Wikipedia talk:WikiProject Spam/2020 Archive Jan 4

RameDirectory
See. --MarioGom (talk) 17:41, 7 January 2020 (UTC)
 * Now blocked. Thank you . --MarioGom (talk) 12:05, 8 January 2020 (UTC)

Erasblog
Obvious spam. --MarioGom (talk) 17:46, 9 January 2020 (UTC)

csrbox.org
Per the organization's FAQ, "The organizations are listed after preliminary screening and submission of on-boarding fee." In other words, it is an advert platform for organizations – mainly Indian corporations as far as I can tell. No need for Wikipedia articles to link to this. - Bri.public (talk) 23:17, 8 January 2020 (UTC)
 * to MediaWiki:Spam-blacklist. —&thinsp;JJMC89&thinsp; (T·C) 21:25, 10 January 2020 (UTC)

SEO domains group
I'm posting these together because they appear related to the same promoter(s). Some but little interwiki, users warned, additions reverted, low profile for now but may pursue. — Paleo Neonate  – 01:30, 30 December 2019 (UTC)
 * Punjabi newspaper with a history of COI issues, although not really spammed to main space, also linked by 103.41.26.60 (as well as girlsperiod.in).
 * Punjabi newspaper with a history of COI issues, although not really spammed to main space, also linked by 103.41.26.60 (as well as girlsperiod.in).
 * the last three to the MediaWiki:Spam-blacklist. —&thinsp;JJMC89&thinsp; (T·C) 21:32, 10 January 2020 (UTC)

Unlicensed Indian music websites


External link spamming. Some of these contain copyright violations, and some of these are just spam blogs. These sites were added by the same editor(s) who added djjaani.com, listed at. —  Newslinger  talk   11:07, 10 January 2020 (UTC)
 * to MediaWiki:Spam-blacklist. —&thinsp;JJMC89&thinsp; (T·C) 21:34, 10 January 2020 (UTC)

Websites added by Fahim1739


Spam blogs. —  Newslinger  talk   05:21, 11 January 2020 (UTC)

bloggingvibe.com


External link spamming. —  Newslinger  talk   11:31, 11 January 2020 (UTC)

datingreviews.online


External link spamming. —  Newslinger  talk   09:09, 11 January 2020 (UTC)


 * to MediaWiki:Spam-blacklist. --—  Newslinger  talk   11:32, 11 January 2020 (UTC)

phonenphoto.com


—  Newslinger  talk   12:28, 11 January 2020 (UTC)

Vikingo999, recurring ref spammer
User:Vikingo999 has been spamming publications for years. He keeps popping up in a variety of chemistry articles. I have tried to reason with him, but my recent check of his history shows that the problem is more pervasive. He/She doesnt listen to advice.--Smokefoot (talk) 08:03, 12 January 2020 (UTC)
 * I left a final warning, one more and you can report them to AIV. --Dirk Beetstra T  C 12:43, 12 January 2020 (UTC)

mobileprice-bangladesh.com


Special:Diff/935239449 —  Newslinger  talk   12:21, 11 January 2020 (UTC)


 * Reverted all additions and upped to a lvl3 warning (mostly for deceptively changing this report). Let's see if the user gets the message now. GermanJoe (talk) 12:28, 12 January 2020 (UTC)
 * Thanks for catching the change at Special:Diff/935414802. I've discussed this with the editor. —  Newslinger  talk   00:26, 13 January 2020 (UTC)

alsohephotel.business.site


The user also spammed links to a Google Developers documentation page about Google Analytics. Looks like a malfunctioning spambot. —  Newslinger  talk   05:28, 14 January 2020 (UTC)

