« first day (3364 days earlier)      last day (439 days later) » 
00:00 - 14:0014:00 - 00:00

12:03 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Why do Tailwind classes not work and how can I fix the issue? ✏️‭ by Abolfazl Masoumi‭ on stackoverflow.com
 
12:26 AM
!!/alive
 
@Jesse Of course
 
@SmokeDetector 👍
 
1:01 AM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): COBOL error with numeric variable, not numeric‭ by Lucas Galeano‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to fix problems with sizing an iframe‭ by Zayn Hallal‭ on stackoverflow.com
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started in standby mode at rev 6e4e67bc72 (tripleee: Typo in comment) (running on Makyen/EC2-linux)
 
1:40 AM
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad keyword in body (99): In all the 2K ratings debates in the 2K ratings‭ by anqilan456‭ on stackoverflow.com
[ SmokeDetector | MS ] Mostly non-latin answer (51): YouTube notification count max value?‭ by Hamedo Nassar‭ on webapps.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Any resources for writing in Anglish?‭ by Anglishman‭ on writing.SE
[ SmokeDetector | MS ] Body starts with title and ends in url (96): Why my wordpress website URL displays a #hash symbol and how to remove it?‭ by Mahmoud Eid‭ on stackoverflow.com
 
2:53 AM
[ SmokeDetector | MS ] Link at end of answer, potentially bad ns for domain in answer (63): Einstein's return to aether‭ by Rod Mack‭ on physics.SE
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted website in answer, potentially bad ip for hostname in answer, blacklisted user (246): How to find "recommended" playlists in Spotify?‭ by mollykaseline‭ on musicfans.SE
 
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted website in answer, potentially bad ip for hostname in answer, blacklisted user (246): What is the genre of music in the Kitchen Swagger playlist on Spotify?‭ by mollykaseline‭ on musicfans.SE
 
3:14 AM
!!/watch freebnbco\.in
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): API data not showing in flutter dropdown‭ by Thiên Vương Nguyễn‭ on stackoverflow.com
 
4:01 AM
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 6b79b1731 (Makyen: Ping Makyen for some new metasmoke users) (running on Makyen/MS-Relay, Python 3.11.0)
 
4:18 AM
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad keyword in body (99): Side navigation being repeated in all pages does it affect SEO?‭ by shiva shakthi‭ on stackoverflow.com
[ SmokeDetector | MS ] Link at beginning of answer (36): RCVD_IN_DNSWL_BLOCKED in SpamAssassin as it doesn't use local DNS‭ by Jacob Geigle‭ on serverfault.com
[ SmokeDetector | MS ] Link at beginning of answer, pattern-matching website in answer, potentially bad keyword in answer (113): filter pornography in a video/picture c# library‭ by rsdhappybuddha‭ on stackoverflow.com
 
4:44 AM
[ SmokeDetector | MS ] Link at beginning of answer (36): how to turn-off logo & zoomControls in arcgis api for js?‭ by Aman Kumar‭ on stackoverflow.com
 
4:56 AM
[ SmokeDetector | MS ] Luncheon meat detected (40): How can I print if a string is after 5 strings?‭ by Qi_Yao‭ on stackoverflow.com
 
!!/watch avilasdentalgroup\.com
 
@Jesse You don't have blacklist manager privileges, but I've created PR#7534 for you.
 
PR#7534 ("Jesse: Watch avilasdentalgroup\.com") opened by SmokeDetector
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to enlist the regulators to defend Big Town?‭ by Space Turnip‭ on gaming.SE
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): Are items marked stolen un-marked after confiscation?‭ by Space Turnip‭ on gaming.SE
[ SmokeDetector | MS ] Link at beginning of body (41): Opencart error message on loading homepage‭ by Farhan Awan‭ on stackoverflow.com
 
5:28 AM
 
teward/Thoth: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev e2fae65d13 (SmokeDetector: Auto watch of freebnbco\.in by Jeff Schaller) (running on teward/Thoth, Python 3.10.6)
Restart: API quota is 76488.
 
!!/approve 7532
!!/approve 7533
!!/approve 7534
 
@tripleee User blacklisted (20730550 on stackoverflow.com).
 
@SmokeDetector @Jesse marking this TP seems overtly harsh. The question is VLQ and unclear, but still a valid question, and in theory salvageable by removing the junk from the end
 
@metasmoke @Makyen I'm respectfully disagreeing with your FP here; same user as previous spam and a SEO-related "question"
 
6:03 AM
[ SmokeDetector | MS ] Offensive body detected (47): Execute function when i am click button‭ by bose‭ on wordpress.SE
 
@tripleee While I can understand that, my evaluation was that the question was one nearly identical to what's fairly typical from new users regarding SEO-type questions and that including a link to their site is normal and typical for such questions, even though we, SO, don't want a link to their site and consider most of the question to be off-topic. In other words, the question wouldn't be considered spam without the user's/site's history. That history was 6 months ago, and this question didn't appear to be a continuation of that spam.
 
