Talk:Spam blacklist: Difference between revisions
m →Camella Manors Spam Websites: Adding a domain I missed Tag: 2017 source edit |
|||
| Line 30: | Line 30: | ||
* {{LinkSummary|goldenhaven.com.ph}} |
* {{LinkSummary|goldenhaven.com.ph}} |
||
* {{LinkSummary|vistamalls.com.ph}} |
* {{LinkSummary|vistamalls.com.ph}} |
||
* {{LinkSummary|crownasia.com.ph}} |
|||
* {{UserSummary|Aamananquil1022}} |
* {{UserSummary|Aamananquil1022}} |
||
Revision as of 14:20, 2 March 2021
- Proposed additions
- Please provide evidence of spamming on several wikis. Spam that only affects a single project should go to that project's local blacklist. Exceptions include malicious domains and URL redirector/shortener services. Please follow this format. Please check back after submitting your report, there could be questions regarding your request.
- Proposed removals
- Please check our list of requests which repeatedly get declined. Typically, we do not remove domains from the spam blacklist in response to site-owners' requests. Instead, we de-blacklist sites when trusted, high-volume editors request the use of blacklisted links because of their value in support of our projects. Please consider whether requesting whitelisting on a specific wiki for a specific use is more appropriate - that is very often the case.
- Other discussion
- Troubleshooting and problems - If there is an error in the blacklist (i.e. a regex error) which is causing problems, please raise the issue here.
- Discussion - Meta-discussion concerning the operation of the blacklist and related pages, and communication among the spam blacklist team.
- #wikimedia-external-linksconnect - Real-time IRC chat for co-ordination of activities related to maintenance of the blacklist.
- Whitelists
There is no global whitelist, so if you are seeking a whitelisting of a url at a wiki then please address such matters via use of the respectiveMediawiki talk:Spam-whitelistpage at that wiki, and you should consider the use of the template {{edit protected}} or its local equivalent to get attention to your edit.
Please sign your posts with ~~~~ after your comment. This leaves a signature and timestamp so conversations are easier to follow.
Completed requests are marked as {{added}}/{{removed}} or {{declined}}, and are generally archived quickly. Additions and removals are logged · current log 2024/07.
- Information
- List of all projects
- Overviews
- Reports
- Wikimedia Embassy
- Project portals
- Country portals
- Tools
- Spam blacklist
- Title blacklist
- Email blacklist
- Rename blacklist
- Closure of wikis
- Interwiki map
- Requests
- Permissions
- Bot flags
- New languages
- New projects
- Username changes
- Translations
- Speedy deletions
- snippet for logging
- {{sbl-log|21172337#{{subst:anchorencode:SectionNameHere}}}}
 |
SpBot archives all sections tagged with {{Section resolved|1=~~~~}} after 7 days and sections whose most recent comment is older than 15 days.
|
Proposed additions
|
This section is for proposing that a website be blacklisted; add new entries at the bottom of the section, using the basic URL so that there is no link (example.com, not http://www.example.com). Provide links demonstrating widespread spamming by multiple users on multiple wikis. Completed requests will be marked as {{added}} or {{declined}} and archived. |
qr.ae
qr.ae
Redirect service for:
quora.com
URL shortener for Quora. There are some usages on English wiki, and looks like a handful in the top 20, enough to stop it early. Ravensfire (talk) 19:02, 14 January 2021 (UTC)
- @Ravensfire: Question, is it being abused, or is it a domain where we have had abuse? Typically where they are non-dangerous and dedicated redirects they have been left alone, eg. Washington Post. Is there a requirement to focus people through the main domain name for continuity or consistency. — billinghurst sDrewth 22:06, 14 January 2021 (UTC)
- @Billinghurst: I haven't seen anything significant. About the only potentially harmful use would be if specific Quora pages were blacklisted, this would be a work-around, similar to youtu.be. Actual harm right now, I don't see any. I guess my habit is to list shorteners when I see them, especially if they are generic. Ravensfire (talk) 22:36, 14 January 2021 (UTC)
- I hear you, finding the balance is always the fun thing. I am not adverse to doing it as required, though would want to see a consensus to do so, rather than based on a single request. I will leave it open and see what appears over the next while. — billinghurst sDrewth 22:46, 14 January 2021 (UTC)
- @Billinghurst: I haven't seen anything significant. About the only potentially harmful use would be if specific Quora pages were blacklisted, this would be a work-around, similar to youtu.be. Actual harm right now, I don't see any. I guess my habit is to list shorteners when I see them, especially if they are generic. Ravensfire (talk) 22:36, 14 January 2021 (UTC)
- @Billinghurst and Ravensfire: Just as a comment: quora.com is listed at en:WP:RSP as 'generally unreliable', which generally means that we check and often remove references to that. It appears that en.wikipedia currently has only ~1000 references to quora That housekeeping becomes easier if we do not allow for the (albeit dedicated) redirect to the site.
