Charcoal Test

12:04 AM

halflife:2019-03-19 00:04:47,261:165510: Check post apple.stackexchange.com/a/354209 (86)

[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad keyword in answer (86): Can someone else see my WhatsApp contacts / chats if I downloaded app using his account? by Joshua D thompson on apple.SE

Halflife

halflife:2019-03-19 00:04:47,262:165510: Extracted possible phone number 13148339209

halflife:2019-03-19 00:04:47,262:165510: Extracted possible phone number 13146357319

halflife:2019-03-19 00:06:35,263:165511: Check post stackoverflow.com/a/55231836 (1)

halflife:2019-03-19 00:16:18,459:165512: Check post apple.stackexchange.com/questions/354210 (262)

halflife:2019-03-19 00:16:18,460:165512: Extracted possible phone number 8448976216

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in link text in body, bad keyword in title, pattern-matching website in body, potentially bad keyword in body (262): How To Contact Uphold Support Number Regarding Technical Issues by Jon Michal on apple.SE

Halflife

Traceback (most recent call last):

File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 343, in _make_request

self._validate_conn(conn)

File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 839, in _validate_conn

conn.connect()

File "/usr/lib/python3.6/site-packages/urllib3/connection.py", line 344, in connect

ssl_context=context)

File "/usr/lib/python3.6/site-packages/urllib3/util/ssl_.py", line 344, in ssl_wrap_socket

return context.wrap_socket(sock, server_hostname=server_hostname)

File "/usr/lib/python3.6/ssl.py", line 407, in wrap_socket

_context=self, _session=session)

File "/usr/lib/python3.6/ssl.py", line 817, in init

self.do_handshake()

File "/usr/lib/python3.6/ssl.py", line 1077, in do_handshake

self._sslobj.do_handshake()

File "/usr/lib/python3.6/ssl.py", line 689, in do_handshake

self._sslobj.do_handshake()

socket.timeout: _ssl.c:835: The handshake operation timed out

During handling of the above exception, another exception occurred:

Traceback (most recent call last):

File "/usr/lib/python3.6/site-packages/requests/adapters.py", line 449, in send

timeout=timeout

File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 638, in urlopen

_stacktrace=sys.exc_info()[2])

File "/usr/lib/python3.6/site-packages/urllib3/util/retry.py", line 367, in increment

raise six.reraise(type(error), error, _stacktrace)

File "/usr/lib/python3.6/site-packages/urllib3/packages/six.py", line 686, in reraise

raise value

File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 600, in urlopen

chunked=chunked)

File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 346, in _make_request

self._raise_timeout(err=e, url=url, timeout_value=conn.timeout)

File "/usr/lib/python3.6/site-packages/urllib3/connectionpool.py", line 306, in _raise_timeout

raise ReadTimeoutError(self, url, "Read timed out. (read timeout=%s)" % timeout_value)

urllib3.exceptions.ReadTimeoutError: HTTPSConnectionPool(host='asktollfree.us', port=443): Read timed out. (read timeout=20)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):

File "./halflife.py", line 57, in on_event_post_create

self.checker.check(arg['message']['object'])

File "./halflife.py", line 379, in check

url_result = self.check_urls(urls)

File "./halflife.py", line 611, in check_urls

response = _fetch(url)

File "./halflife.py", line 523, in _fetch

'Upgrade-Insecure-Requests': '1',

File "/usr/lib/python3.6/site-packages/requests/api.py", line 75, in get

return request('get', url, params=params, **kwargs)

File "/usr/lib/python3.6/site-packages/requests/api.py", line 60, in request

return session.request(method=method, url=url, **kwargs)

File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 533, in request

resp = self.send(prep, **send_kwargs)

File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 646, in send

r = adapter.send(request, **kwargs)

File "/usr/lib/python3.6/site-packages/requests/adapters.py", line 529, in send

raise ReadTimeout(e, request=request)

requests.exceptions.ReadTimeout: HTTPSConnectionPool(host='asktollfree.us', port=443): Read timed out. (read timeout=20)

halflife:2019-03-19 00:17:17,270:165513: Check post stackoverflow.com/questions/55231902 (52)

halflife:2019-03-19 00:33:54,500:165514: Check post gaming.stackexchange.com/a/347930 (247)

SmokeDetector

12:33 AM

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, repeating words in answer, toxic answer detected (247): Does the Lunatic Cultist spawn on iPad? by Ugly on gaming.SE

Halflife

12:46 AM

halflife:2019-03-19 00:46:54,780:165515: Check post stackoverflow.com/a/55232101 (60)

halflife:2019-03-19 00:46:57,608:165515: Extracted URL http://java2uml.com

halflife:2019-03-19 00:46:57,608:165515: java2uml.com is not blacklisted or watched

halflife:2019-03-19 00:46:57,608:165515: java2uml.com: ns ['ns-517.awsdns-00.net.', 'ns-1363.awsdns-42.org.', 'ns-2007.awsdns-58.co.uk.', 'ns-172.awsdns-21.com.']

