Talk:Spam blacklist: Difference between revisions
→Camella Manors Spam Websites: done on en. |
Tag: 2017 source edit |
||
| Line 70: | Line 70: | ||
:{{u|EstrellaSuecia}}, I'm not seeing myinfo.pk added by Karenjonaa (and no hits in COIBot), is that the right domain? [[User:GeneralNotability|GeneralNotability]] ([[User talk:GeneralNotability|talk]]) 01:35, 8 March 2021 (UTC) |
:{{u|EstrellaSuecia}}, I'm not seeing myinfo.pk added by Karenjonaa (and no hits in COIBot), is that the right domain? [[User:GeneralNotability|GeneralNotability]] ([[User talk:GeneralNotability|talk]]) 01:35, 8 March 2021 (UTC) |
||
::{{u|GeneralNotability}} No, that's probably correct. But it was spammed crosswiki by the IP-adresses (see deleted user talk pages), and the IPs also spammed the et20slam domain. Since Karenjonaa has spammed the et20slam domain for a long time I just figured they were connected. [[User:EstrellaSuecia|EstrellaSuecia]] ([[User talk:EstrellaSuecia|talk]]) 05:59, 8 March 2021 (UTC) |
::{{u|GeneralNotability}} No, that's probably correct. But it was spammed crosswiki by the IP-adresses (see deleted user talk pages), and the IPs also spammed the et20slam domain. Since Karenjonaa has spammed the et20slam domain for a long time I just figured they were connected. [[User:EstrellaSuecia|EstrellaSuecia]] ([[User talk:EstrellaSuecia|talk]]) 05:59, 8 March 2021 (UTC) |
||
=== passport-photo.online === |
|||
{{Linksummary|passport-photo.online}} |
|||
{{Linksummary|passportphotocodeuk.com}} |
|||
{{Usersummary|Passportphotos}} |
|||
Cross-wiki spam. See also [[Special:Diff/21211491]]. --[[User:SCP-2000|<span style="color: #383838;">'''SCP'''</span>]][[User talk:SCP-2000|<span style="color: #242424;">'''-20'''</span>]][[Special:Contributions/SCP-2000|<span style="color: #080808;">'''00'''</span>]] 12:32, 11 March 2021 (UTC) |
|||
== Proposed additions (Bot reported) == |
== Proposed additions (Bot reported) == |
||
Revision as of 12:32, 11 March 2021
- Proposed additions
- Please provide evidence of spamming on several wikis. Spam that only affects a single project should go to that project's local blacklist. Exceptions include malicious domains and URL redirector/shortener services. Please follow this format. Please check back after submitting your report, there could be questions regarding your request.
- Proposed removals
- Please check our list of requests which repeatedly get declined. Typically, we do not remove domains from the spam blacklist in response to site-owners' requests. Instead, we de-blacklist sites when trusted, high-volume editors request the use of blacklisted links because of their value in support of our projects. Please consider whether requesting whitelisting on a specific wiki for a specific use is more appropriate - that is very often the case.
- Other discussion
- Troubleshooting and problems - If there is an error in the blacklist (i.e. a regex error) which is causing problems, please raise the issue here.
- Discussion - Meta-discussion concerning the operation of the blacklist and related pages, and communication among the spam blacklist team.
- #wikimedia-external-linksconnect - Real-time IRC chat for co-ordination of activities related to maintenance of the blacklist.
- Whitelists
There is no global whitelist, so if you are seeking a whitelisting of a url at a wiki then please address such matters via use of the respectiveMediawiki talk:Spam-whitelistpage at that wiki, and you should consider the use of the template {{edit protected}} or its local equivalent to get attention to your edit.
Please sign your posts with ~~~~ after your comment. This leaves a signature and timestamp so conversations are easier to follow.
Completed requests are marked as {{added}}/{{removed}} or {{declined}}, and are generally archived quickly. Additions and removals are logged · current log 2024/06.
