[ SmokeDetector | MS ] Username similar to website in answer: Problems installing Julia language by Sonu Sharma on askubuntu.com

[ SmokeDetector | MS ] Linked punctuation in answer: How I do click button after that my tab will active? by คลิปเกย์ฟรี ฟรี on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in URL, link at end of body, pattern-matching website in body: And thousands and thousands and thousands by sadvchvxsa on askubuntu.com

tpu- by Tetsuya Yamamoto

tpu- by Ferrybig on How I do click button after that my tab will active? [MS]

@SmokeDetector Even the article is very large, most essential parts should be included in the post.

[ SmokeDetector | MS ] Few unique characters in answer: How do we Change PropertyName of Linq expreesion? by Pethani Vshal on stackoverflow.com

tpu- by Tetsuya Yamamoto

[ SmokeDetector | MS ] Luncheon meat detected: Convert from unknows string to ASCII in VB.net by Winda Sari Elisabeth Siburian on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in body: deletedeletedeletedeletedeletedelete by Fade to Grey on stackoverflow.com

fp- by Tetsuya Yamamoto on Convert from unknows string to ASCII in VB.net [MS]

fp by Stephen Kennedy on Convert from unknows string to ASCII in VB.net [MS]

tp- by Tetsuya Yamamoto

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +1 more: mumybear.com/rapid-tone-shark-tank/ by user832771 on askubuntu.com

tpu- by Tetsuya Yamamoto

[ SmokeDetector | MS ] Bad keyword in title: Have You Tried Smartessay Writing Service? by Roberto Xl on superuser.com

tpu- by PeterJ

had spam flag declined on this one metasmoke.erwaysoftware.com/post/120492

[ SmokeDetector | MS ] Korean character in title, mostly non-Latin title: 강남오피걸 강남유흥≒ 【사이트www≡┠jj┨bbu.com】 강남휴게텔ꉺ 강남건마ᐷ 강남op 강남오피 강남스파 강남kissᐵ 제이제이 강남오피ꅷ 강남안마 by 185cs27k on askubuntu.com

tpu- by PeterJ

tp by Cerbrus on How I do click button after that my tab will active? [MS]

@StephenKennedy deleted by owner 31 mins ago

That's peculiar

[ SmokeDetector | MS ] Luncheon meat detected: Unable to process multipart/report data in Spring 5.0.1. It is only detecting multipart/form-data in the request by SuryaBhaskar on stackoverflow.com

@Cerbrus is that the question or the answer that was deleted by owner?

All I see is "This question was removed from Stack Overflow for reasons of moderation."

Taht's what it says on the answer. But that may be a result from the question being deleted.

hmm

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, pattern-matching website in body: e individual body flush out the byproducts of fat and by turnagebeverly on askubuntu.com

Either way, I modflagged the answer to make sue it's registered as spam.

tpu- by Cerbrus

cheers

@Cerbrus make sue?

Ah. "make sure"

Eh, yea

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: ozfacts.com/better-forskolin by wecvwecv on apple.SE

tpu- by JAD

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: convertidormp3.live/juveniles-wifisfuneral-mp3-song-download/ by reignsets on askubuntu.com

tpu- by PeterJ

[ SmokeDetector | MS ] Few unique characters in answer, mostly non-Latin answer: Arduino UNO generate number only once by BLOW ME DADDY on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in answer, luncheon meat detected, no whitespace in answer: Using event.target with React components by jbjbjsjs on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer: Why Selenium IDE is not officially supported in Google Chrome by achuthan muralidaran on superuser.com

tpu- by Stephen Kennedy on Using event.target with React components [MS]

tpu- by PeterJ

tpu- by suraj on Arduino UNO generate number only once [MS]

[ SmokeDetector | MS ] Korean character in title, mostly non-Latin body, mostly non-Latin title: ←오피쓰← 강남오피OPSS9닷COM 강남건마《 강남역오피》 강남역OP  강남역건마 강남OP 강남예약정보 " 강남강추 강남출장문의 by gennie santana on askubuntu.com

tpu- by suraj

@SmokeDetector k

@SmokeDetector alive n kicking

@SmokeDetector k

@SurajRao poof

[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user: What other RM methodologies are well know besides FMEA? by verism training on stackoverflow.com