- Now, with https://www.quora.com/Are-there-any-words-in-English-which-are-synonyms-but-have-separate-ancient-Greek-and-Latin-origin-and-the-Latin-word-is-not-etymologically-derivative-of-the-older-ancient-Greek you know where you get, with https://qr.ae/pNyjiF you don't even have a clue. That is another reason not to use redirect sites .. they are unclear/opaque, easily 'spoofed', even if they are 'the same', not disallowed (and I would even for a generally reliable and highly used source suggest that we do not do that). I would at least encourage to just blacklist obscuring dedicated redirect sites if there are reasons to minimize the link already (but I would be more in favour to have a bot enforced expansion of any links that are not redirecting to blacklisted/revertlisted domains. --Dirk Beetstra T C (en: U, T) 06:42, 9 February 2021 (UTC)
Camella Manors Spam Websites
brittany.com.ph
vistalandinternational.com
lessandra.com.ph
lumina.com.ph
camella.com.ph
vistaresidences.com.ph
starmall.com.ph
vistaland.com.ph
coho.com.ph
goldenhaven.com.ph
vistamalls.com.ph
crownasia.com.ph
User:Aamananquil1022
User:Kimboli1993
User:LessandraOfficial
User:LessandraOnline
User:Sheichey
User:Aialavarta
User:Dothackjhe
User:Lumina Homes
User:NessAlbito
User:BRIA Home Inc.
User:Vllofficial
User:Vistaresidences
User:Capisouth
User:Pedantrywizard
User:Christian1209
User:Dothackjhe
User:JustineRufino
User:COHObyVistaLandofficial
User:Vista Residences Inc
This took a bit of work, but pretty sure this is the comprehensive list of domains and users that have been spamming them on various articles. It's been primarily enwiki, but they've had a few trips to Commons as well as an attempted addition on metawiki. Not every domain listed has been crosswiki, just a few—because it's all part of the same crosswiki ring, though, I'm putting this here. It looks like a few of the domains are all in a similar IP range, possibly cloudflare; I'm not sure if something can be done with that. I've also left out a few users that are much older—the only accounts listed have (unless I messed up) edited in the last year or two.
Here's the best example of how the domains tend to be tied together (similar things happen in mainspace, too—mainly on en:Vista Land, but I can't easily see what pages they have made that have been deleted), and here's an example of what the most prolific uploader looked like on Commons (only one or two other users uploaded images on Commons).
I'm going to guess it would be worthwhile to look into global locks or CU'ing them, but I'll leave that decision up to someone else. Perryprog (talk) 01:52, 27 February 2021 (UTC)
- Oh—and one other thought is this does seem like it could be fairly viable as a 🍯, as I wouldn't be surprised if the users behind these accounts just went to boring old text as advertisement instead of attempting to add backlinks everywhere. I'm not sure if that's a standard practice in this area, though. Perryprog (talk) 05:05, 27 February 2021 (UTC)
- @Perryprog: I know that we are only seeing "after cleanup" results, though what we are seeing does not definitively indicate abuse; well not enough to put them into the global blacklist without a larger consensus. You can set COIBot to do some monitoring on the domains if that is of value to you. — billinghurst sDrewth 05:50, 27 February 2021 (UTC)
- Billinghurst, I'm not sure that I agree—the link spam is clearly deliberate, and there is definitely some socking or WFH meat-puppetry going on here. However, I am OK with waiting a bit to see how the group will decide to continue their efforts in order to have a more informed decision as to what preventative measures should be taken. Perryprog (talk) 17:33, 28 February 2021 (UTC)
- You misunderstand my comment. I am saying that it is not evident that the editing is out of scope for all wikis. I am seeing some allowance at Commons, especially with an account that has over a million edits for a portion of the domains. So it could be that the abuse is only occurring at enWP, especially noting difference in policies around paid editing between enWP and Commons. So for that list to be globally blacklisted it needs more than enWP's say so and hence a broader consensus, or we need to pare it down. — billinghurst sDrewth 18:20, 28 February 2021 (UTC)
- @Billinghurst: what is recorded by COIBot on commons is all reverted or deleted, and obvious spam. I’ll dive a bit deeper in a bit. —Dirk Beetstra T C (en: U, T) 04:07, 1 March 2021 (UTC)
- @Billinghurst and Perryprog: OK, so camilla.com.ph is linked from c:File:9990kfQuirino_HighwaySan_Josefvf_01.JPG, added in 2015 by user:Judgefloro. I however fail to see the utility of the link in itself, it is a website promoting the sale of land / property (in that area??), it is not the source of the image, it is not providing any more information about the area or content of the image (well, currently it redirects to the root of the domain). Fact is, that there are accounts like COHObyVistaLandofficial, Vistarecidences, and Vista Residences Inc that are spamming this. Blacklist, remove the stuff that is unneeded, and consider to whitelist the links that are really needed. --Dirk Beetstra T C (en: U, T) 12:54, 2 March 2021 (UTC)
