Wikipedia talk:WikiProject Spam/2007 Archive Dec 2

Publisher Spam, Incisive Media Investments Ltd. (2)
Note: this company owns searchenginewatch.com and searchenginestrategies.com. Finding all the sock accounts, and methods of insertion will not all be obvious spam. I don't believe this is a complete list of sites ect., however I do believe this will take months to unravel the complexity of Incisive Media's integration within Wikipedia. --Hu12 12:10, 26 April 2007 (UTC)
 * Spam sock accounts

changed to


 * Incisive Media articles


 * Incisive Media
 * Risk Waters Group
 * Risk (magazine)
 * Computeractive
 * Computing (magazine)
 * IT Week
 * Legal Week
 * Computeractive
 * The Pensions Archive Trust
 * Personal Computer World
 * Post Magazine
 * Retirement Planner
 * Professional Pensions
 * Structured Products
 * The American Lawyer
 * Business press


 * Incisive Media sites

http://spam.re-world.com http://spam.structuredproductsonline.com http://spam.fxweek.com http://spam.baselalert.com http://spam.riskwaters.com http://spam.incisivemedia.com http://spam.incisivecommunications.com http://spam.cift.com http://spam.risk.net http://spam.asiarisk.com.hk http://spam.energyrisk.com http://spam.creditmag.com http://spam.life-pensions.com http://spam.opriskandcompliance.com http://spam.structuredproductsonline.com http://spam.risknews.net http://spam.riskbooks.com http://spam.journalofcomputationalfinance.com http://spam.journalofrisk.com http://spam.journalofcreditrisk.com http://spam.journalofoperationalrisk.com http://spam.imdreference.com http://spam.imdindex.com http://spam.insidemarketdata.com http://spam.irdonline.com http://spam.incisive-events.com http://spam.activehome.co.uk http://spam.computeractive.co.uk http://spam.gizmodo.com http://spam.pcmag.co.uk http://spam.pcw.co.uk http://spam.webactivemagazine.co.uk http://spam.whatpc.co.uk http://spam.accountancyage.com http://spam.bestpracticemagazine.co.uk http://spam.financialdirector.co.uk http://spam.managementconsultancy.co.uk http://spam.accountancyagejobs.com http://spam.computingcareers.co.uk http://spam.inqjobs.co.uk http://spam.computing.co.uk http://spam.computingbusiness.co.uk http://spam.channelweb.co.uk http://spam.theinquirer.net http://spam.itweek.co.uk http://spam.vnunet.com http://spam.marketing.vnu.co.uk http://spam.dealingwithtechnology.com http://spam.dwt-event.com http://spam.searchenginewatch.com http://spam.searchenginestrategies.com http://spam.watersonline.com http://spam.waters-conferences.com http://spam.hfitechnology.com http://spam.bjp-online.com http://spam.postmagazine.co.uk http://spam.legalweek.com http://spam.professionalbroking.co.uk http://spam.reinsurancemagazine.com http://spam.insuranceage.com http://spam.covermagazine.co.uk http://spam.insurance-directories.com http://spam.investmentweek.co.uk http://spam.intinv.com http://spam.realadviser.co.uk http://spam.masteringmoney.com http://spam.yourmoney.com http://spam.ymitv.co.uk http://spam.yourmortgage.co.uk http://spam.mortgageedge.co.uk http://spam.mortgagesolutions-online.com http://spam.unquote.co.uk http://spam.deutscheunquote.com http://spam.franceunquote.com http://spam.nordicunquote.com http://spam.beneluxunquote.com http://spam.southerneuropeunquote.com http://spam.hedgefundsreview.com http://spam.financialmarketingonline.com http://spam.wealthmagazineonline.com http://spam.ifaonline.co.uk http://spam.privateequityinsight.com http://spam.professionalpensions.com
 * Incisive Media site search



Seems to have begun again. A few new accounts added --Hu12 (talk) 09:29, 18 December 2007 (UTC)
 * I'd feed these to shadowbot. MER-C 12:53, 18 December 2007 (UTC)


