12:57 AM
[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (162): Using ip addr instead of ifconfig reports "RTNETLINK answers: File exists" on Debian by Ozzy Chigurh on
unix.SE
1:16 AM
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): Is this is a malware invocation of Powershell? by yossizahn on
serverfault.com
halflife:2018-11-11 01:18:13,835:143087: Extracted URL
https://www.virustotal.com/#/file/29ea855339856181c2419b9573b8fd7aafb55b5d1cc0d5c9cb2648e2ef2582f7
halflife:2018-11-11 01:18:35,114:143087: Extracted URL
https://www.virustotal.com/#/file/6055ef00b9b5f1d7a5c05ef9649d367bab071db3736d8dca2bac67d0afe768de
2:11 AM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): I was expecting The Crimes of Grindelwald would be Guiding Light after Halloween and THE HATE U GIVE ! by peterknotte on
movies.SE
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +6 more (886): www.usafitnessguide.com/androdna-testo-boost/ by aiza emma on
apple.SE
halflife:2018-11-11 02:12:46,533:143088: Extracted URL
https://www.belfastvibe.com/cinemas/123-imdb-watch-the-hate-u-give-online-full-2018-movie/
halflife:2018-11-11 02:12:46,533:143088: belfastvibe.com: ns ['ns1.johnstonpress.co.uk.', 'ns2.johnstonpress.co.uk.']
halflife:2018-11-11 02:12:46,533:143088: belfastvibe.com: ip 35.187.55.106 (106.55.187.35.bc.googleusercontent.com.)
halflife:2018-11-11 02:12:46,534:143088: belfastvibe.com: ip 35.187.55.106 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-11-11 02:12:50,999:143089: Extracted URL
https://www.usafitnessguide.com/androdna-testo-boost/
halflife:2018-11-11 02:12:50,999:143089: usafitnessguide.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2018-11-11 02:12:50,999:143089: usafitnessguide.com: ip 68.65.120.231 (server107-4.web-hosting.com.)
[ SmokeDetector ] Blacklists reloaded at rev
bb49d2a
(SmokeDetector: Auto watch of belfastvibe\.com
by K.Dᴀᴠɪs --autopull) (running on ArtOfCode/TRINITY)
2:26 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Usage of "which" and "what" in affirmative by Saswata Baksi on
ell.SE
[ SmokeDetector | MS ] Bad keyword with email in answer, email in answer (161): "at hand" vs "at issue" by user323781 on
english.SE
[ SmokeDetector ] Blacklists reloaded at rev
53a7be2
(SmokeDetector: Auto watch of newlifeinvestement(?:@gmail\.com)
by Shree --autopull) (running on ArtOfCode/TRINITY)
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Holocaust oven temperature by Liu on
skeptics.SE
2:32 AM
2:54 AM
[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (161): What does Q*Bert say when he dies? by user107043 on
scifi.SE
3:11 AM
[ SmokeDetector ] SmokeDetector started at rev
53a7be2
(SmokeDetector: Auto watch of newlifeinvestement(?:@gmail\.com)
by Shree --autopull) (running on ArtOfCode/TRINITY, Python 3.6.6)
[ SmokeDetector | MS ] Potentially problematic ns configuration in body (26): What is meant by ‘threefold bliss’ in the “verses of sharing and aspiration” by vimutti on
buddhism.SE
halflife:2018-11-11 03:12:15,737:143094: Extracted URL
http://www.buddhamind.info/leftside/monastic/imina.htm
3:34 AM
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Holocaust oven temperature by Liu on
skeptics.SE
4:08 AM
[ SmokeDetector | MS ] Url-only title, blacklisted website in body, blacklisted website in title, body starts with title and ends in url, link at end of body, +5 more (794): nutritionless.com/cosmedique/ by Fnkvcgsg on
askubuntu.com
halflife:2018-11-11 04:08:47,552:143096: nutritionless.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2018-11-11 04:08:47,552:143096: nutritionless.com: ip 198.54.115.125 (server121-2.web-hosting.com.)
