Talk:Spam blacklist/Archives/2008-11

From Meta, a Wikimedia project coordination wiki
Jump to: navigation, search
Warning! Please do not post any new comments on this page. This is a discussion archive first created in November 2008, although the comments contained were likely posted before and after this date. See current discussion or the archives index.

Proposed additions

Symbol comment vote.svg This section is for completed requests that a website be blacklisted

aerobaticteams.net



Per COIBot XWiki report, this one has been abused, however there are some legitimate uses. I think we can blacklist this for now - if it becomes a problem in the future, we can remove it again, or consider whitelisting. As well, recall that the blacklist no longer "locks" pages with spam links - you can still save the page as long as you're not adding links.  — Mike.lifeguard | @en.wb 00:35, 22 October 2008 (UTC)

  • Removed in es-wiki. (only one link) Dferg (T-ES) 09:56, 22 October 2008 (UTC)
Lots of abuse on en:
- MER-C 10:11, 22 October 2008 (UTC)
In adition: (all links in en-wiki) and this domain:


I suggest the adition Dferg (T-ES) 10:19, 22 October 2008 (UTC)

I added all the spam.aerobaticteams.net links for tracking purposes (that's why the subdomain is "spam"). MER-C 13:24, 22 October 2008 (UTC)

OK, Added Added then.  — Mike.lifeguard | @en.wb 17:32, 31 October 2008 (UTC)

harptabs.com



(Violates copyright laws. Free transcriptions of copyrighted music in tablature form. Includes melodies, harmonies, lyrics, videos of various artists performances, recordings of these songs without a license from the copyright holder).

  • I'm inclined to blacklist on that basis, what do others think? JzG 15:51, 25 October 2008 (UTC)
  • If the site violates copyright laws I think it is not good for the project, so I'm inclined to blacklist the link. Dferg (T-ES) 16:07, 25 October 2008 (UTC)

Highly Agreed. - By: Mister31

Added Added  — Mike.lifeguard | @en.wb 17:43, 31 October 2008 (UTC)

Rummy spam

Domains












Spammers
















See WikiProject Spam item (permanent link). MER-C 12:07, 27 October 2008 (UTC)


I don't have time to look into this carefully; some asmin might want to look at:
--A. B. (talk) 15:37, 31 October 2008 (UTC)
Added Added (except rummikub.org) - I see a few small ranges adding these links. The behaviour here constitutes abuse.  — Mike.lifeguard | @en.wb 17:54, 31 October 2008 (UTC)

smnoticias.com.ar



This domain has been repeatedly added spam, and create a autopromotional article: [[9]] unsigned comment by Bashebore (talk)

Sorry, as I can see the additions where only on es-wikipedia and where only three. If you believe this link must be blacklisted, request it on es-wiki in es:MediaWiki Discusión:Spam-blacklist. Thank you. Dferg (T-ES) 09:33, 28 October 2008 (UTC)
Declined Declined per Dferg - please use local blacklisting or blocking to control this.  — Mike.lifeguard | @en.wb 17:39, 31 October 2008 (UTC)

davidbenariel.org



sample spamming

This guy has been POV pushing through spam to self published pieces for a long time. I asked for and received blacklisting on a bunch of blogspot articles and ezine.com last year on Meta [10].

Turns out he's been back with his own domain since March of this year. Sites added to multiple articles by multiple IPs over a fairly long period of time so blocks and protection aren't going to work. Have been asked at en:wiki to seek Meta level blacklisting to prevent this site spilling over onto other projects since the previous sites were crosswiki spammed.[11] Thanks -- SiobhanHansa 19:39, 30 October 2008 (UTC)

Yes, here's some background on his previous cross-wiki spamming:
Sample edits:
Here are more Ben-Ariel domains:






























Google Adsense IDs: 3166669759832371, 5366185733900268
--A. B. (talk)
Added Added --A. B. (talk) 20:46, 30 October 2008 (UTC)

cavenaghi.artelista.com





This user adds links to cavenaghi.artelista.com on different projects like on de, en, it and nl. Silver Spoon 19:21, 30 October 2008 (UTC)



Also Active as IP-adress on es, pt and fr. Silver Spoon 19:27, 30 October 2008 (UTC)

Added Added --A. B. (talk) 05:14, 31 October 2008 (UTC)

hindyugm.com



















Spammers








  • and others

See WikiProject Spam item. MER-C 06:12, 31 October 2008 (UTC)

Added Added  — Mike.lifeguard | @en.wb 18:03, 31 October 2008 (UTC)

williamlong.info spam

Spam domains





Spam accounts






--A. B. (talk) 18:28, 31 October 2008 (UTC)