 * Added more above--Hu12 (talk) 14:15, 19 December 2007 (UTC)

http://spam.parliamentaryyearbook.co.uk

 * Spammers

MER-C 12:41, 18 December 2007 (UTC)


 * Is there any reason to think it ] would not be a reliable source ? DGG (talk) 03:04, 19 December 2007 (UTC)
 * I didn't do the reverting, but it's fairly obvious that these links are blatant vanispamcruftisement. I wouldn't object to established editors citing these as references but when someone comes along with a username similar to the site spammed, adds nothing but links to that site and ignores warnings to stop... MER-C 03:25, 19 December 2007 (UTC)

Porn star impersonation sites
Had a couple sites turn up - will investigate for more sites owned by same spammer.
 * Account
 * Sites linked
 * Sites linked
 * Sites linked

Reported by Videmus Omnia Talk  03:12, 19 December 2007 (UTC)


 * This is ugly - it's our old friend the cookie-cutter porn linkspammer. Preliminary investigating shows he's apparently registered hundreds of impersonation sites using GoDaddy, with different IPs for each site. I've left a note on A.B.'s talk page, but I'm not sure how to proceed here. Videmus Omnia Talk  03:26, 19 December 2007 (UTC)
 * The links are apparently being added by IPs from Istanbul, and sites are registered to a company named Incoming America LLC. Videmus Omnia Talk  03:37, 19 December 2007 (UTC)
 * I'd start by monitoring for domains which resolve in 208.72.247.0/24, belonging to: MarquisNet in Las Vegas all three listed above are hosted in that range.-- Versa geek  04:09, 19 December 2007 (UTC)
 * Here are some harvested from the screens of the sites above:

for the bored spam-hunter to follow up :) -- Versa geek  04:23, 19 December 2007 (UTC)


 * Running a honeypot forum for PHSDL, I have some users submit pornangraphic pictures of celeberties. Some of the pcitures are real. Celeberties are people, and people have history. I do not know if WikiPedia should be a reposetory for this information, but news is news. And if we are to be viewed authoritative by Interent Global Village we should not be calling these people Spammers. How do we go about this? Do we set up one article page for these people to report their findings, so they do not stick their pornagraphicly related links to celeberty articles? How will we know if the picture or the story is true? This issue need to be examined, we are not Sock_puppetry for the celeberties. So we need to reference the good and the contreversial. Igor Berger (talk) 04:45, 19 December 2007 (UTC)
 * In this case, as in most cases - spam is defined not so much by the content of the site.. as by the behavior of the individuals adding the links.. In addition, typically all of the sites are owned by a single company or individual and run on the same server-farm.. add these factors together - and the big picture shows someone who is using Wikipedia to promote their own interests. This is the essense of spamming.. -- Versa  geek  05:10, 19 December 2007 (UTC)
 * Looks like we were following a parallel track - I dug up a bunch of sites (many of which duplicate yours) and put them in User:Videmus Omnia/Sandbox for now. Videmus Omnia Talk  05:17, 19 December 2007 (UTC)


