i in BadURL_Parts) { BadURL_Parts[i] = BadURL_Parts[i].split(/\./).join("\\."); } var BadURL_PartRegx = new RegExp(BadURL_Parts.join("|"), "i"); if (debug & debugRegxGen) { alert ("BadURL_PartRegx = " + BadURL_PartRegx ); } ///////////////////////////////// // SET UP BadURL_WordStartRegx // ///////////////////////////////// for(i in BadURL_WordStarts) { BadURL_WordStarts[i] = BadURL_WordStarts[i].split(/\./).join("\\."); } var BadURL_WordStartRegx = new RegExp("[^a-z0-9](" + BadURL_WordStarts.join("|") + ")", "i"); if (debug & debugRegxGen) { alert ("BadURL_WordStartRegx = " + BadURL_WordStartRegx ); } /////////////////////////////// // SET UP BadURL_WordEndRegx // /////////////////////////////// for(i in BadURL_WordEnds) { BadURL_WordEnds[i] = BadURL_WordEnds[i].split(/\./).join("\\."); } var BadURL_WordEndRegx = new RegExp("(" + BadURL_WordEnds.join("|") + ")([^a-z0-9]|$)", "i"); if (debug & debugRegxGen) { alert ("BadURL_WordEndRegx = " + BadURL_WordEndRegx ); } /////////////////////////////////////////// // Define the IsIPAddr function and vars // /////////////////////////////////////////// var IpAddrRegx = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/; function IsNumIpAddr(host) { var ipAry = host.match(IpAddrRegx); var isIPValid = false; if (ipAry) { isIPValid = true; for( i = 1; i <= 4; i++) { if (ipAry[i] >= 256) { isIPValid = false; } } } if (debug & debugShowIP && isIPValid) { alert("Found a IP host address: " + host); } return isIPValid; } ///////////////////// // Done Setting Up // ///////////////////// if (debug) {alert("proxy pac file loaded");} ////////////////////////////////// // Define the FindProxyFunction // ////////////////////////////////// function FindProxyForURL(url, host) { var TestResult; var FuncResult = normal; var str = ""; var i = ""; var tmpNet; var IsNumIP = IsNumIpAddr(host); var HasIPv4Address = true; var IPv4Address; /////////////////////////////////////////////////////////////////////// // FTP patch for privoxy - Elric Scott schemalogic.com // // At one time I recommended privoxy. Since this is a security hole // // I recommend using Firefox + NoScript instead. See WARNING.txt // /////////////////////////////////////////////////////////////////////// // if (url.substr(0,4) == "ftp:") { // return "DIRECT"; // } /////////////////////////////////////////////////////////////////////// // Remove any anchors and arguments from the url if we are only // // looking at the path part // /////////////////////////////////////////////////////////////////////// if (parseURL == pathParse) { str = url.match(/^[^\?#]*/); if (str != url) { if (debug & debugModURL) { alert ("URL modified:\n" + url + "\n" + str); } url = str; } } /////////////////////////////////////////////////////////////////////// // PASS LIST: domains matched here will always be allowed. // /////////////////////////////////////////////////////////////////////// if (!IsNumIP && (TestResult = GoodDomainRegx.exec(host))) { if (debug & debugShowPass) { str = "Passed URL due to Good Domain in host: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return normal; } /////////////////////////////////////////////////////////////////////// // Check to make sure we can get an IPv4 address from the given host // // name. If we cannot do that then skip the Networks tests. // /////////////////////////////////////////////////////////////////////// if (IsNumIP) { IPv4Address = host; } else { if (isResolvable(host)) { IPv4Address = dnsResolve(host); } else { HasIPv4Address = false; } } if (HasIPv4Address) { /////////////////////////////////////////////////////////////////////// // If the IP translates to one of the GoodNetworks we pass it // // since it is considered to be safe. // /////////////////////////////////////////////////////////////////////// for (i in GoodNetworks) { tmpNet = GoodNetworks[i].split(/,\s*/); if (isInNet(IPv4Address, tmpNet[0], tmpNet[1])) { if (debug & debugShowPass) { str = "Passed URL due to good IP address: " + url + "\n\tNet: " + tmpNet[0] + " mask " + tmpNet[1]; alert(str); } return normal; } } /////////////////////////////////////////////////////////////////////// // If the IP translates to one of the BadNetworks we fail it // // since it is not considered to be safe. // /////////////////////////////////////////////////////////////////////// for (i in BadNetworks) { tmpNet = BadNetworks[i].split(/,\s*/); if (isInNet(IPv4Address, tmpNet[0], tmpNet[1])) { if (debug & debugShowFail) { str = "Blocked URL due to bad IP address: " + url + "\n\tNet: " + tmpNet[0] + " mask " + tmpNet[1]; alert(str); } return blackhole; } } } ////////////////////////////////////////////////////////// // BLOCK LIST: stuff matched here here will be blocked // ////////////////////////////////////////////////////////// if (!IsNumIP && (TestResult = BadDomainRegx.exec(host))) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Word in Domain Name: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (!IsNumIP && (TestResult = BadHostPartRegx.exec(host))) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Word in Host Name: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (TestResult = BadHostWordStartRegx.exec(host)) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Word Start in Host Name: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (TestResult = BadHostWordEndRegx.exec(host)) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Word End in Host Name: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (TestResult = BadURL_PartRegx.exec(url)) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Word in URL: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (TestResult = BadURL_WordStartRegx.exec(url)) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Starting Word in URL: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (TestResult = BadURL_WordEndRegx.exec(url)) { if (debug & debugShowFail) { str = "Blocked URL due to Bad Ending Word in URL: " + url; for (i in TestResult) { str += "\n\tTestResult." + i + " = \"" + TestResult[i] + "\""; } alert(str); } return blackhole; } if (debug & debugShowPass) { str = "Passed URL: " + url; alert(str); } return normal; }