[ SmokeDetector | MS ] Korean character in title, mostly non-Latin body, mostly non-Latin title: 건대찾아올땐 주소: ÓƤŜŜ2닷nEt,ん건대휴게텔 グ오피쓰セ건대역휴게텔 무한초이스 by silvers lady on askubuntu.com

tpu- by suraj on What other RM methodologies are well know besides FMEA? [MS]

tpu- by suraj

@SmokeDetector k

[ SmokeDetector | MS ] Bad keyword in title, potentially bad keyword in body: What is best Designing and Development company in india by sedulous on ux.SE

[ SmokeDetector | MS ] Korean character in title, mostly non-Latin title, blacklisted user: 강남오피주소 ⊵제이제이www☛jjbbu.COM⊴ 강남휴게텔 ₯강남유흥 강남건마ᖫ 강남오피 강남립카페 ₢강남키스방 강남스파ᒤ 강남kissᐵ 강남안마 by 185cs27k on askubuntu.com

tpu- by PeterJ on What is best Designing and Development company in india [MS]

tpu- by PeterJ

tp by Stephen Kennedy on What other RM methodologies are well know besides FMEA? [MS]

@SmokeDetector k

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: www.nutritionfit.org/rapid-tone-diet/ by Formlee71 on drupal.SE

!!/watch jibbu\.com

tpu- by PeterJ

@SmokeDetector got the link from the title

@AJ You don't have code privileges, but I've created PR#2185 for you.

@SmokeDetector replace "i" with "j" here. cc @tripleee

@tripleee github.com/Charcoal-SE/metasmoke/issues/441

Looks like triplee is going to wake up to too many inbox notifications. :P

[ SmokeDetector | MS ] Link at end of answer, blacklisted user: JavaScript no response with validation by คลิปเกย์ฟรี ฟรี on stackoverflow.com

tpu- by PeterJ

@SmokeDetector k

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, +1 more: Ketone for Weightloss – Natural Extract for Quick Weight Loss! Legit or Scam? by ketoneus on superuser.com

tpu- by PeterJ

tp by Stephen Kennedy

Merged SmokeDetector #2185.

@AJ done

CI on f387b72 succeeded.

[ SmokeDetector ] SmokeDetector started at rev b3e2474 (metasmoke: Merge pull request #2185 from Charcoal-SE/auto-blacklist-1526983217.150228 --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 13579.

@angussidney thanks

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.nutritionfit.org/rapid-tone-diet/ by gukofuguh on askubuntu.com

tpu- by Mithrandir

[ SmokeDetector | MS ] Blacklisted website in body: what are some good biology projects? by joejonsme on biology.SE

[ SmokeDetector | MS ] Username similar to website in answer: Installing Julia v0.5 on Ubuntu 16.04 while v0.6 is installed by Sonu Sharma on stackoverflow.com

[ SmokeDetector | MS ] Toxic answer detected: With which spell did Harry Potter kill Voldemort? by Tamoghna Maitra on scifi.SE (@Mithrandir)

naa- by Mithrandir

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, body starts with title and ends in URL, pattern-matching website in body: CBD Hemp Oil cool squeezed from hemp seeds by anas faiz on graphicdesign.SE

@SmokeDetector why

@angussidney Post - Username Sonu Sharma similar to sonusharma, ratio=1.0

tpu- by angussidney

@SmokeDetector f

tpu- by angussidney on what are some good biology projects? [MS]

[ SmokeDetector | MS ] Misleading link: mkdir with subfolders working in terminal but not from python by spejsy on stackoverflow.com

fp by Stephen Kennedy

fp- by Ferrybig

Regarding the last biology spam: Please make sure that science buddies is not on the block list. This URL is legit. That'S why I removed this URL from the posting before I wanted to report it...

@Chris We don't automatically block things that come up in spam

@Chris looks like it's not on the list. Personally, I flagged the post as spam due to the vidzzy link. Anyway, thanks for the heads up, I'll leave a note on the post so that we don't do so in the future.