 * Try the DomainsDB.net links in the spamlink template. Sometimes they're unhelpful but it looks like this time they may be on to something. Take the whitneywonders.com link for example:
 * This is the DomainsDB.net link:
 * http://www.domainsdb.net/whitneywonders.com
 * And here's the part I use:
 * "Reverse IP:	there are -1 domains on this IP, click here to get them all"
 * "Name Server: ns1.fantastichomemovies.com"
 * "ns2.fantastichomemovies.com"
 * "(click to any NS server to get all domains, hosted on this NS)"
 * Click on the first pair of links. I don't know why it always says "-1 domains" but it does
 * That gives a list of what else is hosted at that IP -- most of the time. Sometimes not -- I don't know why.
 * Note the list of porn-looking sites hosted at that IP (208.109.18.208)
 * Click on the second pair and that gives a list of domains served by those nameservers
 * Note the porn-looking domains names affiliated with ns1.fantastichomemovies.com
 * Sometimes an IP or nameserver hosts a zillion unrelated sites, in which case DomainsDB.net gives you the first 500 hits; these kinds of results pages are useless.
 * Important: sometimes lots of unrelated domains are hosted by a server or affiliated with a nameserver. And all those porn sites are not necessarily related; just as Yahoo hosts zillions of unrelated web sites, there are porn-hosting companies that host many different owners' sites. So always confirm via either whois, Adsense numbers, web page design or something else before blacklisting.
 * Gotta run. Will proof this post later. -- A. B. (talk) 13:14, 19 December 2007 (UTC)
 * DomainsDB.net also has a link for whois data, but it's usually not as accurate, extensive or current as that you get with domaintools (also in the spamlink template).
 * I suggest you also list the users adding these links using the IPSummary and UserSummary templates rather than the other traditional user and IP templates. Those two templates are optimized for spam investigations. For instance, you can rapidly run a x-wiki edit history that's faster than a x-wiki external link search. You can also Google search the IP or user name and sometimes find interesting instances of that user name or IP elsewhere on the net (lists of open proxies, username postings in SEO forums, etc).
 * The AboutUs.org wiki links in our spamlink templates give 3 useful pieces of information:
 * "Related domains". This is calculated by their bot based on inbound and outbound links, similar whois data, etc. The accuracy varies and you'll often see Wikipedia, Google, and other big names listed. Still it gives clues as to additional domains to check out with actual site visits or domaintools.
 * "What links here" (in the "useful links" drop down menu on the right). This shows what other AboutUs.org pages link to this one. This can be a somewhat different list from the "Related domains" list.
 * "History" tab at the top gives the edit history. A site-owner has the option to edit page data about his site and it can be interesting to see what other pages are in their user contribution history. Once in a blue moon, you'll see that the edits to a page were actually a competitor tampering with the page.
 * Note:The whois data on AboutUs.org pages is not as up to date as domaintools'.
 * I hope this helps. -- A. B. (talk) 15:40, 19 December 2007 (UTC)

I recommend blacklisting all these domains at meta if these sites appear to be infringing others' copyrights. Even if sites are not cross-wiki spammed, innocent editors often copy an en.wikipedia article to another language's Wikipedia and translate it, thus propagating our spamlinks elsewhere. Legally, I don't think we want to take a chance of copyvio links showing up on any Wikimedia project even if the site-owner's only spamming en.wikipedia. Also, I think those 1000s of other unrelated MediaWiki-using wikis that have adopted our blacklist would also appreciate this.

I'm sorry I'm tied up and can't help much more with this one. -- A. B. (talk) 16:03, 19 December 2007 (UTC)

Utarget Media

 * Spam pages

http://spam.urbanplanet.co.uk http://spam.financedaily.co.uk
 * Sites spammed

http://spam.keepthedoctoraway.co.uk http://spam.travelconnect.co.uk http://spam.justoverseas.co.uk http://spam.justcompetitions.co.uk
 * Related sites


 * Spammers

MER-C 10:00, 19 December 2007 (UTC) Adsense pub-2340979139322250

Logo‎ spammer

 * davidairey.com parked domain
 * logopond.com Adsense pub-2340979139322250
 * logomarket.com Adsense pub-pub-1642068985324361
 * etiziano.com
 * ci-portal.de
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts

--Hu12 (talk) 10:40, 19 December 2007 (UTC)

Spamming of related
yahoo ads partner 1486688007
 * http://spam.selfstorages.net
 * http://spam.onlinedating.bz
 * Accounts
 * Accounts
 * Accounts

--Hu12 (talk) 23:30, 19 December 2007 (UTC)

spam.sommelier.dn.ua

 * Spammers

MER-C 12:31, 19 December 2007 (UTC)