6:17 AM
[ SmokeDetector | MS ] Bad keyword with a link in answer (81): Steel beams for 22' interior clear span‭ by eric‭ on diy.SE
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, potentially bad keyword in answer (2): Approach for IT Support assistance‭ by Teamlogic IT Support‭ on serverfault.com
 
!!/watch lme\.com\.tr
 
tpu- feedback received on [MS] Approach for IT Support assistance‭
 
6:23 AM
 
!!/blacklist-username (?-i:^Teamlogic IT Support$)
 
CI on 567fd07 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 567fd07 by tripleee in the master branch
 
6:31 AM
@tripleee Yeah I guess. I'm having difficulty finding where the line is drawn with these. I feel like adding random characters to a question just to hit the character quota would classify as abusive based on other things I've seen that have been flagged as abusive.
 
@Jesse indeed, there are some corner cases where it might make sense to tell metasmoke FP but still red-flag if you feel that the junk is offensive enough; but for Charcoal's purposes, we really only want the system to automatically catch the egregiously promotional or abusive stuff
!!/watch sexyprettydoll\.com
 
[ SmokeDetector ] GitHub Actions: success on 1f68e4e by tripleee in the master branch
 
CI on 1f68e4e succeeded.
CI on 67b94c0 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 67b94c0 by tripleee in the master branch
 
6:42 AM
!!/pull
 
[ SmokeDetector ] Blacklists reloaded at rev 67b94c00e4 (tripleee: Watch IP 50.116.18.242) (running on teward/Thoth)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Inject Ethereum Provider EIP-1193 into my wallet‭ by Leo‭ on ethereum.SE
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): What things should we notice about the CO2 laser marking machine?‭ by Lyralaser‭ on raspberrypi.SE
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ns for domain in answer (2): Is it normal to get some request timed out in tracert?‭ by user1769508‭ on superuser.com
 
!!/watch lyralaser\.com
 
!!/watch lyra[\W_]*+laser(?!\.com(?<=lyralaser\.com))
 
@tripleee Ah alright. Sounds good. I will keep that in mind.
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body (2): Javascript URL Parameter Selector Not Working‭ by Noah Lang‭ on stackoverflow.com
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started in standby mode at rev 6e4e67bc72 (tripleee: Typo in comment) (running on Makyen/EC2-linux)
[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad ns for domain in body (2): my website is showing error on jio network‭ by user1769508‭ on superuser.com
 
7:26 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body, +3 more (485): What are Sure Slim Keto Gummies?‭ by sureslimketogummy‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Insulating interior shower walls‭ by LA Fos‭ on diy.SE
 
fp- feedback received on [MS] Insulating interior shower walls‭
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Today Top Trending Viral News‭ by NavTimes News‭ on superuser.com
 
tpu- feedback received on [MS] Today Top Trending Viral News‭
 
7:32 AM
[ SmokeDetector | MS ] Bad keyword in body (94): create written data from a screenshot with python‭ by cflake‭ on stackoverflow.com
 
!!/watch navtimesnews\.com
 
!!/watch-force sure[\W_]*+slim(?:[\W_]*+(?:keto[\W_]*+)?gummies)?\d*
 
@tripleee That pattern looks like it's already caught by Bad keyword in body, Bad keyword in answer, Potentially bad keyword in answer, and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, potentially bad ns for domain in answer, username similar to website in answer (72): How to hang a canvas wall art with wooden frame?‭ by Dekor Company‭ on diy.SE
 
7:38 AM
CI on cb565ad succeeded.
 
[ SmokeDetector ] GitHub Actions: success on cb565ad by tripleee in the master branch
 
!!/watch dekorcompany\.com
 
!!/watch advancesolutions\.com
from profile
!!/watch advance[\W_]*+solutions(?!\.com(?<=advancesolutions\.com))
 
the post also contains "solution" singular but maybe that would be somewhat FP-prone
 
8:10 AM
fp- feedback received on [MS] be consisted of vs consisted of‭
 
[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body, potentially bad ns for domain in body (194): Intriguing Trends for Valentine Gifts to Husband Indian‭ by Binoy Roy‭ on mathoverflow.net
 
@SmokeDetector unfortunately IP addresses are shared with docs.pushtechnology.com but watching anyway
 
8:18 AM
!!/watch nkstherapy\.com
 
[ SmokeDetector ] GitHub Actions: success on 44f5965 by tripleee in the master branch
 
@SmokeDetector Still alive [MS]
 
CI on 5f8e61b succeeded.
 