4:25 AM
[ SmokeDetector | MS ] Mostly dots in body (50): Como hacer el programa de un Sistema de compra venta ✏️ by Jhoan Mejias on
es.stackoverflow.com
4:41 AM
[ SmokeDetector | MS ] Potentially bad keyword in username (1): * Question Deleted Quest * ✏️ by openInvent on
meta.SE
5:17 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Blank page when viewing wp-admin by Danushka Madushanka on
wordpress.SE
[ SmokeDetector | MS ] Url in title, blacklisted website in body, blacklisted website in title, body starts with title and ends in url, link at end of body, +5 more (791): nutritionless.com/cosmedique/ by Fxpsldnx on
drupal.SE
halflife:2018-11-11 05:21:15,404:143101: Extracted URL
http://wpcrux.com/blog/change-wordpress-password-phpmyadmin/
halflife:2018-11-11 05:21:15,404:143101: wpcrux.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2018-11-11 05:21:15,404:143101: wpcrux.com: ip 199.188.200.107 (server237-1.web-hosting.com.)
halflife:2018-11-11 05:21:15,404:143101: wpcrux.com: ip 199.188.200.107 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)
1 hour later…
6:29 AM
halflife:2018-11-11 06:29:34,213:143103: Wordpress promotion URL
https://medium.com/@bulkq/whatsapp-dp-sad-love-stylish-profile-pics-for-boys-girls-6abea1aced6f
redirects to https://medium.com/suspended
halflife:2018-11-11 06:29:55,515:143103: medium.com: ns ['alina.ns.cloudflare.com.', 'kip.ns.cloudflare.com.']
halflife:2018-11-11 06:29:55,516:143103: medium.com: ip 104.16.124.127 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 06:29:55,516:143103: medium.com: ip 104.16.120.127 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 06:29:55,516:143103: medium.com: ip 104.16.121.127 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 06:29:55,516:143103: medium.com: ip 104.16.122.127 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 06:29:55,516:143103: medium.com: ip 104.16.123.127 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 06:30:11,855:143103: whatstatus.co: ip 66.96.147.103 (103.147.96.66.static.eigbox.net.)
halflife:2018-11-11 06:30:11,855:143103: whatstatus.co: ip 66.96.147.103 AS 29873 (BIZLAND-SD - The Endurance International Group, Inc., US/US)
halflife:2018-11-11 06:32:00,571:143104: adwebstudio.com: ns ['ns1.usm58.siteground.biz.', 'ns2.usm58.siteground.biz.']
halflife:2018-11-11 06:32:00,571:143104: adwebstudio.com: ip 37.60.252.87 (ip-37-60-252-87.siteground.com.)
halflife:2018-11-11 06:32:00,571:143104: adwebstudio.com: ip 37.60.252.87 AS 32475 (SINGLEHOP-LLC - SingleHop LLC, US/US)
halflife:2018-11-11 06:35:06,613:Visited URL at 2018-11-11 06:29:27.029240; returning cached result for
https://whatstatus.co/whatsapp-dp-images
halflife:2018-11-11 06:35:06,621:Visited URL at 2018-11-11 06:29:28.015886; returning cached result for
https://medium.com/@bulkq/whatsapp-dp-sad-love-stylish-profile-pics-for-boys-girls-6abea1aced6f
halflife:2018-11-11 06:35:06,621:Visited URL at 2018-11-11 06:29:30.599918; returning cached result for
https://whatstatus.co/
halflife:2018-11-11 06:35:06,621:Visited URL at 2018-11-11 06:29:32.814387; returning cached result for
https://whatstatus.co/wp-content/uploads/2018/08/hghssdxvbwsvdv267ashva7dgsv-300x300.jpeg
halflife:2018-11-11 06:35:06,621:Visited URL at 2018-11-11 06:29:34.212620; returning cached result for
https://whatstatus.co/wp-content/uploads/2018/08/hghssdxvbwsvdv267ashva7dgsv-300x300-150x150.jpeg
[ SmokeDetector | MS ] Url in title, blacklisted website in body, blacklisted website in title, body starts with title and ends in url, pattern-matching website in body, +4 more (692): nutritionless.com/cosmedique/ by rosikak on
wordpress.SE
halflife:2018-11-11 06:40:07,327:143106: Check post wordpress.stackexchange.com/questions/318887 (692)
[ SmokeDetector ] Blacklists reloaded at rev
ee5c6c7
(SmokeDetector: Auto watch of adwebstudio\.com
by Makyen --autopull) (running on ArtOfCode/TRINITY)
[ SmokeDetector | MS ] Url-only title, bad ns for domain in body, bad ns for domain in title, bad keyword in body, bad keyword in title, +11 more (1,386): doznutrition.com/bio-x-keto/ by Siouma Doiuma on
askubuntu.com
6:42 AM
halflife:2018-11-11 06:42:59,100:143107: Wordpress promotion URL
http://doznutrition.com/buy-diet-offer
redirects to https://www.rapidresultsketos.com/v1/?AFFID=1008&C1=3805&C2=102012cfb22d57d6171d1e56eed94c&C3=10219a3679344c09ea0947684c85cb&click_id=
halflife:2018-11-11 06:43:19,128:143107: rapidresultsketos.com: ns ['dahlia.ns.cloudflare.com.', 'terry.ns.cloudflare.com.']
