FP counts have been growing tremendously with the anti-troll regexen metasmoke.erwaysoftware.com/data/sql/queries/…

is there an off-by-one in that chart too? how can it find "week of May 28" when it's only the 23rd?

@tripleee That regex (and all the combination of all the anti-troll regexes) did produce a considerable number of FP, but have been tightened to produce less, but still significant. The portion you're looking at evaluates to (?:screw|fuc?k|kill)\W*your?\W*sel(?:f|ves). However, "kill themselves" is actually something it's supposed to catch. If we should be catching that is another question. I'll take another look at it (and others) to see if they can be tightened.

sure, thanks

FPs which we only see in this room are a limited problem, but having a high FP rate in other rooms is problematic for our credibility

I don't think there is a way to estimate that through SQL /-:

I was under the impression that things that are only detected by a watch were reported in just CHQ.

[ SmokeDetector | MS ] Bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, blacklisted website in body, +4 more: check outwww.supplementmakehealthy.org/vera-slim-weight-loss/ by user907847 on superuser.com

tpu- by Tetsuya Yamamoto

!!/report superuser.com/a/1325160/512106

[ SmokeDetector | MS ] Manually reported answer: Browsing speed is fast, but download speed is 0 by Sameer on superuser.com

tpu- by Tetsuya Yamamoto

[ SmokeDetector | MS ] Link at end of body, link following arrow in body: I have e-commerce website so which SSL better for my website? by Manimeghla Elumale on superuser.com

tpu- by PeterJ

@SmokeDetector k LOL Translation: Vote Narendra Modi in the next election, else browising speed will be reduced.

@AJ As I thought... even don't know the entire text because uses code-switching between (Urdu or Hindi?) & English.

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, body starts with title and ends in URL, link at end of body: Greenlyte Keto You recognise the worst by chiopna12 on askubuntu.com

@AJ Google translate gives a much more watered-down translation, that doesn't make it as clear that they are pushing a point of view.

tpu- by Makyen

@SmokeDetector k

@Makyen Google Translate didn't take "varna" (else) into account. So, it's not really a valid translation.

@TetsuyaYamamoto Use the Detect Language feature.

Morning

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +4 more: nutrahealthtrimsite.com/turmeric-slim/ by kujdsjad on english.SE

sd k

tpu- by Tetsuya Yamamoto

@user5389107 morning!

are you reconsidering your decision to cut yourself loose or am I rubbing it in?

I'm not as active as I was but that doesn't mean I'm gone entirely

sure, good to have you here anyway!

[ SmokeDetector | MS ] Username similar to website in answer: How delete suspended app from google play developer console? by Skytech Digital on stackoverflow.com

tpu- by JAD

@SmokeDetector k

!!/watch skytechdigitals\.com

@tripleee Added skytechdigitals\.com to watchlist

CI on d1c40f5 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev d1c40f5 (SmokeDetector: Auto watch of skytechdigitals\.com by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 15762.

Google Translate thinks that's Hindi but the error rate of the translation suggests maybe that's an incorrect guess

@tripleee the skytechdigital post? a large portion is hindi written with english letters

yeah, sometimes it guesses almost right and you get some sentences translated correctly and others in complete gobbledygook when it selects a related language (I dunno, maybe Urdu in this case?)

(or Bengali, Sindhi, Marathi, etc?? Not sure how closely related these are)

!!/unwatch ha\Wha\Wha\w*

@Makyen Removed ha\Wha\Wha\w* from watchlist

!!/watch \wh+a+\Wh+a+\Wh+a+\w*(?!(?:\n|.)?</code>)

@Makyen Added \wh+a+\Wh+a+\Wh+a+\w*(?!(?:\n|.)?</code>) to watchlist

[ SmokeDetector ] SmokeDetector started at rev 9cd3ce6 (SmokeDetector: Auto watch of \wh+a+\Wh+a+\Wh+a+\w*(?!(?:\n|.)*?</code>) by Makyen --autopull*) (running on ArtOfCode/EC2)

Restart: API quota is 15692.

what's Flovis? I meant to ask Art yesterday when he merged it but I dropped the ball

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: www.nutritionfit.org/purefit-keto/ by mokumad on askubuntu.com

this apparently chat.stackexchange.com/transcript/message/44754329#44754329

tpu- by tripleee

CI on fb12c5a succeeded.