!!/pull
 
8:22 AM
[ SmokeDetector ] GitHub Actions: success on 5f8e61b by tripleee in the master branch
 
[ SmokeDetector ] Blacklists reloaded at rev 5f8e61ba5a (tripleee: Watch IP 35.209.166.42) (running on teward/Thoth)
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): How fontoxml works‭ by Sourav Manna‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): API data not showing in flutter dropdown‭ by Thiên Vương Nguyễn‭ on stackoverflow.com
 
fp- feedback received on [MS] How fontoxml works‭
 
[ SmokeDetector | MS ] Potentially bad keyword in answer, repeated url at end of long post (100): Can we please get the full count of new hats now?‭ by Raj Jaiswal‭ on meta.SE (@Ollie)
 
9:04 AM
[ SmokeDetector | MS ] Bad keyword in title, potentially bad keyword in body, potentially bad keyword in title (100): Best Digital Marketing Company in Bangalore‭ by vernita srivastava‭ on meta.SE (@Ollie)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): USB hub for mac, weired screen resolutions‭ by stebal‭ on hardwarerecs.SE (@JeffSchaller)
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, potentially bad ns for domain in answer, potentially bad keyword in answer (171): Best Digital Marketing Company in Bangalore‭ by vernita srivastava‭ on meta.SE (@Ollie)
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Pytest: no test were found / collected 0 items / empty suite‭ by bull1t‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Changing a store-bought LED power supply's output ✏️‭ by Djelle‭ on electronics.SE
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Drupal 7 dependent dropdown not working in form alter‭ by Rajat Bhardwaj‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to run mysql command from terminal? ✏️‭ by Parag Vidhate‭ on askubuntu.com
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer (96): How to run mysql command from terminal?‭ by Jiggy J‭ on askubuntu.com
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): MySQL InnoDB locks on joined rows‭ by d33kayyy‭ on stackoverflow.com
 
!!/watch upload-4ever\.com
 
@tripleee That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
 
!!/watch digitalimac\.com
 
@SmokeDetector askubuntu.com/a/1451581/25077 reveals affiliation
 
9:31 AM
 
!!/watch (?-i:2weyd49lvaai)(?# upload4ever)
 
1 hour ago, by tripleee
@SmokeDetector Still alive [MS]
@SmokeDetector Still alive [MS]
 
[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad keyword in answer (86): How to backup data to stand up bad sectors?‭ by onitemi‭ on superuser.com
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to backup data to stand up bad sectors?‭ by merry james‭ on superuser.com
CI on 5640344 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 5640344 by tripleee in the master branch
 
9:46 AM
CI on 667ff76 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 667ff76 by tripleee in the master branch
 
!!/pull
 
[ SmokeDetector ] Blacklists reloaded at rev 667ff768f4 (tripleee: Blacklist Hostgator.in NS pair wns{9,10}) (running on teward/Thoth)
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): how to setup environment for avalanche's test network‭ by regean_9512‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to access-protect to data on my Google Compute Engine VM?‭ by yoshiki‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Blacklisted website in body (98): Convert SMTP commands to python‭ by Hari Kumar‭ on stackoverflow.com
 
10:00 AM
fp- feedback received on [MS] Convert SMTP commands to python‭
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 6b79b1731 (Makyen: Ping Makyen for some new metasmoke users) (running on Makyen/MS-Relay, Python 3.11.0)
 
[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user (71): Differential Mode EMI Filter Position‭ by premierfilters‭ on electronics.SE
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted website in answer, link at beginning of answer (211): Can I encode videos using NVENC in Handbrake on Ubuntu 19.10?‭ by chan jinjin‭ on askubuntu.com
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (3): Goggles For Paintball‭ by eastcoastpaintball‭ on sports.SE
 
tpu- feedback received on [MS] Goggles For Paintball‭
 
!!/watch eastcoastpaintball\.com
 
10:07 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to limit form submition per time after submit‭ by Lex‭ on stackoverflow.com
[ SmokeDetector | MS ] Offensive answer detected (78): Record Android Screen Problem Using Android Studio‭ by ItsAnfield‭ on stackoverflow.com
[ SmokeDetector | MS ] Blacklisted user (70): Exported svg missing transform matrix‭ by Thuan Tran‭ on stackoverflow.com
[ SmokeDetector | MS ] Link at end of answer (62): How to rename snap application file in Ubuntu 20.04?‭ by Dong Lin‭ on askubuntu.com
[ SmokeDetector | MS ] Link at end of answer, potentially bad asn for hostname in answer, potentially problematic ns configuration in answer (64): Making multiple assignments to objects named as strings‭ by aashika rajput‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Phone number detected in title (89): kraken support 844-910-1489 help usa‭ by dipam19642‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Drupal 7 dependent dropdown not working in form alter‭ by Rajat Bhardwaj‭ on drupal.SE
 