halflife:2019-03-19 00:46:57,608:165515: java2uml.com: ip 52.3.29.201 (ec2-52-3-29-201.compute-1.amazonaws.com.)

halflife:2019-03-19 00:46:57,608:165515: java2uml.com: ip 52.3.29.201 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)

halflife:2019-03-19 00:46:57,608:165515: java2uml.com: first hit

halflife:2019-03-19 00:49:20,654:165516: Check post superuser.com/questions/1415178 (97)

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body (97): Upgrading Windows XP to a newer Windows operating system ✏️ by Scooter on superuser.com

Halflife

1:03 AM

halflife:2019-03-19 01:03:37,147:165517: Check post stackoverflow.com/questions/55232227 (1)

halflife:2019-03-19 01:03:40,141:Domain cardetails.96.lt not extracted by metasmoke

halflife:2019-03-19 01:03:40,142:165517: Extracted URL https://github.com/liamdocherty/car_detailing

halflife:2019-03-19 01:03:40,142:165517: github.com is whitelisted

halflife:2019-03-19 01:03:40,142:165517: Extracted URL http://cardetails.96.lt/KC%20DET%202/

halflife:2019-03-19 01:03:40,142:165517: cardetails.96.lt is not blacklisted or watched

halflife:2019-03-19 01:03:40,142:165517: cardetails.96.lt: ns ['ns2.hostinger.co.uk.', 'ns3.hostinger.co.uk.', 'ns4.hostinger.co.uk.', 'ns1.hostinger.co.uk.']

halflife:2019-03-19 01:03:40,142:165517: cardetails.96.lt: ip 153.92.6.109 ()

halflife:2019-03-19 01:03:40,142:165517: cardetails.96.lt: ip 153.92.6.109 AS 47583 (AS-HOSTINGER, LT/LT)

halflife:2019-03-19 01:03:40,142:165517: URL tail kc%20det%202 is not blacklisted or watched

halflife:2019-03-19 01:03:40,142:165517: Extracted URL https://i.stack.imgur.com/tgrxu.png

halflife:2019-03-19 01:03:40,142:165517: i.stack.imgur.com is whitelisted

SmokeDetector

1:35 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev e5810f1 (SmokeDetector: Merge pull request #2751 from Charcoal-SE/auto-blacklist-1552934331) (running on teward/Solar Flare)

[ SmokeDetector ] SmokeDetector started at rev e5810f1 (SmokeDetector: Merge pull request #2751 from Charcoal-SE/auto-blacklist-1552934331) (running on teward/Lunar Eclipse, Python 3.6.7)

Restart: API quota is 7862.

[ SmokeDetector ] SmokeDetector started at rev e5810f1 (SmokeDetector: Merge pull request #2751 from Charcoal-SE/auto-blacklist-1552934331) (running on teward/Lunar Eclipse, Python 3.6.7)

Restart: API quota is 7856.

[ SmokeDetector ] SmokeDetector started in standby mode at rev e5810f1 (SmokeDetector: Merge pull request #2751 from Charcoal-SE/auto-blacklist-1552934331) (running on teward/Solar Flare)

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How can the remains of a god's corpse be kept off the black market and out of the hands of mortals? by Rupert Hide on worldbuilding.SE

Halflife

halflife:2019-03-19 01:41:35,923:165518: Check post worldbuilding.stackexchange.com/a/140857 (1)

SmokeDetector

1:50 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Does the IRS penalize for overpaying and underpaying state income tax? by Perfervor on money.SE

Halflife

halflife:2019-03-19 01:50:54,970:165519: Check post money.stackexchange.com/a/106675 (1)

Halflife

2:11 AM

halflife:2019-03-19 02:11:14,844:165520: Check post stackoverflow.com/a/55232666 (60)

halflife:2019-03-19 02:11:22,970:165520: Extracted URL https://manage.smarturl.it

halflife:2019-03-19 02:11:22,970:165520: manage.smarturl.it is not blacklisted or watched

halflife:2019-03-19 02:11:22,970:165520: manage.smarturl.it: ns ['']

halflife:2019-03-19 02:11:22,971:165520: manage.smarturl.it: ip 18.205.118.165 (ec2-18-205-118-165.compute-1.amazonaws.com.)

halflife:2019-03-19 02:11:22,971:165520: manage.smarturl.it: ip 18.205.118.165 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)

halflife:2019-03-19 02:11:22,971:165520: manage.smarturl.it: ip 34.193.246.176 (ec2-34-193-246-176.compute-1.amazonaws.com.)

halflife:2019-03-19 02:11:22,971:165520: manage.smarturl.it: ip 34.193.246.176 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)

halflife:2019-03-19 02:11:22,971:165520: manage.smarturl.it: first hit

halflife:2019-03-19 02:11:22,971:165520: Extracted URL https://branch.io

halflife:2019-03-19 02:11:22,971:165520: branch.io is not blacklisted or watched

halflife:2019-03-19 02:11:22,971:165520: branch.io: ns ['ns-991.awsdns-59.net.', 'ns-1091.awsdns-08.org.', 'ns-1809.awsdns-34.co.uk.', 'ns-236.awsdns-29.com.']

