Wikipedia talk:WikiProject Spam/2010 Archive Apr 1B

Page contents not supported in other languages.
Source: Wikipedia, the free encyclopedia.

Note: this is the second half of the page Wikipedia talk:WikiProject Spam/2010 Archive Apr 1 - another part of the archive is Wikipedia talk:WikiProject Spam/2010 Archive Apr 2

Adsense pub-6153640473971053

Spam pages
  • created solely to house links to faux official site dillmillgaye.in
Sites spammed
Related domains
Spammers

Collection of fansites masquerading as the official site.  Defer to Local blacklist

(The spam page has a history of deletions as a copyvio during the first spamming spree in Q2 2008. The deleted contributions of the spammers are important, but I am going by COIBot.) MER-C 08:29, 8 April 2010 (UTC)

Updated. MER-C 02:25, 14 April 2010 (UTC)

eliteweightlosspackage.com

links
accounts

Spamming of commercial link by multiple SPA accounts (using likely referral spam variations). --- Barek (talkcontribs) - 22:55, 13 April 2010 (UTC)

adrianmoran.com

links
accounts

Repeated promotional spamming by an edit with an apparent COI. --- Barek (talkcontribs) - 01:15, 14 April 2010 (UTC)

Russian art spam

  • redirects to
  • reported malware site
Spammers

 Defer to Local blacklist MER-C 08:28, 14 April 2010 (UTC)

allpakistan.org

Spam pages
Sites spammed
Spammers

MER-C 08:59, 14 April 2010 (UTC)

tripfilms.com

links
accounts

Ongoing linkspamming of "virtual tours" that are uploaded by members of the site. Video travel-guide type content. The site has no editorial control, no indication of being experts on the subject, and rewards users for each time their submitted video is viewed (referral COI issue). Combined with cross-wiki spamming, I believe that all links to this site are suspect. --- Barek (talkcontribs) - 15:29, 14 April 2010 (UTC)

If uploaders get a fee for every time their video is viewed (like associatedcontent and lulu), and it is cross-wiki, then I would say  Defer to Global blacklist .. --Dirk Beetstra T C 15:43, 14 April 2010 (UTC)
Thanks, I'll post there once I review the COIbot report. The uploaders don't get a cash fee, but they do get points that can earn rewards. The site's "about us" page states "Why upload your videos to Tripfilms? Besides sharing your travel stories and tips with friends, family, and other travelers, we’ll give you one point you can apply to rewards every time your videos are watched. Also, our top contributors get to travel on us as TripVloggers." --- Barek (talkcontribs) - 15:51, 14 April 2010 (UTC)

Added additional involved SPA accounts to the list from the COIBot report. --- Barek (talkcontribs) - 17:44, 14 April 2010 (UTC)

plus Added Now blacklisted on Meta. Thanks for rooting this one out. --A. B. (talkcontribs) 19:40, 14 April 2010 (UTC)
There are still a ton of those links out there on 20+ projects-- can someone clean them up? I've got to quit editing for now. --A. B. (talkcontribs) 19:44, 14 April 2010 (UTC)
I was working on cleaning up the links on this wiki earlier, but had to step away for a bit. I should be able to get back to working them down in a few hours. At that time, I'll also start cleaning up the links on the other projects. --- Barek (talkcontribs) - 23:33, 14 April 2010 (UTC)
I finished cleaning up the links from the article space, as well as from the other projects. --- Barek (talkcontribs) - 03:54, 15 April 2010 (UTC)

Spam warning templates for user talk pages on other Wikipedias and wikis

I've slowly been accumulating a list of warning templates to use on spammer pages on other Wikipedias and Wikimedia projects (Commons, Wiktionary, etc.). I've posted them on a user subpage on Meta-Wiki ("meta"):

It's so important to tag x-wiki spammers' talk pages on other projects. To be fair, they need to see the warnings before they get blacklisted out of the blue; some other projects are not good about warning spammers. As well, the editors on other projects need to see that a user or IP has spammed in the past.