!!/watch edutantra\.in
!!/blacklist-number +1 844-910-1489
 
1 hour ago, by tripleee
@SmokeDetector Still alive [MS]
 
CI on a54e393 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on a54e393 by tripleee in the master branch
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): css code to have fixed image in the background while the content is being scrolled‭ by JimmyH‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How can I add index.php hiddenly on laravel?‭ by 24worker‭ on stackoverflow.com
 
!!/pull
 
[ SmokeDetector ] Blacklists reloaded at rev a54e393941 (tripleee: Watch IP 101.53.147.155) (running on teward/Thoth)
[ SmokeDetector | MS ] Bad keyword in body, potentially bad asn for hostname in body (95): Best way to design Home‭ by adnan‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, potentially bad keyword in body (165): Get Assignment Essay and Thesis Writing‭ by editing help‭ on stackoverflow.com
 
11:24 AM
 
[ SmokeDetector | MS ] Body starts with title and ends in url, potentially bad asn for hostname in body, potentially bad ns for domain in body (98): best way to learn magento 2 step by step‭ by Dev Rock‭ on magento.SE
 
tpu- feedback received on [MS] Best way to design Home‭
 
!!/watch archi-cubes\.com
!!/watch editinghelp\.co\.uk
 
11:29 AM
!!/watch onlineinformationstations\.com
 
teward/Thoth: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev b4e69ff683 (SmokeDetector: Auto watch of onlineinformationstations\.com by tripleee) (running on teward/Thoth, Python 3.10.6)
Restart: API quota is 73724.
 
[ SmokeDetector ] GitHub Actions: success on 4062705 by tripleee in the master branch
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title (192): Softaken Zimbra to Outlook PST Converter Tool‭ by softakensoftware‭ on stackoverflow.com
CI on 4062705 succeeded.
CI on 6cd3fa9 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 6cd3fa9 by tripleee in the master branch
 
!!/pull
 
11:36 AM
[ SmokeDetector ] Blacklists reloaded at rev 6cd3fa9efe (tripleee: Watch IP 52.28.135.144) (running on teward/Thoth)
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): How i get store name/ url in front end into custom app in shopify‭ by Vinod Kumar‭ on stackoverflow.com
 
!!/watch softakensofware(?!\.com)
 
[ SmokeDetector | MS ] Link following arrow in body (96): Logical Errors run a subscript in App script‭ by Pemula Saketh‭ on stackoverflow.com
 
11:53 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What Tor-friendly hosting providers allow anonymous accounts?‭ by huntor‭ on tor.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Nest can't resolve dependencies in my project‭ by ُEslam Talabe Garibe Qoutbe‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): What cleaup function can be applied to this useEffect hook?‭ by usman qadir‭ on stackoverflow.com
 
!!/watch socialchamp\.io
 
12:00 PM
!!/watch nauradika\.com
 
@SmokeDetector sketchy but not sure
 
CC @forest, you know Tor things - anything there look unusually spammy?
 
CI on 70e23e5 succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 70e23e5 by tripleee in the master branch
 
[ SmokeDetector | MS ] Potentially bad keyword in body (1): how to split string in Snowflake by single backslash‭ by Oleksiy Kustlyvy‭ on stackoverflow.com
 
12:20 PM
@RyanM The third link is the official Tor Project. I'm not sure about the other two.
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Neo4j 4.4.11 enterprise - Causal Cluster Deployment using Terraform‭ by TheSch‭ on stackoverflow.com
 
The second link is legitimate as well.
 
@blackgreen User blacklisted (21132858 on stackoverflow.com).
[ SmokeDetector | MS ] Bad ip for hostname in body, blacklisted website in body, potentially bad keyword in body, potentially problematic ns configuration in body (199): Is Remitano Clone Script a good choice?‭ by Diana Ryan‭ on superuser.com
 
12:26 PM
tpu- feedback received on [MS] Is Remitano Clone Script a good choice?‭
 
(It's very probably spam just judging by the way the answer is written, even if two of the links are legit...)
 