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.89 (server-13-33-50-89.man50.r.cloudfront.net.)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.89 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.108 (server-13-33-50-108.man50.r.cloudfront.net.)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.108 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.81 (server-13-33-50-81.man50.r.cloudfront.net.)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.81 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.53 (server-13-33-50-53.man50.r.cloudfront.net.)

halflife:2019-03-19 02:11:22,971:165520: branch.io: ip 13.33.50.53 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 02:11:22,972:165520: branch.io: first hit

Halflife

2:38 AM

halflife:2019-03-19 02:38:10,758:165521: Check post stackoverflow.com/questions/55232835 (69)

halflife:2019-03-19 02:38:10,758:165521: Blacklisted contents but post still below auto

SmokeDetector

3:13 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Emails that forward back to us from external SMTP server by Michael Ouyang on askubuntu.com

Halflife

halflife:2019-03-19 03:13:17,665:165522: Check post askubuntu.com/questions/1126799 (1)

halflife:2019-03-19 03:22:24,676:165523: Check post askubuntu.com/questions/1126802 (195)

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, pattern-matching product name in body (195): Boosts your sexual endurance and stamina by ivyjoaks on askubuntu.com

Halflife

halflife:2019-03-19 03:23:06,573:165523: Extracted URL https://mobissue.com/rnls/mhxx

halflife:2019-03-19 03:23:06,573:165523: mobissue.com is not blacklisted or watched

halflife:2019-03-19 03:23:06,573:165523: mobissue.com: ns ['ns4.linode.com.', 'ns5.linode.com.', 'ns1.linode.com.', 'ns2.linode.com.', 'ns3.linode.com.']

halflife:2019-03-19 03:23:06,573:165523: mobissue.com: ip 45.33.122.60 (li1059-60.members.linode.com.)

halflife:2019-03-19 03:23:06,573:165523: mobissue.com: ip 45.33.122.60 AS 63949 (LINODE-AP Linode, LLC, US/US)

halflife:2019-03-19 03:23:06,573:165523: mobissue.com: 5/6 over 60 days, 16:41:10

halflife:2019-03-19 03:23:06,573:165523: Extracted URL http://www.slideboom.com/presentations/2276773/Duraflex-Male-Enhancement-%3A-En‌ables-You-To-Experience-Harder-Pumps

halflife:2019-03-19 03:23:06,573:165523: slideboom.com is not blacklisted or watched

halflife:2019-03-19 03:23:06,573:165523: slideboom.com: ns ['dns1.easydns.com.', 'dns2.easydns.net.', 'dns3.easydns.org.']

halflife:2019-03-19 03:23:06,573:165523: slideboom.com: ip 207.244.83.244 (hosted-by.leaseweb.com.)

halflife:2019-03-19 03:23:06,573:165523: slideboom.com: ip 207.244.83.244 AS 30633 (LEASEWEB-USA-WDC-01 - Leaseweb USA, Inc., US/US)

halflife:2019-03-19 03:23:06,573:165523: slideboom.com: 7/8 over 107 days, 21:29:26

halflife:2019-03-19 03:23:06,574:165523: Extracted URL http://online.fliphtml5.com/tvpse/lite/

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com is not blacklisted or watched

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com: ns ['d22g6iayipmxb7.cloudfront.net.', 'ns-1380.awsdns-44.org.', 'ns-1809.awsdns-34.co.uk.', 'ns-92.awsdns-11.com.', 'ns-890.awsdns-47.net.']

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com: ip d22g6iayipmxb7.cloudfront.net. ()

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com: ip d22g6iayipmxb7.cloudfront.net. AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com: ip 13.33.50.80 (server-13-33-50-80.man50.r.cloudfront.net.)

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com: ip 13.33.50.80 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 03:23:06,574:165523: online.fliphtml5.com: ip 13.33.50.20 (server-13-33-50-20.man50.r.cloudfront.net.)

halflife:2019-03-19 03:23:06,615:165523: online.fliphtml5.com: ip 13.33.50.20 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 03:23:06,615:165523: online.fliphtml5.com: ip 13.33.50.17 (server-13-33-50-17.man50.r.cloudfront.net.)

halflife:2019-03-19 03:23:06,615:165523: online.fliphtml5.com: ip 13.33.50.17 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 03:23:06,615:165523: online.fliphtml5.com: ip 13.33.50.102 (server-13-33-50-102.man50.r.cloudfront.net.)

