4:17 PM
[ SmokeDetector | MS ] Bad keyword in answer, blacklisted username, toxic answer detected (260): Did Stan Lee finish his cameo shooting for the upcoming Avengers 4 movie? by Penis Man on
scifi.SE
halflife:2018-11-13 16:18:14,013:143475: Extracted URL
http://usefulangle.com/post/74/javascript-dynamic-font-loading
halflife:2018-11-13 16:18:14,013:143475: usefulangle.com: ns ['ns57.domaincontrol.com.', 'ns58.domaincontrol.com.']
halflife:2018-11-13 16:18:14,013:143475: usefulangle.com: ip 166.62.27.151 (ip-166-62-27-151.ip.secureserver.net.)
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): stop spammer attack over postfix/dovecot by Marilyn D. Hornung on
unix.SE
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): HTTP403: PROHIBIDO by Beto Javi on
magento.SE
4:30 PM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Received an email saying someone has hacked my email account by Marilyn D. Hornung on
apple.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to find a spam link? by Marilyn D. Hornung on
wordpress.SE
4:47 PM
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, email in answer, pattern-matching email in answer (346): What is the meaning of the Mega-Million's Cash Option - Avoiding lottery's winning taxes by lisa on
money.SE
[ SmokeDetector ] Blacklists reloaded at rev
a6b69cb (SmokeDetector: Auto watch of almightspellhome@yahoo\.com by Erik the Outgolfer --autopull) (running on iBug/EC2)
halflife:2018-11-13 16:51:14,483:143482: Check post electronics.stackexchange.com/questions/406547 (1)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Need to identify this chip on camera lens mainboard ✏️ by Factulas on
electronics.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Margin Calls Short Seller Lifespans Losing Cash by Bruce Roberson on
aviation.SE
[ SmokeDetector | MS ] Bad keyword in link text in body (65): Помогите отредактировать скрипт на JS by Алексей on
ru.stackoverflow.com
logging:2018-11-13 17:00:03,502:error from callback <bound method ActionCableClient.on_message of <__main_.HalflifeClient object at 0x7ff453082fd0>>: HTTPSConnectionPool(host='ru.gearbest.com', port=443): Read timed out. (read timeout=20)
halflife:2018-11-13 17:00:56,087:
https://www.investopedia.com/simulator/messages/messages.aspx#ixzz5Wkr7I71l redirects to https://www.investopedia.com/accounts/login.aspx?returnurl=https%3A%2F%2Fwww.investopedia.com%2Fsimulator%2Fmessages%2Fmessages.aspx#ixzz5Wkr7I71l
halflife:2018-11-13 17:00:56,087:143484: morningstar.com: ns ['pdns205.ultradns.biz.', 'pdns205.ultradns.com.', 'pdns205.ultradns.net.', 'pdns205.ultradns.org.']
halflife:2018-11-13 17:00:56,087:143484: morningstar.com: ip 216.228.225.51 AS 25721 (13494 - Morningstar, Inc., US/US)
halflife:2018-11-13 17:01:15,222:143484: Extracted URL
https://www.investopedia.com/simulator/messages/messages.aspx#ixzz5Wkr7I71l
halflife:2018-11-13 17:01:15,222:143484: investopedia.com: ns ['dns2.p06.nsone.net.', 'dns3.p06.nsone.net.', 'dns4.p06.nsone.net.', 'dns1.p06.nsone.net.']
halflife:2018-11-13 17:01:15,222:143484: investopedia.com: ip 54.208.217.84 (ec2-54-208-217-84.compute-1.amazonaws.com.)
halflife:2018-11-13 17:01:15,222:143484: investopedia.com: ip 54.208.217.84 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-13 17:01:15,222:143484: investopedia.com: ip 54.82.249.250 (ec2-54-82-249-250.compute-1.amazonaws.com.)