halflife:2018-11-11 06:43:19,128:143107: rapidresultsketos.com: ip 159.65.108.177 (node.rapidresultsketos.com.)
halflife:2018-11-11 06:43:19,128:143107: rapidresultsketos.com: ip 159.65.108.177 AS 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC, US/US)
halflife:2018-11-11 06:43:19,129:143107: doznutrition.com: ns ['ulla.ns.cloudflare.com.', 'lee.ns.cloudflare.com.']
halflife:2018-11-11 06:43:19,129:143107: doznutrition.com: ip 104.24.110.210 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
6:57 AM
halflife:2018-11-11 06:58:28,415:143108: alisadv.com: ns ['ns1-pool.vivawebhost.com.', 'ns2-pool.vivawebhost.com.']
[ SmokeDetector ] Blacklists reloaded at rev
437d817
(SmokeDetector: Auto blacklist of whatstatus\.co
by K.Dᴀᴠɪs --autopull) (running on ArtOfCode/TRINITY)
7:11 AM
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially problematic ns configuration in body (27): This year thriller Halloween Director Says He Kept One Character Alive For The Sequel by mickelbonzi on
movies.SE
halflife:2018-11-11 07:12:31,443:143109: Extracted URL
https://lakenormanreview.com/how-to-watch-nobodys-fool-online-full-2018-moviefree/
halflife:2018-11-11 07:12:50,576:143109: regex how\W?to\W?watch\W?nobodys\W?fool\W?online\W?full\W?2018\W?moviefree search: 1/1 hits
halflife:2018-11-11 07:12:50,576:143109: URL tail how-to-watch-nobodys-fool-online-full-2018-moviefree is not blacklisted or watched
halflife:2018-11-11 07:12:50,577:143109: Extracted URL
https://lakenormanreview.com/finally-watch-halloween-online-full-2018-moviefree/
[ SmokeDetector ] Blacklists reloaded at rev
e91fb0c
(SmokeDetector: Auto watch of lakenormanreview\.com
by K.Dᴀᴠɪs --autopull) (running on ArtOfCode/TRINITY)
[ SmokeDetector ] Blacklists reloaded at rev
1897697
(SmokeDetector: Auto blacklist of lakenormanreview\.com
by K.Dᴀᴠɪs --autopull) (running on ArtOfCode/TRINITY)
[ SmokeDetector ] Blacklists reloaded at rev
c583618
(SmokeDetector: Auto unwatch of \bwatch\b.{0,80}\b(?:online|stream|live|movie|TV)s?\b
by Makyen --autopull) (running on ArtOfCode/TRINITY)
[ SmokeDetector ] Blacklists reloaded at rev
f000e1e
(SmokeDetector: Auto watch of watch\b.{0,80}\b(?:online|stream|live|movie|TV)s?
by Makyen --autopull) (running on ArtOfCode/TRINITY)
8:02 AM
[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (98): Their job is to sit in one place by bekoropuco on
meta.SE
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to migrate a sharepoint 2010 pagelayout to sharepoint 2013? by nite on
sharepoint.SE
halflife:2018-11-11 08:03:08,510:143111: Extracted URL
http://expert-advice.org/sharepoint/step-step-guide-migrate-sharepoint-2010-sharepoint-2013/
halflife:2018-11-11 08:03:08,510:143111: expert-advice.org: ns ['ns58.domaincontrol.com.', 'ns57.domaincontrol.com.']
halflife:2018-11-11 08:03:08,510:143111: expert-advice.org: ip 160.153.52.65 (ip-160-153-52-65.ip.secureserver.net.)
