nkemsoftware\.com by paper1111 --autopull) (running on teward/Lunar Eclipse)
10:02 AM
10:14 AM
[ SmokeDetector | MS ] Link at end of answer: How do I turn off Messenger's default browser? by Evan on
android.SE
[ SmokeDetector ] SmokeDetector started at rev c9f5baf (SmokeDetector: Auto watch of
internetexplorerbrowsersupport\.com by Mithrandir --autopull) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body, +3 more: Makes you healthy and fit with Kara Keto Burn by getbluesupplement on
meta.SE
[ SmokeDetector | MS ] Repeating characters in answer: Storing bus routes in a database by user154665 on
dba.SE
[ SmokeDetector ] SmokeDetector started at rev 162af47 (SmokeDetector: Auto blacklist of
seodigitalmarketing.in by doppelgreener --autopull) (running on teward/Lunar Eclipse)
[ SmokeDetector ] SmokeDetector started at rev 6a7ab76 (SmokeDetector: Auto unblacklist of
seodigitalmarketing.in by Mithrandir --autopull) (running on teward/Lunar Eclipse)
10:44 AM
halflife:2018-07-04 10:44:22,992:125761: Extracted URL
http://m888.ir/uploads/Active%20Sync%20For%20Win%20Xp-setup%20(646u).rar
halflife:2018-07-04 10:44:23,032:125761: Extracted URL
http://m888.ir/uploads/Active%20Sync%20For%20Win%207-drvupdat%20(124u).rar
halflife:2018-07-04 10:44:59,207:125762: hailataxii.com: ns ['ns07.domaincontrol.com.', 'ns08.domaincontrol.com.']
halflife:2018-07-04 10:44:59,207:125762: hailataxii.com: ip 162.252.82.163 (162-252-82-163.static.hvvc.us.)
halflife:2018-07-04 10:44:59,207:125762: hailataxii.com: ip 162.252.82.163 AS 29802 (HVC-AS - HIVELOCITY VENTURES CORP, US/US)
halflife:2018-07-04 10:45:44,753:125763: webdesigncity.com.au: ns ['ns12.domaincontrol.com.', 'ns11.domaincontrol.com.']
halflife:2018-07-04 10:45:44,753:125763: webdesigncity.com.au: ip 132.148.84.68 (ip-132-148-84-68.ip.secureserver.net.)
halflife:2018-07-04 10:45:44,753:125763: webdesigncity.com.au: ip 132.148.84.68 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
halflife:2018-07-04 10:46:34,765:125764: Extracted URL
https://www.ravindrra.com/image/cache/catalog/4G_Flex_Tracks-250x350.jpg
halflife:2018-07-04 10:46:34,765:125764: ravindrra.com: ns ['ns07.domaincontrol.com.', 'ns08.domaincontrol.com.']
halflife:2018-07-04 10:46:34,765:125764: ravindrra.com: ip 148.66.136.61 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
halflife:2018-07-04 10:47:12,882:
http://www.testostack.com/cdx-labs-cbd-oil/ redirects to http://www.testostack.com
halflife:2018-07-04 10:47:12,884:125766: testostack.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2018-07-04 10:47:12,961:125766: testostack.com: ip 198.54.115.115 (premium37-2.web-hosting.com.)
halflife:2018-07-04 10:47:12,961:125766: testostack.com: ip 198.54.115.115 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)
halflife:2018-07-04 10:48:30,434:125767: equalweb.com: ns ['dns1.name-services.com.', 'dns2.name-services.com.', 'dns3.name-services.com.', 'dns4.name-services.com.', 'dns5.name-services.com.']
halflife:2018-07-04 10:48:30,434:125767: equalweb.com: ip 212.179.58.47 (bzq-179-58-47.cust.bezeqint.net.)
halflife:2018-07-04 10:48:30,434:125767: equalweb.com: ip 212.179.58.47 AS 8551 (BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone, IL/IL)
halflife:2018-07-04 10:49:12,095:125768: studiogears.com: ns ['alina.ns.cloudflare.com.', 'kurt.ns.cloudflare.com.']