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected: How to use F1-F12 keys with MacBook? by Thomas van de Erve on apple.SE

tpu- by angussidney

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, pattern-matching website in body: Straightforward rules for utilizing this supplement by ktyuoop on puzzling.SE (@Mithrandir)

[ SmokeDetector | MS ] Bad keyword in answer: Do mechanical techniques for penis enlargement work? by Harry2018 on skeptics.SE

tpu- by Mithrandir on Straightforward rules for utilizing this supplement [MS]

[ SmokeDetector | MS ] Potentially bad keyword in username: Why do laptops need fans but tablets don't? by John on superuser.com

fp- by ByteCommander

fp- by ByteCommander on Do mechanical techniques for penis enlargement work? [MS]

@user5389107 Ok. I wanted to be sure here.

[ SmokeDetector | MS ] Few unique characters in answer, luncheon meat detected, no whitespace in answer: How to stop a thread created by implementing runnable interface? by user9828213 on stackoverflow.com

tpu- by Stephen Kennedy

[ SmokeDetector | MS ] Potentially bad keyword in body: Daily automatic update of stock quotes via REST API and Cronjob. Or is there a more sophisticated way? by Julian Stark on wordpress.SE

fp- by iBug

[ SmokeDetector | MS ] Link at end of answer, potentially bad keyword in answer: First install of PHP on Windows blocked by Norton by Robert Williams on stackoverflow.com

tpu- by iBug

[ SmokeDetector | MS ] Potentially bad keyword in body: I have stored names in string from 2 different listboxes now which names i stored i want to double click on each players one by one by user9809942 on meta.SE

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +1 more: mumybear.com/luna-trim/ by nialar201 on askubuntu.com

fp- by iBug on I have stored names in string from 2 different listboxes now which names i stored i want to double click on each players one by one [MS]

tpu- by iBug

[ SmokeDetector | MS ] Korean character in title, mostly non-Latin body, mostly non-Latin title: 강남풀싸롱♠❴o❶o-2❶57-2385❵선릉야구장예약 강남매직미러추천 강남물좋은곳 강남야구장위치 역삼동매직미러시스템 강남풀싸롱가격 선릉야구장문의 역삼풀싸롱주소 by 강남풀싸롱010_2157_2385 on askubuntu.com

fp by PeterJ on I have stored names in string from 2 different listboxes now which names i stored i want to double click on each players one by one [MS]

tpu- by iBug

!!/report martialarts.stackexchange.com/a/8300

[ SmokeDetector | MS ] Manually reported answer: Judo mats: any certification? what characteristics should one look for? by judomats india on martialarts.SE

tpu- by iBug

!!/test judomats

> Would not be caught as a post, title or username.

!!/watch judo\W?mats

@iBug Added judo\W?mats to watchlist

Oh no!

!!/unwatch judo\W?mats

@iBug No such item judo\W?mats in watchlist.

not pulled...

[ SmokeDetector ] SmokeDetector started at rev 246b0b8 (SmokeDetector: Auto watch of judo\W?mats by iBug --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 12948.

!!/unwatch judo\W?mats

@iBug Removed judo\W?mats from watchlist

CI on f9f78a9 succeeded. Message contains 'autopull', pulling...

Restart: API quota is 12932.

@AJ not that many (and it's lunchtime here)

@Henders thanks!

@tripleee I guess UK?

@AJ nah, very late lunchtime

[ SmokeDetector | MS ] Bad keyword in body: Scrape google search result by Swapnali on stackoverflow.com

fp- by tripleee

@AJ speaking of which, can you shed any light on whether somebody in the greater Delhi region would be able and willing to coordinate with subcontractors on the Pakistani side of the border? I have some speculation about the ostensibly Indian spam gang and a possible Pakistani competitor, but my uninformed speculation could probably be clarified by someone with (pseudo-) local insights ... IIRC you are based in the region?

[ SmokeDetector | MS ] Korean character in title, mostly non-Latin body, mostly non-Latin title, blacklisted user: ⛭강남풀싸롱⛭❴o❶o-2❶57-2385❵강남매직미러추천 역삼풀싸롱문의 강남야구장가격 선릉풀싸롱시스템 선릉매직미러위치 70명미러초이스 강남풀싸롱예약 선릉야구장전화 by 강남풀싸롱010_2157_2385 on askubuntu.com

tpu- by tripleee

triplee the interpol force against spam

meh, not exactly, but any intelligence we can scrape together will probably improve our understanding of what's going on and hopefully eventually help shape our response

this may be about to break terribly

CI on df8a46a failed.