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body: Vera Slim Review by howarneal on apple.SE

tpu- by Makyen

$ host rapidtonediet.com
rapidtonediet.com has address 18.217.199.190
rapidtonediet.com has address 52.15.173.201
rapidtonediet.com mail is handled by 10 inbound-smtp.us-east-1.amazonaws.com.

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, link at end of body: what is the PureFit Keto Shark Tank by shakshialag on drupal.SE

tpu- by Makyen

$ host lunatrimdiet.com
lunatrimdiet.com has address 52.15.173.201
lunatrimdiet.com has address 18.217.199.190
lunatrimdiet.com mail is handled by 1 aspmx.l.google.com.
lunatrimdiet.com mail is handled by 10 aspmx2.googlemail.com.
lunatrimdiet.com mail is handled by 10 aspmx3.googlemail.com.
lunatrimdiet.com mail is handled by 5 alt1.aspmx.l.google.com.
lunatrimdiet.com mail is handled by 5 alt2.aspmx.l.google.com.

$ host ketotonediet.com
ketotonediet.com has address 52.15.173.201
ketotonediet.com has address 18.217.199.190
ketotonediet.com mail is handled by 1 aspmx.l.google.com.
ketotonediet.com mail is handled by 10 aspmx2.googlemail.com.
ketotonediet.com mail is handled by 10 aspmx3.googlemail.com.
ketotonediet.com mail is handled by 5 alt1.aspmx.l.google.com.
ketotonediet.com mail is handled by 5 alt2.aspmx.l.google.com.

all from a single spam

the next one goes to random minor hosting companies, not cloud-based (tryvexan.com is hosted by Datapipe; newtrendhealthplan.com is hosted by Liquidweb)

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: www.nutritionfit.org/purefit-keto/ by Waaft1973 on drupal.SE

tpu- by Makyen

neuronzt.com (23.254.240.105) is hostwinds.com

@tripleee not at all :) core is back to being manually granted on an entirely subjective basis

@ArtOfCode thanks for following up; can we add a summary to the closed ticket and check that wiki is up to date with the (apparent) decision?

even if it's subjective, some subjective criteria should perhaps be codified

I keep having to refer back to documentation and tickets because the role names are not at all transparent

There's a privileges wiki somewhere, I'll update that when I get a chance

thanks!

charcoal-se.org/smokey/Privileges.html#privileges

I guess that's as specific as it's going to get

[ SmokeDetector | MS ] Bad keyword in answer, pattern-matching website in answer, potentially bad keyword in answer: How to know which URL used which port in computer in cmd? by Shanaya on stackoverflow.com

tpu- by Makyen

obTypo "in 30 days" not day

@SmokeDetector massive escort URL collection

oh wait, just a single domain

... looks like autocomments was disabled, right?

I didn't see anything in here saying that it was disabled. I recall a question about it adding the comment when a k was given as feedback, but not registering the k, but I've been assuming that comments were still automatically added.

so did I, but the chat comment I submitted just now did not result in a record of it being added to the Metasmoke record for the post

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected: How to set include path in xcode project by Alen Wesker on stackoverflow.com

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad keyword in username, blacklisted website in body, link at end of body, +3 more: How Does Fungus Hack Work? by Fungus Hack on superuser.com

tpu- by Glorfindel

@tripleee Yeah, I'd looked. I expected it to leave a comment too. @AJ's response an hour ago did result in a comment. In fact, it resulted in two comments due to being edited.

hmmm, just a glitch then I guess

probably not unlike how feedback from chat gets lost occasionally ...?

[ SmokeDetector | MS ] Link at end of answer: Is there any GPU that has 100+ Mh/s? by Adverd on ethereum.SE

tpu- by Glorfindel

[ SmokeDetector | MS ] Misleading link: hiding $_GET variable from url or Alternative? by Mike Kothari on stackoverflow.com

!!/watch ^adverd$

@tripleee Added ^adverd$ to watchlist

fp- by tripleee

CI on d381959 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev d381959 (SmokeDetector: Auto watch of ^adverd$ by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 15229.