5:17 PM
[ SmokeDetector | MS ] Bad keyword in title, phone number detected in title, potentially bad keyword in body, potentially bad keyword in username (168): Quickbooks support number +1 877-756-9341 by quickBooks tollfree on
meta.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to completely remove spam bots from Telegram groups? by ColinShark on
android.SE
[ SmokeDetector ] Blacklists reloaded at rev
2f5af07 (SmokeDetector: Auto watch of +1 877-756-9341 by Erik the Outgolfer --autopull) (running on iBug/EC2)
5:18 PM
[ SmokeDetector ] Blacklists reloaded at rev
f240688 (SmokeDetector: Auto watch of 877-756-9341 by Erik the Outgolfer --autopull) (running on iBug/EC2)
5:42 PM
[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (98): 2018 Beste männliche Verbesserungslösung für Männer by sanskritmohli on
english.SE
halflife:2018-11-13 17:42:39,917:143487: Extracted URL
http://nutratline.silvrback.com/rockerect-bewertungen-jetzt-kaufen-beeilen-sie-sich
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ns ['kochi-1956.herokussl.com.', 'elb027482-1614287292.us-east-1.elb.amazonaws.com.']
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip kochi-1956.herokussl.com. AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip elb027482-1614287292.us-east-1.elb.amazonaws.com. ()
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip elb027482-1614287292.us-east-1.elb.amazonaws.com. AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip 184.72.218.26 (ec2-184-72-218-26.compute-1.amazonaws.com.)
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip 184.72.218.26 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip 54.221.241.128 (ec2-54-221-241-128.compute-1.amazonaws.com.)
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip 54.221.241.128 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-13 17:42:39,917:143487: nutratline.silvrback.com: ip 54.243.174.167 (ec2-54-243-174-167.compute-1.amazonaws.com.)
halflife:2018-11-13 17:42:39,918:143487: nutratline.silvrback.com: ip 54.243.174.167 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2018-11-13 17:43:00,829:143487: regex rockerect\W?bewertungen\W?jetzt\W?kaufen\W?beeilen\W?sie\W?sich search: 1/1 hits
[ SmokeDetector | MS ] Bad keyword with email in answer (86): can i get my BTC back from scam site by michael roland on
bitcoin.SE
[ SmokeDetector ] Blacklists reloaded at rev
8924b7b (SmokeDetector: Auto watch of michaelroland727\W?@\W?gmail\W?\.\W?com by Erik the Outgolfer --autopull) (running on iBug/EC2)
5:52 PM
halflife:2018-11-13 17:52:50,669:143490: Check post christianity.stackexchange.com/questions/67096 (69)
[ SmokeDetector | MS ] Bad keyword in title, phone number detected in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username (169): Quickbooks support number +1 877-756-9341 by quickBooks tollfree on
superuser.com
halflife:2018-11-13 18:05:56,441:143492: Check post communitybuilding.stackexchange.com/questions/2995 (395)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching product name in body, pattern-matching product name in title, potentially bad keyword in body (395): How to use weight loss diet pills? by Paulzampas on
communitybuilding.SE
6:06 PM
halflife:2018-11-13 18:06:22,492:143492: Extracted URL
http://topwellnessguru.com/perfect-keto-max-france/
halflife:2018-11-13 18:06:22,493:143492: topwellnessguru.com: ns ['ns04.domaincontrol.com.', 'ns03.domaincontrol.com.']
halflife:2018-11-13 18:06:22,493:143492: topwellnessguru.com: ip 192.186.227.225 (ip-192-186-227-225.ip.secureserver.net.)
halflife:2018-11-13 18:06:22,493:143492: topwellnessguru.com: ip 192.186.227.225 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): 0 confirmations after 3 days. by Bloodir Wiredancer on
bitcoin.SE
halflife:2018-11-13 18:10:06,947:143493: Extracted URL
https://www.btcaccelerator.net/transaction-accelerator-viabtc
halflife:2018-11-13 18:10:06,948:143493: btcaccelerator.net: ns ['ns6.wixdns.net.', 'ns7.wixdns.net.']
halflife:2018-11-13 18:10:06,948:143493: btcaccelerator.net: ip 23.236.62.147 (147.62.236.23.bc.googleusercontent.com.)
halflife:2018-11-13 18:10:06,948:143493: btcaccelerator.net: ip 23.236.62.147 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-11-13 18:10:24,877:143493: URL tail transaction-accelerator-viabtc is not blacklisted or watched
halflife:2018-11-13 18:14:24,287:143494: Extracted URL
https://newrelic.co1.qualtrics.com/jfe/form/SV_a8YA9WyAomtTQDr
halflife:2018-11-13 18:14:24,287:143494: newrelic.co1.qualtrics.com: ns ['cloud.qualtrics.com.edgekey.net.', 'e3672.ksd.akamaiedge.net.']