Feel free to use the templates. Also, please update the page, as you find mistakes or come across more templates.
--A. B. (talkcontribs) 18:38, 14 April 2010 (UTC)

Cross-wiki spam cleanup tool

Maybe everyone else knows about this; I just came across it myself:

Copy the code from Mike's subpage to your monobook page on each project (such as User:A. B./monobook.js or w:ru:Участник:A. B./monobook.js). The script helps speed up link removal on other projects. --A. B. (talkcontribs) 19:49, 14 April 2010 (UTC)

cleantechnology-business-review.com

Spamming the above site, which (for one) is all about trying to sell high-end business reports. tedder (talk) 10:51, 12 April 2010 (UTC)

Followup: a previous discussion of this and related spam sites: Wikipedia talk:WikiProject Spam/2009 Archive Oct 1#Possible_spam_sites.3F. Perhaps time to ban "*-business-review.com". Thoughts? tedder (talk) 10:56, 12 April 2010 (UTC)

Relisting:

This is massive, maybe this should first be sought out in full, but I would suggest then a swift  Defer to Local blacklist (or maybe even a  Defer to Global blacklist). I will poke COIBot for the reports on these, lets see what else comes up. --Dirk Beetstra T C 13:45, 12 April 2010 (UTC)

NOTE: I see this is used as a reference as well, and I see many 'regulars' using these links (though I can't see if it is due to vandalism revert, or actual use; will have a look later in the reports). --Dirk Beetstra T C 13:54, 12 April 2010 (UTC)

Added "-business-review.com" to the blacklist, as well as cbronline.com. tedder (talk) 21:28, 16 April 2010 (UTC)

professays.com

Spam pages
Sites spammed
Spammers
  • Cross-wiki spammer, see [3]

 Defer to Global blacklist MER-C 08:20, 16 April 2010 (UTC)

indian-seo.com

Spam pages
Sites spammed
Spammers

MER-C 09:54, 16 April 2010 (UTC)

Signplanet and Chris Bilby

signplanet.net: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:frMER-C X-wikigs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: searchmeta • Domain: domaintoolsAboutUs.com


See also User_talk:MrOllie#Misplaced_block_attempt.

My handling of this one has been called into question, so I'd appreciate some additional eyes on this. Thanks. -

MrOllie (talk
) 13:47, 16 April 2010 (UTC)

Wftpserver saga goes on.

Wftpserver2010 (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)

Keeps on adding the software "Wftpserver" to the

(nudge me)
03:40, 17 April 2010 (UTC)

Previous incidents
Spam pages
Sites spammed
Related domains
Spammers
  • Cross-wiki spammer, see [4]
  • Cross-wiki spammer, see [5]
 Defer to Global blacklist. Keep us posted on this issue, I have a suspicion that blacklisting won't stop this spammer. MER-C 04:52, 17 April 2010 (UTC)

Sentry gun spam

I noticed this due to the bot picking up another link. After removal that editor stopped and started discussing, and complained about another link in the article. The article is about an automated gun, a Sentry gun, which technology is used in paintball as well, and the site spammed is plainly about the gun in paintball, and here totally inappropriate:

links

When XLinkBot started reverting the above 2, the url changed to:

users

Since the editors a) blatantly undo XLinkBot and other editors, and b) change urls when they notice the bot recognises their additions, I have already blacklisted these three. Reporting here since they seem insisting, and I think this will not be the last link they add. More will surely follow. --Dirk Beetstra T C 07:44, 9 April 2010 (UTC)

Now forums.overclockers.com.au/showpost.php?s=a3529a9debe024f049e81829dc8c9d21&p=11272810&postcount=31 (No linksummary, it sucks for these types of URLs.) MER-C 03:30, 10 April 2010 (UTC)
Continued. MER-C 04:09, 11 April 2010 (UTC)
  • redirects to paintballsentry.com
  • redirects to paintballsentry.com
  • Citation spammer, see [6]

Updated. MER-C 03:01, 18 April 2010 (UTC)