- Beetstra, sounds good. From my own investigation I am very doubtful that any of the links are needed (at least currently). Currently there's still similar types of spam happening on enwiki here. (Poor XLinkBot tried :(.) Perryprog (talk) 13:06, 2 March 2021 (UTC)
- And the Commons community works out what links they do and do not want, and how to deal with an editor with 1.6M edits. They should also express their opinion on the domains to build that larger consensus. Nothing holding enWP up from blacklisting now. — billinghurst sDrewth 13:12, 2 March 2021 (UTC)
- Billinghurst, this is a bit interesting—I hadn't noticed those uploads by Judgefloro (and yes, I did misunderstand your earlier comment—sorry!), and that may indeed change things. The current links that seem to be legitimately used on Commons is the camella one and the goldenhaven one (see their respective major wiki search). I do see only one addition of a Commons upload from one of the users listed that also included an external link; the rest were just promotional by way of text or the image themselves. There's also the attempted page creation on meta at Lumina. That means there's really been just one external link addition each on Commons and meta that was actually by one of the user's listed, while the rest have been on enwiki. Perryprog (talk) 14:07, 2 March 2021 (UTC)
- And the Commons community works out what links they do and do not want, and how to deal with an editor with 1.6M edits. They should also express their opinion on the domains to build that larger consensus. Nothing holding enWP up from blacklisting now. — billinghurst sDrewth 13:12, 2 March 2021 (UTC)
- Beetstra, sounds good. From my own investigation I am very doubtful that any of the links are needed (at least currently). Currently there's still similar types of spam happening on enwiki here. (Poor XLinkBot tried :(.) Perryprog (talk) 13:06, 2 March 2021 (UTC)
- You misunderstand my comment. I am saying that it is not evident that the editing is out of scope for all wikis. I am seeing some allowance at Commons, especially with an account that has over a million edits for a portion of the domains. So it could be that the abuse is only occurring at enWP, especially noting difference in policies around paid editing between enWP and Commons. So for that list to be globally blacklisted it needs more than enWP's say so and hence a broader consensus, or we need to pare it down. — billinghurst sDrewth 18:20, 28 February 2021 (UTC)
- Billinghurst, I'm not sure that I agree—the link spam is clearly deliberate, and there is definitely some socking or WFH meat-puppetry going on here. However, I am OK with waiting a bit to see how the group will decide to continue their efforts in order to have a more informed decision as to what preventative measures should be taken. Perryprog (talk) 17:33, 28 February 2021 (UTC)
et20slam.net and myinfo.pk
et20slam.net
myinfo.pk
User:Karenjonaa
User:182.185.25.11(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:59.103.96.180(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
Spammed at enwiki, svwiki and ptwiki by User:182.185.25.11, User:Karenjonaa and User:59.103.96.180. EstrellaSuecia (talk) 14:43, 1 March 2021 (UTC)
moweb.com
moweb.com
User:219.91.190.78(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:219.91.190.127(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:43.250.165.191(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:123.201.65.136(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:43.250.158.131(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:103.86.19.30(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:43.242.116.98(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:43.250.165.60(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:103.238.104.224(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:123.201.67.191(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:Freebald
Spammed on d, es, es, ca, ca, ru, en, en, en, en. —Bruce1eetalk 14:53, 1 March 2021 (UTC)
- @Bruce1ee:
Added to Spam blacklist. --Dirk Beetstra T C (en: U, T) 10:51, 2 March 2021 (UTC)
pincong.org
pincong.org
User:153.107.48.232(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:Pincongorg
- Spam and phishing website. The actual website is https://pincong.rocks. See also en:Pincong. --SCP-2000 05:10, 2 March 2021 (UTC)
- @SCP-2000: Added to Spam blacklist. --Dirk Beetstra T C (en: U, T) 10:49, 2 March 2021 (UTC)
Proposed additions (Bot reported)
|
|
This section is for domains which have been added to multiple wikis as observed by a bot.