halflife:2018-11-13 18:14:24,288:143494: newrelic.co1.qualtrics.com: ip cloud.qualtrics.com.edgekey.net. ()
halflife:2018-11-13 18:14:24,288:143494: newrelic.co1.qualtrics.com: ip cloud.qualtrics.com.edgekey.net. AS 16625 (AKAMAI-AS - Akamai Technologies, Inc., US/US)
halflife:2018-11-13 18:14:24,288:143494: newrelic.co1.qualtrics.com: ip e3672.ksd.akamaiedge.net. ()
halflife:2018-11-13 18:14:24,288:143494: newrelic.co1.qualtrics.com: ip e3672.ksd.akamaiedge.net. AS 16625 (AKAMAI-AS - Akamai Technologies, Inc., US/US)
halflife:2018-11-13 18:14:24,288:143494: newrelic.co1.qualtrics.com: ip 104.103.245.41 (a104-103-245-41.deploy.static.akamaitechnologies.com.)
6:32 PM
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): What does "burst" mean in this context? ✏️ by a deleted user on
ell.SE
halflife:2018-11-13 18:35:50,259:
http://www.oxforddictionaries.com/definition/english/burst redirects to https://en.oxforddictionaries.com/definition/burst
halflife:2018-11-13 18:36:10,386:143496: Extracted URL
http://www.oxforddictionaries.com/definition/english/burst
halflife:2018-11-13 18:36:10,386:143496: oxforddictionaries.com: ns ['gr-auth-b.ns.adv365.co.uk.', 'th-auth-a.ns.adv365.co.uk.', 'th-auth-b.ns.adv365.co.uk.', 'gr-auth-a.ns.adv365.co.uk.']
halflife:2018-11-13 18:36:10,386:143496: oxforddictionaries.com: ip 54.68.182.72 (ec2-54-68-182-72.us-west-2.compute.amazonaws.com.)
halflife:2018-11-13 18:36:10,386:143496: oxforddictionaries.com: ip 54.68.182.72 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)
halflife:2018-11-13 18:36:10,386:143496: Extracted URL
http://idioms.thefreedictionary.com/burst+into+tears
halflife:2018-11-13 18:36:10,387:143496: idioms.thefreedictionary.com: ip 91.204.210.230 (w6.thefreedictionary.com.)
halflife:2018-11-13 18:36:10,387:143496: idioms.thefreedictionary.com: ip 91.204.210.230 AS 52148 (RACKSRV, GB/GB)
halflife:2018-11-13 18:36:28,850:143496: Extracted URL
https://ell.stackexchange.com/questions/74106/how-to-understand-bomb-the-expletive-out-of-something-is-that-an-idiomatic-ex
[ SmokeDetector | MS ] Potentially problematic ns configuration in answer (46): Exploiting HTTP redirect function via the Host header by Chetan Soni on
security.SE
halflife:2018-11-13 18:45:21,451:143498: Extracted URL
https://www.yeahhub.com/host-header-attack-practical-exploitation-and-prevention/
halflife:2018-11-13 18:45:21,451:143498: yeahhub.com: ns ['ns2.cp-ht-8.hostgatorwebservers.com.', 'ns1.cp-ht-8.hostgatorwebservers.com.']
halflife:2018-11-13 18:45:21,451:143498: yeahhub.com: ip 162.241.148.21 AS 46606 (UNIFIEDLAYER-AS-1 - Unified Layer, US/US)
halflife:2018-11-13 18:45:39,938:143498: regex host\W?header\W?attack\W?practical\W?exploitation\W?and\W?prevention search: 0/1 hits
6:48 PM
[ SmokeDetector | MS ] Potentially problematic ns configuration in answer (46): Host header attacks: Possible exploits by Chetan Soni on
security.SE
halflife:2018-11-13 18:48:20,728:Visited URL at 2018-11-13 18:45:21.450930; returning cached result for
https://www.yeahhub.com/host-header-attack-practical-exploitation-and-prevention/
halflife:2018-11-13 18:48:20,729:143499: Extracted URL
https://www.yeahhub.com/host-header-attack-practical-exploitation-and-prevention/
halflife:2018-11-13 18:48:41,170:143499: regex host\W?header\W?attack\W?practical\W?exploitation\W?and\W?prevention search: 0/2 hits
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Visa for transit through Oman? by Devkant Tiwari on
travel.SE
[ SmokeDetector ] Blacklists reloaded at rev
05d962d (SmokeDetector: Auto blacklist of musafirevisa\.com by Glorfindel --autopull) (running on iBug/EC2)
halflife:2018-11-13 18:51:07,476:143500: musafirevisa.com: ns ['ns60.domaincontrol.com.', 'ns59.domaincontrol.com.']
halflife:2018-11-13 18:51:07,476:143500: musafirevisa.com: ip 166.62.6.48 (ip-166-62-6-48.ip.secureserver.net.)