 * On Meta BL -- Herby talk thyme 13:25, 20 December 2007 (UTC)

http://spam.freefoto.ca
Adsense pub-2971406444944970
 * Accounts
 * Accounts

--Hu12 (talk) 03:16, 20 December 2007 (UTC)
 * Note &mdash; all images on this site are free and released under Creative Commons-sa-by-nc-3.0. &mdash; User: (talk) 04:14, 20 December 2007 (UTC)
 * "nc" being the issue. &mdash; User: (talk) 05:25, 20 December 2007 (UTC)
 * --Hu12 (talk) 03:59, 29 May 2008 (UTC)

Hacking blogger lifedork.com
At least two IPs adding links to a hacker-related blog. Warnings back to November on one talk page. Jackollie (talk) 06:14, 20 December 2007 (UTC)


 * Sorry I do not get it. How is this Website is a Spammer? I have looked at the blog and he talks about valid security points. So how is he Spamming WikiPedia. If you can explain it would be greatly appreciated, because maybe I do not know how the Spamming case incident insued. Igor Berger (talk) 07:13, 20 December 2007 (UTC)


 * User:Versageek I just refered back to what you sad to me earlier, that it is not the content but the behavior of the users that make them Spammers and put their domain on WikiPedia Spam list. I agree!!! But could it be that the contributers do not understand the WikiPedia system of notability? When I first sign up I tried to create an article on PHSDL and all hell broke lose, even Durova had to come down and explain to me how things are done. No A.B. told me that PHSDL should be made into an article and that I should come down and contribute to WikiPedia Spam project. Can it really be that some of the contributers who are Spanning do not know how to do White Hat SEO? Thank you, Igor Berger (talk) 07:55, 20 December 2007 (UTC)

http://spam.addictivebooks.com

 * Accounts
 * Accounts

--Hu12 (talk) 18:11, 20 December 2007 (UTC)

commercial spammer

 * http://spam.evertonfc.com
 * http://spam.aimforspain.com
 * http://spam.biomass-uk.com
 * http://spam.sparesaver.com
 * http://spam.revolution-bars.co.uk
 * http://spam.salestrainingintl.com
 * http://spam.heathcotes.co.uk
 * http://spam.aimforspain.com
 * http://spam.soldoncyprus.com
 * http://spam.systemc.com
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts
 * Accounts

--Hu12 (talk) 18:25, 20 December 2007 (UTC)

Referral site spamdal
Referral site: Spamsock: If we end up blacklisting, I suggest \btradedoubler\.com\/click\? - which will allow a link to the main page on the article TradeDoubler - but prevent it's use for referral link spam. -- Versa geek  21:51, 20 December 2007 (UTC)
 * (using substring: click?p(18710)a(1399565)g(280345) )
 * I support that. Had a past issue with an unrelated, however it is a wikimedia wide problem. seeWikipedia_talk:WikiProject_Spam/2007_Archive_Aug, should have meta BL resticted it a long time ago.--Hu12 (talk) 22:31, 20 December 2007 (UTC)

Storming Media LLC Spamming

 * //spam.legistorm.com Adsense pub-5159231827098763


 * http://spam.stormingmedia.us


 * http://spam.stormingmedia.com


 * http://spam.stormingmedia.co.uk


 * http://spam.patentstorm.us Adsense pub-4613161156835561
 * Accounts
 * Accounts

→Storming Media LLC STORMING-MEDIA-LLC 505 links from Lyoshka, 151 from IP 74.93.192.118, with no other edits other than legistorm.com. The others are spam only accounts, whith a pattern of starting article based on the link (with no other edits). (91 remain) --Hu12 (talk) 00:28, 19 December 2007 (UTC)


 * Someone has just opened a relevant, and sure to be heated, discussion at WP:ANI. It would be much appreciated to get some calm, unbiased evaluations over there from experienced Project members. Specifically, is legistorm.com a site that should have been blacklisted? Thanks in advance for your analysis and opinions. — Satori Son 21:17, 19 December 2007 (UTC)