halflife:2018-07-04 10:49:12,095:125768: studiogears.com: ip 104.27.178.29 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
[ SmokeDetector ] SmokeDetector started at rev c9304f4 (SmokeDetector: Auto blacklist of
bluesupplement\.org by Mithrandir --autopull) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Manually reported question: Real Analysis questions by padmesh gupta on
mathoverflow.net
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad pattern in URL body, blacklisted username, blacklisted website in body, +3 more: But the appeal around this set could be very difficult by nixonjuriya on
askubuntu.com
10:56 AM
[ SmokeDetector | MS ] Offensive body detected, offensive title detected: Kiwy, Stephen Kitt, Thomas Nyman, Romeo Ninov, Archemar, jasonwryan, Kusalananda, andcoz, Ulrich Schwarz are faggots? by weo on
unix.SE
[ SmokeDetector ] SmokeDetector started at rev 4ad07fd (SmokeDetector: Auto watch of
padmeshgupta\.com by doppelgreener --autopull) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Offensive body detected, offensive title detected: Kiwy, Stephen Kitt, Thomas Nyman, Romeo Ninov, Archemar, jasonwryan, Kusalananda, andcoz, Ulrich Schwarz are faggots? by weo on
unix.SE
10:58 AM
halflife:2018-07-04 10:49:46,847:125773: HTTP status 404 for
https://www.bluesupplement.com/keto-plus-diet/
halflife:2018-07-04 10:50:40,613:Visited URL at 2018-07-04 10:50:40.535631; returning cached result for
https://www.seodigitalmarketing.in/
halflife:2018-07-04 10:50:40,614:125774: seodigitalmarketing.in: ns ['barbara.ns.cloudflare.com.', 'max.ns.cloudflare.com.']
halflife:2018-07-04 10:50:40,614:125774: seodigitalmarketing.in: ip 104.27.182.185 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 10:50:40,614:125774: seodigitalmarketing.in: ip 104.27.183.185 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 10:51:22,529:125775: Extracted URL
http://davidsonsousa.net/en/post/setting-folder-permissions-using-web-deploy
halflife:2018-07-04 10:51:22,530:125775: davidsonsousa.net: ns ['ns53.domaincontrol.com.', 'ns54.domaincontrol.com.']
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, potentially bad NS for domain in body, potentially bad keyword in body, +1 more: different from each person *Check with kara keto physician before begin, if you have a by porshbainz5 on
wordpress.SE
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, link following arrow in body, +2 more: Green Coffee : Higher your metabolism to burn excess fat by greencoffee on
askubuntu.com
[ SmokeDetector | MS ] Username similar to website in answer: wireless temperature sensor by Ubi Bot on
electronics.SE
halflife:2018-07-04 10:52:19,373:125776: rotoraptors.webs.com: ip 104.16.91.120 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 10:52:19,373:125776: rotoraptors.webs.com: ip 104.16.87.120 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 10:52:19,374:125776: rotoraptors.webs.com: ip 104.16.88.120 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 10:52:19,374:125776: rotoraptors.webs.com: ip 104.16.89.120 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 10:52:19,988:125777: Check post datascience.stackexchange.com/questions/33975 (1)
logging:2018-07-04 10:53:04,969:error from callback <bound method ActionCableClient.on_message of <__main_.HalflifeClient object at 0x7ff031cb2f60>>: 'asquery'
halflife:2018-07-04 10:53:34,725:125778: crnk.io: ns ['dns1.registrar-servers.com.', 'dns2.registrar-servers.com.']
halflife:2018-07-04 10:53:34,725:125778: crnk.io: ip 192.30.252.154 (lb-192-30-252-154-iad.github.com.)
halflife:2018-07-04 10:53:34,725:125778: crnk.io: ip 192.30.252.154 AS 36459 (GITHUB - GitHub, Inc., US/US)
halflife:2018-07-04 10:53:34,725:125778: crnk.io: ip 192.30.252.153 (lb-192-30-252-153-iad.github.com.)
halflife:2018-07-04 10:53:34,725:125778: crnk.io: ip 192.30.252.153 AS 36459 (GITHUB - GitHub, Inc., US/US)
halflife:2018-07-04 10:53:42,257:125781: Extracted URL
https://www.garciniacambogialean.com/premier-diet-keto
halflife:2018-07-04 10:53:42,257:125781: Wordpress promotion URL
https://www.garciniacambogialean.com/xq7i redirects to https://ketoultradiet.com/offers/v1/?a_aid=ptr&cid=328&data1=DATA1&data2=DATA2&data4=v1&utm_source=ptr&utm_medium=cpa&utm_campaign=v1&data1=8469&data2=2250793643
halflife:2018-07-04 10:54:22,123:125781: ketoultradiet.com: ns ['ns-430.awsdns-53.com.', 'ns-702.awsdns-23.net.', 'ns-1474.awsdns-56.org.', 'ns-1543.awsdns-00.co.uk.']
halflife:2018-07-04 10:54:22,124:125781: ketoultradiet.com: ip 18.217.199.190 (ec2-18-217-199-190.us-east-2.compute.amazonaws.com.)