More spam:






Related domains:










More IPs:






















--A. B. (talk) 15:27, 3 November 2008 (UTC)
Added Added --A. B. (talk) 15:38, 3 November 2008 (UTC)

porno.chatlaak.com



Porn spam, please block ASAP. This user has vandalised and spammed articles. See User:COIBot/XWiki/porno.chatlaak.com. EdBever 09:58, 1 November 2008 (UTC)

Added Added thanks --Herby talk thyme 11:15, 1 November 2008 (UTC)

bstat.it





As before, see [29] [30]. MER-C 12:42, 1 November 2008 (UTC)

Added Added. -- — Mike.lifeguard | @en.wb 00:15, 3 November 2008 (UTC)

Nike shoes spammer







Continuously spams different domains and tries to pass them as references etc. Various IP's in the same range editted. Mainly on en: but also on zh:. See Coibot reports. EdBever 11:31, 3 November 2008 (UTC)

Added Added thanks --Herby talk thyme 12:19, 5 November 2008 (UTC)

zoomcad.com



See COIbot xwiki report. Persistent crosswiki linkspamming. Please blacklist ASAP. EdBever 12:11, 5 November 2008 (UTC)

Added Added thanks --Herby talk thyme 12:15, 5 November 2008 (UTC)

aylak.com

Domains










  • There are over 500 links to this site on tr.wikipedia; it may be a hosting service like Yahoo or narod.ru, so I reverted my blacklisting of this link. --A. B. (talk) 21:42, 3 November 2008 (UTC)















Accounts


--A. B. (talk) 20:36, 3 November 2008 (UTC)

Added Added. --A. B. (talk) 20:41, 3 November 2008 (UTC)
For the record, here are more accounts:










--A. B. (talk) 21:42, 3 November 2008 (UTC)

interview spam










 — Mike.lifeguard | @en.wb 03:20, 6 November 2008 (UTC)

Added Added (cyinterview.com was already added)  — Mike.lifeguard | @en.wb 03:31, 6 November 2008 (UTC)

davemckay.co.uk

Cross wiki spam, active today - has been going on for a long time. There are 467 links in the 57 biggest Wikipedias.




These are the IPs that has inserted the link on nn.wikipedia, they have all inserted the link on other Wikipedias too. It is likely to be lots more IP's that has been used to insert the link.

























--Jorunn 21:36, 5 November 2008 (UTC)


Some more IPs:


















































--Jorunn 22:15, 5 November 2008 (UTC)


More IP's:


































--Jorunn 13:34, 6 November 2008 (UTC)
UGH, Added Added & Thanks to Jorunn for the legwork.  — Mike.lifeguard | @en.wb 02:12, 7 November 2008 (UTC)
So what? Are the links irrelevant? Is a link to a collection of Hume's works in English a spam if added to an article on David Hume in any language? Andres 08:12, 8 November 2008 (UTC)
This website does have a collection of Humes work, but so does other sites, like Project Gutenberg and en.wikisource. Anyone can make their own website with content that is in the public domain. Copy some content from Project Gutenberg, add some Google AdSense ads, and then insert the link to your new website in any and all Wikipedia articles you find. Someone can probably benefit from that, but I don't think it is the encyclopedic articles and the readers of those that benefits from it.
A different matter is that the website claimes all their content is in the public domain, but there is also some work of Bertrand Russel from the 1960's for instance, can that really be in the public domain? And I can't find any information about who has translated the works of non english writers. I suspect there is copyright issues too, not only excessive cross wiki link insertion.
We could let anyone insert links to their own websites, but I don't think we should. --Jorunn 18:20, 8 November 2008 (UTC)
I agree with this assessment by Jorunn (talk · contribs). Cirt (talk) 23:33, 8 November 2008 (UTC)

nofoiegras.org



Current cross-wiki spam. Added Added, but perhaps temp?  — Mike.lifeguard | @en.wb 03:37, 3 November 2008 (UTC)

Looks like a useful site, so I'm removing this now. Hopefully they will not return.  — Mike.lifeguard | @en.wb 19:14, 9 November 2008 (UTC)

Not cross-wiki, but …

  • ht*p://soft82.fu8.com/norton-antivirus.php
Redirects to:
  • ht*p://check-antivir-tool.net/1/?id=21309
  • ht*p://jproshin.info/stech/go.php?sid=1
Redirects to:
  • ht*p://tube-dudes.net/get.php?id=21121&p=59











The page at ht*p://check-antivir-tool.net/1/?id=21309 performs a bogus "check' of your computer when you load the page, reports non-existent problems, then insists you download their .exe file.