@ArtOfCode "this" as in Metasmoke?

@SmokeDetector called it

the beef is in the metasmoke.py change I guess?

@tripleee I give it 5 months before a charcoal branded SWAT team raids spam sweatshops around the world.

@tripleee I don't think I touched metasmoke.py

the merge commit contains a change but I guess you merged somebody else's change then

shrug

CI on e164666 succeeded.

oh, good ole flake8

!!/pull

@user5389107 I need photos of that

[ SmokeDetector ] SmokeDetector started at rev e164666 (ArtOfCode-: Flake) (running on ArtOfCode/EC2)

Restart: API quota is 12612.

well it hasn't died yet

ping me when it does

@tripleee I am in the same country, but not in the same region. I have contacts there, but all of them are developers.

Will that help?

@tripleee There are many digital marketing companies in Delhi region and Delhi-NCR (including Gurugram and Noida) is one of the top IT hubs in India. From what I know about digital marketing, it is possible that they have been getting some amount for each link. Since we frequently delete posts containing such links, they'll not be paid because they don't have anything to show.

(contd.) A colleague of mine in previous organization has worked on a project where they have provided links on different sites provided by client himself (it was not spamming though). If the link gets invalidated or removed, client wouldn't pay.

So, I think this is the similar case here.

@AJ your personal opinion is probably sufficient, do you think it makes sense for a sweatshop operator in Delhi to have subcontractors in Faisalabad and Rawalpindi? or would you guess they are competitors, or a competitor with operations in multiple cities in PK?

Since they will not get paid, they'll try to post more and more links in any way they can (you have to pay for the salaries).

from my ignorant European perspective, I would expect there to be some animosity across the border which bends my guess more towards a competitor, but I don't pretend to have an informed opinion

@tripleee No. I don't think it makes sense. Transferring money from India to Pakistan isn't easy because that'd be suspicious unless you use a third party payment method like Paypal. They might be competitors in my opinion.

@AJ well, thanks, that basically vindicates my speculation (but we should recognize that this is still just mere speculation)

@tripleee From what I know about them, they can also provide links for significantly lower rate.

@AJ you mean to say these things would be cheaper in Pakistan?

@tripleee Possibly. Look at the exchange rate.

on the other hand if you have local know-how and an organization in Delhi and lots of cheap labor there, it's more convenient to just stay where you are

@tripleee One more thing. They could also be freelancers.

[ SmokeDetector | MS ] Link at end of answer: how can i validate this emaild "email@-domain.com" with regex by pankaj jha on stackoverflow.com

fp- by tripleee

@tripleee I have never opened those spam links (I might get on radar of my organization for that). So I have to ask, where are those companies selling these products located?

fp by Stephen Kennedy

@AJ I don't have a good view into the locations, the ultimate order forms look vaguely like they go to Western web sites but the order forms too are snowshoed across probably hundreds of individual domains

we currently don't have tooling to track sites which are not mentioned in links in archived posts in Metasmoke

but Halflife attempts to fetch the order form when it can find one

it would be nice to be able to track the destination domains too

@tripleee halflife?

[ SmokeDetector | MS ] Potentially bad keyword in body, repeated URL at end of long post: Online ESTA visa application website. Apply for ESTA visa now by user390760 on travel.SE

but I would be very unsurprised if they turned out to be registered by a large number of what looks like sweatshop workers in the Delhi metropolitan area

tpu- by PeterJ

!!/blacklist-website supplementstruera\.com

[ SmokeDetector | MS ] Bad NS for domain in title, bad keyword in title, blacklisted website in title: newsletter4health.com/greenlyte-forskolin/ by ermwariz on apple.SE

@tripleee That pattern looks like it's already caught by Pattern-matching website in body, Bad ns for domain in body, Bad ns for domain in answer, and Pattern-matching website in answer; append -force if you really want to do that.

tpu- by tripleee

@AJ stackoverflow.com/c/charcoal/questions/185

Okay this is the point where it really might start breaking

!!/blacklist-website-force supplementstruera\.com

@tripleee Blacklisted supplementstruera\.com

for example,

CI on 125ff31 succeeded. Message contains 'autopull', pulling...

so nutritionfit.org is just a springboard with a click-through to an order form which is hosted on rapidtonediet.com

which is not a domain we have in Metasmoke

[ SmokeDetector ] SmokeDetector started in reverted mode at rev e164666 (ArtOfCode-: Flake) (running on ArtOfCode/EC2)

it's registered via a proxy called literally Whois Privacy Service so we don't know where the registrant is actually based

why reverted?