Adsense pub-1506132232460272

Iwebstudio (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam) AlphathonTM (talk) 21:23, 17 April 2010 (UTC)

Site list:
MER-C 02:58, 18 April 2010 (UTC)

Powder Blue Ltd spam on Wikipedia 2

Previous incidents
Sites spammed
Related domains
  • redirects to chamonet.com
Spammers
Registrant

Powder Blue
Bridgetts Farm Offices
Bridgetts Lane
Martyr Worthy
Winchester, Hants SO211AR
Great Britain

The assertion in the previous report of 92 domains being owned by these guys isn't quite correct - they manage domains on behalf of their clients. The spamming is restricted to the skiing domains actually owned by Powder Blue. MER-C 09:46, 18 April 2010 (UTC)

potatoricer.org.uk

Spammed link
Users

Some of the IPs were used several months ago, but the 82.178. range has been used over the last few days to add the spam link to Potato ricer. --bonadea contributions talk 07:05, 19 April 2010 (UTC)

 Defer to Local blacklist MER-C 08:09, 19 April 2010 (UTC)

Also

The spammer seems to think this is some kind of game - not that reverting their silliness takes more than a couple of seconds each time, but it's getting a bit old. More eyes on the article would be appreciated (it seems excessive to ask for page protection when it's just about a link that will be blacklisted soon anyway). --bonadea contributions talk 20:17, 19 April 2010 (UTC)

The external site is overly promotional, but even the content is dubious original research, using informal language,
WP:PEACOCK language, a misspelling, and inconsistent formatting. Far over the line of inappropriate external link. Piano non troppo (talk
) 20:34, 19 April 2010 (UTC)

Generic splog and referral spam

  • splog that spams
  • splog that spams via referral
Spammers

MER-C 08:30, 19 April 2010 (UTC)

thecurrentaffairs.com

Adsense ca-pub-8091361290845043

Spam pages
Sites spammed
Spammers
  • Citation spammer, see [7]

Made for AdSense. MER-C 08:49, 19 April 2010 (UTC)

halfpages.com

Adsense pub-4524759298778701
Google Analytics UA-6945336-X

Spam pages
Sites spammed
  • note unusual spelling
Spammers

MER-C 04:58, 20 April 2010 (UTC)

qdultfiendfinder.com

links
accounts

Link hijacking, inserting a site that redirects back to the official one using a referral code. --- Barek (talkcontribs) - 15:29, 8 April 2010 (UTC)

Added IP 125.236.130.25 due to continued link hijacking with misleading edit summary. --- Barek (talkcontribs) - 21:33, 11 April 2010 (UTC)
Added IP 125.236.171.228 - continued link-hijacking. Will submit a request at
WP:SBL. --- Barek (talkcontribs
) - 14:53, 14 April 2010 (UTC)

This is a typosquatting domain. MER-C 07:45, 15 April 2010 (UTC)

Added IP 125.236.130.86 ... will also update the SBL request. --- Barek (talkcontribs) - 14:53, 20 April 2010 (UTC)

Google Analytics question

In the source code of pages using Google Analytics there is a line that goes something like this:

var pageTracker = _gat._getTracker("UA-1234567-8");

How unique is the UA-XXXXXXX-Y number? I was wondering if two sites have very similar numbers (as in the following report) would imply that they are related, as with Adsense IDs. MER-C 04:52, 20 April 2010 (UTC)

I looked in my Analytics account, the -Y is common, the -XXXXXX is specific. So if you saw UA-123-4 and UA-123-6, they are the same. If you see UA-125-4, it is different. tedder (talk) 06:01, 20 April 2010 (UTC)
Excellent. Thanks for confirming my suspicions. MER-C 09:19, 20 April 2010 (UTC)

parkingminisite.net, medicalunderstanding.com

Just one warning to date but it bears watching. This spammer hit the Mesothelioma article -- a sure sign of bad-faith spam. (Mesothelioma and other asbestos cancer-related sites pay the highest paying Google AdSense ad revenues per click due to asbestos lawsuits in the USA).