[ SmokeDetector | MS ] Bad keyword in answer, potentially bad keyword in answer: How Can I Complete My Homework? by Balley John on superuser.com

tpu- by PeterJ

!!/report superuser.com/q/1325176/442468

(spam seed)

[ SmokeDetector | MS ] Manually reported question: How Can I Complete My Homework? by williamjohnbme on superuser.com

!!/watch bookmyessay\.com

@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword with a link in answer: Displaying a drop down on hover by King Ston on stackoverflow.com

naa- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, link at end of answer: How to upgrade to new version of Ajax toolkit with an existing project? by Paige Jarvis on stackoverflow.com

tpu- by Makyen

!!/watch instantassignment\.co\.uk

@tripleee Added instantassignment\.co\.uk to watchlist

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, blacklisted website in body, +6 more: healthcares360.com/thermo-burn-shark-tank/ by suepson on askubuntu.com

[ SmokeDetector ] SmokeDetector started at rev 4ff4be6 (SmokeDetector: Auto watch of instantassignment\.co\.uk by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 15107.

[ SmokeDetector | MS ] Bad keyword in answer, link at end of answer, pattern-matching website in answer, potentially bad keyword in answer: Displaying a drop down on hover by sumathi s on stackoverflow.com

tpu- by Makyen

@Glorfindel Indeed. Well spotted - the subsequent answer, although posted with a different userid, was posted from the same ip address.

Thanks :)

!!/blacklist-keyword thermo\W?burn

@tripleee Blacklisted thermo\W?burn

[ SmokeDetector ] SmokeDetector started at rev 7a8bfc1 (SmokeDetector: Auto blacklist of thermo\W?burn by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 15034.

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, blacklisted website in body, blacklisted website in title: Click more.<@>www.order4trial.com/vitasilk-cream/ by CraigCaldwell on graphicdesign.SE

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body: Luna Trim In the entire world everyone has been by Estherkaplan on askubuntu.com

tpu- by tripleee

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: BioFit Probiotic by harrismugal on askubuntu.com

tpu- by tripleee

[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user: How can I guess if an outdoor expanse contains flammable gas? by Edward Sheaver on outdoors.SE

tpu- by Makyen

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +4 more: www.thegarciniaeliteslim.com/turmeric-slim/ by LindMorg on puzzling.SE (@Mithrandir)

tpu- by Makyen

@tripleee ooh, nice, thanks! I didn't know you could do that.

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.bluesupplement.com/xyzol/ by viara201 on askubuntu.com

tpu- by Glorfindel

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: healthcaresupchat.com/rapid-tone-shark-tank/ by Losin1958 on drupal.SE

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: Aching, when you're requiring is secured you take by tojexicul on askubuntu.com

tp by Nisse Engström

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in URL, link at end of body: Replace the cleaning washing soap with by xolueyibe on askubuntu.com

tpu- by Glorfindel

tpu- by tripleee on Aching, when you're requiring is secured you take [MS]

[ SmokeDetector | MS ] URL in title, bad NS for domain in title, bad keyword in body, bad keyword in title, blacklisted website in title, +1 more: testosteronesboosterweb.com/xyzol/ by Standle on codegolf.SE (@Mego @DJMcMayhem)

tpu- by PeterJ

[ SmokeDetector | MS ] Bad NS for domain in answer, bad keyword in answer, blacklisted website in answer, pattern-matching website in answer: Is The Alliance for Code Excellence a scam? by Rachel Gray on meta.SE

[ SmokeDetector | MS ] Blacklisted website in body, blacklisted user: Where to get 8% off wow gold for the Wrath Timewalking event? by ESO2017123 on askubuntu.com

tpu- by tripleee on Is The Alliance for Code Excellence a scam? [MS]

tpu- by JAD

[ SmokeDetector | MS ] Potentially bad keyword in answer: Fragment View Not Displayed while making rest call in Activity by Samuel Bilý on stackoverflow.com

fp- by tripleee

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +1 more: mumybear.com/Keto-Power/ by user833179 on askubuntu.com

tpu- by tripleee

@SmokeDetector k

[ SmokeDetector | MS ] No whitespace in answer, repeating characters in answer: How can I politely express that "I have understood"? by qwer on english.SE

naa- by tripleee

tpu- by Glorfindel

updated by OP

within grace period, apparently

@SmokeDetector tp-

[ SmokeDetector | MS ] Bad keyword in link text in body: Where can i book bus ticket online in India? by Raj Kumar on mathoverflow.net

tpu- by Glorfindel

!!/watch ebookmyseat\.in

@Glorfindel Added ebookmyseat\.in to watchlist

CI on bf56d78 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev bf56d78 (SmokeDetector: Auto watch of ebookmyseat\.in by Glorfindel --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 14075.