halflife:2019-03-19 03:23:06,615:165523: online.fliphtml5.com: ip 13.33.50.102 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 03:23:06,616:165523: online.fliphtml5.com: 3/4 over 97 days, 15:02:05

halflife:2019-03-19 03:23:06,616:165523: Extracted URL https://myspace.com/leighkelty

halflife:2019-03-19 03:23:06,616:165523: myspace.com is not blacklisted or watched

halflife:2019-03-19 03:23:06,616:165523: myspace.com: ns ['ns-cloud-d2.googledomains.com.', 'ns-cloud-d3.googledomains.com.', 'ns-cloud-d4.googledomains.com.', 'ns-cloud-d1.googledomains.com.']

halflife:2019-03-19 03:23:06,616:165523: myspace.com: ip 63.135.90.70 ()

halflife:2019-03-19 03:23:06,616:165523: myspace.com: ip 63.135.90.70 AS 33739 (MYSPACE - Myspace, Inc., US/US)

halflife:2019-03-19 03:23:06,616:165523: URL tail leighkelty is not blacklisted or watched

halflife:2019-03-19 03:23:06,616:165523: myspace.com: 9/10 over 352 days, 19:19:00

halflife:2019-03-19 03:23:06,616:165523: Extracted URL https://www.reddit.com/user/leighkelty/comments/b2e2id/duraflex_male_enhancemen‌tthe_way_to_buy/

halflife:2019-03-19 03:23:06,616:165523: reddit.com is not blacklisted or watched

halflife:2019-03-19 03:23:06,616:165523: reddit.com: ns ['ns-1887.awsdns-43.co.uk.', 'ns-378.awsdns-47.com.', 'ns-557.awsdns-05.net.', 'ns-1029.awsdns-00.org.']

halflife:2019-03-19 03:23:06,616:165523: reddit.com: ip 151.101.193.140 ()

halflife:2019-03-19 03:23:06,616:165523: reddit.com: ip 151.101.193.140 AS 54113 (FASTLY - Fastly, US/US)

halflife:2019-03-19 03:23:06,616:165523: reddit.com: ip 151.101.65.140 ()

halflife:2019-03-19 03:23:06,616:165523: reddit.com: ip 151.101.65.140 AS 54113 (FASTLY - Fastly, US/US)

halflife:2019-03-19 03:23:06,617:165523: reddit.com: ip 151.101.1.140 ()

halflife:2019-03-19 03:23:06,617:165523: reddit.com: ip 151.101.1.140 AS 54113 (FASTLY - Fastly, US/US)

halflife:2019-03-19 03:23:06,617:165523: reddit.com: ip 151.101.129.140 ()

halflife:2019-03-19 03:23:06,617:165523: reddit.com: ip 151.101.129.140 AS 54113 (FASTLY - Fastly, US/US)

halflife:2019-03-19 03:23:06,617:165523: reddit.com: 1/10 over 33 days, 12:03:31

halflife:2019-03-19 03:23:06,617:165523: Extracted URL http://duraflexmaleenhancement.ukit.me/

halflife:2019-03-19 03:23:06,617:165523: duraflexmaleenhancement.ukit.me is not blacklisted or watched

halflife:2019-03-19 03:23:06,617:165523: duraflexmaleenhancement.ukit.me: ns ['']

halflife:2019-03-19 03:23:06,617:165523: duraflexmaleenhancement.ukit.me: ip 185.165.123.4 ()

halflife:2019-03-19 03:23:06,617:165523: duraflexmaleenhancement.ukit.me: ip 185.165.123.4 AS 64432 (VARITI-AS, RU/RU)

halflife:2019-03-19 03:23:06,617:165523: duraflexmaleenhancement.ukit.me: first hit

halflife:2019-03-19 03:24:50,384:165524: Check post stackoverflow.com/a/55233181 (1)

halflife:2019-03-19 03:24:54,362:165524: Extracted URL https://www.instaclustr.com/apache-kafka-streams-introduction/

halflife:2019-03-19 03:24:54,362:165524: instaclustr.com is not blacklisted or watched

halflife:2019-03-19 03:24:54,362:165524: instaclustr.com: ns ['ns-1292.awsdns-33.org.', 'ns-1680.awsdns-18.co.uk.', 'ns-166.awsdns-20.com.', 'ns-809.awsdns-37.net.']

halflife:2019-03-19 03:24:54,362:165524: instaclustr.com: ip 104.154.117.89 (89.117.154.104.bc.googleusercontent.com.)

halflife:2019-03-19 03:24:54,363:165524: instaclustr.com: ip 104.154.117.89 AS 15169 (GOOGLE - Google LLC, US/US)

halflife:2019-03-19 03:24:54,363:165524: URL tail apache-kafka-streams-introduction is not blacklisted or watched

halflife:2019-03-19 03:24:54,363:165524: instaclustr.com: first hit

halflife:2019-03-19 03:44:03,203:165525: Check post stackoverflow.com/a/55233315 (61)

halflife:2019-03-19 03:44:08,201:165525: Extracted URL https://tcpdf.org/

halflife:2019-03-19 03:44:08,201:165525: tcpdf.org is not blacklisted or watched

halflife:2019-03-19 03:44:08,201:165525: tcpdf.org: ns ['ns2.hover.com.', 'ns1.hover.com.']

