User:Delicious carbuncle/spam stuff
Appearance
Luna Musik/Guzman Construction
[edit]See also Special:Contributions/75.153.46.151. Regards. Delicious carbuncle (talk) 15:11, 3 September 2008 (UTC)
- OK, thanks. That's very relevant information and changes how we handle this -- see Wikipedia talk:WikiProject Spam#Luna Musik Management, Guzman Construction.
- Whenever you encounter a spammer, add a tracking link on his/her page to the spam domain(s). That makes it easy to find sock IPs.
- Again, thanks very much. --A. B. (talk • contribs) 15:20, 3 September 2008 (UTC)
- I'd be happy to - is there a template? Delicious carbuncle (talk) 15:28, 3 September 2008 (UTC)
- Again, thanks very much. --A. B. (talk • contribs) 15:20, 3 September 2008 (UTC)
- I add the following:
- Always: a "live link" to the actual site: http://example.com (Contrary to some fears, this doesn't buy any search engine favor for the spam domain). Adding this link means this spam account page show up if someone uses the Special:Linksearch page to look for other instances; for example, click on this wikilink and you'll see this talk page on the list because of the live link above:
- Special:Linksearch/*.example.com
- Often spammers use multiple accounts and you don't know there's a real problem until you see the cross-account pattern.
- A list of domains adding this link. I use these special spam investigation templates but that's not critical:
- {{IPSummary}} … example:
- 127.0.0.1 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
- {{UserSummary}} … example:
- A. B. (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)
- {{IPSummary}} … example:
- Optional: add {{LinkSummary}} for each domain … example:
- example.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com
- Optional: If you poke around and find any related domains, list those, too. Don't list them though unless you're certain the same person controls them. One way you can tell: follow the money. If the spammer uses Google ads, the Google ad links will have an embedded referral code prefaced by ca-pub; that's the account Google sends the ad revenue check to.
- Here's the link embedded in a Google ad on one spammer's page:
- http: //pagead2.googlesyndication.com/pagead/iclk?sa=l&ai=Bef_BV7S-SJSyNJbazQXI8vGTDfTTtVuKk47WBMCNtwGA6jAQARgBILmehgcoBDgAUP6v0-r-_____wFgybbIh-CjtBCyARR3d3cudGhla GlwaG9wb3N0LmNvbboBCTcyOHg5MF9hc8gBAdoBTWh0dHA6Ly93d3cudGhlaGlwaG9wb3N0LmNvbS8yMDA4LzA4L2Fs YnVtLXJldmlldy1ob29kdHJlYXNvbi1ieS1ueW9pbF8xMy5odG1syAKM_LAEqAMBsAOSlaAGyAMHiAQBkAQBmAQA&num=1&adurl=http:// clickserve.dartsearch.net/link/click%3Flid%3D43000000077783491&client=ca-pub-1294607511457798&nm=4
- Alternately, if you can usually click on "Ads by Google" and it will take you to a page about their Adsense program. Once again there's an embedded referral code:
- http: //services.google.com/feedback/abg?url=http: //www.relianceinsider.com/&hl=en&client=ca-pub-2213215412374142&done=1&adU=+&adT=Reliance+Reliance&adU=++&adT=Reliance+IPO&adU=+++ &adT=Reliance+India+Mobile&adU= ++++&adT=Reliance+Infratel:
- {{LinkSummary}}'s AboutUs.org link takes you to a page that includes bot-produced guesses as to related domains but these are not definitive. That page will also have a "What links here" link in the left column that lists additional suspects. The domaintools link gives more definitive information as to who owns the domain; on the other hand, its "Related Sites" list is usually wrong and a waste of time. Note that tracking down everything with AboutUs.org can be very time-consuming and is very optional.
- Here's the link embedded in a Google ad on one spammer's page:
- Always: a "live link" to the actual site: http://example.com (Contrary to some fears, this doesn't buy any search engine favor for the spam domain). Adding this link means this spam account page show up if someone uses the Special:Linksearch page to look for other instances; for example, click on this wikilink and you'll see this talk page on the list because of the live link above:
- I add the following:
- Here's an example of tracking data I added to a spammer page: [1]. Do not use "subst" with any of these templates. If you don't have much time, at a minimum add a live link.
- If the spammer is on his 3rd warning or worse, I list it at WT:WPSPAM. The WikiProject Spam team seeks to identify and stop especially problematic spammers that ignore requests to stop. Our primary tools are the spam blacklist and XLinkBot; blocking usually doesn't do much since spammers often just switch accounts or IPs. WT:WPSPAM is also helpful if you're in a rush and don't want to spend much time on the spammer.
- If this is just a first or second warning and the spammer's used no other accounts, I may just use a live link since a full investigation is time-consuming and most spammers stop after one or two warnings. Instead, I spend most of my spam-searching time perusing blocked spam accounts to see if their domains should also be blacklisted: Special:IPBlockList