@iBug FYI I've unwatched a pattern that was watched by you (this one, bisected here) because it is catching mainly FPs. Since it was added it has matched 20 posts: 1 TP / 1 NAA / 19 FP, and the 1 TP was matched by other patterns.
This is the section of search results for the pattern during the period the pattern was watched.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, potentially bad ip for hostname in body, +1 more (492): What Is Garcinia Vita UK? by sonia jackie on scifi.SE (@Mithrandir)
@doppelgreener OK, got it. It was meant for things like Offer:- spam website, note the colon and the dash. This pattern was prevalent in titles and I could've added more guards to make it target only titles.
@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
[ SmokeDetector | MS ] Bad pattern in url body, body starts with title and ends in url, pattern-matching website in body, potentially bad ns for domain in body (289): Halki Diabetes Remedy by Tolsay on english.SE
> Pattern-matching website in body, potentially bad ns for domain in body ---------- Pattern-matching website in body - Position 8-28: supplementlegend.com Potentially bad ns for domain in body - supplementlegend.com NS suspicious cns3.hostgator.in.,cns4.hostgator.in.
"halki" is a word in Finnish and "halkı" is an inflection of a Turkish word "halk" ... but I guess those would rarely occur in legitimate posts in the SE network
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username ---------- Potentially bad keyword in body - Position 0-11: today offer Potentially bad keyword in title - Position 0-11: today offer Potentially bad keyword in username - Position 0-11: today offer
[ SmokeDetector | MS ] Bad pattern in url body, body starts with title and ends in url, potentially bad ns for domain in body (192): The Venus Factor 2.0 by neha shan on english.SE
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, link following arrow in body, pattern-matching product name in body, potentially bad ns for domain in body, +2 more (493): Nutrients and Minerals: by provexummale on meta.SE
@SmokeDetector interesting; plagiarized from another answer and the spammer tried to impersonate the author of said answer by choosing (almost) the same username
@tripleee any idea if it's possible to whitelist the domain forum.xda-developers.com - it keeps on getting hit by "Potentially bad ns for domain in body", about 30 times now. See metasmoke.erwaysoftware.com/domains/3519 - the TPs there were for other linked websites.
@Glorfindel the required code changes should not be challenging but I haven't actually worked on it yet; my vague plan is to refactor bertieb's PR from a few weeks back - of course anybody who is ready to tackle it is welcome to take a look