halflife:2019-03-19 03:44:08,201:165525: tcpdf.org: ip 69.164.210.100 (tecnick.com.)

halflife:2019-03-19 03:44:08,201:165525: tcpdf.org: ip 69.164.210.100 AS 63949 (LINODE-AP Linode, LLC, US/US)

halflife:2019-03-19 03:44:08,201:165525: tcpdf.org: 0/4 over 681 days, 18:41:17

Halflife

4:07 AM

skippedhalflife:2019-03-19 04:07:28,635:[165527] is not 165525+1

halflife:2019-03-19 04:07:28,635:165527: Check post stackoverflow.com/a/8424834 (1)

halflife:2019-03-19 04:07:31,465:http://www.ghisler.com/ redirects to https://www.ghisler.com/

halflife:2019-03-19 04:07:32,614:165527: Extracted URL http://www.ghisler.com/

halflife:2019-03-19 04:07:32,614:165527: ghisler.com is not blacklisted or watched

halflife:2019-03-19 04:07:32,614:165527: ghisler.com: ns ['name3.ghisler.com.', 'name1.ghisler.com.', 'name2.ghisler.com.']

halflife:2019-03-19 04:07:32,614:165527: ghisler.com: ip 168.235.88.148 (host.ghisler.com.)

halflife:2019-03-19 04:07:32,614:165527: ghisler.com: ip 168.235.88.148 AS 3842 (RAMNODE - RamNode LLC, US/US)

halflife:2019-03-19 04:07:32,615:165527: ghisler.com: first hit

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): EA Origin Points use for dlc purchase by Dhiyanshu Joel Ram on gaming.SE

Halflife

halflife:2019-03-19 04:09:28,767:165528: Check post gaming.stackexchange.com/a/347934 (1)

halflife:2019-03-19 04:09:35,251:165528: Extracted URL https://answers.ea.com/t5/General-Discussion/origin-points/td-p/6478876

halflife:2019-03-19 04:09:35,251:165528: answers.ea.com is not blacklisted or watched

halflife:2019-03-19 04:09:35,251:165528: answers.ea.com: ns ['ea.lithium.com.', 'd3in50gzml88fn.cloudfront.net.', 'ns-1814.awsdns-34.co.uk.', 'ns-95.awsdns-11.com.', 'ns-742.awsdns-28.net.', 'ns-1530.awsdns-63.org.']

halflife:2019-03-19 04:09:35,251:165528: answers.ea.com: ip 13.33.50.52 (server-13-33-50-52.man50.r.cloudfront.net.)

halflife:2019-03-19 04:09:35,251:165528: answers.ea.com: ip 13.33.50.52 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip ea.lithium.com. ()

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip ea.lithium.com. AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip 13.33.50.73 (server-13-33-50-73.man50.r.cloudfront.net.)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip 13.33.50.73 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip d3in50gzml88fn.cloudfront.net. ()

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip d3in50gzml88fn.cloudfront.net. AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip 13.33.50.62 (server-13-33-50-62.man50.r.cloudfront.net.)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip 13.33.50.62 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip 13.33.50.116 (server-13-33-50-116.man50.r.cloudfront.net.)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: ip 13.33.50.116 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:09:35,252:165528: answers.ea.com: first hit

SmokeDetector

4:36 AM

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +8 more (889): fitnesreviews.com/keto-pure-diet-pills-side-effects/ by Adrianndaly on drupal.SE

Halflife

halflife:2019-03-19 04:36:59,304:165529: Check post drupal.stackexchange.com/questions/277945 (595)

halflife:2019-03-19 04:37:10,726:165529: Extracted URL https://fitnesreviews.com/keto-pure-diet-pills-side-effects/

halflife:2019-03-19 04:37:10,726:165529: fitnesreviews.com is blacklisted

halflife:2019-03-19 04:37:10,726:165529: Wordpress promotion URL https://fitnesreviews.com/max-test-ultra-buy/ redirects to http://spiritacouchy.xyz/

halflife:2019-03-19 04:37:12,082:165529: spiritacouchy.xyz: ns ['ns2.pql.net.', 'ns3.tppns.com.', 'ns4.tppns.com.', 'ns1.pql.net.']

halflife:2019-03-19 04:37:12,082:165529: spiritacouchy.xyz: ip 34.196.13.28 (ec2-34-196-13-28.compute-1.amazonaws.com.)