External links added by CarSwap

 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2
 * User:Talk:49.178.44.2

Low-quality content blogs spammed over a longer period of time. The name of the account gives me the impression that multiple accounts are involved. —  Newslinger  talk   00:53, 13 January 2020 (UTC)
 * , I think an SPI might be worth a try to get the whole sockfarm, there are too many Dari(n)as and Mays here. One account links to Mobisystems, which I think I recall from quite some time ago.  —Dirk Beetstra T  C 15:21, 13 January 2020 (UTC)
 * Thanks for the heads up, . It gets even worse as the COIBot reports populate. We can file the SPI after most of the operation is mapped out. —  Newslinger  talk   13:55, 14 January 2020 (UTC)
 * Added more users and IPs. I don't think, , and are actually involved in the spam campaign, since they appear to be focused on the products described by the blogs, and not the blogs themselves. —  Newslinger   talk   23:42, 14 January 2020 (UTC)

The network appears to be fully mapped out. I've submitted the SPI at Sockpuppet investigations/CarSwap. —  Newslinger  talk   06:34, 15 January 2020 (UTC)
 * is unrelated to the rest, and I assume that and  are unrelated as well. No new accounts were revealed in the CheckUser scan, so I think we're finished here. —  Newslinger   talk   23:52, 15 January 2020 (UTC)


 * to MediaWiki:Spam-blacklist. Three years worth of spamming by this sockfarm, seem to be low quality blogs and similar sites.  Warnings have been issued early on.  (added 1 more IP .. one of the accounts filled their userpage with spam which I noticed to see if there were early warnings).  --Dirk Beetstra T  C 05:09, 16 January 2020 (UTC)

L'orage Productions


—  Newslinger  talk   08:24, 16 January 2020 (UTC)

pixelspeaks.photography


—  Newslinger  talk   08:26, 16 January 2020 (UTC)

bawafashayari.com


—  Newslinger  talk   08:27, 16 January 2020 (UTC)

braceview.com


—  Newslinger  talk   08:28, 16 January 2020 (UTC)

digihelper.in


—  Newslinger  talk   08:30, 16 January 2020 (UTC)

dailyradiogk.com


—  Newslinger  talk   08:30, 16 January 2020 (UTC)

thelyricshall.com


—  Newslinger  talk   08:32, 16 January 2020 (UTC)

bleap.in


—  Newslinger  talk   08:33, 16 January 2020 (UTC)

baghastudy.com


—  Newslinger  talk   15:05, 17 January 2020 (UTC)

la9y.com


—  Newslinger  talk   15:13, 17 January 2020 (UTC)

muzikdinledur.com


—  Newslinger  talk   04:35, 20 January 2020 (UTC)

web2py.org (impostor domain)


The domain web2py.org is an impostor domain added by. The correct domain for web2py is web2py.com. —  Newslinger  talk   07:25, 20 January 2020 (UTC)


 * . --Dirk Beetstra T C 07:47, 20 January 2020 (UTC)
 * Should I file a report for the global blacklist? The user added the domain once as, but I don't think this domain was spammed on other wikis. —  Newslinger  talk   08:04, 20 January 2020 (UTC)
 * .. persistence in replacing official domains with impostor site seems bad enough to me. Let's wait for the report.  --Dirk Beetstra T  C 08:18, 20 January 2020 (UTC)



Getting curious. --Dirk Beetstra T C 08:19, 20 January 2020 (UTC)

skardu.pk


The domain was added as the official website of Skardu and several other pages back in 2015, but it's just an unofficial blog. —  Newslinger  talk   11:41, 20 January 2020 (UTC)
 * , villages all over the world tend to be a problem there - they attract local websites, blogs, fora etc. Many villages do not have 'an official website' at all.  I do however see that this has been used extensively throughout our projects. Dirk Beetstra T  C 06:23, 21 January 2020 (UTC)