 * Thanks for making us aware. I'm sorry to see Guy getting lynched over this; I put in my 2 cents at WP:ANI. -- A. B. (talk) 23:00, 19 December 2007 (UTC)


 * See now MediaWiki talk:Spam-blacklist. --Hu12 (talk) 18:48, 20 December 2007 (UTC)
 * The pitch is boiling and chickens are being plucked. -- A. B. (talk) 19:00, 20 December 2007 (UTC)
 * Avoid angry mastodons--Hu12 (talk) 23:29, 20 December 2007 (UTC)

FYI, a Request for Comments has been opened about the removal of legistorm.us from the local spam blacklist: Your inputs are invited. -- A. B. (talk) 22:26, 21 December 2007 (UTC)
 * MediaWiki talk:Spam-blacklist

Older related discusions;
 * Wikipedia_talk:WikiProject_Spam/2007_Archive_Dec_2
 * Administrators%27_noticeboard/IncidentArchive342
 * Administrators%27_noticeboard/IncidentArchive342
 * Administrators%27_noticeboard/IncidentArchive343
 * MediaWiki_talk:Spam-blacklist/archives/January_2008



Returning spammer. There now is 783 legistorm.com links--Hu12 (talk) 23:59, 6 November 2012 (UTC)

Patni Computer Systems Ltd.

 * Articles

Patni Computer Systems Narendra Patni
 * http://spam.patni.com
 * Accounts
 * Accounts

→Patni Computer Systems Inc      --Hu12 (talk) 22:58, 21 December 2007 (UTC)

Wedding dress spam
Account



Sites spammed



This account added about 30 spam links altogether, and nearly all have been reverted. Adding these links seems to be his only activity. The editor was still active today. EdJohnston (talk) 18:59, 22 December 2007 (UTC)
 * Both sites are definatly connected to a single owner, Adsense pub-2068997676225300 --Hu12 (talk) 19:50, 22 December 2007 (UTC)

Yeigo Communications (Pty) Ltd
Yeigo
 * http://spam.yeigo.com
 * Accounts
 * Accounts

--Hu12 (talk) 06:45, 23 December 2007 (UTC)

spam related
Adsense pub-3482288747951847


 * http://spam.voip-telephone.com
 * http://spam.4certificates.com
 * http://spam.broadbandmobilephone.com
 * Accounts
 * Accounts
 * Accounts
 * Accounts

--Hu12 (talk) 06:55, 23 December 2007 (UTC)

http://spam.csgsindia.com
Adsense pub-4625031504195728
 * Accounts
 * Accounts

--Hu12 (talk) 08:45, 23 December 2007 (UTC)

Arontac Systems Ltd

 * http://spam.projecthand.com


 * http://spam.arontac.com
 * Articles created
 * Articles created

Projecthand ProjectHand


 * Accounts

--Hu12 (talk) 10:13, 24 December 2007 (UTC)

http://spam.mcnmagazine.com
Myiplayground
 * Accounts
 * Accounts

--Hu12 (talk) 10:28, 24 December 2007 (UTC)

http://spam.mappery.com
Adsense pub-2868140543533702
 * Accounts
 * Accounts

--Hu12 (talk) 11:38, 24 December 2007 (UTC)

http://spam.clubbingabroad.co.uk http://spam.clubbingabroad.com



 * Spammers

MER-C 12:00, 24 December 2007 (UTC)

heraldry-online.org.uk

 * Accounts
 * Accounts

Personal website, --Hu12 (talk) 12:45, 24 December 2007 (UTC)
 * The heraldry Online site show the results of collated information regarding the heraldry associated with places or particular surnames. There is no financial gain from the site nor is there any attack or criticism of others listed.  --Heraldic 12:08, 6 January 2008 (UTC)  —Preceding unsigned comment added by Heraldic (talk • contribs)
 * See --Hu12 (talk) 14:24, 7 January 2008 (UTC)