Can someone more familiar with checking for malicious code check these out? Even though these domains (to my knowledge) have only been spammed one time to en.wikipedia, I recommend blacklisting these sites here across all Wikimedia (and other Media-Wiki wikis) if there is a threat to users following these links. --A. B. (talk) 22:28, 6 November 2008 (UTC)

Added Added naughty naughty.  — Mike.lifeguard | @en.wb 00:18, 7 November 2008 (UTC)

facebookster.com-related spam

Spam domains







Related domains















Spam accounts











--A. B. (talk) 04:13, 7 November 2008 (UTC)

Added Added (but not the related domains).  — Mike.lifeguard | @en.wb 05:27, 8 November 2008 (UTC)

icanhaz.com

I hate to do this, since it's such a cute domain name... but pls blacklist this URL shrinker site.. --Versageek 05:06, 7 November 2008 (UTC)

It is cute ^_^
It's also Added Added  — Mike.lifeguard | @en.wb 05:08, 7 November 2008 (UTC)

Deep Forest spammer

The following discussion is closed.

Massive fansite spamming in en:Deep Forest at least in enwiki, fiwiki and dewiki

Spam domain


Spam accounts






--Agony 19:03, 8 November 2008 (UTC)

Added Added  — Mike.lifeguard | @en.wb 19:46, 8 November 2008 (UTC)
User found out blacklisting and changed url:


--Agony 09:02, 9 November 2008 (UTC)
Added Added. --Erwin(85) 10:40, 9 November 2008 (UTC)

I disagree with the decision to blacklist deepforestmusic.com. This site has been around for over five years, and is by far the most detailed Deep Forest site available.

www.deepforestmusic.com has always been linked to on the Deep Forest wiki pages. And it was this last summer that someone began erasing the links deepforestmusic.com and replacing them with deep-projects.com

The long history of undo's was in direct response to the person from deep-projects that kept removing deepforestmusic. Deep-projects has no Deep Forest content, other than Eric Mouquet's more recent work which is not Deep Forest since it does not include Michel Sanchez. So it seems unfair to blacklist deepforestmusic when it is the person from deep-projects that has been spamming wikipedia.

Please review the histories below, and you will see that the same user is deleting deepforestmusic.com and replacing it with deep-projects.com everytime unsigned comment by Soup (talk)

However crosswiki spamming with multiple IP's is not right way to approach this problem, every Wikipedia have article discussion page where this problem must be conversed. Besides www.deep-projects.com claims to be official site of Eric Mouguet (one of the members) which will override fansite in all ways. --Agony 09:09, 9 November 2008 (UTC)
Yes, deep-projects.com is Eric's site, but it is not the OFFICIAL site. Deep Forest is Eric and Michel. Deep-projects should be labeled as Eric's site, not the official site, which would be unfair to Michel.
It is ridiculous to blacklist deepforestmusic.com, when this site has 100x the Deep Forest content of any other site, and is the only active Deep Forest site. Wikipedia should be a resource for the readers, not an advertisement for the band members. If readers want to know more about Deep Forest, they should certainly be aware of deepforesmusic.com. After all, most of the content from the wiki articles originated from deepforestmusic.com, and is even used as a citation in some articles!
I don't think it is a problem to have deep-projects listed, but the person who kept editing the page was deleting the link to deepforestmusic.com. This person is the webmaster of deep-projects, and was basically trying to erase any evidence that deepforestmusic.com existed.
You may be right that undoing his edits may have not been the best way to go about this, but I was unaware of another way to handle this until now.
I still see no reason to have chosen to blacklist deepforestmusic.com and not deep-projects.com, they should both be listed, one as a Deep Forest fan site, the other as Eric Mouquet's PERSONAL website.
Please note that this is not the place to discuss this. Please use the talk page. The URL will be removed if there's consensus to link to this site. --Erwin(85) 10:40, 9 November 2008 (UTC)

The original reason for adding the domains is valid. Further discussion should happen on the relevant article's talk page. If need be, request whitelisting on a specific wiki for a specific use, since removal at this time is not going to happen.  — Mike.lifeguard | @en.wb 19:06, 9 November 2008 (UTC)

piurl.com

Another URL shrinker site, provided by the fine spammers at w:Adult FriendFinder. --Versageek 21:36, 7 November 2008 (UTC)

Added Added  — Mike.lifeguard | @en.wb 05:43, 8 November 2008 (UTC)

Pharmacy terrorists

http://canadian-meds-shop.com/ (you can click on it, I linked to the scamfraudalert.com site) is likely to spam. Please block the address! --Lovuschka 02:32, 3 November 2008 (UTC)