thrillophilia.com
Dating back to at least 2018, this link has been spammed by mostly throwaway accounts. They seem to be related to Sockpuppet investigations/Iamskindia as a few of these accounts have been blocked as socks in the investigation. Apparition11 Complaints/ Mistakes 08:57, 23 January 2020 (UTC)
 * to MediaWiki:Spam-blacklist. --Dirk Beetstra T C 09:30, 23 January 2020 (UTC)
 * Noting that there are several accounts more, dating back to 2015. It also has an appreciable cross-wiki aspect to this so maybe this needs to be taken to global level (i.e. consider ).  --Dirk Beetstra T  C 09:37, 23 January 2020 (UTC)
 * , It just got requested on meta .. blacklisting there. Dirk Beetstra T C 13:06, 23 January 2020 (UTC)
 * Nice. I was going to investigate deeper once I got a chance, but looks like I was beat to it. Thanks! Cheers! Apparition11 Complaints/ Mistakes 15:31, 23 January 2020 (UTC)
 * I blocked the remaining accounts. MER-C 21:04, 23 January 2020 (UTC)

Suspicious new articles (14 December)
Second last can of spam for the year. How time flies... MER-C 18:03, 14 December 2019 (UTC)
 * Bump for four weeks. MER-C 18:03, 25 January 2020 (UTC)

Credit and VPNs


This morning I reverted replacements on creditkarma by now I encounter replacing another link there, but they reverted an edit by whose other edits resemble that of the first one (and anyway doesn't seem to be 'far away' form the first one). Lets see some reports. --Dirk Beetstra T C 13:57, 26 January 2020 (UTC)



Instant success. --Dirk Beetstra T C 13:59, 26 January 2020 (UTC)



There are no coincidences. --Dirk Beetstra T C 05:56, 27 January 2020 (UTC)



On the same server, guess we are done here. --Dirk Beetstra T C 07:09, 27 January 2020 (UTC)


 * to MediaWiki:Spam-blacklist. --Dirk Beetstra T C 07:11, 27 January 2020 (UTC)

Globe Elections UN spam
As per the discussion here and this. The main website has been already blacklisted, but the issue is that they keep adding links from their own YouTube account. Impru 20 talk 09:16, 27 January 2020 (UTC)


 * We can blacklist individual youtube videos .... --Dirk Beetstra T  C 11:12, 27 January 2020 (UTC)
 * Spam is persisting under these other IP accounts:
 * I have updated the ANI thread with the relevant info on this, as well as further IP accounts which could "awake" at any time. Note that these are now referencing the website as plain text in order to skip the blacklist. Impru 20 talk 15:20, 28 January 2020 (UTC)
 * , might be a case for an edit filter if they're sneaking it in as plain text. creffpublic  a creffett franchise (talk to the boss) 15:22, 28 January 2020 (UTC)
 * I have updated the ANI thread with the relevant info on this, as well as further IP accounts which could "awake" at any time. Note that these are now referencing the website as plain text in order to skip the blacklist. Impru 20 talk 15:20, 28 January 2020 (UTC)
 * , might be a case for an edit filter if they're sneaking it in as plain text. creffpublic  a creffett franchise (talk to the boss) 15:22, 28 January 2020 (UTC)
 * , might be a case for an edit filter if they're sneaking it in as plain text. creffpublic  a creffett franchise (talk to the boss) 15:22, 28 January 2020 (UTC)

bill-of-rights.angelfire.com spam
After reverted the removal of an external link s/he added to 2020 Democratic Party presidential debates I went to his/her talk page to add a friendly spam warning only to discover two other serious spam warnings (from 2016 and 2018) already present. Glancing through Cyrusep's contribs they seem largely geared toward promoting the website bill-of-rights.angelfire.com, possibly in conjunction with other usernames (given the solitary edit to Mike Pompeo merely corrects a url that was evidently already present). I think I'm supposed to report the matter here, but I don't know what if any next steps are appropriate (or, for that matter, if I've over-escalated).Gambling8nt (talk) 04:40, 30 January 2020 (UTC)

Cloud mining spam


Pushed to cloud mining. —Dirk Beetstra T C 05:18, 31 January 2020 (UTC)


 * , cross-wiki problem. --Dirk Beetstra T C 08:49, 31 January 2020 (UTC)