11:16 AM
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad keyword in username: How can I delete the multiple contacts at a time on iPhone? by Mike Laptops Repairs on
apple.SE
halflife:2018-07-04 10:54:22,124:125781: ketoultradiet.com: ip 52.15.173.201 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)
halflife:2018-07-04 10:54:22,124:125781: URL tail premier-diet-keto is matched (watched or blacklisted)
halflife:2018-07-04 10:54:23,925:Visited URL at 2018-07-04 10:53:39.928151; returning cached result for
https://www.garciniacambogialean.com/premier-diet-keto
halflife:2018-07-04 10:54:24,003:Visited URL at 2018-07-04 10:53:42.257025; returning cached result for
https://www.garciniacambogialean.com/xq7i
halflife:2018-07-04 10:54:24,003:125782: Extracted URL
https://www.garciniacambogialean.com/premier-diet-keto
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, blacklisted website in title, link at end of body, pattern-matching product name in body, +1 more: Keto Plus Diet// www.click2trial.com/keto-plus-diet/ by zumberjam on
superuser.com
halflife:2018-07-04 10:54:58,425:125782: URL tail premier-diet-keto is matched (watched or blacklisted)
halflife:2018-07-04 10:55:38,763:125783: Extracted URL
http://www.nkemsoftware.com/2018/07/avast-pro-antivirus-2018.html
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ns ['ns72.domaincontrol.com.', 'ns71.domaincontrol.com.']
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.36.21 (any-in-2415.1e100.net.)
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.36.21 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.38.21 (any-in-2615.1e100.net.)
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.38.21 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.32.21 (any-in-2015.1e100.net.)
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.32.21 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-07-04 10:55:38,764:125783: nkemsoftware.com: ip 216.239.34.21 (any-in-2215.1e100.net.)
halflife:2018-07-04 10:55:40,771:125785: Check post astronomy.stackexchange.com/questions/26866 (678)
halflife:2018-07-04 10:55:41,669:Visited URL at 2018-07-02 11:39:10.822735; returning cached result for
http://www.mysupplementsera.com/dsn-code-black/
halflife:2018-07-04 10:55:41,670:Visited URL at 2018-07-02 11:39:11.273914; returning cached result for
http://www.mysupplementsera.com/Get-testoultra-si
halflife:2018-07-04 10:55:41,670:Visited URL at 2018-07-02 11:39:11.765261; returning cached result for
http://www.mysupplementsera.com/get-junivive-trial
halflife:2018-07-04 10:55:41,670:Visited URL at 2018-07-02 11:39:12.294008; returning cached result for
http://www.mysupplementsera.com/buy-thermo
halflife:2018-07-04 10:55:41,670:Visited URL at 2018-07-02 11:39:12.743691; returning cached result for
http://www.mysupplementsera.com/buy-codeblack
halflife:2018-07-04 10:55:41,670:125785: Extracted URL
http://www.mysupplementsera.com/dsn-code-black/
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +2 more: SHAPIRO MD HAIR SHAMPOO REVIEW - A NATURAL BLOCKING OF THE HAIR LOSS . by shapirousa on
superuser.com
[ SmokeDetector | MS ] Phone number detected in title: I Have forgotten my Malware Bytes Account username 1-888-272-6111 by Steve Ben on
meta.SE
halflife:2018-07-04 10:57:25,425:
http://www.internetexplorerbrowsersupport.com/ redirects to https://www.internetexplorerbrowsersupport.com/
halflife:2018-07-04 10:57:25,503:125787: Extracted URL
http://www.internetexplorerbrowsersupport.com/
halflife:2018-07-04 10:57:25,504:125787: internetexplorerbrowsersupport.com: ns ['ns75.domaincontrol.com.', 'ns76.domaincontrol.com.']
