In Apache version of the blocklist, there are no word boundaries used for referer entries, which differs from the Nginx version of the blocklist. Is this by purpose?
In Apache version of globalblacklist.conf:
SetEnvIfNoCase Referer ~*000free\.us spam_ref
In Nginx version of globalblacklist.conf:
"~*(?:\b)000free\.us(?:\b)" 1;