- Information
- List of all projects
- Overviews
- Reports
- Wikimedia Embassy
- Project portals
- Country portals
- Tools
- Spam blacklist
- Title blacklist
- Email blacklist
- Rename blacklist
- Closure of wikis
- Interwiki map
- Requests
- Permissions
- Bot flags
- New languages
- New projects
- Username changes
- Translations
- Speedy deletions
- snippet for logging
- {{sbl-log|21211503#{{subst:anchorencode:SectionNameHere}}}}
 |
SpBot archives all sections tagged with {{Section resolved|1=~~~~}} after 7 days and sections whose most recent comment is older than 15 days.
|
Proposed additions
|
This section is for proposing that a website be blacklisted; add new entries at the bottom of the section, using the basic URL so that there is no link (example.com, not http://www.example.com). Provide links demonstrating widespread spamming by multiple users on multiple wikis. Completed requests will be marked as {{added}} or {{declined}} and archived. |
Camella Manors Spam Websites
brittany.com.ph
vistalandinternational.com
lessandra.com.ph
lumina.com.ph
camella.com.ph
vistaresidences.com.ph
starmall.com.ph
vistaland.com.ph
coho.com.ph
goldenhaven.com.ph
vistamalls.com.ph
crownasia.com.ph
User:Aamananquil1022
User:Kimboli1993
User:LessandraOfficial
User:LessandraOnline
User:Sheichey
User:Aialavarta
User:Dothackjhe
User:Lumina Homes
User:NessAlbito
User:BRIA Home Inc.
User:Vllofficial
User:Vistaresidences
User:Capisouth
User:Pedantrywizard
User:Christian1209
User:Dothackjhe
User:JustineRufino
User:COHObyVistaLandofficial
User:Vista Residences Inc
This took a bit of work, but pretty sure this is the comprehensive list of domains and users that have been spamming them on various articles. It's been primarily enwiki, but they've had a few trips to Commons as well as an attempted addition on metawiki. Not every domain listed has been crosswiki, just a few—because it's all part of the same crosswiki ring, though, I'm putting this here. It looks like a few of the domains are all in a similar IP range, possibly cloudflare; I'm not sure if something can be done with that. I've also left out a few users that are much older—the only accounts listed have (unless I messed up) edited in the last year or two.
Here's the best example of how the domains tend to be tied together (similar things happen in mainspace, too—mainly on en:Vista Land, but I can't easily see what pages they have made that have been deleted), and here's an example of what the most prolific uploader looked like on Commons (only one or two other users uploaded images on Commons).
I'm going to guess it would be worthwhile to look into global locks or CU'ing them, but I'll leave that decision up to someone else. Perryprog (talk) 01:52, 27 February 2021 (UTC)
- Oh—and one other thought is this does seem like it could be fairly viable as a 🍯, as I wouldn't be surprised if the users behind these accounts just went to boring old text as advertisement instead of attempting to add backlinks everywhere. I'm not sure if that's a standard practice in this area, though. Perryprog (talk) 05:05, 27 February 2021 (UTC)
- @Perryprog: I know that we are only seeing "after cleanup" results, though what we are seeing does not definitively indicate abuse; well not enough to put them into the global blacklist without a larger consensus. You can set COIBot to do some monitoring on the domains if that is of value to you. — billinghurst sDrewth 05:50, 27 February 2021 (UTC)
- Billinghurst, I'm not sure that I agree—the link spam is clearly deliberate, and there is definitely some socking or WFH meat-puppetry going on here. However, I am OK with waiting a bit to see how the group will decide to continue their efforts in order to have a more informed decision as to what preventative measures should be taken. Perryprog (talk) 17:33, 28 February 2021 (UTC)
- You misunderstand my comment. I am saying that it is not evident that the editing is out of scope for all wikis. I am seeing some allowance at Commons, especially with an account that has over a million edits for a portion of the domains. So it could be that the abuse is only occurring at enWP, especially noting difference in policies around paid editing between enWP and Commons. So for that list to be globally blacklisted it needs more than enWP's say so and hence a broader consensus, or we need to pare it down. — billinghurst sDrewth 18:20, 28 February 2021 (UTC)
- @Billinghurst: what is recorded by COIBot on commons is all reverted or deleted, and obvious spam. I’ll dive a bit deeper in a bit. —Dirk Beetstra T C (en: U, T) 04:07, 1 March 2021 (UTC)