halflife:2018-11-11 08:03:08,510:143111: expert-advice.org: ip 160.153.52.65 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
[ SmokeDetector | MS ] Url in title, potentially bad ns for domain in title (97): <img alt="Put a description of the image here" src="yoursite.com/yourimage.jpg"/> by Odhikar on
meta.SE
8:08 AM
halflife:2018-11-11 08:08:26,325:143112: odhikar.news: ns ['rita.ns.cloudflare.com.', 'cody.ns.cloudflare.com.']
halflife:2018-11-11 08:08:26,325:143112: odhikar.news: ip 104.25.144.34 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 08:08:26,325:143112: odhikar.news: ip 104.25.145.34 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-11 08:08:26,325:143112: yoursite.com: ns ['ns22.cloudns.net.', 'ns23.cloudns.net.', 'ns24.cloudns.net.', 'ns21.cloudns.net.']
halflife:2018-11-11 08:08:26,325:143112: yoursite.com: ip 18.188.39.34 (ec2-18-188-39-34.us-east-2.compute.amazonaws.com.)
8:21 AM
[ SmokeDetector | MS ] Blacklisted website in answer, pattern-matching website in answer (172): Unable to register WordPress blog account in MS Word 2010 by Devi Prasad panda on
superuser.com
halflife:2018-11-11 08:33:06,892:143115: Extracted URL
https://sharepointtechnicalsupport.com/solved-word-cannot-register-your-account-wordpress/
halflife:2018-11-11 08:33:06,892:143115: sharepointtechnicalsupport.com is not blacklisted or watched
halflife:2018-11-11 08:33:06,892:143115: sharepointtechnicalsupport.com: ns ['ns3.wordpress.com.', 'ns1.wordpress.com.', 'ns2.wordpress.com.']
halflife:2018-11-11 08:33:06,892:143115: sharepointtechnicalsupport.com: ip 209.15.20.236 (209-15-20-236.ptr.pressable.net.)
halflife:2018-11-11 08:33:06,892:143115: sharepointtechnicalsupport.com: ip 209.15.20.236 AS 13768 (COGECO-PEER1 - Cogeco Peer 1, CA/CA)
halflife:2018-11-11 08:33:26,349:143115: regex solved\W?word\W?cannot\W?register\W?your\W?account\W?wordpress search: 1/1 hits
9:11 AM
[ SmokeDetector ] SmokeDetector started at rev
f000e1e
(SmokeDetector: Auto watch of watch\b.{0,80}\b(?:online|stream|live|movie|TV)s?
by Makyen --autopull) (running on ArtOfCode/TRINITY, Python 3.6.6)
[ SmokeDetector | MS ] Url in title, bad keyword in body, blacklisted website in body, blacklisted website in title, body starts with title and ends in url, +6 more (886): www.healthyfitnesspoint.com/keto-supply-south-africa-za/ by watsonaasi on
meta.SE
halflife:2018-11-11 09:21:10,025:143116: Wordpress promotion URL
https://www.healthyfitnesspoint.com/keto-supply-south-africa-try/
redirects to https://www.ketosupplyhouse.com/575/2077/?AFID=2077-2003&SID=3331&C1=18245007
halflife:2018-11-11 09:21:40,946:143116: healthyfitnesspoint.com: ns ['ns2.bluehost.com.', 'ns1.bluehost.com.']
halflife:2018-11-11 09:21:40,946:143116: healthyfitnesspoint.com: ip 50.87.248.35 (box2096.bluehost.com.)
9:35 AM
halflife:2018-11-11 09:35:11,219:143117: Check post chemistry.stackexchange.com/questions/104179 (195)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title (195): Why did my serum turned white by Klein Lastra on
chemistry.SE
9:59 AM
[ SmokeDetector | MS ] Url in title (96): Is the trademark search feature on USPTO.gov (tmsearch.uspto.gov) accurate? by Blattinum on
patents.SE
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, repeated url at end of long post (492): What is Vital Progenix? by Nicolecrawford on
superuser.com
10:05 AM
halflife:2018-11-11 10:05:00,521:Visited URL at 2018-11-10 13:43:55.473429; returning cached result for
https://healthexpertpills.com/vital-progenix-australia/
halflife:2018-11-11 10:05:00,521:143120: Extracted URL
https://healthexpertpills.com/vital-progenix-australia/
[ SmokeDetector | MS ] Link at end of body (99): Help Kali Linux İnstall Error ✏️ by Sıradışı Youtuber on
askubuntu.com
halflife:2018-11-11 10:06:50,151:143121: i.hizliresim.com: ip 148.251.128.206 (static.206.128.251.148.clients.your-server.de.)
halflife:2018-11-11 10:06:50,151:143121: i.hizliresim.com: ip 148.251.128.206 AS 24940 (HETZNER-AS, DE/DE)
halflife:2018-11-11 10:06:50,151:143121: i.hizliresim.com: ip 78.46.156.74 (static.74.156.46.78.clients.your-server.de.)