halflife:2019-03-19 04:37:12,082:165529: spiritacouchy.xyz: ip 34.196.13.28 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:37:12,082:165529: Wordpress promotion URL https://fitnesreviews.com/x-last-plus-male-buy/ redirects to

https://verutumrx.com/a2/d/?AFFID=PRX&C1=2136-4760&C2=15334432&C3=1922-1028efc2‌e7a35d4b6fcb46adab5bef----------&click_id=

halflife:2019-03-19 04:37:18,775:165529: verutumrx.com: ns ['dana.ns.cloudflare.com.', 'wesley.ns.cloudflare.com.']

halflife:2019-03-19 04:37:18,775:165529: verutumrx.com: ip 104.28.17.95 ()

halflife:2019-03-19 04:37:18,775:165529: verutumrx.com: ip 104.28.17.95 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)

halflife:2019-03-19 04:37:18,775:165529: verutumrx.com: ip 104.28.16.95 ()

halflife:2019-03-19 04:37:18,776:165529: verutumrx.com: ip 104.28.16.95 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)

halflife:2019-03-19 04:37:18,776:165529: Wordpress promotion URL https://fitnesreviews.com/forskolin-advanced-buy/ redirects to http://watercruise.net

halflife:2019-03-19 04:37:20,087:165529: watercruise.net: ns ['ns2.pql.net.', 'ns3.tppns.com.', 'ns4.tppns.com.', 'ns1.pql.net.']

halflife:2019-03-19 04:37:20,088:165529: watercruise.net: ip 34.196.13.28 (ec2-34-196-13-28.compute-1.amazonaws.com.)

halflife:2019-03-19 04:37:20,088:165529: watercruise.net: ip 34.196.13.28 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:37:20,088:165529: Wordpress promotion URL https://fitnesreviews.com/keto-ultra-buy/ redirects to

https://ketopurediet.com/offers/v2/?a_aid=sml&cid=700&data1=1922&data2=102e0fa6‌67e57c37a9cdd0dbcbf31c&data4=v2&utm_source=sml&utm_medium=cpa&utm_campaign=v2

halflife:2019-03-19 04:37:22,057:165529: ketopurediet.com: ns ['ns-644.awsdns-16.net.', 'ns-1370.awsdns-43.org.', 'ns-2010.awsdns-59.co.uk.', 'ns-41.awsdns-05.com.']

halflife:2019-03-19 04:37:22,057:165529: ketopurediet.com: ip 18.223.242.99 (ec2-18-223-242-99.us-east-2.compute.amazonaws.com.)

halflife:2019-03-19 04:37:22,057:165529: ketopurediet.com: ip 18.223.242.99 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:37:22,057:165529: ketopurediet.com: ip 52.14.24.222 (ec2-52-14-24-222.us-east-2.compute.amazonaws.com.)

halflife:2019-03-19 04:37:22,057:165529: ketopurediet.com: ip 52.14.24.222 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)

halflife:2019-03-19 04:37:22,057:165529: fitnesreviews.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']

halflife:2019-03-19 04:37:22,057:165529: fitnesreviews.com: ip 198.54.116.24 (server210-4.web-hosting.com.)

halflife:2019-03-19 04:37:22,057:165529: fitnesreviews.com: ip 198.54.116.24 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)

halflife:2019-03-19 04:37:22,058:165529: URL tail keto-pure-diet-pills-side-effects is not blacklisted or watched

halflife:2019-03-19 04:49:35,314:165530: Check post stackoverflow.com/questions/55233833 (1)

halflife:2019-03-19 04:49:41,597:165530: Extracted URL http://pinvoke.net/default.aspx/Interfaces/IAuthenticate.html

halflife:2019-03-19 04:49:41,597:165530: pinvoke.net is not blacklisted or watched

halflife:2019-03-19 04:49:41,597:165530: pinvoke.net: ns ['ns08.pronethost.com.', 'ns07.pronethost.com.']

halflife:2019-03-19 04:49:41,597:165530: pinvoke.net: ip 50.73.33.132 (softwareinteractive.net.)

halflife:2019-03-19 04:49:41,597:165530: pinvoke.net: ip 50.73.33.132 AS 7922 (COMCAST-7922 - Comcast Cable Communications, LLC, US/US)

halflife:2019-03-19 04:49:41,597:165530: pinvoke.net: 0/4 over 110 days, 12:15:05

SmokeDetector

4:52 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev ab57524 (SmokeDetector: Auto watch of edureviewer\.com by Tetsuya Yamamoto) (running on Makyen/EC2-linux)

SmokeDetector

5:04 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev 2a28cf9 (SmokeDetector: Auto watch of miglioriaspirapolveri\.com by Zoe) (running on NobodyNada/Raspberry Pi)

SmokeDetector

5:23 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev d9d871a (SmokeDetector: Auto blacklist of issuu\.com by tripleee) (running on iBug/EC2)

[ SmokeDetector | MS ] Bad keyword with a link in answer, potentially bad ns for domain in answer (80): How to connect Powered Subwoofer to Mixer? by Hip Hop Bangla on sound.SE