> Url in title, potentially bad ns for domain in body, potentially bad ns for domain in title
----------
Title - gtk-rs.org NS suspicious dns1.registrar-servers.com.,dns2.registrar-servers.com.
Title - Position 1-18: http://gtk-rs.org
Post - gtk-rs.org NS suspicious dns1.registrar-servers.com.,dns2.registrar-servers.com.
----------
Title - gtk-rs.org NS suspicious dns1.registrar-servers.com.,dns2.registrar-servers.com.
Title - Position 1-18: http://gtk-rs.org
Post - gtk-rs.org NS suspicious dns1.registrar-servers.com.,dns2.registrar-servers.com.
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body: Take The Stress Out Of PureFit Keto by EmilyEthan on
bricks.SE
halflife:2018-07-04 10:58:16,952:125788: cognegicsystems.com: ns ['ns25.domaincontrol.com.', 'ns26.domaincontrol.com.']
halflife:2018-07-04 10:58:16,952:125788: cognegicsystems.com: ip 160.153.90.230 (ip-160-153-90-230.ip.secureserver.net.)
halflife:2018-07-04 10:58:16,952:125788: cognegicsystems.com: ip 160.153.90.230 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
websitehalflife:2018-07-04 10:59:04,503:125790: Extracted URL
http://swapnilrmore.blogspot.com/2018/07/infinite-loop-while-calling.html
halflife:2018-07-04 10:59:04,504:125790: swapnilrmore.blogspot.com: ns ['blogspot.l.googleusercontent.com.']
halflife:2018-07-04 10:59:04,504:125790: swapnilrmore.blogspot.com: ip blogspot.l.googleusercontent.com. ()
halflife:2018-07-04 10:59:04,504:125790: swapnilrmore.blogspot.com: ip blogspot.l.googleusercontent.com. AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-07-04 10:59:04,504:125790: swapnilrmore.blogspot.com: ip 209.85.202.132 (dg-in-f132.1e100.net.)
halflife:2018-07-04 10:59:04,504:125790: swapnilrmore.blogspot.com: ip 209.85.202.132 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2018-07-04 10:59:48,722:125791: bluesupplement.org: ns ['ns23.domaincontrol.com.', 'ns24.domaincontrol.com.']
halflife:2018-07-04 10:59:48,722:125791: bluesupplement.org: ip 148.66.136.124 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
halflife:2018-07-04 11:01:00,201:125794: Extracted URL
https://hysyshub.com/viewarticle/image-resize-using-php
halflife:2018-07-04 11:01:00,202:125794: hysyshub.com: ns ['ns45.domaincontrol.com.', 'ns46.domaincontrol.com.']
halflife:2018-07-04 11:01:00,202:125794: hysyshub.com: ip 166.62.10.50 (ip-166-62-10-50.ip.secureserver.net.)
halflife:2018-07-04 11:01:00,202:125794: hysyshub.com: ip 166.62.10.50 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
halflife:2018-07-04 11:01:57,443:125795: padmeshgupta.com: ns ['rachel.ns.cloudflare.com.', 'nile.ns.cloudflare.com.']
halflife:2018-07-04 11:01:57,444:125795: padmeshgupta.com: ip 104.24.109.142 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 11:01:57,444:125795: padmeshgupta.com: ip 104.24.108.142 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2018-07-04 11:02:01,371:125796: Extracted URL
https://www.drozien.com/naturnica-male-enhancement-pills-review/
halflife:2018-07-04 11:02:58,007:125796: regex naturnica\W?male\W?enhancement\W?pills search: 1/1 hits
halflife:2018-07-04 11:02:58,008:125796: URL tail naturnica-male-enhancement-pills is not blacklisted or watched
halflife:2018-07-04 11:04:50,864:125799: Check post wordpress.stackexchange.com/questions/307679 (295)
halflife:2018-07-04 11:05:24,865:125800: folliclerx.in: ip 198.54.116.220 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)
halflife:2018-07-04 11:07:12,319:125801: ubibot.io: ns ['ns3.digitalocean.com.', 'ns1.digitalocean.com.', 'ns2.digitalocean.com.']
« first day (285 days earlier) ← previous day next day → last day (2128 days later) »