These are automated reports, please check the records and the link thoroughly, it may report good links! For some more info, see Spam blacklist/Help#COIBot_reports. Reports will automatically be archived by the bot when they get stale (less than 5 links reported, which have not been edited in the last 7 days, and where the last editor is COIBot).
|
COIBot
The LinkWatchers report domains meeting the following criteria:
- When a user mainly adds this link, and the link has not been used too much, and this user adds the link to more than 2 wikis
- When a user mainly adds links on one server, and links on the server have not been used too much, and this user adds the links to more than 2 wikis
- If ALL links are added by IPs, and the link is added to more than 1 wiki
- If a small range of IPs have a preference for this link (but it may also have been added by other users), and the link is added to more than 1 wiki.
COIBot's currently open XWiki reports
| ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Proposed removals
|
|
This section is for proposing that a website be unlisted; please add new entries at the bottom of the section.
Remember to provide the specific domain blacklisted, links to the articles they are used in or useful to, and arguments in favour of unlisting. Completed requests will be marked as See also recurring requests for repeatedly proposed (and refused) removals. Notes:
|
casino.ru
casino.ru
As it was mentioned in Talk:Spam blacklist this domain was blacklisted because: ‘Spammed by numerous IPs on Russian and Ukrainian Wikipedias. --Mercy 15:33, 23 December 2009 (UTC)’. I found this site useful for gambling articles. There are original interviews, articles and news. F.e. Gambling in Ukraine – the article in english is poor and need a lot of work and references from native speaker’s sites will be good. https://en.wikipedia.org/wiki/Craps https://en.wikipedia.org/wiki/Casino_token https://en.wikipedia.org/wiki/Gambling_in_Ukraine https://en.wikipedia.org/wiki/Gambling_in_Macau https://en.wikipedia.org/wiki/Gambling_age https://en.wikipedia.org/wiki/Gambling https://en.wikipedia.org/wiki/Gaming_law
- Sort of an EP per User talk:SmurFF2020. Camouflaged Mirage (talk) 12:04, 28 December 2020 (UTC)
Comment Keen to defer to en for local whitelisting though, as globally there is still some undesired impact, @Ohnoitsjamie: is it possible to whitelist locally, yes, it cannot be removed from en blacklist as it's on meta but there is a possibility of using local whitelist. I am uncomfortable to remove it globally per just some pages in one wiki needing it as it's clearly spammy (and true on ru/uk wp) Camouflaged Mirage (talk) 12:07, 28 December 2020 (UTC)
- @SmurFF2020: Best that you ask at w:mediawiki talk:spam-whitelist and ask for local whitelisting. Asking there will create a local record and enable a local conversation. — billinghurst sDrewth 12:10, 28 December 2020 (UTC)
- I see no reason to remove it globally. The user who requested removing it from the en blacklist has no edits there; we rarely whitelist for new users, as it usually suggest the strong possibility of a WP:COI. Ohnoitsjamie (talk) 19:14, 28 December 2020 (UTC)
- @SmurFF2020: Best that you ask at w:mediawiki talk:spam-whitelist and ask for local whitelisting. Asking there will create a local record and enable a local conversation. — billinghurst sDrewth 12:10, 28 December 2020 (UTC)
- @SmurFF2020:
Declined Deferred to w:en:MediaWiki_talk:Spam-whitelistCamouflaged Mirage (talk) 12:13, 28 December 2020 (UTC)
Discussion
|
|
This section is for discussion of Spam blacklist issues among other users. |