Halflife

halflife:2019-03-19 05:27:15,547:165531: Check post sound.stackexchange.com/a/45614 (80)

halflife:2019-03-19 05:27:21,746:165531: Extracted URL https://outdoorsumo.com

halflife:2019-03-19 05:27:21,746:165531: outdoorsumo.com is not blacklisted or watched

halflife:2019-03-19 05:27:21,746:165531: outdoorsumo.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']

halflife:2019-03-19 05:27:21,784:165531: outdoorsumo.com: ip 68.65.123.239 (premium48-5.web-hosting.com.)

halflife:2019-03-19 05:27:21,784:165531: outdoorsumo.com: ip 68.65.123.239 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)

halflife:2019-03-19 05:27:21,784:165531: outdoorsumo.com: first hit

SmokeDetector

5:40 AM

Makyen/EC2-linux received failover signal.

[ SmokeDetector ] SmokeDetector started at rev f7f7233 (SmokeDetector: Auto blacklist of 5staressays\.com by Tetsuya Yamamoto) (running on Makyen/EC2-linux, Python 3.6.7)

Halflife

actioncable:2019-03-19 05:40:33,965:Connection is already closed.

halflife:2019-03-19 05:40:38,441:Halflife 3a22f10 running on 8e8648d36b11 started 2019-03-19 05:40:38.441616 UTC

SmokeDetector

Restart: API quota is 19994.

Makyen/EC2-linux is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev f7f7233 (SmokeDetector: Auto blacklist of 5staressays\.com by Tetsuya Yamamoto) (running on Makyen/EC2-linux)

[ SmokeDetector ] Blacklists reloaded at rev 137119a (SmokeDetector: Auto watch of outdoorsumo\.com by tripleee) (running on teward/Lunar Eclipse)

Halflife

halflife:2019-03-19 05:42:08,737:165532: Check post askubuntu.com/questions/1126824 (793)

halflife:2019-03-19 05:42:11,116:165532: Extracted URL https://www.facebook.com/Keto-Boost-Slim-2022090318093206/

SmokeDetector

[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +8 more (1087): supplement4reviews.com/keto-boost-slim-fr/ by karishsgemash on askubuntu.com

Halflife

halflife:2019-03-19 05:42:11,116:165532: facebook.com is whitelisted

halflife:2019-03-19 05:42:11,116:165532: Extracted URL http://supplement4reviews.com/keto-boost-slim-fr/

halflife:2019-03-19 05:42:11,116:165532: supplement4reviews.com is blacklisted

halflife:2019-03-19 05:42:11,116:165532: HTTP status 404 for http://supplement4reviews.com/keto-boost-slim-fr/

halflife:2019-03-19 05:42:11,116:165532: supplement4reviews.com: ns ['ns19.domaincontrol.com.', 'ns20.domaincontrol.com.']

SmokeDetector

5:42 AM

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, pattern-matching product name in body, pattern-matching website in body, +3 more (592): Make the decision that you manage your habits by shenashekh on meta.SE

Halflife

halflife:2019-03-19 05:42:11,116:165532: supplement4reviews.com: ip 166.62.107.55 (ip-166-62-107-55.ip.secureserver.net.)

halflife:2019-03-19 05:42:11,117:165532: supplement4reviews.com: ip 166.62.107.55 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)

halflife:2019-03-19 05:42:11,117:165532: URL tail keto-boost-slim is not blacklisted or watched

halflife:2019-03-19 05:42:47,763:165533: Check post meta.stackexchange.com/questions/325428 (592)

halflife:2019-03-19 05:42:50,142:165533: Extracted URL https://topwellnessblog.com/keto-fuel/

halflife:2019-03-19 05:42:50,142:165533: topwellnessblog.com is blacklisted

halflife:2019-03-19 05:42:50,142:165533: HTTP status 404 for https://topwellnessblog.com/keto-fuel/

halflife:2019-03-19 05:42:50,142:165533: topwellnessblog.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']

halflife:2019-03-19 05:42:50,142:165533: topwellnessblog.com: ip 185.61.152.24 (server130-4.web-hosting.com.)

halflife:2019-03-19 05:42:50,142:165533: topwellnessblog.com: ip 185.61.152.24 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)

halflife:2019-03-19 05:42:50,142:165533: URL tail keto-fuel is not blacklisted or watched

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev d7cf3fe (SmokeDetector: Auto watch of 844-897-6216 by tripleee) (running on teward/Lunar Eclipse)

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +8 more (1084): topteethwhiteningtips.com/keto-boost-slim-avis/ by ronaldaw on drupal.SE

Halflife

halflife:2019-03-19 05:49:07,493:165534: Check post drupal.stackexchange.com/questions/277948 (790)

halflife:2019-03-19 05:49:10,898:165534: Extracted URL http://topteethwhiteningtips.com/keto-boost-slim-avis/

halflife:2019-03-19 05:49:10,898:165534: topteethwhiteningtips.com is blacklisted

halflife:2019-03-19 05:49:10,898:165534: topteethwhiteningtips.com: ns ['ns47.domaincontrol.com.', 'ns48.domaincontrol.com.']