Spam domains
Google AdSense ID: 2710920121768772
Related domains

Same AdSense ID or domain registration:

Possibly related domain

Same server

Spam accounts

--A. B. (talkcontribs) 14:48, 20 April 2010 (UTC)

Google Analytics UA-11227589-XX
Yep, articlescentral.org is related. MER-C 02:58, 21 April 2010 (UTC)

Aftek.com Spamming

Spam Articles

Spam Users

Spam Domains

History

For nearly a year, users have been spamming WP with EL's and have created numerous pages for company Aftek, using various different aliases including Aftek, Aftek Ltd, Aftek Limited and Aftek Infosys, all of which have been removed at least once by speedy deletes. User:Aftekology has been permanently blocked and several new users have recently sprung up continuing this EL spamming. At least two of these users are Aftek company representatives. Aftek has again been re-created and an AFD is currently underway for the second removal of this article at Wikipedia:Articles for deletion/Aftek. Calltech (talk) 00:15, 21 April 2010 (UTC)

Jayant Wagh - "Manager at Aftek". Added stuff I found. MER-C 02:44, 21 April 2010 (UTC)

topstudylinks.com

Adsense pub-4375565520723653
Google Analytics UA-5672495-XX

Spam pages
Sites spammed

topstudylinks.com: Linksearch en - meta - de - fr - simple - wikt:en - wikt:frMER-C Cross-wiki • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advancedCOIBot-Local - COIBot-XWiki - Wikipedia: en - fr - de • Google: searchmeta • Domain: domaintoolsAboutUs.org • Live link: http://www.topstudylinks.com

Spammers
  • Citation spammer, see [8]

MER-C 02:53, 21 April 2010 (UTC)

bestdogfooddiets.com

links
accounts

Spamming of non-notable blog onto multiple dog-related articles, continuing after multiple warnings. --- Barek (talkcontribs) - 19:09, 21 April 2010 (UTC)

heelsmart.com heelsstock.com

Goodmore (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam) new user doing spamlink edits only. Has had multiple warnings. Richard Harvey (talk) 07:44, 22 April 2010 (UTC)

MER-C 09:50, 22 April 2010 (UTC)

ukpb.co.uk

links
accounts

SPA account adding a commercial real estate link into multiple articles. --- Barek (talkcontribs) - 15:52, 22 April 2010 (UTC)

delongwine.com

link
accounts

Repeated re-addition of a link which fails WP:EL (a link to a wine tasting notes form witch contains a fairly obtrusive advertisement at the bottom of the form). Using a link to this particular form unfairly causes WP to place one retailer over others by choosing this form over any others. --- Barek (talkcontribs) - 21:45, 22 April 2010 (UTC)

User:Vinoscenti undid all the removals by Barek, and removed this thread. Not a sign of good faith. In combination with the failure to discuss, I will block this account as a spam-only account. --Dirk Beetstra T C 08:20, 23 April 2010 (UTC)

Discdish.com

accounts

Ann77 (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)

links

discdish.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:frMER-C X-wikigs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: searchmeta • Domain: domaintoolsAboutUs.com

User appears to be engaging in typical ref spamming to an unreliable source. Every edit that I can see has involved referencing this one website. Rehevkor 16:34, 22 April 2010 (UTC)

Google Analytics UA-13035120-X
Also:
Reverted. Thanks for the report. MER-C 02:21, 23 April 2010 (UTC)


Cheers, MER-C. Rehevkor 03:33, 24 April 2010 (UTC)

hebeigo.com

Spammers
  • Cross-wiki spammer, see [9]
  • Cross-wiki spammer, see [10]

 Defer to Global blacklist MER-C 09:06, 23 April 2010 (UTC)

76343.com

Spam pages
Sites spammed
Spammers

Noted for x-wiki potential. MER-C 06:28, 24 April 2010 (UTC)

Zeeshsoft SEO spam on Wikipedia

Spam pages
Sites spammed
Spammers

MER-C 09:33, 24 April 2010 (UTC)