This one will need some research for other domains.  — Mike.lifeguard | @en.wb 03:30, 3 November 2008 (UTC)
There are 200 domains from this scam, plus a few domains that were spammed along with them. The regexes are hidden in a comment here to avoid bloating the page.
Spammers:


















and probably others.
Given the scale of this scam and spamming, I'd recommend blacklisting them all.
 — Mike.lifeguard | @en.wb 02:07, 7 November 2008 (UTC)
OK, they are spamming OTRS. Added Added everything.  — Mike.lifeguard | @en.wb 19:10, 8 November 2008 (UTC)

123seotalk.com

Spam domains











Spam accounts









--A. B. (talk) 16:02, 7 November 2008 (UTC)

Added Added  — Mike.lifeguard | @en.wb 05:39, 8 November 2008 (UTC)

wiki.d-addicts.com

Hundred's to thousands of external links goes out to "DramaWiki," which is the wiki page for "d-addicts.com" - a massive torrent site for downloading pirated Asian television shows and movies. Continually linking to this site is like the WikiMedia family supporting piracy of Asian copyrighted content.

--Hyo-son Kim 21:46, 5 November 2008 (UTC)

Just a small difference in count between 'd-addicts.com' (623 records) and 'wiki.d-addicts.com' (618 records):





I don't see obvious spamming of the link (maybe one or two accounts). But if it is linking to questionable anyway .. --Dirk Beetstra T C (en: U, T) 10:45, 6 November 2008 (UTC)

d-addicts.com is a giant forum. I don't know whether even linking to the wiki is a good idea. Someone should take a closer look through the forum though, I only had a few minutes.  — Mike.lifeguard | @en.wb 02:20, 7 November 2008 (UTC)


623 links for d-addicts and 618 links for wiki.d-addicts.com isn't spam? What concerns me more is that d-addicts actively participates in the pirating of copyrighted material. You guys are promoting their actions or at least giving the impression that the site is legitimate to wikipedia users by adding so many of their external links. This is absolutely wrong. I'm wondering becuase it's Asian copyrighted material you guys are taking such a lackadaisical attitude? Are you going to list "The Pirate Bay" as reference for all the movies, television shows, and software that get listed on the Pirate Bay site as well? Ultimately, with all those links to d-addicts and wiki-addicts, you guys are giving the thumbs up to copyright infringement. --Hyo-son Kim 20:40, 7 November 2008 (UTC)

D-addicts as of November 7 20:40 just looking at their most recent posts on their front page:

  • d-addicts.com/forum/viewtopic_66788.htm <-- torrent link to download "Worlds Within"
  • d-addicts.com/forum/viewtopic_67154.htm <-- torrent link to download "Koizora - Episode 06 HD" (high defintion even)
  • d-addicts.com/forum/viewtopic_67153.htm <-- torrent link to download "Ryuusei no Kizuna ep04"
  • d-addicts.com/forum/viewtopic_65418.htm <-- torrent link to download "Beethoven Virus [Eng Subs] (Ep 1-14 of 19)"

on their Beethoven Virus page it says "*PLEASE MAKE SURE TO DOWNLOAD THE RIGHT VERSION --- CHECK OUR WIKI"

  • d-addicts.com/forum/download.php?id=29833 <-- the subtitles for Beethoven virus

Their entire site revolves around copyright infringement / torrents to download the latest Asian movies and television dramas. --Hyo-son Kim 20:48, 7 November 2008 (UTC)

What I meant was, that I did not see any accounts who were obvious spamming (as in IPs or named accounts who have as a main purpose inserting links to this site; I did alredy say that linking to this site may be questionable, which is also a good reason to blacklist it. --Dirk Beetstra T C (en: U, T) 20:56, 7 November 2008 (UTC)
Added Added then.  — Mike.lifeguard | @en.wb 22:41, 14 November 2008 (UTC)

visitchn.com and related

Sites spammed






Related domains


Spammers


  • and more.

See WikiProject Spam item. Has spammed since the bot report. MER-C 07:48, 13 November 2008 (UTC)

Added Added the first three. Is yanjiecao.com spammed as well? --Erwin(85) 20:55, 13 November 2008 (UTC)
We usually add related domains preemptively because there are countless cases of spammers using them to circumvent blacklisting. MER-C 02:09, 14 November 2008 (UTC)
Fair enough added yanjiecao.com as well. --Erwin(85) 21:13, 14 November 2008 (UTC)

terryananny.com



Spammers














  • and more

See WikiProject Spam item. MER-C 02:09, 14 November 2008 (UTC)

Added Added. I assumed it would end when the articles would be deleted. Apparently it didn't. Thanks for bringing it to our attention. --Erwin(85) 21:21, 14 November 2008 (UTC)

architectour.net