6:56 PM
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ns for domain in answer, blacklisted user (161): Visa to Oman travelling with a car from UAE by Devkant Tiwari on
travel.SE
halflife:2018-11-13 18:57:00,234:Visited URL at 2018-11-13 18:51:07.476026; returning cached result for
https://www.musafirevisa.com/
halflife:2018-11-13 18:57:00,234:143501: musafirevisa.com matched: Body - Positions 50-66, 99-115, 173-189: musafirevisa.com
halflife:2018-11-13 18:57:58,468:143502: Extracted URL
https://www.thedevicesupport.org/roku-technical-support
halflife:2018-11-13 18:57:58,550:143502: thedevicesupport.org: ns ['ns2.s1.hostomy.net.', 'ns1.s1.hostomy.net.']
halflife:2018-11-13 18:57:58,550:143502: thedevicesupport.org: ip 195.201.249.8 (s1.domaindnshost.com.)
7:12 PM
[ SmokeDetector | MS ] Mostly punctuation marks in answer, repeating characters in answer (145): Ошибка Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given by й3уйцуцй on
ru.stackoverflow.com
[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (161): What does 软文 and 小号 mean in internet slang? by hhghh on
chinese.SE
8:04 PM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Why would a country persecute people with autism? by Robus on
worldbuilding.SE
8:22 PM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): how do I install Bitcoin Private electrum wallet on ubuntu 16.04 LTS? ✏️ by Dr.Joe on
askubuntu.com
halflife:2018-11-13 20:22:32,411:143507: Extracted URL
https://github.com/BTCPrivate/electrum-btcp/releases/
halflife:2018-11-13 20:22:32,412:143507: btcprivate.org: ns ['bonnie.ns.cloudflare.com.', 'nash.ns.cloudflare.com.']
halflife:2018-11-13 20:22:32,412:143507: btcprivate.org: ip 104.28.20.91 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
9:16 PM
[ SmokeDetector ] Blacklists reloaded at rev
9ff7228 (SmokeDetector: Auto watch of visauae\.net by Erik the Outgolfer --autopull) (running on iBug/EC2)
9:31 PM
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, potentially bad keyword in title (197): Get ounces of top shelf buds of weed for 90-100 a pop by kojoe on
bitcoin.SE
websitehalflife:2018-11-13 21:31:50,012:143509: Extracted URL
https://teamweedforbuds2018.yolasite.com/
halflife:2018-11-13 21:31:50,012:143509: teamweedforbuds2018.yolasite.com is not blacklisted or watched
halflife:2018-11-13 21:31:50,012:143509: teamweedforbuds2018.yolasite.com: ip 104.16.159.215 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-13 21:31:50,012:143509: teamweedforbuds2018.yolasite.com: ip 104.16.160.215 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-13 21:31:50,012:143509: teamweedforbuds2018.yolasite.com: ip 104.16.161.215 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-13 21:31:50,013:143509: teamweedforbuds2018.yolasite.com: ip 104.16.162.215 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-11-13 21:31:50,013:143509: teamweedforbuds2018.yolasite.com: ip 104.16.163.215 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
thresholdhalflife:2018-11-13 21:31:50,013:143509: teamweedforbuds2018.yolasite.com: 10/10 over 67 days, 6:51:24
9:46 PM
[ SmokeDetector ] SmokeDetector started at rev
9ff7228 (SmokeDetector: Auto watch of visauae\.net by Erik the Outgolfer --autopull) (running on iBug/EC2, Python 3.6.6)
[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer (263): I didn't get the Pacifist ending, what went wrong? by user221113 on
gaming.SE
10:56 PM
« first day (417 days earlier) ← previous day next day → last day (1984 days later) »