10:47 AM
halflife:2018-11-11 10:48:10,932:143122: gps-coordinates.org: ns ['ns1.timhuan4.arvixededicated.com.', 'ns2.timhuan4.arvixededicated.com.']
halflife:2018-11-11 10:48:10,932:143122: gps-coordinates.org: ip 184.154.80.211 (timhuan4.arvixededicated.com.)
11:02 AM
[ SmokeDetector | MS ] Link at end of body (99): Why firefox works on Linux but it cannot be ported on Minix? ✏️ by twist on
superuser.com
halflife:2018-11-11 11:02:38,931:143123: Extracted URL
https://www.youtube.com/watch?v=oS4UWgHtRDw#t=38m10s
websitehalflife:2018-11-11 11:02:38,931:143123: Extracted URL
https://www.quora.com/Is-Mozilla-Firefox-an-application-software
halflife:2018-11-11 11:02:38,931:143123: quora.com: ns ['ns-673.awsdns-20.net.', 'ns-1143.awsdns-14.org.', 'ns-1573.awsdns-04.co.uk.', 'ns-344.awsdns-43.com.']
halflife:2018-11-11 11:02:38,931:143123: quora.com: ip 34.228.124.38 (ec2-34-228-124-38.compute-1.amazonaws.com.)
halflife:2018-11-11 11:02:38,932:143123: quora.com: ip 34.228.124.38 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-11 11:02:38,932:143123: quora.com: ip 52.73.98.157 (ec2-52-73-98-157.compute-1.amazonaws.com.)
halflife:2018-11-11 11:02:38,932:143123: quora.com: ip 52.73.98.157 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
websitehalflife:2018-11-11 11:02:38,932:143123: URL tail is-mozilla-firefox-an-application-software is matched in quora.com/Is-Mozilla-Firefox-an-application-software
11:20 AM
[ SmokeDetector | MS ] Mostly non-latin answer (50): Couldn't sign in to Google by Mahdi Salemi on
android.SE
[ SmokeDetector | MS ] Link at end of body, potentially bad ns for domain in body, repeated url at end of long post (200): spastrong technology and external influences by xtiy201 on
askubuntu.com
[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer (181): Accuracy of Apple Watch Heart Rate Sensor? by SADGAFSDGA on
apple.SE
11:23 AM
halflife:2018-11-11 11:23:42,366:143125: spastrong.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2018-11-11 11:23:42,366:143125: spastrong.com: ip 198.54.115.24 (server210-2.web-hosting.com.)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, body starts with title and ends in url, link at end of body, pattern-matching website in body (489): Vital Progenix : When it involves the male improvement supplement, by Nicolecrawford on
askubuntu.com
halflife:2018-11-11 11:24:41,384:Visited URL at 2018-11-10 13:43:55.473429; returning cached result for
https://healthexpertpills.com/vital-progenix-australia/
halflife:2018-11-11 11:24:41,462:143127: Extracted URL
https://healthexpertpills.com/vital-progenix-australia/
thresholdhalflife:2018-11-11 11:25:06,533:143127: regex vital\W?progenix\W?australia search: 10/10 hits
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): scam with blockchain ✏️ by devfar on
bitcoin.SE
halflife:2018-11-11 11:31:30,921:143129: kryptobinary.co.uk: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2018-11-11 11:31:30,921:143129: kryptobinary.co.uk: ip 198.187.29.240 (business17-4.web-hosting.com.)
halflife:2018-11-11 11:31:30,921:143129: kryptobinary.co.uk: ip 198.187.29.240 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)
halflife:2018-11-11 11:34:37,215:143130: Extracted URL
https://docs.microsoft.com/en-us/azure/app-service/environment/app-service-app-service-environment-network-configuration-expressroute
halflife:2018-11-11 11:34:37,297:143130: Extracted URL
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-classic
11:48 AM
[ SmokeDetector | MS ] Bad keyword in body (97): Your human body has to do something by hahute on
meta.SE
11:58 AM
« first day (415 days earlier) ← previous day next day → last day (2001 days later) »