[ SmokeDetector | MS ] Potentially bad keyword in answer: How can I decline someone's business card with tact? by nuke on interpersonal.SE

tpu- by tripleee

It's a pity that metasmoke only shows the body and not the tags. I am pretty sure that I've seen some travel-related spam under (traveling-salesman-problem) tag.

Sometimes the association between the tag name and the type of spam can be quite funny.

the tags are typically per-domain, though tagging individual posts is also now possible

I think he meant the question tags

if you scroll down to "contains domains": you see the tags for the extracted domain name(s), though this one doesn't yet have any

@Zoe it shows "No tags" because the post doesn't have any

@SmokeDetector k

As Zoey said, I meant tags in the sense tags on Stack Exchange. (E.g., this questions is tagged [tag:traveling-salesman-problem].)

@SmokeDetector k

@MartinSleziak aaaah, okay, sorry!

and actually we do have #travel though it's not yet very well-populated

But until now I did not know about tags in metasmoke, so at least I've learned something new: metasmoke.erwaysoftware.com/domains/tags

yeah, there's a couple of posts in Teams about these things too ... maybe we should have something in the wiki as well

@MartinSleziak Suggested, and implemented on the MS side but not the Smokey side. github.com/Charcoal-SE/SmokeDetector/issues/1426

Thanks angussidney, it's interesting to know. (I'm pretty sure that there are many other thinks to implement in SD which have higher priority. But good to know that this is also planned.)

doesn't sound hard to do, probably someone who wants to start writing code could try this?

IIRC it would require an extra API call to get tags for answers, since it's not included by default on the /posts endpoint

I'm not sure whether we worked out if that was definitely the case or not

An alternate option is to only fetch the tags if the post is confirmed spam

[ SmokeDetector | MS ] Link at end of answer, potentially bad keyword in answer, username similar to website in answer: Cross-browser testing: All major browsers on ONE machine by getinto-pc on stackoverflow.com

tpu- by tripleee

@Mithrandir 3214/3214 posts nuked

\o/

[ SmokeDetector | MS ] Mostly non-Latin answer: Nginx: stat() failed (13: permission denied) by 邱建忠 on stackoverflow.com

@ArtOfCode can ya forward me the email please?

stand by

naa- by Filnor

[ Mithrandir ] Mithrandir/Mith is switching to standby

on its way

received, thanks

Henders received failover signal.

tripleee started in reverted mode

@Mithrandir yeah that link is a 404

@SurajRao I've been deleted?!?!

yeah, /u/58, not 59

mistyped

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body: Greenlyte Keto Blend by hjufgsfd on puzzling.SE (@Mithrandir)

tpu- by tripleee

So I wonder if he went in and looked at each post individually.

mode reversed in started Glorfindel

tp by Mithrandir on How to transfer specific e-mails between Gmail account and Google Apps [MS]

tp by Mithrandir on Problems installing Julia language [MS]

@Mithrandir dunno. I'd kinda expect a random check rather than looking at every one, but not having seen any misfires kinda indicates he did

I was so tempted to slip a link in to one of his own posts, but decided against it in the end

@Glorfindel ybdnats\!!

tp by Mithrandir on Connection to two (or more) sharepoint lists with ADODB [MS]

tp by Mithrandir on Connection to two (or more) sharepoint lists with ADODB [MS]

@ArtOfCode could you foward the email chain to smokey@ please? It would be nice if the rest of us could hear any new correspondence

@ArtOfCode 'ybdnats' command such no

tp by Mithrandir on When should I publish in interdisciplinary versus subject-specific scientific journals? [MS]

fp by Mithrandir on JSP equivalent of ASP.NET MVC's partial views? [MS]

Since the changes to the queue, posts are staying in the queue longer.