halflife:2019-03-19 05:49:10,899:165534: topteethwhiteningtips.com: ip 107.180.50.174 (ip-107-180-50-174.ip.secureserver.net.)

halflife:2019-03-19 05:49:10,899:165534: topteethwhiteningtips.com: ip 107.180.50.174 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)

halflife:2019-03-19 05:49:10,899:165534: URL tail keto-boost-slim-avis is not blacklisted or watched

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Macbook Pro overheating issue? ✏️ by emulen on apple.SE

Halflife

halflife:2019-03-19 05:52:23,293:165535: Check post apple.stackexchange.com/questions/325653 (1)

halflife:2019-03-19 05:52:36,498:http://www.cputemper.com/monitor-macs-fan-speed/ redirects to https://www.cputemper.com/monitor-macs-fan-speed/

halflife:2019-03-19 05:52:43,187:165535: Extracted URL https://www.crystalidea.com/macs-fan-control/download

halflife:2019-03-19 05:52:43,187:165535: crystalidea.com is not blacklisted or watched

halflife:2019-03-19 05:52:43,188:165535: crystalidea.com: ns ['ns1.linode.com.', 'ns2.linode.com.', 'ns3.linode.com.', 'ns4.linode.com.', 'ns5.linode.com.']

halflife:2019-03-19 05:52:43,188:165535: crystalidea.com: ip 173.230.144.164 (crystalidea.com.)

halflife:2019-03-19 05:52:43,188:165535: crystalidea.com: ip 173.230.144.164 AS 63949 (LINODE-AP Linode, LLC, US/US)

halflife:2019-03-19 05:52:43,188:165535: crystalidea.com: 0/2 over 68 days, 5:51:22

halflife:2019-03-19 05:52:43,188:165535: Extracted URL http://www.cputemper.com/monitor-macs-fan-speed/

halflife:2019-03-19 05:52:43,188:165535: cputemper.com is watched

halflife:2019-03-19 05:52:43,188:165535: cputemper.com: ns ['jessica.ns.cloudflare.com.', 'glen.ns.cloudflare.com.']

halflife:2019-03-19 05:52:43,188:165535: cputemper.com: ip 104.31.72.183 ()

halflife:2019-03-19 05:52:43,188:165535: cputemper.com: ip 104.31.72.183 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)

halflife:2019-03-19 05:52:43,188:165535: cputemper.com: ip 104.31.73.183 ()

halflife:2019-03-19 05:52:43,188:165535: cputemper.com: ip 104.31.73.183 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)

halflife:2019-03-19 05:52:43,188:165535: URL tail monitor-macs-fan-speed is not blacklisted or watched

halflife:2019-03-19 05:52:43,188:165535: cputemper.com: 4/8 over 371 days, 16:51:10

SmokeDetector

5:54 AM

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, link following arrow in body, pattern-matching website in body, potentially bad keyword in title (394): Maranutra Turkey : shark tank, side effects, ingredients & Where to Buy by JennifCallag on superuser.com

Halflife

halflife:2019-03-19 05:54:46,240:165536: Check post superuser.com/questions/1415215 (394)

halflife:2019-03-19 05:54:49,276:165536: Extracted URL http://www.supplementsell.com/maranutra-turkey/

halflife:2019-03-19 05:54:49,277:165536: supplementsell.com is blacklisted

halflife:2019-03-19 05:54:49,277:165536: supplementsell.com: ns ['ns15.domaincontrol.com.', 'ns16.domaincontrol.com.']

halflife:2019-03-19 05:54:49,277:165536: supplementsell.com: ip 107.180.41.69 (ip-107-180-41-69.ip.secureserver.net.)

halflife:2019-03-19 05:54:49,277:165536: supplementsell.com: ip 107.180.41.69 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)

halflife:2019-03-19 05:54:49,277:165536: URL tail maranutra-turkey is not blacklisted or watched

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, link at end of body, +10 more (1092): it a tiny bit at a timewww.usa4supplement.com/forskolin-keto-advanced/ by user1009203 on superuser.com

Halflife

halflife:2019-03-19 05:57:31,753:165537: Check post superuser.com/questions/1415216 (599)

halflife:2019-03-19 05:57:42,954:165537: Extracted URL https://www.usa4supplement.com/forskolin-keto-advanced/

halflife:2019-03-19 05:57:42,954:165537: usa4supplement.com is not blacklisted or watched

halflife:2019-03-19 05:57:42,954:165537: Wordpress promotion URL https://www.usa4supplement.com redirects to https://www.usa4supplement.com/

halflife:2019-03-19 05:57:43,243:165537: URL tail forskolin-keto-advanced is not blacklisted or watched

halflife:2019-03-19 05:57:43,243:165537: usa4supplement.com: 9/10 over 26 days, 23:04:16

Transcript for