- @Billinghurst and Perryprog: OK, so camilla.com.ph is linked from c:File:9990kfQuirino_HighwaySan_Josefvf_01.JPG, added in 2015 by user:Judgefloro. I however fail to see the utility of the link in itself, it is a website promoting the sale of land / property (in that area??), it is not the source of the image, it is not providing any more information about the area or content of the image (well, currently it redirects to the root of the domain). Fact is, that there are accounts like COHObyVistaLandofficial, Vistarecidences, and Vista Residences Inc that are spamming this. Blacklist, remove the stuff that is unneeded, and consider to whitelist the links that are really needed. --Dirk Beetstra T C (en: U, T) 12:54, 2 March 2021 (UTC)
- Beetstra, sounds good. From my own investigation I am very doubtful that any of the links are needed (at least currently). Currently there's still similar types of spam happening on enwiki here. (Poor XLinkBot tried :(.) Perryprog (talk) 13:06, 2 March 2021 (UTC)
- And the Commons community works out what links they do and do not want, and how to deal with an editor with 1.6M edits. They should also express their opinion on the domains to build that larger consensus. Nothing holding enWP up from blacklisting now. — billinghurst sDrewth 13:12, 2 March 2021 (UTC)
- Billinghurst, this is a bit interesting—I hadn't noticed those uploads by Judgefloro (and yes, I did misunderstand your earlier comment—sorry!), and that may indeed change things. The current links that seem to be legitimately used on Commons is the camella one and the goldenhaven one (see their respective major wiki search). I do see only one addition of a Commons upload from one of the users listed that also included an external link; the rest were just promotional by way of text or the image themselves. There's also the attempted page creation on meta at Lumina. That means there's really been just one external link addition each on Commons and meta that was actually by one of the user's listed, while the rest have been on enwiki. Perryprog (talk) 14:07, 2 March 2021 (UTC)
- @Perryprog and Billinghurst: though I have very little hopes on spam that has already crossed the borders of one wiki, I would suggest that you report this to en.wikipedia's spam blacklist and we will see from there if that is enough. (Note, the page on meta was completely promotional). --Dirk Beetstra T C (en: U, T) 14:50, 2 March 2021 (UTC)
- Billinghurst, this is a bit interesting—I hadn't noticed those uploads by Judgefloro (and yes, I did misunderstand your earlier comment—sorry!), and that may indeed change things. The current links that seem to be legitimately used on Commons is the camella one and the goldenhaven one (see their respective major wiki search). I do see only one addition of a Commons upload from one of the users listed that also included an external link; the rest were just promotional by way of text or the image themselves. There's also the attempted page creation on meta at Lumina. That means there's really been just one external link addition each on Commons and meta that was actually by one of the user's listed, while the rest have been on enwiki. Perryprog (talk) 14:07, 2 March 2021 (UTC)
- And the Commons community works out what links they do and do not want, and how to deal with an editor with 1.6M edits. They should also express their opinion on the domains to build that larger consensus. Nothing holding enWP up from blacklisting now. — billinghurst sDrewth 13:12, 2 March 2021 (UTC)
- Beetstra, sounds good. From my own investigation I am very doubtful that any of the links are needed (at least currently). Currently there's still similar types of spam happening on enwiki here. (Poor XLinkBot tried :(.) Perryprog (talk) 13:06, 2 March 2021 (UTC)
- You misunderstand my comment. I am saying that it is not evident that the editing is out of scope for all wikis. I am seeing some allowance at Commons, especially with an account that has over a million edits for a portion of the domains. So it could be that the abuse is only occurring at enWP, especially noting difference in policies around paid editing between enWP and Commons. So for that list to be globally blacklisted it needs more than enWP's say so and hence a broader consensus, or we need to pare it down. — billinghurst sDrewth 18:20, 28 February 2021 (UTC)
- Billinghurst, I'm not sure that I agree—the link spam is clearly deliberate, and there is definitely some socking or WFH meat-puppetry going on here. However, I am OK with waiting a bit to see how the group will decide to continue their efforts in order to have a more informed decision as to what preventative measures should be taken. Perryprog (talk) 17:33, 28 February 2021 (UTC)
- ┌─────────────────────────────────┘
So reading all of this discussion, and reviewing everything again, these additions are generally promotional and violate enwiki's ELNOT rules but aren't necessarily spammy enough to merit a global blacklisting. Let's hand this off to enwiki and see how that goes. Also, I removed what may or may not have been Judgefloro's response - it was from an anon user and was written like it was supposed to be a legal verdict instead of something readable.