@tripleee Who those contact numbers shown in Whois data belong to? those who have purchased the domain?

but if the records of our spam domains are any indication, about 20-40% of these domains will have un-anonymized registrations where we can actually pin them to a geographic region

@AJ in this case no, they just show the contact information of the anonymity provider

[ SmokeDetector ] SmokeDetector started in reverted mode at rev 26844ae (ArtOfCode-: Error logging) (running on ArtOfCode/EC2)

@ByteCommander probably because it failed to start?

teward/Solar Flare received failover signal.

Restart: API quota is 19998.

this one is actually in Metasmoke but the co.uk registrations are basically anonymous too

ah, so it fell back two revisions...

and died

so... I have no idea how, but I got my EC2 server blocked from the SE API

this James Brown name is recurring but I think it's not particularly useful

@tripleee Have you tried to reaching out to owners of those sites via information provided on Contact Us page?

9 domains with this name in their registration record where we have it on file

metasmoke.erwaysoftware.com/data/sql/queries/…

@AJ nope, I don't visit spam sites if I can avoid it

and the contact information is fairly likely to be bogus anyway

@ThomasWard around?

but it's certainly worth exploring if you have adequate protections

chat.stackexchange.com/… shows more of these captured redirects

I think it's not his time slot yet...

he usually comes in later

so Halflife looks for a particular Wordpress template and if it's there, it can sometimes find the order form URL

@tripleee Does this link resolve for you?

I think we have established that the Wordpress template will not show you the order form if you are in the wrong region, and often even serve you a 404 if you are not the intended audience

so Halflife which runs in Amazon's EC2-US-East region (IIRC) will pick up North American order forms but often not be able to fetch those targeted at European audiences (or Asian for that matter; I don't know if such sites exist)

@AJ that particular proxy no, some others might work

oh wait no, that's an error from the proxy itself, it wants me to register apparently

thanks but I have a couple of proxies already

cool

but it's not like a proxy will necessarily protect you from various drive-by downloads etc

@tripleee oh

what I've been thinking is that Halflife should have a companion downloader running in different Amazon regions if US-East gets a 404

but that should probably be a separate microservice

Blazer / SQL folks, what can I do to produce a useful chart out of this one?

metasmoke.erwaysoftware.com/data/sql/queries/…

[ SmokeDetector | MS ] Potentially bad keyword in body: TinyMCE - local image uploade by Simplex RPG Engine employee on stackoverflow.com

!!/report bitcoin.stackexchange.com/a/75424

[ SmokeDetector | MS ] Manually reported answer: Explain this comment on nNonce from the bitcoin miner.cpp source? by Cathy Clement on bitcoin.SE

tpu- by tripleee

fp- by suraj on TinyMCE - local image uploade [MS]

CI on c708820 succeeded.

@tripleee within Blazer, you probably don't... What kind of chart are you looking for? Stacked bars? Lines?

@ArtOfCode I'm thinking stacked bars would be my preferred result but the real question I have is "did Puzzling start attracting more spam than before"

!!/watch btctradefarm\.com

@ByteCommander Added btctradefarm\.com to watchlist

[ SmokeDetector ] SmokeDetector started at rev 1461f7e (SmokeDetector: Auto watch of btctradefarm\.com by Byte Commander --autopull) (running on teward/Solar Flare)

Restart: API quota is 19884.

@tripleee probably easiest in that case to get a line chart of a single site

@ArtOfCode hmmm, I guess I could do the percentage of total spam for a particular site

Still alive thanks

Gone

@tripleee the answer is yes

@ArtOfCode thanks, whaddyaknow

still interested in percentage of total spam volume but I think I can manage

[ SmokeDetector | MS ] Bad keyword with a link in answer: Connection to two (or more) sharepoint lists with ADODB by user9828724 on stackoverflow.com

naa- by tripleee