fp by Mithrandir on How to handle "Time out receiving message from the renderer" in chrome driver? [MS]

@Mithrandir Because nobody wants to review 1500 items. It's just like the Close Votes review queue on SO.

fp by Mithrandir on Selenium test case fails due to page load time [MS]

@Glorfindel Not just domains, posts.

fp by Mithrandir on Fragment View Not Displayed while making rest call in Activity [MS]

I know, but there is a (1500) in the menu bar. That frightens off people; if I see (2) there, I know it's not going to be a lot of work.

tpu- by angussidney on How to transfer specific e-mails between Gmail account and Google Apps [MS]

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +2 more: rapid tone shark tank by Brout1963 on askubuntu.com

tpu- by tripleee

okay, what to tag meatspin

@SmokeDetector near perfect duplicate of metasmoke.erwaysoftware.com/post/73815

there, as here, learn to love the skip button

@Mithrandir we have a tag for "trolls like these domains", would that qualify?

Probably

that would be #troll?

@angussidney inbox

@Mithrandir yeah

Thanks, got it

www.meatspin is there already

metasmoke.erwaysoftware.com/domains/tags/85

whois.com/whois/rippedrxno2blastcanada.com - is this a real email for a pharma spammer?

Looks like not much since the last email

I only see abuse@namecheap.com

but a good number of the non-anonymized domain registrations look like they actually have a valid email address of some random person

some are recurring, others are (to the best of my knowledge) unique

which is what caused the speculation above

idea: email 'em and get info on how this works, if possible

sure, but be prepared for >90% to not reply, or turn out to be invalid

maybe you could use some tactic, like "would you be interested in participating in a very profitable banner advertising network"

but they already receive offers like that, I'm sure

heh

by the by, I'm rigging Halflife to also start reporting the actual hosting via ASN

Do we have anyone that speaks Urdu here, out of curiosity?

it has been reporting IP addresses of the sites already, but I added an ASN lookup

and extended this to also examine the result of any redirect

@Mithrandir I think Suraj and A J are able to handle some Hindi, which is related to Urdu (mutually intelligible but still different, I hear)

maybe you actually meant Hindi?

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, body starts with title and ends in URL, link at end of body: Keto Power There are a number of these plans by hetivna12 on askubuntu.com

tpu- by tripleee

@tripleee Pakistani languages are English and Urdu

@Mithrandir yeah, I was thinking of the many Indian spammers

though there are certainly some in Pakistan, too

@Mithrandir I can read Urdu (if written in a script I can understand, Latin and Devanagari) and understand most of it. Hindi is my mother tongue, so I am quite fluent in this language.

!!/report superuser.com/a/1325224/337631

@AJ 'kay, thanks

[ SmokeDetector | MS ] Manually reported answer: How can I get notified by everything that happens in a specific channel in irssi? by all chat on superuser.com

tpu- by tripleee

!!/watch allchatroom\.com

@tripleee Added allchatroom\.com to watchlist

[ SmokeDetector ] SmokeDetector started at rev 5120cf2 (SmokeDetector: Auto watch of allchatroom\.com by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 13442.

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title: How to measure the success of overall digital marketing efforts? by puja singhania on superuser.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, body starts with title and ends in URL, pattern-matching website in body: VitaSilk manner bolster collagen by bhoudisko on graphicdesign.SE

tpu- by Glorfindel

!!/blacklist-keyword vita\W?silk

@tripleee Blacklisted vita\W?silk

CI on 058453a succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 058453a (SmokeDetector: Auto blacklist of vita\W?silk by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 13342.

[ SmokeDetector | MS ] Bad NS for domain in answer, potentially bad keyword in answer: some .mp4 video not playing and give mime type error by Sarah castella on stackoverflow.com

tpu- by tripleee

[ SmokeDetector | MS ] Mostly non-Latin answer: Editing column names of a CSV file in R by Ibrahim kutty on stackoverflow.com

tpu- by tripleee

probably not spam after all, looks like NAA with "I have this question too (but all I post is a problematic file)"

[ SmokeDetector | MS ] Potentially bad keyword in body: Trying to insert data into an access database from C#, but it fails, and I have no idea why by Lt Wub on stackoverflow.com

fp- by tripleee

^ observe the new ASN lookup information which (roughly) identifies the web hosting

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title: www.tips4facts.com/shred-t3x by oustoust on apple.SE

tpu- by tripleee

!!/blacklist-website tips4facts\.com

@tripleee That pattern looks like it's already caught by Pattern-matching website in body and Pattern-matching website in answer; append -force if you really want to do that.