Defer to w:en:Mediawiki talk:spam-blacklist GeneralNotability (talk) 01:21, 8 March 2021 (UTC)
- Report created. I just realized I made it on the WikiProject Spam talk page, but hopefully that doesn't matter in this case. (I also don't want to move it again as COIBot is getting poked enough as it is.) Perryprog (talk) 03:16, 8 March 2021 (UTC)
Blacklisted on en.wikipedia now. I hope this solves it. --Dirk Beetstra T C (en: U, T) 06:06, 8 March 2021 (UTC)
et20slam.net and myinfo.pk
et20slam.net
myinfo.pk
User:Karenjonaa
User:182.185.25.11(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
User:59.103.96.180(IP tools: Google | WHOIS | domaintools | RBL | tools)
(spamhaus | projecthoneypot | malwareurl)
Spammed at enwiki, svwiki and ptwiki by User:182.185.25.11, User:Karenjonaa and User:59.103.96.180. EstrellaSuecia (talk) 14:43, 1 March 2021 (UTC)
- EstrellaSuecia, I'm not seeing myinfo.pk added by Karenjonaa (and no hits in COIBot), is that the right domain? GeneralNotability (talk) 01:35, 8 March 2021 (UTC)
- GeneralNotability No, that's probably correct. But it was spammed crosswiki by the IP-adresses (see deleted user talk pages), and the IPs also spammed the et20slam domain. Since Karenjonaa has spammed the et20slam domain for a long time I just figured they were connected. EstrellaSuecia (talk) 05:59, 8 March 2021 (UTC)
passport-photo.online
passport-photo.online
passportphotocodeuk.com
User:Passportphotos
Cross-wiki spam. See also Special:Diff/21211491. --SCP-2000 12:32, 11 March 2021 (UTC)
Proposed additions (Bot reported)
|
|
This section is for domains which have been added to multiple wikis as observed by a bot.
These are automated reports, please check the records and the link thoroughly, it may report good links! For some more info, see Spam blacklist/Help#COIBot_reports. Reports will automatically be archived by the bot when they get stale (less than 5 links reported, which have not been edited in the last 7 days, and where the last editor is COIBot).
|
COIBot
The LinkWatchers report domains meeting the following criteria:
- When a user mainly adds this link, and the link has not been used too much, and this user adds the link to more than 2 wikis
- When a user mainly adds links on one server, and links on the server have not been used too much, and this user adds the links to more than 2 wikis
- If ALL links are added by IPs, and the link is added to more than 1 wiki
- If a small range of IPs have a preference for this link (but it may also have been added by other users), and the link is added to more than 1 wiki.
COIBot's currently open XWiki reports
| ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Proposed removals
|
|
This section is for proposing that a website be unlisted; please add new entries at the bottom of the section.
Remember to provide the specific domain blacklisted, links to the articles they are used in or useful to, and arguments in favour of unlisting. Completed requests will be marked as See also recurring requests for repeatedly proposed (and refused) removals. Notes:
|
Discussion
|
|
This section is for discussion of Spam blacklist issues among other users. |