!!/watch Waseem Haider
 
12:30 PM
[ SmokeDetector ] GitHub Actions: success on a894c9e by tripleee in the master branch
 
[ SmokeDetector | MS ] Link at beginning of body, potentially bad ns for domain in body (42): What to do if life insurance is denied?‭ by Johnloren‭ on meta.SE (@Ollie)
 
!!/watch mlifeinsurance\.com
 
!!/pull
 
12:40 PM
[ SmokeDetector ] Blacklists reloaded at rev 4f51d12143 (tripleee: Watch IP 198.54.119.70) (running on teward/Thoth)
 
[ SmokeDetector ] GitHub Actions: success on 4f51d12 by tripleee in the master branch
 
@SmokeDetector tpu-
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): flutter slidable one slide at a time when we tap on list item‭ by Sasen Tamrakar‭ on stackoverflow.com
 
12:46 PM
!!/notify 11540 meta
 
@Ethan You'll now get pings from me if I report a post on meta, in room 11540 on chat.stackexchange.com.
[ SmokeDetector | MS ] Manually reported question (93): google accounts developer console?‭ by Данил Натуча‭ on stackoverflow.com
 
when there is a report and the user used non lattin chars to post a link should I add that domain to the report? And if yes with latin chars or the way they spelled it?
@SmokeDetector tpu-
 
[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, bad keyword in body, bad keyword in username, blacklisted website in body, +2 more (572): Best 7zip password Unlocker Software‭ by 7z password recovery‭ on stackoverflow.com
 
@Ethan I don't think we have a good policy for this at the moment; I basically have the same question but for the time being, I have tried to prioritize whatever the spammer used
 
[ SmokeDetector | MS ] Potentially bad keyword in body (1): COBOL error with numeric variable, not numeric ✏️‭ by Lucas Galeano‭ on stackoverflow.com
 
12:54 PM
but also usually add the other variant if I have the time
 
@SmokeDetector tpu-
Got it. I will wait for one more to chime in before doing anything thing.
 
!!/watch app_helpers(?<=@app_helpers)
 
12:56 PM
 
the #idna tag in metasmoke has a few examples
 
metasmoke.erwaysoftware.com/domains/109733 is a proper example, where I also added the original Korean domain name
 
I see. The post Im thinking of (the one in that note) is above some unicode value and Mayken said that MS doesn't handle those chars well
 
domains with xn-- has more examples; they should probably all be tagged #idna
@Ethan they are problematic in searches but my experience is that we can add the domain names themselves without issues
@Ethan oh that's just obfuscation, not a valid domain name, so from metasmoke's perspective just a #stuff-up
that one I would add with regular Latin characters and hope that our deobfuscation figures out the link if they post it in that form again
 
1:01 PM
Got it. Thanks
 
but I guess we would perhaps like to watch both if it currently doesn't
!!/watch redbubble\.com
 
𝓇𝑒𝒹𝒷𝓊𝒷𝒷𝓁𝑒\.𝒸𝑜𝓂 is redbubble.com?
 
yeah, there is no TLD with the cursive .com
 
!!/test-a 𝓇𝑒𝒹𝒷𝓊𝒷𝒷𝓁𝑒.𝒸𝑜𝓂
 
1:03 PM
> Mostly non-latin answer
----------
Mostly non-latin answer - Text contains 12 non-Latin characters out of 12
 
hmm
 
@tripleee just FYI there's some on-site hits for redbubble as well as a few fp in MS
 
yeah, keeping it watched
 
𝓉𝒽𝓊𝓂𝒷𝓈 𝓊𝓅
 
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started in standby mode at rev 6e4e67bc72 (tripleee: Typo in comment) (running on Makyen/EC2-linux)
 
@SmokeDetector naa-
 
1:30 PM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Issue displaying question for answer in views.py‭ by Богдан Савищев‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Scam aimed at customers in body (76): Not correct import and open pyqt5 python ✏️‭ by Mir‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): Files appeared in egg-info/sources but not included to a python build‭ by EgorRedkozubov‭ on stackoverflow.com
 
1:45 PM
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body (2): What are your experiences with water descalers? Are they sufficient as a replacement for a water softener?‭ by Daniel Myers‭ on diy.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Suggestions for repairing a broken guitar tuning key‭ by Nethan Paul‭ on music.SE
 
!!/watch (?-i:^Nethan Paul$)
 
@tripleee The pattern contains an invisible U+202D whitespace character. Append -force to the command word(s) if you really want to add the pattern you provided.
 
00:00 - 14:0014:00 - 00:00

« first day (3364 days earlier)      last day (439 days later) »