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +4 more: nutrahealthtrimsite.com/turmeric-slim/ by kujdsjad on astronomy.SE

tpu- by tripleee

[ SmokeDetector | MS ] Potentially bad keyword in answer: Submission to G Suite Marketplace by Google Business Email on stackoverflow.com

tpu- by Glorfindel

!!/watch bol7\.com

[ SmokeDetector | MS ] Username similar to website in answer: Tor hidden service settings failing to allow tor.service to start on CentOS/Fedora by Alex Haydock on superuser.com

@tripleee That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer; append -force if you really want to do that.

fp- by tripleee

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, pattern-matching website in body: Blocks the production of more fats in your body with CLA Safflower Oil by getclasaffloweroil on stackoverflow.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, +2 more: Anamax Male Enhancement trial Reviews by conradfanda on stackoverflow.com

!!/watch saffloswer

tpu- by tripleee

@tripleee Added saffloswer to watchlist

!!/blacklist-website tophealthychat\.com

@tripleee That pattern looks like it's already caught by Bad keyword in answer, Pattern-matching website in answer, Bad keyword in body, Bad ns for domain in answer, Bad ns for domain in body, and Pattern-matching website in body; append -force if you really want to do that.

!!/blacklist-website-force tophealthychat\.com

@tripleee Blacklisted tophealthychat\.com

CI on 437a440 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 437a440 (SmokeDetector: Auto blacklist of tophealthychat\.com by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 12962.

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.healthyorder.org/greenlyte-keto/ by Pariz1993 on drupal.SE

tpu- by tripleee

[ SmokeDetector | MS ] Potentially bad keyword in answer: Submission to G Suite Marketplace by rakeshsoni on stackoverflow.com

tpu- by Glorfindel

!!/blacklist-website bol7\.com

@tripleee Blacklisted bol7\.com

I tagged safewow.com as #game-coins metasmoke.erwaysoftware.com/domains/18027

is there a better terminology for in-game valuables, #game-treasures or #game-loot or what?

[ SmokeDetector ] SmokeDetector started at rev a008258 (SmokeDetector: Auto blacklist of bol7\.com by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 12897.

more generally maybe look at what can be done about these: chat.stackexchange.com/…

[ SmokeDetector | MS ] Blacklisted website in answer: Change order state from processing to closed by user55548 on magento.SE

[ SmokeDetector | MS ] Blacklisted website in answer, blacklisted user: Domain wide authority without G suite by rakeshsoni on stackoverflow.com

tpu- by tripleee

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +3 more: Anamax: how does it works? by keliqueenz on askubuntu.com

again, why is simicart blacklisted? it seems to be about 50/50

tpu- by tripleee

but some of those 5 look questionable, too

in fact only 2 look like definitely spam

and even then I'm hesitant because Magento

[ SmokeDetector | MS ] Username similar to website in answer: Is Bufferbloat triggered on a certain speed? by richb-hanover on superuser.com

fp- by tripleee

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.healthyorder.org/greenlyte-keto/ by vikovobi on askubuntu.com

tpu- by Videonauth

[ SmokeDetector | MS ] Potentially bad keyword in username: What is the best program for 3D jewellery design and CAD Models? by Jewellery Cluster on graphicdesign.SE

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer: ArcGIS server on Amazon EC2 vs buying your own machine. Pro's and Con's by Vicky on gis.SE

tpu- by Glorfindel

metasmoke.erwaysoftware.com/data/sql/queries/…

behold, some of our most favorite spam domains

@tripleee i get a routing error when i follow your link

I'm pretty sure the SQL exploder is restricted to core

Works for me :)

@angussidney ohhhh, that kind of sucks

it's really useful

Waitup, I think you had the role before everything got muddled up

@tripleee yeah. Ideally we would restrict non-core users to readonly cached results, but we have virtually no control over the SQL explorer as it's using a very different codebase to the rest of MS